D-Link DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCH
User Manual
V2.20
FCC Warning
CE Mark Warning
Warnung
Precaución
Table of Contents
Defining SNMP Host Table
Configuring Port Security
Preface
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
Safety Cautions General Precautions for Rack-Mountable Products
System Overview Viewing the Device Device Management Methods
System Overview
Viewing the Device
DGS-3100 Series Front Panel
Figure 1 DGS-3100 Series 48 Port Front Panel
Device Management Methods
Command Line Console
Web Based Management Interface
SNMP-Based Management
Safety Cautions
User Guide Overview
Notes, Notices, and Cautions
NOTE A NOTE indicates important information that helps you make better use of your device
The power cable, extension cable, or plug is damaged
Unplug the power cable before removing the power supply
An object has fallen into the product
The product has been exposed to water
General Precautions for Rack-Mountable Products
Battery Handling Reminder
Protecting Against Electrostatic Discharge
Using the Web-Based User Interface
GETTING STARTED
Understanding the D-Link Embedded Web Interface
View
Figure 1-1. Device Information Page
1. Tree View
2. Device
Information View
Using the Tool Menu
Displaying the Stack Status
Locating Devices
1. Click Device Locator. The Device Locator Page opens
Backing up and Restoring Configuration Files
Figure 1-3 Config Backup and Restore Page
Field Http TFTP
Resetting the Device
1. Click Reset. The Factory Reset Page opens
Figure 1-4 Factory Reset Page
Downloading the Firmware
1. Click Firmware Download. The Firmware Download Page opens
Figure 1-5 Firmware Download Page
Field HTTP Download TFTP Download
Rebooting the System
1. Click System Reboot. The System Reboot Page opens
Figure 1-6 System Reboot Page
2. Define the Select Unit to Reboot field
Using the Web System Components
Component
Name
Description
CONFIGURING BASIC CONFIGURATION
Viewing Device Information
Figure 2-1 Device Information Page
Field Device Type System Contact System Name System Location
Firmware Version Hardware Version System Time System Up Time
Field Boot Version MAC Address IP Address Subnet Mask Default Gateway
Login Timeout minutes Time Source 802.1D Spanning Tree DHCP Client
Safeguard Engine SNMP Trap SSL GVRP Setting Jumbo Frames
BPDU Forwarding IGMP Snooping Broadcast Storm Control 802.1X Status
Defining System Information
System Contact System Name System Location Login Timeout minutes
3. Define the System Location and Login Timeout minutes fields
Figure 2-2 System Information Page
Defining IP Addresses
1. Click Configuration IP Address. The IP Address Page opens
Figure 2-3 IP Address Page
Field
Managing Stacking
Managing Stacking Modes
Advanced Stacking
Allocating Unit IDs
Master Enabled Stacking Members
Assigning Unit IDs
Defining a Stacking Master
Defining a Stacking Back Up Master
Stack Startup Process
Discovering the Stacking Master
Electing a Stacking Master
Unit and Stacking Port Configuration
Allocating Unit IDs/Resolving Unit ID Conflicts
Building Stacks - Quick Start
Stack Resiliency
Managing a Self-Ordered Stack
Managing a New Manually Ordered Stack
Stack Management Examples
Replacing Failed Stacking-Members in a Running Stack
Building New Manually Ordered Stacks
Adding Stacking Members to an Existing Manually Ordered Stack
Replacing a Failed Stack Master
Dividing Stacks
Page
Merging Stacks
Stacking Cable Failure
Inserting Excess Stacking Members
When switches are added to a running stack, the Unit ID Allocation and Duplicate ID Conflict Resolution process detects an error if too many switches are present in the stack, and no changes are to stacking members that originally belonged to the group managed by the newly elected master. The original switches retain their ID assignments and configurations. The stacking members that originally belonged to the group managed by the Stack Master that lost the Master Election process are shut down
Configuring Stacking
Figure 2-4 Stacking Settings Page
Field Stacking Master Current Stack ID New Stack ID after reset
Configuring Port Properties
Defining Ports
Figure 2-5 Port Setting Page
Field Unit From Port To Port State Speed
Field Flow Control Learning
Viewing Port Properties
Figure 2-6 Port Description Page
Unit
From Port
ARP Settings
1. Click Configuration ARP Settings. The ARP Settings Page opens
Figure 2-7 ARP Settings Page
Static ARP Settings
Configuring User Accounts
1. Click Configuration User Accounts. The User Accounts Page opens
Field User Name New Password Access Right Confirm New Password
Figure 2-8 User Accounts Page
2. Click . The user account is deleted, and the device is updated
To edit the User Accounts Page 1. Select a name on the User List
2. Click 3. Define the value
1. Select an entry
Managing System Logs
Figure 2-9 System Log Host Page
Index
Severity
Configuring SNTP
Stratum Stratum Stratum Stratum
Example
Time level T1 T2 T3 T4
Figure 2-10 Time Settings Page
Field Time Setting Time in HH MM SS
Time Source
Current Time
Configuring Daylight Savings Time
Figure 2-11 TimeZone Settings Page
DST Repeating Settings Sections
Field Daylight Savings Time State
Daylight Saving Time Offset in Minutes Time Zone Offsetfrom GMT
Field From Which Week of the Month From Day of Week From Month
DST Annual Settings Section
Field FromMonth FromDay FromTime ToMonth ToDay ToTime
Configuring SNMP
Parameters Authentication Privacy Key Management
Defining SNMP Views
Figure 2-12 SNMP View Table Page
Field View Name Subtree OID View Type
2. Define the View Name, Subtree OID and View Type fields
Defining SNMP Groups
Figure 2-13 SNMP Group Table Page
Field Group Name Read View Name Write View Name
Community/View TestReadView PWriteView PrivateView
Field Notify View Name Security Model Security Level
Defining SNMP Users
Auth-Protocol by Password Password Confirm Password
Figure 2-14 SNMP User Table Page
Field User Name Group Name SNMP V3 Encryption
Auth-Protocol by Key
Confirm Key
2. Define the User Name, Group Name, and SNMP V3 Encryption fields
Defining SNMP Communities
Access Rights
2. Define the Community Name, and View Name, Access Right fields
Figure 2-15 SNMP Community Table Page
Defining SNMP Host Table
To define the SNMP Host Table Page
Figure 2-16 SNMP Host Table Page
Host IP Address
SNMP Version
Community String / SNMPv3 User Name
Defining SNMP Engine ID
Field Engine ID Use Default
Figure 2-17 SNMP Engine ID Page
Enabling SNMP Traps
Figure 2-18 SNMP Configuration Trap Page
Field SNMP Traps SNMP Authentication Traps
DHCP Auto Configuration
Figure 2-19 DHCP Auto Configuration Page
Field DHCP Auto Configuration
Dual Image Services
Firmware Information
Field Unit Image Version Update Time
Figure 2-20 Firmware Information Page
Config Firmware Image
Figure 2-21 Config Firmware Image Page
Defines the image file used for reboot. The possible values are
Image
CONFIGURING L2 FEATURES
Enabling Jumbo Frames
1. Click L2 Features Jumbo Frame. The Jumbo Frame Page opens
Figure 3-1. Jumbo Frame Page
Field Jumbo Frame
Configuring VLANs
Understanding IEEE 802.1p Priority
VLAN Description
Notes about VLANs on the DGS-3100 Series
Term Untagging Ingress port Egress port
Figure 3-2. IEEE 802.1Q Packet Forwarding
802.1Q VLAN Tags
Figure 3-3. IEEE 802.1Q Tag
Figure 3-4. Adding an IEEE 802.1Q Tag
Port VLAN ID
Tagging and Untagging
Ingress Filtering
Default VLANs
VLAN and Trunk Groups
VLAN Status
Switch Ports
Defining VLAN Properties
1. Click L2 Features 802.1Q VLAN. The VLAN Configuration Page opens
Figure 3-5. VLAN Configuration Page
Field VID VLAN Name Untag VLAN Ports Tag VLAN Ports
Figure 3-6. Add/Edit VLAN Information Page
Configuring GVRP
1. Click L2 Features GVRP Settings. The GVRP Setting Page opens
Figure 3-7. GVRP Setting Page
Field GRVP Global Setting Unit From Port To Port PVID GVRP Ingress
Acceptable Frame Type
4. Define the PVID, GVRP, Ingress, and Acceptable Frame Type fields
Defining Trunking
1. Click L2 Features Trunking. The Trunking Configuration Page opens
Figure 3-8. Trunking Configuration Page
Field Unit Group ID Type Ports
Notes about Trunking on the DGS-3100 Series
Traffic Segmentation
Figure 3-9. Traffic Segmentation Page
Source Ports
Forwarding Ports
Configuring LACP
Figure 3-10. LACP Port Settings Page
Timeout
4. Define the Port-Priority and LACP Timeout fields
Defining IGMP Snooping
1. Click L2 Features IGMP Snooping. The IGMP Snooping Page opens
Leave Timer
Figure 3-11. IGMP Snooping Page
Host Timeout
Router Timeout
Static Router Port Setting Edit button
2. Click . The Static Router Ports Settings Page opens
Static Router Ports
Ports
Dynamic Router Ports
Configuring Port Mirroring
1. Click L2 Features Port Mirroring. The Port Mirroring Page opens
Figure 3-13. Port Mirroring Page
Field Status Unit Target Port Source Port
4. Define the Unit, Tx, and Rx. fields under Source Port Setting
Field None
Defines that port mirroring is not applied to the ports
2. Define the Status, Unit, and Target fields
Configuring Spanning Tree
Version Classic STP Rapid STP Multiple STP
Defining Spanning Tree Global Parameters
Figure 3-14. STP Bridge Global Settings Page
STP Status
STP Version
Bridge Priority 0
Bridge Max Age 6
Bridge Hello Time 1
Bridge Forward Delay
Defining STP Port Settings
Figure 3-15. STP Port Settings Page
Field Unit From Port To Port Cost 0=Auto
Field Edge Forwarding BPDU P2P State
Defining Multiple Spanning Tree Configuration Identification
Figure 3-16. MST Configuration Identification Page
Configuration Name
Revision Level
Defining MSTP Port Information
Figure 3-17. MSTI Config Information Page
Field Unit Port Instance ID Internal Path Cost Priority Status
Field Role
4. Define the Internal Path Cost and Priority fields
Defining Forwarding and Filtering
Defining Unicast Forwarding
Figure 3-18. Unicast Forwarding Page
Field Aging Time VID MAC Address Unit Port
Defining Multicast Forwarding
Figure 3-19. Multicast Forwarding Page
Multicast MAC Address
Egress
4. Click To restore the default settings 1. Click
The default settings are restored
The entry is deleted, and the device is updated
3. Select either all, or individual ports
CONFIGURING QUALITY OF SERVICE
Configuring 1p
Figure 4-1. Mapping QoS on the Switch
Understanding QoS
Defining Bandwidth Settings
1. Click QoS Bandwidth Control. The Bandwidth Control Page opens
Figure 4-2. Bandwidth Control Page
No Limit
Configuring Storm Control
Figure 4-3. Traffic Control Settings Page
Field Unit From Port To Port Storm Control Type State Threshold 3500
Broadcast Storm Broadcast and Multicast Storm
Mapping Ports to Packet Priorities
Figure 4-4. 802.1P Default Priority Page
2. Define the Unit, From Port, To Port, Prioirity fields
Mapping Priority to Classes Queues
Figure 4-5. 802.1P User Priority Page
Field Priority Class ID
Configuring QoS Scheduling Mechanism
Field Class ID Mechanism Weight
Figure 4-6. QoS Scheduling Mechanism Page
Defining Multi-Layer CoS Settings
Figure 4-7. Multi-Layer CoS Setting Page
SECURITY FEATURES
Configuring Safeguard Engine
1. Click Security Safeguard Engine. The Safeguard Engine Page opens
Figure 5-8. Safeguard Engine Page
Field Safeguard Engine
Configuring Trust Host
Field IP1 Access to Switch IP2 Access to Switch IP3 Access to Switch
1. Click Security Trusted Host. The Trusted Host Page opens
Figure 5-9.Trusted Host Page
Configuring Port Security
Field Unit From Port To Port Admin State Max Address0-64 Port
1. Click Security Port Security. The Port Security Page opens
Figure 5-10. Port Security Page
Configuring Guest VLANs
Field Max Learning Addr
1. Click Security Guest Vlan. The Guest VLAN Page opens
Figure 5-11 Guest VLAN Page
Configuring Port Authentication
Component Authenticators Supplicants/Clients Authentication Server
State Controlled Access Uncontrolled Access
1. Click Security 802.1X Setting. The 802.1X Setting Page opens
Figure 5-12. 802.1X Setting Page
SuppTimeout 1-65535 sec
ServerTimeout 1-65535 sec
Control
Mode
1. Click Security 802.1X Setting. The 802.1X Setting Page opens
SuppTimeout 1-65535 sec
ServerTimeout 1-65535 sec
ReAuthEnabled
Field
Description
Control
Unit
Page
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
DGS-3100 Series Gigabit Stackable Managed Switch User Manual
Defining RADIUS Settings
Figure 5-13. Authentic RADIUS Server Page
Field Succession RADIUS Server Authentic Port Accounting Port Key
Configuring Secure Socket Layer Security
1. Click Security SSL. The SSL Configuration Settings Page opens
Figure 5-14. SSL Configuration Settings Page
Field SSL Status Ciphersuite Status
Configuring Secure Shell Security
Figure 5 -15. SSH Configuration Page
Field SSH Server Status Port
Defining SSH Algorithm Settings
Figure 5-16. SSH Algorithm Settings Page
Public key
Public Key Algorithm
Data Integrity Algorithm
Defining Application Authentication Settings
Figure 5-17. Application Authentication Settings Page
Field Application Login Method List Enable Method List
Configuring Authentication Server Hosts
Figure 5-18. Authentication Server Host Page
Timeout 1-30secs
Protocol
Defining Login Methods
Figure 5-19. Login Method Lists Page
Field Method List Name Method Method
Field Method Method
Description are
Defining Enable Methods
Figure 5-20. Enable Method Lists Page
Field Method List Name Method
Field Method Method Method
Configuring Local Enable Password
Figure 5-21. Configure Local Enable Password Page
Old Local Enable Password
Provide the current network Enable password
MONITORING THE DEVICE
Viewing Stacking Information
Field Master ID Backup ID Box ID Runtime version H/W version
Figure 6-1 Stacking Information Page
Viewing CPU Utilization
1. Click Monitoring CPU Utilization. The CPU Utilization Page opens
Figure 6-2. CPU Utilization Page
Field Utilization Time Interval Record Number Show/Hide
Viewing Port Utilization
Figure 6-3. Port Utilization Page
Field Unit Port Utilization Time Interval Record Number Show/Hide
Viewing Packet Size Information
1. Click Monitoring Packet Size. The Packet Size Page opens
Figure 6-4. Packet Size Page
Field Unit Port Packet Size Analysis - Selected Port Number
Viewing Received Packet Statistics
1. Click Monitoring Packets ReceivedRX. The ReceivedRX Page opens
Figure 6-5. ReceivedRX Page
Field Unit Port Bytes Packets Time Interval Record Number Show/Hide
Viewing UMBcast Packet Statistics
1. Click Monitoring Packets UMBcastRX. The UMBcastRX Page opens
Figure 6-6. UMBcastRX Page
Field Unit Port Unicast Multicast Broadcast Time Interval
Viewing Transmitted Packet Statistics
Figure 6-7. TransmittedTX Page
Field Unit Port Bytes Packets Time Interval
Field Record Number Show/Hide
Viewing RADIUS Authenticated Session Statistics
Figure 6-8. RADIUS Authentication Page
Field Time Interval Server UDP Port Timeouts Requests Challenges
Accepts Rejects
Viewing ARP Table
Figure 6-9 Browse ARP Table Page
Field VLAN Name IP Address Total Entries MAC Address Type
Viewing Router Ports
Figure 6-10 Browse Router Port Page
Field VID Unit Port
Viewing Session Table
Figure 6-11 Browse Session Table Page
Field ID From User Privilege Name
Viewing IGMP Group Information
Figure 6-12 IGMP Snooping Group Page
Field VID VLAN Name VLAN Name Multicast Group MAC Address Port
Defining Dynamic and Static MAC Addresses
Figure 6-13 MAC Address Table Page
Field Unit Port VLAN Name MAC Address VID Type
2. Select the Stacking member in the Unit field
3. Define the Port, VLAN Name, and MAC Address fields 4. Click
To view all entries, click To clear static entries, click
To clear dynamic entries, click
Viewing System Log
1. Click Monitoring System Log. The System Log Page opens
Figure 6-14 System Log Page
Field ID Time Log Description Severity
MANAGING POWER OVER ETHERNET DEVICES
Defining PoE System Information
1. Click PoE PoE Port Setting. The PoE Port Setting Page opens
Figure 7-1 PoE Port Setting Page
PoE Enable
Indicates the power consumption is 7W
Indicates the power consumption is 15.4W
Normal - Indicates that the power supply unit is functioning
Off - Indicates that the power supply unit is not functioning
Displaying and Editing PoE System Information
1. Click PoE PoE System Setting. The PoE System Setting Page opens
Figure 7-2 PoE System Setting Page
System Power Threshold
DEFINING ACCESS PROFILE LISTS
ACL Configuration Wizard
Figure 8-1 ACL Configuration Wizard Page
Service Type
From
TCP Source Port - Matches the packet to the TCP Source Port
TCP Destination Port - Matches the packet to the TCP Destination Port
UDPAll - Specifies a UDP Packets filtering
UDP Source Port - Matches the packet to the UDP Source Port
Defining Access Profile Lists
1. Click ACL Access Profile List. The ACL Profile List Page opens
Displays the access rule
Adding ACL Profiles
Figure 8-3 Add ACL Profile Page
L2 ACL
L3 ACL
Defining Level 2 ACL
Figure 8-4 ACL Profile L2 ACL Tagged Page
To define L2 MAC Address ACL profile
Figure 8-5 ACL Profile L2 ACL Tagged MAC Address Page
Source MAC Mask
Destination MAC Mask
To define L2 802.1Q VLAN ACL profile
Figure 8-6 ACL Profile L2 ACL Tagged VLAN Page
To define L2 Ether Type ACL profile
Figure 8-7 ACL Profile L2 ACL Tagged Ether Type Page
Defining Level 3 ACL
Figure 8-8 ACL Profile L2 ACL Untagged Page
Figure 8-9 Add ACL Profile L3 Page
To define L3 IPv4 DSCP ACL profile
Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP Page
To define L3 IPv4 Address ACL profile
Figure 8-11 ACL Profile L3 ACL ICMP IPv4 Address Page
To define L3 ICMP ACL profile
Figure 8-12 ACL Profile L3 ACL ICMP Page
ICMP Type
ICMP Code
To define L3 IGMP ACL profile
Figure 8-13 ACL Profile L3 IGMP Page
Figure 8-14 ACL Profile L3 IGMP Selected Page
Figure 8-15 ACL Profile L3 TCP Page
To define L3 TCP Port ACL profile
Figure 8-16 ACL Profile L3 TCP Port Page
To define L3 TCP Flag ACL Profile
Figure 8-17 ACL Profile L3 TCP Flag Page
If L3 ACL UDP is selected, the page updates as follows
Figure 8-18 ACL Profile L3 UDP Page
Figure 8-19 ACL Profile L3 UDP Port Page
Description
Defining Access Rules Lists
Click ACL Access Profile List The Access Profile List Page opens
Figure 8-20 Access Profile List Page
Filter
1. Click . The Add Access Rule Page opens
Figure 8-21 Add Access Rule Page IP based ACL
Access ID
Source ID
3. Click . The rule is changed, and the device is updated
2. Define the Rule Detail fields
Finding ACL Rules
1. Click ACL ACL Finder The ACL Finder Page opens
Figure 8-22 ACL Finder Page
Profile ID list box
Figure 8-23 Rule Detail Page
Source MAC
Destination MAC
Ether Type
Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series
Notes about ACLs capacity in the DGS-3100 Series
Limited Lifetime Warranty for the product is defined as follows
Reorient or relocate the receiving antenna
Product Registration
LIMITED WARRANTY
Warranty Period
Product Type
What You Must Do For Warranty Service
What Is Not Covered
is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed
FCC Warning
Trademarks
Copyright Statement
TECHNICAL SUPPORT
Technical Support
Tech Support for customers within the United States
Tech Support for customers within Canada
For Customers within The United Kingdom & Ireland
For Customers within Canada
D-Link UK & Ireland Technical Support over the Internet
D-Link UK & Ireland Technical Support over the Telephone
Technische Unterstützung
Assistance technique
Support technique destiné aux clients établis en France
Support technique destiné aux clients établis au Canada
Link
Asistencia Técnica
Asistencia Técnica de D-Link por teléfono
Asistencia Técnica de D-Link a través de Internet
Supporto tecnico
Supporto tecnico per i clienti residenti in Italia
D-Link Mediterraneo S.r.L
Gli ultimi aggiornamenti e la documentazione sono
Technical Support
Tech Support for customers within the Netherlands
Tech Support for customers within Belgium
Tech Support for customers within Luxemburg
Pomoc techniczna
Technická podpora
Aktualizované verze software a uživatelských příruček najdete na
webové stránce firmy D-Link
D-Link poskytuje svým zákazníkům bezplatnou technickou podporu
Technikai Támogatás
D-Link Magyarország
Teknisk Support
Teknisk Support
D-Link Teknisk telefon Support
Du kan finne programvare oppdateringer og bruker
D-Link teknisk support på Internettet
D-Link teknisk support over telefonen
Tlf. 7026
Hverdager kl. 0800
Teknistä tukea asiakkaille Suomessa
D-Link tarjoaa teknistä tukea asiakkailleen
Tuotteen takuun voimassaoloajan Tekninen tuki palvelee seuraavasti
Arkisin klo. 9 - 21 numerosta
Teknisk Support för kunder i Sverige
På vår hemsida kan du hitta mer information om mjukvaru
uppdateringar och annan användarinformation
D-Link tillhandahåller teknisk support till kunder i Sverige
Suporte Técnico
Suporte Técnico para clientes no Portugal
Você pode encontrar atualizações de software e documentação de
Assistência Técnica
Τεχνική Υποστήριξη
Για πελάτες εντός του Ελλαδικού χώρου
Τηλεφωνική υποστήριξη D-Link
Τηλ 210 86 11 Φαξ 210 86 53 Δευτέρα-Παρασκευή
Tech Support for customers in
Australia
India
Indonesia, Malaysia, Singapore and Thailand
Technical Support
Tech Support for customers in
http//support.dlink-me.com
e-mail amostafa@dlink-me.com
Техническая поддержка
Обновления программного обеспечения и документация
доступны на Интернет-сайте D-Link
D-Link предоставляет бесплатную поддержку для клиентов
Asistencia Técnica
Suporte Técnico
Suporte Técnico para clientes no Brasil
Telefone
São Paulo +11-2185-9301 Segunda à sexta Das 8h30 às 18h30
D-Link 友訊科技 台灣分公司 技術支援資訊
電子郵件：dssqaservice@dlink.com.tw
D-Link 免付費技術諮詢專線
0800-002-615
Dukungan Teknis
Dukungan Teknis untuk pelanggan
Update perangkat lunak dan dokumentasi pengguna dapat
diperoleh pada situs web D-Link
技术支持
您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊
办公地址：北京市东城区北三环东路 36 号 环球贸易中心 B 座 26F 02-05 室 邮编
技术支持中心电话：8008296688 技术支持中心传真：02885176948
International Offices
Product installed in type of computer
Registration Card All Countries and Regions Excluding USA
Product Model
Product Serial No
