D-Link DGS-3700 manuale d’uso

©Copyright 2009 . All right s reserved User Ma n ual Product Model: DGS - 3700 Series Layer 2 Mana ged Gigabi t Ethernet Sw itch Release 1.00[...]

DGS-3 700 - 12/DGS - 37 00 - 12 G Series Layer 2 Gigabi t Etherne t Switch User Manual ii __________ _____ ______ ________ _____ ______ ________ ______ _____ _______ _______ _____ ___ Information i n this document is subject to change without notice. © 2009 D - Link Corporation. All rights reserved. Reproduction in any manner whatsoever without t [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual iii Table of Contents Preface ......................................................................................................................................................................... xi Intended Readers ...........................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual iv Telnet Set tings ............................................................................................................................................................ 30 Password Enc r yptio n ............................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual v DDM Bias C urrent T hreshold Settings ..................................................................................................................................... 63 DDM Tx Power T hreshold Sett ings ....................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual vi MLD Snooping Mult icast VLA N Settings ................................................................................................................................ 102 IPv6 M ulticast Pr ofile Sett ings .....................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual vii 802.1p User Prio r ity .................................................................................................................................................. 137 QoS Schedul ing Mec h anis m ........................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual viii SSH Authmo de and A lgorithm Setting s ................................................................................................................................ . 169 SSH User Auth enticat ion Li sts ...................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual ix RADIUS Authenticat ion .......................................................................................................................................................... 233 RADIUS Acc o unt Client ......................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual x Downloa d Firm ware .................................................................................................................................................. 258 Reboot S ystem ...........................................................................[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual xi Prefa ce The DGS - 3700 Series User Man ual is d ivided int o s ections that describ e the s ystem ins tallation a nd operat ing ins truc tions with exam ples. Sectio n 1, Introduction to Web- based Sw itch M anagement – Desc ribes how to conn ect to a nd us[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 1 Inten ded Read ers The DGS - 370 0 Series Manual contains inform ation for setup and m anag em ent of the Sw itch. This manual is inte nded for networ k m anagers f amiliar wit h netw ork m anagem ent concep ts and ter m inology. Typograp hi cal C on venti ons [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 2 Section 1 Web - based Switch Configuration Introducti on Login to Web M anager Web - based User Interface Web Page s Introduc ti on All soft ware f uncti ons of the S witc h c an be m anaged, c onf igured an d m onitor e d via the em bedde d web - base d ( HT M[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 3 Figure 1 - 1 Enter Network Password dia log Enter “adm in” in bot h the Us er Nam e and Pass word f ields a nd c lick OK . T his will open t he W eb - bas ed user interf ace. The S witch manag em ent features a vailable i n the w eb - based manager are expl[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 4 Figure 1 - 2 M ain W eb - Manager pag e Area Funct ion Area 1 Selec t the f older or window to be dis pla yed. The f older ico ns can be ope ned to d ispla y the h yper - linked window bu ttons and s ubfold ers conta ined within th em . Click the D - Link logo [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 5 Below is a list a nd desc ription of the m ain f olders avai lable i n the we b interf ace: Configura tion – A d etaile d discus sion abo ut configu ring som e of the bas ic funct ions of the Sw itch, acc essing th e System inform ation, S erial Port Settin g[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 6 Section 2 Configuration Device In fo r mation Syste m Infor mation Serial Po rt Set ti ngs IP Address Interfac e Settings IPv6 Route Se tti ngs IPv6 Nei ghbor Settings Port Confi g u r ation Static A RP Settings User Account s Syste m Log Confi guration System [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 7 D evice Informa tion This window con tains the m ain settings for all m ajor functions on the S witch and appe ars automaticall y when you log on. To re turn to the Device Information window, click the DGS - 3 700 - 12/DG S - 3700 - 12G Web M anagement Tool fol[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 8 Figure 2 - 2 System Information window The f ields that c an be conf igured are des cribed be low: Paramete r Descrip tion System Nam e Enter a s ystem nam e for the S witch, if so des ired. This nam e will i dentif y it in t he Switc h network . Syste m Loca t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 9 IP A ddress The IP addr ess m ay initial ly be set us ing th e conso le interfac e prior t o connec ting to it t hrough th e Ethern et. If the Switch IP addres s has no t yet be en cha nged, re ad the intr oductio n of the DGS - 370 0 Series C LI Man ual f or m[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 10 Paramete r D escri ption Static Allows the e ntry of an IP addr ess, S ubnet Mas k, and a Defau lt Gate way for th e Switch. T hese fields shou ld be of the for m xxx .xxx.xxx.x xx, where eac h xxx is a num ber (represente d in decim al form) bet ween 0 and 25[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 11 Setting the Sw ith’s IP Address using the Co nsole Interfac e Each Switch m ust be as signed its own I P Address , which is us ed for com munic ation with an SN MP network m anager or other T CP/IP applicat ion (f or exam ple BOOTP , T FTP) . The Switch ’s[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 12 Enter the new VLAN Na me and Admin . State and c lick Apply . To edit a n entr y for IPv4 feat ures c lick the corres ponding IPv 4 Ed it bu tton. Figure 2 - 7 IPv4 Interface Settings Edit window The f ollowing par ameter s can b e configur ed: Paramete r D es[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 13 A utomatic Link Lo cal Address Enabl es or disables the a utom atic c onfigurat ion of l ink local addres ses when th ere are n o IP v6 addresses explicit ly config ured. W hen an IPv6 addr ess is explicitl y configur ed, the link local address will be autom a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 14 Paramete r D escri ption Interface Name Enter the interf ace nam e of the I Pv6 nei ghbor you wish to c onfi gure. Neighbor IPv6 Address Enter the neighbor IPv6 ad dress of the entr y you wish to conf igure. Link Lay er MAC Address Enter the M AC addres s of t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 15 Paramet er Descrip tion From Por t / To Port Use the pu ll - do wn menus t o select the port or rang e of por ts to be c onfigur ed. State Toggle th is field to either e nable or disable a gi ven port or group of ports. Speed/ Duplex Toggle the Speed/Du plex f[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 16 Figure 2 - 12 Port Description window Port Error Di sabled The f ollowing win dow wil l displa y the inf orm ation about p orts that have had t heir connec tion st atus dis abled, for reasons s uch as L oopback Detec tion or link down stat us. To vie w this wi[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 17 Figure 2 - 14 Static ARP Settings window The f ollowing fie lds can be set: Paramete r Description A RP Agin g Time (0- 65535) T he user m ay globally se t the m aximum amount of time, in m inutes, that an Addr ess Resolutio n Protoc ol (ARP ) entr y can rem a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 18 level privi leges . There ar e 3 le vels of secur ity off ered on the S witch, t he Operator l evel pr ivilege will a llow us ers to configure a nd vie w configurati ons on t he Switch, exc ept for thos e involving s ecur ity features , which are sti ll lef t [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 19 Comm unity Strings and T rap Stati ons Yes Yes Read - o nly Update Firm ware and Conf igurati on Files Yes No No System Ut ilit ies Ye s Yes No Factor y Reset Yes No No User Acco u n t Manage ment Add/Upd ate/Delete User Accounts Yes No No View User Account s [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 20 Sys tem Log C onfig ura tion This s ection conta ins inform ation f or conf iguring various attributes and prop erties for S y stem Log Config urations, including System Log Set tings an d System Log Hos t. System Log Set tings This windo w allo ws the us er t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 21 Paramete r Descri ption Serve r ID S yslog ser ver sett ings in dex ( 1 - 4). Serve r IP Address T he IP addres s of the Syslog s erver. UDP Port (514 or 600 0 - 65535) T ype the UDP por t num ber used f or send ing S yslog mes sages. T he defau lt is 514 . Se[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 22 System Severity Settings The Switch c an b e c onf igur ed t o a llo w a lerts be logg ed or sent as a tr ap to an SN MP a gent or both . T he leve l at which the alert tri ggers e ither a lo g entr y or a trap m ess age can be set as well. Use t he S ystem Se[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 23 DHCP Rela y The DHC P Re la y folder contai ns s ix win dows regard ing t he DH CP re la y funct ions on the S witch . T he DHC P w indo ws include DHCP Relay Global Settings , DHCP Relay Interface Settings , DHCP Relay Option 60 Default Settings , DHCP Relay [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 24 DHCP rela y inform ation (o ption 82 fie ld) in mes sages bet ween DHC P servers and cl i ents, and the ch eck and polic y settings will ha ve no ef fec t. DHCP Rela y Agent Informati on Option 82 Check This f ield can be tog gled between Enabled a nd Disabled[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 25 The Impl ementation of DHCP I nformat i on Option 82 on the Sw it ch The config dhcp_relay option_ 82 comm and conf igures the DH CP re lay age nt inf ormat ion optio n 82 s etting of the switch. T he form ats f or the circ uit ID sub - opt ion an d the rem ot[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 26 DHCP Rela y Interface Settings This wind ow a llows the user to s et up a server , by I P addres s, for r elaying D HCP inform ation to the Switch . The user may enter a pr evious ly conf igured IP interf ace o n the S witch that