Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
Notes, Notices, and Cautions... viii Safety Instructions...ix Safety Cautions... ix General Precautions for Rack-Mountable Products ... x Protecting Against Electrostatic Discharge... xi Introduction...1 xStack DES-3800 Series... 1 Gigabit Ethernet Technology... 1 Switch Description... 2 Features... 2 Ports... 3 Front-Panel Components ... 2 Rear Panel Description ...
Page 4 Login to Web Manager ... 26 Web-based User Interface... 27 Web Pages ... 28 Administration ...29 Device Information...29 IP Address ...32 Setting the Switch's IP Address using the Console Interface ... 34 Port Configuration...34 Port Settings... 34 Port Description... 36 PoE Configuration...38 User Accounts ...41 Port Mirroring ...42...
Page 5 Trunking ...78 Link Aggregation... 80 LACP Port Setting ... 82 IGMP...84 IGMP Snooping ... 84 Static Router Ports Entry ... 86 Spanning Tree ...87 STP Bridge Global Settings... 89 MST Configuration Identification ... 92 MSTP Port Information ... 94 STP Instance Settings ... 96 STP Port Settings...
Page 6 VRRP Virtual Router Settings ... 148 VRRP Authentication Settings ... 151 IP Multicast Routing Protocol ...153 IGMP Interface Settings ... 154 DVMRP Interface Configuration... 156 PIM-DM Interface Configuration ... 158 QoS ...161 Port Bandwidth...163 QoS Scheduling Mechanism ...164 802.1p Default Priority...165 802.1p User Priority ...167 ACL...168 Access Profile Table...168...
Page 7 Browse DVMRP Routing Next Hop Table... 266 Browse PIM Neighbor Table ... 267 OSPF Monitoring ...267 Browse OSPF LSDB Table ... 267 Browse OSPF Neighbor Table... 269 OSPF Virtual Neighbor ... 269 Browse PoE Status (for DES-3828P only) ...270 Switch History Log ...271 Switch Maintanence ...272...
Page 8 Reset ...272 Reset Config ... 272 Reset System... 273 Reboot System...273 Save Changes ...274 Logout ...275 Technical Specifications ...276 Cables and Connectors...279 Cable Lengths ...280 Glossary ...281 Warranties/Registration...285 Tech Support ...292...
Page 9: Preface
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Preface The xStack DES-3800 Series User Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features.
Page 10: Intended Readers
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Intended Readers The xStack DES-3800 Series User Manual contains information for setup and management of the Switch. The term, “the Swich” will be used when referring to all three switches. This manual is intended for network managers familiar with network management concepts and terminology.
Page 11: Safety Instructions
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this document, the caution icon ( cautions and precautions that you need to review and follow.
Page 12: General Precautions For Rack-Mountable Products
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 100 V/50 Hz in eastern Japan and 100 V/60 Hz in western Japan • 230 V/50 Hz in most of Europe, the Middle East, and the Far East • –48 VDC for DC power supply unit on DES-3828DC DC only •...
Page 13: Protecting Against Electrostatic Discharge
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • Before working on the rack, make sure that the stabilizers are secured to the rack, extended to the floor, and that the full weight of the rack rests on the floor. Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack.
Page 14 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 2. When transporting a sensitive component, first place it in an antistatic container or packaging. 3. Handle all sensitive components in a static-safe area. If possible, use antistatic floor pads,...
Page 15: Introduction
Gigabit Combo Ports xStack DES-3800 Series The DES-3800 series is a member of the D-Link xStack switch family. xStack is a complete family of stackable devices that ranges from edge 10/100Mbps switches to core Gigabit switches. xStack provides unsurpassed performance, fault tolerance, scalable flexibility, robust security, standard-based interoperability and an impressive support for 10Gigabit technology to future-proof departmental and enterprise network deployments with an easy migration path.
Page 16: Switch Description
Each 10/100 port can support up to 200 Mbps of throughput in full-duplex mode. In addition, the Switch has 2 combo 1000 Base-T/SFP ports on the front panel and two 1000 Base-T on the back. These gigabit combo ports are ideal for connecting to a server or network backbone. See the “Ports”...
Page 17: Xstack Des-3800 Series
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MIB support for: • RFC1213 MIB II • RFC1493 Bridge • RFC2819 RMON • RFC2665 Ether-like MIB • RFC2863 Interface MIB • Private MIB • RFC2674 for 802.1p • IEEE 802.1x MIB •...
Page 18: Front-Panel Components
DEM-310GT (1000BASE-LX) • DEM-311GT (1000BASE-SX) • DEM-314GT (1000BASE-LH) • DEM-315GT (1000BASE-ZX) • Th Switch provides 2 1000 Base-T ports on the rear panel. Both 1000BASE-T ports comply with the following standards: IEEE 802.3 • IEEE 802.3u • IEEE 802.3ab •...
Page 19 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DES-3828P LEDs LED indicators display the status of the Switch and the network. The front panel of DES-3828P has LED indicators for power, console, RPS, 27GE (rear port), 28 GE (rear port), Link/Act/Speed, PoE, for each of the 24 10/100 Mbps Ethernet ports, and for the two 1000BASE-T/SFP ports.
Page 20 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 1- 2. Front Panel View of the DES-3828DC The following table describes the LEDs for DES-3828/DES-3828P/DES-3828DC: Description Power Off – Power Off Solid Green – Power On Console Solid Green – Switch is being logged in to via the out-of-band/local console management through the RS-232 console port Blinking Green –...
Page 21: Rear Panel Description
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Ports 1-24 One row of LEDs for each port is located above the ports on the front panel. The first LED is for the top port and the second one is for the bottom ports. These port LEDs...
Page 22: Side Panel Description
The left hand panel includes a system fan and a heat vent. The system fans are used to dissipate heat. Do not block these openings on either side of the Switch. Leave at least 6 inches of space at the rear and sides of the Switch for proper ventilation.
Page 23: Gigabit Ports
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 1- 6. Side Panels Gigabit Ports In addition to the 24 10/100 Mbps ports, the Switch features two 1000BASE-T/SFP Gigabit Ethernet Combo ports on the front panel, and two 1000BASE-T copper ports on the rear panel. The diagrams below show Gigabit ports 25 and 26 on the far right of the front panel.
Page 24: Installation
RS-232 console cable • If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
Page 25: Installing The Switch Without The Rack
Installing the Switch Without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity.
Page 26: Connecting Dc Power To Des-3828Dc
Power On AC Power Plug one end of the AC power cord into the power connector of the Switch and the other end into the local power source outlet.
Page 27: Rps Installation
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 2 - 4. Power connections attached to contacts on assembly 1. Firmly attach the DC power to the negative and positive contacts on the wiring assembly. The negative pole (-) connects to the -48V contact.
Page 28 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The RPS can be mounted in a standard 19" rack. Use the following diagram to guide you. Figure 2 - 6. Install DPS-900 in equipment rack CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances.
Page 29: Connect To Rps
Figure 2 - 8. Install DPS-800 in an Equipment Rack Connect to RPS The DPS-200 is connected to the Master Switch using a 14-pin DC power cable. A standard, three- pronged AC power cable connects the redundant power supply to the main power source.
Page 30 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 2 - 9. The DES-3828 with the DPS-200 chassis RPS 1. Insert one end of the 14-pin DC power cable into the receptacle on the switch and the other end into the redundant power supply.
Page 31 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DES-3828P DPS-600 Figure 2 - 10. DES-3828P with the DPS-600 External Redundant Rower Supply...
Page 32: Connecting The Switch
End nodes include PCs outfitted with a 10, 100 or 1000 Mbps RJ 45 Ethernet/Fast Ethernet Network Interface Card (NIC) and most routers. An end node can be connected to the Switch via a twisted-pair Category 3, 4, or 5 UTP/STP cable. The end node should be connected to any of the ports of the Switch.
Page 33: Connecting To Network Backbone Or Server
• PoE Mode, DES-3828P works with all D-Link 802.3af capable devices. The Switch also works in PoE mode with all non-802.3af capable D-Link AP, IP Cam and IP phone equipment via DWL-P50. Figure 3- 2. Switch connected to a normal (non-Uplink) port on a hub or switch using a straight or NOTICE: When the SFP transceiver acquires a link, the associated integrated 10/100/1000BASE-T port is disabled.
Page 34: Introduction To Switch Management
Connecting the Console Port (RS-232 DCE) The Switch provides an RS-232 serial port that enables a connection to a computer or terminal for monitoring and configuring the Switch. This port is a female DB-9 connector, implemented as a data terminal equipment (DTE) connection.
Page 35 12. Enter the commands to complete your desired tasks. Many commands require administrator- level access privileges. Read the next section for more information on setting up user accounts. See the xStatck DES-3800 Series CLI Manual on the documentation CD for a list of all commands and additional information on using the CLI.
Page 36: First Time Connecting To The Switch
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch First Time Connecting to The Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch.
Page 37: Password Protection
Switch. Password Protection The Switch does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged access to the Switch's management software.
Page 38: Snmp Settings
MIB specifications and the protocol used to access this information over the network. The DES-3800 Series supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 39: Ip Address Assignment
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMP v.1...
Page 40 Information (Basic Settings) window on the Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
Page 41 Figure 4- 4. Assigning the Switch an IP Address In the above example, the Switch was assigned an IP address of 10.58.44.6 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management.
