D-Link™ DGS-3212SR 12-Port Gigabit Layer 2 Stackable Switch Release III Manual Third Edition (February 2005) Printed In Taiwan RECYCLABLE
DGS-3212SR Stackable Gigabit Layer 2 Switch __________________________________________________________________________________ Information in this document is subject to change without notice. © 2005 D-Link Computer Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden.
DGS-3212SR Stackable Gigabit Layer 2 Switch Table of Contents About This Manual ............................................................................................................................................................... vii Intended Readers .............................................................................................................................................................. vii Typographical Conventions..............................................................
DGS-3212SR Stackable Gigabit Layer 2 Switch Areas of the User Interface ...........................................................................................................................................23 Login to Web Manager.................................................................................................................................................24 Web Pages and Folders.............................................................................................................
DGS-3212SR Stackable Gigabit Layer 2 Switch Spanning Tree ...................................................................................................................................................................69 STP Bridge Global Settings..........................................................................................................................................71 MST Configuration Table..................................................................................................
DGS-3212SR Stackable Gigabit Layer 2 Switch SSH User Authentication............................................................................................................................................127 Access Authentication Control........................................................................................................................................129 Policy & Parameters ................................................................................................................
DGS-3212SR Stackable Gigabit Layer 2 Switch Router Port ......................................................................................................................................................................177 Session Table...................................................................................................................................................................178 Maintenance ..............................................................................................
DGS-3212SR Stackable Gigabit Layer 2 Switch About This Manual This manual is divided into nine general sections: Section 1, Introduction - Describes the Switch’s hardware and its features. Section 2, Installation - Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch. Section 3, Basic Management - Tells how you can connect the Switch to your Ethernet network.
DGS-3212SR Stackable Gigabit Layer 2 Switch Notes, Notices, and Cautions A NOTE indicates important information that helps you make better use of your device. A NOTICE indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. A CAUTION indicates a potential for property damage, personal injury, or death. Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage.
DGS-3212SR Stackable Gigabit Layer 2 Switch • Do not push any objects into the openings of your system. Doing so can cause fire or electric shock by shorting out interior components. • Use the product only with approved equipment. • Allow the product to cool before removing covers or touching internal components. • Operate the product only from the type of external power source indicated on the electrical ratings label.
DGS-3212SR Stackable Gigabit Layer 2 Switch • Systems are considered to be components in a rack. Thus, "component" refers to any system as well as to various peripherals or supporting hardware. CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances. Therefore, always install the stabilizers before installing components in the rack.
DGS-3212SR Stackable Gigabit Layer 2 Switch Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside your system. To prevent static damage, discharge static electricity from your body before you touch any of the electronic components, such as the microprocessor. You can do so by periodically touching an unpainted metal surface on the chassis. You can also take the following steps to prevent damage from electrostatic discharge (ESD): 1.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 1 Introduction Switch Description Features Front Panel Components LED Indicators Stacking LED Indicators Rear Panel Description Plug-in Modules Switch Stacking Management Options Switch Description The DGS-3212SR is a modular Gigabit Ethernet backbone Switch designed for adaptability and scalability. The Switch provides a management platform and uplink to backbone for a stacked group of up to twelve DES-3226S switches in a star topology arrangement.
DGS-3212SR Stackable Gigabit Layer 2 Switch • Broadcast, Multicast and DLF storm control • IEEE 802.3z and IEEE 802.3x compliant Flow Control for all Gigabit ports • SNMP v.1, v.2, v.3 network management, RMON support • Supports optional external Redundant Power Supply • Supports Web-based management. • Supports CLI management.
DGS-3212SR Stackable Gigabit Layer 2 Switch Front-Panel Components The front panel of the Switch consists of LED indicators, an RS-232 communication port, two slide-in module slots, and four 1000BASE-T/SFP combo ports. Figure 1- 1. Front Panel View of the Switch as shipped (no modules are installed) Comprehensive LED indicators display the status of the Switch and the network.
DGS-3212SR Stackable Gigabit Layer 2 Switch Stacking LED Indicators Stacking LED indicators include the Stack ID indicator on the front panel and the Link/Act indicators on the front of the DEM-540 stacking module. NOTICE: The four build-in combination ports on the front panel of the DGS-3212SR can be configured as stacking ports using the CLI. Each IEEE 1394 stacking module has a single Link/Act LED indicator on its front panel for each IEEE 1394 IN/OUT pair. Figure 1- 3.
DGS-3212SR Stackable Gigabit Layer 2 Switch Rear Panel Description The rear panel of the Switch contains an AC power connector. Figure 1- 4. Rear panel view of the Switch The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. The Switch automatically adjusts its power setting to any supply voltage in the range from 100 ~ 240 VAC at 50 ~ 60 Hz.
DGS-3212SR Stackable Gigabit Layer 2 Switch Plug-in Modules The DGS-3212SR Switch is able to accommodate optional plug-in modules in order to increase functionality and performance. Two modules may be installed and used in combination with any of the three available modules. Plug-in modules must be purchased separately. DEM-340T 1000BASE-T Module Figure 1- 5.
DGS-3212SR Stackable Gigabit Layer 2 Switch DEM-540 IEEE 1394 Stacking Module Figure 1- 7.
DGS-3212SR Stackable Gigabit Layer 2 Switch port and using the CLI stacking configuration command. Before stacking has been enabled on the slaves, the IEEE 1394 port is treated logically as an individual 1000BASE port in full-duplex mode. Since the Spanning Tree Protocol is disabled by default, a broadcast storm will result if the stacking link is completed between Switches that have not been properly configured.
DGS-3212SR Stackable Gigabit Layer 2 Switch Management Options The system may be managed out-of-band through the console port on the front panel or in-band using Telnet, a web browser or SNMP-based management. Web-based Management Interface After you have successfully installed the Switch, you can configure the Switch, monitor the LED panel, and display statistics graphically using a web browser, such as Opera, Netscape Navigator (version 6.2 and higher) or Microsoft® Internet Explorer (version 5.0).
DGS-3212SR Stackable Gigabit Layer 2 Switch SECTION 2 Installation Package Contents Before You Connect to the Network Installing the Switch without a Rack Installing the Switch in a Rack Connecting Stacked Switch Groups Configuring a Switch Group for Stacking External Redundant Power System Connecting the Console Port Password Protection SNMP Settings IP Address Assignment Connecting Devices to the Switch Package Contents Before you begin installing the Switch, confirm that your package contains the follo
DGS-3212SR Stackable Gigabit Layer 2 Switch Installing the Switch without the Rack The Switch is supplied with rubber feet for stationing it on a flat surface and mounting brackets and screws for mounting the Switch in a rack. 1. Install the Switch on a level surface that can safely support the weight of the Switch and its attached cables. The Switch must have adequate space for ventilation and for accessing cable connectors. 2. Set the Switch on a flat surface and check for proper ventilation.
DGS-3212SR Stackable Gigabit Layer 2 Switch Mounting the Switch in a Standard 19" Rack Figure 2-3.
DGS-3212SR Stackable Gigabit Layer 2 Switch Connecting Stacked Switch Groups The DGS-3212SR has the capability to hold twelve gigabit ports that may be used in standalone mode or can be used in a stacking configuration to provide up to 576 10/100 Mbps ports and 12 Gigabit ports in a star architecture. For stacking, the DGS-3212SR will be the master switch of a stack of DES-3226S switches.
DGS-3212SR Stackable Gigabit Layer 2 Switch Configuring a Switch Group for Stacking Follow the instructions below to first configure the slave units, and then to configure the DGS-3212SR as the designated Master. NOTICE: The DGS-3212SR can be used to manage a Switch stack consisting of only DES-3226S Switches. For the DES-3226S, the stacking configuration as a Master or Slave Switch is no longer necessary. The DGS-3212SR can communicate with these slave switches regardless of its stacking configuration.
DGS-3212SR Stackable Gigabit Layer 2 Switch DGS-3212SR:4#config stacking mode enable Command: config stacking mode enable The new stacking mode configuration must be saved and the system restarted to put the new settings into effect. If you do not save the changes now, they will be lost. Saving all configurations to NV-RAM... 15% Changing the stacking mode in the DGS-3212SR will automatically save the settings and restart the system. It will take a few minutes to complete the process.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 2-7. DES-3226S Stacking Module Front Panel External Redundant Power System The Switch supports an external redundant power system. Figure 2-8. DPS-200 with DGS-3212SR NOTE: See the DPS-200 documentation for more information. CAUTION: Do not use the Switch with any redundant power system other than the DPS-200 or DPS-500.
