Device Management Methods, SNMP-Based Management

Contents

V2.20 D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCHUser Manual FCC Warning CE Mark WarningWarnung Precaución Table of Contents Defining SNMP Host Table Configuring Port Security Preface DGS-3100 Series Gigabit Stackable Managed Switch User ManualSafety Cautions General Precautions for Rack-Mountable Products System Overview Viewing the Device Device Management Methods System Overview Viewing the DeviceDGS-3100 Series Front Panel Figure 1 DGS-3100 Series 48 Port Front Panel Device Management Methods Command Line ConsoleWeb Based Management Interface SNMP-Based Management Safety Cautions User Guide OverviewNotes, Notices, and Cautions NOTE A NOTE indicates important information that helps you make better use of your device The power cable, extension cable, or plug is damaged Unplug the power cable before removing the power supplyAn object has fallen into the product The product has been exposed to water General Precautions for Rack-Mountable Products Battery Handling Reminder Protecting Against Electrostatic Discharge Using the Web-Based User Interface GETTING STARTEDUnderstanding the D-Link Embedded Web Interface View Figure 1-1. Device Information Page 1. Tree View2. Device Information View Using the Tool Menu Displaying the Stack StatusLocating Devices 1. Click Device Locator. The Device Locator Page opens Field Http TFTP Backing up and Restoring Configuration FilesFigure 1-3 Config Backup and Restore Page Figure 1-4 Factory Reset Page Resetting the Device1. Click Reset. The Factory Reset Page opens Figure 1-5 Firmware Download Page Downloading the Firmware1. Click Firmware Download. The Firmware Download Page opens Field HTTP Download TFTP Download Rebooting the System 1. Click System Reboot. The System Reboot Page opensFigure 1-6 System Reboot Page 2. Define the Select Unit to Reboot field Using the Web System Components ComponentName Description CONFIGURING BASIC CONFIGURATION Viewing Device Information Figure 2-1 Device Information PageField Device Type System Contact System Name System Location Firmware Version Hardware Version System Time System Up Time Field Boot Version MAC Address IP Address Subnet Mask Default Gateway Login Timeout minutes Time Source 802.1D Spanning Tree DHCP ClientSafeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X Status Defining System Information System Contact System Name System Location Login Timeout minutes3. Define the System Location and Login Timeout minutes fields Figure 2-2 System Information Page Defining IP Addresses 1. Click Configuration IP Address. The IP Address Page opensFigure 2-3 IP Address Page Field Managing Stacking Managing Stacking ModesAdvanced Stacking Allocating Unit IDs Master Enabled Stacking Members Assigning Unit IDsDefining a Stacking Master Defining a Stacking Back Up Master Electing a Stacking Master Stack Startup ProcessDiscovering the Stacking Master Unit and Stacking Port Configuration Allocating Unit IDs/Resolving Unit ID Conflicts Building Stacks - Quick Start Stack ResiliencyManaging a Self-Ordered Stack Managing a New Manually Ordered Stack Stack Management Examples Replacing Failed Stacking-Members in a Running StackBuilding New Manually Ordered Stacks Adding Stacking Members to an Existing Manually Ordered Stack Replacing a Failed Stack Master Dividing Stacks Page Inserting Excess Stacking Members Merging StacksStacking Cable Failure When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down Field Stacking Master Current Stack ID New Stack ID after reset Configuring StackingFigure 2-4 Stacking Settings Page Configuring Port Properties Defining PortsFigure 2-5 Port Setting Page Field Unit From Port To Port State Speed Field Flow Control Learning Viewing Port Properties Figure 2-6 Port Description PageUnit From Port ARP Settings 1. Click Configuration ARP Settings. The ARP Settings Page opensFigure 2-7 ARP Settings Page Static ARP Settings Configuring User Accounts 1. Click Configuration User Accounts. The User Accounts Page opensField User Name New Password Access Right Confirm New Password Figure 2-8 User Accounts Page 2. Click . The user account is deleted, and the device is updated To edit the User Accounts Page 1. Select a name