manualshive.com logo in svg

D-Link D DXS-3227 DXS-3227, Web/Installation Manual

Share
Download
D-Link D DXS-3227 DXS-3227 Web/Installation Manual Download Page 93

D-Link DXS-3250/DXS-3227P/DXS-3227 User Guide

Page 93 

Configuring Network Security

Network security manages both access control lists and locked ports. This section contains the following topics: 

•

Network Security Overview

•

Defining Network Authentication Properties

•

Defining Port Authentication

•

Configuring Traffic Control

Network Security Overview

This section provides an overview of network security and contains the following topics: 

•

Port-Based Authentication

•

Advanced Port-Based Authentication

Port-Based Authentication

Port-based authentication authenticates users on a per-port basis via an external server. Only authenticated and 
approved system users can transmit and receive data. Ports are authenticated via the RADIUS server using the 

Extensible Authentication Protocol 

(EAP). Port-based authentication includes:

•

Authenticators

 — Specifies the device port which is authenticated before permitting system access.

•

Supplicants

 — Specifies the host connected to the authenticated port requesting to access the system ser-

vices.

•

Authentication Server 

— Specifies the server that performs the authentication on behalf of the authentica-

tor, and indicates whether the supplicant is authorized to access system services. 

Port-based authentication creates two access states:

•

Controlled Access

 — Permits communication between the supplicant and the system, if the supplicant is 

authorized. 

•

Uncontrolled Access

 — Permits uncontrolled communication regardless of the port state.

The device currently supports port-based authentication via RADIUS servers. 

Advanced Port-Based Authentication

Advanced port-based authentication enables multiple hosts to be attached to a single port. Advanced port-based 
authentication requires only one host to be authorized for all hosts to have system access. If the port is unautho-
rized, all attached hosts are denied access to the network.

Advanced port-based authentication also enables user-based authentication. Specific VLANs in the device are 
always available, even if specific ports attached to the VLAN are unauthorized. For example, Voice over IP does 
not require authentication, while data traffic requires authentication. VLANs for which authorization is not required 
can be defined. Unauthenticated VLANs are available to users, even if the ports attached to the VLAN are defined 
as authorized.

Summary of Contents for D DXS-3227 DXS-3227

Page 1: ... Copyright 2005 All rights reserved Web Installation Guide Product Model DXS 3200 Series L2 Stackable Gigabit Mngd Switch with Optional 10Gig Uplinks Release 1 ...

Page 2: ...nnecting the Device 27 Initial Configuration 29 General Configuration Information 29 Booting the Switch 30 Stacking Configuration 32 Configuration Overview 33 Advanced Configuration 36 Software Download and Reboot 39 Startup Menu Functions 41 Getting Started 45 Starting the D Link Embedded Web Interface 46 Understanding the D Link Embedded Web Interface 48 Using Screen and Table Options 51 Resetti...

Page 3: ...7 Configuring LACP 119 Configuring VLANs 121 Defining VLAN Properties 122 Defining VLAN Membership 124 Defining VLAN Interface Settings 125 Configuring GARP 127 Defining VLAN Groups 131 Configuring IP Information 135 Configuring IP Interfaces 135 Configuring Domain Name Servers 143 Defining the Forwarding Database 148 Defining Static Forwarding Database Entries 149 Defining Dynamic Forwarding Data...

Page 4: ...nfiguring SNMP 199 SNMP v1 and v2c 199 SNMP v3 199 Configuring SNMP Security 200 Configuring SNMP Notifications 213 Configuring System Time 221 Configuring Daylight Savings Time 222 Configuring SNTP 226 Defining SNTP Global Settings 228 Defining SNTP Authentication 230 Defining SNTP Servers 232 Defining SNTP Interface Settings 234 Managing System Logs 236 Enabling System Logs 237 Viewing the Devic...

Page 5: ...ing RMON Statistics 257 Appendix A Technical Specifications 264 Appendix B Cables and Connectors 267 Appendix C Troubleshooting 269 Problem Management 270 Troubleshooting Solutions 270 Warranty 273 Product Registration 276 Contacting D Link Technical Support 277 International Offices 304 ...

Page 6: ...web browser The D Link Embedded Web Interface web pages are easy to use and easy to navigate In addition The D Link Embedded Web Interface pro vides real time graphs and RMON statistics to help system administrators monitor network performance This preface provides an overview to the D Link Embedded Interface User Guide and includes the following sec tions DXS 3250 DXS 3227P DXS 3227 User Guide Ov...

Page 7: ...ogies assigning stacking IDs and replacing and removing stacking members Section 6 Managing Device Information Provides information about opening the device zoom view defining general system information and enabling Jumbo frames Section 7 Managing Power over Ethernet Devices Provides information about configuring and manag ing PoE devices Section 8 Configuring Device Security Provides information ...

Page 8: ...nd viewing device health information Section 19 Configuring System Time Provides information about configuring system time including Daylight Savings Time parameters and Simple Network Time Protocol SNTP parameters Section 22 Viewing Statistics Provides information about viewing device statistics including RMON sta tistics device history events and port and LAG utilization statistics Appendix A Tr...

Page 9: ...Preface Intended Audience Page 8 ...

Page 10: ... 1 Device Description This section contains a description of the D Link DXS 3250 and D Link DXS 3227 and contains the following top ics Viewing the Device Ports Description Cable Specifications LED Defiitions Cable Port and Pinout Information Physical Dimensions ...

Page 11: ...re 1 DXS 3250 Front Panel The device front panel is configured as follows 48 Giga Ethernet ports RJ 45 ports designated as 10 100 1000Base T The RJ 45 ports are designated as ports Ports 1 48 RS 232 Console port An asynchronous serial console port supporting the RS 232 electrical specification The port is used to connect the device to the console managing the device 4 SFP Ports There are four SFP ...

Page 12: ...00Base X fiber connections On the front panel there are the Port activity LEDs on each port with the system LEDs displayed separately Back Panels The following figure illustrates both the DXS 3250 and DXS 3227 back panels Figure 3 DXS 3250 and DXS 3227 Back Panel The DES 3010 device back panel is configured as follows Reset Button Resets the device The Reset button does not extend beyond the devic...

Page 13: ...hich supports half and full duplex mode 10 100 1000 Mbps 100Base FX Fiber Ports The 100Base FX Fast Ethernet port is a Fiber port SFP Port Small Form Factor Pluggable SFP Optical Transceivers are integrated duplex data GBIC links for bi directional communication over multimode optical fiber designed for high speed Fiber Channel data links The SFP port is designated as 1000Base X The SFP GBIC port ...

Page 14: ...e is used to connect devices in the stacking configuration RS 232 Console Port The RS 232 port is an asynchronous serial console port supporting the RS 232 electrical specification The port is used to connect the device to a console managing the device This interface configuration is as follows Eight data bits One stop bit No parity Baud rate is 9600 default The user can change the rate from 11520...

Page 15: ...00 meters max EIA TIA 568B 150 ohm STP 100 meters max 1000BASE LX Single mode fiber module 10km 1000BASE SX Multi mode fiber module 550m 1000BASE LH Single mode fiber module 40km 1000BASE ZX Single mode fiber module 80km Mini GBIC SFP Transceiver for 1000BASE LX Single mode fiber module 10km SFP Transceiver for 1000BASE SX Multi mode fiber module 550m SFP Transceiver for 1000BASE LH Single mode fi...

Page 16: ...tatus The different LED types are as follows Port LEDs Indicate each port status System Indicating the device power supply status Port LEDs 1000Base T Gigabit Ethernet RJ 45 Port LEDs The LEDs on the two devices are differently indicated The following figure illustrates the DXS 3250 port LEDs Figure 5 DXS 3250 1000Base T Gigabit Ethernet RJ 45 Port LEDs ...

Page 17: ...ED indications are described in the following table SFP LEDs The following figure illustrates the port LEDs Figure 7 SFP LEDs Table 2 1000Base T Gigabit Ethernet RJ 45 Port LED Indications Port Description LED Indication Description Speed Green A 1000 Mbps link is established on the port Amber A 100 Mbps link is established on the port Off A 10 Mbps link is established on the port Link Activity LE...

Page 18: ...side of the device The following figure illustrates the DXS 3250 system LEDs Figure 8 DXS 3250 System LEDs DXS 3227 The sytstem LEDs on the DXS 3227 device in on the left side of the device The following figure illustrates the DXS 3227 system LEDs Figure 9 DXS 3227 System LEDs Table 3 SFP LED Indications LED Indication Description Green A link is established on the port Flashing Green There is dat...

Page 19: ...ning correctly Fault Red Flashing The device is currently running POST Red The device detected POST running error RPS Green The device is powered through the RPS Off The device is powered through the AC P49 P50 P26 P27 Link Act for XG Port Green Link established on the port Green Flashing There is data transmission on the port Off No link is established on the port MS Red Device is designated as t...

Page 20: ...to Negotiation is set The default is Auto Negotiation Pin Connections for the 10 100 1000 Ethernet Interface The switching port can connect to stations wired in standard RJ 45 Ethernet station mode using straight cables Transmission devices connected to each other use crossed cables The following figure illustrates the pin alloca tion Figure 10 RJ 45 Pin Allocation The following table describes th...

Page 21: ...Device Description Physical Dimensions Page 20 Physical Dimensions The device has the following physical dimensions Width 440 mm 17 32 inch Depth 430mm 16 93 inch Height 45 mm 1 77 inch ...

Page 22: ...227 User Guide Page 21 Section 2 Mounting Device This section contains information for installing the device and includes the following sections Preparing for Installation Installing the Device Connecting the Device Rack Installation ...

Page 23: ...ouching internal equipment Ensure the switch does not overload the power circuits wiring and over current protection To deter mine the possibility of overloading the supply circuits add together the ampere ratings of all devices installed on the same circuit as the device being installed Compare this total with the rating limit for the circuit The maximum ampere ratings are usually printed on the ...

Page 24: ...Console RS 232 cable with DB 9 connector Documentation CD Unpacking Essentials Note Before unpacking the device inspect the package and report any evidence of damage immediately To unpack the device perform the following 1 It is recommended to put on an ESD wrist strap and attach the ESD clip to a metal surface to act as ground An ESD strap is not supplied with the device 2 Place the container on ...

Page 25: ...nd the device cables To install the device on a surface perform the following 1 Attach the rubber feet on the bottom of the device The following figure illustrates the rubber feet installation on the device Figure 11 Installing Rubber Feet 2 Set device down on a flat surface while leaving 2 inches on each side and 5 inches at the back 3 Ensure that the device has proper ventilation by allowing ade...

Page 26: ...ting holes on the device line up to the mounting holes on the rack mounting bracket The following figure illustrates where to mount the brackets Figure 12 Attaching the Mounting Brackets 2 Insert the supplied screws into the rack mounting holes and tighten with a screwdriver 3 Repeat the process for the rack mounting bracket on the other side of the device 4 Insert the unit into the 19 inch rack e...

Page 27: ...in a Rack 5 Secure the unit to the rack with the rack screws not provided Fasten the lower pair of screws before the upper pair of screws This ensures that the weight of the unit is evenly distributed during installation Ensure that the ventilation holes are not obstructed ...

Page 28: ...connect to the device b Set the data rate to 9600 baud c Set the data format to 8 data bits 1 stop bit and no parity d Set flow control to none e Under Properties select VT100 for Emulation mode f Select Terminal keys for Function Arrow and Ctrl keys Ensure that the setting is for Terminal keys not Windows keys Note When using HyperTerminal with Microsoft Windows 2000 ensure that you have Windows ...

