D-Link ™ DES-3326SR 24-Port Layer 3 Stackable Switch With Optional RPS Support Manual May 2005 651SR3326S035
D-Link DES-3326SR Layer 3 Switch ____________________ Information in this document is subject to change without notice. © 2005 D-Link Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link, the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
TABLE OF CONTENTS About This Manual ........................................................................................................................................... vii Intended Readers............................................................................................................................................... vii Notes, Notices, and Cautions ............................................................................................................................
Admin and User Privileges ........................................................................................................................... 39 Saving Changes................................................................................................................................................. 39 Factory Reset .................................................................................................................................................... 40 Restart System................
SNMP Engine ID ........................................................................................................................................ 103 SNMP Host Table ....................................................................................................................................... 104 SNMP User Table ....................................................................................................................................... 105 Security IP Management .....................
Configure Static Routes .............................................................................................................................. 152 Configure Static ARP.................................................................................................................................. 153 Routing Information Protocol (RIP) Configuration .................................................................................... 154 Introduction to OSPF ...........................................
D-Link DES-3326SR Layer 3 Switch About This Manual This manual is organized to provide basic setup information in the beginning chapters, followed by presentation of more complex material concerning Layer 2 and Later 3 switching functions. Some chapters include information pertinent to management of specific functions and protocols. This material is intended as a general introduction to key concepts and is not intended a thorough or exhaustive study network management.
D-Link DES-3326SR Layer 3 Switch Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow. Safety Cautions To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions. Observe and follow service markings.
D-Link DES-3326SR Layer 3 Switch • To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded plugs. • Observe extension cable and power strip ratings.
D-Link DES-3326SR Layer 3 Switch Use caution when pressing the component rail release latches and sliding a component into or out of a rack; the slide rails can pinch your fingers. After a component is inserted into the rack, carefully extend the rail into a locking position, and then slide the component into the rack. Do not overload the AC supply branch circuit that provides power to the rack. The total rack load should not exceed 80 percent of the branch circuit rating.
D-Link DES-3326SR Layer 3 Switch Chapter 1 Introduction Switch Description Features Front Panel Components LED Indicators Rear Panel Description Plug-in Modules Switch Stacking Management Options Switch Description Layer 3 switching is the integration of two proven technologies: switching and routing. Layer 3 switches are running the same routing routines and protocols as traditional routers.
D-Link DES-3326SR Layer 3 Switch Features • 8.8 Gbps Switching fabric capacity • Supports 802.1w Rapid Spanning Tree and 802.1D STP compatible operation for redundant back up bridge paths • Supports 802.1Q VLAN • Supports IGMP snooping • Supports 802.1p Priority Queues • Supports 802.3ad LACP Link Aggregation • Supports port mirroring • Access Control Profile (ACL) • Multi-layer Access Control (based on MAC address, IP address, VLAN, Protocol, 802.
D-Link DES-3326SR Layer 3 Switch Front Panel Components The front panel of the Switch consists of LED indicators, an RS-232 communication port, a slide-in module slot, and 24 (10/100 Mbps) Ethernet/Fast Ethernet ports. Figure 1 - 1. Front Panel View of the Switch as shipped (no modules are installed) • Comprehensive LED indicators display the status of the switch and the network (see the LED Indicators section below).
D-Link DES-3326SR Layer 3 Switch Stacking LED Indicators Stacking LED indicators include the Stack ID indicator on the front panel and the Link/Act indicators on the front of the DES-332GS stacking module. Each stacking module has Link and Act LED indicators on its front panel for the IEEE 1394 IN/OUT pair and the GBIC port. Figure 1-2. Front panel of stacking module Link The Link LED lights to confirm a valid link. Act The ACT LED blinks to indicate activity on the link. STACK NO.
D-Link DES-3326SR Layer 3 Switch Rear Panel Description The rear panel of the Switch contains an AC power connector. Figure 1 - 3. Rear panel view of the Switch The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. The Switch automatically adjusts its power setting to any supply voltage in the range from 100 ~ 240 VAC at 50 ~ 60 Hz.
D-Link DES-3326SR Layer 3 Switch Optional Plug-in Modules The DES-3326SR 24-port Fast Ethernet Switch is able to accommodate a range of optional plug-in modules in order to increase functionality and performance. These modules must be purchased separately. DES-132 2-port 100BASE-TX Module Figure 1 - 5. 100BASE-TX two-port module Port Functions • Fully compliant with IEEE802.3 10BASE-T, IEEE802.
D-Link DES-3326SR Layer 3 Switch DES-131F/132F 1/2-port 100BASE-FX Module Figure 1 - 6. 100BASE-FX two-port module Port Functions • Fully compliant with IEEE802.3u 100BASE-FX • Supports auto-negotiation in the following operation: 100M / Full-duplex / Flow control • IEEE 802.
D-Link DES-3326SR Layer 3 Switch DES-131FL/132FL 1/2-port 100BASE-FX Module Figure 1 - 7. 100BASE-FX module Port Functions • Fully compliant with IEEE802.3u 100BASE-FX • Supports auto-negotiation in the following operation: 100M / Full-duplex / Flow control • IEEE 802.
D-Link DES-3326SR Layer 3 Switch DES-132T 2-port 1000BASE-T Module Figure 1 - 8. 1000BASE-T two-port module Port Functions • 2 1000BASE-T Gigabit Ethernet ports • Fully compliant with IEEE802.3 10BASE-T, IEEE802.3u 100BASE-TX, and IEEE802.3ab 1000BASE-T • Supports auto-negotiation in the following operation: 10*100/1000M / Full-duplex / Flow control • IEEE 802.3x compliant Flow Control support for full-duplex * 10 Mbps not supported in firmware release 4.
D-Link DES-3326SR Layer 3 Switch DES-132G 2-port 1000BASE-SX Gigabit Ethernet Module Figure 1 - 9. 1000BASE-SX two-port module Port Functions • 2 1000BASE-SX Gigabit Ethernet ports • IEEE 802.3z 1000BASE-SX compliance • Supports Full-duplex operations • IEEE 802.3x compliant Flow Control support for full-duplex Connector: SC Type Distance: 550m DEM-320S 2-port 1000BASE-SX Gigabit Ethernet Module Port Functions • 2 1000BASE-SX Gigabit Ethernet ports • IEEE 802.
D-Link DES-3326SR Layer 3 Switch DES-132GL 2-port 1000BASE-LX Gigabit Ethernet Module Figure 1 - 10. 1000BASE-LX two-port module Port Functions • 2 1000BASE-LX Gigabit Ethernet ports • IEEE 802.3z 1000BASE-LX compliance • Supports Full-duplex operations • IEEE 802.3x compliant Flow Control support for full-duplex • Supports multi-mode fiber optic cable connections of up to 550 meters or 5 km single-mode fiber-optic cable connections.
D-Link DES-3326SR Layer 3 Switch DES-132GB 2-port GBIC-based Gigabit Ethernet Module Figure 1 - 11. GBIC two-port module Port Functions • 2 GBIC-based Gigabit Ethernet ports • Allows multi-mode fiber optic connections of up to 550 m (SX and LX) and single-mode fiber optic connections of up to 5 km (LX only). GBIC modules are available in –SX and –LX fiber optic media. • IEEE 802.3z compliance • Supports full-duplex operations • IEEE 802.
D-Link DES-3326SR Layer 3 Switch DES-332GS 1-port GBIC-Based Gigabit Ethernet Switch and stacking Module Figure 1 - 12. Stacking Module with one GBIC port Port Functions • • • • • 1 GBIC-Based Gigabit Ethernet port Allows multi-mode fiber optic connections of up to 550 m (SX and LX) and single-mode fiber optic connections of up to 5 km (LX only). GBIC modules are available in –SX and –LX fiber optic media. IEEE 802.3z 1000BASE-SX compliance Supports Full-duplex operations IEEE 802.
D-Link DES-3326SR Layer 3 Switch Switch Stacking The optional Stacking Module allows up to thirteen DES-3326SR Switches to be interconnected via their individual Stacking Modules. This forms a thirteen-switch stack that can then be managed and configured as thought the entire stack were a single switch. The switch stack is then accessed through a single IP address or alternatively, through the master switch’s serial port (via the management station’s console and the switch’s Command Line Interface).
D-Link DES-3326SR Layer 3 Switch Management Options The system may be managed out-of-band through the console port on the front panel or in-band using Telnet, a web browser or SNMP-based management. Web-based Management Interface After you have successfully installed the Switch, you can configure the Switch, monitor the LED panel, and display statistics graphically using a web browser, such as Netscape Navigator (version 6.2 and higher) or Microsoft® Internet Explorer (version 5.0).
D-Link DES-3326SR Layer 3 Switch Chapter 2 Installation Package Contents Before You Connect to the Network Connecting the Console Port Password Protection SNMP Settings IP Address Assignment Connecting Stacked Switch Groups Configuring a Switch Group for Stacking Connecting Devices to the Switch Package Contents Before you begin installing the Switch, confirm that your package contains the following items: • One DES-3326SR Layer 3 Switch • Mounting kit: 2 mounting brackets and screws • Four rubber fe
D-Link DES-3326SR Layer 3 Switch Before You Connect to the Network Before you connect to the network, you must install the Switch on a flat surface or in a rack, set up a terminal emulation program, plug in the power cord, and then set up a password and IP address. NOTICE: Do not connect the Switch to the network until you have established the correct IP settings, user accounts and proper stacking configuration (if the Switch is stacked).
D-Link DES-3326SR Layer 3 Switch Password Protection The DES-3326SR does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name you have privileged access to the Switch’s management software. After your initial login, define new passwords for both default user names to prevent unauthorized access to the Switch, and record the passwords for future reference.
D-Link DES-3326SR Layer 3 Switch IP Address Assignment Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme. The Switch is also assigned a unique MAC address by the factory.
D-Link DES-3326SR Layer 3 Switch Figure 2 - 3. Assigning the Switch an IP Address In the above example, the Switch was assigned an IP address of 10.10.1.100 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management.
D-Link DES-3326SR Layer 3 Switch allowed to view read-only information or receive traps using SNMP v.1 while assigning a higher level of security to another group, granting read/write privileges using SNMP v.3. Using SNMP v.3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB.
D-Link DES-3326SR Layer 3 Switch Installing the Switch in a Rack You can install the Switch in most standard 19-inch (48.3-cm) racks. Refer to the illustrations below. 1. Use the supplied screws to attach a mounting bracket to each side of the Switch. 2. Align the holes in the mounting bracket with the holes in the rack. 3. Insert and tighten two screws through each of the mounting brackets. Figure 2-5. Attach mounting brackets Figure 2-6.
D-Link DES-3326SR Layer 3 Switch Connecting Stacked Switch Groups A total of up to thirteen DES-3326SR Switches can be stacked, using the optional stacking module, into a Switch stack that can then be configured and managed as a single unit. The Web-based Management agent of the Master Switch can configure and manage all of the Switches in a Switch stack − using a single IP address (the IP address of the Master Switch).