DGS-3212SR Stackable Gigabit Layer 2 Switch Connecting the Console Port The Switch provides an RS-232 serial port that enables a connection to a computer or terminal for monitoring and configuring the Switch. This port is a male DB-9 connector, implemented as a data terminal equipment (DTE) connection.
DGS-3212SR Stackable Gigabit Layer 2 Switch 1. At the CLI login prompt, enter create account admin followed by the and press the Enter key. 2. You will be asked to provide a password. Type the used for the administrator account being created and press the Enter key. 3. You will be prompted to enter the same password again to verify it. Type the same password and press the Enter key. 4. Successful creation of the new administrator account will be verified by a Success message.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, Switches, and other network devices. Use SNMP to configure system features for proper operation, monitor performance and detect potential problems in the Switch, Switch group or network.
DGS-3212SR Stackable Gigabit Layer 2 Switch IP Address Assignment Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme. The Switch is also assigned a unique MAC address by the factory.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 2-10. Assigning the Switch an IP Address In the above example, the Switch was assigned an IP address of 10.24.22.9 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management. Connecting Devices to the Switch After you assign IP addresses to the Switch, you can connect devices to the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 3 Basic Switch Management Before You Start Web-based User Interface Basic Setup Switch Information Switch IP Settings Security IP Management Stations User Accounts Management Saving Changes Factory Reset Restart System Advanced Settings Switch Stack Management All software function of the DGS-3212SR can managed, configured and monitored via the embedded web-based (HTML) interface.
DGS-3212SR Stackable Gigabit Layer 2 Switch Web-based User Interface The user interface provides access to various Switch configuration and management screens, allows you to view performance statistics, and permits you to graphically monitor the system status. Areas of the User Interface The figure below shows the user interface. The user interface is divided into three distinct areas as described in the table below. Area 1 Area 3 Area 2 Figure 3-1.
DGS-3212SR Stackable Gigabit Layer 2 Switch Login to Web Manager To begin managing the Switch simply run the browser you have installed on your computer and point it to the IP address you have defined for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch. NOTE: The Factory default IP address for the Switch is 10.90.90.90. In the Welcome page, click on the Login hyperlink; this opens a login dialog box.
DGS-3212SR Stackable Gigabit Layer 2 Switch Basic Setup The subsections below describe how to change some of the basic settings for the Switch such as changing IP settings and assigning user names and passwords for management access privileges, as well as how to save the changes and restart the Switch. Switch Information The first page displayed upon logging in is the System Information (Basic Settings) window.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 3-3. Switch IP Settings window NOTE: The Switch’s factory default IP address is 10.90.90.90 with a subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0. To manually assign the Switch’s IP address, subnet mask, and default gateway address: • Select Manual from the Get IP From drop-down menu. • Enter the appropriate IP address and subnet mask.
DGS-3212SR Stackable Gigabit Layer 2 Switch Subnet Mask A Bitmask that determines the extent of the subnet that the Switch is on. Should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal) between 0 and 255. The value should be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and 255.255.255.0 for a Class C network, but custom subnet masks are allowed.
DGS-3212SR Stackable Gigabit Layer 2 Switch Security IP Management Stations Configuration Use the Security IP Management window to define up to four community strings. Community strings are used to verify who can receive SNMP information from the Switch. To access the Security IP Management window, click Trusted Host in the Security folder. Figure 3-4. Security IP Management window Use the Security IP Management window to select up to three management stations used to manage the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch To modify or delete an existing user, click on the Modify button for that user. Figure 3- 7. User Account Modify Table window Modify or delete an existing user account in the User Account Modify Table window. To delete the user account, click on the Delete button. To change the password, type in the Old Password, then enter the New Password and retype it in the Confirm New Password entry field. Click Apply to implement changes made.
DGS-3212SR Stackable Gigabit Layer 2 Switch Save Changes Changes made to the Switch’s configuration must be saved in order to retain them. Access the Save Configuration window by clicking the Save Changes button located in the Maintenance folder. Figure 3- 8. Save Configuration window The Switch has two levels of memory, normal RAM and non-volatile or NV-RAM. To save all the changes made in the current session to the Switch’s flash memory, click the Save Configuration button.
DGS-3212SR Stackable Gigabit Layer 2 Switch • Reset Config − Returns all configuration settings to the factory default settings except the stacking mode configuration, but does not save the settings or reboot the Switch. If you select this option the Switch configuration will be returned to the factory default settings for the current session only. When the Switch is rebooted, it will return to the last configuration saved to the Switch’s NV-RAM using the Save Changes option.
DGS-3212SR Stackable Gigabit Layer 2 Switch Advanced Settings To view the following window, click Configuration > Advanced Settings: Figure 3- 11. Switch Information (Advanced Settings) window The Advanced Settings options are summarized in the table below: Parameter Description Serial Port Auto Logout Select the logout time used for the console interface. This automatically logs the user out after an idle period of time as defined.
DGS-3212SR Stackable Gigabit Layer 2 Switch Multicast Router Only If this option is enabled and IGMP Snooping is also enabled, the Switch forwards all multicast traffic to a multicast-enabled router only. Otherwise, the Switch will forward all multicast traffic to any IP router. Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet choose Disabled. Telnet TCP Port Number (1-65535) The Telnet TCP port number.
DGS-3212SR Stackable Gigabit Layer 2 Switch Switch Stack Management The DGS-3212SR has a possible twelve gigabit ports that may be used in standalone mode or can be used in a stacking configuration to provide up to 576 10/100 Mbps ports and 12 Gigabit ports in a star architecture. For stacking, the DGS-3212SR will be the master switch of a stack of DES-3226S switches. For more information on stacking see Sections 1 and 2 of this manual regarding stacking and the DGS-3212SR.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 3- 13. Stack Mode Setup (stacking enabled) window Variables in this window are described below: Parameter Description ID Displays the Switch’s order in the stack. The Switch with a unit ID of 15 is the master Switch. MAC Address Displays the unique address of the Switch assigned by the factory. Port Range Displays the total number of ports on the Switch. Note that the stacking port is included in the total count.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 3- 14.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 4 Basic Configuration Switch Information IP Address Advanced Settings Port Configuration Port Description Port Mirroring Traffic Control Link Aggregation Port Access Entity IGMP Snooping Spanning Tree Forwarding & Filtering VLANs QoS MAC Notification Port Security Configuration System Log Server SNTP Settings Access Profile Table The DGS-3212SR’s Web interface is divided into six main folders: Configuration, Security, Management, Monitoring, Maintenance,
DGS-3212SR Stackable Gigabit Layer 2 Switch Switch Information The first page displayed upon logging in is the System Information (Basic Settings) window. This window can be accessed at any time by clicking the Switch Information link in the Configuration folder. Figure 4- 1. Switch Information (Basic Settings) window This window displays general information about the Switch including its MAC Address, Hardware Boot PROM and Firmware versions, and installed module information.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 2. Switch IP Settings window NOTE: The Switch’s factory default IP address is 10.90.90.90 with a subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0. To manually assign the Switch’s IP address, subnet mask, and default gateway address: • Select Manual from the Get IP From drop-down menu. • Enter the appropriate IP address and subnet mask.
DGS-3212SR Stackable Gigabit Layer 2 Switch The fields which require entries under this option are as follows: Subnet Mask A Bitmask that determines the extent of the subnet that the Switch is on. Should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal) between 0 and 255. The value should be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and 255.255.255.0 for a Class C network, but custom subnet masks are allowed.
DGS-3212SR Stackable Gigabit Layer 2 Switch Advanced Settings To view the following window, click Configuration > Advanced Settings: Figure 4- 3. Switch Information (Advanced Settings) window The Advanced Settings options are summarized in the table below: Parameter Description Serial Port Auto Logout Select the logout time used for the console interface. This automatically logs the user out after an idle period of time as defined.