will be co nnec ted direct ly [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 27 DHCP Rela y Option 60 Settings This wi ndo w is use d to c onfigure option 60 rela y rules on th e Switc h. D if ferent s tring s c an be spec ified f or the sam e rela y server, and th e sam e str ing can be sp ecif ied with m ultiple rela y servers. The s ys[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 28 DHCP Rela y Option 61 Settings This c ommand is us ed to add a r ule to the rel ay ser ver based on opt ion 61. T he m atch in g rule can be bas e d on either the MAC a ddress or by using a us er - spec ified st ring. Onl y one rela y server can be specif ied [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 29 Paramete r Descr iption IP Address Enter the IP addres s of the interf ac e. Subnet Mask Enter the Subn et m ask of the interf ace. Gatew ay Enter the defaul t gate way of the out of band m anagem ent network s. Status Allows the us er to Enable o r Disable t [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 30 W hen DHCP autoconfigur ation is Enab led , th e S witch becom es a DH CP cl ient autom aticall y after rebootin g. The DHCP s erver m ust have the T FT P server IP ad dres s and co nfigurat ion f ile na m e, and be conf igured t o del iver this inform ation i[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 31 Passw ord E ncr yptio n Password Enc r yption S tatus can be Enabl ed or D isabled i n th is w ind o w , it is D is able d b y def ault. Pass word encr yption allows the us er to encr ypt a password in th e conf iguration f ile for add it io nal s ecur ity . S[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 32 otherwis e config ured b y the user . Version States t he firm ware vers ion. Size (B ytes) Stat es the s ize of the c orres ponding fir mware, in b ytes. Update Time States the spec ific tim e the firm ware version was do wnloaded to the S witch. From States [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 33 Size(b ytes) Displ ays the s ize of the conf iguration f ile, in b ytes. Update time Displays the t im e that the c onfigurat ion f ile was up date d to the S witch. From Displays the locat ion from which the c onfigur ation f ile was up loaded. User Displ ays[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 34 choose a sp ecif ic num ber of tim es to ping th e Target IP Address by enteri ng a num ber between 1 and 255 . Timeout Select a timeout per iod bet we en 1 and 10 s econ ds for this Ping mes sage to reac h its destinati on. If the p ac k et f ails to f ind th[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 35 the pul l- do wn m enus. Loopback Mode This f unction al lows the user to selec t MAC Intern al/MAC External or PH Y Interna l/PH Y External. M AC and PH Y represent t he la yer on which the lo opbac k is perf ormed while t he Internal or Extern al repres ents[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 36 SNTP Settings The Sim ple Networ k T ime Protoco l Sett ings ca n be co nfigured in the next two windo ws. Time Se ttings This windo w is use d to c onfigure the tim e settin gs for t he Switch. To vie w this win do w, clic k Configura ti on > SNTP Settings[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 37 TimeZo ne Set tings The f ollowing win dow is us ed to configure tim e zones and Da ylight Sa vings t ime s ettings f or SNT P. To vie w this win do w, clic k Configura ti on > SNTP Settings > TimeZone Setti ngs as sho wn belo w: Figure 2 - 42 T ime Zone[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 38 From :Which Wee k of the Month Enter th e week of the m onth that DST will st art. From: Day of the Week Enter the da y of the week that DST will start o n. From: Month Enter the m onth DST will st art on. From: Time in HH:MM Enter the tim e of da y that DST w[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 39 Figure 2 - 43 M AC Notifi cati on Global Setti ngs window The f ollowing par ameter s m ay be viewed a nd m odified: Paramete r Description State Enable or d isable MAC not ificat ion globa lly on th e Switc h. Interval (1- 2147483647 sec) T he tim e in second[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 40 SNMP Settings Simple Network Manag em ent Protoco l ( SNMP) is an OSI La yer 7 (A pplic ation Layer) d esigned spec ificall y for managing and m onitorin g network devices . SNM P enab les net work m anagement statio ns to re ad and m odify the settings of gat[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 41 SNMP Global S tate Settings The SNM P Globa l State Se ttings is used to globa lly enabl e or dis able the SNMP Settings on the s witch. To vie w this win do w, clic k Configur ati on > SNMP Settings > SNMP Global State Se ttings as shown be low: Figure [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 42 SNMP Gr oup Ta ble An SNMP Group creat ed w ith this table m aps SNMP u sers (identif ied in the SN MP User T able) to the vi ews c reated in the prev ious m enu. To vie w this win do w, clic k Configura ti on > SNMP Settings > SNMP Group Table as shown [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 43 SNMP User Tab le This windo w dis plays all of the SNMP User 's cur rentl y configured on the Switch a nd also a llows you to add n ew user s. To vie w this win do w, clic k Configura ti on > SNMP Settings > SNMP User T able as sho wn below: Figure [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 44 Passw ord Enter a Passwor d when SN MP V3 Encr yption is enabl ed for Pass word m ode. Key Enter a Key when SN M P V 3 Encr yption is en abled f or Ke y mode. To im plement c hanges m ade, click Apply . To del ete an exist ing SNM P U ser Tab le entr y, click [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 45 SNMP H ost Ta ble The SNMP Host Table window is used to s et up SNMP trap recip ients. To vie w this win do w, clic k Configura ti on > SNMP Settings > SNMP Host Table as sho wn below: Figure 2 - 50 SNMP Host Table window The f ollowing par ameter s can [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 46 monitor and contr ol networ k devices. SNMPv 2 – Spec ifies th at SN MP versi on 2 will be used . The SN MP v2 su pports b oth centrali zed and distr i but ed net wor k m anagement s trategi es. It includes im provem ents i n the Struc ture of Managem ent In[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 47 SNMP Tr ap Co nfigura tio n The f ollowing win dow is us ed to enable a nd disab le trap s ettings f or the SNMP f unction on the S witch. To vie w this win do w, clic k Configura ti on > SNMP Settings > SNMP Trap Configur ation as shown be low: Figure 2[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 48 sF l ow The sF low folder c ontains four windows to enable and configure t he sFlo w sett ings on th e Switch. sFlow Global State Set tings This tabl e is used t o e nab le or d isab le the sF lo w G loba l Stat e Sett in gs on th e S wit c h. T he s F low ver[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 49 timeout va lue w ill becom e 400 autom atical ly . Timeout (1- 2000000) T he length of time bef ore the serv er is timed out. W hen the anal yzer server tim es out, all of the f low samplers and counter po llers assoc iate d with this ana lyzer serv er will b [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 50 sFlow Counter Poller Settings This windo w is us ed to cre ate the sf low count er poller settings on the Sw itch . W ithin the s flow coun ter poller function, the port sta tistics c ounter i nform ation will be f orward ed to the s erver at the c onf igured [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 51 Sing le IP Managemen t Simpl y put, D - Link Single I P Manag em ent is a conc ept that will stac k switches to gether over Eth ernet instea d of us ing stack ing ports or modules . T here are som e advan tages in implem enting t he "Sing le IP M anagem e[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 52 The Upgrade t o v1. 6 To better im pr ove SIM m anagem ent, the DG S - 37 00 Seri es has been upgrad ed to version 1. 6 in t his relea se. Man y impr ovements have been m ade, including: 1. The Com m ander S witc h ( CS) no w has t he ca pab il it y to autom a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 53 Figure 2 - 60 Single IP Settings window (enabl ed) The f ollowing par ameter s can b e set: P aramete rs Desc ription SIM State Us e the p ull - down m enu t o either enable or dis able the SIM stat e on t he Sw itch. D isab led will render all SIM f unctions [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 54 Figure 2 - 61 Single IP Management windo w – T ree View The Tr ee View wind ow hol ds the fol lowing inform ation und er the Data t ab: Param eter Description Device Na me T his fie ld wi ll d ispla y t he D evic e Nam e of the s witc hes in the SIM grou p c[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 55 Figure 2 - 62 T opology view This windo w will displa y how the d evices within the Single IP Managem ent Group ar e connected to oth er groups an d devices. P ossib le icons i n this s creen are as f ollows: Icon De scr ip tion Group Layer 2 com m ander switc[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 56 Tool Tips In the Topo logy vie w windo w, the m ouse plays an i m portant role in conf igurati on and in v iewing de vice i nform ation. Setting th e m ouse curs or over a sp ecific de vice i n the t opolog y window (tool tip) will disp la y the sam e inform a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 57 Right-Click Right - click ing on a device will allow th e us er to perform various funct ions, de pending on the role of t he S witch i n the SIM group and th e icon ass ociate d with it. Group I c on Figure 2 - 65 Right - Clicking a Group Ic on Figure 2 - 66 [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 58 Commander Switch Ic on Figure 2 - 67 Right - Clicking a Commander I con The f ollowing opt ions m ay appe ar for the us er to c onfi gure: Col lapse – T o collaps e the gr oup that will be re presen ted b y a single ic on. Expand – To expand th e SIM gr ou[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 59 Figure 2 - 70 Input password window Pr operty – To pop u p a windo w to dis play the devic e inform ation, as s hown below. Menu Ba r The Single IP Management window cont ains a m enu bar f or device c onf iguratio ns, as seen belo w. Figure 2 - 71 M enu Bar[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 60 Figure 2 - 73 About window Firmw are Upgrade This s creen is used t o upgr ade f irm ware from the Com m ander Switch t o the Mem ber S witch. Mem ber S witch es will b e listed in the table and wi ll be specified by Port (por t on the CS wher e the MS resides[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 61 Upload L og File The f ollowing window is used t o upl oad log f iles f rom SIM m ember switches to a specif ied PC. T o upload a log f ile, enter the Ser ver I P addres s of the SIM m ember s witch and then enter a Path Fi lenam e on y our PC where you wish[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 62 Figure 2 - 78 DDM Settings window The f ollowing fie lds can be conf igured: Paramete r Descrip tion Trap Log Specifies whet her or not to send the trap and log, wh en the operat ing param eter exceeds th e alarm or warning thr eshol d. From Por t / To Port