Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Table of Contents Preface ......................................x Intended Readers................................... xi Typographical Conventions ................................xi Notes, Notices, and Cautions ................................ xi Safety Instructions ..................................xii Safety Cautions ......................................xii General Precautions for Rack-Mountable Products ............................ xiii Protecting Against Electrostatic Discharge ..............................xiv...
Page 4 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Introduction....................................26 Login to Web Manager ....................................26 Web-based User Interface .....................................27 Web Pages........................................28 Administration ...............................29 Device Information ..................................30 IP Address....................................32 Port Configuration..................................35 Port Settings ........................................35 Port Description ......................................37 PoE Configuration..................................
Page 5 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Understanding IEEE 802.1p Priority................................72 VLAN Description ......................................72 IEEE 802.1Q VLANs....................................73 Double VLANs ......................................78 Static VLAN Entry......................................79 GVRP Setting........................................83 Double VLAN.......................................84 Trunking........................................86 Link Aggregation ......................................87 LACP Port Settings .......................................89 IGMP ......................................90 IGMP Snooping ......................................90...
Page 6 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF Area Settings.....................................151 OSPF Interface Settings ....................................153 OSPF Virtual Link Settings..................................155 OSPF Area Aggregation Settings................................157 OSPF Host Route Settings ..................................158 OSPF Default Information Originate Settings.............................159 DHCP Server ..................................... 160 DHCP Server Global Settings ..................................160 DHCP Server Pool Settings..................................161...
Page 7 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch QoS Output Scheduling ................................195 802.1p Default Priority ................................196 802.1p User Priority................................... 198 WRED Settings..................................198 ACL ................................200 Access Profile Table .................................. 201 Flow Metering Table.................................. 219 CPU Interface Filtering................................220 CPU Interface Filtering Profile Table .................................220...
Page 8 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Ciphersuite ........................................265 SSH ......................................268 SSH Server Configuration...................................268 SSH Authentication Mode and Algorithm Settings.............................269 SSH User Authentication ....................................270 IP-MAC Binding..................................272 ACL Mode ........................................272 IP-MAC Binding Port ....................................274 IP-MAC Binding Table....................................276 IP-MAC Binding Blocked...................................277...
Page 9 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Browse ARP Table ..................................315 Browse IP Multicast Forwarding Table ............................. 316 IGMP Snooping Group ................................316 IGMP Snooping Forwarding..............................317 Browse IGMP Group Table ............................... 318 DVMRP Monitoring .................................. 319 Browse DVMRP Routing Table..................................319...
Page 10: Preface
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Preface The xStack DES-3800 Series User Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features.
Page 11: Intended Readers
Intended Readers The xStack DES-3800 Series User Manual contains information for setup and management of the Switch. The term, “the Switch” will be used when referring to all three switches. This manual is intended for network managers familiar with network management concepts and terminology.
Page 12: Safety Instructions
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this document, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow.
Page 13: General Precautions For Rack-Mountable Products
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable.
Page 14: Protecting Against Electrostatic Discharge
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CAUTION: Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available.
Page 15: Introduction
DES-3800 Series The DES-3800 switch series is a member of the D-Link xStack switch family. xStack is a complete family of stackable devices that ranges from edge 10/100Mbps switches to core Gigabit switches. xStack provides unsurpassed performance, fault tolerance, scalable flexibility, robust security, standard-based interoperability and an impressive support for 10 Gigabit technology to future- proof departmental and enterprise network deployments with an easy migration path.
Page 16: Features
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch has two combo 1000 Base-T/SFP ports on the front panel and two 1000 Base-T ports on the back. These gigabit combo ports are ideal for connecting to a server or network backbone. See the “Ports” section below for differences between the front and rear Gigabit combo ports.
Page 17: Ports
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • RFC2576 SNMP-COMMUNITY • RFC2618 RADIUS-AUTH-CLIENT • RFC2620 RADIUS-ACC- CLIENT • RFC2787 VRRP • RFC2863 IF • RFC2932 IPMROUTE-STD • RFC-2933 IGMP-STD • RFC-2934 PIM • • IEEE 802.3x flow control in full duplex mode •...
Page 18: Front-Panel Components
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Both SFP ports support the following transceivers: • DEM-310GT (1000BASE-LX) • DEM-311GT (1000BASE-SX) • DEM-314GT (1000BASE-LH) • DEM-315GT (1000BASE-ZX) The Switch provides two 1000 BASE-T ports on the rear panel. Both 1000BASE-T ports comply with the following standards: •...
Page 19 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 1- 5. Front Panel View of the DES-3828P...
Page 20: Led Description
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DES-3828/DES-3828DC LEDs The front panel of DES-3828/DES-3828DC has LED indicators for power, console, RPS (DES-3828 only), 27GE (rear port), 28 GE (rear port), for each of the twenty-four 10/100 Mbps Ethernet ports, and for the two 1000BASE-T/SFP ports.
Page 21 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RPS (excluding DES- Off – RPS off 3828DC) Solid green – RPS in use Ports 27, 28 GE Ports 27 and 28 (51 and 52) represent the 1000BASE-T ports located on the rear panel of the Switch.
Page 22: Rear Panel Description
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Rear Panel Description The rear panels of DES-3828, DES-3828DC, DES-3828P and DES-3852 are described separately below. DES-3828 The rear panel of DES-3828 contains ports 27 and 28, (1000BASE-TX), an AC power connector, and an outlet for an optional external RPS.
Page 23: Side Panel Description
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Side Panel Description The right-hand side panel of the Switch contains a system fan and ventilation along the entire right side. The left hand panel includes a system fan and a heat vent. The system fans are used to dissipate heat. Do not block these openings on either side of the Switch.
Page 24: Installation
• RS-232 console cable If any item is missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where users install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
Page 25: Installing The Switch Without The Rack
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Installing the Switch without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity.
Page 26: Mounting The Switch In A Standard 19" Rack
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Mounting the Switch in a Standard 19" Rack CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances. Therefore, always install the stabilizers before installing components in the rack.
Page 27: Connecting Dc Power To The Des-3828Dc
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Connecting DC Power to the DES-3828DC Follow the instructions below to connect the DC power supply of the DES-3828DC to the DC power source. Figure 2 - 4. Power connections attached to contacts after assembly 1.
Page 28: Rps Installation
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RPS Installation Follow the instructions below to connect an RPS power supply to the Switch (DPS-200 to DES-3828/DES-3852 or DPS-600 to DES-3828P). The DPS-200 is a redundant power-supply unit designed to conform to the voltage requirements of the switches being supported.
Page 29 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DPS-800 The DPS-800 is a standard-size rack mount (1 standard unit in height) designed to hold up to two DPS-200 redundant power supplies. Figure 2 - 7. Install DPS-200 in DPS-800 The RPS can be mounted in a standard 19"...
Page 30 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Connect to RPS The DPS-200 is connected to the Master Switch using a 14-pin DC power cable. A standard, three-pronged AC power cable connects the redundant power supply to the main power source.
Page 31 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DPS-600 DES-3828P also supports the DPS-600 external redundant power supply. DES-3828P DPS-600 Figure 2 - 10. DES-3828P with the DPS-600 External Redundant Rower Supply...
Page 32: Connecting The Switch
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 3 Connecting the Switch Switch to End Node Switch to Hub or Switch Connecting to Network Backbone or Server NOTE: All 24 high-performance NWay Ethernet ports can support both MDI-II and MDI-X connections.
Page 33: Switch To Hub Or Switch
The Switch can be changed to PoE mode using the Mode Select button. When in PoE Mode, the DES-3828P will work with all D-Link 802.3af capable devices. The Switch also works in PoE mode with all non-802.3af capable D-Link AP, IP Cam and IP phone equipment via DWL-P50.
Page 34: Connecting To Network Backbone Or Server
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Connecting To Network Backbone or Server The two Mini-GBIC combo ports are ideal for unlinking to a network backbone or server. The copper ports operate at a speed of 1000, 100 or 10Mbps in full duplex mode. The fiber optic ports can operate at 1000Mbps in full duplex mode. Connections to the Gigabit Ethernet ports are made using fiber optic cable or Category 5 copper cable, depending on the type of port.
Page 35: Introduction To Switch Management
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 4 Introduction to Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface through the Serial Port Connecting the Console Port (RS-232 DCE)
Page 36 12. Enter the commands to complete your desired tasks. Many commands require administrator-level access privileges. Read the next section for more information on setting up user accounts. See the xStack DES-3800 Series CLI Manual on the documentation CD for a list of all commands and additional information on using the CLI.
Page 37: First Time Connecting To The Switch
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch First Time Connecting to the Switch The Switch supports user-based security that can allow prevention of unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch.
Page 38: Password Protection
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Password Protection The Switch does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If logging in using a predefined administrator-level user name, users will have privileged access to the Switch's management software.
Page 39: Snmp Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices.
Page 40: Ip Address Assignment
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP Address Assignment Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch's default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme.
Page 41 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows: Starting at the command line prompt, enter the commands config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy Where the x's represent the IP address to be assigned to the IP interface named System and the y's represent the corresponding subnet mask.
Page 42: Web-Based Switch Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 5 Web-based Switch Configuration Introduction Login to Web manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software functions of the Switch can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 43: Web-Based User Interface
Area 1 Select the menu or window to be displayed. The folder icons can be opened to display the hyper- linked menu buttons and subfolders contained within them. Click the D-Link logo to go to the D-Link website. Area 2 Presents a graphical near real-time image of the front panel of the Switch.
Page 44: Web Pages
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Web Pages When users connect to the management mode of the Switch with a web browser, a login window is displayed. Enter a user name and password to access the Switch's management mode.
Page 45: Administration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 6 Administration Device Information IP Address Port Configuration PoE Configuration User Accounts Port Mirroring System Log Settings System Severity Settings SNTP Settings MAC Notification Settings TFTP Services Multiple Image Services...
Page 46: Device Information
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Device Information The Device Information window contains the main settings for all major functions for the Switch and appears automatically when you log on. To return to the Device Information window, click the DES-3800 Management Tool folder.
Page 47 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The fields that can be configured are described below: Parameter Description System Name Enter a system name for the Switch, if so desired. This name will identify the Switch on the Switch network.
Page 48: Ip Address
The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the introduction of the xStack DES-3800 Series CLI Manual or return to Section 4 of this manual for more information.
