Manuals / D-Link / Computer Equipment / Switch

D-Link DGS-3100 Finding ACL Rules, Click ACL ACL Finder The ACL Finder Page opens, Field, Ports

Models: DGS-3100

1 209

Download 209 pages 46.85 Kb

Page 172

Image 172

DGS-3100 Series Gigabit Stackable Managed Switch User Manual

Finding ACL Rules

The ACL Finder Page identifies any rule which has been assigned to a specific port. To find ACL rules:

1.Click ACL > ACL Finder: The ACL Finder Page opens:

	Figure 8-22 ACL Finder Page
The ACL Finder Page contains the following fields:

Field	Description
Profile ID (list box)	Defines the Profile ID for the search

Ports	Indicates the ports for which rules are sought

Profile ID	Indicates the Profile ID

Access ID	Indicates the ACL rule ID number.

Profile Type	Indicates if the profile is IP or Ethernet

Summary	Displays the access rule.

Action	Displays the action chosen for the profile.

2.Define the Profile ID and Ports fields.

3.Click . The ACL rule is displayed. To delete an ACL Profile entry:

1.Select the entry.

2.Click . The entry is deleted .

3.Click . The entry is deleted. To view or define the rule details:

1.Click the Access ID (linked number). The Rule Detail Page opens:

160

Page 172

Image 172

D-Link DGS-3100 Finding ACL Rules, Click ACL ACL Finder The ACL Finder Page opens, 22 ACL Finder Page, Field, Description

