User manual D-LINK DGS-3324SR

xStack Stackable Gigabit Layer 3 Switch Manual D-Link TM xStack Release IV High Density Layer 3 Stackable Gigabit Switch Manual xStack Stackable Gigabit Layer 3 Switch Manual _________________________________________________________________________________ Information in this document is subject to change wi thout notice. © 2004 D-Link Computer Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own. July 2004 P/N 6XSTACK... 0 1 xStack Stackable Gigabit Layer 3 Switch Manual Table of Contents Preface ..................................................................................................................................................... 9 Intended Readers...................................................................................................................................................................................10 Typographical Conventions ................................................................................................................................................................10 Notes, Notices, and Cautions..............................................................................................................................................................10 Safety Instructions.................................................................................................................................................................................11 Safety Cautions...................................................................................................................................................................................11 General Precautions for Rack-Mountable Products............................................................................................................................12 Protecting Against Electrostatic Discharge .........................................................................................................................................13 Introduction.......................................................................................................................................... 14 Ethernet Technology.............................................................................................................................................................................14 Fast Ethernet .......................................................................................................................................................................................14 Gigabit Ethernet Technology ..............................................................................................................................................................14 Switching Technology ........................................................................................................................................................................15 Switch Description..............................................................................................................................................................................15 Features ...............................................................................................................................................................................................16 Ports ....................................................................................................................................................................................................17 Installing the SFP ports..................................................................................................................................................................18 Front-Panel Components.....................................................................................................................................................................18 LED Indicators....................................................................................................................................................................................19 Rear Panel Description........................................................................................................................................................................20 Side Panel Description........................................................................................................................................................................21 Installation ............................................................................................................................................ 22 Package Contents................................................................................................................................................................................22 Before You Connect to the Network...................................................................................................................................................22 Installing the Switch without the Rack ...............................................................................................................................................23 Installing the Switch in a Rack ...........................................................................................................................................................23 Mounting the Switch in a Standard 19" Rack................................................................................................................................24 Power On.......................................................................................................................................................................................24 Power Failure.................................................................................................................................................................................24 The Optional Module..........................................................................................................................................................................24 The Media Accessory..........................................................................................................................................................................26 External Redundant Power System ...............................................................................................................................................26 Connecting the Switch ......................................................................................................................... 28 Switch to End Node ............................................................................................................................................................................28 Switch to Hub or Switch.....................................................................................................................................................................28 Connecting To Network Backbone or Server .....................................................................................................................................29 Stacking and the xStack ......................................................................................................................................................................30 Stacking Limitations Utilizing a Ring or Star Topology ...............................................................................................................33 1 xStack Stackable Gigabit Layer 3 Switch Manual Stacking In a Star Topology ..........................................................................................................................................................35 Introduction to Switch Management.................................................................................................. 36 Management Options............................................................................................................................................................................36 Web-based Management Interface......................................................................................................................................................36 SNMP-Based Management .................................................................................................................................................................36 Command Line Console Interface through the Serial Port .................................................................................................................36 Connecting the Console Port (RS-232 DCE) ................................................................................................................................36 First Time Connecting to the Switch ..................................................................................................................................................38 Password Protection............................................................................................................................................................................39 SNMP Settings ....................................................................................................................................................................................40 Traps..............................................................................................................................................................................................41 MIBs ..............................................................................................................................................................................................41 IP Address Assignment .......................................................................................................................................................................41 Connecting Devices to the Switch ......................................................................................................................................................43 Introduction to Web-based Switch Configuration............................................................................ 44 Introduction............................................................................................................................................................................................44 Logging on to the Web Manager ........................................................................................................................................................44 Web-based User Interface ...................................................................................................................................................................45 Areas of the User Interface............................................................................................................................................................45 Web Pages ...........................................................................................................................................................................................47 Configuring the Switch........................................................................................................................ 