background image

DES-3225G

DES-3225GF

24-Port Fast Ethernet

Switch

User’s Guide

First Edition (October, 1999)

6DES3225G.01

Printed In Taiwan

RECYCLABLE

Summary of Contents for DES-3225G Series

Page 1: ...DES 3225G DES 3225GF 24 Port Fast Ethernet Switch User s Guide First Edition October 1999 6DES3225G 01 Printed In Taiwan RECYCLABLE ...

Page 2: ...h am Geräten befinden sind zu beachten 12 Wird das Gerät über einen längeren Zeitraum nicht benutzt sollten Sie es vom Stromnetz trennen Somit wird im Falle einer Überspannung eine Beschädigung vermieden 13 Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen Dies könnte einen Brand bzw Elektrischen Schlag auslösen 14 Öffnen Sie niemals das Gerät Das Gerä...

Page 3: ...18 Zum Netzanschluß dieses Gerätes ist eine geprüfte Leitung zu verwenden Für einen Nennstrom bis 6A und einem Gerätegewicht gr ßer 3kg ist eine Leitung nicht leichter als H05VV F 3G 0 75mm2 einzusetzen ...

Page 4: ... INCIDENTAL CONSEQUENTIAL OR INDIRECT DAMAGES ARISING OUT THE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF A D LINK PRODUCT HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY THIS LIMITATION WILL APPLY EVEN IF D LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE IF YOU PURCHASED A D LINK PRODUCT IN THE UNITED STATES SOME STATES DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIA...

Page 5: ...ackage returned to D Link without an RMA number will be rejected and shipped back to Purchaser at Purchaser s expense and D Link reserves the right in such a case to levy a reasonable handling charge in addition mailing or shipping costs Software Warranty service for software products may be obtained by contacting a D Link office within the applicable warranty period A list of D Link offices is pr...

Page 6: ...ion as being compatible D Link s obligation under this warranty shall be a reasonable effort to provide compatibility but D Link shall have no obligation to provide compatibility when there is fault in the third party hardware or software D Link makes no warranty that operation of its software products will be uninterrupted or absolutely error free and no warranty that all defects in the software ...

Page 7: ...duced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from D Link Corporation D Link Systems Inc as stipulated by the United States Copyright Act of 1976 FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are desig...

Page 8: ...This is a Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures VCCI Warning BSMI Warning ...

Page 9: ...gement 6 UNPACKING AND SETUP 7 UNPACKING 7 INSTALLATION 8 Desktop or Shelf Installation 8 Rack Installation 9 POWER ON 10 Power Failure 11 IDENTIFYING EXTERNAL COMPONENTS 12 FRONT PANEL 12 REAR PANEL 13 SIDE PANELS 14 OPTIONAL PLUG IN MODULES 15 100BASE TX Module 15 100BASE FX Fiber Module 16 100BASE FX Fiber MTRJ Type Module 17 1000BASE SX Gigabit Module 17 LED INDICATORS 18 CONNECTING THE SWITCH...

Page 10: ...Bridge Level 33 On the Port Level 34 User Changeable STA Parameters 34 Illustration of STA 36 PORT TRUNKING 38 VLAN 40 MAC based VLANs 41 Port based VLANs 42 VLAN Segmentation 43 Sharing Resources Across VLANs 43 VLANs Spanning Multiple Switches 45 BROADCAST STORMS 49 Segmenting Broadcast Domains 50 Eliminating Broadcast Storms 50 USING THE CONSOLE INTERFACE 52 CONNECTING TO THE SWITCH 52 CONSOLE ...

Page 11: ...g 90 Configure VLAN 94 Configure Trunk 104 Update Firmware and Configuration Files 105 System Utilities 107 Ping Test 107 Save Settings to TFTP Server 109 Save Switch History toTFTP Server 110 SNMP Manager Configuration 111 SWITCH MONITORING 113 Network Monitoring 113 Traffic Statistics 114 Browse Address Table 121 Browse IGMP Status 122 Switch History 124 RESETTING THE SWITCH 125 Restart System 1...

Page 12: ...tistics 168 Browse Address Table 175 Browse IGMP Status 176 Switch History 177 Reset and Update 178 Reboot Switch 178 Reset to Factory Default 179 Update Firmware 180 Change Configuration File 181 Save Settings to TFTP Server 182 Upload Log File 183 Save Changes 184 Help 184 TECHNICAL SPECIFICATIONS 185 RJ 45 PIN SPECIFICATION 188 SAMPLE CONFIGURATION FILE 190 Commands 190 Notes about the Configur...

Page 13: ...on uses the terms Switch first letter upper case to refer to the DES 3225G 24 port NWay Ethernet Switch and switch first letter lower case to refer to all Ethernet switches including the DES 3225G Overview of this User s Guide Chapter 1 Introduction Describes the Switch and its features Chapter 2 Unpacking and Setup Helps you get started with the basic installation of the Switch Chapter 3 Identify...

Page 14: ...ing the Console Interface Tells how to use the built in console interface to change set and monitor Switch performance and security Chapter 7 Web Based Network Management Tells how to manage the Switch through an Internet browser Appendix A Technical Specifications Lists the technical specifications of the DES 3225G Appendix B RJ 45 Pin Specifications Shows the details and pin assignments for the ...

Page 15: ...N technologies are proposed to provide greater bandwidth and improve client server response times Among them Fast Ethernet or 100BASE T provides a non disruptive smooth evolution from the current 10BASE T technology The dominating market position virtually guarantee cost effective and high performance Fast Ethernet solutions in the years to come 100Mbps Fast Ethernet is a standard specified by the...

Page 16: ...enecks that frequently develop as computers and their busses get faster and more users use applications that generate more traffic Upgrading key components such as your backbone and servers to Gigabit Ethernet can greatly improve network response times as well as significantly speed up the traffic between your subnets Gigabit Ethernet enables fast optical fiber connections to support video confere...

Page 17: ...way of increasing the total network capacity available to users on a local area network A switch increases capacity and decreases network loading by making it possible for a local area network to be divided into different segments which don t compete with each other for network transmission capacity giving a decreased load on each The switch acts as a high speed selective bridge between the indivi...

Page 18: ...on of network bridges which were characterized by higher latencies Routers have also been used to segment local area networks but the cost of a router and the setup and maintenance required make routers relatively impractical Today s switches are an ideal solution to most kinds of local area network congestion problems Features The DES 3225G Switch was designed for easy installation and high perfo...

Page 19: ...managing the Switch via a connection to a console terminal or PC using a terminal emulation program Performance features Store and forward switching scheme capability to support rate adaptation and protocol conversion Full and half duplex for both 10Mbps and 100Mbps connections The 1000BASE SX Gigabit Ethernet module operates at full duplex only Full duplex allows the switch port to simultaneously...

Page 20: ...le per device with automatic learning and aging 10 to 9999 seconds 12 MB packet buffer per device Broadcast storm filtering IGMP Multicast support Management RS 232 console port for out of band network management via a console terminal or PC Spanning Tree Algorithm Protocol for creation of alternative backup paths and prevention of network loops Fully configurable either in band or out of band con...

Page 21: ... and carefully unpack its contents The carton should contain the following items One DES 3225G 24 port NWay Ethernet Switch One 2 port 100BASE TX Fast Ethernet module preinstalled on front panel DES 3225GF includes a 1 port 100BASE FX module preinstalled Mounting kit 2 mounting brackets and screws Four rubber feet with adhesive backing One AC power cord This User s Guide CD ROM with a Registration...

Page 22: ...eet of the device Visually inspect the power cord and see that it is secured to the AC power connector Make sure that there is proper heat dissipation from and adequate ventilation around the switch Do not place heavy objects on the switch Desktop or Shelf Installation When installing the Switch on a desktop or shelf the rubber feet included with the device should first be attached Attach these cu...

Page 23: ...ed in an EIA standard sized 19 inch rack which can be placed in a wiring closet with other equipment To install attach the mounting brackets on the switch s side panels one on each side and secure them with the screws provided Figure 2 2A Attaching the mounting brackets to the switch Then use the screws provided with the equipment rack to mount the switch on the rack ...

Page 24: ...ated at the rear of the unit adjacent to the AC power connector and the system fan The switch s power supply will adjust to the local power source automatically and may be turned on without having any or all LAN segment cables connected After the power switch is turned on the LED indicators should respond as follows All LED indicators will momentarily blink This blinking of the LED indicators repr...

Page 25: ...s the LED will light again to indicate the switch is in a ready state The console LED indicator will remain ON if there is a connection at the RS 232 port otherwise this LED indicator is OFF The 100M LED indicator may remain ON or OFF depending on the transmission speed Power Failure As a precaution in the event of a power failure unplug the switch When power is resumed plug the switch back in ...

