User manual D-LINK DES-3550

D-Link TM DES-3550 Managed 48-port 10/100Mbps and 2GE ports Layer 2 Ethernet Switch Manual DES-3550 Layer 2 Fast Ethernet Switch User's Guide ____________________ Information in this document is subject to change without notice. © 2005 D-Link Computer Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own. February 2005 P/N 651ES3526015 FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. CE Mark Warning This is a Class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures. Warnung! Dies ist ein Produkt der Klasse A. Im Wohnbereich kann dieses Produkt Funkstoerungen verursachen. In diesem Fall kann vom Benutzer verlangt werden, angemessene Massnahmen zu ergreifen. Precaución! Este es un producto de Clase A. En un entorno doméstico, puede causar interferencias de radio, en cuyo case, puede requerirse al usuario para que adopte las medidas adecuadas. Attention! Ceci est un produit de classe A. Dans un environnement domestique, ce produit pourrait causer des interférences radio, auquel cas l`utilisateur devrait prendre les mesures adéquates. Attenzione! Il presente prodotto appartiene alla classe A. Se utilizzato in ambiente domestico il prodotto può causare interferenze radio, nel cui caso è possibile che l`utente debba assumere provvedimenti adeguati. VCCI Warning BSMI Warning ii CONTENTS PREFACE............................................................................................................................................................. VIII INTENDED READERS............................................................................................................................................. VIII TYPOGRAPHICAL CONVENTIONS ............................................................................................................ VIII NOTES, NOTICES, AND CAUTIONS ............................................................................................................... IX SAFETY INSTRUCTIONS................................................................................................................................... IX Safety Cautions ....................................................................................................................................................x General Precautions for Rack-Mountable Products .........................................................................................xi Protecting Against Electrostatic Discharge .....................................................................................................xii INTRODUCTION ...................................................................................................................................................13 ETHERNET TECHNOLOGY .......................................................................................................................................13 Fast Ethernet Technology .................................................................................................................................13 Gigabit Ethernet Technology ............................................................................................................................13 SWITCHING TECHNOLOGY......................................................................................................................................14 SWITCH DESCRIPTION ............................................................................................................................................14 Features .............................................................................................................................................................15 Ports...................................................................................................................................................................16 FRONT-PANEL COMPONENTS .................................................................................................................................17 LED Indicators ..................................................................................................................................................17 REAR PANEL DESCRIPTION ....................................................................................................................................18 SIDE PANEL DESCRIPTION......................................................................................................................................18 GIGABIT COMBO PORTS .........................................................................................................................................18 INSTALLATION.....................................................................................................................................................20 Package Contents ..............................................................................................................................................20 BEFORE YOU CONNECT TO THE NETWORK............................................................................................................20 INSTALLING THE SWITCH WITHOUT THE RACK .....................................................................................................21 INSTALLING THE SWITCH IN A RACK .....................................................................................................................21 Mounting the Switch in a standard 19" rack....................................................................................................22 POWER ON..............................................................................................................................................................22 Power Failure....................................................................................................................................................22 CONNECTING THE SWITCH ............................................................................................................................23 SWITCH TO END NODE...........................................................................................................................................23 SWITCH TO HUB OR SWITCH ..................................................................................................................................23 CONNECTING TO NETWORK BACKBONE OR SERVER ............................................................................................24 INTRODUCTION TO SWITCH MANAGEMENT ...........................................................................................25 MANAGEMENT OPTIONS ........................................................................................................................................25 Web-based Management Interface....................................................................................................................25 SNMP-Based Management................................................................................................................................25 Command Line Console Interface Through The Serial Port............................................................................25 Connecting the Console Port (RS-232 DCE)....................................................................................................25 First Time Connecting to The Switch................................................................................................................27 PASSWORD PROTECTION ........................................................................................................................................29 SNMP Settings ...................................................................................................................................................29 IP ADDRESS ASSIGNMENT .....................................................................................................................................31 CONNECTING DEVICES TO THE SWITCH .................................................................................................................32 INTRODUCTION TO WEB-BASED SWITCH CONFIGURATION.............................................................34 Web-based User Interface .................................................................................................................................35 CONFIGURING THE SWITCH...........................................................................................................................37 IP ADDRESS............................................................................................................................................................37 SWITCH INFORMATION ...........................................................................................................................................40 Switch Information ............................................................................................................................................40 Advanced Settings..............................................................................................................................................41 PORT CONFIGURATIONS .........................................................................................................................................43 PORT MIRRORING...................................................................................................................................................45 PORT DESCRIPTION ................................................................................................................................................46 IGMP......................................................................................................................................................................48 IGMP Snooping .................................................................................................................................................48 Static Router Ports.............................................................................................................................................49 SPANNING TREE .....................................................................................................................................................51 802.1w Rapid Spanning Tree ............................................................................................................................51 STP Switch Settings ...........................................................................................................................................52 STP Port Settings...............................................................................................................................................54 FORWARDING FILTERING .......................................................................................................................................57 Unicast Forwarding ..........................................................................................................................................57 Static Multicast Forwarding .............................................................................................................................57 