D-Link DES-3200-10 - Manual

Page 3 - Table of Contents

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual ii Table of Contents Intended Readers ....................................................................................................................................................... viii Typographical Conventions......

Page 9 - Intended Readers; Typographical Conventions

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Intended Readers The DES-3200-10/18/28/28F User Manual contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology. Typog...

Page 10 - Section 1; Web-based Switch Configuration; Introduction; Login to Web Manager

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 1 Web-based Switch Configuration Introduction Login to Web Manager Web-based User Interface Web Pages Introduction All software functions of the Switch can be managed, configured and monitored via the embedded web-bas...

Page 11 - Web-based User Interface; Areas of the User Interface; Area

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Web-based User Interface The user interface provides access to various Switch configuration and management windows, allows you to view performance statistics, and permits you to graphically monitor the system status. Areas of...

Page 12 - Web Pages

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual NOTICE : Any changes made to the Switch configuration during the current session must be saved in the Save Configuration window ( Save > Save Configuration ) or use the command line interface (CLI) command save config . We...

Page 13 - Section 2; Configuration

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 2 Configuration Device Information System Information Serial Port Settings IP Address Settings IPv6 Interface Settings IPv6 Route Settings IPv6 Neighbor Settings Port Configuration Static ARP Settings User Accounts Sy...

Page 14 - Device Information

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Device Information This window contains the main settings for all major functions on the Switch and appears automatically when you log on. To return to the Device Information window, click the DES-3200-10/18/28/28F folder. Th...

Page 15 - Serial Port Settings; IP Address Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Serial Port Settings The following window allows the Baud Rate and the Auto Logout to be changed as well as containing information about the Serial Port Settings. Click Configuration > Serial Port Settings to display this ...

Page 17 - IPv6 Address Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual IPv6 Address Settings Users can display the Switch’s current IPv6 interface settings. To view the following window, click Configuration > IPv6 Interface Settings : Figure 2 - 5. IPv6 Interface Settings window To configure ...

Page 18 - IPv6 Route Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Parameter Description Interface Name The name of the IPv6 interface being displayed or modified. VLAN Name Display the VLAN name of the IPv6 interface. Admin. State Display the current administrator state. IPv6 Address Enter ...

Page 19 - Port Configuration; Port Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Parameter Description Interface Name Enter the name of the IPv6 neighbor. To search for all the current interfaces on the Switch, go to the second Interface Name field in the middle part of the window, tick the All check box,...

Page 21 - Port Description Settings; Port Error Disabled

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Port Description Settings The Switch supports a port description feature where the user may name various ports on the Switch. To view the following window, click Configuration > Port Configuration > Port Description Set...

Page 22 - Static ARP Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 2 - 10. Port Error Disabled window The following parameters are displayed: Parameter Description Port Displays the port that has been error disabled. Port State Describes the current running state of the port, whether ...

Page 23 - User Accounts; Admin and User Privileges

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual User Accounts Use this window to control user privileges, create new users, and view existing User Accounts. To view this window, click Configuration > User Accounts : Figure 2 - 12. User Accounts window The following fiel...

Page 24 - System Log Configuration; System Log Settings; System Log Server

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual User Account Management Add/Update/Delete User Accounts Yes No View User Accounts Yes No Table 2 - 1. Admin and User Privileges System Log Configuration This section contains information for configuring various attributes and...

Page 26 - DHCP Relay; DHCP Relay Global Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual DHCP Relay The relay hops count limit allows the maximum number of hops (routers) that the DHCP messages can be relayed through to be set. If a packet’s hop count is equal to or more than the hop count limit, the packet is dr...

Page 27 - The Implementation of DHCP Information Option 82 on the Switch

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual check and policy settings will have no effect. DHCP Relay Agent Information Option 82 Check This field can be toggled between Enabled and Disabled using the pull-down menu. It is used to enable or disable the Switches ability...

Page 29 - DHCP Relay Interface Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual DHCP Relay Interface Settings This window allows the user to set up a server, by IP address, for relaying DHCP/ BOOTP information to the Switch. The user may enter a previously configured IP interface on the Switch that will ...

