Manuals / D-Link / Computer Equipment / Switch

D-Link user manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual

Models: DGS-3100

1 209

Page 117

DGS-3100 Series Gigabit Stackable Managed Switch User Manual

3.After the ports were assigned to the Guest VLAN, the user needs to configure a Radius Server that will hold the MAC Authentication database. This should be done via click Security > 802.1X > Authentic RADIUS Server page according to the example below.

4.Click Security > 802.1X > 802.1X Setting page: first, 802.1x should be enabled globally and in the port level, 802.1x Control should be configured as ‘ForceAuthorized’.

105

Page 117

Image 117

D-Link user manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual

Contents

D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCH User ManualV2.20 CE Mark Warning FCC WarningWarnung PrecauciónTable of Contents Defining SNMP Host Table Configuring Port Security DGS-3100 Series Gigabit Stackable Managed Switch User Manual PrefaceSafety Cautions General Precautions for Rack-Mountable Products System Overview Viewing the Device Device Management MethodsViewing the Device System OverviewDGS-3100 Series Front Panel DGS-3100 Series Front PanelCommand Line Console Device Management MethodsWeb Based Management Interface SNMP-Based ManagementUser Guide Overview Safety CautionsNotes, Notices, and Cautions User Guide OverviewThe power cable, extension cable, or plug is damaged DGS-3100 Series Gigabit Stackable Managed Switch User ManualUnplug the power cable before removing the power supply An object has fallen into the productGeneral Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge Battery Handling ReminderGETTING STARTED Using the Web-Based User InterfaceUnderstanding the D-Link Embedded Web Interface ViewView Figure 1-1. Device Information PageDescription 1. Tree ViewDisplaying the Stack Status Using the Tool MenuLocating Devices 1. Click Device Locator. The Device Locator Page opensFigure 1-3 Config Backup and Restore Page Backing up and Restoring Configuration FilesField Http TFTP DescriptionResetting the Device 1. Click Reset. The Factory Reset Page opensFigure 1-4 Factory Reset Page Downloading the Firmware 1. Click Firmware Download. The Firmware Download Page opensFigure 1-5 Firmware Download Page Description Field HTTP Download TFTP Download1. Click System Reboot. The System Reboot Page opens Rebooting the SystemFigure 1-6 System Reboot Page 2. Define the Select Unit to Reboot fieldComponent Using the Web System ComponentsName DescriptionCONFIGURING BASIC CONFIGURATION Figure 2-1 Device Information Page Viewing Device InformationField Device Type System Contact System Name System Location Firmware Version Hardware Version System Time System Up TimeLogin Timeout minutes Time Source 802.1D Spanning Tree DHCP Client Field Boot Version MAC Address IP Address Subnet Mask Default GatewaySafeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X StatusSystem Contact System Name System Location Login Timeout minutes Defining System Information3. Define the System Location and Login Timeout minutes fields Figure 2-2 System Information Page1. Click Configuration IP Address. The IP Address Page opens Defining IP AddressesFigure 2-3 IP Address Page FieldManaging Stacking Modes Managing StackingAdvanced Stacking Allocating Unit IDsAssigning Unit IDs Master Enabled Stacking MembersDefining a Stacking Master Defining a Stacking Back Up MasterStack Startup Process Discovering the Stacking MasterElecting a Stacking Master Allocating Unit IDs/Resolving Unit ID Conflicts Unit and Stacking Port ConfigurationStack Resiliency Building Stacks - Quick StartManaging a Self-Ordered Stack Managing a New Manually Ordered StackReplacing Failed Stacking-Members in a Running Stack Stack Management ExamplesBuilding New Manually Ordered Stacks Adding Stacking Members to an Existing Manually Ordered StackReplacing a Failed Stack Master Dividing Stacks Page Merging Stacks Stacking Cable FailureInserting Excess Stacking Members When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down Figure 2-4 Stacking Settings Page Configuring StackingField Stacking Master Current Stack ID New Stack ID after reset DescriptionDefining Ports Configuring Port PropertiesFigure 2-5 Port Setting Page Field Unit From Port To Port