Page 1 Web UI Reference Guide ® DES-3528/DES-3552 Series Product Model: xStack Layer 2 Managed Stackable Fast Ethernet Switch Release 2.6 September 2010...
Page 2 Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Table of Contents Intended Readers ..........................1 Typographical Conventions ............................. 1 Notes, Notices and Cautions ............................1 Chapter 1 Web-based Switch Configuration ................2 ...
Page 4 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IPv6 Neighbor Settings ..............................29 IP Interface ..................................30 System IP Address Settings ............................30 Interface Settings ............................... 31 Management Settings ..............................34 ...
Page 5 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide MST Configuration Identification ..........................87 STP Instance Settings ............................... 88 MSTP Port Information .............................. 89 Link Aggregation ................................91 Port Trunking Settings ............................... 92 ...
Page 6 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DSCP ..................................155 DSCP Trust Settings ............................... 155 DSCP Map Settings ..............................156 HOL Blocking Prevention ............................158 Scheduling Settings ..............................159 ...
Page 7 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide ND Snooping ................................225 MAC-based Access Control (MAC)..........................227 MAC-based Access Control Settings ........................227 MAC-based Access Control Local Settings ......................229 ...
Page 8 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Safeguard Engine Settings ............................272 Chapter 9 Network Application ....................275 DHCP ..................................275 DHCP Relay ................................275 DHCP Server ................................281 ...
Page 9 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Ping Test ..................................328 Trace Route ................................. 329 Peripheral ..................................331 Device Status................................331 Chapter 12 Save and Tools ...................... 332 ...
Page 10: Intended Readers
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Intended Readers Typographical Conventions Notes, Notices and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DES-3528/DES-3552 Series Web UI Reference Guide contains information for setup and management of the Switch.
Page 11: Chapter 1 Web-Based Switch Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 1 Web-based Switch Configuration Introduction Login to the Web Manager Web-based User Interface Web Pages Introduction All software functions of the Switch can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 12: Web-Based User Interface
Select the menu or window to display. Open folders and click the hyperlinked menu buttons Area 1 and subfolders contained within them to display menus. Click the D-Link logo to go to the D- Link Website. Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports, console and management port, showing port activity.
Page 13: Web Pages
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide here. Area 3 Presents switch information based on user selection and the entry of configuration data. Web Pages When connecting to the management mode of the Switch with a Web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode.
Page 14: Chapter 2 System Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 2 System Configuration Device Information System Information Settings Dual Configuration Settings Firmware Information Settings Port Configuration Serial Port Settings System Log configuration Time Range Settings Time Settings User Accounts Settings Stacking...
Page 15: System Information Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-1 Device Information window Click the Settings link to navigate to the appropriate feature page for configuration. System Information Settings The user can enter a System Name, System Location, and System Contact to aid in defining the Switch. This window also displays the MAC Address, Firmware Version and Hardware Version.
Page 16: Dual Configuration Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description System Name Enter a system name for the Switch, if so desired. This name will identify it in the Switch network.
Page 17: Firmware Information Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Firmware Information Settings The following screen allows the user to view information about current firmware images stored on the Switch. To access this table, click System Configuration > Firmware Information Settings Figure 2 - 2 Firmware Information window This window holds the following information: Parameter...
Page 18: Port Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Port Configuration Port Settings This page used to configure the details of the switch ports. To view the following window, click System Configuration > Port Configuration > Port Settings, as shown below: Figure 2-3 Port Settings window To configure switch ports: 1.
Page 19: Port Description Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide port. Auto denotes auto-negotiation among 10, 100 and 1000 Mbps devices, in full- or half- duplex (except 1000 Mbps which is always full duplex). The Auto setting allows the port to automatically determine the fastest settings the device the port is connected to can handle, and then to use those settings.
Page 20: Port Error Disabled
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-4 Port Description Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit From Port / To Port Select the appropriate port range used for the configuration here.
Page 21: Jumbo Frame Settings
Powered Devices (PDs) over Category 5 or Category 3 UTP Ethernet cables. The DES-3528P/DES-3552P follows the standard PSE (Power Sourcing Equipment) pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6. The DES-3528P/3552P works with all D-Link 802.3af capable devices. The DES-3528P/DES-3552P includes the following PoE features: •...
Page 22: Poe System Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Based on 802.3af/at PDs receive power according to the following classification PSE provides power according to the following classification: Class Maximum power available to PD Class Max power used by PSE 12.95W 15.4W...
Page 23: Poe Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Power Limit (1-370) Sets the limit of power to be used from the Switch’s power source to PoE ports. The user may configure a Power Limit between 37W and 370W for the DES-3528P/DES-3552P. The default setting is 370W.
Page 24: Serial Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide From Port / To Port Select a range of ports from the pull-down menus to be enabled or disabled for PoE. State Use the pull-down menu to enable or disable ports for PoE. Time Range Select a range of the time to the port set as PoE.
Page 25: System Log Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Baud Rate Specify the baud rate for the serial port on the Switch. There are four possible baud rates to choose from, 9600, 19200, 38400 and 115200.
Page 26: System Log Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide System Log Server Settings The Switch can send System log messages to up to four designated servers using the System Log Server. To view the following window, click System Configuration > System Log Configuration > System Log Server Settings, as shown below: Figure 2-11 System Log Server Settings The fields that can be configured are described below:...
Page 27: System Log & Trap Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-12 System Log window The Switch can record event information in its own log. Click Go to go to the next page of the System Log window. The fields that can be configured or viewed are described below: Parameter Description...
Page 28: System Severity Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-13 System Log & Trap Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name Enter the IP interface name used. IPv4 Address Enter the IPv4 address used.
Page 29: Time Range Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide are Emergency (0), Alert (1), Critical (2), Error (3), Warning (4), Notice (5), Information(6) and Debug(7). Click the Apply button to accept the changes made. Time Range Settings Time range is a time period that the respective function will take an effect on, such as ACL.
Page 30: User Accounts Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-16 Time Settings window The fields that can be configured are described below: Parameter Description Date (DD/MM/YYYY) Enter the current day, month, and year to update the system clock. Time (HH:MM:SS) Enter the current time in hours, minutes, and seconds.
Page 31: Stacking
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description User Name Enter a new user name for the Switch. Password Enter a new password for the Switch. Confirm Password Re-type in a new password for the Switch.
Page 32 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-18 Switches stacked in a Duplex Chain Figure 2-19 Switches stacked in a Duplex Ring Within each of these topologies, each switch plays a role in the Switch stack. These roles can be set by the user per individual Switch, or if desired, can be automatically determined by the Switch stack.
Page 33: Stacking Device Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Initialization State – This is the first state of the stack, where the runtime codes are set and initialized and the system conducts a peripheral diagnosis to determine each individual switch is functioning properly. Master Election State –...
Page 34: Stacking Mode Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 2-20 Stacking Device Table window Stacking Mode Settings To begin the stacking process, users must first enable this device for stacking by using the Stacking Mode Settings window.
Page 35: Chapter 3 Management
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 3 Management Gratuitous ARP IPv6 Neighbor Settings IP Interface Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings Static ARP Settings The Address Resolution Protocol is a TCP/IP protocol that converts IP addresses into physical addresses.
Page 36: Proxy Arp Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Proxy ARP Settings The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP responder.
Page 37: Gratuitous Arp
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Clear All button to remove all the entries listed in the table. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. Gratuitous ARP Gratuitous ARP Global Settings An ARP announcement (also known as Gratuitous ARP) is a packet (usually an ARP Request) containing a valid SHA...
Page 38: Gratuitous Arp Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Gratuitous ARP Settings The user can configure the IP interface’s gratuitous ARP parameter. To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Settings, as shown below: Figure 3-5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter...
Page 39: Ip Interface
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Interface Name Enter the interface name of the IPv6 neighbor. Neighbor IPv6 Address Enter the neighbor IPv6 address. Link Layer MAC Address Enter the link layer MAC address. Interface Name Enter the interface name of the IPv6 neighbor.
Page 40: Interface Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide protocol allows IP addresses, network masks, and default gateways to be assigned by a DHCP server. If this option is set, the Switch will first look for a DHCP server to provide it with this information before using the default or previously entered settings.
Page 41 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Interface Name Enter the name of the IP interface to search for. Click the Find button to locate a specific entry based on the information entered. Click the Add button to add a new entry based on the information entered.
Page 42 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Get IP From Use the drop-down menu to specify the method that this Interface uses to acquire an IP address.
Page 43: Management Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the View All IPv6 Address link to see the following window. Figure 3-12 IPv6 Interface Settings – View All IPv6 Address window Click the <<Back button to return to the previous page. Management Settings Users can stop the scrolling of multiple pages beyond the limits of the console when using the Command Line Interface.
Page 44: Session Table
Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the “Single IP Management” feature: 1.
Page 45 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide • There is no limit to the number of SIM groups in the same IP subnet (broadcast domain); however a single switch can only belong to one group. •...
Page 46: Single Ip Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Upgrade to v1.61 To better improve SIM management, the DES-3528/DES-3552 Series switches have been upgraded to version 1.61 in this release. Many improvements have been made, including: 1.
Page 47: Topology
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Group Name Enter a group name in this textbox. This is optional. This name is used to segment switches into different SIM groups. Discovery Interval The user may set the discovery protocol interval, in seconds that the Switch will send out (30-90) discovery packets.