Page 29: ...g other functions is described later in this section General Configuration Information Your device has predefined features and setup configuration Auto Negotiation Auto negotiation allows a device to advertise modes of operation and share information with another device that shares a point to point link segment This automatically configures both devices to take maximum advantage of their abili tie...

Page 30: ...an be modified once the device is installed The following is an example for changing the port speed on port g1 using CLI commands The following is an example for enabling flow control on port g1 using CLI commands The following is an example for enabling back pressure on port g1 using CLI commands Booting the Switch To boot the switch perform the following 1 Ensure that the device console is conne...

Page 31: ...appears at the end of POST see the last lines indicates that no problems were encountered during boot During boot the Startup menu can be accessed if necessary to run special procedures To enter the Startup menu press Esc or Enter within the first two seconds after the auto boot message is displayed For information on the Startup menu see Startup Menu Functions If the system boot is not interrupte...

Page 32: ...within two seconds after the POST is completed and the following message is displayed Preparing to decompress Decompressing SW from image 1 638000 OK Running from RAM Running SW Ver x x x x Date 11 Jan 200x Time 15 43 13 HW version is Base Mac address is 00 00 b0 24 11 80 Dram size is xxM bytes Dram first block size is 47104K bytes Dram first PTR is 0x1200000 Flash size is xM Devices on SMI BUS sm...

Page 33: ...f configuration functions with basic security considerations whereas advanced configuration includes dynamic IP configuration and more advanced security considerations After making any configuration changes the new configuration must be saved before rebooting To save the con figuration enter the following CLI command Initial Configuration Initial configuration which starts after the device has boo...

Page 34: ...of the next hop that can be used to reach the management network 192 168 2 0 User Name A user name is used to manage the device remotely for example through SSH Telnet or the Web interface To gain complete administrative super user control over the device the highest privilege 15 must be specified Note Only the administrator super user with the highest privilege level 15 is allowed to manage the d...

Page 35: ...community string community access and IP address can be configured through the local terminal during the initial configuration procedure The SNMP configuration options for the Community String are as follows Access rights options ro read only rw read and write or su super An option to configure IP address or not If an IP address is not configured it means that all community mem bers having the sam...

Page 36: ...To retrieve an IP address from a DHCP server perform the following steps 1 Select and connect any port to a DHCP server or to a subnet that has a DHCP server on it in order to retrieve the IP address 2 Enter the following commands to use the selected port for receiving the IP address In the following example the commands are based on the port type used for configuration The interface receives the ...

Page 37: ...n 60 seconds starts sending BOOTP requests The device receives the IP address automatically Note When the device reboot begins any input at the ASCII terminal or keyboard automatically cancels the BOOTP process before completion and the device does not receive an IP address from the BOOTP server The following example illustrates the process To verify the IP address enter the show ip interface comm...

Page 38: ...figuring an Initial Telnet Password To configure an initial Telnet password enter the following commands When initially logging onto a device through a Telnet session enter bob at the password prompt When changing a device mode to enable enter bob Configuring an Initial SSH password To configure an initial SSH password enter the following commands When initially logging onto a device through a SSH...

Page 39: ...ing XModem which is a data transfer protocol for updating back up configuration files To download a boot file using XModem 1 Enter the command xmodem boot The switch is ready to receive the file via the XModem protocol and dis plays text similar to the following 2 Specify the path of the source file within 20 seconds If the path is not specified within 20 seconds the com mand times out To download...

Page 40: ...e to copy a new system image to the device When the new image is downloaded it is saved in the area allocated for the other copy of system image image 2 as given in the example The following is an example of the information that appears Exclamation symbols indicate that a copying process is in progress A period indicates that the copying pro cess is timed out Many periods in a row indicate that th...

Page 41: ...l lowing is an example of the information that appears 5 Enter the command reload The following message is displayed 6 Enter Y to reboot the switch Startup Menu Functions Additional configuration functions can be performed from the Startup menu To display the Startup menu 1 During the boot process after the first part of the POST is completed press Esc or Enter within two sec onds after the follow...

Page 42: ...r menu click Send File The Send File window is displayed 4 Enter the file path for the file to be downloaded 5 Ensure the protocol is defined as Xmodem 6 Click Send The software is downloaded Software downloading takes several minutes The terminal emulation applica tion such as HyperTerminal may display the progress of the loading process After software downloads the device reboots automatically E...

Page 43: ...is displayed 2 Enter the new Baud rate and press Enter The device Baud rate is changed Stack Menu To manage stacking configurations on the device To manage the device stacking configuration from the Startup menu press 6 within 6 seconds The following message is displayed Set Unit Number in Stack To set the device unit number to be used in a stack see Stacking Configuration Add Stacking Ports The s...

Page 44: ...he following message is displayed 2 Select the port and press Enter The selected port is disabled as a stacking port Stack Info To display the stack configuration 1 From the Stack menu press 4 The following message is displayed Enter your choice or press ESC to exit Stacking Ports List Add stacking ports valid range 1 48 49 50 use q quit Enter your choice or press ESC to exit Stacking Ports List A...

Page 45: ... Started This section provides an introduction to the user interface and includes the following topics Starting the D Link Embedded Web Interface Understanding the D Link Embedded Web Interface Using Screen and Table Options Resetting the Device Logging Off from the Device ...

Page 46: ...s are disabled If pop up blockers are enable edit add and device information messages may not open 3 Enter the device IP address in the address bar and press Enter The Enter Network Password Page opens Figure 14 Enter Network Password Page 4 Enter your user name and password Notes The device is configured with a user name that is admin and a password that is blank and can be configured without ent...

Page 47: ...250 DXS 3227P DXS 3227 User Guide Page 47 Notes The screen captures in this Guide represent the 48 port device The Web pages in the 24 port device may vary slightly Figure 15 D Link Embedded Web Interface Home Page ...

Page 48: ...n instructions Figure 16 D Link Embedded Web Interface Components The following table lists the user interface components with their corresponding numbers Table 7 Interface Components View Description 1 Tree View Tree View provides easy navigation through the configurable device features The main branches expand to display the sub features 2 Device View Device View provides information about devic...

Page 49: ...configuration parameters Device Representation The D Link Embedded Web Interface Home Page contains a graphical panel representation of the device Figure 17 Device Representation 5 Stacking and Device Navi gation Controls Provides stacking units and device navigation Scrolls downwards through the stacking mem bers Toggles between front and back zoom views Scrolls upwards through the the stacking m...

Page 50: ...the following Table 8 D Link Web Interface Configuration Buttons Button Button Name Description Clear Logs Clears system logs Create Enables creation of configuration entries Edit Modifies configuration settings Submit Saves configuration changes to the device Test Performs cable tests Query Queries the device table Table 9 D Link Web Interface Information Tabs Tab Tab Name Description Help Opens ...

Page 51: ...rmation can be added to specific D Link Web Interface pages by opening a new Add page To add information to tables or D Link Web Interface pages 1 Open an D Link Web Interface page 2 Click An add page opens such as the Add SNTP Interface Page Figure 18 Add SNTP Interface 3 Define the fields 4 Click The configuration information is saved and the device is updated Modifying Configuration Information...

Page 52: ...age 4 Modify the fields 5 Click The fields are modified and the information is saved to the device Deleting Configuration Information 1 Open The D Link Embedded Web Interface page 2 Select a table row 3 Select the Remove checkbox 4 Click The information is deleted and the device is updated ...

Page 53: ...e current configuration from being lost save all changes from the running configuration file to the startup configuration file before resetting the device For instructions see Copying Files To reset the device 1 Click System General Reset The Reset page opens Figure 20 Reset Page 2 Click A confirmation message is displayed Figure 21 Reset Confirmation Message ...

Page 54: ...e is reset and a prompt for a user name and password is displayed 4 Enter a user name and password to reconnect to the web Interface Logging Off from the Device 1 Click The Logout Page opens Figure 22 Logout Page 2 Click The D Link Embedded Web Interface Home Page closes ...

Page 55: ... another stacking member can be selected as the Secondary Master All other devices are selected as stack members and assigned a unique Unit ID Switch software is downloaded separately for each stack members However all units in the stack must be run ning the same software version Switch stacking and configuration is maintained by the Stacking Master The Stacking Master detects and recon figures th...

Page 56: ...t interruption and the Ring topology is restored Stacking Chain Topology If a failure occurs in the stacking topology the stack reverts to Chain Stacking Topology In the Chain topology devices operate in a chain formation The Stacking Master determines where the packets are sent Each unit is connected to two neighboring devices except for the top and bottom units Stacking Members and Unit ID Stack...

Page 57: ...ute cycle and Stack member 1 is inserted in fifth minute of the same cycle the units are considered the same age If there are two Master enabled units that are the same age then Unit 1 is elected master The Stacking Master and the Secondary Mastermaintain a Warm Standby The Warm Standby ensures that the Secondary Mastertakes over for the Stacking Master if a failover occurs This guarantees that th...

Page 58: ...nit ID replaces an existing Unit ID with the same Unit ID the previous device configuration is applied to the inserted stack member If the new inserted device has either more than or less ports than the previous device the relevant port configuration is applied to the new stack member Switching the Stacking Master The Secondary Master replaces the Stacking Master if the following events occur The ...

Page 59: ...ng fields Unit Number on Top Indicates the top most stacking member s number Possible values are Master and 1 16 Unit Number on Bottom Indicates the lower most stacking member s number Possible values are Master and 1 16 Switch Stack Control from Unit 1 to Unit 2 Switches the stack control from the Stack Master to the Backup Master The possible field values are Checked Enables switching the stack ...

Page 60: ...tion Page 60 Section 6 Managing Device Information This section contains information for setting general system information and includes the following sections Defining the System Description Defining Advanced System Settings ...

Page 61: ... location where the system is currently running The field range is 0 160 characters System Contact Defines the name of the contact person The field range is 0 160 characters System Object ID Displays the vendor s authoritative identification of the network management sub system contained in the entity System Up Time Displays the amount of time since the most recent device reset The system time is ...

Page 62: ...bo Frames enable the transportation of identical data in fewer frames This ensures less overhead lower processing time and fewer interruptions The System Mode Page contains the following field Enable Jumbo Frames Indicates if Jumbo Frames are enabled on the device The possible field values are Checked Enables Jumbo Frames on the device Unchecked Disables Jumbo Frames on the device ...

Page 63: ...removes the necessity of placing network devices next to power sources Power over Ethernet can be used with IP Phones Wireless Access Points IP Gateways PDAs Audio and video remote monitoring Powered Devices are devices which receive power from the device power supplies for example IP phones Pow ered Devices are connected to the device via Ethernet ports This section includes the following topics ...

Page 64: ... is functioning Off Indicates that the power supply unit is not functioning Faulty Indicates that the power supply unit is functioning but an error has occurred For example a power overload or a short circuit Nominal Power Indicates the actual amount of power the device can supply The field value is displayed in Watts Consumed Power Indicates the amount of the power used by the device The field va...

Page 65: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 65 2 Define the System Usage Threshold field 3 Check the Traps checkbox 4 Click The system PoE parameters are defined and the device is updated ...

Page 66: ...es power to the device using the PoE module The Device Discovery Protocol enables the device to discover Powered Devices attached to the device interfaces and to learn their classification This is the default settings Never Disables the Device Discovery protocol and stops the power supply to the device using the PoE module PoE Operation Status Indicates if the port is enabled to work on PoE The po...

