Manuel d'utilisation / d'entretien du produit DGS-3600 du fabricant D-Link
Aller à la page of 546
® Web UI Reference Guide Product Model: xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Release 2 . 8.
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch _____________ ____________ _______________ _______________ ____________ __________ Information in this document is subject to change without notice. Reproduction in any manner whatsoever w ithout the wr itten perm ission of D-Link Corporation is strictly forbidden.
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch iii FCC Warning This equipment has been tested and found to co mply with the limits fo r a Class A digital device, pursuant to Part 15 of the FCC Rules.
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Table of Contents Intended Read ers .............................................................................................................. ........................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch TFTP Services ................................................................................................................. ...........................................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch sFlow Poller Set tings.......................................................................................................... ..........................................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Basic LLDP Port Settings ...................................................................................................... ...........................................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch DHCP Server Manual Bindi ng ...................................................................................................................... ........................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch BGP Summ ary Table ............................................................................................................. ..........................................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Authentication RADIU S S erver Settings ......................................................................................... .........................................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Monitoring .................................................................................................................... ................................ 415 Device Status ....
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Browse DVMRP R outing Table .................................................................................................... ..........................................................
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Intended Readers The DGS-3600 Series Web UI Reference Guide contains inform ation for setup and m anagement of t he Switch. The t erm, “the Switch” will be used when referring to a ll five switches.
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Safety Instructions Use the follo wing safety gui delines to ens ure your o wn personal sa fety and to hel p protect y our system from potential damage. Throughout this document, the caution ic on ( ) is used to indicate cautions and precautions that you need to review and f ollow.
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch Position system cables and power cables carefully; route cables so that they cannot be stepp ed on or tripped ov er. Be sure that nothing rests on any cables. Do not m odify power cables or plugs.
xStack DGS-3600 Series Layer 3 Managed Gigab it Ethernet Switch CAUTION : The system chassis must be positively grounded to the rack cabinet frame. Do not attempt to connect power to the syst em until grounding cables are connected. A qualified electrical inspecto r must inspect completed power and safety ground wiring.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 1 Web-based Switch Configuration Introduction Login to Web manager Web-Based User Interface Web Pages Introduction All softwa re functions o f the Switch ca n be managed , configured a nd monitored vi a the em bedded web-based (HTML) inter face.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Web-based User Interface The user interface provides access to vari ous Switch configuration and managem ent wi ndows, allows you to view perform ance statistics, and permits you to graphically monitor the system status.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTICE : Any changes ma de to the Switch configuration during the current session must be save d in the Save Changes window (explained be low) or use the command line interface (CLI) command save.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 2 Administration Device Information (DGS-360 0 We b Management Tool) IP Address IP MTU Settings Stacking Port Configuration Us.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Device Information This window contains the main settings for all major functions of the Switch and appears automatically wh en you log on. To return to the Device Information window, click the DGS-3600 Web Mana gement Tool folder.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch System Contact Enter a contact name for the Switch, if so desired. Spanning Tree To configure Spanning Tree Pr otocol (STP compatible,.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP Status Use this pull-down menu to enable or disabl e Simple Network Managem ent Protocol (SNM P) on the Switch. RMON Status Remote monitoring (RMON) of the Swit ch is Enabled or Disabled here.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RIP State The user may globally enable or disable the Rout ing Information Protocol (RIP) function by using the RIP Global Settings win dow ( L3 Features > RIP > RIP Global Settings or click Detail Settings ) .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description BOOTP The Switch will send out a BOOTP broadcast request whe n it is powered up. The BOOTP protocol allows IP addresses, network masks, and default gateway s to be assigned by a central BOOTP server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Setting the Switch's IP Address using the Console Interface Each Switch m ust be assigned its own IP Ad dress, which is us ed for c ommunication wi th an SNMP network m anager or other TCP/IP appli cation (for exam ple BOOTP, TFTP) .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description IP Interface Name Specifies the name of the IP Interface to be used. IP MTU (512- 1712) The user can configure each interface’s IP MTU. If the user does not designate an MTU value when creating an interface, the default value of 1500 will be used.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch remaining switches i n the switch stack. The Pri mary Master can be manually set by assigning this S witch the highest priority (a low.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch If both the Pr imary Master and the Back up Master are remo ved, the election process is i mmediately processed and a new Prim ary Master and Backup Master are determined.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch New Box ID The new b ox ID of the select ed switch in the st ack that was sele cted in the Current Box ID field. The user may choose any number betwee n 1 and 12 to identify the switch in the switch stack.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Configuration This section c ontains inform ation for confi guring vario us attributes and properties for i ndividual p hysical ports, incl uding po rt speed and flow con trol.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following parame ters can be configured: Parameter Description Unit Use the pull-down menu to select switch unit to configure. From/To Use the pull-down menus to select the port or range of ports to be configured.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Displays the port that has been error di sabled. State Describes the current runni ng state of the port, whether enabled or disabled. Connection This field will read the uplink status of the individual ports, whethe r enabled or disabled.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Auto Negotiation Information The Port Auto Negotia tion Inform ation window displays t he current c onfigurations of a range of ports. Use the drop -down menu to select the unit you wish to view and the relev a n t port information will be displayed in the table below.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Details This windo w is used to vi ew detailed po rt inform ation for indi vidual ports o n a particular unit. Use the d rop-down m enus to sel ect the specific port of the unit you wis h to view and click Find .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Media Type This window is used to display the port media type av ailable on each unit.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Cable Diagnostics This window is used to control th e cab le diagnostics and determin e where and what kind of errors have occurred on the cable. This function is primarily used for administ rato r s to vie w tests on co pper cab les.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch User Accounts Use the User Account Management window to control user privileges. Any existing User Accounts will be disp layed in the tab le below. To view this wind ow , clic k Administration > User Accounts , as shown belo w: Figure 2- 16.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Password Encryption This window is used to set the password en cryp tion state. To view this wind ow , clic k Administration > Password E ncryption , as shown below: Figure 2- 19.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Mirror This section c ontains inform ation for m irroring port configurations, including P ort Mirror Gl obal Settings and Port M irror Settings. Port Mirror Global Settings This window i s used to set th e port mirror gl obal state.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 22. Port Mirror Settings - Add windo w To modify an existing mirror port, click the Modify button of the correspo nd ing entry, an d the window below app ears: Figure 2- 23.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTE: You cannot mirror a fast port onto a slower port. For exa mple, if you try to mirror the traffic from a 100 Mbps port onto a 10 Mbps por t, this can cause throughput problems.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch System Log The System log on the Switch can record event inform ation in its own logs, to designa ted SNMP trap receiving stations , and to t he PC connected to the console manager. The System Log folder contai ns two ma in windows System Lo g Host and System Log Save Mode Settings .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Facility Some of the operating system daemons and proc e sses have been assigned Facility value s. Processes and daem ons that have not been explicit ly assigned a Facility may use any of th e "local use" facilities or they may use the "user-level" Facility.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch System Log Save Mode Settings This window may be used to ch oose a method f or which to save the switch log to the flash memory of the Switch. To view this wind ow , clic k Administration > System Log > System Log Save Mode Settings , as shown bel o w: Figure 2- 26.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch System Severity Settings The Switch can be c onfigured to all ow alerts be logge d or sent as a trap to an SNMP a gent or bo th. The level at which the alert triggers either a log entry or a trap message can be set as well.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Command Logging Settings This window is used to enable or disable comman d logging settings. To view this wind ow , clic k Administration > Command Loggin g Settings , as sh own below: Figure 2- 29.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNTP Settings Time Settings This window is used to configure the time settings for the Switch. To view this wind ow , clic k Administration > SNTP Settings > Time Settings , as shown below: Figure 2- 30.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Day Enter the current day to update the system clock. Time in HH MM SS Enter the current time in hours, min utes, and seconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch in +/- HH:MM Mean Time (GMT.) DST Repeating Settings Using repeating mode will enable DST seasonal time adj ustment. Repeating m ode requi res that the DST beginning and ending date be spe cified using a formula.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MAC Notification Settings MAC Notification is used to monitor MAC addresses learned an d entered into the forwarding database. To globally set MAC notification on the Switch, click Admininstration > MAC Notification Setti ngs , as show n.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch TFTP Services Trivial File Transfer Pr otocol (TFTP) servi ces allow the Switch's fi rmware to be upgraded by t ransferring a new firmware file from a TFTP server to the Switch. A configuration file can also be loaded into the Switch from a TFTP server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Server IPv4 Addres s Enter the IPv4 address of the server from which to upload or download firmware and configuration and upload lo g. Server IPv6 Addres s Enter the IPv6 address of the server from which to upload or download firmware and configuration and upload lo g.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch File System Services The Switch cont ains a 15-m egabyte Flash mem ory where the user may store file s for further use on the Swit ch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch FS Information This window allows users to view the settings of the Flash Driv e in the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Directory This window allows users to view files stor ed in the flash memory of the Switch. In future releases, more th an one drive may be located in the Flash drive, but for this re lease, the only drive located on the Flash memory of the Switch is C:.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Rename The following window is used to rename files that are presen tly located in the Flash memory of th e Switch. To rename a file, simply type the path and name of the curren t file (ex.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RCP RCP (Rem ote Copy Protoc ol) is a UNIX R emote Shell service which allows files to be copi ed between a ser ver and client. RC P is an applicatio n that operates a bove the TCP prot ocols, and uses port number 514 as the TCP desti nation port.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Typ e Select to enter the inform ation in IP Address and/or User Name fields. Available options are IP Address , User Name and Both . IP Address Enter the IP address of the global RCP server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Ping Test Ping is a small program that sends ICMP Ec ho packets to the IP address you specify. The destina tion node then re sponds to or "echoes" the packet s sent from the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IPv6 Ping Test The following window is used to Ping an IPv6 addr ess. To view this wind ow , clic k Administration > Ping Test > IPv6 Ping Test , as shown below: Figure 2- 43.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IPv6 Neighbor IPv6 neighbor s are devices on t he link-loca l network that have been dete cted as being IPv6 devices.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 45. IPv6 Neighbor Settings – Add window The followin g fields can be se t or viewed: Parameter Description Interface Name Enter the name of the Interface associated with this entry, if any.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP/BOOTP Relay The DHCP/BOOTP Relay Hops Count Limit allows the maximum num ber of hops (route rs) that the DHCP/ BOOTP messages can be relayed t hrough to be set. If a pac ket’s hop count i s more than the hop count l imit, the packet i s dropped.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch determined based on opti on 61. The relay servers will be determined based on option 61 and the IPIF configured servers will be ignor ed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The Implementation of DHCP Information Option 82 The confi g dhcp_relay option_82 command configures the DHCP relay agent in fo rmation option 82 setting of the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP/BOOTP Relay Interface Settings This window allows the user to set up a server, by IP address, for relaying DHCP/ BOOTP informatio n to the Sw itch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP Relay Option 60 Default Settings This window allows the user to configur e the DHCP Relay Optio n 60 Default servers. When ther e are no m atching servers f ound for the packet based on option 60, the relay servers will be dete rmined by the default relay server setting.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 52. DHCP Relay Option 60 Add w indo w The following parameters may be configured: Parameter Description String Enter the specified string, up to a maximum of 255 alphan umeric characters.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP Relay Option 61 Settings This comm and is used to a dd a rule to t he relay server base d on option 61. The m atching rule can be based on ei ther the MAC address or by using a user-spe cified string .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP/BOOTP Local Relay Settings This window is used to conf igure the global settings of DHCP/BOOTP local r e lay. To view this window, click Administration > DHCP/B OOTP Local Relay Settings , as shown below: Figure 2- 56.