Page 48 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Device Name This field will display the Device Name of the switches in the SIM group configured by the user. If no device is configured by the name, it will be given the name default and tagged with the last six digits of the MAC Address to identify it.
Page 49: Tool Tips
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Layer 3 commander switch Layer 2 candidate switch Commander switch of other group Layer 3 candidate switch Layer 2 member switch. Unknown device Non-SIM devices Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information.
Page 50: Group Icon
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Right-click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group Icon Figure 3-20 Right-clicking a Group Icon The following options may appear for the user to configure:...
Page 51: Commander Switch Icon
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide CS will have no entry in this field. Port Speed Displays the connection speed between the CS and the MS or CaS Click the Close button to close the property window. Commander Switch Icon Figure 3-22 Right-clicking a Commander Icon The following options may appear for the user to configure:...
Page 52: Menu Bar
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide • Collapse – To collapse the group that will be represented by a single icon. • Expand – To expand the SIM group, in detail. • Add to group –...
Page 53: Firmware Upgrade
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide • Configure – Will open the Web manager for the specific device. View • Refresh – Update the views with the latest status. • Topology – Display the Topology view. Help •...
Page 54: Upload Log File
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 3-31 Configuration File Backup/Restore window Upload Log File The following window is used to upload log files from SIM member switches to a specified PC. To upload a log file, enter the Server IP address of the SIM member switch and then enter a Path\Filename on your PC where you wish to save this file.
Page 55: Snmp Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMPv1 while assigning a higher level of security to another group, granting read/write privileges using SNMPv3.
Page 56: Snmp Traps Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description SNMP State Enable this option to use the SNMP feature. Click the Apply button to accept the changes made. SNMP Traps Settings Users can enable and disable the SNMP trap support function of the Switch and SNMP authentication failure trap support, respectively.
Page 57: Snmp View Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 3-35 SNMP Linkchange Traps Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Select the starting and ending ports to use.
Page 58: Snmp Community Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 3-36 SNMP View Table Settings window The fields that can be configured are described below: Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view being created.
Page 59: Snmp Group Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 3-37 SNMP community Table Settings window The fields that can be configured are described below: Parameter Description Type an alphanumeric string of up to 32 characters that is used to identify members of an Community Name SNMP community.
Page 60: Snmp Engine Id Settings
SNMP management private enterprise number as assigned by IANA (D-Link is 171). The fifth octet is 03 to indicate the rest is the MAC address of this device. The sixth to eleventh octets is the MAC address.
Page 61: Snmp User Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. NOTE: The Engine ID length is 10-64 and accepted characters can range from 0 to F. SNMP User Table Settings This window displays all of the SNMP User’s currently configured on the Switch.
Page 62: Snmp Host Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide SNMP Host Table Settings Users can set up SNMP trap recipients for IPv4. To view the following window, click Management > SNMP Settings > SNMP Host Table Settings, as shown below: Figure 3-41 SNMP Host Table Settings window The fields that can be configured are described below: Parameter...
Page 63: Rmon Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 3-42 SNMPv6 Host Table Settings The fields that can be configured are described below: Parameter Description Type the IPv6 address of the remote management station that will serve as the SNMP Host IPv6 Address host for the Switch.
Page 64: Telnet Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide RMON Falling Alarm Trap Enable this option to use the RMON Falling Alarm Trap Feature. Click the Apply button to accept the changes made. Telnet Settings Users can configure Telnet Settings on the Switch.
Page 65: Chapter 4 L2 Features
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 4 L2 Features VLAN Q-in-Q Layer 2 Protocol Tunneling Settings Spanning Tree Link Aggregation L2 Multicast Control Multicast Filtering ERPS Settings LLDP VLAN Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously.
Page 66: Vlan Description
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide VLAN Description A Virtual Local Area Network (VLAN) is a network topology configured according to a logical scheme rather than the physical layout. VLANs can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN.
Page 67: Q Vlan Tags
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The main characteristics of IEEE 802.1Q are as follows: • Assigns packets to VLANs by filtering. • Assumes the presence of a single global spanning tree. •...
Page 68: Port Vlan Id
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
Page 69: Tagging And Untagging
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide connected to a tag-unaware device, the packet should be untagged. If the transmitting port is connected to a tag-aware device, the packet should be tagged. Tagging and Untagging Every port on an 802.1Q compliant switch can be configured as tagging or untagging.
Page 70: 802.1Q Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide VLAN Name Switch Ports System (default) 5, 6, 7 Engineering 9, 10 Sales 1, 2, 3, 4 Port-based VLANs Port-based VLANs limit traffic that flows into and out of switch ports. Thus, all devices connected to a port are members of the VLAN(s) the port belongs to, whether there is a single computer directly connected to a switch, or an entire department.
Page 71 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To create a new 802.1Q VLAN or modify an existing 802.1Q VLAN, click the Add/Edit VLAN tab. A new tab will appear, as shown below, to configure the port settings and to assign a unique name and number to the new VLAN.
Page 72 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To search for a VLAN, click the Find VLAN tab. A new tab will appear, as shown below. Figure 4-6 802.1Q VLAN Settings – Find VLAN Tab window Enter the VLAN ID number in the field offered and then click the Find button.
Page 73: 802.1V Protocol Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide tagged. Untagged Specify the port as 802.1Q untagged. Use the drop-down menu to designate the port as untagged. Specify the port as not being a member of the VLAN and that the port is forbidden from Forbidden becoming a member of the VLAN dynamically.
Page 74: V Protocol Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide (2-octet) hex value. For IEEE802.3 LLC, this is a 2-octet IEEE 802.2 Link Service Access Point (LSAP) pair. The first octet is for Destination Service Access Point (DSAP) and the second octet is for Source.
Page 75: Asymmetric Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual. Port List (e.g.: Select the specified ports you wish to configure by entering the port number in this field, or 1:1-1:6, all) tick the All Ports check box.
Page 76: Gvrp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-11 GVRP Global Settings window The fields that can be configured are described below: Parameter Description GVRP State Click the radio buttons to enable or disable the GVRP State. Join Time Enter the Join Time value in milliseconds.
Page 77 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-12 GVRP Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Select the starting and ending ports to use.
Page 78: Mac-Based Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide MAC-based VLAN Settings Users can create new MAC-based VLAN entries, search and delete existing entries. When a static MAC-based VLAN entry is created for a user, the traffic from this user will be able to be serviced under the specified VLAN. To view the following window, click L2 Features >...
Page 79: Subnet Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Subnet VLAN The Switch uses IP subnet-based VLAN classification to group devices. Figure 3 - 1 Application of Subnet VLAN The above figure is an example of subnet-based VLAN. The IP address of customer A is 172.18.0.1 and IP address of customer B is 172.18.0.2.
Page 80: Vlan Precedence Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To view this window, click L2 Features > Subnet VLAN > Subnet VLAN Settings, as shown below: Figure 4-15 Subnet VLAN Settings window The following parameters can be configured: Parameter Description VLAN Name...
Page 81: Vlan Counter Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-16 VLAN Precedence Settings window The following parameters can be configured: Parameter Description Unit Select a unit to be configured. From Port / To Port Specify the port or range of ports to configure.
Page 82: Voice Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-17 VLAN Counter Settings window The following parameters can be configured: Parameter Description VID List (e.g.: 1, 4- Click the radio button and enter a list of VLAN ID. VLAN Name Click the radio button and enter a VLAN name.
Page 83: Voice Vlan Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN Global Settings, as shown below: Figure 4-18 Voice VLAN Global Settings window The fields that can be configured are described below: Parameter Description...
Page 84: Voice Vlan Oui Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-19 Voice VLAN Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Select a range of ports to be displayed.
Page 85: Voice Vlan Device
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-20 Voice VLAN OUI Settings window The fields that can be configured are described below: Parameter Description User-defined OUI MAC address. OUI Address Mask User-defined OUI MAC address mask. Description The description for the user-defined OUI.
Page 86: Vlan Trunk Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide VLAN Trunk Settings Enable VLAN on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 87: Browse Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Browse VLAN Users can display the VLAN status for each of the Switch's ports viewed by VLAN. Enter a VID (VLAN ID) in the field at the top of the window and click the Find button.
Page 88: Q-In-Q
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Q-in-Q Q-in-Q Settings This function allows the user to enable or disable the Q-in-Q function. Q-in-Q is designed for service providers to carry traffic from multiple users across a network. Q-in-Q is used to maintain customer specific VLAN and Layer 2 protocol configurations even when the same VLAN ID is being used by different customers.
Page 89: Vlan Translation Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Inner TPID This is used to decide if the ingress packet is c-tagged. Inner tag TPID is per system configurable. Unit Select a unit to be configured. From Port / To Port A consecutive group of ports that are part of the VLAN configuration starting with the selected port.
Page 90: Layer 2 Protocol Tunneling Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click Apply to make a new entry. Click Delete All to remove all entries. Q-in-Q and VLAN Translation Rules For ingress untagged packets at UNI ports: 1.
Page 91: Spanning Tree
802.1Q-2005 MSTP. 802.1D-1998 STP will be familiar to most networking professionals. However, since 802.1D-2004 RSTP and 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1D-1998 STP, 802.1D- 2004 RSTP, and 802.1Q-2005 MSTP.
Page 92: Port Transition States
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 802.1D-2004 Rapid Spanning Tree The Switch implements three versions of the Spanning Tree Protocol, the Multiple Spanning Tree Protocol (MSTP) as defined by the IEEE 802.1Q-2005, the Rapid Spanning Tree Protocol (RSTP) as defined by the IEEE 802.1D-2004 specification and a version compatible with the IEEE 802.1D-1998 STP.
Page 93 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 802.1D-1998/802.1D-2004/802.1Q-2005 Compatibility MSTP or RSTP can interoperate with legacy equipment and is capable of automatically adjusting BPDU packets to 802.1D-1998 format when necessary. However, any segment using 802.1D-1998 STP will not benefit from the rapid transition and rapid topology change detection of MSTP or RSTP.
Page 94: Stp Bridge Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide STP Bridge Global Settings On this page the user can configure the STP bridge global parameters. To view the following window, click L2 Features > Spanning Tree > STP Bridge Global Settings, as shown below: Figure 4-28 STP Bridge Global Settings window The fields that can be configured are described below: Parameter...
Page 95: Stp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Max Hops (6-40) Used to set the number of hops between devices in a spanning tree region before the BPDU (bridge protocol data unit) packet sent by the Switch will be discarded. Each switch on the hop count will reduce the hop count by one until the value reaches zero.
Page 96: Mst Configuration Identification
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Select the starting and ending ports to be configured. External Cost (0=Auto) This defines a metric that indicates the relative cost of forwarding packets to the specified port list.
Page 97: Stp Instance Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-30 MST Configuration Identification window The fields that can be configured are described below: Parameter Description Configuration Name This name uniquely identifies the MSTI (Multiple Spanning Tree Instance). If a Configuration Name is not set, this field will show the MAC address to the device running MSTP.
Page 98: Mstp Port Information
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-31STP Instance Settings window The fields that can be configured are described below: Parameter Description MSTI ID Enter the MSTI ID in this field. An entry of 0 denotes the CIST (default MSTI). Priority Enter the priority in this field.
Page 99 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. Port Select the port to configure. Instance ID The MSTI ID of the instance to be configured. Enter a value between 0 and 15. An entry of 0 in this field denotes the CIST (default MSTI).
Page 100: Link Aggregation
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The Switch supports up to eight port trunk groups with two to eight ports in each group.
Page 101: Port Trunking Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The Master Port of the group is to be configured by the user, and all configuration options, including the VLAN configuration that can be applied to the Master Port, are applied to the entire link aggregation group. Load balancing is automatically applied to the ports in the aggregated group, and a link failure within the group causes the network traffic to be directed to the remaining links in the group.
Page 102: Lacp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the Clear All button to clear out all the information entered. Click the Add button to add a new entry based on the information entered. NOTE: The maximum number of ports that can be configured in one Static Trunk or LACP Group are 8 ports.
Page 103: Fdb
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Passive - LACP ports that are designated as passive cannot initially send LACP control frames. In order to allow the linked port group to negotiate adjustments and make changes dynamically, one end of the connection must have "active"...
Page 104: Mac Notification Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-37 Multicast Static FDB Settings window The fields that can be configured are described below: Parameter Description The VLAN ID of the VLAN the corresponding MAC address belongs to. Multicast MAC Address The static destination MAC address of the multicast packets.
Page 105: Mac Address Aging Time Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-38 MAC Notification Settings window The fields that can be configured are described below: Parameter Description State Enable or disable MAC notification globally on the Switch The time in seconds between notifications.
Page 106: Mac Address Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-39 MAC Address Aging Time Settings window The fields that can be configured are described below: Parameter Description MAC Address Aging Time This field specifies the length of time a learned MAC Address will remain in the (10-1000000) forwarding table without being accessed (that is, how long a learned MAC Address is allowed to remain idle).
Page 107: Arp & Fdb Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the Clear Dynamic Entries button to delete all dynamic entries of the address table. Click the View All Entries button to display all the existing entries.
Page 108: Igmp Snooping Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IGMP Snooping Settings In order to use IGMP Snooping it must first be enabled for the entire Switch under IGMP Global Settings at the top of the window.
Page 109 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured or viewed are described below: Parameter Description Specify the name of the VLAN ID. VLAN Name Specify the name of the VLAN for which IGMP snooping querier is to be configured. Rate Limit Here is displayed the rate of IGMP control packets that the Switch can process on a specific VLAN.
Page 110: Igmp Snooping Rate Limit Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide After clicking the Modify Router Port link, the following page will appear: Figure 4-44 IGMP Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure.
Page 111: Igmp Snooping Static Group Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-45 IGMP Snooping Rate Limit Settings window The fields that can be configured are described below: Parameter Description Port List Enter the port list used for this configuration. VID List Enter the VID list used for this configuration.
Page 112: Igmp Router Port
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IPv4 Address Enter the IPv4 address. Click the Find button to locate a specific entry based on the information entered. Click the Create button to add a new entry based on the information entered. Click the Delete button to remove the specific entry based on the information entered.
Page 113: Igmp Snooping Group
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: The abbreviations used on this page are Static Router Port (S), Dynamic Router Port (D) and Forbidden Router Port (F). IGMP Snooping Group Users can view the Switch’s IGMP Snooping Group Table. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch.
Page 114: Igmp Snooping Counter
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-50 IGMP Snooping Forwarding Table window The fields that can be configured are described below: Parameter Description The VLAN Name of the multicast group. VLAN Name VID List The VLAN ID list of the multicast group.
Page 115: Cpu Filter L3 Control Packet Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-52 Browse IGMP Snooping Counter window Click the Clear Counter button to clear all the information displayed in the fields. Click the Refresh button to refresh the display table so that new information will appear. Click the <<Back button to return to the previous page.
Page 116: Mld Snooping
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 3 - 2 CPU Filter L3 Control Packet Settings window The following fields can be set: Parameter Description Unit Select a unit to be configured. From Port / To Port Check the corresponding boxes for the port(s) to filter control packets.
Page 117: Mld Control Messages
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide multicast group address, and then considers this port to be an active listening port. The active listening ports are the only ones to receive multicast group data. MLD Control Messages Three types of messages are transferred between devices using MLD snooping.
Page 118 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-54 MLD Snooping Settings window The fields that can be configured are described below: Parameter Description MLD Snooping State Click the radio buttons to enable or disable the MLD snooping state. Max Learning Entry Value Enter the maximum learning entry value.
Page 119 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Max Response Time (1- The maximum time in seconds to wait for reports from listeners. The default setting is 10 seconds. Robustness Value (1-7) Provides fine- tuning to allow for expected packet loss on a subnet.
Page 120: Mld Snooping Rate Limit Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-56 MLD Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. Static Router Port This section is used to designate a range of ports as being connected to multicast- enabled routers.
Page 121: Mld Snooping Static Group Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-57 MLD Snooping Rate Limit Settings window The fields that can be configured are described below: Parameter Description Port List Enter the port list here. VID List Enter the VID list value here.
Page 122: Mld Router Port
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Create button to add a static group. Click the Delete button to delete a static group. Click the View All button to display all the existing entries. Click the Edit button to re-configure the specific entry.
Page 123: Mld Snooping Group
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: The abbreviations used on this page are Static Router Port (S), Dynamic Router Port (D) and Forbidden Router Port (F). MLD Snooping Group Users can view MLD Snooping Groups present on the Switch. MLD Snooping is an IPv6 function comparable to IGMP Snooping for IPv4.
Page 124: Mld Snooping Counter
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-62 MLD Snooping Forwarding Table window The fields that can be configured are described below: Parameter Description VLAN Name The name of the VLAN for which you want to view MLD snooping forwarding table information. VID List The ID of the VLAN for which you want to view MLD snooping forwarding table information.
Page 125: Multicast Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-64 Browse MLD Snooping Counter window Click the Clear Counter button to clear all the information displayed in the fields. Click the Refresh button to refresh the display table so that new information will appear. Click the <<Back button to return to the previous page.
Page 126: Igmp Multicast Group Profile Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IGMP Multicast Group Profile Settings Users can add a profile to which multicast address reports are to be received on specified ports on the Switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the Switch.
Page 127: Igmp Snooping Multicast Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Multicast Address List Enter the multicast address list value. Click the Add button to add a new entry based on the information entered. Click the <<Back button to discard the changes made and return to the previous page. Click the Delete button to remove the corresponding entry.
Page 128 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-68 IGMP Snooping Multicast VLAN Settings – Edit window The fields that can be configured are described below: Parameter Description State Use the drop-down menu to enable or disable the state. Replace Source IP With the IGMP snooping function, the IGMP report packet sent by the host will be forwarded to the source port.
Page 129: Mld Multicast Group Profile Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the <<Back button to discard the changes made and return to the previous page. After clicking the Profile List link, the following page will appear: Figure 4-69 IGMP Snooping Multicast VLAN Group List Settings window The fields that can be configured are described below: Parameter...
Page 130: Mld Snooping Multicast Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. After clicking the Group List link, the following page will appear: Figure 4-71 Multicast Group Profile Multicast Address Settings window The fields that can be configured are described below: Parameter Description...
Page 131 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Enter the VID value used. Remap Priority The user can select this option to enable the Remap Priority feature. Specify the remap priority (0 to 7) to be associated with the data traffic to be forwarded on the multicast VLAN.
Page 132: Multicast Filtering
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Untagged Member Ports Specify the untagged member port of the multicast VLAN. Click the Select All button to select all the ports or click the Clear All button to unselect all the ports. Tagged Member Ports Specify the tagged member port of the multicast VLAN.
Page 133 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide o view the following window, click L2 Features > Multicast Filtering > IPv4 Multicast Filtering > IPv4 Multicast Profile Settings, as shown below: Figure 4-75 IPv4 Multi cast Profile Settings window The fields that can be configure d are describe...
Page 134: Ipv4 Limited Multicast Range Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IPv4 Limited Multicast Range Settings Users can configure the ports and VLANs on the Switch that will be involved in the Limited IPv4 Multicast Range. The user can configure the range of multicast ports that will be accepted by the source ports to be forwarded to the receiver ports.
Page 135: Multicast Filtering Mode
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-78 IPv4 Max Multicast Group Settings window The fields that can be configured are described below: Parameter Description Ports / VID List Select the appropriate port(s) or VLAN IDs used for the configuration here. Max Group (1-1024) If the check box Infinite is not ticked, the user can enter a Max Group value.
Page 136: Erps Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Forward All Groups – This will instruct the Switch to forward all multicast packets to the specified VLAN. Forward Unregistered Groups – The multicast packets whose destination is a registered multicast group will be forwarded within the range of ports specified above.
Page 137 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Sub-ring In topology (c), multiple rings share the same physical link. Only one of the rings uses the physical link (primary ring) while the other ring(s) will build-up virtual channels upon the physical link. Those rings, including the virtual link, will be the sub-rings of the primary ring.
Page 138 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-82 ERPS Settings - Detail Information window The fields that can be configured are described below: Parameter Description Ring Status Tick the check box and use the drop-down menu to enable or disable the ring status. West Port Tick the check box to configure the information.