Page 42: Web-Based Switch Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Web-based Switch Configuration Introduction Login To Web manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software functions of the Switch can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 43: Web-Based User Interface
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Leave both the User Name field and the Password field blank and click OK. This will open the Web- based user interface. The Switch management features available in the web-based manager are explained below.
Page 44: Web Pages
(CLI) command save. Web Pages When you connect to the management mode of the Switch with a web browser, a login window is displayed. Enter a user name and password to access the Switch's management mode. Below is a list and description of the main folders available in the web interface: Administration –...
Page 45: Administration
Boot PROM, Firmware Version, and Hardware Version. This information is helpful to keep track of PROM and firmware updates and to obtain the Switch's MAC address for entry into another network device's address table, if necessary. The user may also enter a System Name, System Location and System Contact to aid in defining the Switch, to the user's preference.
Page 46 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 1. Device Information window...
Page 47 Minutes, 5 Minutes, 10 Minutes, 15 Minutes or Never. The default setting is 10 minutes. Serial Baud Rate This field specifies the baud rate for the serial port on the Switch. This fields menu is set at 115200 and cannot be changed. MAC Address Aging...
Page 48: Ip Address
The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the introduction of the xStack DES- 3800 Series CLI Manual or return to Section 4 of this manual for more information. To change IP settings using the web manager you must access the IP Address menu located in the Administration folder.
Page 49 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 3. If you want to access the Switch from a different subnet from the one it is installed on, enter the IP address of the Default Gateway. If you will manage the Switch from the subnet on which it is installed, you can leave the default address (0.0.0.0) in this field.
Page 50: Setting The Switch's Ip Address Using The Console Interface
10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
Page 51 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be configured: Parameter State <Enabled> Speed/Duplex <Auto> Figure 6- 3. Port Configuration window Description Toggle the State field to either enable or disable a given port or group of ports.
Page 52: Port Description
Click Apply to implement the new settings on the Switch. Port Description The Switch supports a port description feature where the user may name various ports on the Switch. To assign names to various ports, click Administration > Port Configuration > Port Description to...
Page 53 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 4. Port Description Setting window Use the From and To pull down menu to choose a port or range of ports to describe, and then enter a description of the port(s). Click Apply to set the descriptions in the Port Description Table.
Page 54: Poe Configuration
PSE pinout Alternative A, whereby power is sent out over pins 1,2,3 and 6. DES- 3828P works with all D-Link 802.3af capable devices. The Switch also works in PoE mode with all non-802.3af capable D-Link AP, IP Cam and IP phone equipment via DWL-P50.
Page 55 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Deny Low Priority After the power limit has been exceeded, the next port attempting to power up causes Port the port with the lowest priority to shut down to allow the high-priority and critical priority ports to power up.
Page 56 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 5. PoE Configuration window...
Page 57: User Accounts
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The PoE Configuration portion of the window is used to configure the PoE port settings. The following parameters can be set: Parameter Description From/To Specifies a range of ports to be configured.
Page 58: Port Mirroring
Access Right field. Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 59: System Log Host
3. Click Apply to let the changes take effect. System Log Host The Switch can send Syslog messages to up to four designated servers using the System Log Server. In the Administration folder, click System Log Host, to view the window shown below.
Page 60 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The parameters configured for adding and editing System Log Server settings are the same. See the table below for a description. The following parameters can be set: Parameter Description Index Syslog server settings index (1-4).
Page 61 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch UDP Port (514 or Type the UDP port number used for sending Syslog messages. The default is 0. 6000-65535) Status Choose Enabled or Disabled to activate or deactivate. To set the System Log Server configuration, click Apply. To delete an entry from the System Log Server window, click the corresponding X under the Delete heading of the entry you wish to delete.
Page 62: System Severity Settings
System Severity Settings The Switch can be configured to allow alerts be logged or sent as a trap to an SNMP agent or both. The level at which the alert triggers either a log entry or a trap message can be set as well. Use the System Severity Settings menu to set the criteria for alerts.
Page 63: Sntp Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNTP Settings Time Settings To configure the time settings for the Switch, open the Administration folder. Then the SNTP Settings folder and click on the Time Settings link, revealing the following window for the user to configure.
Page 64: Time Zone And Dst
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNTP Poll Interval in This is the interval, in seconds, between requests for updated SNTP information. Seconds (30-99999) Year Enter the current year, if you want to update the system clock.
Page 65 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 15. Time Zone and DST Settings window The following parameters can be set: Parameter Description Time Zone and DST Settings Daylight Saving Use this pull-down menu to enable or disable the DST Settings.
Page 66: Mac Notification Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch HH:MM DST Repeating Settings - Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula. For example, specify to begin DST on Saturday during the second week of April and end DST on Sunday during the last week of October.
Page 67 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 16. MAC Notification Settings...
Page 68: Tftp Services
TFTP server to the Switch. A configuration file can also be loaded into the Switch from a TFTP server. Switch settings can be saved to the TFTP server, and a history log can be uploaded from the Switch to the TFTP server. The TFTP server must be on the same IP subnet as the Switch.The TFTP server must be running TFTP server software to perform the...
Page 69: Multiple Image Services
Switch, open the Firmware Information link. The default setting for the Switch’s firmware will have the boot up firmware stored in Image 1, but the user may set either firmware stored to be the boot up firmware by using the Config Firmware Image window.
Page 70 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch This window holds the following information: Parameter Description States the image ID number of the firmware in the Switch’s memory. The Switch can store 2 firmware images for use. Image ID 1 will be the default boot up firmware for the Switch unless otherwise configured by the user.
Page 71: Ping Test
MIB specifications and the protocol used to access this information over the network. The DES-3800 Series supports the SNMP versions 1, 2c, and 3. The default SNMP setting is disabled. You must enable SNMP. Once SNMP is enabled you can choose which version you want to use to monitor and control the Switch.
Page 72: Snmp User Table
Use the SNMP V3 menus to select the SNMP version used for specific tasks. The DES-3800 Series supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The administrator can specify the SNMP version used to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 73 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch In the SNMP Manager folder, located in the Administration folder, click on the SNMP User Table link. This will open the SNMP User Table window, as shown below. To delete an existing SNMP User Table entry, click the X below the Delete heading corresponding to the entry you wish to delete.
Page 74 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Priv-Protocol None - Indicates that no authorization protocol is in use. DES - Indicates that DES 56-bit encryption is in use based on the CBC-DES (DES- 56) standard. To return to the SNMP User Table, click the entry to the SNMP User Table Configuration window, click on the Add button on the SNMP User Table window.
Page 75: Snmp View Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch able in SNMP V3 mode. To implement changes made, click Apply. To return to the SNMP User Table, click the Show All SNMP User Table Entries link. SNMP View Table The SNMP View Table is used to assign views to community strings that define which MIB objects can be accessed by a remote SNMP manager.
Page 76: Snmp Group Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous window. The following parameters can set: Parameter...
Page 77 Figure 6- 26. SNMP Group Table Configuration window To add a new entry to the Switch's SNMP Group Table, click the Add button in the upper left-hand corner of the SNMP Group Table window. This will open the SNMP Group Table Configuration window, as shown below.
Page 78: Snmp Community Table Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Security Model SNMPv1 - Specifies that SNMP version 1 will be used. SNMPv2 - Specifies that SNMP version 2c will be used. The SNMPv2 supports both centralized improvements in the Structure of Management Information (SMI) and adds some security features.
Page 79: Snmp Host Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 28. SNMP Community Table Configuration window The following parameters can set: Parameter Description Community Name Type an alphanumeric string of up to 33 characters that is used to identify members of an SNMP community.
Page 80 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To add a new entry to the Switch's SNMP Host Table, click the Add button in the upper left-hand corner of the window. This will open the SNMP Host Table Configuration window, as shown below.
Page 81: Snmp Engine Id
To change the Engine ID, type the new Engine ID in the space provided and click the Apply button. Single IP Management Settings All DES-3800 Series switches are set as Candidate (CaS) switches, as their factory default configuration and Single IP Management will be disabled. To enable SIM for the Switch using the Web interface, go to the Administration folder and click Single IP Management >...
Page 82 Commander - Choosing this parameter will make the Switch a Commander Switch (CS). The user may join other switches to this Switch, over Ethernet, to be part of its SIM group. Choosing this option will also enable the Switch to be configured for SIM.
Page 83: Layer 2 Features
Queue 7, will clear 4 packets for every 1 packet cleared from Queue 0. Remember, the priority queue settings on the Switch are for all ports, and all devices connected to the Switch will be affected. This priority queuing system will be especially beneficial if your network employs switches with the capability of assigning priority tags.
Page 84: Vlan Description
VLANs without a network device performing a routing function between the VLANs. The DES-3800 Series supports IEEE 802.1Q VLANs and Port-Based VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag-unaware.
Page 85: Q Vlan Tags
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch headers. The tagging feature allows VLANs to span multiple 802.1Q-compliant switches through a single physical connection and allows Spanning Tree to be enabled on all ports and work normally. The IEEE 802.1Q standard restricts the forwarding of untagged packets to the VLAN the receiving port is a member of.