Page 26: ... of the DES 3225G Front Panel The front panel of the Switch consists of LED indicators an RS 232 communication port a slide in module slot two uplink ports and 22 10 100 Mbps Ethernet Fast Ethernet ports Figure 3 1 Front panel view of the Switch Comprehensive LED indicators display the status of the switch and the network A description of these LED indicators follows see the LED Indicators section...

Page 27: ...which can be used to connect a straight through cable to a normal non Uplink port on a switch or hub Do not use port 1X if the top Uplink port is occupied or Port 2X if the bottom Uplink port is occupied Twenty two high performance NWay Ethernet ports all of which operate at 10 100 Mbps for connections to end stations servers and hubs All ports can auto negotiate between 10Mbps or 100Mbps full or ...

Page 28: ...er switch The AC power connector is a standard three pronged connector that supports the power cord Plug in the female connector of the provided power cord into this socket and the male side of the cord into a power outlet Supported input voltages range from 100 240 VAC at 50 60 Hz Side Panels The right side panel of the Switch contains two system fans see the top part of the diagram below The lef...

Page 29: ...sides of the switch for proper ventilation Be reminded that without proper heat dissipation and air circulation system components might overheat which could lead to system failure Optional Plug in Modules The DES 3225G 24 port NWay Ethernet Switch is able to accommodate a range of plug in modules in order to increase functionality and performance 100BASE TX Module Figure 3 5 100BASE TX two port mo...

Page 30: ...5 UTP or STP cable connections of up to 100 meters 100BASE FX Fiber Module Figure 3 6 100BASE FX one port modul Front panel module Connects to 100BASE FX devices at full or half duplex Supports multi mode fiber optic cable connections of up to 412 meters in half duplex or 2 km in full duplex mode ...

Page 31: ...o 100BASE FX devices at full or half duplex Supports multi mode fiber optic cable connections of up to 412 meters in half duplex or 2 km in full duplex mode 1000BASE SX Gigabit Module Figure 3 8 1000BASE SX gigabit one port modul Rear panel module Connects to 1000BASE SX devices at full duplex only Allows multi mode fiber optic cable runs of up to 2 km in full duplex mode only ...

Page 32: ...Self Test POST It will light green approximately 2 seconds after the switch is powered on to indicate the ready state of the device The LED will blink green while downloading new software for the switch or if the system s configuration has changed and will light yellow when an error occurs Console This indicator is lit green when the switch is being managed via out of band local console management...

Page 33: ...ors are illuminated green when a 100 Mbps device is connected to any of the 24 ports or uplink port If a 10 Mbps device is connected to any of the 24 ports or uplink port these LEDs remain dark Link Act These indicators are lit when there is a secure connection or link to a device at any of the ports The LEDs blink whenever there is reception or transmission i e Activity Act of data occurring at a...

Page 34: ...hen using a normal straight through cable an MDI II port must connect to an MDI X port An end node can be connected to the Switch via a two pair Category 3 4 5 UTP STP straight cable be sure to use Category 5 UTP or STP cabling for 100 Mbps Fast Ethernet connections The end node should be connected to any of the twenty two ports 1x 22x of the DES 3225G or to either of the two 100BASE TX ports on t...

Page 35: ...PC s LAN card the cable switch conditions and connections The following LED indicator states are possible for an end node to switch connection 1 The 100M LED indicator comes ON for a 100 Mbps and stays OFF for 10 Mbps 2 The Link Act LED indicator lights up upon hooking up a PC that is powered on Switch to Hub or Switch These connections can be accomplished in a number of ways The most important co...

Page 36: ...rt we suggest connecting the other device s Uplink MDI II port to any of the switch s MDI X ports 1x 22x or one of the 100BASE TX module ports using a normal straight through cable as shown below If the other device does not have an unused Uplink port make the connection with a normal straight through cable from one of the Uplink ports on the switch to any normal crossed port on the hub Alternativ...

Page 37: ...e For a 10BASE T device the Switch s LED indicators should display the following 100M LED speed indicator is OFF Link Act indicator is ON 100BASE TX Device For a 100BASE TX device the Switch s LED indicators should display the following 100M LED speed indicator is ON Link Act is ON ...

Page 38: ...management involves the administration of the DES 3225G Switch via a direct connection to the RS 232 DCE console port This is an Out Of Band connection meaning that it is on a different circuit than normal network communications and thus works even when the network is down The local console management connection involves a terminal or PC running terminal emulation software to operate the switch s ...

Page 39: ...program such as HyperTerminal which is automatically installed with Microsoft Windows a to the RS 232 DCE console port of the Switch Switch management using the RS 232 DCE console port is called Local Console Management to differentiate it from management done via management platforms such as D View HP OpenView etc The console port is set for the following configuration Baud rate 9 600 Data width ...

Page 40: ...network as the Switch making it necessary for management packets to go through a router to reach the network manager and vice versa For security you can set in the Switch a list of IP Addresses of the network managers that you allow to manage the Switch You can also change the default Community Name in the Switch and set access rights of these Community Names Traps Traps are messages that alert yo...

Page 41: ... must immediately take certain actions to avoid future failure or breakdown of the network The following are trap types a trap manager will receive Cold Start This trap signifies that the Switch has been powered up and initialized such that software settings are reconfigured and hardware systems are rebooted A cold start is different from a factory reset Warm Start This trap signifies that the Swi...

Page 42: ...te to the Blocking state The trap is not sent if a new root trap is sent for the same transition Link Change Event This trap is sent whenever the link of a port changes from link up to link down or from link down to link up Port Partition This trap is sent whenever the port state enters the partition mode or automatic partitioning port disable when more than thirty two collisions occur while trans...

Page 43: ...y constants are the number of ports and types of ports Examples of read only variables are the statistics counters such as the number of errors that have occurred or how many kilobytes of data have been received and forwarded through a port Read write MIBs are variables usually related to user customized configurations Examples of these are the Switch s IP Address Spanning Tree Algorithm parameter...

Page 44: ... parameter that affects the auto learn process of the Switch in terms of the network configuration Dynamic Entries which make up the auto learned node address are aged out of the address table according to the Aging Time that you set The Aging Time can be from 10 seconds to 9999 seconds A very long Aging Time can result with the out of date Dynamic Entries that may cause incorrect packet filtering...

Page 45: ... network For intrusion control whenever a switch encounters a packet originating from or destined to a MAC address defined by the user the switch will discard the packet Filtering includes 1 Dynamic filtering automatic learning and aging of MAC addresses and their location on the network Filtering occurs to keep local traffic confined to its segment 2 MAC address filtering the manual entry of spec...

Page 46: ...d and complex subject and must be fully researched and understood Please read the following before making any changes Network loop detection and prevention With STA there will be only one path between any two LANs If there is more than one path forwarded packets will loop indefinitely STA detects any looped path and selects the path with the lowest path cost as the active path while blocking the o...

Page 47: ...A lower Bridge Identifier results in a higher priority for the switch and thus increases it probably of being selected as the Root Bridge Designated Bridge From each LAN segment the attached Bridge that has the lowest Root Path Cost to the Root Bridge is the Designated Bridge It forwards data packets for that LAN segment In cases where all Switches have the same Root Path Cost the switch with the ...

Page 48: ...r the higher the Port Priority is With higher Port Priority the higher the probability that the port will be selected as the Root Port Path Cost This is a changeable parameter and may be modified according to the STA specification The 100Mbps segment has an assigned Path Cost of 10 and each 10Mbps segment has an assigned Path Cost of 100 based on the STA specifications User Changeable STA Paramete...

Page 49: ...40 seconds At the end of the Max Age if a BPDU has still not been received from the Root Bridge your Switch will start sending its own BPDU to all other Switches for permission to become the Root Bridge If it turns out that your Switch has the lowest Bridge Identifier it will become the Root Bridge Bridge Forward Delay The Forward Delay can be from 4 to 30 seconds This is the time any port on the ...

Page 50: ...oop causing a serious network failure To alleviate network loop problems STA can be applied as shown in Figure 5 2 In this example STA breaks the loop by blocking the connection between Bridge 1 and 2 The decision to block a particular connection is based on the STA calculation of the most current Bridge and Port settings Now if Bridge 1 broadcasts a packet to Bridge 3 then Bridge 3 will broadcast...

Page 51: ... Figure 5 1 Before Applying the STA Rule Figure 5 2 After Applying theSTA Rule STA parameters Settings Effects Comment Bridge Priority lower the higher the priorit Increases chance of becoming the Root Bridg Avoid if the switch is used in workgroup level of a large network ...

Page 52: ...n Port Priority lower the higher the priorit Increases chance of become Root Port Table 5 1 User selective STA parameter Port Trunking Port trunking is used to combine a number of ports together to make a single high bandwidth data pipeline The participating parts are called members of a trunk group with one port designated as the master of the group Since all members of the trunk group must be co...

Page 53: ...nd the master port for the third group is the first port 1x on the 2 port module The switch treats all ports in a trunk group as a single port As such trunk ports will not be blocked by Spanning Tree Data transmitted to a specific host destination address will always be transmitted over the same port in a trunk group This allows packets in a data stream to arrive in the same order they were sent A...

