D-Link Web Smart Switch DGS-1210-28, Reference Manual

Page 1: ......

Page 2: ...ased Management 9 Supported Web Browsers 9 Connecting to the Switch 9 Login Web based Management 10 Smart Wizard 10 Web based Management 10 D Link Network Assistant DNA 10 4 Configuration 12 Smart Wizard Configuration 12 IP Information 12 Password 12 SNMP 13 Web based Management 15 Tool Bar Save Menu 16 Save Configuration 16 Save Log 16 Tool Bar Tool Menu 16 Reset 16 Reset System 16 Reboot Device ...

Page 3: ...Address Table Static MAC 35 L2 Functions MAC Address Table Dynamic Forwarding Table 36 L2 Functions Spanning Tree STP Global Settings 36 L2 Functions Spanning Tree STP Port Settings 37 L2 Functions Link Aggregation Port Trunking 38 L2 Functions Link Aggregation LACP Port Settings 39 L2 Functions Multicast IGMP Snooping 39 L2 Functions Multicast MLD Snooping 41 L2 Functions Multicast Multicast Forw...

Page 4: ...2 1X Port Settings 63 AAA 802 1X 802 1X User 64 ACL ACL Wizard 65 ACL ACL Access List 72 ACL ACL Access Group 73 ACL ACL Hardware Resource Status 74 SNMP SNMP SNMP Global Settings 74 SNMP SNMP SNMP User 74 SNMP SNMP SNMP Group Table 75 SNMP SNMP SNMP View 76 SNMP SNMP SNMP Community 76 SNMP SNMP SNMP Host 76 SNMP SNMP SNMP Engine ID 77 SNMP RMON RMON Global Settings 77 SNMP RMON RMON Statistics 77...

Page 5: ...3 Gigabit Ethernet Technology 93 Fast Ethernet Technology 93 Switching Technology 93 Appendix B Technical Specifications 94 Hardware Specifications 94 Key Components Performance 94 Port Functions 94 Physical Environment 94 Emission EMI Certifications 94 Safety Certifications 94 Features 94 L2 Features 94 VLAN 94 QoS Quality of Service 94 Security 95 OAM 95 Management 95 D Link Green Technology 95 ...

Page 6: ... Terms Usage In this guide the term Switch first letter capitalized refers to the Smart Switch and switch first letter lower case refers to other Ethernet switches Some technologies refer to terms switch bridge and switching hubs interchangeably and both are commonly accepted for Ethernet switches A NOTE indicates important information that helps a better use of the device A CAUTION indicates pote...

Page 7: ...of shared resources such as server or gateway devices Network Security D Link s innovative Safeguard Engine function protects the switches against traffic flooding caused by virus attacks Additional features like 802 1X port based authentication provide access control of the network with external RADIUS servers ACL is a powerful tool to screen unwanted IP or MAC traffic Storm Control can help to k...

Page 8: ...that the port is running on 10M or 100M When it has a green light it is running on 1000M Port Link Act Speed LED 25F 26F 27F 28F The Link Act Speed LED flashes which indicates a network link through the corresponding port Blinking indicates that the Switch is either sending or receiving data to the port When a port has an green light this indicates that the port is running on 1000M Reset Press the...

Page 9: ... Installation For safe switch installation and operation it is recommended that you Visually inspect the power cord to see that it is secured fully to the AC power connector Make sure that there is proper heat dissipation and adequate ventilation around the switch Do not place heavy objects on the switch Desktop or Shelf Installation When installing the switch on a desktop or shelf the rubber feet...

Page 10: ...omised C Mechanical Loading Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading D Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring Appropriate consideration of eq...

Page 11: ...gure2 4 Insert Tie Wrap to the Switch B Plug the AC power cord into the power socket of the Switch Figure 2 5 Connect the power cord to the Switch C Slide the Retainer through the Tie Wrap until the end of the cord Figure 2 6 Slide the Retainer through the Tie Wrap ...

Page 12: ...the power cord and into the locker of the Retainer Figure 2 7 Circle around the power cord E Fasten the tie of the Retainer until the power cord is secured Figure 2 8 Secure the power cord F Users may now connect the AC power cord to an electrical outlet preferably one that is grounded and surge protected ...

Page 13: ...tion D Link Web Smart Switch User Manual 8 Figure 2 9 Plugging the switch into an outlet Power Failure As a precaution the switch should be unplugged in case of power failure When power is resumed plug the switch back in ...

Page 14: ... change the IP address of your PC and it is easier to initialize multiple Smart Switches Please refer to the following installation instructions for the Web based Management and the D Link Network Assistant DNA Using Web based Management After a successful physical installation you can configure the Switch monitor the network status and display statistics using a web browser Supported Web Browsers...

Page 15: ...the language of the Web based Management interface then click OK The switch supports 10 languages including English Traditional Chinese Simplified Chinese German Spanish French Italian Portuguese Japanese and Russian By default the password is admin and the language is English Figure 3 3 Logon Dialog Box Smart Wizard After a successful login the Smart Wizard will guide you through essential settin...

Page 16: ...Smart Switch User Manual 1 11 1 NOTE Please be sure to uninstall any existing DNA from your PC before installing the latest DNA For detailed explanations of the DNA functions please refer to D Link Network Assistant DNA User Guide ...

Page 17: ...e IP Information access password and SNMP Select Static DHCP or BOOTP and enter the desired new IP Address select the Netmask and enter the Gateway address then click the Next button to enter the next Password setting page No need to enter IP Address Netmask and Gateway if DHCP and BOOTP are selected The Smart Wizard is for the quick setting in IPv4 environment For IPv6 network please go to System...

Page 18: ...Enabled and then click Apply to make it effective Figure 4 3 SNMP in Smart Wizard NOTE Changing the system IP address will disconnect you from the current connection Please enter the correct IP address in the Web browser again and make sure your PC is in the same subnet with the switch See Login Web based Management for a detailed description If you want to change the settings click OK and start a...

Page 19: ...4 Configuration D Link Web Smart Switch User Manual 14 Figure 4 4 Confirm the changes of IP address in Smart Wizard ...

Page 20: ...nt functions in the Function Tree you can change all the settings in the Main Configuration Screen The main configuration screen will show the current status of your Switch by clicking the model name on top of the function tree At the upper right corner of the screen the username and current IP address will be displayed Under the username is the Logout button Click this to end this session NOTE If...

Page 21: ...pad Figure 4 8 Save Log Tool Bar Tool Menu The Tool Menu offers global function controls such as Reset Reset System Reboot Device Configuration Backup and Restore Firmware Backup and Upgrade Figure 4 9 Tool Menu Reset Provide a safe reset option for the Switch All configuration settings in non volatile RAM will be reset to factory default except for the IP address Figure 4 10 Tool Menu Reset Reset...

Page 22: ...or a saved backup settings file Click Restore after selecting the backup settings file you want to restore TFTP TFTP Trivial File Transfer Protocol is a file transfer protocol that allows you to transfer files to a remote TFTP server Specify TFTP Server IP Address with IPv4 or IPv6 address and TFTP File Name for the configuration file you want to save to restore from Click Backup to save the curre...

Page 23: ... restore CAUTION Do not disconnect the PC or remove the power cord from device until the upgrade completes The Switch may crash if the Firmware upgrade is incomplete Tool Bar Smart Wizard By clicking the Smart Wizard button you can return to the Smart Wizard if you wish to make any changes there Tool Bar Online Help The Online Help provides two ways of online support D Link Support Site will lead ...

Page 24: ...bled Storm Control Click Settings to link to Security Storm Control Default is disabled DHCP Client Click Settings to link to System System Settings Default is disabled Jumbo Frame Click Settings to link to L2 Functions Jumbo Frame Default is disabled SNMP Status Click Settings to link to SNMP SNMP SNMP Global Settings Default is disabled 802 1X Status Click Settings to link to AAA 802 1X 802 1X S...

Page 25: ...ay can be manually configured When using DHCP mode the Switch will first look for a DHCP server to provide it with an IP address including network mask and default gateway before using the default or previously entered settings By default the IP setting is static mode with IP address is 10 90 90 90 and subnet mask is 255 0 0 0 DHCP Option 12 State Speicfy the DHCP option 12 state is enabled or dis...

Page 26: ... be enabled or disabled DHCPv6 Client Specifies the DHCPv6 client to be enabled or disabled IPv6 Network Address Specifies the IPv6 Network Address NS Retransmit Time Settings NS Retransmit Time 1 3600 Specifies the NS retransmit time for IPv6 The field range is 1 3600 and default is 1 second Automatic Link Local State Settings Automatic Link Local Address Specifies the automatic link is enabled o...

Page 27: ...in the middle part of the window State Select and enter the neighbor IPv6 state here Options to choose from are All Address Static and Dynamic When the user selects address from the drop down menu the user will be able to enter an IP address in the space provided next to the state option Click Find to locate a specific entry based on the information entered Click Clear to clear all the information...

Page 28: ...nterface When connecting the Switch to end stations user have to use straight through Ethernet cables to make sure the Tx Rx pairs match up properly When connecting the Switch to other networking devices a crossover cable must be used This switch provides a configurable MDI MDIX function for users The switches can be set as an MDI port in order to connect to other hubs or switches without an Ether...

Page 29: ...ration System DHCP BOOTP Relay DHCP BOOTP Relay Global Settings User can enable and configure DHCP BOOTP Relay Global Settings on the Switch Figure 4 26 System DHCP BOOTP Relay DHCP BOOTP Relay Global Settings BOOTP Relay State This field can be toggled between Enabled and Disabled using the pull down menu It is used to enable or disable the DHCP BOOTP Relay service on the Switch The default is Di...

Page 30: ...the switch drops the packet because it is invalid In packets received from DHCP servers the relay agent will drop invalid messages Disabled When the field is toggled to Disabled the relay agent will not check the validity of the packet s option 82 fields DHCP Relay Agent Information Option 82 Policy This field can be toggled between Replace Drop and Keep by using the pull down menu It is used to s...

Page 31: ...h CPU the Option 82 is removed and the reply is sent to the DHCP Client Figure 4 28 System DHCP Local Relay Settings DHCP BOOTP Local Relay Status Specifies whether DHCP Local Relay is enabled on the device Enabled Enables DHCP Local Relay on the device Disabled Disables DHCP Local Relay on the device This is the default value Config VLAN by Configure the VLAN by VID or VLAN Name of drop down menu...

Page 32: ...ble so you can start to configure the related settings of the remote system log server then press Apply for the changes to take effect Figure 4 30 System SysLog Host Settings Server IP Address Select IPv4 or IPv6 then specify the IP address of the system log server UDP Port Specifies the UDP port to which the server logs are sent The possible range is 1 65535 and the default value is 514 Time Stam...

Page 33: ...g Settings Type Specifies the Power Saving type to be LED Shut off Port Shut off or System Hibernation LED Shut off The LED Shut off gets high priority If the user select LED Shut off the profile function will not take effect It means the LED can not be turned on after Time Profile time s up when the state is disabled On the contrary if the LED is enabled the Time Profile function will work Port S...

Page 34: ...own from 1000M to 100M or the first link up takes longer time please follow below steps and check again 1 Upgrade drivers of your Ethernet adapter or LAN controller for the host PC 2 Disable EEE function on the switch port System D Link Discover Protocol Settings For the D Link Discovery Protocol DDP supported device this page is an option for you to disable DDP or configure the DDP packet report ...

Page 35: ...PVID The 802 1Q VLAN PVID setting allows user to configure the PVID for each ports Click Apply to implement changes made Figure 4 37 Configuration 802 1Q VLAN PVID VLAN 802 1Q Management VLAN The 802 1Q Management VLAN setting allows user to transfer the authority of the switch from the default VLAN to others created by users This allows managing the whole network more flexible By default the Mana...

Page 36: ...traffic and the MAC address of this voice device is aged out the voice VLAN aging timer will start The port will be removed from the voice VLAN after the expiration of the voice VLAN aging timer Selectable range is from 1 to 120 hours and default is 1 Click Apply to implement changes made Voice VLAN OUI Settings This allows the user to configure the user defined voice traffic s OUI An Organization...

Page 37: ...oice VLAN Voice VLAN Port Settings From Port To Port A consecutive group of ports may be configured starting with the selected port Auto Detection Switch will add ports to the voice VLAN automatically if it detects the device OUI matches the Telephony OUI configured in Voice VLAN OUI Setting page Use the drop down menu to enable or disable the OUI auto detection function The default is Disabled Ta...

Page 38: ...AN by selecting a VLAN ID that you have created a VLAN from the 802 1Q VLAN page The member port you configured in 802 1Q VLAN setting page will be the static member port of Auto Surveillance VLAN Priority The 802 1p priority levels of the traffic in the Auto Surveillance VLAN The possible values are 0 to 7 Tagged Uplink Downlink Port Specifies the ports to be tagged uplink port or downlink port f...

Page 39: ...ports into port mirroring RX receive mode Duplicates the data that is received from the source port and forwards it to the Target Port Click all to include all ports into port mirroring TX RX transmit and receive mode Duplicate both the data transmitted from and data sent to the source port and forwards all the data to the assigned Target Port Click all to include all ports into port mirroring Non...

Page 40: ...The beginning of a consecutive group of ports may be configured starting with the selected port To Port The ending of a consecutive group of ports may be configured starting with the selected port State Use the drop down menu to toggle between Enabled and Disabled Default is Disabled Click Apply to implement changes made or click Refresh to refresh the Loopback Detection table L2 Functions MAC Add...

Page 41: ...terminology is the same as STP Most of the settings configured for STP are also used for RSTP This section introduces some new Spanning Tree concepts and illustrates the main differences between the two protocols By default Rapid Spanning Tree is disabled If enabled the Switch will listen for BPDU packets and its accompanying Hello packet BPDU packets are sent even if a BPDU packet was not receive...

Page 42: ... parameters for use on the switch level the Switch allows for the configuration of the groups of ports each port group of which will have its own spanning tree and will require some of its own configuration settings An STP Group spanning tree works in the same way as the switch level spanning tree but the root bridge concept is replaced with a root port concept A root port is a port of the group t...

Page 43: ...dge ports P2P ports transition to a forwarding state rapidly thus benefiting from RSTP A p2p value of false indicates that the port cannot have p2p status Auto allows the port to have p2p status whenever possible and operate as if the p2p status were true If the port cannot maintain this status for example if the port is forced to half duplex operation the p2p status changes to operate as if the p...

Page 44: ...at least one of the participating devices must designate LACP ports as active Both devices must support LACP Passive LACP ports that are designated as passive cannot initially send LACP control frames In order to allow the linked port group to negotiate adjustments and make changes dynamically one end of the connection must have active LACP ports Timeout Specify the administrative LACP timeout The...

Page 45: ...essage is received over that port If there are no Query control messages received for Router Port Purge Interval time the learned router port entry will be purged Default is 260 seconds Last Member Query Interval 1 25 sec The Last Member Query Interval is the Max Response Time inserted into Group Specific Queries sent in response to Leave Group messages and is also the amount of time between Group...

Page 46: ...st IPv6 multicast group address and then considers this port to be an active listening port The active listening ports are the only ones to receive multicast group data Figure 4 55 L2 Functions Multicast MLD Snooping MLD Global Settings MLD Snooping Enable or disable the MLD Snooping Host Timeout 130 153025 sec Specifies the time interval in seconds after which a port is removed from a Multicast G...

Page 47: ...de MLD Snooping VLAN Settings List Click the number of VLAN ID to modify the settings Figure 4 56 L2 Functions Multicast Multicast Forwarding State Specify the state of MLD Snooping VLAN to be enabled or disabled Querier State Specify the querier state to be enabled or disabled Fast Leave Specify the fast leave feature to be enabled or disabled Click Apply to implement changes made Static Router P...

Page 48: ...ast Multicast Filtering Mode The Multicast Filtering Mode function allows users to select the filtering mode for IGMP group per VLAN basis Figure 4 58 L2 Functions Multicast Multicast Filtering Mode VLAN ID Specifies the VLAN ID Filtering Mode Forward Unregistered Groups The multicast stream will be forwarded based on the register table in registered group but it will be flooded to all ports of th...

Page 49: ...P Poll Interval in Seconds 30 99999 Defines the interval in seconds at which the SNTP server is polled for Unicast information The Poll Interval default is 30 seconds Click Apply to implement changes made When selecting Local for the clock source users can select from one of two options Manually set current time Users input the system time manually Set time from PC The system time will be synchron...

Page 50: ...unces the information to its neighbor through ports For the receiving of LLDP packets the switch will learn the information from the LLDP packets advertised from the neighbor in the neighbor table Click Apply to make the change effective Message TX Hold Multiplier 2 10 This parameter is a multiplier that determines the actual TTL value used in an LLDPDU The default value is 4 Message TX Interval 5...

Page 51: ...rt The possible field values are Enabled Enables the Port Description TLV on the port Disabled Disables the Port Description TLV on the port System Name Specifies whether the System Name TLV is enabled on the port The possible field values are Enabled Enables the System Name TLV on the port Disabled Disables the System Name TLV on the port System Description Specifies whether the System Descriptio...

Page 52: ... Extension TLV The 802 3 Extension LLDP Port Settings page displays 802 3 Extension LLDP port information and contains parameters for configuring 802 3 Extension LLDP port settings Figure 4 64 L2 Functions LLDP 802 3 Extension TLV From Port To Port A consecutive group of ports may be configured starting with the selected port MAC PHY Configuration Status Specifies whether the MAC PHY Configuration...

Page 53: ...nctions LLDP LLDP Management Address Settings From Port To Port A consecutive group of ports may be configured starting with the selected port Address Type Specify the LLDP address type on the port The value is always IPv4 Address Specify the address Port State Specify whether the Port State is enabled n the port The possible field values are Enabled Enables the port state configured on the port D...

Page 54: ...cal Port Table page displays LLDP local port information Figure 4 67 L2 Functions LLDP LLDP Local Port Table Port Displays the port number Port ID Subtype Displays the port ID subtype Port ID Displays the port ID Unit number Port number Port Description Displays the port description Click View of Normal column to display more information Figure 4 68 L2 Functions LLDP LLDP Local Port Normal Table C...

Page 55: ...ns LLDP LLDP Remote Port Table This LLDP Remote Port Table page is used to display the LLDP Remote Port Brief Table Select port number and click Search to display additional information Figure 4 70 L2 Functions LLDP LLDP Remote Port Table To view the settings for a remote port click View Normal and the following page displays ...

Page 56: ... LLDP Remote Port Normal Table To view the detail settings for a remote port click View Detailed and the following page displays Figure 4 72 L2 Functions LLDP LLDP Remote Port Detailed Table L2 Functions LLDP LLDP Statistics The LLDP Statistics page displays an overview of all LLDP traffic ...

Page 57: ...ys the total number of LLDP frames transmitted on the port RxPort FramesDiscarded Displays the total discarded frame number of LLDP frames received on the port RxPort FramesErrors Displays the Error frame number of LLDP frames received on the port RxPort Frames Displays the total number of LLDP frames received on the port RxPortTLVsDiscarded Each LLDP frame can contain multiple pieces of informati...

Page 58: ...ed port The value is between 64 and 1024000 Click Apply to set the bandwidth control for the selected ports QoS 802 1p DSCP ToS QoS is an implementation of the IEEE 802 1p standard that allows network administrators to reserve bandwidth for important functions that require a larger bandwidth or that might have a higher priority such as VoIP voice over Internet Protocol web browsing applications fi...

Page 59: ...host Otherwise you may lose the connection Figure 4 76 Security Trusted Host Trusted Host Specify the Trusted Host to be enabled or disabled The default is disabled To define a management station IP setting click the Add button and type in the IP address and Subnet mask Click the Apply button to save your settings You may permit only single or a range of IP addresses by different IP mask setting t...

Page 60: ...nfigure traffic segmentation specify a port or All ports from the switch using the From Port pull down menu and select To Port then click Apply to enter the settings into the Switch s Traffic Segmentation table Click Select All button to check all ports or click Clear button to uncheck all ports Security Safeguard Engine D Link s Safeguard Engine is a robust and innovative technology that automati...

Page 61: ...g an attacker to sniff data frames on a LAN modifying the traffic or stopping the traffic known as a Denial of Service DoS attack The main idea of ARP spoofing is to send fake or spoofed ARP messages to an Ethernet network It associates the attacker s or random MAC address with the IP address of another node such as the default gateway Any traffic meant for that IP address would be mistakenly re d...

Page 62: ... security feature that provides a secure communication path between a Web Management host and the Switch Web UI by using authentication digital signatures and encryption These security functions are implemented by Ciphersuite a security string that determines the cryptographic parameters encryption algorithms and key sizes This page allows you to configure the SSL global state and the Ciphersuite ...

Page 63: ... The default is Disabled Max Session 1 4 Enter a value between 1 and 4 to set the number of users that may simultaneously access the Switch The default setting is 1 Connection Timeout 120 600 Allows the user to set the connection timeout The use may set a time between 120 and 600 seconds The default setting is 120 seconds Authfail Attempts 2 20 Allows the Administrator to set the maximum number of...

Page 64: ...to enable the supports of hash for message Authentication Code HMAC MD5 Message Digest MD5 mechanism HMAC SHA1 Use the check box to enable the supports of hash for message Authentication Code HMAC Secure Hash Algorithm SHA mechanism Public Key Algorithm HMAC RSA Use the check box to enable the supports of Hash for Message Authentication Code HMAC mechanism utilizing the RSA encryption algorithm Cl...

Page 65: ...nooping on the Switch Figure 4 88 Security Smart Binding Smart Binding Settings The Smart Binding Settings page contains the following fields From Port To Port Select a range of ports to set for IP MAC port binding State Use the drop down menu to enable or disable these ports for Smart Binding Enabled Enable Smart Binding with related configurations to the ports Disabled Disable Smart Binding Pack...

Page 66: ...vices Click Scan and the search results will be listed in below table Binding check the box to select desired binding devices Apply click Apply to set IP MAC Port Binding entries Select All to check the boxes of Binding for all found devices Clear All to cancel the box of Binding Security Smart Binding White List When IP ARP Inspection Mode is selected the White List page displays finished IP MAC ...

Page 67: ...or 3 IP Address Select IPv4 or IPv6 and enter the IP address Authentication Port 1 65535 Set the RADIUS authentic server s UDP port The default port is 1812 Accounting Port 1 65535 Set the RADIUS account server s UDP port The default port is 1813 Timeout 1 255 sec This field will set the time the Switch will wait for a response of authentication from the user The user may set a time between 1 and ...

Page 68: ...other depending on the configuration of the client software and the RADIUS server Depending on the authenticated results the port is either made available to the user or the user is denied access to the network Figure 4 93 AAA 802 1x Global Settings Authentication State Specify to enable or disable the 802 1X function Forward EAPOL PDU This is a global setting to control the forwarding of EAPOL PD...

Page 69: ...600 seconds Port Control This allows user to control the port authorization state Select ForceAuthorized to disable 802 1X and cause the port to transition to the authorized state without any authentication exchange required This means the port transmits and receives normal traffic without 802 1X based authentication of the client If ForceUnauthorized is selected the port will remain in the unauth...

Page 70: ...s The ACL Configuration Wizard will aid with the creation of access profiles and ACL Rules The ACL Wizard will create the access rule and profile automatically The maximum usable profiles are 50 and with 200 Rules in total for the switch To create a new access rule select Create and enter the Access List Name then click Next button Figure 4 96 ACL ACL Wizard Create Access List The steps of adding ...

Page 71: ...MAC mask e g FF FF FF FF FF FF Destination Select the destination MAC to be specified or Any Enter a destination MAC address and destination MAC mask e g FF FF FF FF FF FF If user selects the 802 1Q VLAN box then need to specify the dot1p and VLAN ID Dot1p 0 7 Specify the dot1p priority VLAN ID Selecting this option instructs the Switch to examine the 802 1p priority value of each packet header an...

Page 72: ... a source IP address and source IP mask For example to set 176 212 XX XX use mask 255 255 0 0 Destination Select the destination IP to be specified or Any relevant to the ACL rules Enter a destination IP address and destination IP mask For example to set 176 212 XX XX use mask 255 255 0 0 Protocol Check Protocol to configure the related settings Protocol Type Select the protocol type for IPv4 The ...

Page 73: ...ACL TCP Rule Select IPv4 ACL with TCP and click Next button The updates to show the follows Figure 4 101 Add Access Rule IPv4 TCP IPv4 Address Defines the range of source Ports relevant to the ACL rules Source Defines the range of source Ports relevant to the ACL rules For example to set 0 15 set mask of FFF0 Destination Defines the range of destination IP addresses relevant to the ACL rules For e...

Page 74: ...rce Defines the range of source Ports relevant to the ACL rules For example to set 0 15 set mask of FFF0 Destination Defines the range of destination IP addresses relevant to the ACL rules For example to set 0 15 set mask of FFF0 Click Next button then the ACL profile is added NOTE A combination of one or several filtering masks can be selected simultaneously The page updates with the relevant fie...

Page 75: ...For example to set 2002 0 0 0 0 0 b0d4 0 use mask 128 Destination IPv6 Address Defines the range of destination IP addresses relevant to the ACL rules For example to set 2002 0 0 0 0 0 bfd4 0 use mask 128 Action Specify the ACL forwarding action matching the rule criteria Permit forwards packets if all other ACL criteria are met Deny drops packets if all other ACL criteria is met Click Next button...

Page 76: ...ded To define the IPv6 ACL UDP profile Select IPv6 ACL with UDP of Protocol Type and click Next button The updates to show the follows Figure 4 105 Add Access Rule IPv6 UDP Source Port Specify the source port Source Port Mask Defines the range of source IP addresses relevant to the ACL rules For example to set 0 15 set mask of FFF0 Destination Port Specify the destination port Destination Port Mas...

Page 77: ...rule please select Update and the Access List Name hyperlink and click Next button Figure 4 107 ACL ACL Wizard Update ACL List ACL ACL Access List The ACL Access List page provides information for configuring ACL Access manually Click Edit Rules button to modify the access profile or click Delete button to remove the ACL profile Figure 4 108 ACL ACL Access List ...

Page 78: ...cify the packet type to be MAC IPv4 IPv4 Exdended or IPv6 then click Apply button To modify an existing rule please click on the Sequence No hyperlink Figure 4 110 ACL ACL Access List Update ACL Profile ACL ACL Access Group The ACL Access Group page allows user to configure the ACL access group settings Figure 4 111 ACL ACL Access Group Port Specify the ports to be added in the access list group M...

Page 79: ... managed objects is maintained by the SNMP agent and used to manage the device These objects are defined in a Management Information Base MIB which provides a standard presentation of the information controlled by the on board SNMP agent SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network The default SNMP global state is disabled...

Page 80: ... of up to 32 characters Read View Name Specify a SNMP group name for users that are allowed SNMP read privileges to the Switch s SNMP agent Write View Name Specify a SNMP group name for users that are allowed SNMP write privileges to the Switch s SNMP agent Security Model Select the SNMP security model SNMPv1 SNMPv1 does not support the security features SNMPv2 SNMPv2 supports both centralized and...

Page 81: ...oncerned For example 1 3 6 1 2 1 1 with mask 1 1 1 1 1 1 0 means 1 3 6 1 2 1 X View Type Specify the configured OID is Included or Excluded that a SNMP manager can access Click Add to create a new view Delete to remove an existing view SNMP SNMP SNMP Community This page is used to maintain the SNMP community string of the SNMP managers using the same community string are permitted to gain access t...

Page 82: ...changes and click Default resets to default value Figure 4 119 SNMP SNMP SNMP Engine ID SNMP RMON RMON Global Settings Users can enable and disable remote monitoring RMON status for the SNMP function on the Switch In addition RMON Rising and Falling Alarm Traps can be enabled and disabled Click Apply to make effects Figure 4 120 SNMP RMON RMON Global Settings SNMP RMON RMON Statistics The RMON Sta...

Page 83: ...The field range is 1 3600 The default is 1800 seconds equal to 30 minutes Owner Displays the RMON station or user that requested the RMON information Click Apply to make the configurations take effects SNMP RMON RMON Alarm Settings The RMON Alarm Settings page allows the user to configure the network alarms Network alarms occur when a network problem or event is detected Figure 4 123 SNMP RMON RMO...

Page 84: ...re 4 124 SNMP RMON RMON Event Settings The RMON Events Page contains the following fields Index 1 65535 Displays the event Description Specifies the user defined event description Type Specifies the event type The possible values are None Indicates that no event occurred Log Indicates that the event is a log entry SNMP Trap Indicates that the event is a trap Log and Trap Indicates that the event i...

Page 85: ...button to start the diagnosis Figure 4 127 Monitoring Cable Diagnostic Test Result The description of the cable diagnostic results OK means the cable is good for the connection Short in Cable means the wires of the RJ45 cable may be in contact somewhere Open in Cable means the wires of RJ45 cable may be broken or the other end of the cable is simply disconnected Test Failed means some other errors...

Page 86: ...d how the ports are operating when users logged in when sessions timed out as well as other system information Figure 4 128 Monitoring System Log ID Displays an incremented counter of the System Log entry The Maximum entries are 500 Time Displays the time in days hours and minutes the log was entered Log Description Displays a description event recorded Severity Displays a severity level of the ev...

Page 87: ... Press Enter in both the Username and Password fields The command prompt will appear as shown below DGS 1210 28 DGS 1210 28 login admin Password DGS 1210 28 Figure 5 1 Command Prompt The user session is automatically terminated if idle for the login timeout period The default login timeout period is 5 minutes To change the login timeout session please refer to chapter 5 CLI Commands The Basic Swit...

Page 88: ...witch DGS 1210 28 USEREXEC commands config account admin password passwd config ipif System ipaddress ip address subnet mask gateway gw address dhcp debug info download firmware_fromTFTP tftp ip address filename cfg_fromTFTP tftp ip address filename logout ping ip_addr reboot reset config save show ipif show switch upload firmware_toTFTP tftp ip address filename cfg_toTFTP tftp ip address filename...

Page 89: ...le on the TFTP server You need to specify the DOS path if the file is not at the root directory of the TFTP server Restrictions None Example usage To download a firmware file DGS 1210 28 download firmware_fromTFTP 1 1 1 23 1 dgs _1210 10032 ros 01 J an 2000 01 19 48 COPY I FIL E CPY Files Copy s ource UR L tftp 1 1 1 23 1 dgs _1210 10032 ros des tination UR L Unit all flas h image 01 J an 2000 01 ...

Page 90: ...Files Copy s ource UR L running config des tination UR L tftp 1 1 1 23 1 running config 01 J an 2000 01 26 16 COPY W TR AP The copy operation was completed s ucces s fully 158 bytes copied in 00 00 05 hh mm s s DGS 1210 28 config ipif system Purpose To configure the System IP interface Syntax config ipif system ipaddress ip address subnet mask gateway gw address dhcp bootp Description The config i...

Page 91: ...le IPv6 addresses can be configured for a single IP interface Ex 3ffe 501 ffff 100 1 64 The 64 represents the prefix length of the IPv6 addresses dhcpv6_client enable disable Specify the DHCPv6 client to be disabled or enabled Restrictions None Example usage To configure the IPv6 interface System DGS 1210 28 config ipif S ys tem ipv6 ipv6addres s 3ffe 501 ffff 100 1 64 S ucces s DGS 1210 28 logout...

Page 92: ... Received From 10 90 90 91 TimeTaken 20 msecs 10 90 90 91 Ping Statistics 3 Packets Transmitted 3 Packets Received 0 Packets Loss DGS 1210 28 ping6 Purpose To test the connectivity between network devices Syntax ping6 ipv6addr Description The pingv6 command checks if another IP address is reachable on the network You can ping the IP address connected to through the managed VLAN VLAN 1 by default a...

Page 93: ...atic address 10 90 90 92 to the routing table DGS 1210 28 create iproute default 10 90 90 92 Command create iproute default 10 90 90 92 Success DGS 1210 28 delete iproute Purpose Used to delete an IP route entry from the Switch s IP routing table Syntax delete iproute default Description The delete iproute command will delete an existing IP route entry from the Switch s IP routing table Parameters...

Page 94: ...oot Purpose To reboot the Switch If the Switch is a member of a stack it may be rebooted individually without affecting the other members of the stack Syntax reboot Description The reboot command reboots the system All network connections are terminated and the boot code executes Parameters None Restrictions None Example usage To restart the Switch DGS 1210 28 reboot Device will reboot please wait...

Page 95: ... switch Parameters None Restrictions None Example usage To display IP interface settings DGS 1210 28 s how ipif IP Setting Mode Static IP Address 10 90 90 90 Subnet Mask 255 0 0 0 Default Gateway 0 0 0 0 DHCPv6 Client State Disabled IPv6 Global Unicast Address 3ffe 501 ffff 100 100 1 64 DGS 1210 28 show switch Purpose To display information about the Switch Syntax s how switch Description The s ho...

Page 96: ...ay the configuration of an IP interface on the Switch Syntax config account admin pas s word pas s wd Description The config account admin pas s word command sets the administrator password Parameters passwd The new password of the administrator Restrictions None Example usage To configure the account admin password DGS 1210 28 config account admin pas s word 1234 DGS 1210 28 save Purpose To save ...

Page 97: ...h Parameters None Restrictions None Example usage To display the ARP table and MAC FDB information of the Switch DGS 1210 28 debug info segmentation fault log file File doesn t exist ARP table Address Hardware Address Type Interface Mapping 10 90 90 90 00 18 8b bf 75 30 ARPA vlan1 Static 10 90 90 98 00 19 5b 14 3d c4 ARPA vlan1 Dynamic 10 255 255 255 ff ff ff ff ff ff ARPA vlan1 Static MAC table V...

Page 98: ...er unshielded twisted pair UTP cabling a flexible foundation for the next generation of network technology products will be created This will outfit your network with a powerful 1000 Mbps capable backbone server connection Fast Ethernet Technology The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks A numb...

Page 99: ...R 1000Base BX TX 1310 RX 1550nm 40km Physical Environment AC input 100 240 VAC 50 60Hz internal universal power supply Acoustic Value 0dB Fan less Operation Temperature 5 50 C Storage Temperature 20 70 C Operation Humidity 0 95 RH Storage Humidity 0 95 RH Emission EMI Certifications FCC class A CE Class A VCCI Class A IC Class A Safety Certifications cUL LVD CE Features L2 Features Supports up to ...

Page 100: ... Cable Diagnostics Reset button reset to factory default Management Web based GUI or D Link Network Assistant DNA D Link CLI style SNMP support DHCP client Trap setting for destination IP system events fiber port events twisted pair port events Password access control Web based configuration backup restoration Web based firmware backup restore Firmware upgrade using D Link Network Assistant DNA We...

Page 101: ...ion of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised C Mechanical Loading Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading D Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and...

Page 102: ......