DES-3226S Layer 2 Switch Release 4.01 User's Guide (October 2004) 651E3226S055 Printed In Taiwan RECYCLABLE Table of Contents Introduction ....................................................................................................................................................................................1 Features ......................................................................................................................................................................................1 Ports........................................................................................................................................................................................1 Performance ...........................................................................................................................................................................1 Management ...........................................................................................................................................................................2 Switch Stacking......................................................................................................................................................................2 Unpacking and Setup .....................................................................................................................................................................3 Installation..................................................................................................................................................................................3 Desktop or Shelf Installation ..................................................................................................................................................3 Rack Installation.....................................................................................................................................................................4 Power on.................................................................................................................................................................................5 Power Failure .........................................................................................................................................................................5 Identifying External Components...................................................................................................................................................6 Front Panel .................................................................................................................................................................................6 Rear Panel ..................................................................................................................................................................................6 Side Panels .............................................................................................................................................................................7 Optional Plug-in Modules ..........................................................................................................................................................8 LED Indicators .........................................................................................................................................................................16 Stacking Module LED Indicators.........................................................................................................................................16 Connecting the Switch .................................................................................................................................................................17 Switch to End Node..................................................................................................................................................................17 Switch to Hub or Switch ..........................................................................................................................................................17 Switch Stack Connections ........................................................................................................................................................18 Management Concepts .................................................................................................................................................................19 Local Console Management .................................................................................................................................................19 Stacking vs. Standalone Operation (Release 4.01)...................................................................................................................20 Managing Switch Stacks ......................................................................................................................................................21 Stacking with DGS-3212SR or DGS-3312SR .....................................................................................................................24 Switch IP Address ....................................................................................................................................................................25 SNMP Network Management ..................................................................................................................................................26 SNMP Versions 1, 2 and 3 ...................................................................................................................................................26 Forwarding and Filtering..........................................................................................................................................................27 Filtering and Access Profile Masking ..................................................................................................................................27 802.1w Rapid Spanning Tree ...................................................................................................................................................28 Link Aggregation .....................................................................................................................................................................29 VLANs .....................................................................................................................................................................................30 VLAN Implementation.........................................................................................................................................................30 Multicasting..............................................................................................................................................................................34 Web-Based Switch Management .................................................................................................................................................37 Introduction ..........................................................................................................................................................................37 Configuring the Switch ............................................................................................................................................................38 Web-based Manager's User Interface ..................................................................................................................................39 User Accounts Management.................................................................................................................................................41 Saving Changes ........................................................................................................................................................................42 Factory Reset................................................................................................................................................. 43 Restart System................................................................................................................................................44 Basic Setup........................................................... ......................................................................................44 Stacking Information............................................. .....................................................................................48 Configure Ports . ........................................................................................................................................51 Port Security......... ....................................................................................................................................53 Traffic Segmentation................... ................................................................................................................55 SNTP and Time Settings ................ .............................................................................................................57 Network Management ...................................................................................................................................60 SNMP Settings ..............................................................................................................................................60 Switch Utilities......................... .................................................................................................................66 TFTP Utilities................... ...........................................................................................................................66 Advanced Setup..............................................................................................................................................69 Configuring VLANs............................................. ........................................................................................69 Asymmetric VLANs.......................................................................................................................................72 Configure QoS (Quality of Service)...............................................................................................................73 Bandwidth Control ................................................................................................................................76 Port Mirroring ................................................................................................................................................77 Forwarding and Filtering.... ...........................................................................................................................78 Spanning Tree.................................................................................................................................................85 MAC Notification...........................................................................................................................................88 Link Aggregation............................................................................................................................................89 802.1X Configuration................................................................................ ....................................................92 Access Profile Mask.......................................................................................................................................98 System Log Server........................................................................................................................................101 IGMP Snooping Settings..............................................................................................................................103 Network Monitoring....................................................................................................................................................105 Technical Specifications...............................................................................................................................112 Technical Support.........................................................................................................................................121 Warranty.......................................................................................................................................................122 Registration...................................................................................................................................................124 DES-3226S Layer 2 Fast Ethernet Switch User's Guide 1 Introduction This section describes the functionality features of the DES-3226S. Some background information about Ethernet/Fast Ethernet, Gigabit Ethernet, and Switching technology is presented. Features The DES-3226S Switch was designed for easy installation and high performance in an environment where traffic on the network and the number of users increase continuously. Notable Switch features include: Ports · · · · 24 high performance NWay ports all operating at 10/100 Mbps with Auto-MDIX function for connecting to end stations, servers and hubs. All ports can auto-negotiate (NWay) between 10Mbps/ 100Mbps, half-duplex or full duplex and flow control for halfduplex ports. One front panel slide-in module interface for a 2-port 1000BASE-SX, 1000BASE-LX, 1000BASE-T, 100BASE-FX, GBIC or 1-port GBIC & stacking module. RS-232 DCE Diagnostic port (console port) for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program. Performance · · · · · · · · · · · · · · · 24 built-in 10/100 Mbps ports Switch stacking configuration: 8 units per stack + 8 GBIC ports Support for stacking with DGS-3212SR or DGS-3312SR in star topology arrangement 1 open slot for 2 10/100 Mbps ports, 1 or 2 optional Fast Ethernet fiber or 2 Gigabit port (stand-alone configuration) 8.8 Gbps Switching fabric capacity Auto MDI/MDIX uplink for all twisted-pair ports Supports 802.1Q VLAN, IGMP snooping, 802.1p Priority Queues, port mirroring Multi-layer ACL and QoS control 802.1x port-based and MAC-based access control Asymmetric VLAN support Simple Network Time Protocol support Multicast filtering per port Per-port bandwidth control IEEE 802.3z compliant for all Gigabit ports (optional) IEEE 802.3x compliant Flow Control support for all Gigabit ports (optional) 1 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Management · · · · · · · · RS-232 console port for out-of-band network management via a console terminal or PC. IEEE 802.1w Rapid Spanning Tree Algorithm Protocol for creation of alternative backup paths and prevention of network loops. SNMP (v.1, v.2, v.3) Agent. IEEE 802.1X Support Port Security Fully configurable either in-band or out-of-band control via console serial connection. Flash memory for software upgrades. This can be done in-band via TFTP or out-of-band via the console. Download the latest Switch firmware from the D-Link website. Built-in SNMP management: Bridge MIB (RFC 1493) MIB-II (RFC 1213) Mini-RMON MIB (RFC 1757) ­ 4 groups 802.1p MIB (RFC 2674). IF MIB (RFC 2233) Ether-Like MIB (RFC 1643) Supports Web-based management. CLI management support TFTP support. BOOTP support. DCHP Client support. · · · · · Switch Stacking The DES-3226S can be used as a standalone or stacked Switch - using the optional stacking module. Up to 8 Switches may be stacked and managed as a unit with a single IP address. Management for the entire stack is done through the Master Switch. You may add Switches later as needed. The Switch can also be grouped in a stack as a slave with the D-Link DGS-3212SR or DGS-3312SR Switch (acting as the Master). Fast Ethernet Technology 100Mbps Fast Ethernet (or 100BASE-T) is a standard specified by the IEEE 802.3 LAN committee. It is an extension of the 10Mbps Ethernet standard with the ability to transmit and receive data at 100Mbps, while maintaining the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Ethernet protocol. Gigabit Ethernet Technology Gigabit Ethernet is an extension of IEEE 802.3 Ethernet utilizing the same packet structure, format, and support for CSMA/CD protocol, full duplex, flow control, and management objects, but with a tenfold increase in theoretical throughput over 100Mbps Fast Ethernet and a one hundred-fold increase over 10Mbps Ethernet. Since it is compatible with all 10Mbps and 100Mbps Ethernet environments, Gigabit Ethernet provides a straightforward upgrade without wasting a company's existing investment in hardware, software, and trained personnel. 2 DES-3226S Layer 2 Fast Ethernet Switch User's Guide 2 Unpacking and Setup This chapter provides unpacking and setup information for the Switch. Unpacking Open the shipping carton of the Switch and carefully unpack its contents. The carton should contain the following items: 1. One DES-3226S 24-port Fast Ethernet Layer 2 Switch 2. Mounting kit: 2 mounting brackets and screws 3. Four rubber feet with adhesive backing 4. One AC power cord 5. This User's Guide with Registration Card If any item is found missing or damaged, please contact your local D-Link reseller for replacement. Installation Use the following guidelines when choosing a place to install the Switch: · · · · The surface must support at least 3 kg The power outlet should be within 1.82 meters (6 feet) of the device Visually inspect the power cord and see that it is secured to the AC power connector Make sure that there is proper heat dissipation from and adequate ventilation around the Switch. Do not place heavy objects on the Switch Desktop or Shelf Installation When installing the Switch on a desktop or shelf, the rubber feet included with the device should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow adequate space for ventilation between the device and the objects around it. Figure 2-1. Installing rubber feet for desktop installation 3 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Rack Installation The DES-3226S can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, attach the mounting brackets on the Switch's side panels (one on each side) and secure them with the screws provided. Figure 2- 2. Attaching the mounting brackets to the Switch Then, use the screws provided with the equipment rack to mount the Switch on the rack. Figure 2-3. Installing the Switch on an equipment rack 4 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Power on The DES-3226S Switch can be used with AC power supply 100-240 VAC, 50 - 60 Hz. The power Switch is located at the rear of the unit adjacent to the AC power connector and the system fan. The Switch's power supply will adjust to the local power source automatically and may be turned on without having any or all LAN segment cables connected. After the power Switch is turned on, the LED indicators should respond as follows: · · · · All LED indicators will momentarily blink. This blinking of the LED indicators represents a reset of the system The power LED indicator is always on after the power is turned ON The console LED indicator will blink while the Switch loads onboard software and performs a self-test. will remain ON if there is a connection at the RS-232 port, otherwise this LED indicator is OFF The 100M LED indicator may remain ON or OFF depending on the transmission speed Power Failure As a precaution in the event of a power failure, unplug the Switch. When the power supply is restored, plug the Switch back in. 5 DES-3226S Layer 2 Fast Ethernet Switch User's Guide 3 Identifying External Components This chapter describes the front panel, rear panel, optional plug-in modules, and LED indicators of the DES-3226S. Front Panel The front panel of the Switch consists of LED indicators, an RS-232 communication port, a slide-in module slot, and 24 (10/100 Mbps) Ethernet/Fast Ethernet ports. Figure 3 - 1. Front panel view of the Switch · · · Comprehensive LED indicators display the status of the Switch and the network (see the LED Indicators section below). An RS-232 DCE console port for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program. A front-panel slide-in module slot for Gigabit Ethernet ports can accommodate a 2-port 1000BASE-T Gigabit Ethernet module, a 2-port 1000BASE-SX Gigabit Ethernet module, a 2-port 1000BASE-LX Gigabit Ethernet module, or a 2-port GBIC-based Gigabit Ethernet module. Twenty-four high-performance, NWay Ethernet ports all of which operate at 10/100 Mbps with Auto-MDIX function for connections to end stations, servers and hubs. All ports can auto-negotiate between 10Mbps or 100Mbps, full or half duplex, and flow control. · Rear Panel The rear panel of the Switch contains an AC power connector. Figure 3 - 2. Rear panel view of the Switch The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. Supported input voltages range from 100 ~ 240 VAC at 50 ~ 60 Hz. 6 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Side Panels The right side panel of the Switch contains two system fans (see the top part of the diagram below). The left side panel contains heat vents. Figure 3 - 3. Side panel views of the Switch The system fans are used to dissipate heat. The sides of the system also provide heat vents to serve the same purpose. Do not block these openings, and leave at least 6 inches of space at the rear and sides of the Switch for proper ventilation. Be reminded that without proper heat dissipation and air circulation, system components might overheat, which could lead to system failure. 7 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Optional Plug-in Modules The DES-3226S 24-port Fast Ethernet Switch is able to accommodate a range of optional plug-in modules in order to increase functionality and performance. These modules must be purchased separately. DES-132 2-port 100BASE-TX Module Figure 3 - 4. 100BASE-TX two-port module Port Functions · · · · · Fully compliant with IEEE802.3 10BASE-T, IEEE802.3u 100BASE-TX Supports auto-negotiation in the following operation: 10/100M operation Full/Half Duplex operation Flow control: IEEE 802.3x compliant Flow Control support for full-duplex. Back pressure Flow Control support for half-duplex mode. LED Indicators Speed Link Active Off ­ 10M Solid Green ­ 100M Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 8 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-131F/132F 1/2-port 100BASE-FX Module Figure 3 - 5. 100BASE-FX two-port module Port Functions · · · Fully compliant with IEEE802.3u 100BASE-FX Supports auto-negotiation in the following operation: 100M / Full-duplex / Flow control IEEE 802.3x compliant Flow Control support for full-duplex Connector: SC Type Distance: 2km LED Indicators Link Active Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 9 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-131FL/132FL 1/2-port 100BASE-FX Module Figure 3 - 6. 100BASE-FX module Port Functions · · · Fully compliant with IEEE802.3u 100BASE-FX Supports auto-negotiation in the following operation: 100M / Full-duplex / Flow control IEEE 802.3x compliant Flow Control support for full-duplex Connector: SC type Distance: 15km LED Indicators Link Active Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 10 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-132T 2-port 1000BASE-T Module Figure 3 - 7. 1000BASE-T two-port module Port Functions · · · · 2 1000BASE-T Gigabit Ethernet ports Fully compliant with IEEE802.3 10BASE-T, IEEE802.3u 100BASE-TX, and IEEE802.3ab 1000BASE-T Supports auto-negotiation in the following operation: 10/100/1000M / Full-duplex / Flow control IEEE 802.3x compliant Flow Control support for full-duplex LED Indicators Speed (1000M) Link Active Off ­ 10/100M Solid Green ­ 1000M Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 11 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-132G 2-port 1000BASE-SX Gigabit Ethernet Module Figure 3 - 8. 1000BASE-SX two-port module Port Functions · · · 2 1000BASE-SX Gigabit Ethernet ports IEEE 802.3z 1000BASE-SX compliance Supports Full-duplex operations · IEEE 802.3x compliant Flow Control support for full-duplex Connector: SC Type Distance: 550m DEM-320S 2-port 1000BASE-SX Gigabit Ethernet Module Port Functions · · · 2 1000BASE-SX Gigabit Ethernet ports IEEE 802.3z 1000BASE-SX compliance Supports Full-duplex operations · IEEE 802.3x compliant Flow Control support for full-duplex Connector: SC Type Distance: 550m LED Indicators Link Active Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 12 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-132GL 2-port 1000BASE-LX Gigabit Ethernet Module Figure 3 - 9. 