Acl | D-Link DGS-3700 specs

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
SSH Authmode and Algorithm Settings	169
SSH User Authentication Lists	170
Access Authentication Control	171
Authentication Policy Settings	173
Application Authentication Settings	173
Authentication Server Group	174
Authentication Server	175
Login Method Lists	176
Enable Method Lists	177
Local Enable Password Settings	178
RADIUS Accounting Settings	179
MAC-based Access Control	180
Notes About MAC-based Access Control	180
MAC-based Access Control Settings	180
MAC-based Access Control Local Settings	182
Web Authentication	183
Conditions and Limitations	184
Web-based Access Control Settings	184
Web-based Access Control User Settings	185
NetBIOS Filtering	186
NetBIOS Filtering Settings	186
ACL	187
ACL Configuration Wizard	187
Access Profile List	188
CPU Interface Filtering	205
CPU Access Profile List	206
ACL Finder	217
ACL Flow Meter	217
Monitoring	220
Device Status	220
Cable Diagnostic	220
CPU Utilization	221
Port Utilization	222
Packet Size	222
Memory Utilization	224
Packets	224
Received (RX)	224
UMB_cast (RX)	226
Transmitted (TX)	227
Errors	230
Received (RX)	230
Transmitted (TX)	231
Port Access Control	233
viii

Image 8

D-Link DGS-3700 user manual Acl

Contents

Copyright 2009. All rights reserved Page Table of Contents DDM L2 Features QoS Security ACL Save Services and Tools 258 Preface Intended Readers Typographical Conventions Login to Web Manager Introduction Web-based User Interface Areas of the User Interface Area Function Web PagesArea Page Configuration Device Information System Information Serial Port Settings Fields that can be configured are described belowParameter Description Baud Rate Auto Logout IP Address Settings window IP Address Bootp Dhcp Interface Settings Setting the Swith’s IP Address using the Console Interface Parameter Description Interface Name IPv6 NetworkAddress IPv6 State Automatic Link Local Address IPv6 Route SettingsIPv6 Neighbor Settings Port Configuration Port SettingsNeighbor IPv6 Address Link Layer MAC Port Description Static ARP Settings Port Error Disabled User Accounts Admin, Operator and User Privileges New PasswordPassword Management Admin Operator User Admin, Operator and User Privileges User Account Management System Log Server System Log ConfigurationSystem Log Settings Parameter Description Server ID Server IP AddressUDP Port 514 or Severity Severity Level System Severity SettingsParameter Description System Severity Dhcp Relay Global Settings Dhcp Relay Dhcp Relay Agent Information OptionCheck Policy Remote ID sub-option format Implementation of Dhcp Information Option 82 on the SwitchCircuit ID sub-option format Dhcp Relay Interface Settings Dhcp Relay Option 60 Default SettingsParameter Description Relay IP Address Mode Dhcp Relay Option 60 Settings Dhcp Relay Option 61 Default Settings Out of Band Management Settings Dhcp Relay Option 61 SettingsParameter Description Client ID Relay Rule External Alarm Settings Dhcp Auto Configuration SettingsParameter Description IP Address Link Status MAC Address Aging Time Web SettingsTelnet Settings Password Encryption Clipaging SettingsFirmware Information Parameter Description Dual Configuration Settings Update TimeVersion Size Bytes Ping Test Local Loopback Ports Settings TimeoutIPv6 Ping Test Size Vlan Counter Settings Sntp Settings Time Settings TimeZone Settings Hhmm MAC Notification Settings MAC Notification Global Settings MAC Notification Port Settings ParameterDescription MIBs Snmp SettingsTraps Snmp Global State Settings Snmp View TableParameter Description View Name Subtree OID Snmp Group Table Snmp User Table Snmp Community Table Parameter Description Community Name Snmp Host Table Snmp v6Host Table Snmp Engine ID CommunityString/SNMPv3 User Name Time Range Settings Snmp Trap ConfigurationParameter Description Range Name Hours SFlow Global State Settings SFlow Analyzer Server SettingsSFlow ParameterDescription Analyzer Server ID SFlow Flow Sampler Settings SFlow Counter Poller Settings Following parameters can be configured Single IP Management Single IP Settings Upgrade to Topology Parameter Description Device Name Remote PortSpeed Local Port 62 Topology view Icon Description Tool Tips 63 Device Information Utilizing the Tool Tip Right-Click Group Icon Candidate Switch Icon Commander Switch IconMember Switch Icon Menu Bar Firmware Upgrade Configuration File Backup/Restore Browse DDM Status List DDM SettingsUpload Log File DDM Temperature Threshold Settings DDM Voltage Threshold Settings DDM Bias Current Threshold Settings DDM Tx Power Threshold Settings DDM Rx Power Threshold Settings Parameter Description From Port / To Port Jumbo Frame Jumbo Frame window Vlan Description VLANsUnderstanding Ieee 802.1p Priority Ieee 802.1Q VLANs Ieee 802.1Q Packet Forwarding 802.1Q Vlan Tags Ieee 802.1Q Tag Ingress Filtering Port Vlan IDTagging and Untagging Default VLANs Port-based VLANsVlan Segmentation VID Double VLANs Vlan and Trunk GroupsDestination Source Spvlan Tpid + Regulations for Double VLANs Double Vlan Example 802.1Q Vlan Current 802.1Q Static VLANs Entries window 802.1Q Vlan window Add/Edit Vlan Tab Port Settings AdvertisementTagged Untagged 10 802.1Q Vlan window Vlan Batch Settings window Subnet Vlan Settings Vlan Precedence SettingsSubnet Vlan Vlan ID Vlan Precedence In-Q SettingsIn-Q Vlan Translation Settings For ingress tagged packets at UNI ports In-Q and Vlan Translation RulesFor ingress untagged packets at UNI ports 802.1v Protocol Group Settings 802.1v Protocol Vlan 802.1v Protocol Vlan Settings 802.1p PriorityCheck the Select All Ports box Search Port List Rspan Settings Gvrp Settings Pvid Gvrp Global SettingsGvrp MAC-based Vlan Settings Pvid Auto Assign SettingsLeave All Time NNI Bpdu Port Trunking Understanding Port Trunk Groups Parameter Description Algorithm Master PortActive Port Member Ports Lacp Port Settings Activity Traffic Segmentation Forward Portlist Bpdu Tunneling Settings 27 Bpdu Tunneling window Igmp Snooping Settings Igmp SnoopingRate Limit Querier IP Time Query Interval Max ResponseRobustness Value 255 Igmp Snooping Rate Limit Settings Igmp Snooping Static Group Settings Following fields can be set Igmp Multicast Group Profile SettingsIgmp Snooping Multicast Vlan Settings IPv4 Multicast Profile Settings IPv4 Limited Multicast Range Settings IPv4 Max Multicast Group Settings MLD Control Messages MLD Snooping SettingsMLD Snooping Query Expiry Time Query Interval 1-65535 secMax Response Time 25 sec MLD Snooping Rate Limit Settings 43 MLD Snooping Router IP Settings Modify window IPv6 Address MLD Snooping Static Group SettingsMLD Multicast Group Profile Settings 1,6 MLD Snooping Multicast Vlan Settings1,6 Source Port IPv6 Multicast Profile Settings Tagged Member Port e.g.1-4,6 IPv6 Limited Multicast Range Settings IPv6 Max Multicast Group Settings Port Mirror 55 Port Mirror window Loopback Detection Settings Recover TimeParameter Description LBD State Trap Status Spanning Tree 802.1w Rapid Spanning TreePort Transition States Edge Port P2P Port 802.1D and 802.1w Compatibility STP Bridge Global Settings Max Hops NNI Bpdu Address STP Port Settings External Cost 0=Auto MST Configuration Identification P2P STP Instance Settings Parameter Description Configuration NameRevision Level Msti ID Mstp Port Information Instance IDInternal Path cost 200000000 Multicast Forwarding Forwarding & FilteringUnicast Forwarding Multicast Filtering Mode Multicast MAC Lldp Global Settings Lldp Port Settings Admin StatusParameter Description From Port /To Port Notification Parameter Description Address Lldp Basic TLVs SettingsLldp Management Address List Lldp Dot1 TLVs Settings Vlan MAC/PHY Lldp Dot3 TLVs SettingsLldp Statistics System Lldp Local Port Information 72 Lldp Statistics System window CFM Port Settings Lldp Remote Port Information CFM Mipccm List CFM CCM PDUs Forwarding ModeCFM MPs Reply LTRs Connectivity Fault Management Settings Connectivity Fault Management CreateMDConnectivity Fault Management SettingsMD Parameter Description CFM State CFM Loopback Settings MIPMEP LBM CFM Linktrace Settings Ethernet OAM Settings Ethernet OAMRemote Loopback Received Remote Ethernet OAM Configuration Settings QoS Advantages of QoS Mapping QoS on the Switch Understanding QoSPage No Limit HOL Blocking PeventionBandwidth Control Traffic Control Traffic Control window Traffic Trap Setting Traffice Trap SettingsCount Down Time Interval 802.1p Default Priority 802.1p Default Priority window 802.1p User Priority QoS Scheduling Mechanism Mechanism QoS SchedulingScheduling Band Manage Settings Class ID Sred Settings Band Manage Settings Click Apply to implement changes 141 Sred Drop Counter Dscp Trust SettingsDscp Map Settings Dscp Map Dscp List0-63 Color 802.1p Map SettingsPriority List0-7 Safeguard Engine Security Safeguard Engine window IP-MAC-Port Binding IMP Binding Global SettingsTrusted Host IMP Binding Port Settings Parameter ACL Mode Trap / Log Dhcp Snoop State Allow Zero IP Forward DhcpPacket Max Entry IMP Binding Entry Settings Ports Port Security Port Settings Port SecurityDhcp Snooping Entries MAC Block List Port Security Vlan Settings Admin StateLock Address Max. Learning Dhcp Server Screening Settings Port Security EntriesVlan ID e.g.1,4-6 Max Learning ParameterDescription Server IP Address Dhcp Screening Port SettingsDhcp Offer Filtering 802.1X Port-Based and Host-Based Access Control Authentication Server802.1X Client’s MAC Address Authenticator 16 The Authentication Server Authentication Process Client Port-Based Network Access Control 20 Example of Typical Port-Based Configuration Host-Based Network Access Control 21 Example of Typical Host-Based Configuration PDU 802.1X Global Settings802.1X Port Settings SuppTimeout ServerTimeoutReAuthentication QuietPeriod Authentication Radius Server 802.1X User Confirm Key Reauthenticate PortsInitialize Ports Guest Vlan Configuration Limitations Using the Guest Vlan SSL Settings Guest Vlan Download Certificate Ciphersuite CBC SHA EDE CBC SHA SSH Settings SSH Authmode and Algorithm Settings SSH User Authentication Lists HMAC-SHA1HMAC-MD5 HMAC-RSA Access Authentication Control Host NamePage Authentication Policy Settings Application Authentication Settings Authentication Server Group 37 Authentication Server Group Settings window Authentication Server 38 Authentication Server Group Settings Edit window Login Method Lists Priority 1, 2, 3 Enable Method ListsParameterDescription Method List Name Local Enable Password Settings 41 Enable Method List window Radius Accounting Settings 42 Local Enable Password window MAC-based Access Control MAC-based Access Control Settings Parameter Description Settings MBA Global State MethodGuest Vlan Name Guest Vlan ID MAC-based Access Control Local Settings Hold Time Web Authentication ParameterDescription State Web-based Access Control SettingsConditions and Limitations Web-based Access Control User Settings Logout Timer1440 Authentication Redirection Confirmation NetBIOS FilteringNetBIOS Filtering Settings ParameterDescription