Page 139: Lldp
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-83 ERPS Sub-ring Settings window The fields that can be configured are described below: Parameter Description Sub-ring R-APS VLAN Enter the VLAN ID of a sub-ring connected to another ring. State Tick the check box and select Add or Delete from the drop-down menu to add or remove the sub-ring to this ring.
Page 140: Lldp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description LLDP State Click the radio buttons to enable or disable the LLDP feature. LLDP Forward Message When LLDP is disabled this function controls the LLDP packet forwarding message based on individual ports.
Page 141 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-85 LLDP Port Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure. Use the drop-down menu to select the ports used for this configuration. From Port / To Port Notification Use the pull-down menu to enable or disable the status of the LLDP notification.
Page 142: Lldp Management Address List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: The IPv4 or IPv6 address entered here should be an existing LLDP management IP address. LLDP Management Address List On this page the user can view the LLDP management address list. To view the following window, click L2 Features >...
Page 143: Lldp Dot1 Tlvs Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-87 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure. From Port / To Port Select the port range to use for this configuration.
Page 144 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-88 LLDP Dot1 TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure. From Port / To Port Use the drop-down menu to select the port range to use for this configuration.
Page 145: Lldp Dot3 Tlvs Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide LLDP Dot3 TLVs Settings This window is used to configure an individual port or group of ports to exclude one or more IEEE 802.3 organizational specific TLV data type from outbound LLDP advertisements. To view the following window, click L2 Features >...
Page 146: Lldp Statistic System
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Maximum Frame Size The Maximum Frame Size indicates that LLDP agent should transmit 'Maximum- frame-size TLV. The default state is Disabled. Power Via MDI Use the drop-down menu to enable or disable power via MDI. Click the Apply button to accept the changes made.
Page 147 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-91 LLDP Local Port Information window To view the normal LLDP Local Port information page per port, click the Show Normal button. To view the brief LLDP Local Port information page per port, click the Show Brief button. Figure 4-92 LLDP Local Port Information –...
Page 148: Lldp Remote Port Information
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 4-93 LLDP Local Port Information – Show Detail window Click the <<Back button to return to the previous page. LLDP Remote Port Information This page displays port information learned from the neighbors. The Switch receives packets from a remote station but is able to store the information as local.
Page 149: Chapter 5 L3 Features
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 5 L3 Features Local Route Settings IPv4 Static/Default Route Settings IPv4 Route Table IPv6 Static/Default Route Settings IPv6 Route Table Policy Route Settings IP Forwarding Table Local Route Settings This window is used to configure the IPv4 and IPv6 local route settings.
Page 150: Ipv4 Route Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The Switch also supports a floating static route, which means that the user may create an alternative static route to a different next hop. This secondary next hop device route is considered as a backup static route for when the primary static route is down.
Page 151: Ipv6 Static/Default Route Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Network Address Click the radio buttons and enter the network address. IP Address Click the radio buttons and enter the IP address. Click the Find button to locate a specific entry based on the information entered.
Page 152: Policy Route Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 5-5 IPv6 Route Table window he fields that can be configured are described below: Parameter Description Network Address Enter the IPv6 network address. lick the Find button to l ocate a specific entry based on the information entered.
Page 153: Ip Forwarding Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Profile ID (1-14) Enter an ACL profile ID. Access ID (1-128) Enter an ACL access ID. Next Hop IPv4 Address Enter an IP address routin g next hop.
Page 154: Chapter 6 Qos
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 6 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings SRED The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing.
Page 155 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The picture above shows the 802.1p user priority setting for the Switch. As Class-7 is used for stacking function, Class- 6 has the highest priority of the seven priority classes of service on the Switch. In order to implement QoS, the user is required to instruct the Switch to examine the header of a packet to see if it has the proper identifying tag.
Page 156: 802.1P Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 802.1p Settings 802.1p Default Priority Settings The Switch allows the assignment of a default 802.1p priority to each port on the Switch. This page allows the user to assign a default 802.1p priority to any given port on the Switch that will insert the 802.1p priority tag to untagged packets received.
Page 157: 802.1P User Priority Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 802.1p User Priority Settings The Switch allows the assignment of a class of service to each of the 802.1p priorities. To view the following window, click QoS > 802.1p Settings > 802.1p User Priority Settings, as shown below: Figure 6-3 802.1p User Priority Settings window The fields that can be configured are described below: Parameter...
Page 158: 802.1P Map Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 802.1p Map Settings This window is used to enable 802.1p Map Settings. To view the following window, click QoS > 802.1p Settings > 802.1p Map Settings, as shown below: The fields that can be configured are described below: Parameter Description...
Page 159: Bandwidth Control
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. Bandwidth Control Settings The Effective RX/TX Rate refers to the actual bandwidth of the Switch port, if it does not match the configured rate.
Page 160: Queue Bandwidth Control Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Rate (64-1024000) This field allows the input of the data rate that will be the limit for the selected port. The user may choose a rate between 64 and 1024000 Kbits per second. Effective RX If a RADIUS server has assigned the RX bandwidth, then it will be the effective RX bandwidth.
Page 161: Traffic Control Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Unit Select the unit to configure. From Port / To Port Use the drop-down menu to select the port range to use for this configuration. From Queue / To Queue Use the drop-down menu to select the queue range to use for this configuration.
Page 162 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-6 Traffic Control Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Use the drop-down menu to select the port range to use for this configuration.
Page 163 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide immediately. Time Interval (5-600) The Time Interval will set the time between Multicast and Broadcast packet counts sent from the Switch’s chip to the Traffic Control function. These packet counts are the determining factor in deciding when incoming packets exceed the Threshold value.
Page 164: Dscp
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DSCP DSCP Trust Settings This page is to configure the DSCP trust state of ports. When ports are under the DSCP trust mode, the Switch will insert the priority tag to untagged packets by using the DSCP Map settings instead of the default port priority.
Page 165: Dscp Map Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DSCP Map Settings The mapping of DSCP to queue will be used to determine the priority of the packet (which will be then used to determine the scheduling queue) when the port is in DSCP trust state. The DSCP-to-DSCP mapping is used in the swap of DSCP of the packet when the packet is ingresses to the port.
Page 166 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-9 DSCP Map Settings - DSCP DSCP window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Use the drop-down menu to select a range of port to configure.
Page 167: Hol Blocking Prevention
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-10 DSCP Map Settings - DSCP Color window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Use the drop-down menu to select a range of port to configure.
Page 168: Scheduling Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-11 HOL blocking Prevention window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable of disable the HOL blocking prevention global HOL Blocking Prevention State settings.
Page 169: Qos Scheduling Mechanism
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-12 QoS Scheduling window The following parameters can be configured: Parameter Description Unit Select the unit to configure. From Port / To Port Enter the port or port list to configure. Class ID Select the Class ID, from 0 to 6 to configure for the QoS parameters.
Page 170 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-13 QoS Scheduling Mechanism window The following parameters can be configured: Parameter Description Unit Select the unit to configure. Enter the port or port list to configure. From Port / To Port Scheduling Mechanism Strict –...
Page 171: Sred
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide SRED Random Early Detection (RED) is a congestion avoidance mechanism at the gateway in packet switched networks. RED gateways keep the average queue size low while allowing occasional bursts of packets in the queue. Simple random early detection (sRED) is a simplified RED mechanism based on ASIC capability.
Page 172 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 6-14 SRED Settings window The following parameters can be configured: Parameter Description SRED State Click the radio buttons to enable or disable sRED. Unit Select the unit to configure. From Port / To Port Enter the port or port list to configure.
Page 173: Sred Drop Counter
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide SRED Drop Counter This window is used to display sRED drop counter. To view this window, click QoS > SRED > SRED Drop Counter, as shown below: Figure 6-15 SRED Drop Counter window The fields that can be configured are described below: Parameter...
Page 174: Chapter 7 Acl
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 7 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter ACL Configuration Wizard The ACL Configuration Wizard will aid the user in the creation of access profiles and ACL Rules automatically by simply inputting the address or service type and the action needed.
Page 175: Access Profile List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide for this rule. IPv4 Address – Selecting this option will allow the user to enter a range of IPv4 addresses for this rule. IPv6 – Selecting this option will allow the user to enter a range of IPv6 addresses for this rule.
Page 176: Add An Ethernet Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-2 Access Profile List window Click the Add ACL Profile button to add an entry to the Access Profile List. Click the Delete All button to remove all access profiles from this table. Click the Show Details button to display the information of the specific profile ID entry.
Page 177 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-3 Add ACL Profile window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 14. Profile ID Profile Name Enter a profile name for the profile created.
Page 178 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide packet header and use this as the, or part of the criterion for forwarding. Ethernet Type Selecting this option instructs the Switch to examine the Ethernet type value in each frame's header.
Page 179 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-6 Add Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Type in a unique identifier number for this access. This value can be set from 1 to 128. Tick the Auto Assign check box to instruct the Switch to automatically assign an Access ID for the rule being created.
Page 180: Adding An Ipv4 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Replace ToS Specify that the IP precedence of the outgoing packet is changed with the new value. If Precedence (0-7) used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window.
Page 181 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to 14. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content.
Page 182 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Protocol Selecting this option instructs the Switch to examine the protocol type value in each frame's header. Then the user must specify what protocol(s) to include according to the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header.
Page 183 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Show All Profiles button to navigate back to the Access Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 7-10 Access Rule List window (IPv4 ACL) Click the Add Rule button to create a new ACL rule in this profile.
Page 184 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered.