D-Link DES-3326SR Layer 3 Switch Notes on Stacking Switches By default, the Switch configuration settings allow it to operate as a standalone device, or in a stacked group. It is not necessary to change any settings for the Switch to function in either capacity. However, it is recommended that a Master Switch be manually designated for a stacked group when it is first set up.
D-Link DES-3326SR Layer 3 Switch Configuring a Switch Group for Stacking In order to set up a stack of DES-3326SR Switches it is only necessary to designate a single Switch as Master if all the Switches are using the default auto setting for the stacking mode configuration. Stacking mode may also be disabled for standalone operation, however it is not necessary to disable stacking to use the Switch as a standalone device.
D-Link DES-3326SR Layer 3 Switch Figure 2 - 9. config stacking mode enable master The remaining slave units in the stack can be set to the default configuration to automatically recognize the presence of the Master. The stack order will likewise be determined automatically according to the physical stacking connection. Notes on Standalone Operation The DES-3326SR operates as a standalone Switch using the default configuration settings when it is not connected to another Switch through a stacking port.
D-Link DES-3326SR Layer 3 Switch To Disable Stacking If you prefer to disable stacking for a standalone Switch, use the CLI command config stacking mode disable. Once stacking mode has been disabled on a Switch, do not use the stacking ports (if there are any installed). Figure 2 - 10.
D-Link DES-3326SR Layer 3 Switch Unit ID Display for Switches in a Switch Stack The Stack ID 7-segment LED (as shown below) on the front panel of the stacking module displays the logical STACK NO. The Master Switch in the stack will display STACK NO. 1. The remaining slaves display the STACK NO. 2 to 13 according to the position in the logical stack order. Figure 2 - 11.
D-Link DES-3326SR Layer 3 Switch Installing a Redundant Power Supply The DPS-200 is a redundant power-supply unit designed to conform to the voltage requirements of the switches being supported. CAUTION: The AC power cord for the switch should be disconnected before proceeding with installation of the DPS-200. The DPS-900 is a standard-size rack mount (5 standard units in height) designed to hold up to 8 redundant power supplies.
D-Link DES-3326SR Layer 3 Switch Connect to RPS The DPS-200 is connected to the Master Switch using a 14-pin DC power cable. A standard, three-pronged AC power cable connects the redundant power supply to the main power source. Figure 2 - 14. Connect RPS to Switch Insert one end of the 14-pin DC power cable into the receptacle on the switch and the other end into the redundant power supply. Using a standard AC power cable, connect the redundant power supply to the main AC power source.
D-Link DES-3326SR Layer 3 Switch Chapter 3 Basic Switch Management Before You Start General Deployment Strategy Web-based User Interface Basic Setup Switch Information Switch IP Settings User Accounts Management Saving Changes Factory Reset Restart System All software function of the DES-3326SR can managed, configured and monitored via the embedded web-based (HTML) interface.
D-Link DES-3326SR Layer 3 Switch General Deployment Strategy 1. Determine how the network would be best segmented. This is probably done using VLANs in an existing layer 2 Switched network. 2. Develop an IP addressing scheme. This involves allocating a block of IP addresses to each network segment. Each network subnet is then assigned a network address and a subnet mask. Background information regarding IP addresses is presented in Part IV of this guide. 3.
D-Link DES-3326SR Layer 3 Switch Web-based User Interface The user interface provides access to various Switch configuration and management screens, allows you to view performance statistics, and permits you to graphically monitor the system status. Areas of the User Interface The figure below shows the user interface. The user interface is divided into 3 distinct areas as described in the table below. Area 1 Area 2 Area 3 Figure 3- 1.
D-Link DES-3326SR Layer 3 Switch Login to Web Manager To begin managing the Switch simply run the browser you have installed on your computer and point it to the IP address you have defined for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch. NOTE: The Factory default IP address for the Switch is 10.90.90.90. In the Welcome page, click on the Login hyperlink; this opens a login screen.
D-Link DES-3326SR Layer 3 Switch Basic Setup The subsections below describe how to change some of the basic settings for the Switch such as changing IP settings and assigning user names and passwords for management access privileges, as well as how to save the changes and restart the Switch. The menus to perform these tasks are located in the Basic Setup folder.
D-Link DES-3326SR Layer 3 Switch Switch IP Settings Switch IP settings may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the Introduction of the CLI Reference or read the instructions below on how to use the console port and CLI IP settings commands to establish IP settings for the Switch.
D-Link DES-3326SR Layer 3 Switch The Switch IP Settings options are: Parameter Description BOOTP The Switch will send out a BOOTP broadcast request when it is powered up. The BOOTP protocol allows IP addresses, network masks, and default gateways to be assigned by a central BOOTP server. If this option is set, the Switch will first look for a BOOTP server to provide it with this information before using the default or previously entered settings.
D-Link DES-3326SR Layer 3 Switch User Accounts Management Use the User Accounts table to control user privileges. To view existing User Accounts, open the Basic Setup folder and click on the User Accounts link. This will open the User Accounts Table, as shown below. If no user accounts have et been created, there will not be any listed here. Figure 3- 4. User Accounts Table To add a new user, click on the New button. A new menu appears.
D-Link DES-3326SR Layer 3 Switch Figure 3- 6. User Accounts - Edit To change the password, type in the New Password and retype it in the Confirm New Password entry field. Choose the level of privilege (Admin or User) from the Access Level drop-down menu. Admin and User Privileges There are two levels of user privileges: Admin and User. Some menu selections available to users with Admin privileges may not be available to those with User privileges.
D-Link DES-3326SR Layer 3 Switch Figure 3- 7. Save Configuration window The Switch has two levels of memory, normal RAM and non-volatile or NV-RAM. To save all the changes made in the current session to the Switch’s flash memory, click the Save Configuration button. Click the OK button in the new dialog box that appears to continue. When this is done, the settings will be immediately applied to the Switching software in RAM, and will immediately take effect.
D-Link DES-3326SR Layer 3 Switch Restart System The following menu is used to restart the Switch. Access this menu by clicking on the Restart System link in the Basic Setup folder. Click the Yes after Do you want to save the settings? to instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Clicking the No option instructs the Switch not to save the current configuration before restarting the Switch.
D-Link DES-3326SR Layer 3 Switch Chapter 4 Stacking Mode NOTE: Stacking mode is configured using the CLI command config stacking mode. To view stacking and related information about switches in the stack use the CLI command show stacking. The DES-3326SR Switch can be used as a standalone Layer 3 Switch or it can be used in a stacked arrangement. There are two hardware requirements to use the Switch in a stacked group: 1. The proper module(s) must be installed.
D-Link DES-3326SR Layer 3 Switch These parameters are listed in the CLI display: Parameter Description ID This displays the Switch’s order in the stack. The Switch with a Unit ID of 1 is the Master switch. MAC Address The MAC Address is the unique address of the switch assigned by the factory. Port Range This is the range of ports assigned to the corresponding Switch in the Switch stack.
D-Link DES-3326SR Layer 3 Switch Chapter 5 Port Configuration Configure Ports Serial Port Settings Port Security Settings Traffic Segmentation This section contains information for configuring various attributes and properties for individual physical ports and port mirroring.
D-Link DES-3326SR Layer 3 Switch Configure Ports Click the Port Configurations link in the Basic Setup folder: For stacked switch installations, it will be necessary to select the Unit (switch) according to its logical position in the stack. Figure 5- 1. Choose switch from stack Click the radio button on the far left to select the port you want to configure and click the Edit button. The basic settings for the Switch ports are summarized in the table below. Figure 5- 2.
D-Link DES-3326SR Layer 3 Switch Click on the port you want to configure on the Port Configurations menu and then click the Edit button. This will open the following dialog box: Figure 5- 3. Port Configurations − Edit The Unit drop-down dialog box allows you to select different switches in a switch stack, if you have the optional stacking module installed and the switches in the stack are properly interconnected.
D-Link DES-3326SR Layer 3 Switch Serial Port Settings The Serial Port Settings window allows the configuration of the switch’s serial port. Click on the Serial Port Settings link from the Basic Setup folder. Figure 5- 4. Serial Port Settings The following fields can then be set for the serial port: Parameter Description Baud Rate Set the serial bit rate used to communicate with a management station. The console baud rate is 9600 bits per second.
D-Link DES-3326SR Layer 3 Switch Port Security Settings Port security settings instruct the Switch on how to handle MAC address table entries for each port. The Port Security Settings menu link is located in the Basic Setup folder. For stacked Switches, select the Switch form the Unit drop-down menu and configure the port security for the Switch. Follow the instruction below for port security settings.
D-Link DES-3326SR Layer 3 Switch Traffic Segmentation The traffic segmentation table is used to limit traffic flow from a single port to other ports on the switch. It cannot be used to segment traffic between switch units in a stack. For this it would be appropriate to use VLANs or a filtering method. This provides an additional tool to direct traffic flow without relying on the Master CPU. Edit the Traffic Segmentation for each port with the Edit menu (below).
D-Link DES-3326SR Layer 3 Switch Chapter 6 Link Aggregation Configure Link Aggregation Link aggregation allows several ports to be grouped together and to act as a single link. This gives a bandwidth that is a multiple of a single link’s bandwidth. Link aggregation is most commonly used to link a bandwidth intensive network device or devices – such as a server – to the backbone of a network.
D-Link DES-3326SR Layer 3 Switch Configure Link Aggregation The Switch supports Link Aggregation Control Protocol and allows for a choice of the Link Aggregation Algorithm. The links to the menus used to set it up are located in the Link Aggregation subdirectory, in the Advanced Settings folder. Use the Link Aggregation Algorithm menu to instruct the Switch on what criteria is used to implement address-based load sharing. Use the Link Aggregation menu to set up the ports used for the link.
D-Link DES-3326SR Layer 3 Switch Configure the Link Aggregation Groups Follow the instructions below to set up Link Aggregation on the Switch. To configure a link aggregation group, click on the Link Aggregation link from the Advanced Setup folder: Figure 6- 2. Link Aggregation Any Link Aggregation groups configured will appear listed in the table. To remove a group, select the group from the table and click on the Delete button. To create a new Link Aggregation group, click the New button: Figure 6- 3.
D-Link DES-3326SR Layer 3 Switch To change an existing entry, select the group you want to configure and then click the Edit button: Figure 6- 4. Link Aggregation − Edit Click to select the new ports in the group. To remove a port from the group, click the Port Member selection box so the check disappears. Up to six ports may be selected for each group. Ports that are not available for link aggregation have their selection box shaded.
D-Link DES-3326SR Layer 3 Switch Chapter 7 Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port. To configure a port for port mirroring: Click the Mirroring Configurations link in the Advanced Settings folder to see the menu below. Figure 7- 1.
