D-Link xStack DXS-3250E Web/Installation Manual
  1. Manuals
  2. Brands
  3. D-Link Manuals
  4. Switch
  5. DXS-3250E - xStack Switch
  6. Web/installation manual
D-Link xStack DXS-3250E Web/Installation Manual

D-Link xStack DXS-3250E Web/Installation Manual

Dxs/dws-3200 series layer 2+ stackable gigabit ethernet switches with optional xg uplinks
Hide thumbs Also See for xStack DXS-3250E:
1
Table Of Contents
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
Table of Contents

Advertisement

Quick Links

Web/Installation Guide
TM
DXS/DWS-3200 Series
Product Model:
Layer 2+ Stackable Gigabit Ethernet Switches with optional XG Uplinks
Release 3.0
©Copyright 2007. All rights reserved.

Advertisement

Table of Contents
loading

Related Manuals for D-Link xStack DXS-3250E

Summary of Contents for D-Link xStack DXS-3250E

  • Page 1 Web/Installation Guide DXS/DWS-3200 Series Product Model: Layer 2+ Stackable Gigabit Ethernet Switches with optional XG Uplinks Release 3.0 ©Copyright 2007. All rights reserved.

  • Page 2: Table Of Contents

    Table of Contents Table of Contents DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E User Guide Overview ........8 Intended Audience........................... 9 Device Description ........................ 10 Viewing the Device ........................10 DXS-3250 Front Panel..........................11 DXS-3250E Front Panel ..........................11 DXS-3227 Front Panel..........................12 DXS-3227P Front Panel ..........................13 Back Panels.............................14 Ports Description ...........................
  • Page 3 Starting the D-Link Embedded Web Interface................49 Understanding the D-Link Embedded Web Interface..............51 Device Representation..........................52 Using the D-Link Embedded Web Interface Management Buttons ............53 Using Screen and Table Options ....................54 Adding Configuration Information ......................54 Modifying Configuration Information ....................... 55 Deleting Configuration Information ......................
  • Page 4 Table of Contents Defining DoS Prevention ........................142 Defining Martian Address Filtering......................144 Enabling SYN Filtering...........................146 Defining SYN Rate Protection .......................148 Discarding IP Fragments ........................150 Enabling ICMP Filtering .........................152 Defining ACLs..........................154 Defining ACL Binding..........................154 Defining IP Based ACLs ........................156 Defining MAC Based ACL ........................161 Configuring Ports ........................
  • Page 5 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring Spanning Tree ....................227 Defining Classic Spanning Tree....................228 Defining STP on Interfaces ......................230 Defining Rapid Spanning Tree ....................233 Defining Multiple Spanning Tree ....................236 Defining MSTP Instance Settings ......................237 Defining MSTP Interface Settings......................
  • Page 6 Table of Contents Configuring Advanced QoS Settings ...................289 Defining Policy Properties........................289 Defining Tail Dropping ...........................291 Defining Policy Profiles ..........................297 Configuring LLDP........................ 302 Defining Global LLDP Properties....................303 Defining LLDP Port Settings ......................305 Defining Media Endpoint Discovery Network Policy ..............308 Defining LLDP MED Port Settings ....................311 Viewing the LLDP Neighbors Information..................315 Managing System Files.......................
  • Page 7 Viewing Aggregated Policer Statistics ....................378 Viewing Policer Statistics ........................379 Viewing Queue Statistics ........................380 Hardware Specifications ........................382 DXS-32XX Features ..........................383 Problem Solving .......................... 390 Troubleshooting Solutions......................390 Contacting D-Link Technical Support..................394 Product Registration........................421 International Offices ........................422 Page 6...
  • Page 8 Interface web pages are easy-to-use and easy-to-navigate. In addition, The D-Link Embedded Web Interface pro- vides real time graphs and RMON statistics to help system administrators monitor network performance. This preface provides an overview to the D-Link Embedded Interface User Guide, and includes the following sec- tions: •...

  • Page 9: Dxs-3227, Dxs-3227P, Dxs-3250 And Dxs-3250E User Guide Overview

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E User Guide Overview This section provides an overview to the D-Link Web System Interface User Guide. The D-Link Web System Inter- face User Guide provides the following sections: •...

  • Page 10: Intended Audience

    Preface Intended Audience Intended Audience This guide is intended for network administrators familiar with IT concepts and terminology. Page 9...

  • Page 11: Device Description

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 1. Device Description This section contains a description of the D-Link DXS-3250,D-Link DXS-3250E, D-Link DXS-3227 and D-Link DXS-3227P, and contains the following topics: • Viewing the Device • Ports Description •...

  • Page 12: Dxs-3250 Front Panel

    DXS-3250E Front Panel The D-Link DXS-3250E is designed to contain all ports, LEDs, and power inlets on the front panel. The 3250E is a 48 port Gigabit Ethernet Managed Switch. The device contains 48 gigabit network ports and 4 SFP Ports on the front panel for network connectivity.

  • Page 13: Dxs-3227 Front Panel

    An Optional Dual Module Slot - 10G Fiber XFP dual module. DXS-3227 Front Panel The D-Link DXS-3227 is a 24 port Gigabit Ethernet Managed Switch. The device contains 24 gigabit network ports and 4 SFP Ports on the front panel for network connectivity.

  • Page 14: Dxs-3227P Front Panel

    Viewing the Device DXS-3227P Front Panel The D-Link DXS-3227P is a 24 port Gigabit Ethernet Managed Switch. The device contains 24 gigabit network ports and 4 SFP Ports on the front panel for network connectivity. The following figure illustrates the DXS-3227P front panel.

  • Page 15: Back Panels

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Back Panels The following figure illustrates DXS-3250 / DXS-3227 back panel. Figure 5: DXS-3250 and DXS-3227 Back Panel Restore Defaults Restore Defaults Optional Power Module Bays for Button Connector Optional XFP or Connector CX-4 10G Modules The DXS-3250 and DXS-3227 Back Panel is configured as follows:...

  • Page 16: Ports Description

    Device Description Ports Description Ports Description This section describes the device ports and includes the following topics: • 1000Base-T Gigabit Ethernet Ports • SFP Port • XFP Port (DXS-3227/DXS-3227P) • CX- 4 Port • RS-232 Console Port 1000Base-T Gigabit Ethernet Ports The device contains a 1000 Base-TX Gigabit port.

  • Page 17: Xfp Port

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide XFP Port The 10 Gigabit Small Form Factor Pluggable (XFP) port provides protocol-independent transmission and receiver functionality for 10Gbps Ethernet. The XFP port is located on the DXS-3227/3227P front panel, and an optional XFP module can be inserted into the device’s back panel.

  • Page 18: Cx- 4 Port

    Device Description Ports Description CX- 4 Port The 10G-Base- CX4 is a low-cost switch interface which operates on twin-axial copper cables assemblies of up to 5 meters. It is inserted into the device’s back panel and can be removed and inserted as required, as the figure below illustrates.

  • Page 19: Cable Specifications

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Cable Specifications The following table contains the various cable specification for the DXS-3250, DXS-3250E, and DXS-3227P devices: Table 1: DXS-3250/DXS-3250E/DXS-3227/DXS-3227P Cable Specifications Cab le Typ e D escr ip tio n 1000Base-T UTP Cat.

  • Page 20: Led Definitions

    Device Description LED Definitions LED Definitions The device front panels contain Light Emitting Diodes (LED) that indicate the device status.The different LED types are as follows: • Port LEDs — Indicate each port status. • System — Indicating the device power supply status. Port LEDs 1000Base-T Gigabit Ethernet RJ-45 Port LEDs The LEDs on the three devices are differently indicated.
  • Page 21 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide The DXS-3227P device has the LED indications on a LED panel on the left side of the device. The following figure illustrates the port LEDs. Figure 13: DXS-3227P 1000Base-T Gigabit Ethernet RJ-45 and SFP Port LEDs L in k A c t S p e e d...

  • Page 22: Sfp Leds

    Device Description LED Definitions SFP LEDs Each fiber port has one LED. The LED indications are described in the following table: Table 3: SFP LED Indications LED I nd ic at io n D es cr i pt i on Green A link is established on the port.

  • Page 23: System Leds

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide System LEDs The four devices have different system LEDs. DXS-3250/DXS-3250E The system LEDs on the DXS-3250/DXS-3250E are located on the left side of the devices. The following figure illustrates the DXS-3250/DXS-3250E system LEDs. Figure 14: DXS-3250/DXS-3250ESystem LEDs DXS-3227/DXS-3227P The system LEDs on the DXS-3227 devices are on the left side of the device.

  • Page 24: Cable, Port, And Pinout Information

    Device Description Cable, Port, and Pinout Information The LED indications are described in the following table: Table 4: System LED Indications LED Des cription L ED Des cription I nd i c a t i on Green The device is powered up. The device is not powered up.

  • Page 25: Ports Pinout

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Ports Pinout The following tables describe the pin allocation of the RJ-45, CX-4, and the Console ports: Table 5: RJ-45 Pin Connections for 10/100/1000 Base-TX U se TxRx 1+ TxRx 1- TxRx 2+ TxRx 2- TxRx 3+ TxRx 3-...

  • Page 26: Physical Dimensions

    Device Description Physical Dimensions Table 7: Console (RS-232) Pin Connections Signal RTS Request To Send —» RTS/CTS flow control CTS Clear To Send «— RTS/CTS flow control DSR not connected in 3250/3250E/3227/P DTR not connected in 3250/3250E/3227/P DCD not connected in 3250/3250E/3227/P RI not connected in 3250/3250E/3227/P SG Signal Ground Physical Dimensions...

  • Page 27: Mounting Device

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 2. Mounting Device This section contains information for installing the device, and includes the following sections: • Preparing for Installation • Installing the Device • Connecting the Device • Rack Installation Preparing for Installation This section provides an explanation for preparing the installation site, and includes the following topics: •...

  • Page 28: Site Requirements

    Carefully remove the device from the container and place it on a secure and clean surface. Remove all packing material. Inspect the product for damage. Report any damage immediately. If any item is found missing or damaged, please contact your local D-Link reseller for replacement. Page 27...

  • Page 29: Installing The Device

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Installing the Device The device can be installed on a flat surface or mounted in a rack. This section includes the following topics: • Desktop or Shelf Installation • Rack Installation Desktop or Shelf Installation When installing the switch on a desktop or shelf, the rubber feet included with the device should first be attached.

  • Page 30: Rack Installation

    Mounting Device Installing the Device Rack Installation The device can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, the device mounting brackets must first be attached on the devices’s sides. Notes •...
  • Page 31 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Figure 19: Mounting Device in a Rack Secure the unit to the rack with the rack screws (not provided). Fasten the lower pair of screws before the upper pair of screws. This ensures that the weight of the unit is evenly distributed during installation. Ensure that the ventilation holes are not obstructed.

  • Page 32: Connecting The Device

    Mounting Device Connecting the Device Connecting the Device This section describes how to connect the device, and includes the following sections: • Connecting the Switch to a Terminal • AC Power Connection Connecting the Switch to a Terminal The device is connected to a terminal through an console port on the front panel, which enables a connection to a terminal desktop system running terminal emulation software for monitoring and configuring the device.

  • Page 33: Initial Configuration

    Section 3. Initial Configuration his section describes the initial device configuration and includes the following topics: • General Configuration Information • Booting the Switch • Configuration Overview • Advanced Configuration • Software Download and Reboot • Startup Menu Functions After completing all external connections, connect a terminal to the device to monitor the boot and other procedures. The order of installation and configuration procedures is illustrated in the following figure.

  • Page 34: Booting The Switch

    Initial Configuration Device Port Default Settings The following table describes the device port default settings. Table 8: Function Default Settings Port speed and mode 1000M Auto-negotiation Port forwarding state Enabled Head of line blocking prevention On (Enabled) Flow Control Back Pressure Note These default settings can be modified once the device is installed.
  • Page 35 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide screen is an example of the displayed POST. ------ Performing the Power-On Self Test (POST) ------ UART Channel Loopback Test......PASS Testing the System SDRAM......PASS Boot1 Checksum Test.......PASS Boot2 Checksum Test.......PASS Flash Image Validation Test.......PASS BOOT Software Version x.x.x.xx Built 07-Jan-200x 10:53:05 Processor: xxxxxx xxxxx xxxx, xx MByte SDRAM.
  • Page 36 Initial Configuration Note The following screen is an example configuration.Items such as addresses, versions, and dates may differ for each device. Preparing to decompress... Decompressing SW from image-1 638000 Running from RAM... ********************************************************************* *** Running SW Ver. x.x.x.x Date 11-Jan-200x Time 15:43:13 *** ********************************************************************* HW version is Base Mac address is: 00:00:b0:24:11:80...

  • Page 37: Configuration Overview

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuration Overview Before assigning a static IP address to the device, obtain the following information from the network administrator: • A specific IP address allocated by the network administrator for the switch to be configured •...

  • Page 38: User Name

    Initial Configuration Note 100.1.1.33 is the IP address of the next hop that can be used to reach the management network 192.168.2.0. show ip interface Console# Proxy ARP is disabled IP Address Type Directed Broadcast ----------- -------- ----------- ------------- 100.1.1.1/24 vlan 1 static disable...
  • Page 39 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Note The device switch is delivered with no community strings configured. The following screen displays the default device configuration: console# show snmp Community-String Community-Access View name IP address -------------------- ------------------ -------------- ------------ Community-String Group name IP address...

  • Page 40: Advanced Configuration

    Initial Configuration In the configuration mode, enter the SNMP configuration command with the parameters including community name (private), community access right (read and write) and IP address, as shown in the following example: console# configure console(config)# snmp-server community priate rw 10.1.1.1 view bobi console(config)# exit console# show snmp Community-String...

  • Page 41: Receiving An Ip Address From A Bootp Server

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Assigning Dynamic IP Addresses: configure console# interface ethernet console(config)# ip address dhcp hostname console(config-if)# <string> The interface receives the IP address automatically. To verify the IP address, enter the show ip interface command at the system prompt as shown in the following example.

  • Page 42: Security Management And Password Configuration

    Initial Configuration The following example illustrates the process: enable Console> delete startup-config Console# Startup file was deleted reload Console# You haven’t saved your changes. Are you sure you want to continue (y/n)[n]? This command will reset the whole system and disconnect your current session.Do you want to continue (y/n)[n]? ****************************************************** /*the device reboots */...

  • Page 43: Configuring An Initial Telnet Password

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring an Initial Telnet Password To configure an initial Telnet password, enter the following commands: aaa authentication login default line Console(config)# aaa authentication enable default line Console(config)# line telnet Console(config)# login authentication default Console(config-line)# enable authentication default Console(config-line)#...

