Page 2 Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Table of Contents Intended Readers ................................1 Typographical Conventions ............................. 1 Notes, Notices and Cautions............................1 Section 1 Web-based Switch Configuration ................2 Chapter 1 Introduction ..............................2 Chapter 2 Login to the Web Manager .........................
Page 4 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide IPv4 Static/Default Route Settings .......................... 126 IPv4 Route Table ..............................127 IPv6 Static/Default Route Settings .......................... 127 IP Forwarding Table ..............................128 VRRP ..................................128 Chapter 5 QoS ................................. 133 802.1p Settings ................................
Page 5 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Mirror ..................................303 sFlow ..................................305 Ping Test.................................. 308 Trace Route ................................309 Peripheral ................................310 Chapter 11 Save and Tools ........................... 311 Section 3 WLAN ........................312 Chapter 1 Security ..............................
Page 6: Intended Readers
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Intended Readers Typographical Conventions Notes, Notices and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DWS-3160 Series Web UI Reference Guide contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology.
Page 7: Web-Based Switch Configuration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Section 1 Web-based Switch Configuration Introduction Login to the Web Manager Web-based User Interface Web Pages Chapter 1 Introduction All software functions of the DWS-3160 Series switches can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 8: Chapter 3 Web-Based User Interface
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-1 Enter Network Password window Leave both the User Name field and the Password field blank and click OK. This will open the Web-based user interface. The Switch management features available in the web-based manager are explained below. Chapter 3 Web-based User Interface The user interface provides access to various Switch configuration and management windows, allows you to view...
Page 9: Chapter 4 Web
Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports, console and management port, showing port activity. Click the D-Link logo to go to the D-Link website.
Page 10 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide L2 Features - In this section the user will be able to configure features regarding the Layer 2 functionality of the Switch. L3 Features - In this section the user will be able to configure features regarding the Layer 3 functionality of the Switch.
Page 11: Lan
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Section 2 This section describes all the available configurations in the LAN tab. Chapter 1 System Configuration Device Information System Information Settings Port Configuration Serial Port Settings Warning Temperature Settings System Log configuration Time Range Settings Port Group Settings...
Page 12: System Information Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide System Information Settings The user can enter a System Name, System Location, and System Contact to aid in defining the Switch. To view the following window, click System Configuration > System Information Settings, as show below: Figure 5-2 System Information Settings window The fields that can be configured are described below: Parameter...
Page 13 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 5-3 Port Settings window To configure switch ports: 1. Choose the port or sequential range of ports using the From Port and To Port drop-down menus. 2. Use the remaining drop-down menus to configure the parameters described below: The fields that can be configured are described below: Parameter Description...
Page 14: Port Description Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide from a data stream received from the master. If one connection is set for 1000M Full_Master, the other side of the connection must be set for 1000M Full_Slave. Any other configuration will result in a link down status for both ports. Flow Control Displays the flow control scheme used for the various port configurations.
Page 15: Port Error Disabled
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description From Port / To Port Select the appropriate port range used for the configuration here. Medium Type Specify the medium type for the selected ports. If configuring the Combo ports, the Medium Type defines the type of transport medium to be used, whether Copper or Fiber.
Page 16: Poe
Category 5 or Category 3 UTP Ethernet cables. The Switch follows the standard PSE (Power Sourcing Equipment) pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6. The Switches work with all D-Link 802.3af capable devices.
Page 17: Poe Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 5-7 PoE System Settings window The following parameters can be configured: Parameter Description Power Limit (37- Sets the limit of power to be used from the Switch’s power source to PoE ports. The user 760) may configure a Power Limit between 37W and 760W The default setting is 760W.
Page 18 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 5-8 PoE Port Settings window The following parameters can be configured: Parameter Description From Port / To Port Select a range of ports from the drop-down menus to be enabled or disabled for PoE. State Use the drop-down menu to enable or disable ports for PoE.
Page 19: Serial Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click Apply to implement changes made. The port status of all PoE configured ports is displayed in the table in the bottom half of the screen shown above. Serial Port Settings This window allows the user to adjust the Baud Rate and the Auto Logout values.
Page 20: System Log Configuration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide temperature setting. High Threshold Enter the high threshold value of the warning temperature setting. Low Threshold Enter the low threshold value of the warning temperature setting. Click the Apply button to implement changes made. System Log Configuration System Log Settings The Switch allows users to choose a method for which to save the switch log to the flash memory of the Switch.
Page 21 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 5-12 System Log Server Settings The fields that can be configured are described below: Parameter Description Server ID Syslog server settings index (1 to 4). Severity Use the drop-down menu to select the higher level of messages that will be sent. All messages which level is higher than selecting level will be sent.
Page 22: System Severity Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Log Type In the drop-down menu the user can select the log type that will be displayed. Severity - When selecting Severity from the drop-down menu, a secondary tick must be made.
Page 23: Time Range Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click System Configuration > System Log Configuration > System Severity Settings, as show below: Figure 5-15 System Severity Settings window The fields that can be configured are described below: Parameter Description System Severity...
Page 24: Port Group Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Weekdays Use the check boxes to select the corresponding days of the week that this time range is to be enabled. Tick the Select All Days check box to configure this time range for every day of the week.
Page 25: User Accounts Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide User Accounts Settings The Switch allows the control of user privileges. To view the following window, click System Configuration > User Accounts Settings, as show below: Figure 5-19 User Accounts Settings window To add a new user, type in a User Name and New Password and retype the same password in the Confirm New Password field.
Page 26: Command Logging Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Command Logging Settings This window is used to enable or disable the command logging settings. To view this window, click System Configuration > Command Logging Settings, as shown below: Figure 5-20 Command Logging Settings window The fields that can be configured are described below: Parameter Description...
Page 27: Chapter 2 Management
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 2 Management Gratuitous ARP IPv6 Neighbor Settings IP Interface Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings Static ARP Settings The Address Resolution Protocol is a TCP/IP protocol that converts IP addresses into physical addresses. This table allows network managers to view, define, modify, and delete ARP information for specific devices.
Page 28: Gratuitous Arp
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The host, usually a layer 3 switch, will respond to packets destined for another device. For example, if hosts A and B are on different physical networks, B will not receive ARP broadcast requests from A and therefore cannot respond.
Page 29: Gratuitous Arp Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Gratuitous ARP Global Settings The user can enable or disable the gratuitous ARP global settings here. To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Global Settings, as show below: Figure 6-4 Gratuitous ARP Global Settings Window The fields that can be configured are described below:...
Page 30: Ipv6 Neighbor Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter Description Trap Use the drop-down menu to enable or disable the trap option. By default the trap is disabled.
Page 31: Ip Interface
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-6 IPv6 Neighbor Settings window The fields that can be configured are described below: Parameter Description Interface Name Enter the interface name of the IPv6 neighbor. Neighbor IPv6 Address Enter the neighbor IPv6 address.
Page 32 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click Management > IP Interface > System IP Address Settings, as show below: Figure 6-7 System IP Address Settings window The fields that can be configured are described below: Parameter Description Static...
Page 33: Interface Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide current subnet should be sent. This is usually the address of a router or a host acting as an IP gateway. If your network is not part of an intranet, or you do not want the Switch to be accessible outside your local network, you can leave this field unchanged.
Page 34 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide VLAN Name Enter the VLAN Name used. Interface Admin State Use the drop-down menu to enable or disable the Interface Admin State. Secondary Interface Tick the check box to use this Interface as a Secondary Interface. When the primary IP is not available, the VLAN will switch to the secondary interface.
Page 35: Management Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description Interface Name Display the IPv6 interface name. IPv6 State Use the drop-down menu to enable or disable IPv6 State. Interface Admin State Use the drop-down menu to enable or disable the Interface Admin State. IPv6 Network Address Here the user can enter the neighbor’s global or local link address.
Page 36: Session Table
Being enabled, will allow the user to perform a password recovery of the running configuration. Click the Apply button to accept the changes made. To learn more about the D-Link Green Technologies, go to http://green.dlink.com/ for more details. Session Table Users can display the management sessions since the Switch was last rebooted.
Page 37: Single Ip Management
Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the “Single IP Management” feature: 1.
Page 38: Single Ip Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Being configured as a CaS through the CS. If report packets from the CS to the MS time out. • The user can manually configure a CaS to become a CS •...
Page 39 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click Management > Single IP Management > Single IP Settings, as show below: Figure 6-15 Single IP Settings window The fields that can be configured are described below: Parameter Description SIM State...
Page 40 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-16 Single IP Management window - Tree View The Topology window holds the following information on the Data tab: Parameter Description Device Name This field will display the Device Name of the switches in the SIM group configured by the user.
Page 41 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-17 Topology view This window will display how the devices within the Single IP Management Group connect to other groups and devices. Possible icons on this window are as follows: Icon Description Icon...
Page 42 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-18 Device Information Utilizing the Tool Tip Setting the mouse cursor over a line between two devices will display the connection speed between the two devices, as shown below. Figure 6-19 Port Speed Utilizing the Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in...
Page 43 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-20 Right-Clicking a Group Icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. •...
Page 44 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-22 Right-clicking a Commander Icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. •...
Page 45: Firmware Upgrade
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide • Property – To pop up a window to display the device information. Menu Bar The Single IP Management window contains a menu bar for device configurations, as seen below. Figure 6-26 Menu Bar of the Topology View File •...
Page 46: Snmp Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click Management > Single IP Management > Firmware Upgrade, as show below: Figure 6-29 Firmware Upgrade window Configuration File Backup/Restore This screen is used to upgrade configuration files from the Commander Switch to the Member Switch using a TFTP server.
Page 47: Snmp Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide information controlled by the on-board SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network. The Switch supports the SNMP versions 1, 2c, and 3. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 48: Snmp Traps Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click Management > SNMP Settings > SNMP Global Settings, as show below: Figure 6-32 SNMP Global Settings window The fields that can be configured are described below: Parameter Description SNMP State...
Page 49: Snmp View Table Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 6-34 SNMP Linkchange Traps Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select the starting and ending ports to use. State Use the drop-down menu to enable or disable the SNMP link change Trap.
Page 50: Snmp Community Table Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view being created. Subtree OID Type the Object Identifier (OID) Subtree for the view. The OID identifies an object tree (MIB tree) that will be included or excluded from access by an SNMP manager.
Page 51: Snmp Group Table Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide SNMP Group Table Settings An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous window. To view the following window, click Management > SNMP Settings > SNMP Group Table Settings, as show below: Figure 6-37 SNMP Group Table Settings window The fields that can be configured are described below:...
Page 52: Snmp User Table Settings
SNMP management private enterprise number as assigned by IANA (D-Link is 171). The fifth octet is 03 to indicate the rest is the MAC address of this device. The sixth to eleventh octets is the MAC address.
Page 53: Snmp Host Table Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide has been checked. This field will require the user to enter a password. SHA – Specify that the HMAC-SHA authentication protocol will be used. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked.
Page 54: Rmon Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click Management > SNMP Settings > SNMPv6 Host Table Settings, as show below: 6-41 SNMPv6 Host Table Settings The fields that can be configured are described below: Parameter Description Host IPv6 Address...
Page 55: Telnet Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide RMON Falling Alarm Trap Enable this option to use the RMON Falling Alarm Trap Feature. Click the Apply button to accept the changes made. Telnet Settings Users can configure Telnet Settings on the Switch. To view the following window, click Management >...
Page 56: Chapter 3 L2 Features
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 3 L2 Features VLAN QinQ Spanning Tree Link Aggregation L2 Multicast Control Multicast Filtering ERPS Settings LLDP NLB FDB Settings VLAN Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously.
Page 57 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide A VLAN is a collection of end nodes grouped by logic instead of physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are physically on the network.
Page 58 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The main characteristics of IEEE 802.1Q are as follows: • Assigns packets to VLANs by filtering. • Assumes the presence of a single global spanning tree. • Uses an explicit tagging scheme with one-level tagging.
Page 59 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-3 Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 60 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. Other 802.1Q compliant devices on the network to make packet-forwarding decisions can then use the VLAN information in the tag.
Page 61: Q Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide On port-based VLANs, NICs do not need to be able to identify 802.1Q tags in packet headers. NICs send and receive normal Ethernet packets. If the packet’s destination lies on the same segment, communications take place using normal Ethernet protocols.
Page 62 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-5 802.1Q VLAN Settings – Add/Edit VLAN Tab window The fields that can be configured are described below: Parameter Description Allow the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit VLAN tab.
Page 63 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-6 802.1Q VLAN Settings – Find VLAN Tab window Enter the VLAN ID number in the field offered and then click the Find button. You will be redirected to the VLAN List tab.
Page 64: V Protocol Vlan
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide the port as forbidden. Click the Apply button to accept the changes made. NOTE: The Switch supports up to 4k static VLAN entries. 802.1v Protocol VLAN 802.1v Protocol Group Settings The user can create Protocol VLAN groups and add protocols to that group.
Page 65: V Protocol Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: The Group name value should be less than 33 characters. 802.1v Protocol VLAN Settings The user can configure Protocol VLAN settings. The lower half of the table displays any previously created settings. To view the following window, click L2 Features >...
Page 66: Asymmetric Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Delete All button to remove all the entries listed. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry. Asymmetric VLAN Settings Shared VLAN Learning is a primary example of the requirement for Asymmetric VLANs.
Page 67: Gvrp Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Leave Time (100-100000) Enter the Leave Time value in milliseconds. Leave All Time (100- Enter the Leave All Time value in milliseconds. 100000) NNI BPDU Address Used to determine the BPDU protocol address for GVRP in service provide site. It can use 802.1d GVRP address, 802.1ad service provider GVRP address or a user defined multicast address.