Multicast Port Filtering.....................................................................................................................................58 VLANS...................................................................................................................................................................60 Understanding IEEE 802.1p Priority ...............................................................................................................60 VLANs ................................................................................................................................................................61 IEEE 802.1Q VLANs .........................................................................................................................................61 Port-based VLANs .............................................................................................................................................67 Static VLAN Entry .............................................................................................................................................67 Port VLAN ID(PVID) ........................................................................................................................................70 PORT BANDWIDTH..................................................................................................................................................71 SNTP SETTINGS .....................................................................................................................................................73 Current Time Settings........................................................................................................................................73 Time Zone and DST ...........................................................................................................................................74 PORT SECURITY......................................................................................................................................................76 QOS ........................................................................................................................................................................78 Understanding QoS ...........................................................................................................................................78 Traffic Control ...................................................................................................................................................79 802.1p Default Priority .....................................................................................................................................79 802.1p User Priority..........................................................................................................................................81 Scheduling..........................................................................................................................................................81 TRAFFIC SEGMENTATION .......................................................................................................................................82 MAC NOTIFICATION ..............................................................................................................................................84 Global Settings...................................................................................................................................................84 Port Settings.......................................................................................................................................................84 LACP .....................................................................................................................................................................86 Understanding Port Trunk Groups ...................................................................................................................86 LACP Port..........................................................................................................................................................89 ACCESS PROFILE TABLE.........................................................................................................................................91 CONFIGURING THE ACCESS PROFILE TABLE..........................................................................................................91 SYSTEM LOG SERVER...........................................................................................................................................103 PAE ACCESS ENTITY (802.1X)............................................................................................................................104 Understanding 802.1x Port-based Network Access Control..........................................................................104 Configure Authenticator..................................................................................................................................106 Port Capability Settings ..................................................................................................................................109 Initializing Ports ..............................................................................................................................................111 Reauthenticate Port(s).....................................................................................................................................112 RADIUS Server................................................................................................................................................113 MANAGEMENT ...................................................................................................................................................115 SECURITY IP .........................................................................................................................................................115 User Accounts..................................................................................................................................................115 ACCESS AUTHENTICATION CONTROL ..................................................................................................................117 Policy & Parameters .......................................................................................................................................118 Application's Authentication Settings .............................................................................................................119 Authentication Server Group Settings.............................................................................................................119 Authentication Server Hosts............................................................................................................................120 Login Method Lists ..........................................................................................................................................122 Enable Method Lists ........................................................................................................................................124 Local Enable Password...................................................................................................................................126 Enable Admin...................................................................................................................................................126 SNMP...................................................................................................................................................................127 SNMP SETTINGS..................................................................................................................................................127 SNMP USER TABLE .............................................................................................................................................129 SNMP VIEW TABLE.............................................................................................................................................131 SNMP GROUP TABLE ..........................................................................................................................................132 SNMP COMMUNITY TABLE CONFIGURATION.....................................................................................................134 SNMP HOST TABLE.............................................................................................................................................135 SNMP ENGINE ID ................................................................................................................................................136 MONITORING......................................................................................................................................................137 PORT UTILIZATION ...............................................................................................................................................137 CPU UTILIZATION................................................................................................................................................138 PACKETS...............................................................................................................................................................139 Received(RX) ...................................................................................................................................................139 UMB_cast(RX).................................................................................................................................................141 Transmitted (TX)..............................................................................................................................................143 ERRORS.................................................................................................................................................................145 Received (RX) ..................................................................................................................................................145 Transmitted (TX)..............................................................................................................................................147 SIZE ......................................................................................................................................................................149 MAC ADDRESS ....................................................................................................................................................150 IGMP SNOOPING GROUP .....................................................................................................................................152 IGMP SNOOPING FORWARDING ..........................................................................................................................153 