D-Link DES-3326 User Manual Download Page 226

Page: 226 / 425

24-port NWay Ethernet Switch User’s Guide

210

Configuring the Switch Using the Console Interface

Forwarding

Layer 2 Forwarding

Layer 2 Only switch operation mode

To enter a MAC address into the switch’s forwarding table:

Highlight

Forwarding

from the

Main Menu

and press

enter

Figure 6-59. Forwarding Menu – Layer 2

Highlight

MAC Address Forwarding

from the

Forwarding

Menu

and press

enter

Summary of Contents for DES-3326

Page 1: ...DES 3326 24 Port Fast Ethernet Plus 2 Port Gigabit Module Layer 3 Switch User s Guide First Edition June 2001 651S3326S015 Printed In Taiwan RECYCLABLE ...

Page 2: ...nichts auf der Leitung abgestellt werden 11 Alle Hinweise und Warnungen die sich am Geräten befinden sind zu beachten 12 Wird das Gerät über einen längeren Zeitraum nicht benutzt sollten Sie es vom Stromnetz trennen Somit wird im Falle einer Überspannung eine Beschädigung vermieden 13 Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen Dies könnte einen ...

Page 3: ...n Servicepartner Somit stellen Sie die Betriebssicherheit des Gerätes sicher 18 Zum Netzanschluß dieses Gerätes ist eine geprüfte Leitung zu verwenden Für einen Nennstrom bis 6A und einem Gerätegewicht großer 3kg ist eine Leitung nicht leichter als H05VV F 3G 0 75mm2 einzusetzen ...

Page 4: ...NTAL CONSEQUENTIAL OR INDIRECT DAMAGES ARISING OUT THE INSTALLATION MAINTENANCE USE PERFORMANCE FAILURE OR INTERRUPTION OF A D LINK PRODUCT HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY THIS LIMITATION WILL APPLY EVEN IF D LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE IF YOU PURCHASED A D LINK PRODUCT IN THE UNITED STATES SOME STATES DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY ...

Page 5: ...ithout an RMA number will be rejected and shipped back to Purchaser at Purchaser s expense and D Link reserves the right in such a case to levy a reasonable handling charge in addition mailing or shipping costs Software Warranty service for software products may be obtained by contacting a D Link office within the applicable warranty period A list of D Link offices is provided at the back of this ...

Page 6: ...patible D Link s obligation under this warranty shall be a reasonable effort to provide compatibility but D Link shall have no obligation to provide compatibility when there is fault in the third party hardware or software D Link makes no warranty that operation of its software products will be uninterrupted or absolutely error free and no warranty that all defects in the software product within o...

Page 7: ...ink offices is provided in the back of this manual Trademarks Copyright 2001 D Link Corporation Contents subject to change without prior notice D Link is a registered trademark of D Link Corporation D Link Systems Inc All other trademarks belong to their respective proprietors Copyright Statement No part of this publication may be reproduced in any form or by any means or used to make any derivati...

Page 8: ...an radiate radio frequency energy and if not installed and used in accordance with this user s guide may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense CE Mark Warning This is a Class A product In a domestic environment...

Page 9: ...c Classification and Prioritization 10 Management 10 Optional Redundant Power Supply 11 Fast Ethernet Technology 12 Gigabit Ethernet Technology 12 Unpacking and Setup 14 Unpacking 14 Installation 15 Desktop or Shelf Installation 15 Rack Installation 16 Power on 17 Power Failure 18 Identifying External Components 19 Front Panel 19 Rear Panel 20 Side Panels 21 Optional Plug in Modules 22 1000BASE T ...

Page 10: ... Community Names 32 Traps 34 MIBs 36 SNMP 37 Authentication 38 Flow Control 錯誤尚未定義書籤 Packet Forwarding 38 MAC Address Aging Time 38 Filtering 39 Spanning Tree Protocol 41 STP Operation Levels 42 Bridge Protocol Data Units 44 Creating a Stable STP Topology 45 STP Port States 45 User Changeable STA Parameters 48 Illustration of STP 49 Port Aggregation 53 Setting Up IP Interfaces VLANs 55 Notes Abou...

Page 11: ...定義書籤 Subnet Masking 78 Calculating the Number of Subnets and Nodes 79 Classless InterDomain Routing CIDR 80 Internet Protocols 83 Protocol Layering 83 Layer 2 86 Layer 3 87 Layer 4 87 Layer 7 88 TCP IP 88 Packet Header Overview 90 TCP Level 90 IP Level 92 Ethernet Level 93 Well Known Sockets and the Application Layer 95 UDP and ICMP 97 The Domain Name System 98 Mapping Domain Names to Addresses 98...

Page 12: ... 116 Static and Dynamic Interior Routes 116 RIP Version 1 Message Format 120 RIP 1 Address Conventions 121 RIP 1 Route Interpretation and Aggregation 122 RIP Version 2 Extensions 123 RIP2 Message Format 123 Transmitting RIP Messages 125 The Disadvantage of RIP Hop Counts 125 Configuring the Switch Using the Console Interface 127 Before You Start 128 General Deployment Strategy 128 VLAN Layout 129 ...

Page 13: ... 2 Switch Settings 157 Layer 3 IP Routing Protocol Settings 159 Layer 3 Switch Mode Setup RIP 161 Advanced Setup 163 Configuring VLANs 163 VLANs in IP Routing Mode 錯誤尚未定義書籤 VLANs by Switch Operating Mode Layer 2 Only and IP Routing 164 Setting Up IP Interfaces 錯誤尚未定義書籤 Multicasting 180 Layer 2 Multicast Setup 180 IGMP Snooping Settings by VLAN 180 IEEE 802 1Q Multicast Forwarding 183 Static Rout...

Page 14: ...History Log File 227 Testing Connectivity with Ping 228 Layer 3 Utilities 229 BOOTP Relay 229 DNS Relay 231 Network Monitoring 233 Layer 2 Network Monitoring 233 Port Utilization 234 Port Error Statistics 234 Port Packet Analysis Table 235 MAC Address Forwarding Table 236 GVRP Status Table 237 GMRP Status Table 238 IGMP Snooping Table 239 Switch History Log 240 Layer 3 Network Monitoring 241 IP Ad...

Page 15: ...55 Saving Changes 257 Factory Reset 258 USING WEB BASED MANAGEMENT 259 CONFIGURING AND MONITORING THE SWITCH 268 Technical Specifications 368 RJ 45 Pin Specification 371 Sample Configuration File 373 Runtime Switching Software Default Settings 374 Understanding and Troubleshooting the Spanning Tree Protocol 376 Blocking State 377 Listening State 379 Learning State 381 Forwarding State 383 Disabled...

Page 16: ...Unidirectional Link 389 Packet Corruption 391 Resource Errors 391 Identifying a Data Loop 392 Avoiding Trouble 392 Brief Review of Bitwise Logical Operations 399 Index 401 ...

Page 17: ...d Setup Helps you get started with the basic installation of the Switch Chapter 3 Identifying External Components Describes the front panel rear panel optional plug in modules and LED indicators of the Switch Chapter 4 Connecting the Switch Tells how you can connect the DES 3326 to your Ethernet network Chapter 5 Switch Management Talks about Local Console Management via the RS 232 DCE console por...

Page 18: ...manage the Switch through an Internet browser Appendix A Technical Specifications Lists the technical specifications of the DES 3326 Appendix B RJ 45 Pin Specifications Shows the details and pin assignments for the RJ 45 receptacle connector Appendix C Factory Default Settings Appendix D Sample Configuration File ...

Page 19: ...functionality of the DES 3326 please see Chapter 5 Switch Management Concepts Layer 3 Switching Layer 3 switching is the integration of two proven technologies switching and routing In fact Layer 3 switches are running the same routing routines and protocols as traditional routers The main difference between traditional routing and Layer 3 switching is the addition of a group of Layer 2 switching ...

Page 20: ...ional routers for data centers and server farms routing between these locations and the rest of the network and providing 24 ports of Layer 2 switching performance combined with wire speed routing Backbone routers can also be replaced with DES 3326 and a series of DES 3326 could be linked via the optional Gigabit Ethernet ports Routers that service WAN connections would remain in place but would n...

Page 21: ... is not the network but the ability of the connected devices utilize the full capacity of the network The DES 3326 can eliminate network bottlenecks to high traffic areas and improve the utilization of the network s installed bandwidth The Functions of a Layer 3 Switch Traditional routers once the core components of large networks became an obstacle to the migration toward next generation networks...

Page 22: ...be linked via the optional 2 port Gigabit Ethernet module Features The DES 3326 Switch was designed for easy installation and high performance in an environment where traffic on the network and the number of users increase continuously Switch features include Ports 24 high performance NWay ports all operating at 10 100 Mbps for connecting to end stations servers and hubs 23 MDI X 10 100 Ethernet U...

Page 23: ...Store and forward switching scheme Full and half duplex for both 10Mbps and 100Mbps connections The front port Gigabit Ethernet module operates at full duplex only Full duplex allows the switch port to simultaneously transmit and receive data and only works with connections to full duplex capable end stations and switches Connections to hubs must take place at half duplex Supports IEEE 802 3x flow...

Page 24: ...100 of wire speed for 100Mbps speed Data filtering rate eliminates all error packets runts etc at 14 880 pps per port at 100 of wire speed for 10Mbps speed Data filtering rate eliminates all error packets runts etc at 148 800 pps per port at 100 of wire speed for 100Mbps speed 8K active MAC address entry table per device with automatic learning and aging 10 to 1000000 seconds 16 MB packet buffer p...

Page 25: ...pport with 4 priority queues IGMP Snooping support Layer 2 Multicast support GMRP GARP Multicast Registration Protocol As of firmware release 1 00 B14 GVRP is not supported on the DES 3326 Support for GVRP is planned for a later firmware release Layer 3 Switch Features Wire speed IP forwarding Hardware based Layer 3 IP switching IP packet forwarding rate of 6 6 Mpps 2K active IP address entry tabl...

Page 26: ...t RS 232 console port for out of band network management via a console terminal or PC Spanning Tree Algorithm Protocol for creation of alternative backup paths and prevention of network loops SNMP v 1 Agent Fully configurable either in band or out of band control via SNMP based software Flash memory for software upgrades This can be done in band via TFTP or out of band via the console Built in SNM...

Page 27: ...IB RFC 2674 RIP MIB v2 RFC 1724 Interface MIB ext RFC2233 Supports Web based management TFTP support BOOTP support BOOTP Relay Agent IP filtering on the management interface DCHP Client support DCHP Relay Agent DNS Relay Agent Password enabled Optional Redundant Power Supply The DES 3326 24 2 Fast Ethernet Layer 3 Switch supports the optional DPS 1000 Redundant Power Supply to provide automatic po...

Page 28: ...cture format and support for CSMA CD protocol full duplex flow control and management objects but with a tenfold increase in theoretical throughput over 100Mbps Fast Ethernet and a one hundred fold increase over 10Mbps Ethernet Since it is compatible with all 10Mbps and 100Mbps Ethernet environments Gigabit Ethernet provides a straightforward upgrade without wasting a company s existing investment...

Page 29: ...24 port NWay Ethernet Switch User s Guide Introduction 13 ...

Page 30: ...rton of the Switch and carefully unpack its contents The carton should contain the following items One DES 3226 24 port Fast Ethernet Layer 3 Switch Mounting kit 2 mounting brackets and screws Four rubber feet with adhesive backing One AC power cord This User s Guide with Registration Card If any item is found missing or damaged please contact your local D Link reseller for replacement ...

Page 31: ... and see that it is secured to the AC power connector Make sure that there is proper heat dissipation from and adequate ventilation around the switch Do not place heavy objects on the switch Desktop or Shelf Installation When installing the Switch on a desktop or shelf the rubber feet included with the device should first be attached Attach these cushioning feet on the bottom at each corner of the...

Page 32: ...ack Installation The DES 3326 can be mounted in an EIA standard sized 19 inch rack which can be placed in a wiring closet with other equipment To install attach the mounting brackets on the switch s side panels one on each side and secure them with the screws provided Figure 2 2A Attaching the mounting brackets to the switch ...

Page 33: ... The DES 3326 switch can be used with AC power supply 100 240 VAC 50 60 Hz The power switch is located at the rear of the unit adjacent to the AC power connector and the system fan The switch s power supply will adjust to the local power source automatically and may be turned on without having any or all LAN segment cables connected After the power switch is turned on the LED indicators should res...

Page 34: ... and performs a self test After approximately 20 seconds the LED will light again to indicate the switch is in a ready state The console LED indicator will remain ON if there is a connection at the RS 232 port otherwise this LED indicator is OFF The 100M LED indicator may remain ON or OFF depending on the transmission speed Power Failure As a precaution in the event of a power failure unplug the s...

Page 35: ...ED indicators of the DES 3326 Front Panel The front panel of the Switch consists of LED indicators an RS 232 communication port a slide in module slot one switched MDI X MDI II uplink port and 23 10 100 Mbps Ethernet Fast Ethernet ports Figure 3 1 Front panel view of the Switch Comprehensive LED indicators display the status of the switch and the network see the LED Indicators section below ...

Page 36: ...e used to connect a straight through cable or a crossed cable to a normal non Uplink port on a switch or hub This port is identical to the other 23 ports except for the ability to use a crossed or a straight through cable Twenty three high performance NWay Ethernet ports all of which operate at 10 100 Mbps for connections to end stations servers and hubs All ports can auto negotiate between 10Mbps...

Page 37: ...tem fans see the top part of the diagram below The left side panel contains heat vents Figure 3 4 Side panel views of the Switch The system fans are used to dissipate heat The sides of the system also provide heat vents to serve the same purpose Do not block these openings and leave at least 6 inches of space at the rear and sides of the switch for proper ventilation Be reminded that without prope...

Page 38: ...er 3 Switch is able to accommodate a range of optional plug in modules in order to increase functionality and performance These modules must be purchased separately 1000BASE T Module Figure 3 5 1000BASE TX two port module Front panel module Connects to 1000BASE T devices Supports Category 5e UTP or STP cable connections of up to 100 meters ...

Page 39: ...e Front panel module Connects to 1000BASE SX devices at full duplex Allows connections using multi mode fiber optic cable in the following configurations 62 5 m 62 5 m 50 m 50 m Modal bandwidth min overfilled launch Unit MHz km 160 200 400 500 Operating distance Unit meters 220 275 500 550 Channel insertion loss Unit dB 2 33 2 53 3 25 3 43 ...

Page 40: ...ule Figure 3 7 1000BASE LX two port module Front panel module Connects to 1000BASE LX devices at full duplex Supports multi mode fiber optic cable connections of up to 550 meters or 5 km single mode fiber optic cable connections GBIC Two Port Module Figure 3 8 GBIC two port module Front panel module ...

Page 41: ...cator Figure 3 9 The LED indicators Power This indicator on the front panel should be lit during the Power On Self Test POST It will light green approximately 2 seconds after the switch is powered on to indicate the ready state of the device Console This indicator is lit green when the switch is being managed via out of band local console management through the RS 232 console port using a straight...

Page 42: ...le an MDI II port must connect to an MDI X port An end node can be connected to the Switch via a two pair Category 3 4 5 UTP STP straight cable be sure to use Category 5e UTP or STP cabling for 100 Mbps Fast Ethernet connections The end node should be connected to any of the twenty three ports 2x 24x of the DES 3226 or to either of the two 100BASE TX ports on the front panel module that came prein...

Page 43: ...r an end node to switch connection 1 The 100 LED indicator comes ON for a 100 Mbps and stays OFF for 10 Mbps 2 The Link Act LED indicator lights up upon hooking up a PC that is powered on Switch to Hub or Switch These connections can be accomplished in a number of ways The most important consideration is that when using a normal straight through cable the connection should be made between a normal...

Page 44: ... or one of the optional Gigabit module ports using a normal straight through cable as shown below If the other device does not have an unused Uplink port make the connection with a normal straight through cable from the Uplink port on the switch to any normal crossed port on the hub Alternatively if you have a crossover cable you can save the Uplink ports for other connections and make this one fr...

Page 45: ...r s Guide Connecting The Switch 29 100 LED speed indicator is OFF Link Act indicator is ON 100BASE TX Device For a 100BASE TX device the Switch s LED indicators should display the following 100 LED speed indicator is ON Link Act is ON ...

Page 46: ...witch Further this chapter explains many important points regarding these features Configuring the switch to implement these concepts and make use of its many features is discussed in detail in the next chapters Some concepts are presented that are not currently implemented on the DES 3326 switch They are included to give a user who is unfamiliar with the concepts a brief overview of IP routing th...

Page 47: ...k administrator can manage control and monitor the switch from the console program The DES 3326 contains a CPU memory for data storage flash memory for configuration data operational programs and SNMP agent firmware These components allow the switch to be actively managed and monitored from either the console port or the network itself out of band or in band Diagnostic console port RS 232 DCE Out ...

Page 48: ...to match these settings If you are having problems making this connection on a PC make sure the emulation is set to VT 100 If you still don t see anything try hitting Ctrl r to refresh the screen IP Addresses and SNMP Community Names Each Switch must be assigned its own IP Address which is used for communication with an SNMP network manager or other TCP IP application for example BOOTP TFTP The sw...

