D-Link DES-1228/ME Скачать руководство пользователя страница 1

Страница: 1 / 267

User Manual

Product Model :

DES-1228/ME

Managed 10/100Mbps Metro Ethernet Switch

Release 1

Содержание DES-1228/ME

Страница 2: ...ritten permission of D Link Corporation is strictly forbidden Trademarks used in this text D Link and the D LINK logo are trademarks of D Link Corporation Microsoft and Windows are registered trademar...

Страница 3: ...orts 5 Installing the SFP ports 6 Installation 7 Package Contents 7 Before You Connect to the Network 7 Installing the Switch without the Rack 8 Installing the Switch in a Rack 8 Mounting the Switch i...

Страница 4: ...nostics 39 Port Mirroring 41 System Log Settings 42 Log Settings 44 SNTP Settings 45 Time Settings 45 Time Zone and DST 46 MAC Notification Settings 48 Global Settings 48 Port Settings 48 TFTP Service...

Страница 5: ...P Instance Settings 98 MSTP Port Information 99 Loopback Detection Settings 101 LLDP 102 LLDP Global Settings 102 Basic LLDP Port Settings 104 802 1 Extension LLDP Port Settings 105 802 3 Extension LL...

Страница 6: ...Authentication 156 802 1X 157 802 1X Authenticator Settings 164 Local Users 167 802 1X Capability Settings 168 Configure 802 1X Guest VLAN 168 RADIUS Server 169 Trusted Host 171 Access Authentication...

Страница 7: ...205 Gratuitous ARP Settings 207 Session Table 208 Port Access Control 208 RADIUS Authentication 208 RADIUS Accounting 210 Reset 211 Reboot System 212 Save Changes 212 Logout 213 Technical Specificatio...

Страница 8: ...gine SNMP Manager Forwarding Filtering and SMTP Service Section 7 Layer 2 Features A discussion of Layer 2 features of the Switch including VLAN Trunking IGMP Snooping Spanning Tree Loopback Detection...

Страница 9: ...ames and commands For example use the copy command Boldface Typewriter Font Indicates commands and responses to prompts that must be typed exactly as printed in the manual Initial capital letter Indic...

Страница 10: ...ly with approved equipment Allow the product to cool before removing covers or touching internal components Operate the product only from the type of external power source indicated on the electrical...

Страница 11: ...component refers to any system as well as to various peripherals or supporting hardware Before working on the rack make sure that the stabilizers are secured to the rack extended to the floor and that...

Страница 12: ...onents inside your system To prevent static damage discharge static electricity from your body before you touch any of the electronic components such as the microprocessor You can do so by periodicall...

Страница 13: ...port IEEE 802 1X Port based and Host based Access Control IEEE 802 1Q VLAN IEEE 802 1D Spanning Tree IEEE 802 1w Rapid Spanning Tree and IEEE 802 1s Multiple Spanning Tree support Access Control List...

Страница 14: ...thernet port maximum 148 810 packet sec on 100Mbps Fast Ethernet port and 1 488 100 for each Gigabit port Full and half duplex for both 10Mbps and 100Mbps connections Full duplex allows the switch por...

Страница 15: ...EM 314GT 1000BASE LH DEM 315GT 1000BASE ZX DEM 210 Single Mode 100BASE FX DEM 211 Multi Mode 100BASE FX WDM Transceiver Supported DEM 330T TX 1550 RX 1310nm up to 10km Single Mode DEM 330R TX 1310 RX...

Страница 16: ...reception or transmission i e Activity Act of data occurring at a Fast Ethernet connected port Solid Amber When there is a secure 10Mbps Ethernet connection or link at any of the ports Blinking Amber...

Страница 17: ...228 ME Rear Panel Description The rear panel of the Switch contains an AC power connector The AC power connector is a standard three pronged connector that supports the power cord Plug in the female c...

Страница 18: ...00BASE T copper ports provided and Mini GBIC ports optional See the diagram below to view the two Mini GBIC port modules being plugged into the Switch Please note that although these two front panel m...

Страница 19: ...abit link that may span great distances These SFP ports support full duplex transmissions have auto negotiation and can be used with the DEM 310GT 1000BASE LX DEM 311GT 1000BASE SX DEM 210 Single Mode...

Страница 20: ...Install the Switch on a sturdy level surface that can support at least 4 24kg 9 35lbs of weight Do not place heavy objects on the Switch The power outlet should be within 1 82 meters 6 feet of the Swi...

Страница 21: ...gh ventilation space between the Switch and any other objects in the vicinity Figure 2 1 Prepare Switch for installation on a desktop or shelf Installing the Switch in a Rack The Switch can be mounted...

Страница 22: ...nto the power connector of the Switch and the other end into the local power source outlet After the Switch is powered on the LED indicators will momentarily blink This blinking of the LED indicators...

Страница 23: ...e End nodes include PCs outfitted with a 10 100 or 1000 Mbps RJ 45 Ethernet Fast Ethernet Network Interface Card NIC and most routers An end node can be connected to the Switch via a twisted pair Cate...

Страница 24: ...e connected to the Switch via a twisted pair Category 5 UTP STP cable A 1000BASE T switch can be connected to the Switch via a twisted pair Category 5e UTP STP cable A switch supporting a fiber optic...

Страница 25: ...gent decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database The SNMP agent updates the MIB objects to generate statistics and counters Connecting the Conso...

Страница 26: ...Make sure the terminal or PC you are using to make this connection is configured to match these settings If you are having problems making this connection on a PC make sure the emulation is set to VT...

Страница 27: ...1228 ME 4 Figure 4 2 Command Prompt NOTE The first user automatically gets Administrator level privileges It is recommended to create at least one Admin level user account for the Switch Password Pro...

Страница 28: ...ME supports SNMP versions 1 2c and 3 You can specify which version of SNMP you want to use to monitor and control the Switch The three versions of SNMP vary in the level of security provided between...

Страница 29: ...ts own IP Address which is used for communication with an SNMP network manager or other TCP IP application for example BOOTP TFTP The Switch s default IP address is 10 90 90 90 You can change the defa...

Страница 30: ...dress xxx xxx xxx xxx z Where the x s represent the IP address to be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation The IP interfac...

Страница 31: ...universal access tool and can communicate directly with the Switch using the HTTP protocol The Web based management module and the Console program and Telnet are different ways to access the same inte...

Страница 32: ...configuration and management windows allows you to view performance statistics and permits you to graphically monitor the system status Areas of the User Interface The figure below shows the user int...

Страница 33: ...control depending on the specified mode Various areas of the graphic can be selected for performing management functions including port configuration Area 3 Presents switch information based on your...

Страница 34: ...Tree Loopback Detection and LLDP CoS Contains windows concerning Port Bandwidth 802 1P Default Priority 802 1P User Priority CoS Scheduling Mechanism CoS Output Scheduling Priority Settings TOS Prior...

Страница 35: ...P Address Port Configuration DHCP BOOTP Relay User Accounts Cable Diagnostics Port Mirroring System Log Settings Log Settings SNTP Settings MAC Notification Settings TFTP Services Multiple Image Servi...

Страница 36: ...t Tool folder The Device Information window shows the Switch s MAC Address assigned by the factory and unchangeable the Boot PROM Firmware Version Hardware Version and Serial Number This information i...

Страница 37: ...tion is Enabled by default If you do not want to allow configuration of the system through Telnet choose Disabled Telnet TCP Port Number 1 65535 The TCP port number TCP ports are numbered between 1 an...

Страница 38: ...plaintext form Click Apply to implement changes made IP Address The IP address may initially be set using the console interface prior to connecting to it through the Ethernet If the Switch IP address...

Страница 39: ...network and 255 255 255 0 for a Class C network but custom subnet masks are allowed Default Gateway IP address that determines where packets with a destination address outside the current subnet shoul...

Страница 40: ...nd Line Interface CLI over the console serial port as follows Starting at the command line prompt enter the commands config ipif System ipaddress xxx xxx xxx xxx yyy yyy yyy yyy where the x s represen...

Страница 41: ...nd flow control Port Settings Click Administration Port Configuration Port Settings to display the following window To configure switch ports 1 Choose the port or sequential range of ports using the F...

Страница 42: ...ies related to duplex speed and physical layer type The master setting will also determine the master and slave relationship between the two connected physical layers This relationship is necessary fo...

Страница 43: ...pports a port description feature where the user may name various ports on the Switch To assign names to various ports click Administration Port Configuration Port Description to view the following wi...

Страница 44: ...e port whether Enabled or Disabled Connection This field will show if a port has been disabled due to an error detected in the port Reason Describes the reason why the port has been error disabled suc...

Страница 45: ...an be toggled between Enabled and Disabled using the pull down menu It is used to enable or disable the DHCP Agent Information Option 82 on the Switch The default is Disabled Enabled When this field i...

Страница 46: ...sts in the packet received from the DHCP client Drop The packet will be dropped if the option 82 field already exists in the packet received from the DHCP client Keep The option 82 field will be retai...

Страница 47: ...sub option format 1 Sub option type 2 Length 3 Circuit ID type 4 Length 5 VLAN the incoming VLAN ID of DHCP client packet 6 Module For a standalone switch the Module is always 0 For a stackable switc...

Страница 48: ...ay DHCP BOOTP Relay Interface Settings Figure 6 7 DHCP BOOTP Relay Interface Settings and DHCP BOOTP Relay Interface Table window The following parameters may be configured or viewed Parameter Descrip...

Страница 49: ...DES 1228 ME Layer 2 Fast Ethernet Managed Switch 36 Figure 6 8 DHCP Local Relay Settings window...

Страница 50: ...y to implement changes made User Accounts Use the User Account Management window to control user privileges To view existing User Accounts open the Administration folder and click on the User Accounts...

Страница 51: ...password type in the New Password and retype it in the Confirm New Password entry field The level of privilege Admin or User can be viewed in the Access Right field The last option here is called Encr...

Страница 52: ...sted Type FE ports have two pairs of cable will be diagnosed GE ports have four pairs of cable that will be diagnosed Link Status Link Up When a port is in link up status the test will be able to dete...

Страница 53: ...or Crosstalk Open means that the cable in the error pair does not have a connection at the specified position Short means that the cable in the error pair has a short problem at the specified position...

Страница 54: ...port 1 Select the Source Port from where you want to copy frames and the Target Port which receives the copies from the source port 2 Select the Source Direction Ingress Egress or Both and change the...

Страница 55: ...ameters can be set Parameter Description Index Syslog server settings index 1 4 Host IP The IP address of the Syslog server Severity This drop down menu allows you to select the level of messages that...

Страница 56: ...use 0 local0 local use 1 local1 local use 2 local2 local use 3 local3 local use 4 local4 local use 5 local5 local use 6 local6 local use 7 local7 UDP Port 514 or 6000 65535 Type the UDP port number u...

Страница 57: ...following window Figure 6 17 Log Settings window The following parameters can be set Parameter Description Log Mode Use this drop down menu to choose the method that will trigger a log entry You can...

Страница 58: ...ttings Enabling and configuring SNTP support will override any manually configured system time settings SNTP Primary Server This is the IP address of the primary server the SNTP information will be ta...

Страница 59: ...nistration folder then the SNTP Settings folder and click on the Time Zone and DST link revealing the following window Figure 6 19 Time Zone and DST Settings window The following parameters can be set...

Страница 60: ...the time of day that DST will start on To Which Week Enter the week of the month the DST will end To Which Day Enter the day of the week that DST will end To Which Month Enter the month that DST will...

Страница 61: ...tate Enable or disable MAC notification globally on the Switch Interval sec The time in seconds between notifications History Size The maximum number of entries listed in the history log used for noti...

Страница 62: ...ame for the Configuration file on the TFTP server Click Start to record the IP address of the TFTP server and to initiate the file transfer Upload Configuration Enter the IP address of the TFTP server...

Страница 63: ...tion Multiple Image Services Firmware Information This window is used to view boot up firmware images To view this window click Administration Multiple Image Services Firmware Information Figure 6 22...

Страница 64: ...imizing the workload of the Switch while the attack is ongoing thus making it capable to forward essential packets over its network in a limited bandwidth When the Switch either a receives too many pa...

Страница 65: ...seconds Once the flooding is no longer detected the wait period for dropping ARP and IP broadcast packets will return to 5 seconds and the process will resume NOTE While in Exhausted mode only truste...

Страница 66: ...nfigure the acceptable level of CPU utilization as a percentage where the Switch leaves the Exhausted state and returns to normal mode Trap Log Use the pull down menu to enable or disable the sending...

Страница 67: ...nagers that are allowed to view read only information or receive traps using SNMPv1 while assigning a higher level of security to another group granting read write privi leges using SNMPv3 Using SNMPv...

Страница 68: ...this window click Administration SNMP Manager SNMP User Table Figure 6 29 SNMP User Table window To delete an existing SNMP User Table entry click the below the Delete heading corresponding to the en...

Страница 69: ...p Name This name is used to specify the SNMP group created to which the SNMP user will belong SNMP V3 Encryption Checking the corresponding box will enable encryption for SNMP V3 and is only operable...

Страница 70: ...th this table maps SNMP users identified in the SNMP User Table to the views created in the previous window The following parameters can set Parameter Description View Name Type an alphanumeric string...

Страница 71: ...Group Table window To delete an existing SNMP Group Table entry click the corresponding under the Delete heading To display the current settings for an existing SNMP Group Table entry click the hyperl...

Страница 72: ...Priv Specifies that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager AuthNoPriv Specifies that authorization will be required but there wil...

Страница 73: ...at SNMP community members using the community string created can read from and write to the contents of the MIBs on the Switch To implement the new settings click Apply To delete an entry from the SNM...

Страница 74: ...level Community String SNMP V3 User Name Type in the community string or SNMP V3 user name as appropriate To implement your new settings click Apply To return to the SNMP Host Table click the Show Al...

Страница 75: ...elete heading Multicast Forwarding The following figure and table describe how to set up Multicast Forwarding on the Switch To view this window click Administration Forwarding Filtering Multicast Forw...

Страница 76: ...is chosen the port will not be a member of the Static Multicast Group Egress The port is a static member of the multicast group Click Apply to implement the changes made To delete an entry in the Stat...

Страница 77: ...ilter settings will be applied Mode This drop down menu allows you to select the action the Switch will take when it receives a multicast packet that is to be forwarded to one of the ports in the rang...

Страница 78: ...Switch will send out e mail to recipients when one or more of the following events occur When a cold start occurs on the Switch When a port enters a link down status When a port enters a link up statu...

Страница 79: ...ith on the SMTP server The common port number for SMTP is 25 yet a value between 1 and 65535 can be chosen Self Mail Address Enter the e mail address from which mail messages will be sent This address...

Страница 80: ...ervice window The following parameters can be set Parameter Description Subject Enter the subject of the test e mail Content Enter the content of the test e mail Once your message is ready click Send...

Страница 81: ...g function can be used to remove the 802 1Q tag from packet headers to maintain compatibility with devices that are tag unaware The Switch s default is to assign all ports to a single 802 1Q VLAN name...

Страница 82: ...he packet Egress rules determines if the packet must be sent tagged or untagged Figure 7 1 IEEE 802 1Q Packet Forwarding 802 1Q VLAN Tags The figure below shows the 802 1Q VLAN tag There are four addi...

Страница 83: ...cide whether or not to forward the packet If the packet is tagged with VLAN information the ingress port will first determine if the ingress port itself is a member of the tagged VLAN If it is not the...

Страница 84: ...ceive VLAN 2 packets If Port 10 is not a member of VLAN 2 then the packet will be dropped by the Switch and will not reach its destination If Port 10 is a member of VLAN 2 the packet will go through T...

Страница 85: ...s and the set of ports to be separated from the other subsetted VLANs ports 9 16 VLAN V3 is then configured to include ports 1 8 shared ports and the set of ports to be separated from the other subset...

Страница 86: ...click the Show All Static VLAN Entries link To change an existing 802 1Q VLAN entry click the Modify button of the corresponding entry you wish to modify A new window will appear to configure the por...

Страница 87: ...ow All Static VLAN Entries link to return to the 802 1Q Static VLANs window To add a new 802 1Q Static Multiple VLAN by VID List click the Add or Configure VLAN by VID List in the Static VLAN Entry wi...

Страница 88: ...member of the VLAN dynamically Click Apply to implement changes made Click the Show All Static VLAN Entries link to return to the 802 1Q Static VLANs window GVRP Settings The GVRP Settings window sho...

Страница 89: ...llow you to specify the range of ports that will be included in the Port based VLAN that you are creating using this window GVRP The Group VLAN Registration Protocol GVRP enables the port to dynamical...

Страница 90: ...ames will be accepted and Admit_All which mean both tagged and untagged frames will be accepted Admit_All is enabled by default Click Apply to implement changes made NOTE A VLAN group can support 255...

Страница 91: ...a stream to arrive in the same order they were sent NOTE If any ports within the trunk group become disconnected packets intended for the discon nected port will be load shared among the other uplinke...

Страница 92: ...n group If two redundant link aggregation groups are configured on the Switch STP will block one entire group in the same way STP will block a single port that has a redundant link Link Aggregation To...

Страница 93: ...ged Switch 80 Figure 7 13 LACP Port Settings window To configure LACP port trunk settings select a port range using the From and To drop down menus select either Passive or Active Mode and then click...

Страница 94: ...e device to the IGMP host or vice versa The Switch monitors IGMP messages and discontinues forwarding multicast packets when there are no longer hosts requesting that they continue Use the IGMP Snoopi...

Страница 95: ...the membership query is received before the Leave Timer expires the multicast forwarding entry for that host is deleted The default setting is 2 Note The leave timer does not need to be configured as...

Страница 96: ...ch devices are members of a particular multicast group the devices will respond to the query and inform the querier of its membership status RIPv2 multicast Routing Information Protocol Version 2 can...

Страница 97: ...This is the name of the VLAN where the multicast router is attached Port Settings Select the individual ports and settings you wish to apply None No restrictions on the port dynamically becoming a rou...

Страница 98: ...Switch 85 Dynamic IP Multicast Learning To configure the Dynamic IP Multicast Learning Max Entry Settings on the Switch click L2 Features IGMP Snooping Dynamic IP Multicast Learning Figure 7 18 Dynam...

Страница 99: ...st VLANs can be implemented on edge and non edge switches 2 Member ports and source ports can be used in multiple ISM VLANs But member ports and source ports cannot be the same port in a specific ISM...

Страница 100: ...indow VID Add or edit the corresponding VLAN ID of the Multicast VLAN Users may enter a value between 2 and 4094 State Use the pull down menu to enable or disable the selected Multicast VLAN Member Po...

Страница 101: ...trees with a Common and Internal Spanning Tree CIST The CIST will automatically determine each MSTP region its maximum possible extent and will appear as one virtual bridge that runs a single spannin...

Страница 102: ...from adjacent bridges 802 1w RSTP 802 1d STP Forwarding Learning Discarding Disabled No No Discarding Blocking No No Discarding Listening No No Learning Learning No Yes Forwarding Forwarding Yes Yes...

Страница 103: ...ing State If another returning BPDU packet is received the port will remain in a blocked state the timer will reset to the specified value restart and the process will begin again For those who choose...

Страница 104: ...DES 1228 ME Layer 2 Fast Ethernet Managed Switch 91 Figure 7 24 STP Bridge Global Settings window RSTP Figure 7 25 STP Bridge Global Settings window MSTP...

Страница 105: ...40 seconds The default value is 20 Bridge Hello Time 1 2 Sec The Hello Time can be set from 1 to 2 seconds This is the interval between two transmissions of BPDU packets sent by the Root Bridge to tel...

Страница 106: ...t signifies a loop on the network STP will automatically be blocked and an alert will be sent to the administrator The LBD STP port will restart change to discarding state when the Loopback Detection...

Страница 107: ...will be blocked just as redundant links are blocked on the switch level The STP on the switch level blocks redundant links between switches and similar network devices The port level STP will block r...

Страница 108: ...ows the port to have p2p status whenever possible and operate as if the p2p status were true If the port cannot maintain this status for example if the port is forced to half duplex operation the p2p...

Страница 109: ...on Parameter Description Configuration Name A previously configured name set on the Switch to uniquely identify the MSTI Multiple Spanning Tree Instance If a configuration name is not set this field w...

Страница 110: ...ance ID Settings window CIST modify The user may configure the following parameters to configure the CIST on the Switch Parameter Description MSTI ID The MSTI ID of the CIST is 0 and cannot be altered...

Страница 111: ...wishes to add to this MSTI ID Supported VIDs on the Switch range from ID number 1 to 4094 This parameter can only be utilized if the Type chosen is Add or Remove Click Apply to implement changes made...

Страница 112: ...ort Information and can be used to update the port configuration for an MSTI ID If a loop occurs the MSTP function will use the port priority to select an interface to put into the forwarding state Se...

Страница 113: ...t setting is 0 auto There are two options 0 auto Selecting this parameter for the internalCost will set quickest route automatically and optimally for an interface The default value is derived from th...

Страница 114: ...temporarily shutdown a port on the Switch when a CTP Configuration Testing Protocol packet has been looped back to the switch When the Switch detects CTP packets are received from a port it signifies...

Страница 115: ...cifies the necessary protocol and management elements to 1 Facilitate multi vendor inter operability and the use of standard management tools to discover and make available physical topology informati...

Страница 116: ...cates the interval at which LLDP frames are transmitted on behalf of this LLDP agent The default value is 30 seconds Message TX Hold Multiplier 2 10 This parameter is a multiplier that determines the...

Страница 117: ...LLDP Port Settings The following window is used to set up LLDP on individual port s on the Switch To view this window click L2 Features LLDP Basic LLDP Port Settings Figure 7 38 Basic LLDP Port Settin...

Страница 118: ...nged type includes any data update insert remove Admin Status Use the drop down menu to choose TX_Only RX_Only TX_and_RX or Disabled Port Description Use the drop down menu to toggle Port Description...

Страница 119: ...DES 1228 ME Layer 2 Fast Ethernet Managed Switch 106 Figure 7 39 802 1 Extension LLDP Port Settings Table window...

Страница 120: ...n menu to toggle among VLAN ID VLAN Name and All Use the drop down menu to toggle between Enabled and Disabled Protocol Identity Use the drop down menu to toggle among EAPOL LACP GVRP STP and All Use...

Страница 121: ...xtension LLDP Port Settings Table window The following parameters can be set or displayed Parameter Description From To Select a port or group of ports using the pull down menus MAC PHY Use the drop d...

Страница 122: ...drop down menu to toggle Maximum Frame Size between Enabled and Disabled Click Apply to implement changes made LLDP Management Address Settings The following window is used to set up LLDP management a...

Страница 123: ...4 Address type Address Enter the LLDP management address in this field Port State Use the drop down menu to toggle the Port State between Enabled and Disabled Click Apply to implement changes made LLD...

Страница 124: ...ment Address Table window Use the drop down menu to select the type of Management Address enter an IP address in the field provided and then click the Find button LLDP Local Port Table The following w...

Страница 125: ...e The following window is used to display the LLDP Remote Port Brief Table To view this window click L2 Features LLDP LLDP Remote Port Table Figure 7 45 LLDP Remote Port Brief Table window Click the V...

Страница 126: ...ant special consideration The Switch allows you to further tailor how priority tagged data packets are handled on your network Using queues to manage priority tagged data allows you to specify its rel...

Страница 127: ...rrupted stream of packets which optimizes the use of bandwidth available for the video conference Understanding CoS The Switch has four priority classes of service These priority classes of service ar...

Страница 128: ...the same weight value then each CoS queue has an equal opportunity to send packets just like round robin queuing For weighted round robin queuing if the weight for a CoS is set to 1 then it will conti...

Страница 129: ...width The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port To view this window click CoS Port Bandwidth Figure 8 2 Port Bandwid...

Страница 130: ...s drop down menu allows you to specify that the selected port will have no bandwidth limit Enabled disables the limit Rate This field allows you to enter the data rate in Kbit s that will be the limit...

Страница 131: ...t 802 1p priority to any given port on the Switch The priority tags are numbered from 0 the lowest priority to 7 the highest priority To implement a new default priority choose a port range by using t...

Страница 132: ...r Priority window Once you have assigned a priority to the port groups on the Switch you can then assign this Class to each of the four levels of 802 1p priorities Click Apply to set your changes CoS...

Страница 133: ...oS can be customized by changing the output scheduling used for the hardware classes of service in the Switch As with any changes to CoS implementation careful consideration should be given to how net...

Страница 134: ...example if a port has been assigned a MAC priority the packet that has the CoS priority assigned to a MAC address will be sent to the CoS queue configured for that MAC address Once the configuration h...