VLAN STATUS.....................................................................................................................................................153 BROWSE ROUTER PORT........................................................................................................................................154 PORT ACCESS CONTROL.......................................................................................................................................155 Authenticator State ..........................................................................................................................................155 MAINTENANCE...................................................................................................................................................156 TFTP SERVICES ...................................................................................................................................................156 Download Firmware From TFTP Server .......................................................................................................156 Download Settings from TFTP Server ............................................................................................................157 Upload Settings to TFTP Server .....................................................................................................................157 Upload Log to TFTP Server............................................................................................................................158 Switch History..................................................................................................................................................158 PING TEST.............................................................................................................................................................159 SAVING CHANGES ................................................................................................................................................160 REBOOT SERVICES................................................................................................................................................161 Reboot Device..................................................................................................................................................161 RESET ...................................................................................................................................................................161 LOGOUT................................................................................................................................................................162 SINGLE IP MANAGEMENT..............................................................................................................................163 SINGLE IP MANAGEMENT (SIM) OVERVIEW ......................................................................................................163 SIM USING THE WEB INTERFACE........................................................................................................................164 Topology ..........................................................................................................................................................166 Tool Tips ..........................................................................................................................................................168 Right Click .......................................................................................................................................................170 Menu Bar .........................................................................................................................................................174 FIRMWARE UPGRADE ...........................................................................................................................................175 CONFIGURATION FILE BACKUP/RESTORE............................................................................................................176 CABLES AND CONNECTORS ..........................................................................................................................179 CABLE LENGTHS ...............................................................................................................................................180 GLOSSARY ...........................................................................................................................................................180 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Preface The DES-3550 Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features. Section 2, Installation­ Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch. Section 3, Connecting the Switch ­ Tells how you can connect the Switch to your Ethernet/Fast Ethernet network. Section 4, Introduction to Switch Management ­ Introduces basic Switch management features, including password protection, SNMP settings, IP address assignment, and connecting devices to the Switch. Section 5, Introduction to Web-based Switch Management ­ Talks about connecting to and using the Web-based switch management feature on the Switch. Section 6, Configuring the Switch ­ A detailed discussion about configuring some of the basic functions of the Switch, including accessing the Switch information, using the Switch's utilities, and setting up network configurations, such as Quality of Service, The Access Profile Table, port mirroring, and configuring the Spanning Tree. Section 7, Management ­ A discussion of the security features of the Switch, including Security IP, User Accounts, Access Authentication Control, and SNMP. Section 8, Monitoring ­ Features graphs and screens used in monitoring features and packets on the Switch. Section 9, Maintenance ­ Features information on Switch utility functions, including TFTP Services, Switch History, Ping Test Save Changes, and Rebooting Services. Section 10, Single IP Management ­ Discussion on the Single IP Management function of the Switch, including functions and features of the Java based user interface and the utilities of the SIM function. Appendix A, Technical Specifications ­ The technical specifications of the DES-3550. Appendix B, Cables and Connectors ­ Describes the RJ-45 receptacle/connector, straight-through and crossover cables and standard pin assignments. Appendix C, Cable Lengths ­ Information on cable types and maximum distances. Glossary ­ Lists definitions for terms and acronyms used in this document. Intended Readers The DES-3550 Manual contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention Description viii DES-3550 Layer 2 Fast Ethernet Switch User's Guide [] In a command line, square brackets indicate an optional entry. For example: [copy filename] means that optionally you can type copy followed by the name of the file. Do not type the brackets. Indicates a button, a toolbar icon, menu, or menu item. For example: Open the File menu and choose Cancel. Used for emphasis. May also indicate system messages or prompts appearing on your screen. For example: You have mail. Bold font is also used to represent filenames, program names and commands. For example: use the copy command. Indicates commands and responses to prompts that must be typed exactly as printed in the manual. Indicates a window name. Names of keys on the keyboard have initial capitals. For example: Click Enter. Indicates a window name or a field. Also can indicate a variable or parameter that is replaced with an appropriate word or string. For example: type filename means that you should type the actual filename instead of the word shown in italic. Menu Name > Menu Option Indicates the menu structure. Device > Port > Port Properties means the Port Properties menu option under the Port menu option that is located under the Device menu. Bold font Boldface Typewriter Font Initial capital letter Italics Menu Name > Menu Option Notes, Notices, and Cautions NOTE: A NOTE indicates important information that helps you make better use of your device. NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death. Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow. ix DES-3550 Layer 2 Fast Ethernet Switch User's Guide Safety Cautions To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions. Observe and follow service markings. Do not service any product except as explained in your system documentation. Opening or removing covers that are marked with the triangular symbol with a lightning bolt may expose you to an electrical shock. Only a trained service technician should service components inside these compartments. If any of the following conditions occur, unplug the product from the electrical outlet and replace the part or contact your trained service provider: ­ The power cable, extension cable, or plug is damaged. ­ An object has fallen into the product. ­ The product has been exposed to water. ­ The product has been dropped or damaged. ­ The product does not operate correctly, when you follow the operating instructions. Keep your system away from radiators and heat sources. Also, do not block cooling vents. Do not spill food or liquids on your system components, and never operate the product in a wet environment. If the system gets wet, see the appropriate section in your troubleshooting guide or contact your trained service provider. Do not push any objects into the openings of your system. Doing so can cause a fire or an electric shock by shorting out interior components. Use the product only with approved equipment. Allow the product to cool before removing covers or touching internal components. Operate the product only from the type of external power source indicated on the electrical ratings label. If you are not sure of the type of power source required, consult your service provider or local power company. To help avoid damaging your system, be sure the voltage selection switch (if provided) on the power supply is set to match the power available at your location: ­ 115 volts (V)/60 hertz (Hz) in most of North and South America and some Far Eastern countries such as South Korea and Taiwan ­ 100 V/50 Hz in eastern Japan and 100 V/60 Hz in western Japan ­ 230 V/50 Hz in most of Europe, the Middle East, and the Far East Also, be sure that attached devices are electrically rated to operate with the power available in your location. Use only approved power cable(s). If you have not been provided with a power cable for your system or for any AC-powered option intended for your system, purchase a power cable that is approved for use in your country. The power cable must be rated for the product and for the voltage and current marked on the product's electrical ratings label. The voltage and current rating of the cable should be greater than the ratings marked on the product. To help prevent an electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs x · · · · · · · · · · DES-3550 Layer 2 Fast Ethernet Switch User's Guide · · · · · · to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded plugs. Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip. To help protect your system from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or uninterruptible power supply (UPS). Position system cables and power cables carefully; route cables so that they cannot be stepped on or tripped over. Be sure that nothing rests on any cables. Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modifications. Always follow your local/national wiring rules. When connecting or disconnecting power to hot-pluggable power supplies, if offered with your system, observe the following guidelines: ­ Install the power supply before connecting the power cable to the power supply. ­ Unplug the power cable before removing the power supply. ­ If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supplies. Move products with care; ensure that all casters and/or stabilizers are firmly connected to the system. Avoid sudden stops and uneven surfaces. General Precautions for Rack-Mountable Products Observe the following precautions for rack stability and safety. Also, refer to the rack installation documentation accompanying the system and the rack for specific caution statements and procedures. Systems are considered to be components in a rack. Thus, "component" refers to any system as well as to various peripherals or supporting hardware. CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances. Therefore, always install the stabilizers before installing components in the rack. After installing system/components in a rack, never pull more than one component out of the rack on its slide assemblies at one time. The weight of more than one extended component could cause the rack to tip over and may result in serious injury. · · · · Before working on the rack, make sure that the stabilizers are secured to the rack, extended to the floor, and that the full weight of the rack rests on the floor. Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack. Always load the rack from the bottom up, and load the heaviest item in the rack first. Make sure that the rack is level and stable before extending a component from the rack. Use caution when pressing the component rail release latches and sliding a component into or out of a rack; the slide rails can pinch your fingers. xi DES-3550 Layer 2 Fast Ethernet Switch User's Guide · · · · After a component is inserted into the rack, carefully extend the rail into a locking position, and then slide the component into the rack. Do not overload the AC supply branch circuit that provides power to the rack. The total rack load should not exceed 80 percent of the branch circuit rating. Ensure that proper airflow is provided to components in the rack. Do not step on or stand on any component when servicing other components in a rack. NOTE: A qualified electrician must perform all connections to DC power and to safety grounds. All electrical wiring must comply with applicable local or national codes and practices. CAUTION: Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. CAUTION: The system chassis must be positively grounded to the rack cabinet frame. Do not attempt to connect power to the system until grounding cables are connected. Completed power and safety ground wiring must be inspected by a qualified electrical inspector. An energy hazard will exist if the safety ground cable is omitted or disconnected. Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside your system. To prevent static damage, discharge static electricity from your body before you touch any of the electronic components, such as the microprocessor. You can do so by periodically touching an unpainted metal surface on the chassis. You can also take the following steps to prevent damage from electrostatic discharge (ESD): 1. When unpacking a static-sensitive component from its shipping carton, do not remove the component from the antistatic packing material until you are ready to install the component in your system. Just before unwrapping the antistatic packaging, be sure to discharge static electricity from your body. 2. When transporting a sensitive component, first place it in an antistatic container or packaging. 3. Handle all sensitive components in a static-safe area. If possible, use antistatic floor pads, workbench pads, and an antistatic grounding strap. xii DES-3550 Layer 2 Fast Ethernet Switch User's Guide SECTION 1 Introduction Ethernet Technology Switch Description Features Ports Front-Panel Components Side Panel Description Rear Panel Description Gigabit Combo Ports Ethernet Technology Fast Ethernet Technology The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks. A number of high-speed LAN technologies are proposed to provide greater bandwidth and improve client/server response times. Among them, Fast Ethernet, or 100BASE-T, provides a non-disruptive, smooth evolution from 10BASE-T technology. 100Mbps Fast Ethernet is a standard specified by the IEEE 802.3 LAN committee. It is an extension of the 10Mbps Ethernet standard with the ability to transmit and receive data at 100Mbps, while maintaining the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Ethernet protocol. Gigabit Ethernet Technology Gigabit Ethernet is an extension of IEEE 802.3 Ethernet utilizing the same packet structure, format, and support for CSMA/CD protocol, full-duplex, flow control, and management objects, but with a tenfold increase in theoretical throughput over 100Mbps Fast Ethernet and a one hundred-fold increase over 10Mbps Ethernet. Since it is compatible with all 10Mbps and 100Mbps Ethernet environments, Gigabit Ethernet provides a straightforward upgrade without wasting a company's existing investment in hardware, software, and trained personnel. The increased speed and extra bandwidth offered by Gigabit Ethernet are essential to coping with the network bottlenecks that frequently develop as computers and their busses get faster and more users use applications that generate more traffic. Upgrading key components, such as your backbone and servers to Gigabit Ethernet can greatly improve network response times as well as significantly speed up the traffic between your subnetworks. Gigabit Ethernet enables fast optical fiber connections to support video conferencing, complex imaging, and similar data-intensive applications. Likewise, since data transfers occur 10 times faster than Fast Ethernet, servers outfitted with Gigabit Ethernet NIC's are able to perform 10 times the number of operations in the same amount of time. 13 DES-3550 Layer 2 Fast Ethernet Switch User's Guide In addition, the phenomenal bandwidth delivered by Gigabit Ethernet is the most costeffective method to take advantage of today and tomorrow's rapidly improving switching and routing internetworking technologies. Switching Technology Another key development pushing the limits of Ethernet technology is in the field of switching technology. A switch bridges Ethernet packets at the MAC address level of the Ethernet protocol transmitting among connected Ethernet or Fast Ethernet LAN segments. Switching is a cost-effective way of increasing the total network capacity available to users on a local area network. A switch increases capacity and decreases network loading by making it possible for a local area network to be divided into different segments, which are not competing with each other for network transmission capacity, and therefore decrease the load on each segment. The Switch acts as a high-speed selective bridge between the individual segments. Traffic that needs to go from one segment to another (from one port to another) is automatically forwarded by the Switch, without interfering with any other segments (ports). This allows the total network capacity to be multiplied, while still maintaining the same network cabling and adapter cards. For Fast Ethernet or Gigabit Ethernet networks, a switch is an effective way of eliminating problems of chaining hubs beyond the "two-repeater limit." A switch can be used to split parts of the network into different collision domains, for example, making it possible to expand your Fast Ethernet network beyond the 205-meter network diameter limit for 100BASE-TX networks. Switches supporting both traditional 10Mbps Ethernet and 100Mbps Fast Ethernet are also ideal for bridging between existing 10Mbps networks and new 100Mbps networks. Switching LAN technology is a marked improvement over the previous generation of network bridges, which were characterized by higher latencies. Routers have also been used to segment local area networks, but the cost of a router and the setup and maintenance required make routers relatively impractical. Today's switches are an ideal solution to most kinds of local area network congestion problems. Switch Description The DES-3550 is equipped with unshielded twisted-pair (UTP) cable ports providing dedicated 10 or 100 Mbps bandwidth. The Switch has 24 UTP ports and Auto MDI-X/MDI-II convertible ports that can be used for uplinking to another switch. These ports can be used for connecting PCs, printers, servers, hubs, routers, switches, and other networking devices. The dual speed ports use standard twisted-pair cabling and are ideal for segmenting networks into small, connected subnetworks for superior performance. Each 10/100 port can support up to 200 Mbps of throughput in full-duplex mode. In addition, the Switch has two Mini-GBIC combo ports. These two, gigabit combo ports are ideal for connecting to a server or network backbone. 14 DES-3550 Layer 2 Fast Ethernet Switch User's Guide This stand-alone Switch enables the network to use some of the most demanding multimedia and imaging applications concurrently with other user applications without creating bottlenecks. The built-in console interface can be used to configure the Switch's settings for priority queuing, VLANs, and port trunk groups, port monitoring, and port speed. Features · · · · · · · · · · · · · · · · · · IEEE 802.3 10BASE-T compliant IEEE 802.3u 100BASE-TX compliant IEEE 802.1p Priority Queues IEEE 802.3x flow control in full-duplex mode IEEE 802.3ad Link Aggregation Control Protocol support. IEEE 802.1x Port-based and MAC-based Access Control IEEE 802.1Q VLAN IEEE 802.1D Spanning Tree and IEEE 802.1W Rapid Spanning Tree support Access Control List (ACL) support Single IP Management support Access Authentication Control utilizing TACACS, XTACACS, and TACACS+ Dual Image Firmware Simple Network Time Protocol support MAC Notification support Asymmetric VLAN support System and Port Utilization support System Log Support High performance switching engine performs forwarding and filtering at full wire speed, maximum 14, 881 packets/sec on each 10Mbps Ethernet port, and maximum 148,810 packet/sec on 100Mbps Fast Ethernet port. Full- and half-duplex for both 10Mbps and 100Mbps connections. Full-duplex allows the switch port to simultaneously transmit and receive data. It only works with connections to full-duplex-capable end stations and switches. Connections to a hub must take place at halfduplex. Supports broadcast storm filtering Non-blocking store and forward switching scheme capability to support rate adaptation and protocol conversion Supports by-port Egress/Ingress rate control. Efficient self-learning and address recognition mechanism enables forwarding rate at wire speed Supports port-based enable and disable 15 · · · · · · DES-3550 Layer 2 Fast Ethernet Switch User's Guide · · · · · · · · Address table: Supports up to 8K MAC addresses per device Supports a packet buffer of up to 64 Megabytes Supports Port-based VLAN Groups Port Trunking with flexible load distribution and fail-over function Supports IGMP Snooping Supports SNMP Supports Port Mirroring MIB support for: · · · · · · · · RFC1213 MIB II RFC1493 Bridge RFC1757 RMON RFC1643 Ether-like MIB RFC2233 Interface MIB Private MIB RFC2674 for 802.1p IEEE 802.1x MIB · · RS-232 DCE console port for Switch management Provides parallel LED display for port status such as link/act, speed, etc. Ports · · · · Forty-eight (48) high-performance (MDI-X/MDI-II) ports for connecting to end stations, servers, hubs, and other networking devices. All UTP ports can auto-negotiate between 10Mbps and 100Mbps, half-duplex and full-duplex, and feature flow control. Two 1000BASE-T Mini-GBIC combo ports for connecting to another switch, server, or network backbone. RS-232 DCE Diagnostic port (console port) for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program. Important Note: For customers interested in D-View, D-Link Corporation's proprietary SNMP management software, go to the D-Link Website (www.dlink.com.cn) and download the software and manual. 