Sp[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 63 DDM Vol tage Threshol d Set tin gs This table is use d to conf igure the DDM Vo ltage T hreshol d Settings for s pecific po rts on the Switc h. To vie w this win do w, clic k Configura ti on > DDM > DDM Voltage Thres hold Settings as shown bel ow: Figure[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 64 High Warni n g This is the highes t thresh old for the warning. W hen the opera ting param eter rises above this value, ac tion assoc iate d with the warn ing is tak en. Low Warning This is the lo west thres hold f or the war ning. W hen the op erating p aram [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 65 The f ollowing fie lds can be conf igured: Paramete r Descrip tion From Por t / To Port Specifies a port or range of ports to be conf igur ed. Hi gh A larm T his is the highes t thresh old for the a larm . When t he operating param eter r ises above this value[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 66 Section 3 L2 Features Jumbo Fram e 802.1Q VLA N Subnet VL A N QinQ 802.1v Proto col VLA N RSPAN Settings GVRP S ettings GVRP Global Setti ngs MA C - based VLAN Settings PVID Auto As sign Se ttings Port Tru n k ing LACP Port Setti ngs Traffic Se gmentation BPDU[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 67 V L AN s Unders t anding IE EE 802.1p Priorit y Priorit y tagging is a func tio n defined b y the IE EE 80 2.1p stan dard d esig ned to pr ovide a m eans of managing t raff ic on a network w here m any differ ent t ypes of dat a ma y be transm itted simultaneo[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 68 IEEE 802.1Q VL ANs Some r elevant term s: Tagging – The act of putting 80 2.1Q VL AN inf ormation into the he ader of a pack et. Untagging – The act of s tripping 802. 1Q V LAN infor mation o ut of the pack et header. Ingres s port – A por t on a switch [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 69 802.1Q VLAN T ags The f igure belo w shows t he 802.1Q VLAN tag. T here are f our add ition al octets ins erted after t he sou rc e MAC address. T heir presence is indicate d by a va lue of 0x 8100 in the EtherT y pe field . When a pac ket' s EtherT y pe [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 70 Port VLA N ID Pack ets that are tagged ( are c arrying t he 802 .1Q V ID inform ation) c an be t ransm itted fr om one 802 .1Q com pliant network device to another with the V LAN inf ormation i ntact. This allows 8 02.1Q VLANs to span ne twork de vices (a nd i[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 71 same VID) as the ingres s por t. If it does not, the pack et is dr opped. I f it has the sam e VID, the pack et is for warded a nd the destin ation por t trans m its it on its attac hed n etwork segm ent. This pr ocess is refer red t o as in gress f iltering a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 72 VLAN and Trunk Gr oups The m embers of a trunk group have the sam e VLAN setting. An y VLAN setting on t he mem bers of a trunk group will apply to t he other m em ber ports. NOT E: In order to use VLAN segm entati on in conjun ction with port trunk groups , y[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 73 Figure 3 - 5 Double VLAN E xample In this exam ple, the Servic e Provider Acc ess Net work switch ( Provider edge s witch) is th e devic e creatin g an d configurin g Doub le VLA Ns with diff erent SPVIDs f or s pecific c ustom ers ( say Cus tomer A and C usto[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 74 • W eb - based Acces s Contro l • IP Multicas t Routi ng • GVRP • All Regu lar 802.1Q VLAN f unctions 802.1Q VL A N The 802.1Q VL AN windo w lists a ll previo usly conf igured VL ANs b y VLAN ID and VLAN Nam e. To vie w this win do w, clic k L2 Feature[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 75 Figure 3 - 7 80 2.1Q VL AN win dow – Add/Edit V LAN Tab To retur n to the 802.1Q VL AN window , click the V L AN L i s t T ab at the t op of the window. T o chan ge an ex isting 802.1Q VL AN entry, click the correspondin g Edit butt on. A new windo w will ap[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 76 Advertisem ent Enabling t his func tion will allow the S witch to sen d out G VRP pack ets to outs ide sourc es, notifying that th ey ma y join the ex isting V LAN. Port Settings Allows an ind ividual port to be specif ied as m em ber of a VL AN. Tagg ed Speci[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 77 Figure 3 - 10 8 02.1Q VL AN w indow – VLAN Batc h Settings windo w The f ollowing fie lds can be set in the VL AN Batch S ettings wi ndow s: Paramete r Descrip tion VID List (e.g 2 - 5) Enter a VLA N ID List t hat c an be ad ded, delet ed or c onf igured. Ad[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 78 Subnet VLAN Subnet V L AN Settin g s The subnet VLAN s ettings are use d to cr eate, f ind or delet e a sub net VLAN entr y. A sub net VLAN entr y is an IP subnet - bas ed VLAN clas sification ru le. If an u ntagged or pr iority - tagged I P packet is received[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 79 Figure 3 - 12 VL AN Preceden ce Setti ngs windo w The f ollowing par ameter s can b e configur ed: Paramete r Descrip tion From Por t / To Port Specif y the port or range of ports you wish to conf igure. VL AN Preceden ce Us e the dr op do wn m enu to select t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 80 Figure 3 - 13 QinQ Settings window T he following f ields c an be s et: Paramete r Descrip tion From Por t / To Port A consecut ive group of ports that are part of the VLA N configurat ion startin g with the s electe d port. Role T he user c an choose between [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 81 Figure 3 - 14 V L AN T ranslation S ettings window The f ollowing fie lds can be set: Paramete r Descrip tion From Por t / To Port A consecut ive group of ports that are part of the VLA N configurat ion startin g with the s electe d port. CVID (1 - 4094) T he [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 82 802.1 v Proto c ol V L AN 802.1 v Protoc ol Gro up Se ttings The table allo ws the user to c reate Prot ocol VL AN gro ups and add pr otoc ols to th at group . T he 802.1v Pro toc ol VLAN Group Setti ngs supp orts m ultiple VL ANs for each protoc ol and all ow[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 83 802.1 v Protoc ol V LAN Setti ngs The table allows the user to configure Protoco l VLAN settings. The lower h alf of the table dis plays an y previousl y created sett ings . To vie w this win do w, clic k L2 Features > 802.1v Proto col VL AN > 802.1v Pro[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 84 RSPAN Settings This table c ontrols the R SPAN f unction. T he purpos e of the RSPAN func tion is to mirror the pack ets to a rem ote switch. T he pack et tra vels from the s witch wher e the m onitored pac ket is r eceived, throu gh the interm ediate s witch,[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 85 The f ollowing fie lds can be set: Paramete r Descrip tion From Por t / To Port Thes e two fields allow you to spec if y the range of por ts t hat will be inc luded in t he Por t - bas ed VLAN that you are c reatin g using the 802.1Q Port Se ttings wind ow . G[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 86 Leave All Time (100 - 10000 0) T he time in m illisec onds t hat sp ecifies th e am ount of tim e the S witch w ill take to Leav e All groups. T he def ault is 10 000 . T he Leave All T ime m ust be greater t han the L eave T ime . NNI BPDU Ad d r e s s This s[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 87 Port Tr unkin g Underst a ndi ng Port Trunk Groups Port trunk groups are us ed to c om bine a num ber of ports t ogether t o m ake a s ingle high - ba nd widt h data p ipeline. DGS - 3700 Ser ies s upports up to 6 port trunk groups with 2 to 8 ports in eac h g[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 88 same VLA N, and t heir ST P status, s tatic m ulticas t, traf fic c ontrol; traf fic s egmentation an d 802.1 p def ault prior ity configurat ions m ust be id entica l. Port l ock ing, port m irroring an d 802.1X m ust not be e nabled on the tr unk group. Furt[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 89 L A CP Port Settings The LACP Port Setti ngs windo w is used to create p ort trunk ing gro ups on the Switch. Us ing the f ollo wing wind o w, the user m ay set which por ts wil l be acti ve and pas sive in proces sing and sending LAC P control f ram es. To vi[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 90 Traffic Segmentation Traffic segm entation is used to l imit tr aff ic flow from a single port to a gr oup of ports o n either a sin gle switc h or a group of ports on anot her s witch in a sw itch st ack . This m ethod of segm enting t he flow of traf fic is [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 91 B PDU Tunneli ng Se ttin gs This table is used t o config ure the BPDU T unneling port ty pe s. W hen the de vice is opera ted with Q - in - Q enabled, D A will be rep laced by the tun nel multicast a ddress, and the BPDU will be t agged with the tu nnel VLAN [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 92 IGM P Sno o ping Internet G roup Manag em ent Protoc ol (IG MP) s noop ing a llows t he S witch to r ecogni ze IG MP queries and repor ts sent bet ween network stations or de vices and an IGM P host. W hen enabled for IGMP sn oopin g, the S witch c an open or [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 93 Time Query Inter val (1- 65535) T he Quer y Inter val fiel d is used to s et the tim e (in sec onds) bet ween trans m itting IGMP queries. E ntries between 1 and 65535 sec onds ar e all owed. Def ault = 12 5 . Max R esponse Time (1- 25) This deter mines the m [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 94 IGMP Sn oopin g Rate Limi t Setti ngs This table allows t he us er to conf igure t he rate of IGMP s nooping c ontrol pack ets that ar e allo wed per port or VL AN. T o view t his w indo w, c lick L2 Featu re s > IGMP Snooping > I GMP Snooping Rate Limi [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 95 IGMP Mul ticas t Gro up Pro file S ettings This table allows t he us er to c reate igm p multicas t group pr ofiles and spec ify m ulticast address lists o n the Switc h . To vie w this win dow, click L2 Features > IGMP Snooping > IGMP Multicas t Group P[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 96 State Use the drop - d own m enu to tog gle bet ween Enabled and D isa bled . Replace Sou rce IP E nter an I P addres s th at new I P address to be used. M ember Port (e.g.:1- 4,6) Select th e ports t hat will be m embers of the Multic ast V LAN. (Eg. Ports 1 [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 97 Figure 3 - 38 IP M ulticas t A ddress Group List Settings – Group Li st window Ente r t he multicas t Ad dress Lis t start ing with th e lo west in the r ange, and cl ick Ad d . T o return to t he IP Multica st Profile Set tings window, c lick the <<B [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 98 MLD Sno opin g Multicast L is te ner D isc over y ( M LD) Snoo ping is a n I Pv6 f unc tion us e d s im ilarl y to IG MP sn oop ing i n I P v4. It i s us ed t o discover ports on a VLAN that are r equestin g m ulticast dat a. Instea d of f looding all ports on[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 