V2.20
D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCH
User Manual
CE Mark Warning
FCC Warning
Warnung
Precaución
Table of Contents
Defining SNMP Host Table
Configuring Port Security
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
Preface
Safety Cautions General Precautions for Rack-Mountable Products
System Overview Viewing the Device Device Management Methods
Viewing the Device
System Overview
DGS-3100 Series Front Panel
Figure 1 DGS-3100 Series 48 Port Front Panel
Command Line Console
Device Management Methods
Web Based Management Interface
SNMP-Based Management
User Guide Overview
Safety Cautions
Notes, Notices, and Cautions
NOTE A NOTE indicates important information that helps you make better use of your device
Unplug the power cable before removing the power supply
The power cable, extension cable, or plug is damaged
An object has fallen into the product
The product has been exposed to water
General Precautions for Rack-Mountable Products
Protecting Against Electrostatic Discharge
Battery Handling Reminder
GETTING STARTED
Using the Web-Based User Interface
Understanding the D-Link Embedded Web Interface
View
1. Tree View
Figure 1-1. Device Information Page
2. Device
Information View
Displaying the Stack Status
Using the Tool Menu
Locating Devices
1. Click Device Locator. The Device Locator Page opens
Field Http TFTP
Backing up and Restoring Configuration Files
Figure 1-3 Config Backup and Restore Page
Figure 1-4 Factory Reset Page
Resetting the Device
1. Click Reset. The Factory Reset Page opens
Figure 1-5 Firmware Download Page
Downloading the Firmware
1. Click Firmware Download. The Firmware Download Page opens
Field HTTP Download TFTP Download
1. Click System Reboot. The System Reboot Page opens
Rebooting the System
Figure 1-6 System Reboot Page
2. Define the Select Unit to Reboot field
Component
Using the Web System Components
Name
Description
CONFIGURING BASIC CONFIGURATION
Figure 2-1 Device Information Page
Viewing Device Information
Field Device Type System Contact System Name System Location
Firmware Version Hardware Version System Time System Up Time
Login Timeout minutes Time Source 802.1D Spanning Tree DHCP Client
Field Boot Version MAC Address IP Address Subnet Mask Default Gateway
Safeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames
BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X Status
System Contact System Name System Location Login Timeout minutes
Defining System Information
3. Define the System Location and Login Timeout minutes fields
Figure 2-2 System Information Page
1. Click Configuration IP Address. The IP Address Page opens
Defining IP Addresses
Figure 2-3 IP Address Page
Field
Managing Stacking Modes
Managing Stacking
Advanced Stacking
Allocating Unit IDs
Assigning Unit IDs
Master Enabled Stacking Members
Defining a Stacking Master
Defining a Stacking Back Up Master
Electing a Stacking Master
Stack Startup Process
Discovering the Stacking Master
Allocating Unit IDs/Resolving Unit ID Conflicts
Unit and Stacking Port Configuration
Stack Resiliency
Building Stacks - Quick Start
Managing a Self-Ordered Stack
Managing a New Manually Ordered Stack
Replacing Failed Stacking-Members in a Running Stack
Stack Management Examples
Building New Manually Ordered Stacks
Adding Stacking Members to an Existing Manually Ordered Stack
Replacing a Failed Stack Master
Dividing Stacks
Page
Inserting Excess Stacking Members
Merging Stacks
Stacking Cable Failure
When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down
Field Stacking Master Current Stack ID New Stack ID after reset
Configuring Stacking
Figure 2-4 Stacking Settings Page
Defining Ports
Configuring Port Properties
Figure 2-5 Port Setting Page
Field Unit From Port To Port State Speed
Field Flow Control Learning
Figure 2-6 Port Description Page
Viewing Port Properties
Unit
From Port
1. Click Configuration ARP Settings. The ARP Settings Page opens
ARP Settings
Figure 2-7 ARP Settings Page
Static ARP Settings
1. Click Configuration User Accounts. The User Accounts Page opens
Configuring User Accounts
Field User Name New Password Access Right Confirm New Password
Figure 2-8 User Accounts Page
To edit the User Accounts Page 1. Select a name on the User List
2. Click . The user account is deleted, and the device is updated
