manualshive.com logo in svg

D-Link DES-3526 - Switch - Stackable, Руководство пользователя

Поделиться
Скачать
D-Link DES-3526 - Switch - Stackable Скачать руководство пользователя страница 115

DES-3526 / DES-3526DC Fast Ethernet Layer 2 Switch 

 

102

…

802.1X

Client

802.1X

Client

802.1X

Client

802.1X

Client

802.1X

Client

802.1X

Client

802.1X

Client

802.1X

Client

802.1X

Client

Network access controlled port

Network access uncontrolled port

RADIUS

Server

Ethernet Switch

 

Figure 6- 71. Example of Typical Port-Based Configuration 

Once the connected Client has successfully been authenticated, the Port then becomes Authorized, and 
all subsequent traffic on the Port is not subject to access control restriction until an event occurs that 
causes the Port to become Unauthorized. Hence, if the Port is actually connected to a shared media 
LAN segment with more than one attached device, successfully authenticating one of the attached 
devices effectively provides access to the LAN for all devices on the shared segment. Clearly, the 
security offered in this situation is open to attack. 

Содержание DES-3526 - Switch - Stackable

Страница 1: ...D Link DES 3526 DES 3526DC Managed Layer 2 Ethernet Switch 24 port 10 100Mbps and 2GE ports Release 3 5 Manual...

Страница 2: ...ission of D Link Computer Corporation is strictly forbidden Trademarks used in this text D Link and the D LINK logo are trademarks of D Link Computer Corporation Microsoft and Windows are registered t...

Страница 3: ...scription 5 Gigabit Combo Ports 7 Installation 8 Package Contents 8 Before You Connect to the Network 8 Installing the Switch Without the Rack 9 Installing the Switch in a Rack 9 Mounting the Switch i...

Страница 4: ...irroring 33 Link Aggregation 34 LACP Port Setting 38 MAC Notification 39 MAC Notification Global Settings 39 MAC Notification Port Settings 40 IGMP 41 IGMP Snooping 41 Static Router Ports Entry 43 Spa...

Страница 5: ...ontrol 101 MAC Based Network Access Control 103 Configure Authenticator 103 PAE System Control 106 RADIUS Server 110 IP MAC Binding 111 IP MAC Binding Port 112 IP MAC Binding Table 112 IP MAC Binding...

Страница 6: ...ion 148 SNMP Host Table 149 SNMP Engine ID 150 Monitoring 151 Port Utilization 151 CPU Utilization 152 Packets 153 Received RX 153 UMB Cast RX 156 Transmitted TX 157 Errors 159 Received RX 159 Transmi...

Страница 7: ...79 Reset 180 Reset System 180 Reset Config 180 Reboot Device 181 Logout 181 D Link Single IP Management 182 Single IP Management SIM Overview 182 SIM Using The Web Interface 183 Topology 184 Tool Tips...

Страница 8: ...ing some of the basic functions of the Switch including accessing the Switch information using the Switch s utilities and setting up network configurations such as Quality of Service The Access Profil...

Страница 9: ...the copy command Boldface Typewriter Font Indicates commands and responses to prompts that must be typed exactly as printed in the manual Initial capital letter Indicates a window name Names of keys...

Страница 10: ...the system gets wet see the appropriate section in your troubleshooting guide or contact your trained service provider Do not push any objects into the openings of your system Doing so can cause fire...

Страница 11: ...power from the system by unplugging all power cables from the power supplies Move products with care ensure that all casters and or stabilizers are firmly connected to the system Avoid sudden stops an...

Страница 12: ...ble is omitted or disconnected Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside your system To prevent static damage dis charge static electricity from...

Страница 13: ...s well as significantly speed up the traffic between your sub networks Gigabit Ethernet enables fast optical fiber connections to support video conferencing complex imaging and similar data intensive...

Страница 14: ...support Asymmetric VLAN support System and Port Utilization support System Log Support Support port based enable and disable Address table Supports up to 8K MAC addresses per device Supports a packet...

Страница 15: ...DES 3526 DES 3526DC Fast Ethernet Layer 2 Switch 2 Efficient self learning and address recognition mechanism enables forwarding rate at wire speed...

Страница 16: ...g a terminal emulation program NOTE For customers interested in D View D Link Corporation s proprietary SNMP management software go to the D Link Website www dlink com cn and download the software and...

Страница 17: ...en the redundant power supply is present and in use Otherwise it will remain dark Port LEDs One row of LEDs for each port is located above the ports on the front panel The first LED is for the top por...

Страница 18: ...take over all the power immediately and automatically Figure 1 5 Rear panel view of DES 3526DC The rear panel of the DC power version of the Switch includes an opening designed to accommodate the DC...

Страница 19: ...DES 3526 DES 3526DC Fast Ethernet Layer 2 Switch 6...

Страница 20: ...pper ports provided and Mini GBIC ports optional See the diagram below to view the two Mini GBIC port modules being plugged into the Switch Please note that although these two front panel modules can...

Страница 21: ...up the Switch Install the Switch on a sturdy level surface that can support at least 6 6 lb 3 kg of weight Do not place heavy objects on the Switch The power outlet should be within 1 82 meters 6 feet...

Страница 22: ...gh ventilation space between the Switch and any other objects in the vicinity Figure 2 1 Prepare Switch for installation on a desktop or shelf Installing the Switch in a Rack The Switch can be mounted...

Страница 23: ...out of the rack on its slide assemblies at one time The weight of more than one extended component could cause the rack to tip over and may result in injury Figure 2 3 Installing Switch in a rack Pow...

Страница 24: ...source Figure 2 4 Power connections attached to contacts on assembly 1 Firmly attach the DC power to the negative and positive contacts on the wiring assembly The negative pole connects to the 48V con...

Страница 25: ...ode End nodes include PCs outfitted with a 10 100 or 1000 Mbps RJ 45 Ethernet Fast Ethernet Network Interface Card NIC and most routers An end node can be connected to the Switch via a twisted pair Ca...

Страница 26: ...3 2 Switch connected to a normal non Uplink port on a hub or switch using a straight or crossover cable Connecting To Network Backbone or Server The two Mini GBIC combo ports are ideal for unlinking t...