DGS-3212SR Stackable Gigabit Layer 2 Switch Multicast Router Only If this option is enabled and IGMP Snooping is also enabled, the Switch forwards all multicast traffic to a multicast-enabled router only. Otherwise, the Switch will forward all multicast traffic to any IP router. Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet choose Disabled. Telnet TCP Port Number (1-65535) The Telnet TCP port number.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Configuration To configure basic port settings such as port speed, duplex, and learning state, use the Port Configuration window. Click the Port Configuration link in the Configuration folder: Figure 4- 4. Port Configuration window To configure Switch ports: • Choose the Unit from the pull-down menu. • Choose the port or sequential range of ports using the From…To… port pull-down menus.
DGS-3212SR Stackable Gigabit Layer 2 Switch port settings with any option other than Auto. The Switch allows the user to configure two types of gigabit connections; 1000M/Full_M and 1000M/Full_S. Gigabit connections are only supported in full duplex connections and take on certain characteristics that are different from the other choices listed.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Description The Switch supports a port description feature where the user may name various ports on the Switch. To assign names or descriptions to various ports, click Port Description on the Configuration folder: Figure 4- 5. Port Description Setting window The user may set the following parameters: Parameter Description Unit This is the Unit ID of a Switch in a Switch stack. The number 15 indicates a DGS-3212SR Switch in standalone mode.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port. Follow the steps below to set up port mirroring. To view this window, click Configuration > Port Mirroring. Figure 4- 6.
DGS-3212SR Stackable Gigabit Layer 2 Switch Traffic Control Use the Traffic Control Setting window to enable or disable storm control and adjust the threshold for multicast and broadcast storms, as well as DLF (Destination Look Up Failure). Traffic control settings are applied to individual Switch modules. To view this window, click Configuration > Traffic Control. Figure 4- 7.
DGS-3212SR Stackable Gigabit Layer 2 Switch Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The DGS-3212SR supports up to six port trunk groups with two to eight ports in each group. A potential bit rate of 8000 Mbps can be achieved. Figure 4- 8. Example of Port Trunk Group The Switch treats all ports in a trunk group as a single port.
DGS-3212SR Stackable Gigabit Layer 2 Switch The Spanning Tree Protocol will treat a link aggregation group as a single link, on the Switch level. On the port level, the STP will use the port parameters of the Master Port in the calculation of port cost and in determining the state of the link aggregation group. If two redundant link aggregation groups are configured on the Switch, STP will block one entire group, in the same way STP will block a single port that has a redundant link.
DGS-3212SR Stackable Gigabit Layer 2 Switch Master Port Choose the Master port for the trunk group. Member Unit Choose the Switch unit on which to set up a trunk group. Trunk groups must be confined to ports on a single Switch. Port Map Choose the members of the trunked group. Up to eight ports per group can be assigned to a group. Flooding Port A trunking group must designate one port to allow transmission of broadcasts and unknown unicasts.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description Unit This is the Unit ID of a Switch in a Switch stack. The number 15 indicates a DGS-3212SR Switch in standalone mode. From/To A consecutive group of ports may be configured starting with the selected port. Mode Active – Active LACP ports are capable of processing and sending LACP control frames. This allows LACP compliant devices to negotiate the aggregated link so the group may be changed dynamically as needs require.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 14. The Authentication Server Authenticator The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator serves two purposes when utilizing 802.1x. The first purpose is to request certification information from the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before access is granted to the Client.
DGS-3212SR Stackable Gigabit Layer 2 Switch Client The Client is simply the end station that wishes to gain access to the LAN or switch services. All end stations must be running software that is compliant with the 802.1x protocol. For users running Windows XP, that software is included within the operating system. All other users are required to attain 802.1x client software from an outside source.
DGS-3212SR Stackable Gigabit Layer 2 Switch The D-Link implementation of 802.1x allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network. 2.
DGS-3212SR Stackable Gigabit Layer 2 Switch MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client Network access controlled port Network access uncontrolled port Figure 4- 19. Example of Typical MAC-Based Configuration In order to successfully make use of 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch 802.1X Authenticator Settings To display the current 802.1X Authenticator Settings on the Switch, click Configuration > Port Access Entity > 802.1x Authenticator Settings, which will display the following window. Figure 4- 20. 1st 802.1X Authenticator Settings window To configure the 802.1X Authenticator settings for a given port, click on the blue port number link under the Port heading. This will open the second 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch The following Authenticator Settings parameters can be set: Parameter Description Unit Allows you to specify a Switch in a Switch stack using that Switch’s Unit ID. The number 15 indicates a Switch in standalone mode. From/To A consecutive group of ports may be configured starting with the selected port.
DGS-3212SR Stackable Gigabit Layer 2 Switch PAE System Control To set the port authenticating settings, open the Port Access Entity folder, and then the PAE System Control folder. Finally, click on the 802.1X Capability Settings link. 802.1X Capability Settings The following window will allow the user to set the Capability settings for the Switch on a per port basis. This window can be viewed by clicking Configuration > Port Access Entity > PAE System Control > 802.1x Capability Settings. Figure 4- 22.
DGS-3212SR Stackable Gigabit Layer 2 Switch Initializing Ports for Port-Based 802.1x Existing 802.1x port and MAC settings are displayed and can be configured using the window below. Click Configuration > Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 4- 23. Initalize Port window for Port-Based 802.1x This window allows you to initialize a port or group of ports.
DGS-3212SR Stackable Gigabit Layer 2 Switch Initializing Ports for MAC Based 802.1x To initialize ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advanced Settings window. Click Configuration > Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 4- 24. Initialize Ports (MAC based 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch Reauthenticate Port(s) for Port Based 802.1x This window allows you to reauthenticate a port or group of ports by choosing a port or group of ports by using the pull down menus From and To and clicking Apply. The Reauthenticate Port Table displays the current status of the reauthenticated port(s) once you have clicked Apply.
DGS-3212SR Stackable Gigabit Layer 2 Switch NOTE: The user must first globally enable 802.1X in the Switch Information (Advanced Settings) window in the Configuration folder before reauthenticating ports. Information in the Reauthenticate Ports Table cannot be viewed before enabling 802.1X. Reauthenticate Port(s) for MAC-based 802.1x To reauthenticate ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advanced Settings window.
DGS-3212SR Stackable Gigabit Layer 2 Switch RADIUS Server The RADIUS feature of the Switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. RADIUS Server Click the RADIUS Server link in the RADIUS Server folder under Port Access Entity. Figure 4- 27.
DGS-3212SR Stackable Gigabit Layer 2 Switch IGMP Snooping In order to use IGMP Snooping it must first be enabled for the entire Switch (see Advanced Settings). You may then finetune the settings for each VLAN using the IGMP Snooping Settings window. When enabled for IGMP snooping, the Switch can open or close a port to a specific Multicast group member based on IGMP messages sent from the device to the IGMP host or vice versa.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description VLAN ID The VLAN ID number. VLAN Name The VLAN name. Query Interval (165535 sec) The Query Interval field is used to set the time (in seconds) between transmitting IGMP queries. Entries between 1 and 65535 seconds are allowed. The default value is 125. Max Response Time (1-25 sec) This determines the maximum amount of time in seconds allowed before sending an IGMP response report.
DGS-3212SR Stackable Gigabit Layer 2 Switch Static Router Ports Entry A static router port is a port that has a multicast router attached to it. Generally, this router would have a connection to a WAN or to the Internet. Establishing a router port will allow multicast packets coming from the router to be propagated through the network, as well as allowing multicast messages (IGMP) coming from the network to be propagated to the router.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description VLAN ID (VID) This is the VLAN ID that, along with the VLAN name, identifies the VLAN where the multicast router is attached. VLAN Name This is the name of the VLAN where the multicast router is attached. Unit This is the Unit ID of the Switch in a Switch stack for which you are creating an entry into the Switch’s static router port table.
DGS-3212SR Stackable Gigabit Layer 2 Switch Spanning Tree This Switch supports three versions of the Spanning Tree Protocol; 802.1d STP, 802.1w Rapid STP and 802.1s MSTP. 802.1d STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP. 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch transition states disabled, blocking and listening used in 802.1d and creates a single state Discarding. In either case, ports do not forward packets. In the STP port transition states disabled, blocking or listening or in the RSTP/MSTP port state discarding, there is no functional difference, the port is not active in the network topology. Table 6-1 below compares how the three protocols differ regarding the port state transition.