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Hops Count (1-32) This field allows an ent ry between 1 and 32 to define the maximum number of router hops DHCPv6 messages can be forwarded across. The default hop count is 4 . Click Apply to implem ent the changes.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 60. DHCPv6 Relay Interfac e Settings (Add) w indow The following fiel ds are di spl ayed or can be configured: Parameter Description Interface Name Display the IPv6 relay interface name.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Layer 2 Protocol Tunneling Settings The Layer 2 Protocol Tunneling function supp orts traffic of multiple customers across service provider netwo rks.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RSPAN RSPAN (Remote Switched Port Analyzer) is a feat ure used to monitor a nd analyze the tr affic passing through ports . The character ‘R’ is short for ‘Rem ote’ which means that the mirror source ports a nd the destination port are not on the same Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following fiel ds can be c onfi g ure d: Parameter Description VLAN Name Enter the name of the VLAN to Add, Find or Delete. VID (1-4094) Enter the VLAN ID of the VL AN to Add, Find or Delete.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To modify an existing entry of its sour ce settings, click the correspond ing Modif y button in Modify Source, rev ealing the following windo w to configure: Figure 2- 65.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP Manager SNMP Settings Simple Netw ork Managem ent Protoc ol (SNMP) is a n OSI Layer 7 (Applicati on Layer) designe d specifical ly for managi ng and monitoring network devi ces.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP Trap Settings The following window is used to en ab le and disable trap settings for the SNMP function on the Switch. To view this window for configuration, click Administration > SNMP Mana ger > SNMP Trap Settin gs , as shown below: Figure 2- 66.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP User Table This window displays all of the SNMP users cu rrently configured on the Switch. To view this wind ow , clic k Administration > SNMP Manager > S NMP User Table , as shown below: Figure 2- 67.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 69. SNMP User Table Configuration w indow The following parameters can set: Parameter Description User Name Enter an alph anumeric string of up to 32 characte rs. This is used to identify the SNMP user.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP View Table This window i s used to assign vie ws to communi ty strings that defi ne which MIB objects can be accessed by a remote SNMP manager. To view this window, click Administration > SNMP Manager > SNMP View Table , as shown below: Figure 2- 70.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP Group Table An SNMP Gr oup created wit h this table m aps SNMP users (ide n tified in the SNMP User Table) to the views created in the previous m enu.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 74. SNMP Group Table Configuration w indow The following parameters can set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP Community Table Use this table t o create an SNMP comm unity string t o define the relations hip between t he SNMP manager an d an agent. The community string acts like a pass word to perm it access to the age nt on th e Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SNMP Host Table Use this window to set up SNMP trap recipients. To delete an existin g SNMP Host Table entry, click the cor responding button under the Delete heading. To view this wind ow , clic k A dministration > SNMP Manager > SNMP Host Table , as shown below: Figure 2- 76.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 78. SNMP Host Table Configuration w indo w for IPv6 The following parameters can set: Parameter Description Host IPv6 Address Type the IPv6 address of the remote management station that will serve as the SNMP host for the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Trap Source Interface Settings This window is used to co nf igure the trap source inter face settings. To view this window, click Administration > Trap S ource Interface Settings , as shown below: Figure 2- 80.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch sFlow sFlow is a feature on the Sw itch that allows u sers to monitor network traffic running through the switch to identify ne twork problems through p acket sampling an d packet count er informat ion of the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch sFlow State This field allows you to globally enable or disable sFlow. sFlow Version This di splays the current sFlow version. sFlow IPv4 Addres s This displays the sFlow IPv4 address. sFlow IPv6 Addres s This displays the sFlow IPv6 address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 84. sFlow Analyzer Add windo w The followin g fields can be se t or modified: Parameter Description Analyzer Serv er (1- 4) Enter an integer from 1 to 4 to denote the sFlow An alyzer to be added.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch sFlow Sampler Settings This window will allow u sers to configure th e Switch’s settings for taking sample packets from the network, includ ing the sampling rate and the amount of the packet header to be e xtracted.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 86. sFlow Sampler Add windo w The following fields may be set: Parameter Description Unit Select the unit to configure. From/To Choose the beginning and endin g range of ports to be configured for packet samp ling.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch sFlow Poller Settings The following windows will allow the user to configure the settin gs for the Switch’s c ounter poller.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch From/To Choose the beginning and ending range of ports to be config ured for counter polling. Analyzer Serv er ID (1-4) Enter the previously configured Analyzer Server ID to state t he device that will be receiving datagrams from the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch It is not a CS or MS of another Si ngle IP gr oup. It is connect ed to the CS t hrough the C S management VLAN After configuring one switch to operate as th e CS of a SIM group, additional switches may join the gro up through a direct connection to the Commander switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Change the SIM State to Enabled using the pull-down m enu and click Apply . The window will then refresh and the SIM Settings window will look like this: Figure 2- 90.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Topology The Topology window will be used to co nfigure an d manage th e Switch within the SIM group and requ ires Jav a script to fun ction properly on y our comput er. The Java Runtime Environment on your server should in itiate and lead you to the topology wind ow, as seen below.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To view the Topology Map, click the View menu i n the toolbar a nd then Topology , which will produce th e following window. The Topology View will refresh itself periodically (20 seconds by default).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Non-SIM devic es Tool Tips In the Topology View window, the mouse plays an important role in configuration and in viewing device information.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Group Icon Figure 2- 95. Right-Clicking a Group Icon The following options may appear for the user to configure : Collapse - To collapse the group that will be represented by a single icon .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Commander Switch Icon Figure 2- 97. Right-Clicking a Commander Icon The following options may appear for the user to configure : Collapse - To collapse the group that will be represented by a single icon .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Add to group - Add a cand idate to a group. Clicking this option will reveal the following window for the user to enter a password for authentication fro m the Candidate Sw itch before being added to th e SIM group.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 103. About w indo w NOTE: Upon this firmware release, some functio ns of the SIM can only be configured through the Command Line Interface. See the DGS-3600 Series CLI Refence Guide for more information on SIM and its configurations.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 2- 105. Configuration File Backup/Re store window Upload Log The followi ng window i s used to upl oad log fi les from SI M member switches to a specified PC.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 3 L2 Features VLAN Trunking IGMP Snooping MLD Snooping Loopback Detection Global Settings Spanning Tree Forwarding & Filte.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch VLANs can enhance performance by conserving ban dwidth, and im prove security by limiting tra ffic to specific dom ains. A VLAN is a collection of e nd nodes grouped by logic i nstead of physi cal location.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1Q VLAN Tags The figure bel ow shows the 802.1 Q VLAN tag. There a re four ad ditional octets inserted after the source MAC address. Their presence is indicated b y a value of 0x8100 in th e EtherType field.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Prior to the ad option of 802. 1Q VLANs, port -based and MAC-ba sed VLANs were in common use.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTE: If no VLANs are configured on the Switch, t hen all packets will be forwarded to any destination port. Packets with unknown source addresses w ill be flooded to all ports. Broadcast and multicast packets will also be floode d to all ports.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Static VLAN Entries This window is used t o create sta tic VLAN entries on the switch. To view this wind ow , clic k L 2 Features > VLAN > St atic VLAN Entries , as s hown bel ow: Figure 3- 5.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following fields can then be set in either the Add or Modify 802.1Q Static VLANs windows: Parameter Description Unit Select the unit you wish to configure.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch GVRP Settings This window allows you to determine whether the Switch w ill share its VLAN configuration information with other GARP VLAN Registration Protocol (GVRP) enabled switch es.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch PVID The read-only field in the 802.1Q Port Table sh ows the curre nt PVID assi gnment for each p ort, which may be manually assigned to a VLAN when cr e ated in the 802.1Q Port Settings table.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Double VLAN Double or Q-in-Q VLA Ns allow netwo rk providers t o expand t heir VLAN confi gurations to place custom er VLANs withi n a larger inclusive VLAN, which adds a new layer to the VLAN conf igur ation.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Regulations for Double VLANs Some rule s and regulat ions apply with the i mplement ation of the D ouble VLAN p rocedure. 1. All ports m ust be configure d for the SP VID and its corres ponding TPID on the Service Provi der’s edge swit ch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 11. Double VLAN State Settings window ( Enabled ) Parameters sho wn in the previ ous window ar e explained below: Parameter Description Double VLAN State Use the pull-down menu to enable or disable the Double VLAN function on this Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Access Ports These are the ports that are set as access po rts on the Switch. Access port s are for connecting Switch VLANs to customer VLANs. Gigabit ports cannot be configured as a ccess ports.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Delete Ports – Will allow users to remove ports from the Service Provider VLAN configured, using the Port List field below. Config TPID – Will allow users to configure the Tagged Protocol ID of the Service Provide r VLAN, in hex form.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following parameters can be c onfigured Parameter Description MAC Address Specifies the MAC Address of the entry you wish to Add or Find . VLAN Name Specifies the VLAN to be associated with the MAC Address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 17. Protocol VLAN Group Setting s window Click the Add button to reveal the following window for the user to configure: Figure 3- 18.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To view this wind ow , clic k L 2 Features > VLA N > Protocol VL AN > Protocol VL AN Port Settin gs , as show n below: Figure 3- 19.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 2. To make the subnet VLAN wo rk well, users must add th e ingress port to the VLAN member ports. 3. The subnet VLAN may affect the authorization protocol, su ch as 802.1X, WAC , JWAC, MA C-based access control, a nd compound authentication.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch VLAN Precedence Settings This window is used t o conf igure VLAN precedence settings. To view this wind ow , clic k L 2 Features > VLAN > Subnet VLAN > VLAN Precedence Settings , as shown below: Figure 3- 21.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Super VLAN This section is used to create a super VLAN. The specified VLAN mu st be an 802.1Q VLAN. If the specified VLAN does not exist, the operation will not be successful. NOTE: 1. If a user s pecifies the super VLAN name, the VLAN must be a n existing 80 2.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Sub VLAN Settings This windo w is used to c onfigure the sub VLANs of a s uper VLAN. A s ub VLAN only can belong t o one super VLAN and users cannot bind an IP interface to it. The maximum number of su b VLANs for a super VLAN is 80 .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Trunking Understanding Port Trunk Groups Port trunk groups are used to combine a n u mber of ports togeth er to make a single h igh-bandwidth data pip eline. The Switch supports this fu nction on all its 10/100/1000 Ethernet Ports and on all its 10G interfaces.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Link aggre gation allows several port s to be gr ouped togeth er and to act as a single l ink.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Link Aggregation This table is used to configure port trun king on the switch. To view this table, click L2 Features > Trunking > Link Aggre gation , as shown below: Figure 3- 27.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch trunking group on or off. This is useful for dia gnostics , to quickly isolate a bandwidth intensive network device or to h ave an absolute backup ag gregation group that is not under autom atic control.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IGMP Snooping Internet Group Management Protocol (IG MP) snooping allows th e Switch to recognize IGMP qu eries and reports sent be tween network stati ons or devices and an IGMP host .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 31. IGMP Snooping Settings – Edit windo w The following param eters may be viewed or m odi fi ed: Parameter Description VLAN ID This is the VLAN ID that, along with the VLAN Name, identifies the VLAN for whi ch to modify the IGMP Snooping Settings.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 260 . Router Timeout (1- 16711450 sec) This is the maximum amount of time in seconds a router is kept in the forwarding ta ble without receiving a membership report. The default is 260 .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Router Port Settings A static route r port is a port that has a multicast router attached to it.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 33. Router Port (Modify ) window The following parameters can be set: Parameter Description VID (VLAN ID) This is the VLAN ID that, along with the VLAN Name, identifies the VLAN where the multicast router is attached.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IGMP Snooping Static Group Settings This table is used to configure th e current IGMP snoopi ng static gro up inform ation on the Swit ch. To view this wind ow click L2 Features > IGMP Snooping > IGMP Snooping Static Grou p Settings , as s hown below: Figure 3- 34.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch PortList The ports that will belong to this group. Acti on Specifies to Add or Delete the IGMP Static group entry.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ISM VLAN Settings In a switching environment, multiple VLANs may exist. Every time a multicast query passes through the Switch, the sw.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Enter a name for the ISM VLAN into the VL AN Name field and choose a VID between 2 and 4094 . Entries in these two fields must not have been previously configur ed on the switch or an e rror message will be prompted to the user.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 40. IGMP Snooping Multicast VLAN Group List Settings Enter an existing Ra nge Name and click Add .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Limited Multicast Address Range Settings This window allows the user to speci fy which multicast address(es) reports are to be received on specified ports on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MLD Snooping Multicast List ener Discovery (MLD) Snoopi ng is an IP v6 function us ed similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 45. MLD Snooping Settings - Edit w indow The following param eters may be viewed or m odi fi ed: Parameter Description VLAN ID This is the VLAN ID that, along with th e VLAN Name, identifies the VLAN for whi ch to modify the MLD Snooping Settings.