Defining Access Rules Lists, Filter, Description

Contents

User Manual D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCHV2.20 CE Mark Warning FCC WarningWarnung Precaución Table of Contents Defining SNMP Host Table Configuring Port Security DGS-3100 Series Gigabit Stackable Managed Switch User Manual PrefaceSafety Cautions General Precautions for Rack-Mountable Products System Overview Viewing the Device Device Management Methods Viewing the Device System OverviewDGS-3100 Series Front Panel Figure 1 DGS-3100 Series 48 Port Front Panel Command Line Console Device Management MethodsWeb Based Management Interface SNMP-Based Management User Guide Overview Safety CautionsNotes, Notices, and Cautions NOTE A NOTE indicates important information that helps you make better use of your device Unplug the power cable before removing the power supply The power cable, extension cable, or plug is damagedAn object has fallen into the product The product has been exposed to water General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge Battery Handling Reminder GETTING STARTED Using the Web-Based User InterfaceUnderstanding the D-Link Embedded Web Interface View 1. Tree View Figure 1-1. Device Information Page2. Device Information View Displaying the Stack Status Using the Tool MenuLocating Devices 1. Click Device Locator. The Device Locator Page opens Figure 1-3 Config Backup and Restore Page Backing up and Restoring Configuration FilesField Http TFTP 1. Click Reset. The Factory Reset Page opens Resetting the DeviceFigure 1-4 Factory Reset Page 1. Click Firmware Download. The Firmware Download Page opens Downloading the FirmwareFigure 1-5 Firmware Download Page Field HTTP Download TFTP Download 1. Click System Reboot. The System Reboot Page opens Rebooting the SystemFigure 1-6 System Reboot Page 2. Define the Select Unit to Reboot field Component Using the Web System ComponentsName Description CONFIGURING BASIC CONFIGURATION Figure 2-1 Device Information Page Viewing Device InformationField Device Type System Contact System Name System Location Firmware Version Hardware Version System Time System Up Time Login Timeout minutes Time Source 802.1D Spanning Tree DHCP Client Field Boot Version MAC Address IP Address Subnet Mask Default GatewaySafeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X Status System Contact System Name System Location Login Timeout minutes Defining System Information3. Define the System Location and Login Timeout minutes fields Figure 2-2 System Information Page 1. Click Configuration IP Address. The IP Address Page opens Defining IP AddressesFigure 2-3 IP Address Page Field Managing Stacking Modes Managing StackingAdvanced Stacking Allocating Unit IDs Assigning Unit IDs Master Enabled Stacking MembersDefining a Stacking Master Defining a Stacking Back Up Master Discovering the Stacking Master Stack Startup ProcessElecting a Stacking Master Allocating Unit IDs/Resolving Unit ID Conflicts Unit and Stacking Port Configuration Stack Resiliency Building Stacks - Quick StartManaging a Self-Ordered Stack Managing a New Manually Ordered Stack Replacing Failed Stacking-Members in a Running Stack Stack Management ExamplesBuilding New Manually Ordered Stacks Adding Stacking Members to an Existing Manually Ordered Stack Replacing a Failed Stack Master Dividing Stacks Page Stacking Cable Failure Merging StacksInserting Excess Stacking Members When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down Figure 2-4 Stacking Settings Page Configuring StackingField Stacking Master Current Stack ID New Stack ID after reset Defining Ports Configuring Port PropertiesFigure 2-5 Port Setting Page Field Unit From Port To Port State Speed Field Flow Control Learning Figure 2-6 Port Description Page Viewing Port PropertiesUnit From Port 1. Click Configuration ARP Settings. The ARP Settings Page opens ARP SettingsFigure 2-7 ARP Settings Page Static ARP Settings 1. Click Configuration User Accounts. The User Accounts Page opens Configuring User AccountsField User Name New Password Access Right Confirm New Password Figure 2-8 User Accounts Page To edit the User Accounts Page 1. Select a name on the User List 2. Click . The user account is deleted, and the device is updated2. Click 3. Define the value 1. Select an entry Figure 2-9 System Log Host Page Managing System LogsIndex Severity Stratum Stratum Stratum Stratum Configuring SNTPExample Time level T1 T2 T3 T4 Field Time Setting Time in HH MM SS Figure 2-10 Time Settings PageTime Source Current Time Configuring Daylight Savings Time Figure 2-11 TimeZone Settings Page Field Daylight Savings Time State DST Repeating Settings SectionsDaylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT Field From Which Week of the Month From Day of Week From Month Field FromMonth FromDay FromTime ToMonth ToDay ToTime DST Annual Settings Section Parameters Authentication Privacy Key Management Configuring SNMP Figure 2-12 SNMP View Table Page Defining SNMP ViewsField View Name Subtree OID View Type 2. Define the View Name, Subtree OID and View Type fields Figure 2-13 SNMP Group Table Page Defining SNMP GroupsField Group Name Read View Name Write View Name Community/View TestReadView PWriteView PrivateView Field Notify View Name Security Model Security Level Auth-Protocol by Password Password Confirm Password Defining SNMP UsersFigure 2-14 SNMP User Table Page Field User Name Group Name SNMP V3 Encryption Confirm Key Auth-Protocol by Key2. Define the User Name, Group Name, and SNMP V3 Encryption fields Access Rights Defining SNMP Communities2. Define the Community Name, and View Name, Access Right fields Figure 2-15 SNMP Community Table Page To define the SNMP Host Table Page Defining SNMP Host TableFigure 2-16 SNMP Host Table Page SNMP Version Host IP AddressCommunity String / SNMPv3 User Name Field Engine ID Use Default Defining SNMP Engine IDFigure 2-17 SNMP Engine ID Page Figure 2-18 SNMP Configuration Trap Page Enabling SNMP TrapsField SNMP Traps SNMP Authentication Traps Figure 2-19 DHCP Auto Configuration Page DHCP Auto ConfigurationField DHCP Auto Configuration Firmware Information Dual Image ServicesField Unit Image Version Update Time Figure 2-20 Firmware Information Page Figure 2-21 Config Firmware Image Page Config Firmware ImageDefines the image file used for reboot. The possible values are Image CONFIGURING L2 FEATURES 1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opens Enabling Jumbo FramesFigure 3-1. Jumbo Frame Page Field Jumbo Frame Understanding IEEE 802.1p Priority Configuring VLANsVLAN Description Notes about VLANs on the DGS-3100 Series Figure 3-2. IEEE 802.1Q Packet Forwarding Term Untagging Ingress port Egress port Figure 3-3. IEEE 802.1Q Tag 802.1Q VLAN TagsFigure 3-4. Adding an IEEE 802.1Q Tag Tagging and Untagging Port VLAN IDIngress Filtering VLAN and Trunk Groups Default VLANsVLAN Status Switch Ports 1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opens Defining VLAN PropertiesFigure 3-5. VLAN Configuration Page Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports Figure 3-6. Add/Edit VLAN Information Page 1. Click L2 Features GVRP Settings. The GVRP Setting Page opens Configuring GVRPFigure 3-7. GVRP Setting Page Acceptable Frame Type Field GRVP Global Setting Unit From Port To Port PVID GVRP Ingress4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields 1. Click L2 Features Trunking. The Trunking Configuration Page opens Defining TrunkingFigure 3-8. Trunking Configuration Page Field Unit Group ID Type Ports Notes about Trunking on the DGS-3100 Series Figure 3-9. Traffic Segmentation Page Traffic SegmentationSource Ports Forwarding Ports Figure 3-10. LACP Port Settings Page Configuring LACPTimeout 4. Define the Port-Priority and LACP Timeout fields 1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opens Defining IGMP SnoopingLeave Timer Figure 3-11. IGMP Snooping Page Router Timeout Host TimeoutStatic Router Port Setting Edit button 2. Click . The Static Router Ports Settings Page opens Ports Static Router PortsDynamic Router Ports 1. Click L2 Features Port Mirroring. The Port Mirroring Page opens Configuring Port MirroringFigure 3-13. Port Mirroring Page Field Status Unit Target Port Source Port Field None 4. Define the Unit, Tx, and Rx. fields under Source Port SettingDefines that port mirroring is not applied to the ports 2. Define the Status, Unit, and Target fields Version Classic STP Rapid STP Multiple STP Configuring Spanning Tree Figure 3-14. STP Bridge Global Settings