DGS-3212SR Stackable Gigabit Layer 2 Switch STP Bridge Global Settings To open the following window, open the Spanning Tree folder in the Configuration menu and click the STP Bridge Global Settings link. Figure 4- 32. STP Bridge Global Settings – STP compatible Figure 4- 33.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 34. STP Bridge Global Settings - MSTP The following parameters can be set: Parameter Description STP Status Use the pull-down menu to enable or disable STP globally on the Switch. The default is Disabled. STP Version Use the pull-down menu to choose the desired version of STP to be implemented on the Switch. There are three choices: STP - Select this parameter to set the Spanning Tree Protocol (STP) globally on the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Max Hops (1-20) Used to set the number of hops between devices in a spanning tree region before the BPDU (bridge protocol data unit) packet sent by the Switch will be discarded. Each switch on the hop count will reduce the hop count by one until the value reaches zero. The Switch will then discard the BDPU packet and the information held for the port will age out. The user may set a hop count from 1 to 20. The default is 20.
DGS-3212SR Stackable Gigabit Layer 2 Switch MST Configuration Table The MST Configuration Table window allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree instance set on the Switch. The Switch initially possesses one CIST or Common Internal Spanning Tree of which the user may modify the parameters for but cannot change the MSTI ID for, and cannot be deleted.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 36. Instance ID Settings window- Add The user may configure the following parameters to create a MSTI in the Switch. Parameter Description MSTI ID Enter a number between 1 and 15 to set a new MSTI on the Switch. Type Create is selected to create a new MSTI. No other choices are available for this field when creating a new MSTI. VID List (1-4094) This field is used to specify the VID range from configured VLANs set on the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Click Apply to implement changes made. To configure the parameters for a previously set MSTI, click on its hyperlinked MSTI ID number, which will reveal the following screen for configuration. Figure 4- 38. Instance ID Settings window - Modify The user may configure the following parameters for a MSTI on the Switch. Parameter Description MSTI ID Displays the MSTI ID previously set by the user.
DGS-3212SR Stackable Gigabit Layer 2 Switch MSTI Settings This window displays the current MSTI configuration settings and can be used to update the port configuration for an MSTI ID. If a loop occurs, the MSTP function will use the port priority to select an interface to put into the forwarding state. Set a higher priority value for interfaces to be selected for forwarding first.
DGS-3212SR Stackable Gigabit Layer 2 Switch STP Instance Settings The following window displays MSTIs currently set on the Switch. To view the following table, click Configuration > Spanning Tree > STP Instance Settings: Figure 4- 41. STP Instance Table window The following information is displayed: Parameter Description Instance Type Displays the instance type(s) currently configured on the Switch. Each instance type is classified by an MSTI ID.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 43. STP Instance Operational Status – Previously Configured MSTI The following parameters may be viewed in the STP Instance Operational Status windows: Parameter Description Designated Root Bridge This field will show the priority and MAC address of the Root Bridge. External Root Cost This defines a metric that indicates the relative cost of forwarding packets to the specified port list. Port cost can be set automatically or as a metric value.
DGS-3212SR Stackable Gigabit Layer 2 Switch Max Age The Max Age may be set to ensure that old information does not endlessly circulate through redundant paths in the network, preventing the effective propagation of the new information. Set by the Root Bridge, this value will aid in determining that the Switch has spanning tree configuration values consistent with other devices on the bridged LAN.
DGS-3212SR Stackable Gigabit Layer 2 Switch the connection to the network for the group. Redundant links will be blocked, just as redundant links are blocked on the Switch level. The STP on the Switch level blocks redundant links between switches (and similar network devices). The port level STP will block redundant links within an STP Group. It is advisable to define an STP Group to correspond to a VLAN group of ports.
DGS-3212SR Stackable Gigabit Layer 2 Switch Forwarding & Filtering The Switch allows permanent or static entries into the forwarding database (FDB). These FDB entries are MAC addresses that will not age out. In addition, multicast forwarding may be customized to conform to rules for the different ports by setting up multicast filter modes for each port. Unicast Forwarding Open the Forwarding & Filtering folder and click on the Unicast Forwarding link.
DGS-3212SR Stackable Gigabit Layer 2 Switch Multicast Forwarding The following figure and table describe how to set up Multicast forwarding on the Switch. Open the Forwarding & Filtering folder and click on the Multicast Forwarding link to see the entry window below: Figure 4- 46. Static Multicast Forwarding Settings window The Static Multicast Forwarding Settings window displays all of the entries made into the Switch’s static multicast forwarding table.
DGS-3212SR Stackable Gigabit Layer 2 Switch VLANs The Switch Web Manager’s VLANs sub-folder is divided into two main windows, 802.1Q Static VLANs and 802.1Q Port Settings. Each is described after a short overview of VLANs. Understanding 802.1Q VLANs This review of 802.1Q VLANs presents some basic background about how VLANs work according to the IEEE 802.1Q standard. VLANs operate according to the same rules regardless of whether the Switching environment is Layer 2 or Layer 3.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 48. 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 50. Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network – if all network devices are 802.1Q compliant). Unfortunately, not all network devices are 802.1Q compliant. These devices are referred to as tag-unaware. 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch Ingress Filtering A port on a Switch where packets are flowing into the Switch and VLAN decisions must be made is referred to as an ingress port. If ingress filtering is enabled for a port, the Switch will examine the VLAN information in the packet header (if present) and decide whether or not to forward the packet. If the packet is tagged with VLAN information, the ingress port will first determine if the ingress port itself is a member of the tagged VLAN.
DGS-3212SR Stackable Gigabit Layer 2 Switch 802.1Q Static VLANs To create or modify an 802.1Q VLAN: In the Configuration folder, open the VLANs folder and click the Static VLAN Entry link to open the following window: Figure 4- 51. 802.1Q Static VLANs window The first 802.1Q Static VLANs window lists all previously configured VLANs by VLAN ID and name. To delete an existing 802.1Q VLAN, click the corresponding Delete button. To create a new 802.1Q VLAN, click the Add button.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description Unit Choose the Switch on which the VLAN will be created. VID (VLAN ID) For a new VLAN entry, type in a unique identifier. This number is used to configure other settings such as GVRP status for ports in the VLAN. Auto Assign – Checking this box will automatically assign a VID to the new VLAN entry. VLAN Name For a new VLAN entry type in a unique name. This name can be used to identify the VLAN for IP interface assignment.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 4- 54. 802.1Q Static VLANs With Added VLAN window To change the port settings of any listed VLAN, click the Modify button. Now click the Modify button in the first 802.1Q Static VLANs window for the newly created VLAN (engineering). A new window appears, use this to configure the port settings to the existing VLAN, exactly as in the Add New VLAN window. Notice that the VID and name cannot be changed.
DGS-3212SR Stackable Gigabit Layer 2 Switch GVRP Settings Open the GVRP Settings window and select the Unit and range of ports to configure. For the selected port or group of ports, choose to enable or disable Ingress checking and establish an acceptable packet rule. Ingress Checking is used to limit traffic by filtering incoming packets that have a PVID does not match the PVID of the port. 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch PVID A Port VLAN Identifier is a classification mechanism that associates a port with a specific VLAN and is used to make forwarding decisions for untagged packets received by the port. For example, if port 2 is assigned a PVID of 3, then all untagged packets received on port 2 will be assigned to VLAN 3. This number is generally the same as the VID number assigned to the port in the Edit 802.1Q VLANs window above.
DGS-3212SR Stackable Gigabit Layer 2 Switch QoS The DGS-3212SR supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing. The Advantages of QoS QoS is an implementation of the IEEE 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch Understanding QoS The Switch has nine priority classes of service, one of which is internal and not configurable. These priority classes of service are labeled as 7, the high class to 0, the lowest class. The eight priority tags, specified in IEEE 802.1p are mapped to the Switch's priority classes of service as follows: • Priority 0 is assigned to the Switch's Q2 class. • Priority 1 is assigned to the Switch's Q0 class.
DGS-3212SR Stackable Gigabit Layer 2 Switch 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. Click on the 802.1p Default Priority link in the QoS sub-folder: Figure 4- 58. Port Default Priority assignment and The Port Priority Table window This page allows you to assign a default 802.1p priority to any given port on the Switch. The priority queues are numbered from 0 − the lowest priority − to 7 − the highest priority. 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch QoS Output Scheduling Configuration QoS can be customized by changing the output scheduling used for the hardware queues in the Switch. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority queues are affected. Changes in scheduling may result in unacceptable levels of packet loss or significant transmission delay.