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch sec) table as a listening node of a multicast group without the Switch receiving a node listener report. The user may specify a time between 1 and 16711450 with a default setting of 260 seconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 47. Router Port windo w (Modify) The following parameters can be set: Parameter Description VID (VLAN ID) This is the VLAN ID that, along with the VL AN Na me, identifies the VLAN where the MLD multicast router is attached.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Loopback Detection Global Settings The Loopback Detection funct ion is used to detect the loop cr eated by a specific port. This f eature is used to temporarily shutdown a port on the Swi tch when a CT P (Configurat ion Testing Prot ocol) packet has been looped back to the swit ch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following parameters can be c onfigured. Parameter Description Loopdetect Status Use the drop-down menu to enable or dis able loopback detection. The default is Disabled. Loopdetect Trap None – The trap will not be sent in any situation.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Spanning Tree This Switch supports th ree versions of the Sp ann ing Tree Protocol: 802 .1D-1998 STP, 802.1D-20 04 Rapid STP, and 802.1Q-2 005 MSTP. 802.1D-1998 STP will be familiar to most networking professio nals.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch states disabled, blocking an d listening use d in 802.1D- 1998 an d creates a s ingle state Discarding .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch When the STP Loopback Detection fun ction is enabled, the Switch will be protected again st a loop occurring between switches.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 50. STP Bridge Global Settings w indow - MSTP Figure 3- 51. STP Bridge Global Settings – STP Compatible w indo w NOTE: The Hello Time cannot be longer than the Max. Age. Otherwise, a co nf iguration error will occur.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch STP Version Use the pull-down menu to choose STP compatible , RSTP , and MSTP . RSTP is the default.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 52. MST Configuration Identification w indo w The window above contains t he following information: Parameter Description Configuration Name A previously configured name set on the Swit ch to uniquely identify the MSTI (Multiple Spanning Tree Instance).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch VID List (1-4094) This field is used to specify the VID rang e from configured VLANs set on the Switch. Supported VIDs on the Switch range from ID numbe r 1 to 4094 . Click Apply to im plement change s made.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Typ e This field allo ws the user to choose a desi red method for altering the MSTI settings. The user has four choi ces. Add VID - Select this parameter to add VIDs to the MSTI ID, in conjunction with the VID List parameter.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Internal cost (0=Aut o) This parameter is set to represent the relative cost of forwarding packets to specified ports when an interface is sele cted within a STP instance. The d efault setting is 0 (auto).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch CIST (default MSTI). Typ e The Type fiel d in this window will be permanently set to Set Priority Only . Priority (0-61440) Enter the new priority in the Priority field. The user may set a priority value be tween 0 and 61440 .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch From/To A consecutive group of ports may be configured starting with the selecte d port. External Cost (0=Aut o) This defines a metric that indicates the relative cost of forwarding packets to the specified port list.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTE: If you want to enable Forwarding BPDU on a per po rt basis, the following settings must first be in effect: 1. STP must be globally disabled and 2. Forwarding BPDU must be globally enabl ed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Forwarding & Filtering The Forwarding & Filtering section is made up of Unicas t Forwarding, Multicast Forwarding, and Multicast Filterin g Mode. Unicast Forwarding The following window is used to set up unicast forwarding on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Multicast Forwarding The following window is used to set up multicast forwarding on the Switch. To view this wind ow , clic k L 2 Features > Forwarding & Filtering > Multicast Forwarding , as show n below: Figure 3- 62.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Multicast Filtering Mode To view this wind ow , clic k L 2 Features > Forwarding & Filtering > Multicast Filtering Mode , as shown below: Figure 3- 64.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch LLDP The Link Laye r Discovery Protoc ol (LLDP) all o ws stations attached to a LAN to advertise, to other stations attached to the sa.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following parameters can be set: Parameter Description LLDP Operation State When this function is Enabled , the switch can start to transmit LLDP packet s and receive and process the LLDP packets.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Basic LLDP Port Settings The following window is used to set up LL DP on indivi dual port(s ) on the Switch . To view this wind ow , clic k L 2 Features > LLDP > Basic LLD P Port Set tings , as show n below: Figure 3- 66.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Admin Status Use the drop-down menu to choose: TX_Only , RX_Only , TX_and_RX , or Disabled . Port Description Use the drop-down menu to toggl e Port Description betwee n Enabled and Disabled .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1 Extension LLDP Port Settings The following window is used to set up 802.1 Extension LLDP on individual port(s) on the Switch. To view this wind ow , clic k L 2 Features > LLDP > 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch From/To Select a port or group of ports using the pull-down m enus. Port VLAN ID Use the drop-down menu to toggle Port VLAN ID between Enabled and Disa bled . Protocol VLAN ID Use the drop -down menu to toggle among VLAN I D , VLAN Name , and All .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.3 Extension LLDP Port Settings The following window is used to set up 802.3 Extension LLDP on individual port(s) on the Switch. To view this wind ow , clic k L 2 Features > LLDP > 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch LLDP Management Address Settings The followin g window is used t o set up LLDP m anagement address sett ings on the Swi tch. To view this wind ow , clic k L 2 Features > LLDP > LLDP Management Address Settings , as shown below: Figure 3- 69.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch LLDP Statistics The following window is used to display LLDP statistics. To view this wind ow , clic k L 2 Features > LLDP > LLDP Statistics , as shown below: Figure 3- 70.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch LLDP Management Address Table The followin g window is used t o make entrie s to and displ ay the LLDP Managem ent Address Table. To view this wind ow , clic k L 2 Features > LLDP > LLDP Management Address Table , as s hown below: Figure 3- 71.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch LLDP Remote Port Table The following window is used to d isp lay the LLDP Remote Port Brief Table. To view this wind ow , clic k L 2 Features > LLDP > LLDP Remote Port Table , as shown below: Figure 3- 73.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Q-in-Q Q-in-Q is desi gned for service pr oviders to carry t raffic from m ultiple users across a network. Q -in-Q is used to m aintain cust om er specific VLAN and Lay er 2 protocol configurations eve n when the same VLAN ID is bein g used by diffe rent custom ers.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch dynamically registered VLAN entries will be cleared, GVRP will be disabled. According 802.1ad, the address 01-80-c 2-00-00-08 will b e used for STP in the provider’s network. So the user shall disable STP first, and then use the new ad dress for STP state machine.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch VLAN Translation Settings The VLAN translation settings translates th e VLAN ID carried in t he da ta packets it receives from private networks into those used in the Service Provid ers netwo rk.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ERPS The Switch supp orts ITU-T G.80 32 Ethernet Ri ng Protection Swi tching (ERPS ) to provide a rel iable mechanism of malfuncti on recovery in an Ethernet ring topol ogy network. ERPS Global Settings This windo w is used to e nable global ERP S function on the Switc h.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Clicking t he Add button will reveal the following window to configu re: Figure 3- 78. ERPS RAPS VLAN Settings – Add window Enter an R-APS V LAN ID in the field provided and click Apply to make a new entry for the ERPS RAPS VLAN Table.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch East Click to specify the port a s the east ring port. To sp ecify as a Virtual Channel, tick the che ck and toggle from Port to Virtual Channel . East Port If Port is set above, enter the port to be configured.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 3- 80. ERPS RAPS Sub Ring Settings – Edit window The following fields can be set: Parameter Description Sub-Ring R-APS VLAN Action Toggle between Add or Delete . Add connects the sub-ring to another ring.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DULD Settings The Switch features a D-Link Unidirectional Link Detection (DULD) module. The unidirection al link detection provides a mechanism that can be used to detect unidirectio nal link for Et hernet switches whose PHYs do not support unidirection al OAM operation.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NLB Multicast FDB Settings The Switch supports Network Lo ad Balancing (NLB). This is a MA C forwarding c ontrol for s upporting the Microsoft server load balancing application where multiple servers can share the same IP address and MAC address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 4 L3 Features Interface Settings MD5 Key Settings Route Redistribution Settings Multicast Static Route Setting s Static/Defaul.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch larger pool of IP ad dresses was requir ed. IPv6 h as addressed that issue, along with other issues th at enhance routi ng over the network, provide better security and improv e Qu ality of Service for Internet us ers.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch efficiently once the flow class has been id entified and t he rest of the pac ket header no l onger needs to be f ully processed, ju st t he flow label and the source address. All flow label packets must ha ve identical source an d destination ad dresses.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch different than any othe r fragmente d packet recently se nt that include the sam e so urce and destination addr ess . The original pac ket is divided i nto two part s, a fragment able part and an unfragment able part.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Anycast – The anycast address will send messages to the nearest node of a particular group. This ad dress is assigned to multiple interfaces in the group but only the node with the closest proximity will receive the message.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 3. Beyond the scope of the source address, when the m ulticast scope of the source addr ess is sm aller than the scope of the destination ad dress (Code 2) 4. The address is unreachable (C ode 3) 5.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Interface Settings The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 3. IPv4 Interface Settings – Edit w indo w Enter a name for the new interface to be added in the Int erface Nam e field (if editing an IP in terface, the Interface Name will already be in the t op field as seen in the window above).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTE: The Switch's factory default IP addre ss is 10.90.90.90 with a subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0. IPv6 Interface Settings The following window is used to setup IPv6 in terfaces and addresses for the switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 6. IPv6 Interface Settings – Edit w indo w The following fields may be viewed or modified.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch (ms) Solicitation packets to be sent out over the lo cal network. Thi s is used to discover IPv6 neighbors on the local link. The user may select a time between 0 and 6553 5 milliseconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RA Max Router AdvInterval (sec) Used to set the maximum interval time between the dispat ches of router advertisements by this interface over th e link-local network. This entry mu st be no less than 4 seco nds (4000 milliseconds) and no more than 1800 seconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MD5 Key Settings This window allows the entry of a 16-character Message Digest − version 5 (MD5) key that can be used to a uthenticate every packet exchanged between OSPF routers.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The followin g parameters m ay be set or viewed: Parameter Description Dst. Protocol Allows for the selection of the protoc ol for the destination device. Choose among RIP , OSPF , and BGP.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Multicast Static Route Settings This window is used t o create an IP mu lticast static route co nfiguratio n entry. To access the Multicast Static Route Settings window, click L3 Features > Multicast Static Route Settings , as sh own below: Figure 4- 11.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Static/Default Route Settings The Switch supports static routing for IPv4 and IPv6 formatted ad dressing.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch f Figure 4- 14. IPv4 Static/Defau lt Route Settings – Add w indow The following fields can be set: Parameter Description IP Address Allows the entry of an IP a ddress that will be a static entry into the Sw itch’s Routing Table.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Interface The IP Interface where the st atic IPv6 route is created. Next Hop Address The corresponding IPv6 addre ss for the next hop Gateway address in IPv6 format.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Route Preference Settings Route Preference is a way for routers to select the best path whe n there are two or more different route s to the same destinati on from two di fferent routing protocols.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 17. Route Preference Settings w indow The following fields can be set: Parameter Description RIP (1-999) Enter a value between 1 and 999 to set the route preference for RIP.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Static ARP Settings Address Resol ution Protocol (ARP) is a T CP/IP protoc ol that convert s IP addresses i nto physical add resses. This table al lows network m anagers to view, define, modi fy and delete ARP informat ion for specific de vices.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Gratuitous ARP Settings An ARP announcement (also know n as Gratuitous ARP) is a pack et (usually an ARP Request) cont ai ni n g a valid SHA and SPA for the host which sent it, with TPA equal to SPA.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Policy Route Settings Policy Based routing is a method us ed by the Switch to give specified devices a clea ner path to the Internet.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 25. Policy Routing – Add w indo w Adjust the following parameters and click Apply to set the new Policy Rou te, which will be displayed in the Po licy Routing Settings window.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ECMP Algorithm Settings ECMP algorithm settings allow the user to set the ECMP load balance algorithm which makes it effective for ECMP routing. ECMP routing can be adopted by either OSPF dy namic routes o r by static rout es which are confi gured with equal c ost.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP Tunnel Settings The Switch supports IP tunneling. The id ea beh ind this feature is to be able to integrate IPv6 into and co exist with existing I Pv4 networks.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Interface Na This is the IPv6 tunnel inte me rface name. Interface Admin State Enable or disable IP tunneling. Mode Select from Manual , 6to4 , or ISATAP . IPv6 tunnel as an IPv6 manual tunnel on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RIP The Routing Information P rotocol is a distance-vector routing protoc ol. There are t wo types of net work devi ces running RIP - active and passive. Active devices advertise their routes to ot he rs through RIP messages, while passive devices listen to these messages.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RIP 1 Message RIP is not limited to TCP/IP. Its address format can support up to 14 octets (when using IP, the remaining 10 octets must be zeros). Othe r network prot ocol suites can be spe cified in the Fam ily of Source Netwo rk field (IP has a val ue of 2).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 31. RIP Interface Settings w indow Click the hyperlinked name of the interface to configure the se ttings for RIP, whic h will give access to the following window: Figure 4- 32.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RIPng The Switch su pports Routi ng Informat ion Protocol next generatio n (RIPng). RIP ng is a rout ing protocol that exchan ges routing informat ion used to comput e routes and i s intended for IPv6-base d networks.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RIPng Interface Settings This window allows u sers to co nfigure RIPng interface settings. To view this wind ow , clic k L 3 Features > RIP > RIPng > RIPng In terface Settings , as shown below: Figure 4- 34.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPF The Open Sh ortest Path First (OSPF) routi ng protocol uses a link-stat e algorithm to determine ro utes to network destinations. A “link” is an interface on a router and the “state” is a d escri ption of that interface and its relationship to neighboring route rs.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 36. Constructing a Shortes t Path Tree Figure 4- 37. Constructing a Shortes t Path Tree The diagram above shows the network from th e viewpoint of Router A. Ro uter A can reach 192.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Rou ter A Rou ter B Route r C 128. 21 3. 0.0 19 2. 213. 11. 0 222. 211. 10. 0 0 10 10 5 10 Figure 4- 38. Constructing a Shortes t Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch network. Border Routers also hav e the responsibility of distributin g routing information from the Autonomous Syste m Border Router in o rder for router s in the networ k to get and m aintain routes t o other Auton omous System s.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Authentication − OSPF allows for the configuration of a password fo r a specific area. Two rout ers on the same segm ent and belonging to the sam e area must also have the sa me OSPF password before th ey can becom e neighbors.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Database Descripti o n packet Link-State Request packet Link-State Update packet Link-State Acknowledgment packet OSPF Packet Header Every OSPF packet is prece ded by a comm on 24-byte header.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Hel lo P ack et 1 Pac ket Length Router I D Area ID Ver sio n No. Ch e c k sum Au th ent ic a ti on T y pe Au th ent ic a ti on Au th .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Database Desc ription Packet Ver sio n N o. 2P a c k e t L e n g t h Router I D Area ID Au th ent ic a ti on Ty pe Au th ent ic a ti on Au th ent ic a ti on Checksum Op ti on s DD Sequence No.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Ver sio n N o. Pac ket Len gth Route r ID Are a ID Au th e nt ic a tion Ty pe Au th e nt ic a tion Authenticat ion Checksum Link -Sta te Req uest Pa c ke t 3 Link-S ta te T ype Link-State ID Advertising Router Figure 4- 42.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Depending on the state of the se nding interface and the sour ce of the advertisemen ts be ing acknowledged, a Link-State Acknowledgment packet is sent eith er to the multicast address AllSPFRouters, to the multicast address AllDRouters, or as a unicast packet.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Lin k-S tate Adver tis ement Header Link-State Age Op ti ons L in k-S ta te Ty pe Lin k-State ID Ad v ert is in g Ro ut er Link -State Se quence Number Link-State Checksum Le ng th Figure 4- 45.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Link -S ta te A ge Opt io ns Lin k-S ta te Type Link -S ta te I D Ad v ert is ing R o ut er Link-Stat e Sequen ce Num ber Link-S tate C heck sum Le ngth Rou te rs L inks A dve rtis em ent s Rese r ved R ese rved N umb er of L inks Link ID Link Da ta Typ e No.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Link ID Identifies the object that this router link co nnects to. Value depen ds on the link’s Type. When connecting to an obj ect that also origin ates a link state a dvertisement (i.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Field Description Network Mask The IP address mask for the network. Attached Router The Router IDs of each of the routers attached to the network. Only those routers that are fully adjacent to the Designated Route r (DR) are listed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch when no specific route exists to the desti nation. When descri bing a default route, the Link State ID is always set with the Def ault Destination address (0.0 .0.0) and the Network Mask is set to 0.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 50. NSSA Area example The NSSA ASBR (Not So Stubby Area Au tonomous System Border Router) is receiving Exte rnal Route information and translating it as an LSA Type-7 packet that will be distribu ted ONLY to switches within th e NSSA (Area 2 in the examp le abov e).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Field Description Link State Packet Header This field will hold information conce rning information regarding the LS Checksum, length, LS sequence number, Advertising R outer, Link State ID, LS age, the packet type (Type-7), and the options field.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPF The Switch supp orts Open Shortest Path First (OSP F), a dynamic ro uting protocol used in Internet P rotocol (IP) net works. OSPF Global Settings This window allows OSPF to be enabled o r disabled on the Switch − without chang ing the Switch’ s OSPF configu ration.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPF Area Settings This window allows the configuration of OSPF Area IDs and to designate these areas as Normal , Stub or NSSA. Normal OSPF areas allow Link-State Database (LSDB) advertisem ents of routes to networks that are external to the a rea.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Stub Summary Displays whether or not the selected Area w ill allow Summary Link-State Advertisements (Summary LSAs) to be imported in to the area from other area s.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPF Interface Settings This window is used to set up OSPF interfac es. If there are no IP inte rfaces configur ed (besides t he default System interface), only the System interface settings will appear listed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Interface Name Displays the IP interface previ ously configured on the Switch. IP Address Displays the IP address of the IP interface to be edited. Network Medium Typ e Displays the network medi um type of the IP interface to be edited.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPF Virtual Link Settings This window shows the current OSPF Virtual Interface Settings. There are no virt ual interface settings configured by de fault, s o the first time this table is viewed there will be no interfaces listed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Password/Auth. Key ID Enter a case-sensitive pa ssword for simple authori zation or enter the M D5 key you set in the MD5 Key Settings window. Transmit Delay The number of seconds re quired to transmit a lin k state update over this virtua l link.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Area ID Allows the entry the OSPF Area ID for which the routing information will be aggregated. This Area ID must be previously defined on the Switch. Network Number Sometimes called the Network Address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPFv3 The Switch su pports Open Sho rtest Path First (OSPF) versi on 3, a dynam ic routing prot ocol used in Internet Protoc ol (IP) versi o n 6 networks.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 64. OSPFv3 Area Table w indo w To sear ch for an entr y by Area ID, click the Find button. To display all Area entries, click the View All butt on. To remove an entry from the table, click its corresponding under the Delete heading.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Clicking t he Modify button on th e OSPFv3 Area Table window will reveal the following window to configure: Figure 4- 66.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPFv3 Interface Settings This window is used to set up OSPFv3 interfaces. To change se ttings for an existing IP interface, click on t he hyperlinked nam e of the interface to see the configuration window for that interface.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Interface Name Displays the entry of an IP interface previously configured on the Switch. Area ID Allows the entry of an OSPFv3 Area ID configured above. Priority (0-255) Allows the entry of a number between 0 and 255 representing the OSPFv3 priority of the selected interface.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPFv3 Virtual Interface Settings This window shows the current OS PFv3 Virtual Interface Settings. There are no vi rtual interface settings configured by default, so the first time this table is viewed there will be no i nterfaces listed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 71. OSPFv3 Virtual Interface Settings - Edit window Configure the following paramet ers if you are a dding or ch anging an O.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch OSPFv3 Area Aggregation Settings Area Aggregation allows all of the routing information that may be contained within an area to be aggregated int o a summary LSDB advertisement of just the network address and subnet mask.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 74. OSPFv3 Area Aggregation Settings - Edit window Specify the OSPFv3 aggregation settings and click the Apply button to add or change the settings. Th e new settings will appear listed in the OSPFv3 Area Aggre gation Settings window .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP Server For this release, the Switch now has the capability to act as a DHCP server to devices within its locally attached network.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP Server Exclude Address Settings The following window will allow the user to set an IP address, or a range of IP addresses that are NOT to be included in the ra nge of IP addresses that the Switch will allot to clients requesting DHCP service.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 78. Config DHCP Pool w indow The followin g parameters m ay be configure d or viewed. Parameter Description Pool Name Denotes the name of the DHCP pool for which you are cu rrently adjusting the parameters.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Default Router Enter the IP address of the default router for a DHCP Client. Users must configure at least one address here, yet up to three IP addresses can be configured for this field.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP Server Dynamic Binding The following window will allo w users to view dynamically bound IP addresses of the DHCP server . Th ese IP addresses are ones that were allott ed to clients on the local networ k and are now bound to the de vice stated by its M AC address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCP Server Manual Binding The following windows will allow users to view and set manual DHCP entries. Manual DHCP entries will bind an IP address with the MAC address of a client with in a DHCP pool.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCPv6 Server DHCPv6 Server Global Settings This windo w is used to confi gure DHCPv6 serve r global setti ngs, including specify ing the ran ge of IPv6 netwo rk addresses for the DHCPv6 po ol.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The followin g parameter m ay be configured: Parameter Description Pool Name Enter the pool name. Click Apply to set the entry. To remove an entr y from the table, click its corresponding under the Delete headi ng.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Addres s End Network Addres s The ending IPv6 network addres s of the DHCPv6 pool. Domain Name Enter the domain name. The domain name configured here will be used as the default domain name by the client.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCPv6 Server Manual Binding Settings This window is used to configure DHCPv6 server manual bind ing settin gs. An address binding is a mapp ing between the IPv6 address and DUI D (A DHCPv6 U nique Identifie r for a DHCPv6 par tici pant) of a client.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCPv6 Server Dynamic Binding Settings This windo w is used to di splay the DHC Pv6 dynam ic binding inf ormation. Ent ering the com mand without t he pool nam e will display all i nformation rega rding DHCPv6 dynamic bind ing on the swit ch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCPv6 Server Interface Settings This windo w is u sed to enab le the D HC Pv6 server global state on the Swit ch. To view this wind ow , clic k L 3 Features > DHCPv6 Server > DHCPv6 Server Interface Settings , as shown bel o w: Figure 4- 91.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DHCPv6 Server Excluded Address Settings This window is used to conf igure the reserved IPv6 addresses on the DHCPv6 server . To view this wind ow , clic k L 3 Features > DHCPv6 Server > DHCP v6 Server Excluded Address Settings , as show n below: Figure 4- 93.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Filter DHCP Server The Dynami c Host Configuration Pr otocol (DHCP) a utomates the assign ment of IP addresses, s ubnet masks, defaul t routers, and other IP pa rameters.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 96. Filter DHCP Server Port State Settings w indo w The following parameters may be configured. Parameter Description State Enable or disable the Filter DHCP Server Port State Settings.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DNS Relay Computer use rs usually prefer t o use text name s for computers for whic h they may want to o pen a connection.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Secondary Name Server Allows the entry of the IP address of a secondary domain nam e server (DNS). DNSR Cache Status This can be toggled between Di sabled and Enabled. This determines if a DNS cache will be enabled on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DNS Resolver The DNS Resolver provides a solution to tran slate the domain name to an IP address for application on the switch itself. DNS Resolver Global Settings This window is used to conf igure the DNS resolver state and name server ti meout.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 101. DNS Resolv er Static Name Server Settings w indo w The following fields can be set: Parameter Description Primary Tick the check box to indicate the name server is a prim ary name server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 104. DNS Resolv er Static Host Name Settings window The following fields can be set: Parameter Description Host Name Enter the host’s host name. IP Address Enter the host’s IP address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 106. VRRP Global Settings windo w The following fields can be set: Parameter Description VRRP Stat e Use the pull-down menu to ena ble or disable V RRP globally on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 108. VRRP Virtual Router Settings – Add w indo w Or, the user may click the hyperlinked In terface Nam e to view the same window: The following parameters m ay be set to conf igure an existing or new VRRP interface.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch address of a real device on the network. If the c onnection from the virtual rou ter to this IP address fails, the virtual router will autom atically disabled. A new Master will be elected from the backup routers partic ipating in the VRRP group.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Virtual MAC Address The MAC address of the device that hol ds the Virtual router. Virtual Router State Displays the current status of the virtual router . Possible states include Initialize, Master and Backup.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch This window displays the fo llowing information: Parameter Description Interface Name The name of a previously config ured IP interface used to create a VRRP entry is displayed. This IP interface must have been a ssigned to a VLAN on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch VRRP Authentication Settings This window is used to set the authentication for each Interface configur ed for VRRP. This authentication is used to identify incoming message packets received by a rout er.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP Multicast Routing Protocol The functions supporting IP multicasting are fou nd in L3 Features > IP Multi cast Routing Protocol .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The states a computer will go through to join or to leav e a multicast group are shown below: Figure 4- 115. IGMP State Transitions IGMP Version 3 The current release of the Switch now implements IGMPv3.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Timers As previously mention ed, IGMPv3 incorporat es filters to include or exclude sou rces. These filters are kept updated using timers . IGMPv3 utilizes two types of timers, one for the group and one fo r the source.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch This window allows the configuration of IGMP for each IP interface configured on t he Switch. IGMP can be configured as Version 1, 2 or 3 by toggling t he Version fi eld using the pull-down m enu.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 4- 119. IGMP Check Subscriber Source Net work Settings (Edit) window DVMRP Interface Configuration The Distance Vector Multicast Routing Prot ocol (DVMRP) is a hop-base d method of building m ulticast delivery trees from multicast sources to all nodes of a networ k.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch DVMRP Interface Settings This window allows the Distance- Vector Multi cast Routing Prot ocol (DVM RP) to be c onfigured for each IP int erface defined on the Switch. Each IP interface configu red on the Switch is displayed in the below DVMRP Interface Settin gs window.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch PIM PIM or Prot ocol Indepe ndent Multi cast is a method of forwarding t raffic to mu lticast groups over the network using a ny pre- existing u nicast routing p rotocol, such a s RIP or OSPF, set on routers wit hin a multi cast network.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch sources to determine which si ngle router wi ll send the receiver the n ecessary multicast data. The sour c e with the shortest metr ic (hop count) will be elected as the primary multicast source.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Last Hop SPT Switchover This field is used by the last hop router to dec ide wh ether to receive multicast data from the shared tree or switch over to the shortest p ath tree.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Interface Name This read-only field denotes the IP inte rface selected to be configured for PIM. IP Address This read-o nly field denotes the IP addre ss of the IP interface selected to be configure d for PIM.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Candidate BSR Hash Mask Len (0- 32) Enter a hash mask length, which will be used wi th the IP address of the ca .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch PIM Candidate RP Settings The following window is used to set the Parameters for this Switch to beco me a candidate RP. To view this window, click L3 Features > IP Multicas t Routing Protoc ol > PIM > PIM C andidate RP Setti ngs , as shown below: Figure 4- 129.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description IP Address Enter the IP address of the device to be adde d as a Candidate RP. Subnet Mask Enter the co rresponding subnet mask of t he device to be add ed as a Candidate RP.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description RP Address Enter the IP address of the RP for which t he data part will be included when calculating checksum for registering packets to the RP. Click Apply to add the RP into the checksum including the data list.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To configure BGP state settings on the Switch , complete the following fields: Parameter Description BGP State Settings BGP State Use the drop-down menu to enable or disable the Border Gateway Proto col state.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Bestpath Option State Used to enable or disable AS Path Ignore, Compare Route r ID, Med Confed, MED Missing As Worst, and Compare Confed Aspath. The default is Disabl ed . Default Local Preference (0- 4294967295) Enter a default local preference between 0 and 4294 967295 .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description IP Address Enter the IP network address to be a ggregated. Netmask Enter the netmask of the IP network address to be aggre gated. Summary Only Tick this check box to stop more sp ecific ro utes from being adve rtised.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Dampening Settings This window is used to configure the Bord er Gateway Protocol (BGP) process’s dampening settings . The purpose of this feature is to eliminat e the dampening o f routes and th us to avoid unstable networks caused by flap ping routes.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Peer Group Settings This windo w is used to c reate or delete a Bo rder Gateway Prot ocol (BGP ) neighbor. To view this window, click L3 Features > BGP > BGP P eer Group Settings , as shown bel ow: Figure 4- 137.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Neighbor Settings This window is used to configure a Bord er Gateway Protocol ( BGP) neighbor. To view this window, click L3 Features > BGP > BG P Neighbor Settings , as shown below: Figure 4- 138.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Neighbor Description Settings IP Address Enter the IP address of the BGP spea king neighbor. Peer Group Name Enter the name of the BGP peer group. Acti on Toggle betwe en Description and Clear De scription .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Neighbor General & Timer Settings This window is used to conf igure the BGP neighbor’s general and timer setting s . To view this window, click L3 Features > BGP > BGP Neighbor General & Timer Settings , as s hown below: Figure 4- 139.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch setting is Disabled . If no number is supplied, the default value of three times is use d. Allowas In Value (1- 10) Enter an Allowas In Value between 1 an d 10 . Default Originate State Enable or disable the default originate function.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Neighbor Map & Filter Settings This window is used to configure BGP neighbor map and filter settings. To view this window, click L3 Features > BGP > BGP Neighbor Map & FilterSettings , as shown below: Figure 4- 140.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP Address Enter the IP address of the neigh bor to be configured. Peer Group Name Enter the peer group to be configured. Filter List Type Toggle between In and Out to apply to either inbound or outbound traffic.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To configure BGP reflector settings on the Switch, complete the following fields: Parameter Description BGP Reflector Settings Route Reflector Cluster ID Enter the IP address of the cluster ID.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To configure BGP confederation setting s on the Switch , complete th e fo llowing fields: Parameter Description Confederation Identifier (0-65535) Enter an Autonomous System numb er which is used to specify a BGP confe deration.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Community List Settings This window is used to co nf igure the matching rules for a BGP community list. To view this window, click L3 Features > BGP > BG P Community List Se ttings , as shown bel ow: Figure 4- 144.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Clear This window is used to reset the Border Gateway Pr o tocol (BGP) conn ections using hard or so f t reconfigurations . To view this window, click L3 Features > BGP > BGP Clear , as show n below: Figure 4- 146.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Summary Table To view this read-only window, click L3 Features > BGP > BGP Summary Tables , as show n bel o w: Figure 4- 147.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Route Table To view this window, click L3 Features > BGP > BGP Route Table , as shown below: Figure 4- 148.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP Address This is used to displ ay the host route that matches the specified IP address. Netmask This field works with the above IP address and is used to display the route that matches the specified network address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Dampened Route Table This read-only wi ndo w di s pl ay s BGP dam pened route informat i on. To view this window, click L3 Features > BGP > BGP Dam pened Route Table , as s hown below: Figure 4- 149.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Flap Statistics Table This read-only window displays BGP flap statistics information. To view this window, click L3 Features > BGP > BGP F lap Statistics Table , as s hown below: Figure 4- 150.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch BGP Neighbors List To view this window, click L3 Features > BGP > BGP Neighbors List , as shown below: Figure 4- 151.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP Route Filter IP Prefix List Settings This window is used t o create an d configur e an IP prefix list. To view this window, click L3 Features > IP Route Filter > IP Prefix List Settings , as shown bel o w: Figure 4- 152.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP Standard Access List Settings This window is used t o create an access list used to filter routes. To view this window, click L3 Features > IP Route Filter > IP Standard Access List Settin gs , as shown below: Figure 4- 153.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 5 QoS 802.1p Settings Bandwidth Control HOL Prevention Settings Schedule Settings The Switch supports 802.1p priority queu ing Quality o f Service. The following section discusses the imple mentation of QoS (Quality of Service) and benefits of using 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch the Switch. Then in turn, the administrator will set a prio rity for this queue so that will be emptied before any o ther packet is forwarded.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1p Settings The 802.1p Sett ings section incl udes 802.1p Defa ult Priority Settings and 80 2.1p User Priorit y Settings. 802.1p Default Priority Settings The Switch allows the assignment of a default 8 02.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 5- 3. 802.1p User Priority Settings w indo w Once a priori ty to the port groups on t he Switch has bee n assigned, user s can then assign this C lass to each of t he eight le vel s of 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Bandwidth Control The Bandwidth Control section in clud es Bandwidth Control Settings an d Per Queue Bandwith Control Setting s. Bandwidth Control Settings The bandwidth control settings are used to place a ceiling on the transm itting and receiving data rates for any selected port.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Per Queue Bandwidth Control Settings This window i s used to sets t he bandwidth cont rol for each speci fic queue on specified ports .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Click Apply to set the per queue bandwidth control for the selected po rts. Results of configured pe r queue ba ndwidth settings will be displayed in the Queue Ba ndwidth Tabl e. HOL Prevention Settings This windo w is used to e nable or disable Head of Line ( HOL) preventi on.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 5- 7. QoS Output Scheduling Setting s window The followin g values may be assi gned to the QoS cl asses to set the sche duling. Parameter Description Unit Select the unit to configure.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch the maxim um number of pac kets a given pr iority class of servi ce can transm it per weighted round-robin (WRR ) scheduling cy cle to be selected. This provides f or a controllabl e CoS behavior w hile allowing ot her classes to empt y as well.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch QoS Scheduling Mechanism Settings Changing the output schedulin g used for the hardware queues in t he Switch can cust omize QoS. As wit h any changes to QoS implem entation, careful consideratio n should be given to h ow netw ork traffic in lower priority qu eues is affected.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 6 ACL Time Range Access Profile Table ACL Flow Meter CPU Interface Filtering Time Range The Time Range window is used in conju.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Click Apply to implement changes made. Currently configured entries will be displayed in the Time Range Information tab le in the bottom half of the w indow shown above.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch header. Select IP to instruct the Switch to examine the IP address in each frame's header. Select Packet Content Mask to specify a mask to hide the content of the packet header. Select IPv6 to instruct the Switch to exami ne the IPv6 address in each frame's header.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following parameters can be set, for IP: Parameter Description Profile ID (1-14) Type in a unique identifier number for this profile set. This value can be set from 1 to 14 . Typ e Select profile based on Ethernet (MAC Address), IP address, Packet Content M ask , or IPv6 address.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch protocol ID mask in hex form ( hex 0x0-0xff) or a user value. Click Apply to implement changes made. The window shown below is the Access Profile Confi guration window for Packet Content M ask.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The window shown below is the Access Profile Configuration window fo r IPv6. Figure 6- 6. Access Profile Configura tion window (IPv6) This screen will aid the user in conf igur ing the Switch to mask packet head ers beginning with the offset value specified.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 0x0-0xffff) which you wish to filter. Select UDP to use the I Pv6 UDP port number contained in an in coming packet as the forwarding criterion. Selecti ng IPv6 UDP require s that you specify a source port mask and/or a destination port mask.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 9. Access Rule Table w indow Click Add Rule to add a new Rule for an existing profile. The Acce ss R ule Co nfig urat ion window will appear. To remove a previ ously created rule, select it and click the button.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Select Deny to specify that packets that do not ma tch the access profile are not forwarded by the Switch and will be filtered. Select Mirror to specify that packets that match the access profile a re mirrored to a port defined in the Port Mirroring window.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch configured in the Time Range Settings window. This will set specif ic times when this access rule will be implemented on the Switch. Counter Tick the check box and use the pull-down menu to employ the Counter that will count the packets identified with this rule.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 12. Access Rule Configura tion window (IP) Configure the following Access Ru le Configu ration settings for IP: Parameter Description Profile ID This is the identifier number for this profile set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Priority (0-7) This parameter is specified to re-write the 80 2.1p default priority previously set in the Swit ch, which is used to determine the CoS queue to which packets are forwarded to.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The window shown below will appear. Figure 6- 14. Access Rule Display window (IP) The following window is the Access Rule table for Packet Conten t. Figure 6- 15. Access Rule Table window (Packet Content Mask) To remove a previously create d rule, select it and click the button.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 16. Access Rule Configura tion window (Packet Content Mask) To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply . Parameter Description Profile ID This is the identifier number for this profile set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Priority (0-7) This parameter is specified to re-write the 802.1p default priority previously set in the Swit ch, which is used to determine the CoS que ue to which packets are forwarded to.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 17. Access Rule Display window (Packet Content Mask) NOTE: When using the A CL Mirror functi on, ensure that the Port Mirroring function is enabled and a target mirror port is set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 19. Access Rule Configura tion window (IPv6) To set the Access Rule for the IPv6, adjust t he following param eters and click Apply . Parameter Description Profile ID This is the identifier number for this profile set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch command, before forwarding it on to the spe cif ied CoS queue. Otherwise, a packet will have its incoming 802.1p use r priority re-written to its orig inal value before being forwarded by the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ACL Flow Meter Before configuring the ACL Flow Meter, here is a list of acro nyms and terms users will need to know. trTCM – Two Rate Three C olor Marker. T his, along with the srTCM , are two met hods available on t he switch for met ering and marking pac ket flow.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 21. ACL Flow Meter Table w indo w The previous window allows users to view the ACL profile and ru le that is utilizin g the ACL Flow Meter function, and the mode associated with that prof ile and rule.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch following parameters to determine the color rate of the IP packet flow. CIR – The Committed Information Rate can be set between 0 and 15 6249. IP flow rates at or below this level will be considered gr een.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 23. ACL Flow Meter Display w indo w CPU Interface Filtering Due to a chipset limitation and the need for extra switch security, the Switch inc orp orates CPU Interface f iltering.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To view this windw, click ACL > CPU Interface Filtering > CPU Interface Filtering Table , as sho wn below: Figure 6- 25. CPU Interface Filtering Table w indow To add an en try to the CPU Interface Filtering Table, click th e Add Profil e button .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The window shown below is the CPU Interfa ce Filtering Configuration for IP w indow. Figure 6- 27.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch header. Users must then spe cify what protocol(s) to include according to the following guidelines: Select ICMP to inst ruct the S wit.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The window shown below is the CPU Interface Filtering Configurat ion window fo r the Packet Content Mask.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Offset This field will instruct the Switch to mask the packet heade r beginning with the offset value specified: value (0-15) – Enter a value in hex form to mask the packet from the beginni ng of the packet to the 15th byte.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Addres s the IP address mask, in hex form. Click Apply to im plement change s made. To establish the rule for a previously cre ated CP.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 32. CPU Interface Filtering Rule Co nfiguration window (Ethernet) To set the CPU Access Rule fo r Ethernet, adjust the foll owing parameters and click Appl y . Parameters Description Profile ID This is the identifier number for this prof ile set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Time Range Click the check box and enter the name of the Ti me Range sett ings that has been previously configured in the Time Range Settings windo w. This will set specific times when this CPU access rule will be impl emented on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 35. CPU Interface Filtering Rule Co nfiguration window (IP) Configure the following Access Ru le Configu ration settings for IP: Parameter Description Profile ID This is the identifier number for this prof ile set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch access rule will be impl emented on the Switch. To view the set tings of a pre viously correctl y configured rul e, click in the Access Rule Table to view the following window: Figure 6- 36.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 6- 38. CPU Interface Filtering Rule Co nfiguration window (Packet Conten t Mask) To set the Access Rule for Ethernet, adjust the following parameters and click Apply . Parameters Description Profile ID This is the identifier number for this profile set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Typ e Selected profile based on Et hernet (MAC Address), IP address, Packet Content Mask, or IPv6. Ethernet instructs the Switch to examine the layer 2 part of each packet hea der. IP instructs the Switch to examine the IP addres s in each frame's header.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The following window is the CPU Access Rule Table for IPv6. Figure 6- 40. CPU Access Rule Table w indo w (IPv6) To create a new rule set for a n access profile click the Add butt on. A new wi ndow is displa yed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Packet Content Mask instructs the Switch to examine the packet header. IPv6 instructs the Switch to examine the IPv6 part of each packet header. Class (0-255) Entering a va lue between 0 and 255 wil l instruct the Switch to examine the cla ss field of the IPv6 header.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 7 Security Authorization Attributes State Settings Traffic Control Port Security IP-MAC-Port Binding 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch has been detected (that is, once th e packet threshold set belo w has been exceeded), the Switch will shu tdo wn the port to all incoming traffic with the exception of STP BPDU packets, for a time period specified using the Count Down field.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Traffic Control Global Settings Traffic Control Trap Enable sending of Storm Trap messages whe n the type of action taken by the Traff.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTE: Traffic Control cannot be impl em ented on ports that are set for Link Ag gregation (P ort Trunk ing).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Security Port Security Settings A given ports ’ (or a range of port s') dynamic M AC address learning c an be locked suc h that the current so urce MAC addresses entered into the MAC address forwardi ng table can not be changed once th e port lock is enabled.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Max. Addr. (0-64) The number of MAC addresses that will be in the MAC address-forw arding table for the selected switch an d group of ports.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IP-MAC-Port Binding General Overview T he Switch fe atures IP-MAC -Port Binding ( IMPB), a D-Link security appli cation used most often on edge s witches directly connected to network hosts.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Strict and Loose State Other than ACL and ARP m ode, users can al so configure the state on a port for granular control. There are two states: Strict an d Loose, and onl y one state can be selected per po rt.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 7. ARP Cache Poisoning When the user configure s strict mode and enables IM PB on a por t, ARP inspection is enab led .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 9. IMPB Global Settings w indo w The following parameters can be set: Parameter Description Trap / Log This field will enable and disable the se nding of trap log messages for IP-MAC bi nding.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 10. IMPB Port Settings w indo w The followin g fields can be se t or modified: Parameter Description Unit Choose the Switch ID number of the Switch in the switch sta ck to be modified.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch until a legal IP packet is detected. Enabled (Strict+IPv6) - Enable the IPv6 packet checking in strict mode. All packets are dropped by default until a legal IP packet is detected. Enabled (Strict+All) - Enable both IPv6 and IPv4 packet checking in strict mode.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IMPB Entry Settings The table on this window, which is also k nown as the “IMPB white list,” is used to create Static IP-MAC-Port Binding entries on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch the port on the Switch. Ports (e.g: 1, 5, 7- 12) Specify the switch p orts or tick the A ll Ports check bo x to select all ports. Clear Type Use the pull-down menu to sele ct the IPv4 , IPv6 or All type.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1X 802.1X Port-Based and MAC-Based Access Control The IEEE 802.1X standard is a security measure for au thorizing and authentica t.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 17. The Authentication Server Authenticator The Authenticator (the Switch) is an intermediary between the Authen ticatio n Serv er and th e Client. The Au thenticator serv es tw o purposes when u tilizing 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 19. The Client Authentication Process Utilizing the three roles stated abov e, the 802.1X protocol provi des a stable and secure way of authorizing and authenticatin g users attempting to access the netw ork.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port-Based Network Access Control … 802.1X Clie nt 802.1X Clie nt 802.1X Clien t 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MAC-Based Network Access Control 802.1X Client Network access cont rolled port Network access uncont rolled port RAD IUS Ser ve r Ethernet Sw itch 802.1X Client 802.1X Client 802.1X Client 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Guest VLANs On 802.1x secur ity enabled networ ks, there is a need for non 802.1x supported devices to ga in limited access to t he network, due to lack of t he proper 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1X Port Settings To view this wind ow , clic k Security > 802.1X > 802. 1X Port Sett ings , as shown below: Figure 7- 24.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 25. 802.1X Port Settings w indo w (Modify) This window allows users to set the following featur es: Parameter Description Unit Select the unit to configure. From/To Enter the port or ports to be set.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch The default setting is Auto . TXPeriod (1-65535) This sets the TX Period of time for t he authenti cator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Guest VLAN Settings To set a Guest 802.1X VLAN, the user must first c onfigure a norm al VLAN whic h can be enabled here for Guest VLAN status. To view this wind ow , clic k Security > 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 27. Authentication RADIUS Server Settings windo w This window displays the fo llowing information: Parameter Description Index Choose the desired RADIUS server to configure: First, Second or Third .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1X User Settings This window allows the user to set different local users on th e Switch and set a global lim itation on the maxim um number of use rs that can be learned via 802.1X authentication.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 29. Initialize Port window (Port-based 802.1X) This window allows initializatio n of a port or group of ports. The Initialize Port Table in the bottom half of the window displ ays the current status of the port(s).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTE: The user must first globally enable 802.1X in the DGS-3600 Web Management Tool window before initializing port s. Information in the Initialize Ports Table cann ot be viewed before enabling 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port The port number of the rea uthenticated port. Auth PAE State The Authenticator State will display one of the fo llowing: Initialize, Di sconnected, Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuth, Fo rceUnauth, and N/A .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch t configured properly, e authentication VLAN must provide a DHCP server or a DHCP gured to access a DNS se rve r to improve CPU performance, and ds to areful when setting filter functions for the targ et VLAN, so that these HTTP packets are not denied by the abled.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch WAC Global State Toggle the State field to either Enabled or Disabl ed for the Web-based Access Contro l settings of the Switch. WAC Settings Meth od Use the pull-down menu to choose the authentic ator for Web-based Access Control.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 35. WAC Port Settings window The following parame ters can be configured: Parameter Description Unit Use the drop-down menu to sele ct the unit to configure. From/To Enter the range of ports to configure.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch WAC User Account This window is used t o set up user acc ounts for the Web-based Access Control. To view this wind ow , clic k Security > We b-based Access Control (WAC) > WAC User Acc ount , as shown bel ow: Figure 7- 36.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 38. Web-based Access Control Auth entication Login window After successfully logging in, the user will be prompted with this wind ow, ve rifying that the user has successfully authenticat ed the WAC port.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Port List Enter the ports you wish to Find or Clear . Tick the All Ports che ck box to select all ports. State Select the state of the ports. Choose betwee n Authenticated , Authenticating or Blocke d .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Use the Security IP Management to permit remote stations to ma nage the Switch. If you choose to de fine one or more desi gnated management station s, only the chosen station s, as defined by IP address, will be allowed management privilege through the web manager or Te lnet session.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 42. BPDU Attack Protection Global Settings window The following parame ters can be configured: Parameter Description Global State Enable or disable the BPDU atta ck protection global state.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Gatew ay IP Addres s Enter the gateway IP address. Gateway MAC Addres s Enter the gateway MAC address. Ports Enter the port or range of ports to be co nfigur ed. Alternatively, tick the All Ports check bo x to configure all of the ports.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Access Authentication Control The TACACS/XTACACS/ TACACS+/RADIUS commands allo w users to secure acces s to the Switch using the TACACS/XT ACACS/TACACS+/ RADIUS prot ocols.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Authentication Policy and Parameter Settings This command will enable an administrator-defined authe ntication policy for users tryi ng t o access the Switch. When enabled, th e device will check the Lo g in Method List and choose a techniqu e for user authentication upon login.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch List and Enable Method Li st for authenticati on for users utilizing the Con sole (Command Line Interface) application, the Telnet app lication, SSH and the WEB (HTTP) application.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To add an Authentication Server Host to the list, enter its IP ad dress in the IP Address field, c hoose the prot ocol associat ed with the IP address of the Authenticatio n Server Host and click Add to Grou p to add this Authentication Serv er Host to the group.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 50. Authentication Serv er Host Setting – Add window To edit an Authentication Serv er Host, click the IP address hyperlink.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Login Method Lists This command will configure a us er-defined or default Lo gin Method List of authenticatio n techniques for users loggin g on to th e Switch. The sequence of techniques implemented in this command will affect the authentication re sult.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch xtacacs - Adding this parameter will require the user to be authenticated using the XTACACS protocol from a remote XTACACS server. tacacs+ - Adding this parameter will require t he user to be authenticated using the TACACS+ protocol from a remote TA CACS+ server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 54. Enable Method List - Add w indo w To define an Enable Login Method List, set the following parameters and click Apply : Parameter Description Method List Name Enter a method list name defined by the user of up to 15 chara cters.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Configure Local Enable Password This window will configure the lo cally enabled password fo r the Enab le Admin command.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch RADIUS Accounting Settings The Accounting feature of t he Switch uses a remote RADIUS serv er t o collect inform ation regardi ng events occur ring on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MAC-based Access Control The MAC-based Access Control feature will allow users to configur e a list of MAC addresses, eith er locally .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 59. MAC-based Access Control Global Settings window The following parameters may be viewed or set: Parameter Description MAC-based Access Control Global Settings State Use the pull-down menu to globally enable or disabl e the MAC-based Access Control function on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Guest VLAN Name Select the method of identification, Guest VLAN name, before entering the name of the Guest VLAN being used for this function. Guest VLAN ID Select the method of identification, Gues t VLAN ID, before entering the ID of the Guest VLAN being used for this function.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 7- 60. MAC-based Access Control Local MAC Settings window To set the following parameters: Parameter Description MAC Address To search for a previously configured MAC address, enter the add ress and click Find By MAC .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Safeguard Engine Periodically, malicious hosts on the networ k will attack the Switch by utilizing packet flooding (ARP Storm ) or other methods. These attacks may increase the Safeguard Engine beyond its capa b ility.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch NOTICE: When Safeguard Engine is enabled, the Switch will allot bandwidth to various traffic flows (ARP, IP) using the FFP (Fast Filt er Processor) metering ta ble to control the CPU utilization and limit traffic.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single po rt to a group of ports on ei ther a single swi tch or a gro up of ports on another s witch in a s witch stack.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description Unit/Port Use the drop-down menu t o select the desired unit and port to transmit packets. Forward Port Tick the check box es to select wh ich of the ports on the Swit ch will be able to forwa rd packets.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch begin with https://. (Ex. https://10.90.90. 90) Any other method will result in an error and no access can be authorized for the we b- based ma nagement. To view the windows for Download Certificate and Ciphersuite , click Security > SSL , as show n below: Figure 7- 66.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Cache Timeout (60- 86400 sec) This field will set the time between a new key exch ange between a client and a host using the SSL function. A new SSL session is establis hed every time the client and host go through a key exchan ge.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SSH SSH is an abbreviation of Secure Shell, wh ich is a progra m allowing se cure remote l ogin and sec ure network se rvices over an insecure netwo rk.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To configure the SSH server on the Switch, m odify the following parameters and click Apply : Parameter Description SSH Server Status Use the pull-down menu to enable or disabl e SSH on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch SSH Authentication Mode and Algorithm Settings The SSH Algorithm window allows the configuration of the desired types of SSH algorithms used for au thentication encryption.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch encryption algorithm with Cipher Block Chaining. The default is Enabled . AES192-CBC Use the pull-down to enabl e or disable the Advanc ed Encryption Standard AES192 encryption algorithm with Cipher Block Chaining.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Parameter Description User Name Enter a User Name of no more than 15 characte rs to identify the SSH user. This User Name must be a previously configured u ser account on the Switch. Auth.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 802.1X & IMPB Mode This mode adds an extra layer of security by checking the IP MAC-Bindi ng Port Bindi ng (IMPB) t able before try ing one of the supp orted authenti cation methods .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Compound Authentication Settings This windo w is used to c onfigure the aut horization m ode and authenticat ion method of individual p orts. To view this wind ow , clic k S ecurity > Compou nd Authentication > Compound Au thentication Settings , as shown below: Figure 7- 75.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Methods None – Specifies that multiple authentication is not enabled. Any – Specifies that a client will gain access if it passes any of t he authentication method s (802.1X, MAC, or JWAC).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Japanese Web-based Access Control (JWAC) The JWAC fol der contains six wi ndows: JWAC Gl obal Configurati on, JWAC P ort Settings, J WAC User Account , JWAC Host Information, JWAC Customize Page Lan guage Settings and JWAC Customize Page.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To set JWAC for the Switch, complete the following fields: Parameter Description JWAC Global Settings JWAC Global State Use this drop-down menu to either enable or disable JWAC on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Error Timeout (5-300 sec) This parameter is used to set the Quarantine Se rver Error Timeout. When the Quarantine Server Monitor is enabled, the JWAC Switch will periodically check if the Q uarantine works okay.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To configure individual JWAC port setting s, click the Add button, the following window will be displayed.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Host (0-50) allowed on each port at the same time. Aging Time (1-1440 min) This parameter spe cifies the period of time a host will keep in authenticated state after it successes to authenti cate.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Ne w Pa ss wor d Enter the password of the user. Thi s field is case-sensitive and must be a complete alphanumeric string. Confirm New Password Retype the password entered in the previous field.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch JWAC Customize Page This window is used to cu stomize the JWAC feature. To view this wind ow , clic k S ecurity > Japanese Web-based Access Control (JWAC) > JWA C Cus tomize Page , as sh own below: Figure 7- 86.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 8 Monitoring Device Status Stacking Information Stacking Device Module Information DRAM & Flash Utilization CPU Utilizatio.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Device Status This window displays status infor mation fo r Internal Power, Extern al Power, Side Fan, and Back Fan. To view the Device Status window, cl ick Monitoring > Device Status , as shown below: Figure 8- 1.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Module Information This windo w displays m odule informat ion of the Switch , including the module name, Revi sion Number, Seri al Number and description. To view the Module Informat io n window, click Monitoring > Module Informat ion , as shown below: Figure 8- 4.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch CPU Utilization This window displays the per centage of the CPU being u sed, ex pressed as an integer percentage and calculated as a simple average by time interval. To view this wind ow , clic k Monitoring > CPU Utilization , as shown below: Figure 8- 6.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Utilization This window displays th e percentage of th e total availab le bandwidth being used on the port. To view the port utilization, click Monito ring > Port Utilization , as shown belo w: Figure 8- 7.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Packets The Web Mana ger allows vari ous packet stat istics to be vie wed as either a line g raph or a table. Si x windows are offered. Received (RX) To view the Received (RX) window, click Monitoring > Pack et s > Rece ived (RX ) , as shown bel ow: Figure 8- 8.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 9. RX Packets Analy sis wi ndow (table for Bytes and Packets) The followin g fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s , where "s" stands for se conds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch UMB_cast (RX) To view the UMB_ca st (RX) window, click Mo nitoring > Packets > UMB_ cast (RX) , as shown below: Figure 8- 10.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 11. RX Packets Analysis w indo w (table for Unicast, Multicast, and Broadcast Packets) The followin g fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s , where "s" stands for se conds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Transmitted (TX) To view this wind ow , clic k Monitoring > P ackets > Transmitted (T X) , as shown below: Figure 8- 12.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 13. TX Packets Analy sis window (table for Bytes and Packets) The followin g fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s , where "s" stands for seconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Errors The Web Manager allows port error statistics compiled by the Switch ' s managem ent agent to be vie wed as either a line gra ph or a table.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 15. RX Error Analy sis w indow (table) The following fields can be set: Parameter Description Time Interval Select the desired setting between 1s and 60s , where "s" stand s for seconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MultiDr Incremented for each multic ast packet that is discared. VLANIngDr Incremented for each packet that is discarded by VLAN ingress checking. Show/Hide Check wheth er or not to display CRC Error, Un der Size, Over Size, Fragment, Jabber, and Drop errors.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 17. TX Error Analysis w indow (table) The followin g fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s , where "s" stands for seconds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Packet Size The Web Manager allows pa ckets received by the Switch, arranged in si x groups and classed by size, to be viewed as e ither a lin e graph or a table. Two wi ndows are offered.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 19. TX/RX Packet Size Analysis w indow (table) The followin g fields can be se t or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s , where "s" stands for seco nds.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch octets in length inclusive (excluding framing bits but including FCS octets). 1024-1518 The total number of packets (including bad pac kets) received that were between 102 4 and 1518 octets in length inclusive (excludin g framing bits but including FCS octets).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Browse MLD Router Port This displays which of the Switch’s ports ar e currently configured as router ports in IPv6. A router port c onfigured by a us er (using the cons ole or Web-ba sed management i nterfaces) is displa yed as a static router port, designated by S .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch VLAN Status This allows the VLAN status for each of th e Switch's ports to be viewed by VLAN. This window displ ays th e ports on the Switch that are currently Egress (E) or Tag (T) ports.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Port Access Control The followin g windows are used to moni tor 802.1X statist ics of the Switch, on a per port basis. To vi ew the Port Access Control windows, click monitoring > Port Access Control .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Authenticator Statistics This table contains the statistics obj ects fo r the Authenticator PAE associated with a p ort. Enter a port or range of ports, or tick the All Ports c heck box.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 26. Authenticator Statistics Detail Table w indo w The following fields can be viewed: Parameter Description Port/Port Number The identification number assigned to the Port by the System in which the Port resid es.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Authenticator Session Statistics This table contains the session statistics objects for the Authenticator PAE associated with each port. An entry appears in thi s table for each port that supports the Authenticato r function.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 28. Authenticator Session Statistics Detail Table w indo w The following fields can be viewed: Parameter Description Port/Port Number The identification number assigned to the Port by the System in which the Port resides.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 7) Port Administratively Disabled 8) Not Terminated Yet SessionUserName The User-Name representing the identity of the Supplicant PAE. Authenticator Diagnostics This table contains the diagnostic in formation regarding the ope ration of th e Authenticator associ ated with each port.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 30. Authenticator Diagnosti cs Detail Table windo w The following fields can be viewed: Parameter Description Port/Port Number The identification number assigned to the Port by the System in which the Port resides.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch FailWhileAuthenticating Counts the number of times that the state machine t ransitions from AUTHENT ICATING to HE LD, as a re sult of the Bac kend Authentication state machine i ndicating authentication failure (authFail = TRUE).
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Reject message from the Authentic ation Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant has not authe nticated to the Authentication Server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch AccessRejects The number of RADIUS Access-Reject packet s (v alid or invalid) receiv ed from this server. AccessChallenges The number of RADIUS Access-Challenge packet s (valid or invalid) recei ved from this server.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ServerIndex The identification number assigned to each RA DIUS Accounting server that the client shares a secret with. InvalidServerAddr The number of RADIUS A ccounting-Response packets received from unkn own addresses.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MAC Address Table This allows th e Switch's dynam ic MAC address forwardi ng table to be viewe d. When the Switc h learns an association bet ween a MAC address and a port number, it make s an entry into its forwar ding table.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IGMP Snooping Group IGMP Snooping allows the Switch to read the Multicast Group IP address and the correspond ing MAC address from IGMP packets that pass th rough the Switch. To view this window, click Monitoring > IGMP Snooping Gr oup , as sh own below: Figure 8- 34.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MLD Snooping Group The following wind ow allows the user to view MLD Snooping Groups pr esent on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Trace Route The following window will aid the user in back tracing the route taken by a packet before arriv ing at the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Trace Route IPv6 Route To view this wind ow , clic k Monitoring > Tr ace Rout e > Trace IPv6 Route , as shown below: Figure 8- 37. Trace IPv6 Route w indow To trace the route of a pack et, set th e following parameters located in this window, and click Start .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch IGMP Snooping Forwarding The IGMP Snooping Forwarding table displa ys the current multicast tra ffic that the device has recei ved and which ports it shoul d forward. To view this wind ow , clic k Monitoring > IGMP Snoopin g Forwarding , as sho wn below: Figure 8- 38.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MLD Snooping Forwarding The MLD Snooping Forwarding table displ ays the current multicast traffic entries that the de vice has received and which ports i t should be f orwarded to. To view this wind ow , clic k Monitoring > MLD Snooping Forwar ding , as shown below: Figure 8- 39.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Routing Table Browse Routing Table This window shows the current IP routing table of the Switch. To find a specific IP route, enter an IP a ddress along with a pro per subnet mask i n the two fields offered and cl ick Find .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 43. IP Multicast Forwarding Table w indow Browse IP Multicast Interface Table This window will show current IP multicasting interfaces located on the Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Browse DVMRP Routing Table Multicast ro uting inform ation is gathere d and stored by DVMRP in t he DVMRP Routi ng Table, this window, contai ns one row for each port in a DVMRP m ode.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 48. DVMRP Routing Next Ho p Table window PIM Monitor Multicast ro uters use Pr otocol Inde pendent Multicast (PIM) to de termine which other multicast routers should receive multicast packets.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 51. PIM RP Set Table window OSPF Monitor This section offers windows regarding OSPF (Open Shortest Path First) inform ati on on the Switch, including the OSPF LS DB Table, OSPF Neighbor Tab le and the OSPF Virtu al Neighbor Table.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ( Summary ), Autonomous System link ( ASSummary ), Autonomous System external link ( ASExternal) , and NSSA_EXT ( Not So Stubby Area external) Link State ID This field identifies the portion of the Inter net environment that is being de scribed by the advertisement.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Transit Area ID Allows the entry of an OSPF Area ID − previously defined on the Switch − that allows a remote area to communi cate with the backbone (area 0). A Transit Area canno t be a Stub Area or a Backbone Area.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 57. OSPFv3 LSDB Link LSA Interface Ta ble window Browse OS PFv3 Neighbor Table Routers that are connected to t he same area or segment becom e neighbors in that area. Nei g hbors are elected via the Hello protocol.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Switch Logs The Web m anager allows the Swi tch's histor y log, as com piled by the Swi tch's managem ent agent, to be viewed. To view the Switch hi st ory l og , clic k Monitoring > Switch Log s , as shown below : Figure 8- 60.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 61. ARP Table windo w Session Table This window i s used to displa y the current se ssion table. To view this wind ow , clic k Monitoring > Session Table , as sh own below: Figure 8- 62.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Figure 8- 63. MAC-based Access Control Authentication State Table Settings w indow The The following fields can be c onfigured: Parameter Description Ports (e.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Section 9 Switch Maintenance Reset Reboot System Save Services Logout Reset The Reset func tion has severa l options w hen resetting t he Switch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Save Services The following three windo ws will aid the user in saving configurations to the Switch’s memory. Save Changes The Switch has two levels of memory, no rmal RAM and non-volatile or NV-RAM.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Current Configuration Settings The Current Configuration Settings wind ow allows user s to manipul ate configuration images saved i n the Flash m emory of the Switch. To view this wind ow , clic k S ave Services > Current Conf iguration Settings , as s hown below: Figure 9- 5.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Appendix A Technical Specifications General Protocols Fiber-Optic XFP Support CX4 Support IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 3 available slots for optional 10GE modules DGS-3650: 48 x 10/100/1000 Mbps ports 4 x 1000Mbps Combo SFP Ports 2 available slots for o.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch MAC Address Learning Automatic update. Supports 16K MAC addres s. Priority Queues 8 Priority Queues per port.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Appendix B Cables and Connectors When connecti ng the Switch to another swit ch, a bridge or hub, a normal cable is necessary. Pl ease review these produc ts for matching ca ble pin assig nment.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Appendix C System Log Entries The following table lists all possible entries and th eir corresp ondin g meanings that will appear in the System Log of this Swit ch.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark (Username: <username >, IP: <ipaddr>) shown in log string, which means if the user logs in through the console, no IP or MAC address i nformation wil l be included i n the log.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Console Successful login through Console Successful login through Console (Username: <username>) Info rmational If the user logs in through the console, no IP or MAC address information will be included i n the log.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark SNMP SNMP request received with invalid communit y string SNMP request received.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Spanning Tree MST configuration ID VLAN mappi ng table added Spanning Tree MST .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Login failed th ro ugh Web authenticated by AAA local method Login failed throu.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Successful login through Telnet authenticated by AAA none m e tho d Successful .
