15 ACL Profile L3 TCP Page | D-Link DGS-3100 manual

Contents

D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCH User ManualV2.20 CE Mark Warning FCC WarningWarnung Precaución Table of Contents Defining SNMP Host Table Configuring Port Security DGS-3100 Series Gigabit Stackable Managed Switch User Manual PrefaceSafety Cautions General Precautions for Rack-Mountable Products System Overview Viewing the Device Device Management Methods Viewing the Device System OverviewDGS-3100 Series Front Panel Figure 1 DGS-3100 Series 48 Port Front Panel Command Line Console Device Management MethodsWeb Based Management Interface SNMP-Based Management User Guide Overview Safety CautionsNotes, Notices, and Cautions NOTE A NOTE indicates important information that helps you make better use of your device Unplug the power cable before removing the power supply The power cable, extension cable, or plug is damagedAn object has fallen into the product The product has been exposed to water General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge Battery Handling Reminder GETTING STARTED Using the Web-Based User InterfaceUnderstanding the D-Link Embedded Web Interface View 1. Tree View Figure 1-1. Device Information Page2. Device Information View Displaying the Stack Status Using the Tool MenuLocating Devices 1. Click Device Locator. The Device Locator Page opens Backing up and Restoring Configuration Files Figure 1-3 Config Backup and Restore PageField Http TFTP Resetting the Device 1. Click Reset. The Factory Reset Page opensFigure 1-4 Factory Reset Page Downloading the Firmware 1. Click Firmware Download. The Firmware Download Page opensFigure 1-5 Firmware Download Page Field HTTP Download TFTP Download 1. Click System Reboot. The System Reboot Page opens Rebooting the SystemFigure 1-6 System Reboot Page 2. Define the Select Unit to Reboot field Component Using the Web System ComponentsName Description CONFIGURING BASIC CONFIGURATION Figure 2-1 Device Information Page Viewing Device InformationField Device Type System Contact System Name System Location Firmware Version Hardware Version System Time System Up Time Login Timeout minutes Time Source 802.1D Spanning Tree DHCP Client Field Boot Version MAC Address IP Address Subnet Mask Default GatewaySafeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X Status System Contact System Name System Location Login Timeout minutes Defining System Information3. Define the System Location and Login Timeout minutes fields Figure 2-2 System Information Page 1. Click Configuration IP Address. The IP Address Page opens Defining IP AddressesFigure 2-3 IP Address Page Field Managing Stacking Modes Managing StackingAdvanced Stacking Allocating Unit IDs Assigning Unit IDs Master Enabled Stacking MembersDefining a Stacking Master Defining a Stacking Back Up Master Stack Startup Process Discovering the Stacking MasterElecting a Stacking Master Allocating Unit IDs/Resolving Unit ID Conflicts Unit and Stacking Port Configuration Stack Resiliency Building Stacks - Quick StartManaging a Self-Ordered Stack Managing a New Manually Ordered Stack Replacing Failed Stacking-Members in a Running Stack Stack Management ExamplesBuilding New Manually Ordered Stacks Adding Stacking Members to an Existing Manually Ordered Stack Replacing a Failed Stack Master Dividing Stacks Page Merging Stacks Stacking Cable FailureInserting Excess Stacking Members When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down Configuring Stacking Figure 2-4 Stacking Settings PageField Stacking Master Current Stack ID New Stack ID after reset Defining Ports Configuring Port PropertiesFigure 2-5 Port Setting Page Field Unit From Port To Port State Speed Field Flow Control Learning Figure 2-6 Port Description Page Viewing Port PropertiesUnit From Port 1. Click Configuration ARP Settings. The ARP Settings Page opens ARP SettingsFigure 2-7 ARP Settings Page Static ARP Settings 1. Click Configuration User Accounts. The User Accounts Page opens Configuring User AccountsField User Name New Password Access Right Confirm New Password Figure 2-8 User Accounts Page To edit the User Accounts Page 1. Select a name on the User List 2. Click . The user account is deleted, and the device is updated2. Click 