Manuals
/
D-Link
/
Computer Equipment
/
Switch
D-Link
DGS-3700
user manual
266
Models:
DGS-3700
1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
292
Download
292 pages
32.73 Kb
272
273
274
275
276
277
278
279
280
281
External Alarm Settings
Password
Port Error Disabled
Logout Timer
Symbol
Login
Admin Status
Configuration
Reset
Cable Diagnostic
Page 277
Image 277
DGS-3700-12/DGS-3700-12G
Series Layer 2 Gigabit Ethernet Switch User Manual
266
Page 276
Page 278
Page 277
Image 277
Page 276
Page 278
Contents
Copyright 2009. All rights reserved
Page
Table of Contents
DDM
L2 Features
QoS
Security
ACL
Save Services and Tools
258
Preface
Typographical Conventions
Intended Readers
Introduction
Login to Web Manager
Areas of the User Interface
Web-based User Interface
Area
Web Pages
Area Function
Page
Configuration
System Information
Device Information
Fields that can be configured are described below
Serial Port Settings
Parameter Description Baud Rate
Auto Logout
IP Address
IP Address Settings window
Dhcp
Bootp
Setting the Swith’s IP Address using the Console Interface
Interface Settings
IPv6 Network
Parameter Description Interface Name
Address
IPv6 State
IPv6 Neighbor Settings
IPv6 Route Settings
Automatic Link Local Address
Port Settings
Port Configuration
Neighbor IPv6
Address Link Layer MAC
Port Description
Port Error Disabled
Static ARP Settings
User Accounts
New Password
Admin, Operator and User Privileges
Password
Management Admin Operator User
User Account Management
Admin, Operator and User Privileges
System Log Settings
System Log Configuration
System Log Server
Server IP Address
Parameter Description Server ID
UDP Port
514 or Severity
Parameter Description System Severity
System Severity Settings
Severity Level
Dhcp Relay
Dhcp Relay Global Settings
Information Option
Dhcp Relay Agent
Check
Policy
Circuit ID sub-option format
Implementation of Dhcp Information Option 82 on the Switch
Remote ID sub-option format
Dhcp Relay Option 60 Default Settings
Dhcp Relay Interface Settings
Parameter Description Relay IP Address
Mode
Dhcp Relay Option 61 Default Settings
Dhcp Relay Option 60 Settings
Dhcp Relay Option 61 Settings
Out of Band Management Settings
Parameter Description Client ID
Relay Rule
Dhcp Auto Configuration Settings
External Alarm Settings
Parameter Description IP Address
Link Status
Telnet Settings
Web Settings
MAC Address Aging Time
Clipaging Settings
Password Encryption
Firmware Information
Parameter Description
Update Time
Dual Configuration Settings
Version
Size Bytes
Ping Test
Timeout
Local Loopback Ports Settings
IPv6 Ping Test
Size
Vlan Counter Settings
Time Settings
Sntp Settings
Hhmm
TimeZone Settings
MAC Notification Global Settings
MAC Notification Settings
ParameterDescription
MAC Notification Port Settings
Traps
Snmp Settings
MIBs
Snmp View Table
Snmp Global State Settings
Parameter Description View Name
Subtree OID
Snmp Group Table
Snmp User Table
Parameter Description Community Name
Snmp Community Table
Snmp v6Host Table
Snmp Host Table
Community
Snmp Engine ID
String/SNMPv3 User
Name
Snmp Trap Configuration
Time Range Settings
Parameter Description Range Name
Hours
SFlow Analyzer Server Settings
SFlow Global State Settings
SFlow
ParameterDescription Analyzer Server ID
SFlow Flow Sampler Settings
Following parameters can be configured
SFlow Counter Poller Settings
Single IP Management
Upgrade to
Single IP Settings
Topology
Remote Port
Parameter Description Device Name
Speed
Local Port
Icon Description
62 Topology view
63 Device Information Utilizing the Tool Tip
Tool Tips
Group Icon
Right-Click
Member Switch Icon
Commander Switch Icon
Candidate Switch Icon
Menu Bar
Configuration File Backup/Restore
Firmware Upgrade
Upload Log File
DDM Settings
Browse DDM Status List
DDM Temperature Threshold Settings
DDM Bias Current Threshold Settings
DDM Voltage Threshold Settings
DDM Rx Power Threshold Settings
DDM Tx Power Threshold Settings
Parameter Description From Port / To Port
Jumbo Frame window
Jumbo Frame
Understanding Ieee 802.1p Priority
VLANs
Vlan Description
Ieee 802.1Q Packet Forwarding
Ieee 802.1Q VLANs
Ieee 802.1Q Tag
802.1Q Vlan Tags
Tagging and Untagging
Port Vlan ID
Ingress Filtering
Port-based VLANs
Default VLANs
Vlan Segmentation
VID
Vlan and Trunk Groups
Double VLANs
Destination Source
Spvlan Tpid +
Double Vlan Example
Regulations for Double VLANs
Current 802.1Q Static VLANs Entries window
802.1Q Vlan
802.1Q Vlan window Add/Edit Vlan Tab
Advertisement
Port Settings
Tagged
Untagged
10 802.1Q Vlan window Vlan Batch Settings window
Vlan Precedence Settings
Subnet Vlan Settings
Subnet Vlan
Vlan ID
In-Q
In-Q Settings
Vlan Precedence
Vlan Translation Settings
For ingress untagged packets at UNI ports
In-Q and Vlan Translation Rules
For ingress tagged packets at UNI ports
802.1v Protocol Vlan
802.1v Protocol Group Settings
802.1p Priority
802.1v Protocol Vlan Settings
Check the Select All Ports box
Search Port List
Gvrp Settings
Rspan Settings
Gvrp
Gvrp Global Settings
Pvid
Pvid Auto Assign Settings
MAC-based Vlan Settings
Leave All Time
NNI Bpdu
Understanding Port Trunk Groups
Port Trunking
Master Port
Parameter Description Algorithm
Active Port
Member Ports
Activity
Lacp Port Settings
Forward Portlist
Traffic Segmentation
27 Bpdu Tunneling window
Bpdu Tunneling Settings
Igmp Snooping
Igmp Snooping Settings
Rate Limit
Querier IP
Max Response
Time Query Interval
Robustness Value
255
Igmp Snooping Static Group Settings
Igmp Snooping Rate Limit Settings
Igmp Snooping Multicast Vlan Settings
Igmp Multicast Group Profile Settings
Following fields can be set
IPv4 Multicast Profile Settings
IPv4 Max Multicast Group Settings
IPv4 Limited Multicast Range Settings
MLD Snooping
MLD Snooping Settings
MLD Control Messages
Query Interval 1-65535 sec
Query Expiry Time
Max Response Time
25 sec
43 MLD Snooping Router IP Settings Modify window
MLD Snooping Rate Limit Settings
MLD Multicast Group Profile Settings
MLD Snooping Static Group Settings
IPv6 Address
1,6 Source Port
MLD Snooping Multicast Vlan Settings
1,6
Tagged Member Port e.g.1-4,6
IPv6 Multicast Profile Settings
IPv6 Max Multicast Group Settings
IPv6 Limited Multicast Range Settings
55 Port Mirror window
Port Mirror
Recover Time
Loopback Detection Settings
Parameter Description LBD State
Trap Status
802.1w Rapid Spanning Tree
Spanning Tree
Port Transition States
Edge Port
802.1D and 802.1w Compatibility
P2P Port
STP Bridge Global Settings
NNI Bpdu Address
Max Hops
External Cost 0=Auto
STP Port Settings
P2P
MST Configuration Identification
Parameter Description Configuration Name
STP Instance Settings
Revision Level
Msti ID
Instance ID
Mstp Port Information
Internal Path cost
200000000
Unicast Forwarding
Forwarding & Filtering
Multicast Forwarding
Multicast MAC
Multicast Filtering Mode
Lldp Global Settings
Admin Status
Lldp Port Settings
Parameter Description From Port /To Port
Notification
Lldp Management Address List
Lldp Basic TLVs Settings
Parameter Description Address
Vlan
Lldp Dot1 TLVs Settings
Lldp Statistics System
Lldp Dot3 TLVs Settings
MAC/PHY
72 Lldp Statistics System window