2. Click 3. Define the value
1. Select an entry
Figure 2-9 System Log Host Page
Managing System Logs
Index
Severity
Stratum Stratum Stratum Stratum
Configuring SNTP
Example
Time level T1 T2 T3 T4
Field Time Setting Time in HH MM SS
Figure 2-10 Time Settings Page
Time Source
Current Time
Configuring Daylight Savings Time
Figure 2-11 TimeZone Settings Page
Field Daylight Savings Time State
DST Repeating Settings Sections
Daylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT
Field From Which Week of the Month From Day of Week From Month
Field FromMonth FromDay FromTime ToMonth ToDay ToTime
DST Annual Settings Section
Parameters Authentication Privacy Key Management
Configuring SNMP
Figure 2-12 SNMP View Table Page
Defining SNMP Views
Field View Name Subtree OID View Type
2. Define the View Name, Subtree OID and View Type fields
Figure 2-13 SNMP Group Table Page
Defining SNMP Groups
Field Group Name Read View Name Write View Name
Community/View TestReadView PWriteView PrivateView
Field Notify View Name Security Model Security Level
Auth-Protocol by Password Password Confirm Password
Defining SNMP Users
Figure 2-14 SNMP User Table Page
Field User Name Group Name SNMP V3 Encryption
2. Define the User Name, Group Name, and SNMP V3 Encryption fields
Auth-Protocol by Key
Confirm Key
Access Rights
Defining SNMP Communities
2. Define the Community Name, and View Name, Access Right fields
Figure 2-15 SNMP Community Table Page
Figure 2-16 SNMP Host Table Page
Defining SNMP Host Table
To define the SNMP Host Table Page
Community String / SNMPv3 User Name
Host IP Address
SNMP Version
Figure 2-17 SNMP Engine ID Page
Defining SNMP Engine ID
Field Engine ID Use Default
Field SNMP Traps SNMP Authentication Traps
Enabling SNMP Traps
Figure 2-18 SNMP Configuration Trap Page
Field DHCP Auto Configuration
DHCP Auto Configuration
Figure 2-19 DHCP Auto Configuration Page
Firmware Information
Dual Image Services
Field Unit Image Version Update Time
Figure 2-20 Firmware Information Page
Figure 2-21 Config Firmware Image Page
Config Firmware Image
Defines the image file used for reboot. The possible values are
Image
CONFIGURING L2 FEATURES
1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opens
Enabling Jumbo Frames
Figure 3-1. Jumbo Frame Page
Field Jumbo Frame
Understanding IEEE 802.1p Priority
Configuring VLANs
VLAN Description
Notes about VLANs on the DGS-3100 Series
Figure 3-2. IEEE 802.1Q Packet Forwarding
Term Untagging Ingress port Egress port
Figure 3-4. Adding an IEEE 802.1Q Tag
802.1Q VLAN Tags
Figure 3-3. IEEE 802.1Q Tag
Ingress Filtering
Port VLAN ID
Tagging and Untagging
VLAN and Trunk Groups
Default VLANs
VLAN Status
Switch Ports
1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opens
Defining VLAN Properties
Figure 3-5. VLAN Configuration Page
Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports
Figure 3-6. Add/Edit VLAN Information Page
Figure 3-7. GVRP Setting Page
Configuring GVRP
1. Click L2 Features GVRP Settings. The GVRP Setting Page opens
4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields
Field GRVP Global Setting Unit From Port To Port PVID GVRP Ingress
Acceptable Frame Type
1. Click L2 Features Trunking. The Trunking Configuration Page opens
Defining Trunking
Figure 3-8. Trunking Configuration Page
Field Unit Group ID Type Ports
Notes about Trunking on the DGS-3100 Series
Figure 3-9. Traffic Segmentation Page
Traffic Segmentation
Source Ports
Forwarding Ports
Figure 3-10. LACP Port Settings Page
Configuring LACP
Timeout
4. Define the Port-Priority and LACP Timeout fields
1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opens
Defining IGMP Snooping
Leave Timer
Figure 3-11. IGMP Snooping Page
Router Timeout
Host Timeout
Static Router Port Setting Edit button
2. Click . The Static Router Ports Settings Page opens
Dynamic Router Ports
Static Router Ports
Ports
1. Click L2 Features Port Mirroring. The Port Mirroring Page opens
Configuring Port Mirroring
Figure 3-13. Port Mirroring Page
Field Status Unit Target Port Source Port
Field None
4. Define the Unit, Tx, and Rx. fields under Source Port Setting
Defines that port mirroring is not applied to the ports
2. Define the Status, Unit, and Target fields
Version Classic STP Rapid STP Multiple STP