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Login failed th ro ugh Web (SSL) du e to AAA server tim eout or im proper confi.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Enable Admin failed through We b authenticated by AAA local_enable method Enabl.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Successful Enable Admin thr ough Telnet authenticated by AAA no ne method Succe.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Enable Admin failed through We b (SSL) due to AAA serv er timeout or improper c.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Safeguar d Engine Safeguard E ngine is in normal mode Safeguard Engine enters N.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark user limit in a time interval.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Category Event Description Log Content Severity Remark Dynamic IMPB entry is in conflict with static FDB Dynamic IMPB entry is conflic.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Appendix D Module Specs and Cable Lengths Use the follow ing table to as a gui de for the modul e specs and maxim um cable lengths.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Appendix E Password Recovery Procedure This section describes the procedure for resetti ng pa ssw o rds on D-Li nk Switches. Authenticating any user who tries to access networks is necessa ry a nd important.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 487 3. In the “Pass word Recovery Mode” only the foll owing comm ands can be used. Command Parameters reset config This command reset s the whole configuration ba ck to the default values.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Appendix F RADIUS Attributes Assignment The RADIUS Attributes Assignm ent on the Swit ch is used in the following m odules: 802.1X (P ort-based and M AC-based), Web- based Access Control (WAC), Japanese We b-based A ccess Control (JWAC), and M AC-based Access Control.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch To assign 802.1p default priority by RADIUS Server , th e proper parameter s should be configured on the RAD IUS Server. The tables below show the parameters for 802.1p default priority.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch If the user has configured the VLAN attribute of the RADIUS se rver (for exam ple, VID 3) and the 802.1X, or MAC-based Access Control auth enticatio n is successful, the port will be added to VLAN 3.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Glossary 1000BASE-SX: A short laser w avelength on multim ode fiber optic cable for a maxim um length of 2000 met ers 1000BASE-LX: A l.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 492 latency: The delay between the tim e a device receives a packet and t he time the packet is forwarde d out of the destination port. line speed : See baud rat e. main port: The port in a resilient link that carries data traffic in normal operating conditions.
xStack DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch ® Subject to the terms and conditions set fo rth herein, D-Link Systems, Inc. (“D-L ink”) provides this Limited Warranty: • Only t.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch 494 D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch Product Registration Register your D-Link pr o duc t online at H http://support.dlink.com/register/ 495 Product registration is entirely volunta ry and failure to complete or return this form will not diminish your warranty rights.
xStack ® DGS-3600 Series Layer 3 Managed Gigabit Ethernet Switch D-Link Europe Li mited Lifetime Warranty Dear Custom er, Please read below to understand the d etails of t he warranty coverage you have. Warranty terms for D-LINK xSta ck ® products: All D-Link xStack ® products* are supplied with a 5 year warra nty as standard.
D-Link Limited Lifetime Warranty Hard ware : D-Link warrants the D-Link hardware named above against defects in materials and workmanship for the period specified above. If D-Link receives notice of such defects during the warranty period, D-Link w ill, at its option, eith er repair or replace products provin g to be defective.
Limited Hardware Warranty: D-Li nk warrants that the hardwa re portion of the D-Link products de scribed below (“Hardware”) will be free from material defects in workmans hip and materials from th.
the original or other suitable shipping pa ckage to ensure that it will not be damaged in transit, and the RMA number must be prominently marked on the out side of the package. The pa ckaged product shall be insured and shipped to Authorized D-Link Service Office with all shipping costs prepai d.
registered trademark of D-Link Corp orat ion/D-Link Systems, Inc. A ll other trademarks belong to their respective proprietors. Copyright Statement No part of this publication may be reproduced in any.
Technical Support 16B15B14B13B12 B11B10B9B8B7B6 B5B4B3B2B1B0B Technical Support You can find software updates an d user documentation on the D-Link website.
Technical Support D-Link UK Techni cal Support over the Telephone: 0871 873 3000 (United Kingdom ) BT 10ppm (UK Pence per minute), other carriers may vary. Times Mon-Fri 9.00am - 6.00pm Sat 10. 00am - 2.00pm +1890 886 899 (Irel and) € 0.05ppm peak, €0.
Technische Unterstützung Aktualisierte Versionen von Software u nd Benutzerhandbuch finden Sie auf der Website von D-Link. D-Link bietet kostenfrei e technische Unterstützun g für Kunden innerhalb Deutschlands, Österreichs, der Sch weiz und Osteuropas.
Assistance technique Vous trouverez la docume ntation et les logiciels les plus réce nts sur le site web D-Link. Vous pouvez contacter le service te chnique de D-Link par notre site intern et ou par téléphone.
Asistencia Técnica Puede encontrar la s últimas versiones de software así como do cumentación técnica en el sitio web de D-Li nk. D-Link ofrece asistencia técnica gratuita para cliente s residentes en España durante el periodo de garantía del prod ucto.
Supporto tecnico Gli ultimi aggiornamenti e la documentazion e sono disponibili sul sito D-Link. Supporto Tecnico dal lunedì al venerdì dalle ore 9.00 alle ore 19.
Technical Support You can find software updates an d user documentation on the D-Link website. D-Link provides free techni cal support for customers within Benelu x for the duration of the warranty period on this product. Benelux customers can contact D-Lin k technical support through our website, or by phone.
Pomoc techniczna Najnowsze wersje oprog ramowania i dokumentacji u ż ytkownika mo ż na znale źć w serwisie internetowym firmy D-Link. D-Link zapewnia bezp ł atn ą pomoc techn iczn ą klientom w Polsce w okresie gwarancyjnym prod uktu.
Technická podpora Aktualizované verze software a uživatelských p ř íru č ek najdete na webové stránce firmy D-Link. D-Link poskytuje svým zá kazník ů m bezplatnou technickou podporu Záka.
Technikai Támogatás Meghajtó programokat és frissítéseket a D-Link Magyarország we blapjáról tölthet le. Tel: 06 1 461-3001 Fax: 06 1 461-3004 Land Line 14,99 HUG/min - Mobile 49.
Teknisk Support Du kan finne programvare oppdaterin ger og bruker dokumentasjon på D-Links web sider. D-Link tilbyr sine kunde r gratis teknisk support under produktets garantitid. Kunder kan kontakte D-Li nks teknisk support via våre hjemmesider, eller på tlf.
Teknisk Support Du finder software opdateri nger og bruger- dokumentation på D-Link’s hjemmeside. D-Link tilbyder gratis teknisk su pport til kunder i Danmark i hele produktets garantiperiode. Danske kunder kan ko ntakte D-Link’s tekniske support via vores hjemme side eller telefonisk.
Teknistä tukea asiakkaille Suomessa D-Link tarjoaa teknistä tukea asiakkailleen. Tuotteen takuun voimassaoloajan. Tekninen tuki palvelee seuraava sti: numerosta : 0800-114 677 Arkisin klo.
Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och anna n användarinformation. D-Link tillhandahåll er teknisk support till kunder i Sverige und er hela garantitiden för denna produkt. D-Link Teknisk Support via telefon: 0770-33 00 35 Vardaga r 08.
Suporte Técnico Você pode encontrar atualizações de software e documentação de utilizador no site de D-Link Portugal http://www.dlink.pt. A D-Link fornece suporte técnic o gratuito para clientes no Portugal durante o período de vi gência de garantia deste produto.
Τεχνική Υποστήριξη Μπορείτε να βρείτε software updates και πληροφορ ίες για τη χρήση των προϊόντων στις ιστοσελίδες .
Tehni č ka podrška Hvala vam na odabiru D-Link proizvoda. Za dodatne i nformacije, podršku i upute za korištenje ure đ aj a, molimo vas da posjetite D-Link internetsku stranicu na w ww.
Tehni č na podpora Zahvaljujemo se vam, ker ste izbrali D-Li nk proizvod. Za vse nadaljnje informacije, podporo ter nav odila za uporabo prosimo obiš č ite D-Link - ovo spletno stran www.
Suport tehnica V ă mul ţ umim pentru alegerea produ selor D-Link. Pentru mai multe informa ţ ii, suport ş i manuale ale produselor v ă ru g ă m s ă viz ita ţ i site-ul D- Link www.
Technical Support You can find software updates an d user documentation on the D-Link website. Tech Support for custo mers in Australia: Tel: 1300-766-868 Monday to Friday 8:00am to 8:00pm EST Saturday 9:00am to 1:00pm EST http://www.dlink.com.au e-mail: H support@dlink.
Technical Support You can find software updates an d user documentation on the D-Link website. Tech Support fo r customers in Egypt: Tel: +202-2919035 or +20 2-2919047 Sunday to Thursday 9:00am to 5:00pm http://support.dlink-me.com e-mail: H amostafa@dlink-me.
Техническая поддержка Обновления программного обеспечения и документация доступны на Интернет - сайте D-Link.
Asistencia Técnica D-Link Latin América pone a disposición de sus cli entes, especif icaciones, documentación y software mas recient e a través de nuestro Sitio Web www.
Suporte Técnico Voc ê pode encontrar atualiza çõ es de software e documenta çã o de usu á rio no site da D-Link Brasil www.dlinkbrasil.com.br. A D-Link fornece suporte t é cnico gratuito para clientes no Brasil durante o per í odo de vig ê ncia da garantia deste produto.
D-Link 友訊科技 台灣分公司 技術支援資訊 如果您還有任何本使用手冊無法協助 您解決的產品相關問題，台灣 地區用戶可以透過我們的網站、電子 郵件.
Dukungan Teknis Update perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link. Dukungan Teknis untuk pelanggan: Dukungan Teknis D-Link melalui telepon: Tel: +62-21-5731610 Dukungan Teknis D-Link melalui Internet: Email : support@dlink.
技术支持 您可以在 D-Link 的官方網 站找到產品的軟件升級和使用手冊 办公地址：北京市东城区北三环东路 36 号 环球贸易中心 B 座 26F 02- 05 室 邮编 : 100.
International Offices U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA 92708 TEL: 1-800-326-1688 URL: www.dlink.com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W 1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europ e (U.
Registration Card (All Countries and Regions excluding USA) Print, type or use block letters. Your name: Mr./Ms______________________ ______________________________ ___________________________________ __________________ Organization: ________________________ ________________________Dept.
Optional Module Slots Optional Module Slots.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté D-Link DGS-3600 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du D-Link DGS-3600 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation D-Link DGS-3600, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le D-Link DGS-3600 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le D-Link DGS-3600, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du D-Link DGS-3600.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le D-Link DGS-3600. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei D-Link DGS-3600 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