D-Link DES-3326SR Layer 3 Switch Chapter 8 MAC Forwarding Static Unicast Forwarding Static Multicast Forwarding Broadcast/Multicast Storm Control The Switch allows permanent or static entries into the forwarding database (FDB). These FDB entries are MAC addresses that will not age out. The menu links for MAC Forwarding configuration are found in a separate subdirectory in the Forwarding subdirectory in the Advanced Setup folder.
D-Link DES-3326SR Layer 3 Switch To add a new MAC address to the MAC Address Forwarding Table, click the New button: Figure 8- 3. Unicast MAC Address Settings − Add To edit an existing entry in the MAC address in the MAC Address Forwarding Table, click the Edit button: Figure 8- 4.
D-Link DES-3326SR Layer 3 Switch Multicast MAC Address Forwarding Multicast MAC addresses can be statically entered into the switch’s MAC Address Forwarding Table. These addresses will never age out. To enter a Multicast MAC address into the switch’s forwarding table, click on the Forwarding folder and then the MAC Forwarding folder and then click on the Multicast MAC Address Settings link: Figure 8- 5.
D-Link DES-3326SR Layer 3 Switch The following fields can be set: Parameter MAC Address:[ Description ] Allows the entry of the MAC address of an end station that will be entered into the switch’s static forwarding table. VLAN Name Allows the entry of the VLAN name of the VLAN the MAC address below is a member of − when adding a new entry to the table. Displays the VLAN name of the VLAN the MAC address is a member of − when editing an existing entry.
D-Link DES-3326SR Layer 3 Switch When any one of the ports contained within a given port group receives more broadcast or multicast packets per second than is specified in the Upper Threshold (Kpps) field, the switch will take the actions specified in the Broadcast Storm Mode, Multicast Storm Mode, and the Destination Lookup Fail pull-down menus. The Broadcast Storm Mode is Enabled or Disabled using the pull-down menu for the corresponding port group.
D-Link DES-3326SR Layer 3 Switch Chapter 9 Spanning Tree Protocol 802.1w Rapid Spanning Tree Configure STP The Switch supports 802.1d Spanning Tree Protocol (STP) and 802.1w Rapid Spanning Tree Protocol (RSTP). 802.1d STP will be familiar to most networking professionals. However, since 802.1w RSTP has been recently introduced to D-Link managed Ethernet Switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1 d STP and 802.1w RSTP. 802.
D-Link DES-3326SR Layer 3 Switch Edge Port The edge port is a configurable designation used for a port that is directly connected to a segment where a loop cannot be created. An example would be a port connected directly to a single workstation. Ports that are designated as edge ports, transition to a forwarding state immediately without going through the listening and learning states. An edge port loses its status if it receives a BPDU packet, immediately becoming a normal spanning tree port.
D-Link DES-3326SR Layer 3 Switch Configure the following STP Switch parameters and click the Apply button to implement them: Parameter Description Status This field can be toggled between Enabled and Disabled using the pull-down menu. This will enable or disable the Spanning Tree Protocol (STP), globally, for the switch. Max Age: (6 - 40 sec) <20 > The Max. Age can be set from 6 to 40 seconds. At the end of the Max.
D-Link DES-3326SR Layer 3 Switch STP Port Settings In addition to setting Spanning Tree parameters for use on the switch level, the switch allows for the configuration of groups of ports, each port-group of which will have its own spanning tree, and will require some of its own configuration settings. An STP Group will use the switch-level parameters entered above, with the addition of Port Priority and Port Cost.
D-Link DES-3326SR Layer 3 Switch The following fields are configured in the STP Port Settings – Edit menu: Parameter Description Cost A Port Cost can be set from 1 to 200000000. The lower the number, the greater the probability the port will be chosen to forward packets. Default port cost: 100Mbps port = 200000 Gigabit ports = 20000 Priority <128> A Port Priority can be from 0 to 240. The lower the number, the greater the probability the port will be chosen as the Root Port.
D-Link DES-3326SR Layer 3 Switch Chapter 10 Quality of Service Configuration Configure QoS Output Scheduling Configure 802.1p User Priority Configure Default Priority Configure Bandwidth The DES-3326SR switch supports 802.1p priority queuing. The switch has 4 priority queues. These priority queues are numbered from 0 (Class 0) — the lowest priority queue — to 3 (Class 3) — the highest priority queue. The eight priority queues specified in IEEE 802.
D-Link DES-3326SR Layer 3 Switch Configure QoS Output Scheduling Open the QoS Output Scheduling menu to adjust settings for the four QoS Classes. You may then change the Priority settings mapped to these Classes in the 802.1p User Priority setting menu (see below). Figure 10- 1. QoS Output Scheduling The MAX. Packets field specifies the number of packets that a queue will transmit before surrendering the transmit buffer to the next lower priority queue in a round-robin fashion.
D-Link DES-3326SR Layer 3 Switch Configure 802.1p User Priority Once you have assigned a maximum number of packets and a maximum latency to a given Class of Service on the switch, you can then assign this Class to each of the 8 levels of 802.1p priorities. Open the 802.1 User Priority configuration menu in the QoS subdirectory to see the menu below. Figure 10- 2. QoS Class of Traffic Configure the Class-to-Priority mapping as you wish and click on the Apply button to make the change.
D-Link DES-3326SR Layer 3 Switch Configure Default Priority The default 802.1p priority to each port can be changed to suit conditions. Click on the 802.1p Default Priority link: Figure 10- 3. Priority Based on Port This window allows you to assign a default 802.1p priority to any given port on the switch. The priority queues are numbered from 0 − the lowest priority − to 7 − the highest priority. Choose the priority level for the ports and click on the Apply button to make the change.
D-Link DES-3326SR Layer 3 Switch Configure Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data bit rates for any port. To change the maximum allowed bandwidth for a given port: Click the selection button in the far left column that corresponds to the port you want to configure and click the Edit button. A new dialog box used to edit bandwidth settings opens. Figure 10- 4.
D-Link DES-3326SR Layer 3 Switch Chapter 11 MAC Notification MAC Notification Global Setting MAC Notification Port Settings MAC address notification is used to monitor MAC addresses as they are learned and entered into the Switch’s MAC forwarding database. MAC Notification Global Settings Figure 11- 1. MAC Notification Global Settings Configure the following MAC notification global settings: Parameter Description State Enable or Disable MAC notification switch wide form the pull-down menu.
D-Link DES-3326SR Layer 3 Switch MAC Notification Port Settings Enable or disable MAC notification for ports with the menu below. Figure 11- 2. MAC Notification Port Settings To change MAC Notification settings for a port or a group of ports on the same switch, select the first (lowest numbered) port from the list and click the Edit button, a separate menu will appear. Figure 11- 3.
D-Link DES-3326SR Layer 3 Switch Chapter 12 System Log The menu links to set up a System Log are located in their own subdirectory in the Advanced Settings folder. The log may be configured and later disabled without losing the configuration using the System Log State menu. Configure System Log State To enable the System Log Server settings, select Enabled and click the Apply button in the System Log State menu.
D-Link DES-3326SR Layer 3 Switch Use the descriptions here as a guide to set up the System Log Server settings. Parameter Description Index Syslog server settings index (1-4). Server IP Type in the IP address of the Syslog server receiving the message. Severity Select the level of message sent, select: Warning, Information or All. Facility Some of the operating system daemons and processes have been assigned Facility values.
D-Link DES-3326SR Layer 3 Switch Chapter 13 SNTP Settings The Simple Network Time Protocol (SNTP), an adaptation of the Network Time Protocol (NPT) is configured on the Switch using the following pages. The SNTP subdirectory in the Basic Setup contains the links to the menus used to configure SNTP. Current Time Settings Use the current time settings to determine how system time will be kept. The table below describes the parameters used for setting SNTP. Figure 13- 1.
D-Link DES-3326SR Layer 3 Switch Time Zone and DST See the table below for a description of the Time Zone and DST parameters. Figure 13- 2.
D-Link DES-3326SR Layer 3 Switch The following parameters can set: Parameter Description Daylight Saving Time State Use this pull-down menu to Enable or Disable the DST Settings. Daylight Saving Time Offset in Minutes Use this pull-down menu to specify the amount of time that will constitute your local DST offset − 30, 60, 90, or 120 minutes. Time Zone Offset from GMT in +/HH:MM Use these pull-down menus to specify your local time zone’s offset from Greenwich Mean Time (GMT.
D-Link DES-3326SR Layer 3 Switch Chapter 14 Security Management Access Profile Configuration CPU Interface Filtering 802.1X Port-based Network Access Control 802.1X Configuration Various security mechanisms are available with the DES-3326S including those discussed in this chapter. Other techniques are used to improve the security environment that are not included in this chapter but are discussed in other chapters. This chapter is dedicated to setting up Access Profiles and 802.1X configuration.
D-Link DES-3326SR Layer 3 Switch There are two different menus used to create an access profile mask, one for IP based and another for Ethernet based masks. Ethernet-based Access Profile Mask: Select the Ethernet option from the Access Profile pull-down menu to view the following: Figure 14- 2.
D-Link DES-3326SR Layer 3 Switch IP-based Access Profile Mask: Select the IP option from the Access Profile pull-down menu to view the following: Figure 14- 3.
D-Link DES-3326SR Layer 3 Switch Parameter Description Profile ID Type in a unique identifier number for this profile set or allow an ID to be automatically assigned by checking the Auto Assign option. This value can be set from 1 – 255. The profile ID sets the relative priority for the profile and specifies an index number that will identify the access profile being created with this command. Priority is set relative to other profiles where the lowest profile ID has the highest priority.
D-Link DES-3326SR Layer 3 Switch To establish the rule for a previously created Access Profile Mask: Select the Access Profile from the Access Profile Mask Setting Table and click the Edit Rule button. Figure 14- 4. Access Profile Rule Setting To create a new rule set for the access profile click the New button. A new menu is displayed. To remove a previously created rule, select it and lick the Delete button. Figure 14- 5.
D-Link DES-3326SR Layer 3 Switch Configure the following Access Profile Rule – Ethernet settings: Parameter Description Profile ID This is the identifier number for this profile set. Access Rule ID Type in a unique identifier number for this access. This value can be set from 1 – 255. priority Select this option to instruct the switch to use the 802.1p priority value entered in the adjacent field for packets that meet the criteria.
D-Link DES-3326SR Layer 3 Switch The following window is used for the IP Rule configuration. Figure 14- 6. Access Profile Rule Configuration – IP Configure the following Access Profile Rule - IP settings: Parameter Description Permit/Deny Select Permit to specify that the packets that match the access profile are forwarded by the switch according to any additional rule added (see below).
D-Link DES-3326SR Layer 3 Switch CPU Interface Filtering There are specific circumstances under which the ACL cannot filter a packet even when there is a condition match that should deny forwarding. This is a limitation that may arise if: • the destination MAC is the same as the Switch (system) MAC • a packet is directed to the system IP interface such as multicast IP packets or if the hardware IP routing table is full and Switch software routes the packet according to routing protocol.