Page 30 - DHCP Auto Configuration Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual State This is used to enable or disable the DHCP local relay for the specified VLAN. DHCP Auto Configuration Settings The DHCP automatic configuration function on the Switch will load a previously saved configuration file for...

Page 31 - Telnet Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Telnet Settings Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet choose Disabled. The TCP ports are numbered between 1 and 65535 . The "well-known" TCP...

Page 32 - Firmware Information

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Firmware Information Information about current firmware images stored on the Switch can be viewed. To access this window, click Configuration > Firmware Information : Figure 2 - 25. Firmware Information window This window ...

Page 33 - SNTP Settings; Time Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SNTP Settings The SNTP Settings folder offers two windows: Time Settings and Time Zone Settings . Time Settings To configure the time settings for the Switch, click Configuration > SNTP Settings > Time Settings : Figure...

Page 34 - Time Zone Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Time Zone Settings The following window is used to configure time zones and Daylight Savings Time settings for SNTP. To configure the time zone settings for the Switch, click Configuration > SNTP Settings > Time Zone Se...

Page 36 - SMTP Settings; SMTP Service Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SMTP Settings SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on e-mail addresses entered in the window below. The Switch is to be configured as a client...

Page 37 - SMTP Service; MAC Notification Settings; MAC Notification Global Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SMTP Service This window is used to test the SMTP Service Settings configured in the previous window. To view the following window, click Configuration > SMTP Service : Figure 2 - 29. SMTP Service window To test to see if ...

Page 38 - SNMP Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 2 - 31. MAC Notification Port Settings window The following parameters may be modified: Parameter Description From Port/To Port Select a port or group of ports to enable for MAC notification using the pull-down menus. ...

Page 39 - Traps; SNMP View Table

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes ...

Page 40 - SNMP Group Table

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view being created. Subtree OID Type the Object Identifier (OID) Subtree for the view. The OID identifi...

Page 41 - SNMP User Table

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual centralized and distributed network management strategies. It includes improvements in the Structure of Management Information (SMI) and adds some security features. SNMPv3 - Specifies that the SNMP version 3 will be used. SN...

Page 42 - SNMP Community Table

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Priv-Protocol by based on the CBC-DES (DES-56) Password None - Indicates that no authorization protocol is in use. DES - Indicates that DES 56-bit encryption is in use standard. Auth-Protocol by Key cates that the HMAC-MD5-96...

Page 43 - SNMP Host Table; NMP Engine ID

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SNMP Host Table indow to set up SNMP trap recipients. To configure SNMP Host Table entries, click Configuration > SNMP Settings > SNMP Host Table Use the SNMP Host Table w Figure 2 - 36. SNMP Host Table window The follo...

Page 44 - SNMP Trap Configuration; RMON

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SNMP Trap Configuration The following window is used to enable and disable trap settings for the SNMP function on the Switch. To view this window for configuration, click Configuration > SNMP Settings > SNMP Trap Config...

Page 45 - Time Range Settings; Single IP Management

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Time Range Settings This window is used in conjunction with the Access Profile feature to determine a starting point and an ending point, based on days of the week, when an Access Profile configuration will be enabled on the ...

Page 47 - Single IP Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Single IP Settings All switches are set as Candidate (CaS) switches as their factory default configuration and Single IP Management will be disabled. To enable SIM for the Switch using the Web interface, click Configuration &...

Page 48 - Topology

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual After enabling the Switch to be a Commander Switch (CS), the Single IP Management folder will then contain four added links to aid the user in configuring SIM through the Web, including Topology , Firmware Upgrade and Configu...

Page 50 - Tool Tips

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Non-SIM devices Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) wi...

Page 51 - Group Icon

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group Icon Figure 2 - 47. Right-Clicking a Group I...

Page 52 - Commander Switch Icon

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Commander Switch Icon Figure 2 - 49. Right-Clicking a Commander Icon The following options may appear for the user to configure: y Collapse - To collapse the group that will be represented by a single icon. y Expand - To expa...

Page 53 - Menu Bar; File

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual y Add to group - Add a candidate to a group. Clicking this option will reveal the following dialog for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group. Click OK to...

Page 54 - Help; Firmware Upgrade; Configuration File Backup/Restore

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Help y About - Will display the SIM information, including the current SIM version. Figure 2 - 55. About window Firmware Upgrade This window is used to upgrade firmware from the Commander Switch to the Member Switch. Member S...

Page 55 - Upload Log File; Gratuitous ARP; Gratuitous ARP Global Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Upload Log File The following window is used to upload log files from SIM member switches to a specified PC. To upload a log file, enter the Server IP address of the SIM member switch and then enter a Path\Filename on your PC...

Page 56 - Gratuitous ARP Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Gratuitous ARP Settings This window allows you to have more detailed settings for the Gratuitous ARP. To view this window, click Configuration > Gratuitous ARP > Gratuitous ARP Settings : Figure 2 - 60. Gratuitous ARP S...

Page 57 - ARP Spoofing Prevention Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual ARP Spoofing Prevention Settings ARP spoofing, also known as ARP poisoning, is a method to attack an Ethernet network which may allow an attacker to sniff data frames on a LAN, modify the traffic, or stop the traffic altogeth...

Page 58 - Section 3; L2 Features

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 3 L2 Features Jumbo Frame 802.1Q Static VLAN Q-in-Q 802.1v Protocol VLAN VLAN Trunk Settings GVRP Settings Asymmetric VLAN Settings MAC-based VLAN Settings PVID Auto Assign Settings Port Trunking LACP Port Settings Tr...

Page 59 - VLANs; Understanding IEEE 802.1p Priority; Notes About VLANs

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual VLANs Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted si...

Page 61 - Port VLAN ID

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 3 - 3. IEEE 802.1Q Tag The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originall...

Page 62 - Tagging and Untagging

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Every physical port on a switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the Switch. If no VLANs are defined on the Switch, all ports are then assigned to a default VLAN with a PVID equal to 1. Untagg...

Page 63 - VLAN Segmentation

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual NOTE: If no VLANs are configured on the Switch, then all packets will be forwarded to any destination port. Packets with unknown source addresses will be flooded to all ports. Broadcast and multicast packets will also be floo...

Page 70 - VLAN Translation Settings; v Protocol Group Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual VLAN Translation Settings VLAN translation translates the VLAN ID carried in the data packets it receives from private networks into those used in the Service Providers network . To view this window click L2 Features > Q-i...

Page 71 - v Protocol VLAN Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Parameter Description Group ID (1-16) Select an ID number for the group, between 1 and 16. Group Name This is used to identify the new Protocol VLAN group. Type an alphanumeric string of up to 32 characters. Protocol This fun...

Page 72 - VLAN Trunk Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Port List (e.g.: 1-6) Select the specified ports you wish to configure by entering the port number in this field, or tick the Select All Ports box. Search Port List This function allows the user to search all previously confi...

Page 73 - GVRP Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual GVRP Settings This window allows the user to determine whether the Switch will share its VLAN configuration information with other GARP VLAN Registration Protocol (GVRP) enabled switches. In addition, Ingress Checking can be ...

Page 74 - Asymmetric VLAN Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual the port to compare the VID tag of an incoming packet with the PVID number assigned to the port. If the two are different, the port filters (drops) the packet. Disabled disables ingress fil- tering. Ingress Checking is Enable...

Page 75 - PVID Auto Assign Settings; Port Trunking; Understanding Port Trunk Groups

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual PVID Auto Assign Settings This enables or disables PVID Auto Assign on the Switch. PVID is the VLAN that the switch will use for forwarding and filtering purposes. If PVID Auto-Assign is Enabled , PVID will be possibly change...

Page 77 - LACP Port Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual (Member) Ports Choose the members of a trunked group. Up to eight ports per group can be assigned to a group. Flooding Ports These ports are designated for flooding broadcast, multicast, and DLF (unicast Destination Lookup Fa...

Page 78 - Traffic Segmentation

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single port to a group of ports on the Switch. This method of segmenting the flow of traffic is similar to using VLANs to limit traffic, but is mo...

Page 79 - BPDU Tunneling Settings; IGMP Snooping Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual BPDU Tunneling Settings To view this window, click L2 Features > BPDU Tunneling Settings : Figure 3 - 24. BPDU Tunneling Settings window IGMP Snooping Internet Group Management Protocol (IGMP) snooping allows the Switch to...

Page 81 - IGMP Access Control Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 3 - 27. IGMP Snooping Router Ports Settings window Select the desired member ports and click Apply . Click <<Back to go back to the IGMP Snooping Settings window. IGMP Access Control Settings This window is used ...

Page 82 - IGMP Snooping Multicast VLAN Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual IGMP Snooping Multicast VLAN Settings This window is used to configure the IGMP Snooping Multicast VLAN settings on the Switch. To view this window, click L2 Features > IGMP Snooping > IGMP Snooping Multicast VLAN Setti...

Page 83 - IP Multicast Profile Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 3 - 30. IGMP Snooping Multicast VLAN Group List Settings window Enter a Multicast Address and click Add . The new information will be displayed in the table at the bottom of the window. Click Show IGMP Snooping Multica...

Page 85 - Limited Multicast Range Settings; Max Multicast Group Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Limited Multicast Range Settings This window enables the user to configure the ports on the Switch that will be involved in the Limited IP Multicast Range. The user can configure the range of ports and associate an IP Multica...

Page 86 - MLD Snooping Settings; MLD Control Messages

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 3 - 35. Max Multicast Group Settings window The following fields can be set: Parameter Description From Port/To Port Use the drop-down menus to choose a range of ports. Max Group (1-1024) Enter the maximum number of th...

Page 89 - Port Mirror

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Port Mirror The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view...

Page 90 - Loopback Detection Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Loopback Detection Settings The Loopback Detection function is used to detect the loop created by a specific port. This feature is used to temporarily shutdown a port on the Switch when a CTP (Configuration Testing Protocol) ...

Page 91 - Spanning Tree; Rapid Spanning Tree

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Spanning Tree This Switch supports three versions of the Spanning Tree Protocol: STP, Rapid STP, and MSTP. STP will be familiar to most networking professionals. However, since RSTP and MSTP have been recently introduced to D...

Page 92 - Port Transition States; Edge Port

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Port Transition States An essential difference between the three protocols is in the way ports transition to a forwarding state and in the way this transition relates to the role of the port (forwarding or not forwarding) in ...

Page 93 - STP Bridge Global Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual STP Bridge Global Settings To open the following window, click L2 features > Spanning Tree > STP Bridge Global Settings : Figure 3 - 41. STP Bridge Global Settings window The following parameters can be set: Parameter D...

Page 94 - STP Port Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual NOTE: The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will occur. Observe the following formulas when setting the above parameters: Max. Age ≤ 2 x (Forward Delay - 1 second) Max. Age ≥ 2 x ...

Page 96 - MST Configuration Identification

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual MST Configuration Identification The following windows in the MST Configuration Identification section allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree ...

Page 97 - STP Instance Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual STP Instance Settings The following window displays MSTIs currently set on the Switch. To view the following table, click L2 Features > Spanning Tree > STP Instance Settings : Figure 3 - 44. STP Instance Settings window...

Page 98 - MSTP Port Information; Forwarding & Filtering; Unicast Forwarding Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual MSTP Port Information This window displays the current MSTP Port Information and can be used to update the port configuration for an MSTI ID. If a loop occurs, the MSTP function will use the port priority to select an interfa...

Page 99 - Multicast Forwarding Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual To add or edit an entry, define the following parameters and then click Add/Modify : Parameter Description VLAN ID (1-4094) The VLAN ID number of the VLAN on which the above Unicast MAC address resides. MAC Address The MAC ad...