16 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Front-Panel Components The front panel of the Switch consists of LED indicators for power and for each 10/100 Mbps twisted-pair ports, and two 1000BASE-T Mini-GBIC ports. DES-3550 Figure 1- 1. Front Panel View of the DES-3550 as shipped Comprehensive LED indicators display the status of the Swtch and the network. LED Indicators The LED indicators of the Switch include Power, Console, Link/Act, Speed, and FDX. This Switch also includes a LED Mode button, which has the default setting set to Link/Act. The user may scroll through to show the LED status for Link/Act, Speed, and FDX of each port. The following shows the LED indicators for the Switch along with an explanation of each indicator. Figure 1- 2. LED Indicators Power This LED will light green after the Switch is powered on to indicate the ready state of the device. The indicator is dark when the Switch is powered off. This LED should blink during the Power-On Self Test (POST). When the POST is finished, the LED goes dark. This indicator is lit solid green when the Switch is being logged into via out-of-band/local console management through the RS-232 console port in the back of the Switch using a straight-through serial cable. This LED will be lit when the redundant power supply is present and in use. Otherwise, it will remain dark. One row of LEDs for each port is located above the ports on the front panel. The first LED is for the top port and the second one is for the bottom ports. The LED will light green when there is a secure connection to a device from the corresponding port. This LED will blink when there is activity on the port. The Switch's two Mini GBIC ports have their own corresponding LEDs. The LED will light green when there is a secure connection to a device from the corresponding port. This LED will blink when there is activity on the port. Console RPS Port LEDs Gigabit Ports 17 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Rear Panel Description The rear panel of the Switch contains an AC power connector. Figure 1- 3. Rear panel view of the Switch The AC power connector is a standard three-pronged connector that supports the power cord. Plug in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. The Switch automatically adjusts its power setting to any supply voltage in the range from 100 ~ 240 VAC at 50 ~ 60 Hz. The rear panel also includes an outlet for an optional external power supply. When power fails, the optional external RPS will take over all the power immediately and automatically. The rear panel contains two system fans. The system fans are used to dissipate heat. Do not block these openings, and leave at least 6 inches of space at the rear and sides of the Switch for proper ventilation. Be reminded that without proper heat dissipation and air circulation, system components might overheat, which could lead to system failure. Side Panel Description The right-hand side panel of the Switch contains heat vents to dissipate heat. Keep these openings clear of obstructions of up to six inches of space. Failure to comply with this may result in the system overheating and eventually to a system failure. Figure 1-4. Side Panels Gigabit Combo Ports In addition to the 48 10/100 Mbps ports, the Switch features two Gigabit Ethernet Combo ports. These two ports are 1000BASE-T copper ports (provided) and Mini-GBIC ports (optional). See the diagram below to view the two Mini-GBIC port modules being plugged into the Switch. Please note that although these two front panel modules can be used simultaneously, the ports must be different. The GBIC port will always have the highest priority. 18 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 1- 5. Mini-GBIC modules plug-in to the Switch Figure 1- 6. Installing the Mini-GBIC Module 19 DES-3550 Layer 2 Fast Ethernet Switch User's Guide SECTION 2 Installation Package Contents Before You Connect to the Network Installing the Switch Without the Rack Rack Installation Power On Package Contents Open the shipping carton of the Switch and carefully unpack its contents. The carton should contain the following items: · One DES-3550 Stand-alone Switch · One AC power cord This Manual · · Registration card Mounting kit (two brackets and screws) · · Four rubber feet with adhesive backing · RS-232 console cable If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch. · Install the Switch on a sturdy, level surface that can support at least 3 kg (6.6 lb) of weight. Do not place heavy objects on the Switch. · The power outlet should be within 1.82 meters (6 feet) of the Switch. · Visually inspect the power cord and see that it is fully secured to the AC power port. · Make sure that there is proper heat dissipation from and adequate ventilation around the Switch. Leave at least 15 cm (6 inches) of space at the front and rear of the Switch for ventilation. · Install the Switch in a fairly cool and dry place for the acceptable temperature and humidity operating ranges. · Install the Switch in a site free from strong electromagnetic field generators (such as motors), vibration, dust, and direct exposure to sunlight. 20 DES-3550 Layer 2 Fast Ethernet Switch User's Guide · When installing the Switch on a level surface, attach the rubber feet to the bottom of the device. The rubber feet cushion the Switch, protect the casing from scratches, and prevent it from scratching other surfaces. Installing the Switch Without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity. Figure 2- 1. Prepare Switch for installation on a desktop or shelf Installing the Switch in a Rack The Switch can be mounted in a standard 19" rack. Use the following diagrams to guide you. Figure 2- 2. Fasten mounting brackets to Switch 21 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Fasten the mounting brackets to the Switch using the screws provided. With the brackets attached securely, you can mount the Switch in a standard rack as shown in Figure 2-3, below. Mounting the Switch in a standard 19" rack. Figure 2- 3. Installing Switch in a rack Power On Plug one end of the AC power cord into the power connector of the Switch and the other end into the local power source outlet. After the Switch is powered on, the LED indicators will momentarily blink. This blinking of the LED indicators represents a reset of the system. Power Failure As a precaution, in the event of a power failure, unplug the Switch. When power is resumed, plug the Switch back in. 22 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Section 3 Connecting The Switch Switch To End Node Switch To Hub or Switch Connecting To Network Backbone or Server NOTE: All 48 high-performance NWay Ethernet ports can support both MDI-II and MDI-X connections. Switch To End Node End nodes include PCs outfitted with a 10, 100, or 1000 Mbps RJ-45 Ethernet/Fast Ethernet Network Interface Card (NIC) and most routers. An end node can be connected to the Switch via a twisted-pair Category 3, 4, or 5 UTP/STP cable. The end node should be connected to any of the ports of the Switch. Figure 3- 1. Switch connected to an end node The Link/Act LEDs for each UTP port will light green or amber when the link is valid. A blinking LED indicates packet activity on that port. Switch to Hub or Switch These connections can be accomplished in a number of ways using a normal cable. · A 10BASE-T hub or switch can be connected to the Switch via a twisted-pair Category 3, 4, or 5 UTP/STP cable. · A 100BASE-TX hub or switch can be connected to the Switch via a twisted -pair Category 5 UTP/STP cable. 23 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 3- 2. Switch connected to a port on a hub or switch using either a straight or crossover cable­ any normal cable is fine Connecting To Network Backbone or Server The two Mini-GBIC combo ports are ideal for uplinking to a network backbone or server. The copper ports operate at a speed of 1000, 100, or 10Mbps in ful-l or half-duplex mode. The fiber optic ports can operate at 1000Mbps in full-duplex mode. Connections to the Gigabit Ethernet ports are made using fiber optic cable or Category 5 copper cable, depending on the type of port. A valid connection is indicated when the Link LED is lit. Figure 3- 3. Uplink Connection to a server. 24 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Section 4 Introduction To Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface Through The Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to The Switch Password Protection SNMP Settings IP Address Assignment Connecting Devices to the Switch Management Options This system may be managed out-of-band through the console port on the front panel or inband using Telnet. The user may also choose the Web-based management, accessible through a Web browser. Web-based Management Interface After you have successfully installed the Switch, you can configure the Switch, monitor the LED panel, and display statistics graphically using a Web browser, such as Netscape Navigator (version 6.2 and higher) or Microsoft® Internet Explorer (version 5.0). SNMP-Based Management You can manage the Switch with an SNMP-compatible console program. The Switch supports SNMP version 1.0, version 2.0, and version 3.0. The SNMP agent decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database. The SNMP agent updates the MIB objects to generate statistics and counters. Command Line Console Interface Through the Serial Port You can also connect a computer or terminal to the serial console port to access the Switch. The command-line-driven interface provides complete access to all Switch management features. Connecting the Console Port (RS-232 DCE) The Switch provides an RS-232 serial port that enables a connection to a computer or terminal for monitoring and configuring the Switch. This port is a female DB-9 connector, implemented as a data terminal equipment (DTE) connection. 