D-Link DGS-3700 - Manuals

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 2 Section 1 Web-based Switch Configuration Introduction Login to Web Manager Web-based User Interface Web Pages Introduction All software functions of the Switch can be managed, configured and monitored via the embedded web-...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 3 Figure 1 - 1 Enter Network Password dialog Enter “admin” in both the User Name and Password fields and click OK . This will open the Web-based user interface. The Switch management features available in the web-based manag...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 4 Figure 1 - 2 Main Web-Manager page Area Function Area 1 Select the folder or window to be displayed. The folder icons can be opened to display the hyper-linked window buttons and subfolders contained within them. Click the...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 6 Section 2 Configuration Device Information System Information Serial Port Settings IP Address Interface Settings IPv6 Route Settings IPv6 Neighbor Settings Port Configuration Static ARP Settings User Accounts System Log Co...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 8 Figure 2 - 2 System Information window The fields that can be configured are described below: Parameter Description System Name Enter a system name for the Switch, if so desired. This name will identify it in the Switch ne...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 9 IP Address The IP address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the introduction of the DGS-3700 Series CLI...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 11 Setting the Swith’s IP Address using the Console Interface Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 14 Parameter Description Interface Name Enter the interface name of the IPv6 neighbor you wish to configure. Neighbor IPv6 Address Enter the neighbor IPv6 address of the entry you wish to configure. Link Layer MAC Address En...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 15 Parameter Description From Port / To Port Use the pull-down menus to select the port or range of ports to be configured. State Toggle this field to either enable or disable a given port or group of ports. Speed/Duplex Tog...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 16 Figure 2 - 12 Port Description window Port Error Disabled The following window will display the information about ports that have had their connection status disabled, for reasons such as Loopback Detection or link down s...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 17 Figure 2 - 14 Static ARP Settings window The following fields can be set: Parameter Description ARP Aging Time (0-65535) The user may globally set the maximum amount of time, in minutes, that an Address Resolution Protoco...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 18 level privileges. There are 3 levels of security offered on the Switch, the Operator level privilege will allow users to configure and view configurations on the Switch, except for those involving security features, which...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 20 System Log Configuration This section contains information for configuring various attributes and properties for System Log Configurations, including System Log Settings and System Log Host. System Log Settings This windo...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 22 System Severity Settings The Switch can be configured to allow alerts be logged or sent as a trap to an SNMP agent or both. The level at which the alert triggers either a log entry or a trap message can be set as well. Us...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 23 DHCP Relay The DHCP Relay folder contains six windows regarding the DHCP relay functions on the Switch. The DHCP windows include DHCP Relay Global Settings , DHCP Relay Interface Settings , DHCP Relay Option 60 Default Se...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 25 The Implementation of DHCP Information Option 82 on the Switch The config dhcp_relay option_82 command configures the DHCP relay agent information option 82 setting of the switch. The formats for the circuit ID sub-option...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 28 DHCP Relay Option 61 Settings This command is used to add a rule to the relay server based on option 61. The matching rule can be based on either the MAC address or by using a user-specified string. Only one relay server ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 29 Parameter Description IP Address Enter the IP address of the interface. Subnet Mask Enter the Subnet mask of the interface. Gateway Enter the default gateway of the out of band management networks. Status Allows the user ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 30 When DHCP autoconfiguration is Enabled , the Switch becomes a DHCP client automatically after rebooting. The DHCP server must have the TFTP server IP address and configuration file name, and be configured to deliver this ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 32 otherwise configured by the user. Version States the firmware version. Size (Bytes) States the size of the corresponding firmware, in bytes. Update Time States the specific time the firmware version was downloaded to the ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 33 Size(bytes) Displays the size of the configuration file, in bytes. Update time Displays the time that the configuration file was updated to the Switch. From Displays the location from which the configuration file was uplo...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 34 choose a specific number of times to ping the Target IP Address by entering a number between 1 and 255 . Timeout Select a timeout period between 1 and 10 seconds for this Ping message to reach its destination. If the pack...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 35 the pull-down menus. Loopback Mode This function allows the user to select MAC Internal/MAC External or PHY Internal/PHY External. MAC and PHY represent the layer on which the loopback is performed while the Internal or E...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 36 SNTP Settings The Simple Network Time Protocol Settings can be configured in the next two windows. Time Settings This window is used to configure the time settings for the Switch. To view this window, click Configuration ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 37 TimeZone Settings The following window is used to configure time zones and Daylight Savings time settings for SNTP. To view this window, click Configuration > SNTP Settings > TimeZone Settings as shown below: Figure...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 38 From :Which Week of the Month Enter the week of the month that DST will start. From: Day of the Week Enter the day of the week that DST will start on. From: Month Enter the month DST will start on. From: Time in HH:MM Ent...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 39 Figure 2 - 43 MAC Notification Global Settings window The following parameters may be viewed and modified: Parameter Description State Enable or disable MAC notification globally on the Switch. Interval (1-2147483647 sec)...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 40 SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 42 SNMP Group Table An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu. To view this window, click Configuration > SNMP Settings > SNMP G...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 43 SNMP User Table This window displays all of the SNMP User's currently configured on the Switch and also allows you to add new users. To view this window, click Configuration > SNMP Settings > SNMP User Table as show...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 44 Password Enter a Password when SNMP V3 Encryption is enabled for Password mode. Key Enter a Key when SNMP V3 Encryption is enabled for Key mode. To implement changes made, click Apply . To delete an existing SNMP User Tab...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 46 monitor and control network devices. SNMPv2 – Specifies that SNMP version 2 will be used. The SNMP v2 supports both centralized and distributed network management strategies. It includes improvements in the Structure of M...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 47 SNMP Trap Configuration The following window is used to enable and disable trap settings for the SNMP function on the Switch. To view this window, click Configuration > SNMP Settings > SNMP Trap Configuration as sho...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 48 sFlow The sFlow folder contains four windows to enable and configure the sFlow settings on the Switch. sFlow Global State Settings This table is used to enable or disable the sFlow Global State Settings on the Switch. The...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 49 timeout value will become 400 automatically. Timeout (1-2000000) The length of time before the server is timed out. When the analyzer server times out, all of the flow samplers and counter pollers associated with this ana...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 50 sFlow Counter Poller Settings This window is used to create the sflow counter poller settings on the Switch. W ithin the sflow counter poller function, the port statistics counter information will be forwarded to the serv...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 51 Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the "Sing...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 52 The Upgrade to v1.6 To better improve SIM management, the DGS-3700 Series has been upgraded to version 1.6 in this release. Many improvements have been made, including: 1. The Commander Switch (CS) now has the capability ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 53 Figure 2 - 60 Single IP Settings window (enabled) The following parameters can be set: Parameters Description SIM State Use the pull-down menu to either enable or disable the SIM state on the Switch. Disabled will render ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 56 Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display t...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 57 Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group Icon Figure 2 - 65 Right-Clicking a Grou...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 59 Figure 2 - 70 Input password window Property – To pop up a window to display the device information, as shown below. Menu Bar The Single IP Management window contains a menu bar for device configurations, as seen below. F...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 61 Upload Log File The following window is used to upload log files from SIM member switches to a specified PC. To upload a log file, enter the Server IP address of the SIM member switch and then enter a Path\Filename on you...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 62 Figure 2 - 78 DDM Settings window The following fields can be configured: Parameter Description Trap Log Specifies whether or not to send the trap and log, when the operating parameter exceeds the alarm or warning thresho...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 66 Section 3 L2 Features Jumbo Frame 802.1Q VLAN Subnet VLAN QinQ 802.1v Protocol VLAN RSPAN Settings GVRP Settings GVRP Global Settings MAC-based VLAN Settings PVID Auto Assign Settings Port Trunking LACP Port Settings Traf...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 67 VLANs Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitte...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 71 same VID) as the ingress port. If it does not, the packet is dropped. If it has the same VID, the packet is forwarded and the destination port transmits it on its attached network segment. This process is referred to as i...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 72 VLAN and Trunk Groups The members of a trunk group have the same VLAN setting. Any VLAN setting on the members of a trunk group will apply to the other member ports. NOTE: In order to use VLAN segmentation in conjunction ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 73 Figure 3 - 5 Double VLAN Example In this example, the Service Provider Access Network switch (Provider edge switch) is the device creating and configuring Double VLANs with different SPVIDs for specific customers (say Cus...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 78 Subnet VLAN Subnet VLAN Settings The subnet VLAN settings are used to create, find or delete a subnet VLAN entry. A subnet VLAN entry is an IP subnet-based VLAN classification rule. If an untagged or priority-tagged IP pa...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 80 Figure 3 - 13 QinQ Settings window The following fields can be set: Parameter Description From Port / To Port A consecutive group of ports that are part of the VLAN configuration starting with the selected port. Role The ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 82 802.1v Protocol VLAN 802.1v Protocol Group Settings The table allows the user to create Protocol VLAN groups and add protocols to that group. The 802.1v Protocol VLAN Group Settings supports multiple VLANs for each protoc...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 83 802.1v Protocol VLAN Settings The table allows the user to configure Protocol VLAN settings. The lower half of the table displays any previously created settings. To view this window, click L2 Features > 802.1v Protoco...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 84 RSPAN Settings This table controls the RSPAN function. The purpose of the RSPAN function is to mirror the packets to a remote switch. The packet travels from the switch where the monitored packet is received, through the ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 85 The following fields can be set: Parameter Description From Port / To Port These two fields allow you to specify the range of ports that will be included in the Port-based VLAN that you are creating using the 802.1Q Port ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 87 Port Trunking Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. DGS-3700 Series supports up to 6 port trunk groups with 2 to 8 ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 89 LACP Port Settings The LACP Port Settings window is used to create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP con...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 90 Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single port to a group of ports on either a single switch or a group of ports on another switch in a switch stack. This method of segmenting t...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 91 BPDU Tunneling Settings This table is used to configure the BPDU Tunneling port types. W hen the device is operated with Q-in-Q enabled, DA will be replaced by the tunnel multicast address, and the BPDU will be tagged wit...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 92 IGMP Snooping Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. W hen enabled for IGMP snooping, the Swit...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 95 IGMP Multicast Group Profile Settings This table allows the user to create igmp multicast group profiles and specify multicast address lists on the Switch. To view this window, click L2 Features > IGMP Snooping > IG...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 96 State Use the drop-down menu to toggle between Enabled and Disabled. Replace Source IP Enter an IP address that new IP address to be used. Member Port (e.g.:1-4,6) Select the ports that will be members of the Multicast VL...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 98 MLD Snooping Multicast Listener Discovery (MLD) Snooping is an IPv6 function used similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data. Instead of flooding all port...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 100 Click Apply to implement any changes made and <<Back to return to the MLD Snooping Settings window. To modify the router port settings click the hyperlinked Modify Router Port as shown below: Figure 3 - 43 MLD Snoo...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 102 Figure 3 - 47 MLD Multicast Group Profile Settings window To configure the group list once a profile has been created, click on the hyperlinked Group List to reveal the following window: Figure 3 - 48 Multicast Group Pro...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 103 Tagged Member Port (e.g.:1-4,6) Select the ports that will be tagged as members of the VLAN. To modify an entry click the corresponding Modify button. To remove an entry click the corresponding Delete button. IPv6 Multic...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 105 Port Mirror The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 106 Loopback Detection Settings The Loopback Detection function is used to detect the loop created by a specific port. This feature is used to temporarily shutdown a port on the Switch when a loop detecting packet has been l...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 107 Spanning Tree This Switch supports three versions of the Spanning Tree Protocol; 802.1D-2004 STP compatible, 802.11d-2004 Rapid STP and 802.1q-2005 MSTP. 802.1D STP will be familiar to most networking professionals. Howe...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 108 P2P Port A P2P port is also capable of rapid transition. P2P ports may be used to connect to other bridges. Under RSTP, all ports operating in full-duplex mode are considered to be P2P ports, unless manually overridden t...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 109 STP Bridge Global Settings This window is used to enable and configure the STP bridge global settings on the Swtich. To view this window, click L2 features > Spanning Tree > STP Bridge Global Settings as shown belo...