Страница 135: ...DES 1228 ME Layer 2 Fast Ethernet Managed Switch 122 Figure 8 7 Priority Settings window...

Страница 136: ...ill assign ports to map CoS priorities to MAC addresses TOS Choosing this option will assign ports to map CoS priorities to ToS priorities DSCP Choosing this option will assign ports to map CoS priori...

Страница 137: ...able queues When a packet is received containing this DSCP tag it will be mapped to the CoS queue configured here These settings will only take effect if at least one of the priority settings per port...

Страница 138: ...gress port The frames will be assigned to either the highest queue or the lowest queue Please note the following limitation exists port based CoS only supports mapping to Queue 3 Port mapping Priority...

Страница 139: ...opriate queue to be mapped to this destination MAC address using the following window 3 Once the previous parameters are set users should go to the Priority Settings window located in this folder and...

Страница 140: ...lick ACL Access Profile Table Figure 9 1 Access Profile Table window To add an entry to the Access Profile Table click the Add button This will open the Access Profile Configuration window as shown be...

Страница 141: ...This will change the menu according to the requirements for the type of profile Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header Select IP to instruct the Swit...

Страница 142: ...ill change the menu according to the requirements for the type of profile Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header Select IP to instruct the Switch to e...

Страница 143: ...Specify a TCP port mask for the destination port in hex form hex 0x0 0xffff which you wish to deny Select UDP to use the UDP port number contained in an incoming packet as the forwarding criterion Se...

Страница 144: ...ch packet header IP instructs the Switch to examine the IP address in each frame s header Priority 0 7 This parameter is specified if you want to re write the 802 1p default priority previously set in...

Страница 145: ...ort Number Enter the switch port number s to which you wish this rule to apply To view the settings of a previously correctly configured rule click in the Access Rule Table to view the following windo...

Страница 146: ...rnet instructs the Switch to examine the layer 2 part of each packet header IP instructs the Switch to examine the IP address in each frame s header Priority 0 7 This parameter is specified if you wan...

Страница 147: ...alue Ethernet Type Specifies that the access profile will apply only to packets with this hexadecimal 802 1Q Ethernet type value hex 0x0 0xffff in the packet header The Ethernet type value may be set...

Страница 148: ...do with the frame The entire process is described below CPU Interface Filtering State In the following window the user may globally enable or disable the CPU Interface Filtering mechanism by using th...

Страница 149: ...f each packet header Select IP to instruct the Switch to examine the IP address in each frame s header VLAN Selecting this option instructs the Switch to examine the VLAN identifier of each packet hea...

Страница 150: ...e the IP address in each frame s header VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the criterion or part of the criterion for forwar...

Страница 151: ...which you wish to filter dest port mask Specify a TCP port mask for the destination port in hex form hex 0x0 0xffff which you wish to filter Select UDP to use the UDP port number contained in an inco...

Страница 152: ...cess ID Type in a unique identifier number for this access and priority This value can be set from 1 to 5 Type Selected profile based on Ethernet MAC Address or IP address Ethernet instructs the Switc...

Страница 153: ...view the following window Figure 9 17 CPU Interface Filtering Entry Display window Ethernet The following window is the CPU Interface Filtering Rule Table for IP Figure 9 18 CPU Interface Filtering R...

Страница 154: ...hernet MAC Address or IP address Ethernet instructs the Switch to examine the layer 2 part of each packet header IP instructs the Switch to examine the IP address in each frame s header VLAN Name Allo...

Страница 155: ...DES 1228 ME Layer 2 Fast Ethernet Managed Switch 142 Figure 9 20 CPU Interface Filtering Entry Display window IP...

Страница 156: ...he packet storm is monitored to determine if too many packets are flooding the network based on the threshold level provided by the user Once a packet storm has been detected the Switch will drop pack...

Страница 157: ...dministration folder and selecting the disabled port and returning it to an Enabled status alternatively the user can wait for the auto recovery function which will occur after 5 minutes the auto reco...

Страница 158: ...nd drop packets until the issue is resolved Shut Down Utilizes the Switch s software Traffic Control mechanism to determine the Packet Storm occurring Once detected the port will deny all incoming tra...

Страница 159: ...arding in Spanning Tree windows and implementations though these ports will still be forwarding BPDUs to the Switch s CPU NOTE Ports that are in rest mode will be seen as link down in all windows and...

Страница 160: ...options are Permanent The locked addresses will not age out after the aging timer expires DeleteOnTimeout The locked addresses will age out after the aging timer expires DeleteOnReset The locked addr...

Страница 161: ...ing of the corresponding MAC address to be deleted Only entries marked Secured_Permanent can be deleted Click the Next button to view the next page of entries listed in this table This window displays...

Страница 162: ...aning a user can enable or disable the function on the individual port IMP Global Settings This window is used to enable or disable the Trap Log State on the switch The Trap Log field will enable and...

Страница 163: ...meter Description From Port To Port Select a port or range of ports to set for IP MAC Binding State Use the pull down menu to enable or disable these ports for IP MAC Binding Allow Zero IP Use the pul...

Страница 164: ...ified Parameter Description IP Address Enter the IP address to bind to the MAC address set below MAC Address Enter the MAC address to bind to the IP Address set above Ports Specify the switch ports fo...

Страница 165: ...zed device that has been blocked by the IP MAC binding restrictions enter the VLAN Name and MAC Address in the appropriate fields and click Find To delete an entry click the delete button next to the...

Страница 166: ...witch including specifying a password This password is used to logon to the Switch once a secure communication path has been established using the SSH protocol 2 Configure the User Account to use a sp...

Страница 167: ...will be disconnected and the user must reconnect to the Switch to attempt another login The number of maximum attempts may be set between 2 and 20 The default setting is 2 Session Rekeying Using the...

Страница 168: ...n algorithm with Cipher Block Chaining The default is Enabled AES256 CBC Use the pull down to enable or disable the Advanced Encryption Standard AES 256 encryption algorithm with Cipher Block Chaining...

Страница 169: ...his parameter should be chosen to use the publickey on a SSH server for authentication Host Name Enter an alphanumeric string of no more than 32 characters to identify the remote SSH user This paramet...

Страница 170: ...ated client via SNMP with the Radius command item in auth mib OID 1 3 6 1 4 1 171 12 3 7 by port based or Host based NOTE If the session timeout attribute on the radius server is set the client will b...

Страница 171: ...ure 10 14 The Authentication Server Authenticator The Authenticator the Switch is an intermediary between the Authentication Server and the Client The Authenticator servers two purposes when utilizing...

Страница 172: ...ess and therefore successfully unlocks the port Once unlocked normal traffic is allowed to pass through the port The following figure displays a more detailed explanation of how the authentication pro...

Страница 173: ...ss Control Figure 10 18 Example of Typical Port Based Configuration Once the connected device has successfully been authenticated the Port then becomes Authorized and all subsequent traffic on the Por...

Страница 174: ...ate The Switch learns each attached devices individual MAC addresses and effectively creates a logical Port that the attached device can then use to communicate with the LAN via the Switch NOTE To ena...

Страница 175: ...authenticates successfully the device will not assign a priority to this port If the priority attribute configured on the RADIUS is a value out of range 7 it will not be set to the device Guest VLANs...

Страница 176: ...t undergo this procedure 2 Ports supporting Guest VLANs cannot be GVRP enabled and vice versa 3 A port cannot be a member of a Guest VLAN and a static VLAN simultaneously 4 Once a client has been acce...

Страница 177: ...ings To configure the 802 1X Authenticator Settings click Security 802 1X 802 1X Authenticator Settings Figure 10 21 802 1X Authenticator Settings window To configure the settings by port click on its...

Страница 178: ...authorized is selected the port will remain in the unauthorized state ignoring all attempts by the client to authenticate The Switch cannot provide authentication services to the client through the in...

Страница 179: ...erver The default setting is 30 seconds MaxReq The maximum number of times that the Switch will retransmit an EAP Request to the client before it times out of the authentication sessions The default s...

Страница 180: ...e Switch To view this window click Security 802 1X 802 1X User Figure 10 23 Local Users Configuration window Enter a User Name Password and confirmation of that password Properly configured local user...

Страница 181: ...N the user must first configure a normal VLAN which can be enabled here for Guest VLAN status To configure these settings click Security 802 1X Configure 802 1X Guest VLAN the following window will be...

Страница 182: ...ith an error message Disabled Selecting this option will disable ports listed in the Port List below as part of the Guest VLAN Be sure that these ports are configured for this VLAN or users will be pr...

Страница 183: ...e how many times the device will resend an authentication request when the Radius server timeout occurs The default setting is 2 seconds Succession Choose the desired RADIUS server to configure First...

Страница 184: ...uthentication Control The TACACS XTACACS TACACS RADIUS commands allow users to secure access to the Switch using the TACACS XTACACS TACACS RADIUS protocols When a user logs in to the Switch or tries t...

Страница 185: ...cess to the Switch the Switch will ask the first Authentication Server Hosts for authentication If no authentication is made the second server host in the list will be queried and so on The built in A...

Страница 186: ...onds The default setting is 30 seconds User Attempts 1 255 This command will configure the maximum number of times the Switch will accept authentication attempts Users failing to be authenticated afte...

Страница 187: ...t Method List or other Method List configured by the user See the Enable Method Lists window in this section for more information Click Apply to implement changes made Authentication Server Group This...

Страница 188: ...t Authentication Server Hosts must be configured for their specific protocol on a remote centralized server before this function can work properly NOTE The four built in server groups can only have se...

Страница 189: ...IP address hyperlink revealing the following window Figure 10 35 Authentication Server Host Setting Edit window Configure the following parameters to add an Authentication Server Host Parameter Descri...

Страница 190: ...rity Timeout 1 255 Enter the time in seconds the Switch will wait for the server host to reply to an authentication request The default value is 5 seconds Retransmit 1 255 Enter the value in the retra...

Страница 191: ...local method is used the privilege level will be dependant on the local account privilege configured on the Switch Successful login using any of these techniques will give the user a User privilege o...

Страница 192: ...h Enable Method Lists The Enable Method List Settings window is used to set up Method Lists to promote users with user level privileges to Administrator Admin level privileges using authentication met...

Страница 193: ...Enable Method List click on its hyperlinked Method List Name To configure a Method List click the Add button Both actions will result in the same window to configure Figure 10 40 Enable Method List E...

Страница 194: ...the user to be authenticated using the RADIUS protocol from a remote RADIUS server tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from a remote TACACS...

Страница 195: ...Enabled field will result in a fail message Enable Admin Figure 10 43 Enable Admin window Figure 10 44 Enter Network Password dialog box The Enable Admin window is for users who have logged on to the...

Страница 196: ...of segmenting the flow of traffic is similar to using VLANs to limit traffic but is more restrictive It provides a method of directing traffic that does not increase the overhead of the Master switch...

Страница 197: ...ndow allows the user to determine which port on a given switch will be allowed to forward packets to other ports on that switch To configure traffic segmentation specify a port from that switch using...

Страница 198: ...Snooping Group Browse Router Port VLAN Status Static ARP Settings ARP FDB Gratuitous ARP Settings Session Table Port Access Control CPU Utilization The CPU Utilization displays the percentage of the...

Страница 199: ...ands for seconds The default value is one second Record Number Select number of times the Switch will be polled between 20 and 200 The default value is 200 Show Hide Check whether to display Five Secs...

Страница 200: ...t Parameter Description Time Interval Select the desired setting between 1s and 60s where s stands for seconds The default value is one second Record Number Select number of times the Switch will be p...

Страница 201: ...r use the Port pull down menu The user may also use the real time graphic of the Switch at the top of the web page by simply clicking on a port To view this window click Monitoring Packets Received RX...

Страница 202: ...unts the number of packets received on the port Unicast Counts the total number of good packets that were received by a unicast address Multicast Counts the total number of good packets that were rece...

Страница 203: ...se the Port pull down menu The user may also use the real time graphic of the Switch at the top of the web page by simply clicking on a port To view this window click Monitoring Packets UMB Cast RX Fi...

Страница 204: ...00 Unicast Counts the total number of good packets that were received by a unicast address Multicast Counts the total number of good packets that were received by a multicast address Broadcast Counts...

Страница 205: ...cs for use the Port pull down menu The user may also use the real time graphic of the Switch at the top of the web page by simply clicking on a port To view this window click Monitoring Packets Transm...

Страница 206: ...ckets Counts the number of packets successfully sent on the port Unicast Counts the total number of good packets that were transmitted by a unicast address Multicast Counts the total number of good pa...

Страница 207: ...ys error packets received by the Switch To select a port to view these statistics for select the port by using the Port pull down menu The user may also use the real time graphic of the Switch at the...

Страница 208: ...e Counts packets received that were longer than 1518 octets or if a VLAN frame is 1522 octets and less than the MAX_PKT_LEN Internally MAX_PKT_LEN is equal to 1522 Fragment The number of packets less...

Страница 209: ...lect the port by using the Port pull down menu The user may also use the real time graphic of the Switch at the top of the web page by simply clicking on a port To view this window click Monitoring Pa...

Страница 210: ...LateColl Counts the number of times that a collision is detected later than 512 bit times into the transmission of a packet ExColl Excessive Collisions The number of packets for which transmission fa...

Страница 211: ...are offered To select a port to view these statistics for select the port by using the Port pull down menu The user may also use the real time graphic of the Switch at the top of the web page by simp...

Страница 212: ...8 and 255 octets in length inclusive excluding framing bits but including FCS octets 256 511 The total number of packets including bad packets received that were between 256 and 511 octets in length i...

Страница 213: ...rding table to be viewed When the Switch learns an association between a MAC address and a port number it makes an entry into its forwarding table These entries are then used to forward packets throug...

Страница 214: ...MAC address VID The VLAN ID of the VLAN of which the MAC address above corresponds MAC Address The MAC address entered into the address table Port The port to which the MAC address corresponds Type De...

Страница 215: ...tations and to the PC connected to the console manager Click Next to go to the next page of the Switch History Log Clicking Clear will allow the user to clear the Switch History Log The information is...

Страница 216: ...top left hand corner and clicking Search The user may also delete Data Driven learning entries by entering the VLAN Name and clicking Delete or Delete All Data Driven learning Entries The following p...

Страница 217: ...that is dynamically configured by the Switch is designated by D To view this window click Monitoring Browse Router Port Figure 11 18 Browse Router Port window VLAN Status This window allows the VLAN...

Страница 218: ...n entry select it on the ARP Settings table and click Modify Figure 11 22 Static ARP Settings Edit window ARP FDB This window conveniently allows the user to add entries to the IP MAC Port Binding Tab...

Страница 219: ...23 ARP FDB window To search for information regarding a specific entry enter the appropriate information and click Find The ARP FDB entries will be displayed in the ARP FDB Table to add an entry to th...

Страница 220: ...IPIF status up This is used to enable disable the sending of gratuitous ARP request packets while an IPIF interface comes up This is used to automatically announce the interface s IP address to other...

Страница 221: ...ndows to monitor NOTE The Authenticator State Authenticator Statistics Authenticator Session Statistics and Authenticator Diagnostics windows in this section cannot be viewed on the Switch unless 802...

Страница 222: ...cond between the most recent Access Reply Access Challenge and the Access Request that matched it from this RADIUS authentication server AccessRetrans The number of RADIUS Access Request packets retra...

Страница 223: ...me server is counted as a retransmit as well as a timeout A send to a different server is counted as an Accounting Request as well as a timeout Requests The number of RADIUS Accounting Request packets...

Страница 224: ...options when resetting the Switch Some of the current configuration parameters can be retained while resetting all other configuration parameters to their factory defaults Figure 11 29 Reset window N...

Страница 225: ...t button to restart the Switch Save Changes The Switch has two levels of memory normal RAM and non volatile or NV RAM Configuration changes are made effective clicking the Apply button When this is do...

Страница 226: ...DES 1228 ME Layer 2 Fast Ethernet Managed Switch 213 Logout Click the Logout button on the Logout window to immediately exit the Switch Figure 11 32 Logout window...

Страница 227: ...FX DEM 211 Multi Mode 100BASE FX WDM Transceivers Supported DEM 330T TX 1550 RX 1310nm up to 10km Single Mode DEM 330R TX 1310 RX 1550nm up to 10km Single Mode DEM 331T TX 1550 RX 1310nm up to 40km S...

Страница 228: ...ss POST is failure Light off Console off LED Per 10 100 Mbps Port Link Act Speed Green Amber Solid Green When there is a secure 100Mbps Fast Ethernet connection or link at any of the ports Blinking Gr...

Страница 229: ...nternal Power Supply AC Input 100 240 VAC 50 60 Hz Performance Feature Detailed Description Wire speed on all FE GE ports Full wire speed full duplex operation on all FE GE ports Forwarding Mode Store...

Страница 230: ...ZX DEM 210 Single Mode 100BASE FX DEM 211 Multi Mode 100BASE FX WDM Transceiver Supported 1 DEM 330T TX 1550 RX 1310nm up to 10km Single Mode 2 DEM 330R TX 1310 RX 1550nm up to 10km Single Mode 3 DEM...

Страница 231: ...d to flash Username username IP ipaddr MAC macaddr Informational Configuration and log saved to flash by console Configuration and log saved to flash by console Username username Informational Upload...

Страница 232: ...ded by console Log message successfully uploaded by console Username username Informational Log message upload was unsuccessful Log message upload was unsuccessful Username username IP ipaddr Warning...

Страница 233: ...ew Root selected Instance InstanceID Root bridge MAC macaddr Priority value Informational BPDU Loop Back on port BPDU Loop Back on Port portNum Warning Spanning Tree Protocol is enabled Spanning Tree...

Страница 234: ...AAA local method Username username Informational Login failed through Telnet authenticated by AAA local method Login failed through Telnet from userIP authenticated by AAA local method Username userna...

Страница 235: ...by AAA server serverIP Username username Warning Login failed through Web due to AAA server timeout or improper configuration Login failed through Web from userIP due to AAA server timeout or imprope...

Страница 236: ...Admin through Telnet authenticated by AAA local_enable method Successful Enable Admin through Telnet from userIP authenticated by AAA local_enable method Username username Informational Enable Admin...

Страница 237: ...me username Warning Successful Enable Admin through Web authenticated by AAA server Successful Enable Admin through Web from userIP authenticated by AAA server serverIP Username username Informational...

Страница 238: ...colname connection failed Warning Port security Port security has exceeded its maximum learning size and will not learn any new addresses Port security violation MAC macaddr Port portNum Warning IP an...

Страница 239: ...p assigned egress bandwidth bandwidth_value Kbits to Port portNum Account user_account Informational Radius server assigned egress bandwith no limit to Port Radius server server_ip assigned egress ban...

Страница 240: ...d V2 rfc2819 RMON MIB LldpRemTablesChange 1 0 8802 1 1 2 0 0 1 lldpStatsRemTablesInserts lldpStatsRemTablesDeletes lldpStatsRemTablesDrops lldpStatsRemTablesAgeouts V2 LLDP MIB coldStart 1 3 6 1 6 3 1...

Страница 241: ...agentGratuitousARPMacAddr agentGratuitousARPPortNumber agentGratuitousARPInterfaceNa me V2 Genmgmt AGENT GENERAL MIB agentCfgOperCompleteTrap 1 3 6 1 4 1 171 12 1 7 2 0 9 unitID agentCfgOperate agent...

Страница 242: ...a Type Maximum Distance Mini GBIC 1000BASE LX Single mode fiber module 1000BASE SX Multi mode fiber module 1000BASE LHX Single mode fiber module 1000BASE ZX Single mode fiber module 10km 550m 40km 80k...

Страница 243: ...volved Bridges form a single logical network centralizing network administration broadcast A message sent to all destination devices on the network broadcast storm Multiple simultaneous broadcasts tha...

Страница 244: ...protocol which allows IP to run over a serial line connection SNMP Simple Network Management Protocol A protocol originally designed to be used in managing TCP IP internets SNMP is presently implement...

Страница 245: ...quidators expressly disclaim their warranty obligation pertaining to the product and in that case the product is being sold As Is without any warranty whatsoever including without limitation the Limit...

Страница 246: ...pyright Statement No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation transformation...

Страница 247: ...egistration Register your D Link product online at http support dlink com register Product registration is entirely voluntary and failure to complete or return this form will not diminish your warrant...

Страница 248: ...original purchaser for the defective Hardware will be refunded by D Link upon return to D Link of the defective Hardware All Hardware or part thereof that is replaced by D Link or for which the purch...

Страница 249: ...nty provided by D Link does not cover Products that have been subjected to abuse accident alteration modification tampering negligence misuse faulty installation lack of reasonable care repair or serv...

Страница 250: ...ght Statement No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from D Link C...

Страница 251: ...warranty period on this product U S and Canadian customers can contact D Link technical support through our website or by phone Tech Support for customers within the United States D Link Technical Su...

Страница 252: ...uk ftp ftp dlink co uk Technische Unterst tzung Deutschland Web http www dlink de E Mail support dlink de Telefon 49 0 1805 2787 0 14 pro Minute Zeiten Mo Fr 09 00 17 30 Uhr sterreich Web http www dl...

Страница 253: ...15ppm anytime Tech Support for customers within Belgium 070 66 06 40 www dlink be 0 175ppm peak 0 0875ppm off peak Tech Support for customers within Luxemburg 32 70 66 06 40 www dlink be Asistencia T...

Страница 254: ...PO P od 09 00 do 17 00 Pevna linka 1 78 CZK min mobil 5 40 CZK min Technikai T mogat s Tel 06 1 461 3001 Fax 06 1 461 3004 Land Line 14 99 HUG min Mobile 49 99 HUF min email support dlink hu URL http...

Страница 255: ...rt Center 64 11251 210 86 11 114 09 00 17 00 210 8611114 http www dlink gr support Assist ncia T cnica Assist ncia T cnica da D Link na Internet http www dlink pt e mail soporte dlink es Teknisk Suppo...

Страница 256: ...nk biz hr Tehni na podpora Zahvaljujemo se vam ker ste izbrali D Link proizvod Za vse nadaljnje informacije podporo ter navodila za uporabo prosimo obi ite D Link ovo spletno stran www dlink eu www dl...

Страница 257: ...o in E Mail helpdesk dlink co in techsupport dlink co in Indonesia Malaysia Singapore and Thailand Tel 62 21 5731610 Indonesia Tel 1800 882 880 Malaysia Tel 65 6501 4200 Singapore Tel 66 2 719 8978 9...

Страница 258: ...2 21 4548158 92 21 4548310 Monday to Friday 10 00am to 6 00pm Web http support dlink me com E mail zkashif dlink me com South Africa and Sub Sahara Region Tel 27 12 665 2165 08600 DLINK for South Afri...

Страница 259: ...D Link D Link D Link D Link 7 495 744 00 99 http www dlink ru e mail support dlink ru...

Страница 260: ...mbia 01800 9525465 Lunes a Viernes 06 00am a 19 00pm Costa Rica 0800 0521478 Lunes a Viernes 05 00am a 18 00pm Ecuador 1800 035465 Lunes a Viernes 06 00am a 19 00pm El Salvador 800 6335 Lunes a Vierne...

Страница 261: ...o Brasil durante o per odo de vig ncia da garantia deste produto Suporte T cnico para clientes no Brasil Hor rios de atendimento Segunda Sexta feira das 9 00h s 21 00h S bado das 8 00h s 15 00h Websit...

Страница 262: ...D Link D Link D Link 0800 002 615 9 00 9 00 http www dlink com tw dssqa_service dlink com tw D Link http www dlink com tw...

Страница 263: ...kumentasi pengguna dapat diperoleh pada situs web D Link Dukungan Teknis untuk pelanggan Dukungan Teknis D Link melalui telepon Tel 62 21 5731610 Dukungan Teknis D Link melalui Internet Email support...

Страница 264: ...Technical Support Web Web URL http www dlink jp com...

Страница 265: ...36 B 26F 02 05 100013 8008296688 028 66052968 028 85176948 http www dlink com cn 09 00 18 00...

Страница 266: ...site 1 employee 2 9 10 49 50 99 100 499 500 999 1000 or more 3 What network protocol s does your organization use XNS IPX TCP IP DECnet Others_____________________________ 4 What network operating sys...

Страница 267: ......

Результаты поиска

Содержание DES-1228/ME

Отзывы:

Бренды по названию

Популярные бренды

D-Link DES-1228/ME, Руководство пользователя

Результаты поиска

Содержание DES-1228/ME

Отзывы:

Бренды по названию

Популярные бренды