D-Link DES-3326SR Layer 3 Switch CPU Interface Filtering Mask Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame the switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the switch will use to determine what to do with the frame. The entire process is described below in two parts.
D-Link DES-3326SR Layer 3 Switch Parameter Description Profile ID Type in a unique identifier number for this profile set or allow an ID to be automatically assigned by checking the Auto Assign option. This value can be set from 1 – 255. The profile ID sets the relative priority for the profile and specifies an index number that will identify the cpu access profile being created with this command. Priority is set relative to other profiles where the lowest profile ID has the highest priority.
D-Link DES-3326SR Layer 3 Switch Parameter Description Profile ID Type in a unique identifier number for this profile set or allow an ID to be automatically assigned by checking the Auto Assign option. This value can be set from 1 – 255. The profile ID sets the relative priority for the profile and specifies an index number that will identify the cpu access profile being created with this command. Priority is set relative to other profiles where the lowest profile ID has the highest priority.
D-Link DES-3326SR Layer 3 Switch To establish the rule for a previously created CPU Interface Filtering entry: Open the CPU Interface Filtering table menu and click the Edit Rule button. Figure 14- 11. CPU Interface Filtering Table – Ethernet To create a new rule set for an access profile click the New button. A new window is displayed. To remove a previously created rule, click the corresponding Delete button. The following window is used for the Ethernet Rule configuration. Figure 14- 12.
D-Link DES-3326SR Layer 3 Switch The following window is used for the IP Rule configuration. Figure 14- 13. CPU Interface Filtering Rule Configuration – IP Configure the following CPU Interface Filtering Rule - IP settings: Parameter Description Permit/Deny Select Permit to specify that the packets that match the access profile are forwarded by the switch according to any additional rule added (see below).
D-Link DES-3326SR Layer 3 Switch 802.1X Port-based Network Access Control The Switch is an implementation of the server side of IEEE 802.1X-Port Based Network Access Control. Through this mechanism, users have to be authorized before being able to access the network. See the following figure: DES-3326S Switch Figure 14- 14. Typical 802.1X Configuration Prior to User Authentication Once the user is authenticated, the Switch unblocks the port that is connected to the user as shown in the next figure.
D-Link DES-3326SR Layer 3 Switch DES-3326S Switch Figure 14- 15. Typical 802.1X Configuration with User Authentication The user’s information, including account number, password, and configuration details such as IP address and billing information, is stored in a centralized RADIUS server. Figure 14- 16. Typical Configuration with 802.
D-Link DES-3326SR Layer 3 Switch Table 2. Conformance to IEEE 802.1X Standards State Machine Name Port Timers state machine Authenticator PAE state machine The Authenticator Key Transmit state machine Reauthentication Timer state machine Backend Authentication state machine Controlled Directions state machine The Key Receive state machine 802.1X Configuration The DES-3326SR implements the server-side of the IEEE 802.1x Port-based Network Access Control.
D-Link DES-3326SR Layer 3 Switch 802.1X Port Settings Existing 802.1X port settings are displayed and can be con figured using the menu below. Figure 14- 18. 802.1X Port Settings Click the selection button on the far left that corresponds to the port you want to configure and click the Edit button, a separate menu will appear. Parameter Description Port status Lists the current status of port, Authorized or Unauthorized.
D-Link DES-3326SR Layer 3 Switch Figure 14- 19. 802.1X Port Settings – Edit Configure the following 802.1x port settings: Parameter Description Port Port being configured for 802.1x settings. AdminCtlDir From the pull-down menu, select whether a controlled Port that is unauthorized will exert control over communication in both receiving and transmitting directions, or just the receiving direction.
D-Link DES-3326SR Layer 3 Switch Port Capability Click the selection button on the far left that corresponds to the port you want to configure and click the Next button. This will open the Port Capability Settings - Edit menu Figure 14- 20. 802.1x Port Capability Settings - Edit Figure 14- 21. 802.1x Port Capability Settings To configure 802.1x Port Capability for a port, select the port to be configured, and determine the (802.1x) port capability. Click the Apply button to configure the capability.
D-Link DES-3326SR Layer 3 Switch Initialize Ports Use this to initialize the 802.1x functions on specified ports or for specified MAC addresses operating from a specified range of ports. Figure 14- 22. Initialize Ports The Initialize Ports settings are as follows: Parameter Description Port Select the port or lowest number of the group of ports being configured. Configure Ports from __ to __ A consecutive groups of ports may be configured starting with the selected port.
D-Link DES-3326SR Layer 3 Switch Re-Authenticate Ports 802.1x ports must be periodically re-authenticated (when the re-authentication period lapses). Use this menu to determine if previously authenticated devices are re-authenticated based on either MAC address or port number. Figure 14- 23. Reauthenticate Ports The Reauthenticate Ports parameters are identical to the Initialize Ports parameters since they are basically doing the same thing.
D-Link DES-3326SR Layer 3 Switch Radius Server Settings Use this menu to configure the settings the switch will use to communicate with a Radius server. To add Radius server settings click the New button, a separate configuration menu appears. To edit an existing Radius settings index, select it and click the edit button Figure 14- 24. Radius Server Settings The parameters configured for adding and editing Radius settings are the same. See the table below for a description. Figure 14- 25.
D-Link DES-3326SR Layer 3 Switch Chapter 15 SNMP Network Management SNMP View Table SNMP Group Table SNMP Community Table SNMP Engine ID SNMP Host Table SNMP User Table Security IP Management The DES-3326SR incorporates a flexible SNMP management for the switching environment. SNMP management can be customized o suit the needs of the networks and the preferences of the network administrator. Use the SNMP V3 menus to select the SNMP version used for specific tasks.
D-Link DES-3326SR Layer 3 Switch SNMP View Table The SNMP View Table is used to assign views to community strings that define which MIB objects can be accessed by an SNMP manager. To delete an existing View Table entry, click the selection button on the far left that corresponds to the port you want to configure and click the Delete button. To create a new entry, click the New button, a separate menu will appear. Figure 15- 1. SNMP View Table – Add New Figure 15- 2.
D-Link DES-3326SR Layer 3 Switch SNMP Group Table The SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu. Figure 15- 3. SNMP Group Table To delete an existing entry, click the selection button on the far left that corresponds to the port you want to configure and click the Delete button. To create a new entry, click the New button, a separate menu will appear. Figure 15- 4.
D-Link DES-3326SR Layer 3 Switch Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users. Read View Name This name is used to specify the SNMP group created can request SNMP messages. Write View Name Specify a SNMP group name for users that are allowed SNMP write privileges to the switch’s SNMP agent.
D-Link DES-3326SR Layer 3 Switch To delete an existing entry, click the selection button on the far left that corresponds to the port you want to configure and click the Delete button. To create a new entry, click the New button, a separate menu will appear. Configure the parameters as desired and click the Apply button to add the new string to the SNMP Community Table. Figure 15- 6.
D-Link DES-3326SR Layer 3 Switch SNMP Host Table Use the SNMP Host Table to set up trap recipients. Figure 15- 8. SNMP Host Table To delete an existing entry, click the selection button on the far left that corresponds to the port you want to configure and click the Delete button. To create a new entry, click the New button, a separate menu will appear. Figure 15- 9.
D-Link DES-3326SR Layer 3 Switch SNMP User Table Use the SNMP User Table to create a new SNMP user and add the user to an existing SNMP group or to a newly created group. Figure 15- 10. SNMP User Table To delete an existing entry, click the selection button on the far left that corresponds to the port you want to configure and click the Delete button. To create a new entry, click the New button, a separate menu will appear. Figure 15- 11.
D-Link DES-3326SR Layer 3 Switch Security IP Management Management Stations IP Addresses designate stations that are allowed to make configuration changes to the Switch. This can be used in addition to standard SNMP security precautions (community strings). IP Management Stations may also be used with the more elaborate SNMP v3. SNMP Management configuration is presented in a separate chapter below. Figure 15- 12.
D-Link DES-3326SR Layer 3 Switch Chapter 16 Network Monitoring and Statistics Port Utilization Statistics Port Packets Statistics MAC Address Table IP Address Table Routing Table ARP Table OSPF Information DVMRP Information PIM Neighbor Address Table GVRP Status Router Ports IGMP and IGMP Snooping Information IP Multicast Forwarding Table 802.1X Authentication Status Switch History The DES-3326SR provides extensive network monitoring capabilities.
D-Link DES-3326SR Layer 3 Switch Port Utilization Statistics Port Utilization can be viewed for individual ports using the Line Chart or you can opt to see all ports displayed in Port Utilization Table. These windows display the percentage of the total available bandwidth being used on the port. To view port utilization statistics, open the Network Monitoring folder and the Statistics subdirectory. Click on either Port Utilization (Line Chart or Table) link: Figure 16- 1.
D-Link DES-3326SR Layer 3 Switch Port Packet Statistics Packets statistics are viewed in the following menus: Port Packet Analysis Port Error Packets Port Packet Analysis The Port Packet Analysis window displays the size of packets received or transmitted by a given switch port. In addition, statistics on the number and rate of unicast, multicast, and broadcast packets received by the switch are displayed.
D-Link DES-3326SR Layer 3 Switch The packet analysis fields are described here: Parameter Description Update Interval The interval (in seconds) that the table is updated. The default is 2 seconds. Frames The number of packets (or frames) received or transmitted by the switch with the size, in octets, given by the column on the right. Frames/sec The number of packets (or frames) transmitted or received, per second, by the switch.
D-Link DES-3326SR Layer 3 Switch The following fields from above are described in more detail: Parameter Description Unit Allows the selection of a particular switch in a switch stack if you have installed the optional stacking module and have properly interconnected the switches. Port Allows the selection of a particular port on the switch. Update Interval The interval (in seconds) that the table is updated. The default is Suspend. RX Frames Received packets.
D-Link DES-3326SR Layer 3 Switch MAC Address Table This allows the switch’s dynamic MAC address forwarding table to be viewed. When the switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table. These entries are then used to forward packets through the switch. To view MAC Address Table, open the Network Monitoring folder and the Address Tables subdirectory and click on the MAC Address Table link: Figure 16- 5.
D-Link DES-3326SR Layer 3 Switch Routing Table To view Routing Table, open the Network Monitoring folder and the Address Tables subdirectory and click on the Routing Table link: Figure 16- 6. Routing Table Parameter Description IP Address The IP address of the router. Netmask The subnet mask corresponding to the IP address above. Gateway The IP address of the gateway between the switch and this router. Interface Name The name of the IP interface on which this router resides.
D-Link DES-3326SR Layer 3 Switch ARP Table To view ARP Table, open the Network Monitoring folder and the Address Tables subdirectory and click on the ARP Table link: Figure 16- 7. ARP Table Use the ARP Table to search for MAC addresses. Enter the Interface Name and IP Address and click on the Find button.