Page 67: ...interface Devices are classified by the powered device and the devices uses the classification infor mation The field values are represented in Watts The possible field values are 0 44 12 95 Indicates that the port is assigned a power consumption level of 44 to 12 95 Watts 0 44 3 8 Indicates that the port is assigned a power consumption level of 44 to 3 8 Watts 3 84 6 49 Indicates that the port is...

Page 68: ...imes the power supply was stopped to the powered device because the powered device was no longer detected Invalid Signature Counter Indicate the times an invalid signature was received Signatures are the means by which the powered device identifies itself to the PSE Signature are generated during powered device detection classification or maintenance 3 Modify the PoE Admin Status Power Priority Le...

Page 69: ...evice Security This section provides access to security pages that contain fields for setting security parameters for ports device management methods users and server security This section contains the following topics Configuring Management Security Configuring Network Security ...

Page 70: ...s section includes the following topics Configuring Authentication Methods Configuring Passwords Configuring Authentication Methods This section provides information for configuring device authentication methods This section includes the topics Defining Access Profiles Defining Profile Rules Defining Authentication Profiles Mapping Authentication Methods Defining RADIUS Settings ...

Page 71: ...h HTTPS and Telnet sessions The Access Profile Page contains the currently configured access profiles and their activity status Assigning an access profile to an interface denies access via other interfaces If an access profile is assigned to any interface the device can be accessed by all interfaces To configure access profiles 1 Click System Management Security Authentication Access Profiles The...

Page 72: ... selected users accessing the device using Telnet meeting access profile criteria are permitted or denied access to the device Secure Telnet SSH Assigns SSH access to the rule If selected users accessing the device using Telnet meeting access profile criteria are permitted or denied access to the device HTTP Assigns HTTP access to the rule If selected users accessing the device using HTTP meeting ...

Page 73: ...P address to which the access profile applies The Source IP Address field is valid for a subnetwork 3 Define the Access Profile Name Rule Priority Management Method Interface Source IP Address Network Mask or Prefix Length and Action fields 4 Click The access profile is created and the device is updated ...

Page 74: ...ment Security Authentication Profile Rules The Profile Rules Page opens Figure 30 Profile Rules Page The Profile Rules Page contains the following fields Access Profile Name Displays the access profile to which the rule is attached Priority Defines the rule priority When the packet is matched to a rule user groups are either granted per mission or denied device management access The rule number is...

Page 75: ...ed users accessing the device using HTTPS meeting access profile criteria are permitted or denied access to the device SNMP Assigns SNMP access to the rule If selected users accessing the device using SNMP meeting access profile criteria are permitted or denied access to the device Source IP Address Defines the interface source IP address to which the rule applies Prefix Length Defines the number ...

Page 76: ...rofile and the device is updated To modify a Profile Rule 1 Click Security Management Security Authentication Access Profile The Access Profile Page opens 2 Click The Profile Rule Settings Page opens Figure 32 Profile Rule Settings Page 3 Modify the fields 4 Click The profile rule is modified and the device is updated ...

Page 77: ...ion Profile Page opens Figure 33 Authentication Profile Page The Authentication Profile Page contains the following fields Profile Name Contains a list of user defined authentication profile lists to which user defined authentica tion profiles are added Methods Defines the user authentication methods The possible field values are None Assigns no authentication method to the authentication profile ...

Page 78: ...ement Security Page 78 2 Click The Add Authentication Profile Page opens Figure 34 Add Authentication Profile Page 3 Define the Profile Name and Authentication Methods fields 4 Click The authentication profile is defined and the device is updated ...

Page 79: ...urity Authentication Authentication Profiles The Authentication Profile Page opens 2 Click The Authentication Profile Settings Page opens Figure 35 Authentication Profile Settings Page 3 Select an authentication method from the Optional Methods list 4 Click The authentication method is selected and the device is updated ...

Page 80: ... Click System Management Security Authentication Authentication Mapping The Authentication Mapping Page opens Figure 36 Authentication Mapping Page The Authentication Mapping Page contains the following fields Console Indicates that Authentication profiles are used to authenticate console users Telnet Indicates that Authentication profiles are used to authenticate Telnet users Secure Telnet SSH In...

Page 81: ... field values are None Indicates that no authentication method is used for access Local Indicates that Authentication occurs locally RADIUS Indicates that Authentication occurs at the RADIUS server Line Indicates that Authentication uses a line password Enable Indicates that Authentication uses an Enable password Local RADIUS Indicates that Authentication first occurs locally If authentication can...

Page 82: ...nsmitted requests sent to the RADIUS server before a failure occurs Possible field values are 1 10 The default value is 3 Timeout for Reply Defines the amount of time in seconds the device waits for an answer from the RADIUS server before retrying the query or switching to the next server Possible field values are 1 30 The default value is 3 Dead Time Defines the default amount of time in minutes ...

Page 83: ... the next server The possible field values are 1 30 Three is the default value Dead Time Defines the amount of time in minutes that a RADIUS server is bypassed for service requests The range is 0 2000 The default is 0 minutes Source IP Address Defines the source IP address that is used for communication with RADIUS servers Usage Type Specifies the RADIUS server authentication type The default valu...

Page 84: ...device is updated To edit RADIUS Server Settings 1 Click System Management Security Authentication Radius The RADIUS Page opens 2 Click The RADIUS Server Settings Page opens Figure 39 RADIUS Server Settings Page 3 Define the Host IP Address Priority Source IP Address Key String Authentication Port Timeout for Reply Dead Time and Usage Type fields 4 Click The RADIUS server settings are saved and th...

Page 85: ...ient and TACACS server The TACACS default parameters are user assigned defaults The default settings are applied to newly defined TACACS servers If default values are not defined the system defaults are applied to the new TACACS new servers To define TACACS authentication settings 1 Click Security Management Security Authentication TACACS The TACACS Page opens Figure 40 TACACS Page The Default Par...

Page 86: ... times out The field range is 1 1000 seconds Status Indicates the connection status between the device and the TACACS server The possible field values are Connected Indicates there is currently a connection between the device and the TACACS server Not Connected Indicates there is not currently a connection between the device and the TACACS server Single Connection Maintains a single open connectio...

Page 87: ...ntication TACACS The TACACS Page opens 2 Select TACACS server entry 3 Click The Add TACACS Host Page opens Figure 42 TACACS Host Settings Page 4 Define the Priority Source IP Address Key String Authentication Port Timeout for Reply and Single Con nection fields 5 Click The TACACS host settings are saved and the device is updated ...

Page 88: ...ne local users 1 Click System Management Security Passwords Local Users The Local User Page opens Figure 43 Local User Page The Local User Page contains the following fields User Name Displays the user name Access Level Displays the user access level The lowest user access level is 1 and the highest is 15 Users with access level 15 are Privileged Users Lockout Status Displays the user acces status...

Page 89: ...ntains the following fields Password Defines the local user password Local user passwords can contain up to 159 characters Confirm Password Verifies the password To edit the settings for a local user 1 Click System Management Security Passwords Local Users The Local User Page opens 2 Click The Local User Settings Page opens Figure 45 Local User Settings Page ...

Page 90: ...Configuring Device Security Configuring Management Security Page 90 3 Define the User Name Access Level Password and Confirm Password fields ...

Page 91: ... the line password for accessing the device via a Console session Pass words can contain a maximum of 159 characters Telnet Line Password Defines the line password for accessing the device via a Telnet session Pass words can contain a maximum of 159 characters Secure Telnet Line Password Defines the line password for accessing the device via a secure Telnet session Passwords can contain a maximum ...

Page 92: ...assword Page opens Figure 47 Enable Password Page The Enable Password Page contains the following fields Level Defines the access level associated with the enable password Possible field values are 1 15 Password Defines the enable password Confirm Password Confirms the new enable password The password appears in the format 2 Define the Select Enable Access Level Password and Confirm Password field...

Page 93: ...es the server that performs the authentication on behalf of the authentica tor and indicates whether the supplicant is authorized to access system services Port based authentication creates two access states Controlled Access Permits communication between the supplicant and the system if the supplicant is authorized Uncontrolled Access Permits uncontrolled communication regardless of the port stat...

Page 94: ...fails or an EAPOL logoff message is received all attached clients are denied access to the network Guest VLANs Provides limited network access to authorized ports If a port is denied network access via port based authorization but the Guest VLAN is enabled the port receives limited network access For exam ple a network administrator can use Guest VLANs to deny network access via port based authent...

Page 95: ...entication on the device Disable Disables port based authentication on the device Authentication Method Specifies the authentication method used for port authentication The possible field values are None Indicates that no authentication method is used to authenticate the port RADIUS Provides port authentication using the RADIUS server RADIUS None Provides port authentication first using the RADIUS...

Page 96: ...curity Configuring Network Security Page 96 2 Define the Port based Authentication State Authentication Method Guest VLAN and VLAN List fields 3 Click The network authentication properties are set and the device is updated ...

Page 97: ...he possible field values are Auto Enables port based authentication on the device The interface moves between an authorized or unauthorized state based on the authentication exchange between the device and the client Authorized Indicates the interface is in an authorized state without being authenticated The interface re sends and receives normal traffic without client port based authentication Un...

Page 98: ...a response is not received after the defined period the authentication process is restarted The field default is 2 retries Supplicant Timeout Displays the amount of time in seconds that lapses before EAP requests are resent to the supplicant The field default is 30 seconds Server Timeout Displays the amount of time in seconds that lapses before the device re sends a request to the authentication s...

Page 99: ...ether multiple hosts are enabled Multiple hosts must be enabled in order to either disable the ingress filter or to use port lock security on the selected port The possible field values are Multiple Multiple hosts are enabled Disable Multiple hosts are disabled Action on Violation Defines the action to be applied to packets arriving in single host mode from a host whose MAC address is not the supp...

Page 100: ...ot been authenticated via the port Not in Auto Mode Indicates that the port control is Forced Authorized and clients have full port access Single host Lock Indicates that the port control is Auto and a single client has been authenticated via the port No Single Host Indicates that Multiple Host is enabled Number of Violations Indicates the number of packets that arrived on the interface in single ...

Page 101: ...ollowing fields User Name Lists the supplicants that were authenticated and are permitted on each port Port Displays the port number Session Time Displays the amount of time in seconds the supplicant was logged on the port Authentication Method Displays the method by which the last session was authenticated The possible field values are Remote 802 1x authentication is not used on this port port is...

Page 102: ...ty Indicates the ACE priority which determines which ACE is matched to a packet on a first match basis The possible field values are 1 2147483647 Action Indicates the ACL forwarding action Possible field values are Permit Forwards packets which meet the ACL criteria Deny Drops packets which meet the ACL criteria Shutdown Drops packet that meet the ACL criteria and disables the port to which the pa...

Page 103: ...ol Source MAC Address Destination MAC Address Wildcard Masks VLAN ID and Action fields 4 Click The IP based protocol is defined and the device is updated To modify an IP based ACL 1 Click Security Network Security Access Control IP Based ACL The IP Based ACL Page opens 2 Select an ACL 3 Click The MAC Based ACL Settings Page opens ...

Page 104: ...ecurity Page 104 Figure 56 MAC Based ACL Settings Page 4 Modify the ACL Name New Priority Protocol Source MAC Address Destination MAC Address Wildcard Masks VLAN ID and Action fields 5 Click The MAC based protocol is defined and the device is updated ...

Page 105: ...27P DXS 3227 User Guide Page 105 Configuring Traffic Control This section contains information for managing both port security and storm control and includes the following topics Managing Port Security Enabling Storm Control ...

Page 106: ... and the packet D Link source MAC address is not tied to that port either it was learned on a different port or it is unknown to the system the protec tion mechanism is invoked and can provide various options Unauthorized packets arriving at a locked port are either Forwarded Discarded with no trap Discarded with a trap Shuts down the port Locked port security also enables storing a list of MAC ad...

Page 107: ... dynamic MAC addresses associated with the port The port learns up to the maximum addresses allowed on the port Both relearning and aging MAC addresses are enabled Max Entries Specifies the number of MAC address that can be learned on the port The Max Entries field is enabled only if Locked is selected in the Set Port field In addition the Limited Dynamic Lock mode is selected The default is 1 Act...

Page 108: ...etwork Security Page 108 Figure 58 Port Security Settings Page 3 Modify the Interface Lock Interface Action on Violation Enable Trap Port Status and Trap Frequency fields 4 Click The port security settings are defined and the device is updated ...

Page 109: ...tted The system measures the incoming Broadcast and Multicast frame rates separately on each port and discards the frames when the rate exceeds a user defined rate The Storm Control Page provides fields for configuring broadcast storm control To enable storm control 1 Click Advanced Setup Network Security Traffic Control Storm Control The Storm Control Page opens Figure 59 Storm Control Page The S...

Page 110: ...h unknown packets are forwarded The range is 0 1 000 000 The default value is zero All values are rounded to the nearest 64 Kbps If the field value is under 64 Kbps the value is rounded up to 64 Kbps with the exception of the value zero 2 Click The Storm Control Settings Page opens Figure 60 Storm Control Settings Page 3 Modify the Port Enable Broadcast Control Broadcast Mode and Broadcast Rate Th...

Page 111: ...ation Ports Table contains the following fields Interface Displays the port number Port Status Indicates whether the port is currently operational or non operational The possible field val ues are Up Indicates the port is currently operating Down Indicates the port is currently not operating Port Speed Displays the configured rate for the port The port type determines what speed setting options ar...

Page 112: ...trol Displays the flow control status on the port Operates when the port is in full duplex mode MDI MDIX Displays the MDI MDIX status on the port Hubs and switches are deliberately wired opposite the way end stations are wired so that when a hub or switch is connected to an end station a straight through Ethernet cable can be used and the pairs are matched up properly When two hubs or switches are...

Page 113: ... Configuration Settings Page includes the Reactivate Suspended Port or Reactivate Suspended Lag fields Select Reactivate Suspended Port or Reactivate Suspended Lag fields to return a suspended port or LAG to active status Figure 62 Port Configuration Settings Page 3 Modify the Admin Speed Admin Duplex and Admin Advertisement fields 4 Click The parameters are saved and the device is updated ...

Page 114: ...t Properties Page is contains the following fields Interface Displays the port number Port Type Displays the port type The possible field values are Copper Indicates the port has a copper port connection Fiber Indicates the port has a fiber optic port connection Description Provides a user defined port description To edit the port properties 1 Click Basic Setup Interface Interface Properties The I...

Page 115: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 115 3 Define the Port and Description fields 4 Click The interface properties are modified and the device is updated ...

Page 116: ... type A VLAN is not configured on the port The port is not assigned to a different LAG Auto negotiation mode is not configured on the port The port is in full duplex mode All ports in the LAG have the same ingress filtering and tagged modes All ports in the LAG have the same back pressure and flow control modes All ports in the LAG have the same priority All ports in the LAG have the same transcei...

Page 117: ...ameters 1 Click Advanced Setup Interface LAG Membership The LAG Membership Page opens Figure 65 LAG Membership Page The LAG Membership Page contains the following fields LAG Port Displays the LAG number Name Displays the user defined port name Link State Displays the link operational status Member Displays the ports configured to the LAG Remove Removes the LAG The possible field values Checked Rem...

Page 118: ... Aggregating Ports Page 118 2 Click The LAG Membership Settings Page opens Figure 66 LAG Membership Settings Page 3 Define the Port and LACP fields 4 Click The LAG membership settings are saved and the device is updated ...

Page 119: ... contains fields for configuring LACP LAGs To configure LACP for LAGs 1 Click Advanced Setup Interface LACP Parameters tab The LACP Parameters Page opens Figure 67 LACP Parameters Page The LACP Parameters Page contains the following fields LACP System Priority Specifies system priority value The field range is 1 65535 The field default is 1 Port Displays the port number to which timeout and priori...

Page 120: ...Aggregating Ports Configuring LACP Page 120 Figure 68 LACP Parameters Settings Page 3 Edit the Port Priority and LACP Timeout fields 4 Click The LACP settings are saved and the device is updated ...

Page 121: ... a Layer 3 router working at a protocol level is required to allow traffic flow between VLANs Layer 3 routers identify segments and coordinate with VLANs VLANs are Broadcast and Multicast domains Broadcast and Multicast traffic is transmitted only in the VLAN in which the traffic is generated VLAN tagging provides a method of transferring VLAN information between VLAN groups VLAN tagging attaches ...

Page 122: ... Displays the user defined VLAN name Type Displays the VLAN type The possible field values are Dynamic Indicates the VLAN was dynamically created through GARP Static Indicates the VLAN is user defined Default Indicates the VLAN is the default VLAN Authentication Indicates whether unauthorized users can access a Guest VLAN The possible field values are Enable Enables unauthorized users to use the G...

Page 123: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 123 Figure 70 Add VLAN Page 3 Define the VLAN ID and VLAN Name fields 4 Click The VLAN ID is defined and the device is updated ...

Page 124: ...ield values are Dynamic Indicates the VLAN was dynamically created through GARP Static Indicates the VLAN is user defined Default Indicates the VLAN is the default VLAN Port Indicates the port membership LAG Indicates the LAG membership Untagged Orange Indicates the interface is an untagged VLAN member Packets forwarded by the inter face are untagged Tagged Blue Indicates the interface is a tagged...

Page 125: ...ngs to VLANs and each VLAN is user defined as tagged or untagged full IEEE802 1q mode Access Indicates a port belongs to a single untagged VLAN When a port is in Access mode the packet types which are accepted on the port cannot be designated Ingress filtering cannot be enabled or disabled on an access port Trunk Indicates the port belongs to VLANs in which all ports are tagged except for one port...

Page 126: ...ables ingress filtering on the device Ingress filtering discards packets that are defined to VLANs of which the specific port is not a member Disable Disables ingress filtering on the device Reserve VLAN Indicates the VLAN selected by the user to be the reserved VLAN if not in use by the sys tem 2 Select a port 3 Click The VLAN Interface Settings Page opens Figure 73 VLAN Interface Settings Page 4...

Page 127: ...r equal to three times the join time The leave all time must be greater than the leave time Set the same GARP timer values on all Layer 2 connected devices If the GARP timers are set differently on the Layer 2 connected devices the GARP application does not operate successfully To define GARP on the device 1 Click Basic Setup VLAN GARP The GARP Parameters Page opens Figure 74 GARP Parameters Page ...

Page 128: ... join time The default value is 60 centiseconds Leave All Timer Indicates the amount of time lapse in centiseconds that all device waits before leaving the GARP state The leave all time must be greater than the leave time The default value is 1000 centisec onds 2 Click The GARP Parameters Settings Page opens Figure 75 GARP Parameters Settings Page 3 Modify the Interface Join Timer centiseconds Lea...

Page 129: ...elds GVRP Global Status Indicates if GVRP is enabled on the device The possible field values are Enable Enables GVRP on the selected device Disable Disables GVRP on the selected device Copy from Entry Number Indicates the row number from which GARP parameters are copied To Row Number Indicates the row number to which GARP parameters are copied Port DIsplays the port on which GVRP is enabled The po...

Page 130: ... enabled on the device The possible field values are Enable Enables GVRP registration on the device Disable Disables GVRP registration on the device 2 Click The GVRP Parameters Page opens Figure 77 GVRP Parameters Page 3 Define the GVRP State Dynamic VLAN Creation and GVRP Registration fields 4 Click The GVRP Interface parameters are sent and the device is updated ...

Page 131: ...unsuccessful the user is classified by PVID This section contains the following sections Defining Protocol Based VLANs Defining VLAN Protocol Ports Defining Protocol Based VLANs The Protocol Group Page contains information regarding protocol names and the VLAN Ethernet type Interfaces can be classified as a specific protocol based interface The classification places the interface into a protocol g...

Page 132: ...he possible field range is 1 2147483647 IP Address Defines the IP address assigned to the VLAN group Prefix Defines the IP address s prefix The possible field range is 0 32 2 Click The Add Protocol Group opens Figure 79 Add Protocol Group 3 Define the fields 4 Click The Protocol based VLAN group is defined and the device is updated ...

Page 133: ...d values are Port Adds the LAG to the protocol group Group ID Defines the Protocol group ID to which the interface is added Protocol group IDs are denied in the Protocol Group Table VLAN ID 1 4095 Attaches the interface to a user defined BLAN ID The VLAN I is defined on the Create a New VLAN page Protocol ports can either be attached to a VLAN ID or a VLAN name Remove Removes the port assignment f...

Page 134: ...Configuring VLANs Defining VLAN Groups Page 134 Figure 81 VLAN Protocol Port Setting Page 3 Define the fields 4 Click The Protocol based VLAN port is defined and the device is updated ...

Page 135: ...for defining device IP addresses and includes the following topics Configuring IP Interfaces Configuring Domain Name Servers Configuring IP Interfaces This section contains information for defining IP interfaces and includes the following sections Defining IP Addresses Defining Default Gateways Configuring DHCP Configuring ARP ...

Page 136: ...nterface Page opens Figure 82 IP Interface Page The IP Interface Page contains the following fields IP Address Displays the currently configured IP address Mask Displays the currently configured IP address mask Interface Displays the interface used to manage the device Dynamic Indicates that the IP address is dynamically created Static Indicates tjhe IP address is a static IP address Remove Remove...

Page 137: ...ation fields are saved and the device is updated To modify an IP interface 1 Click Basic Setup IP Configuration IP Addressing IP Interface The IP Interface Page opens 2 Click The IP Interface Settings Page opens Figure 84 IP Interface Settings Page 3 Modify the Source IP Address Network Mask or Prefix Length and Interface fields 4 Click The IP Interface is modified and the device is updated ...

Page 138: ...ay The Default Gateway Page opens Figure 85 Default Gateway Page The Default Gateway Page contains the following fields User Defined Default Gateway Defines the default gateway IP address Active Default Gateway Indicates if the default gateway is active The possible field values are Remove Removes the default gateway The possible field values are Checked Removes the selected default gateway Unchec...

Page 139: ...k To define a DHCP Interface 1 Click Basic Setup IP Configuration IP Addressing DHCP The DHCP Page opens Figure 86 DHCP Page The DHCP Page contains the following fields Interface Displays theIP address of the interface which is connected to the DHCP server Host Name Displays the system name Remove Removes DHCP interfaces The possible field values are Checked Removes the selected DHCP interface Unc...

Page 140: ...onfiguring IP Information Configuring IP Interfaces Page 140 Figure 87 Add DHCP IP Interface Page 3 Define the Interface and Host Name fields 4 Click The DHCP interface is added and the device is updated ...

Page 141: ... deleted from the table The range is 1 40000000 The default value is 60000 seconds Clear ARP Table Entries Specifies the types of ARP entries that are cleared The possible values are None Maintains the ARP entries All Clears all ARP entries Dynamic Clears only dynamic ARP entries Static Clears only static ARP entries Interface Displays the interface type for which ARP parameters are displayed The ...

Page 142: ...ecked Removes the selected ARP entries Unchecked Maintains the current ARP entries 2 Define the ARP Entry Age Out and Clear ARP Table Entries fields 3 Click The ARP parameters are defined and the device is updated To create a new ARP entry 1 Click Basic Setup IP Configuration IP Addressing ARP The ARP Page opens 2 Click The Add ARP Settings Page opens Figure 89 Add ARP Settings Page 3 Define the I...

Page 143: ...to IP addresses Each time a domain name is assigned the DNS service translates the name into a numeric IP address For example www ipexample com is translated into 192 87 56 2 DNS servers maintain databases of domain names and their corresponding IP addresses This section contains the following topics Defining DNS Servers Defining DNS Host Mapping ...

Page 144: ...ues are Checked Translates the domains into IP addresses Unchecked Disables translating domains into IP addresses Default Domain Name Specifies the user defined DNS server name Type Displays the IP address type The possible field values are Dynamic The IP address is dynamically created Static The IP address is a static IP address Remove Removes DNS servers The possible field values are Checked Rem...

Page 145: ...ive Server fields 4 Click The DNS server is enabled and the device is updated To add a new DNS Server 1 Click Basic Setup IP Configuration Domain Name System DNS Server The DNS Server Page opens 2 Click The Add DNS Server Page opens Figure 91 Add DNS Server Page 3 Define the DNS Server DNS Server Currently Active and Set DNS Server Active fields 4 Click The DNS server is added and the device is up...

Page 146: ...e 92 DNS Host Mapping Page The DNS Host Mapping Page contains the following fields Host Names Displays a user defined default domain name When defined the default domain name is applied to all unqualified host names The Host Name field can contain up to 158 characters IP Address Displays the DNS host IP address Remove Removes default domain names The possible field values are Checked Removes the s...

Page 147: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 147 Figure 93 Add DNS Host Page 3 Define the Host Name and IP Address fields 4 Click The DNS host is added and the device is updated ...

Page 148: ...x for the destination IP The prefix length must be preceded by a forward slash Next Hop Indicates the next hop s IP address or IP alias on the route Route Type Defines the route type The possible field values are Reject Rejects the route and stops routing to the destination network via all gateways Remote Indicates the route is a remote path Local Indicates the route is a local path Metric Indicat...

Page 149: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 149 Figure 95 Add IP Static Route 3 Define the fields 4 Click The IP static route is defined and the device is updated ...

Page 150: ...onfig ured manually An address becomes associated with a port by learning the port from the frame s source address but if a frame that is addressed to a destination MAC address is not associated with a port that frame is flooded to all relevant VLAN ports To prevent the bridging table from overflowing a dynamic MAC address from which no traffic arrives for a set period is erased This section conta...

Page 151: ...esses Page The Forwarding Database Static Addresses Page contains the following fields MAC Address Displays the MAC address to which the entry refers VLAN ID Displays the VLAN ID number to which the entry refers Interface Displays the interface to which the entry refers Port The specific port number to which the forwarding database parameters refer LAG The specific LAG number to which the forwardi...

Page 152: ...ed when the device is reset make sure that the port attached to the MAC address is locked To add a new static forwarding database entry 1 Click Advanced Setup Forwarding Database Static Addresses The Forwarding Database Static Addresses Page opens 2 Click The Add Forwarding Database Page opens Figure 95 Add Forwarding Database Page 3 Define the Interface MAC Address VLAN ID or VLAN Name and Status...

Page 153: ...s To configure the Dynamic MAC Address table 1 Click Advanced Setup Forwarding Database Dynamic Addresses The Dynamic Addresses Page opens Figure 96 Dynamic Addresses Page The Dynamic Addresses Page contains the following fields Aging Interval secs Specifies the amount of time the MAC address remains in the Dynamic MAC Address table before it is timed out if no traffic from the source is detected ...

Page 154: ...ld is defined and the device is updated To query the Dynamic MAC Address Table 1 Click Advanced Setup Forwarding Database Dynamic Addresses The Dynamic Addresses Page opens 2 Select a port MAC Address and VLAN ID 3 Select an Address Table Sort Key 4 Click The Dynamic MAC Address Table is queried and the results are displayed ...

Page 155: ...s avoiding and eliminating loops For more infor mation on configuring Classic STP see Defining Classic Spanning Tree Rapid STP Detects and uses network topologies that provide faster convergence of the spanning tree without creating forwarding loops For more information on configuring Rapid STP see Defining Rapid Span ning Tree Multiple STP Provides various load balancing scenarios For example if ...

Page 156: ...device This is the default value Rapid STP Enables Rapid STP on the device Multiple STP Enables Multiple STP on the device BPDU Handling Determines how BPDU packets are managed when STP is disabled on the port or device BPDUs are used to transmit spanning tree information The possible field values are Filtering Filters BPDU packets when spanning tree is disabled on an interface This is the default...

Page 157: ...d learning state before forwarding packets The default is 15 seconds Bridge ID Identifies the Bridge priority and MAC address Root Bridge ID Identifies the Root Bridge priority and MAC address Root Port Indicates the port number that offers the lowest cost path from this bridge to the Root Bridge This field is significant when the bridge is not the Root Bridge The default is zero Root Path Cost Th...

Page 158: ...st Port mode is enabled for a port the Port State is automatically placed in the Forwarding state when the port link is up Fast Link optimizes the STP protocol convergence STP convergence can take 30 60 seconds in large networks Root Guard Prevents devices outside the network core from being assigned the spanning tree root Port State Displays the current STP state of a port If enabled the port sta...

Page 159: ... D Link priority and interface Designated Cost Indicates the cost of the port participating in the STP topology Ports with a lower cost are less likely to be blocked if STP detects loops Forward Transitions Indicates the number of times the port has changed from Forwarding state to Block ing state LAG Indicates the LAG to which the port belongs 2 Click The STP Interface Settings Page opens Figure ...

Page 160: ...acking member for which the STP interface parameters are displayed Interface Displays the port or LAG on which Rapid STP is enabled Role Displays the port role assigned by the STP algorithm to provide to STP paths The possible field val ues are Root Provides the lowest cost path to forward packets to the root switch Designated The port or LAG through which the designated switch is attached to the ...

Page 161: ...munications over a point to point link the originating PPP first sends Link Control Protocol LCP packets to configure and test the data link After a link is established and optional facilities are negotiated as needed by the LCP the originating PPP sends Network Control Protocol NCP packets to select and configure one or more network layer protocols When each of the chosen network layer protocols ...

Page 162: ... Defining Rapid Spanning Tree Page 160 Figure 101 RSTP Settings Page 3 Define the Interface Point to Point Admin Status and Activate Protocol Migration fields 4 Click RSTP is defined for the interface and the device is updated ...

Page 163: ...s Page The MSTP Properties Page contains the following fields Region Name User defined STP region name Revision An unsigned 16 bit number that identifies the revision of the current MSTP configuration The revision number is required as part of the MSTP configuration The possible field range is 0 65535 Max Hops Specifies the total number of hops that occur in a specific region before the BPDU is di...

Page 164: ...tup Spanning Tree MSTP Instance Settings The MSTP Instance Settings Page opens Figure 103 MSTP Instance Settings Page The MSTP Instance Settings Page contains the following fields Instance ID Specifies the VLAN group to which the interface is assigned Included VLAN Maps the selected VLANs to the selected instance Each VLAN belongs to one instance Bridge Priority Specifies the selected spanning tre...

Page 165: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 163 Figure 104 VLAN Instance Configuration Table 3 Define the Instance ID field 4 Click The MSTP Instances are assigned and the device is updated ...

Page 166: ...he LAG for which the MSTP settings are displayed MSTP Specifies whether or not MSTP is enable on the interface The possible field values are Enabled Enables MSTP on the interface Disabled Disables MSTP on the interface Port State Indicates whether the port is enabled for the specific instance The possible field values are Enabled Enables the port for the specific instance Disabled Disables the por...

Page 167: ... The possible field values are Classic STP Classic STP is enabled on the device This is the default value Rapid STP Rapid STP is enabled on the device Multiple STP Multiple STP is enabled on the device Interface Priority Defines the interface priority for the specified instance The default value is 128 Path Cost Indicates the port contribution to the Spanning Tree instance The range should always ...

Page 168: ... Spanning Tree Defining Multiple Spanning Tree Page 166 Figure 106 MSTP Interface Table 3 Define the Port Priority and the Path Cost fields 4 Click The MSTP interface settings are defined and the device is updated ...

Page 169: ... 3227P DXS 3227 User Guide Page 167 Section 15 Configuring Multicast Forwarding This section contains the following topics Defining IGMP Snooping Defining Multicast Bridging Groups Defining Multicast Forward All Settings ...

Page 170: ...s This results in the creation of the Multicast filtering database To enable IGMP Snooping 1 Click Multicast Support IGMP The IGMP Snooping Page opens Figure 107 IGMP Snooping Page The IGMP Snooping Page contains the following fields Enable IGMP Snooping Status Indicates if IGMP Snooping is enabled on the device IGMP Snooping can be enabled only if Bridge Multicast Filtering is enabled The possibl...

Page 171: ...age before it times out The default value is 300 seconds Leave Timeout Indicates the amount of time the host waits after requesting to leave the IGMP group and not receiving a Join message from another station before timing out If a Leave Timeout occurs the switch notifies the Multicast device to stop sending traffic The Leave Timeout value is either user defined or an immediate leave value The de...

Page 172: ...ticast groups 1 Click Advanced Setup Multicast Support Bridge Multicast Multicast Group The Multicast Group Page opens Figure 109 Multicast Group Page The Multicast Group Page contains the following information Enables Bridge Multicast Filtering Indicate if bridge Multicast filtering is enabled on the device The pos sible field values are Checked Enables Multicast filtering on the device Unchecked...

Page 173: ...ticast port settings 6 Click The Multicast group is defined and the device is updated Table 10 IGMP Port LAG Members Table Control Settings Port Control Definition D Dynamically joins ports LAG to the Multicast group in the Current Row S Attaches the port to the Multicast group as static member in the Static Row The port LAG has joined the Multicast group statically in the Current Row F Forbidden ...

Page 174: ...etup Multicast Support Bridge Multicast Multicast Forward All The Multicast Forward All Page opens Figure 111 Multicast Forward All Page The Multicast Forward All Page contains the following fields VLAN ID DIsplays the VLAN for which Multicast parameters are displayed Ports Ports that can be added to a Multicast service The following table summarizes the Multicast settings which can be assigned to...

Page 175: ... drop down box 3 Define the VLAN port settings 4 Click The Multicast forward all settings are defined and the device is updated Blank The port is not attached to a Multicast router or switch Table 11 Bridge Multicast Forward All Router Port Control Settings Table Port Control Definition ...

Page 176: ...es File maintenance includes both configuration file management as well as device access This section contains the following topics File Management Overview Downloading System Files Uploading System Files Activating Image Files Copying Files Managing System Files ...

Page 177: ...tored in the Run ning Configuration file are lost During the startup process all commands in the Startup file are copied to the Running Configuration File and applied to the device During the session all new commands entered are added to the commands existing in the Running Configuration file Commands are not overwritten To update the Startup file before powering down the device the Running Config...

Page 178: ...n file type to which to the file is downloaded The possible field values are Software Image Downloads the Image file Boot Code Downloads the Boot file Download to Master Only Downloads the system file only to the Master Download to All Units Downloads the system file to all units Configuration Download The Configuration Download section contains the following fields Configuration Download Indicate...