Page 185: Adding An Ipv6 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Adding an IPv6 ACL Profile The window shown below is the Add ACL Profile window for IPv6. To use specific filtering masks in this ACL profile, click the packet filtering mask field to highlight it red.
Page 186 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IPv6 Class Ticking this check box will instruct the Switch to examine the class field of the IPv6 header. This class field is a part of the packet header that is similar to the Type of Service (ToS) or Precedence bits field in IPv4.
Page 187 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-16 Add Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Type in a unique identifier number for this access. This value can be set from 1 to 128. Tick the Auto Assign check box to instruct the Switch to automatically assign an Access ID for the rule being created.
Page 188: Adding A Packet Content Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Replace ToS Specify that the IP precedence of the outgoing packet is changed with the new value. If Precedence (0-7) used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window.
Page 189 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-18 Add ACL Profile (Packet Content ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to 14. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content.
Page 190 However, ARP is vulnerable as it can be easily spoofed and utilized to attack a LAN (i.e. an ARP spoofing attack). For a more detailed explanation on how ARP protocol works and how to employ D-Link’s unique Packet Content ACL to prevent ARP spoofing attack, please see Appendix E at the end of this manual.
Page 191 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created. Click the Delete Rules button to remove the specific entry.
Page 192 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch.
Page 193: Cpu Access Profile List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide CPU Access Profile List Due to a chipset limitation and needed extra switch security, the Switch incorporates CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets destined for the Switch’s CPU interface.
Page 194: Adding A Cpu Ethernet Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide • one for Ethernet (or MAC address-based) profile configuration, • one for IPv6 address-based profile configuration, • one for IPv4 address-based profile configuration, and • one for packet content profile configuration. Adding a CPU Ethernet ACL Profile The window shown below is the Add CPU ACL Profile window for Ethernet.
Page 195 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide header. Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's header. Select Packet Content ACL to specify a mask to hide the content of the packet header. Source MAC Mask Enter a MAC address mask for the source MAC address.
Page 196 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-27 Add CPU Access Rule (Ethernet ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100.
Page 197: Adding A Cpu Ipv4 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-28 CPU Access Rule Detail Information (Ethernet ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU IPv4 ACL Profile The window shown below is the Add CPU ACL Profile window for IP (IPv4).
Page 198 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask. This will change the window according to the requirements for the type of profile.
Page 199 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Destination Port Mask - Specify a UDP port mask for the destination port in hex form (hex 0x0-0xffff). Select Protocol ID - Enter a value defining the protocol ID in the packet header to mask. Specify the protocol ID mask in hex form (hex 0x0-0xff).
Page 200 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-32 Add CPU Access Rule (IPv4 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 201: Adding A Cpu Ipv6 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU IPv6 ACL Profile The window shown below is the Add CPU ACL Profile window for IPv6. To use specific filtering masks in this ACL profile, click the packet filtering mask field to highlight it red.
Page 202 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Select Packet Content ACL to specify a mask to hide the content of the packet header. IPv6 Class Checking this field will instruct the Switch to examine the class field of the IPv6 header.
Page 203 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-37 Add CPU Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Enter a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 204: Adding A Cpu Packet Content Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-38 CPU Access Rule Detail Information (IPv6 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU Packet Content ACL Profile The window shown below is the Add CPU ACL Profile window for Packet Content.
Page 205 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Profile ID (1-5) Enter a unique identifier number for this profile set. This value can be set from 1 to5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
Page 206 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide After clicking the Add Rule button, the following page will appear: Figure 7-42 Add CPU Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100)
Page 207: Acl Finder
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide After clicking the Show Details button in the CPU Access Rule List, the following page will appear: Figure 7-43 CPU Access Rule Detail Information (Packet Content ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List.
Page 208: Acl Flow Meter
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide ACL Flow Meter This page is used to configure the flow-based metering function. The metering function supports three modes: single rate two color, single rate three color, and two rate three color. The access rule must be created before the parameters of this function can be applied.
Page 209 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-46 ACL Flow meter Configuration window The fields that can be configured are described below: Parameter Description Profile ID (1-14) Enter the Profile ID for the flow meter. Profile Name Enter the Profile Name for the flow meter.
Page 210 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide field rewritten to a value stated in this field. Users may also choose to count green packets by using counter parameter. Replace DSCP – Packets that are in the green flow may have their DSCP field rewritten using this parameter and entering the DSCP value to replace.
Page 211: Chapter 8 Security
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 8 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) MAC-based Access Control (MAC) Web-based Access Control (WAC) Japanese Web-based Access Control (JWAC) Compound Authentication Port Security ARP Spoofing Prevention Settings BPDU Attack Protection Loopback Detection Settings Traffic Segmentation Settings...
Page 212 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The following section will explain the three roles of Client, Authenticator and Authentication Server in greater detail. Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator...
Page 213: Authentication Process
Figure 8-6 The 802.1X Authentication Process The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 214: 802.1X Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Host-based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device RADIUS that required access to the LAN.
Page 215: 802.1X Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X authenticator port settings. To view this window, click Security > 802.1X > 802.1X Port Settings, as shown below: Figure 8-10 802.1X Port Settings The fields that can be configured are described below: Parameter...
Page 216: 802.1X User Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 65535) of the client. The default setting is 3600 seconds. ReAuthentication Determines whether regular re-authentication will take place on this port. The default setting is Disabled. This allows the user to control the port authorization state.
Page 217: Guest Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-11 802.1X User Settings window The fields that can be configured are described below: Parameter Description 802.1X User Enter an 802.1X user’s username. Password Enter an 802.1X user’s password. Confirm Password Re-enter an 802.1X user’s password.
Page 218: Authenticator State
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide target VLAN placement information, the client will be returned to its originating VLAN. Yet, if the client is denied authentication by the authenticator, it will be placed in the Guest VLAN where it has limited rights and access. The adjacent figure should give the user a better understanding of the Guest VLAN process.
Page 219: Authenticator Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-14 Authenticator State window The fields that can be configured are described below: Parameter Description Unit Select the unit to be displayed. Port Select a port to be displayed. Click the Find button to locate a specific entry based on the information entered.
Page 220: Authenticator Session Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-15 Authenticator Statistics window The fields that can be configured are described below: Parameter Description Unit Select the unit to be displayed. Port Select the port to be displayed. Click the Apply button to accept the changes made.
Page 221: Authenticator Diagnostics
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-16 Authenticator Session Statistics window The fields that can be configured are described below: Parameter Description Unit Select the unit to be displayed. Port Select the port to be displayed. Click the Apply button to accept the changes made.
Page 222: Initialize Port(S)
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-17 Authenticator Diagnostics window The fields that can be configured are described below: Parameter Description Unit Select the unit to be displayed. Port Select the port to be displayed. Click the Apply button to accept the changes made.
Page 223: Reauthenticate Port(S)
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-18 Initialize Port(s) window The fields that can be configured are described below: Parameter Description Unit Select the unit to be displayed. From Port / To Port Select a port or range of ports to be displayed.
Page 224: Radius
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide RADIUS Authentication RADIUS Server Settings The RADIUS feature of the Switch allows the user to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. To view this window, click Security >...
Page 225: Radius Accounting Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide RADIUS Accounting Settings Users can configure the state of the specified RADIUS accounting service. To view this window, click Security > RADIUS > RADIUS Accounting Settings, as shown below: Figure 8-21 RADIUS Accounting Settings window The fields that can be configured are described below: Parameter...
Page 226 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-22 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds.
Page 227: Radius Account Client
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide AccessRejects The number of RADIUS Access-Reject packets (valid or invalid) received from this server. AccessChallenges The number of RADIUS Access-Challenge packets (valid or invalid) received from this server.
Page 228 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-23 RADIUS Account Client window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds.
Page 229: Ip-Mac-Port Binding (Impb)
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide MalformedResponses The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. BadAuthenticators The number of RADIUS Accounting-Response packets, which contained invalid authenticators, received from this server.
Page 230: Impb Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Trap / Log This field will enable and disable the sending of trap/log messages for IP-MAC-port binding.
Page 231: Impb Entry Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide From Port / To Port Select a range of ports to set for IP-MAC-port binding. IPv4 State / IPv6 State Use the pull-down menu to enable or disable these ports for IP-MAC-port binding. Enabled (Strict) This mode provides a stricter method of control.
Page 232: Mac Block List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description IPv4 Address Click the radio button to enter the IP address to bind to the MAC address set below. IPv6 Address Click the radio button to enter the IPv6 address to bind to the MAC address set below. MAC Address Enter the MAC address to bind to the IPv4 or IPv6 address set above.
Page 233: Dhcp Snooping Entry
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-28 DHCP Snooping Maximum Entry Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure. From Port / To Port Use the drop-down menus to select a range of ports to use.
Page 234: Nd Snooping
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select the desired port. Ports (e.g.: 1:1, 1:7) Specify the ports for which to view or clear DHCP snooping entries. Tick the All check box to view or clear entries for all ports.
Page 235 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-30 ND Snooping Maximum Entry Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure. From Port / To Port Use the drop-down menus to select a range of ports to use.
Page 236: Mac-Based Access Control (Mac)
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Port Use the drop-down menu to select the desired port. Ports (e.g.: 1:1, 1:7) Specify the ports for which to view or clear ND snooping entries. Tick the All Ports check box to view or clear entries for all ports.