Contents

User Manual D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCHV2.20 FCC Warning CE Mark WarningWarnung PrecauciónTable of Contents Defining SNMP Host Table Configuring Port Security Preface DGS-3100 Series Gigabit Stackable Managed Switch User ManualSafety Cautions General Precautions for Rack-Mountable Products System Overview Viewing the Device Device Management MethodsSystem Overview Viewing the DeviceDGS-3100 Series Front Panel DGS-3100 Series Front PanelDevice Management Methods Command Line ConsoleWeb Based Management Interface SNMP-Based ManagementSafety Cautions User Guide OverviewNotes, Notices, and Cautions User Guide OverviewDGS-3100 Series Gigabit Stackable Managed Switch User Manual The power cable, extension cable, or plug is damagedUnplug the power cable before removing the power supply An object has fallen into the productGeneral Precautions for Rack-Mountable Products Battery Handling Reminder Protecting Against Electrostatic DischargeUsing the Web-Based User Interface GETTING STARTEDUnderstanding the D-Link Embedded Web Interface ViewFigure 1-1. Device Information Page ViewDescription 1. Tree ViewUsing the Tool Menu Displaying the Stack StatusLocating Devices 1. Click Device Locator. The Device Locator Page opensBacking up and Restoring Configuration Files Figure 1-3 Config Backup and Restore PageField Http TFTP Description1. Click Reset. The Factory Reset Page opens Resetting the DeviceFigure 1-4 Factory Reset Page 1. Click Firmware Download. The Firmware Download Page opens Downloading the FirmwareFigure 1-5 Firmware Download Page Field HTTP Download TFTP Download DescriptionRebooting the System 1. Click System Reboot. The System Reboot Page opensFigure 1-6 System Reboot Page 2. Define the Select Unit to Reboot fieldUsing the Web System Components ComponentName DescriptionCONFIGURING BASIC CONFIGURATION Viewing Device Information Figure 2-1 Device Information PageField Device Type System Contact System Name System Location Firmware Version Hardware Version System Time System Up TimeField Boot Version MAC Address IP Address Subnet Mask Default Gateway Login Timeout minutes Time Source 802.1D Spanning Tree DHCP ClientSafeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X StatusDefining System Information System Contact System Name System Location Login Timeout minutes3. Define the System Location and Login Timeout minutes fields Figure 2-2 System Information PageDefining IP Addresses 1. Click Configuration IP Address. The IP Address Page opensFigure 2-3 IP Address Page FieldManaging Stacking Managing Stacking ModesAdvanced Stacking Allocating Unit IDsMaster Enabled Stacking Members Assigning Unit IDsDefining a Stacking Master Defining a Stacking Back Up MasterDiscovering the Stacking Master Stack Startup ProcessElecting a Stacking Master Unit and Stacking Port Configuration Allocating Unit IDs/Resolving Unit ID ConflictsBuilding Stacks - Quick Start Stack ResiliencyManaging a Self-Ordered Stack Managing a New Manually Ordered StackStack Management Examples Replacing Failed Stacking-Members in a Running StackBuilding New Manually Ordered Stacks Adding Stacking Members to an Existing Manually Ordered StackReplacing a Failed Stack Master Dividing Stacks Page Stacking Cable Failure Merging StacksInserting Excess Stacking Members When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down Configuring Stacking Figure 2-4 Stacking Settings PageField Stacking Master Current Stack ID New Stack ID after reset DescriptionConfiguring Port Properties Defining PortsFigure 2-5 Port Setting Page Field Unit From Port To Port State SpeedField Flow Control Learning DescriptionViewing Port Properties Figure 2-6 Port Description PageField DescriptionARP Settings 1. Click Configuration ARP Settings. The ARP Settings Page opensFigure 2-7 ARP Settings Page Static ARP SettingsConfiguring User Accounts 1. Click Configuration User Accounts. The User Accounts Page opensField User Name New Password Access Right Confirm New Password Figure 2-8 User Accounts PageDGS-3100 Series Gigabit Stackable Managed Switch User Manual 2. Click . The user account is deleted, and the device is updatedTo edit the User Accounts Page 1. Select a name on the User List 2. Click 3. Define the valueManaging System Logs Figure 2-9 System Log Host PageField DescriptionConfiguring SNTP Stratum Stratum Stratum StratumExample Time level T1 T2 T3 T4Figure 2-10 Time Settings Page Field Time Setting Time in HH MM SSField DescriptionConfiguring Daylight Savings Time Figure 2-11 TimeZone Settings Page DST Repeating Settings Sections Field Daylight Savings Time StateDaylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT DescriptionField FromMonth FromDay FromTime ToMonth ToDay ToTime DST Annual Settings SectionDescription Parameters Authentication Privacy Key Management Configuring SNMPDescription Defining SNMP Views Figure 2-12 SNMP View Table PageField View Name Subtree OID View Type DescriptionDefining SNMP Groups Figure 2-13 SNMP Group Table PageField Group Name Read View Name Write View Name DescriptionDescription Field Notify View Name Security Model Security LevelCommunity/View TestReadView PWriteView PrivateView Defining SNMP Users Auth-Protocol by Password Password Confirm PasswordFigure 2-14 