25 DES-3550 Layer 2 Fast Ethernet Switch User's Guide To use the console port, you need the following equipment: A terminal or a computer with both a serial port and the ability to emulate a terminal. A null modem or crossover RS-232 cable with a female DB-9 connector for the console port on the Switch. To connect a terminal to the console port: 1. Connect the female connector of the RS-232 cable directly to the console port on the Switch, and tighten the captive retaining screws. 2. Connect the other end of the cable to a terminal or to the serial connector of a computer running terminal emulation software. Set the terminal emulation software as follows: 1. Select the appropriate serial port (COM port 1 or COM port 2). 3. Set the data rate to 9600 baud. 4. Set the data format to 8 data bits, 1 stop bit, and no parity. 5. Set flow control to none. 6. Under Properties, select VT100 for Emulation mode. 7. Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that you select Terminal keys (not Windows keys). NOTICE: When you use HyperTerminal with the Microsoft® Windows® 2000 operating system, ensure that you have Windows 2000 Service Pack 2 or later installed. Windows 2000 Service Pack 2 allows you to use arrow keys in HyperTerminal's VT100 emulation. See www.microsoft.com for information on Windows 2000 service packs. · · 8. After you have correctly set up the terminal, plug the power cable into the power receptacle on the back of the Switch. The boot sequence appears in the terminal. 9. After the boot sequence completes, the console login screen displays. 10. If you have not logged into the command line interface (CLI) program, press the Enter key at the User name and password prompts. There is no default user name and password for the Switch. User names and passwords must first be created by the administrator. If you have previously set up user accounts, log in and continue to configure the Switch. 11. Enter the commands to complete your desired tasks. Many commands require administrator-level access privileges. Read the next section for more information on setting up user accounts. See the DES-3550 Command Line Interface Reference Manual on the documentation CD for a list of all commands and additional information on using the CLI. When you have completed your tasks, exit the session with the logout command or close the emulator program. Make sure the terminal or PC you are using to make this connection is configured to match these settings. If you are having problems making this connection on a PC, make sure the emulation is set to VT-100. You will be able to set the emulation by clicking on the File menu in your HyperTerminal window, clicking on Properties in the drop-down menu, and then clicking the 26 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Settings tab. This is where you will find the Emulation options. If you still do not see anything, try rebooting the Switch by disconnecting its power supply. Once connected to the console, the screen below will appear on your console screen. This is where the user will enter commands to perform all the available management functions. The Switch will prompt the user to enter a user name and a password. Upon the initial connection, there is no user name or password and therefore just press enter twice to access the command line interface. Figure 4- 1. Initial screen after first connection. First Time Connecting to the Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch. NOTE: The passwords used to access the Switch are case-sensitive; therefore, "S" is not the same as "s." When you first connect to the Switch, you will be presented with the first login screen (shown below). NOTE: Press Ctrl+R to refresh the screen. This command can be used at any time to force the console program in the Switch to refresh the console screen. 27 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 4- 2. Initial screen, first time connecting to the Switch Press Enter in both the Username and Password fields. You will be given access to the command prompt DES-3550:4# shown below: There is no initial username or password. Leave the Username and Password fields blank. Figure 4- 3. Command Prompt Note: The first user automatically gets Administrator level privileges. It is recommended to create at least one Admin-level user account for the Switch. 28 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Password Protection The DES-3550 does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged access to the Switch's management software. After your initial login, define new passwords for both default user names to prevent unauthorized access to the Switch, and record the passwords for future reference. To create an administrator-level account for the Switch, do the following: 1. At the CLI login prompt, enter create account admin followed by the and press the Enter key. 2. You will be asked to provide a password. Type the used for the administrator account being created and press the Enter key. 3. You will be prompted to enter the same password again to verify it. Type the same password and press the Enter key. 4. Successful creation of the new administrator account will be verified by a Success message. User names and passwords can be up to 15 characters in length. The sample below illustrates a successful creation of a new administrator-level account with the user name "newmanager." DES-3550:4#create account admin newmanager Command: create account admin newmanager Enter a case-sensitive new password:******** Enter the new password again for confirmation:******** Success. DES-3550:4# NOTICE: CLI configuration commands only modify the running configuration file and are not saved when the Switch is rebooted. To save all your configuration changes in nonvolatile storage, you must use the save command to copy the running configuration file to the startup configuration. NOTE: Passwords are case sensitive. SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other 29 DES-3550 Layer 2 Fast Ethernet Switch User's Guide network devices. Use SNMP to configure system features for proper operation, monitor performance, and detect potential problems in the Switch, switch group, or network. Managed devices that support SNMP include software (referred to as an agent), which runs locally on the device. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device. These objects are defined in a Management Information Base (MIB), which provides a standard presentation of the information controlled by the on-board SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network. The DES-3550 supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device. In SNMP v.1 and v.2, user authentication is accomplished using `community strings', which function like passwords. The remote user SNMP application and the Switch SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped). The default community strings for the Switch used for SNMP v.1 and v.2 management access are: public - Allows authorized management stations to retrieve MIB objects. private - Allows authorized management stations to retrieve and modify MIB objects. SNMP V3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMP v.1 while assigning a higher level of security to another group, granting read/write privileges using SNMP v.3. Using SNMP v.3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB. An additional layer of security is available for SNMP v.3 in that SNMP messages may be encrypted. To read more about how to configure SNMP v.3 settings for the Switch read the section entitled Management. Traps Traps are messages that alert network personnel of events that occur on the Switch. The events can be as serious as a reboot (someone accidentally turned OFF the Switch), or less serious like a port status change. The Switch generates traps and sends them to the trap recipient (or network manager). Typical traps include trap messages for Authentication Failure, Topology Change, and Broadcast\Multicast Storm. 30 DES-3550 Layer 2 Fast Ethernet Switch User's Guide MIBs Management and counter information are stored by the Switch in the Management Information Base (MIB). The Switch uses the standard MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base. The proprietary MIB may also be retrieved by specifying the MIB Object Identifier. MIB values can be either read-only or read-write. IP Address Assignment Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch's default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme. The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found by entering the command "show switch" into the command line interface, as shown below. Figure 4- 4. Show switch command The Switch's MAC address can also be found from the Web management program on the Switch Information (Basic Settings) window on the Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known. The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows: 1. Starting at the command line prompt, enter the commands config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x's represent the IP address 31 DES-3550 Layer 2 Fast Ethernet Switch User's Guide to be assigned to the IP interface named System and the y's represent the corresponding subnet mask. 2. Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x's represent the IP address to be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation. The IP interface named System on the Switch can be assigned an IP address and subnet mask, which can then be used to connect a management station to the Switch's Telnet or Web-based management agent. Figure 4- 5. Assigning the Switch an IP Address In the above example, the Switch was assigned an IP address of 10.53.13.175 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management. Connecting Devices to the Switch After you assign IP addresses to the Switch, you can connect devices to the Switch. To connect a device to an SFP transceiver port: 1. Use your cabling requirements to select an appropriate SFP transceiver type. 2. Insert the SFP transceiver (sold separately) into the SFP transceiver slot. 3. Use the appropriate network cabling to connect a device to the connectors on the SFP transceiver. NOTICE: When the SFP transceiver acquires a link, the associated integrated 10/100/1000BASE-T port is disabled. 32 DES-3550 Layer 2 Fast Ethernet Switch User's Guide 33 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Section 5 Introduction to Web-based Switch Configuration Introduction Login To Web manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software functions of the DES-3550 can be managed, configured, and monitored via the embedded web-based (HTML) interface. The Switch can be managed from remote stations anywhere on the network through a standard browser such as Netscape Navigator/Communicator or Microsoft Internet Explorer. The browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol. The Web-based management module and the Console program (and Telnet) are different ways to access the same internal switching software and configure it. Thus, all settings encountered in web-based management are the same as those found in the console program. Login to Web Manager To begin managing your Switch, simply run the browser you have installed on your computer and point it to the IP address you have defined for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch. NOTE: The Factory default IP address for the Switch is 10.90.90.90. In the page that opens, click on the Login to make a setup button: Figure 5- 1. Login Button This opens the management module's user authentication window, as seen below. 