State SpeedDescription Field Flow Control LearningFigure 2-6 Port Description Page Viewing Port PropertiesField Description1. Click Configuration ARP Settings. The ARP Settings Page opens ARP SettingsFigure 2-7 ARP Settings Page Static ARP Settings1. Click Configuration User Accounts. The User Accounts Page opens Configuring User AccountsField User Name New Password Access Right Confirm New Password Figure 2-8 User Accounts Page2. Click . The user account is deleted, and the device is updated DGS-3100 Series Gigabit Stackable Managed Switch User ManualTo edit the User Accounts Page 1. Select a name on the User List 2. Click 3. Define the valueFigure 2-9 System Log Host Page Managing System LogsField DescriptionStratum Stratum Stratum Stratum Configuring SNTPExample Time level T1 T2 T3 T4Field Time Setting Time in HH MM SS Figure 2-10 Time Settings PageField DescriptionConfiguring Daylight Savings Time Figure 2-11 TimeZone Settings Page Field Daylight Savings Time State DST Repeating Settings SectionsDaylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT DescriptionDST Annual Settings Section Field FromMonth FromDay FromTime ToMonth ToDay ToTimeDescription Configuring SNMP Parameters Authentication Privacy Key ManagementDescription Figure 2-12 SNMP View Table Page Defining SNMP ViewsField View Name Subtree OID View Type DescriptionFigure 2-13 SNMP Group Table Page Defining SNMP GroupsField Group Name Read View Name Write View Name DescriptionField Notify View Name Security Model Security Level DescriptionCommunity/View TestReadView PWriteView PrivateView Auth-Protocol by Password Password Confirm Password Defining SNMP UsersFigure 2-14 SNMP User Table Page Field User Name Group Name SNMP V3 EncryptionDescription FieldAuth-Protocol by Key Confirm KeyAccess Rights Defining SNMP Communities2. Define the Community Name, and View Name, Access Right fields Figure 2-15 SNMP Community Table PageDefining SNMP Host Table To define the SNMP Host Table PageFigure 2-16 SNMP Host Table Page Description FieldHost IP Address SNMP VersionField Engine ID Use Default Defining SNMP Engine IDFigure 2-17 SNMP Engine ID Page DescriptionFigure 2-18 SNMP Configuration Trap Page Enabling SNMP TrapsField SNMP Traps SNMP Authentication Traps DescriptionFigure 2-19 DHCP Auto Configuration Page DHCP Auto ConfigurationField DHCP Auto Configuration DescriptionFirmware Information Dual Image ServicesField Unit Image Version Update Time Figure 2-20 Firmware Information PageFigure 2-21 Config Firmware Image Page Config Firmware ImageDefines the image file used for reboot. The possible values are FieldCONFIGURING L2 FEATURES 1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opens Enabling Jumbo FramesFigure 3-1. Jumbo Frame Page Field Jumbo FrameUnderstanding IEEE 802.1p Priority Configuring VLANsVLAN Description Notes about VLANs on the DGS-3100 SeriesTerm Untagging Ingress port Egress port DescriptionFigure 3-2. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags Figure 3-3. IEEE 802.1Q TagFigure 3-4. Adding an IEEE 802.1Q Tag Port VLAN ID Tagging and UntaggingIngress Filtering VLAN and Trunk Groups Default VLANsVLAN Status Switch Ports1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opens Defining VLAN PropertiesFigure 3-5. VLAN Configuration Page Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opens Figure 3-6. Add/Edit VLAN Information PageDescription Configuring GVRP 1. Click L2 Features GVRP Settings. The GVRP Setting Page opensFigure 3-7. GVRP Setting Page Acceptable Frame Type Field GRVP Global Setting Unit From Port To Port PVID GVRP IngressDescription 4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields1. Click L2 Features Trunking. The Trunking Configuration Page opens Defining TrunkingFigure 3-8. Trunking Configuration Page Field Unit Group ID Type PortsNotes about Trunking on the DGS-3100 Series Figure 3-9. Traffic Segmentation Page Traffic SegmentationField DescriptionFigure 3-10. LACP Port Settings Page Configuring LACPTimeout 4. Define the Port-Priority and LACP Timeout fields1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opens Defining IGMP SnoopingLeave Timer Figure 3-11. IGMP Snooping PageRouter Timeout Host TimeoutStatic Router Port Setting Edit button 2. Click . The Static Router Ports Settings Page opensRouter Timeout Host TimeoutField