Page 49 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 3. To access the Switch from a different subnet from the one it is installed on, click the Modify link next to Default Gateway and enter the IP address of the Default Gateway. To manage the Switch from the subnet on which it is installed, leave the default entry in this field.
Page 50 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch If the Switch is unable to complete the autoconfiguration process the previously saved configuration file present in Switch memory will be loaded. Click Apply to let changes take effect. Setting the Switch’s IP Address using the Console Interface Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP).
Page 51: Port Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Configuration This section contains information for configuring various attributes and properties for individual physical ports, including port speed and flow control. Port Settings Click Administration > Port Configuration >...
Page 52 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Flow Control Displays the flow control scheme used for the various port configurations. Ports configured for full- duplex use 802.3x flow control, half-duplex ports use backpressure flow control, and Auto ports use an automatic selection of the two.
Page 53: Port Description
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Description The Switch supports a port description feature where the user may name various ports on the Switch. To assign names to various ports, click Administration > Port Configuration > Port Description to view the following window: Figure 6- 5.
Page 54: Poe Configuration
Power Devices (PDs) over Category 5 or Category 3 UTP Ethernet cables. DES-3828P follows the standard PSE (Power Source over Ethernet) pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6. DES-3828P works with all D-Link 802.3af capable devices.
Page 55: User Accounts
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The previous window contains the following fields to configure for PoE: Parameter Description PoE System Power Limit Sets the limit of power to be used from the Switch’s power source to PoE ports. The user may configure a Power Limit between 37 and 370w.
Page 56 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Add a new user by typing in a User Name, and New Password and retype the same password in the Confirm New Password. Choose the level of privilege (Admin, Operator or User) from the Access Right drop-down menu.
Page 57: Port Mirroring
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 58: System Log Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch System Log Settings The Switch can send Syslog messages to up to four designated servers using the System Log Server. Click Administration > System Log Settings to view the window shown below.
Page 59 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch kernel messages user-level messages mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem...
Page 60: System Severity Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch System Severity Settings The Switch can be configured to allow alerts be logged or sent as a trap to an SNMP agent or both. The level at which the alert triggers either a log entry or a trap message can be set as well.
Page 61: Sntp Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNTP Settings Time Settings To configure the time settings for the Switch, click Administration > SNTP Settings > Time Settings link, revealing the following window for the user to configure.
Page 62: Time Zone And Dst
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Time Zone and DST The following are windows used to configure time zones and Daylight Savings time settings for SNTP. Click Administration > SNTP Settings > Time Zone and DST, which will reveal the following window.
Page 63 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DST Repeating Settings Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning and ending date be specified using a formula. For example, specify to begin DST on Saturday during the second week of April and end DST on Sunday during the last week of October.
Page 64: Mac Notification Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MAC Notification Settings MAC Notification is used to monitor MAC addresses learned and entered into the forwarding database. To globally set MAC notification on the Switch, open the following window by clicking Administration >...
Page 65: Tftp Services
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch TFTP Services Trivial File Transfer Protocol (TFTP) services allow the Switch's firmware to be upgraded by transferring a new firmware file from a TFTP server to the Switch. A configuration file can also be loaded into the Switch from a TFTP server.
Page 66: Multiple Image Services
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Multiple Image Services The Multiple Image Services window allows switch administrators to configure and view information regarding firmware located on the Switch. The Switch allows two firmware images to be stored in its memory and either may be configured to be the boot up firmware for the Switch.
Page 67: Dual Configuration Services
Dual Configuration Services The following window is used to configure firmware information set in the Switch. The xStack DES-3800 series has the capability to store two firmware images in its memory. To view this window, click Administration > Dual Configuration Services, which will in turn display the following window.
Page 68: Ping Test
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Ping Test Ping is a small program that sends ICMP Echo packets to the IP address you specify. The destination node then responds to or "echoes" the packets sent from the Switch. This is very useful to verify connectivity between the Switch and other nodes on the network.
Page 69: Snmp Manager
SNMP version used for specific tasks. The xStack DES-3800 Series supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The administrator can specify the SNMP version used to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 70: Snmp User Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNMP User Table The SNMP User Table displays all of the SNMP users currently configured on the Switch. Click Administration > SNMP Manager > SNMP User Table, this will open the SNMP User Table window, as shown below.
Page 71 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 24. SNMP User Table Configuration window The following parameters can set: Parameter Description Enter an alphanumeric string of up to 32 characters. This is used to identify the SNMP user.
Page 72: Snmp View Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNMP View Table The SNMP View Table is used to assign views to community strings that define which MIB objects can be accessed by a remote SNMP manager. To view the SNMP View Table window, click Administration > SNMP Manager > SNMP View Table. The following window should appear: Figure 6- 25.
Page 73: Snmp Group Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To implement your new settings, click Apply. To return to the SNMP View Table, click the Show All SNMP View Table Entries link. SNMP Group Table An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu.
Page 74: Snmp Community Table Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 29. SNMP Group Table Configuration window The following parameters can be set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users.
Page 75: Snmp Host Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To configure SNMP Community entries, click Administration > SNMP Manager > SNMP Community Table, which will open the following window: Figure 6- 30. SNMP Community Table Configuration window The following parameters can be set:...
Page 76 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description Host IP Address Type the IP address of the remote management station that will serve as the SNMP host for the Switch. SNMP Version V1 - To specifies that SNMP version 1 will be used.
Page 77: Snmp Engine Id
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SNMP Engine ID The Engine ID is a unique identifier used for SNMP V3 implementations. This is an alphanumeric string used to identify the SNMP engine on the Switch. To display the Switch's SNMP Engine ID, click Administration >...
Page 78: D-Link Single Ip Management
D-Link Single IP Management Single IP Management (SIM) Overview Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the "Single IP Management" feature: 1.
Page 79: Sim Using The Web Interface
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Upgrade to v1.6 To better improve SIM management, the xStack DES-3800 series switches have been upgraded to version 1.6 in this release. Many improvements have been made, including: 1. The Commander Switch (CS) now has the capability to automatically rediscover member switches that have left the SIM group, either through a reboot or web malfunction.
Page 80: Parameters Description
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 6- 36. SIM Settings window (enabled) If the Switch Administrator wishes to configure the Switch as a Commander Switch (CS), select commander from the Role State field and click Apply. The window will change once again to look like this: Figure 6- 37.
Page 81: Topology
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch After enabling the Switch to be a Commander Switch (CS), the Single IP Management folder will then contain four added links to aid the user in configuring SIM through the web, including Topology, Firmware Upgrade and Configuration Backup/Restore and Upload Log File.
Page 82 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Model Name Displays the full Model Name of the corresponding Switch. To view the Topology Map, click the View menu in the toolbar and then Topology, which will produce the following screen. The Topology View will refresh itself periodically (20 seconds by default).
Page 83: Tool Tips
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Non-SIM devices Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
Page 84: Right Click
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Right Click Right clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 85: Commander Switch Icon
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Commander Switch Icon Figure 6- 44. Right Clicking a Commander Icon The following options may appear for the user to configure: • Collapse - to collapse the group that will be represented by a single icon.
Page 86: Menu Bar
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch • Add to group - add a candidate to a group. Clicking this option will reveal the following screen for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group. Click OK to enter the password or Cancel to exit the window.
Page 87: Packet To Cpu Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Help • About - Will display the SIM information, including the current SIM version. NOTE: Upon this firmware release, some functions of the SIM can only be configured through the Command Line Interface. See the DES-3800 CLI Manual for more information on SIM and its configurations.
Page 88: Layer 2 Features
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 7 Layer 2 Features VLAN Trunking IGMP Snooping MLD Snooping Spanning Tree Forwarding Loopback Detection Protocol VLAN The following section will aid the user in configuring security functions for the Switch. The Switch includes various functions for VLAN, Trunking, IGMP Snooping, Spanning Tree, and Forwarding, all discussed in detail in the following section.
Page 89: Ieee 802.1Q Vlans
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch equated to a broadcast domain, because broadcast packets are forwarded to only members of the VLAN on which the broadcast was initiated. Notes About VLANs on the DES-3800 Series No matter what basis is used to uniquely identify end nodes and assign these nodes VLAN membership, packets cannot cross VLANs without a network device performing a routing function between the VLANs.
Page 90: Q Vlan Tags
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 1. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field.
Page 91 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
Page 92: Port Vlan Id
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 93: Default Vlans
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Default VLANs The Switch initially configures one VLAN, VID = 1, called "default." The factory default setting assigns all ports on the Switch to the "default." As new VLANs are configured in Port-based mode, their respective member ports are removed from the "default."...
Page 94: Double Vlans
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Double VLANs Double or Q-in-Q VLANs allow network providers to expand their VLAN configurations to place customer VLANs within a larger inclusive VLAN, which adds a new layer to the VLAN configuration. This basically lets large ISP's create L2 Virtual Private Networks and also create transparent LANs for their customers, which will connect two or more customer LAN points without over-complicating configurations on the client's side.
Page 95: Static Vlan Entry
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch regulating traffic and routing on the Service Provider switch. This information is then routed to the Service Provider’s main network and regarded there as one VLAN, with one set of protocols and one routing behavior.
Page 96 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 7. 802.1Q Static VLAN window - Add To return to the 802.1Q Static VLANs window, click the Show All Static VLAN Entries link. To change an existing 802.1Q VLAN entry, click the Hyperlinked VLAN ID of the corresponding entry to modify.
Page 97 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch VLAN Name Allows the entry of a name for the new VLAN in the Add window, or for editing the VLAN name in the Modify window. Advertisement Enabling this function will allow the Switch to send out GVRP packets to outside sources, notifying that they may join the existing VLAN.
Page 98 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields can then be set in the 802.1Q Static VLAN window: Parameter Description VID List Type in a new VID List number to create a new VID List or type in the VID List number of the VLAN you want to modify or delete.
Page 99: Gvrp Setting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch GVRP Setting The GVRP Settings window, shown right, allows you to determine whether the Switch will share its VLAN configuration information with other GARP VLAN Registration Protocol (GVRP) enabled switches. In...
Page 100: Double Vlan
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Acceptable This field denotes the type of frame that will be accepted by the port. The user may choose Frame Type between Tagged Only, which means only VLAN tagged frames will be accepted, and Admit_All, which mean both tagged and untagged frames will be accepted.