  • Page 44: Software Download And Reboot

    Initial Configuration Software Download and Reboot Software Download through XModem This section contains instructions for downloading device software (system and boot images) using XModem, which is a data transfer protocol for updating back-up configuration files. To download a boot file using XModem: Enter the command “xmodem:boot”.

  • Page 45: Boot Image Download

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enter the command “copy tftp://{tftp address}/{file name}image” to copy a new system image to the device. When the new image is downloaded, it is saved in the area allocated for the other copy of system image (image-2, as given in the example).

  • Page 46: Startup Menu Functions

    Initial Configuration Enter the command “reload”. The following message is displayed: Console# reload This command will reset the whole system and disconnect your current session. Do you want to continue (y/n)[n]? Enter “Y” to reboot the switch. Startup Menu Functions Additional configuration functions can be performed from the Startup menu.

  • Page 47: Erase Flash File

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Erase FLASH File In some cases, the device configuration must be erased. If the configuration is erased, all parameters configured via CLI, Web browser interface, or SNMP must be reconfigured. To erase the device configuration: From the Startup menu, press “2”...

  • Page 48: Password Recovery

    Initial Configuration Password Recovery If a password is lost, use the Password Recovery option on the Startup menu. The procedure enables the user to enter the device once without a password. To recover a lost password for the local terminal only: From the Startup menu, select “4 and press .

  • Page 49: Getting Started

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 4. Getting Started This section provides an introduction to the user interface, and includes the following topics: • Starting the D-Link Embedded Web Interface • Understanding the D-Link Embedded Web Interface •...

  • Page 50: Starting The D-Link Embedded Web Interface

    Notes • Disable the popup blocker before beginning device configuration using the EWS. This section contains information on starting the D-Link Embedded Web interface. To access the D-Link user interface: Open an Internet browser. Ensure that pop-up blockers are disabled. If pop-up blockers are enable, edit, add, and device information messages may not open.
  • Page 51 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Click . The D-Link Embedded Web Interface Home Page opens: Notes • The screen captures in this Guide represent the 48 port device. The Web pages in the 24 port device may vary slightly.

  • Page 52: Understanding The D-Link Embedded Web Interface

    Understanding the D-Link Embedded Web Interface Understanding the D-Link Embedded Web Interface The D-Link Embedded Web Interface Home Page contains the following views: • Port LED Indicators — Located at the top of the home page, the port LED indicators provide a visual repre- sentation of the ports on the D-Link front panel.

  • Page 53: Device Representation

    EWS. This section provides the following additional information: • Device Representation — Provides an explanation of the D-Link user interface buttons, including both man- agement buttons and task icons. • Using the D-Link Embedded Web Interface Management Buttons — Provides instructions for adding, modifying, and deleting configuration parameters.

  • Page 54: Using The D-Link Embedded Web Interface Management Buttons

    Getting Started Understanding the D-Link Embedded Web Interface Using the D-Link Embedded Web Interface Management Buttons Configuration Management buttons and icons provide an easy method of configuring device information, and include the following: Table 10: D-Link Web Interface Configuration Buttons...

  • Page 55: Using Screen And Table Options

    • Deleting Configuration Information Adding Configuration Information User-defined information can be added to specific D-Link Web Interface pages, by opening a new Add page. To add information to tables or D-Link Web Interface pages: Open a D-Link Web Interface page.

  • Page 56: Modifying Configuration Information

    Getting Started Using Screen and Table Options Modifying Configuration Information Open The D-Link Embedded Web Interface page. Select a table entry. Click . A modification page, such as the IP Interface Settings Page opens: Figure 25: IP Interface Settings Page Modify the fields.

  • Page 57: Rebooting The Device

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Rebooting the Device The Reboot Page enables rebooting the device from a remote location. Note To prevent the current configuration from being lost, save all changes from the running configuration file to the startup configuration file before rebooting the device. For instructions, see Copying Files. To reboot the device: Click System >...

  • Page 58: Logging Off From The Device

    Getting Started Logging Off from the Device Logging Off from the Device Click . The Logout Page opens. Click . The D-Link Embedded Web Interface Home Page closes. Page 57...

  • Page 59: Managing Device Information

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 5. Managing Device Information This section contains information for setting general system information, and includes the following sections: • Defining the System Description • Enabling Jumbo Frames • Rebooting the Device Page 58...

  • Page 60: Defining The System Description

    Managing Device Information Defining the System Description Defining the System Description The System Description Page contains parameters for configuring general device information, including the sys- tem name, location, and contact, the system MAC Address, System Object ID, System Up Time, and MAC addresses, and both software, boot, and hardware versions.
  • Page 61 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Hardware Version — Displays the installed device hardware version number. • Boot Version — Displays the current Boot version running on the device. • Software Version — Displays the installed software version number. Page 60...

  • Page 62: Enabling Jumbo Frames

    Managing Device Information Enabling Jumbo Frames Enabling Jumbo Frames The Mode Page allows network managers to enable Jumbo Frames on the device. Jumbo Frames enable the transportation of identical data in fewer frames. This ensures less overhead, lower processing time, and fewer interruptions.

  • Page 63: Rebooting The Device

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Rebooting the Device The Reboot page enables rebooting the device from both local and remote locations. To prevent the current con- figuration from being lost, save all changes from the running configuration file to the startup configuration file before rebooting the device.

  • Page 64: Managing Power Over Ethernet Devices

    Managing Power over Ethernet Devices Section 6. Managing Power over Ethernet Devices Power over Ethernet (PoE) provides power to devices over existing LAN cabling, without updating or modifying the network infrastructure. Power over Ethernet removes the necessity of placing network devices next to power sources.

  • Page 65: Defining Poe System Information

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining PoE System Information The PoE Properties Page contains system PoE information for enabling PoE on the device, monitoring the current power usage, and enabling PoE traps. To enable PoE on the device: Click System >...
  • Page 66 Managing Power over Ethernet Devices Defining PoE System Information Define the fields. Click . The system PoE parameters are defined, and the device is updated. To modify PoE Property settings: Click System > Power over Ethernet > Properties. The PoE Properties Page opens. Click .

  • Page 67: Defining Poe Interfaces

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining PoE Interfaces The Power Over Ethernet Interface Page contains information for configuring PoE interfaces, including the inter- face PoE operation status and the interface’s power consumption. To define PoE for interfaces: Click System >...
  • Page 68 Managing Power over Ethernet Devices Defining PoE Interfaces • Operational Status — Indicates the inline power operational state of the port. The possible field values are: – On — Indicates the device is delivering power to the interface. – Off — Indicates the device is not delivering power to the interface. –...
  • Page 69 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify PoE Interface settings: Click System > Power over Ethernet > Interface tab. The Power Over Ethernet Interface Page opens. Click to select the interface. The PoE Interface Settings Page opens: Figure 32: PoE Interface Settings Page Define the fields.

  • Page 70: Stacking

    Stacking Section 7. Stacking Stacking provides multiple switch management through a single point as if all stack members are a single unit. All stack members are accessed through a single IP address through which the stack is managed. The stack is can be managed from the following: •...
  • Page 71 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Figure 33: Stacking Ring Topology Most difficulties incurred in Ring topologies occur when a device in the ring becomes non-functional, or a link is severed. In a stack, the system automatically switches to a Stacking Failover topology without any system down- time.

  • Page 72: Exchanging Stacking Members

    Stacking Removing and Replacing Stacking Members Stacking member 1 and Stacking member 2 are Stacking Master enabled units. Unit 1 and Unit 2 are either desig- nated as Master Unit or Secondary Master Unit. The Stacking Master assignment is performed during the configu- ration process.

  • Page 73: Defining Stacking

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Switching between the Stacking Master and the Secondary Master results in a limited service loss. Any dynamic tables are relearned if a failure occurs. The running configuration file is synchronized between Stacking Master and the Secondary Master, and continues running on the Secondary Master.
  • Page 74 Stacking • Switch Stack Control from Unit 1 to Unit 2 — Switches the stack control from the Stack Master to the Backup Master. The possible field values are: – Checked — Enables switching the stack control to the Standby Stack Master. –...

  • Page 75: Configuring Device Security

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 8. Configuring Device Security This section provides access to security pages that contain fields for setting security parameters for ports, device management methods, users, and server security. This section contains the following topics: •...

  • Page 76: Configuring Management Security

    Configuring Device Security Configuring Management Security Configuring Management Security This section provides information for configuring device management security. This section includes the following topics: • Configuring Authentication Methods • Configuring Passwords Configuring Authentication Methods This section provides information for configuring device authentication methods. This section includes the topics: •...

  • Page 77: Defining Access Profiles

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Access Profiles Access profiles are profiles and rules for accessing the device. Access to management functions can be limited to user groups. User groups are defined for interfaces according to IP addresses or IP subnets. Access profiles con- tain management methods for accessing and managing the device.
  • Page 78 Configuring Device Security Configuring Management Security • Remove — Removes the selected access profile. The possible field values are: – Checked — Removes the selected access profile. Access Profiles cannot be removed when Active. – Unchecked — Maintains the access profiles. To modify Access profiles: Click System >...
  • Page 79 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Management Method — Defines the management method for which the rule is defined. Users with this access profile can access the device using the management method selected. The possible field values are: –...

  • Page 80: Defining Profile Rules

    Configuring Device Security Configuring Management Security Defining Profile Rules Access profiles can contain up to 128 rules that determine which users can manage the switch module, and by which methods. Users can also be blocked from accessing the device. Rules are composed of filters including: •...
  • Page 81 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Management Method — Defines the management method for which the rule is defined. Users with this access profile can access the device using the management method selected. The possible field values are: –...
  • Page 82 Configuring Device Security Configuring Management Security To add a Profile Rule: Click System > Management Security > Authentication > Profile Rules. The Profile Rules Page opens. Click . The Add Profile Rule Page opens: Figure 38: Add Profile Rule Page In addition to the fields in the Profile Rules Page, the Add Profile Rule Page contains the following additional field: •...
  • Page 83 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify Profile Rules: Click System > Management Security > Authentication > Profile Rules. The Access Profile Page opens Click . The Profile Rules Setting Page opens: Figure 39: Profile Rules Settings In addition to the fields in the Profile Rules Page, the Profile Rules Settings contains the following additional field: •...

  • Page 84: Defining Authentication Profiles

    Configuring Device Security Configuring Management Security Defining Authentication Profiles Authentication profiles allow network administrators to assign authentication methods for user authentication. User authentication can be performed either locally or on an external server. User authentication occurs in the order the methods are selected. If the first authentication method is not available, the next selected method is used.
  • Page 85 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide – Line — Authenticates the user using a line password. – Enable — Authenticates the user using an enable password. – TACACS+ — Authenticates the user at the TACACS+ server. • Remove — Removes the selected authentication profile. The possible field values are: –...
  • Page 86 Configuring Device Security Configuring Management Security To modify Authentication Profiles: Click System > Management Security > Authentication > Authentication Profiles. The Authentication Profile Page opens. Select a Profile. Click . The Authentication Profile Page opens: Figure 42: Authentication Profile Settings Select an authentication method from the Optional Methods list.

  • Page 87: Mapping Authentication Methods

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Mapping Authentication Methods After authentication profiles are defined, they can be applied to management access methods. For example, con- sole users can be authenticated by Authentication Profile List 1, while Telnet users are authenticated by Authenti- cation Method List 2.
  • Page 88 Configuring Device Security Configuring Management Security • HTTP — Indicates that Authentication methods are used for HTTP access. Possible field values are: – None — Indicates that no authentication method is used for access. – RADIUS — Indicates that Authentication occurs at the RADIUS server. –...

  • Page 89: Defining Radius Settings

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining RADIUS Settings Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. RADIUS servers provide a centralized authentication method for web access. The default parameters are user-defined, and are applied to newly defined RADIUS servers. If new default param- eters are not defined, the system default values are applied to newly defined RADIUS servers.
  • Page 90 Configuring Device Security Configuring Management Security • Timeout for Reply (1-30) — Defines the amount of time (in seconds) the device waits for an answer from the RADIUS server before retrying the query, or switching to the next server. Possible field values are 1-30. The default value is 3.
  • Page 91 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To add a RADIUS Server: Click System > Management Security > Authentication > RADIUS. The RADIUS Page opens. Click . The Add RADIUS Server Page opens: Figure 45: Add RADIUS Server Page Define the fields.
  • Page 92 Configuring Device Security Configuring Management Security To modify RADIUS Server settings: Click System > Management Security > Authentication > RADIUS. The RADIUS Page opens. Click . The RADIUS Server Settings Page opens: Figure 46: RADIUS Server Settings Page Define the fields. Click .
  • Page 93 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining TACACS+ Authentication Terminal Access Controller Access Control System (TACACS+) provides centralized security user access valida- tion. The system supports up-to 4 TACACS+ servers. TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes.
  • Page 94 Configuring Device Security Configuring Management Security • Priority — Defines the order in which the TACACS+ servers are used. The field range is 0-65535. The default is 0. • Source IP Address — Defines the device source IP address used for the TACACS+ session between the device and the TACACS+ server.
  • Page 95 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To add a TACACS+ Host: Click System > Management Security > Authentication > TACACS+. The TACACS+ Page opens. Click . The TACACS+ Page opens. Figure 48: Add TACACS+ Host Page Define the fields. Click .
  • Page 96 Configuring Device Security Configuring Management Security To modify TACACS+ Server settings: Click System > Management Security >Authentication > TACACS+. The TACACS+ Page opens. Select TACACS+ server entry. Click . The TACACS+ Host Settings Page opens. Figure 49: TACACS+ Host Settings Page Modify the fields.

  • Page 97: Configuring Passwords

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring Passwords This section contains information for defining device passwords, and includes the following topics. • Defining Local Users • Defining Line Passwords • Defining Enable Passwords Defining Local Users Network administrators can define users, passwords, and access levels for users using the Local User Page. To define local users: Click System >...
  • Page 98 Configuring Device Security Configuring Management Security To add a Local User: Click System > Management Security > Passwords > Local Users. The Local User Page opens. Click . The Add Local User Page opens: Figure 51: Add Local User Page In addition to the fields in the Local User Page, the Add Local User Page contains the following fields: •...
  • Page 99 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify Local User settings: Click System > Management Security > Passwords > Local Users. The Local User Page opens. Click . The Local User Settings Page opens: Figure 52: Local User Settings Page Define the fields.

  • Page 100: Defining Line Passwords

    Configuring Device Security Configuring Management Security Defining Line Passwords Network administrators can define line passwords in the Line Password Page. The device can be accessed using the following methods: • Console • Telnet Line • Secure Telnet Line To define line passwords: Click System >...
  • Page 101 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Redefine the Confirm Password field for each of the passwords defined in the previous steps to verify the passwords. Click . The line passwords are saved, and the device is updated. Page 100...