D-Link DES-3326SR Layer 3 Switch OSPF Information To view information relevant to OSPF operations, open the Network Monitoring and use the links located in the OSPF subdirectory. OSPF information can be viewed in the following menus: OSPF LSDB Table OSPF Neighbor Table OSPF Virtual Neighbor Table OSPF Link State Database Table The Switch maintains two OSPF Link State Databases (LSDB) − Internal and External. The Internal LSDB describes the Link State Advertisements (LSA) for OSPF Antonymous Systems (AS).
D-Link DES-3326SR Layer 3 Switch OSPF Neighbor Table Figure 16- 9. OSPF Neighbor Table The following fields are displayed. Parameter Description Neighbor ID The router ID of a neighboring router. IP Address The IP address of the neighboring router. Neighbor Options This field indicates whether the neighbor router can accept OSPF optional operation within its OSPF domain. For example, TOS routing. Neighbor Priority The priority value of the neighboring router.
D-Link DES-3326SR Layer 3 Switch DVMRP Information To view DVMRP information, open the Network Monitoring folder and use the links located in a separate DVMRP subdirectory. DVMRP information can be viewed in the following menus: DVMRP Routing Table DVMRP Neighbor Address Table DVMRP Next Hop Table DVMRP Routing Table Figure 16- 11. DVMRP Routing Table The Source Address and Source Mask fields allow the entry of an IP address and corresponding subnet mask to search the table.
D-Link DES-3326SR Layer 3 Switch DVMRP Neighbor Address Table Figure 16- 12. DVMRP Neighbor Table The following fields are displayed. Parameter Description Interface The name of the IP interface the router resides on. Neighbor Address IP address of the DVMRP neighbor. Generation ID Indicates if the neighbor supports generation ID. Expire Time Time in seconds until the DVMRP neighbor information expires. DVMRP Next Hop Table Figure 16- 13. DVMRP Next Hop Table The following fields are displayed.
D-Link DES-3326SR Layer 3 Switch PIM Neighbor Address Table Multicast routers use Protocol Independent Multicast (PIM) to determine which other multicast routers should receive multicast packets. The PIM Neighbor Address Table contains information regarding each of a router’s PIM neighbors. This screen may be found in the Monitoring folder under the heading PIM Monitoring and is a read-only screen. Figure 16- 14. PIM Neighbor Address Table The following fields are displayed.
D-Link DES-3326SR Layer 3 Switch Router Ports This displays which of the switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. A router port that is dynamically configured by the switch is designated by D. To browse the Router Ports, open the Network Monitoring folder and the Status subdirectory.
D-Link DES-3326SR Layer 3 Switch IGMP Snooping Group Table This allows the Switch’s IGMP Snooping table to be viewed. IGMP Snooping allows the switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. You may specify a VLAN by name to view. To browse the IGMP Snooping table, open the Network Monitoring folder and the Status subdirectory. Click on the IGMP Snooping Group Table link to see the following menu: Figure 16- 17.
D-Link DES-3326SR Layer 3 Switch Specify the VLAN and click on the Find button. The following information is displayed in the IGMP Snooping Forwarding table: Parameter Description Source IP The IP address of the device sending the IGMP packets. Multicast Group The IP address of the multicast group. Port Map These are the ports where the IGMP packets were snooped are displayed. IGMP Group Table To browse the IGMP Group table, open the Network Monitoring folder and the Status subdirectory.
D-Link DES-3326SR Layer 3 Switch IP Multicast Forwarding Table To browse the IP Multicast Forwarding table, open the Network Monitoring folder and the Status subdirectory. Click on the IP Multicast Forwarding Table link to see the following menu: Figure 16- 20. IP Multicast Forwarding Table Specify the Multicast Group IP address, Source IP address and Mask, and click on the Find button.
D-Link DES-3326SR Layer 3 Switch Switch History This allows the Switch History Log to be viewed. The Switch records all traps, in sequence, that identify events on the switch. The time since the last cold start of the switch is also recorded. The link to view Switch History is located in the Status subdirectory of the Network Monitoring folder. Figure 16- 22.
D-Link DES-3326SR Layer 3 Switch Chapter 17 Switch Utilities Download Firmware Download Configuration File Save Settings to TFTP Server Save Switch History to TFTP Server Ping Test BOOTP/DHCP Relay BOOTP/DHCP Relay Interface Configuration DNS Relay DNS Relay Interface Configuration TFTP Services Trivial File Transfer Protocol (TFTP) services allow the switch firmware to be upgraded by transferring a new firmware file from a TFTP server to the switch.
D-Link DES-3326SR Layer 3 Switch Download Configuration File To download a configuration file for the switch’s, click on the Basic Setup folder and then the switch Utilities folder and then the TFTP Services folder and finally click on the Download Configuration from TFTP Server link: Figure 17- 2. Use Configuration File on Server Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server. Click Apply to record the IP address of the TFTP server.
D-Link DES-3326SR Layer 3 Switch Save History Log to Server To download a configuration file for the switch’s, click on the Basic Setup folder and then the switch Utilities folder and then the TFTP Services folder and finally click on the Upload history Log to TFTP Server link: Figure 17- 4. Save Switch History To TFTP Server Enter the IP address of the TFTP server and the path and filename for the history log on the TFTP server. Click Apply to make the changes current.
D-Link DES-3326SR Layer 3 Switch DHCP, BOOTP and DNS Relay Use DHCP/BOOTP and DNS Relay configuration to allow the Switch to relay DHCP/BOOTP and DNS information packets to hosts that request them from sources outside the interface on which they reside. Figure 17- 6. DHCP/BOOTP Relay The BOOTP Relay Information menu is used to enable BOOTP Relay and configure hops and time limit. Set the relay configuration as desired and click on the Apply button.
D-Link DES-3326SR Layer 3 Switch BOOTP/DHCP Relay Interface Configuration To configure BOOTP relay for individual IP interfaces, use the DHCP/BOOTP Relay Settings menu. Figure 17- 7. DHCP/BOOTP Relay Settings To create a new relay configuration, enter the IP interface name you want to configure for DHCP relay and the IP address of the server. Click on the New button to enter the relay settings. Up to four servers can be entered for each IP interface. Figure 17- 8.
D-Link DES-3326SR Layer 3 Switch DNS Relay To configure DNS Relay, click on the DNS Relay link: Figure 17- 9. DNS Relay The DNS Relay Information menu is used to enable DNS Relay and configure IP addresses for available DNS servers. Set the relay configuration as desired and click on the Apply button.
D-Link DES-3326SR Layer 3 Switch DNS Relay Interface Configuration To configure permanent entries for the DNS Relay Static Table, use the DNS Relay Static Settings menu. Figure 17- 10. DNS Relay Static Table Configuration To create a new DNS Relay Static entry, enter the Domain Name and the associated IP address. Click on the New button to enter the settings into the static table. Figure 17- 11.
D-Link DES-3326SR Layer 3 Switch Chapter 18 VLANS AND IP INTERFACES VLANs can function somewhat differently in a Layer 3 Switch, that is when the VLANs are Layer 3-based, than if they are strictly based on Layer 2 information. Since IP Switching among VLANs may be unfamiliar to users who are otherwise well acquainted with conventional VLANs used in standard Ethernet Switches, some explanation of VLANs used in Layer 3 Switching is presented below.
D-Link DES-3326SR Layer 3 Switch Understanding 802.1Q VLANs This review of 802.1Q VLANs presents some basic background about how VLANs work according to the IEEE 802.1Q standard. VLANs operate according to the same rules regardless of whether the Switching environment is Layer 2 or Layer 3. The difference is primarily that in a Layer 3 Switch there is an added capability of unique association between a VLAN and an IP interface or subnet group.
D-Link DES-3326SR Layer 3 Switch 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
D-Link DES-3326SR Layer 3 Switch in the Switch’s forwarding table). If the PVID of the port that received the packet is different from the PVID of the port that is to transmit the packet, the Switch will drop the packet. Within the Switch, different PVIDs mean different VLANs. (remember that two VLANs cannot communicate without an external router). So, VLAN identification based upon the PVIDs cannot create VLANs that extend outside a given Switch (or Switch stack).
D-Link DES-3326SR Layer 3 Switch Chapter 19 Configure VLANs Configure 802.1Q Static VLANs 802.1Q Port Settings Switch GVRP This chapter describes how to use the web manager to configure VLANs in the Switch. If you are not familiar with using VLANs on a Layer 3 Switch, it would be a good idea to read the previous section. All the menus needed to create and configure VLANs are located in their own subdirectory in the Advanced Setup folder.
D-Link DES-3326SR Layer 3 Switch Figure 19- 2. 802.1Q Static VLANs Entry Settings – Add To edit an existing 802.1Q VLAN, click the corresponding click-box and then click the Edit button to open the following dialog box: Figure 19- 3. 802.1Q Static VLANs Entry Settings – Edit See below for a description of VLAN parameters.
D-Link DES-3326SR Layer 3 Switch The following fields can then be set in either the Add or Edit dialog boxes: Parameter Description Unit Choose the Switch that the VLAN will be created on. VID (VLAN ID) Allows the entry of a VLAN ID in the Add dialog box, or displays the VLAN ID of an existing VLAN in the Edit dialog box. VLANs can be identified by either the VID or the VLAN name.
D-Link DES-3326SR Layer 3 Switch 802.1Q Port Settings The Port VLAN ID (PVID) menu, shown below, allows you to determine whether the switch will share its VLAN configuration information with other GARP VLAN Registration Protocol (GVRP) enabled switches. In addition, Ingress Checking can be used to limit traffic by filtering incoming packets whose PVID does not match the PVID of the port. Figure 19- 4.
D-Link DES-3326SR Layer 3 Switch Switch GVRP To enable GVRP for the Switch, access the Switch GVRP menu in the VLAN Configurations folder, select Enabled from the drop-down menu and click on the Apply button. GVRP may be disabled universally without changing any of the per-port GVRP settings so they do not have to be reconfigured if Switch GVRP is enabled later. Figure 19- 5.
D-Link DES-3326SR Layer 3 Switch Chapter 20 IP Interface Configuration To configure IP interfaces, first set up VLANs, then access the IP Interface Settings menu located in the Layer 3 - IP Networking subdirectory of the Advanced Setup folder. Set Up IP Interfaces Each VLAN must be configured prior to setting up the VLAN’s corresponding IP interface. An example is presented below: Table 3.
D-Link DES-3326SR Layer 3 Switch Figure 20- 1. Setup IP Interface To setup an new IP interface, click the New button: Figure 20- 2. Setup IP Interface – Add To edit an existing IP interface, click on the Edit button: Figure 20- 3.
D-Link DES-3326SR Layer 3 Switch Choose a name for the interface to be added and enter it in the Interface Name field (if you are editing an IP Interface, the Interface Name will already be in the top field as seen in the window above). Enter the interface’s IP address and subnet mask in the corresponding fields. Pull the Active pull-down menu to Yes and click Apply to enter to make the IP interface effective. Use the Save Changes dialog box from the Basic Setup folder to enter the changes into NV-RAM.