3. Define the value 1. Select an entry Figure 2-9 System Log Host Page Managing System LogsIndex Severity Stratum Stratum Stratum Stratum Configuring SNTPExample Time level T1 T2 T3 T4 Field Time Setting Time in HH MM SS Figure 2-10 Time Settings PageTime Source Current Time Configuring Daylight Savings Time Figure 2-11 TimeZone Settings Page Field Daylight Savings Time State DST Repeating Settings SectionsDaylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT Field From Which Week of the Month From Day of Week From Month Field FromMonth FromDay FromTime ToMonth ToDay ToTime DST Annual Settings Section Parameters Authentication Privacy Key Management Configuring SNMP Figure 2-12 SNMP View Table Page Defining SNMP ViewsField View Name Subtree OID View Type 2. Define the View Name, Subtree OID and View Type fields Figure 2-13 SNMP Group Table Page Defining SNMP GroupsField Group Name Read View Name Write View Name Community/View TestReadView PWriteView PrivateView Field Notify View Name Security Model Security Level Auth-Protocol by Password Password Confirm Password Defining SNMP UsersFigure 2-14 SNMP User Table Page Field User Name Group Name SNMP V3 Encryption Auth-Protocol by Key Confirm Key2. Define the User Name, Group Name, and SNMP V3 Encryption fields Access Rights Defining SNMP Communities2. Define the Community Name, and View Name, Access Right fields Figure 2-15 SNMP Community Table Page Defining SNMP Host Table To define the SNMP Host Table PageFigure 2-16 SNMP Host Table Page Host IP Address SNMP VersionCommunity String / SNMPv3 User Name Defining SNMP Engine ID Field Engine ID Use DefaultFigure 2-17 SNMP Engine ID Page Enabling SNMP Traps Figure 2-18 SNMP Configuration Trap PageField SNMP Traps SNMP Authentication Traps DHCP Auto Configuration Figure 2-19 DHCP Auto Configuration PageField DHCP Auto Configuration Firmware Information Dual Image ServicesField Unit Image Version Update Time Figure 2-20 Firmware Information Page Figure 2-21 Config Firmware Image Page Config Firmware ImageDefines the image file used for reboot. The possible values are Image CONFIGURING L2 FEATURES 1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opens Enabling Jumbo FramesFigure 3-1. Jumbo Frame Page Field Jumbo Frame Understanding IEEE 802.1p Priority Configuring VLANsVLAN Description Notes about VLANs on the DGS-3100 Series Figure 3-2. IEEE 802.1Q Packet Forwarding Term Untagging Ingress port Egress port 802.1Q VLAN Tags Figure 3-3. IEEE 802.1Q TagFigure 3-4. Adding an IEEE 802.1Q Tag Port VLAN ID Tagging and UntaggingIngress Filtering VLAN and Trunk Groups Default VLANsVLAN Status Switch Ports 1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opens Defining VLAN PropertiesFigure 3-5. VLAN Configuration Page Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports Figure 3-6. Add/Edit VLAN Information Page Configuring GVRP 1. Click L2 Features GVRP Settings. The GVRP Setting Page opensFigure 3-7. GVRP Setting Page Field GRVP Global Setting Unit From Port To Port PVID GVRP Ingress Acceptable Frame Type4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields 1. Click L2 Features Trunking. The Trunking Configuration Page opens Defining TrunkingFigure 3-8. Trunking Configuration Page Field Unit Group ID Type Ports Notes about Trunking on the DGS-3100 Series Figure 3-9. Traffic Segmentation Page Traffic SegmentationSource Ports Forwarding Ports Figure 3-10. LACP Port Settings Page Configuring LACPTimeout 4. Define the Port-Priority and LACP Timeout fields 1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opens Defining IGMP SnoopingLeave Timer Figure 3-11. IGMP Snooping Page Router Timeout Host TimeoutStatic Router Port Setting Edit button 2. Click . The Static Router Ports Settings Page opens Static Router Ports PortsDynamic Router Ports 1. Click L2 Features Port Mirroring. The Port Mirroring Page opens Configuring Port MirroringFigure 3-13. Port Mirroring Page Field Status Unit Target Port Source Port Field None 4. Define the Unit, Tx, and Rx. fields under Source Port SettingDefines that port mirroring is not applied to the ports 2. Define the Status, Unit, and Target fields Version Classic STP Rapid STP Multiple STP Configuring Spanning Tree Figure 3-14. STP Bridge Global