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 111 STP Port Settings This window is used to configure the STP Port Settings on the Swtich. STP can be set up on a port per port basis. To view this window, click L2 Features > Spanning Tree > STP Port Settings as show...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 112 Migrate Setting this parameter as Yes will set the ports to send out BPDU packets to other bridges, requesting information on their STP setting If the Switch is configured for RSTP, the port will be capable to migrate fr...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 113 Parameter Description Configuration Name A previously configured name set on the Switch to uniquely identify the MSTI (Multiple Spanning Tree Instance). If a configuration name is not set, this field will show the MAC ad...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 114 Figure 3 - 61 STP Instance Settings - View window MSTP Port Information This window displays the current MSTP Port Information and can be used to update the port configuration for an MSTI ID. If a loop occurs, the MSTP f...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 115 Forwarding & Filtering This folder contains windows for Unicast Forwarding, Multicast Forwarding and Multicast Filtering Mode. Unicast Forwarding To view this window, click L2 Features > Forwarding & Filtering...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 116 The following parameters can be set: Parameter Description VID The VLAN ID of the VLAN to which the corresponding MAC address belongs. Multicast MAC Address The MAC address of the static source of multicast packets. This...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 118 LLDP Port Settings This window is used to display the LLDP port settings on the Switch. The ports can be individually configured to send notifications to configured SNMP trap receivers. To view this window, click L2 Feat...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 120 Port Description Use the drop-down menu to enable or disable port description. System Name Use the drop-down menu to enable or disable system name. System Description Use the drop-down menu to enable or disable system de...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 121 Tree Protocol, the Link Aggregation Contol Protocol, and numerous vendor proprietary variations are responsible for maintaining the topology and connectivity of the network. If EAPOL, GVRP, STP (including MSTP), and LACP...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 122 To view this window, click L2 Features > LLDP > LLDP Statistics System as shown below: Figure 3 - 72 LLDP Statistics System window LLDP Local Port Information LLDP Local Port Information window displays the informa...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 123 Figure 3 - 75 LLDP Local Port Information (Show Detail) window To return to the LLDP Local Port Information window click the <<Back button. LLDP Remote Port Information This window displays port information learned...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 124 Figure 3 - 78 CFM Port Settings window Enter the port list you wish to Enable and click Apply . CFM CCM PDUs Forwarding Mode This window is used to configure the CFM CCM PDU forwarding mode on the Switch. By default the ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 125 Figure 3 - 81 CFM MIPCCM List window Connectivity Fault Management Settings This window is used to configure the CFM settings on the Switch. To view this window, click L2 Features > CFM > Connectivity Fault Managem...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 126 MIP This setting controls the creation of MIPs. None – Means that no MIPs will be created. This is the default value. Auto – MIPs are created when the next lower active MD-level on the port is reached or there are no low...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 127 LBMs Priority The 802.1p priority to be set in the transmitted LBMs. If not specified it uses the same priority as CCMs and LTMs sent by the MEP. Click Apply to implement changes made. CFM Linktrace Settings This window ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 128 Ethernet OAM Ethernet OAM Settings This window is used to configure the ports Ethernet OAM mode. In Active mode the ports can initiate OAM discovery and start or stop remote loopback. When a port in OAM enabled, any chan...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 129 Ethernet OAM Configuration Settings This window is used to configure and display the primary controls and status information for Ethernet OAM on the Switch. To view this window, click L2 Features > Ethernet OAM > E...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 130 Section 4 QoS HOL Blocking Pevention Bandwidth Control Traffic Control 802.1p Default Priority 802.1p User Priority QoS Scheduling Mechanism QoS Scheduling In Band Manage Settings SRED The DGS-3700 Series supports 802.1p...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 131 Figure 4 - 1 Mapping QoS on the Switch The picture above shows the default priority setting for the Switch. Class-7 has the highest priority of the eight priority queues on the Switch. In order to implement QoS, the user...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 134 Rate (64-1024000) This field allows you to enter the data rate, in Kbits per second, that will be the limit for the selected port. The value must be a multiple of 64, between 64 and 1024000. Click Apply to set the bandwi...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 137 802.1p User Priority The Switch allows the assignment of a user priority to each of the 802.1p priorities. To view this window, click QoS > 802.1p User Priority as shown below: Figure 4 - 6 802.1p User Priority window...