Page 68: Private Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide GVRP The GARP VLAN Registration Protocol (GVRP) enables the port to dynamically become a member of a VLAN. GVRP is Disabled by default. Ingress Checking This drop-down menu allows the user to enable the port to compare the VID tag of an incoming packet with the port VLAN membership.
Page 69 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide port of the primary VLAN will behave as the tagged member of the secondary VLAN. A secondary VLAN cannot be specified with advertisement. Only the primary VLAN can be configured as a layer 3 interface. The private VLAN member port cannot be configured with the traffic segmentation function.
Page 70: Pvid Auto Assign Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Community. Secondary VLAN Name Enter a secondary VLAN name. Secondary VLAN List Enter a list of secondary VLAN ID. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry.
Page 71: Voice Vlan Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Voice VLAN Name The name of the voice VLAN. Voice VID (1-4094) The VLAN ID of the voice VLAN. Priority The priority of the voice VLAN, the range is 0 – 7. The default priority is 5. Aging Time (1-65535) The aging time to set, the range is 1 –...
Page 72: Voice Vlan Device
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide This page is used to configure the user-defined voice traffic’s OUI. The OUI is used to identify the voice traffic. There are a number of pre-defined OUIs. The user can further define the user-defined OUIs if needed. The user- defined OUI cannot be the same as the pre-defined OUI.
Page 73: Browse Vlan
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Refer to the following figure for an illustrated example. Figure 7-21 Example of VLAN Trunk Users can combine a number of VLAN ports together to create VLAN trunks. To view the following window, click L2 Features > VLAN > VLAN Trunk Settings, as show below: Figure 7-22 VLAN Trunk Settings window The fields that can be configured are described below: Parameter...
Page 74: Qinq
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. NOTE: The abbreviations used on this page are Tagged Port (T), Untagged Port (U) and Forbidden Port (F).
Page 75 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-25 QinQ example window In this example, the Service Provider Access Network switch (Provider edge switch) is the device creating and configuring Double VLANs. Both CEVLANs (Customer VLANs), 10 and 11, are tagged with the SPVID 100 on the Service Provider Access Network and therefore belong to one VLAN on the Service Provider’s network, thus being a member of two VLANs.
Page 76: Qinq Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide QinQ Settings This window is used to configure the Q-in-Q parameters. To view the following window, click L2 Features > QinQ > QinQ Settings, as show below: Figure 7-26 QinQ Settings Window The fields that can be configured are described below: Parameter Description...
Page 77: Spanning Tree
802.1Q-2005 MSTP. 802.1D-1998 STP will be familiar to most networking professionals. However, since 802.1D-2004 RSTP and 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1D-1998 STP, 802.1D-2004 RSTP, and 802.1Q-2005 MSTP.
Page 78 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Each switch utilizing the MSTP on a network will have a single MSTP configuration that will have the following three attributes: 1. A configuration name defined by an alphanumeric string of up to 32 characters (defined in the MST Configuration Identification window in the Configuration Name field).
Page 79: Stp Bridge Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide the topology to stabilize before transitioning to a forwarding state. In order to allow this rapid transition, the protocol introduces two new variables: the edge port and the point-to-point (P2P) port. Edge Port The edge port is a configurable designation used for a port that is directly connected to a segment where a loop cannot be created.
Page 80: Stp Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide MSTP - Select this parameter to set the Multiple Spanning Tree Protocol (MSTP) globally on the Switch. Forwarding BPDU This field can be Enabled or Disabled. When Enabled, it allows the forwarding of STP BPDU packets from other network devices.
Page 81 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-29 STP Port Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select the starting and ending ports to be configured. External Cost This defines a metric that indicates the relative cost of forwarding packets to the (0=Auto)
Page 82: Mst Configuration Identification
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide packets. If a BPDU packet is received, it automatically loses edge port status. Choosing the False parameter indicates that the port does not have edge port status. Alternatively, the Auto option is available. Restricted Role Use the drop-down menu to toggle Restricted Role between True and False.
Page 83: Mstp Port Information
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the following window, click L2 Features > Spanning Tree > STP Instance Settings, as show below: Figure 7-31STP Instance Settings window The fields that can be configured are described below: Parameter Description MSTI ID...
Page 84: Link Aggregation
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide occurs. A lower Internal cost represents a quicker transmission. Selecting 0 (zero) for this parameter will set the quickest route automatically and optimally for an interface. Priority Enter a value between 0 and 240 to set the priority for the port interface. A higher priority will designate the interface to forward packets first.
Page 85: Port Trunking Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide All of the ports in the group must be members of the same VLAN, and their STP status, static multicast, traffic control; traffic segmentation and 802.1p default priority configurations must be identical. Port locking, port mirroring and 802.1X must not be enabled on the trunk group.
Page 86: Lacp Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Active Ports Shows the ports that are currently forwarding packets. Click the Apply button to accept the changes made. Click the Clear All button to clear out all the information entered. Click the Add button to add a new entry based on the information entered.
Page 87: Fdb
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Static FDB Settings Unicast Static FDB Settings Users can set up static unicast forwarding on the Switch. To view the following window, click L2 Features > FDB > Static FDB Settings > Unicast Static FDB Settings, as show below: Figure 7-36 Unicast Static FDB Settings window The fields that can be configured are described below:...
Page 88: Mac Notification Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-37 Multicast Static FDB Settings window The fields that can be configured are described below: Parameter Description The VLAN ID of the VLAN the corresponding MAC address belongs to. Multicast MAC Address The static destination MAC address of the multicast packets.
Page 89: Mac Address Aging Time Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-38 MAC Notification Settings window The fields that can be configured are described below: Parameter Description State Enable or disable MAC notification globally on the Switch Interval (1-2147483647) The time in seconds between notifications. Value range to use is 1 to 2147483647. History Size (1-500) The maximum number of entries listed in the history log used for notification.
Page 90: Mac Address Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Time (10-1000000) forwarding table without being accessed (that is, how long a learned MAC Address is allowed to remain idle). To change this option, type in a different value representing the MAC address’ age-out time in seconds. The MAC Address Aging Time can be set to any value between 10 and 1000000 seconds.
Page 91: L2 Multicast Control
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-41 ARP & FDB Table window The fields that can be configured are described below: Parameter Description Port Select the port number to use for this configuration. MAC Address Enter the MAC address to use for this configuration.
Page 92 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-42 IGMP Snooping Settings window The fields that can be configured are described below: Parameter Description IGMP Snooping State Click to enable or disable the IGMP Snooping state. Max Learning Entry Enter the maximum learning entry value.
Page 93 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Fast Leave Enable or disable the IGMP snooping fast leave function. If enabled, the membership is immediately removed when the system receive the IGMP leave message. State If the state is enable, it allows the switch to be selected as a IGMP Querier (sends IGMP query packets).
Page 94: Igmp Snooping Rate Limit Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous window. IGMP Snooping Rate Limit Settings On this page the user can configure the IGMP snooping rate limit parameters.
Page 95: Igmp Router Port
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description VLAN Name Enter the VLAN name of the multicast group. VID List Enter the VID list or of the multicast group. IPv4 Address Enter the IPv4 address.
Page 96: Igmp Snooping Group
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: The abbreviations used on this page are Static Router Port (S), Dynamic Router Port (D) and Forbidden Router Port (F). IGMP Snooping Group Users can view the Switch’s IGMP Snooping Group Table. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch.
Page 97: Igmp Snooping Counter
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-50 IGMP Snooping Forwarding Table window The fields that can be configured are described below: Parameter Description VLAN Name The VLAN Name of the multicast group. VID List The VLAN ID list of the multicast group. Click the Find button to locate a specific entry based on the information entered.
Page 98: Igmp Host Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-52 Browse IGMP Snooping Counter window Click the Clear Counter button to clear all the information displayed in the fields. Click the Refresh button to refresh the display table so that new information will appear. Click the <<Back button to return to the previous window.
Page 99: Mld Snooping
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide MLD Snooping Multicast Listener Discovery (MLD) Snooping is an IPv6 function used similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data. Instead of flooding all ports on a selected VLAN with multicast traffic, MLD snooping will only forward multicast data to ports that wish to receive this data through the use of queries and reports produced by the requesting ports and the source of the multicast traffic.
Page 100: Mld Snooping Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide MLD Snooping Settings Users can configure the settings for MLD snooping. To view the following window, click L2 Features > L2 Multicast Control > MLD Snooping > MLD Snooping Settings, as show below: Figure 7-54 MLD Snooping Settings window The fields that can be configured are described below: Parameter...
Page 101 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Other Querier present interval - Amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the Querier. Last listener query count - Number of group-specific queries sent before the router assumes there are no local listeners of a group.
Page 102: Mld Snooping Rate Limit Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Forbidden Router Port This section is used to designate a range of ports as being not connected to multicast-enabled routers. This ensures that the forbidden router port will not propagate routing packets out. Dynamic Router Port Display router ports that have been dynamically configured.
Page 103: Mld Router Port
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-58 MLD Snooping Static Group Settings window The fields that can be configured are described below: Parameter Description VLAN Name The name of the VLAN on which the static group resides. VID List The ID of the VLAN on which the static group resides.
Page 104: Mld Snooping Group
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-60 MLD Router Port window Parameter Description Enter a VLAN ID. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. NOTE: The abbreviations used on this page are Static Router Port (S), Dynamic Router Port (D) and Forbidden Router Port (F).
Page 105: Mld Snooping Forwarding Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Clear All Data Driven button to delete all MLD snooping groups which is learned by the Data Driven feature of specified VLANs. MLD Snooping Forwarding Table This page displays the switch’s current MLD snooping forwarding table. It provides an easy way for user to check the list of ports that the multicast group comes from and specific sources that it will be forwarded to.
Page 106: Mld Host Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Port List Specify a list of ports to be displayed. Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. Click the Packet Statistics link to view the MLD Snooping Counter Settings for the specific entry.
Page 107: Multicast Vlan
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. Multicast VLAN In a switching environment, multiple VLANs may exist. Every time a multicast query passes through the Switch, the switch must forward separate different copies of the data to each VLAN on the system, which, in turn, increases data traffic and may clog up the traffic path.
Page 108: Igmp Snooping Multicast Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the Delete All button to remove all the entries listed. Click the View All button to display all the existing entries. Click the Delete button to remove the corresponding entry.
Page 109 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide forwarded on the multicast VLAN. None – If this is specified, the packet’s original priority is used. The default setting is None. Replace Priority Specify that the packet’s priority will be changed by the switch, based on the remap priority.
Page 110: Mld Multicast Group Profile Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous window.
Page 111: Mld Snooping Multicast Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-72 Multicast Group Profile Multicast Address Settings window The fields that can be configured are described below: Parameter Description Multicast Address List Enter the multicast address list. Click the Add button to add a new entry based on the information entered. Click the <<Back button to discard the changes made and return to the previous window.
Page 112 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Edit button to configure the MLD Snooping Multicast VLAN Settings for the specific entry. Click the Delete button to remove the specific entry. Click the Profile List link to configure the MLD Snooping Multicast VLAN Settings for the specific entry. After clicking the Edit button, the following page will appear: Figure 7-74 MLD Snooping Multicast VLAN Settings –...
Page 113: Multicast Filtering
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-75 MLD Snooping Multicast VLAN Group List Settings window The fields that can be configured are described below: Parameter Description Profile Name Use the drop-down menu to select the IGMP Snooping Multicast VLAN Group Profile name.
Page 114: Ipv4 Limited Multicast Range Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Delete button to remove the specific entry. After clicking the Group List link, the following page will appear: Figure 7-77 Multicast Address Group List Settings window The fields that can be configured are described below: Parameter Description Multicast Address List...
Page 115: Ipv4 Max Multicast Group Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. IPv4 Max Multicast Group Settings Users can configure the ports and VLANs on the switch that will be a part of the maximum filter group, up to a maximum of 1024.
Page 116: Ipv6 Limited Multicast Range Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-80 IPv4 Multicast Profile Settings window The fields that can be configured are described below: Parameter Description Profile ID (1-24) Enter a Profile ID between 1 and 24. Profile Name Enter a name for the IP Multicast Profile.
Page 117: Ipv6 Max Multicast Group Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-82 IPv6 Limited Multicast Range Settings window The fields that can be configured are described below: Parameter Description Ports / VID List Select the appropriate port(s) or VLAN IDs used for the configuration here. Access Assign access permissions to the ports selected.
Page 118: Erps Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. Multicast Filtering Mode Users can configure the multicast filtering mode.
Page 119 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide RPL (Ring Protection Link) – Link designated by mechanism that is blocked during Idle state to prevent loop on Bridged ring RPL Owner – Node connected to RPL that blocks traffic on RPL during Idle state and unblocks during Protected state R-APS (Ring –...
Page 120 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-86 ERPS Settings - Detail Information window Click on the Edit button to re-configure the specific entry. Click on the <<Back button to return to the ERPS settings page. After click the Edit button, the following window will appear: Figure 7-87 ERPS Settings - Edit Detail Information window The fields that can be configured or displayed are described below:...
Page 121: Lldp
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Operational East Port Here the operational east port value will be displayed. Admin RPL Port Specifies the RPL port used. Options to choose from are West Port, East Port, and None.
Page 122: Lldp Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide LLDP LLDP Global Settings On this page the user can configure the LLDP global parameters. To view the following window, click L2 Features > LLDP > LLDP > LLDP Global Settings, as show below: Figure 7-89 LLDP Global Settings window The fields that can be configured are described below: Parameter...
Page 123: Lldp Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide LLDP Port Settings On this page the user can configure the LLDP port parameters. To view the following window, click L2 Features > LLDP > LLDP > LLDP Port Settings, as show below: Figure 7-90 LLDP Port Settings window The fields that can be configured are described below: Parameter...
Page 124: Lldp Management Address List
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide LLDP Management Address List On this page the user can view the LLDP management address list. To view the following window, click L2 Features > LLDP > LLDP > LLDP management Address List, as show below: Figure 7-91 LLDP Management Address List window The fields that can be configured are described below:...
Page 125: Lldp Dot1 Tlvs Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-92 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select the port range to use for this configuration. Port Description Use the drop-down menu to enable or disable the Port Description option.
Page 126: Lldp Dot3 Tlvs Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-93 LLDP Dot1 TLVs Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Use the drop-down menu to select the port range to use for this configuration. Dot1 TLV PVID Use the drop-down menu to enable or disable and configure the Dot1 TLV PVID option.
Page 127: Lldp Statistic System
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-94 LLDP Dot3 TLVs Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Use the drop-down menu to select the port range to use for this configuration. MAC / PHY This TLV optional data type indicates that the LLDP agent should transmit the Configuration Status...
Page 128: Lldp Local Port Information