D-Link DES-3326SR Layer 3 Switch Chapter 21 Multicast Routing Configuration Multicast Global Configurations IGMP Snooping Settings IGMP Interface Configurations DVMRP Interface Configuration PIM-DM Settings Controlling Multicast Routing on the Switch includes setting up IGMP for IP interfaces, PIM and DVMRP. This chapter describes how to set these up. For an explanation of how these protocols function, read Appendix C.
D-Link DES-3326SR Layer 3 Switch IGMP Snooping Settings To configure IGMP Snooping, click the IGMP Snooping Configurations to open the following menu: Figure 21- 2. IGMP Snooping Configuration To edit an IGMP Snooping entry on the switch, select the entry on the IGMP Snooping Configurations screen and then click the Edit button: Figure 21- 3.
D-Link DES-3326SR Layer 3 Switch The following fields can be set: Parameter Description VLAN Name Allows the entry of the name of the VLAN for which IGMP Snooping is to be configured. Query Interval Allows the entry of a value between 1 and 65500 seconds, with a default of 125 seconds. This specifies the length of time between sending IGMP queries. Max Response Sets the maximum amount of time allowed before sending an IGMP response report.
D-Link DES-3326SR Layer 3 Switch IGMP Interface Configuration IGMP for IP interfaces function the same way they do for individual ports or VLANs in Layer 2. Most of the parameters are the same as well, except instead of configuring for VLANs you are setting up IGMP for different subnets (IP interfaces). To configure an IGMP Interface on the switch, click on the IGMP Interface Configuration link under the IP Multicast Routing Protocols folder: Figure 21- 4.
D-Link DES-3326SR Layer 3 Switch NOTE: The Robustness Variable field allows IGMP to be ‘tuned’ for subnetworks that are expected to lose many packets. A high value (max. 255) for the robustness variable will help compensate for ‘lossy’ sub-networks. A low value (min. 2) should be used for less ‘lossy’ sub-networks. The following fields can be set for IGMP Interfaces: Parameter Description Interface Name Displays the name of the IP interface that is to be configured for IGMP.
D-Link DES-3326SR Layer 3 Switch DVMRP Interface Configuration To configure DVMRP for an IP interface, Click the DVMRP Interface Configurations link from the IP Multicast Routing Protocols folder: Figure 21- 6. DVMRP Interface Configuration Figure 21- 7. DVMRP Interface Configuration − Edit This menu allows the Distance-Vector Multicast Routing Protocol to be configured for each IP interface defined on the switch.
D-Link DES-3326SR Layer 3 Switch The following fields for DVMRP can be set: Parameter Description Interface Name Displays the name of the IP interface for which DVMRP is to be configured. This must be a previously defined IP interface. IP Address Displays the IP address corresponding to the IP Interface name entered above. Probe Interval <10> This field allows an entry between 0 and 65,535 seconds and defines the interval between ‘probes’. The default is 10.
D-Link DES-3326SR Layer 3 Switch To configure PIMDM for an IP interface, click the PIMDM Interface Configuration link under the IP Multicast Routing Protocols folder: Figure 21- 8. PIM-DM Interface Configuration The Protocol Independent Multicast − Dense Mode (PIM-DM) protocol can be individually configured for each IP interface on the switch. The PIM-DM Interface Configurations dialog box will display all of the IP interfaces currently configured on the switch.
D-Link DES-3326SR Layer 3 Switch Chapter 22 Static Route, Static ARP and RIP Configuration Configure Static Routes Configure Static ARP Routing Information Protocol (RIP) Configuration This chapter describes how to configure static routes, create permanent entries for the ARP table, and set up RIP. For more information on static routes (IP routing) ARP and RIP, please read Appendix C. Configure Static Routes Entries into the Switch’s forwarding table can be made using both MAC addresses and IP addresses.
D-Link DES-3326SR Layer 3 Switch The following fields can be set: Parameter Description IP Address <0.0.0.0> Allows the entry of an IP address that will be a static entry into the Switch’s Routing Table. Subnet Mask <0.0.0.0> Allows the entry of a subnet mask corresponding to the IP address above. Gateway IP <0.0.0.0> Allows the entry of an IP address of a gateway for the IP address above.
D-Link DES-3326SR Layer 3 Switch Routing Information Protocol (RIP) Configuration To setup RIP for the IP interfaces configured in the Switch, open the RIP folder and click on the RIP Global Setting link. Use the RIP Global Setting menu to first enable RIP and then configure RIP settings for the individual IP interfaces. To enable RIP, select Enabled from the drop-down RIP State menu and click the Apply button.
D-Link DES-3326SR Layer 3 Switch The following RIP settings can be applied to each IP interface: Parameter Description Interface Name The name of the IP interface on which RIP is to be setup. This interface must be previously configured on the Switch. TX Mode Toggle among Disabled, V1 Only, V1 Compatible, and V2 Only. This entry specifies which version of the RIP protocol will be used to transmit RIP packets. Disabled prevents the transmission of RIP packets.
D-Link DES-3326SR Layer 3 Switch Chapter 22 Introduction to OSPF The Open Shortest Path First (OSPF) routing protocol that uses a link-state algorithm to determine routes to network destinations. A “link” is an interface on a router and the “state” is a description of that interface and its relationship to neighboring routers. The state contains information such as the IP address, subnet mask, type of network the interface is attached to, other routers attached to the network, etc.
D-Link DES-3326SR Layer 3 Switch OSPF Cost Each OSPF interface has an associated cost (also called “metric”) that is representative of the overhead required to send packets over that interface. This cost is inversely proportional to the bandwidth of the interface (i.e. a higher bandwidth interface has a lower cost). There is then a higher cost (and longer time delays) in sending packets over a 56 Kbps dial-up connection than over a 10 Mbps Ethernet connection.
D-Link DES-3326SR Layer 3 Switch Router A 0 128.213.0.0 10 10 Router B 5 Router C 5 192.213.11.0 10 Router D 10 222.211.10.0 Figure 23- 2. Constructing a Shortest Path Tree The diagram above shows the network from the viewpoint of Router A. Router A can reach 192.213.11.0 through Router B with a cost of 10+5=15. Router A can reach 222.211.10.0 through Router C with a cost of 10+10=20. Router A can also reach 222.211.10.
D-Link DES-3326SR Layer 3 Switch Areas and Border Routers OSPF link-state updates are forwarded to other routers by flooding to all routers on the network. OSPF uses the concept of areas to define where on the network routers that need to receive particular link-state updates are located. This helps ensure that routing updates are not flooded throughout the entire network and to reduce the amount of bandwidth consumed by updating the various router’s routing tables.
D-Link DES-3326SR Layer 3 Switch OSPF Authentication OSPF packets can be authenticated as coming from trusted routers by the use of predefined passwords. The default for routers is to use not authentication. There are two other authentication methods − simple password authentication (key) and Message Digest authentication (MD-5). Message Digest Authentication (MD-5) MD-5 authentication is a cryptographic method. A key and a key-ID are configured on each router.
D-Link DES-3326SR Layer 3 Switch Neighbors Routers that are connected to the same area or segment become neighbors in that area. Neighbors are elected via the Hello protocol. IP multicast is used to send out Hello packets to other routers on the segment. Routers become neighbors when they see themselves listed in a Hello packet sent by another router on the same segment. In this way, two-way communication is guaranteed to be possible between any two neighbor routers.
D-Link DES-3326SR Layer 3 Switch Building Adjacency Two routers undergo a multi-step process in building the adjacency relationship. The following is a simplified description of the steps required: • Down − No information has been received from any router on the segment. • Attempt − On non-broadcast multi-access networks (such as Frame Relay or X.25), this state indicates that no recent information has been received from the neighbor.
D-Link DES-3326SR Layer 3 Switch OSPF Packet Header Type Version No. Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Table 5. OSPF Packet Header Field Description Version No. The OSPF version number Type The OSPF packet type. The OSPF packet types are as follows: Type Description Hello Database Description Link-State Request Link-State Update Link-State Acknowledgment Packet Length The length of the packet in bytes.
D-Link DES-3326SR Layer 3 Switch Hello Packet Version No. 1 Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Network Mask Hello Interval Options Router Priority Router Dead Interval Designated Router Backup Designated Router Neighbor Table 6. Hello Packet Field Description Network Mask The network mask associated with this interface. Options The optional capabilities supported by the router.
D-Link DES-3326SR Layer 3 Switch Database Description Packet 2 Version No. Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Reserved I M MS Reserved Options DD Sequence No. Link-State Advertisement Header ... Table 7. Database Description Packet Field Description Options The optional capabilities supported by the router. I – bit The Initial bit. When set to 1, this packet is the first in the sequence of Database Description packets.
D-Link DES-3326SR Layer 3 Switch Link-State Request Packet 3 Version No. Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Link-State Type Link-State ID Advertising Router Each advertisement requested is specified by its Link-State Type, Link-State ID, and Advertising Router. This uniquely identifies the advertisement, but not its instance. Link-State Request packets are understood to be requests for the most recent instance.
D-Link DES-3326SR Layer 3 Switch The Link-State Acknowledgment Packet Link-State Acknowledgment packets are OSPF packet type 5. To make the folding of link-state advertisements reliable, flooded advertisements are explicitly acknowledged. This acknowledgment is accomplished through the sending and receiving of Link-State Acknowledgment packets. Multiple link-state advertisements can be acknowledged in a single Link-State Acknowledgment packet.
D-Link DES-3326SR Layer 3 Switch The Link State Advertisement Header All link state advertisements begin with a common 20-byte header. This header contains enough information to uniquely identify the advertisements (Link State Type, Link State ID, and Advertising Router). Multiple instances of the link state advertisement may exist in the routing domain at the same time. It is then necessary to determine which instance is more recent.
D-Link DES-3326SR Layer 3 Switch Router Links Advertisements Router links advertisements are type 1 link state advertisements. Each router in an area originates a routers links advertisement. The advertisement describes the state and cost of the router’s links to the area. All of the router’s links to the area must be described in a single router links advertisement.
D-Link DES-3326SR Layer 3 Switch Table 10. Routers Links Advertisements Field Description Type A quick classification of the router link. One of the following: Type Description Point-to-point connection to another router. Connection to a transit network. Connection to a stub network. Virtual link. Link ID Identifies the object that this router link connects to. Value depends on the link’s Type. When connecting to an object that also originates a link state advertisement (i.e.
D-Link DES-3326SR Layer 3 Switch Network Links Advertisements Network links advertisements are Type 2 link state advertisements. A network links advertisement is originated for each transit network in the area. A transit network is a multi-access network that has more than one attached router. The network links advertisement is originated by the network’s Designated router. The advertisement describes all routers attached to the network, including the Designated Router itself.