Page 179: ... Upload fields are grayed out Software Image Upload The Software Image Upload section contains the following fields TFTP Server IP Address Specifies the TFTP Server IP Address to which the Software Image is uploaded Destination File Name Specifies the software image file path to which the file is uploaded Configuration Upload The Configuration Upload section contains the following fields TFTP Serv...

Page 180: ...Active Image Page contains the following fields Unit No The unit number for which the Image file is selected Active Image The Image file which is currently active on the unit After Reset The Image file which is active on the unit after the device is reset The possible field values are Image 1 Activates Image file 1 after the device is reset Image 2 Activates Image file 2 after the device is reset ...

Page 181: ...e Running Configuration file to the Startup Configuration file Source Indicates the Running Configuration file is selected Destination Indicates the Startup Configuration file is selected Restore Configuration Factory Defaults Resets the Configuration file to the factory defaults The factory defaults are reset after the device is reset When unselected the device maintains the current Configu ratio...

Page 182: ...tly stored in the file management system Size Indicates the file size Modified Indicates the date the file was last modified Permission Indicates the permission type assigned to the file The possible field values are Read Only Indicates a read only file Read Write Indicates a read write file Remove Deletes the file when checked Rename Permits renaming the file The file name is renamed in the File ...

Page 183: ...e 181 Section 17 Configuring Quality of Service This section contains information for configuring QoS and includes the following topics Quality of Service Overview Defining General QoS Settings Configuring QoS Mapping Configuring Advanced QoS Settings ...

Page 184: ...g methods Strict Priority Ensures that time sensitive applications are always forwarded Strict Priority SP allows the prioritization of mission critical time sensitive traffic over less time sensitive applications For example under SP voice over IP VoIP traffic can be prioritized so that it is forwarded before FTP or e mail SMTP traffic Weighted Round Robin Ensures that a single application does n...

Page 185: ...le Trust Mode field values are CoS Classifies traffic based on the CoS tag value DSCP Classifies traffic based on the DSCP tag value Interface Displays the interface for which the global QoS parameters are defined Port Selects the port for which the global QoS parameters are defined LAG Selects the LAG for which the global QoS parameters are defined Default CoS Determines the default CoS value for...

Page 186: ...r interface Shaping is determined by the lower specified value The queue shaping type is selected in the Bandwidth Settings Page To define bandwidth settings 1 Click Basic Setup Quality of Service General Settings General Settings The Bandwidth Settings Page opens Figure 113 Bandwidth Settings Page The Bandwidth Settings Page contains the following fields Unit no Indicates the stacking members for...

Page 187: ...ures the traffic shaping type selected queues The possible field values are CIR Defines CIR as the queue shaping type The possible field value is 4096 1 000 000 000 bits per second CBS Defines CBS as the queue shaping type The possible field value is 4096 16 000 000 bytes None Indicates that a queue shaping type is not defined This is default value 2 Select an interface 3 Click The Bandwidth Setti...

Page 188: ...ts to queues This field is enabled only for queues in WRR queue mode If a queue is set to 0 weight the queue is not operational and is effectively closed Each queue has a weight range queues 1 3 have the range 0 255 and queue 4 has the range 1 255 SDWRR Weight Defines the amount of SDWRR Weight defined for the queue The SDWRR field can only be configured if the Per Port Shaping Type field was sele...

Page 189: ... of Service Queue Mapping CoS to Queue The CoS to Queue Page opens Figure 116 CoS to Queue Page The CoS to Queue Page contains the following fields Class of Service Specifies the CoS priority tag values where zero is the lowest and 7 is the highest Queue Defines the traffic forwarding queue to which the CoS priority is mapped Eight traffic priority queues are supported Restore Defaults Restores th...

Page 190: ...sic Setup Quality of Service Queue Mapping DSCP to Queue The DSCP to Queue Page opens Figure 117 DSCP to Queue Page The DSCP to Queue Page contains the following fields DSCP In Displays the incoming packet s DSCP value Queue Specifies the traffic forwarding queue to which the DSCP priority is mapped Eight traffic priority queues are supported 2 Define the queue number in the Queue field next to th...

Page 191: ...ring advanced QoS features and includes the following topics Defining Policy Properties Defining Policy Profiles Defining Policy Properties This section contains information for configuring advanced policy properties and includes the following topics Mapping DSCP Values Defining Tail Dropping Creating Class Maps Aggregating Policiers ...

Page 192: ...e Policy Properties DSCP to Queue The Advanced DSCP to Queue Page opens Figure 118 Advanced DSCP to Queue Page The Advanced DSCP to Queue Page contains the following fields DSCP In Displays the incoming packet s DSCP value Queue Specifies the traffic forwarding queue to which the DSCP priority is mapped Eight traffic priority queues are supported 2 Define the queue number in the Queue field next t...

Page 193: ...per queue Click Advance Setup Quality of Service Policy Properties Tail Drop The Tail Drop Page opens Figure 119 Tail Drop Page The Tail Drop Page contains the following field Interface Defines the Tail Drop policy applied to the interface The possible field values are Tail Drop Applies the Tail Drop policy to the interface All packets exceeding their limit will be dropped Default Maintains the de...

Page 194: ...e Class Map Page opens Figure 120 Class Map Page The Class Map Page contains the following fields Class Map Name Displays the user defined name of the class map Preferred ACL Indicates if packets are first matched to an IP based ACL or a MAC based ACL ACL 1 Contains a list of the user defined ACLs Match Indicates the criteria used to match class maps with an ACL s address Possible values are And M...

Page 195: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 193 Figure 121 Add Class Map Page 3 Define the fields 4 Click The Class Map is defined and the device is updated ...

Page 196: ...ns information for defining the bandwidth limits and define actions to take on packets that do not meet the requirements To configure Aggregated Policiers 1 Click Advance Setup Quality of Service Policy Properties Aggregated Policier The Aggregated Policier Page opens Figure 122 Aggregated Policier Page The Aggregated Policier Page contains the following fields Aggregate Policer Name Specifies the...

Page 197: ...S 3250 DXS 3227P DXS 3227 User Guide Page 195 2 Click The Add Class Map Page opens Figure 123 Add Aggregated Policier Page 3 Define the fields 4 Click The Aggregated Policier is defined and the device is updated ...

Page 198: ...ass map must first be defined or the name of the policy map to be created added to or modified must first be specified Class policies can be configured in a policy map only if the classes have defined match criteria An aggregate policer can be applied to multiple classes in the same policy map but an aggregate policer cannot be used across different policy maps Define an aggregate policer if the p...

Page 199: ...e policer is defined if the policer is shared with multiple classes Traffic from two different ports can be configured for policing purposes An aggregate policer can be applied to multiple classes in the same policy map but cannot be used across different policy maps Single Configures the class to use manually configured information rates and exceed actions Aggregate Policer User defined aggregate...

Page 200: ...policy to an interface 1 Click Advance Setup Quality of Service Policy Profiles Policy Binding The Policy Binding Page opens Figure 126 Policy Binding Page The Policy Binding Page contains the following fields Interface Selects an interface Policy Name Contains a list of user defined policies that can be attached to the interface Remove Removes policies Checked Removes the selected policies Unchec...

Page 201: ...efined for SNMPv3 including Authentication Provides data integrity and data origin authentication Privacy Protects against the disclosure of message content Cipher Block Chaining CBC is used for encryption Either authentication is enabled on a SNMP message or both authentication and privacy are enabled on a SNMP message However privacy cannot be enabled without authentication Timeliness Protects a...

Page 202: ...7 SNMP Security Global Parameters Page The SNMP Security Global Parameters Page contains the following fields Local Engine ID 0 32 Characters Displays the local device Engine ID The field value is a hexadecimal string Each byte in hexadecimal character strings is two hexadecimal digits Each byte can be separated by a period or a colon The Engine ID must be defined before SNMPv3 is enabled Select a...

Page 203: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 201 2 Define the Local Engine ID and Use Default fields 3 Click The SNMP global security parameters are set and the device is updated ...

Page 204: ...curity Views The SNMP Security Views Page opens Figure 128 SNMP Security Views Page The SNMP Security Views Page contains the following fields View Name Displays the user defined views The view name can contain a maximum of 30 alphanumeric characters Object ID Subtree Displays the device feature OID included in or excluded from the selected SNMP view View Type Indicates whether the defined OID bra...

Page 205: ...3250 DXS 3227P DXS 3227 User Guide Page 203 Figure 129 Add SNMP View Page 3 Define the View Name field 4 Define the view using and 5 Define the View Type field 6 Click The view is defined and the device is updated ...

Page 206: ...oup Name Displays the user defined group to which access control rules are applied The field range is up to 30 characters Security Model Defines the SNMP version attached to the group The possible field values are SNMPv1 SNMPv1 is defined for the group SNMPv2c SNMPv2c is defined for the group SNMPv3 SNMPv3 is defined for the group Security Level Defines the security level attached to the group Sec...

Page 207: ...r the assigned SNMP view Remove Removes SNMP groups The possible field values are Checked Removes the selected SNMP group Unchecked Maintains the SNMP groups 2 Click The Add SNMP Group Profile Page opens Figure 131 Add SNMP Group Profile Page 3 Define the Group Name Security Model Security Level and Operation fields 4 Click The SNMP group profile is added and the device is updated To modify SNMP G...

Page 208: ...nfiguring SNMP Security Page 206 Figure 132 SNMP Group Profile Settings Page 3 Modify the Group Name Security Model Security Level and Operation fields 4 Click The SNMP group profile is modified and the device is updated ...

Page 209: ... which the user is connected Changing or removing the local SNMP Engine ID deletes the SNMPv3 user database Local Indicates that the user is connected to a local SNMP entity Remote Indicates that the user is connected to a remote SNMP entity If the Engine ID is defined remote devices receive inform messages Authentication Displays the method used to authenticate users The possible field values are...

Page 210: ... are required 32 bytes are defined Each byte in hexadecimal character strings is two hexadecimal digits Each byte can be separated by a period or a colon Privacy Key Defines the privacy key LSB If only authentication is required 20 bytes are defined If both privacy and authentication are required 36 bytes are defined Each byte in hexadecimal character strings is two hexadecimal digits Each byte ca...

Page 211: ... Guide Page 209 Figure 135 SNMP Group Membership Settings Page 3 Modify the Group Name Engine ID Authentication Method Password Authentication Key and Privacy Key fields 4 Click The SNMP group membership is modified and the device is updated ...

Page 212: ...e The SNMP Communities Basic Table contains the following fields Management Station Displays the management station IP address for which the basic SNMP community is defined Community String Defines the password used to authenticate the management station to the device Access Mode Defines the access rights of the community The possible field values are Read Only Management access is restricted to r...

Page 213: ...String Defines the password used to authenticate the management station to the device Group Name Defines advanced SNMP community group names Remove Removes a community The possible field values are Checked Removes the selected SNMP communities Unchecked Maintains the SNMP communities 2 Click The Add SNMP Community Page opens Figure 137 Add SNMP Community Page 3 Define the SNMP Management Station C...

Page 214: ... Page 212 2 Click The SNMP Community Settings Page opens Figure 138 SNMP Community Settings Page 3 Modify the SNMP Management Station Community String and Basic or Advanced fields 4 Click The SNMP community is modified and the device is updated ...

Page 215: ...13 Configuring SNMP Notifications This section contains information for configuring SNMP Notifications and contains the following topics Defining SNMP Notification Global Parameters Defining SNMP Notification Filters Defining SNMP Notification Recipients ...

Page 216: ...ds Enable SNMP Notifications Specifies whether the device can send SNMP notifications The possible field values are Enable Enables SNMP notifications Disable Disables SNMP notifications Enable Authentication Notifications Specifies whether SNMP authentication failure notification is enabled on the device The possible field values are Enable Enables the device to send authentication failure notific...

Page 217: ...he SNMP Notification Filter Page contains the following fields Filter Name Contains a list of user defined notification filters Object ID Subtree Displays the OID for which notifications are sent or blocked If a filter is attached to an OID traps or informs are generated and sent to the trap recipients OIDs are selected from either the Select from field or the Object ID field Filter Type Indicates...

Page 218: ...ring SNMP Notifications Page 216 Figure 141 Add SNMP Notification Filter Page 3 Define the Filter Name New Object Identifier Tree and Filter Type fields 4 Click The SNMP notification filter is defined and the device is updated ...

Page 219: ...filters provide the following services Identifying Management Trap Targets Trap Filtering Selecting Trap Generation Parameters Providing Access Control Checks To define SNMP notification filters 1 Click System SNMP Notification Notification Receiver The SNMP Notification Receiver Page opens Figure 142 SNMP Notification Receiver Page The SNMP Notification Receiver Page is divided into the following...

Page 220: ... values are SNMP V1 Indicates that SNMP Version 1 traps are sent SNMP V2c Indicates that SNMP Version 2 traps are sent UDP Port Displays the UDP port used to send notifications The default is 162 Filter Name Indicates if the SNMP filter for which the SNMP Notification filter is defined Timeout Indicates the amount of time in seconds the device waits before re sending informs The default is 15 seco...

Page 221: ...that the packet is neither authenticated nor encrypted Authentication Indicates that the packet is authenticated UDP Port The UDP port used to send notifications The field range is 1 65535 The default is 162 Filter Name Includes or excludes SNMP filters Timeout The amount of time seconds the device waits before resending informs The field range is 1 300 The default is 10 seconds Retries The amount...

Page 222: ...e is updated To modify SNMP notification recipients 1 Click System SNMP Notification Notification Receiver The SNMP Notification Receiver Page opens 2 Click The SNMP Notification Receiver Settings Page opens Figure 144 SNMP Notification Receiver Settings Page 3 Modify the Notification Type SNMPV1 v2c or SNMPv3 UPD Port Filter Name TImeout and Retries fields 4 Click The SNMP notification recipients...

Page 223: ...3250 DXS 3227P DXS 3227 User Guide Page 221 Section 19 Configuring System Time This section provides information for configuring system time parameters including Configuring Daylight Savings Time Configuring SNTP ...

Page 224: ... first Sunday in April until the last Sunday of October Daylight Saving Time is usually regulated by provincial and territorial governments Exceptions may exist in certain municipalities Cuba From the last Sunday of March to the last Sunday of October Cyprus From the last weekend of March until the last weekend of October Denmark From the last weekend of March until the last weekend of October Egy...

Page 225: ...ntil the last weekend of October Russia From the last weekend of March until the last weekend of October Serbia From the last weekend of March until the last weekend of October Slovak Republic From the last weekend of March until the last weekend of October South Africa South Africa does not use Daylight Saving Time Spain From the last weekend of March until the last weekend of October Sweden From...

Page 226: ...pective of the year For a specific setting in a particular year complete the Daylight Savings area and for a recurring setting complete the Recurring area The possible field values are USA The device switches to DST at 2 00 a m on the first Sunday of April and reverts to standard time at 2 00 a m on the last Sunday of October European The device switches to DST at 1 00 am on the last Sunday in Mar...

Page 227: ...ble field values are Day The day of the week from which DST begins every year The possible field range is Sunday Saturday Week The week within the month from which DST begins every year The possible field range is 1 5 Month The month of the year in which DST begins every year The possible field range is Jan Dec Time The time at which DST begins every year The field format is Hour Minute For exampl...

Page 228: ... by the following time levels T1 The time at which the original request was sent by the client T2 The time at which the original request was received by the server T3 The time at which the server sent the client a reply T4 The time at which the client received the server s reply Polling for Unicast Time Information Polling for Unicast information is used for polling a server for which the IP addre...

Page 229: ...k DXS 3250 DXS 3227P DXS 3227 User Guide Page 227 This section contains the following topics Defining SNTP Global Settings Defining SNTP Authentication Defining SNTP Servers Defining SNTP Interface Settings ...

Page 230: ...ng Broadcast server updates Enable Receive Anycast Servers Updates Defines whether or not the device polls the SNTP server for Anycast server time information If both the Enable Receive Anycast Servers Update and the Enable Receive Broadcast Servers Update fields are enabled the system time is set according to the Anycast server time information The possible values are Enable Enables the device to...

Page 231: ... the device to receive Poll Unicast server updates Disable Disables the device from receiving Poll Unicast server updates 2 Define the Poll Interval Enable Receive Broadcast Servers Update Enable Receive Anycast Servers Update Enable Receive Unicast Servers Update and Enable Poll Unicast Servers fields and select at least one of the Enable fields 3 Click The SNTP global settings are defined and th...

Page 232: ...ticates SNTP sessions between the device and SNTP server Unchecked Disables authenticating SNTP sessions between the device and SNTP server Encryption Key ID Indicates if the encryption key identification is used to authenticate the SNTP server and device The field value is up to 4294967295 Authentication Key Indicates the key used for authentication Trusted Key Indicates the encryption key used U...

Page 233: ...fine SNTP authentication parameters 1 Click The Add SNTP Authentication page opens Figure 148 Add SNTP Authentication 2 Define the Encryption Key ID Authentication Key and Trusted Key fields 3 Click The SNTP Authentication Key is added and the device is updated ...

Page 234: ...fication used to communicate between the SNTP server and device The field range is 1 4294967295 Preference Indicates which SNTP server provides the SNTP system time The possible field values are Primary Indicates the primary server provides SNTP information Secondary Indicates the backup server provides SNTP information Status The operating SNTP server status The possible field values are Up Indic...

Page 235: ...vice request to reach the SNTP server Remove Removes SNTP servers from the SNTP server list The possible field values are Checked Removes the SNTP server Unchecked Maintains the SNTP server This is the default value 2 Click The Add SNTP Server Page opens Figure 150 Add SNTP Server Page 3 Define the SNTP Server Enable Poll Interval and Encryption Key ID fields 4 Click The SNTP Server is added and t...

Page 236: ...ngs Page contains the following fields Interface Indicates the interface on which SNTP can be enabled The possible field values are Port Indicates the specific port number on which SNTP is enabled LAG Indicates the specific LAG number on which SNTP is enabled VLAN Indicates the specific VLAN number on which SNTP is enabled Receive Servers Updates Enables the server to receive or not receive update...

Page 237: ...ink DXS 3250 DXS 3227P DXS 3227 User Guide Page 235 Figure 152 Add SNTP Interface Page 3 Define the Interface and Receive Server Updates fields 4 Click The SNTP interface is added and the device is updated ...

Page 238: ... on their urgency or relevancy Each message severity determines the set of event logging devices that are sent per each event message The following table lists the log severity levels This section includes the following topics Enabling System Logs Viewing the Device Memory Logs Viewing the FLASH Logs Defining Servers Log Parameters Table 12 System Log Severity Levels Severity Level Message Emergen...

Page 239: ...ked Enables device logs Unchecked Disables device logs Severity The following are the available log severity levels Emergency The highest warning level If the device is down or not functioning properly an emergency log message is saved to the specified logging location Alert The second highest warning level An alert log is saved if there is a serious device malfunction for example all device featu...

Page 240: ...sole Defines the minimum severity level from which logs are sent to the console RAM Logs Defines the minimum severity level from which logs are sent to the RAM Log kept in RAM Cache Log File Defines the minimum severity level from which logs are sent to the log file kept in FLASH memory 2 Define the Enable logging and Severity fields 3 Click The global log parameters are set and the device is upda...

Page 241: ...age opens Figure 154 Device Memory Log Page The Device Memory Log Pagecontains the following fields Log Index Displays the log number Log Time Displays the time at which the log was generated Severity Displays the log severity Description Displays the log message text Clearing Device Memory Logs Message logs can be cleared from the Device Memory Log Page To clear message logs 1 Click System Syslog...

Page 242: ... view the message logs Click System Syslog Flash The Syslog Flash Page opens Figure 155 Syslog FLASH Page The Syslog Flash Page contains the following fields Log Index Displays the log number Log Time Displays the time at which the log was generated Severity Displays the log severity Description Displays the log message text Clearing FLASH Logs Message logs can be cleared from the Syslog Flash Pag...

Page 243: ...lication from which system logs are sent to the remote server Only one facility can be assigned to a single server If a second facility level is assigned the first facility is overridden All applica tions defined for a device utilize the same facility on a server The field default is Local 7 The possible field values are Local 0 Local 7 Description A user defined server description Minimum Severit...

Page 244: ...meters Page 242 2 Click The Add Syslog Server Page opens Figure 157 Add Syslog Server Page 3 Define the Log Server IP Address UDP Port Facility Descripiton and Minimum serverity fields 4 Click The Syslog Server is defined and the device is updated ...

Page 245: ... DXS 3227 User Guide Page 243 Section 21 Managing Device Diagnostics This section contains the following topics Configuring Port Mirroring Viewing Integrated Cable Tests Viewing Optical Transceivers Viewing the CPU Utilization ...

Page 246: ...ields Destination Port Defines the port number to which port traffic is copied Transmit Packets Defines the how the packets are mirrored The possible field values are Untagged Mirrors packets as untagged VLAN packets This is the default value Tagged Mirrors packets as tagged VLAN packets Source Port Indicates the port from which the packets are mirrored Type Indicates the port mode configuration f...

Page 247: ...ct a port in the Source Port field 4 Select a port type in the Type field 5 Click The port mirroring session is defined and the device is updated To edit the port mirroring settings 1 Click System Diagnostics Port Mirroring The Port Mirroring Page opens 2 Click The Port Mirroring Settings Page opens Figure 160 Port Mirroring Settings Page 3 Modify the Type field 4 Click The port mirroring settings...

Page 248: ... To test cables 1 Click System Diagnostics Copper Cable The Cable Tests Pageopens Figure 161 Cable Tests Page The Cable Tests Pagecontains the following fields Port Specifies the port to which the cable is connected Test Result Displays the cable test results Possible values are No Cable Indicates that a cable is not connected to the port Open Cable Indicates that a cable is connected on only one ...

Page 249: ...ge contains the field Port Displays the port IP address on which the cable is tested Temperature Displays the temperature C at which the cable is operating Voltage Displays the voltage at which the cable is operating Current Displays the current at which the cable is operating Output Power Indicates the rate at which the output power is transmitted Input Power Indicates the rate at which the input...

Page 250: ... Utilization Page contains the following fields CPU Utilization Displays CPU resource utilization information The possible field values are Enabled Enables viewing CPU utilization information This is the default value Disabled Disables viewing the CPU utlization information Refresh Rate Amount of time that passes before the statistics are refreshed Usage Percentages Indicates the percentage of the...

Page 251: ...RMON interfaces GVRP EAP and Etherlike statistics This section contains the following topics Viewing Interface Statistics Managing RMON Statistics Viewing Interface Statistics This section contains the following topics Viewing Device Interface Statistics Viewing Etherlike Statistics Viewing GVRP Statistics Viewing EAP Statistics ...

Page 252: ... 15 seconds 30 Sec Indicates that the Interface statistics are refreshed every 30 seconds 60 Sec Indicates that the Interface statistics are refreshed every 60 seconds No Refresh Indicates that the Interface statistics are not refreshed Receive Statistics Total Bytes Octets Displays the number of octets received on the selected interface Unicast Packets Displays the number of Unicast packets recei...

Page 253: ...ed Setup Interfaces Statistics Etherlike The Etherlike Statistics Page opens Figure 165 Etherlike Statistics Page The Etherlike Statistics Page contains the following fields Interface Indicates the device for which statistics are displayed The possible field values are Port Defines the specific port for which Etherlike statistics are displayed LAG Defines the specific LAG for which Etherlike stati...

Page 254: ...cessive collisions received on the selected interface Internal MAC Transmit Errors Displays the number of internal MAC transmit errors on the selected interface Oversize Packets Displays the number of oversized packet errors on the selected interface Internal MAC Receive Errors Number of internal MAC received errors on the selected interface Received Pause Frames Displays the number of received pa...

Page 255: ...es that the GVRP statistics are refreshed every 15 seconds 30 Sec Indicates that the GVRP statistics are refreshed every 30 seconds 60 Sec Indicates that the GVRP statistics are refreshed every 60 seconds No Refresh Indicates that the GVRP statistics are not refreshed Join Empty Displays the device GVRP Join Empty statistics Empty Displays the device GVRP Empty statistics Leave Empty Displays the ...

Page 256: ...e GVRP Invalid Attribute Length statistics Invalid Event Displays the device GVRP Invalid Event statistics 3 Select an interface in the Interface field The GVRP statistics are displayed Resetting GVRP Statistics Counters 1 Open the GVRP Statistics Page 2 Click The GVRP statistics counters are cleared ...

Page 257: ...re refreshed every 15 seconds 30 Sec Indicates that the EAP statistics are refreshed every 30 seconds 60 Sec Indicates that the EAP statistics are refreshed every 60 seconds No Refresh Indicates that the EAP statistics are not refreshed Frames Receive Indicates the number of valid EAPOL frames received on the port Frames Transmit Indicates the number of EAPOL frames transmitted via the port Start ...

Page 258: ...Invalid Frames Receive Indicates the number of unrecognized EAPOL frames that have been received by on this port Length Error Frames Receive Indicates the number of EAPOL frames with an invalid Packet Body Length received on this port Last Frame Version Indicates the protocol version number attached to the most recently received EAPOL frame Last Frame Source Indicates the source MAC address attach...

Page 259: ...DXS 3250 DXS 3227P DXS 3227 User Guide Page 257 Managing RMON Statistics This section contains the following topics Viewing RMON Statistics Configuring RMON History Configuring RMON Events Defining RMON Alarms ...

Page 260: ...MON statistics are refreshed every 15 seconds 30 Sec Indicates that the RMON statistics are refreshed every 30 seconds 60 Sec Indicates that the RMON statistics are refreshed every 60 seconds Drop Events Displays the number of dropped events that have occurred on the interface since the device was last refreshed Received Bytes Octets Displays the number of octets received on the interface since th...

Page 261: ...terface since the device was last refreshed Jabbers Displays the total number of received packets that were longer than 1518 octets This number excludes frame bits but includes FCS octets that had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral octet Alignment Error number The field range to detect jabbers is between 20 ms and 150 ...

Page 262: ...he entry number for the History Control Table page Source Interface Displays the interface from which the history samples were taken The possible field values are Port Specifies the port from which the RMON information was taken LAG Specifies the port from which the RMON information was taken Sampling Interval Indicates in seconds the time that samplings are taken from the ports The field range is...

Page 263: ...he current History Control entries 2 Click The RMON History Control Settings Page opens Figure 170 RMON History Control Settings Page 3 Define the Source Interface Owner Sampling Interval Max No of Samples to Keep and Samples Requested fields 4 Click The entry is added to the RMON History Control Page and the device is updated ...

Page 264: ...re taken Drop Events Displays the number of dropped events that have occurred on the interface since the device was last refreshed Received Bytes Octets Displays the number of octets received on the interface since the device was last refreshed This number includes bad packets and FCS octets but excludes framing bits Received Packets Displays the number of packets received on the interface since t...

Page 265: ...eived on the interface since the device was last refreshed Jabbers Displays the total number of received packets that were longer than 1518 octets This number excludes frame bits but includes FCS octets that had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral octet Alignment Error number The field range to detect jabbers is between...

Page 266: ...gure 172 RMON Events Control Page The RMON Events Control Page contains the following fields Event Entry Displays the event Community Displays the community to which the event belongs Description Displays the user defined event description Type Describes the event type Possible values are Log Indicates that the event is a log entry Trap Indicates that the event is a trap Log and Trap Indicates tha...

Page 267: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 265 Remove Removes a RMON event The possible field values are Checked Removes a selected RMON event Unchecked Maintains RMON events ...

Page 268: ...nt logs Click Advanced Setup RMON Events Events Logs The RMON Events Logs Page opens Figure 173 RMON Events Logs Page The RMON Events Logs Page contains the following fields Event Displays the RMON Events Log entry number Log No Displays the log number Log Time Displays the time when the log entry was entered Description Displays the log entry description ...

Page 269: ...r the selected LAG Counter Value Displays the selected MIB variable value Sample Type Defines the sampling method for the selected variable and comparing the value against the thresholds The possible field values are Delta Subtracts the last sampled value from the current value The difference in the values is compared to the threshold Absolute Compares the values directly with the thresholds at th...

Page 270: ...ing Event Displays the mechanism in which the alarms are reported Startup Alarm Displays the trigger that activates the alarm generation Rising is defined by crossing the threshold from a low value threshold to a higher value threshold Interval Defines the alarm interval time in seconds Owner Displays the device or user that defined the alarm Remove Removes the RMON Alarms Table entry 2 Click The ...

Page 271: ...ontrol IEEE 802 3af Power over Ethernet Protocols CSMA CD Data Transfer Rates Half duplex Full duplex Ethernet 10 Mbps 20Mbps Fast Ethernet 100Mbps 200Mbps Gigabit Ethernet n a 2000Mbps Fiber Optic SFP Mini GBIC Support IEEE 802 3z 1000BASE LX DEM 310GT transceiver IEEE 802 3z 1000BASE SX DEM 311GT transceiver IEEE 802 3z 1000BASE LH DEM 314GT transceiver IEEE 802 3z 1000BASE ZX DEM 315GT transcei...

Page 272: ...Number of Ports 48 10 100 1000 Mbps ports 4 combo 1000Base T SFP ports 2 XG CX4 ports 24 10 100 1000 Mbps ports 4 combo 1000Base T SFP ports 3 XG CX4 ports ...

Page 273: ...rage Temperature 20 70 C Humidity Operation 90 maximum relative Storage 95 maximum relative Dimensions DXS 3250 440 x 430 x 45 mm DXS 3227 440 x 310 x 45 mm DXS 3227P 440 x 430 x 45 mm Weight 4 24kg 9 35lbs 6 02kg 13 27lbs EMI CE mark commercial FCC Part 15 Class A VCCI Class A Safety CE LVD UL listed UL 1950 CUL ...

Page 274: ......

Page 275: ......

Page 276: ...ise when installing the and how to resolve these issue This section includes the following topics Problem Management Provides information about problem management with DXS 3250 DXS 3227P DXS 3227 Troubleshooting Solutions Provides a list of troubleshooting issues and solutions for using DXS 3250 DXS 3227P DXS 3227 ...

Page 277: ...Lost password Problems Possible Cause Solution Cannot connect to man agement using RS 232 serial connection Be sure the terminal emulator program is set to VT 100 compatible 9600 baud rate no parity 8 data bits and one stop bit Use the included cable or be sure that the pin out complies with a standard null modem cable Cannot connect to switch management using Telnet HTTP SNMP etc Be sure the swit...

Page 278: ...tation with IP protocol Replace the cable Replace the module Replace the module Erase the connection and reconfigure the port Device is in a reboot loop Software fault Download and install a working or previous software version from the console No connection and the port LED is off Incorrect ethernet cable e g crossed rather than straight cable or vice versa split pair incorrect twisting of pairs ...

Page 279: ...ge is displayed Console reload Are you sure you want to reboot the system y n n 2 Enter Y The device reboots After the POST when the text Autoboot in 2 seconds press RETURN or Esc to abort and enter prom is displayed press Enter The Startup Menu is displayed 1 Download software 2 Erase flash file 3 Erase flash sectors 4 Password Recovery Procedure 5 Enter Diagnostic Mode 6 Back 3 Enter 4 within 15...

Page 280: ...ardware will be refunded by D Link upon return to D Link of the defective Hardware All Hardware or part thereof that is replaced by D Link or for which the purchase price is refunded shall become the property of D Link upon replacement or refund Limited Software Warranty D Link warrants that the software portion of the product Software will substantially conform to D Link s then current functional...

Page 281: ...l be prepaid by D Link if you use an address in the United States otherwise we will ship the product to you freight collect Expedited shipping is available upon request and provided shipping charges are prepaid by the customer D Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements or for which an RMA number is not visible from ...

Page 282: ...istered trademarks are the property of their respective owners Copyright Statement No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from D Link Corporation D Link Systems Inc as stipulated by the United States Copyright Act of 1976 a...

Page 283: ... 276 Product Registration D Link products can be registered online at http support dlink com register Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights ...

Page 284: ...t Software updates and user documentation can be found on the D Link website D Link provides free technical support for customers within the United States and within Canada for the warranty duration For more information on locating the D Link office in your region see International Offices ...

Page 285: ...Contacting D Link Technical Support Page 278 ...

Page 286: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 279 ...

Page 287: ...Contacting D Link Technical Support Page 280 ...

Page 288: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 281 ...

Page 289: ...Contacting D Link Technical Support Page 282 ...

Page 290: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 283 ...

Page 291: ...Contacting D Link Technical Support Page 284 ...

Page 292: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 285 ...

Page 293: ...Contacting D Link Technical Support Page 286 ...

Page 294: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 287 ...

Page 295: ...Contacting D Link Technical Support Page 288 ...

Page 296: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 289 ...

Page 297: ...Contacting D Link Technical Support Page 290 ...

Page 298: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 291 ...

Page 299: ...Contacting D Link Technical Support Page 292 ...

Page 300: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 293 ...

Page 301: ...Contacting D Link Technical Support Page 294 ...

Page 302: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 295 ...

Page 303: ...Contacting D Link Technical Support Page 296 ...

Page 304: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 297 ...

Page 305: ...Contacting D Link Technical Support Page 298 ...

Page 306: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 299 ...

Page 307: ...Contacting D Link Technical Support Page 300 ...

Page 308: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 301 ...

Page 309: ...Contacting D Link Technical Support Page 302 ...

Page 310: ...D Link DXS 3250 DXS 3227P DXS 3227 User Guide Page 303 ...

Page 311: ...k Avenue North Ryde NSW 2113 Australia TEL 61 2 8899 1800 FAX 61 2 8899 1868 URL www dlink com au India D Link House Kurla Bandra Complex Road Off CST Road Santacruz East Mumbai 400098 India TEL 91 022 26526696 56902210 FAX 91 022 26528914 URL www dlink co in Middle East Dubai P O Box 500376 Office No 103 Building 3 Dubai Internet City Dubai United Arab Emirates Tel 971 4 3916480 Fax 971 4 3908881...

Reviews:

No comments

Brands by name

Popular brands

Load more brands