  • Page 102: Defining Enable Passwords

    Configuring Device Security Configuring Management Security Defining Enable Passwords The Enable Password Page sets a local password for a particular access level. To enable passwords: Click System > Management Security > Passwords > Enable Password. The Enable Password Page opens: Figure 54: Enable Password Page The Enable Password Page contains the following fields: •...

  • Page 103: Configuring Dhcp Snooping

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring DHCP Snooping DHCP Snooping expands network security by providing firewall security between untrusted interfaces and DHCP servers. By enabling DHCP Snooping network administrators can differentiate between trusted interfaces con- nected to end-users or DHCP Servers and untrusted interfaces located beyond the network firewall. DHCP Snooping filters untrusted messages.

  • Page 104: Defining Dhcp Snooping Properties

    Configuring Device Security Configuring Management Security Defining DHCP Snooping Properties The DHCP Snooping Properties Page contains parameters for enabling DHCP Snooping on the device. To define DHCP Snooping on the device: Click System > Management Security > DHCP Snooping > Properties. The DHCP Snooping Properties Page opens: Figure 55: DHCP Snooping Properties Page The DHCP Snooping Properties Page contains the following fields:...
  • Page 105 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Backup Database — Indicates if the DHCP Snooping Database is enabled. The possible field values are: – Enable — Enables storing allotted IP addresses in the DHCP Snooping Database. – Disable — Disables storing allotted IP addresses in the DHCP Snooping Database. This is the default value.

  • Page 106: Defining Dhcp Snooping On Vlans

    Configuring Device Security Configuring Management Security Defining DHCP Snooping on VLANs The DHCP Snooping VLAN Settings Page allows network managers to enable DHCP Snooping on VLANs. DHCP snooping separates ports in the VLAN. To enable DHCP Snooping on VLAN, ensure that DHCP Snooping is enabled on the device.

  • Page 107: Defining Trusted Interfaces

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Trusted Interfaces The Trusted Interface Page allows network managers to define Trusted interfaces. Interfaces are untrusted if the packet is received from an interface outside the network or from an interface beyond the network firewall. Trusted interfaces receive packets only from within the network or the network firewall.
  • Page 108 Configuring Device Security Configuring Management Security Define the Unit No. Or LAGs field. Click . The DHCP Snooping Trusted Interface Settings Page opens. Figure 58: DHCP Snooping Trusted Interface Settings Page Select an Interface. Define the fields. Click . The device is updated with the Trust Status of the interface. Page 107...

  • Page 109: Adding Interfaces To The Dhcp Snooping Database

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Adding Interfaces to the DHCP Snooping Database The DHCP Snooping Binding Database Page contains parameters for querying and adding IP addresses to the DHCP Snooping Database. To query or add IP addresses: Click System >...
  • Page 110 Configuring Device Security Configuring Management Security Query Result Table In addition to the fields above, the following fields appear in the Query result Table: • Lease Time — Displays the lease time. The Lease Time defines the amount of time the entry is active in the DHCP Database.

  • Page 111: Configuring Dhcp Option 82

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring DHCP Option 82 DHCP Option 82 attaches authentication messages to the packets sent to DHCP Server via TCP/IP network. The option permits network administrators to limit address allocation to authorized hosts only. This permits network administrators to limit address allocation authorized hosts.

  • Page 112: Configuring Arp Inspection

    Configuring Device Security Configuring Management Security Configuring ARP Inspection Classic Address Resolution Protocol is a TCP/IP protocol that translates IP addresses into MAC addresses. Clas- sic ARP: • Permits two hosts on the same network to communicate and send packets. •...

  • Page 113: Arp Inspection Properties

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide ARP Inspection Properties The ARP Inspection Properties Page provides parameters for enabling and setting global ARP Inspection param- eters, as well as defining ARP Inspection Log parameters. To enable ARP Inspection: Click System > Management Security > ARP Inspection > Properties. The ARP Inspection Properties Page opens: Figure 62: ARP Inspection Properties Page The ARP Inspection Properties Page screen contains the following fields:...

  • Page 114: Defining Trusted Interfaces

    Configuring Device Security Configuring Management Security Defining Trusted Interfaces The Trusted Interface Page allows network managers to configure trusted and untrusted interfaces. ARP Inspec- tion is performed on untrusted interfaces only. To configured ARP Inspection for interfaces Click System > Management Security > ARP Inspection > Trusted Interfaces. The Trusted Interface Page opens: Figure 63: Trusted Interface Page The Trusted Interface Page screen contains the following fields:...
  • Page 115 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Click . The ARP Inspection Trusted Interface Settings Page window opens: Figure 64: ARP Inspection Trusted Interface Settings Page Modify the fields. Click . The trust mode is set for ARP Inspection interfaces, and the device is updated. Page 114...

  • Page 116: Defining The Arp Inspection List

    Configuring Device Security Defining the ARP Inspection List Defining the ARP Inspection List The ARP Inspection List Page provides information for creating static ARP Binding Lists. ARP Binding Lists con- tains the List Name, IP address and MAC address which are validated against ARP requests. To create an ARP Inspection Binding List: Click System >...
  • Page 117 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • MAC Address — Specifies MAC addresses included in ARP Binding Lists which are checked against ARP requests. • Remove — Removes the entry from the ARP Inspection list. The possible field values are: –...

  • Page 118: Assigning Arp Inspection Vlan Settings

    Configuring Device Security Defining the ARP Inspection List Assigning ARP Inspection VLAN Settings The ARP Inspection VLAN Settings Page assigns an ARP Inspection Binding List to VLANs. To assign an ARP Inspection Binding List to a VLAN: Click System > Management Security > ARP Inspection > VLAN Settings. The ARP Inspection VLAN Settings Page opens: Figure 67: ARP Inspection VLAN Settings Page The ARP Inspection VLAN Settings Page screen contains the following fields:...
  • Page 119 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Figure 68: Add ARP Inspection VLAN Settings Page In addition to the fields in the ARP Inspection VLAN Settings Page, the Add ARP Inspection VLAN Settings Page contains the following additional fields: •...

  • Page 120: Configuring Ip Source Guard

    Configuring Device Security Defining the ARP Inspection List Configuring IP Source Guard IP source guard stops malignant network users from using unallocated network IP addresses. IP Source Guard ensures that only packets with an IP address stored in the DHCP Database are for- warded.

  • Page 121: Enabling Ip Source Guard

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling IP Source Guard To enable IP Source Guard: Click System > Management Security > IP Source Guard > Properties. The IP Source Guard Properties Page opens: Figure 69: IP Source Guard Properties Page The IP Source Guard Properties Page contains the following field: •...
  • Page 122 Configuring Device Security Defining the ARP Inspection List Defining IP Source Guard Interfaces The IP Source Guard Interface Settings Page contains parameters for enabling IP Source Guard on specific inter- faces. To define IP Source Guard on an interface: Click System > Management Security > IP Source Guard > Interface Properties. The IP Source Guard Properties Page opens: Figure 70: IP Source Guard Interface Settings Page The IP Source Guard Interface Settings Page contains the following fields:...
  • Page 123 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Click . The Trusted Interfaces Settings Page opens. Figure 71: Trusted Interfaces Settings Page 3. Modify the fields. 4. Click . The Interface IP Source Guard parameters are modified, and the device is updated.
  • Page 124 Configuring Device Security Defining the ARP Inspection List Defining the IP Source Binding Database The IP Source Binding Database Page enables network managers to query and view information about inactive addresses recorded in the DHCP Database. To query and view information about the IP Source Binding Data- base: Click System >...
  • Page 125 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Query By In the Query By section, select and define the preferred filter for searching the IP Source Guard Database: • MAC Address — Search the database by MAC address. • IP Address — Search the database by IP address. •...

  • Page 126: Configuring Network Security

    Configuring Device Security Configuring Network Security Configuring Network Security Network security manages both access control lists and locked ports. This section contains the following topics: • Network Security Overview • Defining Network Authentication Properties • Defining Port Authentication • Configuring Traffic Control Page 125...

  • Page 127: Network Security Overview

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Network Security Overview This section provides an overview of network security and contains the following topics: • Port-Based Authentication • Advanced Port-Based Authentication Port-Based Authentication Port-based authentication authenticates users on a per-port basis via an external server. Only authenticated and approved system users can transmit and receive data.

  • Page 128: Defining Network Authentication Properties

    Configuring Device Security Configuring Network Security Defining Network Authentication Properties The Network Authentication Properties Page allows network managers to configure network authentication parameters. In addition, Guest VLANs are enabled from the Network Authentication Properties Page. To define the network authentication properties: Figure 73: Network Authentication Properties Page The Network Authentication Properties Page contains the following fields: •...
  • Page 129 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Define the fields. Click . The network authentication properties are set, and the device is updated. Page 128...

  • Page 130: Defining Port Authentication

    Configuring Device Security Configuring Network Security Defining Port Authentication The Port Authentication Page allows network managers to configure port-based authentication global parameters. To define the port-based authentication global properties: Click Advanced Setup > Security Suite > Authentication > Port Authentication. The Port Authentication Page opens.
  • Page 131 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide work administrator can use Guest VLANs to deny network access via port-based authentication, but grant Internet access to unauthorized users.The possible field values are: – Enabled — Indicates that an unauthorized user can use the Guest VLAN. –...
  • Page 132 Configuring Device Security Configuring Network Security To modify Port Authentication settings: Click Advanced Setup > Security Suite > Authentication > Port Authentication. The Port Authentication Page opens. Click . The Port Authentication Settings Page opens: Figure 75: Port Authentication Settings Page Modify the fields.

  • Page 133: Configuring Multiple Hosts

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring Multiple Hosts The Multiple Host Page allows network managers to configure advanced port-based authentication settings for specific ports and VLANs. For more information on advanced port-based authentication, see Advanced Port- Based Authentication. To define the network authentication global properties: Click Advanced Setup >...
  • Page 134 Configuring Device Security Configuring Network Security • Host Authentication— Indicates whether multiple hosts are enabled. Multiple hosts must be enabled in order to either disable the ingress-filter, or to use port-lock security on the selected port. The possible field values are: –...
  • Page 135 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify Multiple Host settings: Click Advanced Setup > Security Suite > Authentication > Multiple Host. The Multiple Host Page opens. Click . The Multiple Host Settings Page opens: Figure 77: Multiple Host Settings Page Modify the fields.

  • Page 136: Defining Authentication Hosts

    Configuring Device Security Configuring Network Security Defining Authentication Hosts The Authenticated Host Page contains a list of authenticated users. To define authenticated users: Click Advanced Setup > Security Suite > Authentication > Authenticated Host. The Authenticated Host Page opens: Figure 78: Authenticated Host Page The Authenticated Host Page contains the following fields: To display Authenticated host settings, select a stacking unit: •...

  • Page 137: Configuring Traffic Control

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring Traffic Control This section contains information for managing both port security and storm control, and includes the following topics: • Managing Port Security • Enabling Storm Control Page 136...

  • Page 138: Managing Port Security

    MAC addresses. These addresses are either manually defined on the port, or learned on that port up to the point when it is locked. When a packet is received on a locked port, and the packet D-Link source MAC address is not tied to that port (either it was learned on a different port, or it is unknown to the system), the protec- tion mechanism is invoked, and can provide various options.
  • Page 139 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • LAGs — Indicates the LAG for which port security details are displayed. In addition to the fields above, the following fields appear in the Port Security Table: • Port — Displays the port number. •...
  • Page 140 Configuring Device Security Configuring Network Security To modify Port Security settings: Click Advanced Setup > Security Suite > Traffic Control > Port Security. The Port Security Page opens. Click . The Port Security Settings Page opens: Figure 80: Port Security Settings Page Define the fields.

  • Page 141: Enabling Storm Control

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling Storm Control Storm control limits the amount of Multicast and Broadcast frames accepted and forwarded by the device. When frames are forwarded, Broadcast, and Multicast frames are flooded to all ports on the relevant VLAN. This occu- pies bandwidth, and loads all nodes on all ports.
  • Page 142 Configuring Device Security Configuring Network Security In addition to the fields above, the following fields appear in the Storm Control Table: • Port — Indicates the port from which storm control is enabled. • Broadcast Control — Indicates if forwarding Broadcast packet types is enabled on the interface.The possi- ble field values are: –...

  • Page 143: Defining Dos Protection Security

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining DOS Protection Security Denial of Service (DOS) increases network security by preventing packets with invalid IP addresses or arriving from malicious networks from entering the network. Packets from malicious networks can compromise a network’s stability.
  • Page 144 Configuring Device Security Defining DOS Protection Security • TCP Protection Only — Indicates that DoS Prevention is enabled only for TCP packets. The possible field values are: – Checked — Enables DoS prevention only for TCP values. This is the default value. –...

  • Page 145: Defining Martian Address Filtering

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Martian Address Filtering Martian Address Filtering enables discarding IP packets from invalid IP addresses. Martian addresses include packets from a source IP addresses outside or not used within the configured network. Martian addresses include any address within the following ranges: •...
  • Page 146 Configuring Device Security Defining DOS Protection Security The Martian Addresses Page contains the following fields: • Include Reserved Martian IP Addresses — Indicates that packets arriving from Martian addresses are dropped. Enabled is the default value. When enabled, the following IP addresses are included: –...

  • Page 147: Enabling Syn Filtering

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling SYN Filtering SYN attacks occur when TCP packets are transmitted with connections that cannot be completed. SYN attacks result in congested network queues, and cause denial of service to legitimate TCP users. SYN Protection allows network managers to drop illegal TCP packets.
  • Page 148 Configuring Device Security Defining DOS Protection Security – SMTP — Defines the SMTP TCP port on which SYN filtering is enabled. – User Defined — Defines the user-defined TCP port on which SYN filtering is enabled. – All — Enables SYN Filtering on all destination TCP ports. •...

  • Page 149: Defining Syn Rate Protection

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining SYN Rate Protection SYN attacks occur when TCP packets are transmitted with connections that cannot be completed. SYN attacks result in congested network queues, and cause denial of service to legitimate TCP users. SYN Protection allows network managers to drop illegal TCP packets.
  • Page 150 Configuring Device Security Defining DOS Protection Security Click . The Add SYN Rate Protection Page opens: Figure 89: Add SYN Rate Protection Page In addition to the fields in the SYN Rate Protection Page, the Add SYN Rate Protection Page contains the follow- ing additional fields: •...