Page 86: Port Vlan Id
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 2. IEEE 802.1Q Tag The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
Page 87: Tagging And Untagging
Tag-aware switches must keep a table to relate PVIDs within the Switch to VIDs on the network. The Switch will compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet.
Page 88: Default Vlans
(Port 10) is a member of VLAN 2 (and can therefore receive VLAN 2 packets). If Port 10 is not a member of VLAN 2, then the packet will be dropped by the Switch and will not reach its destination.
Page 89: Static Vlan Entry
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch selective forwarding feature based on VLAN criteria is how VLANs segment networks. The key point being that Port 1 will only transmit on VLAN 2. Network resources such as printers and servers however, can be shared across VLANs. This is achieved by setting up overlapping VLANs.
Page 90 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 6. 802.1Q Static VLAN window - Add To return to the Current 802.1Q Static VLANs Entries window, click the Show All Static VLAN Entries link. To change an existing 802.1Q VLAN entry, click the Modify button of the corresponding entry you wish to modify.
Page 91 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 7. 802.1Q Static VLAN window - Modify The following fields can then be set in either the Add or Modify 802.1Q Static VLANs windows: Parameter Description VID (VLAN ID) Allows the entry of a VLAN ID in the Add window, or displays the VLAN ID of an existing VLAN in the Modify window.
Page 92: Gvrp Setting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Click Apply to implement changes made. GVRP Setting In the Administration menu, open the VLAN folder and click GVRP Settings. The 802.1Q Port Settings window, shown below, allows you to determine whether the Switch will share its VLAN configuration information with other GARP VLAN Registration Protocol (GVRP) enabled switches.
Page 93 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 8. 802.1Q Port Settings window The following fields can be set: Parameter Description...
Page 94: Trunking
Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. DES-3800 Series supports up to 32 port trunk groups with 2 to 8 ports in each group. A potential bit rate of 8000 Mbps can be achieved.
Page 95 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent.
Page 96: Link Aggregation
If two redundant link aggregation groups are configured on the Switch, STP will block one entire group; in the same way STP will block a single port that has a redundant link.
Page 97 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 12. Link Aggregation Settings window - Modify The user-changeable parameters are as follows: Parameter Description Group ID Select an ID number for the group, between 1 and 32.
Page 98: Lacp Port Setting
The LACP Port Setting window is used in conjunction with the Link Aggregation window to create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP control frames.
Page 99 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 13. LACP Port Settings window The user may set the following parameters: Parameter Description...
Page 100: Igmp
Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch.
Page 101 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters may be viewed or modified: Parameter Description VLAN ID This is the VLAN ID that, along with the VLAN Name, identifies the VLAN the user wishes to modify the IGMP Snooping Settings for.
Page 102: Static Router Ports Entry
IGMP reports or implement IGMP snooping, a multicast router connected to the router port of a Layer 3 switch would not be able to receive UDP data streams unless the UDP multicast packets were all forwarded to the router port.
Page 103: Spanning Tree
802.1s MSTP. 802.1d STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP.
Page 104: W Rapid Spanning Tree
VLANs and their respective spanning trees. Each switch utilizing the MSTP on a network will have a single MSTP configuration that will have the following three attributes: 1.
Page 105: Stp Bridge Global Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch results in faster detection of failed links, and thus faster topology adjustment. A drawback of 802.1d is this absence of immediate feedback from adjacent bridges. 802.1d MSTP 802.1w RSTP Disabled...
Page 106 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 18. STP Bridge Global Settings window – RSTP (default) Figure 7- 19. STP Bridge Global Settings window - MSTP Figure 7- 20. STP Bridge Global Settings window...
Page 107 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch NOTE: The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will occur. Observe the following formulas when setting the above parameters: Max. Age <= 2 x (Forward Delay - 1 second) Max.
Page 108: Mst Configuration Identification
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MST Configuration Identification The following screens in the MST Configuration Identification window allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree instance set on the Switch.
Page 109 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 22. Instance ID Settings window – Add The user may configure the following parameters to create a MSTI in the Switch. Parameter Description MSTI ID Enter a number between 1 and 15 to set a new MSTI on the Switch.
Page 110: Mstp Port Information
This field is used to specify the VID range from configured VLANs set on the Switch that the user wishes to add to this MSTI ID. Supported VIDs on the Switch range from ID number 1 to 4094. This parameter can only be utilized if the Type chosen is Add or Remove.
Page 111 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch lower priority values mean higher priorities for forwarding packets. To view the following window, click Layer 2 Features > Spanning Tree > MSTP Port Information: To view the MSTI settings for a particular port, select the Port number, located in the top left hand corner of the screen and click Apply.
Page 112: Stp Instance Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Priority Enter a value between 0 and 240 to set the priority for the port interface. A higher priority will designate the interface to forward packets first. A lower number denotes a higher priority.
Page 113: Stp Port Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MSTI ID Displays the MSTI ID of the instance being Modified. An entry of 0 in this field denotes the CIST (default MSTI). The Type field in this window will be permanently set to Set Priority Only.
Page 114 Port Priority and Port Cost. An STP Group spanning tree works in the same way as the switch-level spanning tree, but the root bridge concept is replaced with a root port concept. A root port is a port of the group that is elected based on port priority and port cost, to be the connection to the network for the group.
Page 115: Stp Port Instance Information
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description From/To <Port 1> A consecutive group of ports may be configured starting with the selected port. External Cost < 0 = Auto> This defines a metric that indicates the relative cost of forwarding packets to the specified port list.
Page 116 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 30. STP Port Instance Information To view a previously created STP Port instance, enter the instance ID in the Instance field and click Apply. The Instance Information will be displayed.
Page 117: Forwarding
Table, click the corresponding X under the Delete heading. Static Multicast Forwarding The following figure and table describe how to set up Multicast Forwarding on the Switch. Open the Forwarding Filtering folder and click on the Multicast Forwarding link to see the entry screen below: Figure 7- 32.
Page 118 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 33. Setup Static Multicast Forwarding Table window The following parameters can be set: Parameter Description The VLAN ID of the VLAN the corresponding MAC address belongs to. Multicast MAC The MAC address of the static source of multicast packets.
Page 119: Layer 3 Features
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Layer 3 Features IP Interface Settings MD5 Key Settings Route Redistribution Settings Static/Dynamic Route Setings Route Preference Settings Static ARP Settings OSPF DCHP/BOOTP Relay DNS Relay VRRP IP Multicast Routing Settings The following section will aid the user in configuring security functions for the Switch.
Page 120 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch address for an IP interface on the switch. For this example, we have chosen the next IP address above the network address for the IP interface’s IP Address: VLAN Name...
Page 121 This entry determines whether the interface will be active or not. Link Status This read only field states the current status of the IP Interface on the Switch. Link Up denotes that the IP interface is up and running on the Switch. Link Down will denote that the IP interface is not currently set and/or enabled on the Switch.
Page 122: Md5 Key Table Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MD5 Key Table Configuration The MD5 Key Table Configuration menu allows the entry of a 16 character Message Digest − version 5 (MD5) key which can be used to authenticate every packet exchanged between OSPF routers.
Page 123 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Static Local Entering the Type combination − internal type_1 type_2 is functionally equivalent to all. Entering the combination type_1 type_2 is functionally equivalent to external. Entering the combination internal external is functionally equivalent to all.
Page 124: Static/Default Route Settings
Entries into the Switch’s forwarding table can be made using both MAC addresses and IP addresses. Static IP forwarding is accomplished by the entry of an IP address into the Switch’s Static IP Routing Table. To view the following window, click Layer 3 Features > Static/Default Route Settings.
Page 125: Static Arp Table
The following fields can be set: Parameter Description IP Address Allows the entry of an IP address that will be a static entry into the Switch’s Routing Table. Subnet Mask Allows the entry of a subnet mask corresponding to the IP address above.
Page 126: Rip
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To add a new entry, click the Add button, revealing the following window to configure: Figure 8- 9. Static ARP Table – Add a New Entry window The following fields can be set:...
Page 127: Rip Version 1 Message Format
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RIP measures distance by an integer count of the number of hops from one network to another. A router is one hop from a directly connected network, two hops from a network that can be reached through a router, etc.
Page 128: Rip Global Settings
RIP Global Settings To setup RIP for the IP interfaces configured on the Switch, the user must first globally enable RIP and then configure RIP settings for the individual IP interfaces. To globally enable RIP on the Switch,...
Page 129: Rip Interface Settings
To enable RIP, simply use the pull-down menu, select Enabled and click Apply. RIP Interface Settings RIP settings are configured for each IP interface on the Switch. Click the RIP Interface Settings link in the RIP folder. The menu appears in table form listing settings for IP interfaces currently on the Switch.
Page 130: Ospf
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description Interface Name The name of the IP interface on which RIP is to be setup. This interface must be previously configured on the Switch. IP Address The IP address corresponding to the Interface Name showing in the field above.
Page 131: Ospf Cost
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link-State Algorithm An OSPF router uses a link-state algorithm to build a shortest path tree to all destinations known to the router. The following is a simplified description of the algorithm’s steps: When OSPF is started, or when a change in the routing information changes, the router •...
Page 132 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 128.213.0.0 192.213.11.0 The diagram above shows the network from the viewpoint of Router A. Router A can reach 192.213.11.0 through Router B with a cost of 10 + 5 = 15. Router A can reach 222.211.10.0 through Router C with a cost of 10 + 10 = 20.