Page Defining Spanning Tree Global ParametersSTP Status STP Version Bridge Max Age 6 Bridge Priority 0Bridge Hello Time 1 Bridge Forward Delay Figure 3-15. STP Port Settings Page Defining STP Port SettingsField Unit From Port To Port Cost 0=Auto Field Edge Forwarding BPDU P2P State Figure 3-16. MST Configuration Identification Page Defining Multiple Spanning Tree Configuration IdentificationConfiguration Name Revision Level Figure 3-17. MSTI Config Information Page Defining MSTP Port InformationField Unit Port Instance ID Internal Path Cost Priority Status 4. Define the Internal Path Cost and Priority fields Field Role Defining Unicast Forwarding Defining Forwarding and FilteringFigure 3-18. Unicast Forwarding Page Field Aging Time VID MAC Address Unit Port Figure 3-19. Multicast Forwarding Page Defining Multicast ForwardingMulticast MAC Address Egress The default settings are restored 4. Click To restore the default settings 1. ClickThe entry is deleted, and the device is updated 3. Select either all, or individual ports Configuring 1p CONFIGURING QUALITY OF SERVICE Figure 4-1. Mapping QoS on the Switch Understanding QoS 1. Click QoS Bandwidth Control. The Bandwidth Control Page opens Defining Bandwidth SettingsFigure 4-2. Bandwidth Control Page No Limit Figure 4-3. Traffic Control Settings Page Configuring Storm ControlField Unit From Port To Port Storm Control Type State Threshold 3500 Broadcast Storm Broadcast and Multicast Storm Figure 4-4. 802.1P Default Priority Page Mapping Ports to Packet Priorities2. Define the Unit, From Port, To Port, Prioirity fields Figure 4-5. 802.1P User Priority Page Mapping Priority to Classes QueuesField Priority Class ID Field Class ID Mechanism Weight Configuring QoS Scheduling MechanismFigure 4-6. QoS Scheduling Mechanism Page Figure 4-7. Multi-Layer CoS Setting Page Defining Multi-Layer CoS Settings SECURITY FEATURES 1. Click Security Safeguard Engine. The Safeguard Engine Page opens Configuring Safeguard EngineFigure 5-8. Safeguard Engine Page Field Safeguard Engine Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch Configuring Trust Host1. Click Security Trusted Host. The Trusted Host Page opens Figure 5-9.Trusted Host Page Field Unit From Port To Port Admin State Max Address0-64 Port Configuring Port Security1. Click Security Port Security. The Port Security Page opens Figure 5-10. Port Security Page Field Max Learning Addr Configuring Guest VLANs1. Click Security Guest Vlan. The Guest VLAN Page opens Figure 5-11 Guest VLAN Page Component Authenticators Supplicants/Clients Authentication Server Configuring Port AuthenticationState Controlled Access Uncontrolled Access Figure 5-12. 802.1X Setting Page 1. Click Security 802.1X Setting. The 802.1X Setting Page opensSuppTimeout 1-65535 sec ServerTimeout 1-65535 sec Mode Control SuppTimeout 1-65535 sec 1. Click Security 802.1X Setting. The 802.1X Setting Page opensServerTimeout 1-65535 sec ReAuthEnabled Description FieldControl UnitPage DGS-3100 Series Gigabit Stackable Managed Switch User Manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual Figure 5-13. Authentic RADIUS Server Page Defining RADIUS SettingsField Succession RADIUS Server Authentic Port Accounting Port Key 1. Click Security SSL. The SSL Configuration Settings Page opens Configuring Secure Socket Layer Security Field SSL Status Ciphersuite Status Figure 5-14. SSL Configuration Settings Page Figure 5 -15. SSH Configuration Page Configuring Secure Shell SecurityField SSH Server Status Port Defining SSH Algorithm Settings Public key Figure 5-16. SSH Algorithm Settings PagePublic Key Algorithm Data Integrity Algorithm Figure 5-17. Application Authentication Settings Page Defining Application Authentication SettingsField Application Login Method List Enable Method List Figure 5-18. Authentication Server Host Page Configuring Authentication Server HostsTimeout 1-30secs Protocol Figure 5-19. Login Method Lists Page Defining Login MethodsField Method List Name Method Method Description are Field Method Method Figure 5-20. Enable Method Lists Page Defining Enable MethodsField Method List Name Method Field Method Method Method Figure 5-21. Configure Local Enable Password Page Configuring Local Enable PasswordOld Local Enable Password Provide the current network Enable password MONITORING THE DEVICE Field Master ID Backup ID Box ID Runtime version H/W version Viewing Stacking InformationFigure 6-1 Stacking Information Page 1. Click Monitoring CPU Utilization. The CPU Utilization Page opens Viewing CPU UtilizationFigure 6-2. CPU Utilization Page Field Utilization Time Interval Record Number Show/Hide Figure 6-3. Port Utilization Page Viewing Port UtilizationField Unit Port Utilization Time Interval Record Number Show/Hide 1. Click Monitoring Packet Size. The Packet Size Page opens Viewing Packet Size InformationFigure 6-4. Packet Size Page Field Unit Port Packet Size Analysis - Selected Port Number 1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opens Viewing Received Packet StatisticsFigure 6-5. ReceivedRX Page Field Unit Port Bytes Packets Time Interval Record Number Show/Hide 1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opens Viewing UMBcast Packet StatisticsFigure 6-6. UMBcastRX Page Field Unit Port Unicast Multicast Broadcast Time Interval Figure 6-7. TransmittedTX Page Viewing Transmitted Packet StatisticsField Unit Port Bytes Packets Time Interval Field Record Number Show/Hide Figure 6-8. RADIUS Authentication Page Viewing RADIUS Authenticated Session StatisticsField Time Interval Server UDP Port Timeouts Requests Challenges Accepts Rejects Figure 6-9 Browse ARP Table Page Viewing ARP TableField VLAN Name IP Address Total Entries MAC Address Type Figure 6-10 Browse Router Port Page Viewing Router PortsField VID Unit Port Figure 6-11 Browse Session Table Page Viewing Session TableField ID From User Privilege Name Figure 6-12 IGMP Snooping Group Page Viewing IGMP Group InformationField VID VLAN Name VLAN Name Multicast Group MAC Address Port Figure 6-13 MAC Address Table Page Defining Dynamic and Static MAC AddressesField Unit Port VLAN Name MAC Address VID Type 3. Define the Port, VLAN Name, and MAC Address fields 4. Click 2. Select the Stacking member in the Unit fieldTo view all entries, click To clear static entries, click To clear dynamic entries, click 1. Click Monitoring System Log. The System Log Page opens Viewing System LogFigure 6-14 System Log Page Field ID Time Log Description Severity MANAGING POWER OVER ETHERNET DEVICES 1. Click PoE PoE Port Setting. The PoE Port Setting Page opens Defining PoE System InformationFigure 7-1 PoE Port Setting Page PoE Enable Indicates the power consumption is 15.4W Indicates the power consumption is 7WNormal - Indicates that the power supply unit is functioning Off - Indicates that the power supply unit is not functioning 1. Click PoE PoE System Setting. The PoE System Setting Page opens Displaying and Editing PoE System InformationFigure 7-2 PoE System Setting Page System Power Threshold DEFINING ACCESS PROFILE LISTS Figure 8-1 ACL Configuration Wizard Page ACL Configuration WizardService Type From TCP Destination Port - Matches the packet to the TCP Destination Port TCP Source Port - Matches the packet to the TCP Source PortUDPAll - Specifies a UDP Packets filtering UDP Source Port - Matches the packet to the UDP Source Port 1. Click ACL Access Profile List. The ACL Profile List Page opens Defining Access Profile ListsDisplays the access rule Adding ACL Profiles L2 ACL Figure 8-3 Add ACL Profile PageL3 ACL Figure 8-4 ACL Profile L2 ACL Tagged Page Defining Level 2 ACLTo define L2 MAC Address ACL profile Figure 8-5 ACL Profile L2 ACL Tagged MAC Address Page Destination MAC Mask Source MAC MaskTo define L2 802.1Q VLAN ACL profile Figure 8-6 ACL Profile L2 ACL Tagged VLAN Page Figure 8-7 ACL Profile L2 ACL Tagged Ether Type Page To define L2 Ether Type ACL profile Figure 8-8 ACL Profile L2 ACL Untagged Page Defining Level 3 ACLFigure 8-9 Add ACL Profile L3 Page Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP Page To define L3 IPv4 DSCP ACL profileTo define L3 IPv4 Address ACL profile Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address Page Figure 8-12 ACL Profile L3 ACL ICMP Page To define L3 ICMP ACL profileICMP Type ICMP Code Figure 8-13 ACL Profile L3 IGMP Page To define L3 IGMP ACL profileFigure 8-14 ACL Profile L3 IGMP Selected Page To define L3 TCP Port ACL profile Figure 8-15 ACL Profile L3 TCP PageFigure 8-16 ACL Profile L3 TCP Port Page Figure 8-17 ACL Profile L3 TCP Flag Page To define L3 TCP Flag ACL Profile Figure 8-18 ACL Profile L3 UDP Page If L3 ACL UDP is selected, the page updates as followsFigure 8-19 ACL Profile L3 UDP Port Page Description Click ACL Access Profile List The Access Profile List Page opens Defining Access Rules ListsFigure 8-20 Access Profile List Page Filter Figure 8-21 Add Access Rule Page IP based ACL 1. Click . The Add Access Rule Page opensAccess ID Source ID 2. Define the Rule Detail fields 3. Click . The rule is changed, and the device is updated 1. Click ACL ACL Finder The ACL Finder Page opens Finding ACL RulesFigure 8-22 ACL Finder Page Profile ID list box Source MAC Figure 8-23 Rule Detail PageDestination MAC Ether Type Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series Notes about ACLs capacity in the DGS-3100 Series Limited Lifetime Warranty for the product is defined as follows Reorient or relocate the receiving antenna Product Registration Warranty Period LIMITED WARRANTYProduct Type What Is Not Covered What You Must Do For Warranty Service is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed Trademarks FCC WarningCopyright Statement Technical Support TECHNICAL SUPPORTTech Support for customers within the United States Tech Support for customers within Canada For Customers within Canada For Customers within The United Kingdom & IrelandD-Link UK & Ireland Technical Support over the Internet D-Link UK & Ireland Technical Support over the Telephone Technische Unterstützung Support technique destiné aux clients établis en France Assistance techniqueSupport technique destiné aux clients établis au Canada Link Asistencia Técnica de D-Link por teléfono Asistencia TécnicaAsistencia Técnica de D-Link a través de Internet Supporto tecnico per i clienti residenti in Italia Supporto tecnicoD-Link Mediterraneo S.r.L Gli ultimi aggiornamenti e la documentazione sono Tech Support for customers within the Netherlands Technical SupportTech Support for customers within Belgium Tech Support for customers within Luxemburg Pomoc techniczna Aktualizované verze software a uživatelských příruček najdete na Technická podporawebové stránce firmy D-Link D-Link poskytuje svým zákazníkům bezplatnou technickou podporu D-Link Magyarország Technikai Támogatás Teknisk Support Teknisk SupportD-Link Teknisk telefon Support Du kan finne programvare oppdateringer og bruker D-Link teknisk support over telefonen D-Link teknisk support på InternettetTlf. 7026 Hverdager kl. 0800 D-Link tarjoaa teknistä tukea asiakkailleen Teknistä tukea asiakkaille SuomessaTuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo. 9 - 21 numerosta På vår hemsida kan du hitta mer information om mjukvaru Teknisk Support för kunder i Sverigeuppdateringar och annan användarinformation D-Link tillhandahåller teknisk support till kunder i Sverige Suporte Técnico para clientes no Portugal Suporte TécnicoVocê pode encontrar atualizações de software e documentação de Assistência Técnica Για πελάτες εντός του Ελλαδικού χώρου Τεχνική ΥποστήριξηΤηλεφωνική υποστήριξη D-Link Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-Παρασκευή Australia Tech Support for customers inIndia Indonesia, Malaysia, Singapore and Thailand Tech Support for customers in Technical Supporthttp//support.dlink-me.com e-mail amostafa@dlink-me.com Обновления программного обеспечения и документация Техническая поддержкадоступны на Интернет-сайте D-Link D-Link предоставляет бесплатную поддержку для клиентов Asistencia Técnica Suporte Técnico para clientes no Brasil Suporte TécnicoTelefone São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30 電子郵件：dssqaservice@dlink.com.tw D-Link 友訊科技台灣分公司技術支援資訊D-Link 免付費技術諮詢專線 0800-002-615 Dukungan Teknis untuk pelanggan Dukungan TeknisUpdate perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link 您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊技术支持办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编技术支持中心电话：8008296688 技术支持中心传真：02885176948 International Offices Registration Card All Countries and Regions Excluding USA Product installed in type of computerProduct Model Product Serial No

D-Link DGS-3100 Defining Access Rules Lists, Filter, Description, Protocol, Dscp, IP Precedence

Models: DGS-3100