Description1. Click L2 Features Port Mirroring. The Port Mirroring Page opens Configuring Port MirroringFigure 3-13. Port Mirroring Page Field Status Unit Target Port Source Port4. Define the Unit, Tx, and Rx. fields under Source Port Setting DGS-3100 Series Gigabit Stackable Managed Switch User ManualField None DescriptionConfiguring Spanning Tree Version Classic STP Rapid STP Multiple STPDescription Figure 3-14. STP Bridge Global Settings Page Defining Spanning Tree Global ParametersField DescriptionField Bridge Forward DelayDescription Bridge Priority 0Figure 3-15. STP Port Settings Page Defining STP Port SettingsField Unit From Port To Port Cost 0=Auto DescriptionDescription Field Edge Forwarding BPDU P2P StateFigure 3-16. MST Configuration Identification Page Defining Multiple Spanning Tree Configuration IdentificationConfiguration Name FieldFigure 3-17. MSTI Config Information Page Defining MSTP Port InformationField Unit Port Instance ID Internal Path Cost Priority Status DescriptionField Role Description4. Define the Internal Path Cost and Priority fields Defining Unicast Forwarding Defining Forwarding and FilteringFigure 3-18. Unicast Forwarding Page Field Aging Time VID MAC Address Unit PortFigure 3-19. Multicast Forwarding Page Defining Multicast ForwardingField Description4. Click To restore the default settings 1. Click DGS-3100 Series Gigabit Stackable Managed Switch User ManualThe default settings are restored The entry is deleted, and the device is updatedConfiguring 1p CONFIGURING QUALITY OF SERVICEFigure 4-1. Mapping QoS on the Switch Understanding QoS 1. Click QoS Bandwidth Control. The Bandwidth Control Page opens Defining Bandwidth SettingsFigure 4-2. Bandwidth Control Page FieldFigure 4-3. Traffic Control Settings Page Configuring Storm ControlField Unit From Port To Port Storm Control Type State Threshold 3500 DescriptionFigure 4-4. 802.1P Default Priority Page Mapping Ports to Packet PrioritiesDescription 2. Define the Unit, From Port, To Port, Prioirity fieldsFigure 4-5. 802.1P User Priority Page Mapping Priority to Classes QueuesField Priority Class ID DescriptionField Class ID Mechanism Weight Configuring QoS Scheduling MechanismFigure 4-6. QoS Scheduling Mechanism Page DescriptionFigure 4-7. Multi-Layer CoS Setting Page Defining Multi-Layer CoS SettingsSECURITY FEATURES 1. Click Security Safeguard Engine. The Safeguard Engine Page opens Configuring Safeguard EngineFigure 5-8. Safeguard Engine Page Field Safeguard EngineField IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch Configuring Trust Host1. Click Security Trusted Host. The Trusted Host Page opens Figure 5-9.Trusted Host PageField Unit From Port To Port Admin State Max Address0-64 Port Configuring Port Security1. Click Security Port Security. The Port Security Page opens Figure 5-10. Port Security PageField Max Learning Addr Configuring Guest VLANsDescription 1. Click Security Guest Vlan. The Guest VLAN Page opensComponent Authenticators Supplicants/Clients Authentication Server Configuring Port AuthenticationState Controlled Access Uncontrolled Access DescriptionFigure 5-12. 802.1X Setting Page 1. Click Security 802.1X Setting. The 802.1X Setting Page opensSuppTimeout 1-65535 sec ServerTimeout 1-65535 secDescription FieldControl UnitSuppTimeout 1-65535 sec 1. Click Security 802.1X Setting. The 802.1X Setting Page opensServerTimeout 1-65535 sec ReAuthEnabledDescription FieldControl UnitPage DGS-3100 Series Gigabit Stackable Managed Switch User Manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual Figure 5-13. Authentic RADIUS Server Page Defining RADIUS SettingsField Succession RADIUS Server Authentic Port Accounting Port Key Confirm Key1. Click Security SSL. The SSL Configuration Settings Page opens Configuring Secure Socket Layer SecurityFigure 5-14. SSL Configuration Settings Page Field SSL Status Ciphersuite StatusDescription Figure 5 -15. SSH Configuration Page Configuring Secure Shell SecurityField SSH Server Status Port DescriptionDefining SSH Algorithm Settings Field Figure 5-16. SSH Algorithm Settings PageDescription Public keyFigure 5-17. Application Authentication Settings Page Defining Application Authentication SettingsField Application Login Method List Enable Method List DescriptionFigure 5-18. Authentication Server Host Page Configuring Authentication Server HostsTimeout 1-30secs FieldFigure 5-19. Login Method Lists Page Defining Login MethodsField Method List Name Method Method DescriptionDescription are Field Method MethodFigure 5-20. Enable Method Lists Page Defining Enable MethodsField Method List Name Method DescriptionDescription Field Method Method MethodFigure 5-21. Configure Local Enable Password Page Configuring Local Enable PasswordOld Local Enable Password Provide the current network Enable passwordMONITORING THE DEVICE Field Master ID Backup ID Box ID Runtime version H/W version Viewing Stacking InformationFigure 6-1 Stacking Information Page Description1. Click Monitoring CPU Utilization. The CPU Utilization Page opens Viewing CPU UtilizationFigure 6-2. CPU Utilization Page Field Utilization Time Interval Record Number Show/HideFigure 6-3. Port Utilization Page Viewing Port UtilizationField Unit Port Utilization Time Interval Record Number Show/Hide Description1. Click Monitoring Packet Size. The Packet Size Page opens Viewing Packet Size InformationFigure 6-4. Packet Size Page Field Unit Port Packet Size Analysis - Selected Port Number1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opens Viewing Received Packet StatisticsFigure 6-5. ReceivedRX Page Field Unit Port Bytes Packets Time Interval Record Number Show/Hide1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opens Viewing UMBcast Packet StatisticsFigure 6-6. UMBcastRX Page Field Unit Port Unicast Multicast Broadcast Time IntervalField Viewing Transmitted Packet StatisticsDescription Figure 6-7. TransmittedTX PageDescription Field Record Number Show/HideFigure 6-8. RADIUS Authentication Page Viewing RADIUS Authenticated Session StatisticsField Time Interval Server UDP Port Timeouts Requests Challenges Accepts RejectsFigure 6-9 Browse ARP Table Page Viewing ARP TableField VLAN Name IP Address Total Entries MAC Address Type DescriptionFigure 6-10 Browse Router Port Page Viewing Router PortsField VID Unit Port DescriptionFigure 6-11 Browse Session Table Page Viewing Session TableField ID From User Privilege Name DescriptionFigure 6-12 IGMP Snooping Group Page Viewing IGMP Group InformationField VID VLAN Name VLAN Name Multicast Group MAC Address Port DescriptionFigure 6-13 MAC Address Table Page Defining Dynamic and Static MAC AddressesField Unit Port VLAN Name MAC Address VID Type Description2. Select the Stacking member in the Unit field DGS-3100 Series Gigabit Stackable Managed Switch User Manual3. Define the Port, VLAN Name, and MAC Address fields 4. Click To view all entries, click To clear static entries, click1. Click Monitoring System Log. The System Log Page opens Viewing System LogFigure 6-14 System Log Page Field ID Time Log Description SeverityMANAGING POWER OVER ETHERNET DEVICES 1. Click PoE PoE Port Setting. The PoE Port Setting Page opens Defining PoE System InformationFigure 7-1 PoE Port Setting Page PoE EnableIndicates the power consumption is 15.4W Indicates the power consumption is 7WNormal - Indicates that the power supply unit is functioning Off - Indicates that the power supply unit is not functioning1. Click PoE PoE System Setting. The PoE System Setting Page opens Displaying and Editing PoE System InformationFigure 7-2 PoE System Setting Page System Power ThresholdDEFINING ACCESS PROFILE LISTS Figure 8-1 ACL Configuration Wizard Page ACL Configuration WizardService Type FieldsDescription FieldsTCP Source Port - Matches the packet to the TCP Source Port TCP Destination Port - Matches the packet to the TCP Destination Port1. Click ACL Access Profile List. The ACL Profile List Page opens Defining Access Profile ListsDisplays the access rule Adding ACL ProfilesField Figure 8-3 Add ACL Profile PageDescription L2 ACLFigure 8-4 ACL Profile L2 ACL Tagged Page Defining Level 2 ACLTo define L2 MAC Address ACL profile Figure 8-5 ACL Profile L2 ACL Tagged MAC Address PageDescription FieldSource MAC Mask Destination MAC MaskFigure 8-7 ACL Profile L2 ACL Tagged Ether Type Page To define L2 Ether Type ACL profileDefining Level 3 ACL Figure 8-8 ACL Profile L2 ACL Untagged PageFigure 8-9 Add ACL Profile L3 Page Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP Page To define L3 IPv4 DSCP ACL profileTo define L3 IPv4 Address ACL profile Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address PageTo