Page 133 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 128.213.0.0 Figure 8- 15. Constructing a Shortest Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A. The cost of the link from Router B to Router A, for instance is not important to constructing Router A’s shortest path tree, but is...
Page 134: Ospf Authentication
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Network Link-State Updates – Issued by multi-access areas that have more than one attached • router. One router is elected as the Designated Router (DR) and this router issues the network link-state updates describing every router on the segment.
Page 135: Virtual Links
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Virtual Links Virtual links accomplish two purposes: Linking an area that does not have a physical connection to the backbone. • Patching the backbone in case there is a discontinuity in area 0.
Page 136: Designated Router Election
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch failure). All other routers on the segment will then contact the DR for link-state database updates and exchanges. This limits the bandwidth required for link-state database updates. Designated Router Election The election of the DR and BDR is accomplished using the Hello protocol.
Page 137 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch All OSPF packets (except for Hello packets) forward link-state advertisements. Link-State Update packets, for example, flood advertisements throughout the OSPF routing domain. OSPF packet header • Hello packet • Database Description packet •...
Page 138 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authentication Hello Packet Hello packets are OSPF packet type 1. They are sent periodically on all interfaces, including virtual links, in order to establish and maintain neighbor relationships. In addition, Hello Packets are multicast on those physical networks having a multicast or broadcast capability, enabling dynamic discovery of neighboring routers.
Page 139 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Designated Router Backup Designated Router Field Neighbor Database Description Packet Database Description packets are OSPF packet type 2. These packets are exchanged when an adjacency is being initialized. They describe the contents of the topological database. Multiple packets may be used to describe the database.
Page 140 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MS - bit DD Sequence Number The rest of the packet consists of a list of the topological database’s pieces. Each link state advertisement in the database is described by its link state advertisement header.
Page 141 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link-State Update Packet Link-State Update packets are OSPF packet type 4. These packets implement the flooding of link-state advertisements. Each Link-State Update packet carries a collection of link-state advertisements one hop further from its origin.
Page 142 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link-State Acknowledgment Packet Version No. Each acknowledged link-state advertisement is described by its link-state advertisement header. It contains all the information required to uniquely identify both the advertisement and the advertisement’s current instance.
Page 143 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link-State Checksum Field Link State Age Options Link State Type Link State ID Advertising Router Link State Sequence Number Link State Checksum Length Router Links Advertisements Router links advertisements are type 1 link state advertisements. Each router in an area originates a routers links advertisement.
Page 144 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Routers Links Advertisements Reserved Type In router links advertisements, the Link State ID field is set to the router’s OSPF Router ID. The T - bit is set in the advertisement’s Option field if and only if the router is able to calculate a separate set of routes for each IP Type of Service (TOS).
Page 145 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch a stub network. The values of all the other fields describing a router link depend on the link’s Type. For example, each link has an associated 32-bit data field. For links to stub networks, this field specifies the network’s IP address mask.
Page 146 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Network Links Advertisements Network links advertisements are Type 2 link state advertisements. A network links advertisement is originated for each transit network in the area. A transit network is a multi-access network that has more than one attached router.
Page 147 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Summary Link Advertisements Link-State Checksum For stub area, Type 3 summary link advertisements can also be used to describe a default route on a per-area basis. Default summary routes are used in stub area instead of flooding a complete set of external routes.
Page 148: Ospf Global Settings
External Route Tag OSPF Global Settings The OSPF Global Settings menu allows OSPF to be enabled or disabled on the Switch − without changing the Switch’s OSPF configuration. To view the following window, click Layer 3 Features > OSPF > OSPF Global Settings. To enable OSPF, first supply an OSPF Route ID (see below), select Enabled from the State drop-down menu and click the Apply button.
Page 149: Ospf Area Setting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters are used for general OSPF configuration: Parameter Description A 32-bit number (in the same format as an IP address − xxx.xxx.xxx.xxx) that uniquely OSPF Route ID identifies the Switch in the OSPF domain. It is common to assign the highest IP address assigned to the Switch (router).
Page 150: Ospf Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch drop-down menu and determine the Stub Default Cost. Click the Add/Modify button to add the area ID set to the table. To remove an Area ID configuration set, simply click To change an existing set in the list, type the Area ID of the set you want to change, make the changes and click the Add/Modify button.
Page 151 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 30. OSPF Interface Settings window Figure 8- 31. OSPF Interface Settings - Edit window Configure each IP interface individually using the OSPF Interface Settings - Edit menu. Click the Apply button when you have entered the settings.
Page 152 Router Priority (0- Allows the entry of a number between 0 and 255 representing the OSPF priority of the selected area. If a Router Priority of 0 is selected, the Switch cannot be elected as the 255) Designated Router for the network.
Page 153: Ospf Virtual Link Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF Virtual Link Settings Click the OSPF Virtual Interface Settings link to view the current OSPF Virtual Interface Settings. There are not virtual interface settings configured by default, so the first time this table is viewed there will be not interfaces listed.
Page 154 Description Transit Area ID Allows the entry of an OSPF Area ID − previously defined on the Switch − that allows a remote area to communicate with the backbone (area 0). A Transit Area cannot be a Stub Area or a Backbone Area.
Page 155: Ospf Area Aggregation Settings
LSDB advertisement traffic as well as a reduction in the memory overhead in the Switch used to maintain routing tables. Click Layer 3 Features > OSPF > OSPF Area Aggregation Settings link to view the current settings. There are no aggregation settings configured by default, so there will not be any listed the first accessing the menu.
Page 156: Ospf Host Route Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Use the following parameters to configure the following settings for OSPF Area Aggregation: Parameter Description Area ID Allows the entry the OSPF Area ID for which the routing information will be aggregated.
Page 157: Dhcp/Bootp Relay
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Specify the host route settings and click the Apply button to add or change the settings. The new settings will appear listed in the OSPF Host Route Settings list. To view the previous window, click...
Page 158 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 40. DHCP/ BOOTP Relay Global Settings window The following fields can be set: Parameter Description Relay State This field can be toggled between Enabled and Disabled using the pull-down menu.
Page 159 3828DC The config dhcp_relay option_82 command configures the DHCP relay agent information option 82 setting of the switch. The formats for the circuit ID sub-option and the remote ID sub-option are as follows: NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero.
Page 160: Dhcp/Bootp Relay Interface Settings
Properly configured settings will be displayed in the BOOTP Relay Table at the bottom of the following window, once the user clicks the Add button under the Apply heading. The user may add up to four server IPs per IP interface on the Switch. Entries may be deleted by clicking it’s corresponding .
Page 161: Dns Relay
BOOTP server, or can be entered manually and configured into the operating system at startup. DNS Relay Global Settings To configure the DNS function on the Switch, click Layer 3 Features > DNS Relay > DNS Relay Global Settings, which will open the DNS Relay Global Settings window, as seen below:...
Page 162: Dns Relay Static Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 43. DNS Relay Global Settings window The following fields can be set: Parameter Description This field can be toggled between Disabled and Enabled using the pull-down menu, DNS State and is used to enable or disable the DNS Relay service on the Switch.
Page 163: Vrrp
To configure VRRP for virtual routers on the Switch, an IP interface must be present on the system and it must be a part of a VLAN. VRRP IP interfaces may be assigned to every VLAN, and therefore IP interface, on the Switch.
Page 164: Vrrp Virtual Router Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch VRRP Virtual Router Settings The following window will allow the user to view the parameters for the VRRP function on the Switch. To view this window, click Layer 3 Features > VRRP > VRRP Virtual Router Settings: Figure 8- 46.
Page 165 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Or, the user may click the hyperlinked Interface Name to view the same window: The following parameters may be set to configure an existing or new VRRP interface. Parameter Description Interface Name Enter the name of a previously configured IP interface to create a VRRP entry for.
Page 166 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch disable the backup router from becoming the Master router. This setting must be consistent with all routers participating within the same VRRP group. The default setting is True. Critical IP Address Enter the IP address of the physical device that will provide the most direct route to the Internet or other critical network connections from this virtual router.
Page 167: Vrrp Authentication Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authentication type Displays the type of authentication used to compare VRRP packets received by a virtual router. Possible authentication types include: • • • VRID Displays the virtual router ID set by the user. This will uniquely identify the VRRP Interface on the network.
Page 168 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 49. VRRP Authentication Settings window To configure the authentication for a pre-created interface, click its hyperlinked name, revealing the following window to configure: Figure 8- 50. VRRP Authentication Settings – Edit window...
Page 169: Ip Multicast Routing Protocol
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP Multicast Routing Protocol The functions supporting IP multicasting are added under the IP Multicast Routing Protocol folder, from the Layer 3 Features folder. IGMP, DVMRP, and PIM-DM can be enabled or disabled on the Switch without changing the individual protocol’s configuration.
Page 170: Igmp Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IGMP packets enable multicast routers to keep track of the membership of multicast groups, on their respective subnetworks. The following outlines what is communicated between a multicast router and a multicast group member using IGMP.
Page 171 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 54. IGMP Interface Configuration window This window allows the configuration of IGMP for each IP interface configured on the Switch. IGMP can be configured as Version 1, 2 by toggling the Version field using the pull-down menu. The length of time between queries can be varied by entering a value between 1 and 31,744 seconds in the Query Interval field.
Page 172: Dvmrp Interface Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Max Response Time Sets the maximum amount of time allowed before sending an IGMP response report. A value between 1 and 25 seconds can be entered, with a default of 10 seconds.
Page 173: Dvmrp Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Use the pull down menu, choose Enabled, and click Apply to implement the DVMRP function on the Switch. DVMRP Interface Settings To view the DVMRP Interface Table, click Layer 3 Features > IP Multicast Routing Protocol >...
Page 174: Pim-Dm Interface Configuration
To enable PIM-DM globally on the Switch, go to Layer 3 Features > IP Multicast Routing Protocol > PIM-DM > PIM-DM Interface Settings. This will give the user access to the following screen: Use the pull down menu, choose Enabled, and click Apply to set the PIM-DM function on the Switch. Show All DVMRP Interface Entries Figure 8- 58.
Page 175 > PIM-DM Interface Settings. This window allows the PIM-DM to be configured for each IP interface defined on the Switch. Each IP interface configured on the Switch is displayed in the below PIM-DM Interface Settings dialog box. To configure PIM-DM for a particular interface, click the corresponding hyperlink for that IP interface.
Page 176 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch State This field can be toggled between Enabled and Disabled using the pull-down menu, and is used to enable or disable PIM-DM for the IP interface. The default is Disabled.
Page 177: Qos
The Switch has separate hardware queues on every physical port to which packets from various applications can be mapped to, and, in turn prioritized. View the following map to see how the DES-3800 Series implements 802.1P priority queuing. Figure 9- 1. Mapping QoS on the Switch...
Page 178: Understanding Qos
CoS until there are no more packets for this CoS. The other CoS queues that have been given a nonzero value, and depending upon the weight, will follow a common weighted round-robin scheme. Remember that the DES-3800 Series has eight priority queues (and eight Classes of Service) for each port on the Switch.
Page 179: Port Bandwidth
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Bandwidth The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. In the QoS folder, click Port Bandwidth, to view the window shown below.
Page 180: Qos Scheduling Mechanism
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch From/To A consecutive group of ports may be configured starting with the selected port. Type This drop-down menu allows you to select between RX (receive), TX (transmit), and Both. This setting will determine whether the bandwidth ceiling is applied to receiving, transmitting, or both receiving and transmitting packets.
Page 181: 802.1P Default Priority
IEEE 802.1p priority tag number. Do not confuse these settings with port numbers. 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. In the QoS folder, click 802.1p Default Priority, to view the window shown below.
Page 182 Figure 9- 4. 802.1p Default Priority Settings window This window allows you to assign a default 802.1p priority to any given port on the Switch. The pri- ority queues are numbered from 0, the lowest priority, to 7, the highest priority. Click Apply to...
Page 183: 802.1P User Priority
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 802.1p User Priority The DES-3800 Series allows the assignment of a user priority to each of the 802.1p priorities. In the QoS folder, click 802.1p User Priority, to view the screen shown below.
Page 184: Acl
Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the Switch will use to determine what to do with the frame. The entire process is described below in two parts. To display the currently configured Access Profiles on the Switch, open the ACL folder and click the Access Profile Table link.
Page 185 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be set, for the Ethernet type: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 –...
Page 186 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be set, for IP: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 - 255.
Page 187 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding. Source IP Mask Enter an IP address mask for the source IP address.
Page 188 Figure 10- 4. Access Profile Configuration window (Packet Content Mask) This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask:...
Page 189 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • • Offset This field will instruct the Switch to mask the packet header beginning with the offset value specified: • • • • • Click Apply to implement changes made.
Page 190 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 6. Access Rule Table Click Add Rule to add a new Rule for an existing profile. The Access Rule Configuration window will appear. Figure 10- 7. Access Rule Configuration window (IP)
Page 191 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 192 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch the range of ports from 2 to 4. To view the settings of a previously correctly configured rule, click in the Access Rule Table. Figure 10- 8. Access Rule Table The window shown below will appear.
Page 193 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To remove a previously created rule, select it and click the click the Add Rule button, and the Access Rule Configuration window will appear: Figure 10- 11. Access Rule Configuration window - Ethernet.
Page 194 For example, 1:3 specifies switch number 1, port 3. 2:4 specifies switch number 2, port 4. 1:3 - 2:4 specifies all of the ports between switch 1, port 3 and switch 2, port 4 − in numerical order. Entering all will denote all ports on the Switch.
Page 195 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To view the settings of a previously, correctly configured rule, click in the Access Rule Table (Figure 10-10) to view the window shown below. Clicking the hyperlink for the Profile ID on the Access Profile Table (Figure 10-5) will also bring up the Access Rule Display window.
Page 196 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 14. Access Rule Configuration - Packet Content Mask To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description...
Page 197 The Access Rule may be configured on a per-port basis by entering the port number of the switch in the switch stack into this field. When a range of ports is to be configured, the Auto Assign check box MUST be clicked in the Access ID field of this window. If not, the user will be presented with an error message and the access rule will not be configured.
Page 198 1:3 specifies switch number 1, port 3. 2:4 specifies switch number 2, port 4. 1:3 - 2:4 specifies all of the ports between switch 1, port 3 and switch 2, port 4 − in numerical order. Entering all will denote all ports on the Switch.
Page 199: Cpu Interface Filtering
Creating an access profile for the CPU is divided into two basic parts. The first is to specify which part or parts of a frame the Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the Switch will use to determine what to do with the frame.
Page 200 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 17. CPU Interface Filtering Configuration window – Ethernet Parameter Description Profile ID (1-5) Type in a unique identifier number for this profile set. This value can be set from 1 - 5.
Page 201 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The page shown below is the IP CPU Interface Filtering Configuration page. Figure 10- 18. CPU Interface Filtering Configuration window- IP The following parameters can be adjusted: Parameter Description Profile ID (1-5) Type in a unique identifier number for this profile set.
Page 202 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding. Source IP Mask Enter an IP address mask for the source IP address.
Page 203 Figure 10- 19. CPU Interface Filtering Configuration window- Packet Content This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask:...
Page 204 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • • Offset This field will instruct the Switch to mask the packet header beginning with the offset value specified: • • • • • Click Apply to implement changes made.
Page 205 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 21. CPU Interface Filtering Rule Table Click the Add Rule button to continue on to the CPU Interface Filtering Rule Configuration window. A new and unique window, for Ethernet, IP and Packet Content will open as shown in the examples below.
Page 206 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 23. CPU Interface Filtering Rule Table – Ethernet The CPU Interface Filtering Rule Configuration allows the user to create a rule for a previously created Access Profile. Figure 10- 24. CPU Interface Filtering Rule Configuration – Ethernet To set the Access Rule for Ethernet, adjust the following parameters and click Apply.
Page 207 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Access ID Type in a unique identifier number for this access and priority. This value can be set from 1 - 100. Selected profile based on Ethernet (MAC Address), IP address or Packet Content.
Page 208 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 25. CPU Interface Filtering Rule Display – Ethernet The following window is the CPU Interface Filtering Rule Table for IP. Figure 10- 26. CPU Interface Filtering Rule Table – IP To create a new rule set for an access profile click the Add button.
Page 209 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 27. CPU Interface Filtering Rule Configuration – IP Configure the following Access Rule Configuration settings for IP: Parameter Description Profile ID This is the identifier number for this profile set.
Page 210 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch forwarded to. Once this field is specified, packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user. Replace priority with − Click the corresponding box if you want to re-write the 802.1p...
Page 211 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 29. CPU Interface Filtering Rule Table – Packet Content To remove a previously created rule, select it and click the button. To add a new Access Rule, click the Add button:...
Page 212 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 30. CPU Interface Filtering Rule Configuration - Packet Content To set the Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description Profile ID This is the identifier number for this profile set.
Page 213 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Select Deny to specify that packets that do not match the access profile are not forwarded by the Switch and will be filtered. Access ID Type in a unique identifier number for this access. This value can be set from 1 - 100.
Page 214 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 34. CPU Interface Filtering Rule Display – Packet Content...
Page 215: Security
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Security Traffic Control Port Security Port Lock Entries 802.1X Trusted Host Access Authentication Control Traffic Segmentation IP MAC Binding ARP Storm Control Traffic Control Use the Traffic Control Setting window to enable or disable storm control and adjust the threshold for multicast and broadcast storms, as well as DLF (Destination Look Up Failure).
Page 216 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 1. Traffic Control Setting window Traffic or storm control is used to stop broadcast, and multicast storms that may result when a loop is created. The Destination Look Up Failure control is a method of shutting down a loop when a storm is...
Page 217: Port Security
Port Security is a security feature that prevents unauthorized computers (with source MAC addresses) unknown to the Switch prior to locking the port (or ports) from connecting to the Switch's locked ports and gaining access to the network.
Page 218 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be set: Parameter Description A consecutive group of ports may be configured starting with the selected port. From/To This pull-down menu allows you to enable or disable Port Security (locked MAC address Admin State table for the selected ports).
Page 219: Port Lock Entries
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The number of MAC addresses that will be in the MAC address-forwarding table for the Max. Learning selected switch and group of ports. Addr. (0-16) This pull-down menu allows you to select how the MAC address table locking will be Lock Address implemented on the Switch, for the selected group of ports.