Страница 27: ...ically using a web browser such as Netscape Navigator version 6 2 and higher or Microsoft Internet Explorer version 5 0 SNMP Based Management You can manage the Switch with an SNMP compatible console...

Страница 28: ...ce completes the console login screen displays 11 If you have not logged into the command line interface CLI program press the Enter key at the User name and password prompts There is no default user...

Страница 29: ...then clicking the Settings tab This is where you will find the Emulation options If you still do not see anything try rebooting the Switch by disconnecting its power supply Once connected to the conso...

Страница 30: ...the Switch you will be presented with the first login screen NOTE Press Ctrl R to refresh the screen This command can be used at any time to force the console program in the Switch to refresh the cons...

Страница 31: ...administrator account being created and press the Enter key You will be prompted to enter the same password again to verify it Type the same password and press the Enter key Successful creation of the...

Страница 32: ...witch used for SNMP v 1 and v 2 management access are public Allows authorized management stations to retrieve MIB objects private Allows authorized management stations to retrieve and modify MIB obje...

Страница 33: ...P address to meet the specification of your networking address scheme The Switch is also assigned a unique MAC address by the factory This MAC address cannot be changed and can be found by entering th...

Страница 34: ...igned an IP address of 10 41 44 254 with a subnet mask of 255 0 0 0 The system message Success indicates that the command was executed successfully The Switch can now be configured and managed via Tel...

Страница 35: ...ctly with the Switch using the HTTP protocol The Web based management module and the Console program and Telnet are different ways to access the same internal switching software and configure it Thus...

Страница 36: ...witch configuration and management screens allows you to view performance statistics and permits you to graphically monitor the system status Areas of the User Interface The figure below shows the use...

Страница 37: ...urations for IP Address Switch Information Advanced Settings Port Configuration IGMP Spanning Tree Forwarding Filtering VLANs Port Bandwidth SNTP Settings Port Security QoS MAC Notification LACP Acces...

Страница 38: ...ward Filtering VLANs Port Security QoS System Log Servers SNTP Settings Access Profile Table PAE Access Entity Layer 3 IP Networking Switch Information The subsections below describe how to change som...

Страница 39: ...ion and System Contact to aid in defining the Switch to the user s prefer ence IP Address The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet...

Страница 40: ...ected to the management station that will access the Switch The Switch will allow management access from stations with the same VID listed here NOTE The Switch s factory default IP address is 10 90 90...

Страница 41: ...h s ports There are no entries in the Security IP Management table by default so any management station that can connect to the Switch can access the Switch until a management VLAN is specified or Man...

Страница 42: ...be assigned an IP address and subnet mask which can then be used to connect a management station to the Switch s Telnet or Web based management agent The system message Success indicates that the comm...

Страница 43: ...h to connect to the web interface The well known TCP port for the Web interface is 80 Link Aggregation Algorithm The algorithm that the Switch uses to balance the load across the ports that make up th...

Страница 44: ...n contains information for configuring various attributes and properties for individual physical ports including port speed and flow control Clicking on Port Configurations in the Con figuration menu...

Страница 45: ...t settings with any option other than Auto Flow Control Displays the flow control scheme used for the various port configurations Ports configured for full duplex use 802 3x flow control half duplex p...

Страница 46: ...the Port Description Table Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port You can attach a monitoring device to the mirr...

Страница 47: ...mirror the traffic from a 100 Mbps port onto a 10 Mbps port this can cause throughput problems The port you are copying frames from should always support an equal or lower speed than the port to whic...

Страница 48: ...sequential port numbers except the two optional Gigabit ports which can only belong to a single link aggregation group All of the ports in the group must be members of the same VLAN and their STP sta...

Страница 49: ...owing window Figure 6 8 Port Link Aggregation Group window To configure port trunk groups click the Add button to add a new trunk group and use the Link Aggregation Settings window see example below t...

Страница 50: ...e the Master Port for the trunk group using the pull down menu Member Ports Choose the members of a trunked group Up to eight ports per group can be assigned to a group Flooding Port A trunking group...

Страница 51: ...Setting window is used in conjunction with the Link Aggregation window to create port trunking groups on the Switch Using the following window the user may set which ports will be active and passive...

Страница 52: ...port group to negotiate adjustments and make changes dynamically one end of the connection must have active LACP ports see above After setting the previous parameters click Apply to allow your change...

Страница 53: ...Port Settings in the MAC Notification folder which will display the following window Figure 6 13 MAC Notification Port Settings window The following parameters may be set Parameter Description From To...

Страница 54: ...the settings for each VLAN using the IGMP Snooping link in the Configuration folder When enabled for IGMP snooping the Switch can open or close a port to a specific multicast group member based on IGM...

Страница 55: ...se Time This determines the maximum amount of time in seconds allowed before sending an IGMP response report The Max Response Time field allows an entry between 1 and 25 seconds Default 10 Robustness...

Страница 56: ...ill allow multicast packets coming from the router to be propagated through the network as well as allowing multicast messages IGMP coming from the network to be propagated to the router A router port...

Страница 57: ...gy is provided below followed by a description of how to set up 802 1d STP 802 1w RSTP and 802 1s MSTP 802 1s MSTP Multiple Spanning Tree Protocol or MSTP is a standard defined by the IEEE community t...

Страница 58: ...ication and a version compatible with the IEEE 802 1d STP RSTP can operate with legacy equipment implementing IEEE 802 1d however the advantages of using RSTP will be lost The IEEE 802 1w Rapid Spanni...

Страница 59: ...ate immediately without going through the listening and learning states An edge port loses its status if it receives a BPDU packet immediately becoming a normal spanning tree port P2P Port A P2P port...

Страница 60: ...DES 3526 DES 3526DC Fast Ethernet Layer 2 Switch 47 figure 6 18 STP Bridge Global Settings window STP Figure 6 19 STP Bridge Global Settings window RSTP default...

Страница 61: ...to set the Rapid Spanning Tree Protocol RSTP globally on the Switch MSTP Select this parameter to set the Multiple Spanning Tree Protocol MSTP globally on the Switch Hello Time 1 10 Sec 2 The Hello Ti...