Page 101 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch gigabit ports can be configured as uplink ports. Access Ports Access ports are for connecting VLANs setup on the Switch to the customer VLANs. Gigabit ports cannot be configured as access ports.
Page 102: Trunking
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SPVID Enter the VID for the Service Provider VLAN with an integer between 1 and 4094. TPID Enter the TPID in hex form to aid in packet identification of the Service Provider VLAN.
Page 103: Link Aggregation
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link aggregation is most commonly used to link a bandwidth intensive network device or devices, such as a server, to the backbone of a network. The Switch allows the creation of up to 32 link aggregation groups, each group consisting of 2 to 8 links (ports). The aggregated links must be contiguous (they must have sequential port numbers) except the four (optional) Gigabit ports, which can only belong to a single link aggregation group.
Page 104 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 17. Link Aggregation Group Configuration - Modify The user-changeable parameters are as follows: Parameter Description Group ID Select an ID number for the group, between 1 and 32.
Page 105: Lacp Port Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch LACP Port Settings The LACP Port Settings window is used in conjunction with the Link Aggregation window to create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP control frames.
Page 106: Igmp
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IGMP Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch.
Page 107 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description VLAN ID This is the VLAN ID that, along with the VLAN Name, identifies the VLAN for which the user wishes to modify the IGMP Snooping Settings. VLAN Name This is the VLAN Name that, along with the VLAN ID, identifies the VLAN for which the user wishes to modify the IGMP Snooping Settings.
Page 108: Static Router Port Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Static Router Port Settings A static router port is a port that has a multicast router attached to it. Generally, this router would have a connection to a WAN or to the Internet.
Page 109: Igmp Multicast Vlan
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IGMP Multicast VLAN IGMP Multicast Vlan enables the switch to forward multicast traffic intelligently, instead of flooding all ports in the VLAN. Multicast traffic will only be forwarded to ports identified as members of the specific multicast group.
Page 110: Mld Snooping
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 25. IGMP Multicast VLAN Entries window To configure the IGMP Snooping Multicast VLAN settings, click its corresponding button, which will produce the following window for the user to configure. To delete an entry, click the corresponding under the Delete heading.
Page 111: Mld Snooping Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 2. Multicast Listener Report – Comparable to the Host Membership Report in IGMPv2, and labeled as 131 in the ICMP packet header, this message is sent by the listening host to the Switch stating that it is interested in receiving multicast data from a multicast address in response to the Multicast Listener Query message.
Page 112: Mld Snooping Static Router Port Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch between 1 and 25 (seconds). Default = 10. Robustness Value (1-255) Provides fine-tuning to allow for expected packet loss on a subnet. The user may choose a value between 1 and 255 with a default setting of 2. If a subnet is expected to have a high loss, the user may wish to increase this interval.
Page 113: Spanning Tree
STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP.
Page 114: W Rapid Spanning Tree
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Each switch utilizing the MSTP on a network will have a single MSTP configuration that will have the following three attributes: 1. A configuration name defined by an alphanumeric string of up to 32 characters (defined in the MST Configuration Identification window in the Configuration Name field).
Page 115: Edge Port
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Edge Port The edge port is a configurable designation used for a port that is directly connected to a segment where a loop cannot be created. An example would be a port connected directly to a single workstation. Ports that are designated as edge ports transition to a forwarding state immediately without going through the listening and learning states.
Page 116: Stp Bridge Global Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch STP Bridge Global Settings To open the following window, click L2 Features > Spanning Tree > STP Bridge Global Settings. Figure 7- 32. STP Bridge Global Settings window –RSTP (Default) Figure 7- 33.
Page 117 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be set: Parameter Description STP Status Use the pull-down menu to enable or disable STP globally on the Switch. The default is Disabled. STP Version Use the pull-down menu to choose the desired version of STP to be implemented on the Switch.
Page 118: Mst Configuration Identification
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MST Configuration Identification The following screens in the MST Configuration Identification window allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree instance set on the Switch. The Switch initially possesses one CIST or Common Internal Spanning Tree of which the user may modify the parameters for but cannot change the MSTI ID for, and cannot be deleted.
Page 119 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The user may configure the following parameters to create a MSTI in the Switch. Parameter Description MSTI ID Enter a number between 1 and 4 to set a new MSTI on the Switch.
Page 120: Mstp Port Information
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description MSTI ID Displays the MSTI ID previously set by the user. Type This field allows the user to choose a desired method for altering the MSTI settings. The user has four choices.
Page 121: Stp Instance Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be viewed or set: Parameter Description Instance ID Displays the MSTI ID of the instance being configured. An entry of 0 in this field denotes the CIST (default MSTI).
Page 122: Stp Port Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be viewed or set: Parameter Description MSTI ID Displays the MSTI ID of the instance being modified. An entry of 0 in this field denotes the CIST (default MSTI).
Page 123 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following STP Port Settings fields can be set: Parameter Description From/To A consecutive group of ports may be configured starting with the selected port. External Cost This defines a metric that indicates the relative cost of forwarding packets to the specified port (0=Auto) list.
Page 124: Stp Ports Information Of Instance
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch STP Ports Information of Instance Information about a previously created STP Port instance can be viewed in the STP Port Instance Information window. To view the STP Port Instance Information window click L2 Features > Spanning Tree > STP Port Information of Instance. All information in this window is read-only and are described previously in this section.
Page 125: Forwarding
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Forwarding Unicast Forwarding The following figure and table describe how to set up Unicast Forwarding on the Switch. Click L2 Features > Forwarding > Unicast Forwarding to view the following table.
Page 126 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Static Multicast Forwarding Settings window displays all of the entries made into the Switch's static multicast forwarding table. Click the Add button to open the Setup Static Multicast Forwarding Table window, as shown below: Figure 7- 47.
Page 127: Multicast Port Filtering Mode
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Multicast Port Filtering Mode The following figure and table describes how to setup the Multicast Port Filtering Mode feature on the Switch. Click L2 Features > Forwarding > Multicast Port Filtering to view the window below:...
Page 128 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Multicast Port Filtering Mode window is divided into two sections. The top section allows the user to change the multicast port filtering mode of specific ports. The bottom section of the window displays all the ports on the Switch and the Multicast Port Filtering Mode they have been configured with.
Page 129: Loopback Detection
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Loopback Detection The Loopback Detection function is used to detect the loop created by a specific port. To view the Loopback Detection Settings window, click Features > Loopback Detection. Figure 7- 48. Loopback Detection Global Settings...
Page 130 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description Use the drop-down menu to enable or disable loopback detection. The default is Disabled. Loopdetect Status Interval (1-32767) Set a Loopdetect Interval between 1 and 32767 seconds. The default is 10 seconds.
Page 131: Protocol Vlan
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Protocol VLAN The DES -3800 Switch Series incorporates the idea of protocol-based VLANs. This standard, defined by the IEEE 802.1v standard maps packets to protocol-defined VLANs by examining the type octet within the packet header to discover the type of protocol associated with it.
Page 132 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description Select an ID number for the group, between 1 and 2147483647. Group ID Frame Type This maps packets to protocol-defined VLANs by examining the type octet within the packet header to discover the type of protocol associated with it.
Page 133 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 7- 54. Protocol VLAN Port Settings window Parameter Description Group ID Allows the entry of a VLAN ID or displays the VLAN ID. VLANs can be identified by either the VID or the VLAN name.
Page 134: Layer 3 Features
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 8 Layer 3 Features IP Interface Settings Loopback IP Interface Settings MD5 Key Settings Route Redistribution Settings Static/Default Route Settings Route Preference Settings Static ARP Settings OSPF DHCP Server...
Page 135: Ip Multinetting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP Multinetting IP Multinetting is a function that allows multiple IP interfaces to be assigned to the same VLAN. This is beneficial to the administrator when the number of IPs on the original interface is insufficient and the network administrator wishes not to resize the interface.
Page 136 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch VLAN Name Network Number IP Address System (default) 10.32.0.0 10.32.0.1 Engineer 10.64.0.0 10.64.0.1 Marketing 10.96.0.0 10.96.0.1 Finance 10.128.0.0 10.128.0.1 Sales 10.160.0.0 10.160.0.1 Backbone 10.192.0.0 10.192.0.1 Table 8- 2. VLAN Example - Assigned IP Interfaces The six IP interfaces, each with an IP address (listed in the table above), and a subnet mask of 255.224.0.0 can be entered into the...
Page 137: Proxy Arp
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Proxy ARP The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP requester.
Page 138 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 3. IP Interface Settings – Add Figure 8- 4. IP Interface Settings - Edit Enter a name for the new interface to be added in the Interface Name field (if you are editing an IP interface, the Interface Name will already be in the top field as seen in the window above).
Page 139: Loopback Ip Interface
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Loopback IP Interface Loopback IP interfaces are network interfaces that are not associated with a physical interface. Physical interfaces have some form of physical element, for example VLAN, physical ports or even interface MAC address. Unlike a physical interface, the loopback interface exists only in software;...
Page 140: Md5 Key Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To setup Loopback IP Interfaces on the switch, click Layer 3 Features > Loopback IP Interface Settings to open the following window: Figure 8- 5. Loopback Detection Global Settings Parameter...
Page 141: Route Redistribution Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Route Redistribution Settings Route redistribution allows routers on the network, which are running different routing protocols to exchange routing information. This is accomplished by comparing the routes stored in the various routers’ routing tables and assigning appropriate metrics. This information is then exchanged among the various routers according to the individual router’s current routing protocol.
Page 142: Static/Default Route Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters may be set or viewed: Parameter Description Dst. Protocol Allows for the selection of the protocol for the destination device. Choose between RIP and OSPF. Src. Protocol Allows for the selection of the protocol for the source device.
Page 143: Route Preference Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description IP Address The IP address of the Static/Default Route. Subnet Mask The corresponding Subnet Mask of the IP address entered into the table. Gateway The corresponding Gateway of the IP address entered into the table.
Page 144 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Route Type Validity Range Default Value Local 0 - Permanently set on the Switch and not configurable. Static 1 - 999 OSPF Intra 1 - 999 OSPF Inter 1 - 999...
Page 145 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields can be viewed or set: Parameter Description RIP (1-999) Enter a value between 1 and 999 to set the route preference for RIP. The lower the value, the higher the chance the specified protocol will be chosen as the best path for routing packets.
Page 146: Static Arp Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Static ARP Table The Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses into physical addresses. This table allows network managers to view, define, modify and delete ARP information for specific devices. Static entries can be defined in the ARP Table.
Page 147: Rip
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Routing Information Protocol is a distance-vector routing protocol. There are two types of network devices running RIP - active and passive. Active devices advertise their routes to others through RIP messages, while passive devices listen to these messages.
Page 148: Rip Global Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RIP 1 Message RIP is not limited to TCP/IP. Its address format can support up to 14 octets (when using IP, the remaining 10 octets must be zeros). Other network protocol suites can be specified in the Family of Source Network field (IP has a value of 2). This will determine how the address field is interpreted.
Page 149: Rip Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Timeout Interval Each route entry has a timeout timer associated with it. When the timeout timer expires, the route is marked invalid but is retained until the garbage-collection timer expires. The interval (1-65535) of the timeout timer is set to a default of 180 seconds.
Page 150 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 15. RIP Interface Settings - Edit window Refer to the table below for a description of the available parameters for RIP interface settings. The following RIP settings can be applied to each IP interface:...
Page 151: Ospf
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF The Open Shortest Path First (OSPF) routing protocol uses a link-state algorithm to determine routes to network destinations. A “link” is an interface on a router and the “state” is a description of that interface and its relationship to neighboring routers. The state contains information such as the IP address, subnet mask, type of network the interface is attached to, other routers attached to the network, etc.
Page 152 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 16. Constructing a Shortest Path Tree Figure 8- 17. Constructing a Shortest Path Tree The diagram above shows the network from the viewpoint of Router A. Router A can reach 192.128.11.0 through Router B with a cost of 10 + 5 = 15.
Page 153 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 18. Constructing a Shortest Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A. The cost of the link from Router B to Router A, for instance is not important to constructing Router A’s shortest path tree, but is very important when Router B is constructing its...
Page 154: Ospf Authentication
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Summary link-state updates are generated by Border Routers to distribute routing information about other networks within the AS. Normally, all Summary link-state updates are forwarded to the backbone (area 0) and are then forwarded to all other areas in the network.
Page 155: Designated Router Election
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Neighbors Routers that are connected to the same area or segment become neighbors in that area. Neighbors are elected via the Hello protocol. IP multicast is used to send out Hello packets to other routers on the segment. Routers become neighbors when they see themselves listed in a Hello packet sent by another router on the same segment.
Page 156: Ospf Packet Formats
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Adjacencies on Point-to-Point Interfaces OSPF Routers that are linked using point-to-point interfaces (such as serial links) will always form adjacencies. The concepts of DR and BDR are unnecessary. OSPF Packet Formats All OSPF packet types begin with a standard 24-byte header and there are five packet types.
Page 157 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Hello Packet Hello packets are OSPF packet type 1. They are sent periodically on all interfaces, including virtual links, in order to establish and maintain neighbor relationships. In addition, Hello Packets are multicast on those physical networks having a multicast or broadcast capability, enabling dynamic discovery of neighboring routers.
Page 158 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Database Description Packet Database Description packets are OSPF packet type 2. These packets are exchanged when an adjacency is being initialized. They describe the contents of the topological database. Multiple packets may be used to describe the database. For this purpose, a poll- response procedure is used.
Page 159 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link-State Request Packet Link-State Request packets are OSPF packet type 3. After exchanging Database Description packets with a neighboring router, a router may find that parts of its topological database are out of date. The Link-State Request packet is used to request the pieces of the neighbor’s database that are more up to date.
Page 160 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The body of the Link-State Update packet consists of a list of link-state advertisements. Each advertisement begins with a common 20-byte header, the link-state advertisement header. Otherwise, the format of each of the five types of link-state advertisements is different.
Page 161 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Link State Advertisement Header All link state advertisements begin with a common 20-byte header. This header contains enough information to uniquely identify the advertisements (Link State Type, Link State ID, and Advertising Router). Multiple instances of the link state advertisement may exist in the routing domain at the same time.
Page 162: Router Links Advertisements
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Router Links Advertisements Router links advertisements are type 1 link state advertisements. Each router in an area originates a routers links advertisement. The advertisement describes the state and cost of the router’s links to the area. All of the router’s links to the area must be described in a single router links advertisement.
Page 163 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch a router link depend on the link’s Type. For example, each link has an associated 32-bit data field. For links to stub networks, this field specifies the network’s IP address mask. For other link types, the Link Data specifies the router’s associated IP interface address.
Page 164: Network Links Advertisements
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Network Links Advertisements Network links advertisements are Type 2 link state advertisements. A network links advertisement is originated for each transit network in the area. A transit network is a multi-access network that has more than one attached router. The network links advertisement is originated by the network’s designated router.
Page 165: Summary Link Advertisements
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Summary Link Advertisements Summary link advertisements are Type 3 and 4 link state advertisements. These advertisements are originated by Area Border routers. A separate summary link advertisement is made for each destination known to the router, that belongs to the Autonomous System (AS), yet is outside the area.
Page 166: Autonomous Systems External Link Advertisements
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Autonomous Systems External Link Advertisements Autonomous Systems (AS) link advertisements are Type 5 link state advertisements. These advertisements are originated by AS boundary routers. A separate advertisement is made for each destination known to the router that is external to the AS.
Page 167: Ospf Global Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF Global Settings The OSPF Global Settings menu allows OSPF to be enabled or disabled on the Switch − without changing the Switch’s OSPF configuration. To view the following window, click L3 Features > OSPF > OSPF Global Settings. To enable OSPF, first supply an OSPF Route ID (see below), select Enabled from the State drop-down menu and click the Apply button.
Page 168 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To add an OSPF Area to the table, type a unique Area ID (see below) select the Type from the drop-down menu. For a Stub type, choose Enabled or Disabled from the Stub Import Summary LSA drop-down menu and determine the Stub Default Cost. Click the Add/Modify button to add the area ID set to the table.
Page 169: Ospf Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF Interface Settings To set up OSPF interfaces, click L3 Features > OSPF > OSPF Interface Settings to view OSPF settings for existing IP interfaces. If there are no IP interfaces configured (besides the default System interface), only the System interface settings will appear listed.
Page 170 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Configure each IP interface individually using the OSPF Interface Settings - Edit menu. Click the Apply button when you have entered the settings. The new configuration appears listed in the OSPF Interface Settings table. To return to the OSPF Interface...
Page 171: Ospf Virtual Link Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Retransmit Time A read only field that denotes the time between LSA retransmissions over this interface, in seconds. Active or Passive The user may select Active or Passive for this OSPF interface. Active interfaces actively Interface advertise OSPF to routers on other Intranets that are not part of this specific OSPF group.
Page 172 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 37. OSPF Virtual Link Settings - Edit Configure the following parameters if you are adding or changing an OSPF Virtual Interface: Parameter Description Allows the entry of an OSPF Area ID − previously defined on the Switch − that allows a Transit Area ID remote area to communicate with the backbone (area 0).
Page 173: Ospf Area Aggregation Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF Area Aggregation Settings Area Aggregation allows all of the routing information that may be contained within an area to be aggregated into a summary LSDB advertisement of just the network address and subnet mask. This allows for a reduction in the volume of LSDB advertisement traffic as well as a reduction in the memory overhead in the Switch used to maintain routing tables.
Page 174: Ospf Host Route Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Advertisement Select Enabled or Disabled to determine whether the selected OSPF Area will advertise it’s summary LSDB (Network-Number and Network-Mask). Click Apply to implement changes made. OSPF Host Route Settings OSPF host routes work in a way analogous to RIP, only this is used to share OSPF information with other OSPF routers.
Page 175: Ospf Default Information Originate Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Metric A value between 1 and 65535 that will be advertised for the route. Area ID A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the OSPF area in the OSPF domain.
Page 176: Dhcp Server
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DHCP Server For this release of the xStack DES-3800, the Switch now has the capability to act as a DHCP server to devices which are located in its locally attached networks or relayed by DHCP relay agent. DHCP, or Dynamic Host Configuration Protocol, allows the switch to delegate IP addresses, subnet masks, default gateways and other IP parameters to devices that request this information.
Page 177: Dhcp Server Pool Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DHCP Server Pool Settings The following windows will allow users to create and then set the parameters for the DHCP Pool of the switch’s DHCP server. Users must first create the pool by entering a name of up to 12 alphanumeric characters into the Pool Name field and clicking Apply.
Page 178: Dhcp Server Manual Binding Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch addresses. Net BIOS Name Enter the IP address of a Net BIOS Name Server that will be available to a Microsoft DHCP Server Client. This Net BIOS Name Server is actually a WINS (Windows Internet Naming Service) Server that allows Microsoft DHCP clients to correlate host names to IP addresses within a general grouping of networks.
Page 179: Dhcp Server Excluded Address Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters may be configured or viewed. Parameter Description Pool Name Enter the name of the DHCP pool within which will be created a manual DHCP binding entry. IP Address Enter the IP address to be statically bound to a device within the local network that will be specified by entering the Hardware Address in the following field.
Page 180: Dhcp Server Binding Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DHCP Server Binding Table The following window will allow users to view dynamically bound IP addresses of the DHCP server. These IP addresses are ones that were allotted to clients on the local network and are now bound to the device stated by its MAC address. To view this window, click L3 features >...
Page 181: Dhcp/Bootp Relay
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DHCP/BOOTP Relay The relay hops count limit allows the maximum number of hops (routers) that the DHCP/BOOTP messages can be relayed through to be set. If a packet’s hop count is more than the hop count limit, the packet is dropped. The range is between 1 and 16 hops, with a default value of 4.
Page 182 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch check and policy settings will have no effect. DHCP Agent This field can be toggled between Enabled and Disabled using the pull-down menu. This is used to enable or disable the Switches ability to check the validity of the packet’s option 82 Information Option 82 field.
Page 183 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 7. Port: The incoming port number of DHCP client packet, port number starts from 1. Remote ID sub-option format: MAC address 1 byte 1 byte 1 byte 1 byte 6 bytes 1.
Page 184: Dhcp/Bootp Relay Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DHCP/BOOTP Relay Interface Settings The DHCP/ BOOTP Relay Interface Settings allow the user to set up a server, by IP address, for relaying DHCP/ BOOTP information. The user may enter a previously configured IP interface on the Switch that will be connected directly to the DHCP/BOOTP server using the following window.
Page 185: Dns Relay
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DNS Relay Computer users usually prefer to use text names for computers for which they may want to open a connection. Computers themselves, require 32 bit IP addresses. Somewhere, a database of network devices’ text names and their corresponding IP addresses must be maintained.
Page 186: Dns Relay Static Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Primary Name Server Allows the entry of the IP address of a primary domain name server (DNS). Secondary Name Allows the entry of the IP address of a secondary domain name server (DNS).
Page 187: Vrrp
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch VRRP VRRP or Virtual Routing Redundancy Protocol is a function on the Switch that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router that controls the IP address associated with a virtual router is called the Master, and will forward packets sent to this IP address.
Page 188 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description VRID / Interface VRID - Displays the virtual router ID set by the user. This will uniquely identify the VRRP Name Interface on the network. Interface Name - An IP interface name that has been enabled for VRRP. This entry must have been previously set in the IP Interfaces table.
Page 189 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch State Used to enable (Up) and disable (Down) the VRRP IP interface on the Switch. Priority (1-254) Enter a value between 1 and 254 to indicate the router priority. The VRRP Priority value may determine if a higher priority VRRP router overrides a lower priority VRRP router.