Settings Page Defining Spanning Tree Global ParametersSTP Status STP Version Bridge Max Age 6 Bridge Priority 0Bridge Hello Time 1 Bridge Forward Delay Defining STP Port Settings Figure 3-15. STP Port Settings PageField Unit From Port To Port Cost 0=Auto Field Edge Forwarding BPDU P2P State Figure 3-16. MST Configuration Identification Page Defining Multiple Spanning Tree Configuration IdentificationConfiguration Name Revision Level Defining MSTP Port Information Figure 3-17. MSTI Config Information PageField Unit Port Instance ID Internal Path Cost Priority Status 4. Define the Internal Path Cost and Priority fields Field Role Defining Unicast Forwarding Defining Forwarding and FilteringFigure 3-18. Unicast Forwarding Page Field Aging Time VID MAC Address Unit Port Figure 3-19. Multicast Forwarding Page Defining Multicast ForwardingMulticast MAC Address Egress The default settings are restored 4. Click To restore the default settings 1. ClickThe entry is deleted, and the device is updated 3. Select either all, or individual ports Configuring 1p CONFIGURING QUALITY OF SERVICE Figure 4-1. Mapping QoS on the Switch Understanding QoS 1. Click QoS Bandwidth Control. The Bandwidth Control Page opens Defining Bandwidth SettingsFigure 4-2. Bandwidth Control Page No Limit Figure 4-3. Traffic Control Settings Page Configuring Storm ControlField Unit From Port To Port Storm Control Type State Threshold 3500 Broadcast Storm Broadcast and Multicast Storm Mapping Ports to Packet Priorities Figure 4-4. 802.1P Default Priority Page2. Define the Unit, From Port, To Port, Prioirity fields Mapping Priority to Classes Queues Figure 4-5. 802.1P User Priority PageField Priority Class ID Configuring QoS Scheduling Mechanism Field Class ID Mechanism WeightFigure 4-6. QoS Scheduling Mechanism Page Figure 4-7. Multi-Layer CoS Setting Page Defining Multi-Layer CoS Settings SECURITY FEATURES 1. Click Security Safeguard Engine. The Safeguard Engine Page opens Configuring Safeguard EngineFigure 5-8. Safeguard Engine Page Field Safeguard Engine Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch Configuring Trust Host1. Click Security Trusted Host. The Trusted Host Page opens Figure 5-9.Trusted Host Page Field Unit From Port To Port Admin State Max Address0-64 Port Configuring Port Security1. Click Security Port Security. The Port Security Page opens Figure 5-10. Port Security Page Field Max Learning Addr Configuring Guest VLANs1. Click Security Guest Vlan. The Guest VLAN Page opens Figure 5-11 Guest VLAN Page Configuring Port Authentication Component Authenticators Supplicants/Clients Authentication ServerState Controlled Access Uncontrolled Access Figure 5-12. 802.1X Setting Page 1. Click Security 802.1X Setting. The 802.1X Setting Page opensSuppTimeout 1-65535 sec ServerTimeout 1-65535 sec Mode Control SuppTimeout 1-65535 sec 1. Click Security 802.1X Setting. The 802.1X Setting Page opensServerTimeout 1-65535 sec ReAuthEnabled Description FieldControl UnitPage DGS-3100 Series Gigabit Stackable Managed Switch User Manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual Defining RADIUS Settings Figure 5-13. Authentic RADIUS Server PageField Succession RADIUS Server Authentic Port Accounting Port Key 1. Click Security SSL. The SSL Configuration Settings Page opens Configuring Secure Socket Layer Security Field SSL Status Ciphersuite Status Figure 5-14. SSL Configuration Settings Page Configuring Secure Shell Security Figure 5 -15. SSH Configuration PageField SSH Server Status Port Defining SSH Algorithm Settings Public key Figure 5-16. SSH Algorithm Settings PagePublic Key Algorithm Data Integrity Algorithm Defining Application Authentication Settings Figure 5-17. Application Authentication Settings PageField Application Login Method List Enable Method List Figure 5-18. Authentication Server Host Page Configuring Authentication Server HostsTimeout 1-30secs Protocol Defining Login Methods Figure 5-19. Login Method Lists PageField Method List Name Method Method Description are Field Method Method Defining Enable Methods Figure 5-20. Enable Method Lists PageField Method List Name Method Field Method Method Method Figure 5-21. Configure Local Enable Password Page Configuring Local Enable PasswordOld Local Enable Password Provide the current network Enable password MONITORING THE DEVICE Viewing Stacking Information Field Master ID Backup ID Box ID Runtime version H/W versionFigure 6-1 Stacking Information Page 1. Click Monitoring CPU Utilization. The CPU Utilization Page opens Viewing CPU UtilizationFigure 6-2. CPU Utilization Page Field Utilization Time Interval Record Number Show/Hide Viewing Port Utilization Figure 6-3. Port Utilization PageField Unit Port Utilization Time Interval Record Number Show/Hide 1. Click Monitoring Packet Size. The Packet Size Page opens Viewing Packet Size InformationFigure 6-4. Packet Size Page Field Unit Port Packet Size Analysis - Selected Port Number 1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opens Viewing Received Packet StatisticsFigure 6-5. ReceivedRX Page Field Unit Port Bytes Packets Time Interval Record Number Show/Hide 1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opens Viewing UMBcast Packet StatisticsFigure 6-6. UMBcastRX Page Field Unit Port Unicast Multicast Broadcast Time Interval Viewing Transmitted Packet Statistics Figure 6-7. TransmittedTX PageField Unit Port Bytes Packets Time Interval Field Record Number Show/Hide Figure 6-8. RADIUS Authentication Page Viewing RADIUS Authenticated Session StatisticsField Time Interval Server UDP Port Timeouts Requests Challenges Accepts Rejects Viewing ARP Table Figure 6-9 Browse ARP Table PageField VLAN Name IP Address Total Entries MAC Address Type Viewing Router Ports Figure 6-10 Browse Router Port PageField VID Unit Port Viewing Session Table Figure 6-11 Browse Session Table PageField ID From User Privilege Name Viewing IGMP Group Information Figure 6-12 IGMP Snooping Group PageField VID VLAN Name VLAN Name Multicast Group MAC Address Port Defining Dynamic and Static MAC Addresses Figure 6-13 MAC Address Table PageField Unit Port VLAN Name MAC Address VID Type 3. Define the Port, VLAN Name, and MAC Address fields 4. Click 2. Select the Stacking member in the Unit fieldTo view all entries, click To clear static entries, click To clear dynamic entries, click 1. Click Monitoring System Log. The System Log Page opens Viewing System LogFigure 6-14 System Log Page Field ID Time Log Description Severity MANAGING POWER OVER ETHERNET DEVICES 1. Click PoE PoE Port Setting. The PoE Port Setting Page opens Defining PoE System InformationFigure 7-1 PoE Port Setting Page PoE Enable Indicates the power consumption is 15.4W Indicates the power consumption is 7WNormal - Indicates that the power supply unit is functioning Off - Indicates that the power supply unit is not functioning 1. Click PoE PoE System Setting. The PoE System Setting Page opens Displaying and Editing PoE System InformationFigure 7-2 PoE System Setting Page System Power Threshold DEFINING ACCESS PROFILE LISTS Figure 8-1 ACL Configuration Wizard Page ACL Configuration WizardService Type From TCP Destination Port - Matches the packet to the TCP Destination Port TCP Source Port - Matches the packet to the TCP Source PortUDPAll - Specifies a UDP Packets filtering UDP Source Port - Matches the packet to the UDP Source Port 1. Click ACL Access Profile List. The ACL Profile List Page opens Defining Access Profile ListsDisplays the access rule Adding ACL Profiles Figure 8-3 Add ACL Profile Page L2 ACLL3 ACL Figure 8-4 ACL Profile L2 ACL Tagged Page Defining Level 2 ACLTo define L2 MAC Address ACL profile Figure 8-5 ACL Profile L2 ACL Tagged MAC Address Page Destination MAC Mask Source MAC MaskTo define L2 802.1Q VLAN ACL profile Figure 8-6 ACL Profile L2 ACL Tagged VLAN Page Figure 8-7 ACL Profile L2 ACL Tagged Ether Type Page To define L2 Ether Type ACL profile Defining Level 3 ACL Figure 8-8 ACL Profile L2 ACL Untagged PageFigure 8-9 Add ACL Profile L3 Page Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP Page To define L3 IPv4 DSCP ACL profileTo define L3 IPv4 Address ACL profile Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address Page Figure 8-12 ACL Profile L3 ACL ICMP Page To define L3 ICMP ACL profileICMP Type ICMP Code To define L3 IGMP ACL profile Figure 8-13 ACL Profile L3 IGMP PageFigure 8-14 ACL Profile L3 IGMP Selected Page Figure 8-15 ACL Profile L3 TCP Page To define L3 TCP Port ACL profileFigure 8-16 ACL Profile