Page 237 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-32 MAC-based Access Control Settings window The fields that can be configured are described below: Parameter Description MAC-based Access Toggle to globally enable or disable the MAC-based access control function on the Control State Switch.
Page 238: Mac-Based Access Control Local Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide VLAN ID Click the radio button and enter a Guest VLAN ID. Member Ports Enter the list of ports that have been configured for the Guest VLAN. Unit Select the unit to configure.
Page 239: Mac-Based Access Control Authentication State
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To change the selected MAC address’ VLAN Name, the user can click the Edit by Name button. Figure 8-34 MAC-based Access Control Local Settings – Edit by Name window To change the selected MAC address’...
Page 240: Web-Based Access Control (Wac)
WAC by attempting to gain Web access. D-Link’s implementation of WAC uses a virtual IP that is exclusively used by the WAC function and is not known by any other modules of the Switch. In fact, to avoid affecting a Switch’s other features, WAC will only use a virtual IP address to communicate with hosts.
Page 241: Conditions And Limitations
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address.
Page 242: Wac Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 2. Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The user needs to be very careful when setting filter functions for the target VLAN, so that these HTTP packets are not denied by the Switch.
Page 243: Wac User Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Server Settings window. HTTP(S) Port (1-65535) Enter a HTTP port number. Port 80 is the default. HTTP – Specify that the TCP port will run the WAC HTTP protocol. The default value is 80.
Page 244: Wac Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide WAC Port Settings Users can view and set port configurations for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC Port Settings, as shown below: Figure 8-39 WAC Port Settings window The fields that can be configured are described below: Parameter...
Page 245: Wac Authentication State
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide box to indicate the Idle state of the authenticated host on the port will never be checked. The default value is infinite. Block Time (0-300) This parameter is the period of time a host will be blocked if it fails to pass authentication. Enter a value between 0 and 300 seconds.
Page 246 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To view this window, click Security > JWAC > JWAC Global Settings, as shown below: Figure 8-41 JWAC Global Settings The fields that can be configured are described below: Parameter Description Use this drop-down menu to either enable or disable JWAC on the Switch.
Page 247: Jwac Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: When enabling redirect to the quarantine server, a quarantine server must be configured first. Redirect Destination This parameter specifies the destination before an unauthenticated host is redirected to either the Quarantine Server or the JWAC Login Page.
Page 248 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-42 JWAC Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Use the drop-down menus to select a port or range of ports to configure.
Page 249: Jwac User Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide JWAC User Settings To view this window, click Security > JWAC > JWAC User Settings, as shown below: Figure 8-43 JWAC User Settings window The fields that can be configured are described below: Parameter Description User Name...
Page 250: Jwac Customize Page Language
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 1:5-1:10) check box(s), Authenticated, Authenticating, and Blocked. Authenticated Tick this check box to clear all authenticated users for a port. Authenticating Tick this check box to clear all authenticating users for a port. Blocked Tick this check box to clear all blocked users for a port.
Page 251: Jwac Customize Page
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide JWAC Customize Page To view this window, click Security > JWAC > JWAC Customize page, as shown below: Figure 8-46 JWAC Customize Page window The fields that can be configured are described below: Parameter Description English/Japanese...
Page 252: Compound Authentication
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Compound Authentication Compound Authentication settings allows for multiple authentication to be supported on the Switch. Compound Authentication Modern networks employ many authentication methods. The Compound Authentication methods supported by this Switch include 802.1X, MAC-based access control (MAC), Web-based Access Control (WAC), Japan Web-based Access Control (JWAC), and IP-MAC-Port Binding (IMPB).
Page 253: Compound Authentication Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide IMPB + WAC/JWAC Mode This mode adds an extra layer of security by checking the IP MAC-Binding Port Binding (IMPB) table before trying one of the supported authentication methods. The IMPB Table is used to create a ‘white-list’...
Page 254 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-47 Compound Authentication Settings window The fields that can be configured are described below: Parameter Description Authorization Network State Click the radio buttons to enable of disable the Authorization Network State. Authentication Server Click the radio buttons to configure the authentication server failover function.
Page 255: Compound Authentication Guest Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide whether an individual security module is active on a port depends on its system state. As system states of WAC and JWAC are mutually exclusive, only one of them will be active on a port at the same time.
Page 256: Port Security
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Port Security Port Security Settings A given port’s (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table cannot be changed once the port lock is enabled.
Page 257: Port Security Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide From Port The beginning port of a consecutive group of ports to be configured. To Port The ending port of a consecutive group of ports to be configured. Admin State Use the pull-down menu to enable or disable Port Security (locked MAC address table for the selected ports).
Page 258: Port Security Entries
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description VLAN Name Enter the VLAN Name. VID List Specify a list of the VLAN be VLAN ID. Max Learning Address Specify the maximum number of port-security entries that can be learned by this VLAN. Click the Apply button to accept the changes made.
Page 259: Bpdu Attack Protection
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-53 ARP Spoofing Prevention Settings window The fields that can be configured are described below: Parameter Description Enter the gateway IP address to help prevent ARP Spoofing. Gateway IP Address Gateway MAC Address Enter the gateway MAC address to help prevent ARP Spoofing.
Page 260 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-54 BPDU Attack Protection window The fields that can be configured are described below: Parameter Description BPDU Attack Protection Click the radio buttons to enable or disable the BPDU attack protection state. State Trap State Specify when a trap will be sent.
Page 261: Loopback Detection Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Loopback Detection Settings The Loopback Detection (LBD) function is used to detect the loop created by a specific port. This feature is used to temporarily shut down a port on the Switch when a CTP (Configuration Testing Protocol) packet has been looped back to the Switch.
Page 262: Traffic Segmentation Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Unit Select the unit to configure. From Port Use the drop-down menu to select a beginning port number. To Port Use the drop-down menu to select an ending port number. State Use the drop-down menu to toggle between Enabled and Disabled.
Page 263: Netbios Filtering Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Ports Ports that have been selected to be included in the traffic segmentation setup will be displayed. Click the Clear All button to deselect the ports. Click the Select All button to choose all ports.
Page 264: Dhcp Server Screening
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DHCP Server Screening This function allows the user to not only to restrict all DHCP Server packets but also to receive any specified DHCP server packet by any specified DHCP client, it is useful when one or more DHCP servers are present on the network and both provide DHCP services to different distinct groups of clients.
Page 265: Dhcp Offer Permit Entry Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description DHCP Server Screening Enable or disable this feature. Trap Log State Illegitimate Server Log Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30 minutes. Suppress Duration Unit Select the unit to configure.
Page 266: Enable Admin
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide • TACACS (Terminal Access Controller Access Control System) - Provides password checking and authentication, and notification of user actions for security purposes utilizing via one or more centralized TACACS servers, utilizing the UDP protocol for packet transmission.
Page 267: Authentication Policy Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Possible authentication methods for this function include TACACS/XTACACS/TACACS+/RADIUS, user defined server groups, local enable (local account on the Switch), or no authentication (none). Because XTACACS and TACACS do not support the enable function, the user must create a special account on the server host, which has the username "enable", and a password configured by the administrator that will support the "enable"...
Page 268: Application Authentication Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Application Authentication Settings Users can configure Switch configuration applications (Console, Telnet, SSH, HTTP) for login at the user level and at the administration level (Enable Admin) utilizing a previously configured method list. To view this window, click Security >...
Page 269 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-63 Authentication Server Group Settings – Server Group List window This window displays the Authentication Server Groups on the Switch. The Switch has four built-in Authentication Server Groups that cannot be removed but can be modified.
Page 270: Authentication Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: The user must configure Authentication Server Hosts using the Authentication Server Hosts window before adding hosts to the list. Authentication Server Hosts must be configured for their specific protocol on a remote centralized server before this function can work properly.
Page 271: Login Method Lists Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: More than one authentication protocol can be run on the same physical server host but, remember that TACACS/XTACACS/TACACS+ are separate entities and are not compatible with each other. Login Method Lists Settings User-defined or default Login Method List of authentication techniques can be configured for users logging on to the Switch.
Page 272: Enable Method Lists Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide TACACS protocol from a remote TACACS server. tacacs+ - Adding this parameter will require the user to be authenticated using the TACACS+ protocol from a remote TACACS+ server. xtacacs - Adding this parameter will require the user to be authenticated using the XTACACS protocol from a remote XTACACS server.
Page 273: Local Enable Password Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Method List Name Enter a method list name defined by the user of up to 15 characters. Priority 1, 2, 3, 4 The user may add one, or a combination of up to four of the following authentication methods to this method list: none - Adding this parameter will require no authentication needed to access the Switch.
Page 274: Ssl Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide SSL Settings Secure Sockets Layer, or SSL, is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a cipher suite, which is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels: Key Exchange: The first part of the Ciphersuite string specifies the public key algorithm to be used.
Page 275 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-69 SSL Settings window To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described. The fields that can be configured are described below: Parameter Description SSL State...
Page 276: Ssh
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To download SSL certificates, configure the parameters in the SSL Certificate Download section described below. Parameter Description Server IP Address Enter the IPv4 address of the TFTP server where the certificate files are located. Certificate File Name Enter the path and the filename of the certificate file to download.
Page 277: Ssh Authentication Method And Algorithm Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-70 SSH Settings window The fields that can be configured are described below: Parameter Description SSH Server State Use the radio buttons to enable or disable SSH on the Switch. The default is Disabled. Enter a value between 1 and 8 to set the number of users that may simultaneously Max Session (1-8) access the Switch.