99 Figure 3 - 42 M LD Snooping Pa rameters Setti n g s – Edi t w indow The f ollowing par ameter s m ay be viewed or modif ied: Paramete r Des cription VL AN I D T his is the VLAN ID that, a long with th e VLAN N am e, identifies th e VLAN f or whic h to modif [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 100 Click Apply to implem ent any ch anges m ade and <<B ack to r eturn to the MLD Snoopin g Sett ings wind ow. To m odif y the router port set tings cl ick the hyperl inked Mo dif y Router P ort as s hown bel ow: Figu re 3 - 43 M LD Snooping R outer IP S e[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 101 Figure 3 - 45 M LD Snooping Ra te Limit Settings – Edit window Enter the new rate lim it and click Ap p l y . MLD Sn oopin g Static Gro up Settin gs This windo w is use d to c onfigure the MLD Snoopin g static group inform ation on the Swtic h: To vie w thi[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 102 Figure 3 - 47 M LD Multicast Gr oup Profile Setti ngs window To conf igure the group list once a profile has been cr eated, clic k on the h yperlink ed Group List to r eveal the following win dow : Figure 3 - 48 M ulticast Group P rofile Multica st Address Se[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 103 Tagg ed M ember Port (e. g.:1- 4,6) Sel ect the por ts that will be tagged as m embers of the VLAN. To m odify an entr y click the corr esponding M odify button. T o rem ove an entr y clic k the c orrespondi ng Delete butt on. IPv6 Multicast P rofil e Settin [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 104 IPv6 Limited Mu lticast Range S ettings The IPv6 Limited Multicast Ra nge Settings enable s the us er to conf igure th e por ts or VLANs on t he s witch that will be invo lved in th e Lim ited IPv6 Mu lticast Range. The user ca n conf igure the ra nge of IP v[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 105 Port Mi rro r The Switch a llows you to copy fr ames tr ansmitted and received on a por t and redir ect the copies to another port. You can attach a m onitoring de vice to the m irror ed port, suc h as a sniff er or an RMON probe, to vie w detai ls about the [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 106 Loo pb ack Detect i on S ettin gs The Loopb ack Detection func tion is us ed to det ect the loop c reated b y a spec ific port . This f eature is used to tempor arily shutd own a port on the Sw itch when a l oop d etecting pack et has be en loo ped back to th[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 107 Spannin g Tre e This Switc h suppor ts thre e versions of the Spann ing T ree Protocol; 8 02.1D - 2004 ST P com patible, 802. 11d - 2004 Rapid ST P and 80 2.1q - 20 05 MST P. 802.1D ST P will be f amiliar to m os t netwo rking prof ession als. Ho wever, s inc[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 108 P2P Port A P2P p ort is als o capa ble of rapid tr ansiti on. P2P ports may be us ed to c onnec t to oth er bridges . Und er RST P, all ports oper ating in ful l- dup lex m ode are cons idere d to be P2 P ports , unless manual ly overr idden thr ough conf igu[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 109 STP Bridge Glo bal Settings This windo w is use d to en able and conf igure the STP bridge g lobal sett ings on the Swt ich. To vie w this win do w, clic k L2 features > Spanning Tree > STP Bridge Globa l Settings as shown bel ow: Figure 3 - 57 STP Brid[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 110 Max H ops (1 - 20) Us ed to set the num ber of hops between devices in a spanning tr ee reg ion befor e the BPDU (br idge pro tocol data u nit) pac ket sent b y the S witch will be disc arded. Each switch o n the hop cou nt will r educe the hop count by one u[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 111 STP Por t Setti ngs T his window is us ed to configur e the ST P Port S ettings on the Swtich . STP can be s et up on a por t per p ort bas is. To vie w this win do w, clic k L2 Fe atures > Spanning Tre e > STP Port Settings as shown bel ow: Figure 3 - [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 112 Migrate Setting this param eter as Yes w ill set the p orts to send o ut BPDU pack ets to other bridges, r equestin g inform ation on their STP sett ing If the Sw itch is c onfigured f or RSTP, the port will be capa ble to m igr ate fr om 802.1D ST P to 80 2.[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 113 Paramete r Descr iption Configura ti on Name A previousl y configured nam e set on the Switch to uniquel y identif y the MST I (Multiple Spanning T ree Instanc e). If a conf iguration nam e is not s et, this f ield will sho w the MAC address t o the devic e r[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 114 Figure 3 - 61 STP Instance Setti n g s - View wind ow MSTP Port Inf ormati on This windo w d ispl a ys the c ur rent M ST P Port Inf orm ation an d c an be use d to u pdate th e por t c onf ig urati on f or an MST I ID. If a loop occ urs, the M STP func tion [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 115 For warding & Filt e ring This f older conta ins wind ows f or Unicast F or warding, Multicas t Forw arding a nd Multic ast Filter ing Mo d e. Unicast Forw arding To vie w this win do w, clic k L2 Features > Forwarding & Filte ring > Unicast For[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 116 The f ollowing par ameter s can b e set: Paramete r Descr iption VID T he VLAN ID of the V LAN t o which th e corr espondi ng MAC address belongs. Multicast M AC Address T he MAC address of the static s ourc e of m ulticast p ack ets. T his mus t be a m ultic[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 117 LLDP Glo bal Se ttings This wind o w is us e d t o c o n f igure t h e LLD P G lobal S ett ings on the S witc h. W hen LLDP is ena bl ed the S witc h c an star t to transm it, recei ve and pr ocess LLD P pack ets. T he specif ic func tion of each port will de[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 118 LLDP P ort Set tings This windo w is use d to displa y the LLDP port settin gs on the S witch. T he ports can be individu ally conf igured to sen d notificat ions to c onfigur ed SNMP tr ap rec eivers. To vie w this win do w, clic k L2 Features > LLDP >[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 119 LLDP Ma nagem ent Address List This windo w is use d to f ind the L LDP m anagem ent addres s inform ation on th e Swi tch. To vie w this win do w, clic k L2 Features > LLDP > LLDP M an agem ent Addres s L ist as show n b elow : Figure 3 - 68 LLDP M ana[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 120 Port Descri p ti on Use the dr op - down m enu to en able or disable port de scr iption. System Nam e U se the dr op - down m enu to en able or disab le s y stem nam e. System Descripti on Use the dr op - do wn menu t o enable or disab le s y stem desc riptio[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 121 Tree Pr otocol, the Link Aggre gation C ontol Proto col, and num erous ven dor pr opriet ary variations are res ponsib le f or m aintaining th e top ology a nd connec tivit y of th e net work. If EAPOL, G VRP, ST P (incl u din g M ST P), and L AC P pro toc ol[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 122 To vie w this win do w, clic k L2 Features > LLDP > LLDP Stat istics System as shown below : Figure 3 - 72 LL DP St atisti cs System win d ow LLDP Loc al Por t Inf ormatio n LLDP Loc al Port Inform ation window displa ys the inform ation on a per por t [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 123 Figure 3 - 75 LLDP Local Port Information (Show Detai l) window To retur n to the LLDP Local Port Information window c lick the <<Ba ck butt on. LLDP Re mote P ort In formati on This wind ow disp la y s p ort inf ormation learned from the neighbor . T h[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 124 Figure 3 - 78 CFM Port Settings window Enter the port list you wish to Enab le and click A pply . CFM CC M PDUs Forw ar ding Mode This windo w is us ed to c o n f igure th e CFM CCM PD U f orwar di ng m ode on t h e S witch. B y def ault the CC M mes s age is[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 125 Figure 3 - 81 CFM MIPCCM List w indow Connecti vit y Fault M anage me nt Settin gs This windo w is use d to c onfigure the CFM sett ings on the S witch. To vie w this win do w, clic k L2 Features > CFM > Connectivity Fault Management S ettings as shown [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 126 MIP This setting co ntrols t he creatio n of MI Ps. N one – Means that no MIPs will be c reated. T his is th e defau lt value. A uto – MI Ps ar e cr e ated w hen the nex t lo wer ac t ive M D - level on th e p or t is re ac h ed or there are no lower acti[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 127 LBM s Priori ty T he 802.1p pr i orit y to be se t in t he tr ans m itted LB Ms . If not s pec ifi ed it uses the s a m e prior it y as CCMs an d LTMs s ent b y the MEP. Click Apply to im plement chang es m ade. CFM Li nktrac e Setti ngs This windo w is use d[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 128 Ethernet OAM Etherne t O AM Settin gs This windo w is used to con figure the ports Ethernet OAM m ode. In Active m ode the ports can initiate OAM discovery and star t or stop r emot e loopbac k. W hen a port in OAM enabl ed, an y change t o the OA M m ode wil[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 129 Etherne t O AM Configur atio n Set tings This wind ow is used to co nfigure and d ispla y the pr im ary controls and s tatus inform ation for Ether net O AM on the Switch. To vie w this win do w, clic k L2 Features > Ethernet O AM > Ether net OAM Config[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 130 Section 4 QoS HOL Blocki ng Pevention Bandwidth Contr ol Traffic C ontrol 802.1p Def ault Prio rity 802.1p Use r Prio rity Qo S Scheduli ng Mechanism QoS Scheduli ng In Ba nd Ma nage Settings SRED The DG S - 3700 Ser ies su pports 802.1p priorit y que uing Qu[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 131 Figure 4 - 1 M apping QoS on the Switch The pictur e above sho ws the defau lt priorit y setting f or the Switc h. Class - 7 has the h ighest prior ity of the e ight prior ity queues on the S witch. In or der to im plem ent QoS, the user is require d to instr[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 132 For strict p riori ty- based s cheduli ng, an y packets residing in t he higher priorit y queues ar e trans m itted first. Multi ple strict pr iority queu es em pty based on t heir prior ity ta gs. Only whe n these queues are em pty, are pack ets of lower pri[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 133 HOL Blo cking Pev ent ion This windo w is use d to en able H OL Prev ention Se tting s on the S witch. To vie w this win do w, clic k QoS > HOL Bl ocking P revention S ettings as sh own belo w: Figure 4 - 2 HOL Prevention Settings wi ndow Band width C ontr[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 134 Rate (64 - 1 024000) This f ield allows you to en ter the data r ate, in Kb its per sec ond, that will be the lim it for the selected port. The value m ust be a multip le of 64 , betw een 64 and 10240 00. Click Apply to set t he ba ndwidth c ontrol for the se[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 135 The f ollowing par ameter s