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 138 Figure 4 - 7 QoS Scheduling Mechanism The following parameters can be configured. Parameter Description From Port / To Port Enter the port or port list you wish to configure. Scheduling Mechanism Strict – The highest cla...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 139 Figure 4 - 8 QoS Scheduling The following parameters can be configured: Parameter Description From Port / To Port Enter the port or port list you wish to configure. Class ID Select the Class ID, from 0-7 , to configure f...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 140 Figure 4 - 9 In Band Manage Settings Select the priority and click Apply . SRED Simple random early detection (sRED) is a simplified RED mechanism based on ASIC capability. Random Early Detection (RED) is a congestion av...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 142 SRED Drop Counter This window is used to view the SRED Drop Counter settings on the Switch. To view this window, click QoS > SRED > SRED Drop Counter as shown below: Figure 4 - 11 SRED Drop Counter window DSCP Trus...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 145 Section 5 Security Safeguard Engine Trusted Host IP-MAC-Port Binding Port Security DHCP Server Screening Settings 802.1X SSL Settings SSH Access Authentication Control MAC-based Access Control Web Authentication NetBIOS ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 147 Parameter Description Rising Threshold Used to configure the acceptable level of CPU utilization before the Safeguard Engine mechanism is enabled. Once the CPU utilization reaches this percentage level, the Switch will m...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 148 Switch will send a trap message to the SNMP agent and the Switch log when an ARP packet is received that doesn’t match the IP-MAC binding configuration set on the Switch. To view this window click, Security > IP-MAC-P...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 150 IMP Binding Entry Settings This table is used to create Static IP MAC Binding Port entries on the switch. To view this window, click Security > IP-MAC-Port Binding > IMP Binding Entry Settings as shown below: Figur...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 151 DHCP Snooping Entries This table is used to view dynamic entries on specific ports. To view particular port settings, enter the port number and click Find . To view all entries click View All , and to delete an entry, cl...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 152 Figure 5 - 9 Port Security Port Settings window The following parameters can be set: Parameter Description From Port / To Port A consecutive group of ports may be configured starting with the selected port. Admin State T...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 153 Parameter Description VLAN Name Specifies a VLAN or list of VLANs by VLAN Name. VLAN ID (e.g.:1,4-6) Specifies a VLAN or list of VLANs by VLAN ID. Max Learning Address Specifies the maximum number of port-security entrie...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 154 DHCP Screening Port Settings The Switch supports DHCP Server Screening, a feature that denies access to rogue DHCP servers. When the DHCP server filter function is enabled, all DHCP server packets will be filtered from a...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 155 Client’s MAC Address The MAC address of the DHCP client. Only multiple legal DHCP servers on the network need to be entered in this field. If there is only one legal DHCP server on the network, no input to this field is ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 156 connected to a port on the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any services offered by the Switch on the LAN. The role of the Authentication Server is to certify the identi...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 157 Client The Client is simply the endstation that wishes to gain access to the LAN or switch services. All endstations must be running software that is compliant with the 802.1X protocol. For users running Windows XP or W ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 158 Understanding 802.1X Port-based and Host-based Network Access Control The original intent behind the development of 802.1X was to leverage the characteristics of point-to-point in LANs. As any single LAN segment in such ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 159 Host-Based Network Access Control Figure 5 - 21 Example of Typical Host-Based Configuration In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 162 802.1X User To create a new 802.1X User enter a user name and password then reconfirm the password and click Apply , the new user will be displayed in the lower half of the table. To delete an entry click the correspondi...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 164 Guest VLAN Configuration On 802.1X security enabled networks, there is a need for non 802.1X supported devices to gain limited access to the network, due to lack of the proper 802.1X software or incompatible devices, suc...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 165 Guest VLAN This window is used to configure the Guest VLAN on the Switch. To view this window, click Security > 802.1X > Guest VLAN as shown below: Figure 5 - 29 Guest VLAN window The following fields may be modifi...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 166 the ciphersuites available, yet different ciphersuites will affect the security level and the performance of the secured connection. The information included in the ciphersuites is not included with the Switch and requir...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 168 SSH SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows a secure login to remote host computers, a safe method of execut...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 169 security shell encryptions. The available options are Never , 10 min , 30 min , and 60 min . The default setting is Never . Click Apply to implement changes made. SSH Authmode and Algorithm Settings The SSH Algorithm win...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 170 Cast128-CBC Check the box to enable the Cast128 encryption algorithm with Cipher Block Chaining. The default is enabled. Twofish128 Check the box to enable the twofish128 encryption algorithm. The default is enabled. Two...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 171 Password – This parameter should be chosen if the administrator wishes to use an administrator-defined password for authentication. Upon entry of this parameter, the Switch will prompt the administrator for a password, a...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 174 a previously configured method list. The user may use the default Method List or other Method List configured by the user. See the Login Method Lists window, in this section, for more information. Enable Method List Usin...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 176 IP Address The IP address of the remote server host the user wishes to add. Port (1-65535) Enter a number between 1 and 65535 to define the virtual port number of the authentication protocol on a server host. The default...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 177 Figure 5 - 40 Login Method Lists window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the corressponding Delete butto...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 178 NOTE: To set the Local Enable Password, see the next section, entitled Local Enable Password. To view the following table, click Security > Access Authentication Control > Enable Method Lists as shown below: Figure...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 179 Figure 5 - 42 Local Enable Password window To set the Local Enable Password, set the following parameters and click Apply . Parameter Description Old Local Enable Password If a password was previously configured for this...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 180 Figure 5 - 43 RADIUS Accounting Settings window MAC-based Access Control MAC-based Access Control is a method to authenticate and authorize access using either a port or host. For port-based MAC, the method decides port ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 182 unauthenticated state. The range is between 1 and 1440 minutes. The default is 1440 . Hold Time (1-300) If a host fails to pass authentication, the next authentication will not started within hold time unless the user cl...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 183 Web Authentication Web authentication, also known as Web-based Access Control, is another port based access control method implemented similarily to the 802.1X port based access control method previously stated. This fun...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 185 for users trying to access the network via the switch. This RADIUS server must have already been pre-assigned by the administrator using the RADIUS Server window located in the 802.1X section. Logout Timer (1-1440) The l...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 186 User Name Enter the username of up to 15 alphanumeric characters of the guest wishing to access the web through this process. This field is for administrators who have selected local as their web based authenticator. VLA...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 187 Section 6 ACL ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Access profiles allow you to establish criteria to determine whether or not the Switch will forward packets bas...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 188 From Use the drop-down menu to select from MAC Address, IPv4 Address or IPv6. To Use the drop-down menu to select from MAC Address, IPv4 Address or IPv6. When IPv6 is selected the user can only enter the IPv6 source addr...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 205 Counter Enable or disable the counter settings. Ports Specifies that the access rule will take effect on one port or a range of ports. VLAN Name Specifies the access rule will take effect on the VLAN Name specified. VLAN...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 206 CPU Access Profile List In the following window, the user may globally enable or disable the CPU Interface Filtering State mechanism by using the radio buttons to change the running state. To view this window, click ACL ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 217 Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100 . Action Select Permit to specify that the packets that match the access profile are forward...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 220 Section 7 Monitoring Device Status Cable Diagnostic CPU Utilization Port Utilization Packet Size Memory Utilization Packets Errors Port Access Control Browse ARP Table VLAN IGMP Snooping MLD Snooping Browse Session Table...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 221 Figure 7 - 2 Cable Diagnostic window Enter the port number you wish to test and click Test , the results will be display on the lower half of the table. CPU Utilization The CPU Utilization window displays the percentage ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 224 (excluding framing bits but including FCS octets). 65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS oct...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 230 Errors The Web Manager allows port error statistics compiled by the Switch's management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) To select a port to view these statist...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 233 CRC Error Counts otherwise valid packets that did not end on a byte (octet) boundary. LateColl Counts the number of times that a collision is detected later than 512 bit-times into the transmission of a packet. ExColl Ex...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 234 as sysName in MIB II.) ServerIndex The identification number assigned to each RADIUS Authentication server that the client shares a secret with. AuthServerAddress The (conceptual) table listing the RADIUS authentication ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 236 PacketsDropped The number of RADIUS packets, which were received from this server on the accounting port and dropped for some other reason. Authenticator State The following section describes the 802.1X Status on the Swi...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 237 Authenticator Statistics This window contains the statistics objects for the Authenticator PAE associated with each port. An entry appears in this table for each port that supports the Authenticator function. To view thi...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 238 Rx Resp The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator. Rx Invalid The number of EAPOL frames that have been received by this Authenticator in which the ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 239 The user may select the desired time interval to update the statistics, between 1s and 60s , where “s” stands for seconds. The default value is one second. The following fields can be viewed: Parameter Description Port T...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 241 CONNECTING, as a result of a reauthentication request (reAuthenticate = TRUE). Authed Start Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, as a result of an EAPOL-Start me...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 242 Figure 7 - 27 Browse ARP Table window VLAN The following windows are used to configure the VLAN settings of the Switch. Browse VLAN This window allows the VLAN status for each of the Switch's ports to be viewed by VLAN. ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 243 Show VLAN Ports This window allows the VLAN status for each of the Switch's ports to be viewed by VLAN. Enter a VID (VLAN ID) in the field at the top of the window and click the Find button. To view this window, click Mo...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 244 Figure 7 - 31 IGMP Snooping Group window Enter the appropriate information and click Find , the information will be shown in the IGMP Snooping Group Table. The following field can be viewed: Parameter Description VLAN Na...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 245 Figure 7 - 33 Browse IGMP Snooping Counter window Enter the VLAN Name , VLAN List or Port List of the VLAN you wish to view and click Find . MLD Snooping Browse MLD Router Port This window displays which of the Switch’s ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 246 Figure 7 - 35 MLD Snooping Group window Enter a VLAN Name or VLAN List and Group IP Address in the appropriate field and click the Find button. MLD Snooping Forwarding Table This window is used to display the current MLD...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 247 Browse MLD Snooping Counter This window is used to display the current MLD snooping counter information on the Switch. To view this window, click Monitoring > MLD Snooping > Browse MLD Snooping Counter as shown bel...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 250 The functions used in the VLAN Counter Statistic table are described below: Parameter Description VID List (e.g.:1,4-6) Specifies the VLAN ID list that you wish to view. VLAN Name Specifies the VLAN Name. VID (1-4094) Sp...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 252 Historical Counter & Utilization This folder contains two windows to view statistics about packets sent and received by the Switch and Historical Utilization of the CPU and memory. Browse Historical Counter This wind...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 253 Browse Historical Utilization This window displays information regarding the historical utilization of the CPU and memory. The counters are set up in 15 minute and one day intervals. There is a maximum of five 15 minute ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 255 Section 8 Save Services and Tools Save Configuration ID 1 Save Configuration ID 2 Save Log Save All Configuration File Backup & Restore Upload Log File Reset Download Firmware Reboot System The four Save windows incl...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 257 Configuration File Backup & Restore The Switch supports dual image storage for configuration file backup and restoration. The firmware and configuration images are indexed by ID number 1 or 2. To change the boot firm...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 259 Appendix A Mitigating ARP Spoofing Attacks Using Packet Content ACL Address Resolution Protocol (ARP) is the standard method for finding a host's hardware address (MAC address) when only its IP address is known. This pro...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 264 • Prevent ARP spoofing via packet content ACL Concerning the common DoS attack today caused by the ARP spoofing, D-Link managed switch can effectively mitigate it via its unique Packet Content ACL. For that reason the ba...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 267 Appendix B System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description Log Information Severity System ...

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual 276 <portNum>, VID: <vlanID>) Login Fail MAC-AC login rejected (MAC: <macaddr>, port: <portNum>, VID: <vlanID>) Warning Aged out MAC-AC host aged out (MAC: <macaddr>, port: <portNum>...

278 Appendix C Glossary 1000BASE-SX: A short laser wavelength on multimode fiber optic cable for a maximum length of 500 meters 1000BASE-LX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 1000BASE-T: 1000Mbps Ethernet implementation over Category ...

280 Appendix D Password Recovery Procedure This section describes the procedure for resetting passwords on D-Link Switches. Authenticating any user who tries to access networks is necessary and important. The basic authentication method used to accept qualified users is through a local login, utiliz...