Page 278 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-71 SSH Authentication Method and Algorithm Settings window The fields that can be configured for SSH Authentication Mode are described below: Parameter Description Password This may be enabled or disabled to choose if the administrator wishes to use a locally configured password for authentication on the Switch.
Page 279: Ssh User Authentication List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide default is enabled. Twofish256 Use the check box to enable or disable the twofish256 encryption algorithm. The default is enabled. Click the Apply button to accept the changes made. The fields that can be configured for the Data Integrity Algorithm are described below: Parameter Description...
Page 280: Trusted Host Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide administrator-defined password for authentication. Upon entry of this parameter, the Switch will prompt the administrator for a password, and then to re-type the password for confirmation. Public Key –...
Page 281: Safeguard Engine Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide When the user clicks the Edit button, one will be able to edit the service allowed to the selected host. The fields that can be configured are described below: Parameter Description IPv4 Address...
Page 282 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-74 Mapping QoS on the Switch For every consecutive checking interval that reveals a packet flooding issue, the Switch will double the time it will discard ingress ARP and IP broadcast packets and packets from the illegal IP addresses.
Page 283 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 8-75 Safeguard Engine Settings window The fields that can be configured are described below: Parameter Description Safeguard Engine State Use the radio button to globally enable or disable Safeguard Engine settings for the Switch.
Page 284: Network Application
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 9 Network Application DHCP PPPoE Circuit ID Insertion Settings SNTP DHCP DHCP Relay DHCP Relay Global Settings Users can enable and configure DHCP Relay Global Settings. The relay hops count limit allows the maximum number of hops (routers) that the DHCP messages can be relayed through to be set.
Page 285 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide given DHCP packet. DHCP Relay Option 82 This field can be toggled between Enabled and Disabled using the pull-down menu. It State is used to enable or disable the DHCP Relay Agent Information Option 82 on the Switch.
Page 286: Dhcp Relay Interface Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The Implementation of DHCP Relay Agent Information Option 82 The DHCP Relay Option 82 command configures the DHCP relay agent information option 82 setting of the Switch. The formats for the circuit ID sub-option and the remote ID sub-option are as follows: NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero.
Page 287: Dhcp Relay Option 60 Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide To view this window, click Network Application > DHCP > DHCP Relay > DHCP Relay Interface Settings, as shown below: Figure 9-4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description...
Page 288: Dhcp Relay Option 60 Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 9-6 DHCP Relay Option 60 Server Settings window The fields that can be configured are described below: Parameter Description Server IP Address Enter the DHCP Relay Option 60 Server Relay IP address. Mode Use the drop-down menu to select the DHCP Relay Option 60 Server mode.
Page 289: Dhcp Relay Option 61 Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide system will relay the packet to all the matching servers. Server IP Address Enter the DHCP Relay Option 60 Server IP address. Match Type Enter the DHCP Relay Option 60 Match Type value. Exact Match –...
Page 290: Dhcp Server
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry based on the information entered. Click the Delete All button to remove all the entries listed.
Page 291: Dhcp Server Exclude Address Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DHCP Server Exclude Address Settings The following window will allow the user to set an IP address, or a range of IP addresses that are NOT to be included in the range of IP addresses that the Switch will allot to clients requesting DHCP service.
Page 292 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide After clicking the Edit button, the following page will appear: Figure 9-12 DHCP Server Pool Settings - Edit window The fields that can be configured are described below: Parameter Description IP Address...
Page 293: Dhcp Server Manual Binding
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide menus to precisely set the time by hours and minutes. Users may also use the Infinite check box to set the allotted IP address to never be timed out of its lease. The default setting is 1 day.
Page 294: Dhcpv6 Relay
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DHCP Server Dynamic Binding To view this window, click Network Application > DHCP > DHCP Server > DHCP Server Dynamic Binding, as shown below: Figure 9-14 DHCP Server Dynamic Binding window The fields that can be configured are described below: Parameter Description...
Page 295: Dhcpv6 Relay Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description DHCPv6 Relay State Click the radio buttons to enable or disable the DHCPv6 Relay service on the Switch. The default is Disabled.
Page 296: Dhcp Local Relay Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the <<Back button to return to the previous page. Click the Delete button to remove the specific entry. DHCP Local Relay Settings The DHCP local relay settings allows the user to add option 82 into DHCP request packets when the DHCP client gets an IP address from the same VLAN.
Page 297: Domain Name Resolution
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Domain Name Resolution The domain name system can be used by contacting the name servers one at a time, or by asking the domain name system to do the complete name translation. The client makes a query containing the name, the type of answer required, and a code specifying whether the domain name system should do the entire name translation, or simply return the address of the next DNS server if the server receiving the query cannot resolve the name.
Page 298: Pppoe Circuit Id Insertion Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DNS Relay Static Settings To view this window, click Network Application > DNS > DNS Relay > DNS Relay Static Settings, as shown below: Figure 9-21 DNS Relay Static Settings window The fields that can be configured are described below: Parameter Description...
Page 299: Sntp
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide SNTP The Simple Network Time Protocol (SNTP) is a protocol for synchronizing computer clocks through the Internet. It provides comprehensive mechanisms to access national time and frequency dissemination services, organize the SNTP subnet of servers and clients, and adjust the system clock in each participant.
Page 300: Time Zone Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Time Zone Settings Users can configure time zones and Daylight Savings Time settings for SNTP. To view this window, click Network Application > SNTP > Time Zone Settings, as shown below: Figure 9-24 Time Zone Settings window The fields that can be configured are described below: Parameter...
Page 301 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide From: Day Of Week Enter the day of the week that DST will start on. From: Month Enter the month DST will start on. From: Time In HH:MM Enter the time of day that DST will start on.
Page 302: Oam
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 10 Ethernet OAM DULD Settings Cable Diagnostics Connectivity Fault Management (CFM) is defined by IEEE 802.1ag, which is a standard for detecting, isolating and reporting connectivity faults in a network. CFM is an end-to-end per-service-instance Ethernet layer operation, administration, and management (OAM) function.
Page 303 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide None – No MIPs will be created. This is the default value. Auto – MIPs are created when the next lower active MD-level on the port is reached or there are no lower active MD levels.
Page 304 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide MEP ID(s) Enter the MEP ID(s) contained in the maintenance association. The range of the MEPID is from 1 to 8191. Click the Add button to create a new entry based on the entered information. Click the <<Back button to go back to the CFM Settings window.
Page 305 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the View Detail link to see the following window: Figure 10-5 CFM MEP Information window Click the Edit button to see the following window. Figure 10-6 CFM MEP Information - Edit window The fields that can be configured are described below: Parameter Description...
Page 306 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Xcon CCM - Only the fault alarms whose priority is equal to or higher than “Cross- connect CCM Received” will be sent. None - No fault alarm will be sent. This is the default value. Alarm Time (250-1000) Enter the time period in centisecond to control the fault alarm to be sent if a defect is reported continuously.
Page 307: Cfm Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide CFM Port Settings This table is used to enable or disable the connectivity fault management function on a per port basis. CFM is disabled on all ports by default. To view this window, click OAM >...
Page 308: Cfm Loopback Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide CFM Loopback Settings This window is used to configure the CFM Loopback settings on the Switch. To view this window, click OAM > CFM > CFM Loopback Settings, as shown below: Figure 10-9 CFM Loopback Settings window The fields that can be configured are described below: Parameter...
Page 309: Cfm Linktrace Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide CFM Linktrace Settings This window is used to configure the CFM linktrace settings on the Switch. To view this window, click OAM > CFM > CFM Linktrace Settings, as shown below: Figure 10-10 CFM Linktrace Settings window The fields that can be configured are described below: Parameter...
Page 310: Cfm Fault Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 10-11 CFM Packet Counter List window The fields that can be configured are described below: Parameter Description Port List Specify which ports’ counter to show. Tick All Ports to view all ports. Type This drop-down menu allows you to select among Transmit, Receive and CCM.
Page 311: Cfm Mp Table
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide MA Name The Maintenance Association Name. Click the Find button to show the information at the lower half of the window. CFM MP Table This window is used to display the CFM MP table on the Switch. To view this window, click OAM >...
Page 312: Ethernet Oam Configuration Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 10-14 Ethernet OAM Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Select a range of ports to be configured.
Page 313 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 10-15 Ethernet OAM Configuration Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. Select a range of ports to be configured. From Port / To Port Link Event Configure the Ethernet OAM link event.
Page 314: Ethernet Oam Event Log
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Ethernet OAM Event Log The window is used to display the Ethernet OAM event log information. The Switch can record up to 1000 event logs. This event log has more detailed information than system log. Each OAM event is recorded in both OAM event log and system log.
Page 315: Duld Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 10-17 Ethernet OAM Statistics window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to specify the port number. Port List Specify which ports’...
Page 316: Cable Diagnostics
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 10-18 DULD Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. From Port / To Port Select a range of ports to be configured.
Page 317 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 10-19 Cable Diagnostics window To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test The information will be displayed in this window.
Page 318: Monitoring
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 11 Monitoring Utilization Statistics Mirror sFlow Ping Test Trace Route Peripheral Utilization CPU Utilization Users can display the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval.
Page 319: Dram & Flash Utilization
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. DRAM & Flash Utilization On this page the user can view information regarding the DRAM and Flash utilization. To view this window, click Monitoring >...
Page 320: Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Unit Select the unit to configure. Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s"...
Page 321 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-4 Received (RX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11-5 Received (RX) Table window (for Bytes and Packets) The fields that can be configured are described below: Parameter...
Page 322 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 323 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-7 RX UMB_cast (RX) Table window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Port Use the drop-down menu to choose the port that will display statistics.
Page 324 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-8 Transmitted (TX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11-9 Transmitted (TX) Table window (table for Bytes and Packets) The fields that can be configured are described below: Parameter...
Page 325 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200.
Page 326 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-10 Received (RX) window (for errors) Click the View Table link to display the information in a table rather than a line graph. Figure 11-11 Received (RX) Table window (for errors) The fields that can be configured are described below: Parameter Description...
Page 327 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. Counts otherwise valid packets that did not end on a byte (octet) boundary. CRCError The number of packets detected that are less than the minimum permitted packets size of UnderSize...
Page 328 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-12 Transmitted (TX) window (for errors) Click the View Table link to display the information in a table rather than a line graph. Figure 11-13 Transmitted (TX) Table window (for errors) The fields that can be configured are described below: Parameter Description...
Page 329: Packet Size
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. Counts the number of packets for which the first transmission attempt on a particular ExDefer interface was delayed because the medium was busy.
Page 330 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-14 Packet Size window Click the View Table link to display the information in a table rather than a line graph. Figure 11-15 RX Size Analysis window (table) The fields that can be configured are described below: Parameter Description...
Page 331: Vlan Counter Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).
Page 332: Mirror
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Mirror The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 333: Rspan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide RSPAN Settings This page controls the RSPAN function. The purpose of the RSPAN function is to mirror packets to a remote switch. A packet travels from the switch where the monitored packet is received, passing through the intermediate switch, and then to the switch where the sniffer is attached.
Page 334: Sflow
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Displays the RSPAN VLAN by VLAN ID. VLAN Name Displays the RSPAN VLAN by VLAN name. Source Ports If the ports are not specified by option, the source of RSPAN will come from the source specified by the mirror command or the flow-based source specified by an ACL.
Page 335: Sflow Analyzer Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide sFlow Analyzer Server Settings The Switch can support four different Analyzer Servers at the same time and each sampler or poller can select a collector to send the samples. The Switch can send different samples from different samplers or pollers to different collectors.
Page 336: Sflow Counter Poller Settings
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide NOTE: If the user wants the change the analyze server ID, he needs to delete the flow sampler and creates a new one. Figure 11-21 sFlow Flow Sampler Settings window The fields that can be configured are described below: Parameter Description...
Page 337: Ping Test
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Unit Select a unit to configure. From Port / To Port Use the drop-down menus to specify the list of ports to be configured. Analyzer Server ID (1- The analyzer server ID specifies the ID of a server analyzer where the packet will be forwarded.
Page 338: Trace Route
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Target IP Address Enter an IP address to be pinged. Repeat Pinging for Enter the number of times desired to attempt to Ping either the IPv4 address or the IPv6 address configured in this window.
Page 339 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 11-25 Trace Route window The fields that can be configured are described below: Parameter Description IPv4 Address / IPv6 The IP address of the destination station. Address TTL (1-60) The time to live value of the trace route request.
Page 340: Peripheral
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Stop button to halt the Trace Route. Click the Resume button to resume the Trace Route. Peripheral Device Status This window displays power and fan status of the Switch. To view this window, click Monitoring >...
Page 341: Chapter 12 Save And Tools
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 12 Save and Tools Save Configuration ID 1 Save Configuration ID 2 Save Log Save All Stacking Information Download Firmware Download Configuration File Upload Configuration File Upload Log File Reset Reboot System...
Page 342: Save Log
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Save Log Open the Save drop-down menu at the top of the Web manager and click Save Log to see the following window: Figure 12-3 Save Log window Save All Open the Save drop-down menu at the top of the Web manager and click Save All to see the following window: Figure 12-4 Save All window...
Page 343 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 12-5 Stacking Information window The Stacking Information window displays the following information: Parameter Description Topology Show the current topology employed using this Switch. Display the Box ID of the Switch currently in use. My Box ID Master ID Display the Unit ID number of the Primary Master of the Switch stack.
Page 344: Download Firmware
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Download Firmware This window allows the user to download firmware from a TFTP Server to the Switch and updates the switch. Open the Tools drop-down menu at the top of the Web manager and click Download Firmware to see the following window: Figure 12-6 Download Firmware –...
Page 345: Upload Configuration File
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 12-7 Download Configuration – TFTP window The fields that can be configured are described below: Parameter Description TFTP Server IP Click the IPv4 or IPv6 radio button to enter the TFTP Server IP address. File Enter the location and name of the file.
Page 346: Upload Log File
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description TFTP Server IP Click the IPv4 or IPv6 radio button to enter the TFTP Server IP address. File Enter the location and name of the file. Configuration ID Select a configuration ID.
Page 347: Reset
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Reset The Reset function has several options when resetting the Switch. Some of the current configuration parameters can be retained while resetting all other configuration parameters to their factory defaults. NOTE: Only the Reset System option will enter the factory default parameters into the Switch's non- volatile RAM, and then restart the Switch.
Page 348: Appendix A Mitigating Arp Spoofing Attacks Using Packet Content Acl
IP address is known. However, this protocol is vulnerable because crackers can spoof the IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link’s switches to thwart ARP spoofing attacks.
Page 349 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Table 2 Ethernet Frame Format When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port into its Forwarding Table.
Page 350: How Arp Spoofing Attacks A Network
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide When PC B replies to the query, the “Destination Address” in the Ethernet frame will be changed to PC A’s MAC address. The “Source Address” will be changed to PC B’s MAC address (see Table 4). Table 4 Ethernet Frame Format The switch will also examine the “Source Address”...
Page 351: Prevent Arp Spoofing Via Packet Content Acl
5 all traffic will be then sniffed by the hacker but the users will not discover. Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL.
Page 352 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 2. The switch will deny all other ARP packets which claim they are from the gateway’s IP. The design of Packet Content ACL on the Switch enables users to inspect any offset chunk. An offset chunk is a 4-byte block in a HEX format, which is utilized to match the individual field in an Ethernet frame.
Page 353 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 0x806 port 1-12 permit correct Source MAC in the Ethernet frame can pass through the switch. Step 3: create access_profile profile_id 2 Create access profile 2 profile_name 2 packet_content_mask The first chunk starts from Chunk 3 mask for Ethernet offset_chunk_1 3 0xFFFF...
Page 354: Appendix B System Log And Trap List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Appendix B System Log and Trap List System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch.
Page 355 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Log message successfully Log message successfully uploaded by console Informational uploaded (Username: <username>) Log message upload was Log message upload by console was unsuccessful! Warning unsuccessful (Username: <username>) Interface Port link up...
Page 356 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Spanning Tree Protocol is Spanning Tree Protocol is enabled Informational enabled Spanning Tree Protocol is Spanning Tree Protocol is disabled Informational disabled Successful login through Successful login through SSH (Username: <username>, Informational IP: <ipaddr>) Login failed through SSH...
Page 357 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide method Successful login through Successful login through Console authenticated by AAA Informational Console authenticated by none method (Username: <username>) AAA none method Successful login through Successful login through Web from <userIP> Informational Web authenticated by AAA authenticated by AAA none method (Username:...
Page 358 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Successful Enable Admin Successful Enable Admin through Console authenticated Informational through Console by AAA local_enable method (Username: <username>) authenticated by AAA local_enable method Enable Admin failed Enable Admin failed through Console authenticated by Warning through Console...
Page 359 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Successful Enable Admin Successful Enable Admin through Web from <userIP> Informational through Web authenticated authenticated by AAA server <serverIP> (Username: by AAA server <username>) Enable Admin failed Enable Admin failed through Web from <userIP>...
Page 360 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Login failed through SSH Login failed through SSH from <userIP> due to AAA Warning from user due to AAA server timeout or improper configuration (Username: server timeout or improper <username>) configuration.
Page 361 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide detection restarted restarted Loop vlan number overflow, Loop VLAN number overflow Informational Spoofing attack Possible spoofing attack from IP <ipaddr> MAC Critical <macaddr> port <[unitID:]portNum> JWAC A user fails to pass the JWAC unauthenticated user (Username: <string>, IP: authentication...
Page 362: Des-3528/Des-3552 Series Trap List
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Port recover from BPDU Informational Port <[unitID:] portNum> recover from BPDU under under attacking state attacking state manually manually Port recover from BPDU Port <[unitID:] portNum> recover from BPDU under Informational under attacking state attacking state automatically...
Page 363 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide swIpMacBindingViolationTrap swIpMacBindingPortIndex IPMacBind- 1.3.6.1.4.1.171.12.23.5.0.1 swIpMacBindingViolationIP Warning swIpMacBindingViolationMac SwMacBasedAuthLoggedSuccess swMacBasedAuthInfoMacIndex Mac-Based- Authenticatio 1.3.6.1.4.1.171.12.35.11.1.0.1 swMacBasedAuthInfoPortIndex Warning n-MIB swMacBasedAuthVID swMacBasedAuthLoggedFail swMacBasedAuthInfoMacIndex Mac-Based- Authenticatio 1.3.6.1.4.1.171.12.35.11.1.0.2 swMacBasedAuthInfoPortIndex Warning n-MIB swMacBasedAuthVID SwMacBasedAuthAgesOut swMacBasedAuthInfoMacIndex Mac-Based- Authenticatio...
Page 364 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide 1.3.6.1.4.1.171.12.11.2.2.2.0.1 swPowerFailure Equipment- swEquipPowerNotifyPerfix Warning 1.3.6.1.4.1.171.12.11.2.2.2.0.2 swPowerRecover Equipment- swEquipPowerNotifyPerfix Warning 1.3.6.1.4.1.171.12.11.2.2.2.0.3 swFanFailure Equipment- swEquipFanNotifyPrefix Warning 1.3.6.1.4.1.171.12.11.2.2.3.0.1 swFanRecover Equipment- swEquipFanNotifyPrefix Warning 1.3.6.1.4.1.171.12.11.2.2.3.0.2 agentFirmwareUpgrade Genmgmt- agentNotifyPrefix Warning 1.3.6.1.4.1.171.12.1.7.2.0.7 swPortLoopOccurred swLoopDetectPortIndex LBD-MIB...
Page 365: Appendix C Password Recovery Procedure
This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords. Complete these steps to reset the password: 1.
Page 366: Appendix D Glossary
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Appendix D Glossary 1000BASE-SX A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-LX A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX 100Mbps Ethernet implementation over fiber.
Page 367 xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide multicast Single packets copied to a specific subset of network addresses. These addresses are specified in the destination- address field of the packet. protocol A set of rules for communication between devices on a network. The rules dictate format, timing, sequencing and error control.

This manual is also suitable for:

Xstack des-3552 series

D-Link DES-3528 - xStack Switch - Stackable Reference Manual

Chapter 1 Web-Based Switch Configuration

Chapter 2 System Configuration

Chapter 3 Management

Chapter 4 L2 Features

Chapter 5 L3 Features

Chapter 6 Qos

Chapter 7 ACL

Chapter 8 Security

Chapter 9 Network Application

Quick Links

Related Manuals for D-Link DES-3528 - xStack Switch - Stackable

Summary of Contents for D-Link DES-3528 - xStack Switch - Stackable