on the User List2. Click 3. Define the value 1. Select an entry Managing System Logs Figure 2-9 System Log Host PageIndex Severity Configuring SNTP Stratum Stratum Stratum StratumExample Time level T1 T2 T3 T4 Figure 2-10 Time Settings Page Field Time Setting Time in HH MM SSTime Source Current Time Configuring Daylight Savings Time Figure 2-11 TimeZone Settings Page DST Repeating Settings Sections Field Daylight Savings Time StateDaylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT Field From Which Week of the Month From Day of Week From Month DST Annual Settings Section Field FromMonth FromDay FromTime ToMonth ToDay ToTime Configuring SNMP Parameters Authentication Privacy Key Management Defining SNMP Views Figure 2-12 SNMP View Table PageField View Name Subtree OID View Type 2. Define the View Name, Subtree OID and View Type fields Defining SNMP Groups Figure 2-13 SNMP Group Table PageField Group Name Read View Name Write View Name Community/View TestReadView PWriteView PrivateView Field Notify View Name Security Model Security Level Defining SNMP Users Auth-Protocol by Password Password Confirm PasswordFigure 2-14 SNMP User Table Page Field User Name Group Name SNMP V3 Encryption 2. Define the User Name, Group Name, and SNMP V3 Encryption fields Auth-Protocol by KeyConfirm Key Defining SNMP Communities Access Rights2. Define the Community Name, and View Name, Access Right fields Figure 2-15 SNMP Community Table Page Figure 2-16 SNMP Host Table Page Defining SNMP Host TableTo define the SNMP Host Table Page Community String / SNMPv3 User Name Host IP AddressSNMP Version Figure 2-17 SNMP Engine ID Page Defining SNMP Engine IDField Engine ID Use Default Field SNMP Traps SNMP Authentication Traps Enabling SNMP TrapsFigure 2-18 SNMP Configuration Trap Page Field DHCP Auto Configuration DHCP Auto ConfigurationFigure 2-19 DHCP Auto Configuration Page Dual Image Services Firmware InformationField Unit Image Version Update Time Figure 2-20 Firmware Information Page Config Firmware Image Figure 2-21 Config Firmware Image PageDefines the image file used for reboot. The possible values are Image CONFIGURING L2 FEATURES Enabling Jumbo Frames 1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opensFigure 3-1. Jumbo Frame Page Field Jumbo Frame Configuring VLANs Understanding IEEE 802.1p PriorityVLAN Description Notes about VLANs on the DGS-3100 Series Term Untagging Ingress port Egress port Figure 3-2. IEEE 802.1Q Packet Forwarding Figure 3-4. Adding an IEEE 802.1Q Tag 802.1Q VLAN TagsFigure 3-3. IEEE 802.1Q Tag Ingress Filtering Port VLAN IDTagging and Untagging Default VLANs VLAN and Trunk GroupsVLAN Status Switch Ports Defining VLAN Properties 1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opensFigure 3-5. VLAN Configuration Page Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports Figure 3-6. Add/Edit VLAN Information Page Figure 3-7. GVRP Setting Page Configuring GVRP1. Click L2 Features GVRP Settings. The GVRP Setting Page opens 4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields Field GRVP Global Setting Unit From Port To Port PVID GVRP IngressAcceptable Frame Type Defining Trunking 1. Click L2 Features Trunking. The Trunking Configuration Page opensFigure 3-8. Trunking Configuration Page Field Unit Group ID Type Ports Notes about Trunking on the DGS-3100 Series Traffic Segmentation Figure 3-9. Traffic Segmentation PageSource Ports Forwarding Ports Configuring LACP Figure 3-10. LACP Port Settings PageTimeout 4. Define the Port-Priority and LACP Timeout fields Defining IGMP Snooping 1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opensLeave Timer Figure 3-11. IGMP Snooping Page Host Timeout Router TimeoutStatic Router Port Setting Edit button 2. Click . The Static Router Ports Settings Page opens Dynamic Router Ports Static Router PortsPorts Configuring Port Mirroring 1. Click L2 Features Port Mirroring. The Port Mirroring Page opensFigure 3-13. Port Mirroring Page Field Status Unit Target Port Source Port 4. Define the Unit, Tx, and Rx. fields under Source Port Setting Field NoneDefines that port mirroring is not applied to the ports 2. Define the Status, Unit, and Target fields Configuring Spanning Tree Version Classic STP Rapid STP Multiple STP Defining Spanning Tree Global Parameters Figure 3-14. STP Bridge Global Settings PageSTP Status STP Version Bridge Priority 0 Bridge Max Age 6Bridge Hello Time 1 Bridge Forward Delay Field Unit From Port To Port Cost 0=Auto Defining STP Port SettingsFigure 3-15. STP Port Settings Page Field Edge Forwarding BPDU P2P State Defining Multiple Spanning Tree Configuration Identification Figure 3-16. MST Configuration Identification PageConfiguration Name Revision Level Field Unit Port Instance ID Internal Path Cost Priority Status Defining MSTP Port InformationFigure 3-17. MSTI Config Information Page Field Role 4. Define the Internal Path Cost and Priority fields Defining Forwarding and Filtering Defining Unicast ForwardingFigure 3-18. Unicast Forwarding Page Field Aging Time VID MAC Address Unit Port Defining Multicast Forwarding Figure 3-19. Multicast Forwarding PageMulticast MAC Address Egress 4. Click To restore the default settings 1. Click The default settings are restoredThe entry is deleted, and the device is updated 3. Select either all, or individual ports CONFIGURING QUALITY OF SERVICE Configuring 1p Figure 4-1. Mapping QoS on the Switch Understanding QoS Defining Bandwidth Settings 1. Click QoS Bandwidth Control. The Bandwidth Control Page opensFigure 4-2. Bandwidth Control Page No Limit Configuring Storm Control Figure 4-3. Traffic Control Settings PageField Unit From Port To Port Storm Control Type State Threshold 3500 Broadcast Storm Broadcast and Multicast Storm 2. Define the Unit, From Port, To Port, Prioirity fields Mapping Ports to Packet PrioritiesFigure 4-4. 802.1P Default Priority Page Field Priority Class ID Mapping Priority to Classes QueuesFigure 4-5. 802.1P User Priority Page Figure 4-6. QoS Scheduling Mechanism Page Configuring QoS Scheduling MechanismField Class ID Mechanism Weight Defining Multi-Layer CoS Settings Figure 4-7. Multi-Layer CoS Setting Page SECURITY FEATURES Configuring Safeguard Engine 1. Click Security Safeguard Engine. The Safeguard Engine Page opensFigure 5-8. Safeguard Engine Page Field Safeguard Engine Configuring Trust Host Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch1. Click Security Trusted Host. The Trusted Host Page opens Figure 5-9.Trusted Host Page Configuring Port Security Field Unit From Port To Port Admin State Max Address0-64 Port1. Click Security Port Security. The Port Security Page opens Figure 5-10. Port Security Page Configuring Guest VLANs Field Max Learning Addr1. Click Security Guest Vlan. The Guest VLAN Page opens Figure 5-11 Guest VLAN Page State Controlled Access Uncontrolled Access Configuring Port AuthenticationComponent Authenticators Supplicants/Clients Authentication Server 1. Click Security 802.1X Setting. The 802.1X Setting Page opens Figure 5-12. 802.1X Setting PageSuppTimeout 1-65535 sec ServerTimeout 1-65535 sec Control Mode 1. Click Security 802.1X Setting. The 802.1X Setting Page opens SuppTimeout 1-65535 secServerTimeout 1-65535 sec ReAuthEnabled Field DescriptionControl UnitPage DGS-3100 Series Gigabit Stackable Managed Switch User Manual DGS-3100 Series Gigabit Stackable Managed Switch User Manual Field Succession RADIUS Server Authentic Port Accounting Port Key Defining RADIUS SettingsFigure 5-13. Authentic RADIUS Server Page Configuring Secure Socket Layer Security 1. Click Security SSL. The SSL Configuration Settings Page opens Figure 5-14. SSL Configuration Settings Page Field SSL Status Ciphersuite Status Field SSH Server Status Port Configuring Secure Shell SecurityFigure 5 -15. SSH Configuration Page Defining SSH Algorithm Settings Figure 5-16. SSH Algorithm Settings Page Public keyPublic Key Algorithm Data Integrity Algorithm Field Application Login Method List Enable Method List Defining Application Authentication SettingsFigure 5-17. Application Authentication Settings Page Configuring Authentication Server Hosts Figure 5-18. Authentication Server Host PageTimeout 1-30secs Protocol Field Method List Name Method Method Defining Login MethodsFigure 5-19. Login Method Lists Page Field Method Method Description are Field Method List Name Method Defining Enable MethodsFigure 5-20. Enable Method Lists Page Field Method Method Method Configuring Local Enable Password Figure 5-21. Configure Local Enable Password PageOld Local Enable Password Provide the current network Enable password MONITORING THE DEVICE Figure 6-1 Stacking Information Page Viewing Stacking InformationField Master ID Backup ID Box ID Runtime version H/W version Viewing CPU Utilization 1. Click Monitoring CPU Utilization. The CPU Utilization Page opensFigure 6-2. CPU Utilization Page Field Utilization Time Interval Record Number Show/Hide Field Unit Port Utilization Time Interval Record Number Show/Hide Viewing Port UtilizationFigure 6-3. Port Utilization Page Viewing Packet Size Information 1. Click Monitoring Packet Size. The Packet Size Page opensFigure 6-4. Packet Size Page Field Unit Port Packet Size Analysis - Selected Port Number Viewing Received Packet Statistics 1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opensFigure 6-5. ReceivedRX Page Field Unit Port Bytes Packets Time Interval Record Number Show/Hide Viewing UMBcast Packet Statistics 1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opensFigure 6-6. UMBcastRX Page Field Unit Port Unicast Multicast Broadcast Time Interval Field Unit Port Bytes Packets Time Interval Viewing Transmitted Packet StatisticsFigure 6-7. TransmittedTX Page Field Record Number Show/Hide Viewing RADIUS Authenticated Session Statistics Figure 6-8. RADIUS Authentication PageField Time Interval Server UDP Port Timeouts Requests Challenges Accepts Rejects Field VLAN Name IP Address Total Entries MAC Address Type Viewing ARP TableFigure 6-9 Browse ARP Table Page Field VID Unit Port Viewing Router PortsFigure 6-10 Browse Router Port Page Field ID From User Privilege Name Viewing Session TableFigure 6-11 Browse Session Table Page Field VID VLAN Name VLAN Name Multicast Group MAC Address Port Viewing IGMP Group InformationFigure 6-12 IGMP Snooping Group Page Field Unit Port VLAN Name MAC Address VID Type Defining Dynamic and Static MAC AddressesFigure 6-13 MAC Address Table Page 2. Select the Stacking member in the Unit field 3. Define the Port, VLAN Name, and MAC Address fields 4. ClickTo view all entries, click To clear static entries, click To clear dynamic entries, click Viewing System Log 1. Click Monitoring System Log. The System Log Page opensFigure 6-14 System Log Page Field ID Time Log Description Severity MANAGING POWER OVER ETHERNET DEVICES Defining PoE System Information 1. Click PoE PoE Port Setting. The PoE Port Setting Page opensFigure 7-1 PoE Port Setting Page PoE Enable Indicates the power consumption is 7W Indicates the power consumption is 15.4WNormal - Indicates that the power supply unit is functioning Off - Indicates that the power supply unit is not functioning Displaying and Editing PoE System Information 1. Click PoE PoE System Setting. The PoE System Setting Page opensFigure 7-2 PoE System Setting Page System Power Threshold DEFINING ACCESS PROFILE LISTS ACL Configuration Wizard Figure 8-1 ACL Configuration Wizard PageService Type From TCP Source Port - Matches the packet to the TCP Source Port TCP Destination Port - Matches the packet to the TCP Destination PortUDPAll - Specifies a UDP Packets filtering UDP Source Port - Matches the packet to the UDP Source Port Defining Access Profile Lists 1. Click ACL Access Profile List. The ACL Profile List Page opensDisplays the access rule Adding ACL Profiles L3 ACL Figure 8-3 Add ACL Profile PageL2 ACL Defining Level 2 ACL Figure 8-4 ACL Profile L2 ACL Tagged PageTo define L2 MAC Address ACL profile Figure 8-5 ACL Profile L2 ACL Tagged MAC Address Page Source MAC Mask Destination MAC MaskTo define L2 802.1Q VLAN ACL profile Figure 8-6 ACL Profile L2 ACL Tagged VLAN Page To define L2 Ether Type ACL profile Figure 8-7 ACL Profile L2 ACL Tagged Ether Type Page Figure 8-9 Add ACL Profile L3 Page Defining Level 3 ACLFigure 8-8 ACL Profile L2 ACL Untagged Page To define L3 IPv4 DSCP ACL profile Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP PageTo define L3 IPv4 Address ACL profile Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address Page To define L3 ICMP ACL profile Figure 8-12 ACL Profile L3 ACL ICMP PageICMP Type ICMP Code Figure 8-14 ACL Profile L3 IGMP Selected Page To define L3 IGMP ACL profileFigure 8-13 ACL Profile L3 IGMP Page Figure 8-16 ACL Profile L3 TCP Port Page Figure 8-15 ACL Profile L3 TCP PageTo define L3 TCP Port ACL profile To define L3 TCP Flag ACL Profile Figure 8-17 ACL Profile L3 TCP Flag Page Figure 8-19 ACL Profile L3 UDP Port Page If L3 ACL UDP is selected, the page updates as followsFigure 8-18 ACL Profile L3 UDP Page Description Defining Access Rules Lists Click ACL Access Profile List The Access Profile List Page opensFigure 8-20 Access Profile List Page Filter 1. Click . The Add Access Rule Page opens Figure 8-21 Add Access Rule Page IP based ACLAccess ID Source ID 3. Click . The rule is changed, and the device is updated 2. Define the Rule Detail fields Finding ACL Rules 1. Click ACL ACL Finder The ACL Finder Page opensFigure 8-22 ACL Finder Page Profile ID list box Figure 8-23 Rule Detail Page Source MACDestination MAC Ether Type Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series Notes about ACLs capacity in the DGS-3100 Series Limited Lifetime Warranty for the product is defined as follows Reorient or relocate the receiving antenna Product Registration Product Type LIMITED WARRANTYWarranty Period What You Must Do For Warranty Service What Is Not Covered is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed Copyright Statement FCC WarningTrademarks TECHNICAL SUPPORT Technical SupportTech Support for customers within the United States Tech Support for customers within Canada For Customers within The United Kingdom & Ireland For Customers within CanadaD-Link UK & Ireland Technical Support over the Internet D-Link UK & Ireland Technical Support over the Telephone Technische Unterstützung Assistance technique Support technique destiné aux clients établis en FranceSupport technique destiné aux clients établis au Canada Link Asistencia Técnica de D-Link a través de Internet Asistencia TécnicaAsistencia Técnica de D-Link por teléfono Supporto tecnico Supporto tecnico per i clienti residenti in ItaliaD-Link Mediterraneo S.r.L Gli ultimi aggiornamenti e la documentazione sono Technical Support Tech Support for customers within the NetherlandsTech Support for customers within Belgium Tech Support for customers within Luxemburg Pomoc techniczna Technická podpora Aktualizované verze software a uživatelských příruček najdete nawebové stránce firmy D-Link D-Link poskytuje svým zákazníkům bezplatnou technickou podporu Technikai Támogatás D-Link Magyarország Teknisk Support Teknisk SupportD-Link Teknisk telefon Support Du kan finne programvare oppdateringer og bruker D-Link teknisk support på Internettet D-Link teknisk support over telefonenTlf. 7026 Hverdager kl. 0800 Teknistä tukea asiakkaille Suomessa D-Link tarjoaa teknistä tukea asiakkailleenTuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti Arkisin klo. 9 - 21 numerosta Teknisk Support för kunder i Sverige På vår hemsida kan du hitta mer information om mjukvaruuppdateringar och annan användarinformation D-Link tillhandahåller teknisk support till kunder i Sverige Suporte Técnico Suporte Técnico para clientes no PortugalVocê pode encontrar atualizações de software e documentação de Assistência Técnica Τεχνική Υποστήριξη Για πελάτες εντός του Ελλαδικού χώρουΤηλεφωνική υποστήριξη D-Link Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-Παρασκευή Tech Support for customers in AustraliaIndia Indonesia, Malaysia, Singapore and Thailand Technical Support Tech Support for customers inhttp//support.dlink-me.com e-mail amostafa@dlink-me.com Техническая поддержка Обновления программного обеспечения и документациядоступны на Интернет-сайте D-Link D-Link предоставляет бесплатную поддержку для клиентов Asistencia Técnica Suporte Técnico Suporte Técnico para clientes no BrasilTelefone São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30 D-Link 友訊科技台灣分公司技術支援資訊電子郵件：dssqaservice@dlink.com.twD-Link 免付費技術諮詢專線 0800-002-615 Dukungan Teknis Dukungan Teknis untuk pelangganUpdate perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link 技术支持您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编技术支持中心电话：8008296688 技术支持中心传真：02885176948 International Offices Product installed in type of computer Registration Card All Countries and Regions Excluding USAProduct Model Product Serial No

D-Link DGS-3100 Device Management Methods, Web Based Management Interface, SNMP-Based Management

Models: DGS-3100