34 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Leave both the User Name field and the Password field blank and click OK. This will open the Web-based user interface. The Switch management features available in the web-based manager are explained below. Web-based User Interface The user interface provides access to various Switch configuration and management screens, allows you to view performance statistics, and permits you to graphically monitor the system status. Areas of the User Interface The figure below shows the user interface. The user interface is divided into 3 distinct areas as described in the table. Area 1 Area 3 Area 2 Figure 5- 2. Main Web-Manager Screen 35 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Area Function Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports and expansion modules, showing port activity, duplex mode, or flow control, depending on the specified mode. Various areas of the graphic can be selected for performing management functions, including port configuration. Select the menu or window to be displayed. The folder icons can be opened to display the hyperlinked menu buttons and subfolders contained within them. Click the D-Link logo to go to the D-Link website. Presents switch information based on your selection and the entry of configuration data. NOTICE: Any changes made to the Switch configuration during the current session must be saved in the Save Changes web menu (explained below) or use the command line interface (CLI) command save. 1 2 3 Web Pages When you connect to the management mode of the Switch with a Web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list and description of the main folders available in the web interface: Configurations ­ Contains screens concerning configurations for IP Address, Switch Information, Advanced Settings, Port Configuration, IGMP, Spanning Tree, Forwarding Filtering, VLANs, Port Bandwidth, SNTP Settings, Port Security, QoS, MAC Notification, LACP, Access Profile Table, System Log Servers, and PAE Access Entity Management ­ Contains screens concerning configurations for Security IP, User Accounts, Access Authentication Control (TACACS), and SNMP V3. Monitoring - Contains screens concerning monitoring the Switch, pertaining to Port Utilization, CPU Utilization, Packets, Errors Size, MAC Address, IGMP Snooping Group, IGMP Snooping Forwarding, VLAN Status, Router Port, and Port Access Control. Maintenance - Contains screens concerning configurations and information about Switch maintenance, including TFTP Services, Switch History, Ping Test, Save Changes, Reboot Services, and Logout. Single IP Management ­ Contains screens concerning information on Single IP Management, including SIM Settings, Topology, and Firmware/Configuration downloads. NOTE: Be sure to configure the user name and password in the User Accounts menu before connecting the Switch to the greater network. 36 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Section 6 Configuring The Switch IP Address Switch Information Advanced Settings Port Configuration Port Mirroring Port Description IGMP Spanning Tree Forward Filtering VLANs Port Bandwidth SNTP Settings Port Security QoS MAC Notification LACP Access Profile Table System Log Servers PAE Access Entity IP Address The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the Introduction of the CLI Manual or return to Section 4 of this manual for more information. To change IP settings using the Web manager you must access the IP Address menu located in the Configuration folder. To configure the Switch's IP address: Open the Configuration folder and click the IP Address menu link. The Web manager will display the Switch's current IP settings in the IP configuration menu, as seen below. 37 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 6- 1. IP Address Settings window. To manually assign the Switch's IP address, subnet mask, and default gateway address: · Select Manual from the Get IP From drop-down menu. · Enter the appropriate IP address and subnet mask. · If you want to access the Switch from a different subnet from the one it is installed on, enter the IP address of the gateway. If you will manage the Switch from the subnet on which it is installed, you can leave the default address (0.0.0.0) in this field. · If no VLANs have been previously configured on the Switch, you can use the default VLAN Name (default). The default VLAN contains all of the switch ports as members. If VLANs have been previously configured on the Switch, you will need to enter the VLAN ID of the VLAN that contains the port connected to the management station that will access the Switch. The Switch will allow management access from stations with the same VID listed here. NOTE: The Switch's factory default IP address is 10.90.90.90 with a subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0. To the use 38 DES-3550 Layer 2 Fast Ethernet Switch User's Guide BOOTP or DHCP protocols to assign the Switch an IP address, subnet mask, and default gateway address: Use the Get IP From: pull-down menu to choose from BOOTP or DHCP. This selects how the Switch will be assigned an IP address on the next reboot. The IP Address Settings options are: Parameter BOOTP Description The Switch will send out a BOOTP broadcast request when it is powered up. The BOOTP protocol allows IP addresses, network masks, and default gateways to be assigned by a central BOOTP server. If this option is set, the Switch will first look for a BOOTP server to provide it with this information before using the default or previously entered settings. The Switch will send out a DHCP broadcast request when it is powered up. The DHCP protocol allows IP addresses, network masks, and default gateways to be assigned by a DHCP server. If this option is set, the Switch will first look for a DHCP server to provide it with this information before using the default or previously entered settings. Allows the entry of an IP address, Subnet Mask, and a Default Gateway for the Switch. These fields should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal form) between 0 and 255. This address should be a unique address on the network assigned for use by the network administrator. The fields that require entries under this option are as follows: A Bitmask that determines the extent of the subnet that the Switch is on. Should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal) between 0 and 255. The value should be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and 255.255.255.0 for a Class C network, but custom subnet masks are allowed. IP address that determines where packets with a destination address outside the current subnet should be sent. This is usually the address of a router or a host acting as an IP gateway. If your network is not part of an intranet, or you do not want the Switch to be accessible outside your local network, you can leave this field unchanged. This allows the entry of a VLAN Name from which a management station will be allowed to manage the Switch using TCP/IP (in-band via web manager or Telnet). Management stations that are on VLANs other than the one entered here will not be able to manage the Switch in-band unless their IP addresses are entered in the Security IP Management menu. If VLANs have not yet been configured for the Switch, the default VLAN contains all of the Switch's ports. There are no entries in the Security IP Management table, by default, so any management station that can connect to the Switch can access the Switch until a management VLAN is specified or Management Station IP Addresses are assigned. This field will allow the user the enable or disable the Admin state for the IP interface, by the using the pull-down menu. Disabling this feature will render all remote management inoperable, and thus the only way to configure the Switch will be to use the Console port for the Command Line Interface. DHCP Manual Subnet Mask Default Gateway VLAN Name Admin State Click Apply to make your changes take effect. 39 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Setting the Switch's IP Address using the Console Interface Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch's default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known. The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows: Starting at the command line prompt, enter the commands config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x's represent the IP address to be assigned to the IP interface named System and the y's represent the corresponding subnet mask. Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x's represent the IP address to be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation. The IP interface named System on the Switch can be assigned an IP address and subnet mask, which can then be used to connect a management station to the Switch's Telnet or Web-based management agent. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management agent using the above IP address to connect to the Switch. Switch Information Click the Switch Information link in the Configuration menu. The subsections below describe how to change some of the basic settings for the Switch such as changing IP settings and assigning user names and passwords for management access privileges, as well as how to save the changes and restart the Switch. Switch Information Click the Switch Information link in the Configuration menu. 40 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 6- 2. Switch Information ­ Basic Settings The Switch Information window shows the Switch's MAC Address (assigned by the factory and is unchangeable), IP configuration, some important functions implemented, and their status. In addition, the Boot PROM, Firmware Version, and Hardware Version are present. This information is helpful to keep track of PROM and Firmware updates and to obtain the Switch's MAC address for entry into another network device's address table, if necessary. The user may also enter a System Name, System Location, and System Contact to aid in defining the Switch, to the user's preference. Advanced Settings The Advanced Settings window contains the main settings for all major functions for the Switch. To view the Advanced Settings window, click its link in the Configuration folder. This will enable the following window to be viewed and configured. 