can b e configur ed: Paramete r Description Traffic Contr ol Setti n g s From Por t / To Port A consecut ive gro up of ports m ay be conf igured s tartin g with th e selec ted port. Acti on Selec t the m ethod of tr aff ic Control [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 136 NOT E: Ports that are in th e Sh utdown for ever m ode will be seen as Discardin g in Span ning T ree windows and im plem entations tho ugh these ports will still b e forwar ding BPD Us to t he Switch ’s C PU. NOT E: Ports that are in S h utdo w n For e ver[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 137 802.1p Us er Pri ori t y The S witch allo ws the ass ignm ent of a user priorit y to each of the 80 2.1p pri oritie s. To vie w this win do w, clic k QoS > 802.1p User Priorit y as sho wn belo w: Figure 4 - 6 80 2.1p User Priori ty window Once you have ass[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 138 Figure 4 - 7 QoS Scheduling Mechanism The f ollowing par ameter s can b e configur ed. Paramete r Descr iption From Por t / To Port Enter the port or port list you wish to config ure. Schedul ing Mech anism Str ict – The highest c lass o f ser vice is the f[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 139 Figure 4 - 8 QoS Scheduling The f ollowing par ameter s can b e configur ed: Paramete r Descr iption From Por t / To Port Enter the port or port list you wish to config ure. Class ID Select th e Clas s ID, fr om 0-7 , to configur e for th e QoS param eters. S[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 140 Figure 4 - 9 In Band Manage Settin g s Select th e priorit y and cl ick Ap p l y . SRED Simple ran dom early det ection (s RED) is a sim plified RED m echanism based on ASIC capa bilit y. Ran dom E ar l y Detection ( RED) is a c ongestion avoidanc e mec hanis[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 141 From port / To port A consecut ive gro up of ports may be co nfigured startin g wit h the sel ected por t. Class ID Select th e Class ID, fr om 0-7 , to co nfigure f or the SR ED par ameter s. Selectin g all will s et th e param eters conf igured her e for al[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 142 SRED Drop Cou nter This windo w is use d to v iew the SR ED Dro p Count er settin gs on the Switch. To vie w this win do w, clic k QoS > SRED > SRED Dro p Co unter as show n below : Figure 4 - 11 SRED Drop Counter window DSCP Tr ust Set tings This windo[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 143 Figure 4 - 13 DSC P Map Settings windo w The f ollowing par ameter s m ay be set: Paramete r Descrip tion From port / To port A consecut ive gro up of ports may be co nfigured startin g with th e selec ted port. DSCP M ap Us e the drop - do wn m enu to choose[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 144 802.1p Map Sett ings This windo w is use d to en able 802.1p Ma p Setti ngs. To vie w this win do w, clic k QoS > SRED > 802. 1 p Map Settings as shown below: Figure 4 - 14 D SCP Map Settings windo w The f ollowing par ameter s m ay be set: Paramete r D[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 145 Section 5 Security Safeguard E ngine Trusted H o s t IP - MAC - P o r t Binding Port S e curity DHCP Ser ver Scree ning Setti ngs 802.1X SSL Se ttings SSH Access A uthentication Control MA C - based Access Control Web Authe n ti cation NetBIOS Filt ering Safe[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 146 Figure 5 - 1 M apping QoS on the Switch F or ever y consecutiv e check ing interv al that re veals a pack et flooding is sue, th e Switch will dou ble the ti m e it will accept a few ingres s AR P and IP broadcas t pack ets. In the exam ple above, the S witch[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 147 Paramete r Description Rising Thres hold Used to co nfigur e the ac ceptable level of CPU uti lization before th e Safegu ard Engi ne mechanism is enabled. On ce the CPU ut ilizat ion rea ches this percent age lev el, the S witch will m ove into the Exhaus te[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 148 Switch will send a trap m essage to t he SNM P agent and the Switch log when an ARP packet is r eceived that do esn’t matc h the IP - MAC b inding conf iguration se t on the Switch. To vie w this win do w clic k, Securi t y > IP - M AC - Port Binding >[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 149 From Por t / To Port Select a port or ra nge of ports to set for IP - MAC B ind ing. State Use the pu ll - down m enu to Enable or Disabl e these p or ts for IP - MAC Binding. Enabled S trict – This m ode provides a strict er method of contr ol. If the user[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 150 IMP Bindi ng E ntr y Settings This table is use d to crea te Static IP MAC Bindin g Port entries on t he s witch. To vie w this win do w, clic k Securi ty > I P - M AC - Po rt Binding > I MP Binding Entry S ettings as sh ow n bel ow: Figure 5 - 6 IM P B[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 151 DHCP Snoopin g Entrie s This table is us ed t o v ie w dynam ic entr ies on s p ec ific port s. T o view part icul ar po rt s ettings , e nter t he port nu m ber and click Find . To vie w a ll entr ies clic k View All , and to delete an entr y, clic k Clear .[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 152 Figure 5 - 9 Port Security Port Settings windo w The f ollowing par ameter s can b e set: Param eter Description From Por t / To Port A consecut ive gro up of ports m ay be conf igured s tartin g with th e selec ted port. A dmin State This pull - do wn m enu [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 153 Paramete r Descrip tion VL AN Nam e Specif ies a VLA N or l ist of VLAN s b y V L AN Nam e. VLAN ID (e.g .:1,4 - 6) Specif ies a VLA N or l ist of VL AN s b y V L AN I D . Max L earning Address Spec ifies t he m axim um number of port - securit y entries t ha[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 154 DHCP Sc reeni ng Port S etti ngs The S witch supports DHCP Server Sc reeni ng, a f eature tha t deni es acces s to rog ue DHCP s ervers . W hen the DHCP ser ver f ilter func tion is en abled, all DHC P server p ack ets will be filtered f rom a specif ic port.[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 155 Client’s M AC Addre ss T he MAC addres s of th e DH CP clie nt. Onl y multip le legal D HCP ser vers on the net work need to be entered in this field. If there is onl y one leg al DHCP server on the n etwork, no input t o th is f ield is allo wed . Ports Ch[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 156 connecte d to a port on the S w itch m ust be authenticat ed by the Authent i cation Server (RADIU S) before attaini ng any services of fered by the Switch on the L AN. The role of the Authen ticatio n Server is to certif y the identity of th e Client attem p[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 157 Clie nt The Client is sim ply the endstation tha t wishes to gain acc ess to the LAN or s w itch ser vices. All ends tation s mus t be running sof tware that is com pliant with the 80 2.1X protocol . For users r unning W indows XP or W indows Vista, that soft[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 158 Unders tandin g 8 02.1X Port - bas ed and H ost - based Netw ork Access Control The origin al intent be hind the deve lopment of 802.1X was to leverage th e charac teristics of point - to - point in LANs . As any single L AN segm ent in s uch infrastr uctures[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 159 Host-Based Ne tw ork Access Control Figure 5 - 21 Examp le of T ypical Host -Based Configuratio n In order t o suc c ess f ull y mak e use of 802.1X in a s har e d m edia LAN s e gm ent, i t woul d b e nec ess ar y to c reat e “logic a l” Ports, on e f or[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 160 802.1X Global S ettings This windo w is use d to c onfigure the 802.1X Globa l Se ttings on t he Swit ch. To vie w this win do w, clic k Securi ty > 802.1 X > 8 02.1X G lobal Set tings as shown b el ow : Figure 5 - 22 802.1X Global Settings window This [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 161 This windo w allo ws you to set the f ollo wing f eatures: Paramete r Descrip tion From Por t / To Port Enter the port or ports to be set. QuietPeri od (0- 65535) T his allows you to set th e num ber of seconds that the Switch rem ains in t he qui et state fo[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 162 802.1X User To cr eate a n e w 8 02. 1X Us er ent er a us er nam e and p as s word the n reco nf irm the pas s wor d and c lick Apply , the ne w user will be displ ayed in t he low er half of the ta ble. T o delete an e ntry c lick the c orrespond ing Del ete[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 163 Confirm Key Re - enter the previousl y entered Key . Click Apply to implem ent changes . Initialize Port(s) This wind ow a llows you to in itiali ze ports f or the 802.1X Settings . This windo w will appear in the f older when th e “enable 802.1x” comm an[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 164 Guest VL A N Co nfigur ation On 802.1X security enable d networks , there is a need for non 802.1X sup ported d evices to gain limited acces s to the network , due to lack of the proper 80 2.1X software or inco mpatib le de vices, s uch as com puter s run nin[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 165 Guest VL A N This windo w is use d to c onfigure the Gues t VLAN o n the S witch. To vie w this win do w, clic k Securi ty > 802.1 X > Guest VL AN as sho wn belo w: Figure 5 - 29 Guest VL AN window The f ollowing fie lds m ay be m odified to e nable the[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 166 the ciphers uites av ailable, yet diff erent ciphers uites will aff ect the sec urity level and th e perf orm ance of the secur ed connecti on. T he inform ation inc luded in the cip hersui tes is n ot inc luded with the Switch and re quires downl oading f ro[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 167 SSL Ciphersui te Settings RSA with RC4_128_M D5 T his ciphers uite c om bines the RSA k ey excha nge, stream cipher RC4 encr yption with 1 28 - bit k eys and t he MD5 Hash A lgorithm . Us e the pull - do wn m enu to e nable or disab le this ciphersu ite. This[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 168 SSH SSH is an abbr ev iat ion of Sec ure Sh el l, whic h is a pr ogram allowin g s ec ure r em ote log in an d s ecur e net wo rk s er vices over an i nsecur e netw ork. It allows a secur e login to r em ote host com puters, a saf e method of execut ing co mm[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 169 securit y shell enc ryptions. The ava ilable o ptions ar e Nev er , 10 mi n , 30 min , and 60 min . The default se tting is Never . Click Apply to implem ent changes made. SSH Authmode and Algori thm S ettin gs The SSH Algorithm windo w allows th e conf igura[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 170 Cast128 - CBC Check the box to e nable the Cast 128 encr yption algorithm with Cipher Block C haining. The default is enab led . Twofish 128 Chec k the box to enabl e the t wofish1 28 encr yption a lgorithm . The def ault is ena bled . Twofish 192 Chec k the [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 171 Password – T his par am eter should be c hosen if the adm