Page 49: ...thernet Switch User s Guide Switch Management and Operating Concepts 33 Figure 5 1 Boot Screen The switch s MAC address can also be found from the console program under the Switch Information menu item as shown below ...

Page 50: ... a VLAN may be designated as a Management VLAN Traps Note Traps are messages that alert you of events that occur on the Switch The events can be as serious as a reboot someone accidentally turned OFF the Switch or less serious like a port status change The Switch generates traps and sends them to the network manager trap recipient Trap recipients are special users of the network who are given cert...

Page 51: ...ettings saved to non volatile RAM used to reconfigure the switch Warm Start This trap signifies that the Switch has been rebooted however the POST Power On Self Test is skipped Authentication Failure This trap signifies that someone has tried to logon to the switch using an invalid SNMP community string The switch automatically stores the source IP address of the unauthorized user Topology Change ...

Page 52: ...be retrieved by specifying the MIB s Object Identity OID at the network manager MIB values can be either read only or read write Read only MIBs variables can be either constants that are programmed into the Switch or variables that change while the Switch is in operation Examples of read only constants are the number of port and type of ports Examples of read only variables are the statistics coun...

Page 53: ...s routers switches and other network devices SNMP can be used to perform many of the same functions as a directly connected console or can be used within an integrated network management software package such as DView SNMP performs the following functions Sending and receiving SNMP packets through the IP protocol Collecting information about the status and current configuration of network devices ...

Page 54: ...C or IP addresses and the Ethernet port or gateway router the destination resides on into its forwarding table This information is then used to forward packets This reduces the traffic congestion on the network because packets instead of being transmitted to all ports are transmitted to the destination port only Example if Port 1 receives a packet destined for a station on Port 2 the Switch transm...

Page 55: ...all ports negating many of the benefits of having a switch Static forwarding entries are not affected by the aging time Filtering The switch uses a filtering database to segment the network and control communication between segments It can also filter packets off the network for intrusion control Static filtering entries can be made by MAC Address or IP Address filtering Each port on the switch is...

Page 56: ... destined for a device on another VLAN VLAN 3 will be filtered Some filtering requires the manual entry of information into a filtering table MAC address filtering the manual entry of specific MAC addresses to be filtered from the network Packets sent from one manually entered MAC address can be filtered from the network The entry may be specified as either a source a destination or both IP addres...

Page 57: ...out operator intervention This automatic network reconfiguration provides maximum uptime to network users However the concepts of the Spanning Tree Algorithm and protocol are a complicated and complex subject and must be fully researched and understood It is possible to cause serious degradation of the performance of the network if the Spanning Tree is incorrectly configured Please read the follow...

Page 58: ...switch allows for two levels of operation the switch level and the port level The switch level forms a spanning tree consisting of links between one or more switches The port level constructs a spanning tree consisting of groups of one or more ports The STP operates in much the same way for both levels On the switch level STP calculates the Bridge Identifier for each switch and then sets the Root ...

Page 59: ...e BPDU is discarded when its age exceeds the value of the maximum age timer 20 seconds Forward Delay Timer The amount time spent by a port in the learning and listening states waiting for a BPDU that may return the port to the blocking state 15 seconds Table 5 1 STP Parameters Switch Level The following are the user configurable STP parameters for the port or port group level Variable Description ...

Page 60: ...mation The unique identifier of the switch that the transmitting switch currently believes is the root switch The path cost to the root from the transmitting port The port identifier of the transmitting port The switch sends BPDUs to communicate and construct the spanning tree topology All switches connected to the LAN on which the packet is transmitted will receive the BPDU BPDUs are not directly...

Page 61: ...riority lowering the priority number of the best switch STP can be forced to select the best switch as the root switch When STP is enabled using the default parameters the path between source and destination stations in a switched network might not be ideal For instance connecting higher speed links to a port that has a higher number than the current root port can cause a root port change The goal...

Page 62: ...ve states Blocking the port is blocked from forwarding or receiving packets Listening the port is waiting to receive BPDU packets that may tell the port to go back to the blocking state Learning the port is adding addresses to its forwarding database but not yet forwarding packets Forwarding the port is forwarding packets Disabled the port only responds to network management messages and must retu...

Page 63: ...h in the network goes through the blocking state and then transitions through the states of listening and learning at power up If properly configured each port stabilizes to the forwarding or blocking state No packets except BPDUs are forwarded from or received by STP enabled ports until the forwarding state is enabled for that port Default Spanning Tree Configuration ...

Page 64: ...absolutely necessary The user changeable parameters in the Switch are as follows Priority A Priority for the switch can be set from 0 to 65535 0 is equal to the highest Priority Hello Time The Hello Time can be from 1 to 10 seconds This is the interval between two transmissions of BPDU packets sent by the Root Bridge to tell all other Switches that it is indeed the Root Bridge If you set a Hello T...

Page 65: ...ding state Note Observe the following formulas when setting the above parameters Max Age 2 x Forward Delay 1 second Max Age 2 x Hello Time 1 second Port Priority A Port Priority can be from 0 to 255 The lower the number the greater the probability the port will be chosen as the Root Port Port Cost A Port Cost can be set from 1 to 65535 The lower the number the greater the probability the port will...

Page 66: ... Bridge and Port settings Now if Bridge A broadcasts a packet to Bridge C then Bridge C will drop the packet at port 2 and the broadcast will end there Setting up STP using values other than the defaults can be complex Therefore you are advised to keep the default factory settings and STP will automatically assign root bridges ports and block loop connections Influencing STP to choose a particular...

Page 67: ...24 port NWay Ethernet Switch User s Guide Switch Management and Operating Concepts 51 Figure 5 4 Before Applying the STA Rules Note In this example only the default STP values are used ...

Page 68: ...l Gigabit ports default port cost 4 on switch A are connected to one optional Gigabit port on both switch B and C The redundant link between switch B and C is deliberately chosen as a 100 Mbps Fast Ethernet link default port cost 19 Gigabit ports could be used but the port cost should be increased from the default to ensure that the link between switch B and switch C is the blocked link Note Note ...

Page 69: ...iguration of the master port is applied to all members of the link aggregation group Thus when configuring the ports in a link aggregation group you only need to configure the master port The DES 3326 supports 6 link aggregation groups which may include from 2 to 8 switch ports each except for a Gigabit link aggregation group which consists of the 2 optional Gigabit Ethernet ports of the front pan...

Page 70: ...24 port NWay Ethernet Switch User s Guide 54 Switch Management and Operating Concepts Figure 5 6 800 Mbps Link Aggregation Group ...

Page 71: ... Interfaces for VLANs A Virtual Local Area Network VLAN is a network topology configured according to a logical scheme rather than the physical layout VLANs can be used to combine any collection of LAN segments into an autonomous user group that appears as a single LAN VLANs also logically segment the network into different broadcast domains so that packets are forwarded only between ports within ...

Page 72: ... is to assign all ports to a single IEEE802 1Q VLANs named DEFAULT_VLAN As new VLANs are created the member ports assigned to the new VLAN will be removed from the DEFAULT_ VLAN port member list 4 The DEFAULT_VLAN has a VID 1 An IP interface called System in the IP interface entry menu also has a VID 1 and therefore corresponds to the DEFAULT_VLAN 5 There is no difference in the creation deletion ...

Page 73: ...witch s operating mode IEEE 802 1Q VLANs Some relevant terms Tagging The act of putting 802 1Q VLAN information into the header of a packet Untagging The act of stripping 802 1Q VLAN information out of the packet header Ingress port A port on a switch where packets are flowing into the switch and VLAN decisions must be made Egress port A port on a switch where packets are flowing out of the switch...

Page 74: ...of IEEE 802 1Q VLANs allow VLANs to work with legacy switches that don t recognize VLAN tags in packet headers The tagging feature allows VLANs to span multiple 802 1Q compliant switches through a single physical connection and allows Spanning Tree to be enabled on all ports and work normally The IEEE 802 1Q standard restricts the forwarding of untagged packets to the VLAN the receiving port is a ...

Page 75: ...er s Guide Switch Management and Operating Concepts 59 Forwarding rules between ports decides filter or forward the packet Egress rules determines if the packet must be sent tagged or untagged Figure 5 7 IEEE 802 1Q Packet Forwarding ...

Page 76: ... The tag is contained in the following two octets and consists of 3 bits or user priority 1 bit of Canonical Format Identifier CFI used for encapsulating Token Ring packets so they can be carried across Ethernet backbones and 12 bits of VLAN ID VID The 3 bits of user priority are used by 802 1p The VID is the VLAN identifier and is used by the 802 1Q standard Because the VID is 12 bits long 4094 u...

Page 77: ...ts 61 Figure 5 8 IEEE 802 1Q Tag The EtherType and VLAN ID are inserted after the MAC source address but before the originial EtherType Length or Logical Link Control Because the packet is now a bit longer than it was originally the Cyclic Redundancy Check CRC must be recalculated ...

Page 78: ...twork devices are 802 1Q compliant Unfortunately not all network devices are 802 1Q compliant These devices are referred to as tag unaware 802 1Q devices are referred to as tag aware Prior to the adoption 802 1Q VLANs port based and MAC based VLANs were in common use These VLANs relied upon a Port VLAN ID PVID to forward packets A packet received on a given port would be assigned that port s PVID ...

Page 79: ...rded according to the VID contained within the tag Tagged packets are also assigned a PVID but the PVID is not used to make packet forwarding decisions the VID is Tag aware switches must keep a table to relate PVIDs within the switch to VIDs on the network The switch will compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet If the two VIDs are differe...

Page 80: ...that flow into and out of it If a packet has previously been tagged the port will not alter the packet thus keeping the VLAN information intact The VLAN information in the tag can then be used by other 802 1Q compliant devices on the network to make packet forwarding decisions Ports with untagging enabled will strip the 802 1Q tag from all packets that flow into and out of those ports If the packe...

Page 81: ...nformation the ingress port will tag the packet with its own PVID as a VID if the port is a tagging port The switch then determines if the destination port is a member of the same VLAN has the same VID as the ingress port If it does not the packet is dropped If it has the same VID the packet is forwarded and the destination port transmits it on its attached network segment This process is referred...

Page 82: ...irectly support IP switching however it is possible to do the equivalent by assigning IP subnets to configured VLANs and then disabling the Routing Information Protocol RIP This will prevent packets from crossing IP subnets without going through an external router VLANs in Layer 2 Only Mode The switch initially configures one VLAN VID 1 called the DEFAULT_VLAN The factory default setting assigns a...

Page 83: ...VLAN Note A VLAN that does not have a corresponding IP interface defined for it will function as a Layer 2 Only VLAN regardless of the Switch Operation mode Note An IP addressing scheme must be determined before the IP interfaces can be setup on the switch Some consideration is required to arrive at an addressing scheme that will suit the needs of a given network Please see the section titled IP A...

Page 84: ...red so a CIDR notation of 10 32 0 0 3 or a 3 bit addressing scheme will work This addressing scheme will give a subnet mask of 11111111 11100000 00000000 00000000 binary or 255 224 0 0 decimal Using a 10 xxx xxx xxx IP address notation would give 6 network addresses VLAN Name VID Network Address System default 1 10 32 0 0 Engineering 2 10 64 0 0 Marketing 3 10 96 0 0 Finance 4 10 128 0 0 Sales 5 1...

Page 85: ...ress conflicts do not occur and helps to conserve the use of IP addresses through the centralized management of address allocation Note For multiple DHCP servers on different subnets to communicate the BOOTP Relay function on the DES 3326 must be used to provide a path for the servers to communicate Servers are identified by IP address Dynamic address allocation enables a client to be assigned an ...

Page 86: ...client then sends a request message to all DHCP servers in its range attempting to renew its lease Any DHCP server that can extend the lease sends and acknowledgement containing the extended lease and updated configuration information IF the lease expires or if a DHCP server responds with a negative acknowledgement the client must release its current configuration and then return to the initializi...

Page 87: ...n a network causing noticeable performance degradation and in extreme cases network failure Broadcast storms can be caused by malfunctioning NICs bad cable connections and applications or protocols that generate broadcast traffic among others Broadcast storms have long been a concern for network administrators with routers traditionally being used to prevent their occurrence and if that failed lim...

Page 88: ...tached segment Not only does this isolate the broadcast domain but it actually starts removing broadcast packets from the affected segment When the number of broadcast packets falls to an acceptable level below the trigger level the SNMP agent can remove the blocking condition returning the port to its normal operational state In the DES 3326 the default trigger threshold is set to 128 000 broadca...

Page 89: ...xxx xxx xxx xxx Interface a network connection IP Interface a network connection that is assigned an IP address Network Address the resulting 32 bit number from a bitwise logical AND operation performed between an IP address and a subnet mask Subnet Address another name for network address Netmask another name for a subnet mask In a subnetted network all addresses consist of two parts an IP addres...

Page 90: ...erprets an IP address as a series of 32 binary digits as a 32 bit number The same three IP address from above are written below in binary form The dots are retained for clarity 1 11010010 11001010 11001100 11001101 2 10111101 00010101 11110001 00111000 3 01111101 01010111 00000000 00000001 Note that in the third value of the third IP address 0 is represented in binary form as 00000000 and that the...

Page 91: ...ersion Each bit in an 8 bit binary number an octet represents a power of two The left most bit represents 2 raised to the 7 th power 2x2x2x2x2x2x2 128 while the right most digit represents 2 raised to the 0th power which equals 1 any number raised to the 0th power equals one by definition IP addresses consist of two parts one that identifies the network and one that identifies the destination with...

Page 92: ... class the IP address falls in Class A addresses begin with 0xxx or 1 to 126 decimal Class B addresses begin with 10xx or 128 to 191 decimal Class C addresses begin with 110x or 192 to 223 decimal Class D addresses begin with 1110 or 224 to 239 decimal Class E addresses begin with 1111 or 240 to 254 decimal Addresses beginning with 01111111 or 127 decimal are reserved for loopback and internal tes...

Page 93: ...to all binary ones the broadcast address for the subnetwork is specified For our example 10 255 255 255 would be the broadcast address for the subnetwork remember that eight 1 s in binary form is 255 in decimal form Note that for Class C networks only the last octet is set to zeros for the network address and all ones for the broadcast address For Class B networks the last two octets are set to ze...

Page 94: ... 00000000 255 0 0 0 Class A Subnet Mask 00001010 00000000 00000000 00000000 10 0 0 0 Network Address The Default subnet masks are Class A 11111111 00000000 00000000 00000000 255 0 0 0 Class B 11111111 11111111 00000000 00000000 255 255 0 0 Class C 1111111 11111111 11111111 00000000 255 255 255 0 Additional bits can be added to the default subnet mask for a given Class to further subnet a network T...

Page 95: ...the Number of Subnets and Nodes The number of subnet and node addresses available for a given addressing scheme can be calculated using the formula 2n 2 Number of nodes or subnets Where n the number of bits in either the subnet mask to determine the number of subnets or the number of bits in the node part of the IP address to determine the number of nodes Multiplying the number of subnets by the n...

Page 96: ... used in the node part of the address is 32 11 21 bits so the total number of nodes is 221 2 2 097 152 2 2 097 150 Multiplying the number of subnets times the number of nodes gives 12 582 900 possible nodes This is less than the 16 777 214 possible nodes that an unsubnetted Class A network would have Subnetting reduces the number of possible nodes for a given network but increases the segmentation...

Page 97: ...ion of the address The subnet mask of the above example looks like this in binary 11111111 11100000 00000000 00000000 and there are 11 1 s or 11 bits used to mask the network address from the node address So the example written in CIDR notation becomes 10 32 0 0 11 This is the reason that non contiguous bits are not recommended in subnet masks CIDR notation can also be used for classed addresses C...

Page 98: ... 248 29 2097150 6 12582900 22 255 255 255 252 30 4194302 2 8388604 Table 5 7 Class A Subnet Masks of Bits Subnet Mask CIDR Notation of Subnet s of Hosts Total Hosts 2 255 255 192 18 2 16382 32764 3 255 255 224 0 19 6 8190 49140 4 255 255 240 0 20 14 4094 57316 5 255 255 248 0 21 30 2046 61380 6 255 255 252 0 22 62 1022 63364 7 255 255 254 0 23 126 510 64260 8 255 255 255 0 24 254 254 64516 9 255 2...

Page 99: ...arity with terminology It is not intended to be a complete description Protocol Layering The Internet Protocol IP divides the tasks necessary to route and forward packets across networks by using a layered approach Each layer has clearly defined tasks protocol and interfaces for communicating with adjacent layers but the exact way these tasks are accomplished is left to individual software designe...

Page 100: ...e system or network but must communicate and interoperate This requires very well defined and well known methods for transferring messages and data This is accomplished through the protocol stack Protocol layering as simply a tool for visualizing the organization of the necessary software and hardware in a network In this view Layer 2 represents switching and Layer 3 represents routing Protocol la...

Page 101: ... Stack Between two protocol stacks members of the same layer are known as peers and communicate by well known open and published protocols Within a protocol stack adjacent layers communicate by an internal interface This interface is usually not publicly documented and is frequently proprietary It has some of the same characteristics of a protocol and two stacks from the same software vendor may c...

Page 102: ...rks Layer 1 This is referred to as the physical layer It handles the electrical connections and signaling required to make a physical link from one point in the network to another It is on this layer that the unique Media Access Control MAC address is defined Layer 2 This layer commonly called the switching layer allows end station addressing and the establishment of connections between them Layer...

Page 103: ...Border Gateway Protocol BGP enable Layer 3 devices to direct data traffic to the intended destination IP security a llows for authentication and encryption IP not only allows for user to user communication but also for transmission from point to multipoint known as IP multicasting Layer 4 This layer known as the transport layer establishes the communication path between user applications and the n...

Page 104: ...de what type of transport mechanism is necessary For example Web access requires reliable error free access and would demand TCP Multimedia on the other hand requires low overhead and latency and commonly uses UDP TCP IP The TCP IP protocol suite is a set of protocols that allow computers to share resources across a network TCP and IP are only two of the Internet suite of protocols but they are th...

Page 105: ...ork communications are required IP is also a library of routines but with a more general set of functions IP handles the routing of packets from the source to the destination This may require the packets to traverse many different networks IP can route packets through the necessary gateways and provides the functions required for any user on one network to communicate with any user on another conn...

Page 106: ...are much longer that a single packet The data must then be divided up among a series of packets These packets must be transmitted received and then reassembled into the original data TCP handles these functions TCP must know how large a packet the network can process To do this the TCP protocols at each end of a connection state how large a packet they can handle and the smaller of the two is sele...

Page 107: ...and writes the sum in the checksum field The receiving TCP recalculates the checksum and if the numbers are different the packet is dropped Figure 5 12 TCP Packet Header When packets have been successfully received TCP sends an acknowledgement This is simply a packet that has the acknowledgement number field filled in An acknowledgement number of 1000 indicates that all of the data up to octet 100...

Page 108: ...e window field In practice a single packet can acknowledge the receipt of data and give permission for more data to be sent IP Level TCP sends its packets to IP with the source and destination IP addresses IP is only concerned with these IP addresses It is not concerned with the contents of the packet or the TCP header IP finds a route for the packet to get to the other end of the TCP connection I...

Page 109: ... too large The Time to Live TTL is the number of gateways the packet is allowed to cross between the source and destination This number is decremented by one when the packet crosses a gateway and when the TTL reaches zero the packet is dropped This helps reduce network traffic if a loop develops Ethernet Level Every active Ethernet device has its own Ethernet address commonly called the MAC addres...

Page 110: ... database of Ethernet addresses and their corresponding IP addresses Different protocol families can be in use on the same network The type code field allows each protocol family to have its own entry A checksum is calculated and when the packet is received the checksum is recalculated If the two checksums are different the packet is dropped Figure 5 14 Ethernet Packet Header When a packet is rece...

Page 111: ... file across a network using the File Transfer Protocol FTP a connection must first be established The computer requesting the file transfer must connect specifically to the FTP server on the computer that has the file This is accomplished using sockets A socket is a pair of TCP port numbers used to establish a connection from one computer to another TCP uses these port numbers to keep track of co...

Page 112: ...e different It is possible for example for two users to send files to the same destination at the same time This could give the following connection numbers Internet addresses TCP ports Connection 1 10 42 73 23 10 128 12 1 1234 21 Connection 2 10 42 73 23 10 128 12 1 1235 21 The same computers are making the connections so the IP addresses are the same Both computers are using the same well known ...

Page 113: ...omputer names and their corresponding IP and MAC addresses The user s computer will send a query to the name database computer and the database computer will send a response Both the query and the response are very short There is no need to divide the query or response between multiple packets so the complexity of TCP is not required If there is no response to the query after a period of time the ...

Page 114: ...refer to use text names for computers they may want to open a connection with Computers themselves require 32 bit IP addresses Somewhere a database of network devices text names and their corresponding IP addresses must be maintained The Domain Name System DNS is used to map names to IP addresses throughout the Internet and has been adapted for use within intranets For two DNS servers to communica...

Page 115: ...solve the name When a DNS server receives a query it checks to see if the name is in its subdomain If it is the server translates the name and appends the answer to the query and sends it back to the client If the DNS server cannot translate the name it determines what type of name resolution the client requested A complete translation is called recursive resolution and requires the server to cont...

Page 116: ... one network to another IP routing is based on the network address of the destination IP address Each computer has a table of network addresses For each network address a corresponding gateway is listed This is the gateway to use to communicate with that network The gateway does not have to be directly connected to the remote network it simply needs to be the first place to go on the way to the re...

Page 117: ...les large packets are much more efficient than small ones It is preferable to use the largest possible packet size but still be able to cross networks that require smaller packets To do this IP can negotiate packet size between the local and remote ends of a connection When an IP connection is first made the IPs at both ends of the connection state the largest packet they can handle The smaller of...

Page 118: ...uter first checks its ARP cache to determine whether the remote computer has an entry If it does the local computer reads the remote computer s MAC address and writes it into the destination field of the packets to be sent If the remote computer does not have an ARP cache entry the local computer must send an ARP request and wait for a reply When the local computer receives the ARP reply packet th...

Page 119: ...s are sent to all devices on the subnetwork Multicast defines a group of network devices or computers that will receive the multicast packets The members of this group are not necessarily on the same subnetwork Multicast addresses are used to send multicast packets to the group members Multicast Addressing Class D IP addresses are assigned to a group of network devices that comprise a multicast gr...

Page 120: ... are some other Class D addresses already reserved for well known groups such as all routers on this subnet all DVMRP routers The format of Class D IP addresses is shown below Figure 5 16 Class D Multicast Address It should be noted that because of the mapping procedure there will be 32 different multicast address mapped to the same IEEE 802 address Some permanently assigned IP multicast addresses...

Page 121: ...l RIP2 Routers 224 0 0 10 All IGRP Routers 224 0 0 11 Mobile Agents 224 0 0 12 DHCP Servers and Relay Agents 224 0 0 13 All PIM Routers 224 0 0 14 RSVP Encapsulation 224 0 0 15 All CBT Routers 224 0 0 16 Designated Sbm 224 0 0 17 All Sbms 224 0 0 18 VRRP 224 0 0 19 through 224 0 0 22 5 Unassigned 224 0 0 21 DVMRP on MOSPF Table 5 10 Some Permanent Multicast Address Assignments ...

Page 122: ...g track of the membership state of the multicast groups which have active members on its subnetwork Based on the information obtained from IGMP the router can decide whether to forward multicast packets it receives to its subnetworks or not After receiving a multicast packet sent to a certain multicast group the router will check and see if there is at least one member of that particular group on ...

Page 123: ...e Codes Each host can join a mulitcast group or leave a mulitcast group that it previously joined IGMP packets are used by routers to keep track of group member ships in their immediately connected subnetworks The following rules apply A host sends an IGMP report to join a group A host will never send a report when it wants to leave a group for version 1 A host will send a leave report when it wan...

Page 124: ...procedure for the election of the multicast querier for each LAN explicit leave messages for faster pruning and group specific query messages The router with the lowest IP address is elected as the querier The explicit group leave message is added to decrease the latency of the protocol and routers can ask for reports on a particular group ID IGMP Version 3 is in preliminary stage makes it possibl...

Page 125: ... 5 18 IGMP State Transitions IGMP is used in the last step of delivering multicast packets In the next section we see how the information obtained through IGMP can be exchanged among multicast routers such that routing multicast packets from any source to any set of receivers can be implemented ...

Page 126: ...this particular packet earlier of this is the first time that this packet has reached this router If this is the first time the router will forward the packet on all interfaces except the one from which the packet was received Otherwise the router will simply discard the packet This way we make sure that all routers in the subnetwork will receive at least one copy of the packet Although this algor...

Page 127: ...spanning tree or not The spanning tree algorithm has two drawbacks It centralizes all traffic on a small set of links and it des not consider group membership it its decisions Reverse Path Broadcasting RPB The RPB algorithm is currently being used in the MBone is a modification of the Spanning Tree algorithm In RPB instead of building a network wide spanning tree an implicit spanning tree is const...

Page 128: ...c is distributed over multiple trees and the network is better utilized Nevertheless the RPB algorithm does suffer from a major deficiency it does not take into account the information about multicast membership when constructing the distribution trees Reverse Path Multicasting RPM The RPM algorithm also known as RPB with prunes is an enhancement to the RPB and TRPB algorithms RPM constructs a del...

Page 129: ...ll lead to a destination node a link with a multicast group member An example of a tree obtained after the exchange of prune messages in a network is shown below Group membership and network topology can dynamically change and the prune state of delivery trees should be refreshed at regular intervals The RPM algorithm removes the prune information from routers periodically and the next packet for ...

Page 130: ...t version of DVMRP is being conducted by the Internet Engineering Task Force IETF Inter Domain Multicast routing IDMR working group DVMRP implements the RPM algorithm The first multicast packet sent from a particular source to a particular multicast group is flooded across the network Then prune messages are used to truncate the branches that do not lead to a group member A new type of message is ...

Page 131: ...l TTL values used to limit the scope of multicast packets Protocol Independent Multicast PIM PIM contains two protocols PIM Dense Mode PIM DM which is more efficient when the group members are densely distributed and PIM Sparse Mode PIM SM which performs better in cases where the group members are sparsely distributed Although these two algorithms belong to PIM and they share similar control messa...

Page 132: ...otocol is a straightforward implementation of distance vector routing It partitions participants into active and passive Active participants advertise their routes to others passive participants listen to RIP messages and use them to update their routing table but do not advertise Only a router can run RIP in active mode a host must use passive mode A router running RIP in active mode broadcasts a...

Page 133: ...l a new route has a strictly lower cost RIP specifies that all listeners must timeout routes they learn via RIP When a router installs a route in its table it starts a timer for that route The timer must be restarted whenever the router receives another RIP message advertising the route The route becomes invalid if 180 seconds pass without the route being advertised again There are three potential...

Page 134: ...iving routers respond quickly to install that route If a router stops advertising a route the protocol must depend on a timeout mechanism before it considers the route unreachable Once the time out occurs the router finds an alternative route and starts propagating that information Unfortunately a router cannot know if the alternate route depended on the route that just disappeared Thus negative i...

Page 135: ...e hold down and split horizon techniques all solve some problems they introduce others For example consider what happens with triggered updates when many routers share a common network A single broadcast may change all their routing tables triggering a new round of broadcasts If the second round of broadcasts changes tables it will trigger even more broadcasts A broadcast storm can result The use ...

Page 136: ...tworks RIP Version 1 Message Format RIP messages can be classified into two types routing information messages and messages used to request information Both use the same format which consist of a fixed header followed by and optional list of network and distance pairs The message format used by version 1 is shown below Figure 5 19 RIP v 1 Message Format ...

Page 137: ...r or host can ask another router for routing information by sending a request command Routers reply to requests using the response command In most cases however routers broadcast unsolicited response messages periodically The field VERSION contains the protocol version number 1 in this case and is used by the receiver to verify it will interpret the message correctly RIP 1 Address Conventions The ...

Page 138: ...O NET 2 contains an integer count of the distance to the specified network Distances are measured in router hops but values are limited to the range 1 through 16 with the distance 16 used to signify infinity unreachable RIP 1 Route Interpretation and Aggregation Because RIP was originally designed to be used with classful addresses version 1 did not include any provision for a subnet mask When sub...

Page 139: ...ired to aggregate the subnet information and advertise a single route to network N RIP Version 2 Extensions The restriction on address interpretation means that version 1 of RIP cannot be used to propagate either variable length subnet addresses or the classless addresses used with CIDR When version 2 of RIP RIP2 was defined the protocol was extended to include an explicit subnet mask along with e...

Page 140: ...ides a way to propagate additional information such as the origin of the route In particular if RIP2 learns a route from another autonomous system it can use the Route Tag to propagate the autonomous system s number Because the version number in RIP2 occupies the same octet as in RIP1 both versions of the protocols can be used on a given router simultaneously without interference Before processing...

Page 141: ...alue of hop count for infinigy RIP restricts the size of any network using it In particular RIP restricts the span of a network to 16 hops or 15 routers because 16 represents an unreachable destination So an internet can have at most 15 routers between any two hosts Note that the limit on network span is neither a limit on the total number of routers nor a limit on density In fact most campus netw...

Page 142: ...have a hierarchical organization Even in the best cases however hop counts provide only a crude measure of network capacity or responsiveness Thus using hop counts does not always yield routes with the least delay or highest capacity Furthermore computing routes on the basis of minimum hop counts has the severe disadvantage that it makes routing relatively static because routes cannot respond to c...

Page 143: ...ns In addition the console program will allow you to configure the Switch for management using an SNMP based network management system This chapter describes how to use the console interface to access the Switch change its settings and monitor its operation Notes are added where clarification is necessary Where there is a difference in the setup of the switch between its two operational modes Laye...

Page 144: ...bility and rich feature set requires a bit of thought to arrive at a deployment strategy that will maximize the potential of the DES 3326 Layer 3 switch General Deployment Strategy 1 Determine how the network would be best segmented This is probably done using VLANs in an existing layer 2 switched network 2 Develop an IP addressing scheme This involves allocating a block of IP addresses to each ne...

Page 145: ...lticasting bandwidth for example A policy is a mechanism to alter the normal packet forwarding in a network device and can be used to intelligently allocate bandwidth to time critical applications such as the integration of voice video and data on the network 7 Develop a redundancy scheme Planning redundant links and routes to network critical resources can save valuable time in case of a link or ...

Page 146: ...de and between end nodes So the IP subnets for a network must be determined first and the VLANs configured on the switch to accommodate the IP subnets Finally the IP subnets can be assigned to the VLANs Assigning IP Network Addresses and Subnet Masks to VLANs The DES 3326 allows the assignment of IP subnets to individual VLANs Any VLAN configured on the switch that is not assigned an IP subnet wil...

Page 147: ...tible terminal or a computer running an ordinary terminal emulator program e g the terminal program included with the Windows operating system using an RS 232C serial cable Your terminal parameters will need to be set to VT 100 ANSI compatible 9 600 baud 8 data bits No parity One stop bit No flow control You can also access the same functions over a TELNET interface Once you have set an IP address...

Page 148: ...ems in UPPERCASE are commands Moving the selection to a command and pressing Enter will execute that command e g APPLY etc Please note that the command APPLY only applies for the current session Use Save Changes from the main menu for permanent changes Save Changes enters the current switch configuration into non volatile ram and then reboots the switch First Time Connecting To The Switch The Swit...

Page 149: ...rst time connecting to the Switch Note There is no initial username or password Leave the username and password fields blank Note The switch s operational mode Layer 3 or Layer 2 is displayed in the upper right hand corner of every menu in the console The switch operational mode is changed under Switch Settings from the Main Menu and is described later in this manual Press Enter in both the Userna...

Page 150: ...Interface Figure 6 2 Main Menu Note The first user automatically gets Root privileges See Table 6 1 It is recommended to create at least one Root level user for the Switch Creating User Accounts To create a new user account highlight Setup User Accounts from the Main Menu and press Enter ...

Page 151: ...24 port NWay Ethernet Switch User s Guide Configuring the Switch Using the Console Interface 135 Figure 6 3 Main Menu Figure 6 4 Setup User Accounts Menu ...

Page 152: ...d have Root User or User privileges The space bar toggles between the three options 3 Highlight APPLY and press enter to make the user addition effective 4 Press Esc to return to the previous screen or Ctrl T to go to the root screen 5 A listing of all user accounts and access levels is shown below the user setup menu This list is updated when Apply is executed 6 Please remember that Apply makes c...

Page 153: ...ngs and Trap Stations Yes Read Only Read Only Update Firmware and Configuration Files Yes No No System Utilities Yes Ping Only Ping Only Factory Reset Yes No No Reboot Switch Yes Yes No User Accounts Management Add Update Delete User Accounts Yes No No View User Accounts Yes No No Table 6 5 Root User and User Privileges After establishing a User Account with Root level privileges press Esc Then hi...

Page 154: ...the switching software in RAM and will immediately take effect Some settings though require you to restart the switch before they will take effect Restarting the switch erases all settings in RAM and reloads the stored settings from the NV RAM Thus it is necessary to save all setting changes to NV RAM before rebooting the switch To retain any configuration changes permanently highlight Save Change...

Page 155: ...settings will be used every time the switch is rebooted Highlight Yes and press Enter to reset the switch s NV RAM to the factory default settings This will erase any User Accounts and all other configuration settings you may have entered and return the switch to the state it was in when it was purchased Logging Onto The Switch Console To log in once you have created a registered user from the Log...

Page 156: ...u screen will be displayed based on your access level or privilege Updating or Deleting User Accounts To update or delete a user password Choose Setup User Accounts from the Main Menu The following Setup User Accounts menu appears Figure 6 10 User Accounts Management menu 1 Toggle the Action Add field using the space bar to choose Add Update or Delete ...

Page 157: ...eld until the appropriate level is displayed Root User or User 6 Highlight APPLY and press enter to make the change effective 7 You must enter the configuration changes into the non volatile ram NV RAM using Save Changes from the Main Menu if you want the configuration to be used after a switch reboot Only a user with Root privileges can make changes to user accounts Viewing Current User Accounts ...

Page 158: ...e Switch Using the Console Interface To view the current user accounts Highlight Setup User Accounts from the Main Menu The current user accounts can be read from following screen Figure 6 11 Viewing User Accounts Deleting a User Account To delete a user account ...

Page 159: ... account you want to delete You must enter the password for the account to be able to delete it 3 Highlight APPLY and press Enter to make the deletion of the selected user take effect 4 You must enter the configuration changes into the non volatile ram NV RAM using Save Changes from the Main Menu if you want the configuration to b e used after a switch reboot Only users with Root privileges can de...

Page 160: ...The Switch Basic Setup This section will help prepare the Switch user by describing the Switch Information Remote Management Setup Configure Ports Serial Port Settings and Switch Settings menus Figure 6 13 Main Menu Basic Setup Switch Information Highlight Switch Information from the Main Menu and press Enter ...

Page 161: ... information is helpful to keep track of PROM and Firmware updates and to obtain the switch s MAC address for entry into another network device s address table if necessary You can also enter the name of the System its location and the name and telephone number of the System Administrator It is recommended that the person responsible for the maintenance of the network system that this Layer 3 swit...

Page 162: ...ow the switch will be assigned an IP address to allow the switch to be identified on the network To setup the switch for remote management Highlight Remote Management Setup from the main menu The following screen appears Figure 6 15 Switch Information Menu Configuring the Switch s IP Address The Switch needs to have an IP address assigned to it so that an In Band network management system eg WEB b...

Page 163: ... IP From options are BOOTP The switch will send out a BOOTP broadcast request when it is powered up The BOOTP protocol allows IP addresses network masks and default gateways to be assigned by a central BOOTP server If this option is set the Switch will first look for a BOOTP server to provide it with this information before using the default or previously entered settings DHCP The switch will send...

Page 164: ...Class A network 255 255 0 0 for a Class B network and 255 255 255 0 for a Class C network but custom subnet masks are allowed Default Gateway IP address that determines where packets with a destination address outside the current subnet should be sent This is usually the address of a router or a host acting as an IP gateway If your network is not part of an intranet or you do not want the Switch t...

Page 165: ... that is configured to receive the SNMP traps from the switch The SNMP Community String is similar to a password in that stations that do not know the correct string cannot receive or request SNMP information from the switch The Status field can be toggled between Enabled and Disabled to enable or disable the receipt of SNMP traps by the listed management stations Note Up to four SNMP trap recipie...

Page 166: ...ugh 24 To configure an specific port toggle the Configure Port field until the appropriate port number appears Toggle the State field to either Enable or Disable a given port Toggle the Speed Duplex field to either select the speed and duplex half duplex state of the port Auto auto negotiation between 10 and 100 Mbps devices full or half duplex The Auto setting allows the port to automatically det...

Page 167: ...ial Port Settings screen allows the configuration of the switch s serial port and out of band TCP IP communications using SLIP Highlight Serial Port Settings and press enter Figure 6 18 Serial Port Settings Screen Toggle the Select Protocol field to select either the Console or SLIP protocol The following fields can then be set Auto Logout This sets the time the interface can be idle before the sw...

Page 168: ...f the SLIP interface for easy reference Remote IP Address This is the IP address of the management station that will use the SLIP protocol to communicate with the switch Switch Operation Mode Note The switch will retain the configuration entered for IP Routing when in Layer 2 Only mode if the configuration is saved to NV RAM but the IP Routing configuration will not be active The IP Routing config...

Page 169: ... 1Q VLAN support the switching process is based upon the IP source and destination addresses if present If the IP addresses are not present the switching process is based upon the MAC addresses as in Layer 2 above 802 1Q VLANs are supported and the switch is considered as a VLAN tag aware device The switch must be rebooted when changing the operation mode before the new operation mode can take eff...

Page 170: ...witch User s Guide 154 Configuring the Switch Using the Console Interface Figure 6 19 Switch Settings Screen Highlight Switch Operation Mode on the Switch Settings menu and press enter Figure 6 20 Switch Mode Selection Screen ...

Page 171: ...change in the operation mode of the switch effective highlight APPLY and press enter Figure 6 21 Change Mode Confirmation Screen Type y and press Enter The switch will then save the changes made during the current session and reboot The switch must be rebooted to change the operation mode Switch Settings IP Routing Mode Once the switch is configured for IP Routing Layer 3 Switching and rebooted th...

Page 172: ...24 port NWay Ethernet Switch User s Guide 156 Configuring the Switch Using the Console Interface Figure 6 22 Main Menu Layer 3 IP Routing Mode Figure 6 23 Main Menu Layer 2 Switching Mode ...

Page 173: ...ettings on the Switch Settings menu and press Enter Figure 6 24 Layer 2 Switch Settings Menu The following fields can then be set MAC Address Aging Time sec 300 This field specifies the length of time a learned MAC Address will remain in the forwarding table without being accessed that is how long a learned MAC Address is allowed to remain idle The Aging Time can be set to any value between 10 and...

Page 174: ...P Enabled As of firmware release 1 00 B19 GVRP is supported on the DES 3326 Support for GVRP is planned for a later firmware release As such this field cannot be changed Group VLAN Registration Protocol is a protocol that allows members to dynamically join VLANs Switch GMRP Enabled As of firmware release 1 00 B19 GMRP is supported on the DES 3326 Support for GVRP is planned for a later firmware re...

Page 175: ... switch s reaction to Broadcast storms triggered at the threshold set above Multicast Storm Mode Disabled This field can be toggled between Enabled and Disabled using the space bar This enables or disables globally the switch s reaction to Multicast storms triggered at the threshold set above Layer 3 IP Routing Protocol Settings Note These IP Routing Protocol Settings are only for enabling or disa...

Page 176: ...lobally the Distance Vector Multicast Routing Protocol DVMRP DVMRP Include Report from Unknown Neighbor Disabled This field can be toggled between Enabled and Disabled using the space bar This enables or disables the inclusion of DVMRP membership reports from unknown neighbor routers PIM DM state Disable This field can be toggled between Enabled and Disabled using the space bar This enables or dis...

Page 177: ... RIP The Routing Information Protocol RIP is a distance vector protocol that uses the hop count as its criteria for making routing decisions RIP is an Interior Gateway Protocol IGP which means that it performs routing within a single autonomous system Highlight Setup RIP Configuration from the Layer 3 IP Networking menu and press enter Figure 6 26 RIP Configuration Menu RIP Status Disabled can be ...

Page 178: ... press enter Figure 6 27 Layer 3 Setup RIP Menu Interface Name is the name of the IP interface on which RIP is to be setup This interface must be previously configured on the switch TX Mode V2 Only is toggled between Disabled V1 Only V1 Compatible and V2 Only This entry specifies which version of the RIP protocol will be used to transmit RIP packets Disabled prevents the transmission of RIP packet...

Page 179: ...ication between routers on the network Advanced Setup The switch operation mode setting changes the menus and configuration options for the Advanced Setup of the switch This section of the manual is therefore divided into two sections for each Advanced Setup menu item to reflect the two switch operation modes Layer 2 with IEEE 802 1Q VLAN support and IP Routing with IEEE 802 1Q VLAN support Where ...

Page 180: ...one layer 2 VLAN wants to connect to another layer 2 VLAN it must be through a router VLANs by Switch Operating Mode Layer 2 Only and IP Routing Note The switch s default in both Layer 2 Only mode and IP Routing mode is to assign all ports to a single 802 1Q VLAN named DEFAULT_VLAN As new VLANs are created the member ports assigned to the new VLAN will be removed from the default VLAN port member ...

Page 181: ...ay Ethernet Switch User s Guide Configuring the Switch Using the Console Interface 165 Figure 6 27 VLAN Menu To create an 802 1Q VLAN highlight Edit 802 1Q VLANs and press Enter Figure 6 28 Edit 802 1Q VLANs Menu ...

Page 182: ...ship status of a port To enter the 802 1Q VLAN status for a port highlight the first field of Membership E F Each port s 802 1Q VLAN membership can be set individually by highlighting the port s entry using the arrow keys and then toggling between E F or using the space bar E Egress Member specifies the port as being a static member of the VLAN Egress Member Ports are ports that will be transmitti...

Page 183: ...e packet header is changed to include the 32 bit tag associated with the PVID Port VLAN Identifier see below When a tagged packet exits the port the packet header is unchanged If the port is attached to a device that is not IEEE 802 1Q VLAN compliant VLAN tag unaware then the port should be set to U Untagged If the port is attached to a device that is IEEE 802 1Q VLAN compliant VLAN tag aware then...

Page 184: ...Interface Example 802 1Q VLAN add screen Figure 6 29 Edit 802 1Q VLANs Menu Note The default VLAN includes all of the ports on the switch at first boot As new VLANs are added the member ports of the new VLAN are deleted from the default VLAN To configure the member ports of an 802 1Q VLAN ...

Page 185: ...y Ethernet Switch User s Guide Configuring the Switch Using the Console Interface 169 Figure 6 30 VLAN Menu To configure the port settings of an 802 1Q VLAN highlight Configure 802 1Q Port Settings and press enter ...

Page 186: ...the VLAN s member ports you want to configure PVID Port VLAN Identifier is a classification mechanism that associates a port with a specific VLAN and is used to make forwarding decisions for untagged packets received by the port For example if port 2 is assigned a PVID of 3 then all untagged packets received on port 2 will be assigned to VLAN 3 This number is generally the same as the VID number a...

Page 187: ...326 GMRP Group Multicast Registration Protocol this enables the port to dynamically become a member of a multicast group As of firmware release 1 00 B19 GMRP is supported on the DES 3326 To edit an existing 802 1Q VLAN Highlight VLANs on the main menu and press Enter Figure 6 32 VLAN Menu To edit an existing 802 1Q VLAN highlight Edit 802 1Q VLANs and press Enter ...

Page 188: ...VLANs to be edited can be selected by either the VID field or the VLAN Name fields Enter either the VID or the VLAN Name for the 802 1Q VLAN you want to edit and press enter Note To delete an entire VLAN toggle the Action Add Modify field to Delete enter either the VID or the VLAN Name in the appropriate field and press Enter Highlight Apply and press Enter The selected VLAN will be deleted To ent...

Page 189: ...s can be either tagged or untagged F Forbidden Non Member specifies the port as not being a member of the VLAN and that the port is forbidden from becoming a member of the VLAN dynamically Non Member specifies the port as not being a member of the VLAN but the port can become a member of the VLAN dynamically To edit a port s Tagged or Untagged status Highlight the first field of Tagging U T field ...

Page 190: ... set to T Tagged Each port can be configured to have a PVID or to use an Ingress Filter To configure a port s 802 1Q VLAN settings Highlight the Configure Port field and enter the port number of the port you want to configure Use the arrow keys to highlight the PVID field and enter the PVID for the port PVID Port VLAN Identifier is a classification mechanism that associates a port with a specific ...

Page 191: ...t group As of firmware release 1 00 B19 GMRP is supported on the DES 3326 Note Each IP interface on the switch corresponds to a VLAN The VLAN must be configured before the IP interface can be setup Note A VLAN that does not have a corresponding IP interface defined for it will function as a Layer 2 Only VLAN regardless of the Switch Operation mode The Layer 3 switch allows ranges of IP addresses O...

Page 192: ... CIDR notation of 10 32 0 0 11 or a 11 bit addressing scheme will work This addressing scheme will give a subnet mask of 11111111 11100000 00000000 00000000 binary or 255 224 0 0 decimal Using a 10 xxx xxx xxx IP address notation would give 6 network addresses VLAN Name VID Network Address System default 1 10 32 0 0 Engineering 2 10 64 0 0 Marketing 3 10 96 0 0 Finance 4 10 128 0 0 Sales 5 10 160 ...

Page 193: ...the Setup IP Interface menu Note IP interfaces consist of two parts a subnet mask and an IP address Note Each IP interface listed above will give a maximum of 2 097 150 unique IP addresses per interface assuming the 10 xxx xxx xxx notation To setup IP Interfaces on the switch Highlight Layer 3 IP Networking from the Main Menu and press Enter Figure 6 34 Layer 3 Main Menu Highlight Layer 3 IP Netwo...

Page 194: ...Way Ethernet Switch User s Guide 178 Configuring the Switch Using the Console Interface Figure 6 35 Layer 3 IP Networking Menu Highlight Setup IP Interface and press enter Figure 6 36 Layer 3 IP Networking Menu ...

Page 195: ...dification of a new or existing IP interface entry or the deletion of an existing entry Interface Name allows the entry of a name for the IP interface The default IP interface is named System IP Address is the IP address to be assigned to this interface Subnet Mask is the subnet mask to be applied to this interface It has the same form as an IP address Active Yes is toggled between Yes and No This...

Page 196: ...about this interface will be changed to default include RIP IP multicast interface configuration BOOTP DHCP relay Multicasting Layer 2 Multicast Setup IGMP Snooping Settings by VLAN To access the Multicasting Menu highlight Multicasting from the Main Menu and press enter Figure 6 37 Multicast Menu ...

Page 197: ...e VLAN for which the IGMP settings are to be edited The State field can be toggled between Enabled and Disabled using the space bar This enables or disables IGMP snooping for the selected VLAN The Age out Timer field allows the entry of an IGMP age out timer value between 10 and 9 999 seconds This timer determines how long a snooped multicast member s IP and MAC address remain in the IGMP address ...

Page 198: ...et Switch User s Guide 182 Configuring the Switch Using the Console Interface Highlight Switch Settings from the Main Menu and press enter Figure 6 39 Switch Settings Menu Highlight Layer 2 Switch Settings and press enter ...

Page 199: ...ht APPLY and press enter to make the current changes active Use Save Changes from the Main Menu to enter the current configuration settings into NV RAM IEEE 802 1Q Multicast Forwarding To edit the IEEE802 1 Multicast Forwarding settings highlight IEEE802 1Q Multicast Forwarding Settings from the Multicasting Menu and press enter Figure 6 40 Setup IEEE 802 1Q Multicast Forwarding The Action field c...

Page 200: ... keys and then toggling between E F or using the space bar E Egress Member specifies the port as being a static member of the multicast group Egress Member Ports are ports that will be transmitting traffic for the multicast group F Forbidden Non Member specifies the port as not being a member of the multicast group and that the port is forbidden from becoming a member of the multicast group dynami...

Page 201: ...router to be propagated through the network as well as allowing multicast messages coming from the network to be propagated to the router The purpose of a router port is to enable UDP multicast packets and IGMP multicast group membership messages to reach a multicast router attached to the switch Routers do not implement IGMP snooping or transmit forward IGMP report packets Thus forwarding all IP ...

Page 202: ...outer port Because routers do not send IGMP reports or implement IGMP snooping a multi port router connected to the router port of the Layer 3 switch would not be able to receive UDP data streams at all of its ports unless the UDP multicast packets were all forwarded to the router port Note A router port will be dynamically configured when IGMP query packets RIPv2 multicast DVMRP multicast PIM DM ...

Page 203: ...highlighting the port s entry using the arrow keys and then toggling between M and using the space bar Highlight APPLY and press enter to make the changes current Use Save Changes from the Main Menu to enter the changes into NV RAM To delete an entry select Delete and enter the VID of the VLAN for which the router port table entry is to be deleted Highlight APPLY and press enter The entry for the ...

Page 204: ...rnet Switch User s Guide 188 Configuring the Switch Using the Console Interface Figure 6 42 Multicasting Menu To setup the IEEE802 1q Multicast Forwarding table highlight IEEE802 1q Multicast Forwarding and press enter ...

Page 205: ...ighlight the first field of E F Each port s multicast group membership can be set individually by highlighting the port s entry using the arrow keys and then toggling between E F or using the space bar E Egress Member specifies the port as being a static member of the multicast group Egress Member Ports are ports that will be transmitting traffic for the multicast group F Forbidden Non Member spec...

Page 206: ...thernet Switch User s Guide 190 Configuring the Switch Using the Console Interface Figure 6 44 Setup IP Multicast Menu To configure the multicast interface Highlight Multicast Interface Configuration and press enter ...

Page 207: ...for more information The IGMP field can be toggled between Enabled and Disabled using the space bar This will enable or disable IGMP for the IP interface entered above The Protocol field can be toggled between Protocol Independent Multicasting Dense Mode PIMDM Distance Vector Multicasting Routing Protocol DVMRP and INACT inactive INACT is not a multicast routing protocol It is used to make a given...

Page 208: ...lows an entry between 1 and 254 and defines the maximum time allowed before sending a response report to a query measured in units of 1 10 of a second This is used to adjust the leave latency the time internal between the moment the last host leaves a group and when the routing protocol is notified there are no more members The Robustness Var field allows an entry between 1 and 255 that defines th...

Page 209: ... hop based method of building multicast delivery trees from multicast sources to all nodes of a network Because the delivery trees are pruned and shortest path DVMRP is relatively efficient Because multicast group membership information is forwarded by a distance vector algorithm propagation is slow DVMRP is optimized for high delay high latency relatively low bandwidth networks and can be conside...

Page 210: ...t received on the shortest path back to the source the message is dropped Note DVMRP version 3 incorporates the Reverse Path Multicasting algorithm See Chapter 5 Reverse Path Multicasting for more information The NBR Report Timer 35 field allows an entry between 1 and 65 535 seconds and defines the time period for which Non Membership Report messages are valid The default is 35 seconds Note NBR re...

Page 211: ...ote The higher the route cost the lower the probability that the current route will be chosen to be an active branch of the multicast delivery tree not pruned if there is an alternative route The Probe Interval 10 field allows an entry between 1 and 65 535 seconds and defines the interval between probes The default is 10 The State Disabled field can be toggled between Enabled and Disabled and enab...

Page 212: ...ocol Independent Multicast Dense Mode PIM DM protocol should be used in networks with a low delay low latency and high bandwidth as PIM DM is optimized to guarantee delivery of multicast packets not to reduce overhead The Hello Interval 30 field allows an entry of between 1 and 65535 seconds and determines the interval between sending Hello packets to other routers on the network The Hello message...

Page 213: ...ocol is assumes that all downstream routers want to receive multicast messages and relies upon explicit prune messages from downstream routers to remove branches from the multicast delivery tree that do not contain multicast group members Note PIM DM has no explicit join messages It relies upon periodic flooding of multicast messages to all interfaces and then either waiting for a timer to expire ...

Page 214: ...fusion caused by the term router port when compared to a traditional router A static router port is a port that has a router attached to it Generally this router would have a connection to a WAN or to the Internet Establishing a router port will allow multicast packets coming from the router to be propagated through the network as well as allowing multicast messages coming from the network to be p...

Page 215: ...ort packets will be forwarded to the router port Note IGMP queries from the router port will be flooded to all ports Note All UDP multicast packets will be forwarded to the router port Because routers do not send IGMP reports or implement IGMP snooping a multi port router connected to the router port of the Layer 3 switch would not be able to receive UDP data streams at all of its ports unless the...

Page 216: ... first field of Router Port M Each port can be set individually as a router port by highlighting the port s entry using the arrow keys and then toggling between M and using the space bar Highlight APPLY and press enter to make the changes current Use Save Changes from the Main Menu to enter the changes into NV RAM To delete an entry select Delete and enter the VID of the VLAN for which the router ...

Page 217: ...hernet Switch User s Guide Configuring the Switch Using the Console Interface 201 Figure 6 50 Mirroring Menu To select the target port highlight Target Port Selection and press enter Figure 6 51 Target Port Selection ...

Page 218: ...ect the source port s for mirroring Highlight Setup Port Mirroring and press enter Figure 6 52 Setup Port Mirroring The Action field can be toggled between Add Modify and Delete using the space bar Entries can be added modified or deleted based upon the port number entered in the Source Port field The Direction field can be toggled between Either Ingress and Egress Either mirrors both received and...

Page 219: ...0 Mbps Gigabit Ethernet port for example should not be mirrored to a slower port one of the 24 100 Mbps Fast Ethernet port because many packets will be dropped Priority To configure a forwarding priority for a given MAC address Highlight Priority from the main menu and press Enter Figure 6 53 Setup Priority MAC Address The Action field can be toggled between Add Modify and Delete using the space b...

Page 220: ...igh and High corresponding to the priority of packets sent to or transmitted from the MAC address entered above The Source Destination field can be toggled between Src Source Dst Destination and Either corresponding to whether the MAC address entered above will be transmitting packets a source receiving packets a destination or both either Filtering Layer 2 Filtering Layer 2 Only switch operation ...

Page 221: ...ernet Switch User s Guide Configuring the Switch Using the Console Interface 205 Figure 6 54 Forwarding Menu MAC Address Highlight MAC Address Forwarding and press enter Figure 6 55 Static Unicast MAC Forwarding Setup ...

Page 222: ...e toggled between Base Unit the 24 ports Fast Ethernet ports and Slot 1 the two optional Gigabit ports Enter the port number in the Port field Highlight APPLY and press enter to make the changes current Use Save Changes from the Main Menu to save the changes to NV RAM Layer 3 IP Routing Filtering The switch is in IP Routing switch operation mode With the switch configured to Layer 3 Operation mode...

Page 223: ...y Ethernet Switch User s Guide Configuring the Switch Using the Console Interface 207 Figure 6 56 Filtering Menu Layer 3 To enter a MAC address into the filtering table Highlight MAC Address Filter and press enter ...

Page 224: ...e Dst destination and Either The MAC address entered into the filtering table can be filtered as a source packets will not be received from the MAC address as a destination packets will not be transmitted to the MAC address or as either a source or destination packets will not be received from or transmitted to the MAC address Highlight APPLY and press enter to make the changes current Use Save Ch...

Page 225: ...ation field can be toggled between Src source Dst destination and Either The IP address entered into the filtering table can be filtered as a source packets will not be received from the IP address as a destination packets will not be transmitted to the IP address or as either a source or destination packets will not be received from or transmitted to the IP address Highlight APPLY and press enter...

Page 226: ...face Forwarding Layer 2 Forwarding Layer 2 Only switch operation mode To enter a MAC address into the switch s forwarding table Highlight Forwarding from the Main Menu and press enter Figure 6 59 Forwarding Menu Layer 2 Highlight MAC Address Forwarding from the Forwarding Menu and press enter ...

Page 227: ... the VID field and the MAC address to be statically entered in the forwarding table in the MAC Address field The Module field can be toggled between Base Unit the 24 ports Fast Ethernet ports and Slot 1 the two optional Gigabit ports Enter the port number in the Port field Highlight APPLY and press enter to make the changes current Use Save Changes from the Main Menu to enter the changes into NV R...

Page 228: ... addresses and IP addresses Static IP forwarding is accomplished by the entry of a Static IP Route Static Address Resolution Protocol ARP entrees can also be made from the Forwarding Menu MAC Address Forwarding To enter a MAC address into the switch s forwarding table Highlight Forwarding from the Main Menu and press enter Figure 6 61 Forwarding Menu Layer 3 Highlight MAC Address Forwarding and pr...

Page 229: ...and the MAC address to be statically entered in the forwarding table in the MAC Address field The Module field can be toggled between Base Unit the 24 ports Fast Ethernet ports and Slot 1 the two optional Gigabit ports Enter the port number in the Port field Highlight APPLY and press enter to make the changes current Use Save Changes from the Main Menu to enter the changes into NV RAM IP Static Ro...

Page 230: ...e IP Address field and subnet mask in the Subnet Mask field The IP address of the gateway usually a router with a connection to a WAN or the Internet is entered in the Gateway IP field and a corresponding metric a number representing the distance the gateway is from the IP interface in hops or the number or routers between the IP interface and the gateway in the Metric field Highlight APPLY and pr...

Page 231: ...p Static ARP Entries menu The Action field can be toggled between Add Modify and Delete using the space bar Enter the Interface name which this SRP entry belong to in the Interface Name field and the IP address in IP Address field and corresponding MAC address in the MAC Address field Highlight APPLY and press enter to make the changes current Use Save Changes from the Main Menu to enter the chang...

Page 232: ... Enter Figure 6 65 Configure Spanning Tree Global Note The Spanning Tree Protocol STP operates on two levels on the switch level the settings are globally implemented On the port level the settings are implemented on a per user defined Group basis Note The factory default setting should cover the majority of installations However it is advisable to keep the default settings as set at the factory u...

Page 233: ...at it is indeed the Root Bridge If you set a Hello Time for your Switch and it is not the Root Bridge the set Hello Time will be used if and when your Switch becomes the Root Bridge Note The Hello Time cannot be longer than the Max Age Otherwise a configuration error will occur Forward Delay The Forward Delay can be from 4 to 30 seconds This is the time any port on the Switch spends in the listeni...

Page 234: ...and Port Cost Note An STP Group spanning tree works in the same way as the switch level spanning tree but the root bridge concept is replaced with a root port concept A root port is a port of the group that is elected on the basis of port priority and port cost to be the connection to the network for the group Redundant links will be blocked just as redundant links are blocked on the switch level ...

Page 235: ...ce 219 Figure 6 66 Port Group STP Configuration Toggle the Action Add Modify field to Add Modify Choose a name for the group and enter it in the Group Name field The group name does not necessarily have to correspond to any name that has been previously entered in the switch s configuration ...

Page 236: ...r configuration in groups of 12 and the two optional Gigabit Ethernet ports are displayed together The Port Group STP parameters that can be configured are Port Priority A Port Priority can be from 0 to 255 The lower the number the greater the probability the port will be chosen as the Root Port Port Cost A Port Cost can be set from 1 to 65535 The lower the number the greater the probability the p...

Page 237: ...o 16 and ports 17 to 24 except the two optional Gigabit ports which can only belong to a single link aggregation group A link aggregation group may not cross an 8 port boundary starting with port 1 a group may not contain ports 8 and 9 for example and all of the ports in the group must be members of the same VLAN Further the linked ports must all be of the same speed and should be configured as fu...

Page 238: ...undant link aggregation groups are configured on the switch STP will block one entire group in the same way STP will block a single port that has a redundant link To configure a link aggregation group Highlight Link Aggregation on the Main Menu and press enter Figure 6 68 Link Aggregation Setup Toggle the Group ID 1 field to one of the six possible link aggregation groups configurable on the switc...

Page 239: ...tion group The Method Disabled field can be toggled between Enabled and Disabled and is used to turn a link aggregation group on or off This is useful for diagnostics to quickly isolate a bandwidth intensive network device or to have an absolute backup aggregation group that is not under automatic control Highlight Apply and press enter to make the link aggregation group configuration active Use S...

Page 240: ...ch firmware to be upgraded by transferring a new firmware file from a TFTP server to the switch A configuration file can also be loaded into the switch from a TFTP server switch settings can be saved to the TFTP server and a history log can be uploaded from the switch to the TFTP server Updating Firmware To update the switch s firmware Highlight Upgrade Firmware from TFTP Server and press enter ...

Page 241: ...TP server Note that in the above example the firmware file is in the root directory of the C drive of the TFTP server Note The TFTP server must be running TFTP server software to perform the file transfer TFTP server software is a part of many network management software packages or can be obtained as a separate program Highlight APPLY and press enter record the IP address of the TFTP server Use S...

Page 242: ...nfiguration File on TFTP Server and press enter Figure 6 71 Download Configuration File Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server Highlight APPLY and press enter record the IP address of the TFTP server Use Save Changes from the Main Menu to enter the address into NV RAM Highlight START and press enter to initiate the file ...

Page 243: ...e Settings to TFTP Server and press enter Figure 6 72 Upload Setting File Enter the IP address of the TFTP server and the path and filename of the settings file on the TFTP server and press APPLY Highlight START and press enter to initiate the file transfer Uploading a History Log File To save a History Log on a TFTP server Highlight Save History Log to TFTP Server and press enter ...

Page 244: ...ddress of the TFTP server and the path and filename for the history log on the TFTP server Highlight APPLY and press enter to make the changes current Highlight START and press enter to initiate the file transfer Testing Connectivity with Ping To test the connection with another network device using Ping Highlight Ping Test and press enter ...

Page 245: ...inged and the number of test packets to be sent 3 is usually enough Highlight START and press enter to initiate the ping program Layer 3 Utilities Layer 3 IP Routing switch operation mode adds BOOTP Relay and DNS Relay to the utilities available on the switch BOOTP DHCP Relay To enter the IP addresses of BOOTP DHCP Relay servers Highlight Utilities on the Main Menu and press enter ...

Page 246: ...ch User s Guide 230 Configuring the Switch Using the Console Interface Figure 6 75 Switch Utilities Menu Layer 3 Highlight BOOTP DHCP Relay on the Switch Utilities menu and press enter Figure 6 76 BOOTP DHCP Relay Setup Layer 3 ...

Page 247: ...field Enter the IP address of the BOOTP Relay server or servers as the case may be highlight APPLY and press enter to enter the information into the BOOTP Relay table Use Save Changes from the Main Menu to enter the information into NV RAM DNS Relay To enter the IP addresses of DNS Relay servers Highlight DNS Relay on the Switch Utilities menu and press enter Figure 6 77 DNS Relay Setup Layer 3 Th...

Page 248: ...a DNS cache will be enabled on the switch The DNS Relay Static Table Lookup Status Disabled can be toggled between Disabled and Enabled This determines if the static DNS table entered under Static Table Setting below will be used or not To make a static DNS table entry Highlight Static Table Setting on the DNS Relay menu and press Enter Figure 6 78 DNS Relay Setup Layer 3 The Action Add Edit field...

Page 249: ...er to make the change current Use Save Changes to enter the table into NV RAM Network Monitoring The DES 3326 provides extensive network monitoring capabilities Layer 2 Network Monitoring To display the network data compiled by the switch Highlight Network Monitoring on the Main Menu and press enter Figure 6 79 Network Monitoring Menu ...

Page 250: ...ng menu and press enter Figure 6 80 Port Utilization Table The Port Utilization screen shows the number of packets transmitted and received per second and calculates the percentage of the total available bandwidth being used on the port displayed under Util Port Error Statistics To view the error statistics for a port Highlight Port Error Packets on the Network Monitoring menu and press enter ...

Page 251: ...lect which group of ports will be displayed Enter the port number of the port to be viewed The Interval 2 sec field can be toggled from 2 seconds to 1 minute or suspend This sets the interval at which the error statistics are updated Port Packet Analysis Table To view an analysis of the size of packets received or transmitted by a port Highlight Port Packet Analysis on the Network Monitoring menu ...

Page 252: ...d Mode Analysis Table In addition to the size of packets received or transmitted by the selected port statistics on the number of unicast multicast and broadcast packets are displayed MAC Address Forwarding Table To view the MAC address forwarding table Highlight Browse MAC Address on the Network Monitoring menu and press enter ...

Page 253: ...mine which MAC addresses from the forwarding table are displayed ALL specifies no filter To search for a particular MAC address Toggle the Browse By ALL field to MAC Address A MAC Address 000000000000 field will appear Enter the MAC address in the field and press enter GVRP Status Table As of firmware release 1 00 B14 GVRP is not supported on the DES 3326 Support for GVRP is planned for a later fi...

Page 254: ...om the Network Monitoring menu and press enter Figure 6 84 GVRP Status Table GMRP Status Table As of firmware release 1 00 B14 GMRP is not supported on the DES 3326 Support for GMRP is planned for a later firmware release To view the GMRP status table Highlight GMRP Status from the Network Monitoring table and press enter ...

Page 255: ...itch User s Guide Configuring the Switch Using the Console Interface 239 Figure 6 85 GMRP Status Table IGMP Snooping Table To view the IGMP snooping table Highlight IGMP Status from the Network Monitoring menu and press enter ...

Page 256: ...User s Guide 240 Configuring the Switch Using the Console Interface Figure 6 86 IGMP Snooping Status Table Switch History Log To view the switch history log Highlight Switch History from the Network Monitoring menu and press enter ...

Page 257: ...3 Network Monitoring When the switch is in Layer 3 IP Routing mode several items are added to the Network Monitoring menu The following items are added to the Network Monitoring menu when the switch is in Layer 3 IP Routing mode Browse IP Address Routing Table ARP Table IP Multicast Forwarding Table IGMP Group Table DVMRP Routing Table ...

Page 258: ...242 Configuring the Switch Using the Console Interface Figure 6 88 Network Monitoring Menu Layer 3 IP Address Forwarding Table To view the IP address forwarding table Highlight Browse IP Address from the Network Monitoring menu and press enter ...

Page 259: ...3 Figure 6 89 IP Forwarding Table Layer 3 To Jump to a particular IP address enter the IP address in the Jump to IP Address 0 0 0 0 field highlight GO and press enter IP Routing Table To view the contents of the routing table Highlight Routing Table on the Network Monitoring menu and press enter ...

Page 260: ...mp to a particular Destination IP address enter either the IP address in the Jump to Destination Address 0 0 0 0 field the gateway address in the Gateway 0 0 0 0 field and the subnet mask in the Mask 0 0 0 0 field highlight GO and press enter ARP Table To view the ARP table Highlight ARP Table on the Network Monitoring menu and press enter ...

Page 261: ...ar IP interface or an IP address enter either the IP interface name in the Jump to Interface Name field and enter the IP address in the IP Address 0 0 0 0 field highlight GO and press enter IP Multicast Forwarding Table To view the IP multicast forwarding table Highlight IP Multicast Forwarding Table from the Network Monitoring menu and press enter ...

Page 262: ...multicast group enter either the IP address in the Jump to Multicast Group 0 0 0 0 field enter the source IP address in the Source IP 0 0 0 0 field or the source subnet mask in the Source Mask 0 0 0 0 field highlight GO and press enter DVMRP Routing Table To view the DVMRP routing table Highlight Browse DVMRP Routing Table from the Network Monitoring menu and press enter ...

Page 263: ...le To Jump to a particular source IP address enter either the IP address in the Jump to IP Address 0 0 0 0 field or the source subnet mask in the Source Mask 0 0 0 0 field highlight GO and press enter Reboot The DES 3326 has several reboot options To reboot the switch from the console Highlight Reboot from the Main Menu and press enter ...

Page 264: ...s configuration will be restored to the last configuration saved in NV RAM Save Configuration Reboot saves the configuration to NV RAM identical to using Save Changes and then restarts the switch Reboot Load Factory Default Configuration restarts the switch using the default factory configuration All configuration data will be lost This is identical to using Factory Reset and then Reboot Reboot Lo...

Page 265: ...sole Interface 249 configuration except the user configured IP address will be retained All other configuration data will be lost A confirmation screen will appear Figure 6 96 System Reboot Confirmation To reboot the switch in the mode entered above highlight Yes and press enter ...

Page 266: ...ss tool and can communicate directly with the Switch using the HTTP protocol The Web based management module and the Console program and Telnet are different ways to access the same internal switching software and configure it Thus all settings encountered in web based management are the same as those found in the console program Note This Web based Management Module does not accept Chinese langua...

Page 267: ... bottleneck between the WAN or Internet and the Intranet Its function in a network can be thought of as a new generation of router that performs routing functions in hardware rather than software This flexibility and rich feature set requires a bit of thought to arrive at a deployment strategy that will maximize the potential of the DES 3326 Layer 3 switch General Deployment Strategy 1 Determine h...

Page 268: ...VLANs will function as a layer 2 VLAN and would require an external router to connect to the rest of the network 6 Develop a policy scheme Some subnets will have a greater need for multicasting bandwidth for example A policy is a mechanism to alter the normal packet forwarding in a network device and can be used to intelligently allocate bandwidth to time critical applications such as the integrat...

Page 269: ...If these layer 2 switches each have 24 ports then the Layer 3 VLAN would contain 4 x 24 96 end nodes Assigning an IP subnet to the Layer 3 VLAN would allow wire speed IP routing from the WAN to each end node and between end nodes So the IP subnets for a network must be determined first and the VLANs configured on the switch to accommodate the IP subnets Finally the IP subnets can be assigned to th...

Page 270: ...itch is to secure a browser A Web browser is a program which allows a person to read hypertext for example Netscape Navigator or Microsoft Internet Explorer Follow the installation instructions for the browser The second and last step is to configure the IP interface of the Switch This can be done manually through a console see the Configure IP Address section in Using The Console Interface chapte...

Page 271: ...DES 3326 Manager button Figure 7 1 Login Button This opens the main page in the management module The switch management features available in the web based are explained below Configuring the Switch User Accounts Management From the Main Menu highlight Management and press Enter then the User Account Management menu appears Figure 7 2 User Accounts Control Table Click New to add a user ...

Page 272: ...s shown on the user accounts control table This list is updated when Apply is executed 4 Please remember that Apply makes changes to the switch configuration for the current session only All changes including User additions or updates must be entered into non volatile ram using the Save Changes command on the Main Menu if you want these changes to be permanent Root User and Normal User Privileges ...

Page 273: ...ilities Yes Ping Only Ping Only Factory Reset Yes No No Reboot Switch Yes Yes No User Accounts Management Add Update Delete User Accounts Yes No No View User Accounts Yes No No Table 7 1 Root User and User Privileges After establishing a User Account with Root level privileges highlight Save Changes and press Enter see below The switch will save any changes to its non volatile ram and reboot You c...

Page 274: ...RAM Thus it is necessary to save all setting changes to NV RAM before rebooting the switch To retain any configuration changes permanently highlight Save Changes from the main menu The following screen will appear to verify that your new settings have been saved to NV RAM Figure 7 5 Save Changes Screen Once the switch configuration settings have been saved to NV RAM they become the default setting...

Page 275: ...tion information will be lost Figure 7 6 Factory Reset Screen Click Yes if you want the switch to retain its current IP address Click No to reset the switch s IP address to the factory default 10 90 90 90 Click the Reset to Factory Default button to restart the switch USING WEB BASED MANAGEMENT Setting Up Web Management Before running Web based management some basic configuration of the switch may...

Page 276: ...he User Interface which is accessible via either the serial console or Telnet Refer to the User Guide that came with your system for more information subsection describe the required configuration Setting an IP Address The IP address for the switch must be set before it can be managed with the web based manager The switch IP address may be automatically set using BootP protocol in which case the a...

Page 277: ...rnet Switch User s Guide Web Based Network Management 261 3 Select Subnet Mask from the menu and enter the appropriate mask 4 Click APPLY to make the change effective Use Save Changes to enter the IP address into NV RAM ...

Page 278: ...s Press APPLY Setting the Administrator Password Management access to the switch is restricted based on the administrator password Administrators have read write access for parameters governing the SNMP agent You should therefore assign a password to the default administrator as soon as possible and store it in a safe place Setting Trap Destinations If you wish to record SNMP traps or events gener...

Page 279: ... session If the switch is restarted rebooted without entering the configuration changes into the non volatile RAM flash RAM the configuration changes will be lost To enter configuration changes into the switch s non volatile RAM select Save Changes from the main screen Click on the Save Configuration button to enter the current configuration into NV RAM The configuration will then be loaded into t...

Page 280: ... manage in the URL field of the browser 3 The screen below will appear prompting you to enter the user name and password for management access Figure 7 8 Password Screen Use the User Name and Password previously entered in the Setting Up Web Management section This will allow read write access to the switch The full application will now launch A four frame page will display with the product graphi...

Page 281: ...ous switch configuration and management screens allows you to view performance statistics and permits you to graphically monitor system status Areas of the User Interface Figure 2 1 shows the user interface The user interface is divided into 3 distinct areas as described in Table 2 1 Figure 7 9 Main Web Manager Screen Area Function Area 1 Area 2 Area 3 ...

Page 282: ...e entry of configuration data Function Description System Provides basic system description including contact information Switch Shows Switch Operation mode Layer 2 switch settings Layer 3 IP Routing Protocol Settings IP Includes IP address Management VID SNMP Configures communities and trap managers and activates traps Security User accounts Control table User accounts control table Add User acco...

Page 283: ...switch to one VLAN VLAN Configures VLAN group members automatic registration with GVRP and other port specific VLAN settings IGMP Configures IGMP multicast filtering Port Enables any port sets communication mode to auto negotiation full duplex or half duplex and enables disables flow control Mirror Sets the source and target ports for mirroring Trunk Specifies ports to group into aggregate trunks ...

Page 284: ... The contents of this chapter are arranged following the structure shown below Entries in Bold typeface are available only when the switch is in IP routing mode Initial Screen Sub screens System No Sub Menus Switch Switch Operation Mode Layer 2 Switch Settings Layer 3 IP Routing Protocol Settings Setup IP Interfaces Setup RIP IP No Sub menus Security User Accounts Table User Accounts Table Add Man...

Page 285: ...utes Static ARP Filtering MAC Filtering IP Address Filtering Priority No Sub menus Mirroring Target Port Selection Port Mirroring Settings Multicasting IEEE 802 1Q Multicast Forwarding Multicast Interface Configuration IGMP Settings DVMRP Settings PIMDM Settings Static Router Port Settings VLANs 802 1Q Static VLANs Port VLAN ID PVID Port Ingress Filter Port GVRP Settings Port GMRP Settings Static ...

Page 286: ... Address Sequentially Routing Table ARP Table Applications Switch History Browse Router Port Browse IP Address Sequentially Routing Table ARP Table Utilities Update Firmware from Server Use Configuration File on Server Save Settings to Server Save History Log to Server Bootp Relay Static Bootp Relay Setup DNS Relay Static DNS Relay Setup Save No Sub menus Reset Restart System Factory Reset ...

Page 287: ...ation about the switch or for quick system identification as shown in the following figure and table Figure 7 10 Switch Information Screen Parameter Description System Name2 Name assigned to the switch system Hardware Version Hardware version of the main board Firmware Version System firmware version in ROM Internal Power Status Power status for the switch ...

Page 288: ...work interconnection devices and any PC accessing the agent module or running management software must have an IP address Valid IP addresses consist of four numbers of 0 to 255 separated by periods Anything outside of this format will not be accepted by the configuration program Location1 Specifies the area or location where the system resides Contact1 Contact person for the system 1Maximum string...

Page 289: ...24 port NWay Ethernet Switch User s Guide Web Based Network Management 273 ...

Page 290: ...onfiguration screen to set the boot up option or to manually configure the IP address for the agent module The screen shown below is described below in the following table Figure 7 11 IP Address Screen Current Settings Parameter Default Description Get IP From Manual The options are Manual DHCP and BOOTP ...

Page 291: ... to the switch Note that the gateway must be defined if the management station is located on a different IP segment than the switch Management VID 1 Displays the VID of the VLAN that is currently allowed to access the management module on the switch New Settings Parameter Description Get IP From Specifies the method used to assign the switch an IP address The options are Manual DHCP and BOOTP IP A...

Page 292: ... Default Gateway used to pass trap messages from the switch s agent to the management station Note that the gateway must be defined if the management station is located on a different IP segment than the switch Management VID Allows the input of a VLAN VID to restrict access to the management module on the switch to a single VLAN ...

Page 293: ... management stations that will be allowed to access the management agent of the switch If you enter IP addresses in this menu then only management stations with those IP addresses will be allowed to access the management agent of the switch All other IP addresses will be blocked Figure 7 12 Management Station IP Settings Screen Parameter Description IP Address The IP address of the management stat...

Page 294: ...e network called a Network Management Station NMS can be used to access this information Access rights to the on board agent are controlled by community strings To communicate with the switch the NMS must first submit a valid community string for authentication The options for configuring community strings and related trap functions are described in the following figures and table SNMP Community S...

Page 295: ...of access for an authorized user The levels can be Read Only or Read Write Status Specifies whether the current string is Valid or Invalid This is used to temporarily limit access to the switch s SNMP agent Trap Receivers The following figure and table describe how to specify management stations that will receive authentication failure messages or other trap messages from the switch Up to 4 trap m...

Page 296: ...ed for authentication of users wanting to receive traps from the switch s SNMP agent Status Specifies whether the current string is Enabled or Disabled This is used to temporarily limit the receipt of traps generated by the switch Serial Port Settings The following figure and table describe the configuration of the switch s serial port sometimes referred to as a console port Use Select Protocol to...

Page 297: ...ter Description Baud Rate Specifies the rate data will be exchanged over the serial link The default value is 9600 baud Data Bits Specifies the number of bits that will carry data over the serial link The default value is 8 bits Stop Bits Specifies the number of bits that indicate when a serial word ends The default value is 1 bit ...

Page 298: ...al link The default value is 9600 baud Interface Name The name of the IP interface previously defined on the switch that will communicate with the remote management station Local IP Address The IP address that corresponds to the IP interface name above Remote IP Address The IP address of the remote management station that will communicate with the switch using SLIP MTU Maximum Transfer Unit specif...

Page 299: ...esses are not present the switching process is based upon the MAC addresses as in Layer 2 above 802 1Q VLANs are supported and the switch is considered as a VLAN tag aware device The switch must be rebooted when changing the operation mode before the new operation mode can take effect Switch Operation Mode The field Restart Mode can be set using the drop down menu to one of the two switch operatio...

Page 300: ...Switch Settings Note Layer 2 Switch functions and settings are also available when the switch is configured to operate in the IP Routing Layer 3 mode Note A very long MAC Address Aging Time can result with the out of date Dynamic Entries that may cause incorrect packet filtering forwarding decisions A very short aging time may cause entries to be aged out to soon resulting in a high percentage of ...

Page 301: ... learned MAC Address will remain in the forwarding table without being accessed that is how long a learned MAC Address is allowed to remain idle The Aging Time can be set to any value between 10 and 1 000 000 seconds Broadcast Multicast Storm Mode Allows the Broadcast Multicast Storm control to be Enabled or Disabled This enables or disables globally the switch s reaction to Multicast storms ...

Page 302: ...torm Upper Threshold for Module Ports This is the number of thousands Broadcast Multicast packets per second received by the switch on one of the module ports that will trigger the switch s reaction to a Broadcast Multicast storm GVRP As of firmware release 1 00 B14 GVRP is not supported on the DES 3326 Support for GVRP is planned for a later firmware release Group VLAN Registration Protocol is a ...

Page 303: ... IGMP Snooping Allows IGMP Snooping to be Enabled or Disabled This enables or disables IGMP snooping for the switch Layer 3 IP Routing Protocol Settings Note These IP Routing Protocol Settings are only for enabling or disabling globally routing protocols available on the switch The Routing Information Protocol RIP is setup in the Setup RIP section later in this manual Figure 7 17 Layer 3 IP Routin...

Page 304: ...is enables or disables globally the Protocol Independent Multicasting Dense Mode PIM DM multicasting protocol Setup IP Interface The first menu displays the current IP interfaces on the switch The Add and Edit menus are used to add a new IP interface and to edit an existing IP interface respectively Each IP interface on the switch corresponds to a VLAN The VLAN must be configured before the IP int...

Page 305: ...P address of the IP interface sometimes referred to as a network address Subnet Mask The subnet mask corresponding to the IP address and IP interface name above VID The VLAN ID of the VLAN corresponding to this IP interface Active Displays whether the IP interface is active or inactive New A link to the IP Interface Add menu More A link to the IP Interface Edit menu Add IP Interface The following ...

Page 306: ...interface IP Address The IP address of this IP interface sometimes referred to as a network address Subnet Mask The subnet mask for this IP interface VID The VLAN ID of the VLAN corresponding to this IP interface Active Allows this IP interface to be Active or Inactive on the switch Port Member Allows the selection of ports to be members of this IP interface and its corresponding VLAN ...

Page 307: ...Figure 7 20 Setup IP Interface Edit Screen Parameter Description Subnet Name Displays the subnet name corresponding to the IP address entered below IP Address The IP address of the IP interface to be edited Subnet Mask The subnet mask of the IP interface to be edited VID The VLAN ID of the VLAN corresponding to this IP interface Active Allows this IP interface to be Active or Inactive on the switc...

Page 308: ...utonomous system Figure 7 21 Setup RIP Screen Parameter Description Subnet Name Displays the name of the subnet on which RIP is to be setup This subnet must be previously configured on the switch IP Address Displays the IP address corresponding to the subnet name above Tx Mode Displays whether transmitted RIP packets will be structured as V1 only V1 Compatible V2 Only or Disabled This entry specif...

Page 309: ...nfigured to use an authorization string More A link to the Setup RIP Edit Edit RIP Setup The following menu is used to edit the switch s RIP setup Figure 7 22 Setup RIP Edit Screen Parameter Description Subnet Name Displays the name of the subnet on which RIP is to be edited This subnet must be previously configured on the switch IP Address Displays the IP address corresponding to the subnet name ...

Page 310: ...try specifies which version of the RIP protocol will be used to receive RIP packets The Disabled entry prevents the reception of RIP packets Auth Allows RIP to be configured to use an authorization string Port Configuration The following figure and table describe the configuration of ports on the switch You can select a port to be configured by clicking on the port in Area 1 the switch icon at the...

Page 311: ...dicates the current status of the selected port State Allows the currently selected port to be Enabled or Disabled Speed Duplex Allows the specification of the speed and full or half duplex state of the currently selected port For 100 Mpbs ports the choices are Auto 10 Half 10 Full 100 Half and 100 Full For Gigabit ports the choices are Auto 1000 Full Flow Control Allows flow control to be Enabled...

Page 312: ...es or routers in your network to ensure that only one route exists between any two stations on the network For a more detailed description of how to use this protocol refer to Spanning Tree Concepts in the DES 3326 Management Guide The following figures and tables describe the configuration of the Spanning Tree Protocol STP on the switch Figure 7 24 STP Switch Settings Parameter Default Descriptio...

Page 313: ...essage becomes the designated port for the attached LAN If it is a root port a new root port is selected from among the device ports attached to the network The minimum value is the higher of 6 or 2 x Hello Time 1 The maximum value is the lower of 40 or 2 x Forward Delay 1 Hello Time 2 The time interval in seconds at which the root device transmits a configuration message Forward Delay 15 The maxi...

Page 314: ...return to a blocking state otherwise temporary data loops might result Maximum value is 30 Minimum value is the higher of 4 or Max Age 2 1 Bridge Priority 32 768 Device priority used in selecting the root device root port and designated port The device with the highest priority becomes the STP root device The lower the numeric value the higher the priority If all devices have the same priority the...

Page 315: ...s and tables describe how to configure a spanning tree group Note This function is available only when the switch is in IP Routing mode Parameter Description Group Name A name given to identify a given STP group Port Members A list of the ports that belong to a given group More A link to the Edit STP Group menu New A link to the Add STP Group menu Add an STP Group The following figure and table de...

Page 316: ...fy the STP group Port Number Check boxes used to select a port to be a member of the STP group Click on the box corresponding to the port you want to add to the STP group Edit STP Group Settings The following figure and table describe how to edit the settings of an STP Group The STP Group Settings Edit menu allows you to change which ports are members of the currently selected ...

Page 317: ...ee Groups menu Figure 7 27 STP Group Settings Edit Screen Parameter Description Group Name The group name of the selected STP group Designated Root Bridge The current root bridge for the STP group Root Priority The current value of the bridge priority for the group Cost to Root Displays the currently assigned cost for the route from the ...

Page 318: ...econds since the last change in the root bridge or designated port for the STP group Topology Change Count The number of topology changes for the currently selected STP group since the switch was last restarted STP Port Settings The following figure and table describe the display of the current STP port settings on the switch Figure 7 28 STP Port Settings Screen ...

Page 319: ...n to forward packets Port Priority A port priority can be set between 0 to 255 The lower the priority the greater the probability the port will be chosen as the root port Status Displays the status Enabled or Disabled for the corresponding port Group Name Displays the previously assigned name for the STP group the corresponding port belongs to Forwarding The following figures and tables describe h...

Page 320: ...scription MAC Address The MAC address to which packets will be statically forwarded VID The VLAN ID number of the VLAN to which the above MAC address belongs PortMap Allows the designation of the port on which the above MAC address resides Entries Parameter Description MAC Address Displays the MAC address corresponding to the static forwarding table entry ...

Page 321: ...t Routes into the IP routing table Figure 7 30 Static Default Routers Screen Parameter Description IP Address Displays the IP addresses statically entered into the IP forwarding table Subnet Mask Displays the corresponding subnet mask for the IP address above Gateway IP Displays the corresponding IP address of the next hop gateway for the IP address above Metric Displays the Routing Information Pr...

Page 322: ... entry of a Static Default Route into the switch s IP routing table Click on the Exit icon to return to the Static Default Routes menu Figure 7 31 Static Default Routes Add Screen Parameter Description IP Address The IP address to be statically entered into the IP forwarding table Subnet Mask The corresponding subnet mask for the IP address above Gateway IP The corresponding IP address of the next...

Page 323: ... of a static Address Resolution Protocol ARP into the switch s static ARP table Figure 7 32 Static ARP Screen Parameter Description Interface Name Displays the IP interface on which the IP address previously entered into the static ARP table resides Interface IP Displays the corresponding network address or IP address of the IP interface name above IP Address Displays the IP address of the end nod...

Page 324: ...ure and table describe adding an entry to the switch s static ARP table Click on the Exit icon to return to the Static ARP menu Figure 7 33 Static ARP Add Screen Parameter Description Interface Name The IP interface on which the IP address to be added to the static ARP table resides IP Address The IP address of the end node or station MAC Address The MAC address corresponding to the IP address abo...

Page 325: ...y Parameter Description MAC Address The MAC address that is to be filtered on the switch VID The VLAN ID number of the VLAN on which the MAC address above resides State Allows the selection of the state of the MAC address under which packets will be dropped by the switch The options are Dst destination Src source and Either When Dst is chosen packets with the above MAC address as their destination...

Page 326: ...e MAC address that is to be filtered on the switch VID Displays the VLAN ID number of the VLAN on which the MAC address above resides State Displays the state of the MAC address under which packets will be dropped by the switch The options are Dst destination Src source and Either Remove Click the icon to remove the entry from the filtering table IP Address Filter The following figure and table de...

Page 327: ...above IP address under which packets will be dropped by the switch The options are DstAddr destination address ScrAddr source address and DstScrAddr either a destination or a source address When DstAddr is chosen packets with the above IP address as their destination will be dropped When ScrAddr is chosen packets with the above IP address as their source will be dropped When DstScrAddr is chosen a...

Page 328: ... IP address under which packets will be dropped by the switch The options are DstAddr destination address ScrAddr source address and DstScrAddr either a destination or a source address Remove Click the icon to remove the entry from the filtering table Priority The following figure and table describe how to setup an entry into the switch s priority table Figure 7 36 Setup MAC Address Priority Add a...

Page 329: ...are Low Med L medium low Med h medium high and High State The state under which the above priority will be active The options are Dst destionation Src source and Either When Dst is chosen packets with the above MAC address as their destination will be given the selected priority When Src is chosen packets with the above MAC address as their source will be given the selected priority When Either is...

Page 330: ...are Dst destination Src source and Either Mirroring Traffic from any source port to a target port can be mirrored for real time analysis A logic analyzer or an RMON probe can then be attached to study the traffic crossing the source port in a completely unobtrusive manner When mirroring port traffic note that the target port must be configured in the same VLAN and be operating at the same speed as...

Page 331: ...l receive packets that are duplicate at the mirror port Figure 7 37 Target Port Selection Parameter Description Target Port The port that will receive the packets duplicated at the mirror port Mirror Port Configuration The following figure and table describe the selection of a mirror port for port mirroring A mirror port is the port of a target mirror pair that will have its traffic duplicated and...

Page 332: ...ted in the mirror port Direction Allows the specification of which packets will be mirrored based upon whether the packets are flowing into or out of a port or all packets both directions The options are Ingress packets flowing into the mirror port Egress packets flowing out of the mirror port and Either both in to and out of the mirror port For example if Ingress is chosen all packets flowing int...

Page 333: ...ether the packets are flowing into or out of a port or all packets both directions The options are Ingress packets flowing into the mirror port Egress packets flowing out of the mirror port and Either both in to and out of the mirror port IEEE 802 1Q Multicast Forwarding The following figure and table describe how to set up Multicast forwarding on the switch Figure 7 39 Setup IEEE 802 1Q Multicast...

Page 334: ... from joining dynamically or that can join the multicast group dynamically using GMRP The options are None no restrictions on the port dynamically joining the multicast group Egress the port is a static member of the multicast group and Forbidden the port is restricted from joining the multicast group dynamically For example if None is chosen then an end station attached to the port can join the m...

Page 335: ...witch for which a multicast interface is to be configured IP Address The IP address sometimes referred to as a network address that corresponds to the interface name above IGMP Allows IGMP to be Enabled or Disabled for the IP interface Multicast Routing Protocol As of firmware release 1 00 B19 GVRP is supported on the DES 3326 Allows the selection of the multicast routing protocol to be used with ...

Page 336: ...lticasting Dense Mode and INACT the interface is inactive For example if DVMRP is chosen then this routing protocol will be used to forward multicast packets for the above IP interface IGMP Settings The following figure and table describe how to configure Internet Group Management Protocol IGMP on the switch Figure 7 41 IGMP Interface Setup Screen Parameter Description ...

Page 337: ...e IP interface Query The time in seconds between the transmission of IGMP query packets Max Resp The maximum number of respondents to an IGMP query Range is between 1 and 25 Robustness Var The Robustness Variable a numeric value between 1 and 255 defining the maximum time in seconds between the receipt of IGMP queries If this timer expires without the receipt of another IGMP query the switch assum...

Page 338: ...igured IP Address The IP address sometimes referred to as a network address corresponding to the interface name above Probe Interval DVMRP defines an extension to IGMP that allows routers to query other routers to determine if a multicast group is present on an given router subnetwork or not This is referred to as a probe The default value is 10 seconds Nbr Report Timer The time period for DVMRP w...

Page 339: ...eal cost of using this route in the construction of a multicast delivery tree It is similar to but not defined as the hop count in RIP The default value is 1 State Allows DVMRP to be Disabled or Enabled for the above IP interface The default is Disabled PIM DM Setup The following figure and table describe the configuration of a Protocol Independent Multicast Dense Mode PIMDM interface on the switc...

Page 340: ...y tree or not If the router does not receive a Hello message within the Hello Interval it will begin transmitting Hello messages to advertise its availability to become the root router The range is between 1 and 65535 seconds The default is 30 seconds Join Prune Interval Determines the interval between transmitting flooding to all interfaces multicast messages to downstream routers and automatical...

Page 341: ...Port Settings The following figures and table describe how to set up a static router port on the switch Figure 7 44 Static Router Port Settings Screen Parameter Description VID The VLAN ID of the VLAN the static router port resides on Port Members The ports that are set up as static router ports New A link to the Static Router Port Settings Add menu Delete Click on the icon to delete the entry fro...

Page 342: ...the Exit icon to return to the Static Router Port Settings menu Figure 7 45 Static Router Port Settings Add Screen Parameter Description VID The VLAN ID of the VLAN on which the static router port resides Port Member Click the box corresponding to the port that will be a static router port VLANs IEEE 802 1Q VLANs The following figures and tables describe how to set up 802 1Q VLANs on the switch ...

Page 343: ... Parameter Description VID The VLAN ID of the VLAN on which the static router port resides VLAN Name The name of the VLAN for which ports are to be configured Add a Static 802 1Q VLAN The following figure and table describe how to add an 802 1Q VLAN on the switch Figure 7 47 802 1Q Static VLANs Entry Settings Add ...

Page 344: ...her 802 1Q tagging or 802 1Q untagging Checking the box will designate the port as Tagging None Specifies the port as not being a static member of the VLAN but with no restrictions for joining the VLAN dynamically through GVRP Egress Specifies the port as being a static member of the VLAN Egress Member Ports are ports that will be transmitting traffic for the VLAN Forbidden Specifies the port as n...

Page 345: ... VLAN ID VID The VLAN ID of the VLAN to be edited For editing VLANs are identified by name VLAN Name The name of the VLAN to be edited Port A list of the ports that are static members of the currently selected VLAN Tag Specifies the port as either 802 1Q tagging or 802 1Q untagging Checking the box will designate the port as Tagging None Specifies the port as not being a static member of the VLAN ...

Page 346: ...Egress Member Ports are ports that will be transmitting traffic for the VLAN Forbidden Specifies the port as not being a static member of the VLAN and as being forbidden from joining the VLAN dynamically Port VLAN ID PVID The following figure and table describe how to configure the PVID for the switch Figure 7 49 Port VLAN ID PVID Screen ...

Page 347: ... When the packet arrives at its destination the receiving device will use the PVID to make VLAN forwarding decisions If a packet is received by the port and Ingress filtering is enabled the port will compare the VID of the incoming packet to its PVID If the two are unequal the port will drop the packet If the two are equal the port will receive the packet Port Shows the current PVID assignment for...

Page 348: ...n Port The number of the port for which ingress filtering is to be Enabled or Disabled Ingress Filter Specifies the port to check the VID of incoming packets against its VID or PVID If the two are equal the port will receive the packet It the two are unequal the port will drop the packet This is used to limit traffic to a single VLAN ...

Page 349: ...port for Port GVRP is planned for a later firmware release The following figure and table describe how to configure the Port Group VLAN Registration Protocol GVRP on the switch Figure 7 51 Port GVRP Settings Screen Parameter Description Port The number of the port for which GVRP is to be Enabled or Disabled GVRP For each corresponding port GVRP can be Enabled or Disabled ...

Page 350: ... supported on the DES 3326 Support for Port GVRP is planned for a later firmware release The following figure and table describe how to configure the Port Group Multicast Registration Protocol GMRP on the switch Figure 7 52 Port GMRP Settings Screen Parameter Description Port The number of the port for which GMRP is to be Enabled or Disabled ...

Page 351: ...uration menu to specify the trunk on the devices at both ends When using a port trunk note that The ports used in a trunk must all be of the same media type RJ 45 100 Mbps fiber or 1000 Mbps fiber The ports that can be assigned to the same trunk have certain other restrictions see below Ports can only be assigned to one trunk The ports at both ends of a connection must be configured as trunk ports...

Page 352: ...oving a port trunk to avoid creating a data loop Use the Port Trunking Configuration screen to set up port trunks as shown below Figure 7 53 Link Aggregation Screen Parameter Description Group The switch allows up to 6 port trunks groups to be configured The group number identifies each of these groups Master Port The port of the trunk group whose configuration speed full or half duplex etc will b...

Page 353: ...nel module ports 25 and 26 can be configured as a trunk group BOOTP DHCP Relay BOOTP DHCP relay enables end stations to use a BOOTP or DHCP server to obtain TCP IP configuration information or boot files to be loaded into memory even if the servers are not on the local IP interface If the BOOTP or DCHP server and end station are on the same IP interface no relay is necessary If the servers and the...

Page 354: ...irst task is to set some parameters for the relay agent to decide whether or not to forward a given BOOTP DCHP packet Figure 7 54 BOOTP DHCP Relay Screen Parameter Description BOOTP DHCP Relay Status Allows the BootP DHCP relay function to be Enabled or Disabled BOOTP HOPS Count Limit Allows the maximum number of hops routers that the BootP messages can be relayed through to be set If a packet s h...

Page 355: ...ds field of the packet is less than the relay time threshold the packet will be dropped The range is between 1 and 9999 seconds The default value is 4 seconds Static Bootp Relay Setup The second task is to tell the BOOTP DCHP relay agent where the servers are located in terms of IP addresses and subnet names IP interface names The following figure and table describe how to set up the static Bootp ...

Page 356: ...ame IP interface name of the network that the BOOTP server is located on Relay Server The IP address of the BOOTP relay server Multiple servers may be entered for a given subnet name IP interface name Relay Server Displays the entered IP address of the BOOTP relay server for the corresponding subnet Remove Click on the icon to remove the entry from the table ...

Page 357: ...lay agent is necessary for the switch to forward the messages The relay agent forwards these packets between IP interfaces and therefore must know the IP addresses of the DNS servers and their respective subnet names or IP interface names When the switch receives packets destined for a DNS server it forwards them to specific servers as defined in the following configuration The switch also forward...

Page 358: ...dress of a secondary DNS server DNS Relay Cache Status Allows the DNS cache on the switch to be Enabled or Disabled DNS Static Table Lookup Allows the DNS Static Table Lookup function on the switch to be Enabled or Disabled Static DNS Table The second task is to tell the DNS relay agent where the servers are located in terms of IP addresses and subnet names IP interface names The following figure ...

Page 359: ...eter Description Domain Name The subnet name IP interface name of the network that the BOOTP server is located on IP Address The IP address of the BOOTP relay server Multiple servers may be entered for a given subnet name IP interface name State Displays the entered IP address of the BOOTP relay server for the corresponding subnet ...

Page 360: ...ed Port Packet Analysis Figure 7 58 Port Packet Analysis Screen Parameter Description Update Interval The interval in seconds that the table will be updated The default is Suspend Frame Size Type The size in octets bytes of frames transferred through the switch Frames The total number of frames transferred through the switch of the corresponding size indicated ...

Page 361: ...Description Update Interval The interval in seconds that the table is updated The default is Suspend Rx Received packets CRC Error For 10 Mbps ports the counter records CRC errors FCS or alignment errors For 100 Mbps ports the counter records the sum of CRC errors and code errors frames received with rxerror signal Undersize The total number of frames received that were less than 64 octets long ex...

Page 362: ... FCS octets and had either an FCS or an alignment error Drop Pkts The total number of events in which packets were dropped due to a lack of resources Tx Transmitted packets ExDefer The number of frames for which the first transmission attempt on a particular interface was delayed because the medium was busy CRC Error For 10 Mbps ports the counter records CRC errors FCS or alignment errors For 100 ...

Page 363: ... collisions Single Coll Single Collision Frames The number of successfully transmitted frames for which transmission is inhibited by more than one collision Coll An estimate of the total number of collisions on this network segment Port Utilization Statistics The following figure and table describe the port utilization statistics compiled by the switch s management agent ...

Page 364: ...ay Ethernet Switch User s Guide 348 Web Based Network Management Figure 7 59 Port Utilization Screen Parameter Description Update Interval The interval in seconds that the chart is updated The default is Suspend ...

Page 365: ...ed Network Management 349 Address Table The following figures and tables describe how to browse the switch s address tables Browse MAC Address Table WebView allows the switch s MAC address table sometimes referred to as a forwarding table to be viewed ...

Page 366: ...VLAN the port is a member of MAC Address The MAC address entered into the address table Port The port that the MAC address above corresponds to Learned How the switch discovered the MAC address The possible entries are Dynamic Self and Static Browse IP Address Table WebView allows the IP address table sometimes referred to as a forwarding table to be viewed ...

Page 367: ... the IP Interface corresponding to the IP address below IP Address The IP address corresponding to the IP interface name above Port The port the IP interface is attached to Learned How the switch discovered the IP interface The possible entries are Dynamic and Static Browse the Routing Table WebView allows the switch s routing table to be viewed ...

Page 368: ...splays the subnet mask corresponding to the above destination IP address Gateway Displays the default or next hop gateway to reach the destination Jump Click the Jump button to go to a particular combination of destination IP address subnet mask and gateway address Interface Name Displays the IP interface name the destination resides on Hops Displays the number of hops routers between the switch a...

Page 369: ...e by the link to the destination Browse the ARP Table WebView allows the Address Resolution Protocol ARP table compiled by the switch to be viewed The ARP table allows the switch to relate often used IP addresses to MAC addresses quickly and without having to make ARP requests Figure 7 63 ARP Table Parameter Description ...

Page 370: ...of the ARP table If the specified IP address is present in the ARP table then it will be the first entry of the displayed table Interface Name The IP interface name corresponding to the IP address below Interface IP Address The interface IP address sometimes referred to as a network address corresponding to the IP address below IP Address The IP address that corresponds to the MAC address below MA...

Page 371: ...355 Applications The following figures and tables describe the applications available when using the web based manager Switch History The web based manager allows the switch s history log as compiled by the switch s management agent to be viewed Figure 7 64 Switch History ...

Page 372: ... would have a connection to a WAN or to the Internet Establishing a router port allows multicast packets coming from the router to be propagated throughout the network as well as allowing multicast messages coming from the network to be propagated to the attached router The purpose of a router port is to enable UDP multicast packets and IGMP multicast group membership messages to reach a multicast...

Page 373: ... VID to be specified to search the router port table with Jump Click the Jump button to search the router port table using the VID entered above Port Members Ports that are router ports both statically and dynamically assigned D dynamic router port Ports that are dynamically assigned as router ports Browse IGMP Snooping Table The switch s IGMP snooping table can be browsed using WebView The table ...

Page 374: ... to be displayed View Click on the View button to display the IGMP Snooping Table for the current VID Multicast Group The IP address of a multicast group learned by IGMP snooping Mac Address The corresponding MAC address learned by IGMP snooping Port Map Displays the ports that have forwarded multicast packets from the above source Reports The number of IGMP reports for the listed source ...

Page 375: ...nd a multicast source IP address subnet mask Figure 7 67 IP Multicast Forwarding Table Parameter Description Multicast Group The IP address of a multicast group used in combination with the source IP address and the corresponding subnet mask to search the IP multicast forwarding table for a specific entry SourceIP The IP address of a multicast source used in combination with the multicast group IP...

Page 376: ...c entry Jump Click on the Jump button to search the IP multicast forwarding table for the above specified entry UpStream Neighbor Displays the IP address of the next hop router between the multicast group and the source Ttl Displays the Time To Live value of packets from the multicast source in hops If mprot Displays the multicast routing protocol used by the current source Browse IGMP Table The f...

Page 377: ...ast group IP address Start Multicast Group Allows the IGMP table to be searched using a combination of an IP interface name and a Multicast group IP address Jump Click on the Jump button to search the IGMP table for the IP interface name Multicast group IP address combination entered above Browse DVMRP Routing Table The following figure and table describe how to browse the switch s DVMRP routing t...

Page 378: ...ination entered above Next Hop Router Displays the IP address of the next hop router for the source address Hops Displays the number of hops routers between the multicast group member and the switch Learned Displays how the switch discovered the source address The possibilities are Static and Dynamic Interface Name The IP interface name of the source address Utilities Trivial File Transfer Protoco...

Page 379: ...ver must be on the same IP subnet as the switch The following figure and table describe how to update the switch s firmware from a server Figure 7 70 Update Firmware from Server Screen Parameter Description Server IP Address The IP address of the TFTP server File Name The full file name including path of the new firmware file on the TFTP server Configuration Files A configuration file can be downl...

Page 380: ...P address of the TFTP server File Name The full file name including path of the configuration file on the TFTP server Save Switch Settings to a TFTP Server The switch s current settings san be uploaded to a TFTP Server by the switch s management agent Figure 7 72 Save Settings to TFTP Server Screen Parameter Description Server IP Address The IP address of the TFTP server ...

Page 381: ...ure 7 73 Save Switch History to TFTP Server Parameter Description Server IP Address The IP address of the TFTP server File Name The full file name including path of the history file on the TFTP server Reset The following menu is used to restart reboot the switch Click on Yes to save the current switch configuration to non volatile RAM flash RAM or No if you want to restart the switch using the las...

Page 382: ...llowing menu is used to restart the switch using only the configuration that was supplied by the factory A factory reset returns all configuration options to their default values and restores the switch s configuration to the factory settings All user entered configuration information will be lost Figure 7 75 Factory Reset Screen ...

Page 383: ...e Web Based Network Management 367 Click Yes if you want the switch to retain its current IP address Click No to reset the switch s IP address to the factory default 10 90 90 90 Click the Reset to Factory Default button to restart the switch ...

Page 384: ...hernet IEEE 802 3u 100BASE TX Fast Ethernet IEEE 802 3z 1000BASE SX Gigabit Ethernet IEEE 802 1 P Q VLAN IEEE 802 3x Full duplex Flow Control ANSI IEEE 802 3 Nway auto negotiation Protocols CSMA CD Data Transfer Rates Ethernet Fast Ethernet Gigabit Ethernet Half duplex Full duplex 10 Mbps 20Mbps 100Mbps 200Mbps n a 2000Mbps Topology Star ...

Page 385: ...ypes use MTRJ or SC optical connector Number of Ports 24 x 10 100 Mbps NWay ports 2 Gigabit Ethernet optional Physical and Environmental AC inputs 100 240 VAC 50 60 Hz internal universal power supply Power Consumption 40 watts maximum DC fans 2 built in 40 x 40 x10 mm fan Operating Temperature 0 to 50 degrees Celsius Storage Temperature 25 to 55 degrees Celsius Humidity Operating 5 to 95 RH non co...

Page 386: ...8 BSMI CNS 13438 Safety UL CSA CE Mark TUV GS UL 1950 CSA22 2 No 950 IEC 950 CB TUV EN60950 Performance Transmission Method Store and forward RAM Buffer 16 MB per device Filtering Address Table 8K MAC address per device Packet Filtering Forwarding Rate Full wire speed for all connections 148 800 pps per port for 100Mbps 1 488 000 pps per port for 1000Mbps MAC Address Learning Automatic update Forw...

Page 387: ...ed crossover cable is necessary Please review these products for matching cable pin assignment The following diagram and table show the standard RJ 45 receptacle connector and their pin assignments for the switch to network adapter card connection and the straight crossover cable for the Switch to switch hub bridge connection Figure B 1 The standard RJ 45 receptacle connector ...

Page 388: ... used 5 Not used 6 Rx receive 7 Not used 8 Not used Table B 1 The standard Category 3 cable RJ 45 pin assignment The following shows straight cable and crossover cable connection Figure B 2 Straight cable for Switch uplink MDI II port to switch Hub or other devices connection Figure B 3 Crossover cable for Switch MDI X port to switch hub or other network devices MDI X port connection ...

Page 389: ...and to set the IP address subnet mask and default gateway for the switch The file being uploaded can be either new Runtime switching software or a switch settings file which was previously saved on the TFTP server using the Save settings to TFTP Server option in the System Utilities menu The IP address settings defined in the configuration file will override all other IP settings even those define...

Page 390: ...Disable Configuration file name None Firmware file name None Out of band baud rate 9600 RS232 mode Console IP address 10 90 90 90 Subnet mask 255 0 0 0 Default Gateway 0 0 0 0 BootP service Disable TFTP server IP address 0 0 0 0 IGMP Snooping Disable Console time out 10 min User name None Password None Device STP Enable Port STP Enable Port enable Enable Bridge max age 20 secs Bridge hello time 2 ...

Page 391: ...ty 32768 Port STP cost 19 Gigabit 4 Port STP priority 128 Forwarding table aging time 300 secs Nway Enable Flow control Disable Broadcast storm rising threshold 128Kpps Community string public private VLAN mode IEEE 802 1Q SNMP VLAN 802 1Q 1 Default port VID 1 Ingress rule checking Disable Mirror disable ...

Page 392: ...here it receives BPDUs and passes them to the switch s CPU BPDU packets from the CPU are processed If no BPDUs that suggest the port should go to the blocking state are received The port waits for the expiration of the forward delay timer It then moves to the learning state In the learning state the port learns station location information from the source address of packets and adds this informati...

Page 393: ...determine which switch in the network is the best choice for the root switch If there is only one switch on the network no BPDU exchange occurs the forward delay timer expires and the ports move to the listening state All STP enabled ports enter the blocking state following switch boot A port in the blocking state does the following Discards packets received from the network segment to which it is...

Page 394: ...24 port NWay Ethernet Switch User s Guide 378 Understanding and Troubleshooting the Spanning Tree Protocol ...

Page 395: ...g state but should return to the blocking state that is a different port is a better choice There is no address learning or packet forwarding from a port in the listening state A port in the listening state does the following Discards frames received from the network segment to which it is attached Discards packets sent from another port on the switch for forwarding Does not add addresses to its f...

Page 396: ...24 port NWay Ethernet Switch User s Guide 380 Understanding and Troubleshooting the Spanning Tree Protocol ...

Page 397: ...arning state from the listening state A port in the learning state does the following Discards frames received from the network segment to which it is attached Discards packets sent from another port on the switch for forwarding Adds addresses to its forwarding database Receives BPDUs and directs them to the CPU Processes and transmits BPDUs received from the CPU Receives and responds to network m...

Page 398: ...24 port NWay Ethernet Switch User s Guide 382 Understanding and Troubleshooting the Spanning Tree Protocol ...

Page 399: ...e learning state when the forward delay timer expires A port in the forwarding state does the following Forwards packets received from the network segment to which it is attached Forwards packets sent from another port on the switch for forwarding Incorporates station location information into its address database Receives BPDUs and directs them to the system CPU Receives and responds to network m...

Page 400: ...24 port NWay Ethernet Switch User s Guide 384 Understanding and Troubleshooting the Spanning Tree Protocol ...

Page 401: ... is virtually non operational A disabled port does the following Discards packets received from the network segment to which it is attached Discards packets sent from another port on the switch for forwarding Does not add addresses to its forwarding database Receives BPDUs but does not direct them to the system CPU Does not receive BPDUs for transmission from the system CPU Receives and responds t...

Page 402: ...24 port NWay Ethernet Switch User s Guide 386 Understanding and Troubleshooting the Spanning Tree Protocol ...

Page 403: ...should be in the blocking state but is forwarding packets In this example B has been elected as the designated bridge and port 2 on C is in the blocking state The election of B as the designated bridge is determined by the exchange of BPDUs between B and C B had a better BPDU than C B continues sending BPDUs advertising its superiority over the other bridges on this LAN Should C fail to receive th...

Page 404: ...umstances in which the STA can fail mostly related to the loss of a large number of BPDUs These situations will cause a port in the blocking state to transition to the forwarding state Full Half Duplex Mismatch A mismatch in the duplex state of two ports is a very common configuration error for a point to point link If one port is configured as a full duplex and the other port is left in auto nego...

Page 405: ...ccessing the link B will then start sending packets even if A is using the link A will then detect collisions and begin to run the flow control algorithm If there is enough traffic between B and A all packets including BPDUs will be dropped If the BPDUs sent from A to B are dropped for longer than the MAX AGE B will lose its connection to the root A and will unblock its connection to C This will l...

Page 406: ...forwarding state If the failure exists at boot STP will not converge and rebooting the bridges will have no effect Note Rebooting would help temporarily in the previous example This type of failure is difficult to detect because the Link state LEDs for Ethernet links rely on the transmit side of the cable to detect a link If a unidirectional failure on a link is suspected it is usually required to...

Page 407: ...eliant upon the speed of the CPU and other factors to converge If the CPU is over utilized it is possible that BPDUs may not be sent in a timely fashion STP is generally not very CPU intensive and is given priority over other processes so this type of error is rare It can be seen that very low values for the MAX AGE and the FORWARD DELAY can result in an unstable spanning tree The loss of BPDUs ca...

Page 408: ...le will give unusually high values in this case The priority for most cases is to restore connectivity as soon as possible The simplest remedy is to manually disable all of the ports that provide redundant links Disabling ports one at a time and then checking for a restoration of the user s connectivity will identify the link that is causing the problem if time allows Connectivity will be restored...

Page 409: ...or each VLAN know which ports should be blocking in a stable network A network diagram that shows each physical loop in the network and which ports break which loops is extremely helpful Minimize the number of ports in the blocking state A single blocking port transitioning to the forwarding state at an inappropriate time can cause a large part of a network to fail Limiting the number of blocked p...

Page 410: ...e redundant links to the backbone switches A and B using trunks Trunks by default carry all the VLAN traffic from VLAN 1 and VLAN 2 So switch C is not only receiving traffic for VLAN 1 but it is also receiving unnecessary broadcast and multicast traffic for VLAN 2 It is also blocking one port for VLAN 2 Thus there are three redundant paths between switches A and B ...

Page 411: ...anding and Troubleshooting the Spanning Tree Protocol 395 and two blocked ports per VLAN This increases the chance of a data loop In this example the VLAN definitions are extended to switches A and B This gives only a single blocked port per VLAN and ...

Page 412: ... The IP routing operational mode of the DES 3326 Layer 3 switch can accomplish the following Building a forwarding table and exchanging information with its peers using routing protocols Receiving packets and forwarding them to the correct interface based upon their destination address With layer 3 switching there is no performance penalty to introducing a routing hop and creating an additional se...

Page 413: ...itches and IP routing eliminates the need for STP port blocking because the packets are routed by destination addresses The link redundancy remains and relying on the routing protocols gives a faster convergence than with STP The drawback is that the introduction of layer 3 switching usually requires a new addressing scheme ...

Page 414: ...24 port NWay Ethernet Switch User s Guide 398 Understanding and Troubleshooting the Spanning Tree Protocol ...

Page 415: ...OF BITWISE LOGICAL OPERATIONS AND The logical AND operation compares 2 bits and if they are both 1 then the result is 1 otherwise the result is 0 0 1 0 0 0 1 0 1 OR The logical OR operation compares 2 bits and if either or both bits are 1 then the result is 1 otherwise the result is 0 0 1 0 0 1 1 1 1 XOR ...

Page 416: ...ive OR operation compares 2 bits and if exactly one of them is a 1 then the result is 1 otherwise the result is 0 0 1 0 0 1 1 1 0 NOT The logical NOT operation simply changes the value of a single bit If it is a 1 the result is 0 if it is a 0 the result is 1 This operation is carried out on a single bit 0 1 1 0 ...

Page 417: ...e of 54 Applications 373 APPLY 156 ARP Table 295 Auto polarity detection 23 Automatic learning 55 auto negotiate 22 B Baud Rate 177 BOOTP protocol 173 Bootp Relay 295 BOOTP server 173 BOOTP DHCP Relay 358 Bridge Forward Delay 65 Bridge Hello Time 64 242 Bridge Max Age 64 241 Bridge MIB RFC 1268 26 Bridge Priority 64 242 321 broadcast domains 74 Broadcast storms 87 Broadcast Multicast Storm Mode 30...

Page 418: ...oot 324 CRC Error 365 366 Create Modify User Accounts 165 crossover cable 43 Crossover cable 390 D Data filtering 24 Data filtering rate 24 Data forwarding 24 Data forwarding rate 23 Default Gateway 174 287 Designated Root Bridge 324 Diagnostic port 22 Dimensions 387 D Link proprietary MIB 26 DNS Relay 295 Drop Pkts 366 DVMRP 311 DVMRP Incld Report 312 DVMRP Settings 294 343 Dynamic filtering 55 E...

Page 419: ... IP Address Filtering 294 IP Addresses and SNMP Community Names 47 IP Configuration 172 299 J Jabbers 366 Join Prune Interval 345 L Last Topology Change 324 Late Coll 366 Layer 2 Switch Settings 293 308 Layer 3 IP Routing Protocol Settings 293 311 LED Indicators 39 load balancing 70 log in 165 Logging on 157 M MAC Address Aging Time 309 MAC address filtering 56 MAC Address Forwarding 294 MAC Addre...

Page 420: ...P Settings 354 Port GVRP Settings 294 353 Port Ingress Filter 294 352 Port Mirroring Settings 294 Port Packet Analysis294 364 Port Priority 65 244 326 Port Trunking 68 355 Port Utilization 294 Port Utilization Statistics 367 Port VLAN ID PVID 294 351 port based VLANs 74 ports 22 Power 39 Power Consumption 387 Priority 291 334 R RAM 161 283 RAM Buffer 388 Rear Panel 35 36 refresh 157 Restart System...

Page 421: ...nfiguration 319 Static Default Routes 327 Static Default Routes Add328 Static ARP 329 Static ARP Add 330 Static Bootp Relay Setup295 360 Static Router Port Settings 294 346 Static Default Routes 294 Statistics 292 363 Status 326 Storage Temperature 387 Store and forward switching 23 STP 291 STP Port Settings 294 325 STP Switch Settings 294 straight cable 390 Subnet Mask 174 Super User 160 282 Swit...

Page 422: ...STRALASIA Unit 16 390 Eastern Valley Way Roseville NSW 2069 Australia TEL 61 2 9417 7100 FAX 61 2 9417 1077 TOLL FREE 1800 177 100 Australia 0800 900900 New Zealand WEB www dlink com au E MAIL info dlink com au CANADA D LINK CANADA 2180 Winston Park Drive Oakville Ontario L6H 5W1 Canada TEL 1 905 829 5033 FAX 1 905 829 5223 WEB www dlink ca FTP ftp dlinknet com E MAIL techsup dlink ca CHILE D LINK...

Page 423: ...IL info dlink com sg SWEDEN D LINK SWEDEN World Trade Centre P O Box 70396 107 24 Stockholm Sweden TEL 46 8 700 6211 FAX 46 8 219 640 E MAIL info dlink se TAIWAN D LINK TAIWAN 2F No 119 Pao Chung Road Hsin Tien Taipei Taiwan TEL 886 2 2910 2626 FAX 886 2 2910 1515 WEB www dlinktw com tw U K D LINK EUROPE D Link House 6 Garland Road Stanmore London HA7 1DP U K TEL 44 181 235 5555 FAX 44 181 235 550...

Page 424: ...g system s does your organization use D Link LANsmart Novell NetWare NetWare Lite SCO Unix Xenix PC NFS 3Com 3 Open Banyan Vines DECnet Pathwork Windows NT Windows NTAS Windows 95 Others__________________________________________ 5 What network management program does your organization use D View HP OpenView Windows HP OpenView Unix SunNet Manager Novell NMS NetView 6000 Others_____________________...

Page 425: ......

Search results

Summary of Contents for DES-3326

Reviews:

D-Link DES-3326, User Manual, Page: 226 / 425

Search results

Summary of Contents for DES-3326

Reviews: