Defining Access Profile Lists, Field, Description

Contents

D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCH User ManualV2.20 FCC Warning CE Mark WarningWarnung Precaución Table of Contents Defining SNMP Host Table Configuring Port Security Preface DGS-3100 Series Gigabit Stackable Managed Switch User ManualSafety Cautions General Precautions for Rack-Mountable Products System Overview Viewing the Device Device Management Methods System Overview Viewing the DeviceDGS-3100 Series Front Panel Figure 1 DGS-3100 Series 48 Port Front Panel Device Management Methods Command Line ConsoleWeb Based Management Interface SNMP-Based Management Safety Cautions User Guide OverviewNotes, Notices, and Cautions NOTE A NOTE indicates important information that helps you make better use of your device The power cable, extension cable, or plug is damaged Unplug the power cable before removing the power supplyAn object has fallen into the product The product has been exposed to water General Precautions for Rack-Mountable Products Battery Handling Reminder Protecting Against Electrostatic Discharge Using the Web-Based User Interface GETTING STARTEDUnderstanding the D-Link Embedded Web Interface View Figure 1-1. Device Information Page 1. Tree View2. Device Information View Using the Tool Menu Displaying the Stack StatusLocating Devices 1. Click Device Locator. The Device Locator Page opens Backing up and Restoring Configuration Files Figure 1-3 Config Backup and Restore PageField Http TFTP Resetting the Device 1. Click Reset. The Factory Reset Page opensFigure 1-4 Factory Reset Page Downloading the Firmware 1. Click Firmware Download. The Firmware Download Page opensFigure 1-5 Firmware Download Page Field HTTP Download TFTP Download Rebooting the System 1. Click System Reboot. The System Reboot Page opensFigure 1-6 System Reboot Page 2. Define the Select Unit to Reboot field Using the Web System Components ComponentName Description CONFIGURING BASIC CONFIGURATION Viewing Device Information Figure 2-1 Device Information PageField Device Type System Contact System Name System Location Firmware Version Hardware Version System Time System Up Time Field Boot Version MAC Address IP Address Subnet Mask Default Gateway Login Timeout minutes Time Source 802.1D Spanning Tree DHCP ClientSafeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X Status Defining System Information System Contact System Name System Location Login Timeout minutes3. Define the System Location and Login Timeout minutes fields Figure 2-2 System Information Page Defining IP Addresses 1. Click Configuration IP Address. The IP Address Page opensFigure 2-3 IP Address Page Field Managing Stacking Managing Stacking ModesAdvanced Stacking Allocating Unit IDs Master Enabled Stacking Members Assigning Unit IDsDefining a Stacking Master Defining a Stacking Back Up Master Stack Startup Process Discovering the Stacking MasterElecting a Stacking Master Unit and Stacking Port Configuration Allocating Unit IDs/Resolving Unit ID Conflicts Building Stacks - Quick Start Stack ResiliencyManaging a Self-Ordered Stack Managing a New Manually Ordered Stack Stack Management Examples Replacing Failed Stacking-Members in a Running StackBuilding New Manually Ordered Stacks Adding Stacking Members to an Existing Manually Ordered Stack Replacing a Failed Stack Master Dividing Stacks Page Merging Stacks Stacking Cable FailureInserting Excess Stacking Members When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down Configuring Stacking Figure 2-4 Stacking Settings PageField Stacking Master Current Stack ID New Stack ID after reset Configuring Port Properties Defining PortsFigure 2-5 Port Setting Page Field Unit From Port To Port State Speed Field Flow Control Learning Viewing Port Properties Figure 2-6 Port Description PageUnit From Port ARP Settings 1. Click Configuration ARP Settings. The ARP Settings Page opensFigure 2-7 ARP Settings Page Static ARP Settings Configuring User Accounts 1. Click Configuration User Accounts. The User Accounts Page opensField User Name New Password Access Right Confirm New Password Figure 2-8 User Accounts Page 2. Click . The user account is deleted, and the device is updated To edit the User Accounts Page 1. Select a name on the User List2. Click 3. Define the value 1. Select an entry Managing System Logs Figure 2-9 System Log Host PageIndex Severity Configuring SNTP Stratum Stratum Stratum StratumExample Time level T1 T2 T3 T4 Figure 2-10 Time Settings Page Field Time Setting Time in HH MM SSTime Source Current Time Configuring Daylight Savings Time Figure 2-11 TimeZone Settings Page DST Repeating Settings Sections Field Daylight Savings Time StateDaylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT Field From Which Week of the Month From Day of Week From Month DST Annual Settings Section Field FromMonth FromDay FromTime ToMonth ToDay ToTime Configuring SNMP Parameters Authentication Privacy Key Management Defining SNMP Views Figure 2-12 SNMP View Table PageField View Name Subtree OID View Type 2. Define the View Name, Subtree OID and View Type fields Defining SNMP Groups Figure 2-13 SNMP Group Table PageField Group Name Read View Name Write View Name Community/View TestReadView PWriteView PrivateView Field Notify View Name Security Model Security Level Defining SNMP Users Auth-Protocol by Password Password Confirm PasswordFigure 2-14 SNMP User Table Page Field User Name Group Name SNMP V3 Encryption Auth-Protocol by Key Confirm Key2. Define the User Name, Group Name, and SNMP V3 Encryption fields Defining SNMP Communities Access Rights2. Define the Community Name, and View Name, Access Right fields Figure 2-15 SNMP Community Table Page Defining SNMP Host Table To define the SNMP Host Table PageFigure 2-16 SNMP Host Table Page Host IP Address SNMP VersionCommunity String / SNMPv3 User Name Defining SNMP Engine ID Field Engine ID Use DefaultFigure 2-17 SNMP Engine ID Page Enabling SNMP Traps Figure 2-18 SNMP Configuration Trap PageField SNMP Traps SNMP Authentication Traps DHCP Auto Configuration Figure 2-19 DHCP Auto Configuration PageField DHCP Auto Configuration Dual Image Services Firmware InformationField Unit Image Version Update Time Figure 2-20 Firmware Information Page Config Firmware Image Figure 2-21 Config Firmware Image PageDefines the image file used for reboot. The possible values are Image CONFIGURING L2 FEATURES Enabling Jumbo Frames 1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opensFigure 3-1. Jumbo Frame Page Field Jumbo Frame Configuring VLANs Understanding IEEE 802.1p PriorityVLAN Description Notes about VLANs on the DGS-3100 Series Term Untagging Ingress port Egress port Figure 3-2. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags Figure 3-3. IEEE 802.1Q TagFigure 3-4. Adding an IEEE 802.1Q Tag Port VLAN ID Tagging and UntaggingIngress Filtering Default VLANs VLAN and Trunk GroupsVLAN Status Switch Ports Defining VLAN Properties 1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opensFigure 3-5. VLAN Configuration Page Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports Figure 3-6. Add/Edit VLAN Information Page Configuring GVRP 1. Click L2 Features GVRP Settings. The GVRP Setting Page opensFigure 3-7. GVRP Setting Page Field GRVP Global Setting Unit From Port To Port PVID GVRP Ingress Acceptable Frame Type4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields Defining Trunking 1. Click L2 Features Trunking. The Trunking Configuration Page opensFigure 3-8. Trunking Configuration Page Field Unit Group ID Type Ports Notes about Trunking on the DGS-3100 Series Traffic Segmentation Figure 3-9. Traffic Segmentation PageSource Ports Forwarding Ports Configuring LACP Figure 3-10. LACP Port Settings PageTimeout 4. Define the Port-Priority and LACP Timeout fields Defining IGMP Snooping 1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opensLeave Timer Figure 3-11. IGMP Snooping Page Host Timeout Router TimeoutStatic Router Port Setting Edit button 2. Click . The Static Router Ports Settings Page opens Static Router Ports PortsDynamic Router Ports Configuring Port Mirroring 1. Click L2 Features Port Mirroring. The Port Mirroring Page opensFigure 3-13. Port Mirroring Page Field Status Unit Target Port Source Port 4. Define the Unit, Tx, and Rx. fields under Source Port Setting Field NoneDefines that port mirroring is not applied to the ports 2. Define the Status, Unit, and Target fields Configuring Spanning Tree Version Classic STP Rapid STP Multiple STP Defining Spanning Tree Global Parameters Figure 3-14. STP Bridge Global Settings PageSTP Status STP Version Bridge Priority 0 Bridge Max Age 6Bridge Hello Time 1 Bridge Forward Delay Defining STP Port Settings Figure 3-15. STP Port Settings PageField Unit From Port To Port Cost 0=Auto Field Edge Forwarding BPDU P2P State Defining Multiple Spanning Tree Configuration Identification Figure 3-16. MST Configuration Identification PageConfiguration Name Revision Level Defining MSTP Port Information Figure 3-17. MSTI Config Information PageField Unit Port Instance ID Internal Path Cost Priority Status Field Role 4. Define the Internal Path Cost and Priority fields Defining Forwarding and Filtering Defining Unicast ForwardingFigure 3-18. Unicast Forwarding Page Field Aging Time VID MAC Address Unit Port Defining Multicast Forwarding Figure 3-19. Multicast Forwarding PageMulticast MAC Address Egress 4. Click To restore the default settings 1. Click The default settings are restoredThe entry is deleted, and the device is updated 3. Select either all, or individual ports CONFIGURING QUALITY OF SERVICE Configuring 1p Figure 4-1. Mapping QoS on the Switch Understanding QoS Defining Bandwidth Settings 1. Click QoS Bandwidth Control. The Bandwidth Control Page opensFigure 4-2. Bandwidth Control Page No Limit Configuring Storm Control Figure 4-3. Traffic Control Settings PageField Unit From Port To Port Storm Control Type State Threshold 3500 Broadcast Storm Broadcast and Multicast Storm Mapping Ports to Packet Priorities Figure 4-4. 802.1P Default Priority Page2. Define the Unit, From Port, To Port, Prioirity fields Mapping Priority to Classes Queues Figure 4-5. 802.1P User Priority PageField Priority Class ID Configuring QoS Scheduling Mechanism Field Class ID Mechanism WeightFigure 4-6. QoS Scheduling Mechanism Page Defining Multi-Layer CoS Settings Figure 4-7. Multi-Layer CoS Setting Page SECURITY FEATURES Configuring Safeguard Engine 1. Click Security Safeguard Engine. The Safeguard Engine Page opensFigure 5-8. Safeguard Engine Page Field Safeguard Engine Configuring Trust Host Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch1. Click Security Trusted Host. The Trusted Host Page opens Figure 5-9.Trusted Host Page Configuring Port Security Field Unit From Port To Port Admin State Max Address0-64 Port1. Click Security Port Security. The Port Security Page opens Figure 5-10. Port Security Page Configuring Guest VLANs Field Max Learning Addr1. Click Security Guest Vlan. The Guest VLAN Page opens Figure 5-11 Guest VLAN Page Configuring Port Authentication Component Authenticators Supplicants/Clients Authentication ServerState Controlled Access Uncontrolled Access 1. Click Security 802.1X Setting. The 802.1X Setting Page opens Figure 5-12. 802.1X Setting PageSuppTimeout 1-65535 sec ServerTimeout 1-65535 sec Control Mode 1. Click Security 802.1X Setting. The 802.1X Setting Page opens SuppTimeout 1-65535 secServerTimeout 1-65535 sec ReAuthEnabled Field DescriptionControl UnitPage DGS-3100 Series Gigabit Stackable Managed Switch User Manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual Defining RADIUS Settings Figure 5-13. Authentic RADIUS Server PageField Succession RADIUS Server Authentic Port Accounting Port Key Configuring Secure Socket Layer Security 1. Click Security SSL. The SSL Configuration Settings Page opens Figure 5-14. SSL Configuration Settings Page Field SSL Status Ciphersuite Status Configuring Secure Shell Security Figure 5 -15. SSH Configuration PageField SSH Server Status Port Defining SSH Algorithm Settings Figure 5-16. SSH Algorithm Settings Page Public keyPublic Key Algorithm Data Integrity Algorithm Defining Application Authentication Settings Figure 5-17. Application Authentication Settings PageField Application Login Method List Enable Method List Configuring Authentication Server Hosts Figure 5-18. Authentication Server Host PageTimeout 1-30secs Protocol Defining Login Methods Figure 5-19. Login Method Lists PageField Method List Name Method Method Field Method Method Description are Defining Enable Methods Figure 5-20. Enable Method Lists PageField Method List Name Method Field Method Method Method Configuring Local Enable Password Figure 5-21. Configure Local Enable Password PageOld Local Enable Password Provide the current network Enable password MONITORING THE DEVICE Viewing Stacking Information Field Master ID Backup ID Box ID Runtime version H/W versionFigure 6-1 Stacking Information Page Viewing CPU Utilization 1. Click Monitoring CPU Utilization. The CPU Utilization Page opensFigure 6-2. CPU Utilization Page Field Utilization Time Interval Record Number Show/Hide Viewing Port Utilization Figure 6-3. Port Utilization PageField Unit Port Utilization Time Interval Record Number Show/Hide Viewing Packet Size Information 1. Click Monitoring Packet Size. The Packet Size Page opensFigure 6-4. Packet Size Page Field Unit Port Packet Size Analysis - Selected Port Number Viewing Received Packet Statistics 1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opensFigure 6-5. ReceivedRX Page Field Unit Port Bytes Packets Time Interval Record Number Show/Hide Viewing UMBcast Packet Statistics 1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opensFigure 6-6. UMBcastRX Page Field Unit Port Unicast Multicast Broadcast Time Interval Viewing Transmitted Packet Statistics Figure 6-7. TransmittedTX PageField Unit Port Bytes Packets Time Interval Field Record Number Show/Hide Viewing RADIUS Authenticated Session Statistics Figure 6-8. RADIUS Authentication PageField Time Interval Server UDP Port Timeouts Requests Challenges Accepts Rejects Viewing ARP Table Figure 6-9 Browse ARP Table PageField VLAN Name IP Address Total Entries MAC Address Type Viewing Router Ports Figure 6-10 Browse Router Port PageField VID Unit Port Viewing Session Table Figure 6-11 Browse Session Table PageField ID From User Privilege Name Viewing IGMP Group Information Figure 6-12 IGMP Snooping Group PageField VID VLAN Name VLAN Name Multicast Group MAC Address Port Defining Dynamic and Static MAC Addresses Figure 6-13 MAC Address Table PageField Unit Port VLAN Name MAC Address VID Type 2. Select the Stacking member in the Unit field 3. Define the Port, VLAN Name, and MAC Address fields 4. ClickTo view all entries, click To clear static entries, click To clear dynamic entries, click Viewing System Log 1. Click Monitoring System Log. The System Log Page opensFigure 6-14 System Log Page Field ID Time Log Description Severity MANAGING POWER OVER ETHERNET DEVICES Defining PoE System Information 1. Click PoE PoE Port Setting. The PoE Port Setting Page opensFigure 7-1 PoE Port Setting Page PoE Enable Indicates the power consumption is 7W Indicates the power consumption is 15.4WNormal - Indicates that the power supply unit is functioning Off - Indicates that the power supply unit is not functioning Displaying and Editing PoE System Information 1. Click PoE PoE System Setting. The PoE System Setting Page opensFigure 7-2 PoE System Setting Page System Power Threshold DEFINING ACCESS PROFILE LISTS ACL Configuration Wizard Figure 8-1 ACL Configuration Wizard PageService Type From TCP Source Port - Matches the packet to the TCP Source Port TCP Destination Port - Matches the packet to the TCP Destination PortUDPAll - Specifies a UDP Packets filtering UDP Source Port - Matches the packet to the UDP Source Port Defining Access Profile Lists 1. Click ACL Access Profile List. The ACL Profile List Page opensDisplays the access rule Adding ACL Profiles Figure 8-3 Add ACL Profile Page L2 ACLL3 ACL Defining Level 2 ACL Figure 8-4 ACL Profile L2 ACL Tagged PageTo define L2 MAC Address ACL profile Figure 8-5 ACL Profile L2 ACL Tagged MAC Address Page Source MAC Mask Destination MAC MaskTo define L2 802.1Q VLAN ACL profile Figure 8-6 ACL Profile L2 ACL Tagged VLAN Page To define L2 Ether Type ACL profile Figure 8-7 ACL Profile L2 ACL Tagged Ether Type Page Defining Level 3 ACL Figure 8-8 ACL Profile L2 ACL Untagged PageFigure 8-9 Add ACL Profile L3 Page To define L3 IPv4 DSCP ACL profile Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP PageTo define L3 IPv4 Address ACL profile Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address Page To define L3 ICMP ACL profile Figure 8-12 ACL Profile L3 ACL ICMP PageICMP Type ICMP Code To define L3 IGMP ACL profile Figure 8-13 ACL Profile L3 IGMP PageFigure 8-14 ACL Profile L3 IGMP Selected Page Figure 8-15 ACL Profile L3 TCP Page To define L3 TCP Port ACL profileFigure 8-16 ACL Profile L3 TCP Port Page To define L3 TCP Flag ACL Profile Figure 8-17 ACL Profile L3 TCP Flag Page If L3 ACL UDP is selected, the page updates as follows Figure 8-18 ACL Profile L3 UDP PageFigure 8-19 ACL Profile L3 UDP Port Page Description Defining Access Rules Lists Click ACL Access Profile List The Access Profile List Page opensFigure 8-20 Access Profile List Page Filter 1. Click . The Add Access Rule Page opens Figure 8-21 Add Access Rule Page IP based ACLAccess ID Source ID 3. Click . The rule is changed, and the device is updated 2. Define the Rule Detail fields Finding ACL Rules 1. Click ACL ACL Finder The ACL Finder Page opensFigure 8-22 ACL Finder Page Profile ID list box Figure 8-23 Rule Detail Page Source MACDestination MAC Ether Type Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series Notes about ACLs capacity in the DGS-3100 Series Limited Lifetime Warranty for the product is defined as follows Reorient or relocate the receiving antenna Product Registration LIMITED WARRANTY Warranty PeriodProduct Type What You Must Do For Warranty Service What Is Not Covered is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed FCC Warning TrademarksCopyright Statement TECHNICAL SUPPORT Technical SupportTech Support for customers within the United States Tech Support for customers within Canada For Customers within The United Kingdom & Ireland For Customers within CanadaD-Link UK & Ireland Technical Support over the Internet D-Link UK & Ireland Technical Support over the Telephone Technische Unterstützung Assistance technique Support technique destiné aux clients établis en FranceSupport technique destiné aux clients établis au Canada Link Asistencia Técnica Asistencia Técnica de D-Link por teléfonoAsistencia Técnica de D-Link a través de Internet Supporto tecnico Supporto tecnico per i clienti residenti in ItaliaD-Link Mediterraneo S.r.L Gli ultimi aggiornamenti e la documentazione sono Technical Support Tech Support for customers within the NetherlandsTech Support for customers within Belgium Tech Support for customers within Luxemburg Pomoc techniczna Technická podpora Aktualizované verze software a uživatelských příruček najdete nawebové stránce firmy D-Link D-Link poskytuje svým zákazníkům bezplatnou technickou podporu Technikai Támogatás D-Link Magyarország Teknisk Support Teknisk SupportD-Link Teknisk telefon Support Du kan finne programvare oppdateringer og bruker D-Link teknisk support på Internettet D-Link teknisk support over telefonenTlf. 7026 Hverdager kl. 0800 Teknistä tukea asiakkaille Suomessa D-Link tarjoaa teknistä tukea asiakkailleenTuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo. 9 - 21 numerosta Teknisk Support för kunder i Sverige På vår hemsida kan du hitta mer information om mjukvaruuppdateringar och annan användarinformation D-Link tillhandahåller teknisk support till kunder i Sverige Suporte Técnico Suporte Técnico para clientes no PortugalVocê pode encontrar atualizações de software e documentação de Assistência Técnica Τεχνική Υποστήριξη Για πελάτες εντός του Ελλαδικού χώρουΤηλεφωνική υποστήριξη D-Link Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-Παρασκευή Tech Support for customers in AustraliaIndia Indonesia, Malaysia, Singapore and Thailand Technical Support Tech Support for customers inhttp//support.dlink-me.com e-mail amostafa@dlink-me.com Техническая поддержка Обновления программного обеспечения и документациядоступны на Интернет-сайте D-Link D-Link предоставляет бесплатную поддержку для клиентов Asistencia Técnica Suporte Técnico Suporte Técnico para clientes no BrasilTelefone São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30 D-Link 友訊科技台灣分公司技術支援資訊電子郵件：dssqaservice@dlink.com.twD-Link 免付費技術諮詢專線 0800-002-615 Dukungan Teknis Dukungan Teknis untuk pelangganUpdate perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link 技术支持您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编技术支持中心电话：8008296688 技术支持中心传真：02885176948 International Offices Product installed in type of computer Registration Card All Countries and Regions Excluding USAProduct Model Product Serial No

D-Link DGS-3100 Defining Access Profile Lists, Adding ACL Profiles, 2 ACL Profile List Page

Models: DGS-3100