DGS-3212SR Stackable Gigabit Layer 2 Switch Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single port to a group of ports on either a single Switch (in standalone mode) or a group of ports on another Switch in a Switch stack. This method of segmenting the flow of traffic is similar to using VLANs to limit traffic, but is more restrictive. It provides a method of directing traffic that does not increase the overhead of the Master Switch CPU.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Bandwidth The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. Figure 4- 62. Bandwidth Settings window The following parameters can be set or are displayed: Parameter Description Unit Allows you to specify a Switch in a Switch stack using that Switch’s Unit ID. 15 indicates a Switch in standalone mode.
DGS-3212SR Stackable Gigabit Layer 2 Switch MAC Notification MAC address notification is used to monitor MAC addresses as they are learned and entered into the Switch’s MAC forwarding database. MAC Notification Global Settings The following window will allow the user to globally enable MAC Notification on the Switch. To view this window, click Configuration > MAC Notification > MAC Notification Global Settings. Figure 4- 63.
DGS-3212SR Stackable Gigabit Layer 2 Switch MAC Notification Port Settings Enable or disable MAC notification for ports with the window below. Figure 4- 64. MAC Notification Port Settings window The following parameters can be set: Parameter Description Unit Allows you to specify a Switch in a Switch stack using that Switch’s Unit ID. 15 indicates the DGS-3212SR. From/To A consecutive group of ports may be configured starting with the selected port.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Security Configuration The following three windows will allow the user to implement security functions on a per port basis on the Switch or a switch in a switch stack. To access the following windows, open the Port Security Configuration folder in the Configuration folder.
DGS-3212SR Stackable Gigabit Layer 2 Switch been reset. Port Lock Entry Delete The Port Lock Entry Delete window is used to remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view the following window, click Configuration > Port Security Configuration > Port Lock Entry Delete: Figure 4- 66.
DGS-3212SR Stackable Gigabit Layer 2 Switch System Log Server Use the System Log to keep a record of warning and other pertinent system information. The Switch can send system log (SysLog) messages to up to four designated servers, which can be set on the Switch utilizing the System Log Servers window. To view the following window, click Configuration > System Log Server: Figure 4- 68.
DGS-3212SR Stackable Gigabit Layer 2 Switch Some of the operating system daemons and processes have been assigned Facility values. Processes and daemons that have not been explicitly assigned a Facility may use any of the "local use" facilities or they may use the "user-level" Facility. Those Facilities that have been designated are shown in the following: Bold font means the facility values that the Switch currently supports.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNTP Settings The Simple Network Time Protocol (SNTP) (an adaptation of the Network Time Protocol (NTP)) is configured on the Switch using the following windows. Time Setting The following window will allow the user to configure the time settings for the Switch and can be accessed by clicking Configuration > SNTP Settings > Time Setting. Click Apply to implement changes made. Figure 4- 70.
DGS-3212SR Stackable Gigabit Layer 2 Switch Time Zone and DST Settings The following window is used to set up Time Zone and Daylight Savings configurations for the Switch and can be accessed by clicking Configuration > SNTP Settings > Time Zone and DST. Figure 4- 71. Time Zone and DST Settings window The following parameters can set: Parameter Description Daylight Saving Time State Use this pull-down menu to enable or disable the DST Settings.
DGS-3212SR Stackable Gigabit Layer 2 Switch DST Repeating Settings Repeating - Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula. For example, specify to begin DST on Saturday during the second week of April and end DST on Sunday during the last week of October. From: Which Week of the month Enter the week of the month that DST will start.
DGS-3212SR Stackable Gigabit Layer 2 Switch Access Profile Table Access profiles allow you to establish criteria to determine whether or not the Switch will forward packets based on the information contained in each packet’s header. These criteria can be specified on a basis of VLAN, MAC address or IP address. Creating an access profile is divided into two basic parts.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 to 255. Type Select profile based on Ethernet (MAC Address), IP address or packet content mask. This will change the menu according to the requirements for the type of profile. • Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header.
DGS-3212SR Stackable Gigabit Layer 2 Switch The page shown below is the Access Profile Configuration window for IP: Figure 4- 74. Access Profile Configuration (IP) window The following parameters can be set: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 to 255. Select profile based on Ethernet (MAC Address), IP address, packet content mask or IPv6.
DGS-3212SR Stackable Gigabit Layer 2 Switch Source IP Mask Source IP Mask - Enter an IP address mask for the source IP address. Destination IP Mask Destination IP Mask - Enter an IP address mask for the destination MAC address. DSCP Selecting this option instructs the Switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding. Selecting this option instructs the Switch to examine the protocol type value in each frame’s header.
DGS-3212SR Stackable Gigabit Layer 2 Switch The window shown below is the Access Profile Configuration window for Packet Content Mask. Figure 4- 75. Access Profile Configuration (Packet Content Mask) window This window will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified.
DGS-3212SR Stackable Gigabit Layer 2 Switch Select profile based on Ethernet (MAC Address), IP address or packet content mask. This will change the menu according to the requirements for the type of profile. Type • Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header. • Select IP to instruct the Switch to examine the IP address in each frame’s header. • Select Packet Content Mask to specify a mask to hide the content of the packet header.
DGS-3212SR Stackable Gigabit Layer 2 Switch Configure the Access Rule Configuration settings for Ethernet on the window below. Figure 4- 77. Access Rule Configuration (Ethernet) window The following parameters can be set: Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
DGS-3212SR Stackable Gigabit Layer 2 Switch Replace priority − Click the corresponding box if you want to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that packets that do not match the access profile are not forwarded by the Switch and will be filtered. Access ID Type in a unique identifier number for this access.
DGS-3212SR Stackable Gigabit Layer 2 Switch Configure the Access Rule Configuration settings for the Packet Content Mask on the window below. Figure 4- 79. Access Rule Configuration (Package Content Mask) window The following parameters can be set: Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
DGS-3212SR Stackable Gigabit Layer 2 Switch Access ID Type in a unique identifier number for this access. This value can be set from 1 to 255. Type Selected profile based on Ethernet (MAC Address), IP address or packet content mask. This will change the menu according to the requirements for the type of profile. • Ethernet instructs the Switch to examine the layer 2 part of each packet header. • IP instructs the Switch to examine the IP address in each frame’s header.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 5 Security Trusted Host Secure Socket Layer (SSL) Secure Shell (SSH) Access Authentication Control Trusted Host The Security IP Management window allows you to specify the IP addresses of management stations (PCs) on your network that will be allowed to access the Switch’s Web-based management agent. You can enter up to three IP addresses of local hosts (on the same subnet as the Switch) that will be allowed to manage the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Secure Socket Layer (SSL) Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption.
DGS-3212SR Stackable Gigabit Layer 2 Switch To download certificates, set the following parameters and click Apply. Parameter Description Server IP Enter the IP address of the TFTP server where the certificate files are located. Certificate File Name Enter the path and the filename of the certificate file to download. This file must have a .der extension. (Ex. c:/cert.der) Key File Name Enter the path and the filename of the key file you wish to download. This file must have a .der extension (Ex.
DGS-3212SR Stackable Gigabit Layer 2 Switch RSA EXPORT with RC4 40 MD5 This ciphersuite combines the RSA Export key exchange and stream cipher RC4 encryption with 40-bit keys. Use the pull-down menu to enable or disable this ciphersuite. This field is Enabled by default. Status You can individually enable or disable these four ciphersuites above or use this Status drop-down menu to globally turn encryption on or off without changing the ciphersuite settings you have already made.
DGS-3212SR Stackable Gigabit Layer 2 Switch Secure Shell (SSH) SSH is the abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows you to securely login to remote host computers, to execute commands safely in a remote computer and so forth, and to provide secure encrypted and authenticated communications between two non-trusted hosts.
DGS-3212SR Stackable Gigabit Layer 2 Switch To set up the SSH server on the Switch, configure the following parameters and click Apply. Parameter Description SSH Server Status Use the pull-down menu to enable or disable SSH on the Switch. The default is Disabled. Max Session (1-8) Enter a value between 1 and 8 to set the number of users that may simultaneously access the Switch. The default is 8. Time Out (120-600) Allows the user to set the connection timeout.