Page 190 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch This window displays the following information: Parameter Description Interface Name An IP interface name that has been enabled for VRRP. This entry must have been previously set in the IP Interface Settings table.
Page 191: Vrrp Authentication Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch VRRP Authentication Settings The VRRP Authentication Settings window is used to set the authentication for each Interface configured for VRRP. This authentication is used to identify incoming message packets received by a router. If the authentication is not consistent with incoming packets, they will be discarded.
Page 192: Ip Multicast Routing Protocol
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP Multicast Routing Protocol The functions supporting IP multicasting are added under the IP Multicast Routing Protocol folder, from the L3 Features folder. IGMP, DVMRP, and PIM-DM can be enabled or disabled on the Switch without changing the individual protocol’s configuration by using the DES-3800 Web Management Tool.
Page 193: Igmp Version
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IGMP version 2 introduces some enhancements such as a method to elect a multicast querier for each LAN, an explicit leave message, and query messages that are specific to a given group.
Page 194: Igmp Interface Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Timers As previously mentioned, IGMPv3 incorporates filters to include or exclude sources. These filters are kept updated using timers. IGMPv3 utilizes two types of timers, one for the group and one for the source. The purpose of the filter mode is to reduce the reception state of a multicast group so that all members of the multicast group are satisfied.
Page 195 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch This window allows the configuration of IGMP for each IP interface configured on the Switch. IGMP can be configured as Version 1, 2 or 3 by toggling the Version field using the pull-down menu. The length of time between queries can be varied by entering a value between 1 and 31,744 seconds in the Query Interval field.
Page 196: Dvmrp Interface Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DVMRP Interface Configuration The Distance Vector Multicast Routing Protocol (DVMRP) is a hop-based method of building multicast delivery trees from multicast sources to all nodes of a network. Because the delivery trees are ‘pruned’ and ‘shortest path’, DVMRP is relatively efficient.
Page 197 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 68. DVMRP Interface Settings - Edit window The following fields can be set: Parameter Description Interface Name Displays the name of the IP interface for which DVMRP is to be configured. This must be a previously defined IP interface.
Page 198: Pim Protocol
PIM or Protocol Independent Multicast is a method of forwarding traffic to multicast groups over the network using any pre- existing unicast routing protocol, such as RIP or OSPF, set on routers within a multicast network. The xStack DES-3800 Series supports two types of PIM, Dense Mode (PIM-DM) and Sparse Mode (PIM-SM).
Page 199: Pim-Dm Interface Configuration
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Assert Messages At times on the PIM-SM enabled network, parallel paths are created from source to receiver, meaning some receivers will receive the same multicast packets twice. To improve this situation, Assert messages are sent from the receiving device to both multicast sources to determine which single router will send the receiver the necessary multicast data.
Page 200 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 71. PIM Interface Settings – Edit window The following fields can be set: Parameter Description Interface Name This read-only field denotes the IP interface selected to be configured for PIM.
Page 201: Pim Candidate Bsr Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch PIM Candidate BSR Settings The following windows are used to configure the Candidate Boot Strap Router (C-BSR) settings for the switch and the priority of the selected IP interface to become the Boot Strap Router (BSR) for the PIM enabled network. The Boot Strap Router holds the information which determines which router on the network is to be elected as the RP for the multicast group and then to gather and distribute RP information to other PIM-SM enabled routers.
Page 202: Pim Parameter Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields can be viewed or set: Parameter Description Interface Name This read-only field denotes the IP Interface Name to be edited for its C-BSR priority. IP Address Denotes the IP Address of the IP Interface Name to be edited for its C-BSR priority.
Page 203: Pim Candidate Rp Global Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch NOTE: The Probe time value must be less than half of the Register Suppression Time value. If not, the administrator will be presented with an error message after clicking Apply.
Page 204: Pim Register Checksum Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 8- 77. PIM Candidate RP Settings – Add window The following fields can be viewed or set: Parameter Description Group Address Enter the multicast group address for this CRP. This address must be a class D address.
Page 205: Pim Static Rp Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch PIM Static RP Settings This window is used to view the Static RP settings for this router. To view this window, click Configuration > Layer 3 IP Networking > IP Multicast Routing Protocol > PIM Protocol > PIM Static RP Settings.
Page 206: Qos
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 9 Bandwidth Control QoS Scheduling Mechanism QoS Output Scheduling 802.1P Default Priority 802.1P User Priority WRED Settings The DES-3800 Series supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing.
Page 207: Understanding Qos
CoS. The other CoS queues that have been given a nonzero value, and depending upon the weight, will follow a common weighted round-robin scheme. Remember that the xStack DES-3800 Series has eight priority queues (and eight Classes of Service) for each port on the Switch.
Page 208: Bandwidth Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Bandwidth Control To access the Bandwidth Settings window, click QoS > Bandwidth Control. The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port.
Page 209 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following fields are displayed in the Port Bandwidth Table: Parameter Description Port Displays the ports of the Switch in sequential order. Displays the Receiving Rate (Kbit/sec) that the administrator configured for the port.
Page 210: Qos Scheduling Mechanism
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch QoS Scheduling Mechanism Changing the output scheduling used for the hardware queues in the Switch can customize QoS. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority queues is affected. Changes in scheduling may result in unacceptable levels of packet loss or significant transmission delay.
Page 211: Qos Output Scheduling
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch QoS Output Scheduling QoS can be customized by changing the output scheduling used for the hardware classes of service in the Switch. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority classes of service is affected.
Page 212: 802.1P Default Priority
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. Click QoS > 802.1p Default Proiriry, to view the window shown below.
Page 213 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following information is displayed in the 802.1p Default Priority table: Parameter Description Port Displays the ports of the Switch in sequential order. Priority Displays the Priority level the administrator configured for the port Effective Priority Displays the actual Priority level for the port.
Page 214: 802.1P User Priority
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch 802.1p User Priority The DES-3800 Series allows the assignment of a user priority to each of the 802.1p priorities. Click QoS > 802.1p User Priority, to view the screen shown below.
Page 215 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To configure WRED settings for the Switch, configure the following fields and click Apply. Note that WRED State may be separately globally enabled and disabled and has its own Apply button for this reason.
Page 216: Acl
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 10 Access Profile Table Flow Metering Table CPU Interface Filtering Access profiles allow you to establish criteria to determine whether or not the Switch will forward packets based on the information contained in each packet's header.
Page 217: Access Profile Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Access Profile Table Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame the Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the Switch will use to determine what to do with the frame.
Page 218 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 2. Access Profile Table (Ethernet) The following parameters can be set, for the Ethernet type: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 – 255, yet only 9 access profiles can be created on the Switch.
Page 219 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The page shown below is the IP Access Profile Configuration page: Figure 10- 3. Access Profile Configuration (IP) The following parameters can be set, for IP: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set.
Page 220 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DSCP Selecting this option instructs the Switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding. Protocol Selecting this option instructs the Switch to examine the protocol type value in each frame's header.
Page 221 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The page shown below is the ACL Packet Content Mask configuration window. Figure 10- 4. Access Profile Configuration (Packet Content Mask) This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The...
Page 222 With this advanced unique Packet Content Mask (also known as Packet Content Access Control List - ACL), D-Link xStack switch family can effectively mitigate some network attacks like the common ARP Spoofing attack that is wide spread today. This is the reason why Packet Content ACL is able to inspect any specified content of a packet in different protocol layers.
Page 223 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch quality of service or real time service packets. Source IPv6 Mask The user may specify an IP address mask for the source IPv6 address by checking the corresponding box and entering the IP address mask.
Page 224 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 7. Access Profile Entry Display window (Packet Content Mask) By clicking Modify on the Access Profile Table it will bring you to the Access Rule Table where you can configure the Flow Metering for the each entry.
Page 225 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10-9. Access Rule Configuration window (IP) Configure the following Access Rule Configuration settings: Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the Switch, according to any additional rule, forward the packets that match the access profile added (see below).
Page 226 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual. Replace DSCP (0-63) Select this option to instruct the Switch to replace the DSCP value (in a packet that meets the selected criteria) with the value entered in the adjacent field.
Page 227 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 51. Access Rule Table window To create a new rule set for an access profile click the Add Rule button. A new window is displayed. To remove a previously created rule, click the corresponding button.
Page 228 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Ethernet instructs the Switch to examine the layer 2 part of each packet header. • IP instructs the Switch to examine the IP address in each frame's header. • Packet Content Mask instructs the Switch to examine the packet header.
Page 229 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 53. Access Rule Display window (Ethernet) To configure the Access Rule for Packet Content Mask, open the Access Profile Table and click Modify for a Packet Content Mask entry. This will display the Access Rule Table.
Page 230 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 55. Access Rule Configuration window (Packet Content Mask) To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set.
Page 231 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Packet Content Mask instructs the Switch to examine the packet header. • IPv6 instructs the switch to examine the IPv6 address in each frame’s header. • This parameter is specified if you want to re-write the 802.1p default priority previously set...
Page 232 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 56. Access Rule Display window (Packet Content) To configure the Access Rule for IPv6, open the Access Profile Table and click Modify for an IPv6 entry. This will display the Access Rule Table.
Page 233 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 58. Access Rule Configuration window (IPv6) To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set.
Page 234 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Select this option to instruct the Switch to replace the DSCP value (in a packet that Replace DSCP (0-63) meets the selected criteria) with the value entered in the adjacent field.
Page 235: Flow Metering Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Flow Metering Table Flow Metering Table is a per flow bandwidth control used to limit the bandwidth of the ingress traffic. When the users create an ACL rule to filter packets, a metering rule can be created to associate with this ACL rule to limit traffic. The step of bandwidth is 64kbps.
Page 236: Cpu Interface Filtering
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CPU Interface Filtering Due to a chipset limitation and the need for extra switch security, the xStack DES-3800 switch series incorporates CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets destined for the Switch’s CPU interface.
Page 237 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 11. CPU Interface Filtering Profile Configuration – Ethernet Parameter Description Type in a unique identifier number for this profile set. This value can be set from 1 - 5.
Page 238 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The page shown below is the CPU Interface Filtering Profile Configuration for IP page. Figure 10- 12. CPU Interface Filtering Configuration window - IP The following parameters can be modified:...
Page 239 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. Select Type to further specify that the access profile will apply an ICMP type value, •...
Page 240 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The page shown below is the CPU Interface Filtering Profile Configuration window for the Packet Content Mask. Figure 10- 13. CPU Interface Filtering Configuration window- Packet Content This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The...
Page 241 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Click Apply to implement changes made. To establish the rule for a previously created CPU Access Profile: Click ACL > CPU Interface Filtering to view the following window: Figure 10- 14. CPU Interface Filtering Profile Table - Add In this window, the user may add an Access Rule to a previously created CPU access profile by clicking the corresponding Modify button of the entry to configure Ethernet, IP or Packet Content Mask.
Page 242 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 16. CPU Interface Filtering Rule Configuration – Ethernet To set the CPU Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description This is the identifier number for this profile set.
Page 243 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 17. CPU Interface Filtering Rule Display – Ethernet The following window is the CPU Interface Filtering Rule Table for IP. Figure 10- 18. CPU Interface Filtering Rule Table – IP To create a new rule set for an access profile click the Add button.
Page 244 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 19. CPU Interface Filtering Rule Configuration – IP Configure the following Access Rule Configuration settings for IP: Parameter Description Profile ID This is the identifier number for this profile set.
Page 245 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 20. CPU Interface Filtering Rule Display - IP The following window is the CPU Interface Filtering Rule Table for Packet Content. Figure 10- 21. CPU Interface Filtering Rule Table – Packet Content To remove a previously created rule, select it and click the button.
Page 246 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 10- 22. CPU Interface Filtering Rule Configuration - Packet Content Mask To set the CPU Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description Profile ID This is the identifier number for this profile set.
Page 247 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch value (16-31) - Enter a value in hex form to mask the packet from byte 16 to byte 31. • value (32-47) - Enter a value in hex form to mask the packet from byte 32 to byte 47.
Page 248: Security
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 11 Security Traffic Control Port Security Port Lock Entries 802.1X Trusted Host Access Authentication Control Traffic Segmentation Broadcast Segmentation IP MAC Binding Limited IP Multicast Range Web-based Access Control...
Page 249: Traffic Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Traffic Control On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
Page 250 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Traffic Control Settings Storm Type Select the type of Storm Type to detect, either Broadcast Multicast or Unicast. Once selected, use the pull-down menu to enable or disable the specified type of storm detection.
Page 251: Port Security
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Security A given ports’ (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. Using the Admin State pull- down menu to Enabled, and clicking Apply can lock the port.
Page 252: Port Lock Entries
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Lock Entries The Port Lock Entries Table window is used to remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view the following window, click Security > Port Lock Entries: Figure 11- 3.
Page 253: Port Access Entity (802.1X)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model.
Page 254 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch). Clients connected to a port on the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any services offered by the Switch on the LAN.
Page 255: Authentication Process
Figure 11- 9. The 802.1x Authentication Process The D-Link implementation of 802.1x allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 256: Understanding 802.1X Port-Based And Mac-Based Network Access Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Understanding 802.1x Port-based and MAC-based Network Access Control The original intent behind the development of 802.1X was to leverage the characteristics of point-to-point in LANs. As any single LAN segment in such infrastructures has no more than two devices attached to it, one of which is a Bridge Port. The Bridge Port detects events that indicate the attachment of an active device at the remote end of the link, or an active device becoming inactive.
Page 257: Mac-Based Network Access Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client...
Page 258: Configure 802.1X Authenticator Parameter
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Configure 802.1x Authenticator Parameter To configure the 802.1X Authenticator Settings, click Security > Configure 802.1X Authenticator Parameter: Figure 11- 12. 802.1X Authenticator Settings window To configure the settings by port, click on the hyperlinked port number under the Port heading, which will display the following...
Page 259 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 13. 802.1X Authenticator Settings window (Modify) This window allows you to set the following features: Parameter Description From [ ] To [ ] Enter the port or ports to be set.
Page 260: Initializing Ports For Port Based 802.1X
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch client. The default setting is 30 seconds. ServerTimeout This value determines timeout conditions in the exchanges between the Authenticator and the authentication server. The default setting is 30 seconds. MaxReq The maximum number of times that the Switch will retransmit an EAP Request to the client before it times out of the authentication sessions.
Page 261: Initializing Ports For Mac Based 802.1X
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description From / To Use the drop-down menus to select the ports that need to be initialized. Port A read-only field indicating a port on the Switch. MAC Address The MAC address of the Switch connected to the corresponding port, if any.
Page 262: Reauthenticate Port(S) For Port Based 802.1X
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Reauthenticate Port(s) for Port Based 802.1x This window allows re-authentication of a port or group of ports by using the pull-down menus From and To and clicking Apply. The Reauthenticate Port Table displays the current status of the reauthenticated port(s) once Apply has been clicked.
Page 263: Authentication Radius Server
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To reauthenticate ports, first choose the range of ports in the From and To field. Then the user must specify the MAC address to be reauthenticated by entering it into the MAC Address field and checking the corresponding check box. To begin the reauthentication, click Apply.
Page 264: Radius Attributes Assignment
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch RADIUS Attributes Assignment 1. To assign Ingress/Egress bandwidth by RADIUS server, the proper parameters should be configured on the RADIUS Server. The tables below show the parameters for bandwidth and default priority:...
Page 265: Guest Vlans
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Guest VLANs On 802.1x security enabled networks, there is a need for non 802.1x supported devices to gain limited access to the network, due to lack of the proper 802.1x software or incompatible...
Page 266: Trusted Host
NOTE: For more information and configuration examples for the 802.1X Guest VLAN function, please refer to the Guest VLAN Configuration Example located on the D-Link website.
Page 267: Access Authentication Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Access Authentication Control The TACACS/XTACACS/TACACS+/RADIUS commands allow users to secure access to the Switch using the TACACS/XTACACS/TACACS+/RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
Page 268: Authentication Policy And Parameter Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authentication Policy and Parameter Settings This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login.
Page 269: Authentication Server Group
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authentication Server Group This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to group TACACS/XTACACS/TACACS+/RADIUS server hosts into user-defined categories for authentication using method lists. The user may define the type of server group by protocol or by previously defined server group.
Page 270: Authentication Server Host
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Authentication Server Host This window will set user-defined Authentication Server Hosts for the TACACS/XTACACS/TACACS+/RADIUS security protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the Switch will send authentication packets to a remote TACACS/XTACACS/TACACS+/RADIUS server host on a remote host.
Page 271: Login Method Lists
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Configure the following parameters to add an Authentication Server Host: Parameter Description IP Address The IP address of the remote server host the user wishes to add. Protocol The protocol used by the server host. The user may choose one of the following: TACACS - Enter this parameter if the server host utilizes the TACACS protocol.
Page 272 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 30. Login Method Lists Settings window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the under the Delete heading corresponding to the entry desired to be deleted.
Page 273: Enable Method Lists
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch TACACS+ protocol from a remote TACACS+ server. radius - Adding this parameter will require the user to be authenticated using the • RADIUS protocol from a remote RADIUS server. server_group - Adding this parameter will require the user to be authenticated using •...
Page 274 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 34. Enable Method List - Edit window Figure 11- 35. Enable Method List - Add window To define an Enable Login Method List, set the following parameters and click Apply:...
Page 275: Configure Local Enable Password
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Configure Local Enable Password This window will configure the locally enabled password for the Enable Admin command. When a user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch.
Page 276: Three Level User Accounts
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Three Level User Accounts When the user logins to the device successfully through TACACS/XTACACS/TACACS+ server or none method, “User” privilege level is the only level assigned. If the user wants to get “Admin” privilege level, the user must use the Enable Admin window to promote his privilege level.
Page 277: Accounting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Accounting The Accounting feature of the Switch uses a remote RADIUS server to collect information regarding events occurring on the Switch. The following is a list of information that will be sent to the RADIUS server when an event triggers the Switch to send these informational packets.
Page 278: Traffic Segmentation
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single port to a group of ports on either a single switch or a group of ports on another switch in a switch stack. This method of segmenting the flow of traffic is similar to using VLANs to limit traffic, but is more restrictive.
Page 279: Broadcast Segmentation
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Broadcast Segmentation Broadcast Segmentation can isolate layer 2 broadcast domains between ports, while keeping IP traffic forwarded between ports. This feature is particularly useful in an Ethernet-to-the-Home environment where broadcasts need to be blocked between each house-hold, while allowing IP communication between them.
Page 280 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The Broadcast Segmentation window is divided into three main sections, Broadcast Filter Ports, ARP Forward Ports and Broadcast Segmentation Table. The user may set the following parameters for the Broadcast Filter Ports section:...
Page 281: Secure Socket Layer (Ssl)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Secure Socket Layer (SSL) Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a...
Page 282 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To view the windows for Download Certificate and Ciphersuite, click Security > SSL: Figure 11- 42. Download Certificate and Ciphersuite window To download certificates, set the following parameters and click Apply.
Page 283 Switch and need to be configured using the command line interface. For more information on SSL and its functions, see the xStack DES-3800 Series CLI Manual, located on the documentation CD of this product.
Page 284: Ssh
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows a secure login to remote host computers, a safe method of executing commands on a remote end node, and will provide secure encrypted and authenticated communication between two non-trusted hosts.
Page 285: Ssh Authentication Mode And Algorithm Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Auth. Fail (2-20) Allows the Administrator to set the maximum number of attempts that a user may try to log on to the SSH Server utilizing the SSH authentication. After the maximum number of attempts has been exceeded, the Switch will be disconnected and the user must reconnect to the Switch to attempt another login.
Page 286: Ssh User Authentication
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Encryption Algorithm 3DES-CBC Use the pull-down to enable or disable the Triple Data Encryption Standard encryption algorithm with Cipher Block Chaining. The default is Enabled. Blow-fish CBC Use the pull-down to enable or disable the Blowfish encryption algorithm with Cipher Block Chaining.
Page 287 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 46. SSH User modify window The user may set the following parameters: Parameter Description User Name Enter a User Name of no more than 15 characters to identify the SSH user. This User Name must be a previously configured user account on the Switch.
Page 288: Ip-Mac Binding
The maximum number of IP-MAC binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the device. For the xStack DES-3800 Series switches, Active and inactive entries use the same database.
Page 289 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch These two entries cannot be modified or deleted using the Access Profile Table, and any attempt to do so will result in failure. The user may only remove these two entries by disabling the ACL Mode in the IP-MAC Binding Port window.
Page 290: Ip-Mac Binding Port
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP-MAC Binding Port To enable or disable IP-MAC binding on specific ports, click Security > IP-MAC Binding > IP-MAC Binding Port to view the IP-MAC Binding Ports Setting window. Select a port or a range of ports with the From and To fields. Enable or disable the port with the State, allow_zero_IP and forward_DHCP packet field, and configure the port’s maximum entry.
Page 291 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Parameter Description ACL Mode This field will enable and disable the ACL mode for IP-MAC binding on the Switch, without altering previously set configurations. When enabled, the Switch will automatically create two ACL packet content mask entries which will aid the user in processing certain IP-MAC binding entries created.
Page 292: Ip-Mac Binding Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP-MAC Binding Table The window shown below can be used to create IP-MAC binding entries. Click Security > IP-MAC Binding > IP-MAC Binding Table to view the IP-MAC Binding Setting window. Enter the IP and MAC addresses of the authorized users in the appropriate field, choose the designated ports, and click Add.
Page 293: Ip-Mac Binding Blocked
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch IP-MAC Binding Blocked To view unauthorized devices that have been blocked by IP-MAC binding restrictions open the IP-MAC Binding Blocked window shown below. Click Security > IP-MAC Binding > IP-MAC Binding Blocked to open the IP-MAC Binding Blocked window.
Page 294: Limited Ip Multicast Range
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Limited IP Multicast Range The Limited IP Multicast Range Profile Settings window allows the user to add a profile where multicast address(es) reports will be received on specified ports on the Switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the Switch.
Page 295 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 56. Limited IP Multicast Range Port Access Settings Window...
Page 296: Limited Ip Multicast Max Group Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Limited IP Multicast Max Group Settings The Limited IP Multicast Max Group Settings enables the user to configure the ports on the switch that will be apart of the maximum filter group up to a maximum of 256. To configure these settings, click Security > Limited IP Multicast Range to open the Limited IP Multicast Max Group Settings window shown below: Figure 11- 57.
Page 297: Web-Based Access Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Web-based Access Control Web-based Access Control is another port based access control method implemented similarily to the 802.1x port based access control method previously stated. This function will allow user...
Page 298 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To configure the Switch for WAC, click Security > WAC Configuration, which will open the following screen. Figure 11- 58. Web-based Access Control Configuration window To set the Web-based Access Control for the Switch, complete the following fields:...
Page 299 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Control can be enabled. Click Apply to implement changes made. NOTE: To enable the Web-based Access Control function, the redirection path field must have the URL of the website that users will be directed to once they enter the limited resource, pre-configured VLAN.
Page 300 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To set user accounts for the Web-based Access Control click Security > Web-based Access Control > User Account Management which will open the following screen for the user to configure: Figure 11- 60.
Page 301: Mac-Based Access Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MAC-Based Access Control The MAC-Based Access Control feature will allow users to configure a list of MAC addresses, either locally or on a remote RADIUS server, to be authenticated by the Switch and given access rights based on the configurations set on the Switch of the target VLAN where these authenticated users are placed.
Page 302: Mac-Based Access Control Global Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MAC-Based Access Control Global Settings The following window is used to set the parameters for the MAC-Based Access Control function on the Switch. Here the user can set the running state, method of authentication, RADIUS password and view the Guest VLAN configuration to be associated with the MAC-Based Access Control function of the Switch.
Page 303: Mac-Based Access Control Port Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 62. Guest VLAN Configuration window for MAC-Based Access Control Simply click the ports to be used for MAC-Based Access Control within the Guest VLAN. Web-Based Authentication and 802.1X Guest VLAN ports cannot be set for MAC-Based Access Control and any attempt to do so will result in an error message.
Page 304: Mac-Based Access Control Local Database Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch To configure a port or range of ports for the MAC-Based Access Control feature, use the From and To pull-down menus to choose the ports, and then use the State pull-down menu to enable them. To view the MAC address authentication on a port-by- port basis, click the hyperlinked port number, which will display the following window listing that pertinent information, as seen below.
Page 305: Safeguard Engine
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Safeguard Engine Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the Safeguard Engine beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
Page 306 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 11- 67. Safeguard Engine window To configure the Switch’s Safeguard Engine, change the State to Enabled. To configure the parameters for the Safeguard Engine, click the Advanced Settings button which will alter the previous screen to look like this: Figure 11- 68.
Page 307: Filter
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Filter CPU Filtering Settings The CPU Filtering Settings window is divided into two sections. The top section allows the settings of the CPU Filtering Settings to be changed. The bottom section displays the CPU Filtering Status of each port on the Switch.
Page 308 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch The following parameters can be configured for CPU Filtering: Parameter Description From / To Use the drop-down menus to select the ports that require the CPU Filter applied to. Select Enabled from the drop-down menu to discard RIP l3 control packets sent to the CPU from the specified ports.
Page 309: Monitoring
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 12 Monitoring Device Status CPU Utilization Safeguard Engine Status Port Utilization Packets Errors Packet Size Browse Router Port Port Access Control MAC Address Table IP Address Table Browse Routing Table...
Page 310: Cpu Utilization
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CPU Utilization The CPU Utilization window displays the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval. To view this window, click Monitoring > CPU Utilization.
Page 311: Safeguard Engine Status
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Safeguard Engine Status The following window displays parameters configured for and about the Safeguard Engine Status currently set on the Switch. Figure 12- 3. Safeguard Engine Status and CPU Utilization Information window...
Page 312: Port Utilization
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Utilization The Utilization window displays the percentage of the total available bandwidth being used on the port. To view the port utilization, click Monitoring > Port Utilization: Figure 12- 4. Port Utilization window Select a port number from the drop down menu and click apply to display the Port Utilization for a particular port.
Page 313: Packets
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) To view this window, click Monitoring > Packets > Received (RX) to display the following graph of packets received on the Switch.
Page 314 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 6. Rx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 315: Umb Cast (Rx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch UMB Cast (RX) To view this window, click Monitoring > Packets > UMB Cast (RX) to display the following graph of UMB cast packets received on the Switch. Figure 12- 7. Rx Packets Analysis window (line graph for Unicast, Multicast, and Broadcast Packets)
Page 316 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 8. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second.
Page 317: Transmitted (Tx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Transmitted (TX) To view this window, click Monitoring > Packets > Transmitted (TX) to display the following graph of packets transmitted from the Switch. Figure 12- 9. Tx Packets Analysis window (line graph for Bytes and Packets)
Page 318 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 10. Tx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second.
Page 319: Errors
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Errors The Web Manager allows port error statistics compiled by the Switch's management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) To view this window, click Monitoring >...
Page 320 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 12. Rx Error Analysis window (table) The following fields can be set: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 321: Transmitted (Tx)
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Transmitted (TX) To view this window, click Monitoring > Errors > Transmitted (TX) to display the following graph of error packets received on the Switch. Figure 12- 13. Tx Error Analysis window (line graph)
Page 322 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 14. Tx Error Analysis window (table) The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 323: Packet Size
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Packet Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table. Two windows are offered.
Page 324 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 16. Tx/Rx Packet Size Analysis window (table) The following fields can be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 325: Browse Router Port
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Browse Router Port This displays which of the Switch's ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. D designates a router port that is dynamically configured by the Switch.
Page 326: Port Access Control
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Port Access Control The following screens are used to monitor 802.1x statistics of the Switch, on a per port basis. To view the Port Access Control screens, open the monitoring folder and click the Port Access Control folder. There are six screens to monitor.
Page 327: Radius Accounting
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch BadAuthenticators The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributes received from this server. PendingRequests The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response.
Page 328: Authenticator State
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Responses The number of RADIUS packets received on the accounting port from this server. MalformedResponses The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.
Page 329 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch This window displays the Authenticator State for individual ports on a selected device. To select unit within the switch stack, use the pull-down menu at the top of the window and click Apply. A polling interval between 1 and 60 seconds can be set using the drop-down menu at the top of the window and clicking OK.
Page 330: Mac Address Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch MAC Address Table This allows the Switch's dynamic MAC address forwarding table to be viewed. When the Switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table.
Page 331: Ip Address Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Clear All Entry Clicking this button will allow the user to delete all entries of the address table. IP Address Table The IP Address Table is a read only screen where the user may view IP addresses discovered by the Switch. To search a specific IP address, enter it into the field labeled IP Address at the top of the screen and click Find to begin your search.
Page 332: Browse Ip Multicast Forwarding Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 23. Browse ARP Table window Browse IP Multicast Forwarding Table This window will show current IP multicasting information on the Switch. To search a specific entry, enter a multicast group IP address into the Multicast Group field or a Source IP address and click Find.
Page 333: Igmp Snooping Forwarding
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch NOTE: The Switch supports up to 256 IGMP Snooping groups. The following field can be viewed: Parameter Description VLAN Name The VLAN Name of the multicast group. Multicast Group The IP address of the multicast group.
Page 334: Browse Igmp Group Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Browse IGMP Group Table This window will show current IGMP group entries on the Switch. To search a specific IGMP group entry, enter an interface name into the Interface Name field or a Multicast Group IP address and click Find.
Page 335: Dvmrp Monitoring
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch DVMRP Monitoring This menu allows the DVMRP (Distance-Vector Multicast Routing Protocol) to be monitored for each IP interface defined on the Switch. This folder, found in the Monitoring folder, offers 4 screens for monitoring: Browse DVMRP Routing Table, Browse DVMRP Neighbor Address Table, Browse DVMRP Routing Next Hop Table and Browse PIM Neighbor Table.
Page 336: Pim Monitoring
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Figure 12- 31. DVMRP Routing Next Hop Table PIM Monitoring Multicast routers use Protocol Independent Multicast (PIM) to determine which other multicast routers should receive multicast packets. To find out more information concerning PIM and its configuration on the Switch, see the IP Multicast Routing Protocol chapter of Section 6, Configuration.
Page 337: Browse Pim Rp Set Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Browse PIM RP Set Table The following window is used to assess information regarding the Rendezvous Point (RP) Set on the Switch. This screen may be found by clicking Monitoring > Layer 3 Feature > PIM Monitor > Browse PIM RP Set Table.
Page 338: Ospf Monitor
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch OSPF Monitor This section offers windows regarding OSPF (Open Shortest Path First) information on the Switch, including the OSPF LSDB Table, OSPF Neighbor Table and the OSPF Virtual Neighbor Table. To view these tables, open the Monitoring folder and click OSPF Monitor.
Page 339: Browse Ospf Neighbor Table
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Sequence Displays a sequence number corresponding to number of times the current link has been advertised as changed. Browse OSPF Neighbor Table Routers that are connected to the same area or segment become neighbors in that area. Neighbors are elected via the Hello protocol.
Page 340: Browse Wred Settings
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Browse WRED Settings The following window displays the WRED settings currently employed on the Switch. To view this window, click Monitoring > Browse WRED Settings. Figure 12- 39. WRED Settings window...
Page 341: Switch Log
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Switch Log The Web manager allows the Switch's history log, as compiled by the Switch's management agent, to be viewed. To view the Switch history log, click Monitoring > Switch Log.
Page 342: Switch Maintenance
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Section 13 Switch Maintenance Reset Reboot System Save Changes Logout Reset The Reset function has several options when resetting the Switch. Some of the current configuration parameters can be retained while resetting all other configuration parameters to their factory defaults.
Page 343: Reboot System
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Reboot System The following window is used to restart the Switch. All of the configuration information entered from the last time Save Changes was executed will be lost. Click the Reboot button to restart the Switch.
Page 344: Save Changes
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Save Changes The Switch has two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective by clicking the Apply button. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
Page 345: Technical Specifications
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Appendix A Technical Specifications General Standards IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.3z 1000BASE-T (SFP “Mini GBIC”) IEEE 802.1D Spanning Tree IEEE 802.1W Rapid Spanning Tree...
Page 346 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Physical and Environmental DES-3828 and DES-3852 Internal power supply Input: 100~240V, AC/1A, 50~60Hz Output: 12V, 5A (MAX), DES-3828P Input: 100~240V, AC/10A, 50~60Hz Output: -50V, -50Vrtn, 7.5A (MAX); 12V, 10.5A (MAX),...
Page 347: System Log Entries
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Appendix B System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Event Cat. Log Content...
Page 348 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch by console and "IP: <ipaddr>, MAC: Configuration successfully <macaddr>" are XOR Configuration downloaded by console shown in log string, which Informational successfully downloaded (Username: <username>, IP: means if user login by <ipaddr>, MAC: <macaddr>)
Page 349 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Console session timed Console session timed out There are no IP and MAC Informational (Username: <username>) if login by console. Successful login through Web Successful login through (Username: <username>, IP: Informational <ipaddr>, MAC: <macaddr>)
Page 350 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch SSH server is enabled SSH server is enabled Informational SSH server is disabled SSH server is disabled Informational Authentication Policy is Authentication Policy is enabled Informational enabled (Module: AAA) Authentication Policy is...
Page 351 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Successful login through Web Successful login through (SSL) from <userIP> Web (SSL) authenticated authenticated by AAA none Informational by AAA none method method (Username: <username>, MAC: <macaddr>) Successful login through Telnet Successful login through from <userIP>...
Page 352 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Successful login through Telnet Successful login through from <userIP> authenticated by Telnet authenticated by AAA server <serverIP> Informational AAA server (Username: <username>, MAC: <macaddr>) Login failed through Telnet from Login failed through <userIP>...
Page 353 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Successful Enable Admin through Successful Enable Telnet from <userIP> Admin through Telnet authenticated by AAA Informational authenticated by AAA local_enable method (Username: local_enable method <username>, MAC: <macaddr>) Enable Admin failed through Enable Admin failed Telnet from <userIP>...
Page 354 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Successful Enable Admin through Successful Enable Web from <userIP> authenticated Admin through Web by AAA server <serverIP> Informational authenticated by AAA (Username: <username>, MAC: server <macaddr>) Enable Admin failed through Web Enable Admin failed from <userIP>...
Page 355 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Enable Admin failed through SSH Enable Admin failed from <userIP> due to AAA server through SSH due to timeout or improper configuration Warning AAA server timeout or (Username: <username>, MAC: improper configuration <macaddr>)
Page 356 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Receive a not-support Interface <string>, VRID <id> authentication type receives an invalid VRRP Warning string is "interface name" packet authentication type packet Safeguard Engine is in Safeguard Engine enters Informational...
Page 357: Cables And Connectors
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Appendix C Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment.
Page 358: Console Cable Pin Assignment
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Appendix D Console Cable Pin Assignment The following picture describes the pin assignment for the null modem straight-through RS-232 cable with a female DB-9 connector.
Page 359: Cable Lengths
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Appendix E Cable Lengths Use the following table to as a guide for the maximum cable lengths. Standard Media Type Maximum Distance Mini-GBIC 1000BASE-LX, Single-mode fiber module 10km 1000BASE-SX, Multi-mode fiber module...
Page 360: Arp Packet Content Acl
This protocol is vulnerable that crackers can spoof the IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce ARP protocol, ARP spoofing attacks, and the countermeasure devised by D-Link to put an end to ARP spoofing attacks. How Address Resolution Protocol works In the process of ARP, PC A will, firstly, issue an ARP request to query PC B’s MAC address.
Page 361 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port and enter them in its Forwarding Table.
Page 362 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Protocol Protocol Operation Sender Sender Target Target type type address address protocol protocol H/W address H/W address length length address address 10.10.10.1 10.10.10.2 ARP reply 00-20-5C-01-11-11 00-20-5C-01-22-22 Table – 3 (ARP Payload) When PC B replies to the query, the “Destination Address”...
Page 363: Dns Server
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch How ARP spoofing attacks a network ARP spoofing, also known as ARP poisoning, is a method to attack an Ethernet network which may allow an attacker to sniff data frames on a LAN, modify the traffic, or stop the traffic altogether (known as a Denial of Service - DoS attack). The principle of ARP spoofing is to send the fake, or spoofed ARP messages to an Ethernet network.
Page 364 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Gratuitous ARP Ethernet Header Destination Source address Ethernet H/W type Protocol Protocol Operation Sender H/W Sender Target H/W Target address type type address address address protocol address protocol length length...
Page 365 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Prevent ARP spoofing via packet content ACL Concerning the common DoS attack today caused by the ARP spoofing, D-Link managed switch can effectively mitigate it via its unique Packet Content ACL.
Page 366 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch...
Page 367 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch...
Page 368: Glossary
DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch Glossary 1000BASE-LX: A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-SX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX: 100Mbps Ethernet implementation over fiber.
Page 369 DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch latency: The delay between the time a device receives a packet and the time the packet is forwarded out of the destination port. line speed: See baud rate. main port: The port in a resilient link that carries data traffic in normal operating conditions.
Page 370 FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this manual, may cause harmful interference to radio communications.
Page 371 The customer must submit with the product as part of the claim a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same, along with proof of purchase of the product (such as a copy of the dated purchase invoice for the product).
Page 372 D-Link Corporation/D-Link Systems, Inc., as stipulated by the United States Copyright Act of 1976 and any amendments thereto. Contents are subject to change without prior notice. Copyright 2009 by D-Link Corporation/D-Link Systems, Inc.
Page 373: Product Registration
Product Registration Register your D-Link product online at http://support.dlink.com/register/ Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
Page 374 Such repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement Hardware need not be new or of an identical make, model or part; D-Link may in its discretion replace the defective Hardware (or any part thereof) with any reconditioned product that D- Link reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware.
Page 375 Submitting A Claim. Any claim under this limited warranty must be submitted in writing before the end of the Warranty Period to an Authorized D-Link Service Office. The claim must include a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same.
Page 376: Fcc Warning
DEFECTIVE OR NON-CONFORMING PRODUCT. GOVERNING LAW: This Limited Warranty shall be governed by the laws of the state of Singapore. Trademarks D-Link is a registered trademark of D-Link Corporation/ D-Link International Ptd Ltd. All other trademarks belong to their respective proprietors. Copyright Statement...
Page 377: Tech Support
You can find software updates and user documentation on the D- Link website. D-Link provides free technical support for customers within the United States and within Canada for the duration of the service period, and warranty confirmation service, during the warranty period on this product.
Page 378: Technical Support
Technical Support United Kingdom (Mon-Fri) Home Wireless/Broadband 0871 873 3000 (9.00am–06.00pm, Sat 10.00am-02.00pm) Managed, Smart, & Wireless Switches, or Firewalls 0871 873 0909 (09.00am – 05.30pm) (BT 10ppm, other carriers may vary.) Ireland (Mon-Fri) All Products 1890 886 899 (09.00am-06.00pm, Sat 10.00am-02.00pm) €0.05ppm peak, €0.045ppm off peak Times Internet http://www.dlink.co.uk...
Page 379: Assistance Technique
Assistance technique Assistance technique D-Link par téléphone : 0 820 0803 03 0,12 €/min la minute : Lundi – Vendredi de 9h à 13h et de 14h à 19h Samedi 9h à 13h et de 14h à 16h Assistance technique D-Link sur internet : http://www.dlink.fr...
Page 380 Pomoc techniczna Telefoniczna pomoc techniczna firmy D-Link: 0 801 022 021 Pomoc techniczna firmy D-Link świadczona przez Internet: URL: http://www.dlink.pl e-mail: serwis@dlink.pl Technická podpora Web: http://www.dlink.cz/suppport/ E-mail: support@dlink.cz Telefon: 225 281 553 Telefonická podpora je v provozu: PO- PÁ od 09.00 do 17.00 Land Line 1,78 CZK/min - Mobile 5.40 CZK/min...
Page 381 Teknistä tukea asiakkaille Suomessa: Arkisin klo. 9 - 21 numerosta : 06001 5557 Internetin kautta : http://www.dlink.fi Teknisk Support D-Link Teknisk Support via telefon: 0900-100 77 00 Vardagar 08.00-20.00 D-Link Teknisk Support via Internet: http://www.dlink.se Assistência Técnica Assistência Técnica da D-Link na Internet: http://www.dlink.pt...
Page 382 D-Link - ovo spletno stran www.dlink.eu www.dlink.biz/sl Suport tehnica Vă mulţumim pentru alegerea produselor D-Link. Pentru mai multe informaţii, suport şi manuale ale produselor vă rugăm să vizitaţi site-ul D-Link www.dlink.eu www.dlink.ro...
Page 383 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers in Australia: Tel: 1300-766-868 24/7(24Hrs, 7days a week) technical support http://www.dlink.com.au e-mail: support@dlink.com.au India: Customer Support: - 1800-233-0000 (MTNL & BSNL Toll Free) or +91-832-2885700 (GSM, CDMS &...
Page 384 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers in Egypt: Tel: +202-2919035 or +202-2919047 Sunday to Thursday 9:00am to 5:00pm http://support.dlink-me.com Email: support.eg@dlink-me.com Iran: Te: +98-21-88880918,19 Saturday to Thursday 9:00am to 5:00pm http://support.dlink-me.com...
Page 385 Техническая поддержка Обновления программного обеспечения и документация доступны на Интернет-сайте D-Link. D-Link предоставляет бесплатную поддержку для клиентов в течение гарантийного срока. Клиенты могут обратиться в группу технической поддержки D-Link по телефону или через Интернет. Техническая поддержка D-Link: +7(495) 744-00-99 Техническая поддержка через Интернет...
Page 386 SOPORTE TÉCNICO Usted puede encontrar actualizaciones de softwares o firmwares y documentación para usuarios a través de nuestro sitio www.dlinkla.com SOPORTE TÉCNICO PARA USUARIOS EN LATINO AMERICA Soporte técnico a través de los siguientes teléfonos de D-Link PAIS NUMERO HORARIO...
Page 387 Você pode encontrar atualizações de software e documentação de usuário no site da D-Link Brasil. A D-Link fornece suporte técnico gratuito para clientes no Brasil durante o período de vigência da garantia deste produto. Suporte Técnico para clientes no Brasil: Telefone São Paulo +11-2185-9301...
Page 388 D-Link D-Link...
Page 389 Dukungan Teknis Update perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link. Dukungan Teknis untuk pelanggan: Dukungan Teknis D-Link melalui telepon: Tel: +62-21-5731610 Dukungan Teknis D-Link melalui Internet: Email : support@dlink.co.id Website : http://support.dlink.co.id...
Page 390 Technical Support この度は弊社製品をお買い上げいただき、誠にありがとうございます。下記弊社 Web サイトからユーザ登録及び新製品登録を行っていただくと、ダウンロードサービスにてサポート情報、ファームウェア、ユーザマニュアルをダウンロードすることができます。ディーリンクジャパン Web サイト URL:http://www.dlink-jp.com...
Page 391 技术支持您可以在 D-Link 的官方網站找到產品的軟件升級和使用手冊办公地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编: 100013 技术支持中心电话：8008296688/ (028)66052968 技术支持中心传真：(028)85176948 维修中心地址：北京市东城区北三环东路 36 号环球贸易中心 B 座 26F 02-05 室邮编: 100013 维修中心电话：(010) 58257789 维修中心传真：(010) 58257790 网址：http://www.dlink.com.cn 办公时间：周一到周五，早09:00到晚18:00...

This manual is also suitable for:

Xstack des-3828 Xstack des-3828p Xstack des-3828dc Xstack des-3852

D-Link xStack DES-3800 Series User Manual

Introduction

Installation

Connecting the Switch

Introduction to Switch Management

Web-Based Switch Configuration

Administration

Layer 2 Features

Layer 3 Features

Qos

Acl

Security

Monitoring

Quick Links

User Manual

Related Manuals for D-Link xStack DES-3800 Series

Summary of Contents for D-Link xStack DES-3800 Series