SNMP User Table Page Field User Name Group Name SNMP V3 EncryptionField DescriptionAuth-Protocol by Key Confirm KeyDefining SNMP Communities Access Rights2. Define the Community Name, and View Name, Access Right fields Figure 2-15 SNMP Community Table PageTo define the SNMP Host Table Page Defining SNMP Host TableFigure 2-16 SNMP Host Table Page Field DescriptionHost IP Address SNMP VersionDefining SNMP Engine ID Field Engine ID Use DefaultFigure 2-17 SNMP Engine ID Page DescriptionEnabling SNMP Traps Figure 2-18 SNMP Configuration Trap PageField SNMP Traps SNMP Authentication Traps DescriptionDHCP Auto Configuration Figure 2-19 DHCP Auto Configuration PageField DHCP Auto Configuration DescriptionDual Image Services Firmware InformationField Unit Image Version Update Time Figure 2-20 Firmware Information PageConfig Firmware Image Figure 2-21 Config Firmware Image PageDefines the image file used for reboot. The possible values are FieldCONFIGURING L2 FEATURES Enabling Jumbo Frames 1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opensFigure 3-1. Jumbo Frame Page Field Jumbo FrameConfiguring VLANs Understanding IEEE 802.1p PriorityVLAN Description Notes about VLANs on the DGS-3100 SeriesDescription Term Untagging Ingress port Egress portFigure 3-2. IEEE 802.1Q Packet Forwarding Figure 3-3. IEEE 802.1Q Tag 802.1Q VLAN TagsFigure 3-4. Adding an IEEE 802.1Q Tag Tagging and Untagging Port VLAN IDIngress Filtering Default VLANs VLAN and Trunk GroupsVLAN Status Switch PortsDefining VLAN Properties 1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opensFigure 3-5. VLAN Configuration Page Field VID VLAN Name Untag VLAN Ports Tag VLAN PortsFigure 3-6. Add/Edit VLAN Information Page 1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opensDescription 1. Click L2 Features GVRP Settings. The GVRP Setting Page opens Configuring GVRPFigure 3-7. GVRP Setting Page Field GRVP Global Setting Unit From Port To Port PVID GVRP Ingress Acceptable Frame TypeDescription 4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fieldsDefining Trunking 1. Click L2 Features Trunking. The Trunking Configuration Page opensFigure 3-8. Trunking Configuration Page Field Unit Group ID Type PortsNotes about Trunking on the DGS-3100 Series Traffic Segmentation Figure 3-9. Traffic Segmentation PageField DescriptionConfiguring LACP Figure 3-10. LACP Port Settings PageTimeout 4. Define the Port-Priority and LACP Timeout fieldsDefining IGMP Snooping 1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opensLeave Timer Figure 3-11. IGMP Snooping PageHost Timeout Router TimeoutStatic Router Port Setting Edit button 2. Click . The Static Router Ports Settings Page opensHost Timeout Router TimeoutField DescriptionConfiguring Port Mirroring 1. Click L2 Features Port Mirroring. The Port Mirroring Page opensFigure 3-13. Port Mirroring Page Field Status Unit Target Port Source Port4. Define the Unit, Tx, and Rx. fields under Source Port Setting Field NoneDescription Defines that port mirroring is not applied to the portsVersion Classic STP Rapid STP Multiple STP Configuring Spanning TreeDescription Defining Spanning Tree Global Parameters Figure 3-14. STP Bridge Global Settings PageField DescriptionField DescriptionBridge Priority 0 Bridge Max Age 6Defining STP Port Settings Figure 3-15. STP Port Settings PageField Unit From Port To Port Cost 0=Auto DescriptionField Edge Forwarding BPDU P2P State DescriptionDefining Multiple Spanning Tree Configuration Identification Figure 3-16. MST Configuration Identification PageConfiguration Name FieldDefining MSTP Port Information Figure 3-17. MSTI Config Information PageField Unit Port Instance ID Internal Path Cost Priority Status DescriptionDescription Field Role4. Define the Internal Path Cost and Priority fields Defining Forwarding and Filtering Defining Unicast ForwardingFigure 3-18. Unicast Forwarding Page Field Aging Time VID MAC Address Unit PortDefining Multicast Forwarding Figure 3-19. Multicast Forwarding PageField DescriptionDGS-3100 Series Gigabit Stackable Managed Switch User Manual 4. Click To restore the default settings 1. ClickThe default settings are restored The entry is deleted, and the device is updatedCONFIGURING QUALITY OF SERVICE Configuring 1pFigure 4-1. Mapping QoS on the Switch Understanding QoS Defining Bandwidth Settings 1. Click QoS Bandwidth Control. The Bandwidth Control Page opensFigure 4-2. Bandwidth Control Page FieldConfiguring Storm Control Figure 4-3. Traffic Control Settings PageField Unit From Port To Port Storm Control Type State Threshold 3500 DescriptionMapping Ports to Packet Priorities Figure 4-4. 802.1P Default Priority PageDescription 2. Define the Unit, From Port, To Port, Prioirity fieldsMapping Priority to Classes Queues Figure 4-5. 