Page 54: ...onnected to it while port based VLANs support IEEE 802 1Q tagging which enables them to span the entire network assuming all switches on the network are IEEE 802 1Q compliant Both MAC based and port based VLANs allow a network to be segmented in order to reduce the size of broadcast domains All packets entering a VLAN will only be forwarded to the stations MAC based or ports port based that are me...

Page 55: ... nature limited to the switch itself and the devices connected to it Two key features inherent in MAC based VLANs are flexibility and security Since MAC addresses are hard wired into a station s network interface card NIC MAC based VLANs enable network managers to move a station to a different physical location on the network and have that station automatically retain its VLAN membership This prov...

Page 56: ...n lies on the same segment communications take place using normal Ethernet protocols Even though this is always the case when the destination for a packet lies on another switch port VLAN considerations come into play to decide if the packet gets dropped by the switch or delivered There are two key components to understanding port based VLANs Port VLAN ID numbers PVID and VLAN ID numbers VID Both ...

Page 57: ...the switch then looks to see if the other port Port 10 is a member of VLAN 2 and can therefore receive VLAN 2 packets If port 10 is not a member of VLAN 2 then the packet will be dropped by the switch and will not reach it s destination If Port 10 is a member of VLAN 2 the packet will go through This selective forwarding feature based on VLAN criteria is how VLANs segment networks The key point be...

Page 58: ...m according to their Port VLAN ID PVID number However a port can receive packets on all VLANs VID that it belongs to The assignments are as follows Transmit on VLAN Member of VLAN Port PVID VID Ports Port 1 1 1 1 2 3 7 Port 2 1 Port 3 1 Port 7 3 3 1 2 3 7 11 12 Port 11 2 2 11 12 7 Port 12 2 The server attached to Port 7 is shared by VLAN 1 and VLAN 2 because Port 7 is a member of both VLANs it is ...

Page 59: ...thus whether or not tagging should be performed Definitions of relevant terms are as follows Tagging The act of putting 802 1Q VLAN information into the header of a packet Ports with tagging enabled will put the VID number priority and other VLAN information into all packets that flow into and out it If a packet has previously been tagged the port will not alter the packet thus keeping the VLAN in...

Page 60: ...receive the packet if the Ingress Filter is enabled will tag it with its own PVID if it defined as a tagging port and check to see if the destination port is on the same VLAN as its own PVID and can thus receive the packet If Ingress filtering is disabled and the destination port is a member of the VLAN used by the ingress port the packet will be forwarded If the ingress port is an untagging port ...

Page 61: ...1Q VLAN information into each packet header enabling other 802 1Q compliant switches that receive the packet to know how to treat it Upon receiving a tagged packet an 802 1Q compliant switch can use the information in the packet header to maintain the integrity of VLANs carry out priority forwarding etc Data transmissions between 802 1Q compliant switches take place as shown below ...

Page 62: ...ions about its delivery whether server 2 is attached to a port that is a member of VLAN 2 and thus should the packet be delivered the queuing priority to give to the packet etc It can also perform these functions for VLAN 1 packets as well and in fact for any tagged packet it receives regardless of the VLAN number If the ingress port in step 4 were connected to a non 802 1Q compliant device and wa...

Page 63: ... generate broadcast traffic among others In effect broadcast storms can originate from any number of sources but once they are started they can be self perpetuating and can even multiply the number of broadcast packets on the network over time In the best case network utilization will be high and bandwidth limited until the hop counts for all broadcast packets have expired whereupon the packets wi...

Page 64: ...miting the scope of broadcast storms Eliminating Broadcast Storms SNMP agents can be programmed to monitor the number of broadcast packets on switch ports and act on the data When the number of broadcast packets on a given port rise past an assigned threshold an action can be triggered When enabled the usual action is to block the port to broadcast frames which discards all broadcast frames arrivi...

Page 65: ...ay Ethernet Switch User s Guide Switch Management Concepts 51 threshold is set to 250pps The thresholds and actions can easily be defined by using a normal SNMP management program or through the console interface ...

Page 66: ...anagement functions In addition the console program will allow you to set up the Switch for management using an SNMP based network management system This chapter describes how to use the console interface to access the Switch change its settings and monitor its operation Connecting to the Switch You can use the console interface by connecting the Switch to a VT100 compatible terminal or a computer...

Page 67: ...creens are for the most part identical whether accessed from the console port or from a TELNET interface Console Usage Conventions The console interface makes use of the following conventions 1 Items in angle brackets can be toggled on or off using the space bar 2 Items in square brackets can be changed by typing in a new value You can use the backspace and delete keys to erase characters behind a...

Page 68: ...e effect until the Switch has been rebooted First Time Connecting To The Switch The Switch supports user based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings This section tells how to log onto the Switch Note The passwords used to access the Switch are case sensitive therefore S is not the same as s When you first connect to the Switch ...

Page 69: ...e 55 Figure 6 1 Initial screen first time connecting to the Switch Note There is no initial username or password Leave the username and password fields blank Press Enter or Return in the Username and Password fields You will be given access to the main menu shown below ...

Page 70: ...u appears 2 Enter the new user name assign an initial password and then confirm the new password Determine whether the new user should have Administrator or Normal User privileges Use the space bar to toggle between the two options 3 Press APPLY to let the user addition take effect 4 Press Esc to return to the previous screen or Ctrl T to go to the root screen 5 To see a listing of all user accoun...

Page 71: ... Yes No User Accounts Management Create Modify User Accounts Yes No View Delete User Accounts Yes No System Utilities Yes Yes Factory Reset Yes No Restart System Yes No Table 6 1 Administrator and Normal User Privileg After establishing a User Account with Administrator level privileges press Esc twice Then choose the Save Changes menu see below Pressing any key will return to the main menu You ar...

Page 72: ...In order to retain any modifications made in the current session by saving them into the NV RAM it is necessary to choose Save Changes from the main menu The following screen will appear to indicate your new settings have been processed Figure 6 3 Save Changes screen After the settings have been saved to NV RAM they will become the default settings for the switch and they will be used by the switc...

Page 73: ...ered user 1 Type in your username and press Enter 2 Type in your password and press Enter 3 The main menu screen will be displayed based on your Administrator or Normal User access level or privilege Create Modify User Accounts To add or change your user password Choose Users Accounts Management from the main menu The following User Accounts Management menu appears ...

Page 74: ... screen 2 Type in your Username and press Enter 3 If you are a new user type in the Old Password and press Enter 4 Type in the New Password you have chosen and press Enter Type in the same new password in the following field to verify that you have not mistyped it 5 Determine whether the new user should have Normal User or Administrator privileges 6 Choose the APPLY command to let the password cha...

Page 75: ...ing a user name and password Up to three of these user names can be defined The console interface will not let you delete the current logged in user however in order to prevent accidentally deleting all of the users with Administrator privilege Only users with the Administrator privilege can delete users To view your user password Choose View Delete User Accounts from the User Accounts Management ...

Page 76: ...ess APPLY to let the user deletion take effect Setting Up The Switch This section will help prepare the Switch user by describing the Configuration Update Firmware and Configuration Files Save Changes and System Utilities menus and their respective sub menus Configuration Choose Configuration to access the first item on the DES 3225G main menu The following menu appears ...

Page 77: ...work management information Configure IP Address The Switch needs to have an IP address assigned to it so that an In Band network management system or TELNET client can find it on the network The IP Configuration screen allows you to change the settings for the two different interfaces used on the Switch the Ethernet interface used for in band communication and the SLIP interface used over the con...

Page 78: ...BOOTP server to provide it with this information before using the supplied settings IP Address Determines the IP address used by the Switch for receiving SNMP and TELNET communications These fields should be of the form xxx xxx xxx xxx where each xxx is a number represented in decimal between 0 and 255 This address should be a unique address on a network assigned to you by the central Internet aut...

Page 79: ...ou do not want the Switch to be accessible outside your local network you can leave this field unchanged Configure Console You can use the Console Options screen to choose whether to use the Switch s RS 232C serial port for console management or for out of band TCP IP communications using SLIP and to set the bit rate used for SLIP communications Choose Configure Console to access the last item on ...

Page 80: ...band SLIP management it does not apply when the port is used for the console port Available speeds are 2400 9600 19 200 and 38 400 bits per second The default setting in this Switch version is 9600 The top of the screen displays the current settings for Console Timeout and Serial Port as well as the Baud Rate Character Size and Stop Bit for Out of Band and Console settings respectively Configure S...

Page 81: ...r administrative purposes The Switch s fully qualified domain name is often used provided a name has been assigned System Location Corresponds to the SNMP MIB II variable system sysLocation and is used to indicate the physical location of the Switch for administrative purposes System Contact Corresponds to the SNMP MIB II variable sysContact and is used to give the name and contact information for...

Page 82: ...to access the Configure Advanced Switch Features screen Figure 6 11 Configure Advanced Switch Features screen The fields you can set are Port Auto Partition Capability on All Ports When this function is enabled if too many consecutive collisions occur on an individual port the port will be blocked off until a good packet is seen on the wire If a port is partitioned the Switch can only transmit dat...

Page 83: ...l network performance Enabling HOL Blocking Prevention prevents Head of Line blocking from occurring meaning that the packet destined for Port 3 gets delivered immediately Configure Ports The port configuration screen allows you to change the port state in the case when you would like to partition a port due to excessive collision or for observation device repair or security reasons Great caution ...

Page 84: ...nection It is useful during periods of heavy network activity when the Switch s buffers can receive too much traffic and fill up faster than the Switch can forward the information In such cases the Switch will intervene and tell the transmitting device to pause to allow the information in the port buffer to be sent When Auto Negotiation is enabled in the Speed Duplex field above flow control will ...

Page 85: ...n locked automatic learning for all stations connected to this port will stop and entries in the Forwarding Table for all devices residing on this port will age out The only traffic this port will allow is traffic from machines whose MAC address is manually entered in the Static Forwarding Table Broadcast Storm Rising Action This setting will be activated when Broadcast Storm Rising Threshold belo...

Page 86: ...The Do Nothing setting causes the switch to operate normally in other words ignore the situation If the port had met the Broadcast Storm Rising Action criteria and started Blocking broadcast packets it will continue doing so The Forward setting causes the port to begin forwarding broadcast frames thus removing the Blocking state imposed by the Broadcast Storm Rising Action Forward and Trap perform...

Page 87: ...nning Tree Protocol is enabled or disabled on this port and Status reflect the current conditions of the port They are read only fields and cannot be changed Configure Slot1 Module This screen allows you to change the port state of the module in slot 1 in the case when you would like to partition a port due to excessive collision or for observation device repair or security reasons Great caution h...

Page 88: ...es this port Speed Duplex Selects the desired Speed and Duplex fort the port Possible settings include Auto 100M Full 100M Half 10M Full or 10M Half Choosing Auto enables NWay auto configuration on the port Flow Control Enables or disables IEEE 802 1x full duplex only flow control on this port See Flow Control in the Configure Ports section above for a more detailed explanation Priority selects No...

Page 89: ...This setting defines a ceiling for the number of broadcast packets per second on this port See Broadcast Storm Rising Threshold in the Configure Ports section of this manual for a more detailed explanation Broadcast Storm Falling Action This setting will be activated when the Broadcast Storm Rising Threshold and then the Broadcast Storm Falling Threshold below is met This setting can be configured...

Page 90: ...n you would like to partition a port due to excessive collision or for observation device repair or security reasons Great caution however must be observed when disabling a port since all data passing through the port will be discarded by the switch The Configure Slot2 Module screen appears as follows Figure 6 14 Slot2 Port Configuration screen Port field specifies either Slot1 TP1 the Port 1x por...

Page 91: ...ort will age out The only traffic this port will allow is traffic from machines whose MAC address is manually entered in the Static Forwarding Table Broadcast Storm Rising Action selects an action Do Nothing Block Block and Trap for the port when the Broadcast Storm Rising Threshold below condition is met See Broadcast Storm Rising Action in the Configure Ports section of this manual for a more de...

Page 92: ...rts section of this manual for a more detailed explanation Press CTRL S to have the changes take effect STP Port State and Status reflect the current conditions of the port They are read only fields and cannot be changed Configure Port Mirroring The switch allows you to copy frames transmitted and received on a port and redirect the copies to another port You can attach a monitoring device to the ...

Page 93: ...g troubleshooting device such as a sniffer or an RMON probe Note You cannot mirror a fast port onto a slower port For example if you try to mirror the traffic from a 100 Mbps port onto a 10 Mbps port this can cause throughput problems The port you are copying frames from should always support an equal or lower speed than the port to which you are sending the copies Also the target port cannot be a...

Page 94: ...evel and User Changeable Parameters It is recommended that you read these sections as well as the introductory section in the same chapter entitled Spanning Tree Algorithm before changing any of the parameters STP Parameter Settings To change the Protocol Parameters 1 Choose Configure Spanning Tree Protocol from the Configuration menu The following Configure Spanning Tree Protocol menu will be dis...

Page 95: ...hanges were made to the network topology These changes usually occur when backup paths are activated due to primary path failures Topology Change Count Read only object displays the number of times since the current management session with the device was started changes were made to the network topology Changes usually occur on the network when backup paths are activated Designated Root Read only ...

Page 96: ...n moving towards the forwarding state The value determines how long the port stays in each of the listening and learning states which precede the forwarding state Hold Time sec Read only object displays the time interval during which no more than two configuration BPDUs shall be transmitted by the bridge Root Priority Read only object displays the priority number of the root bridge of the Spanning...

Page 97: ...r your Switch and it is not the Root Bridge the set Hello Time will be used if and when your Switch becomes the Root Bridge Forward Delay 4 30 sec The Forward Delay is a read write object that can be set from 4 to 30 seconds This is the time any port on the Switch spends in the listening state while moving from the blocking state to the forwarding state Bridge Priority 0 65535 A Bridge Priority is...

Page 98: ...e Spanning Tree Protocol menu The following screen appears Figure 6 18 Spanning Tree Protocol Custom Settings screen Items in the above window are described as follows STP State Enables or disables the Spanning Tree Protocol on a particular port Cost 1 65535 Defines the cost for the connection Priority 0 255 Port Priority is a read write object that can be set from 0 to 255 This is the priority nu...

Page 99: ...fined when a dynamic entry is created by the Learning Process as a result of observation of network traffic in the Filtering Database Static Filtering is defined as static entries that may be added and removed from the Filtering Database by the user They are not automatically removed by any timeout mechanism The Configure Filtering and Forwarding table screen allows you to allows you to stop or st...

Page 100: ...our network configuration doesn t change locking the forwarding table helps keep intruders off your network since any packet coming from an unknown source address will be dropped by the Switch Address Table Lookup Mode This setting allows the user to tailor the MAC address look up procedure Choices are Level 0 Level 1 Level 2 Level 3 Level 4 Level 5 Level 6 Level 7 The higher the level the more MA...

Page 101: ...rwarding Table The Static Forwarding Table displays a list of manually defined static MAC address entries To access the Custom Forwarding Table choose Configure Filtering and Forwarding Table from the Configuration menu Then select Configure Permanent Address Table Entry from the bottom of the Configure Filtering and Forwarding table screen The following screen appears Figure 6 20 Custom Forwardin...

Page 102: ...tic forwarding table entry can be in use or not apply Not apply means that there is a static filter for the same MAC address Static filters always take precedence over static forwarding entries The switch will automatically upgrade the Status to in use once the static filter is removed Configure MAC Address Filtering The Static Filtering Table contains filtering information configured into the Swi...

Page 103: ...ss and press APPLY Configure Static Multicast Filtering Multicast filtering allows you to block or forward traffic over each port for one multicast group To access the Custom Multicast Filtering Table select Configure Filtering and Forwarding Table from the Configuration menu Then select Configure Permanent Multicast Filtering from the bottom of the Configure Filtering and Forwarding table screen ...

Page 104: ...MP Filtering Internet Group Management Protocol IGMP allows Multicasting on your network When IP Multicast Filtering is enabled the Switch can intelligently forward rather that broadcasting IGMP queries and reports sent between devices connected to the switch and an IGMP enabled device hosting IGMP on your network When enabled for IGMP snooping the Switch can open or close a port to a specific Mul...

Page 105: ...ion screen Items in the above window are defined as follows IP Multicast Filtering Age out Timer When this timer expires and the switch has not observed snooped any IGMP query packets asking whether any stations belong to any Multicast groups the switch itself will send out queries and become the IGMP host on your network IP Multicast Filtering IGMP Snooping This enables disables the switch to int...

Page 106: ...tain Multicast members Configure 802 1Q IGMP The window which opens after this option is chosen allows IGMP to operate in conjunction with IEEE 802 1Q VLANs The window is shown below Choosing Add Remove IGMP Entry allows you to define up to 12 VLANs on the switch which can send and receive IGMP packets Choosing Configure IGMP Control Table allows you to enable disable these agents and set aging ti...

Page 107: ...esent on the given VLAN Only 12 agents can exist on the switch at any one time Items in the above window are described below Action Adds Removes an entry agent from the table VID The VLAN number that you wish to create an agent for Apply Adds the agent to the table Go back to the Configure 802 1Q IGMP window and choose Configure IGMP Control Table shown below in order to activate deactivate the ag...

Page 108: ...uery packet has arrived at the switch before this timer has expired the switch will become the IGMP host for this VLAN IGMP Status Activates deactivates the agent on this VLAN Configure VLAN If you are unsure about your knowledge of VLANs please review the VLAN section in the Switch Management Concepts chapter of this manual before configuring the switch for VLANs The VLAN Configuration menu displ...

Page 109: ...types of VLANs at the same time You can also access two additional screens Configure MAC Base VLAN and Configure 802 1Q VLAN Choose Configure VLAN on the Configuration menu to access the VLAN Configuration menu Figure 6 24 VLAN Configuration The information on the top of the screen is described as follows Current VLAN Mode Displays whether VLANs are currently enabled or disabled on the switch Rest...

Page 110: ...his 802 1Q VLAN VID This should be the first VLAN you create otherwise you may not be able to communicate with the switch Configure MAC Based VLA To create MAC based VLANs simply create the VLAN itself in the Create Remove MAC based VLAN screen and then MAC addresses to the VLAN in the Configure a MAC based VLAN screen Afterwards restart the switch and the VLAN will be implemented Figure 6 25 MAC ...

Page 111: ...N Description Enter the name or number of the VLAN This will be the identifier for this VLAN Press APPLY to create remove the designated MAC Based VLAN Current MAC based VLAN and Number of MAC address members reflect the current conditions They are read only fields and cannot be changed Choose Configure a MAC based VLAN from the MAC Based VLAN Configuration menu to access the following screen ...

Page 112: ... Console Interface Figure 6 27 Configure a MAC based VLAN screen To configure a VLAN highlight the desired entry on the screen above and press ENTER The following MAC Based VLAN MAC Assignment screen appears Figure 6 28 MAC Based VLAN MAC Assignment screen ...

Page 113: ...flect the current conditions They are read only fields and cannot be changed If you are unsure of your knowledge of port based VLANs or IEEE 802 1Q tagging we highly recommend reviewing the VLAN section of the Switch Management Concepts chapter in this manual before proceeding To configure an IEEE 802 1Q port based VLAN you must do three things 1 Decide if you want to enable Ingress Filtering and ...

Page 114: ...rs able to receive packets from a port that has this PVID number At this point you need to designate whether a member port will be a Tagging or Untagging member port Defining the ports that will be members of a VLAN and whether they will TAG or Untag packets is done in the Configure Static VLAN Entry screen Choose Configure 802 1Q VLAN on the VLAN Configuration screen under Configure VLAN of the C...

Page 115: ... filtering is enabled the port will check the VLAN ID number of the packet and it s own VID s If there is a match the port will receive the packet If the packet doesn t have a VLAN tag or the port is not a member of the VLAN for which the packet is tagged the packet will be discarded Choose Configure Port VLAN ID to access the second item on the 802 1Q VLAN Configuration menu The following Port VL...

Page 116: ...VLAN assignment screen This screen allows you to set a Port VLAN ID number PVID for each port Press CTRL S to let the changes take effect Choose Configure Static VLAN Entry to access the third item on the 802 1Q VLAN Configuration menu The following 802 1Q Static VLAN Settings screen appears ...

Page 117: ...between T for tag and U for untag for each port Egress Position the cursor over the dash representing the appropriate port number and press space bar to select E for Egress or leave the dash An E designates the specified port as a static member of the VLAN A dash means the port is not given VLAN membership for the VID entered above State Toggle between Active and Inactive A table on the lower part...

Page 118: ...scussed in detail in the Port Trunking section of the Switch Management Concepts chapter of this manual To setup a trunk group choose Configure Trunk in the Configuration menu The following screen appears Figure 6 33 Configure Trunk screen The fields you can set are Master There are three listings representing the master port for each of the three trunk groups available on the switch The master po...

Page 119: ...nnection between a switch on the 6 th floor and this one on the 7 th floor Status Enables or Disables this trunk group Be careful when disabling trunk groups as the connections will return to normal operation and may cause signal loops Press APPLY to let the changes take effect Update Firmware and Configuration Files The Switch is capable of obtaining its configuration settings the same settings d...

Page 120: ...P address of the TFTP server where the runtime switching software or configuration file is located This entry is used only if the Firmware Update is set to Enabled Firmware Update Determines whether or not the Switch will try to look for a runtime image file on the TFTP server File Name The complete path and filename of the runtime image file on your TFTP server to be uploaded to the switch Use Co...

Page 121: ...ndix Config File Name The complete path and filename on the TFTP server for configuration file to be used System Utilities The Utilities menu offers three system utility options Ping Test Save settings to TFTP Server and Save Switch History to TFTP Server The following window will be opened Figure 6 35 Utilities menu Ping Test Choose Ping Test to access the following screen ...

Page 122: ...ate the Ping test The fields you can set are Destination IP Address The IP address of the device to be Pinged Repetitions Amount of times the Switch should send the Ping 1 255 If zero is chosen the Switch will continue Pinging indefinitely In the lower part of the Ping Test screen you can view the Ping status including Result Reply Time out and Unreachable ...

Page 123: ...ies on the main menu to access the following screen Figure 6 37 Upload Configuration File screen The fields you can set are Server IP Address The IP address of the TFTP server where you wish to save the settings for the switch File Name The complete path and filename for the file Press START to begin the saving procedure The result will be displayed in the lower part of the screen ...

Page 124: ...ities on the main menu to access the following screen Figure 6 38 Upload Switch History File screen The fields you can set are Server IP Address The IP address of the TFTP server where the switch history file will be located File Name The complete path and filename on the TFTP server for the file Press START to begin the file save The result will be displayed in the lower part of the screen ...

Page 125: ... rudimentary form of security by requiring that each request includes a community name A community name is an arbitrary string of characters used as a password to control access to the Switch If the Switch receives a request with a community name it does not recognize it will trigger an authentication trap The SNMP allows up to four different community names to be defined The community name public...

Page 126: ... the switch Any station not privy to this community will not receive the packet Access Right Allows each community to be separately set to either Read Only meaning that the community member can only view switch settings or Read Write which allows the member to change settings in the switch Status Determines whether this community name entry is Valid or Invalid An entry can be disabled by changing ...

Page 127: ... on the operation of the switch itself and on each port on the switch The statistics obtained can be used to monitor the conditions and general efficiency of the Switch Network Monitoring The Network Monitoring menu offers four items Traffic Statistics Browse Address Table Browse IGMP Status and Switch History Choose Network Monitoring from the main menu The following menu appears Figure 6 40 Netw...

Page 128: ...t observe the condition of each individual port Traffic Statistics To display the Traffic Statistics menu choose the first item on the Network Monitoring menu The following menu appears Figure 6 41 Traffic Statistics menu Statistics Overvie To access the first item on the Traffic Statistics menu choose Statistics Overview The following table appears ...

Page 129: ...istic counters displayed are defined as follows TX sec The number of good bytes sent from the respective port per second RX sec The number of good bytes received per second This also includes local and dropped packets Util This shows the percentage of available bandwidth each port is using over the amount of time specified by the update interval For example when a 10 Mbps port is relaying packets ...

Page 130: ...13 to 16 17 to 20 21 S1P2 or Slot 2 and the desired increment setting in the Update Interval field 2 sec 5 sec 15 sec 30 sec 1 min or Suspend The statistic counters displayed are defined as follows Speed If the link is up the speed and duplex status will be displayed if the link is down will be displayed Utilization This shows the percentage of available bandwidth each port is using over the amoun...

Page 131: ...eceived This also includes local and dropped packets Frames Sent The number of good frames sent from the respective port Total Bytes Recv The number of bytes received good and bad Total Frames Recv The number of frames received good and bad Last Seen MAC The MAC address of the last device that sent packets over this port Port Packet Error Statistics To access the third item on the Traffic Statisti...

Page 132: ...1 min or Suspend The statistic counters displayed are defined as follows Speed If the link is up the speed and duplex status will be displayed if the link is down will be displayed CRC Error The number of frames that fail the CRC integrity check Oversize Frames The number of good frames with length greater than 1518 bytes and therefore are greater than the maximum legal length Fragments The number...

Page 133: ... port since the last Switch reboot Undersize Frames The number of frames detected that are less than the minimum permitted frame size of 64 bytes and have a good CRC Undersize frames usually indicate collision fragments a normal network occurrence Total errors The sum of the CRC Error Oversize Frames Fragments Jabber Late Collision Mac Rx Error Dropped Frames and Undersize Frames counters Collisio...

Page 134: ... Interval field 2 sec 5 sec 15 sec 30 sec 1 min or Suspend Press CLEAR to reset the counters The statistic counters displayed are defined as follows 64 65 127 128 255 256 511 512 1023 1024 1518 The number of good frames of various length ranges both valid and invalid RX GOOD The number of good frames received This also includes local and dropped packets TX GOOD The number of good frames sent from ...

Page 135: ...ticast frames received and sent This includes local and dropped multicast packets Broadcast RX Broadcast TX The number of good broadcast frames received and sent This includes dropped broadcast packets Browse Address Table The Browse Address Table allows the user to view which Switch port s a specific network device uses to communicate on the network You can sort this table by MAC address or port ...

Page 136: ...ort in the next field and then press FIND The lower part of the screen is a read only Browse Address Table that contains Port MAC Address and Learned status of each entry Use N to advance to the next page and P to return to the previous page Browse IGMP Status The Browse IGMP Status function allows you to browse Internet Group Management Protocol IGMP The Switch is able to recognize IGMP queries a...

Page 137: ...n choose Browse IGMP Status The following screen appears Figure 6 47 IP Multicast Information screen This screen displays the number of IGMP queries and reports for each active IP multicast group detected by the Switch You can also view which Switch ports support each multicast group The fields displayed are defined as follows IGMP Snooping Indicates whether IGMP snooping is Enabled or Disabled Ag...

Page 138: ...g that the station is still or wants to be part of a multicast group Ports The Switch ports supporting the selected multicast group Switch History The Network Monitoring menu allows the user to view the Switch history This works like a trap and event receiver except it only captures trap events generated by the Switch itself For example the switch history includes when the system is rebooted when ...

Page 139: ...keys to move around the screen above N Page down P Page up B Begin E End and C Clear Log CTRL R will refresh the screen Resetting the Switch You can use the console interface to reset the Switch either performing a Restart System which restarts the Switch and is identical to powering the Switch off and on again or a Factory Reset which sets all of the Switch s parameters to what they were when the...

Page 140: ...a factory reset be absolutely certain that this is what you want to do Once the factory reset is done all of the Switch s settings stored in NV RAM including TCP IP parameters SNMP parameters the enabled disabled settings of ports security settings etc will be erased and restored to values present when the switch was purchased After performing the Factory reset make sure to redefine the IP setting...

Page 141: ...ctory Reset from the main menu The following screen appears Figure 6 50 Factory Reset Logout To exit the console program choose Logout from the main menu Make sure you have performed a Save Changes if you have made changes to the settings and wish them to become defaults for the switch After logging out you will be returned to the opening login screen ...

Page 142: ...acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol Your browser screen may vary with the screen shots pictures in this guide The Web based management module and the Console program and Telnet are different ways to access the same internal switching software and configure it Thus all settings encountered in web based management are the same as those...

Page 143: ...s to configure the IP interface of the Switch This should be done manually through a console see the Configure IP Address section in the Using The Console Interface chapter Management To begin managing your Switch simply run the browser you have installed on your computer and point it to the IP address you have defined for the device The URL in the address bar should read something like http 123 1...

Page 144: ... major categories for Switch management Clicking on one of the first four categories causes a list of options to appear in the left panel of the main window The switch management features available in the web based are explained below Configure Switch This first category includes IP Settings Port Settings Port Mirroring Switch Settings Basic and Advanced Filtering and Forwarding Table Configure Pe...

Page 145: ... need to configure any IP parameters because a BOOTP server automatically assigns IP configuration parameters to the switch Click Apply to activate the new settings The information is described as follows BOOTP The BootP protocol allows IP addresses subnet masks and default gateways to be assigned on a central BootP server If this option is enabled when the Switch is first powered up it will look ...

Page 146: ...k Subnet Mask The address mask that controls subnetting on your TCP IP network Default Gateway The IP address of the device usually a router that handles connections to other subnets and or other TCP IP networks Port Settings Select the port you want to configure by clicking on the port in the Switch front panel display at the top of the window or by clicking View All Ports at the bottom of the wi...

Page 147: ...e specified manner Select 100Mbps Full for port operation at 100 Mbps and full duplex Select 100Mbps Half for port operation at 100 Mbps and half duplex Select 10Mbps Full for port operation at 10 Mbps and full duplex Select 10Mbps Half for port operation at 10 Mbps and half duplex 3 Configure the Flow Control setting for the port Selecting Enabled in full duplex mode will implement IEEE 802 3x fl...

Page 148: ...ses of new hosts This will help keep intruders off your network since any packet coming from an unknown source will be dropped by the Switch that is not added to your MAC Address Forwarding Table Select Enabled or Disabled 6 Configure the Broadcast Storm Rising Action setting from three choices Do Nothing Blocking or Blocking Trap 7 Configure the Broadcast Storm Falling Action setting from three c...

Page 149: ...t port To configure a mirror port select Enabled from the Port mirroring in pull down list In the next field select the Source Port from where you want to copy frames In the last field select the Target Port which receives the copies from the source port This is the port where you will connect a monitoring troubleshooting device such as a sniffer or an RMON probe Click Apply to let the changes tak...

Page 150: ...rt to which you are sending the copies Also the target port for the mirroring cannot be a member of a trunk group Switch Settings Basic To set basic switch settings enter a Switch Name in the first field the physical location of the Switch in the Location field and the name of the contact person responsible for the Switch in the Contact field Then click Apply The information is described as follow...

Page 151: ...cription of the Switch type MAC Address The Ethernet address for the device PROM version Version number for the firmware chip This information is needed for new runtime software downloads Firmware version Version number of the firmware installed on the Switch This can be updated by using the Update Firmware window in the Reset and Update section Hardware version Version number of the Switch s hard...

Page 152: ...le a port is transmitting data the port automatically stops transmissions The second setting allows you to enable or disable the Head of Line HOL Blocking Prevention function which is designed to prevent forwarding a packet to a blocking port Click Apply to let your changes take effect The information in the screen is described as follows Port Auto Partition Capability on All ports This option off...

Page 153: ...n unknown destination address needs to be forwarded to several ports and if some of them are blocking the packet will not be discarded rather it will be forwarded only to the ports that are not blocking Filtering and Forwarding Table When a packet hits the Switch it looks in the filtering and forwarding table to decide what to do with the packet either to filter it off the network or to forward it...

Page 154: ...learning new address Mostly used for security purposes when the forwarding table is locked the Switch will no longer learn the MAC addresses for new hosts If your network configuration doesn t change locking the forwarding table helps keep intruders off your network since any packet coming from an unknown source address will be dropped by the Switch Address Look up Mode Select from Level 1 Level 2...

Page 155: ...ows the Switch to permanently forward outbound traffic to specific destination MAC addresses over a specified port You can also use this feature to restrict inbound traffic based on source MAC addresses Click the pointer icon on the right side of the table to access the Add Modify Permanent Address Table Entry window ...

Page 156: ... field and enter the port number that permanently forwards traffic from the specified device in the Destination Port Number field Then click Apply The information in the screen is described as follows Add Modify to the table Delete from the table Choose one of the desired options to add modify or delete an entry from the table Destination MAC Address The MAC address of the device to which the spec...

Page 157: ...or current network congestion Permanent Multicast Filtering Permanent multicast filtering allows the Switch to decide which ports should receive multicast traffic from a specific multicast MAC address Click the pointer icon on the right side of the table to access the Add Modify Permanent Multicast Filtering Table Entry window ...

Page 158: ...table option button enter the MAC address of the device allowed to send traffic in the MAC Address field and then click Apply The information above is described as follows Add to the table Delete from the table Choose one of the desired options to add or delete an entry from the Permanent Multicast Filtering Table MAC Address The Ethernet address of the Permanent Multicast Filtering Table entry ...

Page 159: ...e Multicast filtering blocks or forwards traffic over each port for one multicast group You can configure each port on the Switch to forward traffic for the specified multicast group Click the pointer icon on the right side of the table to access the Add Modify Multicast Forwarding Table Entry window ...

Page 160: ...ffic for the specified multicast group Click Apply to let the changes take effect The information above is described as follows Add Modify to the table Allows you to create or edit a filter for the Multicast Forwarding Table which will either forward or block multicast traffic Delete from the table Allows you to delete a filter from the Multicast Forwarding Table MAC Address The Ethernet address o...

Page 161: ...ports 801 2d Spanning Tree Protocol which allows you to create alternative paths with multiple switches or other types of bridges in your network See the Spanning Tree Algorithm section of the Switch Management chapter for a detailed explanation STP Paramete The information above is described as follows ...

Page 162: ...ys the cost for the path between the Switch and the root bridge If the Switch is the root bridge then the path cost is zero Port Displays the port on the switch that offers the least path cost from the bridge to the root bridge In the event of a network loop data packets will pass through the port specified here Priority Displays the priority number of the root bridge in the Spanning Tree The valu...

Page 163: ...ing data packets when network loops occur The smaller the number set the higher the bridge priority is The higher the bridge priority the more chance the bridge has of becoming the root bridge Zero is the highest priority Hello Time Displays the interval between two transmissions of BPDU packets sent by the root bridge to tell all other switches that it is indeed the root bridge Max Age Read only ...

Page 164: ...or assistance and then click Apply The information on the screen is described as follows Spanning Tree Protocol STP for all ports is This option offers Disabled or Enabled to implement the Spanning Tree Protocol Bridge Priority 0 65535 Priority A Bridge Priority can be from 0 to 65535 Zero is equal to the highest Bridge Priority Hello Time 1 10 sec The Hello Time can be from 1 to 10 seconds This i...

Page 165: ...still not been received from the Root ridge your Switch will start sending its own BPDU to all other switches for permission to become the Root Bridge If it turns out that your Switch has the lowest Bridge Identifier it will become the Root Bridge STP State The Spanning Tree Protocol state for a selected port can either be Enabled or Disabled Cost The Path Cost is a changeable parameter and may be...

Page 166: ...n IGMP host When enabled for IGMP snooping the Switch can open or close a port to a specific device based on IGMP messages passing through the switch To configure the IGMP enter a value between 30 and 9999 seconds in the IP Multicast Filtering Age out Timer field and then change the IP Multicast Filtering IGMP Snooping setting from Disable to Enable Click the Apply button to let the changes take e...

Page 167: ...ry to become the IGMP host IP Multicast Filtering IGMP Snooping This setting allows the switch to learn the IGMP spanning tree and intelligently forward packets as opposed to broadcasting all packets IGMP snooping is automatically enabled disabled with this setting Configure 802 1Q IGMP Click the icon on the far right to access the Add Delete IGMP Entry window ...

Page 168: ...ble or disable the IGMP Status control and then click Apply The information above is described as follows Add Modify to the table Allows you to create or edit an entry for the table Delete from the table Allows you to delete an IGMP entry from the table Age out Timer Specifies the time in seconds the switch will wait before trying to host IGMP on the VLAN IGMP Status Enables disables IGMP on this ...

Page 169: ... port group as well as to reduce traffic Broadcast and multicast packets are limited to members of the VLAN Configure VLAN Mode To use the VLAN mode select MAC Base or 802 1Q under Restart VLAN Mode otherwise leave the setting at Disabled Then specify the VLAN ID number in the SNMP VLAN 1 2047 field and click Apply ...

Page 170: ...24 port NWay Ethernet Switch User s Guide 156 Web Based Network Management Configure MAC Based VLA Click the pointer icon on the right hand side to access the Add Delete MAC Based VLAN window ...

Page 171: ...e window above enter the Current MAC based VLAN in the field offered and click Apply The MAC based VLAN description must be the same as that used in the port member group to enable the VLAN function If the source address is the same as the MAC address and the destination is unknown broadcast or multicast then the packet will be flooded to all members of the VLAN port group ...

Page 172: ... port NWay Ethernet Switch User s Guide 158 Web Based Network Management Configure 802 1Q VLA Use this window to assign a default VLAN ID for each desired port Click Apply to let the settings take effect ...

Page 173: ...59 Use this window to enable or disable the ingress filtering check for each desired port Ingress filtering means that a receiving port will check to see if it is a member of the VLAN ID in the packet before forwarding the packet Click Apply to let the settings take effect ...

Page 174: ...24 port NWay Ethernet Switch User s Guide 160 Web Based Network Management Click the pointer icon on the right hand side to access the Configure 802 1Q VLAN Entry window ...

Page 175: ... be a Tagging port In the bottom two lines None should be checked if you don t want a port to belong to the VLAN Otherwise check Egress to statically set a port to belong to a VLAN Click Apply to let the changes take effect Trunk The DES 3225G supports up to 3 trunk groups Trunks are groups of ports that are banded together to form a single logical high bandwidth data pipe Items in the above windo...

Page 176: ...up All configuration settings changes made to the master port will automatically be made to the other ports in the trunk Status Enables disables the trunk group Configure Management This second category includes Traps and Community Strings User Accounts and Console Port Settings Traps and Community Strings To use the functions on this window enter the appropriate SNMP information in the Community ...

Page 177: ...to effect The Community Strings information is described as follows SNMP Community String A user defined SNMP community name Access Right The permitted access of Read Only or Read Write using the SNMP community name Status Option to set the current community string to Valid or Invalid The Trap Receiving Stations information is described as follows IP Address The IP address of the trap receiving st...

Page 178: ...24 port NWay Ethernet Switch User s Guide 164 Web Based Network Management User Accounts Click the pointer icon on the right hand side to access the main User Accounts window ...

Page 179: ...s Level control and click Apply Console Port Settings This window allows you to select the protocol for communicating through the console port Console or SLIP in the Port Setting field Use SLIP for out of band management You can also choose the refresh rate in the Console Time Out field 15 minutes 30 minutes 45 minutes 60 minutes or Never If SLIP is being used you may also set the Baud Rate in the...

Page 180: ... 60 minutes for the desired refresh setting Baud Rate Determines the serial port bit rate that will be used the next time the Switch is restarted Applies only when the serial port is being used for out of band SLIP management it does not apply when the port is used for the console port Available speeds are 2400 9600 19 200 and 38 400 bits per second The default setting in this Switch version is 96...

Page 181: ...nds or Suspend Port The selected port to be monitored TX frames sec Counts the total number of frames transmitted from a selected port per second since the Switch was last rebooted RX frames sec Counts all valid frames received on the port per second since the Switch was last rebooted of Utilization This shows the percentage of available bandwidth each port is using over the amount of time specifi...

Page 182: ...tatistics shown by default are those for the port you last configured Once in the Port Statistics screens you can click any port on the switch graphic to show statistics for that port Click the Reset Counter button at the bottom of the screen to clear the counters Traffic The information is described as follows Link Status Indicates whether the port is online and working On or not Off ...

Page 183: ...ccessfully sent from the port Bytes Received Counts the total number of bytes octets included in valid readable frames Total Bytes Received Counts the total number of bytes received on the port whether in valid or invalid frames Traffic in Frames Frames Sent Counts the total number of frames transmitted from the port Frames Received Counts all valid frames received on the port Total Frames Receive...

Page 184: ...onds 5 seconds 15 seconds 30 seconds 60 seconds or Suspend Link Speed Duplex Flow Control Indicates the current link status Other errors CRC Error Counts otherwise valid frames that did not end on a byte octet boundary Oversize Frames Counts packets received that were longer than 1518 octets excluding framing bits but including FCS octets and were otherwise well formed ...

Page 185: ...th specified in the Ethernet standard MAC Received Error Counts data errors detectable as 10BASE TX symbol errors bit patterns with illegal encodings This may indicate noise on the line Dropped Frames The number of frames which are dropped by this port since the last Switch reboot Undersize Frames The number of frames detected that are less than the minimum permitted frame size of 64 bytes and hav...

Page 186: ...econds or Suspend 64 The total number of packets including bad packets r eceived that were 64 octets in length excluding framing bits but including FCS octets 65 127 The total number of packets including bad packets received that were between 65 and 127 octets in length inclusive e xcluding framing bits but including FCS octets 128 255 The total number of packets including bad packets received tha...

Page 187: ... FCS octets 1024 1518 The total number of packets including bad packets received that were between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets Rx good The number of good frames received This also includes local and dropped packets Tx good The number of good frames sent from the respective port Total Rx The number of frames received good and bad Tx Bytes...

Page 188: ...directed to a multicast address Note that this number does not include packets directed to the broadcast address Broadcast Rx Tx The total number of good packets that were received by and directed to a broadcast address Note that this does not i nclude multicast packets Utilization The information is described as follows Last Detected Source Address MAC address of the last device that sent packets...

Page 189: ...k Management 175 Browse Address Table The Switch allows you to display a table containing MAC addresses ports and respective learned statuses Clicking the Next Page hyperlink at the bottom of the screen will allow you to display the complete MAC Address Table ...

Page 190: ...hernet Switch User s Guide 176 Web Based Network Management Browse IGMP Status This window allows you to display Multicast Group MAC Address Queries TX Queries RX Reports and Ports for IGMP Snooping in a table format ...

Page 191: ...eceiving stations and to the PC connected to the console manager Clicking the Next Page hyperlink at the bottom of the screen will allow you to display the complete Switch Traps Log The information is described as follows Sequence Order in which each log entry was received Time The time the log entry was received Log Text Event information pertaining to each log entry ...

Page 192: ...ent Reset and Update The fourth category includes Reboot Switch Reset to Factory Default Update Firmware Change Configuration File Upload Configure File and Upload Log File Reboot Switch To perform a reboot of the Switch which resets the system click the Reboot Now button ...

Page 193: ...eb Based Network Management 179 Reset to Factory Default Doing a remote reset is equivalent to turning the Switch off and on again All parameters are returned to the values stored in EEPROM Click the Reset to Factory Default to reset the Switch ...

Page 194: ...Set to either Network or SLIP Determines whether the new firmware code should be obtained through the Ethernet network or through the console port TFTP Server Address The IP address of the TFTP server where the new firmware code is Firmware Update Determines whether or not the Switch should replace its switching software the next time it is rebooted File Name The path and the name of the file whic...

Page 195: ...Update Mode is Set to either Network or SLIP Determines whether the configuration file should be obtained through the Ethernet network or through the console port TFTP Server Address is The IP address of the TFTP server where the configuration file is File Download Determines whether or not the Switch should download its configuration file the next time it is booted File Name The path and configur...

Page 196: ...P server fill the fields in above and then click Upload now The information is described as follows TFTP Server Address is The IP address of the TFTP server where the setting file will be saved File Name The path and file name for the settings file on the TFTP server Last Upload Status Read only field displays the most recent upload activity ...

Page 197: ...ill the fields in above and then click Upload now The information is described as follows TFTP Server Address is The IP address of the TFTP server where the log file will be saved File Name The path and file name for the file to be saved on the TFTP server Last Upload Status Read only field displays the most recent upload activity ...

Page 198: ... Guide 184 Web Based Network Management Save Changes To save all the changes made in the current session to the Switch s flash memory click the Save Changes Now button Help Click this button to access the online help files for the Switch ...

Page 199: ...E 802 3 10BASE T Ethernet IEEE 802 3u 100BASE TX Fast Ethernet IEEE 802 3z 1000BASE SX Gigabit Ethernet IEEE 802 1 P Q VLAN IEEE 802 3x Full duplex Flow Control Protocols CSMA CD Data Transfer Rates Ethernet Fast Ethernet Gigabit Ethernet Half duplex Full duplex 10 Mbps 20Mbps 100Mbps 200Mbps n a 2000Mbps Topology Star ...

Page 200: ...62 5 125um multimod Both types use MTRJ or SC optical connector Number of Ports 24 x 10 100 Mbps NWay ports 1 Gigabit Ethernet optional Physical and Environmental AC inputs 100 240 VAC 50 60 Hz internal universal power supply Power Consumptio n 100 watts maximum DC fans 2 built in 40 x 40 x10 mm fan Operating Temperatur e 0 to 50 degrees Celsius Storage Temperatur e 25 to 55 degrees Celsius Humidi...

Page 201: ...A C Tick Class A Safety UL CSA CE Mark TUV GS Performance Transmission Method Store and forward RAM Buffer 12 MB per device Filtering Address Table 12K MAC address per device Packet Filtering Forwarding Rate Full wire speed for all connections 148 800pps per port for 100Mbps MAC Address Learning Automatic update Forwarding Table Age Time Max age 10 9999 seconds Default 300 ...

Page 202: ...ed crossover cable is necessary Please review these products for matching cable pin assignment The following diagram and table show the standard RJ 45 receptacle connector and their pin assignments for the switch to network adapter card connection and the straight crossover cable for the Switch to switch hub bridge connection Figure B 1 The standard RJ 45 receptacle connector ...

Page 203: ...t used 5 Not used 6 Rx receive 7 Not used 8 Not used Table B 1 The standard Category 3 cable RJ 45 pin assignment The following shows straight cable and crossover cable connection Figure B 2 Straight cable for Switch uplink MDI II port to switch Hub or other devices connection Figure B 3 Crossover cabl for Switch MDI X port to switch hub or other network devices MDI X port connection ...

Page 204: ...way for the switch The file being uploaded can be either new Runtime switching software or a switch settings file which was previously saved on the TFTP server using the Save settings to TFTP Server option in the System Utilities menu The IP address settings defined in the configuration file will override all other IP settings even those defined in the settings file being uploaded This enables the...

Page 205: ... switch This command is included for downloading a configuration settings file to another switch The IP address defined in this file will override the IP address in the configuration settings file thus the switch you are downloading to can have a different IP address than the one that created the configuration settings file An example IP address is 10 12 19 102 Subnet_mask this is the subnet mask ...

Page 206: ...e Update and Use Configuration file options are enabled the Firmware Update command will take precedence and only the firmware file will be uploaded to the switch The Config image file which contains all configuration settings and was created by the switch is prefixed with the version number of the runtime software to help with file management Sample Config File Code_type PROM Image_file e 3225 32...

Page 207: ...24 port NWay Ethernet Switch User s Guide Runtime Switching Software Default Settings 193 D RUNTIME SWITCHING SOFTWARE DEFAULT SETTINGS 0 1 2 1 2 ...

Page 208: ...24 port NWay Ethernet Switch User s Guide 194 Runtime Switching Software Default Settings 3 4 4 5 6 7 89 4 6 4 4 4 1 2 1 2 76 A B C ...

Page 209: ...6 65 127 Octs 116 A AC inputs 181 AC power cord 7 Access Rights read only 109 read write 109 Accessory pack 7 Add Modify User Accounts 58 Address Table Lookup Mode 83 Administrato 54 Advanced Settings 66 Age out Time 92 119 Aging Time definition of 30 Aging Time range of 30 Alleviating network loop problems 35 APPLY 52 Apply button 55 Auto polarity detection 5 Automatic learning 31 auto negotiate ...

Page 210: ...nfig File Name 104 Configuration 60 Configure 802 1Q IGMP 89 Configure 802 1Q VLAN 97 Configure Filtering and Forwarding Table 82 Configure IGMP Filtering 88 Configure IP Address 61 Configure MAC Address Filtering 86 Configure Port Mirroring 76 Configure Port VLAN ID 97 Configure Ports 67 Configure Slot1 Module 71 Configure Slot2 Module 73 Configure Static Forwarding Table 84 Configure Static VLAN...

Page 211: ... 20 Ethernet protocol 1 events 26 F factory reset 56 Factory Reset 121 122 Factory Reset NV RAM to Default Value 122 Fast Ethernet Technology 1 File Name 103 Filtering 30 Firmware Update 103 Flash memory 6 Flow Control 68 Forward 70 72 75 Forward Delay 37 Forwarding 29 Fragments 115 Frames Recv 113 Frames Sent 113 Front Panel 12 Full duplex 5 G gateway router 26 General User 54 Giga 19 Gigabit Eth...

Page 212: ...ut 123 M MAC Address 85 96 120 MAC Address Aging 84 MAC address filtering 31 MAC Address Learning 183 MAC Rx Errors MAC Received Errors 115 MAC Based VLAN MAC Assignment 95 MAC based VLANs 39 40 93 Setting up 41 Main Menu 54 Management 6 Management Information Base MIB 28 Management VID 93 Master 101 master port 37 Max Age 34 79 Max Age Time 37 MIB 28 MIB objects 28 MIB I RFC 1156 6 MIB II 28 MIB ...

Page 213: ...Priorit 33 35 37 Port Traffic Statistics 112 Port Trunking 37 Port type settings Console 64 Out of Band 64 Port VLAN ID numbers PVID 41 Port VLAN ID numbers PVIDs 97 port based VLANs 39 Port based VLANs 41 ports 4 Ports 120 Power 18 Power Consumption 181 Priorit 68 priority queue 68 priority tag 69 PVID 43 Q Queries RX 120 Queries TX 120 R RAM 55 RAM Buffe 182 Rear Panel 13 14 refresh 52 Repetitio...

Page 214: ...Tree Algorithm Parameter 77 Custom Filtering Table 86 87 Forwarding Table 84 Protocol Parameter 77 Spanning Tree Protocol 31 Speed 113 114 Speed Duplex 68 STA Operation Levels 32 Static Filtering definition of 82 Static filters 85 static forwarding entries 85 Static Multicast Filtering Table87 Storage Temperature 182 Store and forward switching 5 STP Port State 70 straight cable 186 subnet mask 12...

Page 215: ...116 TX Octets 117 TX sec 112 U unauthorized users 52 Undersize Frames 115 Unicast RX Unicast TX 117 Unpacking 7 untagging 40 Untagging 44 97 Update Firmware and Configuration Files 102 Uplink 13 22 Use Configuration File 103 User Accounts Management 58 username 53 utilization 69 70 72 75 V VID 43 91 100 View Delete User Accounts 59 VLAN 31 39 97 VLAN considerations 41 VLAN Description 95 VLAN ID 9...

Page 216: ...de la Fresnerie 78330 Fontenay Le Fleury France TEL 33 1 3023 8688 FAX 33 1 3023 8689 WEB www dlink france fr E MAIL info dlink france fr GERMANY D LINK GERMANY Bachstr 22 D 65830 Kriftel Germany TEL 49 0 6192 97110 FAX 49 0 6192 971111 WEB www dlink de BBS 49 0 6192 971199 Analog 49 0 6192 9711 98 ISDN INFO 00800 7250 0000 toll free HELP 00800 7250 4000 toll free INDIA D LINK INDIA Plot No 5 Kurl...

Page 217: ...Stanmore London HA7 1DP U K TEL 44 181 235 5555 FAX 44 181 235 5500 WEB www dlink co uk E MAIL info dlink co uk U S A D LINK U S A 53 Discovery Drive Irvine CA 92618 USA TEL 1 949 788 0805 FAX 1 949 753 7033 WEB www dlink com E MAIL tech dlink com ...

Page 218: ...our product 1 Where and how will the product primarily be used Home Office Travel Company Business Home Business Personal Use 2 How many employees work at installation site 1 employee 2 9 10 49 50 99 100 499 500 999 1000 or more 3 What network protocol s does your organization use XNS IPX TCP IP DECnet Others_____________________________ 4 What network operating system s does your organization use...

Page 219: ......

Reviews: