L2 Features | D-Link DGS-3700 manual

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
DDM Bias Current Threshold Settings	63
DDM Tx Power Threshold Settings	64
DDM Rx Power Threshold Settings	64
L2 Features	66
Jumbo Frame	66
VLANs	67
Understanding IEEE 802.1p Priority	67
VLAN Description	67
IEEE 802.1Q VLANs	68
Double VLANs	72
802.1Q VLAN	74
Subnet VLAN	78
Subnet VLAN Settings	78
VLAN Precedence Settings	78
Q-in-Q	79
Q-in-Q Settings	79
VLAN Translation Settings	80
Q-in-Q and VLAN Translation Rules	81
802.1v Protocol VLAN	82
802.1v Protocol Group Settings	82
802.1v Protocol VLAN Settings	83
RSPAN Settings	84
GVRP Settings	84
GVRP Global Settings	85
MAC-based VLAN Settings	86
PVID Auto Assign Settings	86
Port Trunking	87
LACP Port Settings	89
Traffic Segmentation	90
BPDU Tunneling Settings	91
IGMP Snooping	92
IGMP Snooping Settings	92
IGMP Snooping Rate Limit Settings	94
IGMP Snooping Static Group Settings	94
IGMP Multicast Group Profile Settings	95
IGMP Snooping Multicast VLAN Settings	95
IPv4 Multicast Profile Settings	96
IPv4 Limited Multicast Range Settings	97
IPv4 Max Multicast Group Settings	97
MLD Snooping	98
MLD Snooping Settings	98
MLD Snooping Rate Limit Settings	100
MLD Snooping Static Group Settings	101
MLD Multicast Group Profile Settings	101
v

Image 5

D-Link DGS-3700 user manual L2 Features

Contents

Copyright 2009. All rights reserved Page Table of Contents DDM L2 Features QoS Security ACL Save Services and Tools 258 Preface Typographical Conventions Intended Readers Introduction Login to Web Manager Areas of the User Interface Web-based User Interface Area Function Web PagesArea Page Configuration System Information Device Information Fields that can be configured are described below Serial Port SettingsParameter Description Baud Rate Auto Logout IP Address IP Address Settings window Dhcp Bootp Setting the Swith’s IP Address using the Console Interface Interface Settings IPv6 Network Parameter Description Interface NameAddress IPv6 State Automatic Link Local Address IPv6 Route SettingsIPv6 Neighbor Settings Port Settings Port ConfigurationNeighbor IPv6 Address Link Layer MAC Port Description Port Error Disabled Static ARP Settings User Accounts New Password Admin, Operator and User PrivilegesPassword Management Admin Operator User User Account Management Admin, Operator and User Privileges System Log Server System Log ConfigurationSystem Log Settings Server IP Address Parameter Description Server IDUDP Port 514 or Severity Severity Level System Severity SettingsParameter Description System Severity Dhcp Relay Dhcp Relay Global Settings Information Option Dhcp Relay AgentCheck Policy Remote ID sub-option format Implementation of Dhcp Information Option 82 on the SwitchCircuit ID sub-option format Dhcp Relay Option 60 Default Settings Dhcp Relay Interface SettingsParameter Description Relay IP Address Mode Dhcp Relay Option 61 Default Settings Dhcp Relay Option 60 Settings Dhcp Relay Option 61 Settings Out of Band Management SettingsParameter Description Client ID Relay Rule Dhcp Auto Configuration Settings External Alarm SettingsParameter Description IP Address Link Status MAC Address Aging Time Web SettingsTelnet Settings Clipaging Settings Password EncryptionFirmware Information Parameter Description Update Time Dual Configuration SettingsVersion Size Bytes Ping Test Timeout Local Loopback Ports SettingsIPv6 Ping Test Size Vlan Counter Settings Time Settings Sntp Settings Hhmm TimeZone Settings MAC Notification Global Settings MAC Notification Settings ParameterDescription MAC Notification Port Settings MIBs Snmp SettingsTraps Snmp View Table Snmp Global State SettingsParameter Description View Name Subtree OID Snmp Group Table Snmp User Table Parameter Description Community Name Snmp Community Table Snmp v6Host Table Snmp Host Table Community Snmp Engine IDString/SNMPv3 User Name Snmp Trap Configuration Time Range SettingsParameter Description Range Name Hours SFlow Analyzer Server Settings SFlow Global State SettingsSFlow ParameterDescription Analyzer Server ID SFlow Flow Sampler Settings Following parameters can be configured SFlow Counter Poller Settings Single IP Management Upgrade to Single IP Settings Topology Remote Port Parameter Description Device NameSpeed Local Port Icon Description 62 Topology view 63 Device Information Utilizing the Tool Tip Tool Tips Group Icon Right-Click Candidate Switch Icon Commander Switch IconMember Switch Icon Menu Bar Configuration File Backup/Restore Firmware Upgrade Browse DDM Status List DDM SettingsUpload Log File DDM Temperature Threshold Settings DDM Bias Current Threshold Settings DDM Voltage Threshold Settings DDM Rx Power Threshold Settings DDM Tx Power Threshold Settings Parameter Description From Port / To Port Jumbo Frame window Jumbo Frame Vlan Description VLANsUnderstanding Ieee 802.1p Priority Ieee 802.1Q Packet Forwarding Ieee 802.1Q VLANs Ieee 802.1Q Tag 802.1Q Vlan Tags Ingress Filtering Port Vlan IDTagging and Untagging Port-based VLANs Default VLANsVlan Segmentation VID Vlan and Trunk Groups Double VLANsDestination Source Spvlan Tpid + Double Vlan Example Regulations for Double VLANs Current 802.1Q Static VLANs Entries window 802.1Q Vlan 802.1Q Vlan window Add/Edit Vlan Tab Advertisement Port SettingsTagged Untagged 10 802.1Q Vlan window Vlan Batch Settings window Vlan Precedence Settings Subnet Vlan SettingsSubnet Vlan Vlan ID Vlan Precedence In-Q SettingsIn-Q Vlan Translation Settings For ingress tagged packets at UNI ports In-Q and Vlan Translation RulesFor ingress untagged packets at UNI ports 802.1v Protocol Vlan 802.1v Protocol Group Settings 802.1p Priority 802.1v Protocol Vlan SettingsCheck the Select All Ports box Search Port List Gvrp Settings Rspan Settings Pvid Gvrp Global SettingsGvrp Pvid Auto Assign Settings MAC-based Vlan SettingsLeave All Time NNI Bpdu Understanding Port Trunk Groups Port Trunking Master Port Parameter Description AlgorithmActive Port Member Ports Activity Lacp Port Settings Forward Portlist Traffic Segmentation 27 Bpdu Tunneling window Bpdu Tunneling Settings Igmp Snooping Igmp Snooping SettingsRate Limit Querier IP Max Response Time Query IntervalRobustness Value 255 Igmp Snooping Static Group Settings Igmp Snooping Rate Limit Settings Following fields can be set Igmp Multicast Group Profile SettingsIgmp Snooping Multicast Vlan Settings IPv4 Multicast Profile Settings IPv4 Max Multicast Group Settings IPv4 Limited Multicast Range Settings MLD Control Messages MLD Snooping SettingsMLD Snooping Query Interval 1-65535 sec Query Expiry TimeMax Response Time 25 sec 43 MLD Snooping Router IP Settings Modify window MLD Snooping Rate Limit Settings IPv6 Address MLD Snooping Static Group SettingsMLD Multicast Group Profile Settings 1,6 MLD Snooping Multicast Vlan Settings1,6 Source Port Tagged Member Port e.g.1-4,6 IPv6 Multicast Profile Settings IPv6 Max Multicast Group Settings IPv6 Limited Multicast Range Settings 55 Port Mirror window Port Mirror Recover Time Loopback Detection SettingsParameter Description LBD State Trap Status 802.1w Rapid Spanning Tree Spanning TreePort Transition States Edge Port 802.1D and 802.1w Compatibility P2P Port STP Bridge Global Settings NNI Bpdu Address Max Hops External Cost 0=Auto STP Port Settings P2P MST Configuration Identification Parameter Description Configuration Name STP Instance SettingsRevision Level Msti ID Instance ID Mstp Port InformationInternal Path cost 200000000 Multicast Forwarding Forwarding & FilteringUnicast Forwarding Multicast MAC Multicast Filtering Mode Lldp Global Settings Admin Status Lldp Port SettingsParameter Description From Port /To Port Notification Parameter Description Address Lldp Basic TLVs SettingsLldp Management Address List Vlan Lldp Dot1 TLVs Settings MAC/PHY Lldp Dot3 TLVs SettingsLldp Statistics System 72 Lldp Statistics System window Lldp Local Port Information Lldp Remote Port Information CFM Port Settings CFM Mipccm List CFM CCM PDUs Forwarding ModeCFM MPs Reply LTRs Connectivity Fault Management CreateMD Connectivity Fault Management SettingsConnectivity Fault Management SettingsMD Parameter Description CFM State MIP CFM Loopback SettingsMEP LBM CFM Linktrace Settings Ethernet OAM Ethernet OAM SettingsRemote Loopback Received Remote Ethernet OAM Configuration Settings Advantages of QoS QoS Understanding QoS Mapping QoS on the SwitchPage No Limit HOL Blocking PeventionBandwidth Control Traffic Control window Traffic Control Settings Traffic Trap Setting Traffice TrapCount Down Time Interval 802.1p Default Priority window 802.1p Default Priority QoS Scheduling Mechanism 802.1p User Priority Mechanism QoS SchedulingScheduling Class ID Band Manage Settings Band Manage Settings Sred Settings Click Apply to implement changes 141 Sred Drop Counter Dscp Trust SettingsDscp Map Settings Dscp List0-63 Dscp Map Color 802.1p Map SettingsPriority List0-7 Security Safeguard Engine Safeguard Engine window IP-MAC-Port Binding IMP Binding Global SettingsTrusted Host Parameter ACL Mode Trap / Log Dhcp Snoop State IMP Binding Port Settings Forward Dhcp Allow Zero IPPacket Max Entry Ports IMP Binding Entry Settings Port Security Port Security Port SettingsDhcp Snooping Entries MAC Block List Admin State Port Security Vlan SettingsLock Address Max. Learning Port Security Entries Dhcp Server Screening SettingsVlan ID e.g.1,4-6 Max Learning ParameterDescription Server IP Address Dhcp Screening Port SettingsDhcp Offer Filtering Authentication Server 802.1X Port-Based and Host-Based Access Control802.1X Client’s MAC Address 16 The Authentication Server Authenticator Client Authentication Process 20 Example of Typical Port-Based Configuration Port-Based Network Access Control 21 Example of Typical Host-Based Configuration Host-Based Network Access Control PDU 802.1X Global Settings802.1X Port Settings ServerTimeout SuppTimeoutReAuthentication QuietPeriod 802.1X User Authentication Radius Server Confirm Key Reauthenticate PortsInitialize Ports Limitations Using the Guest Vlan Guest Vlan Configuration Guest Vlan SSL Settings Ciphersuite Download Certificate EDE CBC SHA CBC SHA SSH Settings SSH Authmode and Algorithm Settings HMAC-SHA1 SSH User Authentication ListsHMAC-MD5 HMAC-RSA Host Name Access Authentication ControlPage Application Authentication Settings Authentication Policy Settings 37 Authentication Server Group Settings window Authentication Server Group 38 Authentication Server Group Settings Edit window Authentication Server Login Method Lists Priority 1, 2, 3 Enable Method ListsParameterDescription Method List Name 41 Enable Method List window Local Enable Password Settings 42 Local Enable Password window Radius Accounting Settings MAC-based Access Control Settings MAC-based Access Control Method Parameter Description Settings MBA Global StateGuest Vlan Name Guest Vlan ID Hold Time MAC-based Access Control Local Settings Web Authentication ParameterDescription State Web-based Access Control SettingsConditions and Limitations Logout Timer Web-based Access Control User Settings1440 Authentication Redirection Confirmation NetBIOS FilteringNetBIOS Filtering Settings ParameterDescription Type ACL Configuration WizardAccess ID Apply To Access Profile ListOption Add Access Profile Ethernet Source MAC Mask Parameter Description Ethernet ACLDestination MAC Mask Select ACL Type Ethernet Type Access Profile List Ethernet Vlan Mask Parameter Description Access IDReplace Priority Replace Dscp Time Range PrecedenceRx Rate Counter Source IP Mask DscpDestination IP Mask Icmp Type 11 Access Profile List IPv4 12 Access Profile Details IPv4 Time Range Name Icmp IPv6 Flow Label Parameter Description IPv6 ClassIPv6 TCP IPv6 UDP 17 Access Profile List IPv6 Flow Label Class 20 Access Rule List IPv6 Parameter Description Chunk 22 Add Packet Content ACL Profile 23 Access Profile List Packet Content 25 Access Profile Packet Content CPU Interface Filtering 26 Access Rule List Packet Content 28 CPU Access Profile List window CPU Access Profile List Mask 802.1Q Vlan Source MACMask Destination MAC IPv4 Dscp Parameter Description Select Profile ID 209 33 Add CPU ACL Profile window for IPv6 Offset Parameter Description Select ProfileSelect ACL 37 CPU Access Rule List window for Ethernet 39 CPU Access Rule Detail Information window for Ethernet 40 CPU Access Rule List window for IP 42 CPU Access Rule Detail Information window for IP 45 CPU Access Rule Detail Information window for IPv6 ACL Flow Meter ACL Finder 50 ACL Flow Meter window Mode Device Status Cable Diagnostic Parameter Description Time Interval CPU UtilizationRecord Number Show/Hide Packet Size Port Utilization Packet Size window Received RX Memory UtilizationPackets Received RX window for Bytes and Packets UMBcast RX Transmitted TX 12 Transmitted TX window for Bytes and Packets Bytes 14 Received RX window for errors Errors Symbol CRCErrorUnderSize OverSize ExDefer 16 Transmitted TX window for errors Radius Authentication Port Access Control Radius Account Client Requests ServerAddressRetransmissions Responses Parameter Description MAC Address Authenticator StateAuth PAE State Backend State 22 Authenticator Statistics window for MAC-based Authenticator Statistics Authenticator Session Statistics Authenticator Diagnostics Connect Enter Auth TimeoutConnect LogOff Auth Enter Browse ARP Table 27 Browse ARP Table window Browse Vlan Igmp Snooping Group Show Vlan PortsBrowse Igmp Router Port Browse Igmp Snooping Counter Igmp Snooping Forwarding Table MLD Snooping Group Browse MLD Router Port 35 MLD Snooping Group window MLD Snooping Forwarding Table CFM Packet Counter List Browse Session TableBrowse MLD Snooping Counter Browse CFM Port MP List Browse CFM Fault MEPCFM Packet Counter CCM List Functions used in the MAC address table are described below MAC Address TableBrowse Vlan Counter Statistics Browse Ethernet OAM Statistics Browse Ethernet OAM Event Log 46 Browse Ethernet OAM Statistics window Historical Counter & Utilization Packet/ErrorBrowse Historical Counter Minutes/1 Day Browse Historical Utilization System Log Log Text Parameter Description Log TypeDate-Time Save Configuration ID 1 window Save Configuration ID Save All Save Log Upload Log File Configuration File Backup & RestoreReset Download Firmware Reboot System ARP FCS ARP Forwarding Table Ethernet frame format Port2 00-20-5C-01-22-22 Destination address Source address Ether-type How ARP spoofing attacks a network Ethernet Gratuitous ARP Example topology Prevent ARP spoofing via packet content ACL Offset Chunk Ethernet 266 Category Event Description Log Information Severity System Log Entries SSL AAA Page Page Page IP-MAC DOS DDM Trap Name/OID Variable Bind Format MIB Name Severity DGS-3700 Series Trap ListProprietary Trap List Equipment Glossary Page Command Parameters Password Recovery Procedure Command Parameters