Страница 62: ...s the forwarding of STP BPDU packets from other network devices The default is Enabled Configuration Name Enter an alphanumeric string of up to 32 characters to uniquely identify the MSTP region on th...

Страница 63: ...isplays the VLAN IDs associated with the specific MSTI Clicking the Add button will reveal the following window to configure Figure 6 22 Instance ID Settings window Add The user may configure the foll...

Страница 64: ...he VID range from configured VLANs set on the Switch Supported VIDs on the Switch range from ID number 1 to 4094 This field is inoperable when configuring the CIST Priority 0 61440 Select a value betw...

Страница 65: ...STI for forwarding packets The lower the value the higher the priority This entry must be divisible by 4094 and can only be utilized if the Type chosen is Set Priority Only Click Apply to implement ch...

Страница 66: ...n interface The default value is derived from the media speed of the interface value 1 2000000 Selecting this parameter with a value in the range of 1 2000000 will set the quickest route when a loop o...

Страница 67: ...quire some of its own configuration settings An STP Group will use the switch level parameters entered above with the addition of Port Priority and Port Cost An STP Group spanning tree works in the sa...

Страница 68: ...to 802 1s MSTP RSTP and MSTP can coexist with standard STP however the benefits of RSTP and MSTP are not realized on a port where an 802 1d network connects to an 802 1w or 802 1s enabled network Mig...

Страница 69: ...edit an entry define the following parameters and then click Add Modify Parameter Description VLAN ID VID The VLAN ID number of the VLAN on which the above Unicast MAC address resides MAC Address The...

Страница 70: ...source of multicast packets This must be a multicast MAC address Port Settings Allows the selection of ports that will be members of the static multicast group and ports that are either forbidden from...

Страница 71: ...menu allows you to select the action the Switch will take when it receives a multicast packet that is to be forwarded to one of the ports in the range specified above Forward All Groups This will inst...

Страница 72: ...Queue 1 be reserved for data packets with a priority value of 7 Packets that have not been given any priority value are placed in Queue 0 and thus given the lowest priority for delivery A weighted ro...

Страница 73: ...ng a VLAN will only be forwarded to the stations over IEEE 802 1Q enabled switches that are members of that VLAN and this includes broadcast multicast and unicast packets from unknown sources VLANs ca...

Страница 74: ...tag The tag is contained in the following two octets and consists of 3 bits of user priority 1 bit of Canonical Format Identifier CFI used for encapsulating Token Ring packets so they can be carried a...

Страница 75: ...e transmitted from one 802 1Q compliant network device to another with the VLAN information intact This allows 802 1Q VLANs to span network devices and indeed the entire network if all network devices...

Страница 76: ...ng port is connected to a tag aware device the packet should be tagged Tagging and Untagging Every port on an 802 1Q compliant switch can be configured as tagging or untagging Ports with tagging enabl...

Страница 77: ...14 15 16 Finance 4 17 18 19 20 Sales 5 1 2 3 4 Table 6 2 VLAN Example Assigned Ports Port based VLANs Port based VLANs limit traffic that flows into and out of switch ports Thus all devices connected...

Страница 78: ...n you may configure VLAN settings If you wish to change the port trunk grouping with VLANs already in place you will not need to reconfigure the VLAN settings after changing the port trunk group setti...

Страница 79: ...Static VLAN Entries link To change an existing 802 1Q VLAN entry click the Modify button of the corresponding entry you wish to modify A new menu will appear to configure the port settings and to ass...

Страница 80: ...ll allow the Switch to send out GVRP packets to outside sources notifying that they may join the existing VLAN Port Settings Allows an individual port to be specified as member of a VLAN Tag Specifies...

Страница 81: ...tocol GVRP enabled switches In addition Ingress Checking can be used to limit traffic by filtering incoming packets whose PVID does not match the PVID of the port Results can be seen in the table unde...

Страница 82: ...the packet GVRP The Group VLAN Registration Protocol GVRP enables the port to dynamically become a member of a VLAN GVRP is Disabled by default Ingress This field can be toggled using the space bar b...

Страница 83: ...ay be Enabled or Disabled for either group The Threshold value is the upper threshold at which the specified traffic control is switched on This is the number of Broadcast Multicast or DLF packets in...

Страница 84: ...d ports Max Learning Addr 0 20 The number of MAC addresses that will be in the MAC address forwarding table for the selected switch and group of ports Lock Address Mode This pull down menu allows you...

Страница 85: ...map to see how the DES 3526 implements 802 1P priority queuing Figure 6 42 Mapping QoS on the Switch The picture above shows the default priority setting for the Switch Class 3 has the highest priorit...

Страница 86: ...are packets of lower priority transmitted For weighted round robin queuing the number of packets sent from each priority queue depends upon the assigned weight For a configuration of 8 CoS queues A H...

Страница 87: ...nd Both This setting will determine whether the bandwidth ceiling is applied to receiving transmitting or both receiving and transmitting packets no_limit This drop down menu allows you to specify tha...

Страница 88: ...ied hardware priority queue would be allowed to transmit before allowing the next lowest priority queue to transmit its packets A value between 0 and 255 can be specified Max Latency 0 255 Specifies t...

Страница 89: ...given port on the Switch The pri ority queues are numbered from 0 the lowest priority to 7 the highest priority Click Apply to implement your settings 802 1p User Priority The DES 3526 allows the ass...

Страница 90: ...n is used to limit traffic flow from a single port to a group of ports on either a single switch in standalone mode or a group of ports on another switch in a switch stack Single IP This method of seg...

Страница 91: ...the ports on the Switch will be able to forward packets These ports will be allowed to receive packets from the port specified above Clicking the Apply button will enter the combination of transmittin...

Страница 92: ...the log entry or trap message as defined by the Severity Name Select critical to send only critical events to the Switch s log or SNMP agent Choose warning to send critical and warning events to the...

Страница 93: ...level of messages that will be sent The options are Warning Informational and All Facility Some of the operating system daemons and processes have been assigned Facility values Processes and daemons...