802.1P User Priority PageField Priority Class ID DescriptionConfiguring QoS Scheduling Mechanism Field Class ID Mechanism WeightFigure 4-6. QoS Scheduling Mechanism Page DescriptionDefining Multi-Layer CoS Settings Figure 4-7. Multi-Layer CoS Setting PageSECURITY FEATURES Configuring Safeguard Engine 1. Click Security Safeguard Engine. The Safeguard Engine Page opensFigure 5-8. Safeguard Engine Page Field Safeguard EngineConfiguring Trust Host Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch1. Click Security Trusted Host. The Trusted Host Page opens Figure 5-9.Trusted Host PageConfiguring Port Security Field Unit From Port To Port Admin State Max Address0-64 Port1. Click Security Port Security. The Port Security Page opens Figure 5-10. Port Security PageConfiguring Guest VLANs Field Max Learning AddrDescription 1. Click Security Guest Vlan. The Guest VLAN Page opensConfiguring Port Authentication Component Authenticators Supplicants/Clients Authentication ServerState Controlled Access Uncontrolled Access Description1. Click Security 802.1X Setting. The 802.1X Setting Page opens Figure 5-12. 802.1X Setting PageSuppTimeout 1-65535 sec ServerTimeout 1-65535 secField DescriptionControl Unit1. Click Security 802.1X Setting. The 802.1X Setting Page opens SuppTimeout 1-65535 secServerTimeout 1-65535 sec ReAuthEnabledField DescriptionControl UnitPage DGS-3100 Series Gigabit Stackable Managed Switch User Manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual Defining RADIUS Settings Figure 5-13. Authentic RADIUS Server PageField Succession RADIUS Server Authentic Port Accounting Port Key Confirm KeyConfiguring Secure Socket Layer Security 1. Click Security SSL. The SSL Configuration Settings Page opensField SSL Status Ciphersuite Status Figure 5-14. SSL Configuration Settings PageDescription Configuring Secure Shell Security Figure 5 -15. SSH Configuration PageField SSH Server Status Port DescriptionDefining SSH Algorithm Settings Figure 5-16. SSH Algorithm Settings Page FieldDescription Public keyDefining Application Authentication Settings Figure 5-17. Application Authentication Settings PageField Application Login Method List Enable Method List DescriptionConfiguring Authentication Server Hosts Figure 5-18. Authentication Server Host PageTimeout 1-30secs FieldDefining Login Methods Figure 5-19. Login Method Lists PageField Method List Name Method Method DescriptionField Method Method Description areDefining Enable Methods Figure 5-20. Enable Method Lists PageField Method List Name Method DescriptionField Method Method Method DescriptionConfiguring Local Enable Password Figure 5-21. Configure Local Enable Password PageOld Local Enable Password Provide the current network Enable passwordMONITORING THE DEVICE Viewing Stacking Information Field Master ID Backup ID Box ID Runtime version H/W versionFigure 6-1 Stacking Information Page DescriptionViewing CPU Utilization 1. Click Monitoring CPU Utilization. The CPU Utilization Page opensFigure 6-2. CPU Utilization Page Field Utilization Time Interval Record Number Show/HideViewing Port Utilization Figure 6-3. Port Utilization PageField Unit Port Utilization Time Interval Record Number Show/Hide DescriptionViewing Packet Size Information 1. Click Monitoring Packet Size. The Packet Size Page opensFigure 6-4. Packet Size Page Field Unit Port Packet Size Analysis - Selected Port NumberViewing Received Packet Statistics 1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opensFigure 6-5. ReceivedRX Page Field Unit Port Bytes Packets Time Interval Record Number Show/HideViewing UMBcast Packet Statistics 1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opensFigure 6-6. UMBcastRX Page Field Unit Port Unicast Multicast Broadcast Time IntervalViewing Transmitted Packet Statistics FieldDescription Figure 6-7. TransmittedTX PageField Record Number Show/Hide DescriptionViewing RADIUS Authenticated Session Statistics Figure 6-8. RADIUS Authentication PageField Time Interval Server UDP Port Timeouts Requests Challenges Accepts RejectsViewing ARP Table Figure 6-9 Browse ARP Table PageField VLAN Name IP Address Total Entries MAC Address Type DescriptionViewing Router Ports Figure 6-10 Browse Router Port PageField VID Unit Port DescriptionViewing Session Table Figure 6-11 Browse Session Table PageField ID From User Privilege Name DescriptionViewing IGMP Group Information Figure 6-12 IGMP Snooping Group PageField VID VLAN Name VLAN Name Multicast Group MAC Address Port DescriptionDefining Dynamic and Static MAC Addresses Figure 6-13 MAC Address Table PageField Unit Port VLAN Name MAC Address VID Type DescriptionDGS-3100 Series Gigabit Stackable Managed Switch User Manual 2. Select the Stacking member in the Unit field3. Define the Port, VLAN Name, and MAC Address fields 4. Click To view all entries, click To clear static entries, clickViewing System Log 1. Click Monitoring System Log. The System Log Page opensFigure 6-14 System Log Page Field ID Time Log Description SeverityMANAGING POWER OVER ETHERNET DEVICES Defining PoE System Information 1. Click PoE PoE Port Setting. The PoE Port Setting Page opensFigure 7-1 PoE Port Setting Page PoE EnableIndicates the power consumption is 7W Indicates the power consumption is 15.4WNormal - Indicates that the power supply unit is functioning Off - Indicates that the power supply unit is not functioningDisplaying and Editing PoE System Information 1. Click PoE PoE System Setting. The PoE System Setting Page opensFigure 7-2 PoE System Setting Page System Power ThresholdDEFINING ACCESS PROFILE LISTS ACL Configuration Wizard Figure 8-1 ACL Configuration Wizard PageService Type FieldsFields DescriptionTCP Source Port - Matches the packet to the TCP Source Port TCP Destination Port - Matches the packet to the TCP Destination PortDefining Access Profile Lists 1. Click ACL Access Profile List. The ACL Profile List Page opensDisplays the access rule Adding ACL ProfilesFigure 8-3 Add ACL Profile Page FieldDescription L2 ACLDefining Level 2 ACL Figure 8-4 ACL Profile L2 ACL Tagged PageTo define L2 MAC Address ACL profile Figure 8-5 ACL Profile L2 ACL Tagged MAC Address PageField DescriptionSource MAC Mask Destination MAC MaskTo define L2 Ether Type ACL profile Figure 8-7 ACL Profile L2 ACL Tagged Ether Type PageFigure 8-8 ACL Profile L2 ACL Untagged Page Defining Level 3 ACLFigure 8-9 Add ACL Profile L3 Page To define L3 IPv4 DSCP ACL profile Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP PageTo define L3 IPv4 Address ACL profile Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address PageDescription To define L3 ICMP ACL profileFigure 8-12 ACL Profile L3 ACL ICMP Page FieldFigure 8-13 ACL Profile L3 IGMP Page To define L3 IGMP ACL profileFigure 8-14 ACL Profile L3 IGMP Selected Page To define L3 TCP Port ACL profile Figure 8-15 ACL Profile L3 TCP PageFigure 8-16 ACL Profile L3 TCP Port Page To define L3 TCP Flag ACL Profile DescriptionFigure 8-17 ACL Profile L3 TCP Flag Page DGS-3100 Series Gigabit Stackable Managed Switch User Manual If L3 ACL UDP is selected, the page updates as followsFigure 8-18 ACL Profile L3 UDP Page Figure 8-19 ACL Profile L3 UDP Port PageDescription Defining Access Rules Lists Click ACL Access Profile List The Access Profile List Page opensFigure 8-20 Access Profile List Page Filter1. Click . The Add Access Rule Page opens Figure 8-21 Add Access Rule Page IP based ACLAccess ID Field3. Click . The rule is changed, and the device is updated DGS-3100 Series Gigabit Stackable Managed Switch User Manual2. Define the Rule Detail fields Finding ACL Rules Access ID1. Click ACL ACL Finder The ACL Finder Page opens Figure 8-22 ACL Finder PageAccess ID Figure 8-23 Rule Detail PageField DescriptionNotes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series Notes about ACLs capacity in the DGS-3100 Series Limited Lifetime Warranty for the product is defined as follows Reorient or relocate the receiving antenna Product Registration Warranty Period LIMITED WARRANTYProduct Type What You Must Do For Warranty Service What Is Not Coveredis not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed Trademarks FCC WarningCopyright Statement TECHNICAL SUPPORT Technical SupportTech Support for customers within the United States Tech Support for customers within CanadaFor Customers within The United Kingdom & Ireland For Customers within CanadaTechnical Support D-Link UK & Ireland Technical Support over the InternetTechnische Unterstützung Assistance technique Support technique destiné aux clients établis en FranceSupport technique destiné aux clients établis au Canada LinkAsistencia Técnica de D-Link por teléfono Asistencia TécnicaAsistencia Técnica de D-Link a través de Internet Supporto tecnico Supporto tecnico per i clienti residenti in ItaliaD-Link Mediterraneo S.r.L Gli ultimi aggiornamenti e la documentazione sonoTechnical Support Tech Support for customers within the NetherlandsTech Support for customers within Belgium Tech Support for customers within LuxemburgPomoc techniczna Technická podpora Aktualizované verze software a uživatelských příruček najdete nawebové stránce firmy D-Link D-Link poskytuje svým zákazníkům bezplatnou technickou podporuTechnikai Támogatás D-Link MagyarországTeknisk Support Teknisk SupportD-Link Teknisk telefon Support Du kan finne programvare oppdateringer og brukerTeknisk Support D-Link teknisk support på InternettetD-Link teknisk support over telefonen Tlf. 7026Teknistä tukea asiakkaille Suomessa D-Link tarjoaa teknistä tukea asiakkailleenTuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo. 9 - 21 numerostaTeknisk Support för kunder i Sverige Teknisk SupportPå vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformationSuporte Técnico Suporte Técnico para clientes no PortugalVocê pode encontrar atualizações de software e documentação de Assistência TécnicaΤεχνική Υποστήριξη Για πελάτες εντός του Ελλαδικού χώρουΤηλεφωνική υποστήριξη D-Link Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-ΠαρασκευήTechnical Support Tech Support for customers inAustralia IndiaTechnical Support Tech Support for customers inhttp//support.dlink-me.com http//support.dlink-me.comТехническая поддержка Обновления программного обеспечения и документациядоступны на Интернет-сайте D-Link D-Link предоставляет бесплатную поддержку для клиентовAsistencia Técnica Suporte Técnico Suporte Técnico para clientes no BrasilTelefone São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30D-Link 友訊科技台灣分公司技術支援資訊電子郵件：dssqaservice@dlink.com.twD-Link 免付費技術諮詢專線 0800-002-615Dukungan Teknis Dukungan Teknis untuk pelangganUpdate perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link技术支持您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编技术支持中心电话：8008296688 技术支持中心传真：02885176948International Offices Product installed in type of computer Registration Card All Countries and Regions Excluding USAProduct Model Product Serial No

Finding ACL Rules

1.Click ACL > ACL Finder: The ACL Finder Page opens:

Figure 8-22 ACL Finder Page

Profile ID (list box)

Profile Type

Summary