inistrator wishes to us e an adminis trator - def ined pas sword f or authen ticatio n. Up on entr y of this param eter, the Switch will prom pt the adm inistr ator for a password, a nd then to re - [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 172 The adm inistrator for the S witch ma y set up six differ ent authent ication tech niqu es per user - define d metho d list (TACACS/X TACAC S/TAC ACS+/RADIU S/loc al/none) for authenticat ion. T hese t echniques will be listed i n an or der preferable, and de[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 173 Authentication P olicy Settings This com mand will enab le an adm inistrator - defined authe nticatio n polic y for us ers tr y ing to access the S witc h. W hen enabled, th e dev ice will c heck the Login Met hod L ist and c hoose a tec h nique for user aut [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 174 a previous ly config ured metho d list. The us er ma y use the default Met hod Li st or other Method Lis t configured b y the user . See the Login Method Lists wi ndow, in th is section, for mor e inform ation. Enable Method List Using the pul l - do wn m enu[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 17 5 Figure 5 - 38 Authentication S erver Group Setti ngs Edit window To add a n Authent icat ion Ser ver Host to the list, e nter its IP address in the IP Addr ess f ield, cho ose the protoco l associated with the I P addr es s of the Authent ication S erver Hos[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 176 IP Address T he IP addres s of the r emote s erver hos t the us er w ishes to a dd. Port (1- 65535) Enter a num ber betwe en 1 and 65 535 to define th e vir tual por t num ber of the authe nticatio n protocol o n a s erver host. The d efault por t n umber is [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 177 Figure 5 - 40 Login M ethod Li sts window The S witch conta ins one Meth od List t hat is s et an d cannot b e rem oved, yet can b e modif ied. To d elete a Log in Method Lis t def ined b y the us er, clic k the c orress ponding Delet e butt on. T o modif y a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 178 NOT E: T o set the Local E nable Pas sword, see t he next s ection, entit led Local Enab le Pass word. To vie w the f ollo wing tabl e, clic k Secur ity > Access A uthenticati on Control > E nable Method Lists as shown below: Figure 5 - 41 Enable Method[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 179 Figure 5 - 42 Local Enable Password window To set the Local Enable P ass word, set the follo wing par ameter s and click Apply . Paramete r Descript ion Old Local En able Passw ord If a pass word was previ ousl y conf igured for t his entr y, enter it her e i[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 180 Figure 5 - 43 R ADIUS Accounting Se ttings window M AC - based Access Con trol MAC - bas ed Acces s Co ntrol is a m ethod t o authe nticat e and a uthori ze acc ess using e ither a port or hos t. For por t - based M AC, the m ethod decid es por t access right[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 181 Figure 5 - 44 M AC - based Access Control S ettings windo w The f ollowing par ameter s m ay be viewed or set: Paramete r Description Settings MB A Globa l State Click the radio buttons to glo ball y enable or d isable the MAC - b ased Access Control function[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 182 unauthent icated st ate. T he rang e is be tween 1 and 14 40 m inutes. T he defa ult is 1440 . Hold Time (1- 300) If a hos t f ai ls to p ass aut h e nticat ion , th e nex t a uth ent ic atio n wil l not st ar ted withi n hol d time unles s the us er clear s [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 183 Web A uthentica tion W eb authenticati on, also k nown as W eb - based Acc ess Contr ol, is a nother port b ased ac cess c ontrol m ethod implem ented sim ilarily to th e 802.1X port b ased acc ess c ontrol method pr eviousl y stated. T his function will allo[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 184 Conditi ons a nd Limi tations 1. The s ubnet of the a uthentic ation V LAN’s I P interf ace m ust be the s ame as that of the client . If not c onfigur ed properl y, the aut henticat ion will b e perm anentl y denied by the aut henticator . 2. If the cli en[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 185 for us ers tr y ing to ac cess the ne twork via the s witch. T his RADIUS server m ust have alread y been pre - as signe d by the adm inistrator using t he RADIUS Server windo w located in th e 802.1X s ection. Logout Timer (1- 1440) T he logout t ime in disp[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 186 User Name Enter the us ernam e of up to 15 a lphanum eric c haract ers of the guest wishing to acc ess the web throug h th is proc es s . T his f ield is f or adm inistrato r s who ha ve se lect ed local as the ir web based authent ic ator. VL AN N a m e Ente[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 187 Section 6 ACL ACL Configur ation Wizard Access Profile Li st CPU Acce ss Profil e List ACL Finder ACL Flow Meter Access profiles allow you t o esta blish cr iteria t o deter m ine whether or n ot the Switc h will forward pack ets ba sed o n the inform ation c[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 188 From Use the drop - d own m enu to selec t from MAC Ad dress, IP v4 Addr ess or I Pv6. To Use the drop - do wn menu t o select f rom MAC Address , IPv4 Ad dress or IP v6. W hen IPv6 is selected the user ca n onl y enter the IP v6 source ad dress or the IPv6 d[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 189 Figure 6 - 3 Add Acce ss Profile (Ether net) If cr eating an Ethernet A CL enter t he Prof ile ID a nd Pr ofile Nam e and c lick Selec t the follo wing windo w will appe ar.[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 190 Figure 6 - 4 Add E thernet A CL Profi le windo w Click on t he boxes at th e top of the table, which will th en turn red a nd re veal para m eters for configuratio n. To c reate a new entr y enter the corr ect inform ation and click Creat e . To ret urn to th[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 191 Etherne t Type Selec ting th is optio n instr ucts t he Switch t o exam ine th e Ethernet t ype value in ea ch f rame's header. Click Creat e to view the new Acc ess Prof ile List entry in the Access Profil e List table s hown be low. T o add an other Ac[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 192 Figure 6 - 7 Access Pro file Eth ernet To set the Access Rule f or Ethernet, adjust t he foll owing p aram eters and click Ap p l y . Paramete r Desc ription Access ID (1 - 128) T y pe in a u nique identif ier num ber f or this ac cess . This value ca n be s [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 193 Preceden ce header. Time R ange Name T ick the c heck box and enter the nam e of the Tim e Range settings that has been pr eviousl y configured in the T ime Rang e Setti ngs windo w. This wi ll set specifi c times w hen thi s a ccess rul e will be im plem ent[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 194 Figure 6 - 10 Add IPv4 ACL Profi le Click on t he boxes at th e top of the table, which will th en turn red a nd re veal para m eters for configuratio n. To c reate a new entr y enter the corr ect inform ation and click Create . T o retur n to the Ac cess Pro[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 195 code value. Select IGM P to instruct th e Switch to exam ine the Inter net Gro up Managem ent Prot oco l (IGMP) f ield in eac h f rame's header. Select T yp e to f urther spec if y that the ac cess profile w ill app ly an IGMP type value Select TCP to us[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 196 Figure 6 - 12 Access Profile D etails ( IPv4) To retur n to the Acces s Profile L ist click Show All Profiles , t o add a rule to a pr eviousl y configured entr y click on the corres ponding Add/View Rules , which will re veal the f ollowing windo w; Figure 6[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 197 Swit ch Replace D SCP Sel ect this optio n to ins truc t the Sw itch to replace the D SCP value (i n a pac ket tha t m eets the selec ted criter ia) with the valu e entere d in th e adjac ent field. Replace T oS Preceden ce Selec t this opt ion to ins truct t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 198 Figure 6 - 16 Add IPv6 ACL Profi le Click on t he boxes at th e top of the table, which will th en turn red a nd re veal para m eters for configuratio n. To c reate a ne w entr y enter the corr ect inform ation and click Create . T o retur n to the Ac cess Pr[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 199 Click Creat e to view the new Acc ess Prof ile List entry in the Access Profil e List table s hown be low. To ad d an other Access P rofil e cli ck Add ACL P rofile . To delete a prof ile click the corres ponding Delete butto n, to view t he spec ific configu[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 200 Figure 6 - 19 Access Prof i le ( IPv6) The f ollowing par ameter s m ay be configure d for the IP (IP v6) filter . Paramete r Desc ription Access ID (1 - 128) Enter a u nique ide ntif ier num ber for this access . This value can be s et from 1 to 1 28 . Class[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 201 Precedenc e bits f ield in I Pv4. Rx Rate ( 1 - 15624) Use this to lim it Rx band width f or the prof ile being configured. T his rate is im plem ented using the f ollowing eq uation: 1 va lue = 64Kb it/sec. (e x. I f the user s elects an Rx rate of 10 then t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 202 Figure 6 - 22 Add Pack et Content A CL P rofile Click on t he boxes at th e top of the table, which will th en turn red a nd re veal para m eters for configurati on. T o cr eate a new entr y enter th e corr ect inform ation a nd click Create . T o retur n to [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 203 able to ins pect an y spec ified c ontent of a pack et in dif ferent pr otocol l ayers. Click Apply to implem ent changes made. Click C reate to view the ne w Acces s Profile List entr y in the A ccess P rofile List tabl e shown belo w . To add another Access[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 204 Figure 6 - 25 Access Profile (P acket Conte nt) The f ollowing par ameter s m ay be configure d for the Pack et Conte nt filter . Paramete r Desc ription Access ID (1 - 128) T y pe in a unique identif ier num ber f or this ac cess. T his value ca n be set fro[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 205 Counter Enable or disab le the c ounter settings . Ports Specifies t hat the acces s rule w ill take ef fec t on one po rt or a ran ge of ports . VL AN N a m e Specif ies the acces s rule wil l take ef fec t on the VLAN Nam e specif ied. VL AN I D Specif ies [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 206 CPU A c ces s Pro f i le Li st In the followin g windo w, t he user m a y globall y enabl e or disable the CPU I nterfac e Filteri ng State m echanism by using the radio buttons t o chan ge the ru nning st ate. To vie w this win do w, clic k ACL > CPU Acce[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 207 Figure 6 - 29 Add CPU ACL Profile window for E thernet Paramete r Desc ription Select P rofile ID Use th e drop - down m enu to select a un ique