Configuring Spanning Tree
Figure 3-14. STP Bridge Global Settings Page
Defining Spanning Tree Global Parameters
STP Status
STP Version
Bridge Max Age 6
Bridge Priority 0
Bridge Hello Time 1
Bridge Forward Delay
Field Unit From Port To Port Cost 0=Auto
Defining STP Port Settings
Figure 3-15. STP Port Settings Page
Field Edge Forwarding BPDU P2P State
Figure 3-16. MST Configuration Identification Page
Defining Multiple Spanning Tree Configuration Identification
Configuration Name
Revision Level
Field Unit Port Instance ID Internal Path Cost Priority Status
Defining MSTP Port Information
Figure 3-17. MSTI Config Information Page
4. Define the Internal Path Cost and Priority fields
Field Role
Defining Unicast Forwarding
Defining Forwarding and Filtering
Figure 3-18. Unicast Forwarding Page
Field Aging Time VID MAC Address Unit Port
Figure 3-19. Multicast Forwarding Page
Defining Multicast Forwarding
Multicast MAC Address
Egress
The default settings are restored
4. Click To restore the default settings 1. Click
The entry is deleted, and the device is updated
3. Select either all, or individual ports
Configuring 1p
CONFIGURING QUALITY OF SERVICE
Figure 4-1. Mapping QoS on the Switch
Understanding QoS
1. Click QoS Bandwidth Control. The Bandwidth Control Page opens
Defining Bandwidth Settings
Figure 4-2. Bandwidth Control Page
No Limit
Figure 4-3. Traffic Control Settings Page
Configuring Storm Control
Field Unit From Port To Port Storm Control Type State Threshold 3500
Broadcast Storm Broadcast and Multicast Storm
2. Define the Unit, From Port, To Port, Prioirity fields
Mapping Ports to Packet Priorities
Figure 4-4. 802.1P Default Priority Page
Field Priority Class ID
Mapping Priority to Classes Queues
Figure 4-5. 802.1P User Priority Page
Figure 4-6. QoS Scheduling Mechanism Page
Configuring QoS Scheduling Mechanism
Field Class ID Mechanism Weight
Figure 4-7. Multi-Layer CoS Setting Page
Defining Multi-Layer CoS Settings
SECURITY FEATURES
1. Click Security Safeguard Engine. The Safeguard Engine Page opens
Configuring Safeguard Engine
Figure 5-8. Safeguard Engine Page
Field Safeguard Engine
Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch
Configuring Trust Host
1. Click Security Trusted Host. The Trusted Host Page opens
Figure 5-9.Trusted Host Page
Field Unit From Port To Port Admin State Max Address0-64 Port
Configuring Port Security
1. Click Security Port Security. The Port Security Page opens
Figure 5-10. Port Security Page
Field Max Learning Addr
Configuring Guest VLANs
1. Click Security Guest Vlan. The Guest VLAN Page opens
Figure 5-11 Guest VLAN Page
State Controlled Access Uncontrolled Access
Configuring Port Authentication
Component Authenticators Supplicants/Clients Authentication Server
Figure 5-12. 802.1X Setting Page
1. Click Security 802.1X Setting. The 802.1X Setting Page opens
SuppTimeout 1-65535 sec
ServerTimeout 1-65535 sec
Mode
Control
SuppTimeout 1-65535 sec
1. Click Security 802.1X Setting. The 802.1X Setting Page opens
ServerTimeout 1-65535 sec
ReAuthEnabled
Description
Field
Control
Unit
Page
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
Field Succession RADIUS Server Authentic Port Accounting Port Key
Defining RADIUS Settings
Figure 5-13. Authentic RADIUS Server Page
1. Click Security SSL. The SSL Configuration Settings Page opens
Configuring Secure Socket Layer Security
Field SSL Status Ciphersuite Status
Figure 5-14. SSL Configuration Settings Page
Field SSH Server Status Port
Configuring Secure Shell Security
Figure 5 -15. SSH Configuration Page
Defining SSH Algorithm Settings
Public key
Figure 5-16. SSH Algorithm Settings Page
Public Key Algorithm
Data Integrity Algorithm
Field Application Login Method List Enable Method List
Defining Application Authentication Settings
Figure 5-17. Application Authentication Settings Page
Figure 5-18. Authentication Server Host Page
Configuring Authentication Server Hosts
Timeout 1-30secs
Protocol
Field Method List Name Method Method
Defining Login Methods
Figure 5-19. Login Method Lists Page
Description are
Field Method Method
Field Method List Name Method
Defining Enable Methods
Figure 5-20. Enable Method Lists Page
Field Method Method Method
Figure 5-21. Configure Local Enable Password Page
Configuring Local Enable Password