Страница 94: ...local5 local use 6 local6 local use 7 local7 UDP Port 514 or 6000 65535 Type the UDP port number used for sending Syslog messages The default is 0 Status Choose Enabled or Disabled to activate or dea...

Страница 95: ...the primary server the SNTP information will be taken from SNTP Secondary Server This is the IP address of the secondary server the SNTP information will be taken from SNTP Poll Interval in Seconds Th...

Страница 96: ...indow Figure 6 52 Time Zone and DST Settings window The following parameters can be set Parameter Description Time Zone and DST Settings Daylight Saving Time State Use this pull down menu to enable or...

Страница 97: ...ST beginning and ending date be specified concisely For example specify to begin DST on April 3 and end DST on October 14 From Month Enter the month DST will start on each year From Day Enter the day...

Страница 98: ...he Access Profile Table click the Add button This will open the Access Profile Configuration window as shown below There are three Access Profile Configuration windows one for Ethernet or MAC address...

Страница 99: ...ents for the type of profile Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header Select IP to instruct the Switch to examine the IP address in each frame s header...

Страница 100: ...occurs among configured access rules the profile ID establishes relative priority of the rules The value can be set from 1 to 255 however there is a limit to the total number of profiles that can be...

Страница 101: ...value Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion Selecting TCP requires that you specify a source port mask and or a destination port mask The us...

Страница 102: ...Profile ID 1 255 Type in a unique identifier number for this profile set This value can be set from 1 to 255 Type Select profile based on Ethernet MAC Address IP address or packet content mask This wi...

Страница 103: ...48 63 Enter a value in hex form to mask the packet from byte 48 to byte 63 value 64 79 Enter a value in hex form to mask the packet from byte 64 to byte 79 Click Apply to implement changes made To est...

Страница 104: ...instructs the Switch to examine the IP address in each frame s header Packet Content Mask instructs the Switch to examine the packet header Priority 0 7 This parameter is specified if you want to re w...

Страница 105: ...ch to examine the DiffServ Code part of each packet header and use this as the or part of the criterion for forwarding The user may choose a value between 0 and 63 Protocol This field allows the user...

Страница 106: ...thernet To set the Access Rule for Ethernet adjust the following parameters and click Apply Parameters Description Profile ID This is the identifier number for this profile set Mode Select Permit to s...

Страница 107: ...specified CoS queue Otherwise a packet will have its incoming 802 1p user priority re written to its original value before being forwarded by the Switch For more information on priority queues CoS qu...

Страница 108: ...ess Rule Table Figure 6 63 Access Rule Table window Packet Content Mask To remove a previously created rule select it and click the button Access rules are indexed using the Access ID number To locate...

Страница 109: ...umber for this profile set Mode Select Permit to specify that the Switch according to any additional rule forwards the packets that match the access profile added see below Select Deny to specify that...

Страница 110: ...ied CoS queue Otherwise a packet will have its incoming 802 1p user priority re written to its original value before being forwarded by the Switch For more information on priority queues CoS queues an...

Страница 111: ...uthorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model This is accomplished b...

Страница 112: ...Authenticator and Authentication Server in greater detail Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator must...

Страница 113: ...is granted to the Client The second purpose of the Authenticator is to verify the information gathered from the Client with the Authentication Server and to then relay that information back to the Cl...

Страница 114: ...ked normal traffic is allowed to pass through the port The D Link implementation of 802 1x allows network administrators to choose between two types of Access Control used on the Switch which are 1 Po...

Страница 115: ...connected Client has successfully been authenticated the Port then becomes Authorized and all subsequent traffic on the Port is not subject to access control restriction until an event occurs that cau...

Страница 116: ...ent it would be necessary to create virtual Ports one for each attached device that required access to the LAN The Switch would regard the single physical Port connecting it to the shared media segmen...

Страница 117: ...Ethernet Layer 2 Switch 104 Figure 6 73 802 1X Authenticator Settings window To configure the settings by port click on the hyperlinked port number under the Port heading which will display the follo...

Страница 118: ...port to transition to the authorized state without any authentication exchange required This means the port transmits and receives normal traffic without 802 1X based authentication of the client If f...

Страница 119: ...and the authentication server The default setting is 30 seconds MaxReq 2 The maximum number of times that the Switch will retransmit an EAP Request to the client before it times out of the authenticat...

Страница 120: ...fect Configure the following 802 1x capability settings Parameter Description From and To Ports being configured for 802 1x settings Capability Two role choices can be selected Authenticator A user mu...

Страница 121: ...llows you to initialize a port or group of ports The Initialize Port Table in the bottom half of the window displays the current status of the port s This window displays the following information Par...

Страница 122: ...to open the following window Figure 6 77 Initialize Port s window MAC based 802 1x To initialize ports first choose the switch in the switch stack by using the Unit pull down menu then the range of p...

Страница 123: ...ForceAuth ForceUnauth and N A BackendState The Backend State will display one of the following Request Response Success Fail Timeout Idle Initialize and N A OpenDir Operational Controlled Directions...

Страница 124: ...key the same as that of the RADIUS server Confirm Key Confirm the shared key is the same as that of the RADIUS server Accounting Method This allows you to Add Modify or Delete the RADIUS Server IP MA...

Страница 125: ...enu to open the IP MAC Binding Ports Setting window Select a port or a range of ports with the From and To fields Enable or disable the port with the State field Click Apply to save changes Figure 6 8...

Страница 126: ...indow IP MAC Binding Blocked To view unauthorized devices that have been blocked by IP MAC binding restrictions open the IP MAC Binding Blocked window show below Click IP MAC Binding Blocked in the IP...

Страница 127: ...ind To delete an entry click the delete button next to the entry s MAC address To delete all the entries in the IP MAC Binding Blocked Table click Delete All Limited IP Multicast Range Settings The Li...

Страница 128: ...To port pull down menus 2 Use the remaining pull down menus to configure the parameters described below Parameter Description State Toggle the State field to either Enabled or Disabled a given port o...

Страница 129: ...are defined a permanent entry is entered and is used to translate IP address to MAC addresses To open the Static ARP Table open the Configuration folder and then open the Layer 3 IP Networking folder...

Страница 130: ...nu It is used to enable or disable the DHCP BOOTP Relay service on the Switch The default is Disabled Relay Hops Count Limit 1 16 This field allows an entry between 1 and 16 to define the maximum numb...

Страница 131: ...servers the relay agent will drop invalid messages Disabled When the field is toggled to Disabled the relay agent will not check the validity of the packet s option 82 field DHCP Agent Information Opt...

Страница 132: ...ength 5 MAC address The Switch s system MAC address Figure 6 87 Circuit ID and Remote ID Sub option Format DHCP BOOTP Relay Interface Settings The DHCP BOOTP Relay Interface Settings allow the user to...

Страница 133: ...BOOTP Relay Interface Table window The following parameters may be configured or viewed Parameter Description Interface The IP interface on the Switch that will be connected directly to the Server Ser...

Страница 134: ...Use the Security IP Management to permit remote stations to manage the Switch If you choose to define one or more designated management stations only the chosen stations as defined by IP address will...

Страница 135: ...ount click on the Delete button To change the password type in the New Password and retype it in the Confirm New Password entry field The level of privilege Admin or User can be viewed in the Access R...

Страница 136: ...es than TACACS This protocol also uses UDP to transmit packets TACACS Terminal Access Controller Access Control System plus Provides detailed access control for authentication for network devices TACA...

Страница 137: ...granted normal user privileges on the Switch To gain access to administrator level privileges the user must access the Enable Admin window and then enter a password which was previously configured by...

Страница 138: ...entication Settings Figure 7 6 Application s Authentication Settings window The following parameters can be set Parameter Description Application Lists the configuration applications on the Switch The...

Страница 139: ...e 7 7 Authentication Server Group Settings window This screen displays the Authentication Server Groups on the Switch The Switch has three built in Authentication Server Groups that cannot be removed...

Страница 140: ...e host The TACACS XTACACS TACACS RADIUS server host will then verify or deny the request and return the appropriate message to the Switch More than one authentication protocol can be run on the same p...

Страница 141: ...ntication protocol can be run on the same physical server host but remember that TACACS XTACACS TACACS are separate entities and are not compatible with each other Login Method Lists This command will...

Страница 142: ...ified To delete a Login Method List defined by the user click the X under the Delete heading corresponding to the entry desired to be deleted To modify a Login Method List click on its hyperlinked Met...

Страница 143: ...th user level privileges to Administrator Admin level privileges using authentication methods on the Switch Once a user acquires normal user level privileges on the Switch he or she must be authentica...

Страница 144: ...result in the same window to configure Figure 7 15 Enable Method List Edit window Figure 7 16 Enable Method List Add window To define an Enable Login Method List set the following parameters and clic...

Страница 145: ...itch Local Enable Password This window will configure the locally enabled password for the Enable Admin command When a user chooses the local_enable method to promote user level privileges to administ...

Страница 146: ...Access Authentication Control Enable Admin Figure 7 18 Enable Admin Screen When this window appears click the Enable Admin button revealing a dialog box for the user to enter authentication password u...

Страница 147: ...three layered encryption code for secure communication between the server and the host The user may implement any one or combination of the ciphersuites available yet different ciphersuites will affe...

Страница 148: ...icular ciphersuite disable the unwanted ciphersuites leaving the desired one for authentication When the SSL function has been enabled the web will become disabled To manage the Switch through the web...

Страница 149: ...uters a safe method of executing commands on a remote end node and will provide secure encrypted and authenticated communication between two non trusted hosts SSH with its array of unmatched security...

Страница 150: ...Switch The default setting is 8 Time Out 120 600 Allows the user to set the connection timeout The use may set a time between 120 and 600 seconds The default setting is 300 seconds Auth Fail 2 20 All...

Страница 151: ...ithm 3DES CBC Use the pull down to enable or disable the Triple Data Encryption Standard encryption algorithm with Cipher Block Chaining The default is Enabled Blow fish CBC Use the pull down to enabl...

Страница 152: ...enable or disable the HMAC Hash for Message Authentication Code mechanism utilizing the RSA encryption algorithm The default is Enabled HMAC DSA Use the pull down to enable or disable the HMAC Hash f...

Страница 153: ...n if the administrator wishes to use a remote SSH server for authentication purposes Choosing this parameter requires the user to input the following information to identify the SSH user Host Name Ent...

Страница 154: ...he level of security provided between the management station and the network device In SNMP v 1 and v 2 user authentication is accomplished using community strings which function like passwords The re...

Страница 155: ...gement can be customized to suit the needs of the networks and the preferences of the network administrator Use the SNMP V3 menus to select the SNMP version used for specific tasks The DES 3526 suppor...

Страница 156: ...SNMP version 3 is in use Auth Protocol None Indicates that no authorization protocol is in use MD5 Indicates that the HMAC MD5 96 authentication level will be used SHA Indicates that the HMAC SHA auth...

Страница 157: ...ed This field will require the user to enter a password SHA Specifies that the HMAC SHA authentication protocol will be used This field is only operable when V3 is selected in the SNMP Version field a...

Страница 158: ...Delete column corresponding to the entry you wish to delete To create a new entry click the Add button and a separate window will appear Figure 7 30 SNMP View Table Configuration window The SNMP Group...

Страница 159: ...SNMP Group Table An SNMP Group created with this table maps SNMP users identified in the SNMP User Table to the views created in the previous menu To view the SNMP Group Table window open the SNMP Ma...

Страница 160: ...e Configuration window The following parameters can set Parameter Description Group Name Type an alphanumeric string of up to 32 characters This is used to identify the new SNMP group of SNMP users Re...

Страница 161: ...will be required and that packets sent between the Switch and a remote SNMP manger will be encrypted To implement your new settings click Apply To return to the SNMP Group Table click the Show All SN...

Страница 162: ...the community string created can read from and write to the contents of the MIBs on the Switch To implement the new settings click Apply To delete an entry from the SNMP Community Table click the unde...

Страница 163: ...t the SNMP version 3 will be used with an Auth Priv security level Community String or SNMP V3 User Name Type in the community string or SNMP V3 user name as appropriate To implement your new settings...

Страница 164: ...s Switch History Log IGMP Snooping Group IGMP Snooping Forwarding VLAN Status Router Port Port Access Control Layer 3 Feature Port Utilization The Utilization window displays the percentage of the tot...

Страница 165: ...e second Record Number Select number of times the Switch will be polled between 20 and 200 The default value is 200 Click Clear to refresh the graph Click Apply to set changes implemented CPU Utilizat...

Страница 166: ...een 1s and 60s where s stands for seconds The default value is one second Record Number Select number of times the Switch will be polled between 20 and 200 The default value is 20 Utilization Check wh...

Страница 167: ...ES 3526DC Fast Ethernet Layer 2 Switch 154 Figure 8 3 Rx Packets Analysis window line graph for Bytes and Packets To view the Received Packets Table click the link View Table which will show the follo...

Страница 168: ...number of times the Switch will be polled between 20 and 200 The default value is 20 Bytes Counts the number of bytes received on the port Packets Counts the number of packets received on the port Sh...

Страница 169: ...the Packets folder of the Monitoring menu to view the following graph of UMB cast packets received on the Switch Figure 8 5 Rx Packets Analysis window line graph for Unicast Multicast and Broadcast Pa...

Страница 170: ...ast address Multicast Counts the total number of good packets that were received by a multicast address Broadcast Counts the total number of good packets that were received by a broadcast address Show...

Страница 171: ...Analysis window line graph for Bytes and Packets To view the Transmitted TX Table click the link View Table which will show the following table Figure 8 8 Tx Packets Analysis window table for Bytes a...

Страница 172: ...Bytes and Packets Clear Clicking this button clears all statistics counters on this window View Table Clicking this button instructs the Switch to display a table rather than a line graph View Line Ch...

Страница 173: ...imum permitted packets size of 64 bytes and have a good CRC Undersize packets usually indicate collision fragments a normal network occurrence Over Size Counts packets received that were longer than 1...

Страница 174: ...utton instructs the Switch to display a line graph rather than a table Transmitted TX Click the Transmitted TX link in the Error folder of the Monitoring menu to view the following graph of error pack...

Страница 175: ...collision is detected later than 512 bit times into the transmission of a packet ExColl Excessive Collisions The number of packets for which transmission failed due to excessive collisions SingColl S...

Страница 176: ...roups and classed by size to be viewed as either a line graph or a table Two windows are offered Figure 8 13 Rx Size Analysis window line graph To view the Packet Size Analysis Table click the link Vi...

Страница 177: ...ts but including FCS octets 512 1023 The total number of packets including bad packets received that were between 512 and 1023 octets in length inclusive excluding framing bits but including FCS octet...

Страница 178: ...fields can be viewed or set Parameter Description VLAN ID Enter a VLAN ID for the forwarding table to be browsed by MAC Address Enter a MAC address for the forwarding table to be browsed by Find Allow...

Страница 179: ...c Next Click this button to view the next page of the address table View All Entry Clicking this button will allow the user to view all entries of the address table Delete All Entry Clicking this butt...

Страница 180: ...ime in days hours and minutes since the Switch was last restarted Log Text Displays text describing the event that triggered the history log entry IGMP Snooping Group IGMP Snooping allows the Switch t...

Страница 181: ...ooped are displayed NOTE To configure IGMP snooping for the DES 3526 go to the Configuration folder and select IGMP Configuration and other information concerning IGMP snooping may be found in Section...

Страница 182: ...the Switch that are currently Egress or Tag ports To view the following table open the Monitoring folder and click the VLAN Status Link Figure 8 19 VLAN Status window Router Port This displays which...

Страница 183: ...tistics of the Switch on a per port basis To view the Port Access Control windows open the monitoring folder and click the Port Access Control folder There are six windows to monitor Authenticator Sta...

Страница 184: ...DES 3526 DES 3526DC Fast Ethernet Layer 2 Switch 171 Figure 8 21 Authenticator State window Port based 802 1x...

Страница 185: ...and clicking OK The information on this window is described as follows Parameter Description Auth PAE State The Authenticator PAE State value can be Initialize Disconnected Connecting Authenticating A...

Страница 186: ...e The ARP Table window may be found in the Monitoring menu in the Layer 3 Feature folder This window will show current ARP entries on the Switch To search a specific ARP entry enter an interface name...

Страница 187: ...r Switch settings can be saved to the TFTP server and a history log can be uploaded from the Switch to the TFTP server Download Firmware From TFTP Server To update the Switch s firmware open the TFTP...

Страница 188: ...following information Parameter Description ID The user defined Section ID of the firmware on the Switch Boot Status The firmware that is currently being run on the Switch will be identified in this...

Страница 189: ...re 9 3 Upload Settings to TFTP Server window Enter the IP address of the TFTP server and the path and filename for the switch settings on the TFTP server Click Start to record the IP address of the TF...

Страница 190: ...using the Config Firmware Image window Firmware Information The following screen allows the user to view information about current firmware images stored on the Switch To access the following screen c...

Страница 191: ...y read Anonymous or Unknown for users that are not identified Config Firmware Image The Config Firmware Image window allows users to configure firmware images saved in the memory of the Switch To acce...

Страница 192: ...Save Changes The DES 3526 has two levels of memory normal RAM and non volatile or NV RAM Configuration changes are made effective by clicking the Apply button When this is done the settings will be i...

Страница 193: ...when it left the factory Reset gives the option of retaining the Switch s User Accounts and History Log while resetting all other configuration parameters to their factory defaults If the Switch is re...

Страница 194: ...t the Switch All of the configuration information entered from the last time Save Changes was executed will be lost Click the Reboot button to restart the Switch Figure 9 13 Reboot window Logout Use t...

Страница 195: ...Commander Switch CS which is the master switch of the group Member Switch MS which is a switch that is recognized by the CS a member of a SIM group and a Candidate Switch CaS which is a Switch that h...

Страница 196: ...an be configured through the CS to become a MS After configuring one switch to operate as the CS of a SIM group additional DES 3526 switches may join the group either by an automatic method or by manu...

Страница 197: ...n will also enable the Switch to be configured for SIM Discovery Interval The user may set the discovery protocol interval in seconds that the Switch will send out discovery packets Returning informat...

Страница 198: ...ll display the Device Name of the switches in the SIM group configured by the user If no Device Name is configured by the name it will be given the name default and tagged with the last six digits of...

Страница 199: ...ap click the View menu in the toolbar and then Topology which will produce the following window The Topology View will refresh itself periodically 20 seconds by default Figure 10 5 Topology view This...

Страница 200: ...idate switch Layer 3 candidate switch Unknown device Non SIM devices Tool Tips In the Topology view window the mouse plays an important role in configuration and in viewing device information Setting...

Страница 201: ...C Fast Ethernet Layer 2 Switch 188 Figure 10 6 Device Information Utilizing the Tool Tip Setting the mouse cursor over a line between two devices will display the connection speed between the two devi...

Страница 202: ...unctions depending on the role of the Switch in the SIM group and the icon associated with it Group Icon Figure 10 8 Right Clicking a Group Icon The following options may appear for the user to config...

Страница 203: ...Switch Icon Figure 10 10 Right Clicking a Commander Icon The following options may appear for the user to configure Collapse to collapse the group that will be represented by a single icon Expand to e...

Страница 204: ...The following options may appear for the user to configure Collapse to collapse the group that will be represented by a single icon Expand to expand the SIM group in detail Remove from group remove a...

Страница 205: ...resented by a single icon Expand to expand the SIM group in detail Add to group add a candidate to a group Clicking this option will reveal the following dialog box for the user to enter a password fo...

Страница 206: ...isplays the number of the physical port on the MS or CaS that the CS is connected to The CS will have no entry in this field Local Port No Displays the number of the physical port on the CS that the M...

Страница 207: ...atus Topology display the Topology view Help About Will display the SIM information including the current SIM version NOTE Upon this firmware release some functions of the SIM can only be configured t...

Страница 208: ...Switch to the Member Switch Member Switches will be listed in the table and will be specified by Port port on the CS where the MS resides MAC Address Model Name and Version To specify a certain Switc...

Страница 209: ...3 Nway auto negotiation Protocols CSMA CD Data Transfer Rates Ethernet Fast Ethernet Gigabit Ethernet Fiber Optic Half duplex Full duplex 10 Mbps 20Mbps 100Mbps 200Mbps n a 2000Mbps SFP Mini GBIC Supp...

Страница 210: ...condensing Dimensions 441 mm 207 mm 44 mm 1U 19 inch rack mount width Weight DES 3526 2 56 kg DES 3526DC 2 5 kg EMI CE class A FCC Class A C Tick Safety CSA International Performance Transmission Met...

Страница 211: ...nt The following diagrams and tables show the standard RJ 45 receptacle connector and their pin assignments Figure B 1 The standard RJ 45 port and connector RJ 45 Pin Assignments Contact MDI X Port MD...

Страница 212: ...a Type Maximum Distance Mini GBIC 1000BASE LX Single mode fiber module 1000BASE SX Multi mode fiber module 1000BASE LHX Single mode fiber module 1000BASE ZX Single mode fiber module 10km 550m 40km 80k...

Страница 213: ...speed of a line Also known as line speed between network segments BOOTP The BOOTP protocol allows you to automatically map an IP address to a given MAC address each time a device is started In additio...

Страница 214: ...IB multicast Single packets copied to a specific subset of network addresses These addresses are specified in the destination address field of the packet protocol A set of rules for communication betw...

Страница 215: ...signed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and...

Страница 216: ...the magnetic media on which D Link delivers the Software will be free of physical defects D Link s sole obligation shall be to replace the non conforming Software or defective media with software that...

Страница 217: ...STORED ON OR INTEGRATED WITH ANY PRODUCT RETURNED TO D LINK FOR WARRANTY SERVICE RESULTING FROM THE USE OF THE PRODUCT RELATING TO WARRANTY SERVICE OR ARISING OUT OF ANY BREACH OF THIS LIMITED WARRANT...

Страница 218: ...pport at 1 877 453 5465 who will attempt to assist the customer in resolving any suspected defects with the product If the product is considered defective the customer must obtain a Return Material Au...

Страница 219: ...ts are designed to provide reasonable protection against harmful interference in a commercial installation This equipment generates uses and can radiate radio frequency energy and if not installed and...

Страница 220: ...egistration Register online your D Link product at http support dlink com register Product registration is entirely voluntary and failure to complete or return this form will not diminish your warrant...

Страница 221: ...ns or attachments b negligence abuse or misuse including failure to operate the product in accordance with specifications or interface requirements c improper handling d failure of goods or services n...

Страница 222: ...United Kingdom Telephone 44 020 8731 5555 Facsimile 44 020 8731 5511 www dlink co uk...

Страница 223: ...onen oder den durch Schnittstellen gegebenen Vorgaben c fehlerhafter Bedienung d Versagen von Produkten oder Diensten die nicht von D LINK stammen oder nicht Gegenstand einer zum ma geblichen Zeitpunk...

Страница 224: ...Edgware Road Colindale London NW9 5 AB Vereinigtes K nigreich Telefon 44 020 8731 5555 Fax 44 020 8731 5511 www dlink com...

Страница 225: ...notamment une utilisation du produit non conforme ses sp cifications ou aux interfaces requises c d une mauvaise manipulation d d une panne de biens ou de services acquis aupr s d une soci t tierce n...

Страница 226: ...Fax 44 020 8731 5511 www dlink co uk...

Страница 227: ...de las especificaciones y de los requisitos de la interfaz en el funcionamiento del producto c manejo incorrecto d errores en art culos o servicios ajenos a D LINK o no sujetos a una garant a o un con...

Страница 228: ...Tel fono 44 020 8731 5555 Fax 44 020 8731 5511 www dlink co uk...

Страница 229: ...onformit con le specifiche e i requisiti di connessione c movimentazione impropria d guasto di prodotti o servizi non forniti da D LINK o non soggetti a una garanzia successiva di D LINK o a un accord...

Страница 230: ...Telefono 44 020 8731 5555 Fax 44 020 8731 5511 www dlink co uk...

Страница 231: ...Friday 8 00am to 8 00pm EST Saturday 9 00am to 1 00pm EST D Link Technical Support over the Internet http www dlink com au email support dlink com au Tech Support for customers within New Zealand D L...

Страница 232: ...site Tech Support for customers within South Eastern Asia and Korea D Link South Eastern Asia and Korea Technical Support over the Telephone 65 6895 5355 Monday to Friday 9 00am to 12 30pm 2 00pm 6 00...

Страница 233: ...customers within India D Link Technical Support over the Telephone 91 22 26526741 91 22 26526696 ext 161 to 167 Monday to Friday 9 30AM to 7 00PM D Link Technical Support over the Internet http ww dli...

Страница 234: ...e duration of the warranty period on this product Customers can contact D Link technical support through our web site or by phone Tech Support for customers within the Russia D Link Technical Support...

Страница 235: ...rael D Link Technical Support over the Telephone 972 971 5701 Sunday to Thursday 9 00am to 5 00pm D Link Technical Support over the Internet http www dlink co il forum e mail support dlink co il Tech...

Страница 236: ...tomers within South Africa and Sub Sahara Region D Link South Africa and Sub Sahara Technical Support over the Telephone 27 12 665 2165 08600 DLINK For South Africa only Monday to Friday 8 30am to 9 0...

Страница 237: ...o 20 00pm El Salvador 800 6137 Monday to Friday 06 00am to 19 00pm Guatemala 1800 300 0017 Monday to Friday 06 00am to 19 00pm Panama 0800 560 0193 Monday to Friday 07 00am to 20 00pm Peru 0800 52049...

Страница 238: ...D Link D Link D Link D Link 095 744 00 99 http www dlink ru email support dlink ru...

Страница 239: ...nico Help Desk Chile Tel fono 800 214422 Lunes a Viernes 08 00 am a 21 00 pm Soporte T cnico Help Desk Colombia Tel fono 01800 7001588 Lunes a Viernes 07 00 am a 20 00 pm Soporte T cnico Help Desk Ecu...

Страница 240: ...brasil com br A D Link fornece suporte t cnico gratuito para clientes no Brasil durante o per odo de vig ncia da garantia deste produto Suporte T cnico para clientes no Brasil Telefone S o Paulo 11 21...

Страница 241: ...8 30 a m 7 00 p m Web http www dlinktw com tw FAQ http www dlinktw com tw support asp Email dssqa_service dlinktw com tw Phone 0800 002 615 D Link...

Страница 242: ...upport through our website or by phone Tech Support for customers within the United States D Link Technical Support over the Telephone 888 843 6100 Hours of Operation 8 00AM to 6 00PM PST D Link Techn...

Страница 243: ...and D Link UK Ireland Technical Support over the Telephone 08456 12 0003 United Kingdom 44 8456 12 0003 Ireland Monday to Friday 8 00 am to 10 00 pm GMT Sat Sun 10 00 am to 7 00 pm GMT D Link UK Irela...

Страница 244: ...nische Unterst tzung ber unsere Website per E Mail oder telefonisch anfordern Web http www dlink de E Mail support dlink de Telefon 49 1805 2787 0 12 Min aus dem Festnetz der Deutschen Telekom Telefon...

Страница 245: ...de D Link par notre site internet ou par t l phone Support technique destin aux clients tablis en France Assistance technique D Link par t l phone 0 820 0803 03 Assistance technique D Link sur interne...

Страница 246: ...nte el periodo de garant a del producto Los clientes espa oles pueden ponerse en contacto con la asistencia t cnica de D Link a trav s de nuestro sitio web o por tel fono Asistencia T cnica de D Link...

Страница 247: ...ito D Link Supporto tecnico per i clienti residenti in Italia D Link Mediterraneo S r L Via N Bonnet 6 B 20154 Milano Supporto Tecnico dal luned al venerd dalle ore 9 00 alle ore 19 00 con orario cont...

Страница 248: ...ands D Link Technical Support over the Telephone 0900 501 2007 Monday to Friday 8 00 am to 10 00 pm D Link Technical Support over the Internet www dlink nl Tech Support for customers within Belgium D...

Страница 249: ...moc techniczn klientom w Polsce w okresie gwarancyjnym produktu Klienci z Polski mog si kontaktowa z dzia em pomocy technicznej firmy D Link za po rednictwem Internetu lub telefonicznie Telefoniczna p...

Страница 250: ...nk D Link poskytuje sv m z kazn k m bezplatnou technickou podporu Z kazn ci mohou kontaktovat odd len technick podpory p es webov str nky mailem nebo telefonicky Web http www dlink de E Mail support d...

Страница 251: ...t munkanapokon h tf t l cs t rt kig 9 00 16 00 r ig s p nteken 9 00 14 00 r ig k rhet a 1 461 3001 telefonsz mon vagy a support dlink hu emailc men Magyarorsz gi technikai t mogat s D Link Magyarorsz...

Страница 252: ...ider D Link tilbyr sine kunder gratis teknisk support under produktets garantitid Kunder kan kontakte D Links teknisk support via v re hjemmesider eller p tlf Teknisk Support D Link Teknisk telefon Su...

Страница 253: ...teknisk support til kunder i Danmark i hele produktets garantiperiode Danske kunder kan kontakte D Link s tekniske support via vores hjemmeside eller telefonisk D Link teknisk support over telefonen T...

Страница 254: ...arinformation D Link tillhandah ller teknisk support till kunder i Sverige under hela garantitiden f r denna produkt Teknisk Support f r kunder i Sverige D Link Teknisk Support via telefon 0770 33 00...

Страница 255: ...Ver 1 00 71 C1 202 100025 8008868192 028 85176977 028 85176948 9 1107 100081 010 68477035 68477036 68477037 010 68477036 http www dlink com cn 09 00 18 00...

Страница 256: ...1800 FAX 61 2 8899 1868 URL www dlink com au India D Link House Kurla Bandra Complex Road Off CST Road Santacruz East Mumbai 400098 India TEL 91 022 26526696 56902210 FAX 91 022 26528914 URL www dlink...

Страница 257: ...______________________________________________________ Answers to the following questions help us to support your product 1 Where and how will the product primarily be used Home Office Travel Company...

Страница 258: ......

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды