D-Link DGS-3224TGR User Manual

Managed 24-port gigabit ethernet switch

Advertisement

D-Link ™ DGS-3224TGR
Managed 24-Port Gigabit Ethernet Switch
User's Guide

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DGS-3224TGR

  • Page 1 D-Link ™ DGS-3224TGR Managed 24-Port Gigabit Ethernet Switch User’s Guide...
  • Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
  • Page 4: Table Of Contents

    Table of Contents Features ............................. 1 Ports ..............................1 Performance Features......................... 1 Management ............................ 2 Unpacking ............................4 Installation ............................4 Desktop or Shelf Installation ......................4 Rack Installation ..........................5 Power on............................. 6 Power Failure ........................... 6 External Redundant Power System ..................... 6 Front Panel............................
  • Page 5 Logout............................64 Advanced Setup..........................64 Switch Advanced Settings ......................65 Spanning Tree..........................65 Forwarding............................. 70 Configure QOS ..........................74 Access Profile Mask Setting ......................80 Port Security ..........................86 Mirroring Configurations........................ 90 VLAN Configurations........................90 Link Aggregation ..........................95 Lacp............................... 97 802.1X ............................
  • Page 6: Intended Readers

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Preface The DGS-3224TGR User’s Guide is divided into chapters that describe the system installation and operating instructions with examples. Chapter 1, “Introduction” – Describes the Switch and its features. Chapter 2, “Unpacking and Setup” – Helps you get started with the basic installation of the Switch.
  • Page 7: Safety Instructions

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow.
  • Page 8 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Safety Instructions (continued) • To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable.
  • Page 9: Protecting Against Electrostatic Discharge

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Safety Instructions (continued) Always load the rack from the bottom up, and load the heaviest item in the rack first. Make sure that the rack is level and stable before extending a component from the rack.
  • Page 11: Features

    This section describes the features of the DGS-3224TGR. Features The DGS-3224TGR was designed for departmental and enterprise connections. As an all-gigabit-port switch, it is ideal for backbone and server connection. Powerful and versatile, the switch eliminates network bottlenecks while giving users the capability to fine-tune performance...
  • Page 12: Management

    Interface MIB (RFC 2233) Ethernet-like MIB (RFC 1643) Mini-RMON MIB (RFC 1757) – 4 groups. The RMON specification defines the counters for the receive functions only. However, the DGS-3224TGR provides counters for both receive and transmit functions. • Supports Web-based management.
  • Page 13 DGS-3224TGR Gigabit Ethernet Switch User’s Guide • Command Line Interface support. • Port security support. • TACACS protocol support. • SYSLOG support. • Destination Lookup Fail control.
  • Page 14: Unpacking

    D-View 5.1 demo CD-ROM • This User’s Guide with Registration Card on CD-ROM If any item is found missing or damaged, please contact your local D-Link reseller for replacement. Installation Use the following guidelines when choosing a place to install the switch: •...
  • Page 15: Rack Installation

    Figure 2-1. Installing rubber feet for desktop installation Rack Installation The DGS-3224TGR can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, attach the mounting brackets on the switch’s side panels (one on each side) and secure them with the screws provided.
  • Page 16: Power On

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 2- 2B. Installing in an equipment rack Power on The switch can be used with AC power supply 100-240 VAC, 50 - 60 Hz. The switch’s power supply will adjust to the local power source automatically and may be powered on without having any or all LAN segment cables connected.
  • Page 17 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 2-3. DPS-300 in DPS-900 with DGS-3224TGR See the DPS-300 documentation for more information. NOTE: Do not use the switch with any redundant power system other than the CAUTION: DPS-300.
  • Page 18: Front Panel

    Figure 3-2. Rear panel view • The external Redundant Power Supply connector is used to connect the DGS-3224TGR to a DPS-300. An auto-switch circuit automatically switches to an external RPS once the internal power supply fails. Transition from internal to external supply shall not disturb normal...
  • Page 19: Side Panels

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide • The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. Supported input voltages range from 100 ~ 240 VAC at 50 ~ 60 Hz.
  • Page 20 DGS-3224TGR Gigabit Ethernet Switch User’s Guide • Speed – This row of indicators will light solid green when the connection speed is operating at 1000 Mbps. An unlit LED indicates a connection speed of either 10 or 100 Mbps. •...
  • Page 21: Switch To End Node

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide ONNECTING WITCH This chapter describes how to connect the DGS-3224TGR to your Gigabit Ethernet network. Switch to End Node End nodes include PCs outfitted with a 10, 100, or 1000 Mbps RJ-45 Ethernet/Fast Ethernet/Gigabit Ethernet Network Interface Card (NIC) and most routers.
  • Page 22 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 4-2. Switch connected to a normal (non-Uplink) port on a hub or switch using a straight or crossover cable...
  • Page 23: Local Console Management

    (see the DGS-3224TGR Command Line Interface Reference manual). A network administrator can manage, control and monitor the switch from the console program. The DGS-3224TGR contains a CPU, memory for data storage, flash memory for configuration data, operational programs, and SNMP agent firmware.
  • Page 24: Ip Addresses And Snmp Community Names

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide IP Addresses and SNMP Community Names Each switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The switch’s default IP address is 10.90.90.90.
  • Page 25: Mibs

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide You can also specify which network managers may receive traps from the switch by entering a list of the IP addresses of authorized network managers. Up to four trap recipient IP addresses, and four corresponding SNMP community strings can be entered.
  • Page 26: Snmp

    • Modifying the configuration of network devices. The DGS-3224TGR has a software program called an ‘agent’ that processes SNMP requests, but the user program that makes the requests and collects the responses runs on a management station (a designated computer on the network). The SNMP agent and the user program both use the UDP/IP protocol to exchange packets.
  • Page 27: Filtering

    Spanning Tree 802.1w Rapid Spanning Tree The DGS-3224TGR implements two versions of the Spanning Tree Protocol, the Rapid Spanning Tree Protocol (RSTP) as defined by the IEE 802.1w specification and a version compatible with the IEEE 802.1d STP. RSTP can operate with legacy equipment implementing IEEE 802.1d, however the advantages of using RSTP will be lost.
  • Page 28 DGS-3224TGR Gigabit Ethernet Switch User’s Guide creates a single state Discarding. In either case, ports do not forward packets; in the STP port transition states disabled, blocking or listening or in the RSTP port state discarding there is no functional difference, the port is not active in the network topology.
  • Page 29: Vlans

    VLAN membership, packets cannot cross VLANs without a network device performing a routing function between the VLANs. 2. The DGS-3224TGR supports only IEEE 802.1Q VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag-unaware.
  • Page 30: 802.1Q Vlan Packet Forwarding

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide VLANs can also provide a level of security to your network. IEEE 802.1Q VLANs will only deliver packets between stations that are members of the VLAN. Any port can be configured as either tagging or untagging. The untagging feature of IEEE 802.1Q VLANs allows VLANs to work with legacy switches that don’t recognize VLAN tags in packet headers.
  • Page 31: 802.1Q Vlan Tags

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 5-1. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
  • Page 32: Port Vlan Id

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 5-2. IEEE 802.1Q Tag The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
  • Page 33: Tagging And Untagging

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide destination address (found in the switch’s forwarding table). If the PVID of the port that received the packet is different from the PVID of the port that is to transmit the packet, the switch will drop the packet.
  • Page 34: Dhcp

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide If the packet is not tagged with VLAN information, the ingress port will tag the packet with its own PVID as a VID. The switch then determines if the destination port is a member of the same VLAN (has the same VID) as the ingress port.
  • Page 35 DGS-3224TGR Gigabit Ethernet Switch User’s Guide...
  • Page 36: Introduction

    ANAGEMENT Introduction The DGS-3224TGR offers an embedded Web-based (HTML) interface allowing users to manage the switch from anywhere on the network through a standard browser, such as Opera, Netscape Navigator/Communicator, or Microsoft Internet Explorer. The Web browser acts as a universal access tool and can communicate directly with the switch using the HTTP protocol.
  • Page 37 Click OK as there is no preset user name or password on the switch. This opens the main page in the management module. The top panel shows a real-time front panel display of the DGS-3224TGR. Clicking on an individual port on this display will connect you to the Port Configurations window (see Basic Setup → Port Configurations for a detailed description).
  • Page 38 DGS-3224TGR Gigabit Ethernet Switch User’s Guide...
  • Page 39 DGS-3224TGR Gigabit Ethernet Switch User’s Guide...
  • Page 40 DGS-3224TGR Gigabit Ethernet Switch User’s Guide These are the major categories for switch management. If the sub-menus for each main category do not appear, click on the small square hyperlink to the left of the folder icon. The switch management features available in the Web-based are explained below.
  • Page 41: Basic Setup

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Basic Setup The first category includes: Switch Information, Basic Switch Setup, Serial Port Settings, Port Configurations, Traffic Segmentation Table, User Accounts, Network Management, Switch Utilities, Network Monitoring, Factory Reset, Save Changes, Restart System, and Logout, as well as secondary screens.
  • Page 42 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Device Type A description of the switch type. MAC Address The Ethernet address for the device. Also known as the physical address. Get IP From There are three choices for how the switch receives its IP Address settings: Manual, BOOTP, and DHCP.
  • Page 43 DGS-3224TGR Gigabit Ethernet Switch User’s Guide protocol that allows members to dynamically join VLANs. The switch’s GVRP settings can be changed on the Switch GVRP window (Advanced Setup → VLAN Configurations → Switch GVRP). IGMP Snooping This indicates if Internet Group Management Protocol (IGMP) Snooping is enabled on the switch.
  • Page 44: Basic Switch Setup

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Basic Switch Setup Figure 6- 2. Basic Switch Setup window This window is used to enter name, location, and contact information, as well as to determine whether the switch should get its IP Address settings from the user (Manual), a BOOTP server, or a DHCP server.
  • Page 45: Serial Port Settings

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Subnet Mask The address mask that controls subnetting on your TCP/IP network. Default Gateway The IP address of the device—usually a router—that handles connections other subnets and/or other TCP/IP networks. VLAN Name The VLAN name. The switch includes...
  • Page 46: Port Configurations

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide 15 mins, or Never. Port Configurations Figure 6- 4. first Port Configurations window To make changes to port configurations, select a port and click Edit. The following Port Configurations window will open:...
  • Page 47: Traffic Segmentation Table

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 5. second Port Configurations window Select the port(s) you want to configure by using the drop-down menus in the Port and Configure Ports from __ to fields. Follow these steps: 1. Enable or disable the port. If you choose Disabled in the State field, devices connected to that port cannot use the switch, and the switch purges their addresses from its address table after the MAC address aging time elapses.
  • Page 48 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 6. Traffic Segmentation Table window Select a Traffic Segmentation Table entry and click Edit to modify an entry.
  • Page 49: User Accounts

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 7. Traffic Segmentation Table – Edit window User Accounts The switch allows you to set up and manage user accounts in the following two windows. Figure 6- 8. User Accounts window The information on the window is described as follows:...
  • Page 50 DGS-3224TGR Gigabit Ethernet Switch User’s Guide User Accounts – Add Figure 6- 9. User Accounts – Add window To add a User Account, fill in the appropriate information in the Username, New Password, and Confirm New Password fields. Then select the desired access, Admin or User, in the Access Level drop-down menu and click Apply.
  • Page 51: Network Management

    Network Management SNMP V3 The DGS-3224TGR supports the Simple Network Management Protocol (SNMP) versions 1, 2c1 and 3. The SNMP version used to monitor and control the switch can be specified by the administrator. The three versions of SNMP vary in the level of security provided between the management station and the...
  • Page 52 DGS-3224TGR Gigabit Ethernet Switch User’s Guide SNMP settings are configured using the menus located on the SNMP V3 folder of the Web manager. Workstations on the network that are allowed SNMP privileged access to the switch can be restricted with the Management Station IP Address window.
  • Page 53 DGS-3224TGR Gigabit Ethernet Switch User’s Guide The information on the SNMP View Table windows is described as follows: Parameter Description View Name Type an alphanumeric string of up to characters. This used identify the new SNMP view being created. Subtree...
  • Page 54 DGS-3224TGR Gigabit Ethernet Switch User’s Guide SNMP Host Table Use the SNMP Host Table to set up trap recipients. Figure 6- 15. SNMP Host Table window To delete an existing entry, click the selection button in the right-hand column that corresponds to the port you want to remove.
  • Page 55 DGS-3224TGR Gigabit Ethernet Switch User’s Guide SNMP Group Table The SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous window. Figure 6- 17. SNMP Group Table window To delete an existing entry, click the selection button in the right-hand column that corresponds to the port you want to remove.
  • Page 56 DGS-3224TGR Gigabit Ethernet Switch User’s Guide SNMP users. Read View Name This name is used to specify the SNMP group created can request SNMP messages. Write View Name Specify a SNMP group name for users that are allowed SNMP write privileges switch’s...
  • Page 57 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Engine ID The Engine ID is a unique identifier used for SNMP V3 implementations. This is an alphanumeric string used to identify the SNMP engine on the switch. Figure 6- 19. Engine ID window To change the Engine ID, type the new Engine ID in the space provided and click the Apply button.
  • Page 58 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 21. SNMP User Table – Add window The following parameters are used in the SNMP User Table windows: Parameter Description User Name Type in the new SNMP V3 user name or community string for V1 or V2.
  • Page 59 DGS-3224TGR Gigabit Ethernet Switch User’s Guide packets for the host. From the pull-down menu select: MD5 − To specify that the HMAC- MD5-96 authentication level will be used. SHA − To specify that the HMAC- SHA-96 authentication level will be used.
  • Page 60: Switch Utilities

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Switch Utilities TFTP Services Trivial File Transfer Protocol (TFTP) services allow the switch firmware to be upgraded by downloading a new firmware file from a TFTP server to the switch. A configuration file can also be loaded into the switch, and switch settings can be saved to a TFTP server.
  • Page 61 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 24. Download Configuration from TFTP Server window Enter the IP address of the TFTP Server in the Server IP Address field and the complete path and file name of the firmware file for the switch in the Path/Filename field. Click Save Settings to enter the server’s IP address into the switch’s RAM (use Save Changes to enter the address into the switch’s...
  • Page 62 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Enter the IP address of the TFTP Server in the Server IP Address field and the complete path and file name of the firmware file for the switch in the Path/Filename field. Click Save Settings to enter the server’s IP address into the switch’s RAM (use Save Changes to enter the address into the switch’s...
  • Page 63: Network Monitoring

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 27. Ping Test window Enter the IP address of the network device to be Pinged in the first field, select the number of test packets to be sent (three is usually enough) in the second field, and enter a time-out value in the third field.
  • Page 64 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Port Utilization Figure 6- 28. Port Utilization window The information is described as follows: • Refresh Interval – Select the desired setting between 2 seconds and 60 second, or Suspend. • Clear – Clicking this button clears all statistics counters on this window.
  • Page 65 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Port Error Packets Figure 6- 29. Port Error Packets window The information is described as follows: • Port – Select the port you want port error packet statistics for from the drop-down menu. •...
  • Page 66 DGS-3224TGR Gigabit Ethernet Switch User’s Guide • CRC Error – For 10 Mbps ports, the counter records CRC errors (FCS or alignment errors). For 100 Mbps ports, the counter records the sum of CRC errors and code errors (frames received with rxerror signal).
  • Page 67: Address Tables

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide • Interval – Select the desired setting between 2 seconds and 60 second, or Suspend. • Clear – Clicking this button clears all statistics counters on this window. • 64 – The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).
  • Page 68 DGS-3224TGR Gigabit Ethernet Switch User’s Guide MAC Address Table Figure 6- 31. MAC Address Table window The information is described as follows: • Browse – Click this button to initiate the desired method for viewing MAC addresses. • Clear – Clicking this button clears all statistics counters on this window.
  • Page 69 DGS-3224TGR Gigabit Ethernet Switch User’s Guide ARP Table Figure 6- 32. ARP Table window The information is described as follows:...
  • Page 70 DGS-3224TGR Gigabit Ethernet Switch User’s Guide • Find – Click this button to initiate the search for the ARP Table. • Clear Table – Clicking this button clears all statistics counters on this window. Status The Status windows include GVRP Status, Router Ports, IGMP Snooping Group Table, and Switch History.
  • Page 71 DGS-3224TGR Gigabit Ethernet Switch User’s Guide IGMP Snooping Group Table This allows the switch’s IGMP Snooping table to be viewed. IGMP Snooping allows the switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the switch.
  • Page 72 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 36. Switch History window The switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC connected to the console manager. Clicking Next at the bottom of the window will allow you to display all the switch Trap Logs.
  • Page 73: Factory Reset

    Figure 6- 37. Factory Reset window Save Changes The DGS-3224TGR has two levels of memory, normal RAM and non-volatile or NV-RAM. To retain any configuration changes permanently, highlight Save Changes on the Basic Setup window. The following window will appear to verify that your new settings have been saved to NV-RAM.
  • Page 74: Restart System

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Restart System Figure 6- 39. Restart System window Logout Figure 6- 40. Web Logout Setup window Advanced Setup This category includes: Switch Advanced Settings, Spanning Tree, Forwarding, Configure QOS, Access Profile Mask Setting, Port Security, Mirroring Configurations, VLAN Configurations, Link Aggregation, Lacp, 802.1X, TACACS, System Log, Multicast Configuration, and SSH Management,...
  • Page 75: Switch Advanced Settings

    The Switch supports 802.1d Spanning Tree Protocol (STP) and 802.1w Rapid Spanning Tree Protocol (RSTP). 802.1d STP will be familiar to most networking professionals. However since 802.1w RSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided in Chapter Five’s “Spanning Tree” section.
  • Page 76 DGS-3224TGR Gigabit Ethernet Switch User’s Guide STP Switch Settings The switch supports 802.1W Rapid Spanning Tree Protocol, which allows you to create alternative paths (with multiple switches or other types of bridges) in your network. See the Spanning Tree Algorithm section of the “Switch Management and Operating Concepts”...
  • Page 77 DGS-3224TGR Gigabit Ethernet Switch User’s Guide • Priority (0-61440) <32768> – A Bridge Priority can be from 0 to 61440. Zero is equal to the highest Bridge Priority. • STP Version – Choose RSTP (default) or STP compatible. Both versions use STP parameters in the same way.
  • Page 78: Stp Port Settings

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide STP Port Settings Figure 6- 43. STP Port Table window Select an entry on the STP Port Table and then click Edit:...
  • Page 79 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 44. STP Port Setting window To configure Spanning Tree Protocol functions for individual ports, enter the desired information in the fields on this window and then click Apply. The information on the window is described as follows: •...
  • Page 80: Forwarding

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide • Configure Ports from __ to – A consecutive group of ports may be configured starting with the selected port. Forwarding MAC Forwarding MAC Address Aging Time Figure 6- 45. MAC Address Aging Time window The information on the window is described as follows: •...
  • Page 81 DGS-3224TGR Gigabit Ethernet Switch User’s Guide To modify a unicast MAC address on the table above, select it and then click Edit. To add a unicast MAC address to the table above, click New. Figure 6- 47. Unicast MAC Address Settings – Add window...
  • Page 82 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 48. Multicast MAC Address Settings window Click New to add multicast MAC addresses to the table above. To make changes to an existing entry, select the entry on the table above and click Edit.
  • Page 83 The DGS-3224TGR allows some control over broadcast/multicast storms by setting thresholds on the number of broadcast/multicast packets received (in thousands of packets per second or Kpps), and then following a user-specified course of action when this threshold is exceeded.
  • Page 84: Configure Qos

    Configure QOS The DGS-3224TGR supports 802.1p priority queuing. The switch has eight priority queues. These priority queues are numbered from 0 — the lowest priority queue — to 7 — the highest priority queue.
  • Page 85 CoS until there are no more packets for this CoS. The other CoS queues that has been given a nonzero value, and depending upon the weight, they will follow a common weighted round-robin scheme. Remember that the DGS-3224TGR has eight priority queues (and thus eight Classes of Service) for each port on the switch.
  • Page 86: Qos Output Scheduling

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide QOS Output Scheduling Figure 6- 52. QOS Output Scheduling window 802.1p Default Priority The switch allows the assignment of a default 802.1p priority to each port on the switch.
  • Page 87 This window allows you to assign a default 802.1p priority to any given port on the switch. The priority queues are numbered from 0 − the lowest priority − to 7 − the highest priority. 802.1p User Priority The DGS-3224TGR allows the assignment of a User Priority to each of the 802.1p priorities.
  • Page 88 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 54. 802.1p User Priority window...
  • Page 89 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Bandwidth Control Table The bandwidth control settings are used to place a ceiling on the transmitting and receiving data bit rates for any port. Figure 6- 55. Bandwidth Control Table window...
  • Page 90: Access Profile Mask Setting

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide To change the maximum allowed bandwidth for a given port in the Bandwidth Control Table window, click the selection button in the far left column that corresponds to the port you want to configure and click the Edit button.
  • Page 91 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Click the New button in the window above. A new window is displayed. Use this to create an access profile and specify what criteria are used to examine frames. Once the profile has been created you can set up the rule applied to the profile as described later in this section.
  • Page 92 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Configure the following Access Profile Mask settings: Parameter Description Profile ID Type in a unique identifier number for this profile set or allow an ID to be automatically assigned by checking the Auto Assign option. This value can be set from 1 to 255.
  • Page 93 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify code to further specify that the access profile will apply an ICMP cod value. Select IGMP to instruct the switch to examine the Internet Group Management Protocol (IGMP) field in each frame’s...
  • Page 94 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 60. Access Profile Rule Setting (Ethernet) window Figure 6- 61. Access Profile Rule Setting (IP) window To create a new rule set for the access profile click the New button. A new window is displayed. To...
  • Page 95 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 62. Access Profile Rule Setting – Add (Ethernet) window Figure 6- 63. Access Profile Rule Setting – Add (IP) window Configure the following Access Rule Configuration settings (additional parameters are described in...
  • Page 96: Port Security

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide entered. replace Select this option to instruct the switch to replace the priority 802.1p value (in a packet that meets the selected criteria). In this way, packets meeting the criteria can have their priority handling modified for use within the switch, and then have a different priority value assigned when they leave the switch.
  • Page 97 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 64. Port Security window Click Edit to open the following window:...
  • Page 98 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 65. Port Security Configurations window The following fields can be set: Parameter Description Admin State Allows the selected port(s) dynamic <Disabled> MAC address learning to be locked such that new source MAC addresses...
  • Page 99 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 66. Clear Port Security Entry window Select the range of port security entries and then click Clear. Click Delete Port Security Entry on the Port Security menu to access the following window: Figure 6- 67.
  • Page 100: Mirroring Configurations

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Mirroring Configurations Figure 6- 68. Mirroring Configurations window The target port is the port where information will be duplicated and sent for capture and network analysis. This is the port where a network analyzer would be attached to capture packets duplicated from the source port.
  • Page 101 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Asymmetric VLAN State Figure 6- 69. Asymmetric VLAN State window To set Asymmetric VLANs on the DGS-3224TGR, select Enabled from the drop-down menu and then click Apply. Switch GVRP Figure 6- 70. Switch GVRP window To enable ports from dynamically joining VLANs, select Enabled from the drop-down menu and then click Apply.
  • Page 102 DGS-3224TGR Gigabit Ethernet Switch User’s Guide 802.1Q VLANs Figure 6- 71. 802.1Q VLANs window To delete an existing 802.1Q VLAN, click the corresponding click-box to the left of the VLAN you want to delete from the switch and then click the Delete button.
  • Page 103 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 73. 802.1Q VLANs – Edit window The following fields can then be set in either of the two 802.1Q Static VLAN windows: Parameter Description VLAN ID (VID) Allows the entry of a VLAN ID in the...
  • Page 104 DGS-3224TGR Gigabit Ethernet Switch User’s Guide tagged packet exits the port, the packet header is unchanged. check in the Untagged field specifies the port as an Un-tagging member of the VLAN. When an untagged packet is transmitted by the port, the packet header remains unchanged.
  • Page 105: Link Aggregation

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide This window allows you to see a Port VLAN ID (PVID) number, enable or disable the ingress filtering check, and enable or disable GVRP for individual ports. Ingress filtering means that a receiving port will check to see if it is a member of the VLAN ID in the packet before forwarding the packet.
  • Page 106 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Link Aggregation Group Link aggregation allows several ports to be grouped together and to act as a single link. This gives a bandwidth that is a multiple of a single link’s bandwidth. Link aggregation is most commonly used to link a bandwidth intensive network device or devices – such as a server –...
  • Page 107: Lacp

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 77. second Link Aggregation window The same window is also used to edit an existing link aggregation. The following fields can be set: Parameter Description Group ID Allows the entry of a number used to identify the link aggregation group −...
  • Page 108 DGS-3224TGR Gigabit Ethernet Switch User’s Guide and active modes allow LACP to negotiate between LAN ports to determine if they can form a link aggregation. • Passive – LACP mode that places a port into a passive negotiating state, in which the port responds to LACP packets it receives but does not initiate LACP negotiation.
  • Page 109 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 78. Lacp Port Table window To edit a LACP Port Table entry, select it and then click Edit.
  • Page 110: 100

    Select the desired port, mode, and range of ports to be configured and then click Apply. 802.1X The DGS-3224TGR implements the server-side of the IEEE 802.1x Port-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the switch that a user or network device must meet before allowing that port to forward or receive frames.
  • Page 111 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Protocol Authentication Protocol. 802.1X Port Settings Existing 802.1X port settings are displayed and can be configured using the windows below. Figure 6- 81. 802.1X Port Settings window Click the selection button on the far left that corresponds to the port you want to configure and click...
  • Page 112 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 82. 802.1X Port Settings – Edit window Configure the following 802.1x port settings: Parameter Description Port Port being configured for 802.1x settings. Capability Two role choices can be selected: Authenticator − A user must pass the...
  • Page 113 DGS-3224TGR Gigabit Ethernet Switch User’s Guide communication in both receiving and transmitting directions, or just the receiving direction. OperCrlDir This displays whether a controlled Port that is unauthorized will exert control over communication in both receiving transmitting directions, just receiving direction.
  • Page 114 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 83. 802.1x Reauthenticate Ports window Select ports to be reauthenticated and then click the Reauthenticate button to let your change take effect. The port number is the only parameter to be configured.
  • Page 115 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 86. RADIUS Server Settings – Add window Configure the following RADIUS server settings for both the Add and Edit windows: Parameter Description Index RADIUS server settings index. IP Address Type in the IP address of the RADIUS server.
  • Page 116 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Click New to add an 802.1X local server user: Figure 6- 88. 802.1X Local User – Add window 802.1X Diagnostics Figure 6- 89. 802.1X Auth Diagnostics Table window...
  • Page 117 DGS-3224TGR Gigabit Ethernet Switch User’s Guide 802.1X Auth Statistics Figure 6- 90. 802.1X Auth Statistics Table window...
  • Page 118 DGS-3224TGR Gigabit Ethernet Switch User’s Guide 802.1X Auth Session Figure 6- 91. 802.1X Auth Session Statistics window 802.1X Auth Client Figure 6- 92. RADIUS Auth Client Table window...
  • Page 119: Tacacs

    Figure 6- 93. RADIUS Accounting Client Table window TACACS The DGS-3224TGR provides a way to centrally validate users attempting to gain access to the switch using the Terminal Access Controller Access Control System (TACACS) protocol. TACACS is implemented in the switch’s software to allow centralized control over access to servers. Authentication can also be provided for administrative tasks on the server and access server user interfaces.
  • Page 120 DGS-3224TGR Gigabit Ethernet Switch User’s Guide To add an entry to this table, click New. To modify an entry, select it and then click Edit. Tacacs Group Figure 6- 96. TACACS Group Table window To add an entry to this table, click New. To remove an entry, select it and then click Delete.
  • Page 121 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Tacacs Method List Figure 6- 98. TACACS Method List Table window To add an entry to this table, click New. To modify an entry on this table, select it and then click Edit. To remove an entry, select it and then click Delete.
  • Page 122: System Log

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Authentication Figure 6- 101. TACACS Authentication window Fill in the TACACS Authentication settings and then click Apply to let your changes take effect. System Log The switch can send Syslog messages to up to four designated servers. Use the System Log Server.
  • Page 123 DGS-3224TGR Gigabit Ethernet Switch User’s Guide System Log Server Figure 6- 103. System Log Server window Click New to add an entry to this table: Figure 6- 104. System Log Server – Add window Parameter Description Index Syslog server settings index (1-4).
  • Page 124 DGS-3224TGR Gigabit Ethernet Switch User’s Guide may use the "user-level" Facility. Those Facilities that have been designated are shown in the following: Bold font means the facility values the switch supports now. Numerical Facility Code kernel messages user-level messages mail system...
  • Page 125: Multicast Configuration

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Multicast Configuration IGMP Snooping Global Figure 6- 105. IGMP Snooping State window Internet Group Management Protocol (IGMP) snooping allows the switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the switch can open or close a port to a specific device based on IGMP messages passing through the switch.
  • Page 126 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 107. IGMP Snooping Configurations – Edit window To set up IGMP snooping, first change the IGMP Snooping State field to Enabled on the IGMP Snooping State window. Next, enter the desired IGMP snooping configuration settings in the window above. The Query Interval (1-65535) can be set between 1 and 65,535 seconds and determines the time between IGMP queries.
  • Page 127: Ssh Management