Old Local Enable Password
Provide the current network Enable password
MONITORING THE DEVICE
Figure 6-1 Stacking Information Page
Viewing Stacking Information
Field Master ID Backup ID Box ID Runtime version H/W version
1. Click Monitoring CPU Utilization. The CPU Utilization Page opens
Viewing CPU Utilization
Figure 6-2. CPU Utilization Page
Field Utilization Time Interval Record Number Show/Hide
Field Unit Port Utilization Time Interval Record Number Show/Hide
Viewing Port Utilization
Figure 6-3. Port Utilization Page
1. Click Monitoring Packet Size. The Packet Size Page opens
Viewing Packet Size Information
Figure 6-4. Packet Size Page
Field Unit Port Packet Size Analysis - Selected Port Number
1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opens
Viewing Received Packet Statistics
Figure 6-5. ReceivedRX Page
Field Unit Port Bytes Packets Time Interval Record Number Show/Hide
1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opens
Viewing UMBcast Packet Statistics
Figure 6-6. UMBcastRX Page
Field Unit Port Unicast Multicast Broadcast Time Interval
Field Unit Port Bytes Packets Time Interval
Viewing Transmitted Packet Statistics
Figure 6-7. TransmittedTX Page
Field Record Number Show/Hide
Figure 6-8. RADIUS Authentication Page
Viewing RADIUS Authenticated Session Statistics
Field Time Interval Server UDP Port Timeouts Requests Challenges
Accepts Rejects
Field VLAN Name IP Address Total Entries MAC Address Type
Viewing ARP Table
Figure 6-9 Browse ARP Table Page
Field VID Unit Port
Viewing Router Ports
Figure 6-10 Browse Router Port Page
Field ID From User Privilege Name
Viewing Session Table
Figure 6-11 Browse Session Table Page
Field VID VLAN Name VLAN Name Multicast Group MAC Address Port
Viewing IGMP Group Information
Figure 6-12 IGMP Snooping Group Page
Field Unit Port VLAN Name MAC Address VID Type
Defining Dynamic and Static MAC Addresses
Figure 6-13 MAC Address Table Page
3. Define the Port, VLAN Name, and MAC Address fields 4. Click
2. Select the Stacking member in the Unit field
To view all entries, click To clear static entries, click
To clear dynamic entries, click
1. Click Monitoring System Log. The System Log Page opens
Viewing System Log
Figure 6-14 System Log Page
Field ID Time Log Description Severity
MANAGING POWER OVER ETHERNET DEVICES
1. Click PoE PoE Port Setting. The PoE Port Setting Page opens
Defining PoE System Information
Figure 7-1 PoE Port Setting Page
PoE Enable
Indicates the power consumption is 15.4W
Indicates the power consumption is 7W
Normal - Indicates that the power supply unit is functioning
Off - Indicates that the power supply unit is not functioning
1. Click PoE PoE System Setting. The PoE System Setting Page opens
Displaying and Editing PoE System Information
Figure 7-2 PoE System Setting Page
System Power Threshold
DEFINING ACCESS PROFILE LISTS
Figure 8-1 ACL Configuration Wizard Page
ACL Configuration Wizard
Service Type
From
TCP Destination Port - Matches the packet to the TCP Destination Port
TCP Source Port - Matches the packet to the TCP Source Port
UDPAll - Specifies a UDP Packets filtering
UDP Source Port - Matches the packet to the UDP Source Port
1. Click ACL Access Profile List. The ACL Profile List Page opens
Defining Access Profile Lists
Displays the access rule
Adding ACL Profiles
L3 ACL
Figure 8-3 Add ACL Profile Page
L2 ACL
Figure 8-4 ACL Profile L2 ACL Tagged Page
Defining Level 2 ACL
To define L2 MAC Address ACL profile
Figure 8-5 ACL Profile L2 ACL Tagged MAC Address Page
Destination MAC Mask
Source MAC Mask
To define L2 802.1Q VLAN ACL profile
Figure 8-6 ACL Profile L2 ACL Tagged VLAN Page
Figure 8-7 ACL Profile L2 ACL Tagged Ether Type Page
To define L2 Ether Type ACL profile
Figure 8-9 Add ACL Profile L3 Page
Defining Level 3 ACL
Figure 8-8 ACL Profile L2 ACL Untagged Page
Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP Page
To define L3 IPv4 DSCP ACL profile
To define L3 IPv4 Address ACL profile
Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address Page
Figure 8-12 ACL Profile L3 ACL ICMP Page
To define L3 ICMP ACL profile
ICMP Type
ICMP Code
Figure 8-14 ACL Profile L3 IGMP Selected Page
To define L3 IGMP ACL profile
Figure 8-13 ACL Profile L3 IGMP Page
Figure 8-16 ACL Profile L3 TCP Port Page
Figure 8-15 ACL Profile L3 TCP Page