L3 TCP Port Page Figure 8-17 ACL Profile L3 TCP Flag Page To define L3 TCP Flag ACL Profile If L3 ACL UDP is selected, the page updates as follows Figure 8-18 ACL Profile L3 UDP PageFigure 8-19 ACL Profile L3 UDP Port Page Description Click ACL Access Profile List The Access Profile List Page opens Defining Access Rules ListsFigure 8-20 Access Profile List Page Filter Figure 8-21 Add Access Rule Page IP based ACL 1. Click . The Add Access Rule Page opensAccess ID Source ID 2. Define the Rule Detail fields 3. Click . The rule is changed, and the device is updated 1. Click ACL ACL Finder The ACL Finder Page opens Finding ACL RulesFigure 8-22 ACL Finder Page Profile ID list box Source MAC Figure 8-23 Rule Detail PageDestination MAC Ether Type Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series Notes about ACLs capacity in the DGS-3100 Series Limited Lifetime Warranty for the product is defined as follows Reorient or relocate the receiving antenna Product Registration LIMITED WARRANTY Warranty PeriodProduct Type What Is Not Covered What You Must Do For Warranty Service is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed FCC Warning TrademarksCopyright Statement Technical Support TECHNICAL SUPPORTTech Support for customers within the United States Tech Support for customers within Canada For Customers within Canada For Customers within The United Kingdom & IrelandD-Link UK & Ireland Technical Support over the Internet D-Link UK & Ireland Technical Support over the Telephone Technische Unterstützung Support technique destiné aux clients établis en France Assistance techniqueSupport technique destiné aux clients établis au Canada Link Asistencia Técnica Asistencia Técnica de D-Link por teléfonoAsistencia Técnica de D-Link a través de Internet Supporto tecnico per i clienti residenti in Italia Supporto tecnicoD-Link Mediterraneo S.r.L Gli ultimi aggiornamenti e la documentazione sono Tech Support for customers within the Netherlands Technical SupportTech Support for customers within Belgium Tech Support for customers within Luxemburg Pomoc techniczna Aktualizované verze software a uživatelských příruček najdete na Technická podporawebové stránce firmy D-Link D-Link poskytuje svým zákazníkům bezplatnou technickou podporu D-Link Magyarország Technikai Támogatás Teknisk Support Teknisk SupportD-Link Teknisk telefon Support Du kan finne programvare oppdateringer og bruker D-Link teknisk support over telefonen D-Link teknisk support på InternettetTlf. 7026 Hverdager kl. 0800 D-Link tarjoaa teknistä tukea asiakkailleen Teknistä tukea asiakkaille SuomessaTuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo. 9 - 21 numerosta På vår hemsida kan du hitta mer information om mjukvaru Teknisk Support för kunder i Sverigeuppdateringar och annan användarinformation D-Link tillhandahåller teknisk support till kunder i Sverige Suporte Técnico para clientes no Portugal Suporte TécnicoVocê pode encontrar atualizações de software e documentação de Assistência Técnica Για πελάτες εντός του Ελλαδικού χώρου Τεχνική ΥποστήριξηΤηλεφωνική υποστήριξη D-Link Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-Παρασκευή Australia Tech Support for customers inIndia Indonesia, Malaysia, Singapore and Thailand Tech Support for customers in Technical Supporthttp//support.dlink-me.com e-mail amostafa@dlink-me.com Обновления программного обеспечения и документация Техническая поддержкадоступны на Интернет-сайте D-Link D-Link предоставляет бесплатную поддержку для клиентов Asistencia Técnica Suporte Técnico para clientes no Brasil Suporte TécnicoTelefone São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30 電子郵件：dssqaservice@dlink.com.tw D-Link 友訊科技台灣分公司技術支援資訊D-Link 免付費技術諮詢專線 0800-002-615 Dukungan Teknis untuk pelanggan Dukungan TeknisUpdate perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link 您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊技术支持办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编技术支持中心电话：8008296688 技术支持中心传真：02885176948 International Offices Registration Card All Countries and Regions Excluding USA Product installed in type of computerProduct Model Product Serial No

D-Link DGS-3100 user manual 15 ACL Profile L3 TCP Page, To define L3 TCP Port ACL profile

Models: DGS-3100