1000BASE-LX two-port module Port Functions · · · · · 2 1000BASE-LX Gigabit Ethernet ports IEEE 802.3z 1000BASE-LX compliance Supports Full-duplex operations IEEE 802.3x compliant Flow Control support for full-duplex Supports multi-mode fiber optic cable connections of up to 550 meters or 5 km single-mode fiber-optic cable connections. Connector: SC Type Distance: 5km DEM-320L 2-port 1000BASE-LX Gigabit Ethernet Module Port Functions · · · · · 2 1000BASE-LX Gigabit Ethernet ports IEEE 802.3z 1000BASE-LX compliance Supports Full-duplex operations IEEE 802.3x compliant Flow Control support for full-duplex The 1000BASE-SX module allows connections using multi-mode fiber optic cable in the following configurations: 62.5µm 50µm Supports single-mode fiber optic cable connections of up to 550 meters or 5 km single-mode fiber-optic cable Modal bandwidth 200 500 connections. (min. overfilled launch) Unit: MHz*km Connector: SC Type Operating distance 275 550 Distance: 10km (9/125um) Unit: meters LED Indicators Link Active Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity Channel insertion loss Unit: dB 2.53 3.43 13 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-132GB 2-port GBIC-based Gigabit Ethernet Module Figure 3 - 10. GBIC two-port module Port Functions · · · · · 2 GBIC-based Gigabit Ethernet ports Allows multi-mode fiber optic connections of up to 550 m (SX and LX) and single-mode fiber optic connections of up to 5 km (LX only). GBIC modules are available in ­SX and ­LX fiber optic media. IEEE 802.3z compliance Supports full-duplex operations IEEE 802.3x compliant Flow Control support for full-duplex DEM-320GH 2-port GBIC-based Gigabit Ethernet Module Port Functions · · · · · 2 GBIC-based Gigabit Ethernet ports Allows multi-mode fiber optic connections of up to 550 m (SX and LX) and single-mode fiber optic connections of up to 5 km (LX only). GBIC modules are available in ­SX and ­LX fiber optic media. IEEE 802.3z compliance Supports full-duplex operations IEEE 802.3x compliant Flow Control support for full-duplex LED Indicators Link Active Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 14 DES-3226S Layer 2 Fast Ethernet Switch User's Guide DES-332GS 1-port GBIC-Based Gigabit Ethernet Switch and stacking Module Figure 3 - 11. Stacking Module with one GBIC port Port Functions · · · · · 1 GBIC-Based Gigabit Ethernet port Allows multi-mode fiber optic connections of up to 550 m (SX and LX) and single-mode fiber optic connections of up to 5 km (LX only). GBIC modules are available in ­SX and ­LX fiber optic media. IEEE 802.3z 1000BASE-SX compliance Supports Full-duplex operations IEEE 802.3x compliant Flow Control support for full-duplex The stacking ports are marked IN and OUT. The IEEE 1394 compliant cable must be connected from an IN port on one Switch to an OUT port on the next Switch in the stack. The last two Switches (at the top and bottom of the stack) must also be connected from the IN port on one Switch to the OUT port on the other Switch. In this way, a loop is made such that all of the Switches in the Switch stack have the IN stacking port connected to another Switch's OUT stacking port. Stacking Port Function · · · 1 transmitting port and 1 receiving port IEEE1394.b compliance Forwarding rate up to 965Mbps DEM-320GS 1-port GBIC-Based Gigabit Ethernet Switch and stacking Module Port Functions · · · · · 1 GBIC-Based Gigabit Ethernet port Allows multi-mode fiber optic connections of up to 550 m (SX and LX) and single-mode fiber optic connections of up to 5 km (LX only). GBIC modules are available in ­SX and ­LX fiber optic media. IEEE 802.3z 1000BASE-SX compliance Supports Full-duplex operations IEEE 802.3x compliant Flow Control support for full-duplex Stacking Port Function · · · 1 transmitting port and 1 receiving port IEEE1394.b compliance Forwarding rate up to 965Mbps The optional Stacking Module allows up to eight DES-3226S Switches to be interconnected via their individual stacking modules. This forms an eightSwitch stack that can then be managed and configured as thought the entire stack were a single Switch. The Switch stack is then accessed through a single IP address or alternatively, through the master Switch's serial port (via the management station's console and the Switch's Command Line Interface). The stacking module's LED indicators are described below. LED Indicators Link Active Off ­ No Link Solid Green ­ Link Off ­ No Activity Blinking Green ­ Activity 15 DES-3226S Layer 2 Fast Ethernet Switch User's Guide LED Indicators The LED indicators of the Switch include Power, Console, and Link/Act. The following shows the LED indicators for the Switch along with an explanation of each indicator. Figure 3 - 12. The LED Indicators · · · Power This indicator on the front panel should be lit during the Power-On Self Test (POST). It will light green approximately 2 seconds after the Switch is powered on to indicate the ready state of the device. Console This indicator is lit green when the Switch is being managed via out-of-band/local console management through the RS-232 console port using a straight-through serial cable. Act/Link/Speed These indicators are located to the left and right of each port. The right side indicator will light when the port has a link of 100 Mbps; the Link indicator will not light for 10 Mbps links. The LEDs blink whenever there is reception or transmission (i.e. Activity--Act) of data occurring at a port. Stacking Module LED Indicators The Switch's current order in the Switch stack is also displayed on the Stacking Module's front panel - under the STACK NO. heading: Figure 3 - 13. Stacking Module LED Indicators The Link and Act LEDs have the same function as the corresponding LEDs for the Switch's Ethernet ports. The Link LED lights to confirm a valid link, while the ACT LED blinks to indicate activity on the link. The Stack No. seven-segment LED displays the unit number assigned to the Switch. The numeral 1 in the display indicates that the stacking module is in the process of determining the stack status and has not yet resolved the Switch's unit number. If the master Switch fails, a new master Switch should be configured for the stack until the failure can be fixed. Any time the composition of a stacked Switch group changes, all Switches in the stack will reboot automatically and the master-slave relationship and stack number will be renegotiated. A link failure will require reconnecting the stacking ports to work around the failed link. 16 DES-3226S Layer 2 Fast Ethernet Switch User's Guide 4 Connecting the Switch This chapter describes how to connect the DES-3226S to your Fast Ethernet network. Switch to End Node End nodes include PCs outfitted with a 10, 100 or 10/100 Mbps RJ-45 Ethernet/Fast Ethernet Network Interface Card (NIC) and most routers. An end node can be connected to the Switch via a two-pair Category 3, 4, 5 UTP/STP straight cable (be sure to use Category 5 UTP or STP cabling for 100 Mbps Fast Ethernet connections. Connections to 1000 Mbps Gigabit ports on the 1000BASE-T Module must also use Category 5e). The end node should be connected to any of the twenty-four ports of the DES-3226S. Figure 4 - 1. Switch connected to an End Node The LED indicators for the port the end node is connected to are lit according to the capabilities of the NIC. If LED indicators are not illuminated after making a proper connection, check the PC's LAN card, the cable, Switch conditions, and connections. The following LED indicator states are possible for an end node to Switch connection: · · The 100 LED indicator comes ON for a 100 Mbps and stays OFF for 10 Mbps. The Link/Act LED indicator lights up upon hooking up a PC that is powered on. Switch to Hub or Switch These connections can be accomplished at any port in either straight-through cable or a crossover cable because the Switch supports Auto-MDIX function. NOTE: Auto-MDIX function is not supported by the 100BASE-TX module. · · · A 10BASE-T hub or Switch can be connected to the Switch via a two-pair Category 3, 4 or 5 UTP/STP cable. A 100BASE-TX hub or Switch can be connected to the Switch via a two-pair Category 5 UTP cable. A 1000BASE-T connections use two-pair Category 5e UTP cable. 17 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Switch Stack Connections Up to eight DES-3226S Switches (with optional stacking modules installed) can be stacked into a Switch stack that can then be configured and managed as a single unit. The management agent of the master Switch can configure and manage all of the Switches in a Switch stack - using a single IP address (the IP address of the Master Switch). NOTE: Stacking mode is configured using the CLI command config stacking mode. The default settings allow the Switch to function as a standalone device or as a member of a stacked group. The stacking ports are marked IN and OUT. The IEEE 1394 compliant cable must be connected from an IN port on one Switch to an OUT port on the next Switch in the stack. The last two Switches (at the top and bottom of the stack) must also be connected from the IN port on one Switch to the OUT port on the other Switch. In this way, a loop is made such that all of the Switches in the Switch stack have the IN stacking port connected to another Switch's OUT stacking port. An example stacking port interconnection is shown below: Figure 4 - 2. Switch Stack connections between optional stacking modules NOTICE: If a link between stacked Switches fails the stacked group must be connected to work around the failed link. As with any changes in the composition of the stacked Switch group, the new stacking relationship must be negotiated. Any change to the composition of a stacked Switch group or any failure of a stacking port will cause the entire stack to restart and negotiate the new stacking composition. 10BASE-T Device For a 10BASE-T device, the Switch's LED indicators should display the following: · · 100 LED speed indicator is OFF. Link/Act indicator is ON. 100BASE-TX Device For a 100BASE-TX device, the Switch's LED indicators should display the following: · · 100 LED speed indicator is ON. Link/Act is ON. 18 DES-3226S Layer 2 Fast Ethernet Switch User's Guide 5 Management Concepts This chapter discusses many of the concepts and features used to manage the Switch, as well as the concepts necessary for the user to understand the functioning of the Switch. Further, this chapter explains many important points regarding these features. Configuring the Switch to implement these concepts and make use of its many features is discussed in detail in the next chapters. Local Console Management A local console is a terminal or a workstation running a terminal emulation program that is connected directly to the Switch via the RS-232 serial console port on the front of the Switch. A console connection is referred to as an `Out-of-Band' connection, meaning that console is connected to the Switch using a different circuit than that used for normal network communications. So, the console can be used to set up and manage the Switch even if the network is down. Local console management uses the terminal connection to operate the console program built-in to the Switch. A network administrator can manage, control and monitor the Switch from the console program. The DES-3226S contains a CPU, memory for data storage, flash memory for configuration data, operational programs, and SNMP agent firmware. These components allow the Switch to be actively managed and monitored from either the console port or the network itself (out-of-band, or in-band). Diagnostic (console) port (RS-232 DCE) Out-of-band management requires connecting a terminal, such as a VT-100 or a PC running a terminal emulation program (such as HyperTerminal, which is automatically installed with Microsoft Windows) a to the RS-232 DCE console port of the Switch. Switch management using the RS-232 DCE console port is called Local Console Management to differentiate it from management performed via management platforms, such as D-View, HP OpenView, etc. Web-based Management describes management of the Switch performed over the network (in-band) using the Switch's built-in Web-based management program (see Chapter 6 ­ Web-based Network Management). The operations to be performed and the facilities provided by these two built-in programs are identical. The console port is set at the factory for the following configuration: · Baud rate: 9,600 · Data width: 8 bits · Parity: none · Stop bits: 1 · Flow Control None Make sure the terminal or PC you are using to make this connection is configured to match these settings. If you are having problems making this connection on a PC, make sure the emulation is set to VT-100. If you still don't see anything, try pressing + r to refresh the screen. 19 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Stacking vs. Standalone Operation (Release 4.01) By default, the Switch configuration settings allow it to operate as a standalone device, or in a stacked group. It is not necessary to change any settings for the Switch to function in either capacity. However, it is useful to understand how the stacking mode operates in the Switch and the effects if any this may have on configuration settings in a Switch when its stacking status is changed. Stacking mode is enabled by default and can be changed using the CLI command config stacking mode. If the Switch has stacking mode enabled and is properly connected to other DES-3226S Switches, a negotiation takes place upon starting up the Switches to determine how the Switch functions in the stack. For an all-DES-3226S stack, any time a change occurs in the structure or composition of a stacked Switch group the entire stack will restart and the negotiation process begins anew. When the stacking mode is disabled (config stacking mode disable), the Switch only allows standalone operation. If stacking mode is disabled on a Switch, it should be disconnected from a stacked group. NOTE: The firmware for Release 4.01 allows stacking operation of the DES-3226S as a slave to the DGS-3212SR and DGS-3312SR in a star topology. See the example below for more information. Stacking mode can be changed using the CLI. When a DES-3226S Switch stack is first assembled, it is advisable to determine which Switch will function as the master before placing the Switches in a rack and connecting them. If the Switch is used in a stacked group with the DGS-3212SR or DGS-3312SR, the DGS-3x12SR series Switch operates as the master and the DES3226S Switches in the stacked group operate as slaves. The possible stacking configuration modes are as follows: Enabled: Stacking mode is enabled by default. When enabled the Switch can operate as a standalone device or it can operate with other DES-3226S Switches in a properly connected stacked group. Stacking must be enabled for the Switch function in a stacked arrangement with other DES-3226S Switches or with a DGS-3212SR High-Density Layer 2 or DGS-3312SR Layer 3 Gigabit Ethernet Switch. Auto: This is the default stacking mode setting for the DES-3226S. In auto stacking mode the Switch is eligible for stacking or it can operate as a standalone device. If a DES-3226S Switch stack is connected and all units are configured to operate in auto stacking mode, the master-slave relationships is determined automatically. For DES-3226S Switch stacks, the unit with the lowest MAC address becomes the master (stack number 1). The order in which slave devices appear logically in the stack (stack number 2+) is determined by how they are connected relative to the master Switch. The auto mode serves to first determine if the device is stacked or standalone, then if stacked, it determines which Switch is the master and the remaining stack numbers for the slave Switches. Master: The auto mode described above may be overridden so that a properly connected Switch in a stack may be forced into master mode. Only one Switch in a stack may act as the master and all configuration settings for the stacked group - including stacking configuration - are saved in configuration files in the master Switch. The stack is managed as a single entity through the master. It may be convenient to place the master unit in the upper-most slot of a stacked group to visually distinguish it form the slave units. The master unit should be used to uplink the stack group to the backbone. If the master unit fails or is replaced for any reason, it is possible to load configuration files saved from the original master unit in order to continue operation with identical settings. See the example below for a description of how to swap the master unit of a stacked group. A Switch configured as the stack master will maintain this status regardless of any changes that occur in the composition of the stacked group. If for example a connection to a slave unit or a connection between two slave units were to fail, the entire stack will restart automatically. After restarting, the designated master unit retains its status. Slave: The auto mode may be overridden to force the Switch to operate in slave mode. When the Switch is in slave mode, it is ineligible to function as a master and all configuration, is done through the master unit. A master Switch must be properly connected to the stack for a Switch to operate in slave mode. Disabled: This forces the Switch to operate as a standalone device. In standalone mode the Switch functions as a standalone device even if a stacking module is installed. To force standalone operation it is necessary to use the CLI command config stacking mode disable. A Switch that has stacking mode disabled should never connect to another Switch through stacking ports. NOTICE: Do not use stacking ports on a Switch that has the stacking mode disabled. 20 DES-3226S Layer 2 Fast Ethernet Switch User's Guide For DES-3226S Switch stacks, changes made to the composition of a Switch stack group, that is, adding new Switches or taking Switches out of the stack, require all Switches to restart. The new stacking order is negotiated to reflect the changes made to the group. If the master Switch has been configured to force master status it retains this status, likewise Switches forced to operate in slave mode retain the status after restarting. The restart occurs automatically if any stacking link is disconnected. For star topology arrangements, the DGS-3212SR or DGS-3312SR does not restart when a link or Switch failure occurs. Only the effected Switch will restart if its link to the DGS-3x12SR series Switch fails. The remaining DES-3226S Switches continue to operate as before. The command show stacking can be used to view stacking information. If stacking has been disabled, the stacking mode will be listed as Standalone. Managing Switch Stacks Multiple DES-3226S Switches equipped with stacking modules may be connected in a stacking arrangement so that up to eight Switches are managed as a single unit with a single IP address. The Release 4.01 DES-3226S can connect to the DGS-3212SR or DGS-3312SR via the stacking port in a star topology. Up to eight Switches may be connected to the DGS-3x12SR and be managed as a slave device through the DGS-3x12SR series Switch. The default stacking mode will establish a master Switch for the stack through a negotiation process that takes place when all devices are started up. In a DES-3226S stack, the Switches negotiate the master-slave relationship. Once the master Switch is determined, the remaining Switches function as slaves. The stack number of the slave Switches is determined by where it is actually positioned in the stack. This can be taken into account when you are placing the Switches in an equipment rack. For star topology stacking arrangements with the DGS-3212SR or DGS-3312SR, the default settings of the DES-3226S assign slave status and the unit number is determined by the number of the port connected at the other end of the stacking connection. Keep in mind the following important considerations for stacked Switch groups: · All management of the Switches in the stack is done through the master Switch. · The master Switch should be used to uplink to the Ethernet backbone. · For DES-3226S stacks, the master Switch can be chosen automatically as each Switch in a connected stack competes for status. However, you can choose a specific device and force it to operate as the master. Use the CLI command config stacking mode enabled master for the selected Switch; leave the remaining Switches in the default auto-stacking mode. · For DES-3226S stacks, if the link between any two Switches fails or is disconnected, or if any Switch in a stacked group fails, all of the Switches in the stack will automatically reboot. Since the stack is connected as a ring, the stack will need to be connected to work around the failed link. Change the cabling to bypass the failed link and allow the stack to reboot. The Switches will negotiate again since the composition of the stack has been altered. Read below for more information about changes in stacked Switch groups. · A Switch stack has a single IP address - if the stacking link to a given Switch fails or is disconnected, that Switch will loose its status in the stack and reboot as a standalone device with the IP settings it had before becoming a member of the Switch stack. NOTE: For Release 4.01 the DES-3226S maintains two separate configurations, one for standalone operation and another for stacked operation. Each configuration has identical IP settings, VLANs, link aggregation, QoS, etc. This dual system allows a Switch to change status from standalone to stacking enabled and keep its configuration settings. Changes to Switch Stack Structure If Switches are added to or taken out of a stacked group of DES-3226S Switches it is necessary to change the composition of a Switch stack and rearrange the stacking connections. If a stacking link fails or if a member of a stacked group fails, the composition of the stack will necessarily change also. In such a case intervention is required to at least reconnect the stacking cable to bypass the failure. In addition to making changes to the cable links connecting the Switches in the stack, it may be necessary or desirable to change the stacking mode configuration of one or more units. A few examples presented below to help make the changes to cable connections for DES-3226S stacks and if necessary, to Switch stacking mode configuration settings. 21 DES-3226S Layer 2 Fast Ethernet Switch User's Guide NOTE: For a Switch that has already been configured with many settings already in place, it is a good idea to save the configuration files to a server before changing the stacking mode status. Configuration files can be saved using the CLI, SNMP manager or web manager interface. Convert a Standalone Switch to a Stacked Switch A Switch that has previously acted in a standalone capacity may become a member of a stacked group simply by installing a stacking module and connecting it to a connected Switch stack. For this example, let's assume Switch A has been setup as a standalone device and has been functioning on the network. We want to join this Switch with another DES-3226S, Switch B, to form a 2-Switch stack. Many configuration settings including IP settings have already been set on Switch A so we will keep these and use them for the new stacked arrangement. Switch A is also uplinked to the backbone via the GBIC port in the stacking module. Switch A will stay in its position in the uppermost slot in the rack and all network connections will remain in place. First, save the configuration files to a TFTP server so they may be reloaded if any problems occur. This should be done whether or not stacking mode is changed. Since we want to keep the same IP address and all the other setting on the standalone Switch, this Switch will become the master of the stack and Switch B will be the slave. To make sure Switch A functions as the master we will enable stacking and override the auto function. Use the CLI to enter the command: config stacking mode enable master The stacking mode for Switch B is set to the default auto-stacking mode and therefore no changes are required. Switch B will lose configuration settings including its IP settings, so if you want to save these be sure to upload the configuration files before making the stacking connection. Power off both devices and place Switch B under Switch A in the rack. It is not actually required that the slave device be placed under the master in the stack but it may be easier so that the master Switch may be instantly recognized. This may prove especially convenient where multiple Switch stacks are installed so it is always clear which unit should be used to uplink. Both Switches are now powered off. Switch B is placed securely in the rack and connected to Switch A via the stacking ports. Both devices are powered on; they recognize the stacking connection and begin negotiating the stacking relationship. Switch A is configured to function as the master device. Switch B automatically assume slave status. Switch A will keep its IP settings and its other configurations remain unchanged. The stack may now be configured as a single entity. Add a Switch to a Stack Adding a new slave device to a Switch stack is a simple procedure. If you are swapping an existing Switch, label each Ethernet cable attached to the device being swapped so they can be placed in the same port number in the replacement device. To add a new slave to a stack, place the new unit in the next available slot below the stack. Power off all Switches in the stack and make the necessary changes to the stacking cable connections. Use the illustrations below as a guide. 22 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Switch C is added to the existing stack where Switch A is the designated master. Power off all devices and securely place Switch C in the slot beneath Switch B. Adjust stacking cable connections so the OUT port on Switch B connects the IN port on Switch C and the OUT port of Switch C connects to the IN port of Switch A. Power on the entire stack. The new stacking arrangement is recognized and the new relationship is negotiated. Switch A retains status as the master of the stack, Switch C is in auto mode and therefore functions as a slave. The stack is ready for operation. Swap a Master from a Stack Let's assume the stack arrangement in the previous example has a problem that requires the master unit, Switch A, to be replaced. In this case, we can preserve all the same configuration settings by downloading the previously saved configuration files to the replacement Switch. Before disconnecting the network connections of the original master unit, label each Ethernet cable so they can be placed in the same port number in the replacement Switch. Then remove the device from the rack. Place the replacement Switch in the same slot. Power on the new Switch and attach a console cable to it. Configure the new unit to be a master and save the settings. Connect the Ethernet cable needed to access the TFTP server containing the saved configuration files of the previous master unit. Download the saved configuration files, use the command: download configuration Save the new settings and power off the Switch. Now the stacking connections and Ethernet connections can be completed exactly as before. Reconnect the stacking cables and Ethernet connections and power on the entire stack. The stack should now function as before with all the configuration settings intact. 23 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Stacking with DGS-3212SR or DGS-3312SR The DES-3226S Release 4.01 Switch can be arranged in a star topology and managed as slave devices through either the DGS3212SR or DGS-3312SR Master Switch. Up to eight Switches can be connected to the DGS-3x12SR series Switch in this arrangement. Figure 5 - 1. DES-3226S Switches with DGS-3212SR Setting up a star topology with a DGS-3212SR or DGS-3312SR is a simple matter. Each DES-3226S connects to the master through the stacking port to a similar stacking port on a DGS-3x12SR series Switch equipped with one or two special stacking modules designed for the DGS-3x12SR series Switch. Each DES-3226S slave must be configured with stacking mode enabled. When stacked in a star topology arrangement with the DGS-3x12SR, the Switch will automatically assume slave status. The unit number is determined by the port number to which it is connected on the DGS-3x12SR master. The DGS-3x12SR must have a stacking module installed and have stacking mode enabled as well. Stacking for the DGS-3x12SR uses the identical CLI command: config stacking mode enable. Be sure to save the configuration change using the CLI command save. Remember that for star topology arrangements, if the stacking link to a given Switch fails or is disconnected, that Switch will loose its status in the stack and reboot as a standalone device with the IP settings. The DGS-3212SR/DGS-3312SR and remaining slave units are not effected by the link failure. NOTE: The DES-3226S must have stacking mode enabled to be used with the DGS-3212SR or the DGS-3312SR in a star topology arrangement. 24 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Switch IP Address Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch's default IP address is 10.90.90.90. You can change the default Switch IP Address to meet the specification of your networking address scheme. The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found from the initial boot console screen ­ shown below. Figure 5 - 2. Console Boot Screen The Switch's MAC address can also be found from the console program under the Switch Information menu item, as shown below. Setting an IP Address The IP address for the Switch must be set before it can be managed with the web-based manager. The Switch IP address may be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known. The IP address may alternatively be set using the Command Line Interface (CLI) over the console serial port as follows: 1. Starting at the command line prompt DES3226S4# - enter the commands config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x's represent the IP address to be assigned to the IP interface named System and the y's represent the corresponding subnet mask. Alternatively, you can enter DES3226S4# - enter the commands config ipif system ipaddress xxx.xxx.xxx.xxx/z. Where the x's represent the IP address to be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation. 2. Using this method, the Switch can be assigned an IP address and subnet mask which can then be used to connect a management station to the Switch's web-based management agent. 25 DES-3226S Layer 2 Fast Ethernet Switch User's Guide SNMP Network Management The Simple Network Management Protocol (SNMP) is an OSI layer 7 (the application layer) protocol for remotely monitoring and configuring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, Switches, and other network devices. SNMP can be used to perform many of the same functions as a directly connected console, or can be used within an integrated network management software package such as DView. SNMP performs the following functions: · · Sending and receiving SNMP packets through the IP protocol. Collecting information about the status and current configuration of network devices. · Modifying the configuration of network devices. The DES-3226S has a software program called an `agent' that processes SNMP requests, but the user program that makes the requests and collects the responses runs on a management station (a designated computer on the network). The SNMP agent and the user program both use the UDP/IP protocol to exchange packets. SNMP Versions 1, 2 and 3 The DES-3226S supports SNMP version 3 as well as versions 1 and 2. The chief difference between Version 3 (SNMP v.3) and Versions 1 and 2 (SNMP v.1 and SNMP v.2) is that it provides a substantially higher level of security than the previous versions. In SNMP v. and v.2, user authentication is accomplished using `community strings', which function like passwords. The remote user SNMP application and the router SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped). SNMP v.3 uses a more sophisticated authentication process that is separated into two parts. One part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMP v.1 while assigning a higher level of security to another group, granting read/write privileges using SNMP v.3. Using SNMP v.3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB. An additional layer of security is available for SNMP v.3 in that SNMP messages may be encrypted (using HMAC-SHA-96 or HMAC-MDA-96 authentication levels). Traps Traps are messages that alert network personnel of events that occur on the Switch. The events can be as serious as a reboot (someone accidentally turned OFF the Switch), or less serious like a port status change. The Switch generates traps and sends them to the trap recipient (or network manager). Trap recipients are special users of the network who are given certain rights and access in overseeing the maintenance of the network. Trap recipients will receive traps sent from the Switch; they must immediately take certain actions to avoid future failure or breakdown of the network. You can also specify which network managers may receive traps from the Switch. This can be done by entering a list of the IP addresses of authorized network managers. You may further specify the SNMP version to use for authentication. Up to four trap recipient IP addresses, and four corresponding SNMP community strings can be entered. The following are trap types the Switch can send to a trap recipient: · Cold Start This trap signifies that the Switch has been powered up and initialized such that software settings are reconfigured and hardware systems are rebooted. A cold start is different from a factory reset in that configuration settings saved to non-volatile RAM used to reconfigure the Switch. · Warm Start This trap signifies that the Switch has been rebooted, however the POST (Power On Self-Test) is skipped. · Authentication Failure This trap signifies that someone has tried to logon to the Switch using an invalid SNMP community string. The Switch automatically stores the source IP address of the unauthorized user. 26 DES-3226S Layer 2 Fast Ethernet Switch User's Guide · · · · Topology Change A Topology Change trap is sent by the Switch when any of its configured ports transitions from the Learning state to the Forwarding state, or from the Forwarding state to the Blocking state. The trap is not sent if a new root trap is sent for the same transition. Link Change Event This trap is sent whenever the link of a port changes from link up to link down or from link down to link up. Port Partition This trap is sent whenever the port state enters the partition mode (or automatic partitioning, port disable) when more than thirty-two collisions occur while transmitting at 10Mbps or more than sixty-four collisions occur while transmitting at 100Mbps. Broadcast\Multicast Storm This trap is sent whenever the port reaches the threshold (in packets per second) set globally for the Switch. Counters are maintained for each port, and separate counters are maintained for broadcast and multicast packets. The Switch's default setting is 128 kpps for both broadcast and multicast packets. MIBs Management and counter information are stored in the Switch in the Management Information Base (MIB). The Switch uses the standard MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base. These MIBs may also be retrieved by specifying the MIB's Object-Identifier (OID) at the network manager. MIB values can be either read-only or read-write. Read-only MIBs variables can be either constants that are programmed into the Switch, or variables that change while the Switch is in operation. Examples of read-only constants are the number of port and type of ports. Examples of read-only variables are the statistics counters such as the number of errors that have occurred, or how many kilobytes of data have been received and forwarded through a port. Read-write MIBs are variables usually related to user-customized configurations. Examples of these are the Switch's IP Address, Spanning Tree Algorithm parameters, and port status. If you use a third-party vendors' SNMP software to manage the Switch, a diskette listing the Switch's propriety enterprise MIBs can be obtained by request. If your software provides functions to browse or modify MIBs, you can also get the MIB values and change them (if the MIBs' attributes permit the write operation). This process however can be quite involved, since you must know the MIB OIDs and retrieve them one by one. Forwarding and Filtering The Switch enters the relationship between destination MAC or IP addresses and the Ethernet port or gateway router the destination resides on into its forwarding table. This information is then used to forward packets. This reduces the traffic congestion on the network, because packets, instead of being transmitted to all ports, are transmitted to the destination port only. Example: if Port 1 receives a packet destined for a station on Port 2, the Switch transmits that packet through Port 2 only, and transmits nothing through the other ports. This process is referred to as `learning' the network topology. MAC Address Aging Time The Aging Time affects the learning process of the Switch. Dynamic forwarding table entries, which are made up of the source MAC addresses and their associated port numbers, are deleted from the table if they are not accessed within the aging time. The aging time can be from 10 to 1,000,000 seconds with a default value of 300 seconds. A very long aging time can result in dynamic forwarding table entries that are out-of-date or no longer exist. This may cause incorrect packet forwarding decisions by the Switch. If the Aging Time is too short however, many entries may be aged out too soon. This will result in a high percentage of received packets whose source addresses cannot be found in the forwarding table, in which case the Switch will broadcast the packet to all ports, negating many of the benefits of having a Switch. Static forwarding entries are not affected by the aging time. Filtering and Access Profile Masking The DES-3226S Switch can use a form of manually configured packet filtering to segment the network and control communication between segments. It can also filter packets off the network for intrusion control. Filtering is done by setting up an Access Profile Mask. The access profile mask uses information contained in packet headers to determine whether the packet is forwarded or filtered (i.e. dropped). The forwarding decision is made first by examining header information; looking at the VLAN or MAC address. 27 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Additional criteria are applied to the forwarding decision. Depending on what header information is being examined, forwarding is permitted or denied based on the packet's source or destination, its protocol classification, DiffServ code, 802.1p level or VLAN. Routine Packet Filtering Some filtering is done automatically by the Switch in the course of other routing functions. These routine functions include: · · Dynamic filtering as a function of automatic learning and aging of MAC addresses. The 802.1d and 802.1w Spanning Tree Protocols filter packets based on topology to prevent loops. · Filtering done for VLAN integrity. Some filtering requires the manual entry of information into a filtering table: MAC address filtering ­ the manual entry of specific MAC addresses to be filtered from the network. Packets sent from one manually entered MAC address can be filtered from the network. The entry may be specified as either a source, a destination, or both. 802.1w Rapid Spanning Tree The Switch implements two versions of the Spanning Tree Protocol, the Rapid Spanning Tree Protocol (RSTP) as defined by the IEE 802.1w specification and a version compatible with the IEEE 802.1d STP. RSTP can operate with legacy equipment implementing IEEE 802.1d, however the advantages of using RSTP will be lost. The IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) evolved from the 802.1d STP standard. RSTP was developed in order to overcome some limitations of STP that impede the function of some recent Switching innovations, in particular, certain Layer 3 function that are increasingly handled by Ethernet Switches. The basic function and much of the terminology is the same as STP. Most of the settings configured for STP are also used for RSTP. This section introduces some new Spanning Tree concepts and illustrates the main differences between the two protocols. Port Transition States An essential difference between the two protocols is in the way ports transition to a forwarding state and the in the way this transition relates to the role of the port (forwarding or not forwarding) in the topology. RSTP combines the transition states disabled, blocking and listening used in 802.1d and creates a single state Discarding. In either case, ports do not forward packets; in the STP port transition states disabled, blocking or listening or in the RSTP port state discarding there is no functional difference, the port is not active in the network topology. The table below compares how the two protocols differ regarding the port state transition. Both protocols calculate a stable topology in the same way. Every segment will have a single path to the root bridge. All bridges listen for BPDU packets. However, BPDU packets are sent more frequently ­ with every Hello packet. BPDU packets are sent even if a BPDU packet was not received. Therefore, each link between bridges are sensitive to the status of the link. Ultimately this difference results faster detection of failed links, and thus faster topology adjustment. A drawback of 802.1d is this absence of immediate feedback from adjacent bridges. 802.1d STP 802.1w RSTP Forwarding? Learning? Disabled Blocking Listening Learning Forwarding Discarding Discarding Discarding Learning Forwarding No No No No Yes No No No Yes Yes Table 1. Comparing Port States RSTP is capable of more rapid transition to a forwarding state ­ it no longer relies on timer configurations ­ RSTP compliant bridges are sensitive to feedback from other RSTP compliant bridge links. Ports do not need to wait for the topology to stabilize before transitioning to a forwarding state. In order to allow this rapid transition, the protocol introduces two new variables: the edge port and the point-to-point (P2P) port. Edge Port 28 DES-3226S Layer 2 Fast Ethernet Switch User's Guide The edge port is a configurable designation used for a port that is directly connected to a segment where a loop cannot be created. An example would be a port connected directly to a single workstation. Ports that are designated as edge ports, transition to a forwarding state immediately without going through the listening and learning states. An edge port loses its status if it receives a BPDU packet, immediately becoming a normal spanning tree port. P2P Port A P2P port is also capable of rapid transition. P2P ports may be used to connect to other bridges. Under RSTP, all ports operating in full-duplex mode are considered to be P2P ports, unless manually overridden through configuration. 802.1d/802.1w Compatibility RSTP can interoperate with legacy equipment and is capable of automatically adjusting BPDU packets to 802.1d format when necessary. However, any segment using 802.1 STP will not benefit from the rapid transition and rapid topology change detection of RSTP. The protocol also provides for a variable used for migration in the event that legacy equipment on a segment is updated to use RSTP. Link Aggregation Link aggregation is used to combine a number of ports together to make a single high-bandwidth data pipeline. The participating parts are called members of a link aggregation group, with one port designated as the master port of the group. Since all members of the link aggregation group must be configured to operate in the same manner, the configuration of the master port is applied to all members of the link aggregation group. Thus, when configuring the ports in a link aggregation group, you only need to configure the master port. The DES-3226S supports link aggregation groups, which may include from 2 to 8 Switch ports each, except for a Gigabit link aggregation group which consists of the 2 (optional) Gigabit Ethernet ports of the front panel. These ports are the two 1000BASE-SX, -LX ­TX or GBIC ports contained in a front-panel mounted module. Static vs. LACP Link Aggregation DES-3226S Release 4.01 firmware supports the option of designating LACP compliant ports for link aggregation groups. IEEE 802.1ad Link Aggregation Control Protocol (LACP) is used to negotiate a dynamic aggregated link between this Switch and another network device. For static aggregated links (the default port setting for link agregation is static), the linked Switches must be manually configured and do not allow dynamic changes to the aggregated port group. For dynamic aggregated links (designated LACP-compliant ports), the Switches must comply with LACP to allow negotiation of the aggregated link. Dynamic link aggregation can be negotiated if one port group is configured to be the "active" group while the other port group is desigated as a "passive" group. Figure 5 - 3. Link Aggregation Group 29 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Data transmitted to a specific host (destination address) will always be transmitted over the same port in a link aggregation group. This allows packets in a data stream to arrive in the same order they were sent. A aggregated link connection can be made with any other Switch that maintains host-to-host data streams over a single link aggregate port. Switches that use a loadbalancing scheme that sends the packets of a host-to-host data stream over multiple link aggregation ports cannot have an aggregated connection with the DES-3226S Switch. VLANs A VLAN is a collection of end nodes grouped by logic rather than physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are located physically on the network. Logically, a VLAN can be equated to a broadcast domain, because broadcast packets are forwarded only to members of the VLAN on which the broadcast was initiated. VLAN Implementation The following rules are important to keep in mind when setting up VLANs on your network: 1. No matter what basis is used to uniquely identify end nodes and assign these nodes VLAN membership, packets cannot cross VLANs without a network device performing a routing function between the VLANs. 2. The DES-3226 supports only IEEE 802.1Q VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag unaware. 3. The Switch's default is to assign all ports to a single 802.1Q VLAN named DEFAULT_VLAN. 4. The DEFAULT_VLAN has a VID = 1. 5. The DES-3226 supports Asymmetric VLANs. The member ports of VLANs can be overlapped. See the section on Asymmetric VLANs below. IEEE 802.1Q VLANs Some relevant terms: Tagging - The act of putting 802.1Q VLAN information into the header of a packet. Untagging - The act of stripping 802.1Q VLAN information out of the packet header. Ingress port - A port on a Switch where packets are flowing into the Switch and VLAN decisions must be made. Egress port - A port on a Switch where packets are flowing out of the Switch, either to another Switch or to an end station, and tagging decisions must be made. IEEE 802.1Q (tagged) VLANs are implemented on the DES-3226S Switch. 802.1Q VLANs require tagging, which enables the VLANs to span an entire network (assuming all Switches on the network are IEEE 802.1Q-compliant). Any port can be configured as either tagging or untagging. The untagging feature of IEEE 802.1Q VLANs allow VLANs to work with legacy Switches that don't recognize VLAN tags in packet headers. The tagging feature allows VLANs to span multiple 802.1Q VLAN compliant Switches through a single physical connection and allows Spanning Tree to be enabled on all ports and work normally. 802.1Q VLAN Packet Forwarding Packet forwarding decisions are made based upon the following three types of rules: · · · Ingress rules ­ rules relevant to the classification of received frames belonging to a VLAN. Forwarding rules between ports ­ decides filter or forward the packet Egress rules ­ determines if the packet must be sent tagged or untagged. 30 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Figure 5 - 4. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet's EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag. The tag is contained in the following two octets and consists of 3 bits or user priority, 1 bit of Canonical Format Identifier (CFI ­ used for encapsulating Token Ring packets so they can be carried across Ethernet backbones) and 12 bits of VLAN ID (VID). The 3 bits of user priority are used by 802.1p. The VID is the VLAN identifier and is used by the 802.1Q standard. Because the VID is 12 bits long, 4094 unique VLANs can be identified. The tag is inserted into the packet header making the entire packet longer by 4 octets. All of the information contained in the packet originally is retained. Figure 5 - 5. IEEE 802.1Q Tag The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated. 31 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Figure 5 - 6. Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network ­ if all network devices are 802.1Q compliant). Unfortunately, not all network devices are 802.1Q compliant. These devices are referred to as tag-unaware. 802.1Q devices are referred to as tag-aware. Prior to the adoption 802.1Q VLANs, port-based and MAC-based VLANs were in common use. These VLANs relied upon a Port VLAN ID (PVID) to forward packets. A packet received on a given port would be assigned that port's PVID and then be forwarded to the port that corresponded to the packet's destination address (found in the Switch's forwarding table). If the PVID of the port that received the packet is different from the PVID of the port that is to transmit the packet, the Switch will drop the packet. Within the Switch, different PVIDs mean different VLANs. (remember that two VLANs cannot communicate without an external router). So, VLAN identification based upon the PVIDs cannot create VLANs that extend outside a given Switch (or Switch stack). Every physical port on a Switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the Switch. If no VLANs are defined on the Switch, all ports are then assigned to a default VLAN with a PVID equal to 1. Untagged packets are assigned the PVID of the port on which they were received. Forwarding decisions are based upon this PVID, in so far as VLANs are concerned. Tagged packets are forwarded according to the VID contained within the tag. Tagged packets are also assigned a PVID, but the PVID is not used to make packet forwarding decisions, the VID is. Tag-aware Switches must keep a table to relate PVIDs within the Switch to VIDs on the network. The Switch will compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet. If the two VIDs are different, the Switch will drop the packet. Because of the existence of the PVID for untagged packets and the VID for tagged packets, tagaware and tag-unaware network devices can coexist on the same network. A Switch port can have only one PVID, but can have as many VIDs as the Switch has memory in its VLAN table to store them. Because some devices on a network may be tag-unaware, a decision must be made at each port on a tag-aware device before packets are transmitted ­ should the packet to be transmitted have a tag or not? If the transmitting port is connected to a tagunaware device, the packet should be untagged. If the transmitting port is connected to a tag-aware device, the packet should be tagged. Tagging and Untagging Every port on an 802.1Q compliant Switch can be configured as tagging or untagging. Ports with tagging enabled will put the VID number, priority and other VLAN information into the header of all packets that flow into and out of it. If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. The VLAN information in the tag can then be used by other 802.1Q compliant devices on the network to make packet forwarding decisions. Ports with untagging enabled will strip the 802.1Q tag from all packets that flow into and out of those ports. If the packet doesn't have an 802.1Q VLAN tag, the port will not alter the packet. Thus, all packets received by and forwarded by an untagging port will have no 802.1Q VLAN information. (Remember that the PVID is only used internally within the Switch). Untagging is used to send packets from an 802.1Q-compliant network device to a non-compliant network device. 32 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Ingress Filtering A port on a Switch where packets are flowing into the Switch and VLAN decisions must be made is referred to as an ingress port. If ingress filtering is enabled for a port, the Switch will examine the VLAN information in the packet header (if present) and decide whether or not to forward the packet. If the packet is tagged with VLAN information, the ingress port will first determine if the ingress port itself is a member of the tagged VLAN. If it is not, the packet will be dropped. If the ingress port is a member of the 802.1Q VLAN, the Switch then determines if the destination port is a member of the 802.1Q VLAN. If it is not, the packet is dropped. If the destination port is a member of the 802.1Q VLAN, the packet is forwarded and the destination port transmits it to its attached network segment. If the packet is not tagged with VLAN information, the ingress port will tag the packet with its own PVID as a VID (if the port is a tagging port). The Switch then determines if the destination port is a member of the same VLAN (has the same VID) as the ingress port. If it does not, the packet is dropped. If it has the same VID, the packet is forwarded and the destination port transmits it on its attached network segment. This process is referred to as ingress filtering and is used to conserve bandwidth within the Switch by dropping packets that are not on the same VLAN as the ingress port at the point of reception. This eliminates the subsequent processing of packets that will just be dropped by the destination port. Asymmetric VLANs The DES-3226S supports Asymmetric VLANs implementation for more efficient use of shared resources such as server or gateway devices. An asymmetric VLAN can be set up to allow a server (or several servers) to communicate with several clients through a single physical link on the Switch. At the same time however, the clients are not allowed to link to each other directly. For example, asymmetric VLANs can be set up so that the network email server can be accessed by all email clients. All email clients can send and receive data packets through the port connected to the email server, but they are not allowed to send and receive data to the remaining ports. The email server can freely associate with all ports, that is, all clients connected to the Switch. The key difference between conventional 802.1q VLAN implementation or symmetric VLANs, and asymmetric VLANs is in how address mapping is handled. Symmetric VLANs use separate address tables so there is no address sharing between VLANs. Asymmetric VLANs can use a single, shared address table. Address sharing however takes place in only one direction. In the example above, the VLAN created for the port connected to the email server has the entire address table at its disposal so that any address can be mapped to its port (PVID). 33 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Multicasting Multicasting is a group of protocols and tools that enable a single source point to send packets to groups of multiple destination points with persistent connections that last for some amount of time. The main advantage to multicasting is a decrease in the network load compared to broadcasting. Multicast Groups Class D IP addresses are assigned to a group of network devices that comprise a multicast group. The four most significant four bits of a Class D address are set to "1110". The following 28 bits is referred to as the `multicast group ID'. Some of the range of Class D addresses are registered with the Internet Assigned Numbers Authority (IANA) for special purposes. For example, the block of multicast addresses ranging from 224.0.0.1 to 224.0.0.225 is reserved for use by routing protocols and some other low-level topology discovery and maintenance protocols. Figure 5 - 7. Class D Multicast Address 34 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Some of the reserved IP multicast addresses are as follows: Address 224.0.0.0 224.0.0.1 224.0.0.2 224.0.0.3 224.0.0.4 224.0.0.5 224.0.0.6 224.0.0.7 224.0.0.8 224.0.0.9 224.0.0.10 224.0.0.11 224.0.0.12 224.0.0.13 224.0.0.14 224.0.0.15 224.0.0.16 224.0.0.17 224.0.0.18 224.0.0.19 through 224.0.0.225 224.0.0.21 Assignment Base Address (reserved) All Systems on this subnet All Routers on this subnet Unassigned DVMRP Routers OSPF IGP Routers OSPF IGP Designated Routers ST Routers ST Hosts All RIP2 Routers All IGRP Routers Mobile Agents DHCP Servers and Relay Agents All PIM Routers RSVP Encapsulation All CBT Routers Designated Sbm All Sbms VRRP Unassigned DVMRP on MOSPF Table 2. Reserved Multicast Address Assignment Internet Group Management Protocol (IGMP) End users that want to receive multicast packets must be able to inform nearby routers that they want to become a multicast group member of the group these packets are being sent to. The Internet Group Management Protocol (IGMP) is used by multicast routers to maintain multicast group membership. IGMP is also used to coordinate between multiple multicast routers that may be present on a network by electing one of the multicast routers as the `querier'. This router then keep track of the membership of multicast groups that have active members on the network. IGMP is used to determine whether the router should forward multicast packets it receives to the subnetworks it is attached to or not. A multicast router that has received a multicast packet will check to determine if there is at least one member of a multicast group that has requested to receive multicast packets from this source. If there is one member, the packet is forwarded. If there are no members, the packet is dropped. IGMP Versions 1 and 2 Users that want to receive multicast packets need to be able to join and leave multicast groups. This is accomplished using IGMP. Figure 5 - 8. IGMP Message Format 35 DES-3226S Layer 2 Fast Ethernet Switch User's Guide The IGMP Type codes are shown below: Type 0x11 0x11 0x16 0x17 0x12 Meaning Membership Query (if Group Address is 0.0.0.0) Specific Group Membership Query (if Group Address is Present) Membership Report (version 2) Leave a Group (version 2) Membership Report (version 1) Table 3. IGMP Type Codes Multicast routers use IGMP to manage multicast group memberships: · · · · An IGMP "report" is sent by a user's computer to join a group IGMP version 1 does not have an explicit `leave' message. Group members have an expiration timer, and if this timer expires before a query response is returned, the member is dropped from the group. IGMP version 2 introduces an explicit "leave" report. When a user wants to leave a group, this report is sent to the multicast router (for IGMP version 2). Multicast routers send IGMP queries (to the all-hosts group address: 224.0.0.1) periodically to see whether any group members exist on their subnetworks. If there is no response from a particular group, the router assumes that there are no group members on the network, and multicast packets are not forwarded. The TTL field of query messages is set to 1 so that the queries do not get forwarded to other subnetworks. IGMP version 2 introduces a few extensions to IGMP version 1 such as, the election of a single multicast querier for each network, explicit `leave' reports, and queries that are specific to a particular multicast group. The router with the lowest IP address is elected as the querier. The explicit group leave message is added to decrease latency, and routers can ask for membership reports from a particular multicast group ID. The transition states a host will go through to join or leave a multicast group are shown in the diagram below. Figure 5 - 9. IGMP State Transitions 36 DES-3226S Layer 2 Fast Ethernet Switch User's Guide 6 Web-Based Switch Management Introduction The DES-3226S offers an embedded Web-based (HTML) interface allowing users to manage the Switch from anywhere on the network through a standard browser such as Netscape Navigator/Communicator or Microsoft Internet Explorer. The Web browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol. The Web-based management module and the Console program (and Telnet) are different ways to access the same internal Switching software and configure it. Thus, all settings encountered in web-based management are the same as those found in the console program. NOTE: This Web-based Management Module does not accept Chinese language input (or other languages requiring 2 bytes per character). Getting Started The first step in getting started in using web-based management for your Switch is to secure a browser. A Web browser is a program which allows a person to read hypertext, for example, Netscape Navigator or Microsoft Internet Explorer. Follow the installation instructions for your browser. The second step is to configure an IP interface on the Switch. This can be done manually through the console or automatically using BOOTP/DHCP. 37 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Configuring the Switch To begin managing your Switch simply run the browser you have installed on your computer and point it to the IP address you have defined for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch. NOTE: The Factory default IP address for the Switch is 10.90.90.90 with a Netmask 255.0.0.0. In the page that opens, click on the Login hyperlink. This opens the management module's main page. Figure 6- 1. Welcome Page The Switch management features available in the web-based manager are explained below. 38 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Web-based Manager's User Interface The user interface provides access to various Switch configuration and management screens, allows you to view performance statistics, and permits you to graphically monitor the system status. Areas of the User Interface The figure below shows the user interface. The user interface is divided into 3 distinct areas as described in the table. Area 1 Area 2 Area 3 Figure 6 - 1. Main Web-Manager Screen 39 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Area Function Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports and expansion modules, showing port activity, duplex mode, or flow control, depending on the specified mode. Various areas of the graphic can be selected for performing management functions, including the ports, expansion modules, management module, or the case. 2 3 Folders, subfolders and hyperlinks for the selection of command sets and menus. Presents Switch information based on your selection and the entry of configuration data. 1 This section, arranged by topic, describes how to perform common monitoring and configuration tasks on the DES-3226S Switch using the Web-based Manager, you can perform any of the tasks described in the following sections. 40 DES-3226S Layer 2 Fast Ethernet Switch User's Guide User Accounts Management From the Main Menu, highlight Setup User Accounts and press Enter, then the User Account Management menu appears. Figure 6 - 2. User Accounts Control Table Click New to add a user. Figure 6 - 3. User Accounts Control Table ­ Add 1. 2. 3. 4. Enter the new user name, assign an initial password, and then confirm the new password. Determine whether the new user should have Admin or User privileges. Click on APPLY to make the user addition effective. A listing of all user accounts and access levels is shown on the user accounts control table. This list is updated when Apply is executed. Please remember that Apply makes changes to the Switch configuration for the current session only. All changes (including User additions or updates) must be entered into non-volatile ram using the Save Changes command on the Main Menu - if you want these changes to be permanent. 41 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Admin and User Privileges There are two levels of user privileges: Admin and User. Some menu selections available to users with Admin privileges may not be available to those with User privileges. The following table summarizes the Admin and User privileges: Switch Configuration Management Configuration Network Monitoring Community Strings and Trap Stations Update Firmware and Configuration Files System Utilities Factory Reset Reboot Switch User Account Management Add/Update/Delete User Accounts View User Accounts Yes Yes No No Privilege Admin Yes Yes Yes Yes Yes Yes Yes User Read Only Read Only Read Only No Ping Only No No Table 4. Admin and User Privileges After establishing a User Account with Admin-level privileges, highlight Save Changes and press Enter (see below). The Switch will save any changes to its non-volatile ram and reboot. You can logon again and are now ready to continue configuring the Switch. Saving Changes The DES-3226S has two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective by highlighting Apply and pressing the Apply button. When this is done, the settings will be immediately applied to the Switching software in RAM, and will immediately take effect. Some settings, though, require you to restart the Switch before they will take effect. Restarting the Switch erases all settings in RAM and reloads the stored settings from the NV-RAM. Thus, it is necessary to save all setting changes to NV-RAM before rebooting the Switch. To retain any configuration changes permanently, highlight Save Changes from the Main Menu. The following screen will appear: Figure 6 - 4. Save Changes Screen 42 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Click the Save Configuration button to save the current Switch configuration in NV-RAM. The following dialog box will confirm that the configuration has been saved: Figure 6 - 5. Save Configuration Confirmation Click the OK button to continue. Once the Switch configuration settings have been saved to NV-RAM, they become the default settings for the Switch. These settings will be used every time the Switch is rebooted. Factory Reset The Factory Reset function has several options when resetting the Switch. Some of the current configuration parameters can be retained while resetting all other configuration parameters to their factory defaults. NOTE: Only the Reset System option will enter the factory default parameters into the Switch's nonvolatile RAM, and then restart the Switch. All other options enter the factory defaults into the current configuration, but do not save this configuration. Reset System will return the Switch's configuration to the state it was when it left the factory. Reset gives the option of retaining the Switch's User Accounts and History Log while resetting all other configuration parameters to their factory defaults. If the Switch is reset with this option enabled, and Save Changes is not executed, the Switch will return to the last saved configuration when rebooted. The Reset Config option will reset all of the Switch's configuration parameters to their factory defaults, without saving these default values to the Switch's non-volatile RAM. If the Switch is reset with this option enabled, and Save Changes is not executed, the Switch will return to the last saved configuration when rebooted. In addition, the Reset System option is added to reset all configuration parameters to their factory defaults, save these parameters to the Switch's non-volatile RAM, and then restart the Switch. This option is equivalent to Reset Config (above) followed by Save Changes. Figure 6 - 6. Factory Reset Screen Click the Apply button to reset the Switch. 43 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Restart System Use the menu below to restart the Switch. Click to check the Yes option if you want to save the current configuration to non-volatile RAM before restarting the Switch. Click the No option if you do not want to save the current configuration before restarting the Switch. In this case, all of the configuration information entered from the last time Save Changes was performed will be lost. NOTE: Clicking the Yes option in the Restart menu is equivalent to executing Save Changes and then restarting the Switch. Click the Restart button to restart the Switch. Figure 6 - 7. Restart System Screen Basic Setup The hyperlinked menus contained in the Basic Setup folder include: · · · · · · · · · Switch Information Basic Switch Setup Stacking Information Port Configuration Port Security Settings Multicast Port Filtering Mode Traffic Segmentation Table User Accounts Management Station Ip Address · Serial Port Settings These menus are discussed below in this section with the exception of the User Accounts (see previous section on User Accounts Management). The menus within subfolders in the Basic Setup folder are presented in separate sections including · · · SNTP SETTINGS NETWORK MANAGEMENT SWITCH UTILITIES 44 DES-3226S Layer 2 Fast Ethernet Switch User's Guide Switch Information Click the Switch Information link in the Basic Setup folder to display basic information. Switch Information Click the Switch Information link in the Basic Setup folder to display basic information. The Switch Information window shows which (if any) external modules are installed, and the Switch's MAC Address (assigned by the factory and unchangeable). In addition, the Boot PROM and Firmware Version numbers are shown. This information is helpful to keep track of PROM and Firmware updates and to obtain the Switch's MAC address for entry into another network device's address table ­ if necessary. The Switch's IP settings and system name, location and contact information are configured in the Basic Switch Setup menu. Figure 6 - 8. Switch Information ­ Basic Settings Configuring the Switch's IP Address The Switch needs to have an IP address assigned to it so that an In-Band network management system (for example, the Web Manager or Telnet) client can find it on the network. The Basic Switch Setup window allows you to change the settings for the Ethernet interface used for in-band communication. The fields listed under the Current IP Settings heading are those that are currently being used by the Switch. Those fields listed under the New Switch IP Setting heading are those that will be used after clicking on the Apply button. To set the Switch's IP address: Click the Basic Switch Setup link (in the Basic Setup folder) to open the menu illustrated below. To manually assign the Switch's IP address, subnet mask, and default gateway address: 1. Select Manual from the Get IP From drop-down menu. 2. Enter the appropriate IP address and subnet mask. If you want to access the Switch from a different subnet from the one it is installed on, enter the IP address of the gateway. If you will manage the Switch from the subnet on which it is installed, you can leave the default address in this field. 3. If no VLANs have been previously configured on the Switch, you can use the default VLAN - named default. The default VLAN contains all of the Switch ports as members. If VLANs have been previously configured on the Switch, you will need to enter the name of the VLAN containing the port where the management station will operate. 45 DES-3226S Layer 2 Fast Ethernet Switch User's Guide To use the BOOTP or DHCP protocols to assign the Switch an IP address, subnet mask, and default gateway address: Use the Get IP From: pull-down menu to choose from Manual, BOOTP, or DHCP. This selects how the Switch will be assigned an IP address on the next reboot. Figure 6 - 9. Basic Switch Setup NOTE: The factory default IP address for the Switch is 10.90.90.90 with a subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0. 46 DES-3226S Layer 2 Fast Ethernet Switch User's Guide The New Switch IP Settings options include: Parameter BOOTP Description The Switch will send out a BOOTP broadcast request when it is powered up. The BOOTP protocol allows IP addresses, network masks, and default gateways to be assigned by a central BOOTP server. If this option is set, the Switch will first look for a BOOTP server to provide it with this information before using the default or previously entered settings. The Switch will send out a DHCP broadcast request when it is powered up. The DHCP protocol allows IP addresses, network masks, and default gateways to be assigned by a DHCP server. If this option is set, the Switch will first look for a DHCP server to provide it with this information before using the default or previously entered settings. Allows the entry of an IP address, Subnet Mask, and a Default Gateway for the Switch. These fields should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal form) between 0 and 255. This address should be a unique address on the network assigned for use by the network administrator. The fields which require entries under this option are as follows: A Bitmask that determines the extent of the subnet that the Switch is on. Should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal) between 0 and 255. The value should be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and 255.255.255.0 for a Class C network, but custom subnet masks are allowed. IP address that determines where packets with a destination address outside the current subnet should be sent. This is usually the address of a router or a host acting as an IP gateway. If your network is not part of an intranet, or you do not want the Switch to be accessible outside your local network, you can leave this field unchanged. This allows the entry of a VLAN name from which a management station (a computer) will be allowed to manage the Switch using TCP/IP (in-band, or over the network). Management stations that are on VLANs other than the one entered in the VLAN Name field will not be able to manage the Switch in-band unless their IP addresses are entered in the Management Station IP Addresses field. The default VLAN is named default and contains all of the Switch's ports. There are no entries in the Management Station IP Addresses table, by default - so any management station can access the Switch. DHCP Manual Subnet Mask Default Gateway VLAN Name In addition to IP settings, the Basic Switch Setup menu is also where you may enter optional settings to assign a name, location description and contact information for the network manager. This information appears in the Switch Information display in the web manager or when the show switch command is used in the CLI interface. 47