Page 220: Authentication Server
Server (RADIUS) must authenticate clients connected to a port on the Switch before attaining any services offered by the Switch on the LAN. The role of the Authentication Server is to certify the identity of the Client attempting to access the network by exchanging secure information between the RADIUS server and the Client through EAPOL packets and, in turn, informs the Switch whether or not the Client is granted access to the LAN and/or switch services.
Page 221 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authenticator The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator serves two purposes when utilizing 802.1x. The first purpose is to request certification information from the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before access is granted to the Client.
Page 222: Authentication Process
MAC address) is granted access and therefore successfully “unlocks” the port. Once unlocked, normal traffic is allowed to pass through the port. The D-Link implementation of 802.1x allows network administrators to choose between two types of Access Control used on the Switch, which are: Port-Based Access Control –...
Page 223 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client Network access controlled port Network access uncontrolled port Figure 11- 9.
Page 224: Configure 802.1X Authenticator Parameter
In order to successfully make use of 802.1x in a shared media LAN segment, it would be necessary to create “virtual” Ports, one for each attached device that required access to the LAN. The Switch would regard the single physical Port connecting it to the shared media segment as consisting of a number of distinct virtual Ports, each virtual Port being independently controlled from the point of view of EAPOL exchanges and authorization state.
Page 225 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 11. 802.1X Authenticator Settings window To configure the settings by port, click on the hyperlinked port number under the Port heading, which will display the following table to configure:...
Page 226 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 12. 802.1X Authenticator Settings window (Modify) This window allows you to set the following features: Parameter Description Enter the port or ports to be set. From [ ] To [ ] AdmCtrlDir <both>...
Page 227: Authentic Radius Server
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The default setting is Auto. TxPeriod [30 ] This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default setting is 30 seconds.
Page 228: Trusted Host
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 13. RADIUS Server Authentication Setting window This window displays the following information: Parameter Description Succession <First> Choose the desired RADIUS server to configure: First, Second or Third. RADIUS Server Set the RADIUS server IP.
Page 229: Access Authentication Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Use the Security IP Management to permit remote stations to manage the Switch. If you choose to define one or more designated management stations, only the chosen stations, as defined by IP address, will be allowed management privilege through the web manager or Telnet session.
Page 230: Authentication Policy & Parameter Settings
Switch, and may contain up to eight authentication techniques. When a user attempts to access the Switch, the Switch will select the first technique listed for authentication. If the first technique goes...
Page 231: Application Authentication Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 15. Policy & Parameters Settings window The following parameters can be set: Parameters Description Use the pull-down menu to enable or disable the Authentication Policy on the Authentication Policy Switch.
Page 232: Authentication Server Group
Click Apply to implement changes made. Authentication Server Group This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to group TACACS/XTACACS/TACACS+/RADIUS server hosts into user-defined categories for authentication using method lists. The user may define the type of server group by protocol or by previously defined server group.
Page 233: Authentication Server Host
TACACS/XTACACS/TACACS+/RADIUS server host on a remote host. The TACACS/XTACACS/TACACS+/RADIUS server host will then verify or deny the request and return the appropriate message to the Switch. More than one authentication protocol can be run on the same physical server host but, remember that TACACS/XTACACS/TACACS+/RADIUS are separate entities and are not compatible with each other.
Page 234 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 19. Authentication Server Host Settings window To add an Authentication Server Host, click the Add button, revealing the following window: Figure 11- 20. Authentication Server Host Settings – Add window To edit an Authentication Server Host, click the IP address hyperlink, revealing the following window: Figure 11- 21.
Page 235: Login Method Lists
TACACS - XTACACS- local, the Switch will send an authentication request to the first TACACS host in the server group. If no response comes from the server host, the Switch will send an authentication request to the second tacacs host in the server group and so on, until the list is exhausted.
Page 236 Figure 11- 22. Login Method Lists Settings window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the X under the Delete heading corresponding to the entry desired to be deleted.
Page 237: Enable Method Lists
Administrator (Admin) level privileges using authentication methods on the Switch. Once a user acquires normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch, which is defined by the Administrator.
Page 238 Switch will send an authentication request to the second TACACS host in the server group and so on, until the list is exhausted. At that point, the Switch will restart the same sequence with the following protocol listed, XTACACS. If no authentication takes place using the XTACACS list, the Local Enable password set in the Switch is used to authenticate the user.
Page 239: Configure Local Enable Password
"local_enable" method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch. To view the following window, click Security > Access Authentication Control > Configure Local...
Page 240: Enable Admin
New Local Enabled field will result in a fail message. Enable Admin The Enable Admin window is for users who have logged on to the Switch on the normal user level, and wish to be promoted to the administrator level. After logging on to the Switch, users will have only user level privileges.
Page 241: Traffic Segmentation
Figure 11- 31. Current Traffic Segmentation Table This page allows you to view which port on a given switch will be allowed to forward packets to other ports on that switch. Select a port number from the drop down menu and click View display the forwarding ports.
Page 242: Secure Socket Layer (Ssl)
Check the corresponding boxes for the port(s) you wish to transmit packets. Forward Port Check the boxes to select which of the ports on the Switch will be able to forward packets. These ports will be allowed to receive packets from the port specified above.
Page 243: Download Certificate
Download Certificate This window is used to download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a data record used for authenticating devices on the network. It contains information on the owner, keys for authentication and digital signatures.
Page 244 To set up the SSL function on the Switch, configure the following parameters and click Apply. Parameter Description SSL Status Use the pull down menu to enable or disable the SSL status on the switch. The default is Disabled. Configuration...
Page 245: Ssh
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Cache Timeout (60- This field will set the time between a new key exchange between a client and a host 86400) using the SSL function. A new SSL session is established every time the client and host go through a key exchange.
Page 246: Ssh Server Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 2. Configure the User Account to use a specified authorization method to identify users that are allowed to establish SSH connections with the Switch using the SSH User Authentication window. There are three choices as to the method SSH will use to authorize the user, which are Host Based, Password and Public Key.
Page 247: Ssh Authentication Mode And Algorithm Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Time Out (120-600) Allows the user to set the connection timeout. The use may set a time between 120 and 600 seconds. The default setting is 300 seconds. Allows the Administrator to set the maximum number of attempts that a user may try to Auth.
Page 248 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following algorithms may be set: Parameter Description 3DES-CBC Use the pull-down to enable or disable the Triple Data Encryption Standard encryption algorithm with Cipher Block Chaining. The default is Enabled.
Page 249 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch AES256-CBC Use the pull-down to enable or disable the Advanced Encryption Standard AES-256 encryption algorithm with Cipher Block Chaining. The default is Enabled. Use the pull-down to enable or disable the Arcfour encryption algorithm with Cipher ARC4 Block Chaining.
Page 250: Ssh User Authentication
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SSH User Authentication The following windows are used to configure parameters for users attempting to access the Switch through SSH. To access the following window, click Security > SSH > SSH User Authentication Mode.
Page 251: Ip-Mac Binding
Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to restrict the access to a switch to a number of authorized users. Only the authorized client can access the Switch’s port by checking the pair of IP-MAC addresses with the pre-configured database.
Page 252: Ip-Mac Binding Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 38. IP-MAC Binding Ports window IP-MAC Binding Table The window shown below can be used to create IP-MAC binding entries. Click the IP-MAC Binding Table on the IP-MAC Binding folder in the Security menu to view the IP-MAC Binding Setting window.
Page 253: Ip-Mac Binding Blocked
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP-MAC Binding Blocked To view unauthorized devices that have been blocked by IP-MAC binding restrictions open the IP- MAC Binding Blocked window show below. Click IP-MAC Binding Blocked in the IP-MAC Blocked folder in the Security menu to open the IP-MAC Binding Blocked window.
Page 254: Arp Storm Control
CPU filtering mechanism can process. If an ARP broadcast storm occurs, and the ARP Storm Control Threshold is exceeded, the Switch will drop the packet. The threshold must be a multiple of 8 between 8 and 1024. To view the ARP Storm Control Settings window, click Security >...
Page 255: Monitoring
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Monitoring Device Status CPU Utilization Port Utilization Packets Errors Packet Size Browse Router Port Port Access Control MAC Address IP Address Table Browse Routing Table Browse ARP Table Browse IP Multicast Forwarding...
Page 256: Cpu Utilization
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CPU Utilization The CPU Utilization window displays the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval. To view this window, open the Monitoring folder and click the CPU Utilization link.
Page 257: Packets
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Select a Unit and Port number from the drop down menu and click apply to display the Port Utilization for a particular port. The following fields can be set: Parameter...
Page 258: Received (Rx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Received (RX) Click the Received (RX) link in the Packets folder of the Monitoring menu to view the following graph of packets received on the Switch. Figure 12- 4. Rx Packets Analysis window (line graph for Bytes and Packets) Select a Port number from the drop down menu and click apply to display the Rx Packet analysis for a particular port.
Page 259: Umb Cast (Rx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 5. Rx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 260 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 6. Rx Packets Analysis window (line graph for Unicast, Multicast, and Broadcast Packets) To view the UMB Cast Table, click the View Table link, which will show the following table:...
Page 261: Transmitted (Tx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 7. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 262 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 8. Tx Packets Analysis window (line graph for Bytes and Packets) To view the Transmitted (TX) Table, click the link View Table, which will show the following table:...
Page 263: Errors
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 9. Tx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 264: Received (Rx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Received (RX) Click the Received (RX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch. Figure 12- 10. Rx Error Analysis window (line graph)
Page 265 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields can be set: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200.
Page 266: Transmitted (Tx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. Transmitted (TX) Click the Transmitted (TX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch.
Page 267 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 268: Packet Size
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Packet Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table. Two windows are offered.
Page 269 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields can be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 270: Browse Router Port
To view the following window, open the Monitoring folder and click the Browse Router Port link. Port Access Control The following screens are used to monitor 802.1x statistics of the Switch, on a per port basis. To view the Port Access Control screens, open the monitoring folder and click the Port Access Control folder.
Page 271 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. To clear the current statistics shown, click the Clear button in the top left hand corner.
Page 272: Radius Accounting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch PendingRequests The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission.
Page 273: Mac Address
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RoundTripTime The time interval between the most recent Accounting-Response and the Accounting- Request that matched it from this RADIUS accounting server. The number of RADIUS Accounting-Request packets sent. This does not include Requests retransmissions.
Page 274 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields can be viewed or set: Parameter Description VLAN Name Enter a VLAN Name for the forwarding table to be browsed by. MAC Address Enter a MAC address for the forwarding table to be browsed by.
Page 275: Ip Address Table
The IP Address Table may be found in the Monitoring menu. The IP Address Table is a read only screen where the user may view IP addresses discovered by the Switch. To search a specific IP address, enter it into the field labeled IP Address at the top of the screen and click Find to begin your...
Page 276: Browse Routing Table
The Browse Routing Table window may be found in the Monitoring menu. This screen shows the current IP routing table of the Switch. To find a specific IP route, enter an IP address into the Destination Address field along with a proper subnet mask into the Mask field and click Find.
Page 277: Browse Arp Table
The Browse ARP Table window may be found in the Monitoring menu. This window will show current ARP entries on the Switch. To search a specific ARP entry, enter an interface name into the Interface Name or an IP address and click Find. To clear the ARP Table, click Clear All.
Page 278: Browse Ip Multicast Forwarding Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 21. Browse ARP Table window Browse IP Multicast Forwarding Table The Browse IP Multicast Forwarding Table window may be found in the Monitoring menu. This window will show current IP multicasting information on the Switch. To search a specific entry, enter...
Page 279: Igmp Snooping Group
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 22. Browse IP Multicast Forwarding Table IGMP Snooping Group IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. The number of IGMP reports that were snooped is displayed in the Reports field.
Page 280: Igmp Snooping Forwarding
The Browse IGMP Group Table window may be found in the Monitoring menu. This window will show current IGMP group entries on the Switch. To search a specific IGMP group entry, enter an interface name into the Interface Name field or a Multicast Group IP address and click Find.
Page 281: Dvmrp Monitoring
This menu allows the DVMRP (Distance-Vector Multicast Routing Protocol) to be monitored for each IP interface defined on the Switch. This folder, found in the Monitoring folder, offers 4 screens for monitoring: Browse DVMRP Routing Table, Browse DVMRP Neighbor Address Table, Browse DVMRP Routing Next Hop Table and Browse PIM Neighbor Table.
Page 282: Browse Dvmrp Neighbor Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 26. DVMRP Routing Table Browse DVMRP Neighbor Table This table, found in the Monitoring menu under DVMRP Monitor > Browse DVMRP Neighbor Table contains information about DVMRP neighbors of the Switch. To search this table, enter either an Interface Name or Neighbor Address into the respective field and click the Find button.
Page 283: Browse Pim Neighbor Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 28. DVMRP Routing Next Hop Table Browse PIM Neighbor Table Multicast routers use Protocol Independent Multicast (PIM) to determine which other multicast routers should receive multicast packets. The PIM Neighbor Address Table contains information regarding each of a router’s PIM neighbors.
Page 284 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The user may search for a specific entry by entering the following information into the fields at the top of the screen: To browse the OSPF LSDB Table, you first must select which browse method you want to use in the Search Type field.
Page 285: Browse Ospf Neighbor Table
Neighbor Table link in the Monitoring folder. This table displays a list of Virtual OSPF Neighbors of the Switch. The user may choose specifically search a virtual neighbor by using one of the two search options at the top of the screen, which are:...
Page 286: Browse Poe Status (For Des-3828P Only)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 32.OSPF Virtual Neighbor Table Browse PoE Status (for DES-3828P only) This table can be found in the Monitoring folder by clicking on the Browse PoE Status folder. This table displays the current PoE System and PoE Port settings.
Page 287: Switch History Log
The Switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC connected to the console manager. Click Next to go to the next page of the Switch His- tory Log. Clicking Clear will allow the user to clear the Switch History Log.
Page 288: Switch Maintanence
The Reset Config option will reset all of the Switch's configuration parameters to their factory defaults, without saving these default values to the Switch's non-volatile RAM. If the Switch is reset with this option enabled, and Save Changes is not executed, the Switch will return to the last saved configuration when rebooted.
Page 289: Reset System
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 13- 2.Reset Config window Reset System In addition, the Reset System option is added to reset all configuration parameters to their factory defaults, save these parameters to the Switch's non-volatile RAM, and then restart the Switch. This option is equivalent to Reset Config followed by Save Changes.
Page 290: Save Changes
Some settings, though, require you to restart the Switch before they will take effect. Restarting the Switch erases all settings in RAM and reloads the stored settings from the NV-RAM. Thus, it is necessary to save all setting changes to NV-RAM before rebooting the Switch.
Page 291: Logout
Figure 13- 6. Save Settings dialog box Click the OK button to continue. Once the Switch configuration settings have been saved to NV- RAM, they become the default settings for the Switch. These settings will be used every time the Switch is rebooted.
Page 292: Technical Specifications
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Technical Specifications Standards Protocols Data Transfer Rates: Ethernet Fast Ethernet Gigabit Ethernet Fiber Optic Topology Network Cables Number of Ports General IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet...
Page 293 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Internal power supply Power Consumption DC fans Operating Temperature Storage Temperature Humidity Dimensions Weight Safety Transmission Method Packet Buffer Packet Filtering/Forwarding Rate Physical and Environmental DES-3828 Input: 100~240V, AC/10A, 50~60Hz...
Page 294 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MAC Address Learning Priority Queues Forwarding Table Age Time Automatic update. Supports 16K MAC address. 8 Priority Queues per port. Max age: 10-1000000 seconds. Default = 300.
Page 295: Cables And Connectors
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagrams and tables show the standard RJ-45 receptacle/connector and their pin assignments.
Page 296: Cable Lengths
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Cable Lengths Use the following table to as a guide for the maximum cable lengths. Standard Media Type Mini-GBIC 1000BASE-LX, Single-mode fiber module 1000BASE-SX, Multi-mode fiber module 1000BASE-LHX, Single-mode fiber module...
Page 297: Glossary
Multiple simultaneous broadcasts that typically absorb available network bandwidth and can cause network failure. console port: The port on the Switch accepting a terminal or modem connector. It changes the parallel arrangement of data within computers to the serial form used on data transmission links. This port is most often used for dedicated local management.
Page 298 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch forwarding: The process of sending a packet toward its destination by an internetworking device. full duplex: A system that allows packets to be transmitted and received at the same time and, in effect, doubles the potential throughput of a link.
Page 299 VLAN - Virtual LAN: A group of location- and topology-independent devices that communicate as if they are on a common physical LAN. VLT - Virtual LAN Trunk: A Switch-to-Switch link which carries traffic for all the VLANs on each Switch.
Page 300 FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this manual, may cause harmful interference to radio communications.
Page 301: Warranties/Registration
(or superior) in all material respects to the defective Hardware. The Warranty Period shall extend for an additional ninety (90) days after any repaired or replaced Hardware is delivered. If a material defect is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D- Link upon return to D-Link of the defective Hardware.
Page 302: Copyright Statement
RESULTING FROM THE USE OF THE PRODUCT, RELATING TO WARRANTY SERVICE, OR ARISING OUT OF ANY BREACH OF THIS LIMITED WARRANTY, EVEN IF D-LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE SOLE REMEDY FOR A BREACH OF THE FOREGOING LIMITED WARRANTY IS REPAIR, REPLACEMENT OR REFUND OF THE DEFECTIVE OR NON- CONFORMING PRODUCT.
Page 303 Warranty Period or ninety (90) days, whichever is longer, and is subject to the same limitations and exclusions. If a material defect is incapable of correction, or if D-Link determines that it is not practical to repair or replace the defective Hardware, the actual price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
Page 304 D-Link Corporation/D-Link Systems, Inc., as stipulated by the United States Copyright Act of 1976 and any amendments thereto. Contents are subject to change without prior notice. Copyright 2005 by D-Link Corporation/D-Link Systems, Inc.
Page 305: Product Registration
Product Registration Register online your D-Link product at http://support.dlink.com/register/ Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
Page 306 D-Link will then provide you with a Limited Lifetime Warranty reference number for this product. Please retain your original dated proof of purchase with a note of the serial number, and Limited Lifetime Warranty reference number together with this warranty statement and place each document in a safe location.
Page 307 This warranty does not apply if the software, product or any other equipment upon which the software is authorized to be used (a) has been altered, except by D-Link or its authorized representative, (b) has not been installed, operated, repaired, or maintained in accordance with instructions supplied by D-Link (improper use or improper maintenance), (c) has been subjected to abnormal physical or electrical stress, misuse, negligence, or accident;...
Page 308: Tech Support
Tech Support You can find software updates and user documentation on the Tech Support for customers within Australia: D-Link Technical Support over the Telephone: Monday to Friday 8:00am to 8:00pm EST Saturday 9:00am to 1:00pm EST D-Link Technical Support over the Internet:...
Page 309: Technical Support
Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within India D-Link Technical Support over the Telephone: +91-22-26526741 +91-22-26526696 –ext 161 to 167 Monday to Friday 9:30AM to 7:00PM D-Link Technical Support over the Internet: http://ww.dlink.co.in...
Page 310 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers for the duration of the warranty period on this product. Customers can contact D-Link technical support through our web site or by phone.
Page 311 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within the U.A.E & North Africa: D-Link Technical Support over the Telephone: (971) 4-391-6480 (U.A.E) Sunday to Wednesday 9:00am to 6:00pm GMT+4 Thursday 9:00am to 1:00pm GMT+4 D-Link Middle East &...
Page 312 You can find software updates and user documentation on the D-Link website. Tech Support for customers within South Africa and Sub Sahara Region: D-Link South Africa and Sub Sahara Technical Support over the Telephone: +27-12-665-2165 08600 DLINK ( For South Africa only )
Page 313 Technical Support You can find updates and user documentation on the D-Link website Tech Support for Latin America customers: D-Link Technical Support over the followings Telephones: Argentina: 0800-666 1442 Chile: 800-214 422 Colombia: 01800-700 1588 Ecuador: 1800-777 711 El Salvador: 800-6137...
Page 314 Обновления программного обеспечения и документация доступны на Интернет-сайте D-Link. D-Link предоставляет бесплатную поддержку для клиентов в течение гарантийного срока. Клиенты могут обратиться в группу технической поддержки D-Link по телефону или через Интернет. Техническая поддержка D-Link: (095) 744-00-99 Техническая поддержка через Интернет http://www.dlink.ru...
Page 315 El servicio de soporte técnico tiene presencia en numerosos países de la Región Latino América, y presta asistencia gratuita a todos los clientes de D-Link, en forma telefónica e internet, a través de la casilla soporte@dlinkla.com Soporte Técnico Help Desk Argentina: Teléfono: 0800-6661442 Lunes a Viernes 09:00 am a 22:00 pm...
Page 316 Você pode encontrar atualizações de software e documentação de usuário no site da D-Link Brasil www.dlinkbrasil.com.br. A D-Link fornece suporte técnico gratuito para clientes no Brasil durante o período de vigência da garantia deste produto. Suporte Técnico para clientes no Brasil: Telefone São Paulo (11) 2185-9301...
Page 317 友冠技術支援台灣地區用戶可以透過我們的網站，電子郵件或電話與友冠資訊技術支援人員聯絡。支援服務時間從週一到週五，上午8:30 a.m. 到 7:00 p.m Web: http://www.dlinktw.com.tw/ FAQ: http://www.dlinktw.com.tw/support.asp Email: dssqa_service@dlinktw.com.tw Phone: 0800-002-615 如果您是台灣地區以外的用戶，請參考使用手冊中記載的D-Link 全球各地分公司的聯絡資訊...
Page 318 Technical Support You can find software updates and user documentation on the D-Link D-Link provides free technical support for customers within the United States and within Canada for the duration of the warranty period on U.S. and Canadian customers can contact D-Link technical support through our website, or by phone.
Page 319 Technical Support You can find software updates and user documentation on the D-Link websites. D-Link provides free technical support for customers within Canada, the United Kingdom, and Ireland. Customers can contact D-Link technical support through our websites, or by phone.
Page 320 Technische Unterstützung Aktualisierte Versionen von Software und Benutzerhandbuch finden Sie auf der Website von D-Link. D-Link bietet kostenfreie technische Unterstützung für Kunden innerhalb Deutschlands, Österreichs, der Schweiz und Osteuropas. Unsere Kunden können technische Unterstützung über unsere Website, per E-Mail oder telefonisch anfordern.
Page 321: Assistance Technique
Assistance technique Vous trouverez la documentation et les logiciels les plus récents sur le site web D-Link. Le service technique de D-Link est gratuit pour les clients Etats-Unis durant la période de garantie. Ceux-ci peuvent contacter le service technique de D-Link par notre site internet ou par téléphone.
Page 322 D-Link . D-Link ofrece asistencia técnica gratuita para clientes dentro de España durante el periodo de garantía del producto. Los clientes españoles pueden ponerse en contacto con la asistencia técnica de D-Link a través de nuestro sitio web o por teléfono. Asistencia Técnica de D-Link por teléfono:...
Page 323 Supporto tecnico Gli ultimi aggiornamenti e la documentazione sono disponibili sul sito D-Link. Supporto tecnico per i clienti residenti in Italia D-Link Mediterraneo S.r.L. Via N. Bonnet 6/B 20154 Milano Supporto Tecnico dal lunedì al venerdì dalle ore 9.00 alle ore 19.00 con orario continuato...
Page 324 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers within Benelux for the duration of the warranty period on this product. Benelux customers can contact D-Link technical support through our website,...
Page 325: Pomoc Techniczna
Pomoc techniczna Najnowsze wersje oprogramowania i dokumentacji użytkownika można znaleźć w serwisie internetowym firmy D-Link. D-Link zapewnia bezpłatną pomoc techniczną klientom w Polsce w okresie gwarancyjnym produktu. Klienci z Polski mogą się kontaktować z działem pomocy technicznej firmy D-Link za pośrednictwem Internetu lub telefonicznie.
Page 326 Technická podpora Aktualizované verze software a uživatelských příruček najdete na webové stránce firmy D-Link. D-Link poskytuje svým zákazníkům bezplatnou technickou podporu Zákazníci mohou kontaktovat oddělení technické podpory přes webové stránky, mailem nebo telefonicky Web: http://www.dlink.de E-Mail: support@dlink.de Telefon: +49 (1805)-2787 Telefonická...
Page 327 Technikai Támogatás Meghajtó programokat és frissítéseket a D-Link Magyarország weblapjáról tölthet le. Telefonon technikai segítséget munkanapokon hétfőtől- csütörtökig 9.00 – 16.00 óráig és pénteken 9.00 – 14.00 óráig kérhet a (1) 461-3001 telefonszámon vagy a support@dlink.hu emailcímen. Magyarországi technikai támogatás : D-Link Magyarország...
Page 328 Teknisk Support Du kan finne programvare oppdateringer og bruker dokumentasjon på D-Links web sider. D-Link tilbyr sine kunder gratis teknisk support under produktets garantitid. Kunder kan kontakte D-Links teknisk support via våre hjemmesider, eller på tlf. Teknisk Support: D-Link Teknisk telefon Support:...
Page 329 Teknisk Support Du finder software opdateringer og bruger- dokumentation på D-Link’s hjemmeside. D-Link tilbyder gratis teknisk support til kunder i Danmark i hele produktets garantiperiode. Danske kunder kan kontakte D-Link’s tekniske support via vores hjemmeside eller telefonisk. D-Link teknisk support over telefonen: Tlf.
Page 330 Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformation. D-Link tillhandahåller teknisk support till kunder i Sverige under hela garantitiden för denna produkt. Teknisk Support för kunder i Sverige: D-Link Teknisk Support via telefon: 0770-33 00 35 Vardagar 08.00-20.00...
Page 331 技术支持办公地址：北京市朝阳区建国路 71 号惠通时代广场 C1 座 202 室邮编: 100025 技术支持中心电话：8008868192/(028)85176977 技术支持中心传真：(028)85176948 维修中心地址：北京市朝阳区建国路 71 号惠通时代广场 C1 座 202 室邮编: 100025 维修中心电话：(010) 58635800 维修中心传真：(010) 58635799 网址：http://www.dlink.com.cn 办公时间：周一到周五，早09:00到晚18:00...
Page 332: International Offices
Australia 1 Giffnock Avenue, North Ryde, NSW 2113 Australia TEL: 61-2-8899-1800 FAX: 61-2-8899-1868 URL: www.dlink.com.au India D-Link House, Kurla Bandra Complex Road, Off CST Road, Santacruz (East), Mumbai - 400098. India TEL: 91-022-26526696/56902210 FAX: 91-022-26528914 URL: www.dlink.co.in Middle East (Dubai) P.O.Box: 500376...
Page 333: Registration Card
Finance Hospital Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product? * Product installed in computer serial No. Personal Use 1000 or more SCO Unix/Xenix...

This manual is also suitable for:

Des-3828p Des-3828p-taa - switch 24-pt 10/100+4-pt 1000m Des-3828 Des-3828dc

D-Link xStack DES-3800 Series User Manual

Quick Links

User Manual

Related Manuals for D-Link xStack DES-3800 Series

Summary of Contents for D-Link xStack DES-3800 Series