    DGS-3224TGR Gigabit Ethernet Switch User’s Guide Figure 6- 109. Static Router Port Settings – Edit window SSH Management SSH is the abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows you to securely login to remote host computers, to execute commands safely in a remote computer and so forth, and to provide secure encrypted and authenticated communications between two non-trusted hosts.
  • Page 128 DGS-3224TGR Gigabit Ethernet Switch User’s Guide SSH Global Figure 6- 110. SSH Configure window The SSH configure window contains the global server setting: maximum simultaneous sessions, connection timeout, maximum fail attempts, authentication method, key re-exchange timeout, the encryption algorithms, data integrality algorithms and public key algorithms.
  • Page 129 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Blowfish: Use Blowfish encryption. • Data Integrity – Specify the desired MAC algorithm to use for the data integrity verification. SHA-1: Use the hmac-sha1 MAC. MD5: Use the hmac-md5 MAC. • Public Key – Specify the algorithm to use for the public key.
  • Page 130 DGS-3224TGR Gigabit Ethernet Switch User’s Guide ECHNICAL PECIFICATIONS General Standards: IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3z Gigabit Ethernet IEEE 802.1Q Tagged VLAN IEEE 802.1P Tagged Packets IEEE 802.3ab 1000BASE-T IEEE 802.3x Full-duplex Flow Control ANSI/IEEE 802.3 NWay auto-negotiation...
  • Page 131 DGS-3224TGR Gigabit Ethernet Switch User’s Guide General 1000BASE-ZX: Single-mode fiber module (80km) Mini-GBIC: SFP Transceiver for 1000BASE-LX Single-mode fiber module (10km) SFP Transceiver for 1000BASE-SX Multi-mode fiber module (550m) SFP Transceiver for 1000BASE-LHX Single-mode fiber module (40km) SFP Transceiver for 1000BASE-ZX...
  • Page 132 DGS-3224TGR Gigabit Ethernet Switch User’s Guide Performance Transmission Store-and-forward Method: RAM Buffer: 2 MB per device Packet Filtering/ Full-wire speed for all Forwarding Rate: connections. 1,488,095 pps per port (for 1000Mbps) MAC Address Automatic update. Supports 16K Learning: MAC address.
  • Page 133 DGS-3224TGR Gigabit Ethernet Switch User’s Guide ABLE ENGTHS Use the following table to as a guide for the maximum cable lengths: Maximum Standard Media Type Distance DEM-310GT: SFP 10km Transceiver for 1000BASE- Mini GBIC LX, Single-mode fiber module DEM-311GT: SFP...
  • Page 134 DGS-3224TGR Gigabit Ethernet Switch User’s Guide LOSSARY 1000BASE-T – A specification for Gigabit Ethernet over copper wire (IEEE Std. 802.3ab). The standard defines 1 Gb/s data transfer over distances of up to 100 meters using four pairs of CAT-5 balanced copper cabling and a 5-level coding scheme.
  • Page 135 DGS-3224TGR Gigabit Ethernet Switch User’s Guide half duplex – A system that allows packets to be transmitted and received, but not at the same time. Contrasts with full duplex. IP address – Internet Protocol address. A unique identifier for a device attached to a network using TCP/IP.
  • Page 136 HAZARD. LIMITATION OF LIABILITY IN NO EVENT WILL D-LINK BE LIABLE FOR ANY DAMAGES, INCLUDING LOSS OF DATA, LOSS OF PROFITS, COST OF COVER OR OTHER INCIDENTAL, CONSEQUENTIAL OR INDIRECT DAMAGES ARISING OUT THE INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE OR INTERRUPTION OF A D- LINK PRODUCT, HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY.
  • Page 137 Warranty service for software products may be obtained by contacting a D-Link office within the applicable warranty period. A list of D-Link offices is provided at the back of this manual, together with a copy of the Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting warranty service.
  • Page 138 Warranty Period from the date of original retail purchase. If a material defect is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
  • Page 139 D-Link; Products that have been purchased from inventory clearance or liquidation sales or other sales in which D-Link, the sellers, or the liquidators expressly disclaim their warranty obligation pertaining to the product. Repair by anyone other than D-Link or an Authorized D-Link Service Office will void this Warranty.
  • Page 140 E-MAIL: service@dlink.india.com Italy D-Link Mediterraneo Srl/D-Link Italia Via Nino Bonnet n. 6/b, 20154, Milano, Italy TEL: 39-02-2900-0676 FAX: 39-02-2900-1723 URL: www.dlink.it E-MAIL: info@dlink.it Japan D-Link Japan 10F, 8-8-15 Nishi-Gotanda, Shinagawa-ku, Tokyo 141, Japan TEL: 81-3-5434-9678 FAX: 81-3-5434-9868 URL: www.d-link.co.jp E-MAIL: kida@d-link.co.jp...
  • Page 141 South Africa D-Link South Africa 102 – 106 Witchhazel Avenue, Einstein Park 2, Block B, Highveld Technopark, Centurion, South Africa TEL: 27 (0) 12-665-2165 FAX: 27 (0) 12-665-2186 URL: www.d-link.co.za E-MAIL: attie@d-link.co.za Spain D-Link Iberia C/Sabino De Arana, 56 Bajos, 08028 Barcelona, Spain TEL: 34 93 4090770 FAX: 34 93 4910795 URL: www.dlinkiberia.es...
  • Page 142: Registration Card

    8. What category best describes your company? Aerospace Engineering Education Finance Hospital Legal Insurance/Real Estate Manufacturing Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product?_______________________________________________...

Table of Contents