D-Link DES-3326SR Layer 3 Switch Summary Link Advertisements Link-State Age 2 Options Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Network Mask TOS Metric For stub area, Type 3 summary link advertisements can also be used to describe a default route on a per-area basis. Default summary routes are used in stub area instead of flooding a complete set of external routes.
D-Link DES-3326SR Layer 3 Switch Autonomous Systems External Link Advertisements Autonomous Systems (AS) link advertisements are Type 5 link state advertisements. These advertisements are originated by AS boundary routers. A separate advertisement is made for each destination known to the router, that is external to the AS. AS external link advertisements usually describe a particular external destination. For these advertisements the Link State ID field specifies an IP network number.
D-Link DES-3326SR Layer 3 Switch Chapter 24 Configure OSPF MD5 Key Table Configuration Configure OSPF Settings OSPF Area Setting OSPF Interface Configuration OSPF Virtual Interface Settings Area Aggregation Configuration OSPF Host Route Settings Route Redistribution Settings This chapter describes how to configure OSPF settings for the Switch.
D-Link DES-3326SR Layer 3 Switch MD5 Key Table Configuration MD5 authentication is used to identify trusted routers sending OSPF packets. By default no authentication is used for OSPF so it is not necessary to configure any MD5 keys to use OSPF. MD5 authentication can be set up at any time, before or after you have configured OSPF settings. The link for MD5 Key configuration is located in the Configuration folder.
D-Link DES-3326SR Layer 3 Switch Configure OSPF Settings All the links for OSPF configuration menus are contained within a subdirectory of the Layer 3 IP Networking subdirectory (located in the Configuration folder). The OSPF tables used to monitor OSPF information can be accessed using the links located in the OSPF subdirectory located in the Layer 3 subdirectory of the Monitoring folder. OSPF tables are discussed following this section’s discussion of OSPF configuration.
D-Link DES-3326SR Layer 3 Switch To set up an OSPF Area configuration click the OSPF Area Settings link to open the following dialog box: Figure 24- 5. OSPF Area Setting The first OSPF Area Setting screen displays a summary of all of the OSPF areas defined on the switch. OSPF areas can be added, edited, or deleted from this screen. To add an OSPF area to the switch, click on the New button: Figure 24- 6.
D-Link DES-3326SR Layer 3 Switch OSPF Interface Configuration To set up OSPF interfaces, click the OSPF Interface Settings link to view OSPF settings for existing IP interfaces. If there are no IP interfaces configured (besides the default System interface), only the System interface settings will appear listed. To configure an OSPF Interface, click on the OSPF Interface Configuration link: Figure 24- 8.
D-Link DES-3326SR Layer 3 Switch The following fields can then be configured for the OSPF interface: Parameter Description Interface Name Displays the of an IP interface previously configured on the Switch. Area ID Allows the entry of an OSPF Area ID configured above. Router Priority Allows the entry of a number between 0 and 255 representing the OSPF priority of the selected area. If a Router Priority of 0 is selected, the Switch cannot be elected as the Designated Router for the network.
D-Link DES-3326SR Layer 3 Switch To add a new OSPF virtual interface configuration set to the table, click the New button. Figure 24- 11. Virtual Interface Configuration − Add Configure the following parameters if you are adding or changing an OSPF Virtual Interface: Parameter Description Transit Area ID Allows the entry of an OSPF Area ID − previously defined on the Switch − that allows a remote area to communicate with the backbone (area 0). A Transit Area cannot be a Stub Area or a Backbone Area.
D-Link DES-3326SR Layer 3 Switch Area Aggregation Configuration Area Aggregation allows all of the routing information that may be contained within an area to be aggregated into a summary LSDB advertisement of just the network address and subnet mask. This allows for a reduction in the volume of LSDB advertisement traffic as well as a reduction in the memory overhead in the Switch used to maintain routing tables. Click the OSPF Area Aggregation Settings link to view the current settings.
D-Link DES-3326SR Layer 3 Switch OSPF Host Route Settings OSPF host routes work in a way analogous to RIP, only this is used to share OSPF information with other OSPF routers. This is used to work around problems that might prevent OSPF information sharing between routers. To configure OSPF host routes, click the OSPF Host Route Settings link. To add a new OSPF Route, click the New button. Configure the setting in the menu that appears. Figure 24- 14.
D-Link DES-3326SR Layer 3 Switch Route Redistribution Settings Route redistribution allows routers on the network − that are running different routing protocols − to exchange routing information. This is accomplished by comparing the routes stored in the various router’s routing tables and assigning appropriate metrics. This information is then exchanged among the various routers according to the individual routers current routing protocol.
D-Link DES-3326SR Layer 3 Switch To edit an existing Route Redistribution entry on the switch, select the entry from the Route Redistribution screen and click on the Edit button: Figure 24- 18. Route Redistribution − Edit Refer to the table below for descriptions of the Router Redistribution Table settings: Parameter Description Src Protocol Allows the selection of the protocol of the source device. Available choices are RIP, OSPF, or Static.
D-Link DES-3326SR Layer 3 Switch Appendix A Technical Specifications General Standard IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-X Ethernet IEEE 802.1 P/Q VLAN IEEE 802.3x Full-duplex Flow Control Protocols CSMA/CD Data Transfer Rates: Half-duplex Full-duplex Ethernet Fast Ethernet Gigabit Ethernet 10 Mbps 100Mbps N/A 20Mbps 200Mbps 2000Mbps Topology Star Network Cables UTP Cat.5 for 100Mbps UTP Cat.
D-Link DES-3326SR Layer 3 Switch Physical & Environmental AC inputs: 100 - 240 VAC, 50/60 Hz (internal universal power supply) Power Consumption: 29 watts maximum DC fans: 1 built-in 40 x 40 x10 mm fan Operating Temperature: 0 to 50 degrees Celsius (32 to 122 degrees Fahrenheit) Storage Temperature: -25 to 55 degrees Celsius (-13 to 131 degrees Fahrenheit) Humidity: Operating: 5% to 95% RH, non-condensing Storage: 0% to 95% RH, non-condensing Dimensions: 441 mm x 210 mm x 43 mm (17.36 x 8.
D-Link DES-3326SR Layer 3 Switch Appendix B Network Addressing and Protocols This appendix provides background information pertaining to Layer 3 IP networking including IP addressing, network protocols and the composition of packet headers. IP Addressing and Subnetting This section gives basic information needed to configure your Layer 3 Switch for IP routing. The information includes how IP addresses are broken down and how subnetting works.
D-Link DES-3326SR Layer 3 Switch The dots are included to make the numbers easier to read. Eight binary bits are called a ‘byte’ or an ‘octet’. An octet can represent any decimal value between ‘0’ (00000000) and ‘255’ (11111111). IP addresses, represented in decimal form, are four numbers whose value is between ‘0’ to ‘255’. The total range of IP addresses are then: Lowest possible IP address - 0.0.0.0 Highest possible IP address - 255.255.255.
D-Link DES-3326SR Layer 3 Switch For example, the IP address 10.42.73.210 is a Class A address, so the Network part of the address (called the Network Address) is the first octet (10.x.x.x). The node part of the address is the last three octets (x.42.73.210). To specify the network address for a given IP address, the node part is set to all “0”s. In our example, 10.0.0.0 specifies the network address for 10.42.73.210. When the node part is set to all “1”s, the address specifies a broadcast address. So, 10.
D-Link DES-3326SR Layer 3 Switch Multiplying the number of subnets times the number of nodes gives 12,582,900 possible nodes. Note that this is less than the 16,777,214 possible nodes that an unsubnetted class A network would have. Subnetting reduces the number of possible nodes for a given network, but increases the segmentation of the network. Classless Inter-Domain Routing – CIDR Under CIDR, the subnet mask notation is reduced to a simplified shorthand.
D-Link DES-3326SR Layer 3 Switch Class B Subnet Masks # of Bits Subnet Mask CIDR Notation # of Subnets # of Hosts Total Hosts 2 3 4 5 6 7 8 9 10 11 12 13 14 255.255.192 255.255.224.0 255.255.240.0 255.255.248.0 255.255.252.0 255.255.254.0 255.255.255.0 255.255.255.128 255.255.255.192 255.255.255.224 255.255.255.240 255.255.255.248 255.255.255.
D-Link DES-3326SR Layer 3 Switch Internet Protocols This is a brief introduction to the suite of Internet Protocols frequently referred to as TCP/IP. It is intended to give the reader a reasonable understanding of the available facilities and some familiarity with terminology. It is not intended to be a complete description. Protocol Layering The Internet Protocol (IP) divides the tasks necessary to route and forward packets across networks by using a layered approach.
D-Link DES-3326SR Layer 3 Switch Figure B- 2. The Protocol Stack Between two protocol stacks, members of the same layer are known as peers and communicate by well-known (open and published) protocols. Within a protocol stack, adjacent layers communicate by an internal interface. This interface is usually not publicly documented and is frequently proprietary. It has some of the same characteristics of a protocol and two stacks from the same software vendor may communicate in the same way.
D-Link DES-3326SR Layer 3 Switch Layer 4 This layer, known as the transport layer, establishes the communication path between user applications and the network infrastructure and defines the method of communicating. TCP and UDP are well-known protocols in the transport layer. TCP is a “connection-oriented” protocol, and requires the establishment of parameters for transmission prior to the exchange of data. Web technology is based on TCP. UDP is “connectionless” and requires no connection setup.
D-Link DES-3326SR Layer 3 Switch TCP must know how large a packet the network can process. To do this, the TCP protocols at each end of a connection state how large a packet they can handle and the smaller of the two is selected. The TCP header contains at least 20 octets. The source and destination TCP port numbers are the most important fields. These specify the connection between two TCP protocols on two network devices.
D-Link DES-3326SR Layer 3 Switch The flags and fragment offset are used to keep track of packets that must be divided among several smaller packets to cross networks for which they are too large. The Time-to-Live (TTL) is the number of gateways the packet is allowed to cross between the source and destination. This number is decremented by one when the packet crosses a gateway and when the TTL reaches zero, the packet is dropped. This helps reduce network traffic if a loop develops.
D-Link DES-3326SR Layer 3 Switch TCP and UDP Well-Known Ports Application protocols run ‘on top of’ TCP/IP. When an application wants to send data or a message, it gives the data to TCP. Because TCP and IP take care of the networking details, the application can look at the network connection as a simple data stream. To transfer a file across a network using the File Transfer Protocol (FTP), a connection must first be established.
D-Link DES-3326SR Layer 3 Switch The UDP header is shorter than a TCP header. UDP also uses a checksum to verify that data is received uncorrupted. The Internet Control Message Protocol (ICMP) is also a simplified protocol used for error messages and messages used by TCP/IP. ICMP, like UDP, processes messages that will fit into a single packet. ICMP does not, however use ports because its messages are processed by the network software.
D-Link DES-3326SR Layer 3 Switch DHCP Servers The Dynamic Host Configuration Protocol (DHCP) is used to dynamically assign a TCP/IP network configuration to network devices and computers on the network. It also ensures that IP address conflicts do not occur. IP addresses are assigned from a pool of free addresses. Each IP address assigned has a ‘lease’ and a ‘lease expiration period’. The lease must be periodically renewed.
D-Link DES-3326SR Layer 3 Switch Appendix C IP Routing, Multicasting, Multicast Routing and Routing Protocols IP handles the task of determining how packets will get from their source to their destination. This process is referred to as routing. For IP to work, the local system must be attached to a network.
D-Link DES-3326SR Layer 3 Switch ARP The Address Resolution Protocol (ARP) determines the MAC address and IP address correspondence for a network device. A local computer will maintain an ARP cache which is a table of MAC addresses and the corresponding IP addresses. Before a connection with another computer is made, the local computer first checks its ARP cache to determine whether the remote computer has an entry.
D-Link DES-3326SR Layer 3 Switch Multicasting Multicasting is a group of protocols and tools that enable a single source point to send packets to groups of multiple destination points with persistent connections that last for some amount of time. The main advantage to multicasting is a decrease in the network load compared to broadcasting. Multicast Groups Class D IP addresses are assigned to a group of network devices that comprise a multicast group.
D-Link DES-3326SR Layer 3 Switch Internet Group Management Protocol (IGMP) End users that want to receive multicast packets must be able to inform nearby routers that they want to become a multicast group member of the group these packets are being sent to. The Internet Group Management Protocol (IGMP) is used by multicast routers to maintain multicast group membership.
D-Link DES-3326SR Layer 3 Switch The router with the lowest IP address is elected as the querier. The explicit group leave message is added to decrease latency, and routers can ask for membership reports from a particular multicast group ID. The transition states a host will go through to join or leave a multicast group are shown in the diagram below. Multicast Routing Algorithms An algorithm is not a program. An algorithm is a statement of how a problem can be solved.
D-Link DES-3326SR Layer 3 Switch Reverse Path Broadcasting (RPB) The Reverse Path Broadcasting (RPB) algorithm is an enhancement of the multicast spanning tree algorithm. RPB constructs a spanning tree for each multicast source. When the router receives a multicast packet, it then checks to determine if the packet was received on the shortest path back from the router to the source.
D-Link DES-3326SR Layer 3 Switch shortest path back to the multicast source, or that have no active multicast group members. A ‘graft’ message is added that allows a previously pruned branch of the multicast delivery tree to be reactivated. This allows for lower latency when a leaf router adds a new member to a multicast membership group.
D-Link DES-3326SR Layer 3 Switch RIP Version 1 Message Format There are two types of RIP messages: routing information messages and information requests. The same format is used by both types.
D-Link DES-3326SR Layer 3 Switch The distances, measured in router hops are entered in the Distance to Source Network, and Distance to Destination Network fields. RIP 1 Route Interpretation RIP was designed to be used with classed address schemes, and does not include an explicit subnet mask. An extension to version 1 does allow routers to exchange subnetted addresses, but only if the subnet mask used by the network is the same as the subnet mask used by the address.
D-Link DES-3326SR Layer 3 Switch Glossary 100BASE-FX: 100Mbp Ethernet implementation over fiber. 100BASE-TX: 100Mbps Ethernet implementation over Category 5 and Type 1 Twisted Pair cabling. 10BASE-T: The IEEE 802.3 specification for Ethernet over Unshielded Twisted Pair (UTP) cabling. ageing: The automatic removal of dynamic entries from the Switch Database which have timed-out and are no longer valid. ATM: Asynchronous Transfer Mode.
D-Link DES-3326SR Layer 3 Switch LAN: Local Area Network. A network of connected computing resources (such as PCs, printers, servers) covering a relatively small geographic area (usually not larger than a floor or building). Characterized by high data rates and low error rates. latency: The delay between the time a device receives a packet and the time the packet is forwarded out of the destination port. line speed: See baud rate.
D-Link DES-3326SR Layer 3 Switch LIMITED WARRANTY D-Link provides this limited warranty for its product only to the person or entity who originally purchased the product from D-Link or its authorized reseller or distributor. D-Link would fulfill the warranty obligation according to the local warranty policy in which you purchased our products.
D-Link DES-3326SR Layer 3 Switch What You Must Do For Warranty Service: Registration Card. The Registration Card provided at the back of this manual must be completed and returned to an Authorized D-Link Service Office for each D-Link product within ninety (90) days after the product is purchased and/or licensed. The addresses/telephone/fax list of the nearest Authorized D-Link Service Office is provided in the back of this manual.
D-Link DES-3326SR Layer 3 Switch Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT, INCONVENIENCE OR DAMAGES OF ANY CHARACTER, WHETHER DIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF GOODWILL, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, LOSS OF INFORMATION OR DATA CONTAINED IN, STORED ON, OR INTEGRATED
D-Link DES-3326SR Layer 3 Switch Subject to the terms and conditions set forth herein, D-Link Systems, Inc. (“D-Link”) provides this Limited Warranty: Only to the person or entity that originally purchased the product from D-Link or its authorized reseller or distributor, and Only for products purchased and delivered within the fifty states of the United States, the District of Columbia, U.S. Possessions or Protectorates, U.S. Military Installations, or addresses with an APO or FPO.
D-Link DES-3326SR Layer 3 Switch Submitting A Claim: The customer shall return the product to the original purchase point based on its return policy.
D-Link DES-3326SR Layer 3 Switch Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT, INCONVENIENCE OR DAMAGES OF ANY CHARACTER, WHETHER DIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF GOODWILL, LOSS OF REVENUE OR PROFIT, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, FAILURE OF OTHER EQUIPMENT OR COMPUTER P
D-Link DES-3326SR Layer 3 Switch Product Registration Register online your D-Link product at http://support.dlink.com/register/ Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
D-Link DES-3326SR Layer 3 Switch D-Link Europe Limited Product Warranty General Terms The Limited Product Warranty set forth below is given by D-LINK (Europe) Ltd. (herein referred to as "D-LINK"). This Limited Product Warranty is only effective upon presentation of the proof of purchase. Upon further request by D-LINK, this warranty card has to be presented, too.
D-Link DES-3326SR Layer 3 Switch Performance of the Limited Product Warranty If a product defect occurs, D-LINK’s sole obligation shall be to repair or replace any defective product free of charge to the original purchaser provided it is returned to an Authorized D-LINK Service Center during the warranty period. Such repair or replacement will be rendered by D-LINK at an Authorized D-LINK Service Center.
D-Link DES-3326SR Layer 3 Switch D-Link Europe Limited Produktgarantie Allgemeine Bedingungen Die hierin beschriebene eingeschränkte Garantie wird durch D-LINK (Europe) Ltd. gewährt (im Folgenden: „D-LINK“). Diese eingeschränkte Garantie setzt voraus, dass der Kauf des Produkts nachgewiesen wird. Auf Verlangen von D-LINK muss auch dieser Garantieschein vorgelegt werden. AUSSER IN DEM HIER AUSDRÜCKLICH BESCHRIEBENEN UMFANG GEWÄHRT D-LINK KEINE WEITEREN GARANTIEN, WEDER AUSDRÜCKLICH NOCH STILLSCHWEIGEND.
D-Link DES-3326SR Layer 3 Switch Leistungsumfang der eingeschränkten Garantie Bei Auftreten eines Produktfehlers besteht die einzige Verpflichtung von D-LINK darin, dem ursprünglichen Käufer das defekte Produkt kostenlos zu reparieren oder es auszutauschen. Voraussetzung hierfür ist, dass das Produkt während der Garantielaufzeit einem autorisierten D-LINK-Servicecenter übergeben wird. Reparatur oder Austausch werden von D-LINK durch ein autorisiertes D-LINK-Servicecenter durchgeführt.
D-Link DES-3326SR Layer 3 Switch D-Link Europe a limité la garantie des produits Conditions Générales La Garantie Produit Limitée énoncée ci-dessous émane de D-LINK (Europe) Ltd. (ci-après « D-LINK »). Cette Garantie Produit Limitée n’est valable que sur présentation de la preuve d’achat. D-LINK peut également exiger la présentation du présent bon de garantie.
D-Link DES-3326SR Layer 3 Switch Exécution de la Garantie Produit Limitée En cas de défaut ou d’erreur d’un produit, l’unique obligation de D-LINK se limite à la réparation ou au remplacement gratuit du produit défectueux, au bénéfice de l’acheteur initial, sous réserve que le produit soit rapporté à un Centre de Service Agréé D-LINK pendant la période de garantie. D-LINK assure la réparation ou le remplacement dans un Centre de Service Agréé D-LINK.
D-Link DES-3326SR Layer 3 Switch Garantía limitada del producto D-LINK Europa Condiciones generales Esta garantía la ofrece D-LINK (Europe) Ltd. (en este documento, "D-LINK"). La garantía limitada del producto sólo es válida si se acompaña del comprobante de la compra. También deberá presentarse la tarjeta de garantía si D-LINK lo solicita.
D-Link DES-3326SR Layer 3 Switch Uso de la garantía limitada del producto Si un producto presenta algún defecto, la obligación exclusiva de D-LINK será reparar o reemplazar, sin coste alguno para el comprador originario, cualquier producto defectuoso siempre y cuando éste sea entregado en un centro autorizado de servicio D-LINK durante el período de garantía. D-LINK realizará la reparación o sustitución para un centro autorizado de servicio D-LINK.
D-Link DES-3326SR Layer 3 Switch D-Link Europe Termini di Garanzia dei Prodotti Generalità La presente Garanzia viene fornita da D-LINK (Europe) Ltd. (di seguito denominata "D-LINK"). Essa viene riconosciuta solo se accompagnata dalla prova di acquisto. D-LINK può richiedere anche l’esibizione della presente cartolina di garanzia.
D-Link DES-3326SR Layer 3 Switch Prestazioni della Garanzia limitata Qualora comparisse un difetto o una non conformità, D-LINK avrà l’unico obbligo di riparare o sostituire il prodotto non conforme senza alcun costo per l’acquirente a condizione che il prodotto venga restituito a un Centro di Assistenza autorizzato D-LINK entro il periodo di garanzia. La riparazione o la sostituzione verranno eseguite da D-LINK presso un Centro di Assistenza autorizzato D-LINK.
D-Link DES-3326SR Layer 3 Switch International Offices U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA. 92708 TEL: 714-885-6000 Fax 866-743-4905 URL: www.dlink.com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europe (U. K.) 4th Floor, Merit House Edgware Road, Colindale London NW9 5AB U.K. TEL: 44-20-8731-5555 FAX: 44-20-8731-5511 URL: www.dlink.co.
Registration Card All Countries and Regions Excluding USA Print, type or use block letters. Your name: Mr./Ms_____________________________________________________________________________ Organization: ________________________________________________ Dept.
