D-Link DWS-3000 manual

Contents

Main Page Table of Contents 5 Storm Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43 6 Trunking (Link Aggregation) . . . . . . . . . . . . . . . . . . . . . . . . . . .47 7 IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51 8 Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59 9 Port Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63 10 Link Layer Discovery Protocol . . . . . . . . . . . . . . . . . . . . . . . . . 69 11 Denial of Service Attack Protection . . . . . . . . . . . . . . . . . . . . . 75 12 Port Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 13 VLAN Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 14 Virtual Router Redundancy Protocol. . . . . . . . . . . . . . . . . . . . 87 17 Class of Service Queuing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109 18 Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117 19 RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133 20 TACACS+. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139 21 DHCP Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145 22 Traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149 23 Configuration Scripting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 24 Outbound Telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155 25 Pre-Login Banner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159 26 Simple Network Time Protocol (SNTP) . . . . . . . . . . . . . . . . . 161 28 Port Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173 List of Figures Page Page Page List of Tables Page About This Book Document Organization CLI/Web Examples - Slot/Port Designations Audience CLI Documentation Getting Started In-Band and Out-of-Band Connectivity Configuring for In-Band Connectivity Using BootP or DHCP Using the EIA-232 Port IP Address Subnet Gateway Configuring for Out-of-Band Connectivity Starting the Switch Initial Configuration Unified Switch Installation Quick Starting the Networking Device System Information and System Setup Quick Start up Software Version Information Quick Start up Physical Port Data Quick Start up User Account Management Quick Start up IP Address Quick Start up Uploading from Networking Device to Out-of-Band PC (XMODEM) Quick Start up Downloading from Out-of-Band PC to Networking Device (XMODEM) Quick Start up Downloading from TFTP Server Quick Start up Factory Defaults Using the Web Interface Configuring for Web Access Starting the Web Interface Web Page Layout Configuring an SNMP V3 User Profile Command Buttons Virtual LANs VLAN Configuration Example Configuring a Guest VLAN Configuring Dynamic VLAN Assignments 5NIFIED3WITCH 6,!. 6,!. Example #1: Create Two VLANs Example #2: Assign Ports to VLAN2 Example #3: Assign Ports to VLAN3 Example #4: Assign VLAN3 as the Default VLAN This example shows how to assign VLAN 3 as the default VLAN for port 0/2. Web Interface Private Edge VLANs CLI Example 802.1X Network Access Control 802.1x Network Access Control Example Guest VLAN Configuring the Guest VLAN by Using the CLI Page Configuring Dynamic VLAN Assignment Page Storm Control Example #1: Set Broadcast Storm Control for All Interfaces Example #2: Set Multicast Storm Control for All Interfaces Example #3: Set Unicast Storm Control for All Interfaces Page Page Trunking (Link Aggregation) Figure 9 shows the example network. Figure 9. LAG/Port-channel Example Network Diagram Example 1: Create two port-channels: CLI Example 49 6 Trunking (Link Aggregation) Example 2: Add the physical ports to the port-channels: Example 3: Enable both port-channels. At this point, the LAGs could be added to the default management VLAN. By default, the system enables link trap notification Page IGMP Snooping Example #1: show igmpsnooping Example #2: show mac-address-table igmpsnooping Example #3: set igmp (Global Config Mode) Example #4: set igmp (Interface Config Mode) Page Page Page Page Page Page Port Mirroring Example #1: Set up a Port Mirroring Session Example #2: Show the Port Mirroring Session (DWS-3024) #Monitor session ID 1 - 1 is a hardware limitation. Example #3: Show the Status of All Ports Example #4: Show the Status of the Source and Destination Ports (DWS-3024) #show port 0/7 Page Page Port Security Operation The following are examples of the commands used in the Port Security feature. Example #1: show port security Example #2: show port security on a specific interface Example #3: (Config) port security Page Page Page Page Link Layer Discovery Protocol Example #1: Set Global LLDP Parameters Example #2: Set Interface LLDP Parameters The following commands configure interface 0/10 to transmit and receive LLDP information. Example #3: Show Global LLDP Parameters Example #4 Show Interface LLDP Parameters Using the Web Interface to Configure LLDP Page Page Page Denial of Service Attack Protection Web Interface Port Routing Port Routing Configuration Example 1. Enabling routing for the Switch Example 2. Enabling Routing for Ports on the Switch Using the Web Interface to Configure Routing VLAN Routing VLAN Routing Configuration Example 1: Create Two VLANs 6,!. 6,!. Example 2: Set Up VLAN Routing for the VLANs and the Switch. Using the Web Interface to Configure VLAN Routing Page Page Virtual Router Redundancy Protocol Figure 41. VRRP Example Network Configuration Example 1: Configuring VRRP on the Switch as a Master Router Enable routin g for th e swi tch. IP for wardi ng is then e nabled by d efault. Configure the IP addresses and subnet masks for the port that will participate in the protocol. Enable VRRP for the switch. Example 2: Configuring VRRP on the Switch as a Backup Router Using the Web Interface to Configure VRRP Page Page Proxy Address Resolution Protocol (ARP) Example #1 show ip interface Page Access Control Lists (ACLs) Limitations MAC ACLs IP ACLs ACL Configuration Process IP ACL CLI Example Example #1: Create ACL 179 and Define an ACL Rule Example #2: Define the Second Rule for ACL 179 MAC ACL CLI Examples Example #4: Set up a MAC Access List MAC ACL CLI Examples 99 16 Access Control Lists (ACLs) Example #5: Specify MAC ACL Attributes Example #6 Configure MAC Access Group MAC ACL CLI Examples 101 16 Access Control Lists (ACLs) Example #7 Set up an ACL with Permit Action Example #8: Show MAC Access Lists Page Page Page Page Page Page Page Class of Service Queuing Ingress Port Configuration Trusted and Untrusted Ports/CoS Mapping Table CoS Mapping Table for Trusted Ports Egress Port Configuration - Traffic Shaping Queue Configuration Queue Management Type CLI Examples 111 %GRESS Page Page Page Page Page Differentiated Services - - - DiffServ Inbound Configuration 5NIFIED3WITCH Page Adding Color-Aware Policing Attribute Using the Web Interface to Configure Diffserv Page Page Page Page Page Page Page Configuring the Color-Aware Attribute by Using the Web Page DiffServ for VoIP Configuration Example Configuring DiffServ VoIP Support Example RADIUS RADIUS Configuration Example Configuring RADIUS by Using CLI Commands Page Page Page Page TACACS+ TACACS+ Configuration Example Configuring TACACS+ by Using CLI Commands Page Page Page Page DHCP Filtering Limitations Example #1: Enable DHCP Filtering for the Switch This example Example #2: Enable DHCP Filtering for an Interface Web Examples Page Page Traceroute Page Configuration Scripting Considerations Example #1: script Example #2: script list and script delete Example #3: script apply running-config.scr Example #4: show running-config Use this command to capture the running configuration into a script. Example #5: copy nvram: script Use this command to upload a configuration script. Example #6: script validate running-config.scr Example #7: Validate another Configuration Script Outbound Telnet Example #1: show network Example #2: show telnet Example #3: transport output telnet Example #4: session-limit and session-timeout Web Example Page Pre-Login Banner Note: The command no clibanner removes the banner from the switch. Simple Network Time Protocol (SNTP) Example #1: show sntp Example #2: show sntp client Example #3: show sntp server Example #4: configure sntp Example #5: configure sntp client mode Web Interface Examples Page Page Page Syslog Interpreting Log Files The following are examples of the commands used in the Syslog feature. Example #1: show logging Example #2: show logging buffered Example #3: show logging traplogs Example 4: show logging hosts Example #5: logging port configuration Page Page Port Description Example #1: Enter a Description for a Port Example #2: Show the Port Description