DGS-3212SR Stackable Gigabit Layer 2 Switch SSH Algorithm The Encryption Algorithm window allows the configuration of the desired types of SSH algorithm used for authentication encryption. There are four categories of algorithms listed and specific algorithms in each may be enabled or disabled by using their corresponding pull-own menu. All algorithms are enabled by default. To view the following window, click Security > Secure Shell (SSH) > SSH Algorithm. Figure 5- 5.
DGS-3212SR Stackable Gigabit Layer 2 Switch AES128-CBC Use the pull-down menu to enable or disable the Advanced Encryption Standard AES128 encryption algorithm with Cipher Block Chaining. The default is Enabled. AES192-CBC Use the pull-down menu to enable or disable the Advanced Encryption Standard AES192 encryption algorithm with Cipher Block Chaining. The default is Enabled.
DGS-3212SR Stackable Gigabit Layer 2 Switch SSH User Authentication The following windows are user to configure parameters for users attempting to access the Switch through SSH. To access the following window, click Security > Secure Shell (SSH) > SSH User Authentication. Figure 5- 6. Current Accounts window In the example window above, the user account “TheTrinity” has been previously set using the User Accounts window in the Management folder.
DGS-3212SR Stackable Gigabit Layer 2 Switch Host Name Enter an alphanumeric string of up to 31 characters identifying the remote SSH user. This parameter is only used in conjunction with the Host Based choice in the Auth. Mode. Host IP Enter the corresponding IP address of the SSH user. This parameter is only used in conjunction with the Host Based choice in the Auth. Mode. Click Apply to implement changes made.
DGS-3212SR Stackable Gigabit Layer 2 Switch Access Authentication Control The TACACS / XTACACS / TACACS+ / RADIUS commands let you secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password. If TACACS / XTACACS / TACACS+ / RADIUS authentication is enabled on the Switch, it will contact a TACACS / XTACACS / TACACS+ / RADIUS server to verify the user.
DGS-3212SR Stackable Gigabit Layer 2 Switch Policy & Parameters This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login. To access the following window, click Security > Access Authentication Control > Policy & Parameters: Figure 5- 8.
DGS-3212SR Stackable Gigabit Layer 2 Switch Application Authentication Settings This window is used to configure switch configuration applications (console, Telnet, SSH, and web) for login at the user level and at the administration level (Enable Admin) utilizing a previously configured method list. Figure 5- 9. Application’s authentication settings window The following parameters can be set: Parameter Description Application Lists the configuration applications on the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Authentication Server Group This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to group RADIUS, TACACS, TACACS+, and XTACACS server hosts into user-defined categories for authentication using method lists. The user may define the type of server group by protocol or by previously defined server group.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 5- 12. Authentication Server Group Table Add Settings window Enter a group name of up to 16 characters into the Group Name field and click Apply. The entry should appear in the Authentication Server Group Settings window. NOTE: The user must configure Authentication Server Hosts using the Authentication Server Host Settings window before adding hosts to the list.
DGS-3212SR Stackable Gigabit Layer 2 Switch Authentication Server Host This window will set user-defined Authentication Server Hosts for the RADIUS, TACACS, TACACS+, and XTACACS security protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the Switch will send authentication packets to a remote RADIUS/TACACS/XTACACS/TACACS+ server host on a remote host.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 5- 15. Authentication Server Host Setting – Edit window Configure the following parameters to add or edit an Authentication Server Host: Parameter Description IP Address The IP address of the remote server host to add. Protocol The protocol used by the server host. The user may choose one of the following: TACACS – Enter this parameter if the server host utilizes the TACACS protocol.
DGS-3212SR Stackable Gigabit Layer 2 Switch Login Method Lists This command will configure a user-defined or default Login Method List of authentication techniques for users logging on to the Switch. The sequence of techniques implemented in this command will affect the authentication result. For example, if a user enters a sequence of techniques, for example TACACS – XTACACS – local, the Switch will send an authentication request to the first TACACS host in the server group.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 5- 18. Login Method List – Edit window To define a Login Method List, set the following parameters and click Apply: Parameter Description Method List Name Enter a method list name defined by the user of up to 15 characters.
DGS-3212SR Stackable Gigabit Layer 2 Switch Enable Method Lists This window is used to set up Method Lists to promote users with normal level privileges to Administrator level privileges using authentication methods on the Switch. Once a user acquires normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch, which is defined by the Administrator.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 5- 21. Enable Method List – Edit window To define an Enable Login Method List, set the following parameters and click Apply: Parameter Description Method List Name Enter a method list name defined by the user of up to 15 characters.
DGS-3212SR Stackable Gigabit Layer 2 Switch Local Enable Password This window will configure the locally enabled password for Enable Admin. When a user chooses the Local_Enable method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch. To view the following window, click Security > Access Authentication Control > Local Enable Password: Figure 5- 22.
DGS-3212SR Stackable Gigabit Layer 2 Switch Enable Admin This window is for users who have logged on to the Switch on the normal user level, and wish to be promoted to the administrator level. After logging on to the Switch, users will have only user level privileges. To gain access to administrator level privileges, the user will open this window and will have to enter an authentication password.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 6 Management User Accounts SNMP Manager User Accounts Use the User Account Management window to control user privileges. To view existing User Accounts, open the Management folder and click on the User Accounts link. This will open the User Account Management window, as shown below. Figure 6- 1. User Account Management window To add a new user, click on the Add button. To modify or delete an existing user, click on the Modify button for that user.
DGS-3212SR Stackable Gigabit Layer 2 Switch Modify or delete an existing user account in the User Account Modify Table window. To delete the user account, click on the Delete button. To change the password, type in the New Password and retype it in the Confirm New Password entry field. Choose the level of privilege (Admin or User) from the Access Right drop-down menu. Admin and User Privileges There are two levels of user privileges: Admin and User.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP User Table Display To display the detailed entry for a given user, click on the blue hyperlinked User Name. This will open the SNMP User Table Display window, as shown below. Figure 6- 5. SNMP User Table Display window The following parameters are displayed: Parameter Description User Name An alphanumeric string of up to 32 characters. This is used to identify the SNMP users.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 6- 6. SNMP User Table Configuration window The following parameters can set: Parameter Description User Name Enter an alphanumeric string of up to 32 characters. This is used to identify the SNMP user. Group Name This name is used to specify the SNMP group created can request SNMP messages. SNMP Version V1 - Specifies that SNMP version 1 will be used. V2 - Specifies that SNMP version 2 will be used. V3 - Specifies that SNMP version 3 will be used.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP View Table The SNMP View Table is used to assign views to community strings that define which MIB objects can be accessed by a remote SNMP manager. To view the SNMP View Table window, open the SNMP Manager folder, located in the Management folder, and click the SNMP View Table entry. The following window should appear: Figure 6- 7.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP Group Table An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu. To view the SNMP Group Table, open the SNMP Manager folder in the Management folder and click the SNMP Group Table entry. The following window should appear: Figure 6- 9. SNMP Group Table window To delete an existing SNMP Group Table entry, click the corresponding X icon under the Delete heading.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 6- 11. SNMP Group Table Configuration window The following parameters can be set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users. Read View Name This name is used to specify the SNMP group created can request SNMP messages. Write View Name Specify a SNMP group name for users that are allowed SNMP write privileges to the Switch's SNMP agent.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP Community Table Use this table to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the Switch. One or more of the following characteristics can be associated with the community string: • An Access List of IP addresses of SNMP managers that are permitted to use the community string to gain access to the Switch's SNMP agent.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP Host Table Use the SNMP Host Table to set up SNMP trap recipients. Open the SNMP Manager folder, located in the Management folder, and click on the SNMP Host Table link. This will open the SNMP Host Table page, as shown below. To delete an existing SNMP Host Table entry, click the corresponding under the Delete heading.
DGS-3212SR Stackable Gigabit Layer 2 Switch SNMP Engine ID The Engine ID is a unique identifier used for SNMP V3 implementations. This is an alphanumeric string used to identify the SNMP engine on the Switch. To display the Switch's SNMP Engine ID, open the SNMP Manger folder, located in the Management folder and click on the SNMP Engine ID link. This will open the SNMP Engine ID Configuration window, as shown below. Figure 6- 15.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 7 Monitoring Stack Information Port Utilization CPU Utilization Packets Errors Size MAC Address Switch History Log IGMP Snooping Group IGMP Snooping Forwarding VLAN Status Router Port Session Table The DGS-3212SR provides extensive network monitoring capabilities that can be viewed from the Monitoring folder.
DGS-3212SR Stackable Gigabit Layer 2 Switch Stack Information The DGS-3212SR Switch can be used as a standalone high-capacity Switch or be used in a stacked arrangement. There are two hardware requirements to use the Switch in a stacked group: 1. The proper module(s) must be installed to use the DES-3226S. One or two DEM-540, DEM-340T or the DEM-340MG Stacking modules must be installed in order to use the Switch in a stacked configuration. 2.
DGS-3212SR Stackable Gigabit Layer 2 Switch The Stack Information Table displays the read-only information listed in the table on the next page. The current order in the Switch stack is also displayed on the front panel of each slave Switch, under the STACK NO. heading. The Stack ID LED display on the front panel of the DGS-3212SR will always display an F (15 in hex), regardless of whether the DGS-3212SR is the master Switch in a Switch stack or in standalone mode.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 3.
DGS-3212SR Stackable Gigabit Layer 2 Switch Port Utilization The Port Utilization window displays the percentage of the total available bandwidth being used on the port. To view the port utilization, click on the Monitoring folder and then the Port Utilization link: Figure 7- 4. Utilization window The following field can be set: Parameter Description Unit Allows you to specify a Switch in a Switch stack using that Switch’s Unit ID. The number 15 indicates a Switch in standalone mode.
DGS-3212SR Stackable Gigabit Layer 2 Switch CPU Utilization This CPU Utilization window displays the moving average of the CPU. To view the CPU utilization, click on the Monitoring folder and then the CPU Utilization link: Figure 7- 5. CPU Utilization window The following field can be set: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch Packets Various statistics can be viewed as either a line graph or a table: • Received Packets • Received Unicast/Multicast/Broadcast Packets • Transmitted Packet Received Packets Click the Received (RX) link in the Packets folder of the Monitoring menu to view the following graph of packets received on the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 7. Rx Packets Analysis (table for Bytes & Packets) window Select the desired Switch using the Unit drop-down menu and the desired port using the Port drop-down menu. The Time Interval field sets the interval at which the error statistics are updated. The following field can be set: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch Received Unicast/Multicast/Broadcast Packets Click the UMB Cast (RX) link in the Packets folder of the Monitoring menu to view the following graph of UMB cast packets received on the Switch. To select a port to view these statistics for, first select the Switch in the Switch stack by using the Unit pull-down menu and then select the port by using the Port pull-down menu.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 9. Rx Packets Analysis (table for Unicast, Multicast, & Broadcast) window Select the desired Switch using the Unit drop-down menu and the desired port using the Port drop-down menu. The Time Interval field sets the interval at which the error statistics are updated. The following fields can be set: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch Transmitted Packets Click the Transmitted (TX) link in the Packets folder of the Monitoring menu to view the following graph of packets transmitted from the Switch. To select a port to view these statistics for, first select the Switch in the Switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 11. Tx Packets Analysis (table for Bytes & Packets) window Select the desired Switch using the Unit drop-down menu and the desired port using the Port drop-down menu. The Time Interval field sets the interval at which the error statistics are updated. The following fields can be set or are displayed: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch Errors Various statistics can be viewed as either a line graph or a table: • Received Errors • Transmitted Errors Received Errors Click the Received (RX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch. To select a port to view these statistics for, first select the Switch in the Switch stack by using the Unit pull-down menu and then select the port by using the Port pull-down menu.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 13. Rx Error Analysis (table) window Select the desired Switch using the Unit drop-down menu and the desired port using the Port drop-down menu. The Time Interval field sets the interval at which the error statistics are updated. The following fields can be set or are displayed: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch Transmitted Errors Click the Transmitted (TX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull-down menu.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 15. Tx Error Analysis (table) window Select the desired Switch using the Unit drop-down menu and the desired port using the Port drop-down menu. The Time Interval field sets the interval at which the error statistics are updated. The following fields can be set: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch Size Various statistics can be viewed as either a line graph or a table: • Packet Size Packet Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table. Two windows are offered. To select a port to view these statistics for, first select the Switch in the Switch stack by using the Unit pull-down menu and then select the port by using the Port pull-down menu.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 7- 17. Packet Size Analysis (table) window Select the desired Switch using the Unit drop-down menu and the desired port using the Port drop-down menu. The Time Interval field sets the interval at which the error statistics are updated. The following field can be set: Parameter Description Time Interval <1s> Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
DGS-3212SR Stackable Gigabit Layer 2 Switch MAC Address This allows the Switch’s dynamic MAC address forwarding table to be viewed. When the Switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table. These entries are then used to forward packets through the Switch. Figure 7- 18.
DGS-3212SR Stackable Gigabit Layer 2 Switch Parameter Description VLAN Name Enter a VLAN Name for the forwarding table to be browsed by. MAC Address Enter a MAC address for the forwarding table to be browsed by. Unit – Port Select the Switch Unit ID of the Switch in the Switch stack and then the port by using the corresponding pull-down menus. Find Allows the user to move to a sector of the database corresponding to a user defined port, VLAN, or MAC address.
DGS-3212SR Stackable Gigabit Layer 2 Switch Switch History Log The Switch History window displays the Switch’s history log, as compiled by the Switch’s management agent. Figure 7- 19. Switch History window The Switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC connected to the console manager. Clicking Next at the bottom of the window will allow you to display all the Switch Trap Logs.
DGS-3212SR Stackable Gigabit Layer 2 Switch IGMP Snooping Table This window allows the Switch’s IGMP Snooping Group Table to be viewed. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. The number of IGMP reports that were snooped is displayed in the Reports field. To view the IGMP Snooping Group Table window, click IGMP Snooping Group on the Monitoring menu: Figure 7- 20.
DGS-3212SR Stackable Gigabit Layer 2 Switch NOTE: To configure IGMP snooping for the xStack family of switches, go to the Configuration folder and select IGMP Snooping. Configuration and other information concerning IGMP snooping may be found in Section 6 of this manual under IGMP Snooping. IGMP Snooping Forwarding This window will display the current IGMP snooping forwarding table entries currently configured on the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch VLAN Status This window displays the status of VLANs on any Switch in a Switch stack managed by a DGS-3212SR. Figure 7- 22.
DGS-3212SR Stackable Gigabit Layer 2 Switch Router Port This displays which of the Switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. A router port that is dynamically configured by the Switch is designated by D. Figure 7- 23.
DGS-3212SR Stackable Gigabit Layer 2 Switch Session Table This window displays the management sessions since the Switch was last rebooted. Figure 7- 24.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 8 Maintenance TFTP Services PING Test Save Changes Factory Reset Restart System Logout TFTP Services Trivial File Transfer Protocol (TFTP) services allow the Switch firmware to be upgraded by transferring a new firmware file from a TFTP server to the Switch. A configuration file can also be loaded into the Switch from a TFTP server, Switch settings can be saved to the TFTP server, and a history log can be uploaded from the Switch to the TFTP server.
DGS-3212SR Stackable Gigabit Layer 2 Switch Download Configuration File To download a configuration file from a TFTP server, click on the Maintenance folder and then the TFTP Service folder and then the Download Configuration File link: Figure 8- 2. Use Configuration File on Server window Enter the IP address of the TFTP server and specify the location of the Switch configuration file on the TFTP server. Click Apply to record the IP address of the TFTP server. Click Start to initiate the file transfer.
DGS-3212SR Stackable Gigabit Layer 2 Switch Ping Test PING is a small program that sends data packets to the IP address you specify. The destination node then returns the packets to the Switch. This is very useful to verify connectivity between the Switch and other nodes on the network. Figure 8- 5. Ping Test window The Infinite times checkbox, in the Repeat Pinging for field, tells PING to keep sending data packets to the specified IP address until the program is stopped.
DGS-3212SR Stackable Gigabit Layer 2 Switch Factory Reset The Factory Reset function has several options when resetting the Switch. Some of the current configuration parameters can be retained while resetting all other configuration parameters to their factory defaults. Please note that the Reset System option will enter the factory default parameters into the Switch’s non-volatile RAM, and then restart the Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Restart System The following window is used to restart the Switch. Clicking the Yes click-box will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Clicking the No click-box instructs the Switch not to save the current configuration before restarting the Switch. All of the configuration information entered from the last time Save Changes was executed will be lost.