41 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 6- 3. Switch Information (Advanced Settings) Parameter Serial Port Auto Logout Time Description Select the logout time used for the console interface. This automatically logs the user out after an idle period of time, as defined. Choose from the following options: 2 Minutes, 5 Minutes, 10 Minutes, 15 Minutes, or Never. The default setting is 10 minutes. This field specifies the length of time a learned MAC Address will remain in the forwarding table without being accessed (that is, how long a learned MAC Address is allowed to remain idle). The default age-out time for the Switch is 300 seconds. To change this, type in a different value representing the MAC address age-out time in seconds. The Aging Time can be set to any value between 10 and 1,000,000 seconds. The default setting is 300 seconds. To enable system-wide IGMP Snooping capability select Enabled. IGMP snooping is Disabled by default. Enabling IGMP snooping allows you to specify use of a multicast router only (see below). To configure IGMP Snooping for individual VLANs, use the IGMP Snooping page under the IGMP folder. Use this pull-down menu to Enable or Disable GVRP on the Switch. Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet choose Disabled. Web-based management is Enabled by default. If you choose to disable this by selecting Disabled, you will lose the ability to configure the system through the Web interface as soon as these settings are applied. The algorithm that the Switch uses to balance the load across the ports that make up the port trunk group is defined by this definition. Choose MAC Source, MAC Destination, MAC Src & Dest, IP Source, IP Destination, or IP Src & Dest (See the Link Aggregation section of this manual). MAC Address Aging Time IGMP Snooping GVRP Status Telnet Status Web Status Link Aggregation Algorithm 42 DES-3550 Layer 2 Fast Ethernet Switch User's Guide RMON Status 802.1x Status 802.1x Authentication Protocol Asymmetric Vlan Remote monitoring (RMON) of the Switch is Enabled or Disabled here. Enables or disables 802.1x; default is Disabled. The user may use the pull down menu to choose between Radius Eap and Radius Pap for the 802.1x authentication protocol on the Switch. The default setting is Radius Eap. This field will enable or disable Asymmetric VLANs on the Switch. The default is Disabled. Enables or disables Syslog State; default is Disabled. Syslog Global State Click Apply to implement changes made to this window. NOTE: When the Asymmetric VLAN function is Disabled, the user must change the VLAN setting on the Switch to its default configurations. Port Configurations This section contains information for configuring various attributes and properties for individual physical ports, including port speed and flow control. Clicking on Port Configurations in the Configuration menu will display the following window for the user: 43 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 6- 4. Port Configuration and The Port Information Table window 44 DES-3550 Layer 2 Fast Ethernet Switch User's Guide To configure switch ports: 1. Choose the port or sequential range of ports using the From...To... port pull-down menus. 2. Use the remaining pull-down menus to configure the parameters described below: Parameter State Description Toggle the State field to either enable or disable a given port or group of ports. Toggle the Speed/Duplex field to either select the speed and duplex/half-duplex state of the port. Auto ­ auto-negotiation between 10 and 1000 Mbps devices, full- or half-duplex. The Auto setting allows the port to automatically determine the fastest settings the device the port is connected to can handle, and then to use those settings. The other options are Auto, 10M/Half, 10M/Full, 100M/Half, and 100M/Full. There is no automatic adjustment of port settings with any option other than Auto. Displays the flow control scheme used for the various port configurations. Ports configured for full-duplex use 802.3x flow control, half-duplex ports use backpressure flow control, and Auto ports use an automatic selection of the two. The default is Disabled. Enable or disable MAC address learning for the selected ports. When Enabled, destination and source MAC addresses are automatically listed in the forwarding table. When learning is Disabled, MAC addresses must be manually entered into the forwarding table. This is sometimes done for reasons of security or efficiency. See the section on Forwarding/Filtering for information on entering MAC addresses into the forwarding table. The default setting is Disabled. Speed/Duplex Flow Control Learn Click Apply to implement the new settings on the Switch. Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port. This is useful for network monitoring and troubleshooting purposes. To view the Port Mirroring window, click Port Mirroring in the Configuration folder. 45 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 6- 5. Setup Port Mirroring window To configure a mirror port: 1. Select the Source Port from where you want to copy frames and the Target Port, which receives the copies from the source port. 2. Select the Source Direction, Ingress, Egress, or Both and change the Status dropdown menu to Enabled. 3. Click Apply to make the changes take effect. NOTE: You cannot mirror a fast port onto a slower port. For example, if you try to mirror the traffic from a 100 Mbps port onto a 10 Mbps port, this can cause throughput problems. The port you are copying frames from should always support an equal or lower speed than the port to which you are sending the copies. In addition, the target port for the mirroring cannot be a member of a trunk group. Please note a target port and a source port cannot be the same port. Port Description The DES-3550 supports a port description feature where the user may name various ports on the Switch. To assign names to various ports, click the Port Description on the Configuration menu: 46 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Figure 6- 6. Port Description Setting and Port Description Table Use the From and To pull down menu to choose a port or range of ports to describe, and then enter a description of the port(s). Click Apply to set the descriptions in the Port Description Table. 47 DES-3550 Layer 2 Fast Ethernet Switch User's Guide IGMP Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch. In order to use IGMP Snooping it must first be enabled for the entire Switch (see Advanced Settings). You may then fine-tune the settings for each VLAN using the IGMP Snooping link in the Configuration folder. When enabled for IGMP snooping, the Switch can open or close a port to a specific Multicast group member based on IGMP messages sent from the device to the IGMP host or vice versa. The Switch monitors IGMP messages and discontinues forwarding multicast packets when there are no longer hosts requesting that they continue. IGMP Snooping Use the Current IGMP Snooping Group Entries window to view IGMP Snooping settings. To modify the settings, click the Modify button of the VLAN ID you want to change. Figure 6- 7. Current IGMP Snooping Group Entries Clicking the Modify button will bring up the IGMP Snooping Settings menu. Figure 6- 8. IGMP Snooping Settings window The following parameters may be viewed or modified: 48 DES-3550 Layer 2 Fast Ethernet Switch User's Guide Parameter VLAN ID Description This is the VLAN ID that, along with the VLAN name, identifies the VLAN that the user wishes to modify the IGMP Snooping Settings for. This is the VLAN Name that, along with the VLAN ID, identifies the VLAN that the user wishes to modify the IGMP Snooping Settings for. The Query Interval field is used to set the time (in seconds) between transmitting IGMP queries. Entries between 1 and 65535 seconds are allowed. Default = 125. This determines the maximum amount of time in seconds allowed before sending an IGMP response report. The Max Response Time field allows an entry between 1 and 25 (seconds). Default = 10. Adjust this variable according to expected packet loss. If packet loss on the VLAN is expected to be high, the Robustness Variable should be increased to accommodate increased packet loss. This entry field allows an entry of 1 to 255. Default = 2. Specifies the maximum amount of time between group-specific query messages, including those sent in response to leave group messages. Default = 1. This is the maximum amount of time in seconds allowed for a host to continue membership in a multicast group without the Switch receiving a host membership report. Default = 260. This is the maximum amount of time in seconds a route is kept in the forwarding table without receiving a membership report. Default = 260. This specifies the maximum amount of time in seconds between the Switch receiving a leave group message from a host, and the Switch issuing a group membership query. If no response to the membership query is received before the Leave Timer expires, the (multicast) forwarding entry for that host is deleted. Choose Enabled to enable transmitting IGMP Query packets or Disabled to disable. The default value is Disabled. Select Enabled to implement IGMP Snooping. This field is Disabled by default. VLAN Name Query Interval Max Response Time Robustness Variable Last Member Query Interval Host Timeout Route Timeout Leave Timer Querier State State Click Apply to implement the new settings. Click the Show All IGMP Group Entries link to return to the Current IGMP Snooping Group Entries window. Static Router Ports A static router port is a port that has a multicast router attached to it. Generally, this router would have a connection to a WAN or to the Internet. Establishing a router port will allow multicast packets coming from the router to be propagated through the network, as well as allowing multicast messages (IGMP) coming from the network to be propagated to the router. A router port has the following behavior: 49 DES-3550 Layer 2 Fast Ethernet Switch User's Guide · · · All IGMP Report packets will be forwarded to the router port. IGMP queries (from the router port) will be flooded to all ports. All UDP multicast packets will be forwarded to the router port. Because routers do not send IGMP reports or implement IGMP snooping, a multicast router connected to the router port of the Layer 3 switch would not be able to receive UDP data streams unless the UDP multicast packets were all forwarded to the router port. A router port will be dynamically configured when IGMP query packets, RIPv2 multicast, DVMRP multicast, or PIM-DM multicast packets are detected flowing into a port. Open the IGMP folder and the click on the Static Router Ports Entry link to open the Current Static Router Ports Entries page, as shown below. Figure 6- 9. Current Static Router Ports Entries window The Current Static Router Ports Entries page (shown above) displays all of the current entries to the Switch's static router port table. To add or modify an entry, click the Modify button. This will open the Static Router Ports Settings page, as shown below. Figure 6- 10. Static Router Ports Settings window The following parameters can be set: Parameter VID (VLAN ID) VLAN Name Member Ports Description This is the VLAN ID that, along with the VLAN name, identifies the VLAN where the multicast router is attached. This is the name of the VLAN where the multicast router is attached. These are the ports on the Switch that will have a multicast router attached to them. Click Apply to implement the new settings. Click the Show All Static Router Port Entries link to return to the Current Static Router Port Entries window. 50