Type ACL Configuration WizardAccess ID Apply To Access Profile ListOption Add Access Profile Ethernet Parameter Description Ethernet ACL Source MAC MaskDestination MAC Mask Select ACL Type Access Profile List Ethernet Ethernet Type Parameter Description Access ID Vlan MaskReplace Priority Replace Dscp Precedence Time RangeRx Rate Counter Dscp Source IP MaskDestination IP Mask Icmp Type 11 Access Profile List IPv4 12 Access Profile Details IPv4 Icmp Time Range Name Parameter Description IPv6 Class IPv6 Flow LabelIPv6 TCP IPv6 UDP 17 Access Profile List IPv6 Class Flow Label 20 Access Rule List IPv6 22 Add Packet Content ACL Profile Parameter Description Chunk 23 Access Profile List Packet Content 25 Access Profile Packet Content 26 Access Rule List Packet Content CPU Interface Filtering CPU Access Profile List 28 CPU Access Profile List window Mask 802.1Q Vlan Source MACMask Destination MAC Parameter Description Select Profile ID IPv4 Dscp 209 33 Add CPU ACL Profile window for IPv6 Offset Parameter Description Select ProfileSelect ACL 37 CPU Access Rule List window for Ethernet 39 CPU Access Rule Detail Information window for Ethernet 40 CPU Access Rule List window for IP 42 CPU Access Rule Detail Information window for IP 45 CPU Access Rule Detail Information window for IPv6 ACL Finder ACL Flow Meter 50 ACL Flow Meter window Mode Cable Diagnostic Device Status CPU Utilization Parameter Description Time IntervalRecord Number Show/Hide Port Utilization Packet Size Packet Size window Received RX Memory UtilizationPackets Received RX window for Bytes and Packets UMBcast RX Transmitted TX 12 Transmitted TX window for Bytes and Packets Bytes Errors 14 Received RX window for errors CRCError SymbolUnderSize OverSize 16 Transmitted TX window for errors ExDefer Port Access Control Radius Authentication Radius Account Client ServerAddress RequestsRetransmissions Responses Authenticator State Parameter Description MAC AddressAuth PAE State Backend State Authenticator Statistics 22 Authenticator Statistics window for MAC-based Authenticator Session Statistics Authenticator Diagnostics Auth Timeout Connect EnterConnect LogOff Auth Enter Browse ARP Table Browse Vlan 27 Browse ARP Table window Igmp Snooping Group Show Vlan PortsBrowse Igmp Router Port Igmp Snooping Forwarding Table Browse Igmp Snooping Counter Browse MLD Router Port MLD Snooping Group MLD Snooping Forwarding Table 35 MLD Snooping Group window CFM Packet Counter List Browse Session TableBrowse MLD Snooping Counter Browse CFM Port MP List Browse CFM Fault MEPCFM Packet Counter CCM List Functions used in the MAC address table are described below MAC Address TableBrowse Vlan Counter Statistics Browse Ethernet OAM Event Log Browse Ethernet OAM Statistics 46 Browse Ethernet OAM Statistics window Packet/Error Historical Counter & UtilizationBrowse Historical Counter Minutes/1 Day System Log Browse Historical Utilization Log Text Parameter Description Log TypeDate-Time Save Configuration ID Save Configuration ID 1 window Save Log Save All Upload Log File Configuration File Backup & RestoreReset Reboot System Download Firmware ARP ARP FCS Ethernet frame format Forwarding Table Destination address Source address Ether-type Port2 00-20-5C-01-22-22 How ARP spoofing attacks a network Ethernet Gratuitous ARP Prevent ARP spoofing via packet content ACL Example topology Ethernet Offset Chunk 266 System Log Entries Category Event Description Log Information Severity SSL AAA Page Page Page IP-MAC DOS DDM Trap Name/OID Variable Bind Format MIB Name Severity DGS-3700 Series Trap ListProprietary Trap List Equipment Glossary Page Password Recovery Procedure Command Parameters Command Parameters