DGS-3212SR Stackable Gigabit Layer 2 Switch Section 9 Single IP Management SIM Settings Topology Firmware Upgrade Configuration Backup/Restore Simply put, Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages to implement “Single IP Management” feature: 1. SIM can simplify management of small workgroups or wiring closets while scaling the network to handle increased bandwidth demand. 2.
DGS-3212SR Stackable Gigabit Layer 2 Switch It is not a CS or MS of another IP group. It is connected to the CS through the CS management VLAN. → Candidate Switch (CaS) – This is a switch that is ready to join a SIM group but is not yet a member of the SIM group. The Candidate Switch may join the SIM group through an automatic function of the DGS-3212SR, or by manually configuring it to be a MS of a SIM group.
DGS-3212SR Stackable Gigabit Layer 2 Switch SIM Settings The DGS-3212SR is set as a Candidate (CaS) switch as its factory default configuration and Single IP Management will be disabled. To enable SIM for the Switch using the Web interface, go to the Single IP Management folder and click the SIM Settings link, revealing the following window. Figure 9- 1. SIM Settings window (disabled) Change the SIM State to Enabled using the pull down menu and click Apply.
DGS-3212SR Stackable Gigabit Layer 2 Switch Topology The Topology window will be used to configure and manage the Switch within the SIM group and requires Java script to function properly on your computer. The following message should appear the first time the user clicks the Topology link in the Single IP Management folder. Figure 9- 3. Java window Clicking the here link will setup the Java Runtime Environment on your server and lead you to the topology window, as seen below. Figure 9- 4.
DGS-3212SR Stackable Gigabit Layer 2 Switch Speed Displays the connection speed between the CS and the MS or CaS. Remote Port Displays the number of the physical port on the MS or CaS that the CS is connected to. The CS will have no entry in this field. MAC Address Displays the MAC Address of the corresponding Switch. Model Name Displays the full Model Name of the corresponding Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Commander switch of other group Layer 2 member switch Layer 3 member switch Member switch of other group Layer 2 candidate switch Layer 3 candidate switch Unknown device Non-SIM devices 189
DGS-3212SR Stackable Gigabit Layer 2 Switch Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does. See the window below for an example. Figure 9- 6.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 9- 7.
DGS-3212SR Stackable Gigabit Layer 2 Switch Right-click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group Icon Figure 9- 8. Right-clicking a Group Icon The following options may appear for the user to configure: • Collapse - To collapse the group that will be represented by a single icon. • Expand - To expand the SIM group, in detail.
DGS-3212SR Stackable Gigabit Layer 2 Switch Remote Port No. Displays the number of the physical port on the MS or CaS that the CS is connected to. The CS will have no entry in this field. Local Port No. Displays the number of the physical port on the CS that the MS or CaS is connected to. The CS will have no entry in this field. Port Speed Displays the connection speed between the CS and the MS or CaS Commander Switch Icon Figure 9- 10.
DGS-3212SR Stackable Gigabit Layer 2 Switch Member Switch Icon Figure 9- 12. Right-clicking a Member icon The following options may appear for the user to configure: • Collapse - To collapse the group that will be represented by a single icon. • Expand - To expand the SIM group, in detail. • Remove from group - Remove a member from a group. • Configure - Launch the web management to configure the Switch. • Property - To pop up a window to display the device information.
DGS-3212SR Stackable Gigabit Layer 2 Switch Candidate Switch Icon Figure 9- 13. Right-clicking a Candidate icon The following options may appear for the user to configure: • Collapse - To collapse the group that will be represented by a single icon. • Expand - To expand the SIM group, in detail. • Add to group - Add a candidate to a group.
DGS-3212SR Stackable Gigabit Layer 2 Switch Menu Bar The Single IP Management window contains a menu bar for device configurations, as seen below. Figure 9- 15. Menu Bar of the Topology View The five menus on the menu bar are as follows. File • Print Setup - Will view the image to be printed. • Print Topology - Will print the topology map. • Preference - Will set display properties, such as polling interval, and the views to open at SIM startup. Group • Add to group - add a candidate to a group.
DGS-3212SR Stackable Gigabit Layer 2 Switch Figure 9- 17. About window NOTE: Upon this firmware release, some functions of the SIM can only be configured through the Command Line Interface. See the DGS-3212SR Command Line Interface Reference Manual for more information on SIM and its configurations. Firmware Upgrade This screen is used to upgrade firmware from the Commander Switch to the Member Switch.
DGS-3212SR Stackable Gigabit Layer 2 Switch Appendix A Technical Specifications General Standard: IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1 P/Q VLAN IEEE 802.3x Full-duplex Flow Control IEEE 802.
DGS-3212SR Stackable Gigabit Layer 2 Switch MAC Address Learning: Automatic update. Forwarding Table Age Time: Max age: 10 - 1000000 seconds. Default = 300.
DGS-3212SR Stackable Gigabit Layer 2 Switch Appendix B Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagrams and tables show the standard RJ-45 receptacle/connector and their pin assignments. Figure B- 1.
DGS-3212SR Stackable Gigabit Layer 2 Switch Appendix C Cable Lengths Use the following table to as a guide for the maximum cable lengths.
DGS-3212SR Stackable Gigabit Layer 2 Switch Glossary 1000BASE-LX: A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-SX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX: 100Mbps Ethernet implementation over fiber. 100BASE-TX: 100Mbps Ethernet implementation over Category 5 and Type 1 Twisted Pair cabling. 10BASE-T: The IEEE 802.3 specification for Ethernet over Unshielded Twisted Pair (UTP) cabling.
DGS-3212SR Stackable Gigabit Layer 2 Switch IP address: Internet Protocol address. A unique identifier for a device attached to a network using TCP/IP. The address is written as four octets separated with full-stops (periods), and is made up of a network section, an optional subnet section and a host section. IPX: Internetwork Packet Exchange. A protocol allowing communication in a NetWare network.
DGS-3212SR Stackable Gigabit Layer 2 Switch UDP - User Datagram Protocol: An Internet standard protocol that allows an application program on one device to send a datagram to an application program on another device. VLAN - Virtual LAN: A group of location- and topology-independent devices that communicate as if they are on a common physical LAN. VLT - Virtual LAN Trunk: A Switch-to-Switch link which carries traffic for all the VLANs on each Switch. VT100: A type of terminal that uses ASCII characters.
International Offices U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA. 92708 TEL: 714-885-6000 Fax 866-743-4905 URL: www.dlink.com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europe (U. K.) 4th Floor, Merit House Edgware Road, Colindale London NW9 5AB U.K. TEL: 44-20-8731-5555 FAX: 44-20-8731-5511 URL: www.dlink.co.uk Germany Schwalbacher Strasse 74 D-65760 Eschborn Germany TEL: 49-6196-77990 FAX: 49-6196-7799300 URL: www.
WARRANTIES EXCLUSIVE IF THE D-LINK PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, THE CUSTOMER'S SOLE REMEDY SHALL BE, AT D-LINK'S OPTION, REPAIR OR REPLACEMENT. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES, EXPRESSED OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
Software: Warranty service for software products may be obtained by contacting a D-Link office within the applicable warranty period. A list of D-Link offices is provided at the back of this manual, together with a copy of the Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting warranty service.
Subject to the terms and conditions set forth herein, D-Link Systems, Inc. (“D-Link”) provides this Limited warranty for its product only to the person or entity that originally purchased the product from: • D-Link or its authorized reseller or distributor and • Products purchased and delivered within the fifty states of the United States, the District of Columbia, U.S. Possessions or Protectorates, U.S. Military Installations, addresses with an APO or FPO.
lost in transit to D-Link. The repaired or replaced packages will be shipped to the customer via UPS Ground or any common carrier selected by D-Link, with shipping charges prepaid. Expedited shipping is available if shipping charges are prepaid by the customer and upon request. D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package.
For detailed warranty outside the United States, please contact corresponding local D-Link office. Register online your D-Link product at http://support.dlink.
Registration Card Print, type or use block letters. Your name: Mr./Ms _____________________________________________________________________________ Organization: ________________________________________________ Dept.