  • Page 151: Discarding Ip Fragments

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Discarding IP Fragments The IP Fragmented Filtering Page provides parameters for discarding IP fragmented packets from specific inter- faces. Packet Fragmentation occurs when a packet is too large to be transmitted as a single unit, and is forwarded in two or more packets.
  • Page 152 Configuring Device Security Defining DOS Protection Security Click . The Add IP Fragmented Filter Page opens: Figure 91: Add IP Fragmented Filter Page In addition to the fields in the IP Fragmented Filtering Page, the Add IP Fragmented Filter Page contains the fol- lowing additional field: •...

  • Page 153: Enabling Icmp Filtering

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling ICMP Filtering The ICMP Filtering Page provides parameters for discarding Internet Control Message Protocol (ICMP) packets from specific interfaces. To define IP fragmentation: Click Advanced Setup > Security Suite > DOS Attacks > ICMP Filtering. The ICMP Filtering Page opens. Figure 92: ICMP Filtering Page The ICMP Filtering Page contains the following fields: •...
  • Page 154 Configuring Device Security Defining DOS Protection Security To add an IP ICMP Filter: Click Advanced Setup > Security Suite > DOS Attacks > ICMP Filtering. The ICMP Filtering Page opens. Click . The Add ICMP Filtering Page opens: Figure 93: Add ICMP Filtering Page In addition to the fields in the ICMP Filtering Page, the Add ICMP Filtering Page contains the following additional field: •...

  • Page 155: Defining Acls

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining ACLs Access Control Lists (ACL) allow network managers to define classification actions and rules for specific ingress ports. Packets entering an ingress port, with an active ACL, are either admitted or denied entry and the ingress port is disabled.
  • Page 156 Configuring Device Security Defining ACLs In addition to the fields above, the following fields appear in the ACL Binding Table: • Interface — Indicates the interface to which the ACL is bound. • ACL Name — Indicates the ACL which is bound the interface. •...

  • Page 157: Defining Ip Based Acls

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining IP Based ACLs Access Control Lists (ACL) allow network managers to define classification actions and rules for specific ingress ports.The device supports up to 1,024 ACLs. Packets entering an ingress port, with an active ACL, are either admitted or denied entry and the ingress port is disabled.
  • Page 158 Configuring Device Security Defining ACLs IP Based ACL Table In addition to the fields above, the following fields appear in the IP Based ACL Table: • ACE Priority — ACE priority that determines which ACE is matched to a packet based on a first-match basis. •...
  • Page 159 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • IGMP Type — IGMP packets can be filtered by IGMP message type. • Source IP Address — Matches the source port IP address to which packets are addressed to the ACE. •...
  • Page 160 Configuring Device Security Defining ACLs To add an IP based ACL: Click Advanced Setup > Security Suite > Access Control > IP Based ACL. The IP Based ACL Page opens. Click . The Add IP Based ACL Page opens: Figure 97: Add IP Based ACL Page Define the fields.
  • Page 161 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To add an IP based ACE: Click Advanced Setup > Security Suite > Access Control > IP Based ACL. The IP Based ACL Page opens. Click . The Add IP Based ACE Page opens. Figure 98: Add IP Based ACE Page Define the fields.

  • Page 162: Defining Mac Based Acl

    Configuring Device Security Defining ACLs Defining MAC Based ACL The MAC Based ACL Page page allows MAC- based ACLs to be defined. ACEs can be added only if an ACL is not bound to an interface. To define MAC Based ACLs: Click Advanced Setup >...
  • Page 163 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Ethertype — Indicates the Ethertype packet by which the packets are filtered. • Action — Indicates the ACL forwarding action. Possible field values are: – Permit — Forwards packets which meet the ACL criteria. –...
  • Page 164 Configuring Device Security Defining ACLs To add an MAC based ACE: Click Advanced Setup > Security Suite > Access Control > MAC Based ACL. The MAC Based ACL Page opens. Click . The Add MAC Based ACE Page opens. Figure 101:Add MAC Based ACE Page Define the fields.

  • Page 165: Configuring Ports

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 9. Configuring Ports Configuring Interfaces The Interface Configuration Page contains fields for defining port parameters. In addition to the fields in the Inter- face Configuration Page, the Port or LAG Configuration Settings Page includes the Reactivate Suspended Port or Reactivate Suspended Lag fields.
  • Page 166 Configuring Ports Configuring Interfaces Interface Configuration Port Table In addition to the fields above, the following fields appear in the Interface Configuration Port Table: • Port Status — Indicates whether the port is currently operational or non-operational. The possible field val- ues are: –...
  • Page 167 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify Interface settings: Click Basic Setup > Interface > Interface Configuration. The Interface Configuration Page opens. Click . The Port or LAG Interface Settings Page opens: Figure 103:Port Configuration Settings Page In addition to the fields in the Interface Configuration Page, the Port or LAG Configuration Settings Page contains the following additional fields: •...

  • Page 168: Viewing Port Properties

    Configuring Ports Viewing Port Properties Viewing Port Properties The Interface Properties Page contains fields for defining port parameters. To define interface properties: Click Basic Setup > Interface > Interface Properties. The Interface Properties Page opens: Figure 104:Interface Properties Page The Interface Properties Page is contains the following fields: To display Interface Properties, select a unit number: •...
  • Page 169 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify port properties: Click Basic Setup > Interface > Interface Properties. The Interface Properties Page opens. Click . The Port Properties Page opens: Figure 105:Port Properties Page Define the fields. Click .

  • Page 170: Aggregating Ports

    Aggregating Ports Section 10. Aggregating Ports Link Aggregation optimizes port usage by linking a group of ports together to form a single LAG. Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy. The device supports both static LAGs and Link Aggregation Control Protocol (LACP) LAGs. LACP LAGs negotiate aggregating port links with other LACP ports located on a different device.

  • Page 171: Configuring Lacp

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring LACP Aggregated links can be set up manually or automatically established by enabling LACP on the relevant links. Aggregate ports can be linked into link-aggregation port-groups. Each group is comprised of ports with the same speed.
  • Page 172 Aggregating Ports Configuring LACP To modify LACP parameters: Click Advanced Setup > Interface > LACP Parameters. The LACP Parameters Page opens. Click . The LACP Parameters Settings Page opens: Figure 107:LACP Parameters Settings Page Edit the fields. Click . The LACP settings are saved, and the device is updated. Page 171...

  • Page 173: Defining Lag Members

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining LAG Members The LAG Membership Page contains fields for configuring parameters for configured LAGs. The device supports up to eight ports per LAG, and 64 LAGs per device. To define LAG Membership Parameters: Click Advanced Setup >...
  • Page 174 Aggregating Ports Configuring LACP To modify LAG memberships: Click Advanced Setup > Interface > LAG Membership. The LAG Membership Page opens. Click . The LAG Membership Settings Page opens: Figure 109:LAG Membership Settings Page Define the fields. Click . The LAG membership settings are saved, and the device is updated. Page 173...

  • Page 175: Configuring Vlans

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 11. Configuring VLANs VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups.

  • Page 176: Defining Vlan Properties

    Configuring VLANs Defining VLAN Properties Defining VLAN Properties The VLAN Properties Page provides information and global parameters for configuring and working with VLANs. To define VLAN properties: Click Basic Setup > VLAN > Membership > Properties. The VLAN Properties Page opens. Figure 110: VLAN Properties Page The VLAN Properties page contains the following fields: To display VLAN Properties, select the following fields:...
  • Page 177 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Authentication VLAN — Indicates whether unauthorized users can access a Guest VLAN. The possible field values are: – Enabled — Enables unauthorized users to use the Guest VLAN. – Disabled — Disables unauthorized users from using the Guest VLAN. •...

  • Page 178: Defining Vlan Membership

    Configuring VLANs Defining VLAN Membership Defining VLAN Membership The VLAN Membership Page contains a table that maps VLAN parameters to ports. Ports are assigned VLAN membership by toggling through the Port Control settings. To define VLAN membership: Click Basic Setup > VLAN > Membership > Membership. The VLAN Membership Page opens. Figure 112: VLAN Membership Page The VLAN Membership Page contains the following fields: To display VLAN Membership settings, select the following fields:...
  • Page 179 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide VLAN Membership Table In addition to the fields above, the following fields appear in the VLAN Membership Table: • Port — Indicates the port membership. The possible VLAN Membership settings are: – Untagged (Brown) —...

  • Page 180: Defining Vlan Interface Settings

    Configuring VLANs Defining VLAN Interface Settings Defining VLAN Interface Settings The VLAN Interface Settings Page contains fields for managing ports that are part of a VLAN. The Port Default VLAN ID (PVID) is configured on the VLAN Interface Settings Page. All untagged packets arriving at the device are tagged with the port PVID.
  • Page 181 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • PVID — Assigns a VLAN ID to untagged packets. The possible values are 1-4093 and 4095. VLAN 4095 is defined as per standard and industry practice as the Discard VLAN. Packets classified to the Discard VLAN are dropped.

  • Page 182: Configuring Garp

    Configuring VLANs Configuring GARP Configuring GARP This section contains information for configuring Generic Attribute Registration Protocol (GARP). This section includes the following topics: • Defining GARP • Defining GVRP Defining GARP Generic Attribute Registration Protocol (GARP) protocol is a general-purpose protocol that registers any network connectivity or membership-style information.
  • Page 183 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide GARP Parameter Table In addition to the fields above, the following fields appear in the GARP Table: • Join Timer — Indicates the amount of time, in centiseconds, that PDUs are transmitted. The default value is 20 centiseconds.

  • Page 184: Defining Gvrp

    Configuring VLANs Configuring GARP Defining GVRP GARP VLAN Registration Protocol (GVRP) is specifically provided for automatic distribution of VLAN membership information among VLAN-aware bridges. GVRP allows VLAN-aware bridges to automatically learn VLANs to bridge ports mapping, without having to individually configure each bridge and register VLAN membership. To define GVRP on the device: Click Basic Setup >...
  • Page 185 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Dynamic VLAN Creation — Indicates if Dynamic VLAN creation is enabled on the interface. The possible field values are: – Enable — Enables Dynamic VLAN creation on the interface. – Disable — Disables Dynamic VLAN creation on the interface. •...

  • Page 186: Defining Vlan Groups

    Configuring VLANs Defining VLAN Groups Defining VLAN Groups VLAN groups increase network flexibility and portability. For example, network users grouped by MAC address can log on to the network from multiple locations without moving between VLANs. VLANs can be grouped by MAC address, Subnets, and Protocols. Once a user logs on, the system attempts to classify the user by MAC address.
  • Page 187 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Group ID (HEX) — Specifies the ID number assigned to frames containing specified protocol value The pos- sible field range is 1 - 2147483647. • Remove — Removes the port assignment from a VLAN or protocol group. The possible field values are: –...
  • Page 188 Configuring VLANs Defining VLAN Groups To modify VLAN Protocol Group settings: Protocol Group Page Click Advanced Setup > VLAN > Protocol Group. The opens: Click . Protocol Group Settings Page opens: Figure 121:Protocol Group Settings Page Modify the fields. Click .

  • Page 189: Defining Vlan Protocol Port

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining VLAN Protocol Port The VLAN Protocol Port Page adds interfaces to VLAN Protocol groups. To define VLAN protocol port: Click Advanced Setup > VLAN > Protocol Port. The VLAN Protocol Port Page opens. Figure 122:VLAN Protocol Port Page The VLAN Protocol Port Page contains the following fields: •...
  • Page 190 Configuring VLANs Defining VLAN Groups To add a VLAN Protocol port setting: Click Advanced Setup > VLAN > Protocol Port. The VLAN Protocol Port Page opens. Click . The Add Protocol Port Page opens. Figure 123:Add Protocol Port Page Define the fields. Click .

  • Page 191: Configuring Voice Vlan

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring Voice VLAN Voice VLAN allows network administrators enhance VoIP service by configuring ports to carry IP voice traffic from IP phones on a specific VLAN. VoIP traffic has a preconfigured OUI prefix in the source MAC address. Network Administrators can configure VLANs on which voice IP traffic is forwarded.
  • Page 192 Configuring VLANs Defining VLAN Groups The Voice VLAN Properties Page contains the following fields: • Voice VLAN Status — Indicates if Voice VLAN is enabled on the device. The possible field values are: – Enable — Enables Voice VLAN on the device. –...

  • Page 193: Defining Voice Vlan Port Settings

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Voice VLAN Port Settings The Voice VLAN Port Settings Page allows network managers to add ports or LAGs to the voice VLAN. To add ports or LAGs to the Voice VLAN: Click Advanced Setup >...
  • Page 194 Configuring VLANs Defining VLAN Groups • Voice VLAN Port/LAG Security — Indicates if port/LAG security is enabled on the Voice VLAN. Port Secu- rity ensures that packets arriving with an unrecognized OUI are dropped. – No Changes — Maintains the current Voice VLAN port security settings. –...

  • Page 195: Defining Ouis

    00:10:49 — Assigned to ShorTel IP Phones. – 00:03:6B — Assigned to Cisco IP Phones. – 00:19:5B — Assigned to D-Link IP Phones. – 00:13:36 — Assigned to D-Link IP Phones. • Description — Provides an OUI description up to 32 characters.

  • Page 196: Ip Routing

    IP Routing Section 12. IP Routing Static routes can be defined, once the switch has been defined as a router. Use the IP Static Route Page to define static routes. To define Static IP Routing: Click Basic Setup > Routing > IP Static Route. The IP Static Route Page opens: Figure 128:IP Static Route Page The IP Static Route Page contains the following fields: •...
  • Page 197 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To add an IP Static route: Click Basic Setup > Routing > IP Static Route. The IP Static Route Page opens. Click . The Add IP Static Route Page opens: Figure 129:Add IP Static Route Page Define the fields.

  • Page 198: Configuring Ip Information

    Configuring IP Information Configuring IP Information Section 13. Configuring IP Information Configuring IP Information This section provides information for defining device IP addresses, and includes the following topics: • Configuring IP Interfaces • Configuring Domain Name Servers Configuring IP Interfaces This section contains information for defining IP interfaces, and includes the following topics: •...

  • Page 199: Defining Ip Addresses

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining IP Addresses The IP Interface Page contains fields for assigning IP addresses. Packets are forwarded to the default Gateway when frames are sent to a remote network. The configured IP address must belong to the same IP address subnet of one of the IP interfaces.
  • Page 200 Configuring IP Information Configuring IP Interfaces To add an IP interface setting: Click Basic Setup > IP Configuration > IP Addressing > IP Interface. The IP Interface Page opens. Click . The Add IP Interface Page opens: Figure 132:Add IP Interface Page Define the Source IP Address, Network Mask or Prefix Length, and Interface fields.
  • Page 201 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify IP interface settings: Click Basic Setup > IP Configuration > IP Addressing > IP Interface. The IP Interface Page opens. Click . The IP Interface Settings Page opens: Figure 133:IP Interface Settings Page Modify the fields.

  • Page 202: Defining Default Gateways

    Configuring IP Information Configuring IP Interfaces Defining Default Gateways Packets are forwarded to the default Gateway when frames are sent to a remote network via the default gateway. To define a default gateway: Click Basic Setup > IP Configuration > IP Addressing > Default Gateway. The Default Gateway Page opens: Figure 134:Default Gateway Page The Default Gateway Page contains the following fields:...

  • Page 203: Configuring Arp

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring ARP This section contains information for defining DHCP, and includes the following topics: • Defining ARP • Enabling ARP Proxy Defining ARP The Address Resolution Protocol (ARP) converts IP addresses into physical addresses, and maps the IP address to a MAC address.
  • Page 204 Configuring IP Information Configuring IP Interfaces – Static — Clears only static ARP entries. ARP Table In addition to the fields above, the following fields appear in the ARP Table: • Interface — Displays the interface type for which ARP parameters are displayed. The possible field values are: –...
  • Page 205 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify ARP entries: Click Basic Setup > IP Configuration > IP Addressing > ARP. The ARP Page opens. Click . The Edit ARP Settings Page opens: Figure 137:Edit ARP Settings Page Modify the fields.

  • Page 206: Enabling Arp Proxy

    Configuring IP Information Configuring IP Interfaces Enabling ARP Proxy To open the ARP Proxy page: The ARP Proxy Page allows network managers to enable ARP Proxy. Click Basic Setup > IP Configuration > IP Addressing > ARP Proxy. The ARP Proxy Page opens: Figure 138:ARP Proxy Page The ARP Proxy Page contains the following field: •...

  • Page 207: Configuring Dhcp

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring DHCP This section contains information for defining DHCP, and includes the following topics: • Configuring DHCP • Enabling DHCP Relay Interfaces • Enabling DHCP Relay Interfaces • Defining DHCP Relay Server Configuring DHCP The Dynamic Host Configuration Protocol (DHCP) assigns dynamic IP addresses to devices on a network.
  • Page 208 Configuring IP Information Configuring IP Interfaces To add a new DHCP IP interface: Click Basic Setup > IP Configuration > IP Addressing > DHCP. The DHCP Page opens. Click . The Add DHCP IP Interface Page opens: Figure 140:Add DHCP IP Interface Page Define the fields.
  • Page 209 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling DHCP Relay Interfaces Enabling Relay functionality provides multiple interfaces to be configured for establishing a DHCP Configuration with multiple DHCP servers to ensure redundancy. IP Addresses are controlled and distributed one-by-one to avoid storming the device.
  • Page 210 Configuring IP Information Configuring IP Interfaces To add a new DHCP relay interface: Click Basic Setup > IP Configuration > IP Addressing > DHCP Relay Interfaces. The DHCP Relay Inter- faces opens: Click . The Add DHCP Relay Interface Page opens: Figure 142:Add DHCP Relay Interface Page Define the fields.
  • Page 211 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling DHCP Relay Interfaces Enabling Relay functionality provides multiple interface to be configured for establishing a DHCP Configuration with multiple DHCP servers to ensure redundancy. IP Addresses are controlled and distributed one-by-one to avoid storming the device.
  • Page 212 Configuring IP Information Configuring IP Interfaces To add a new DHCP relay interface: Click Basic Setup > IP Configuration > IP Addressing > DHCP Relay Interfaces. The DHCP Relay Inter- faces opens: Click . The Add DHCP Relay Interface Page opens: Figure 144:Add DHCP Relay Interface Page Define the Interface field.
  • Page 213 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining DHCP Relay Server The DHCP Relay Server Page provides information for establishing a DHCP Configuration with multiple DHCP servers to ensure redundancy. IP Addresses are controlled and distributed one-by-one to avoid storming the device.
  • Page 214 Configuring IP Information Configuring IP Interfaces To add a new DHCP Server: Click Basic Setup > IP Configuration > IP Addressing >DHCP Relay Server. The DHCP Relay Server Page opens. Click . The Add DHCP Server Page opens: Figure 146:Add DHCP Server Page Define the field.

  • Page 215: Defining Udp Relay

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining UDP Relay UDP Relay allows UDP packets to reach other networks. The UDP Relay Page enables browsing from NT work- To configure the UDP Relay information: stations to NT-servers on different networks. Click Basic Setup >...
  • Page 216 Configuring IP Information Configuring IP Interfaces The following table lists UDP Port allocations: UDP Por t Number Acr onym Application Echo Echo SysStat Active User NetStat Netstat Quote Quote of the day CHARGEN Character Generator FTP-data FTP Data Time Time NAMESERVER Host Name Server NICNAME...
  • Page 217 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify UDP Relay Settings: Click Basic Setup > IP Configuration > IP Addressing > UDP Relay. The UDP Relay Page opens. Click . The UDP Relay Settings Page opens: Figure 148:UDP Relay Settings Page Modify the fields.
  • Page 218 Configuring IP Information Configuring IP Interfaces To add UDP Relay: Click Basic Setup > IP Configuration > IP Addressing > UDP Relay. The UDP Relay Page opens. Click . The Add DHCP Server Page opens: Figure 149:Add UDP Relay Page Define the fields.

  • Page 219: Configuring Domain Name Servers

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring Domain Name Servers Domain Name System (DNS) converts user-defined domain names into IP addresses. Each time a domain name is assigned, the DNS service translates the name into a numeric IP address. For example, www.ipexample.com is translated into 192.87.56.2.
  • Page 220 Configuring IP Information Configuring Domain Name Servers • Remove — Removes DNS servers. The possible field values are: – Checked — Removes the selected DNS server – Unchecked — Maintains the current DNS server list. • DNS Server — Displays the DNS server IP address. DNS servers are added in the Add DNS Server Page. •...

  • Page 221: Defining Dns Host Mapping

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining DNS Host Mapping The DNS Host Mapping Page provides information for defining DNS Host Mapping. To define DNS host mapping: 1. Click Basic Setup > IP Configuration > Domain Name System > Host Mapping. The DNS Host Mapping Page opens: Figure 152:DNS Host Mapping Page The DNS Host Mapping Page contains the following fields:...
  • Page 222 Configuring IP Information Configuring Domain Name Servers To map a new host: Click Basic Setup > IP Configuration > Domain Name System > Host Mapping. The DNS Host Mapping Page opens. Click . The Add DNS Host Page opens: Figure 153:Add DNS Host Page Define the Host Name and IP Address fields.

  • Page 223: Defining The Forwarding Database

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 14. Defining the Forwarding Database Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port. The Dynamic MAC Address Table can be sorted by interface, VLAN, or MAC Address, whereas MAC addresses are dynamically learned as packets from sources that arrive at the device.

  • Page 224: Defining Static Forwarding Database Entries

    Defining the Forwarding Database Defining Static Forwarding Database Entries Defining Static Forwarding Database Entries The Forwarding Database Static Addresses Page contains parameters for defining the age interval on the device. To prevent static MAC addresses from being deleted when the device is reset, ensure that the port attached to the MAC address is locked.
  • Page 225 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Status — Displays how the entry was created. The possible field values are: – Secure — The MAC Address is defined for locked ports. – Permanent — The MAC address is permanent. –...

  • Page 226: Defining Dynamic Forwarding Database Entries

    Defining the Forwarding Database Defining Dynamic Forwarding Database Entries Defining Dynamic Forwarding Database Entries The Dynamic Addresses Page contains parameters for querying information in the Dynamic MAC Address Table, including the interface type, MAC addresses, VLAN, and table storing. The Dynamic MAC Address table contains information about the aging time before a dynamic MAC address is erased, and includes parameters for querying and viewing the Dynamic MAC Address table.
  • Page 227 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide The Dynamic Addresses Page contains the following fields: • Address Aging — Specifies the amount of time the MAC Address remains in the Dynamic Address Table before it times out. The default value is 300 seconds. •...

  • Page 228: Configuring Spanning Tree

    Configuring Spanning Tree Section 15. Configuring Spanning Tree Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP also provides a sin- gle path between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended network can cause bridges to for- ward traffic indefinitely, resulting in increased traffic and reducing network efficiency.

  • Page 229: Defining Classic Spanning Tree

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Classic Spanning Tree The STP Properties Page contains parameters for enabling STP on the device. To enable STP on the device: Click Advanced Setup > Spanning Tree > STP > Properties. The STP Properties Page opens: Figure 157:STP Properties Page The STP Properties Page contains the following fields: •...
  • Page 230 Configuring Spanning Tree Defining Classic Spanning Tree • Path Cost Default Values — Specifies the method used to assign default path cost to STP ports. The possi- ble field values are: – Short — Specifies 1 through 65,535 range for port path cost. This is the default value. –...

  • Page 231: Defining Stp On Interfaces

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining STP on Interfaces Network administrators can assign STP settings to specific interfaces using the STP Interface Page. To assign STP settings to an interface: Click Advanced Setup > Spanning Tree > STP > Interface Settings. The STP Interface Page opens: Figure 158:STP Interface Page The STP Interface Page contains the following fields: To display STP Interface settings, select a Unit number:...
  • Page 232 Designated Bridge ID — Indicates the bridge priority and the MAC Address of the designated bridge. • Designated Port ID — Indicates the selected port D-Link priority and interface. • Designated Cost — Indicates the cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops.
  • Page 233 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify STP Interface settings: Click Advanced Setup > Spanning Tree > STP > Interface Settings. The STP Interface Page opens. Click . The STP Interface Settings Page opens: Figure 159:STP Interface Settings Page Define the fields.

  • Page 234: Defining Rapid Spanning Tree

    Configuring Spanning Tree Defining Rapid Spanning Tree Defining Rapid Spanning Tree While Classic STP prevents forwarding loops in a general network topology, convergence can take between 30-60 seconds. This time may delay detecting possible loops and propagating status topology changes. Rapid Spanning Tree Protocol (RSTP) detects and uses network topologies that allow a faster STP convergence without creating forwarding loops.
  • Page 235 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Role — Displays the port role assigned by the STP algorithm to provide to STP paths. The possible field val- ues are: – Root — Provides the lowest cost path to forward packets to the root switch. –...
  • Page 236 Configuring Spanning Tree Defining Rapid Spanning Tree To modify RSTP settings: Click Advanced Setup > Spanning Tree > RSTP > RSTP. The RSTP Page opens. Click . The RSTP Settings Page opens: Figure 161:RSTP Settings Page Define the fields. Click .

  • Page 237: Defining Multiple Spanning Tree

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Multiple Spanning Tree Multiple Spanning Tree (MSTP) provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port can be placed in the Forwarding state in another STP instance. The MSTP Properties Page contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops.

  • Page 238: Defining Mstp Instance Settings

    Configuring Spanning Tree Defining Multiple Spanning Tree Defining MSTP Instance Settings MSTP maps VLANs into STP instances. Packets assigned to various VLANs are transmitted along different paths within Multiple Spanning Tree Regions (MST Regions). Regions are one or more Multiple Spanning Tree bridges by which frames can be transmitted.
  • Page 239 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To configure the VLAN Instance Configuration: Click Advanced Setup > Spanning Tree > MSTP > Instance Settings. The MSTP Instance Settings Page opens. Click . The MSTP Instance Configuration Table opens: Figure 164:MSTP Instance Configuration Table Define the field.

  • Page 240: Defining Mstp Interface Settings

    Configuring Spanning Tree Defining Multiple Spanning Tree Defining MSTP Interface Settings Network Administrators can assign MSTP Interface settings in the MSTP Interface Settings Page To define MSTP interface settings: Click Advanced Setup > Spanning Tree > MSTP > Interface Settings. The MSTP Interface Settings Page opens: Figure 165:MSTP Interface Settings Page The MSTP Interface Settings Page contains the following fields:...
  • Page 241 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Role — Indicates the port role assigned by the STP algorithm to provide to STP paths. The possible field val- ues are: – Root — Provides the lowest cost path to forward packets to the root device. –...
  • Page 242 Configuring Spanning Tree Defining Multiple Spanning Tree To configure the MSTP Interfaces: Click Advanced Setup > Spanning Tree > MSTP > Interface Settings. The MSTP Interface Settings Page opens. Click . The MSTP Interface Table opens. Figure 166:MSTP Interface Table Modify the fields.

  • Page 243: Configuring Multicast Forwarding

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 16. Configuring Multicast Forwarding This section contains information for configuring Multicast forwarding and Multicast TV, and includes the following topics: • Defining IGMP Snooping • Defining Multicast Bridging Groups • Defining Multicast Forward All Settings •...

  • Page 244: Defining Igmp Snooping

    Configuring Multicast Forwarding Defining IGMP Snooping Defining IGMP Snooping When IGMP Snooping is enabled globally, all IGMP packets are forwarded to the CPU. The CPU analyzes the incoming packets and determines: • Which ports want to join which Multicast groups. •...
  • Page 245 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide IGMP Snooping Table In addition to the fields above, the following fields appear in the IGMP Snooping Table: • IGMP Snooping Status — Indicates if IGMP snooping is enabled on the VLAN. The possible field values are: –...
  • Page 246 Configuring Multicast Forwarding Defining IGMP Snooping To modify IGMP Snooping settings: Click Advanced Setup > Multicast Support > IGMP Snooping. The IGMP Snooping Page opens. Click . The IGMP Snooping Settings Page opens: Figure 168:IGMP Snooping Settings Page Modify the fields. Click .

  • Page 247: Defining Multicast Bridging Groups

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Multicast Bridging Groups The Multicast Group Page displays the ports and LAGs attached to the Multicast service group in the Ports and LAGs tables. The Ports and LAGs tables also reflect the manner in which the port or LAGs joined the Multicast group.
  • Page 248 Configuring Multicast Forwarding Defining Multicast Bridging Groups • MAC Address Group — Multicast bridging is based on the packet’s VLAN and MAC address. • IP Address Group — Multicast bridging is based on the packet’s VLAN and MAC address for non-IPv4 pack- ets, and on the packet’s VLAN and IPv4 destination address for IPv4 packets.

  • Page 249: Defining Multicast Forward All Settings

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Multicast Forward All Settings The Multicast Forward All Settings Page contains fields for attaching ports or LAGs to a device that is attached to a neighboring Multicast router/switch. Once IGMP Snooping is enabled, Multicast packets are forwarded to the appropriate port or VLAN.

  • Page 250: Configuring Multicast Tv

    Configuring Multicast Forwarding Configuring Multicast TV The following list summarizes the Multicast settings which can be assigned to ports in the Multicast Forward All Settings Page. • D— Attaches the port to the Multicast router or switch as a dynamic port. •...

  • Page 251: Defining Igmp Snooping For Multicast Tv

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining IGMP Snooping for Multicast TV Multicast TV allows subscribers to join the same Multicast stream, even if the subscribers are not members of the same VLAN, eliminating television traffic duplication. Ports which receive Multicast Transmissions, or Receiver Ports, can be defined in any VLAN, and not just in the Multicast VLAN.
  • Page 252 Configuring Multicast Forwarding Configuring Multicast TV To add an IGMP Snooping setting: Click Advanced Setup > Multicast Support > TV Multicast > IGMP Snooping Mapping. The IGMP Snooping Mapping Page opens. Click . The Add IGMP Snooping Mapping Page opens. Figure 173:Add IGMP Snooping Mapping Page Define the fields.

  • Page 253: Viewing Multicast Tv Members

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing Multicast TV Members The Multicast TV Membership Page allows network managers to display the ports associated with a Multicast TV VLAN. Ports and LAGs are assigned to Multicast VLAN in the Interface Configuration Page.To define Multicast TV Members: Click Advanced Setup >...

  • Page 254: Configuring Snmp

    Configuring SNMP SNMP v1 and v2c Section 17. Configuring SNMP Simple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP versions: • SNMP version 1 • SNMP version 2c • SNMP version 3 SNMP v1 and v2c The SNMP agents maintain a list of variables, which are used to manage the device.

  • Page 255: Configuring Snmp Security

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring SNMP Security This section contains information for configuring SNMP security parameters, and contains the following topics: • Defining SNMP Security • Defining SNMP Views • Defining SNMP Group Profiles • Defining SNMP Group Members •...
  • Page 256 Configuring SNMP Configuring SNMP Security • Use Default — Uses the device-generated Engine ID. The default Engine ID is based on the device MAC address and is defined per standard as: – First 4 octets — first bit = 1, the rest is IANA Enterprise number. –...

  • Page 257: Defining Snmp Views

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining SNMP Views SNMP Insert space views provide or block access to device features or portions of features. For example, a view can be defined which provides that SNMP group A has Read Only (R/O) access to Multicast groups, while SNMP group B has Read-Write (R/W) access to Multicast groups.
  • Page 258 Configuring SNMP Configuring SNMP Security To add an SNMP View: Click System > SNMP > Security > Views. The SNMP Security Views Page opens. Click . The Add SNMP View Page opens: Figure 177:Add SNMP View Page Define the field. Define the view using Click .

  • Page 259: Defining Snmp Group Profiles

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining SNMP Group Profiles The SNMP Group Profile Page provides information for creating SNMP groups, and assigning SNMP access con- trol privileges to SNMP groups. Groups allow network managers to assign access rights to specific device fea- tures, or feature aspects.
  • Page 260 Configuring SNMP Configuring SNMP Security – Authentication — Authenticates SNMP messages, and ensures that the SNMP message’s origin is authenticated. – Privacy — Encrypts SNMP messages. • Operation — Defines the group access rights. The possible field values are: – Read —...
  • Page 261 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify SNMP Group Settings: Click System > SNMP > Security > Group Profile. The SNMP Group Profile Page opens. Click . The SNMP Group Profile Settings Page opens: Figure 180:SNMP Group Profile Settings Page Modify the fields.

  • Page 262: Defining Snmp Group Members

    Configuring SNMP Configuring SNMP Security Defining SNMP Group Members The SNMP Group Membership Page enables assigning system users to SNMP groups, as well as defining the user authentication method. To define a SNMP group member: Click System > SNMP > Security > Group Membership. The SNMP Group Membership Page opens: Figure 181:SNMP Group Membership Page The SNMP Group Membership Page contains the following fields: •...
  • Page 263 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Authentication — Displays the method used to authenticate users. The possible field values are: – MD5 Key — Users are authenticated using the HMAC-MD5 algorithm. – SHA Key — Users are authenticated using the HMAC-SHA-96 authentication level. –...
  • Page 264 Configuring SNMP Configuring SNMP Security Define the fields. Click . The SNMP group membership is modified, and the device is updated. To modify SNMP Group Membership Settings: Click System > SNMP > Security > Group Membership. The SNMP Group Membership Page opens. Click .

  • Page 265: Defining Snmp Communities

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining SNMP Communities Access rights are managed by defining communities in the SNMP Communities Page. When the community names are changed, access rights are also changed. SNMP communities are defined only for SNMP v1 and SNMP v2c.
  • Page 266 Configuring SNMP Configuring SNMP Security • Access Mode — Defines the access rights of the community. The possible field values are: – Read Only — Management access is restricted to read-only, and changes cannot be made to the community. – Read Write —...
  • Page 267 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Click . The SNMP community is added, and the device is updated. To modify SNMP Group Membership Settings: Click System > SNMP > Security > Communities. The SNMP Communities Page opens. Click .

  • Page 268: Configuring Snmp Notifications

    Configuring SNMP Configuring SNMP Notifications Configuring SNMP Notifications This section contains information for configuring SNMP Notifications, and contains the following topics: • Defining SNMP Notification Global Parameters • Defining SNMP Notification Filters • Defining SNMP Notification Recipients Defining SNMP Notification Global Parameters The SNMP Notification Properties Page contains parameters for defining SNMP notification parameters.
  • Page 269 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Enable Authentication Notifications — Specifies whether SNMP authentication failure notification is enabled on the device. The possible field values are: – Enable — Enables the device to send authentication failure notifications. –...

  • Page 270: Defining Snmp Notification Filters

    Configuring SNMP Configuring SNMP Notifications Defining SNMP Notification Filters The SNMP Notification Filter Page permits filtering traps and informs based on OIDs. Each OID is linked to a device feature or a portion of a feature. The SNMP Notification Filter Page also allows network managers to filter notifications.
  • Page 271 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Click . The Add SNMP Notification Filter Page opens: Figure 189:Add SNMP Notification Filter Page Define the fields. Click . The SNMP notification filter is defined, and the device is updated. Page 270...

  • Page 272: Defining Snmp Notification Recipients

    Configuring SNMP Configuring SNMP Notifications Defining SNMP Notification Recipients The SNMP Notification Receiver Page contains information for defining filters that determine whether traps are sent to specific users, and the trap type sent. SNMP notification filters provide the following services: •...
  • Page 273 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide SNMPv1,2c Notification Recipient The SNMP v1, v2c Recipient table contains the following fields: • Recipients IP — Displays the IP address to which the traps are sent. • Notification Type — Displays the notification sent. The possible field values are: –...
  • Page 274 Configuring SNMP Configuring SNMP Notifications To add an SNMP Notification Receiver: Click System > SNMP > Notification > Notification Receiver. The SNMP Notification Receiver Page opens. Click . The Add SNMP Notification Receiver Page opens: Figure 191:Add SNMP Notification Receiver Page Define the fields.
  • Page 275 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify SNMP notification recipients: Click System > SNMP > Notification > Notification Receiver. The SNMP Notification Receiver Page opens. Click . The SNMP Notification Receiver Settings Page opens: Figure 192:SNMP Notification Receiver Settings Page Modify the fields.

  • Page 276: Configuring Quality Of Service

    Configuring Quality of Service Configuring Quality of Service Section 18. Configuring Quality of Service Configuring Quality of Service This section contains information for configuring QoS, and includes the following topics: • Quality of Service Overview • Defining General QoS Settings •...

  • Page 277: Quality Of Service Overview

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Quality of Service Overview Quality of Service (QoS) provides the ability to implement QoS and priority queuing within a network. For example, certain types of traffic that require minimal delay, such as Voice, Video, and real-time traffic can be assigned a high priority queue, while other traffic can be assigned a lower priority queue.

  • Page 278: Defining General Qos Settings

    Configuring Quality of Service Defining General QoS Settings Defining General QoS Settings This section contains information for defining general QoS settings and includes the following topics: • Configuring QoS General Settings • Configure Bandwidth Settings • Defining Queues Configuring QoS General Settings The CoS Page contains information for enabling QoS globally and on specific interfaces.
  • Page 279 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Interface — Displays the interface for which the global QoS parameters are defined. – Port — Selects the port for which the global QoS parameters are defined. – LAG — Selects the LAG for which the global QoS parameters are defined. •...

  • Page 280: Configure Bandwidth Settings

    Configuring Quality of Service Defining General QoS Settings Configure Bandwidth Settings The Bandwidth Settings Page allows network managers to define the bandwidth settings for a specified egress interface. Modifying queue scheduling affects the queue settings globally. Queue shaping can be based per queue and/or per interface. Shaping is determined by the lower specified value. The queue shaping type is selected in the Bandwidth Settings Page.
  • Page 281 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Remove — Deletes the currently selected view. The possible field values are: – Checked — Removes the settings for the selected port. – Unchecked — Maintains the settings. To modify Bandwidth settings: Click Basic Setup >...

  • Page 282: Defining Vlan Rate Limiting

    Configuring Quality of Service Defining General QoS Settings Defining VLAN Rate Limiting Rate limiting per VLAN allows network administrators to limit traffic on VLANs. Rate limiting is calculated sepa- rately for each unit in a stack, and for each packet processor in a unit. QoS rate limiting has priority over VLAN rate limiting.
  • Page 283 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify Rate Limiting VLAN settings: Click Basic Setup > Quality of Service > Global Parameters > Rate Limit VLAN. The Rate Limiting per VLAN Page opens. Select an interface. Click . The Rate Limiting per VLAN Page opens. Figure 197:Rate Limit VLAN Settings Page Define the fields.
  • Page 284 Configuring Quality of Service Defining General QoS Settings To add a Rate Limit VLAN: Click Basic Setup > Quality of Service > Global Parameters > Rate Limit VLAN. The Rate Limiting per VLAN Page opens. Click . The Add Rate Limit VLAN opens. Figure 198:Add Rate Limit VLAN Define the fields.

  • Page 285: Defining Queues

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Queues The Queue Page contains fields for defining the QoS queue forwarding types. To set the queue settings: Click Basic Setup > Quality of Service > Global Parameters > Queue. The Queue Page opens. Figure 199:Queue Page The Queue Page contains the following fields: •...

  • Page 286: Configuring Qos Mapping

    Configuring Quality of Service Configuring QoS Mapping Configuring QoS Mapping This section contains information for mapping CoS and DSCP values to queues, and includes the following sec- tions: • Mapping CoS Values to Queues • Mapping DSCP Values to Queues Mapping CoS Values to Queues The CoS to Queue Page contains fields for mapping CoS values to traffic queues.

  • Page 287: Mapping Dscp Values To Queues

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Mapping DSCP Values to Queues The DSCP to Queue Page contains fields for mapping DSCP settings to traffic queues. For example, a packet with a DSCP tag value of 3 can be assigned to queue 2. To map CoS values to queues: Click Basic Setup >...

  • Page 288: Configuring Basic Mode

    Configuring Quality of Service Configuring Basic Mode Configuring Basic Mode This section contain information for configuring the Basic QoS Mode, and includes the following topics: • Configuring Trust Mode • Configuring DSCP Rewrite Configuring Trust Mode The Trust Setup Page contains information for enabling Trust on the device. Trust is set on a per interface basis. Packets entering a QoS domain are classified at the edge of the QoS domain.

  • Page 289: Configuring Dscp Rewrite

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring DSCP Rewrite The DSCP Rewrite Page allows network managers to assign new DSCP values to incoming packets. To enable DSCP Rewrite: Click Basic Setup > Quality of Service > Basic Mode > DSCP Rewrite. The DSCP Rewrite Page opens: Figure 203:DSCP Rewrite Page The DSCP Rewrite Page contains the following: •...

  • Page 290: Configuring Advanced Qos Settings

    Configuring Quality of Service Configuring Advanced QoS Settings Configuring Advanced QoS Settings This section contains information for configuring advanced QoS features, and includes the following topics: • Defining Policy Properties • Defining Policy Profiles Defining Policy Properties This section contains information for configuring advanced policy properties, and includes the following topics: •...
  • Page 291 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Mapping DSCP Values When traffic exceeds user-defined limits, use the Advanced DSCP Mapping Page to configure the DSCP tag to use in place of the incoming DSCP tags. To define advanced QoS DSCP mapping: Click Advanced Setup >...

  • Page 292: Defining Tail Dropping

    Configuring Quality of Service Configuring Advanced QoS Settings Defining Tail Dropping The Tail Drop Page permits network managers to set the device to drop packets which exceed the threshold size. Tail Drop is configured per queue. To define tail drop: Click Advanced Setup >...
  • Page 293 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Mapping DSCP to Drop Precedence Drop Precedence (DP) enables marking frames that exceed policer CIR threshold. In a congested network, frames containing a higher DP are discarded before frames with a lower DP. To map DSCP values to DP values: Click Advanced Setup >...

  • Page 294: Creating Class Maps

    Configuring Quality of Service Configuring Advanced QoS Settings Creating Class Maps One IP ACL and/or one MAC ACL comprise a class map. Class maps are configured to match packet criteria, and are matched to packets on a first-fit basis. For example, Class Map A is assigned packets based only on an IP- based ACL or a MAC-based ACL.
  • Page 295 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To add a Class Map: Click Advanced Setup > Quality of Service > Policy Properties> Class Map. The Class Map Page opens. Click . The Add Class Map Page opens. Figure 208:Add Class Map Page Define the fields.
  • Page 296 Configuring Quality of Service Configuring Advanced QoS Settings Defining Aggregating Policers After a packet is classified, the policing process begins. A policer specifies the bandwidth limit for incoming traffic on the classified flow and actions are defined for packets that exceed the limits. These actions include forwarding packets, dropping packets, or remarking packets with a new DSCP value.
  • Page 297 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Remove — Removes Aggregate Policer. The possible field values are: – Checked — Removes the Aggregate Policer. – Unchecked — Maintains the Aggregate Policer. To add an Aggregate Policer: Click Advanced Setup > Quality of Service > Policy Properties > Aggregate Policer. The Aggregate Policer Page opens.

  • Page 298: Defining Policy Profiles

    Configuring Quality of Service Configuring Advanced QoS Settings Defining Policy Profiles This section contains information for configuring policy profiles, and includes the following topics: • Defining Policies • Attaching Policies to Interfaces Defining Policies A policy is a collection of classes, each of which is a combination of a class map and a QoS action to apply to matching traffic.
  • Page 299 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Remove — Removes policies. The possible field values are: – Checked — Removes the selected policy. – Unchecked — Maintains policies. To add a QoS Policy Profile: Click Advanced Setup > Quality of Service > Policy Profiles > Policy. The Policy Page opens. Click .
  • Page 300 Configuring Quality of Service Configuring Advanced QoS Settings • Aggregate Policer — User-defined aggregate policers. • Ingress Committed Information Rate (CIR) — CIR in bits per second. This field is only relevant when the Police value is Single. • Ingress Committed Burst Size (CBS) — CBS in bytes per second. This field is only relevant when the Police value is Single.
  • Page 301 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Attaching Policies to Interfaces The Policy Binding Page contains information for attaching policies on interfaces. To attach a policy to an interface: Click Advanced Setup > Quality of Service > Policy Profiles > Policy Binding. The Policy Binding Page opens: Figure 213:Policy Binding Page The Policy Binding Page contains the following fields:...
  • Page 302 Configuring Quality of Service Configuring Advanced QoS Settings To add a Policy binding Interface: Click Advanced Setup > Quality of Service > Policy Profiles > Policy Binding. The Policy Binding Page opens: Click . The Add Rate Limit VLAN opens. Figure 214:Add QoS Policy Binding Define the fields.

  • Page 303: Configuring Lldp

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 19. Configuring LLDP The Link Layer Discovery Protocol (LLDP) allows network managers to troubleshoot and enhance network man- agement by discovering and maintaining network topologies over multi-vendor environments. LLDP discovers net- work neighbors by standardizing methods for network devices to advertise themselves to other system, and to store discovered information.

  • Page 304: Defining Global Lldp Properties

    Configuring LLDP Defining Global LLDP Properties Defining Global LLDP Properties The LLDP Properties Page allows network managers to assign global LLDP parameters. To define LLDP Proper- ties: Click System > LLDP > Properties. The LLDP Properties Page opens: Figure 215:LLDP Properties Page The LLDP Properties Page contains fields for configuring LLDP: •...
  • Page 305 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Reinitializing Delay (1 - 10) — Indicates the amount of time that passes between disabling LLDP and when reinitializing begins. The possible field range is 1 - 10 seconds. The field default is 2 seconds. •...

  • Page 306: Defining Lldp Port Settings

    Configuring LLDP Defining LLDP Port Settings Defining LLDP Port Settings The LLDP Port Settings Page allows network administrators to define LLDP port settings, including the port type, the LLDP port state, and the type of port information advertised. To define LLDP Port Properties: Click System >...
  • Page 307 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify LLDP port settings: Click Stem > LLDP > Port Settings. The LLDP Port Settings Page opens. Click . The LLDP Port Settings Page opens: Figure 217:LLDP Port Settings Page In addition to the fields in the LLDP Port Settings Page, the LLDP Port Settings Page contains the following addi- tional fields: •...
  • Page 308 Configuring LLDP Defining LLDP Port Settings • Management IP Address — Indicates if LLDP information is advertised from the management IP address. The possible field values is Stop Advertising. Stop Advertising stops sending LLDP advertisements from the management IP address. Define the fields.

  • Page 309: Defining Media Endpoint Discovery Network Policy

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Media Endpoint Discovery Network Policy LLDP Media Endpoint Discovery (LLDP-MED) increases network flexibility by allowing different IP systems to co- exist on a single network. LLDP: • Provides detailed network topology information, including what devices are located on the network, and where the devices are located.
  • Page 310 Configuring LLDP Defining Media Endpoint Discovery Network Policy To configure LLDP-MED: Click System > LLDP > LLDP MED Network Policy. The LLDP MED Network Policy Page opens: Figure 218:LLDP MED Network Policy Page The LLDP MED Network Policy Page contains the following fields: •...
  • Page 311 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • VLAN ID — Displays the VLAN ID for which the network policy is defined. • VLAN Type — Indicates the VLAN type for which the network policy is defined. The possible field values are: –...

  • Page 312: Defining Lldp Med Port Settings

    Configuring LLDP Defining LLDP MED Port Settings Defining LLDP MED Port Settings The LLDP MED Port Settings Page contains parameters for assigning LLDP network policies to specific ports. To configure LLDP MED port settings: Click System > LLDP > LLDP MED Port Settings. The LLDP MED Port Settings Page opens: Figure 220:LLDP MED Port Settings Page The LLDP MED Port Settings Page contains the following fields: To display LLDP MED Port Settings, select a Unit number:...
  • Page 313 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify LLDP-MED port settings: Click System > LLDP > LLDP MED Port Settings. The LLDP MED Port Settings Page opens. Click . The LLDP MED Port Settings Page opens: Figure 221:LLDP MED Port Settings Page In addition to the fields in the LLDP MED Network Policy Page, the LLDP MED Port Settings Page, the following additional fields: •...
  • Page 314 Configuring LLDP Defining LLDP MED Port Settings • Location ECS ELIN (10-25 Bytes in Hex) — Displays the device’s ECS ELIN location. The field range is 10 - 25. Define the fields. Click . The LLDP MED port settings are saved, and the device is updated. You can view the LLDP MED information details for ports.
  • Page 315 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • MAU Type — Indicates the media attachment unit type. The MAU performs physical layer functions, includ- ing digital data conversion from the Ethernet interfaces’ collision detection and bit injection into the network. •...

  • Page 316: Viewing The Lldp Neighbors Information

    Configuring LLDP Viewing the LLDP Neighbors Information Viewing the LLDP Neighbors Information The LLDP Neighbors Information Page contains information received from neighboring device LLDP advertise- ments. To view LLDP Neighbor information: Click System > LLDP > Neighbors Information. The LLDP Neighbors Information Page opens: Figure 223:LLDP Neighbors Information Page The LLDP Neighbors Information Page contains the following fields: To display LLDP Neighbors Information, select a Unit number:...
  • Page 317 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Capabilities — Displays the neighboring device capabilities. The possible field values are: – B – Bridge – R – Router – W – WLAN Access Point – T – Telephone – D –...
  • Page 318 Configuring LLDP Viewing the LLDP Neighbors Information Figure 224:LLDP Neighbors Information Details For information on the fields in the LLDP Neighbors Information Details, refer to the Advertise Information Details Page. To clear the Neighbors Table: Click Click . The Neighbors Table is cleared. Page 317...

  • Page 319: Managing System Files

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 20. Managing System Files File maintenance includes both configuration file management as well as device access. This section contains the following topics: • File Management Overview • Downloading System Files • Uploading System Files •...

  • Page 320: Downloading System Files

    Managing System Files Downloading System Files Downloading System Files There are two types of files, firmware files and configuration files. The firmware files manage the device, and the configuration files configure the device for transmissions. Only one type of download can be performed at any one time.

  • Page 321: Firmware Download

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • via HTTP — Specifies that the file is downloaded using HTTP. This is only applicable for configuration file downloads. Firmware Download The Firmware Download section contains the following fields: • Firmware Download — Indicates that the download is for firmware. If Firmware Download is selected, the Configuration Download fields are grayed out.

  • Page 322: Uploading System Files

    Managing System Files Uploading System Files Uploading System Files There are two types of files, firmware files and configuration files. The firmware files manage the device, and the configuration files configure the device for transmissions. Only one type of upload can be performed at any one time.The File Upload Page contains fields for uploading the software from the device to the TFTP server.

  • Page 323: Configuration Upload

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Firmware Upload The Firmware Upload section contains the following fields: • TFTP Server IP Address — Specifies the TFTP Server IP Address to which the firmware file is uploaded. • Source File Name — Specifies the file to be uploaded. This field appears only if via TFTP is selected. •...

  • Page 324: Activating Image Files

    Managing System Files Activating Image Files Activating Image Files The Active Image Page allows network managers to select which image will become active on the next reset. The Active Image file for each unit in a stacking configuration can be individually selected. To set the Image files: Click System >...

  • Page 325: Copying Files

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Copying Files Configuration Files can be copied and defaults restored from the Copy Files Page. To copy files: Click System > File Management > Copy Files. The Copy Files Page opens. Figure 228:Copy Files Page The Copy Files Page contains the following fields: •...

  • Page 326: Managing System Files

    Managing System Files Managing System Files Managing System Files The File System Page provides information about files currently stored on the system, including file names, file sizes, files modifications, and file permissions. The file system permits managing up to four files and a total file size of 3MB.
  • Page 327 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 326...

  • Page 328: Managing System Logs

    Managing System Logs Section 21. Managing System Logs This section provides information for managing system logs. The system logs enable viewing device events in real time, and recording the events for later usage. System Logs record and manage events and report errors and informational messages.

  • Page 329: Enabling System Logs

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Enabling System Logs The Syslog Properties Page contains fields for defining which events are recorded to which logs. It contains fields for enabling logs globally, and parameters for defining logs. Log messages are listed from the highest severity to the lowest severity level.
  • Page 330 Managing System Logs Enabling System Logs – Warning — The lowest level of a device warning. The device is functioning, but an operational problem has occurred. – Notice — Provides device information. – Informational — Provides device information. – Debug — Provides debugging messages. Note When a severity level is selected, all severity level choices above the selection are selected automatically.

  • Page 331: Viewing The Device Memory Logs

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing the Device Memory Logs The Device Memory Log Page contains all system logs in a chronological order that are saved in RAM (Cache). The memory logs are unavailable after reboot. To open the Device Memory Log Page: Click System >...

  • Page 332: Viewing The Flash Logs

    Managing System Logs Viewing the FLASH Logs Viewing the FLASH Logs The Syslog Flash Page contains information about log entries saved to the log file in Flash, including the time the log was generated, the log severity, and a description of the log message. The message log is available after reboot.

  • Page 333: Defining Servers Log Parameters

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining Servers Log Parameters The Syslog Server Settings Page contains information for viewing and configuring the remote log servers. New log servers can be defined, and the minimum severity can be assigned to each server. Figure 233:Syslog Server Settings Page The Syslog Server Settings Page contains the following fields: •...
  • Page 334 Managing System Logs Defining Servers Log Parameters • Remove — Deletes the currently selected server from the Servers list. The possible field values are: – Checked — Removes the selected server from the Servers Log Parameters Page. Once removed, logs are no longer sent to the removed server.

  • Page 335: Managing Device Diagnostics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 22. Managing Device Diagnostics This section contains the following topics: • Configuring Port Mirroring • Viewing Copper Cable Tests • Viewing Optical Transceivers • Viewing Device Health • Viewing the CPU Utilization •...
  • Page 336 Managing Device Diagnostics • Destination Port — Defines the port number to which port traffic is copied. • Source Port — Indicates the port from which the packets are mirrored. • Type — Indicates the port mode configuration for port mirroring. The possible field values are: –...
  • Page 337 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To modify port mirroring settings: Click System > Diagnostics > Port Mirroring. The Port Mirroring Page opens. Click . The Port Mirroring Settings Page opens: Figure 237:Port Mirroring Settings Page Modify the field. Click .

  • Page 338: Viewing Copper Cable Tests

    Managing Device Diagnostics Viewing Copper Cable Tests The Copper Cable Tests Page contains fields for performing tests on copper cables. Cable testing provides infor- mation about where errors occurred in the cable, the last time a cable test was performed, and the type of cable error, which occurred.
  • Page 339 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide – Short Cable — Indicates that a short has occurred in the cable. – OK — Indicates that the cable passed the test. • Cable Fault Distance — Indicates the distance from the port where the cable error occurred. •...

  • Page 340: Viewing Device Health

    Managing Device Diagnostics Viewing Device Health The Health Page displays physical device information, including information about the device’s power and ventila- tion sources. To view device health information: Click System > Maintenance > Diagnostics > Health. The Health Page opens: Figure 239: Health Page The Health Page contains the following fields: •...

  • Page 341: Viewing Optical Transceivers

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing Optical Transceivers The Optical Transceivers Page allows network managers to perform tests on Fiber Optic cables. Optical trans- ceiver diagnostics can be performed only when the link is present. To test cables: Click System >...

  • Page 342: Viewing The Cpu Utilization

    Managing Device Diagnostics Viewing the CPU Utilization The CPU Utilization Page contains information about the system’s CPU utilization. To view the CPU Utilization: Click System > Diagnostics > CPU Utilization. The CPU Utilization Page opens: Figure 241:CPU Utilization Page The CPU Utilization Page contains the following fields: •...

  • Page 343: Viewing Tcam Resource Information

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing TCAM Resource Information The TCAM Resources Page displays the of Ternary Content Addressable Memory (TCAM) resource usage across a stack. TCAM administers high-speed searching throughout a stack to provide application services over a stack.
  • Page 344 Managing Device Diagnostics The TCAM Resources Page contains information about the system’s TCAM resources. To view TCAM resources: Click System > Diagnostics > TCAM Resources. The TCAM Resources Page opens: Figure 242: TCAM Resources Page The TCAM Resources Page contains the following fields: •...

  • Page 345: Configuring System Time

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Section 23. Configuring System Time This section provides information for configuring system time parameters, including: • Configuring Daylight Savings Time • Configuring SNTP Configuring Daylight Savings Time The Time Page contains fields for defining system time parameters for both the local hardware clock and the external SNTP clock.
  • Page 346 Configuring System Time Configuring Daylight Savings Time • Israel — Varies year-to-year. • Italy — From the last weekend of March until the last weekend of October. • Japan — Japan does not use Daylight Saving Time. • Jordan — From the last weekend of March until the last weekend of October. •...
  • Page 347 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To configure the system time: Click System > General > Time. The Time Page opens. Figure 243:Time Page The Time Page contains the following sections: • Clock Source — The source used to set the system clock. The possible field values are: –...
  • Page 348 Configuring System Time Configuring Daylight Savings Time – USA — The device switches to DST at 2:00 a.m. on the first Sunday of April, and reverts to standard time at 2:00 a.m. on the last Sunday of October. – European — The device switches to DST at 1:00 am on the last Sunday in March and reverts to standard time at 1:00 am on the last Sunday in October.

  • Page 349: Configuring Sntp

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Configuring SNTP The device supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The device operates only as an SNTP client, and cannot provide time services to other systems.

  • Page 350: Defining Sntp Global Settings

    Configuring System Time Defining SNTP Global Settings This section contains the following topics: • Defining SNTP Global Settings • Defining SNTP Authentication • Defining SNTP Servers • Defining SNTP Interface Settings Defining SNTP Global Settings The SNTP Properties Page provides information for defining SNTP parameters globally. To define SNTP global parameters: Click System >...
  • Page 351 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Enable Receive Anycast Servers Updates — Defines whether or not the device polls the SNTP server for Anycast server time information. If both the Enable Receive Anycast Servers Update and the Enable Receive Broadcast Servers Update fields are enabled, the system time is set according to the Anycast server time information.

  • Page 352: Defining Sntp Authentication

    Configuring System Time Defining SNTP Authentication Defining SNTP Authentication The SNTP Authentication Page provides parameters for defining the means by which the SNTP server is authen- ticated. To define SNTP authentication: Figure 245:SNTP Authentication Page The SNTP Authentication Page contains the following fields: •...
  • Page 353 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To enable SNTP Authentication, select Enable SNTP Authentication. Click System > SNTP > Authentication. The SNTP Authentication Page opens. Click . The Add SNTP Authentication page opens: Figure 246:Add SNTP Authentication Define the fields. Click .

  • Page 354: Defining Sntp Servers

    Configuring System Time Defining SNTP Servers Defining SNTP Servers The SNTP Servers Page contains information for enabling SNTP servers, as well as adding new SNTP servers. In addition, the SNTP Servers Page enables the device to request and accept SNTP traffic from a server. To define an SNTP server: Click System >...
  • Page 355 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Offset — Indicates the time difference between the device local clock and the acquired time from the SNTP server. • Delay — Indicates the amount of time it takes for a device request to reach the SNTP server. •...

  • Page 356: Defining Sntp Interface Settings

    Configuring System Time Defining SNTP Interface Settings Defining SNTP Interface Settings The SNTP Interface Settings Page contains fields for setting SNTP on different interfaces. To define SNTP inter- face settings: Click System > SNTP > Interface Settings. The SNTP Interface Settings Page opens: Figure 249:SNTP Interface Settings Page The SNTP Interface Settings Page contains the following fields: •...
  • Page 357 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide To add an SNTP Interface: Click System > SNTP > Interface Settings. The SNTP Interface Settings Page opens. Click . The Add SNTP Interface Page opens. Figure 250:Add SNTP Interface Page Define the fields. Click .

  • Page 358: Viewing Statistics

    Viewing Statistics Viewing Interface Statistics Section 24. Viewing Statistics This section provides device statistics for RMON, interfaces, GVRP, EAP, and Etherlike statistics. This section contains the following topics: • Viewing Interface Statistics • Managing RMON Statistics • Viewing QoS Statistics Viewing Interface Statistics This section contains the following topics: •...

  • Page 359: Viewing Device Interface Statistics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing Device Interface Statistics The Interface Statistics Page contains statistics for both received and transmitted packets. To view Interface Sta- tistics: Click Basic Setup > Interface Statistics > Interface. The Interface Statistics Page opens. Figure 251:Interface Statistics Page The Interface Statistics Page contains the following fields: •...

  • Page 360: Resetting Interface Statistics Counters

    Viewing Statistics Viewing Interface Statistics Receive Statistics • Total Bytes (Octets) — Displays the number of octets received on the selected interface. • Unicast Packets — Displays the number of Unicast packets received on the selected interface. • Multicast Packets — Displays the number of Multicast packets received on the selected interface. •...

  • Page 361: Viewing Port Utilization Statistics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing Port Utilization Statistics The Port Utilization Page contains port utilization information for specific ports. To view the port utilization statis- tics: Click Basic Setup > Interface Statistics > Port Utilization. The Port Utilization Page opens. Figure 252:Port Utilization Page The Port Utilization Page contains the following fields: •...

  • Page 362: Viewing Etherlike Statistics

    Viewing Statistics Viewing Interface Statistics Viewing Etherlike Statistics The Etherlike Statistics Page contains interface statistics. To view Etherlike Statistics: Click Basic Setup > Interfaces Statistics > Etherlike. The Etherlike Statistics Page opens Figure 253:Etherlike Statistics Page The Etherlike Statistics Page contains the following fields: •...

  • Page 363: Resetting Etherlike Statistics Counters

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Oversize Packets — Displays the number of oversized packet errors on the selected interface. • Internal MAC Receive Errors — Number of internal MAC received errors on the selected interface. • Received Pause Frames —...

  • Page 364: Viewing Gvrp Statistics

    Viewing Statistics Viewing Interface Statistics Viewing GVRP Statistics The GVRP Statistics Page contains device statistics for GVRP. To view GVRP statistics: Click Advanced Setup > Interface Statistics > GVRP. The GVRP Statistics Page opens. Figure 254:GVRP Statistics Page The GVRP Statistics Page contains the following fields: •...

  • Page 365: Viewing Eap Statistics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Leave In — Displays the device GVRP Leave in statistics. • Leave All — Displays the device GVRP Leave all statistics. • Invalid Protocol ID — Displays the device GVRP Invalid Protocol ID statistics. •...

  • Page 366: Resetting Gvrp Statistics Counters

    Viewing Statistics Viewing Interface Statistics • Start Frames Receive — Indicates the number of EAPOL Start frames received on the port. • Log off Frames Receive — Indicates the number of EAPOL Logoff frames that have been received on the port.

  • Page 367: Managing Rmon Statistics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Managing RMON Statistics This section contains the following topics: • Viewing RMON Statistics • Configuring RMON History • Configuring RMON Events • Defining RMON Alarms Page 366...

  • Page 368: Viewing Rmon Statistics

    Viewing Statistics Managing RMON Statistics Viewing RMON Statistics The Viewing RMON Statistics contains fields for viewing information about device utilization and errors that occurred on the device. To view RMON statistics: Click Advanced Setup > RMON > Statistics. The RMON Statistics Page opens. Figure 256:RMON Statistics Page The RMON Statistics Page contains the following fields: •...

  • Page 369: Resetting Rmon Statistics Counters

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Broadcast Packets Received — Displays the number of good broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. • Multicast Packets Received — Displays the number of good Multicast packets received on the interface since the device was last refreshed.

  • Page 370: Configuring Rmon History

    Viewing Statistics Managing RMON Statistics Configuring RMON History This section contains the following topics: • Defining RMON History Control • Viewing the RMON History Table Defining RMON History Control The RMON History Control Page contains information about samples of data taken from ports. For example, the samples may include interface definitions or polling periods.
  • Page 371 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Current Samples— Displays the current number of samples taken. • Owner — Displays the RMON station or user that requested the RMON information. The field range is 0-20 characters. • Remove — Removes History Control entries. The possible field values are: –...

  • Page 372: Viewing The Rmon History Table

    Viewing Statistics Managing RMON Statistics Viewing the RMON History Table The RMON History Table Page contains interface specific statistical network samplings. Each table entry repre- sents all counter values compiled during a single sample. To view the RMON History Table: Click Advanced Setup >...
  • Page 373 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Undersize Packets — Displays the number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed. • Oversize Packets — Displays the number of oversized packets (over 1518 octets) received on the interface since the device was last refreshed.

  • Page 374: Configuring Rmon Events

    Viewing Statistics Managing RMON Statistics Configuring RMON Events This section includes the following topics: • Defining RMON Events Control • Viewing the RMON Events Logs Defining RMON Events Control The RMON Events Control Page contains fields for defining RMON events. To view RMON events: Click Advanced Setup >...
  • Page 375 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • Owner — Displays the device or user that defined the event. • Remove — Removes a RMON event. The possible field values are: – Checked — Removes a selected RMON event. –...

  • Page 376: Viewing The Rmon Events Logs

    Viewing Statistics Managing RMON Statistics Viewing the RMON Events Logs The RMON Events Logs Page contains a list of RMON events. To view RMON event logs: Click Advanced Setup > RMON > Events > Events Logs. The RMON Events Logs Page opens. Figure 261:RMON Events Logs Page The RMON Events Logs Page contains the following fields: •...

  • Page 377: Defining Rmon Alarms

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Defining RMON Alarms The RMON Alarm Page contains fields for setting network alarms. Network alarms occur when a network problem, or event, is detected. Rising and falling thresholds generate events. To set RMON alarms: Click Advanced Setup >...
  • Page 378 Viewing Statistics Managing RMON Statistics • Rising Event — Displays the mechanism in which the alarms are reported. The possible field values are: – LOG — Indicates there is not a saving mechanism for either the device or in the management system. If the device is not reset, the entry remains in the Log Table.

  • Page 379: Viewing Qos Statistics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Viewing QoS Statistics This sections contains the following topics: • Viewing Aggregated Policer Statistics • Viewing Policer Statistics • Viewing Queue Statistics Viewing Aggregated Policer Statistics The Aggregate Policer Page The indicates the amount of in-profile and out-of-profile packets that are received on an interface.

  • Page 380: Viewing Policer Statistics

    Viewing Statistics Viewing QoS Statistics • Remove — Removes table entries. The possible field values are: – Checked — Removes the selected Aggregate Policer Statistic Table entry. – Unchecked — Maintains the current Aggregate Policer Statistic Table entries. Resetting Aggregate Policer Statistics Counters Open the Aggregate Policer Page.

  • Page 381: Viewing Queue Statistics

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide • In-Profile Bytes — Displays the total number of in-profile packets that were received on the interface. • Out-of-Profile Bytes — Displays the total number of out-of-profile packets that were received on the inter- face.

  • Page 382: Resetting Queue Statistics Counters

    Viewing Statistics Viewing QoS Statistics • Drop Precedence — Indicates the Drop Precedence. Drop Precedence (DP) marks frames that exceed policer CIR threshold. • Total packets — Indicates the total amount of packets which were transmitted through the queue. • %TD packets —...

  • Page 383: Hardware Specifications

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Appendix A, Device Specifications and Features This appendix contains the device specifications and features pertaining to the DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E. This section contains the following topics: • Hardware Specifications • DXS-32XX Features Hardware Specifications This section contains the DXS-32XX hardware specifications:...

  • Page 384: Dxs-32Xx Features

    Appendix A, Device Specifications and Features DXS-32XX Features This appendix describes the device features. The system supports the following features: Fe atur e Des cription Auto-Update Support the automatic update of the image file, boot file and configuration file; if updated files are available in the network. Auto Negotiation Auto negotiation allows an device to advertise modes of operation.
  • Page 385 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Fe atur e Des cription DHCP Snooping DHCP snooping is a DHCP security feature that provides network security by filtering un-trusted DHCP messages and by building and maintaining a DHCP snooping binding database, also referred to as a DHCP snooping binding table.
  • Page 386 Appendix A, Device Specifications and Features Fe atur e Des cription Guest VLAN The “Guest VLAN“ would be the “untagged” VLAN of ports in the unauthorized state. An administrator would be able to use this VLAN for guests, or to manage stations that are currently not authorized.
  • Page 387 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Fe atur e Des cription MAC Multicast Support Multicast service is a limited broadcast service, which allows one- to-many and many-to-many connections for information distribu- tion. Layer 2 Multicast services is where a single frame is addressed to a specific Multicast address, from where copies of the frame are transmitted to the relevant ports.
  • Page 388 Appendix A, Device Specifications and Features Fe atur e Des cription Power over Ethernet Power over Ethernet (PoE) provides power to devices over exist- ing LAN cabling, without updating or modifying the network infra- structure. Power over Ethernet removes the necessity of placing network devices next to power sources.
  • Page 389 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Fe atur e Des cription SNMP Versions 1, 2 and 3 Simple Network Management Protocol (SNMP) over the UDP/IP protocol controls access to the system, a list of community entries is defined, each of which consists of a community string and its access privileges.
  • Page 390 Appendix A, Device Specifications and Features Fe atur e Des cription Transport Control Protocol (TCP). TCP connections are defined between 2 ports by an initial synchronization exchange. TCP ports are identified by an IP address and a 16-bit port number. Octets streams are divided into TCP packets, each carrying a sequence number.

  • Page 391: Problem Solving

    DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Appendix B Troubleshooting This section describes problems that may arise when installing the and how to resolve these issue. This section includes the following topics: • Problem Solving — Provides information about problem management with DXS-3250/DXS-3250E/DXS- 3227/DXS-3227P.
  • Page 392 Troubleshooting Troubleshooting Solutions P r o bl em s P os si bl e C au se So lu t io n Cannot connect to man- Be sure the terminal emulator program is set to VT- agement using RS-232 100 compatible, 9600 baud rate, no parity, 8 data bits serial connection and one stop bit Use the included cable, or be sure that the pin-out...
  • Page 393 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide P ro blems Possible C aus e Sol u t io n No connection and the Incorrect ethernet cable, Check pinout and replace if necessary port LED is off e.g., crossed rather than straight cable, or vice versa, split pair (incorrect twisting of pairs)
  • Page 394 Troubleshooting Troubleshooting Solutions P r o bl em s P os si bl e C au se So lu t io n Add and Edit pages do A pop-up blocker is Disable pop-up blockers. not open. enabled. Lost password The Password Recovery Procedure enables the user to override the current password configuration, and disables the need for a password to access the con- sole.

  • Page 395: Contacting D-Link Technical Support

    The customer must submit with the product as part of the claim a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same, along with proof of purchase of the product (such as a copy of the dated purchase invoice for the product).
  • Page 396 Trademarks: D-Link is a registered trademark of D-Link Systems, Inc. Other trademarks or registered trademarks are the property of their respective owners. Copyright Statement: No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems, Inc., as stipulated by the...
  • Page 397 Technical Support Contacting D-Link Technical Support Page 395...
  • Page 398 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 396...
  • Page 399 Technical Support Contacting D-Link Technical Support Page 397...
  • Page 400 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 398...
  • Page 401 Technical Support Contacting D-Link Technical Support Page 399...
  • Page 402 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 400...
  • Page 403 Technical Support Contacting D-Link Technical Support Page 401...
  • Page 404 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 402...
  • Page 405 Technical Support Contacting D-Link Technical Support Page 403...
  • Page 406 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 404...
  • Page 407 Technical Support Contacting D-Link Technical Support Page 405...
  • Page 408 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 406...
  • Page 409 Technical Support Contacting D-Link Technical Support Page 407...
  • Page 410 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 408...
  • Page 411 Technical Support Contacting D-Link Technical Support Page 409...
  • Page 412 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 410...
  • Page 413 Technical Support Contacting D-Link Technical Support Page 411...
  • Page 414 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 412...
  • Page 415 Technical Support Contacting D-Link Technical Support Page 413...
  • Page 416 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 414...
  • Page 417 Technical Support Contacting D-Link Technical Support Page 415...
  • Page 418 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 416...
  • Page 419 Technical Support Contacting D-Link Technical Support Page 417...
  • Page 420 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 418...
  • Page 421 Technical Support Contacting D-Link Technical Support Page 419...
  • Page 422 DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide Page 420...

  • Page 423: Product Registration

    Product Registration Product Registration http://support.dlink.com/register/ D-Link products can be registered online at . Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights. Page 421...

  • Page 424: International Offices

    TEL: 27-12-665-2165 78330 Fontenay le Fleury URL: www.dlink.com.au FAX: 27-12-665-2186 France India URL: www..d-link.co.za TEL: 33-1-30238688 D-Link House, Kurla Bandra Complex Russia FAX: 33-1-30238689 Road, Grafsky per., 14, floor 6 URL: www.dlink-france.fr Off CST Road, Santacruz (East), Mumbai - Moscow Netherlands 400098.

This manual is also suitable for:

Xstack dxs-3227Xstack dxs-3227pXstack dxs-3250

Table of Contents