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-95 LLDP Statistics System window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select a port. Click the Find button to locate a specific entry based on the information entered. LLDP Local Port Information The LLDP Local Port Information page displays the information on a per port basis currently available for populating outbound LLDP advertisements in the local port brief table shown below.
Page 129: Lldp Remote Port Information
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 7-97 LLDP Local Port Information – Show Normal window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port Use the drop-down menu to select a port.
Page 130: Nlb Fdb Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Port Use the drop-down menu to select a port. Click the Find button to locate a specific entry based on the information entered. To view the normal LLDP Remote Port information page per port, click the Show Normal button. After clicking the Show Normal button, the following page will appear: Figure 7-100 LLDP Remote Port Information –...
Page 131: Chapter 4 L3 Features
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 4 L3 Features IPv4 Static/Default Route Settings IPv4 Route Table IPv6 Static/Default Route Settings IPv6 Route Table IP Forwarding Table VRRP IPv4 Static/Default Route Settings The Switch supports static routing for IPv4 formatted addressing. Users can create up to 512 static route entries for IPv4.
Page 132: Ipv4 Route Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide IPv4 Route Table The IP routing table stores all the external routes information of the Switch. This window is used to display all the external route information on the switch. To view the following window, click L3 Features >...
Page 133: Ip Forwarding Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide backup routes according to the order learnt by the routing table until route success. This field represents the backup state for the IPv6 configured. This field may be Primary or Backup. Click the Apply button to accept the changes made.
Page 134: Vrrp Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide VRRP Global Settings This window is used to configure the VRRP Global settings. To view the following window, click L3 Features > VRRP > VRRP Global Settings, as show below: Figure 8-5 VRRP Global Settings window The fields that can be configured are described below: Parameter...
Page 135 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Interval (1-255) Preempt Mode Use the drop-down menu to determine the behavior of backup routers within the VRRP group by controlling whether a higher priority backup router will preempt a lower priority Master router.
Page 136: Vrrp Authentication Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Advertisement Enter the interval between sending advertisement messages. Interval (1-255) Preempt Mode Use the drop-down menu to determine the behavior of backup routers within the VRRP group by controlling whether a higher priority backup router will preempt a lower priority Master router.
Page 137 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 8-10 VRRP Authentication Settings - Edit window The fields that can be configured are described below: Parameter Description Authentication Type Use the drop-down menu to select the VRRP’s authentication type. None - The VRRP protocol exchanges will not be authenticated.
Page 138: Chapter 5 Qos
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 5 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing.
Page 139: 802.1P Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Understanding QoS The Switch supports 802.1p priority queuing. The Switch has eight priority queues. These priority queues are numbered from 7 (Class 7) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows: •...
Page 140: P User Priority Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 9-2 Default Priority Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select the starting and ending ports to use. Priority Use the drop-down menu to select a value from 0 to 7.
Page 141: Bandwidth Control
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. Bandwidth Control Settings The Effective RX/TX Rate refers to the actual bandwidth of the switch port, if it does not match the configured rate. This usually means that the bandwidth has been assigned by a higher priority resource, such as a RADIUS server.
Page 142: Queue Bandwidth Control Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Effective TX If a RADIUS server has assigned the TX bandwidth, then it will be the effective TX bandwidth. The authentication with the RADIUS sever can be per port or per user. For per user authentication, there may be multiple TX bandwidths assigned if there are multiple users attached to this specific port.
Page 143: Traffic Control Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Traffic Control Settings On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious end station on the network or a malfunctioning device, such as a faulty network card.
Page 144 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description From Port / To Port Use the drop-down menu to select the port range to use for this configuration. Action Select the method of traffic control from the drop-down menu. The choices are: Drop –...
Page 145: Dscp
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: Traffic Control cannot be implemented on ports that are set for Link Aggregation (Port Trunking). NOTE: Ports that are in the Shutdown Forever mode will be seen as Discarding in Spanning Tree windows and implementations though these ports will still be forwarding BPDUs to the Switch’s CPU.
Page 146: Dscp Map Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Apply button to accept the changes made. DSCP Map Settings The mapping of DSCP to queue will be used to determine the priority of the packet (which will be then used to determine the scheduling queue) when the port is in DSCP trust state.
Page 147: Hol Blocking Prevention
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide DSCP Map Use the drop-down menu to select one of two options: DSCP Priority – Specifies a list of DSCP values to be mapped to a specific priority. DSCP DSCP – Specifies a list of DSCP value to be mapped to a specific DSCP. DSCP List (0-63) Enter a DSCP List value.
Page 148: Qos Scheduling Mechanism
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 9-11 QoS Scheduling window The following parameters can be configured: Parameter Description From Port / To Port Enter the port or port list you wish to configure. Class ID Select the Class ID, from 0-7 to configure for the QoS parameters.
Page 149 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 9-12 QoS Scheduling Mechanism The following parameters can be configured: Parameter Description From Port / To Port Enter the port or port list you wish to configure. Scheduling Mechanism Strict –...
Page 150: Chapter 6 Acl
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 6 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Egress Access Profile List Egress ACL Flow Meter ACL Configuration Wizard The ACL Configuration Wizard will aid the user in the creation of access profiles and ACL Rules automatically by simply inputting the address or service type and the action needed.
Page 151: Access Profile List
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide IPv6 – Selecting this option will allow the user to enter a range of IPv6 addresses for this rule. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 152: Add An Ethernet Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Add/View Rules button to view or add ACL rules within the specified profile ID. Click the Delete button to remove the specific entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. There are four Add Access Profile windows;...
Page 153 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide header. Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each frame's header. Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's header.
Page 154 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-6 Add Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Type in a unique identifier number for this access. This value can be set from 1 to 256.
Page 155: Adding An Ipv4 Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide when this access rule will be implemented on the Switch. Counter Here the user can select the counter. By checking the counter, the administrator can see how many times that the rule was hit. Ports When a range of ports is to be configured, the Auto Assign check box MUST be ticked in the Access ID field of this window.
Page 156 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-6) Enter a unique identifier number for this profile set. This value can be set from 1 to Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content.
Page 157 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value.
Page 158 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-10 Access Rule List window (IPv4 ACL) Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous window. Click the Show Details button to view more information about the specific rule created.
Page 159: Adding An Ipv6 Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual.
Page 160 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-13 Add ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-6) Enter a unique identifier number for this profile set. This value can be set from 1 to Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content.
Page 161 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Select ICMP to instruct the Switch to examine the Internet Control Message ICMP Protocol (ICMP) field in each frame's header. IPv6 Source Mask The user may specify an IP address mask for the source IPv6 address by ticking the corresponding check box and entering the IP address mask.
Page 162 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-16 Add Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Type in a unique identifier number for this access. This value can be set from 1 to 256.
Page 163: Adding A Packet Content Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window. This will set specific times when this access rule will be implemented on the Switch.
Page 164 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-18 Add ACL Profile (Packet Content ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-6) Enter a unique identifier number for this profile set. This value can be set from 1 to 6. Select ACL Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet Type...
Page 165 However, ARP is vulnerable as it can be easily spoofed and utilized to attack a LAN (i.e. an ARP spoofing attack). For a more detailed explanation on how ARP protocol works and how to employ D-Link’s unique Packet Content ACL to prevent ARP spoofing attack, please see Appendix E at the end of this manual.
Page 166 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-21 Add Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Type in a unique identifier number for this access. This value can be set from 1 to 256.
Page 167: Cpu Access Profile List
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide (0-7) value. If used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window.
Page 168: Adding A Cpu Ethernet Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-23 CPU Access Profile List window The fields that can be configured are described below: Parameter Description CPU Interface Filtering Click to enable or disable the CPU interface filtering state. State Click the Apply button to accept the changes made.
Page 169 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-24 Add CPU ACL Profile (Ethernet ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Enter a unique identifier number for this profile set. This value can be set from 1 to 5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
Page 170 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the Show Details button, the following page will appear: Figure 10-25 CPU Access Profile Detail Information (Ethernet ACL) Click the Show All Profiles button to navigate back to the CPU ACL Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 10-26 CPU Access Rule List (Ethernet ACL) Click the Add Rule button to create a new CPU ACL rule in this profile.
Page 171: Adding A Cpu Ipv4 Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 172 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-29 Add CPU ACL Profile (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Enter a unique identifier number for this profile set. This value can be set from 1 to 5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
Page 173 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value. Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header.
Page 174 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-31 CPU Access Rule List (IPv4 ACL) Click the Add Rule button to create a new CPU ACL rule in this profile. Click the <<Back button to return to the previous window. Click the Show Details button to view more information about the specific rule created.
Page 175: Adding A Cpu Ipv6 Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the <<Back button to discard the changes made and return to the previous window. After clicking the Show Details button in the CPU Access Rule List, the following page will appear: Figure 10-33 CPU Access Rule Detail Information (IPv4 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List.
Page 176 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide packet content mask. This will change the menu according to the requirements for the type of profile. Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header.
Page 177 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-37 Add CPU Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Enter a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 178: Adding A Cpu Packet Content Acl Profile
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Adding a CPU Packet Content ACL Profile The window shown below is the Add CPU ACL Profile window for Packet Content. To use specific filtering masks in this ACL profile, click the packet filtering mask field to highlight it red. This will add more filed to the mask. After clicking the Add CPU ACL Profile button, the following page will appear: Figure 10-39 Add CPU ACL Profile (Packet Content ACL) The fields that can be configured are described below:...
Page 179 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide 64-79 – Enter a value in hex form to mask the packet from byte 64 to byte 79. Click the Select button to select a CPU ACL type. Click the Create button to create a profile. Click the <<Back button to discard the changes made and return to the previous window.
Page 180 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-42 Add CPU Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 181: Acl Finder
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-43 CPU Access Rule Detail Information (Packet Content ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. ACL Finder The ACL rule finder helps you to identify any rules that have been assigned to a specific port and edit existing rules quickly.
Page 182 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide trTCM, the packet flow is marked green if it doesn’t exceed the CIR and yellow if it does. The configured rate of the CIR must not exceed that of the PIR. The CIR can also be configured for unexpected packet bursts using the CBS and PBS fields.
Page 183 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description Profile ID Use the drop-down menu to select it and enter the Profile ID for the flow meter. Profile Name Use the drop-down menu to select it and enter the Profile Name for the flow meter. Access ID (1-256) Here the user can enter the Access ID for the flow meter.
Page 184: Egress Access Profile List
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide packets with a high precedence. trTCM – Specify the “two-rate three-color mode.” CIR – Specify the Committed information Rate. The unit is Kbps. CIR should always be equal or less than PIR. PIR –...
Page 185 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-48 Egress Access Profile List window Click the Add Egress ACL button to add an entry to the Egress Access Profile List. Click the Delete All button to remove all access profiles from this table. Click the Show Details button to display the information of the specific profile ID entry.
Page 186 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-49 Add Egress ACL Profile window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-4) Enter a unique identifier number for this profile set. This value can be set from 1 to 4. Profile Name Enter a profile name for the profile created.
Page 187 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the Show Details button, the following page will appear: Figure 10-50 Egress Access Profile Detail Information window (Ethernet ACL) Click the Show All Profiles button to navigate back to the Access Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 10-51 Egress Access Rule List window (Ethernet ACL) Click the Add Rule button to create a new ACL rule in this profile.
Page 188 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description Access ID (1-128) Type in a unique identifier number for this access. This value can be set from 1 to 128. Auto Assign – Ticking this check box will instruct the Switch to automatically assign an Access ID for the rule being created.
Page 189 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Adding an IPv4 ACL Profile The window shown below is the Add Egress ACL Profile window for IPv4. To use specific filtering masks in this egress ACL profile, click the packet filtering mask field to highlight it red. This will add more filed to the mask. After clicking the Add Egress ACL button, the following page will appear: Figure 10-54 Add Egress ACL Profile window (IPv4 ACL) The fields that can be configured are described below:...
Page 190 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Mask Protocol Selecting this option instructs the Switch to examine the protocol type value in each frame's header. Then the user must specify what protocol(s) to include according to the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header.
Page 191 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Show All Profiles button to navigate back to the Access Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 10-56 Egress Access Rule List window (IPv4 ACL) Click the Add Rule button to create a new ACL rule in this profile.
Page 192 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 193 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-59 Add Egress ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-4) Enter a unique identifier number for this profile set. This value can be set from 1 to Profile Name Enter a profile name for the profile created.
Page 194 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide 255.255.255.255. IPv6 Destination Mask The user may specify an IP address mask for the destination IPv6 address by ticking the corresponding check box and entering the IP address mask, e.g. 255.255.255.255.
Page 195 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-62 Add Egress Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Type in a unique identifier number for this access. This value can be set from 1 to 128.
Page 196: Egress Acl Flow Meter
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide error message and the access rule will not be configured. Ticking the All Ports check box will denote all ports on the Switch. Port Group ID Specify the port group ID to apply to the access rule. Port Group Name Specify the port group name to apply to the access rule.
Page 197 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 10-65 Egress ACL Flow Meter Configuration window The fields that can be configured are described below: Parameter Description Profile ID (1-4) Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name for the flow meter.