ide ntifier num ber for this prof i le set. T his value c an be set fr om 1 to 5 . Select ACL Type Select pr ofile[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 208 Figure 6 - 30 C PU Access Pr ofile Detail Infor mation window for E therne t The wind ow show n below i s the Add CPU ACL Profile window for IP (IPv4). Figure 6 - 31 Add CPU A CL Profile window for I P (IPv4) The f ollowing par ameter s m ay be configure d fo[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 209 Destinatio n IP M ask Enter an IP addr ess m ask for the desti nation I P address . Protocol Selecting this option instruc ts the Switch to exam ine the protoc ol type value in e ach frame's header. You mus t then specif y what protoc ol(s) to include ac[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 210 Figure 6 - 33 Add CPU ACL Profile window for IP v6 The f ollowing par ameter s m ay be configure d for the IPv6 f ilter. Paramete r Desc ription Select P rofile ID Use the drop - down menu t o selec t a uniqu e identif ier num ber for this prof ile set. This [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 211 To view t h e set tings of a pr eviousl y corr ec tl y cr eat ed p rof ile, clic k t he cor res po nd i ng Show Deta ils butto n on the CPU Access Profile Li st wind ow to view the f ollo wing windo w: Figure 6 - 34 C PU Access Pr ofile Detail Infor mation wi[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 212 the 15th byte. • 16 - 31 – Enter a value in he x form to m ask the pack et from byte 16 to b yte 31. • 32 - 47 – Enter a value in he x form to m ask the pack et from byte 32 to b yte 47. • 48 - 63 – Enter a value in he x f orm to m ask the pac ket[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 213 Acti on Selec t Perm it to specif y that the pack ets that m atc h the ac cess profile are f orwarded by the Switch, ac cording t o an y addition al rule added (s ee bel ow). Select De ny to sp ecif y the pack ets that m atc h the acces s prof ile to be fi lt[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 214 To establish the ru le for a previou sly cre ated CPU Access Profile: To conf igure th e Acc es s R ules f or I P, o pen th e C PU Ac cess Profile L ist window an d c lic k Add/View Rules for an IP entry. T his will o pen the f ollo wing windo w. Figure 6 - 4[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 215 Figure 6 - 42 C PU Access Rule D etail Infor matio n wi ndow for IP To establish the ru le for a previou sly cre ated CPU Access Profile: To conf igure the Acces s Rules f or IP, open the CPU Acce ss Prof ile List windo w and c lick A dd/View Rules for an IPv[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 216 default qua lit y of service or real t ime s ervice pac kets . Time R ange Name T ick the c heck box and enter the nam e of the Tim e Range settings that has been pr eviousl y configured in the T ime Rang e Setti ngs w indo w. This w ill set sp ecific times w[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 217 Paramete r Descrip tion Access ID (1 - 100) T y pe in a u nique identif ier num ber f or this acc ess. T his value ca n be set f rom 1 to 10 0 . Acti on Selec t Permit to s pecif y that the pac ket s that m atch the acc ess prof ile are f orwarded by the Swit[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 218 To vie w this win do w, clic k A CL > ACL Flow M eter as sho wn belo w: Figure 6 - 50 ACL Flow Meter window The f ollowing fie lds m ay be conf igured: Paramete r D escr iption Profile ID T he pre - conf igured Prof ile I D for wh ich to conf igure t he Fl[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 219 Access ID (1 - 128) Enter th e Acc ess ID t hat will be used to configur e the Flow M etering param eters, enter a value between 1 and 128 . Mode Select th e mode t o be use d either trTCM or srTCM and enter the c orresp onding inf orm ation. trT CM – T wo [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 220 Section 7 Monitoring Device St atus Cable Diagno s tic CPU Utiliz ation Port Util ization Packet S ize Memory Utiliz ation Packets Errors Port Access C ontrol Browse A RP Table VLAN IGMP S nooping MLD Snoopi ng Browse Ses sion Tab le CFM MAC Address Tab l e B[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 221 Figure 7 - 2 Cable Diagnostic window Enter the port num ber you wish to tes t and c lick Test , t he results will be displa y on the lo wer half of the t able . CPU Utilization The CPU Ut ilization window di spl ays the perc entag e of the CPU be ing used, ex[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 222 Port Utilization The Port Utilizati o n window displa ys the perc entag e of the to tal avai lable ba nd w idth being used on the por t. To vie w this win do w, clic k Monitoring > P ort Utilization as shown bel ow: Figure 7 - 4 Port Utilization window To [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 223 Figure 7 - 5 Packet Size window To view t he Packet Size T able window, cl ick the link View T able , wh ich will s how the f ollowin g tabl e: Figure 7 - 6 P ack et Size Table w indow The f ollowing fie lds can be set or viewed: Paramete r Descript ion Port [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 224 (excludi ng fram ing bits b ut includ ing FCS octets). 65 - 127 T he total num ber of pack ets (including bad pack ets) received that were betw een 65 and 127 octets in lengt h inclus ive (ex cluding fram ing bits bu t includ ing FCS octets). 128 - 255 T he t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 225 Figure 7 - 8 Received (RX) window (for By tes and Packets) To view t he Recei ved (RX) T able w indo w, cl ick Vie w T ab le . Figure 7 - 9 Re ceived (R X) T able w indow (fo r Bytes and Pa ckets) The f ollowing fie lds m ay be set or viewed: Paramete r Desc [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 226 B yte s Counts the num ber of b ytes rec eived on th e port. Packets Counts t he num ber of pac kets r eceived on the por t. Unicast Counts t he total n um ber of good pac kets that were r ecei ved by a u nicast address. Multicast Counts t he tota l num ber o[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 227 Figure 7 - 11 UM B_cast ( RX) T able w indow (for Unicast, M ult icast, and B road cast Pack ets) The f ollowing fie lds m ay be set or viewed: Paramete r Descr iption Port Use the dr op - do wn menu t o choose the port t h at w i ll d is p la y statis t ic s[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 228 T o vie w t his wind ow, c lick Monitoring > Packet s > Transmitted (TX) as shown bel ow: Figure 7 - 12 T ransmi tted (TX) window (for By tes and Packe ts) To view t he Transmitted (TX) Table win dow, c lic k t he link Vie w T able . Figure 7 - 13 T ran[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 229 200 . B yte s Counts the num ber of b ytes suc cessf ully sent on th e por t. Packets Counts t he num ber of pac kets s ucces sfull y sent on the port. Unicast Counts t he total n um ber of good pac kets that were t ransm itted b y a unicast a ddre ss. Multic[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 230 Errors The W eb Manager allo ws port err or st atistic s com piled b y the S witch's m anage m ent agent to be view ed as either a line graph or a ta ble. Fo ur windo ws are of fered. Received (RX) To selec t a port to view thes e statistics f or, select[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 231 The f ollowing fie lds can be set: Paramete r D escriptio n Port Use the dr op - do wn menu t o choose the port t hat wi ll displa y statis tics. Time In terval Sel ect the des ired setting between 1s and 6 0s , wher e " s " stands f or seconds . Th[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 2 32 Figure 7 - 16 T ransmi tted (TX) window (f or erro rs) To view t he Transmitted (TX) Table win dow, c lic k t he link Vie w T able , which wil l sho w the fol lo wing tabl e: Figure 7 - 17 T ransmi tted (TX) Table window (for errors) The f ollowing fie lds m[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 233 CRC Error Count s other wise valid pac k ets that did not end on a byte (oct et) bo undar y. LateColl Counts the num ber of times that a c ollisio n is dete cted later than 51 2 bit - tim es into the transm ission of a pack et. ExColl Exces sive Collisi ons. [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 234 as s y sNam e in MI B II.) Serve rIndex T he identificati on num ber assigned to e ach RAD IUS A uthenticatio n server that th e client shares a s ecret with. AuthServ erAddres s T he (conc eptual) tabl e listi ng the RADI US auth entica tion server s with wh[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 235 Figur e 7 - 19 R A DIUS A ccount Client window The user ma y also s elect t he desired tim e interval to upda te the stat istics, b etween 1s a nd 60s , where “s” stands f or seconds. T he def ault value is one sec ond. T o clear the c urrent statis ti cs[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 236 PacketsD ropped T he number of RADIUS pack ets, which wer e received from this server on the accounti ng port a nd dropp ed f or som e other reaso n. Authenticator S tate The f ollowing sect ion des cribes t he 802. 1X Status on t he Switch. To vie w this win[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 237 Authenticat or S tatis tics This wind ow con tains th e statis tics obj ects f or the Aut henticat or PAE assoc iated with each por t. An e ntr y appears i n this tabl e for eac h port th at suppor ts the A uthent icator f unction. To vie w this win do w, cli[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 238 Rx Resp T he number of valid EA P Respons e fram es (other than R esp/Id f ram es) that have bee n received b y this Authent ic at or. Rx Invalid The num ber of EAPOL fram es that have b een r eceived by th is Aut henticat or in which t he fram e type is not [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 239 The user ma y select the des ired tim e interva l to update th e statist ics, bet ween 1s and 60s , where “s” stands for seconds. T he def ault val ue is one second. The f ollowing fie lds can be vie wed: Paramete r Description Port The ident ification nu[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 240 Figure 7 - 26 Authenticato r Diagnos tics window The f ollowing fie lds can be vie wed: Paramete r Descript ion Port The ident ification num ber ass igned to the Port b y the S ystem in w hich the Port res ides. Connect E n ter Counts the num ber of tim es th[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 241 CONNECT ING, as a result of a reaut hentic ation re que st (reAuth enticate = TR UE). A uthed Start Counts the n um ber of times that the stat e m achine tr ansitions f rom AUTHENTIC ATED to CONNECT ING, as a result of an E APOL - Start m essage be ing rec ei[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 242 Figure 7 - 27 B row se ARP T able w indow V L AN The f ollowing win dows are used t o conf igure the VLAN settings of the S witch. Brow se VLAN This windo w allows the V LAN st atus for eac h of the Switch' s ports to b e viewed b y VLAN. Enter a VID (VL[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 243 Show VL A N Po rts This windo w allows the V LAN st atus for eac h of the Switch' s ports to b e viewed b y VLAN. Enter a VID (VLAN ID) in the field a t the to p of the window and click the Find b utton. To vie w this win do w, clic k Monitoring > VLA[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 244 Figure 7 - 31 IGM P Snooping Gr oup window Enter the appropr ia te inf orm ation and click Find , the inf orm ation will be shown i n the IG MP Sn ooping G roup T able. The f ollowing fie ld can be viewed: Paramete r Descrip tion VL AN N a m e The VLAN ID of [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 245 Figure 7 - 33 B rowse IGMP Sno o p i ng Counter window Enter the VLAN Name , VLA N List or Port List of the VLAN you wis h to vie w and click Find . MLD Sno opin g Brow se MLD Router Port This wind ow dis pla ys whic h of the S witch’s ports are c urrentl y[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 246 Figure 7 - 35 M LD Snooping Grou p windo w Enter a V LAN Nam e or VL AN List an d Grou p IP Addr ess in the appr opriate field and click the Find butt on. MLD Sn oopin g Forw ar ding Table This windo w is use d to disp la y the current MLD sn ooping f orwardi[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 247 Br ow se MLD S nooping Count er This windo w is use d to disp la y the current MLD sn ooping c ounter i nform ation on t he Switch. To vie w this win do w, clic k Monitoring > MLD Snoopi ng > B rowse MLD Snooping Counter as sho wn below: Figure 7 - 37 B[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 248 CFM Packet Co unter CCM List This windo w dis plays the C CM da tabase e ntries o n the S witch. To vie w this win do w, clic k Monitoring > CFM > CF M Packet Counter CCM List as s hown belo w: Figure 7 - 40 CFM Packet Count CCM List windo w Brow se CFM[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 249 MA C Addre ss Table This all ows th e S witch's d ynamic MAC addr ess for warding ta ble t o be vie wed. W hen the Switc h l earns a n a ssoc iation between a MAC addres s a nd a por t num ber, it m ak es an entr y into its f or war ding tabl e. Thes e e[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 250 The f unctions used in the VLAN C ounter Statistic table are desc ribed below: Paramete r Desc ription VID List (e.g .:1,4 - 6) Specifies the VL AN ID l ist that you wish to vi ew. VL AN N a m e Specif ies the VLAN N ame. VID (1 - 4 094) Spec ifies t he VLAN [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 251 Figure 7 - 46 B rowse Etherne t OAM Statisti cs window[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 252 Historical Co unter & Uti lization This folder contains t wo windo ws to view stat istics about p ack ets sent and rec eived b y the Switch an d Histor ical Utilizat ion of the CPU and m em or y. Brow se Historical Counter This wind ow is used to displa y[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 253 Brow se Historical Utilization This win dow disp lay s inf ormation regardi ng the historic al utilization of the C PU and m e mor y . The counters are set up in 15 minute and one da y inter vals. T here is a m aximum of f ive 15 minute h istorical u tilizat [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 254 Paramete r Description Log Type Choose the t ype of log t o vi ew. Ther e are two c hoices : Regular Log – Ch oose th is opt ion to view r egular switc h log e ntries , such as log ins or firm ware transf ers. Attack Lo g – Choos e this o ption to view at[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 255 Section 8 Save Services and Tools Save Configu r ation ID 1 Save Configu r ation ID 2 Save Log Save All Configura ti on File Bac k up & Restore Upload Log Fi l e Reset Download Fir mware Reboot Syst em The f our Save windo ws include: Save Configuration 1[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 256 Sav e Conf igura tion ID 2 Open the Sav e drop - down m enu at t he top of the W eb m anager and cl ick Save Configur ation ID 2 to open the follo w ing w in d o w: Figure 8 - 2 Save Configuration I D 2 window Sav e Log Open th e Save dr op - dow n m enu at t[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 257 Config ura tion Fi le Ba ck up & Res tore The Switch s upports dua l image stor age for configura tion file back up and restoration . The firm w are and con figuration images are indexe d b y ID num ber 1 or 2 . To c hange the boot f irm ware im age, us e[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 258 Figure 8 - 7 Re set System w indow Dow nlo ad Fi rmw are The f ollowing win dow is us ed to download f irm ware fo r the S witch. Figure 8 - 8 Download Firmware window Enter the S erv er IP ad dres s, the Interf ac e N am e, the path/f i le nam e and selec t [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 259 Appendix A Mitigating ARP Spoofing Attacks Using Packet Content ACL Address Res olution Protoc ol (ARP) is the standar d m ethod for finding a host' s hardwar e addres s (MAC addr ess) when onl y its IP ad dress is k nown. This protoc ol is vulner able b[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 260 address FF - FF - FF - FF - FF - FF 00 - 20 - 5C - 01 - 11 - 11 Table - 2 (Ethernet frame forma t) W h en the switch rec eives the fr a me, it will c heck the “Source Addr ess” in the Ethernet frame’s header. If the address is not in its For warding T a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 261 W hen PC B r ep lies to t he A R P req ues t, its M AC addre ss will be wr itt en into “T arget H/W Address” in th e A R P p a yload shown in Ta ble - 3. T he AR P rep ly will b e then encaps ul ated into the Ethernet frame a gain and sent back to th e se[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 262 How ARP spoofing a ttacks a ne twork ARP spoof ing, also k nown as ARP po isoning , is a m ethod to att ack an Ether net net work which m ay allo w an attack er to sniff data f rames on a LAN, m odif y the tr aff ic, or stop t he traf fic altog ether ( known [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 263 Des tination address Sou rce address Ether net t yp e H / W t yp e Protocol t yp e H/W address length Protocol address length Operation Send er H/W address Send er protocol address Target H/W address Target protocol address (6 - byte) (6 - byte) (2 - byte) (2[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 264 • Prevent A RP spoofing via pack et content ACL Concern ing the c omm on DoS att ack today ca used by the AR P sp oofing, D - Link managed switch can ef fec tively mitigate i t via its u nique Pack et Content ACL. For that r eason t he basic ACL c an onl y [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 265 Offse t Chunk Offse t Chunk 0 Off set Chunk 1 Off set Chunk 2 Off set Chunk 3 Off set Chunk 4 Off set Chunk 5 Off set Chunk 6 Off set Chunk 7 Off set Chunk 8 Off set Chunk 9 Off set Chunk 10 Off set Chunk 11 Off set Chunk 12 Off set Chunk 13 Off set Chunk 14 [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 266[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 267 Appendix B System Log Entries The f ollowing tabl e lists al l poss ible entries and t heir cor respondi ng meani ngs that will appear in the S ystem Log of this S witch . Category Even t D escripti on Log Information Severit y S yst e m System star ted up S [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 268 Log mes sage uploa d was unsucces sful Log m es sage uploa d by <cons ole | telnet | W EB | SSH | SNM P | SIM> was un succ essf ul! (Us ername: <usernam e>) W arning Interfac e Port link up Port <portNum > link up, <li nk s tate> Inf o[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 269 Spanning T ree Pr otocol is disabled Spanning T ree Pr otocol is disabled Inform ational SSH Success ful login through SSH Success ful login through SSH (Us ernam e: <usernam e>, IP: <ipaddr>, MAC: <m acaddr >) Inf ormationa l Login fai led [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 270 Login fai led throu gh Teln et authent icated b y AAA loc al method Login fai led thro ugh Tel net f r om <user IP> authent icated b y AAA loc al m ethod (Us ernam e: <usernam e>, MAC : <mac addr>) W arning Success f ul login throu gh S SH a[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 271 server <usernam e>, MAC : <mac addr>) Login fai led throu gh Teln et authent icated b y AAA ser ver Log in failed through T elnet from <userIP> authent icated b y AAA ser ver <ser verIP> (U sernam e: <usernam e>, MAC : <mac ad[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 272 Success ful Enabl e Adm in through S SH aut henticate d b y AAA none m ethod Su cces sful Ena ble Adm in throug h SSH fr om <userIP> authent icated b y AAA no ne m ethod (User nam e: <usernam e>, MAC : <mac addr>) Inform ational Success ful [...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 273 W eb(SSL) from <userIP > due to AAA s erver tim eout or impr oper conf iguration. due to AA A server timeout or im proper c onfigurat ion (Usernam e: <user nam e>,MAC: <m ac>) Login fai led throu gh Teln et from user due to AAA serv er timeo[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 274 Unauthen ticated I P addres s encounter ed and d iscar ded by IP - MAC por t binding Unauthen ticated IP - MAC a ddress and discar ded b y IP - MAC por t binding (IP: < ipaddr >, MAC: <m acaddr >, Port: <port N um >) W arning Loop - back Det[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 275 MAC - AC h ost aged out ( MAC: %s, port: %s, VID: %d) Inform ational DDM Port % d SF P %s ex ceeded the %s a larm threshold Critic al Port %d SFP %s ex ceeded the %s warning t hresho ld Warning IP and P assword Changed IP Address c hange activit y Managem ent[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 276 <portNum >, VID: <vlanID >) Login Fa il MA C- AC l ogin rej ected (M AC: <m acaddr >, port: <portNum >, VID: <vlanID >) W arning Aged out MAC - AC h ost aged o ut (MAC: <m acaddr>, p ort: <portNum >, VID: <vlanID &[...]

DGS-3 700 - 12/DGS - 37 00 - 12G Series Layer 2 Gigabi t Etherne t Switch User M anual 277 swPower StatusChg 1.3.6.1.4 .1.171. 12.11.2. 2.2.0.1 swPower Status ChgSeveri ty V2 EQUIPMENT - MIB W arning swFanFai lure 1.3.6.1.4 .1.171. 12.11.2. 2.3.0.1 swFanFail ureSeverity V2 EQUIPMENT - MIB W arning swFanRec over 1.3.6.1.4 .1.171. 12.11.2. 2.3.0.2 s [...]

278 Appendix C Glossary 1000B ASE - SX: A short las er wavel ength o n multim ode f iber optic c able for a max imum length of 500 m eters 1000B ASE - LX: A long wav elength f or a "lon g haul" f iber opt ic cabl e for a m axim um length of 10 k ilom eters 1000B ASE - T: 1000Mbps Ethernet implem entatio n over Categor y 5E cabl e. 100B AS[...]

279 L AN - L ocal Area Net work: A n e t work of c onnec ted c om putin g res ourc es (s uc h as PCs, pr inters , ser vers) c overi ng a rel ati ve l y small ge ographic area (usu all y not larger than a f loor o r building) . Charac teri zed by h igh data r ates and low e rror rat es. latency: T he dela y betwee n the tim e a de vice rec eives a p[...]

280 Appendix D Password Recover y Procedure This s ection des cribes the proc edure for resett ing pas swords o n D - L ink S witch es. Authentic ating an y user who tr ies to acces s network s is neces sar y and im portant. T he basic auth enticati on method us ed to accept qua lified user s is throug h a local lo gin, ut ilizing a Us ernam e and [...]

281 Command Parameters {<usernam e>} reset. show acc ount The show accoun t comm and displa ys all pr evious ly create d accounts.[...]