Lldp Local Port Information
Lldp Remote Port Information
CFM Port Settings
CFM MPs Reply LTRs
CFM CCM PDUs Forwarding Mode
CFM Mipccm List
Connectivity Fault Management CreateMD
Connectivity Fault Management Settings
Connectivity Fault Management SettingsMD
Parameter Description CFM State
MIP
CFM Loopback Settings
MEP
LBM
CFM Linktrace Settings
Ethernet OAM
Ethernet OAM Settings
Remote Loopback
Received Remote
Ethernet OAM Configuration Settings
Advantages of QoS
QoS
Understanding QoS
Mapping QoS on the Switch
Page
Bandwidth Control
HOL Blocking Pevention
No Limit
Traffic Control window
Traffic Control
Settings
Traffic Trap Setting Traffice Trap
Count Down
Time Interval
802.1p Default Priority window
802.1p Default Priority
QoS Scheduling Mechanism
802.1p User Priority
Scheduling
QoS Scheduling
Mechanism
Class ID
Band Manage Settings
Band Manage Settings
Sred Settings
Click Apply to implement changes 141
Dscp Map Settings
Dscp Trust Settings
Sred Drop Counter
Dscp List0-63
Dscp Map
Priority List0-7
802.1p Map Settings
Color
Security
Safeguard Engine
Safeguard Engine window
Trusted Host
IMP Binding Global Settings
IP-MAC-Port Binding
Parameter ACL Mode Trap / Log Dhcp Snoop State
IMP Binding Port Settings
Forward Dhcp
Allow Zero IP
Packet
Max Entry
Ports
IMP Binding Entry Settings
Port Security
Port Security Port Settings
Dhcp Snooping Entries
MAC Block List
Admin State
Port Security Vlan Settings
Lock Address
Max. Learning
Port Security Entries
Dhcp Server Screening Settings
Vlan ID e.g.1,4-6
Max Learning
Dhcp Offer Filtering
Dhcp Screening Port Settings
ParameterDescription Server IP Address
Authentication Server
802.1X Port-Based and Host-Based Access Control
802.1X
Client’s MAC Address
16 The Authentication Server
Authenticator
Client
Authentication Process
20 Example of Typical Port-Based Configuration
Port-Based Network Access Control
21 Example of Typical Host-Based Configuration
Host-Based Network Access Control
802.1X Port Settings
802.1X Global Settings
PDU
ServerTimeout
SuppTimeout
ReAuthentication
QuietPeriod
802.1X User
Authentication Radius Server
Initialize Ports
Reauthenticate Ports
Confirm Key
Limitations Using the Guest Vlan
Guest Vlan Configuration
Guest Vlan
SSL Settings
Ciphersuite
Download Certificate
EDE CBC SHA
CBC SHA
SSH Settings
SSH Authmode and Algorithm Settings
HMAC-SHA1
SSH User Authentication Lists
HMAC-MD5
HMAC-RSA
Host Name
Access Authentication Control
Page
Application Authentication Settings
Authentication Policy Settings
37 Authentication Server Group Settings window
Authentication Server Group
38 Authentication Server Group Settings Edit window
Authentication Server
Login Method Lists
ParameterDescription Method List Name
Enable Method Lists
Priority 1, 2, 3
41 Enable Method List window
Local Enable Password Settings
42 Local Enable Password window
Radius Accounting Settings
MAC-based Access Control Settings
MAC-based Access Control
Method
Parameter Description Settings MBA Global State
Guest Vlan Name
Guest Vlan ID
Hold Time
MAC-based Access Control Local Settings
Web Authentication
Conditions and Limitations
Web-based Access Control Settings
ParameterDescription State
Logout Timer
Web-based Access Control User Settings
1440 Authentication
Redirection
NetBIOS Filtering Settings
NetBIOS Filtering
Confirmation
Access ID
ACL Configuration Wizard
ParameterDescription Type
Option
Access Profile List
Apply To
Add Access Profile Ethernet
Source MAC Mask
Parameter Description Ethernet ACL
Destination MAC
Mask Select ACL Type
Ethernet Type
Access Profile List Ethernet
Vlan Mask
Parameter Description Access ID
Replace Priority
Replace Dscp
Time Range
Precedence
Rx Rate
Counter
Source IP Mask
Dscp
Destination IP Mask
Icmp Type
11 Access Profile List IPv4
12 Access Profile Details IPv4
Time Range Name
Icmp
IPv6 Flow Label
Parameter Description IPv6 Class
IPv6 TCP
IPv6 UDP
17 Access Profile List IPv6
Flow Label
Class
20 Access Rule List IPv6
Parameter Description Chunk
22 Add Packet Content ACL Profile
23 Access Profile List Packet Content
25 Access Profile Packet Content
CPU Interface Filtering
26 Access Rule List Packet Content
28 CPU Access Profile List window
CPU Access Profile List
Mask Destination MAC
Source MAC
Mask 802.1Q Vlan
IPv4 Dscp
Parameter Description Select Profile ID
209
33 Add CPU ACL Profile window for IPv6
Select ACL
Parameter Description Select Profile
Offset
37 CPU Access Rule List window for Ethernet
39 CPU Access Rule Detail Information window for Ethernet
40 CPU Access Rule List window for IP
42 CPU Access Rule Detail Information window for IP
45 CPU Access Rule Detail Information window for IPv6
ACL Flow Meter
ACL Finder
50 ACL Flow Meter window
Mode
Device Status
Cable Diagnostic
Parameter Description Time Interval
CPU Utilization
Record Number
Show/Hide
Packet Size
Port Utilization
Packet Size window
Packets
Memory Utilization
Received RX
Received RX window for Bytes and Packets
UMBcast RX
Transmitted TX
12 Transmitted TX window for Bytes and Packets
Bytes
14 Received RX window for errors
Errors
Symbol
CRCError
UnderSize
OverSize
ExDefer
16 Transmitted TX window for errors
Radius Authentication
Port Access Control
Radius Account Client
Requests
ServerAddress
Retransmissions
Responses
Parameter Description MAC Address
Authenticator State
Auth PAE State
Backend State
22 Authenticator Statistics window for MAC-based
Authenticator Statistics
Authenticator Session Statistics
Authenticator Diagnostics
Connect Enter
Auth Timeout
Connect LogOff
Auth Enter
Browse ARP Table
27 Browse ARP Table window
Browse Vlan
Browse Igmp Router Port
Show Vlan Ports
Igmp Snooping Group
Browse Igmp Snooping Counter
Igmp Snooping Forwarding Table
MLD Snooping Group
Browse MLD Router Port
35 MLD Snooping Group window
MLD Snooping Forwarding Table
Browse MLD Snooping Counter
Browse Session Table
CFM Packet Counter List
CFM Packet Counter CCM List
Browse CFM Fault MEP
Browse CFM Port MP List
Browse Vlan Counter Statistics
MAC Address Table
Functions used in the MAC address table are described below
Browse Ethernet OAM Statistics
Browse Ethernet OAM Event Log
46 Browse Ethernet OAM Statistics window
Historical Counter & Utilization
Packet/Error
Browse Historical Counter
Minutes/1 Day
Browse Historical Utilization
System Log
Date-Time
Parameter Description Log Type
Log Text
Save Configuration ID 1 window
Save Configuration ID
Save All
Save Log
Reset
Configuration File Backup & Restore
Upload Log File
Download Firmware
Reboot System
ARP FCS
ARP
Forwarding Table
Ethernet frame format
Port2 00-20-5C-01-22-22
Destination address Source address Ether-type
How ARP spoofing attacks a network
Ethernet Gratuitous ARP
Example topology
Prevent ARP spoofing via packet content ACL
Offset Chunk
Ethernet
266
Category Event Description Log Information Severity
System Log Entries
SSL
AAA
Page
Page
Page
IP-MAC
DOS
DDM
Proprietary Trap List
DGS-3700 Series Trap List
Trap Name/OID Variable Bind Format MIB Name Severity
Equipment
Glossary
Page
Command Parameters
Password Recovery Procedure
Command Parameters
Top
Page
Image
Contents