To define L3 TCP Port ACL profile
Figure 8-17 ACL Profile L3 TCP Flag Page
To define L3 TCP Flag ACL Profile
Figure 8-19 ACL Profile L3 UDP Port Page
If L3 ACL UDP is selected, the page updates as follows
Figure 8-18 ACL Profile L3 UDP Page
Description
Click ACL Access Profile List The Access Profile List Page opens
Defining Access Rules Lists
Figure 8-20 Access Profile List Page
Filter
Figure 8-21 Add Access Rule Page IP based ACL
1. Click . The Add Access Rule Page opens
Access ID
Source ID
2. Define the Rule Detail fields
3. Click . The rule is changed, and the device is updated
1. Click ACL ACL Finder The ACL Finder Page opens
Finding ACL Rules
Figure 8-22 ACL Finder Page
Profile ID list box
Source MAC
Figure 8-23 Rule Detail Page
Destination MAC
Ether Type
Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series
Notes about ACLs capacity in the DGS-3100 Series
Limited Lifetime Warranty for the product is defined as follows
Reorient or relocate the receiving antenna
Product Registration
Product Type
LIMITED WARRANTY
Warranty Period
What Is Not Covered
What You Must Do For Warranty Service
is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed
Copyright Statement
FCC Warning
Trademarks
Technical Support
TECHNICAL SUPPORT
Tech Support for customers within the United States
Tech Support for customers within Canada
For Customers within Canada
For Customers within The United Kingdom & Ireland
D-Link UK & Ireland Technical Support over the Internet
D-Link UK & Ireland Technical Support over the Telephone
Technische Unterstützung
Support technique destiné aux clients établis en France
Assistance technique
Support technique destiné aux clients établis au Canada
Link
Asistencia Técnica de D-Link a través de Internet
Asistencia Técnica
Asistencia Técnica de D-Link por teléfono
Supporto tecnico per i clienti residenti in Italia
Supporto tecnico
D-Link Mediterraneo S.r.L
Gli ultimi aggiornamenti e la documentazione sono
Tech Support for customers within the Netherlands
Technical Support
Tech Support for customers within Belgium
Tech Support for customers within Luxemburg
Pomoc techniczna
Aktualizované verze software a uživatelských příruček najdete na
Technická podpora
webové stránce firmy D-Link
D-Link poskytuje svým zákazníkům bezplatnou technickou podporu
D-Link Magyarország
Technikai Támogatás
Teknisk Support
Teknisk Support
D-Link Teknisk telefon Support
Du kan finne programvare oppdateringer og bruker
D-Link teknisk support over telefonen
D-Link teknisk support på Internettet
Tlf. 7026
Hverdager kl. 0800
D-Link tarjoaa teknistä tukea asiakkailleen
Teknistä tukea asiakkaille Suomessa
Tuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti
Arkisin klo. 9 - 21 numerosta
På vår hemsida kan du hitta mer information om mjukvaru
Teknisk Support för kunder i Sverige
uppdateringar och annan användarinformation
D-Link tillhandahåller teknisk support till kunder i Sverige
Suporte Técnico para clientes no Portugal
Suporte Técnico
Você pode encontrar atualizações de software e documentação de
Assistência Técnica
Για πελάτες εντός του Ελλαδικού χώρου
Τεχνική Υποστήριξη
Τηλεφωνική υποστήριξη D-Link
Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-Παρασκευή
Australia
Tech Support for customers in
India
Indonesia, Malaysia, Singapore and Thailand
Tech Support for customers in
Technical Support
http//support.dlink-me.com
e-mail amostafa@dlink-me.com
Обновления программного обеспечения и документация
Техническая поддержка
доступны на Интернет-сайте D-Link
D-Link предоставляет бесплатную поддержку для клиентов
Asistencia Técnica
Suporte Técnico para clientes no Brasil
Suporte Técnico
Telefone
São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30
電子郵件：dssqaservice@dlink.com.tw
D-Link 友訊科技 台灣分公司 技術支援資訊
D-Link 免付費技術諮詢專線
0800-002-615
Dukungan Teknis untuk pelanggan
Dukungan Teknis
Update perangkat lunak dan dokumentasi pengguna dapat
diperoleh pada situs web D-Link
您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊
技术支持
办公地址：北京市东城区北三环东路 36 号 环球贸易中心 B 座 26F 02-05 室 邮编
技术支持中心电话：8008296688 技术支持中心传真：02885176948
International Offices
Registration Card All Countries and Regions Excluding USA
Product installed in type of computer
Product Model
Product Serial No
. The rule is defined, and the device is update