Page 100 - Multicast Filtering Mode; LLDP

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Multicast Filtering Mode Users can configure the multicast filtering mode. To view this window, click L2 Features > Forwarding & Filtering > Multicast Filtering Mode : Figure 3 - 49. Multicast Filtering Mode window ...

Page 102 - LLDP Port Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual LLDP Port Settings To view this window, click L2 Features > LLDP > LLDP Port Settings : Figure 3 - 51. LLDP Port Settings window The following parameters can be set: Parameter Description From Port/To Port Use the pull-...

Page 103 - LLDP Basic TLVs Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual LLDP Basic TLVs Settings This window is used to enable the settings for the Basic TLVs Settings. To view this window, click L2 Features > LLDP > LLDP Basic TLVs Settings : Figure 3 - 52. LLDP Basic TLVs Settings window ...

Page 104 - LLDP Dot1 TLVs Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual LLDP Dot1 TLVs Settings LLDP Dot1 TLVs are organizationally specific TLVs which are defined in IEEE 802.1 and used to configure an individual port or group of ports to exclude one or more of the IEEE 802.1 organizational port...

Page 105 - LLDP Dot3 TLVs Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual LLDP Dot3 TLVs Settings This window is used to configure an individual port or group of ports to exclude one or more IEEE 802.3 organizational specific TLV data type from outbound LLDP advertisements. To view this window, cli...

Page 106 - Section 4; QoS; Advantages of QoS

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 4 QoS Bandwidth Control Traffic Control 802.1p Default Priority 802.1p User Priority QoS Scheduling Settings Priority Mapping TOS Mapping DSCP Map Settings The Switch supports 802.1p priority queuing Quality of Servic...

Page 107 - Understanding QoS

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual The previous picture shows the default priority setting for the Switch. Class 3 has the highest priority of the four priority queues on the Switch. In order to implement QoS, the user is required to instruct the Switch to exa...

Page 108 - Bandwidth Control; Traffic Control

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. To view this window, click QoS > Bandwidth Control : Figure 4 - 2. Bandwidth ...

Page 112 - QoS Scheduling Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 4 - 5. 802.1p User Priority window Once a priority has been assigned to the port groups on the Switch, assign this Class to each of the eight levels of 802.1p priorities. The following parameter may be set: Parameter D...

Page 113 - Priority Mapping

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Priority Mapping This window is used to set up Priority Mapping. To view this window, click QoS > Priority Mapping : Figure 4 - 7. Priority Mapping window The following parameter may be set: Parameter Description From Port...

Page 114 - TOS Mapping

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual TOS Mapping This window is used to set up Type of Service (TOS) Mapping. To view this window, click QoS > ToS Mapping : Figure 4 - 8. TOS Mapping window The following parameter may be set: Parameter Description Class ID Th...

Page 115 - DSCP Mapping

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual DSCP Mapping This window is used to set up DSCP Mapping. To view this window, click QoS > DSCP Mapping : Figure 4 - 9. DSCP Mapping window The following parameters may be set: Parameter Description DSCP Value This field is...

Page 116 - Section 5; Security; Safeguard Engine

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 5 Security Safeguard Engine Trusted Host IP-MAC-Port Binding Port Security DHCP Server Screening Settings 802.1X SSL Settings SSH Access Authentication Control MAC-based Access Control DoS Prevention Settings Safeguar...

Page 118 - Trusted Host; IMP Binding Global Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Trusted Host Use the Security IP Management to permit remote stations to manage the Switch. If one or more designated management stations are defined by the user, only the chosen stations, as defined by IP address, will be al...

Page 119 - IMP Binding Port Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual DHCP Snoop State Use the pull-down menu to enable or disable the DHCP Snooping State for IP-MAC-port binding. ARP Inspection When this is Enabled , the Switch will filter ARP packets which have unauthorized sender MACs, IP ad...

Page 120 - IMP Binding Entry Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual hardware until the S/W learns the entries for the ports. The port will check ARP packets and IP packets by IP-MAC-port binding entries. When the packet is found by the entry, the MAC address will be set to dynamic. If the pac...

Page 121 - DHCP Snooping Entries; Port Security; Port Security Port Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual DHCP Snooping Entries This window is used to view dynamic entries on specific ports. To view particular port settings, enter the port number and click Find . To view all entries click View All , and to delete an entry, click ...

Page 123 - Port Security FDB Entries

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Port Security FDB Entries This window is used to clear the Port Lock Entries by individual ports. To clear entries enter the range of ports and click Clear . To view the following window click, Security > Port Security >...

Page 124 - Authentication Server; Authenticator

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenti...

Page 125 - Client

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual NOTE: When configuring the Authentication Protocol as local, the Switch has two roles: Authenticator and Authentication Server. Client The Client is simply the endstation that wishes to gain access to the LAN or switch servic...

Page 126 - Port-Based Network Access Control

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network. 2. MAC-Based Access Control – Using...

Page 127 - MAC-Based Network Access Control

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual MAC-Based Network Access Control 802.1X Client Network access controlled port Network access uncontrolled port RADIUS Server Ethernet Switch 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client ...

Page 130 - Authentication RADIUS Server

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Authentication RADIUS Server The RADIUS feature of the Switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. To configure the 802.1X User, click Sec...

Page 131 - Guest VLAN Configuration; Limitations Using the Guest VLAN

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Guest VLAN Configuration On 802.1X security enabled networks, there is a need for non 802.1X supported devices to gain limited access to the network, due to lack of the proper 802.1X software or incompatible devices, such as ...

Page 132 - Guest VLAN

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Guest VLAN To view the following window, click, Security > 802.1X > Guest VLAN : Figure 5 - 23. Guest VLAN window The following fields may be modified to enable the 802.1X Guest VLAN: Parameter Description VLAN Name Ent...

Page 134 - SSL Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 5 - 27. Reauthenticate Port(s) window for MAC-based 802.1X To reauthenticate ports, first use the From Port and To Port drop-down menus to choose the range of ports. Then the user must specify the MAC address to be rea...

Page 135 - Download Certificate

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual supports SSLv3 and TLSv1. Other versions of SSL may not be compatible with this Switch and may cause problems upon authentication and transfer of messages from client to host. Download Certificate This window is used to downl...

Page 136 - SSH

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual RSA with RC4_128_MD5 This ciphersuite combines the RSA key exchange, stream cipher RC4 encryption with 128-bit keys and the MD5 Hash Algorithm. Use the pull-down menu to enable or disable this ciphersuite. This field is enabl...

Page 137 - SSH Settings; SSH Authmode and Algorithm Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual SSH Settings The following window is used to configure and view settings for the SSH server. To view this window, click Security > SSH > SSH Settings : Figure 5 - 29. SSH Settings window To configure the SSH server on t...

Page 139 - SSH User Authentication Lists

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Public Key Algorithm HMAC-RSA Tick the check box to enable the HMAC (Hash for Message Authentication Code) mechanism utilizing the RSA encryption algorithm. The default is enabled. HMAC-DSA Tick the check box to enable the HM...

Page 140 - Access Authentication Control

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual conjunction with the Host Based choice in the Auth. Mode field. Click Apply to implement changes made. NOTE: To set the SSH User Authentication parameters on the Switch, a User Account must be previously configured. For more ...

Page 141 - Authentication Policy Settings; Application Authentication Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual the device successfully through the RADIUS server or through the local method, 3 kinds of privilege levels can be assigned to the user and the user can not use the “enable admin” command to promote to the admin privilege leve...

Page 142 - Authentication Server Group

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 5 - 34. Application's Authentication Settings window The following parameters can be set: Parameter Description Application Lists the configuration applications on the Switch. The user may configure the Login Method Li...

Page 144 - Login Method Lists

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Parameter Description IP Address The IP address of the remote server host the user wishes to add. Port (1-65535) Enter a number between 1 and 65535 to define the virtual port number of the authentication protocol on a server ...

Page 145 - Enable Method Lists

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 5 - 38. Login Method Lists window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the corressponding Delete button. T...

Page 146 - Local Enable Password Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 5 - 39. Enable Method Lists window To delete an Enable Method List defined by the user, click the the Delete button. To modify an Enable Method List, click on its corresponding Edit button. To define an Enable Login Me...

Page 147 - MAC-based Access Control; Notes About MAC-based Access Control; MAC-based Access Control Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Parameter Description Old Local Enable Password (Max: 15 characters) If a password was previously configured for this entry, enter it here in order to change it to a new password New Local Enable Password Enter the new passwo...

Page 149 - MAC-based Access Control Local Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Config Guest VLAN VLAN Name Enter a Guest VLAN name. Clicking the hyperlinked name will send the Web manager to the Guest VLAN configuration window. VLAN ID (1-4094) Enter a VLAN ID number between 1 and 4094 . Member Ports (e...

Page 150 - DoS Prevention Settings

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual DoS Prevention Settings The Switch supports Denial of Service (DoS) prevention to mitigate DoD attacks from hackers or other malicious sources. To view this window, click Security > DoS Prevention Settings : Figure 5 - 43....

Page 151 - Section 6; ACL; ACL Configuration Wizard

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 6 ACL ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Access profiles allow the user to establish criteria to determine whether or not the Switch will forward packets bas...

Page 152 - Access Profile List

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Service Type Use the drop-down menu to select from VLAN Name , Ethernet Type , 802.1P , or Any . Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any add...

Page 169 - CPU Interface Filtering

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual CPU Interface Filtering Due to a chipset limitation and needed extra switch security, the Switch incorporates CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to cr...

Page 183 - ACL Finder; ACL Flow Meter

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 6 - 52. CPU Access Rule List window for Packet Content example To view the configurations for previously configured rule click on the corresponding Show Details Button which will display the following CPU Access Rule D...

Page 185 - Section 7; Cable Diagnostic; CPU Utilization

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 7 Monitoring Cable Diagnostic CPU Utilization Port Utilization Packet Size Memory Utilization Packets Errors Port Access Control Browse ARP Table Browse VLAN IGMP Snooping LLDP MBA Authentication State Browse Session ...

Page 186 - Port Utilization

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 7 - 2. CPU Utilization window To view the CPU utilization by port, use the real-time graphic of the Switch at the top of the Web page by simply clicking on a port. Click Apply to implement the configured settings. The ...

Page 189 - Packets

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual 65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets). 128-255 The total number of packets (including bad...

Page 194 - Errors

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Packets Counts the number of packets successfully sent on the port. Unicast Counts the total number of good packets that were transmitted by a unicast address. Multicast Counts the total number of good packets that were trans...

Page 197 - Port Access Control

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Record Number Select number of times the Switch will be polled between 20 and 200 . The default value is 200 . ExDefer Counts the number of packets for which the first transmission attempt on a particular interface was delaye...

Page 198 - RADIUS Authentication

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual RADIUS Authentication This table contains information concerning the activity of the RADIUS authentication client on the client side of the RADIUS authentication protocol. To view the RADIUS Authentication window, click Monit...

Page 199 - RADIUS Account Client

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual authentication server. AccessAccepts The number of RADIUS Access-Accept packets (valid or invalid) received from this server. AccessRejects The number of RADIUS Access-Reject packets (valid or invalid) received from this serv...

Page 201 - Authenticator State

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual responses. BadAuthenticators The number of RADIUS Accounting-Response packets, which contained invalid authenticators, received from this server. PendingRequests The number of RADIUS Accounting-Request packets sent to this se...

Page 202 - Authenticator Statistics

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual This window displays the Authenticator State for individual ports on a selected device. A polling interval between 1s and 60s seconds can be set using the drop-down menu at the top of the window and clicking OK . The informat...

Page 203 - Authenticator Session Statistics

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual The following fields can be viewed: Parameter Description Port The identification number assigned to the Port by the System in which the Port resides. Frames Rx The number of valid EAPOL frames that have been received by this...