Page 198 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide using this parameter and entering the DSCP value to replace. Counter – Use this parameter to enable or disable the packet counter for the specified ACL entry in the green flow. Exceed –...
Page 199: Chapter 7 Security
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 7 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) MAC-based Access Control (MAC) Compound Authentication Port Security ARP Spoofing Prevention Settings BPDU Attack Protection Loopback Detection Settings Traffic Segmentation Settings NetBIOS Filtering Settings DHCP Server Screening Access Authentication Control SSL Settings...
Page 200 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch).
Page 201 Figure 11-6 The 802.1X Authentication Process The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 202: X Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Host-Based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device that required access to the LAN.
Page 203: X Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X authenticator port settings. To view this window, click Security > 802.1X > 802.1X Port Settings as shown below: Figure 11-10 802.1X Port Settings The fields that can be configured are described below: Parameter Description...
Page 204: X User Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide client. The default setting is 30 seconds. ReAuthPeriod (1-65535) A constant that defines a nonzero number of seconds between periodic re- authentication of the client. The default setting is 3600 seconds. ReAuthentication Determines whether regular re-authentication will take place on this port.
Page 205: Guest Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-11 802.1X User Settings window The fields that can be configured are described below: Parameter Description 802.1X User The user can enter an 802.1X user’s username in here. Password The user can enter an 802.1X user’s password in here.
Page 206: Authenticator State
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide 2. A port cannot be a member of a Guest VLAN and a static VLAN simultaneously. 3. Once a client has been accepted into the target VLAN, it can no longer access the Guest VLAN. Remember, to set an 802.1X guest VLAN, the user must first configure a normal VLAN, which can be enabled here for guest VLAN status.
Page 207: Authenticator Statistics
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Authenticator Statistics This window is used to display the authenticator statistics information. To view this window, click Security > 802.1X > Authenticator Statistics as shown below: Figure 11-15 Authenticator Statistics window The fields that can be configured are described below: Parameter Description...
Page 208: Authenticator Diagnostics
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-16 Authenticator Session Statistics window The fields that can be configured are described below: Parameter Description Time Interval Use the drop-down menu to select the interval. Click the OK button to accept the changes made. NOTE: The user must first globally enable Authentication Mode in the 802.1X Global Settings window before initializing ports.
Page 209 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-17 Authenticator Diagnostics window NOTE: The user must first globally enable Authentication Mode in the 802.1X Global Settings window before initializing ports. Information in this window cannot be viewed before enabling the authentication mode for either Port-based or MAC-based.
Page 210 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-19 Initialize Port(s) – MAC-based window The fields that can be configured are described below: Parameter Description From Port / To Port Select a range of ports to be displayed. MAC Address Tick the check box and enter the authenticated MAC address of the client connected to the corresponding port.
Page 211: Radius
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: The user must first globally enable Authentication Mode in the 802.1X Global Settings window before initializing ports. Information in this window cannot be viewed before enabling the authentication mode for either Port-based or MAC-based. RADIUS Authentication RADIUS Server Settings The RADIUS feature of the Switch allows the user to facilitate centralized user administration as well as providing...
Page 212: Radius Accounting Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide RADIUS Accounting Settings This window is used to configure the state of the specified RADIUS accounting service. To view this window, click Security > RADIUS > RADIUS Accounting Settings as shown below: Figure 11-23 RADIUS Accounting Settings window The fields that can be configured are described below: Parameter...
Page 213 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-24 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be configured are described below: Parameter Description...
Page 214: Radius Account Client
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide this server. AccessResponses The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or known types are not included as malformed access responses.
Page 215: Ip-Mac-Port Binding (Impb)
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be configured are described below: Parameter Description ServerIndex...
Page 216: Impb Global Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide IMPB Global Settings Users can enable or disable the Trap/Log State and DHCP Snoop state on the Switch. The Trap/Log field will enable and disable the sending of trap/log messages for IP-MAC-port binding. When enabled, the Switch will send a trap message to the SNMP agent and the Switch log when an ARP packet is received that doesn’t match the IP- MAC-port binding configuration set on the Switch.
Page 217 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-27 IMPB Port Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select a range of ports to set for IP-MAC-port binding. ARP Inspection When the ARP inspection function is enabled, the legal ARP packets are forwarded, while the illegal packets are dropped.
Page 218: Impb Entry Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide IMPB Entry Settings This window is used to create static IP-MAC-binding port entries and view all IMPB entries on the Switch. To view this window, click Security > IP-MAC-Port Binding (IMPB) > IMPB Entry Settings as shown below: Figure 11-28 IMPB Entry Settings window The fields that can be configured are described below: Parameter...
Page 219: Dhcp Snooping
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the View All button to display all the existing entries. Click the Delete All button to remove all the entries listed. DHCP Snooping DHCP Snooping Maximum Entry Settings Users can configure the maximum DHCP snooping entry for ports on this page. To view this window, click Security >...
Page 220: Mac-Based Access Control (Mac)
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-31 DHCP Snooping Entry window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port Use the drop-down menu to select the desired port. Ports Specify the ports for which to view DHCP snooping entries.
Page 221 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-32 MAC-based Access Control Settings window The fields that can be configured are described below: Parameter Description MAC-based Access Toggle to globally enable or disable the MAC-based access control function on the Control State Switch.
Page 222 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Member Ports Enter the list of ports that have been configured for the Guest VLAN. From Port / To Port Use the drop-down menus to select a range of ports to be configured for MAC-based access control.
Page 223: Compound Authentication
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-34 MAC-based Access Control Local Settings – Edit by Name window To change the selected MAC address’ VID value, the user can click the Edit by ID button. Figure 11-35 MAC-based Access Control Local Settings – Edit by ID window Click the Apply button to accept the changes made.
Page 224: Compound Authentication Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Compound Authentication Settings Users can configure Authorization Network State Settings and compound authentication methods for a port or ports on the Switch. To view this window, click Security > Compound Authentication > Compound Authentication Settings as shown below: Figure 11-37 Compound Authentication Settings window The fields that can be configured are described below:...
Page 225: Compound Authentication Guest Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide on a port at the same time. In Any (MAC, 802.1X, or CP) mode, whether an individual security module is active on a port depends on its system state. 802.1X+IMPB - 802.1X will be verified first, and then IMPB will be verified. Both authentication methods need to be passed.
Page 226: Port Security
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Port Security Port Security Settings A given port’s (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table cannot be changed once the port lock is enabled. The port can be locked by changing the Admin State drop-down menu to Enabled and clicking Apply.
Page 227: Port Security Vlan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide DeleteOnReset – The locked addresses will not age out until the Switch has been reset or rebooted. Max Learning Specify the maximum value of port security entries that can be learned on this port. Address (0-3072) Click the Apply button to accept the changes made for each individual section.
Page 228: Arp Spoofing Prevention Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Max Learning Specify the maximum number of port-security entries that can be learned by this Address VLAN. Tick the No Limit check box to have unlimited number of port security entries that can be learned by the VLAN.
Page 229: Bpdu Attack Protection
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-43 ARP Spoofing Prevention Settings window The fields that can be configured are described below: Parameter Description Gateway IP Address Enter the gateway IP address to help prevent ARP Spoofing. Gateway MAC Address Enter the gateway MAC address to help prevent ARP Spoofing.
Page 230: Loopback Detection Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-44 BPDU Attack Protection window The fields that can be configured are described below: Parameter Description BPDU Attack Click the radio buttons to enable or disable the BPDU Attack Protection state. Protection State Trap State Specify when a trap will be sent.
Page 231: Traffic Segmentation Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Loopback Detection port will restart (change to normal state) when the Loopback Detection Recover Time times out. The Loopback Detection function can be implemented on a range of ports at a time. The user may enable or disable this function using the drop-down menu.
Page 232: Netbios Filtering Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view this window, click Security > Traffic Segmentation Settings as shown below: Figure 11-46 Traffic Segmentation Settings window The fields that can be configured are described below: Parameter Description Port List Enter a list of ports to be included in the traffic segmentation setup.
Page 233: Dhcp Server Screening
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-47 NetBIOS Filtering Settings window The fields that can be configured are described below: Parameter Description NetBIOS Filtering Ports Select the appropriate port to include in the NetBIOS filtering configuration. Extensive NetBIOS Select the appropriate port to include in the Extensive NetBIOS filtering Filtering Ports...
Page 234: Dhcp Offer Permit Entry Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-48 DHCP Server Screening Port Settings window The fields that can be configured are described below: Parameter Description DHCP Server Trap Log Click to enable or disable filtering DHCP server trap and log. State Illegal Server Log Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30...
Page 235: Access Authentication Control
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description Server IP Address The IP address of the DHCP server to be permitted. Client’s MAC Address The MAC address of the DHCP client. Ports The port numbers of the filter DHCP server. Tick the All Ports check box to include all the ports on this switch for this configuration.
Page 236: Enable Admin
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide listed for authentication. If the first technique goes through its Authentication Server Hosts and no authentication is returned, the Switch will then go to the next technique listed in the server group for authentication, until the authentication has been verified or denied, or the list is exhausted.
Page 237: Authentication Policy Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Authentication Policy Settings Users can enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login. To view this window, click Security >...
Page 238: Authentication Server Group Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide (Command Line Interface) application, the Telnet application, SSH, and the Web (HTTP) application. Login Method List Using the drop-down menu, configure an application for normal login on the user level, utilizing a previously configured method list.
Page 239: Authentication Server Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-55 Authentication Server Group Settings – Edit Server Group window To add an Authentication Server Host to the list, enter its name in the Group Name field, IP address in the IP Address field, use the drop-down menu to choose the Protocol associated with the IP address of the Authentication Server Host, and then click Add to add this Authentication Server Host to the group.
Page 240: Login Method Lists Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description IP Address The IP address of the remote server host to add. Protocol The protocol used by the server host. The user may choose one of the following: TACACS - Enter this parameter if the server host utilizes the TACACS protocol.
Page 241: Enable Method Lists Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the Delete button corresponding to the entry desired to be deleted. To modify a Login Method List, click on its corresponding Edit button.
Page 242: Local Enable Password Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-58 Enable method Lists Settings window To delete an Enable Method List defined by the user, click the Delete button corresponding to the entry desired to be deleted. To modify an Enable Method List, click on its corresponding Edit button. The fields that can be configured are described below: Parameter Description...
Page 243: Ssl Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Old Local Enable If a password was previously configured for this entry, enter it here in order to change Password it to a new password New Local Enable...
Page 244 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Users can download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a data record used for authenticating devices on the network. It contains information on the owner, keys for authentication and digital signatures.
Page 245: Ssh
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide suite. This field is Enabled by default. Click the Apply button to accept the changes made. To download SSL certificates, configure the parameters in the SSL Certificate Download section described below. Parameter Description Server IP Address...
Page 246: Ssh Authentication Method And Algorithm Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-61 SSH Settings window The fields that can be configured are described below: Parameter Description SSH Server State Use the radio buttons to enable or disable SSH on the Switch. The default is Disabled.
Page 247 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured for SSH Authentication Mode are described below: Parameter Description Password This may be enabled or disabled to choose if the administrator wishes to use a locally configured password for authentication on the Switch.
Page 248: Ssh User Authentication List
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description HMAC-RSA Use the check box to enable or disable the HMAC (Hash for Message Authentication Code) mechanism utilizing the RSA encryption algorithm. The default is enabled. HMAC-DSA Use the check box to enable or disable the HMAC (Hash for Message Authentication Code) mechanism utilizing the Digital Signature Algorithm (DSA) encryption.
Page 249: Trusted Host Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Trusted Host Settings Up to thirty trusted host secure IP addresses or ranges may be configured and used for remote Switch management. It should be noted that if one or more trusted hosts are enabled, the Switch will immediately accept remote instructions from only the specified IP address or addresses.
Page 250 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide mode, when the Switch either (a) receives too many packets to process or (b) exerts too much memory, it will enter the Exhausted mode. When in this mode, the Switch will drop all ARP and IP broadcast packets and packets from un-trusted IP addresses for a calculated time interval.
Page 251: Captive Portal (Cp)
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-66 Safeguard Engine Settings window The fields that can be configured are described below: Parameter Description Safeguard Engine Use the radio button to globally enable or disable Safeguard Engine settings for the State Switch.
Page 252 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-67 Global Configuration window The fields that can be configured or displayed are described below: Parameter Description CP Global State Click the radio buttons to enable or disable the CP global state. CP Global Display the status of the CP operational status.
Page 253 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-68 CP configuration - CP Summary window The fields that can be configured or displayed are described below: Parameter Description CP Configuration Enter a name of CP configuration. Configuration Display the captive portal ID and name.
Page 254 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-69 CP Configuration - Edit window The fields that can be configured are described below: Parameter Description Enable Captive Portal Click the radio buttons to enable or disable the CP configuration. Configuration Name Enter to modify the configuration name.
Page 255 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Max Total Enter the maximum sum number of bytes the user is allowed to transmit and receive. After this limit has been reached the user will be disconnected. User Group When Local or RADIUS is selected in Verification Mode, a user group needs to be assigned.
Page 256 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide background. Alternatively, click the ... button to display the available images. Click the image to select it. To specify that no background image is to be used, select (No Selection) from the drop-down menu. Branding Image Use the drop-down menu to select the name of the image file to display on the top left corner of the page.
Page 257 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Password Label Enter the text to display next to the password text box. Button Label Enter the text to display on the button for users to click and connect to the network. Acceptance Use Enter the text to display in the Acceptance Use Policy text box.
Page 258 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Clear button to wipe all the configurations and set back to the default settings. Click the Preview button to view the result of the web page. Select Logout Page from the drop-down menu on the top of the page to see the following page: Figure 11-73 CP Configuration –...
Page 259: Local User