define L3 ICMP ACL profile DescriptionFigure 8-12 ACL Profile L3 ACL ICMP Page FieldTo define L3 IGMP ACL profile Figure 8-13 ACL Profile L3 IGMP PageFigure 8-14 ACL Profile L3 IGMP Selected Page Figure 8-15 ACL Profile L3 TCP Page To define L3 TCP Port ACL profileFigure 8-16 ACL Profile L3 TCP Port Page Description To define L3 TCP Flag ACL ProfileFigure 8-17 ACL Profile L3 TCP Flag Page If L3 ACL UDP is selected, the page updates as follows DGS-3100 Series Gigabit Stackable Managed Switch User ManualFigure 8-18 ACL Profile L3 UDP Page Figure 8-19 ACL Profile L3 UDP Port PageDescription Click ACL Access Profile List The Access Profile List Page opens Defining Access Rules ListsFigure 8-20 Access Profile List Page FilterFigure 8-21 Add Access Rule Page IP based ACL 1. Click . The Add Access Rule Page opensAccess ID FieldDGS-3100 Series Gigabit Stackable Managed Switch User Manual 3. Click . The rule is changed, and the device is updated2. Define the Rule Detail fields Access ID Finding ACL Rules1. Click ACL ACL Finder The ACL Finder Page opens Figure 8-22 ACL Finder PageFigure 8-23 Rule Detail Page Access IDField DescriptionNotes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series Notes about ACLs capacity in the DGS-3100 Series Limited Lifetime Warranty for the product is defined as follows Reorient or relocate the receiving antenna Product Registration LIMITED WARRANTY Warranty PeriodProduct Type What Is Not Covered What You Must Do For Warranty Serviceis not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed FCC Warning TrademarksCopyright Statement Technical Support TECHNICAL SUPPORTTech Support for customers within the United States Tech Support for customers within CanadaFor Customers within Canada For Customers within The United Kingdom & IrelandTechnical Support D-Link UK & Ireland Technical Support over the InternetTechnische Unterstützung Support technique destiné aux clients établis en France Assistance techniqueSupport technique destiné aux clients établis au Canada LinkAsistencia Técnica Asistencia Técnica de D-Link por teléfonoAsistencia Técnica de D-Link a través de Internet Supporto tecnico per i clienti residenti in Italia Supporto tecnicoD-Link Mediterraneo S.r.L Gli ultimi aggiornamenti e la documentazione sonoTech Support for customers within the Netherlands Technical SupportTech Support for customers within Belgium Tech Support for customers within LuxemburgPomoc techniczna Aktualizované verze software a uživatelských příruček najdete na Technická podporawebové stránce firmy D-Link D-Link poskytuje svým zákazníkům bezplatnou technickou podporuD-Link Magyarország Technikai TámogatásTeknisk Support Teknisk SupportD-Link Teknisk telefon Support Du kan finne programvare oppdateringer og brukerD-Link teknisk support på Internettet Teknisk SupportD-Link teknisk support over telefonen Tlf. 7026D-Link tarjoaa teknistä tukea asiakkailleen Teknistä tukea asiakkaille SuomessaTuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo. 9 - 21 numerostaTeknisk Support Teknisk Support för kunder i SverigePå vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformationSuporte Técnico para clientes no Portugal Suporte TécnicoVocê pode encontrar atualizações de software e documentação de Assistência TécnicaΓια πελάτες εντός του Ελλαδικού χώρου Τεχνική ΥποστήριξηΤηλεφωνική υποστήριξη D-Link Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-ΠαρασκευήTech Support for customers in Technical SupportAustralia IndiaTech Support for customers in Technical Supporthttp//support.dlink-me.com http//support.dlink-me.comОбновления программного обеспечения и документация Техническая поддержкадоступны на Интернет-сайте D-Link D-Link предоставляет бесплатную поддержку для клиентовAsistencia Técnica Suporte Técnico para clientes no Brasil Suporte TécnicoTelefone São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30電子郵件：dssqaservice@dlink.com.tw D-Link 友訊科技台灣分公司技術支援資訊D-Link 免付費技術諮詢專線 0800-002-615Dukungan Teknis untuk pelanggan Dukungan TeknisUpdate perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊技术支持办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编技术支持中心电话：8008296688 技术支持中心传真：02885176948International Offices Registration Card All Countries and Regions Excluding USA Product installed in type of computerProduct Model Product Serial No