Page 207 - Browse ARP Table; Browse IGMP Router Port

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Bac Auth Fail Counts the number of times that the state machine receives a Reject message from the Authentication Server (i.e., aFail becomes TRUE, causing a transition from RESPONSE to FAIL). Indicates that the Supplicant ha...

Page 208 - IGMP Snooping Group

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual To view this window, click Monitoring > IGMP Snooping > Browse IGMP Router Port : Figure 7 - 25. Browse Router Port window IGMP Snooping Group This window allows the Switch’s IGMP Snooping Group Table to be searched. IG...

Page 209 - IGMP Snooping Host; MLD Snooping; Browse MLD Router Port

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Enter the appropriate information and click Find . The searched entries will be shown in the IGMP Snooping Group Table. Click View All to see all the entries. Click View All Data Driven to display all the data driven groups l...

Page 210 - MLD Snooping Group; LLDP Statistics System

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 7 - 28. Browse MLD Router Port window MLD Snooping Group The following window allows the user to view MLD Snooping Groups present on the Switch. MLD Snooping is an IPv6 function comparable to IGMP Snooping for IPv4. Th...

Page 211 - LLDP Local Port Information; LLDP Remote Port Information

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Figure 7 - 30. LLDP Statistics System window LLDP Local Port Information To view this window, click Monitoring > LLDP > LLDP Local Port Information : Figure 7 - 31. LLDP Local Port Information window LLDP Remote Port In...

Page 212 - MBA Authentication State

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual MBA Authentication State This window allows the user to view the MAC-based Access Control authentication information. Specify the port list to view and click Find . To remove an entry, enter the appropriate information and cl...

Page 213 - System Log

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual MAC Address Enter a MAC address for the forwarding table to be browsed by. Find Allows the user to move to a sector of the database corresponding to a user defined port, VLAN, or MAC address. Clear Dynamic Entries Click this ...

Page 214 - Section 8; Save and Tools; Save Configuration

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Section 8 Save and Tools Save Configuration Save Log Save All Configuration File Upload & Download Upload Log File Reset Ping Test Download Firmware Reboot System The three Save windows include: Save Configuration , Save ...

Page 215 - Save Log

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Save Log Open the Save drop-down menu at the top of the Web manager and click Save Log to open the following window: Figure 8 - 2. Save Log window Save All Open the Save drop-down menu at the top of the Web manager and click ...

Page 217 - Ping Test

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Ping Test Users can Ping either an IPv4 address or an IPv6 address. Ping is a small program that sends ICMP Echo packets to the IP address you specify. The destination node then responds to or “echoes” the packets sent from t...

Page 218 - Download Firmware; Reboot System

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Download Firmware The Switch supports dual image storage for firmware file backup and restoration. The firmware images are indexed by ID number 1 or 2. To change the boot firmware image, use the Image ID drop-down menu to sel...

Page 219 - Appendix A

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Appendix A Mitigating ARP Spoofing Attacks Using Packet Content ACL Address Resolution Protocol (ARP) is the standard method for finding a host's hardware address (MAC address) when only its IP address is known. This protocol...

Page 224 - Example topology

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual • Prevent ARP spoofing via packet content ACL Concerning the common DoS attack today caused by the ARP spoofing, D-Link managed switch can effectively mitigate it via its unique Packet Content ACL. For that reason the basic A...

Page 227 - Appendix B; System Log Entries

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Appendix B System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description Log Information Severity system Syste...

Page 236 - Proprietary Trap List

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Port recover from BPDU under attacking state automatically Port <[unitID:] portNum> recover from BPDU under attacking state automatically Informational DHCP Detect untrusted DHCP server IP address Detected untrusted DHC...

Page 238 - Appendix C; Glossary

xStack ® DES-3200-10/18/28/28F Layer 2 Ethernet Managed Switch User Manual Appendix C Glossary 1000BASE-SX: A short laser wavelength on multimode fiber optic cable for a maximum length of 2000 meters 1000BASE-LX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 1...

D-Link DES-3200-10 - Manual

Table of Contents:

Summary

Other D-Link Models