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-74 CP Configuration – Customize window (Logout Success Page) The fields that can be displayed or configured are described below: Parameter Description Background Image Display the name of the current background image on the Logout Success Page. Branding Image Display the name of the current branding image on the Logout Success Page.
Page 260 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-75 Local User - Summary window Click the Add button to create a new user to the local database. Tick the corresponding check box, and click the Delete button to remove the specific entry. Click the Delete All button to remove all the entries listed.
Page 261 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide User Group Assign the user to at least one User Group. To assign the user to more than one group, press the Ctrl key and click each group. Session Timeout Enter the time in seconds that allows the user to remain connected to the network.
Page 262: Interface Association
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide (bytes/sec) portal. Max Down Rate Enter the maximum receiving speed, in bytes per second, when using the captive (bytes/sec) portal. Max Receive (bytes) Enter the maximum number of bytes that the user is allowed to receive when using the captive portal.
Page 263 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-79 CP Global Status window The fields that can be displayed are described below: Parameter Description CP Global Display the status of the CP operational status. Operational Status CP Global Disable When captive portal is disabled, the field displays the reason being disabled.
Page 264: Interface Status
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-80 CP Activation and Activity Status window Use the drop-down menu to select a CP to see its activation and activity status. Click Block to prevent users from gaining access to the network through the selected captive portal. If the Blocked Status of the selected captive portal is Blocked, click Unblock to allow access to the network through the captive portal.
Page 265: Client Connection Status
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-82 Interface Capability Status window The fields that can be displayed are described below: Parameter Description Bytes Received Display whether the interface supports displaying the number of bytes received from Counter each client.
Page 266 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-83 Client Summary window The fields that can be displayed are described below: Parameter Description MAC Address Display the MAC address of the wired client (if applicable). If the MAC address is marked with an asterisk (*), the authenticated client is authenticated by a peer switch.
Page 267 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-84 Client Connection Status window The fields that can be displayed are described below: Parameter Description Client IP Address Display the IP address of the wired client (if applicable). User Name Display the user name (or Guest ID) of the connected client.
Page 268 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-85 Client Statistics window Use the drop-down menu to select the MAC address of the associated client to view the statistical information. After clicking the Interface - Client Status tab, the following page will appear: Figure 11-86 Interface - Client Status window Use the drop-down menu to select an interface to see the information about the clients connected to a CP on this interface.
Page 269: Snmp Trap Configuration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 11-87 CP-Client Status window Use the drop-down menu to select a CP to see the information of the clients connected to the CP. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. SNMP Trap Configuration This window is used to configure whether or not SNMP traps are sent from the Captive Portal and to specify captive portal events that will generate a trap.
Page 270 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide...
Page 271: Chapter 8 Network Application
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 8 Network Application DHCP SNTP Flash File System Settings DHCP DHCP Relay DHCP Relay Global Settings This window is used to enable and configure DHCP Relay Global Settings. The relay hops count limit allows the maximum number of hops (routers) that the DHCP messages can be relayed through to be set.
Page 272 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide configured), to the packet. Once the option 82 information has been added to the packet it is sent on to the DHCP server. When the DHCP server receives the packet, if the server is capable of option 82, it can implement policies like restricting the number of IP addresses that can be assigned to a single remote ID or circuit ID.
Page 273: Dhcp Relay Interface Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: If the Switch receives a packet that contains the option 82 field from a DHCP client and the information-checking feature is enabled, the Switch drops the packet because it is invalid. However, in some instances, users may configure a client with the option 82 field.
Page 274: Dhcp Relay Option 60 Server Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide this window. Properly configured settings will be displayed in the DHCP Relay Interface Table at the bottom of the window, once the user clicks the Apply button. The user may add up to four server IPs per IP interface on the Switch.
Page 275: Dhcp Relay Option 61 Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide This option decides whether the DHCP Relay will process the DHCP option 60 or not To view this window, click Network Application > DHCP > DHCP Relay > DHCP Relay Option 60 Settings as shown below: Figure 12-6 DHCP Relay Option 60 Settings window The fields that can be configured are described below:...
Page 276: Dhcp Local Relay Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 12-7 DHCP Relay Option 61 Settings window The fields that can be configured are described below: Parameter Description DHCP Relay Option Here the user can select the DHCP Relay Option 61 default action. 61 Default Drop –...
Page 277: Sntp
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide State VLAN Name This is the VLAN Name that identifies the VLAN the user wishes to apply the DHCP Local Relay operation. State Enable or disable the configure DHCP Local Relay for VLAN state. Click the Apply button to accept the changes made for each individual section.
Page 278 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 12-10 Time Zone Settings window The fields that can be configured are described below: Parameter Description Daylight Saving Time Use this drop-down menu to enable or disable the DST Settings. State Daylight Saving Time Use this drop-down menu to specify the amount of time that will constitute your...
Page 279: Flash File System Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description DST Annual Settings Using annual mode will enable DST seasonal time adjustment. Annual mode requires that the DST beginning and ending date be specified concisely. For example, specify to begin DST on April 3 and end DST on October 14. From: Month Enter the month DST will start on, each year.
Page 280 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 12-12 Flash File System Setting – Search for Drive window Click the Previous button to return to the previous window. Click the Create Directory to create a new directory within the file system of the switch. Click the Copy button to copy a specific file to the switch.
Page 281: Chapter 9 Oam
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 9 Ethernet OAM Cable Diagnostics CFM Settings This window is used to configure the CFM parameters. To view this window, click OAM > CFM > CFM Settings, as shown below: Figure 13-1 CFM Settings Window The fields that can be configured are described below: Parameter...
Page 282 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry. NOTE: The MD Name value should be less than 22 characters. To add a maintenance association (MA), click on the Add MA button. After clicking the Add MA button, the following page will appear: Figure 13-2 CFM MA Settings Window The fields that can be configured are described below:...
Page 283 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Auto - MIPs can always be created on any ports in this MA, if that port is not configured with a MEP of that MA. Explicit - MIP can be created on any ports in this MA, only if the next existent lower level has a MEP configured on that port, and that port is not configured with a MEP of this MA.
Page 284 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description MEP Name MEP name. It is unique among all MEPs configured on the device. MEP ID (1-8191) MEP MEPID. It should be configured in the MA’s MEP ID list. Port Port number.
Page 285 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-7 CFM MEP Information - Edit Window The fields that can be configured are described below: Parameter Description MEP State This is the MEP administrative state. Enable - MEP is enabled. Disable - MEP is disabled.
Page 286 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-8 CFM Extension AIS Window The fields that can be configured are described below: Parameter Description State Specifies to enable or disable the AIS function. Period The transmitting interval of AIS PDU. The default period is 1 second. Options to choose from are: 1sec - Specifies that the transmitting interval will be set to 1 second.
Page 287: Cfm Port Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide CFM Port Settings This window is used to enable or disable the CFM function on a per-port basis. To view this window, click OAM > CFM > CFM Port Settings, as shown below: Figure 13-10 CFM Port Settings Window The fields that can be configured are described below: Parameter...
Page 288: Cfm Linktrace Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-12 CFM Loopback Settings Window The fields that can be configured are described below: Parameter Description MEP Name Select and enter the Maintenance End Point name used. MEP ID (1-8191) Select and enter the Maintenance End Point ID used.
Page 289: Cfm Packet Counter
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-13 CFM Linktrace Settings Window The fields that can be configured are described below: Parameter Description MEP Name Select and enter the Maintenance End Point name used. MEP ID (1-8191) Select and enter the Maintenance End Point ID used.
Page 290: Cfm Fault Table
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-14 CFM Packet Counter Window The fields that can be configured are described below: Parameter Description Port List Enter a list of ports to be displayed. Tick the All Ports check box to display all ports. Type Transmit –...
Page 291: Ethernet Oam
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide MA Index Select and enter the Maintenance Association index used. Click the Find button to locate a specific entry based on the information entered. CFM MP Table To view this window, click OAM > CFM > CFM MP Table, as shown below: Figure 13-16 CFM MP Table Window The fields that can be configured are described below: Parameter...
Page 292: Ethernet Oam Configuration Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-17 Ethernet OAM Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select a range of ports you wish to configure. Mode Use the drop-down menu to select to operate in either Active or Passive.
Page 293: Ethernet Oam Event Log
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-18 Ethernet OAM Configuration Settings window The fields that can be configured are described below: Parameter Description From Port / To Port Select a range of ports you wish to configure. Link Event Use the drop-down menu to select the link events, Link Monitor or Critical Link Event.
Page 294: Ethernet Oam Statistics
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-19 Ethernet OAM Event Log window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select the port number to view. Port List Enter a list of ports.
Page 295: Cable Diagnostics
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 13-20 Ethernet OAM Statistics window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select t the port number to view. Port List Enter a list of ports.
Page 296 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test. The information will be displayed in this window. NOTE: Cable diagnostic function limitations. Cable length detection is only supported on GE ports. Ports must be linked up and running at 1000M speed.
Page 297: Chapter 10 Monitoring
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 10 Monitoring Utilization Statistics Mirror sFlow Ping Test Trace Route Peripheral Utilization CPU Utilization Users can display the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval.
Page 298: Statistics
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-2 DRAM & Flash Utilization window Port Utilization Users can display the percentage of the total available bandwidth being used on the port. To view this window, click Monitoring > Utilization > Port Utilization as shown below: Figure 14-3 Port Utilization window The fields that can be configured are described below: Parameter...
Page 299: Port Statistics
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Port Statistics Packets The Web manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) To select a port to view these statistics for, select the port by using the Port drop-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port.
Page 300 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-5 RX Packets Analysis Table window The fields that can be configured or displayed are described below: Parameter Description Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s"...
Page 301 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-6 UMB_cast (RX) window (for Unicast, Multicast, and Broadcast Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 14-7 RX Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured or displayed are described below: Parameter Description...
Page 302 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Multicast Counts the total number of good packets that were received by a multicast address. Broadcast Counts the total number of good packets that were received by a broadcast address. Show/Hide Check whether or not to display Multicast, Broadcast, and Unicast Packets.
Page 303 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-9 TX Packets Analysis window (table for Bytes and Packets) The fields that can be configured or displayed are described below: Parameter Description Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s"...
Page 304 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-10 Received (RX) window (for errors) Click the View Table link to display the information in a table rather than a line graph. Figure 14-11 RX Error Analysis window (table) The fields that can be configured or displayed are described below: Parameter Description...
Page 305 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide UnderSize The number of packets detected that are less than the minimum permitted packets size of 64 bytes and have a good CRC. Undersize packets usually indicate collision fragments, a normal network occurrence. OverSize Counts valid packets received that were longer than 1518 octets and less than the MAX_PKT_LEN.
Page 306: Packet Size
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-13 TX Error Analysis window (table) The fields that can be configured or displayed are described below: Parameter Description Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s"...
Page 307 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-14 Packet Size window Click the View Table link to display the information in a table rather than a line graph. Figure 14-15 RX Size Analysis window (table) The fields that can be configured or displayed are described below: Parameter Description Port...
Page 308: Mirror
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets). 65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).
Page 309: Rspan Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the radio buttons to select whether the port should include incoming traffic. Both Click the radio buttons to select whether the port should include both incoming and outgoing traffic. None Click the radio buttons to select whether the port should not include any traffic.
Page 310: Sflow
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 14-18 RSPAN Settings – Modify window The fields that can be configured are described below: Parameter Description Source Ports If the ports are not specified by option, the source of RSPAN will come from the source specified by the mirror command or the flow-based source specified by an ACL.
Page 311: Sflow Analyzer Server Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide sFlow Analyzer Server Settings The Switch can support 4 different Analyzer Servers at the same time and each sampler or poller can select a collector to send the samples. We can send different samples from different samplers or pollers to different collectors.
Page 312: Sflow Counter Poller Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: If the user wants the change the analyze server ID, he needs to delete the flow sampler and creates a new one. Figure 14-21 sFlow Flow Sampler Settings window The fields that can be configured are described below: Parameter Description...
Page 313: Ping Test
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Analyzer Server ID (1- The analyzer server ID specifies the ID of a server analyzer where the packet will be forwarded. Interval (20-120) The maximum number of seconds between successive samples of the counters. Tick the Disabled check box to disable the polling interval.
Page 314: Trace Route
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide destination. If the packet fails to find the IP address in this specified time, the Ping packet will be dropped. Click the Start button to initiate the Ping Test. After clicking the Start button, the following page will appear: Figure 14-24 Ping Test Result window Click the Stop button to halt the Ping Test.
Page 315: Peripheral
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Port (30000-64900) The port number. The value range is from 30000 to 64900. Timeout (1-65535) Defines the timeout period while waiting for a response from the remote device. A value of 1 to 65535 seconds can be specified. The default is 5 seconds. Probe (1-9) The number of probing.
Page 316: Chapter 11 Save And Tools
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 11 Save and Tools...
Page 317: Wlan
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Section 3 WLAN This section describes all the available configurations in the WLAN tab. Chapter 1 Security Captive Portal (CP) Captive Portal (CP) Captive Portal (CP) is the feature that controls the accessibility of both wired and wireless users to the network. The verification can be configured to allow access for guests and authenticated users in this section.
Page 318 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Peer Switch Statistics When clustering is supported on the switch, enter an interval that the peer switches Reporting Interval send its authenticated client statistics to the Cluster Controller periodically. The (15-3600) reporting interval is in the range of 0, 15-3600 seconds.
Page 319 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the link or the tab, the following page will appear: Figure 1-3 CP Configuration - Edit window The fields that can be configured are described below: Parameter Description Enable Captive Portal Click the radio buttons to enable or disable the CP configuration.
Page 320 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Max Transmit Enter the maximum number of bytes that a client is allowed to transmit when using the captive portal. After this limit has been reached the user will be disconnected. Max Total Enter the maximum sum number of bytes the user is allowed to transmit and receive.
Page 321 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide button. You can only delete images that you download. Background Image Use the drop-down menu to select the name of the image to display as the page background. Alternatively, click the ... button to display the available images. Click the image to select it.
Page 322 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide User Label Enter the text to display next to the user name text box. Password Label Enter the text to display next to the password text box. Button Label Enter the text to display on the button for users to click and connect to the network. Acceptance Use Enter the text to display in the Acceptance Use Policy text box.
Page 323 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Text Enter the optional text to further identify the network to be access by the CP user. Click the Apply button to accept the changes made. Click the Clear button to wipe all the configurations and set back to the default settings. Click the Preview button to view the result of the web page.
Page 324 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-8 CP Configuration – Customize window (Logout Success Page) The fields that can be displayed or configured are described below: Parameter Description Background Image Display the name of the current background image on the Logout Success Page. Branding Image Display the name of the current branding image on the Logout Success Page.
Page 325 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-9 Local User - Summary window Click the Add button to create a new user to the local database. Tick the corresponding check box, and click the Delete button to remove the specific entry. Click the Delete All button to remove all the entries listed.
Page 326 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide User Group Assign the user to at least one User Group. To assign the user to more than one group, press the Ctrl key and click each group. Session Timeout Enter the time in seconds that allows the user to remain connected to the network.
Page 327 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide (bytes/sec) portal. Max Down Rate Enter the maximum receiving speed, in bytes per second, when using the captive (bytes/sec) portal. Max Receive (bytes) Enter the maximum number of bytes that the user is allowed to receive when using the captive portal.
Page 328 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-13 CP Global Status window The fields that can be displayed are described below: Parameter Description CP Global Display the status of the CP operational status. Operational Status CP Global Disable When captive portal is disabled, the field displays the reason being disabled.
Page 329 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-14 CP Activation and Activity Status window Use the drop-down menu to select a CP to see its activation and activity status. Click Block to prevent users from gaining access to the network through the selected captive portal. If the Blocked Status of the selected captive portal is Blocked, click Unblock to allow access to the network through the captive portal.
Page 330 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-16 Interface Capability Status window The fields that can be displayed are described below: Parameter Description Bytes Received Display whether the interface supports displaying the number of bytes received from Counter each client.
Page 331 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-17 Client Summary window The fields that can be displayed are described below: Parameter Description MAC Address Display the MAC address of the wireless client (if applicable). If the MAC address is marked with an asterisk (*), the authenticated client is authenticated by a peer switch.
Page 332 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-18 Client Connection Status window The fields that can be displayed are described below: Parameter Description Client IP Address Display the IP address of the wireless client (if applicable). User Name Display the user name (or Guest ID) of the connected client.
Page 333 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-19 Client Statistics window Use the drop-down menu to select the MAC address of the associated client to view the statistical information. After clicking the Interface - Client Status tab, the following page will appear: Figure 1-20 Interface - Client Status window Use the drop-down menu to select an interface to see the information about the clients connected to a CP on this interface.
Page 334 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 1-21 CP-Client Status window Use the drop-down menu to select a CP to see the information of the clients connected to the CP. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. SNMP Trap Configuration This window is used to configure whether or not SNMP traps are sent from the Captive Portal and to specify captive portal events that will generate a trap.
Page 335 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide...
Page 336: Chapter 2 Monitoring
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 2 Monitoring Global Peer Switch Access Point Client Global The Unified Switch periodically collects information from the APs it manages and from associated peer switches. This window is used to show status and statistics about the switch and all of the objects associated with it. To view this window, click Monitoring >...
Page 337 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide are not Cluster Controllers can display information only about locally attached devices. Cluster Controller IP The IP address of the peer switch that is the Cluster Controller. Address Total Access Points Total number of Managed APs in the database.
Page 338 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Total Pre-authentication Current number of pre-authentication history entries in use by the system. History Entries Maximum Roam History Maximum number of entries that can be recorded in the roam history for all Entries detected clients.
Page 339 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-2 Switch Status window Use the drop-down menu to select a Switch to view the information. The fields that can be displayed are described below: Parameter Description Total Access Points Total number of Managed APs in the database.
Page 340 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Transmitted WLAN Packets Total packets transmitted across all APs managed by the switch. Transmitted WLAN Bytes Received Total bytes received across all APs managed by the switch. WLAN Packets Total packets received across all APs managed by the switch. Received WLAN Bytes Transmit Total bytes transmitted across all APs managed by the switch that were dropped.
Page 341 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Total Number of Display the amount of devices that have an IP address configured in the IP Discovered-Filed Discovery list that the switch has attempted to contact and failed to authenticate or Entries validate.
Page 342 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide • Global – Receive the basic and advanced global settings. • Discovery – Receive the L2 and L3 discovery information, including the VLAN and IP list. • Channel/Power – Receive the RF management settings. •...
Page 343 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the Hardware Type hyperlink or the Radio Detail tab under the AP Hardware Capability tab, the following page will appear: Figure 2-6 AP Hardware Capability - Radio Detail window Use the drop-down menu to select the hardware type and click the radio buttons to select the radio index.
Page 344: Peer Switch
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-7 AP Hardware Capability - Image Table window After clicking the Image Availability tab under the AP Hardware Capability tab, the following page will appear: Figure 2-8 AP Hardware Capability - Image Availability window Peer Switch This window is used to provide information about other unified wireless switches in the network.
Page 345 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-9 Peer Switch – Status window The fields that can be displayed are described below: Parameter Description Total Entries Total number of entries displayed in the table below. IP Address IP address of the peer wireless switch in the cluster.
Page 346 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-10 Peer Switch – Configuration window The fields that can be displayed are described below: Parameter Description Total Entries Total number of entries displayed in the table below. Peer IP Address The IP address of each peer wireless switch in the cluster that received configuration information.
Page 347: Access Point
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-11 Peer Switch – Managed AP window Use the drop-down menu to select the IP address of a peer switch. The fields that can be displayed are described below: Parameter Description Total Entries...
Page 348 The network address of the access point. Software Version Display the version of D-Link Access Point software that the AP is running. Display how much time has passed since the AP was last detected and the information was last updated.
Page 349: Managed Ap Status
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Managed AP Status This window is used to display a variety of information about each AP that the Switch manages. This window contains two main tabs, Status and Statistics. The Status tab provides configuration and association information about managed APs and their neighbors.
Page 350 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Configuration Status This status indicates if the AP is configured successfully with the assigned profile. The status is one of the following: • Not Configured - The profile has not been sent to the AP yet, the AP may be discovered but not yet authenticated.
Page 351 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide is enabled), but it is not configured. • Managed - The AP profile configuration has been applied to the AP and it's operating in managed mode. • Failed - The Unified Switch lost contact with the AP, a failed entry will remain in the managed AP database unless you remove it.
Page 352 Switch IP DHCP - The managed AP learned the current DWL-8600AP IP address through DHCP option 43. • L2 Poll Received - The AP was discovered through the D-Link Wireless Device Discovery protocol. Protocol Version The protocol version supported by the software on the AP, which is learned from the AP during discovery.
Page 353 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Channel The current operating channel for the radio. Transmit Power The current transmit power for the radio. Authenticated Clients Total count of clients authenticated by the AP on the physical radio. This is a sum of all the clients authenticated by each VAP enabled on the radio.
Page 354 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide statistics. Authenticated Clients Total count of clients authenticated with the AP on the physical radio. This is a sum of all the clients authenticated with the AP for each VAP enabled on the radio. Transmit Power The current transmit power for the radio.
Page 355 The Ethernet MAC address of the neighbor AP network, this could be a physical radio interface or VAP MAC address. For D-Link APs this is always a VAP MAC address. The neighbor AP MAC address may be cross-referenced in the RF Scan status.
Page 356 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Neighbor Client MAC The Ethernet address of client station. RSSI Received Signal Strength Indication, this is an indicator of the signal strength relative to the neighbor and may give an idea of the neighbor's distance from the managed AP.
Page 357 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-20 Managed AP Status – Distributed Tunneling window Use the drop down menu to select AP’s MAC address to view the distributed tunneling information. The fields that can be displayed are described below: Parameter Description Clients using AP as...
Page 358 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-21 Managed AP Statistics – WLAN Summary window The fields that can be displayed are described below: Parameter Description MAC Address The Ethernet address of the Unified Switch-managed AP. Packets Received Total packets received by the AP on the wireless network.
Page 359 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be displayed are described below: Parameter Description MAC Address The Ethernet address of the Unified Switch-managed AP. Packets Received Total packets received by the AP on the wired network. Bytes Received Total bytes received by the AP on the wired network.
Page 360 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Ethernet Packets Received Total packets received by the AP on the wired network. Ethernet Bytes Received Total bytes received by the AP on the wired network. Ethernet Packets Total packets transmitted by the AP on the wired network. Transmitted Ethernet Bytes Transmitted Total bytes transmitted by the AP on the wired network.
Page 361 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Number of packets received by the AP on this radio interface that were WLAN Packets Received dropped. Dropped WLAN Bytes Received Number of bytes received by the AP on this radio interface that were dropped. Dropped WLAN Packets Transmit Number of packets transmitted by the AP on this radio interface that were...
Page 362 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-25 Managed AP Statistics – VAP window Use the drop down menu to select AP’s MAC address and VAP’s ID, and click the radio button to select a radio to view the information about the client failures and number of packets and bytes transmitted and received on each VAP on specified radio for a particular access point managed by the Switch.
Page 363: Ap Authentication Failure Status
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-26 Managed AP Statistics – Distributed Tunneling window Use the drop down menu to select AP’s MAC address to view information about the number of packets and bytes transmitted and received by clients that use L2 distributed tunnels on an access point managed by the switch. AP Authentication Failure Status This window is used to display the AP that is failed to associate to the Switch.
Page 364: Ap Rf Scan Status
MAC Address The Ethernet MAC address of the detected AP. This could be a physical radio interface or VAP MAC. For D-Link APs this is always a VAP MAC address. SSID Service Set ID of the network, which is broadcast in the detected beacon frame.
Page 365 MAC address The Ethernet MAC address of the detected AP. This could be a physical radio interface or VAP MAC. For D-Link APs this is always a VAP MAC address. SSID Service Set ID of the network, which is broadcast in the detected beacon frame.
Page 366 The Ethernet MAC address of the detected AP. This could be a physical radio Address interface or VAP MAC. For D-Link APs this is always a VAP MAC address. Sentry Display whether the AP that detected the entry is in sentry or non-sentry mode.
Page 367 MAC Address The MAC address of the detected AP. This could be a physical radio interface or VAP MAC. For D-Link APs this is always a VAP MAC address. Status Display the managed status of the AP, whether this is a valid AP known to the Switch or a Rogue on the network.
Page 368: Client
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Test Config Display whether this test is configured to report rogues. Each test can be globally enabled or disabled to report a positive result as a rogue. Test Result Display whether this test reported the device as rogue. In some cases the test may report a positive result, be enabled, but not report the device as rogue because the device is allowed to operate in this mode.
Page 369 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-34 Associated Clients Status - Summary window The fields that can be displayed are described below: Parameter Description MAC Address The Ethernet address of the client station. If the MAC address is followed by an asterisk (*), the client is associated with an AP managed by a peer switch.
Page 370 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-35 Associated Clients Status - Detail window The fields that can be displayed are described below: Parameter Description SSID Display the network on which the client is connected. BSSID Display the Ethernet MAC address for the managed AP VAP where this client is associated.
Page 371 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide is associated. Location The descriptive location configured for the managed AP. Radio Display the managed AP radio interface the client is associated to and its configured mode. VLAN If the client is on a VAP using VLAN data forwarding mode, the current assigned VLAN is displayed.
Page 372 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide kbps. A value of 0 means no bandwidth limiting is in effect in this direction. Bandwidth Limit Up Display the maximum rate at which the client transmits traffic to the AP in bits per second.
Page 373 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide switch. • Ad Hoc Rogue - The client was detected as part of an ad hoc network with this Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the Distributed Tunneling tab under the Status tab, the following page will appear: Figure 2-38 Associated Clients Status - Distributed Tunneling window Click the drop-down menu to select the MAC address of the client with the information to view.
Page 374 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-39 Associated Clients SSID Status window The fields that can be displayed are described below: Parameter Description SSID The network on which the client is connected. Client MAC Address The Ethernet address of the client station.
Page 375 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide BSSID The Ethernet MAC address for the managed AP VAP where this client is associated. AP MAC Address The base AP Ethernet MAC address for the managed AP. Location The descriptive location configured for the managed AP. Radio Display the managed AP radio interface the client is associated to and its configured mode.
Page 376 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-42 Associated Clients Statistics - Summary window The fields that can be displayed are described below: Parameter Description MAC Address The Ethernet address of the client station. Packets Received Packets received from the client station.
Page 377 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide If the client roams from one AP to another AP but remains connected to the same network, the session continues and the session statistics continue to accumulate. If the client closes the wireless connection or roams out of the range of an AP managed by the switch, the session ends.
Page 378 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Bytes Transmit Dropped Number of bytes transmitted to the client station that were dropped. Fragments Received Total fragmented packets received from the client station. Fragments Transmitted Total fragmented packets transmitted to the client station. Transmit Retries Number of times transmits to client station succeeded after one or more retries.
Page 379: Detected Clients
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Duplicates Received Total duplicate packets received from the client station. Detected Clients This window is used to display the information about clients that have authenticated with an AP as well as information about clients that disassociate and are no longer connected to the system.
Page 380 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the MAC address hyperlink, the following page will appear: Figure 2-47 Detected Client Summary –Detected Client Status window The fields that can be displayed are described below: Parameter Description MAC address The Ethernet address of the client.
Page 381 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide authenticated. The possible range is from -128 to 128 dBm. Noise Last channel noise reported by the managed AP with which the client is authenticated. The possible range is from -128 to 128 dBm. Probe Req Recorded Number of probe requests recorded so far during the probe collection interval.
Page 382 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-48 Detected Client Summary –WIDS Client Rogue Classification window The fields that can be displayed are described below: Parameter Description MAC Address The Ethernet MAC address of the detected wireless client. Test Description Display the tests that were performed, which includes the following: •...
Page 383 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-49 Detected Client Summary –Pre-Auth History window The fields that can be displayed are described below: Parameter Description MAC Address MAC address of the client. AP MAC Address MAC Address of the managed AP to which the client has pre-authenticated. Radio Interface Number Radio number to which the client is authenticated, which is either Radio 1 or Radio 2.
Page 384 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-50 Detected Client Summary –Triangulation window The fields that can be displayed are described below: Parameter Description MAC Address MAC address of the client. AP Function Identifies whether the radio that detected the client is in sentry or non-sentry mode.
Page 385 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-51 Detected Client Summary –Roam History window The fields that can be displayed are described below: Parameter Description MAC Address MAC address of the detected client. AP MAC Address MAC Address of the managed AP to which the client authenticated.
Page 386 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-52 Detected Client Pre-Authentication History Summary window The fields that can be displayed are described below: Parameter Description MAC Address MAC address of the detected client. AP MAC Address MAC Address of the managed AP to which the client has pre-authenticated.
Page 387: Qos
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide AP MAC Address MAC Address of the managed AP to which the client authenticated. This field can show the MAC address of the last ten APs to which the client has roamed and authenticated.
Page 388 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-55 IP Access Control Lists window Use the Type Select drop-down menu to display various types of IP ACL. Click the Rules ID hyperlink to see the detail information about the rule. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 389 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-57 IP Access Control Lists - Rule ID window (Extended IP ACL) The fields that can be displayed are described below: Parameter Description IP ACL Name The ID of the IP ACL. Rule ID The number identifier for each rule that is defined for the IP ACL.
Page 390: Ipv6 Access Control Lists
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description IP ACL Name The name of the IP ACL. Rule ID The number identifier for each rule that is defined for the IP ACL. Action The action associated with each rule. Available values are Permit and Deny. Match Every Display whether this access list applies to every packet.
Page 391: Mac Access Control Lists
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description IPv6 ACL Name IPv6 ACL identifier. Rule ID The ordered rule number identifier defined within the IPv6 ACL. Action The action associated with each rule. Available values are Permit and Deny. Match Every Display whether this access list applies to every packet.
Page 392: Differentiated Services
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description MAC ACL Name MAC ACL identifier. Rule ID The ordered rule number identifier defined within the MAC ACL. Action The action associated with each rule. Available values are Permit and Deny. Match Every Display whether this access list applies to every packet.
Page 393 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-64 Policy Summary window The fields that can be displayed are described below: Parameter Description Policy Name The name of this policy. Policy Type The policy type. Member Classes List of all class names associated with this policy.
Page 394 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-66 Policy Attribute Summary window The fields that can be displayed are described below: Parameter Description Policy Name The name of this policy. Policy Type The policy type. Class Name The name of this class.
Page 395: Chapter 3 Administration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 3 Administration Basic Setup AP Management Advanced Configuration Basic Setup This window is used to configure the wireless basic setup. To view this window, click Administration > Basic Setup as shown below: Figure 3-1 Basic Setup Global window The fields that can be configured are described below: Parameter...
Page 396 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-2 Basic Setup Discovery window The fields that can be configured are described below: Parameter Description L3/IP Discovery Tick the check box to enable IP-based discovery of access points and peer wireless switches.
Page 397 Detection VLAN ID connected to the wired network. The tracer packets help the switch identify unauthorized APs that do not belong to the D-Link Unified Access System but are connected to the wired network. Click the Apply button to accept the changes made.
Page 398 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description Wireless Default Radio Click the radio button to select the radio between 802.11a/n and 802.11b/g/n. Settings State Click to have the radio On or Off. Mode Use the drop-down menu to select the Physical Layer standard the radio uses. When 1-802.11a/n is selected in Wireless Default Radio Settings, available options are IEEE 802.11a, IEEE 802.11a/n and 5GHzIEEE 802.11n.
Page 399 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide channel assignment process. Available MSC Indices Tick the check boxes to add MCS Index when operating in 802.11n mode. Rate Sets (Mbps) Display the transmission rate sets. Basic Tick the check boxes to indicate the data rates that all stations associating with the AP must support.
Page 400 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-6 Basic Setup SSID – Edit window The fields that can be configured or displayed are described below: Parameter Description SSID Enter Service Set Identifier (SSID) of the network, which is an alphanumeric key that uniquely identifies a wireless local area network.
Page 401 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide 2. If the network has peer switches and the tunnel is established between the APs managed by the peer switches then, when a switch managing the home AP fails, the switch managing the association AP detects the failure and terminates the tunnel.
Page 402 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Wired Equivalent Privacy (WEP) is a data encryption protocol for 802.11 wireless networks. If this security mechanism is selected, all wireless clients and access points on the network are configured with a 64-bit or 128-bit Shared Key for data encryption.
Page 403 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide WPA/WPA2 WPA and WPA2 are Wi-Fi Alliance IEEE 802.11i standards, which include AES-CCMP and TKIP mechanisms. Select WPA/WPA2 to see the following options. WPA Personal – Select this to configure static key management. •...
Page 404 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide associate with the AP using the SSID in the previous field. Client QoS Bandwidth Enter the maximum allowed transmission rate from the AP to the wireless client in Limit Down bits per second.
Page 405 Use the drop-down menu to select one of the three AP modes. Managed Select this to have the AP being part of the D-Link Unified Switch, and it can be managed by the Unified Switch. When Managed is selected, the following options appear at the bottom half of the page: Authentication Password –...
Page 406 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Standalone Select this to have the AP acting as an individual access point in the network. When Standalone is selected, the following options appear at the bottom half of the page: Expected SSID - Enter the SSID that identifies the wireless network on the standalone AP.
Page 407: Ap Management
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide OUI Description Enter the organization name associated with the OUI. Click the Add button to add a new entry based on the information entered. Tick one or more OUI Values and click the Delete button to remove the entry. Click the Delete All button to remove all the entries.
Page 408 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Channel Plan The 2.4 GHz (802.11b/g/n) and 5 GHz (802.11 a/n) frequencies use different channel plans. Click the radio button to select the frequency. Channel Plan Mode Click to select channel assignment mode.
Page 409 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-12 RF Management Channel Plan History window The fields that can be configured or displayed are described below: Parameter Description 5 GHz (802.11 a/n) / 2.4 The 5 GHz and 2.4 GHz radios use different channel plans, so the switch tracks GHz (802.11 b/g/n) the channel history separately for each radio.
Page 410 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide • The channel is not valid for the radio mode. • The AP has been rebooted since the channel plan was computed and acquires a static channel that has been set statically via local database. •...
Page 411 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the radio buttons to select the radio frequency in order to see its channel plan. Click the Apply button to accept the proposed channel change. Click the Clear button to remove the entries. Click the Start button to manually run the channel plan adjustment feature.
Page 412: Software Download
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Software Download This window is used to upgrade software on the APs that the Switch manages. The Cluster Controller can update code on APs managed by peer wireless switches. To view this window, click Administration > AP Management > Software Download as shown below: Figure 3-15 AP Software Download window The fields that can be configured are described below: Parameter...
Page 413: Advanced Settings
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-16 AP Image Management window The fields that can be configured are described below: Parameter Description TFTP Server IP Enter the IP address of the TFTP server. Source File Enter the file name.
Page 414 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-18 Advanced Settings – Debug window The fields that can be configured are described below: Parameter Description Password Enter the admin password for the AP. Confirm Password Retype the password to confirm. Enable Debug Click to enable or disable debugging.
Page 415 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-20 AP Provisioning window Tick the specific MAC Address and click the Provision button to perform provisioning. Tick the specific MAC Address and click the Delete button to remove the entry. Click the Delete All button to remove the unmanaged APs.
Page 416: Advanced Configuration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Address provisioned. New Backup IP Tick the check box and enter IP address of the backup switch that the AP to be Address provisioned. Profile ID Use the drop-down menu to select the profile ID to be used when provisioning. Click the Apply button to accept the changes made.
Page 417 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide addresses, specified in the Known Client database and not explicitly granted access, are denied access. If the MAC address is not in the database then the access to the client is granted. RF Scan Status Timeout Enter a time in hour to determine how long to keep an entry in the RF Scan Status (hours)
Page 418 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-23 Global SNMP Traps window The fields that can be configured are described below: Parameter Description AP Failure Traps Select Enable to allow the SNMP agent sending a trap if an AP fails to associate or authenticate with the switch.
Page 419 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-24 Global Distributed Tunneling window The fields that can be configured are described below: Parameter Description Distributed Tunnel Enter the maximum number of distributed tunneling clients that can roam away Clients from the Home AP at the same time.
Page 420 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Network Name Enter the SSID. Click the Add button to add a new entry based on the information entered. Tick the check box of a specific SSID and click the Delete button to remove the entry.
Page 421 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Redirect URL Enter the URL where all initial HTTP accesses should be redirected to. This text box is accessible only when HTTP is selected as the redirect type. Wireless ARP Use the drop-down menu to enable or disable the APs to reduce the number of Suppression Mode broadcasted ARP requests on the wireless interfaces.
Page 422 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Wired Equivalent Privacy (WEP) is a data encryption protocol for 802.11 wireless networks. If this security mechanism is selected, all wireless clients and access points on the network are configured with a 64-bit or 128-bit Shared Key for data encryption.
Page 423 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide WPA/WPA2 WPA and WPA2 are Wi-Fi Alliance IEEE 802.11i standards, which include AES-CCMP and TKIP mechanisms. Select WPA/WPA2 to see the following options. WPA Personal – Select this to configure static key management. •...
Page 424 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide associate with the AP using the SSID in the previous field. Client QoS Bandwidth Enter the maximum allowed transmission rate from the AP to the wireless client in Limit Down bits per second.
Page 425 Detection VLAN ID connected to the wired network. The tracer packets help the switch identify unauthorized APs that do not belong to the D-Link Unified Access System but are connected to the wired network. Click the Apply button to accept the changes made.
Page 426 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-29 AP Profile Configuration – Radio window The fields that can be configured or displayed are described below: Parameter Description Access Point Profile Click the radio button to select the radio between 802.11a/n and 802.11b/g/n. Radio Configuration State Click to have the radio On or Off.
Page 427 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide awaiting pickup. Specify a DTIM period within the given range (1-255). The measurement is in beacons. For example, if you set this field to 1, clients will check for buffered data on the AP at every beacon. If you set this field to 10, clients will check on every 10th beacon.
Page 428 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide equal to the RTS Threshold. Long Retries Display the maximum number of transmission attempts on frame sizes greater than the RTS Threshold. Transmit Lifetime Display the number of milliseconds to wait before terminating attempts to transmit (msecs) the MSDU after the initial transmission.
Page 429 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-30 AP Profile Configuration – VAP window The fields that can be configured are described below: Parameter Description Access Point Profile Click to select the radio to configure the settings for before enabling the VAP. VAP Configuration Network Tick the check box to enable the corresponding VAP on the selected radio.
Page 430 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description SSID Enter Service Set Identifier (SSID) of the network, which is an alphanumeric key that uniquely identifies a wireless local area network. Hide SSID Tick the check box to hide the SSID broadcast to discourage stations from automatically discovering the access point.
Page 431 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide L3 Tunnel Mask Enter the subnet mask for the network IP address on the L3 Tunnel subnet. This parameter is used to control whether the VAP uses the network or global RADIUS Use Network RAIDUS Accounting settings.
Page 432 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide WPA/WPA2 WPA and WPA2 are Wi-Fi Alliance IEEE 802.11i standards, which include AES-CCMP and TKIP mechanisms. Select WPA/WPA2 to see the following options. WPA Personal – Select this to configure static key management. •...
Page 433 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide associate with the AP using the SSID in the previous field. Client QoS Bandwidth Enter the maximum allowed transmission rate from the AP to the wireless client in Limit Down bits per second.
Page 434 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide cwMax (msecs) Enter the upper limit, in milliseconds, for the doubling of the random backoff value. Max. Burst (usecs) Enter a value in milliseconds to specify the Maximum Burst Length allowed for packet bursts on the wireless network.
Page 435 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the Configuration Enable/Disable tab, the following page will appear: Figure 3-34 Peer Switch Configuration Enable/Disable window The fields that can be configured are described below: Parameter Description Global Select Enabled to include the basic and advanced global settings in the configuration that the switch pushes to its peers.
Page 436: Wids Security
Click the Apply button to accept the changes made. WIDS Security The D-Link Unified Switch Wireless Intrusion Detection System (WIDS) can help detect intrusion attempts into the wireless network and take automatic actions to protect the network. To view this window, click Administration > Advanced Configuration > WIDS Security as shown below:...
Page 437 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 3-36 WIDS Security AP Configuration window The fields that can be configured or displayed are described below: Parameter Description Administrator If the source MAC address is in the valid-AP database on the switch or on the configured rogue AP RADIUS server and the AP type is marked as Rogue, then the AP state is Rogue.
Page 438 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide AP is operating on Select Enabled to detect hackers or incorrectly configured devices that are operating an illegal channel on channels that are not legal in the country where the wireless system is set up. NOTE: In order for the wireless system to detect this threat, the wireless network must contain one or more radios that operate in sentry mode.
Page 439 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Not Present in OUI Select Enabled to check whether a client is present in the OUI DB Test. Database Test Not Present in Known Select Enabled to check whether the client, which is identified by its MAC Client Database Test address, is listed in the Known Client Database and is allowed access to the AP either through the Authentication Action of Grant or through the White List global...
Page 440 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Clients Known Clients This window is used to display the wireless clients currently in the Known Client Database. To view this window, click Administration > Advanced Configuration > Clients > Known Clients as shown below: Figure 3-38 Known Clients window The fields that can be configured are described below:...
Page 441 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Switch Provisioning This window is used to configure switch provisioning. To view this window, click Administration > Advanced Configuration > Switch Provisioning as shown below: Figure 3-40 Switch Certificate Request window The fields that can be configured are described below: Parameter Description...
Page 442 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Switch IP Address Enter the IP address of the peer switch. Click the Start button to perform switch provisioning.
Page 443: Chapter 4 Qos
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 4 Access Control Lists Differentiated Services Access Control Lists IP Access Control Lists IP access control lists (ACL) allow network managers to define classification actions and rules for wireless networks.
Page 444 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Parameter Description New IP ACL Name Enter a new name of IP ACL. Click the Apply button to accept the changes made. Click the Cancel button to discard the configuration. After clicking the Add / Delete Rules button or the specific IP ACL ID (Name) hyperlink, the following page will appear: Figure 4-3 IP Access Control Lists –...
Page 445 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide entered. Source IP Mask Enter the source IP mask. Click the Create Rule button to add a new rule. Click the Cancel button to discard the configuration. After clicking the Add Rule button to add a rule for Extended IP ACL, the following page appears: Figure 4-5 IP Access Control Lists –...
Page 446 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide IP DSCP – Select one of the DSCP keyword values from the IP DSCP drop-down menu. When selecting Other, the IP DSCP Value field appears. Enter a value in the field. IP Precedence –...
Page 447 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide packet’s TCP/UDP destination port. When selecting Other, Destination Port Value appears. Enter a value in the field. Service Type Select one of the following three Match conditions for the extended IP ACL rule. IP DSCP –...
Page 448 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 4-8 IP Access Control Lists – Edit Rule (Extended IP ACL) window The fields that can be configured are described below: Parameter Description Action Tick the check box and use the drop-down menu to select the ACL forwarding action.
Page 449 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the Cancel button to discard the configuration. After clicking the Rule ID hyperlink or the Edit button to modify a rule for Named IP ACL, the following page appears: Figure 4-9 IP Access Control Lists –...
Page 450 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide extended IP ACL rule. IP DSCP – Select one of the DSCP keyword values from the IP DSCP drop-down menu. When selecting Other, the IP DSCP Value field appears. Enter a value in the field.
Page 451 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide After clicking the Add / Delete Rules button or the specific IPv6 ACL Name hyperlink, the following page will appear: Figure 4-12 IPv6 Access Control Lists – Add / Delete Rules window Click the Add Rule button to create a new rule.
Page 452 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Source Prefix Enter an IPv6 prefix and a packet’s source IPv6 prefix must match the address entered. Source Prefix Mask Enter the source IPv6 mask. Source L4 Port Use the drop-down menu to select L4 keyword of source ports to match a packet’s TCP/UDP source port.
Page 453 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Source Prefix Tick the check box and enter an IPv6 prefix and a packet’s source IPv6 prefix must match the address entered. Source Prefix Mask Enter the source IPv6 mask, when the Source Prefix check box is selected. Source L4 Port Tick the check box and use the drop-down menu to select L4 keyword of source ports to match a packet’s TCP/UDP source port.
Page 454 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 4-16 MAC Access Control Lists – Rename window The fields that can be configured are described below: Parameter Description New MAC ACL Name Enter a new name of MAC ACL. Click the Apply button to accept the changes made.
Page 455 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide matches the rule’s criteria. Match Every Use the drop-down menu to select True or False. True means that all packets will match the selected MAC ACL and Rule, and will be either permitted or denied. When True is selected, the option of configuring other match criteria will not be offered since all packets match the rule.
Page 456: Differentiated Services
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Tick the check box and enter the 802.1p user priority to compare against an Ethernet frame. Destination BPDU Tick the check box to use multicast address 01:80:C2:00:00:00 as destination MAC and mask is FF:FF:FF:00:00:00.
Page 457 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 4-21 Class Configuration window The fields that can be configured are described below: Parameter Description Class Name Enter a class name. Class Type Select the class type. Class Layer 3 Protocol Select the class layer 3 protocol as IPv4 or IPv6.
Page 458: Policy Configuration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Any – All packets are considered to match the specified class and no additional input information is needed. IP DSCP – Select this to choose IP DSCP Keyword in the next window. The packet’s DSCP must match the selected keyword.
Page 459: Policy Class Definition
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 4-23 Policy Configuration window The fields that can be configured are described below: Parameter Description Policy Name Enter a policy name. Policy Type Select the policy type. Click the Add button to add a new entry based on the information entered. Click the Edit Policy to configure the entry.
Page 460 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 4-25 Policy Class Definition window The fields that can be configured are described below: Parameter Description Policy Selector Select a policy to be configured. Click the Configuration Attribute to configure the specific policy. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 461 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Mark CoS – The packets are marked by DiffServ with the specified CoS value before being presented to the system forwarding element. Enter a value in the Conform CoS Value field between 0 and 7. Mark IP DSCP –...
Page 462: Chapter 5 Network Visualization
Click the Browse… button to navigate the image file. The image file should be GIF or JPG file. Click the Start File transfer to download the image to the Switch. Launch… This window is used to display the D-Link WLAN Visualization. To view this window, click Network Visualization > Launch… as shown below:...
Page 463 You can import multiple images to the right window and drag the switches, APs or clients on the left window to the right to create virtual wireless network environment. Menu Bar The D-Link WLAN Visualization window contains a menu bar for device configurations, as seen below. Figure 5-3 Menu Bar of D-Link WLAN Visualization File •...
Page 464 Images – Display the icons associated with each WLAN component on the graph. • Channel Color – Map the color of the power transmission image to the channel that the radio is using for transmission. Help • Summary – A new window opens to display the on-line help of D-Link WLAN Visualization.
Page 465: Save And Tools
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Section 4 Save and Tools Save Configuration / Log Stacking Information Download firmware Upload Firmware Download Configuration Upload Configuration Upload Log File Reset Reboot System Chapter 1 Save Save Configuration / Log To view this window, click Save >...
Page 466: Chapter 2 Tools
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Chapter 2 Tools License Management This window is used to install an activation code. The activation code is a set of codes which actives/unlocks function on the appliance. Figure 2-1 License Management window Enter an activation code in the field and click the Install button.
Page 467: Upload Firmware
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-3 Download Firmware – HTTP window The fields that can be configured are described below: Parameter Description Destination File Enter the location of the Destination File. Source File Enter the location of the Source File or click the Browse button to navigate to the firmware file for the download.
Page 468: Upload Configuration
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Download Configuration From TFTP This page allows the user to download the configuration file from a TFTP Server to the Switch and updates the switch. Figure 2-5 Download Configuration – TFTP window The fields that can be configured are described below: Parameter Description...
Page 469: Upload Log File
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Upload Configuration To TFTP This page allows the user to upload the configuration file from the Switch to a TFTP Server. Figure 2-7 Upload Configuration – TFTP window The fields that can be configured are described below: Parameter Description TFTP Server IP...
Page 470: Reset
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Upload Log To TFTP This page allows the user to upload the log file from the Switch to a TFTP Server. Figure 2-9 Upload Log – TFTP window The fields that can be configured are described below: Parameter Description TFTP Server IP...
Page 471: Reboot System
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide NOTE: Only the Reset System option will enter the factory default parameters into the Switch's non- volatile RAM, and then restart the Switch. All other options enter the factory defaults into the current configuration, but do not save this configuration.
Page 472 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Figure 2-13 System Rebooting window...
Page 473: Appendices
ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link’s switches to thwart ARP spoofing attacks. In the process of ARP, PC A will first issue an ARP request to query PC B’s MAC address.
Page 474 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port into its Forwarding Table.
Page 475: How Arp Spoofing Attacks A Network
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide The switch will also examine the “Source Address” of the Ethernet frame and find that the address is not in the Forwarding Table. The switch will learn PC B’s MAC and update its Forwarding Table. How ARP Spoofing Attacks a Network ARP spoofing, also known as ARP poisoning, is a method to...
Page 476: Prevent Arp Spoofing Via Packet Content Acl
Figure 5 all traffic will be then sniffed by the hacker but the users will not discover. Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL.
Page 477 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Chunk Chunk0 Chunk1 Chunk2 Chunk3 Chunk4 Chunk5 Chunk6 Chunk7 Chunk8 Chunk9 Chunk10 Chunk11 Chunk12 Chunk13 Chunk14...
Page 478 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide 0xA5A offset_chunk_3 0x5A5A0000 Step 5: save Save configuration.
Page 479: Appendix B Password Recovery Procedure
This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.
Page 480: Appendix C System Log Entries
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description Log Information Severity Remark System...
Page 481 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide will no IP information for logging. Firmware upgrade by console was Firmware upgrade was Warning "by console" unsuccessful unsuccessful! (Username: <username>, IP: and "IP: <ipaddr> ) <ipaddr>" are displayed in log string, which means if user login by...
Page 482 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Log message upload was Log message upload by console was Warning "by console" unsuccessful unsuccessful! (Username: <username>, IP: and "IP: <ipaddr> ) <ipaddr>" are displayed in log string, which means if user login by console, there will no IP...
Page 483 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Login failed through TELNET Login failed through TELNET (Username: Warning <username>, IP: <ipaddr> ) Logout through TELNET Logout through TELNET (Username: Informational <username>, IP: <ipaddr>) TELNET session timed out TELNET session timed out (Username: Informational <username>, IP: <ipaddr>) SNMP...
Page 484 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Successful login through Web Successful login through Web from <userIP> Informational authenticated by AAA local authenticated by AAA local method (Username: <username> ) method Login failed through Web Login failed failed through Web from <userIP> Warning authenticated by AAA local method authenticated by AAA local...
Page 485 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Login failed through TELNET Login failed through TELNET from <userIP> Warning authenticated by AAA server authenticated by AAA server <serverIP> (Username: <username> ) Login failed through TELNET Login failed through TELNET from <userIP> Warning due to AAA server timeout or improper due to AAA server timeout or...
Page 486 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide configuration Successful Enable Admin through Web from Successful Enable Admin Informational through Web authenticated by <userIP> authenticated by AAA server AAA server <serverIP> (Username: <username> ) Enable Admin failed through Enable Admin failed through Web from Warning Web authenticated by AAA...
Page 487 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide <portNum>) Dynamic IMPB entry conflicts with static Dynamic IMPB entry is conflict Warning with static FDB FDB(IP: <ipaddr>, MAC: <macaddr>, Port <portNum>) Dynamic IMPB entry conflicts Dynamic IMPB entry conflicts with static Warning with static IMPB IMPB(IP: <ipaddr>, MAC: <macaddr>, Port...
Page 488 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Temperature recovers to Temperature Sensor <sensorID> recovers to Informational normal. normal state. (current temperature: <temperature>) Cross-connect is detected CFM cross-connect. VLAN:<vlanid>, Local(MD Critical Level:<mdlevel>, Port <portNum>, Direction:<mepdirection>) Remote(MEPID:<mepid>, MAC:<macaddr>) Error CFM CCM packet is CFM error ccm.
Page 489 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide database full full client MAC: <macaddr> dropped Wireless peer switch: <ipaddr> discovered Peer Switch Wireless peer Switch discovered Informational Wireless peer switch: <ipaddr> failed Wireless peer Switch failed Warning Wireless peer Switch protocol Wireless peer switch: <ipaddr>...
Page 490 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide CP Client Auth Failure: MAC: <macaddr> IP: CP Client Auth Failure <ipaddr> SwMAC: <macaddr> CPID: <int> Warning Interface: <int> User: <username> CP Client Authentication CP Client Authentication Database Full Informational Database Full...
Page 491: Appendix D Trap Log Entries
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Appendix D Trap Log Entries This table lists the trap logs found on the Switch. Log Entry Description L2macNotification This trap indicates the MAC address 1.3.6.1.4.1.171.11.101.1.2.100.1.2.0.1 variations in the address table. L2PortSecurityViolationTrap When the port security trap is enabled, new 1.3.6.1.4.1.171.11.101.1.2.100.1.2.0.2...
Page 492 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide itself and that its configuration may have been altered. warmStart A warmStart trap signifies that the SNMPv2 1.3.6.1.6.3.1.1.5.2 entity, acting in an agent role, is reinitializing itself such that its configuration is unaltered. linkDown A linkDown trap signifies that the SNMP 1.3.6.1.6.3.1.1.5.3...
Page 493 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide A wsAPFailureListFull trap signifies that the 1.3.6.1.4.1.171.12.96.11.0.6 wsAPFailureListFull SNMP entity, acting in an agent role, has detected that AP failure list full. A wsRFScanAPListFull trap signifies that the 1.3.6.1.4.1.171.12.96.11.0.7 wsRFScanAPListFull SNMP entity, acting in an agent role, has detected that RF scan AP list is full.
Page 494 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide agent role, has detected WLAN bandwidth utilization exceeding the limit. A wsAdHocClientListFull trap signifies that the 1.3.6.1.4.1.171.12.96.11.0.27 wsAdHocClientListFull SNMP entity, acting in an agent role, has detected that Ad hoc client database is full. 1.3.6.1.4.1.171.12.96.11.0.28 wsPeerSwitchConfigurationCommandReceive d trap signifies that the SNMP entity, acting in...
Page 495: Appendix Eradius Attributes Assignment
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Appendix E RADIUS Attributes Assignment The RADIUS Attributes Assignment on the Switch is used in the following modules: 802.1X (Port-based and Host- based), MAC-based Access Control, and Captive Portal Configurations. The description that follows explains the following RADIUS Attributes Assignment types: •...
Page 496 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Tunnel-Type This attribute indicates the tunneling protocol(s) to be 13 (VLAN) Required used (in the case of a tunnel initiator) or the tunneling protocol in use (in the case of a tunnel terminatior). Tunnel-Medium-Type This attribute indicates the transport medium being 6 (802)
Page 497 Since an AP configuration is determined by its physical MAC address, the administrator adds a RADIUS entry for each AP with the User-Name attribute set to the MAC address. The following table indicates the attributes that are configured in the RADIUS server entry. The vendor specific attributes are added using the D-Link vendor ID (171). Attribute...
Page 498 Vendor-Specifc (26), Indicates a fixed power 0, 1-100 percent 0 Optional, if D-Link (171), setting for the radio. indicates automatic defined and Radio-2-Power (108) power assignment. valid wil override auto power configuration.
Page 499 (IPV4) or name (IPV6, MAC) Vendor-Specific (26), Name of DiffServ policy to be applied to Type: string 1-31 Optional D-Link (171), 802.1X authenticated wireless client traffic in characters (not null- Client-Policy-Dn (122) the outbound (down) direction. If this attribute terminated)
Page 500 If the attribute is 0 or not present, then use the value configured for the Captive Portal. Vendor-Specific (26), Maximum number of Integer Optional D-Link (171), octets the user is allowed LVL7-Max-Input-Octets to transmit. After this limit...
Page 501 Captive Portal. Vendor-Specific (26), Maximum number of Integer Optional D-Link (171), octets the user is allowed LVL7-Max-Output-Octets to receive. After this limit (125) has been reached the user will be disconnected. If the...
Page 502: Appendix F Wireless Switch Specific
DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Appendix F Wireless Switch Specific Captive Portal Guidlines Authenticated Roaming and Clustering: In addition to the generic implementation, Captive Portal also provides two key features for the wireless networks called authenticated roaming and clustering. 1.
Page 503 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Since the Cluster Controller function may be disabled by setting the Cluster Priority to zero, it is possible that all wireless Switches in the network are configured to disable the Cluster Controller function and the network operates without the Cluster Controller.
Page 504 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide Each wireless device has a copy of a certificate of the device with which it needs to communicate. During TLS connection establishment the Wireless devices compare the certificate received on the connection setup with all available loaded certificates for other wireless devices.
Page 505 DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide In other words, MBA and IMPB will not work when the MAC belongs to a tunnel client. To achieve IP-in-IP tunnel forwarding, the MAC addresses of the devices under the tunnel are learned and marked as “static”...

This manual is also suitable for:

Dws-3160 series Dws-3160-24pc

D-Link DWS-3160-24TC Reference Manual

Web-Based Switch Configuration

Chapter 1 Introduction

Chapter 2 Login to the Web Manager

Chapter 3 Web-Based User Interface

Chapter 4 Web

Lan

Chapter 5 Qos

Chapter 6 ACL

Chapter 7 Security

Chapter 8 Network Application

Chapter 9 OAM

Chapter 10 Monitoring

Chapter 11 Save and Tools

Wlan

Quick Links

Related Manuals for D-Link DWS-3160-24TC

Summary of Contents for D-Link DWS-3160-24TC