48 Switch Information ...............................................................................................................................................................................48 IP Address ..............................................................................................................................................................................................50 Setting the Switch's IP Address using the Console Interface........................................................................................................52 Advanced Settings.................................................................................................................................................................................53 Box Information ....................................................................................................................................................................................55 Port Configurations...............................................................................................................................................................................56 Port Description.....................................................................................................................................................................................58 Port Mirroring........................................................................................................................................................................................59 Link Aggregation..................................................................................................................................................................................60 Understanding Port Trunk Groups.................................................................................................................................................60 LACP Port Setting ................................................................................................................................................................................63 MAC Notification .................................................................................................................................................................................64 MAC Notification Global Settings ................................................................................................................................................64 MAC Notification Port Settings ....................................................................................................................................................65 IGMP Snooping.....................................................................................................................................................................................66 Static Router Ports..............................................................................................................................................................................68 Spanning Tree........................................................................................................................................................................................69 802.1s MSTP.................................................................................................................................................................................70 802.1w Rapid Spanning Tree ........................................................................................................................................................70 Port Transition States.....................................................................................................................................................................70 2 xStack Stackable Gigabit Layer 3 Switch Manual Edge Port .......................................................................................................................................................................................71 P2P Port .........................................................................................................................................................................................71 802.1d / 802.1w / 802.1s Compatibility........................................................................................................................................71 STP Bridge Global Settings ................................................................................................................................................................71 MST Configuration Table...................................................................................................................................................................74 MSTP Port Information ......................................................................................................................................................................76 STP Instance Settings..........................................................................................................................................................................78 STP Port Settings ................................................................................................................................................................................81 Forwarding & Filtering ........................................................................................................................................................................83 Unicast Forwarding.............................................................................................................................................................................83 Static Multicast Forwarding................................................................................................................................................................84 VLANs ....................................................................................................................................................................................................85 Understanding IEEE 802.1p Priority ..................................................................................................................................................85 VLAN Description..............................................................................................................................................................................85 Notes about VLANs in the xStack Family ....................................................................................................................................85 IEEE 802.1Q VLANs .........................................................................................................................................................................86 802.1Q VLAN Tags.......................................................................................................................................................................87 Port VLAN ID...............................................................................................................................................................................88 Tagging and Untagging.................................................................................................................................................................89 Ingress Filtering.............................................................................................................................................................................89 Default VLANs..............................................................................................................................................................................89 Port-based VLANs.........................................................................................................................................................................90 VLAN Segmentation .....................................................................................................................................................................90 VLAN and Trunk Groups..............................................................................................................................................................90 Protocol VLANs............................................................................................................................................................................91 Static VLAN Entry..............................................................................................................................................................................92 GVRP Settings ....................................................................................................................................................................................95 Traffic Control.......................................................................................................................................................................................98 Port Security.........................................................................................................................................................................................100 Port Lock Entries.................................................................................................................................................................................102 QoS........................................................................................................................................................................................................103 The Advantages of QoS....................................................................................................................................................................103 Understanding QoS...........................................................................................................................................................................104 Bandwidth Control............................................................................................................................................................................104 QoS Scheduling Mechanism.............................................................................................................................................................106 QoS Output Scheduling....................................................................................................................................................................107 Configuring the Combination Queue...........................................................................................................................................107 802.1p Default Priority .....................................................................................................................................................................109 802.1p User Priority..........................................................................................................................................................................110 Traffic Segmentation.........................................................................................................................................................................110 System Log Host.................................................................................................................................................................................111 SNTP Settings......................................................................................................................................................................................114 3 xStack Stackable Gigabit Layer 3 Switch Manual Time Settings ...............................................................................................................................................................................114 Time Zone and DST ....................................................................................................................................................................116 Access Profile Table ...........................................................................................................................................................................118 Configuring the Access Profile Table ...............................................................................................................................................118 System Severity Settings....................................................................................................................................................................136 Port Access Entity (802.1X)..............................................................................................................................................................137 802.1x Port-Based and MAC-Based Access Control.......................................................................................................................137 Authentication Server ..................................................................................................................................................................137 Authenticator...............................................................................................................................................................................138 Client............................................................................................................................................................................................139 Authentication Process................................................................................................................................................................140 Understanding 802.1x Port-based and MAC-based Network Access Control.................................................................................141 Port-Based Network Access Control................................................................................................................................................141 MAC-Based Network Access Control..............................................................................................................................................142 Configure Authenticator ...................................................................................................................................................................143 802.1X User.................................................................................................................................................................................145 PAE System Control.........................................................................................................................................................................146 Port Capability.............................................................................................................................................................................146 Initializing Ports for Port Based 802.1x ......................................................................................................................................148 Initializing Ports for MAC Based 802.1x....................................................................................................................................149 Reauthenticate Port(s) for Port Based 802.1x..............................................................................................................................150 Reauthenticate Port(s) for MAC-based 802.1x ...........................................................................................................................151 RADIUS Server ................................................................................................................................................................................152 Layer 3 IP Networking.......................................................................................................................................................................153 Layer 3 Global Advanced Settings ...................................................................................................................................................153 IP Multinetting..................................................................................................................................................................................153 IP Interface Setup ........................................................................................................................................................................154 MD5 Key Table Configuration .........................................................................................................................................................157 Route Redistribution Settings ...........................................................................................................................................................157 Static/Default Route Settings ............................................................................................................................................................159 Route Preference Settings .................................................................................................................................................................160 Static ARP Table...............................................................................................................................................................................163 RIP ....................................................................................................................................................................................................164 RIP Global Settings .....................................................................................................................................................................166 RIP Settings .................................................................................................................................................................................166 OSPF.................................................................................................................................................................................................167 OSPF Global Settings ..................................................................................................................................................................184 OSPF Area Setting.......................................................................................................................................................................184 OSPF Interface Settings ...............................................................................................................................................................185 OSPF Virtual Link Settings .........................................................................................................................................................187 OSPF Area Aggregation Settings ................................................................................................................................................189 OSPF Host Route Settings...........................................................................................................................................................190 4 xStack Stackable Gigabit Layer 3 Switch Manual DHCP / BOOTP Relay .....................................................................................................................................................................192 DHCP / BOOTP Relay Information............................................................................................................................................192 DHCP/BOOTP Relay Interface Settings .....................................................................................................................................192 DNS Relay ........................................................................................................................................................................................193 Configuring DNS Relay Information ..........................................................................................................................................194 DNS Relay Static Settings ...........................................................................................................................................................194 VRRP ................................................................................................................................................................................................195 VRRP Global Settings .................................................................................................................................................................195 VRRP Virtual Router Settings .....................................................................................................................................................196 VRRP Authentication Settings ....................................................................................................................................................199 IP Multicast Routing Protocol...........................................................................................................................................................200 IGMP...........................................................................................................................................................................................200 IGMP Versions 1 and 2.....................................................................................................................................................................201 IGMP Version 3................................................................................................................................................................................202 IGMP Interface Configuration.....................................................................................................................................................204 DVMRP Interface Configuration......................................................................................................................................................205 DVMRP Global Settings .............................................................................................................................................................206 DVMRP Interface Settings ..........................................................................................................................................................206 PIM -DM Interface Configuration .....................................................................................................................................................207 PIM -DM Configuration...............................................................................................................................................................207 Security Management ........................................................................................................................ 209 Security IP............................................................................................................................................................................................209 User Accounts......................................................................................................................................................................................209 Admin and User Privileges ..........................................................................................................................................................210 Access Authentication Control.........................................................................................................................................................211 Authentication Policy & Parameters.................................................................................................................................................212 Application's Authentication Settings ...............................................................................................................................................213 Authentication Server Group ............................................................................................................................................................213 Authentication Server Host...............................................................................................................................................................215 Login Method Lists...........................................................................................................................................................................216 Enable Method Lists.........................................................................................................................................................................218 Configure Local Enable Password....................................................................................................................................................220 Enable Admin ...................................................................................................................................................................................220 Secure Socket Layer (SSL) ...............................................................................................................................................................222 Download Certificate........................................................................................................................................................................222 Configuration ....................................................................................................................................................................................223 Secure Shell (SSH) .............................................................................................................................................................................225 SSH Configuration............................................................................................................................................................................225 SSH Authentication Mode and Algorithm Settings ..........................................................................................................................226 SSH User Authentication Mode........................................................................................................................................................229 SNMP Manager.................................................................................................................................. 231 SNMP Settings ..................................................................................................................................................................................231 5 xStack Stackable Gigabit Layer 3 Switch Manual SNMP User Table.............................................................................................................................................................................232 SNMP View Table............................................................................................................................................................................234 SNMP Group Table ..........................................................................................................................................................................235 SNMP Community Table..................................................................................................................................................................237 SNMP Host Table.............................................................................................................................................................................238 SNMP Engine ID ..............................................................................................................................................................................239 Monitoring .......................................................................................................................................... 240 Port Utilization ....................................................................................................................................................................................240 CPU Utilization ...................................................................................................................................................................................241 Packets ..................................................................................................................................................................................................242 Received (RX)...................................................................................................................................................................................242 UMB Cast (RX)................................................................................................................................................................................244 Transmitted (TX)..............................................................................................................................................................................246 Errors .....................................................................................................................................................................................................248 Received (RX)...................................................................................................................................................................................248 Transmitted (TX)..............................................................................................................................................................................250 Size ........................................................................................................................................................................................................252 Stacking Information ..........................................................................................................................................................................254 Module Information............................................................................................................................................................................255 Device Status.......................................................................................................................................................................................256 MAC Address ......................................................................................................................................................................................257 Switch History Log.............................................................................................................................................................................259 IGMP Snooping Group ......................................................................................................................................................................260 IGMP Snooping Forwarding.............................................................................................................................................................261 Browse Router Port .............................................................................................................................................................................261 Port Access Control............................................................................................................................................................................262 Authenticator State............................................................................................................................................................................262 Authenticator Statistics .....................................................................................................................................................................264 Authenticator Session Statistics........................................................................................................................................................265 Authenticator Diagnostics.................................................................................................................................................................267 RADIUS Authentication...................................................................................................................................................................269 RADIUS Accounting........................................................................................................................................................................270 Layer 3 Feature ....................................................................................................................................................................................272 Browse IP Address Table..................................................................................................................................................................272 Browse Routing Table ......................................................................................................................................................................273 Browse ARP Table............................................................................................................................................................................273 Browse IP Multicast Forwarding Table ............................................................................................................................................274 Browse IGMP Group Table..............................................................................................................................................................274 OSPF Monitoring..............................................................................................................................................................................277 Browse OSPF LSDB Table .........................................................................................................................................................277 Browse OSPF Neighbor Table ....................................................................................................................................................278 6 xStack Stackable Gigabit Layer 3 Switch Manual OSPF Virtual Neighbor ...............................................................................................................................................................279 DVMRP Monitoring.........................................................................................................................................................................280 Browse DVMRP Routing Table..................................................................................................................................................280 Browse DVMRP Neighbor Table................................................................................................................................................281 Browse DVMRP Routing Next Hop Table .................................................................................................................................281 PIM Monitoring................................................................................................................................................................................283 Browse PIM Neighbor Table.......................................................................................................................................................283 Switch Maintenance ........................................................................................................................... 284 TFTP Services .....................................................................................................................................................................................284 Download Firmware .........................................................................................................................................................................284 Download Configuration File ...........................................................................................................................................................285 Upload Configuration .......................................................................................................................................................................285 Upload Log .......................................................................................................................................................................................285 Multiple Image Services ....................................................................................................................................................................286 Firmware Information .......................................................................................................................................................................286 Config Firmware Image ....................................................................................................................................................................287 CompactFlash Services ......................................................................................................................................................................287 CF Card Information.........................................................................................................................................................................288 Download Firmware from CF...........................................................................................................................................................288 Download Configuration from CF....................................................................................................................................................289 Upload Firmware to CF....................................................................................................................................................................290 Upload Config to CF.........................................................................................................................................................................290 Upload Log to CF .............................................................................................................................................................................290 FS Commands ...................................................................................................................................................................................291 Format..........................................................................................................................................................................................291 Copy.............................................................................................................................................................................................292 Md/Mkdir.....................................................................................................................................................................................292 Rd/Rmdir .....................................................................................................................................................................................292 Dir................................................................................................................................................................................................293 Rename ........................................................................................................................................................................................293 Ping Test...............................................................................................................................................................................................294 Save Changes.......................................................................................................................................................................................294 Reset......................................................................................................................................................................................................295 Reboot System.....................................................................................................................................................................................296 Logout...................................................................................................................................................................................................296 D-Link Single IP Management .......................................................................................................... 297 Single IP Management (SIM) Overview.........................................................................................................................................297 SIM Using the Web Interface ...........................................................................................................................................................298 Topology...............................................................................................................................................................................................299 Tool Tips...............................................................................................................................................................................................302 Right Click ........................................................................................................................................................................................303 7 xStack Stackable Gigabit Layer 3 Switch Manual Group Icon...................................................................................................................................................................................303 Commander Switch Icon .............................................................................................................................................................304 Member Switch Icon....................................................................................................................................................................305 Candidate Switch Icon .................................................................................................................................................................306 Menu Bar...........................................................................................................................................................................................307 Group...........................................................................................................................................................................................308 Device ..........................................................................................................................................................................................308 View .............................................................................................................................................................................................308 Firmware Upgrade ..............................................................................................................................................................................309 Configuration File Backup/Restore..................................................................................................................................................309 Appendix A ......................................................................................................................................... 310 Appendix B.......................................................................................................................................... 312 Cables and Connectors ................................................................................................................................................................312 Appendix C ......................................................................................................................................... 313 Cable Lengths..............................................................................................................................................................................313 Glossary ............................................................................................................................................... 314 International Offices .......................................................................................................................... 317 8 xStack Stackable Gigabit Layer 3 Switch Manual Preface The xStack Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features. Section 2, Installation- Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch. Section 3, Connecting the Switch - Tells how you can connect the Switch to your Ethernet network. Section 4, Introduction to Switch Management - Introduces basic Switch management features, including password protection, SNMP settings, IP address assignment and connecting devices to the Switch. Section 5, Introduction to Web-based Switch Management - Talks about connecting to and using the Web-based switch management feature on the Switch. Section 6, Configuring the Switch - A detailed discussion about configuring some of the basic functions of the Switch, including accessing the Switch information, using the Switch's utilities and setting up network configurations, such as Quality of Service, The Access Profile Table, port mirroring and configuring the Spanning Tree. Section 7, Management - A discussion of the security features of the Switch, including Security IP, User Accounts, and Access Authentication Control. Section 8, SNMP Manager ­ A detailed discussion regarding the Simple Network Monitoring Protocol including description of features and a brief introduction to SNMP. Section 9, Monitoring - Features graphs and screens used in monitoring features and packets on the Switch. Section 10, Maintenance - Features information on Switch utility functions, including TFTP Services, Switch History, Ping Test Save Changes and Rebooting Services. Section 11, Single IP Management - Discussion on the Single IP Management function of the Switch, including functions and features of the Java based user interface and the utilities of the SIM function. Appendix A, Technical Specifications - The technical specifications of switches in the xStack family. Appendix B, Cables and Connectors - Describes the RJ-45 receptacle/connector, straight-through and crossover cables and standard pin assignments. Appendix C, Cable Lengths - Information on cable types and maximum distances. Glossary - Lists definitions for terms and acronyms used in this document. 9 xStack Stackable Gigabit Layer 3 Switch Manual Intended Readers The xStack Manual contains information for setup and management of the Switch. This man ual is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention [] Description In a command line, square brackets indicate an optional entry. For example: [copy filename] means that optionally you can type copy followed by the name of the file. Do not type the brackets. Indicates a button, a toolbar icon, menu, or menu item. For example: Open the File menu and choose Cancel. Used for emphasis. May also indicate system messages or prompts appearing on your screen. For example: You have mail. Bold font is also used to represent filenames, program names and commands. For example: use the copy command. Indicates commands and responses to prompts that must be typed exactly as printed in the manual. Indicates a window name. Names of keys on the keyboard have initial capitals. For example: Click Enter. Indicates a window name or a field. Also can indicate a variables or parameter that is replaced with an appropriate word or string. For example: type filename means that you should type the actual filename instead of the word shown in italic. Menu Name > Menu Option Indicates the menu structure. Device > Port > Port Properties means the Port Properties menu option under the Port menu option that is located under the Device menu. Bold font Boldface Typewriter Font Initial capital letter Italics Menu Name > Menu Option Notes, Notices, and Cautions A NOTE indicates important information that helps you make better use of your device. A NOTICE indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. A CAUTION indicates a potential for property damage, personal injury, or death. 10 xStack Stackable Gigabit Layer 3 Switch Manual Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( to review and follow. ) is used to indicate cautions and precautions that you need Safety Cautions To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions. · Observe and follow service markings. · · · Do not service any product except as explained in your system documentation. Opening or removing covers that are marked with the triangular symbol with a lightning bolt may expose you to electrical shock. Only a trained service technician should service components inside these compartments. · If any of the following conditions occur, unplug the product from the electrical outlet and replace the part or contact your trained service provider: · · · · · The power cable, extension cable, or plug is damaged. An object has fallen into the product. The product has been exposed to water. The product has been dropped or damaged. The product does not operate correctly when you follow the operating instructions. · · · · · · · Keep your system away from radiators and heat sources. Also, do not block cooling vents. Do not spill food or liquids on your system components, and never operate the product in a wet environment. If the system gets wet, see the appropriate section in your troubleshooting guide or contact your trained service provider. Do not push any objects into the openings of your system. Doing so can cause fire or electric shock by shorting out interior components. Use the product only with approved equipment. Allow the product to cool before removing covers or touching internal components. Operate the product only from the type of external power source indicated on the electrical ratings label. If you are not sure of the type of power source required, consult your service provider or local power company. To help avoid damaging your system, be sure the voltage selection switch (if provided) on the power supply is set to match the power available at your location: · · · 115 volts (V)/60 hertz (Hz) in most of North and South America and some Far Eastern countries such as South Korea and Taiwan 100 V/50 Hz in eastern Japan and 100 V/60 Hz in western Japan 230 V/50 Hz in most of Europe, the Middle East, and the Far East · · Also, be sure that attached devices are electrically rated to operate with the power available in your location. Use only approved power cable(s). If you have not been provided with a power cable for your system or for any ACpowered option intended for your system, purchase a power cable that is approved for use in your country. The power cable must be rated for the product and for the volt age and current marked on the product's electrical ratings label. The voltage and current rating of the cable should be greater than the ratings marked on the product. 11 xStack Stackable Gigabit Layer 3 Switch Manual · To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded plugs. Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip. To help protect your system from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or uninterruptible power supply (UPS). Position system cables and power cables carefully; route cables so that they cannot be stepped on or tripped over. Be sure that nothing rests on any cables. Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modifications. Always follow your local/national wiring rules. When connecting or disconnecting power to hot-pluggable power supplies, if offered with your system, observe the following guidelines: · · · · · · · · Install the power supply before connecting the power cable to the power supply. Unplug the power cable before removing the power supply. If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supplies. · Move products with care; ensure that all casters and/or stabilizers are firmly connected to the system. Avoid sudden stops and uneven surfaces. General Precautions for Rack-Mountable Products Observe the following precautions for rack stability and safety. Also, refer to the rack installation documentation accompanying the system and the rack for specific caution statements and procedures. · Systems are considered to be components in a rack. Thus, "component" refers to any system as well as to various peripherals or supporting hardware. CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances. Therefore, always install the stabilizers before installing components in the rack. After installing system/components in a rack, never pull more than one component out of the rack on its slide assemblies at one time. The weight of more than one extended component could cause the rack to tip over and may result in serious injury. · Before working on the rack, make sure that the stabilizers are secured to the rack, extended to the floor, and that the full weight of the rack rests on the floor. Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack. Always load the rack from the bottom up, and load the heaviest item in the rack first. Make sure that the rack is level and stable before extending a component from the rack. Use caution when pressing the component rail release latches and sliding a component into or out of a rack; the slide rails can pinch your fingers. After a component is inserted into the rack, carefully extend the rail into a locking position, and then slide the component into the rack. 12 · · · · xStack Stackable Gigabit Layer 3 Switch Manual · · · Do not overload the AC supply branch circuit that provides power to the rack. The total rack load should not exceed 80 percent of the branch circuit rating. Ensure that proper airflow is provided to components in the rack. Do not step on or stand on any component when servicing other components in a rack. NOTE: A qualified electrician must perform all connections to DC power and to safety grounds. All electrical wiring must comply with applicable local or national codes and practices. CAUTION: Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor. Contact the appropriate electrical inspection authority or an elec trician if you are uncertain that suitable grounding is available. CAUTION: The system chassis must be positively grounded to the rack cabinet frame. Do not attempt to connect power to the system until grounding cables are connected. Completed power and safety ground wiring must be inspected by a qualified electrical inspector. An energy hazard will exist if the safety ground cable is omitted or disconnected. Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside your system. To prevent static damage, dis charge static electricity from your body before you touch any of the electronic components, such as the microprocessor. You can do so by periodically touching an unpainted metal surface on the chassis. You can also take the following steps to prevent damage from electrostatic discharge (ESD): 1. When unpacking a static-sensitive component from its shipping carton, do not remove the component from the antistatic packing material until you are ready to install the component in your system. Just before unwrapping the antistatic packaging, be sure to discharge static electricity from your body. When transporting a sensitive component, first place it in an antistatic container or packaging. Handle all sensitive components in a static-safe area. If possible, use antistatic floor pads, workbench pads and an antistatic grounding strap. 2. 3. 13 xStack Stackable Gigabit Layer 3 Switch Manual Section 1 Introduction Ethernet Technology Switch Description Features Ports Front-Panel Components Side Panel Description Rear Panel Description Gigabit Combo Ports Ethernet Technology Fast Ethernet Technology The following manual describes the installation, maintenance and configurations concerning members of the xStack family. These four switches, the DGS -3324SRi, DGS-3324SR, DXS-3326GSR and the DXS-3350SR are all very similar in configurations and basic hardware and consequentially, most of the information in this manual will be universal to the whole xStack family. Corresponding screen pictures of the web manager may be taken from any one of these switches but the configuration will be identical, except for varying port counts. Ethernet Technology Fast Ethernet The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks. A number of high-speed LAN technologies are proposed to provide greater bandwidth and improve client/server response times. Among them, Fast Ethernet, or 100BASE-T, provides a non-disruptive, smooth evolution from 10BASE-T technology. 100Mbps Fast Ethernet is a standard specified by the IEEE 802.3 LAN committee. It is an extension of the 10Mbps Ethernet standard with the ability to transmit and receive data at 100Mbps, while maintaining the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Ethernet protocol. Gigabit Ethernet Technology Gigabit Ethernet is an extension of IEEE 802.3 Ethernet utilizing the same packet structure, format, and support for CSMA/CD protocol, full duplex, flow control, and management objects, but with a tenfold increase in theoretical throughput over 100Mbps Fast Ethernet and a one hundred-fold increase over 10Mbps Ethernet. Since it is compatible with all 10Mbps and 100Mbps Ethernet environments, Gigabit Ethernet provides a straightforward upgrade without wasting a company's existing investment in hardware, software, and trained personnel. The increased speed and extra bandwidth offered by Gigabit Ethernet are essential to coping with the network bottlenecks that frequently develop as computers and their busses get faster and more users use applications that generate more traffic. Upgrading key components, such as your backbone and servers to Gigabit Ethernet can greatly improve network response times as well as significantly speed up the traffic between your subnetworks. Gigabit Ethernet enables fast optical-fiber connections to support video conferencing, complex imaging, and similar dataintensive applications. Likewise, since data transfers occur 10 times faster than Fast Ethernet, servers outfitted with Gigabit Ethernet NIC's are able to perform 10 times the number of operations in the same amount of time. 14 xStack Stackable Gigabit Layer 3 Switch Manual In addition, the phenomenal bandwidth delivered by Gigabit Ethernet is the most cost-effective method to take advantage of today's and tomorrow's rapidly improving switching and routing internetworking technologies. Switching Technology Another key development pushing the limits of Ethernet technology is in the field of switching technology. A switch bridges Ethernet packets at the MAC address level of the Ethernet protocol transmitting among connected Ethernet or Fast Ethernet LAN segments. Switching is a cost-effective way of increasing the total network capacity available to users on a local area network. A switch increases capacity and decreases network loading by making it possible for a local area network to be divided into different segments, which are not competing with each other for network transmission capacity, and therefore decreasing the load on each segment. The Switch acts as a high-speed selective bridge between the individual segments. Traffic that needs to go from one segment to another (from one port to another) is automatically forwarded by the Switch, without interfering with any other segments (ports). This allows the total network capacity to be multiplied, while still maintaining the same network cabling and adapter cards. For Fast Ethernet or Gigabit Ethernet networks, a switch is an effective way of eliminating problems of chaining hubs beyond the "two-repeater limit." A switch can be used to split parts of the network into different collision domains, for example, making it possible to expand your Fast Ethernet network beyond the 205-meter network diameter limit for 100BASE-TX networks. Switches supporting both traditional 10Mbps Ethernet and 100Mbps Fast Ethernet are also ideal for bridging between existing 10Mbps networks and new 100Mbps networks. Switching LAN technology is a marked improvement over the previous generation of network bridges, which were characterized by higher latencies. Routers have also been used to segment local area networks, but the cost of a router and the setup and maintenance required make routers relatively impractical. Today's switches are an ideal solution to most kinds of local area network congestion problems. Switch Description D-Link's next -generation xStack switches are high port-density Layer 3 stackable switches that combine the ultimate performance with fault tolerance, security, management functions with flexibility and ease-of-use. All these features, typically found in the more expensive chassis -based solutions, are available from the xStack family at the price of a stackable switch! All xStack switches have some combination of 1000BASE-T ports, XFP ports and 10-Gigabit stacking ports that may be used in uplinking various network devices to the Switch, including PCs, hubs and other switches to provide a gigabit Ethernet uplink in full-duplex mode. The SFP (Small Form Factor Portable) combo ports are to be used with fiber-optical transceiver cabling in order to uplink various other networking devices for a gigabit link that may span great distances. These SFP ports support full-duplex transmissions, have auto-negotiation and can be used with DEM -310GT (1000BASELX), DEM-311GT (1000BASE-SX), DEM-314GT (1000BASE-LH) and DEM -315GT (1000BASE-ZX) transceivers. These ports are referred to as "combo" ports which means that both the SFP ports and the 1000BASE-T ports are numbered the same and cannot be used simultaneously. Attempting to use the ports simultaneously will cause a link down status for the 1000BASE-T ports. SFP ports will always have priority over these 1000BASE-T ports. Also included at the rear of the xStack switches are 10-gigabit stacking ports used to stack other switches. The DGS 3324SRi may be used as the master unit of a switch stack when utilizing these ports and can be configured in a Star topology, and in total, may provide a stacking solution of up to 312 gigabit ports. Other switches of the xStack family may utilize these ports for stacking in a ring topology or in combination with the DGS-3324SRi master switch in a star topology. More information will be provided later in this manual concerning stacking the xStack family of switches. NOTE: The SFP combo ports on the Switch cannot be used simultaneously with the corresponding 1000BASE-T ports. If both ports are in use at the same time (ex. port 21 of the SFP and port 21 of the 1000BASE-T), the SFP ports will take priority over the combo ports and render the 1000BASE-T ports inoperable. 15 xStack Stackable Gigabit Layer 3 Switch Manual Features · · · · · · · · · · · · · · · · · · · · · · · IEEE 802.3z compliant IEEE 802.3x Flow Control in full-duplex compliant IEEE 802.3u compliant IEEE 802.3ab compliant IEEE 802.3ae compliant (for optional XFP module) IEEE 802.1p Priority Queues IEEE 802.3ad Link Aggregation Control Protocol support. IEEE 802.1x Port-based and MAC-based Access Control IEEE 802.1Q VLAN IEEE 802.1D Spanning Tree, IEEE 802.1W Rapid Spanning Tree and IEEE 802.1s Multiple Spanning Tree support Stacking support in either Ring or Star topology Access Control List (ACL) support IP Multinetting support Protocol VLAN support Single IP Management support Access Authentication Control utilizing TACACS, XTACACS, TACACS+ and RADIUS protocols Dual Image Firmware Simple Network Time Protocol support MAC Notification support System and Port Utilization support System Log Support High performance switching engine performs forwarding and filtering at full wire speed up to 128Gbps. Full- and half-duplex for all gigabit ports. Full duplex allows the switch port to simultaneously transmit and receive data. It only works with connections to full-duplex-capable end stations and switches. Connections to a hub must take place at half-duplex. Support broadcast storm filtering Non-blocking store and forward switching scheme capability to support rate adaptation and protocol conversion Supports by-port Egress/Ingress rate control Efficient self-learning and address recognition mechanism enables forwarding rate at wire speed Support port-based enable and disable Address table: Supports up to 8K MAC addresses per device Supports a packet buffer of up to 3 Mbits Supports Port-based VLAN Groups Port Trunking with flexible load distribution and fail-over function IGMP Snooping support IGMP version 3 Layer 3 support including DVMRP, OSPF and RIP SNMP support · · · · · · · · · · · · · 16 xStack Stackable Gigabit Layer 3 Switch Manual · · · · · · · · · · · · · · · Secure Sockets Layer (SSL) and Secure Shell (SSH) support System Severity control Port Mirroring support MIB support for: RFC1213 MIB II RFC1493 Bridge RFC1757 RMON RFC1643 Ether-like MIB RFC2233 Interface MIB IF MIB Private MIB RFC2674 for 802.1p IEEE 802.1x MIB RS-232 DCE console port for Switch management Provides parallel LED display for port status such as link/act, speed, etc. Ports DGS-3324SRi Twenty-four 10/100/1000BASE-T Gigabit ports DGS-3324SR Twenty-four 10/100/1000BASE-T Gigabit ports DXS-3326GSR Four Combo 10/100/1000BASE-T Gigabit ports DXS-3350SR Forty-eight 10/100/1000BASE-T Gigabit ports Eight Combo SFP Ports Four Combo SFP Ports Twenty-four SFP Ports Four Combo SFP Ports Six 10-Gigabit stacking ports Two 10-Gigabit stacking ports Two 10-Gigabit stacking ports Two 10-Gigabit stacking ports One console port One console port One console port One console port One CompactFlash slot One open slot to add a 2-port 10-gigabit Uplink Module One open slot to add a 2-port 10-gigabit Uplink Module NOTE: For customers interested in D-View, D-Link Corporation's proprietary SNMP management soft ware, go to the D-Link Website (www.dlink.com.cn) and download the software and manual. 17 xStack Stackable Gigabit Layer 3 Switch Manual Installing the SFP ports The xStack family of switches are equipped with SFP (Small Form Factor Portable) ports, which are to be used with fiberoptical transceiver cabling in order to uplink various other networking devices for a gigabit link that may span great distances. These SFP ports support full-duplex transmissions, have auto-negotiation and can be used with DEM-310GT (1000BASE-LX), DEM -311GT (1000BASE-SX), DEM -314GT (1000BASE-LH) and DEM -315GT (1000BASE-ZX) transceivers. See the figure below for installing the SFP ports in the Switch. Figure 1- 1. Inserting the fiber-optic transceivers into the DGS-3324SRi Front-Panel Components The front panel of the Switch consists of LED indicators for Power, Master, Console, RPS, SIO (stacking) and for Link/Act for each port on the Switch. The front panel may also include a seven-segment LED (not supported for the DGS3324SRi) indicating the Stack ID number, as well as gigabit Ethernet ports and SFP ports. DGS-3324SRi Figure 1- 2. Front Panel View of the DGS-3324SRi as shipped DGS-3324SR Figure 1- 3. Front Panel View of the DGS-3324SR as shipped DXS-3326GSR Figure 1- 4. Front Panel View of the DXS-3326GSR as shipped 18 xStack Stackable Gigabit Layer 3 Switch Manual DXS-3350SR Figure 1- 5. Front Panel View of the DXS-3350SR as shipped Comprehensive LED indicators display the status of the Switch and the network. LED Indicators The Switch supports LED indicators for Power, Master, Console, RPS, SIO (stacking indicators) and Port LEDs. The following shows the LED indicators for the Switch along with an explanation of each indicator. Figure 1- 6. LED Indicators LED Power Description This LED will light green after the Switch is powered on to indicate the ready state of the device. The indicator is dark when the Switch is powered off. This LED will light solid green when the Switch is configured to be a master switch of a switch stack in a ring topology or when it is in use as a stand-alone switch. This LED will remain dark if the Switch is not configured to be a master switch of a switch stack or as a standalone switch. This LED should blink during the Power-On Self Test (POST). When the POST is finished successfully, the LED goes dark. This indicator will light solid green when the Switch is being logged into via out-of-band/local console management through the RS-232 console port in the front of the Switch using a straight-through serial cable. This LED will light solid amber if the Power-On-Self-Test has failed. RPS This LED will be lit when the internal power has failed and the RPS has taken over the power supply to the Switch. Otherwise, it will remain dark. One row of LEDs for each port is located above the ports on the front panel. The first LED is for the top port and the second one is for the bottom ports. A solid light denotes activity on the port while a blinking light indicates a valid link. These LEDs will remain dark if there is no link/activity on the port. There are six LEDs in the front of the DGS-3324SRi marked SIO 1-6, and they relate to the six 10-gigabit stacking ports at the rear of the Switch. For the DGS-3324SR, DXS -3326GSR and the DXS -3350SR, there are only two stacking ports and therefore only two SIO LEDs, marked 1 and 2. These LEDs will light solid green to denote activity on the port, while a blinking light will indicate a valid link. Master Console Port LEDs Stacking Ports (SIO) 19 xStack Stackable Gigabit Layer 3 Switch Manual Stack ID These two seven segment LEDs display the current switch stack order of the Switch while in use. Possible numbers to be displayed range from 1-12. Rear Panel Description DGS-3324SRi The rear panel of the DGS-3324SRi contains an AC power connector, six 10-gigabit stacking ports, a redundant power supply connector and an available slot to insert the CompactFlash card (storage media accessory). Figure 1- 7. Rear panel view of DGS-3324SRi DGS-3324SR The rear panel of the DGS-3324SR contains an AC power connector, two 10-gigabit stacking ports, a redundant power supply connector and a system fan. Figure 1- 8. Rear panel view of DGS-3324SR DXS-3326GSR The rear panel of the DXS-3326GSR contains an AC power connector, an optional module slot for uplinking a 2-port XFP fiber-optic port module, two 10-gigabit stacking ports, a redundant power supply connector and a system fan. Figure 1- 9. Rear panel view of DXS-3326GSR DXS-3350SR The rear panel of the DXS-3350SR contains an AC power connector, an optional module slot for uplinking a 2-port XFP fiber-optic module, two 10-gigabit stacking ports, a redundant power supply connector, a RS-232 DCE console port for Switch management and a system fan. Figure 1- 10. Rear panel view of DXS-3350SR The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. The Switch automatically adjusts its power setting to any supply voltage in the range from 100 ~ 240 VAC at 50 ~ 60 Hz. The rear panel also includes an outlet for an optional external power supply. When a power failure occurs, the optional external RPS will immediately and automatically assume the power supply for the Switch. 20 xStack Stackable Gigabit Layer 3 Switch Manual Side Panel Description DGS-3324SRi & DGS-3324SR The right-hand side panel of the Switch contains two system fans, while the left hand panel includes a heat vent. The system fans are used to dissipate heat. The sides of the system also provide heat vents to serve the same purpose. Do not block these openings, and leave at least 6 inches of space at the rear and sides of the Switch for proper ventilation. Be reminded that without proper heat dissipation and air circulation, system components might overheat, which could lead to system failure. Figure 1- 11. Side Panels DXS-3326GSR & DXS-3350SR The right-hand side panel of the Switch contains three system fans, while the left hand panel includes two heat vents. The system fans are used to dissipate heat. The sides of the system also provide heat vents to serve the same purpose. Do not block these openings, and leave at least six inches of space at the rear and sides of the Switch for proper ventilation. Be reminded that without proper heat dissipation and air circulation, system components might overheat, which could lead to system failure. Figure 1- 12. Side Panels 21 xStack Stackable Gigabit Layer 3 Switch Manual SECTION 2 Installation Package Contents Before You Connect to the Network Installing the Switch without the Rack Rack Installation Power On The Optional Module Redundant Power System Package Contents Open the shipping carton of the Switch and carefully unpack its contents. The carton should contain the following items: · · · · · · · · · · · One xStack Stackable Switch One AC power cord This H/W Installation & Getting Started Guide Mounting kit (two brackets and screws) Four rubber feet with adhesive backing RS-232 console cable One Infinband Stacking Cable 4x50CM One CD Kit for User's Guide/CLI/D-View module One CD Kit for D-View 5.1 Trial version. One Generic QIG Registration card & China Warranty Card (for China only) If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch. · · · · · · Install the Switch on a sturdy, level surface that can support at least 6.6 lb. (3 kg) of weight. Do not place heavy objects on the Switch. The power outlet should be within 1.82 meters (6 feet) of the Switch. Visually inspect the power cord and see that it is fully secured to the AC power port. Make sure that there is proper heat dissipation from and adequate ventilation around the Switch. Leave at least 10 cm (4 inches) of space at the front and rear of the Switch for ventilation. Install the Switch in a fairly cool and dry place for the acceptable temperature and humidity operating ranges. Install the Switch in a site free from strong electromagnetic field generators (such as motors), vibration, dust, and direct exposure to sunlight. 22 xStack Stackable Gigabit Layer 3 Switch Manual · When installing the Switch on a level surface, attach the rubber feet to the bottom of the device. The rubber feet cushion the Switch, protect the casing from scratches and prevent it from scratching other surfaces. Installing the Switch without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity. Figure 2- 1. Prepare Switch for installation on a desktop or shelf Installing the Switch in a Rack The Switch can be mounted in a standard 19" rack. Use the following diagrams to guide you. Figure 2- 2. Fasten mounting brackets to Switch Fasten the mounting brackets to the Switch using the screws provided. With the brackets attached securely, you can mount the Switch in a standard rack as shown in Figure 2-3 on the following page. 23 xStack Stackable Gigabit Layer 3 Switch Manual Mounting the Switch in a Standard 19" Rack Figure 2- 3. Installing Switch in a rack Power On Plug one end of the AC power cord into the power connector of the Switch and the other end into the local power source outlet. After the Switch is powered on, the LED indicators will momentarily blink. This blinking of the LED indicators represents a reset of the system. Power Failure As a precaution, in the event of a power failure, unplug the Switch. When power is resumed, plug the Switch back in. The Optional Module At the rear of the DXS-3326GSR and the DXS-3350SR resides an optional module slot. This slot may be equipped with a 2-port 10GE XFP Uplink Module, sold separately. Adding the DEM -420X optional module will allow the administrator to add a 2-port fiber-optic uplink module which will transmit information at a rate of ten gigabits a second. These two ports are compliant with standard IEEE 802.3ae, support full-duplex transmissions only and can be used with XFP MSA compliant transceivers. To install the module in the DXS-3326GSR and the DXS-3350SR, follow the simple steps listed below. CAUTION: Before adding the optional module, make sure to disconnect all power sources connected to the Switch. Failure to do so may result in an electrical shock, which may cause damage, not only to the individual but to the Switch as well. At the back of the Switch to the left is the slot for the optional module, as shown in Figure 2-4 and Figure 2-5. This slot should be covered with a faceplate that can be easily removed by loosening the screws and pulling off the plate. 24 xStack Stackable Gigabit Layer 3 Switch Manual Optional Module Slot Figure 2- 4. Optional Module slot at the rear of the DXS-3350SR Optional Module Slot Figure 2- 5. Optional Module slot at the rear of the DXS-3326GSR After removing the faceplate, remove the DEM -420X optional module from its box. The front panel should resemble the drawing represented in the following figure. Figure 2- 6. Front Panel of the DEM-420X Take the module and gently slide it in to the available slot at the rear of the Switch until it reaches the back, as shown in the following figure. At the back of the slot are two sets of plugs that must be connected to the module. Gently, but firmly push in on the module to secure it to the Switch. The module should fit snugly into the corresponding receptors. Figure 2- 7. Inserting the optional module into the Switch. Now tighten the two screws at adjacent ends of the module into the available screw holes on the Switch. The upgraded DXS-3350SR/DXS-3326GSR is now ready for use. Figure 2- 8. DXS-3350SR with optional module installed. 25 xStack Stackable Gigabit Layer 3 Switch Manual The Media Accessory At the rear of the DGS-3324SRi is an open slot for a CompactFlash card. This 32MB PCMCIA flash card provides high capacity solid-state flash memory for storing information for and from the Switch, such as firmware, configuration files and even save log information kept on the Switch. It also supports True IDE Mode that is electrically compatible with an IDE disk drive. It is recommended that the user store a backup of the startup configuration file on the CompactFlash card of the control module and on a central server. When you save the startup configuration file, the Switch stores it in two places: in the CompactFlash and the PC card of the primary control module. When the Switch boots, it will try to use the primary configuration file on the PC card and, if for some reason the Switch cannot use the file, it automatically uses the secondary configuration file on the CompactFlash. If the startup file becomes corrupted in both places, the DGS-3324SRi will use its default configuration. To install the CompactFlash card, insert it into the available slot on the back of the Switch, as shown below, and ensure that the card "clicks" into place. When correctly inserted, the CF Card Button should protrude. To eject the card from the slot, press the CF Card button in and the CompactFlash card should pop out. Figure 2- 9. CF Card Installation External Redundant Power System The Switch supports an external redundant power system. Figure 2- 10. The DGS-3324SRi with the DPS-500 Redundant External Power Supply 26 xStack Stackable Gigabit Layer 3 Switch Manual Figure 2- 11. The DGS-3324SRi with the DPS-900 chassis RPS NOTE: See the DPS-500 documentation for more information. CAUTION: Do not use the Switch with any redundant power system other than the DPS-500. 27 xStack Stackable Gigabit Layer 3 Switch Manual Section 3 Connecting the Switch Switch To End Node Switch to Hub or Switch Connecting To Network Backbone or Server Stacking and the xStack Family of Switches NOTE: All high-performance N-Way Ethernet ports can support both MDIII and MDI-X connections. Switch to End Node End nodes include PCs outfitted with a 10, 100 or 1000 Mbps RJ 45 Ethernet Network Interface Card (NIC) and most routers. An end node can be connected to the Switch via a twisted-pair UTP/STP cable. The end node should be connected to any of the 1000BASE-T ports of the Switch. Figure 3- 1. Switch connected to an end node The Link/Act LEDs for each UTP port will light green or amber when the link is valid. A blinking LED indicates packet activity on that port. Switch to Hub or Switch These connections can be accomplished in a number of ways using a normal cable. · · · · A 10BASE-T hub or switch can be connected to the Switch via a twisted-pair Category 3, 4 or 5 UTP/STP cable. A 100BASE-TX hub or switch can be connected to the Switch via a twisted-pair Category 5 UTP/STP cable. A 1000BASE-T switch can be connected to the Switch via a twisted pair Category 5e UTP/STP cable. A switch supporting a fiber-optic uplink can be connected to the Switch's SFP ports via fiber-optic cabling. 28 xStack Stackable Gigabit Layer 3 Switch Manual Figure 3- 2. Switch connected to a port on a hub or switch using a straight or crossover cable Figure 3- 3. Switch connected to switch using fiber-optic cabling Connecting To Network Backbone or Server The combo SFP ports and the 1000BASE-T ports are ideal for uplinking to a network backbone, server or server farm. The copper ports operate at a speed of 1000, 100 or 10Mbps in full or half duplex mode. The fiber-optic ports can operate at 1000Mbps in full duplex mode only. Connections to the Gigabit Ethernet ports are made using a fiber-optic cable or Category 5e copper cable, depending on the type of port. A valid connection is indicated when the Link LED is lit. 29 xStack Stackable Gigabit Layer 3 Switch Manual Figure 3- 4. Uplink Connection to a server, PC or switch stack. Stacking and the xStack The DGS-3324SR, DXS-3326GSR and the DXS-3350SR are equipped with two 10-gigabit stacking ports at the rear of the device, as seen below. The DGS-3324SRi has six 10-gigabit stacking ports at the rear of the Switch, also shown below. These stacking ports may be used to stack to a master switch to be used in a switch stack. Figure 3- 5. SIO 1 and SIO 2 Stacking ports at the rear of the DGS-3324SR 30 xStack Stackable Gigabit Layer 3 Switch Manual Figure 3- 6. SIO 1-6 Stacking ports at the rear of the DGS-3324SRi These stacking ports, named SIO, can be used with other stacking switches for a scalable stacking solution of up to 384 ports in a star or ring topology. Each stacking port has corresponding LEDs at the front of the Switch, labeled SIO and will light solid green whenever the port is in use. The seven-segment LED Stack ID to the left of the SIO LEDs (not supported for the DGS-3324SRi) on the front of the Switch will display the Stack ID number of the Switch in a switch stack. Figure 3- 7. Stacking LEDs at the front of the DGS-3324SR 31 xStack Stackable Gigabit Layer 3 Switch Manual The xStack family of switches can be stacked in a star or ring topology, as previously mentioned. For a star architecture, only one of the two Gigabit stacking ports of the slave switch will be in use. This port will be connected to the master switch of the switch stack (DGS-3324SRi) and will act as a slave switch of the stack. The administrator may use either of the two available stacking ports to achieve this architecture. See the following diagram for an example of stacking in a star architecture. Figure 3- 8. Stacking in a Star Architecture For stacking in a ring architecture, all SIO ports will be in use, as shown in the following diagram. Up to 12 xStack switches may be stacked together in the ring architecture switch stack, though there are limitations on stacking, which will be discussed in the following section. Figure 3- 9. Stacking in a Ring Architecture NOTICE: Do not connect the stacked Switch group to the network until you have properly configured all Switches for stacking. An improperly configured Switch stack can cause a broadcast storm. 32 xStack Stackable Gigabit Layer 3 Switch Manual Stacking Limitations Utilizing a Ring or Star Topology The Switches listed in the table below can all be stacked, but there is a limitation as to the number of Switches that can be included in a given stack. This limitation arises from a concept called a Token Cost. This Token Cost is used for communication between switches in a switch stack. Some of the switches have 2 as their token cost, while others are 4, and the 10G uplink ports have a Token Cost of 2. The maximum accumulated Token Cost in a given stack must be less than or equal to 32. There is an additional limitation in that a maximum of 12 Switch boxes can be included in a given switch stack, using a ring topology. The DGS-3324SRi cannot be used in a ring topology. For the Star topology, the maximum number of switches in the stack is seven {6 slaves + 1 master (DGS-3324SRi)} In order to make the task of determining if a given set of Switches (from the table below) can be successfully stacked, use the following formula: Token Cost * Number of Switches = 32 Model Name DGS-3324SRi DGS-3324SR DXS-3350SR 2 2 4 6 (with 10G uplink) DXS-3326GSR 2 4 (with 10G uplink) Table 3- 1. Switches and their corresponding token cost Token Cost Stacking In a Ring Topology For example: All of the stacked switches are identical. You want to stack as many DGS-3324SR switches as possible. To calculate the maximum number of DGS-3324SR switches in the ring stack, use the following formula: Token Cost * Number of Switches = 32 2 * Number of Switches = 32 Number of Switches = 32/2 Number of Switches = 16 For this example, a maximum of sixteen DGS-3324SR switches can be ring stacked according to the previous calculations, but we must remember that there is a maximum limitation of twelve switches, so the actual maximum number of DGS3324SR switches that can be stacked together in the ring topology is twelve. 33 xStack Stackable Gigabit Layer 3 Switch Manual Adding a different switch type to an existing stack In this example, there are three different switch types, each with different token costs. There is one DGS-3324SR (Token Cost = 2), two DXS-3350SR (Token Cost = 4), and three DXS-3326GSR (Token Cost = 2). In this case the total Token Cost would be: (1 * 2) + (2 * 4) + (3 * 2) = 16 If you then wanted to add the maximum number of DGS-3324SR Switches (Token Cost = 2) to this stack: (2 + 2 * 4 + 3 * 2) + Number of Switches * 2 = 32 16 + Number of Switches * 2 = 32 Number of Switches * 2 = 32 ­ 16 = 16 Number of Switches = 16/2 = 8 Therefore, in this case you could add extra eight DGS -3324SR switches to this ring stack. The entire stack would then consist of nine DGS -3324SRs (Token Cost = 2), two DXS-3350SRs (Token Cost = 4) and three DXS-3326GSRs (Token Cost = 2). This gives a total Token Cost for the stack of: 9 * 2 + 2 * 4 + 3 * 2 = 32 Although the Token Cost is less than 32, the number of switch boxes is 14, which exceeds the maximum number of 12. Thus, only extra six DGS-3324SRs can be added to the ring stack. For further examples, we can: · Make a ring stack consisting of four DXS-3350SRs (one with module), three DGS-3324SRs and three DXS3326GSRs (no modules). Our switch count would equal ten and our token cost would equal thirty (18 + 6 + 6 = 30 = 32). Success! · Make a ring stack consisting of four DGS-3324SRs, five DXS-3326GSRs (no modules), three DXS-3350SRs (no modules). Our switch count would equal twelve and our token cost would equal thirty (8 + 10 + 12 = 30 = 32). Success! · Add four 10G modules to an existing ring stack (2 + 2 + 2 + 2 = 8), using a stack consisting of six DGS3324SRs and six DXS-3326GSRs (12 + 20 = 32). This is the maximum number of switch boxes allowed in a ring stack. Our switch count stays at twelve and our token cost becomes thirty-two (2 + 2 + 2 + 2 + 24 = 32 = 32). Success! 34 xStack Stackable Gigabit Layer 3 Switch Manual Stacking In a Star Topology In this case, the DGS-3324SRi is the Master Switch in a star topology and up to six slave switches can be stacked with Master Stackable Switch. Check the following examples as a reference guide. For examples, we can: · · Make a star stack consisting of one DGS-3324SRi (Master), six DXS-3350SRs (no modules). Our switch count would equal 6 + 1 and our token cost would equal twenty-six (2 + 24 = 26 = 32). Success! Make a star stack consisting of one DGS -3324SRi (Master), one DGS-3324SR, two DXS-3326GSRs (no modules), three DXS-3350SRs (one with module). Our switch count would equal 6 + 1 and our token cost would equal twenty-two (2 + 2 + 4 + 14 = 22 = 32). Success! From these examples, we can see that there is a myriad of combinations possible for adding switches and modules to a given stack. Yet, you must keep in mind three very important points in configuring the stack: 1. 2. 3. The total Token Cost of switches stacked must not exceed 32. The total switch count of switches stacked in a ring topology cannot exceed 12. The total switch count of switches stacked in a star topology cannot exceed 6 + 1. NOTE: The total token cost of switches in a switch stack cannot exceed 32. Surpassing this token cost limitation will result in failure of the Switch stack and render the switches in it inoperable. 35 xStack Stackable Gigabit Layer 3 Switch Manual Section 4 Introduction to Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface through the Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to the Switch Password Protection SNMP Settings IP Address Assignment Connecting Devices to the Switch Management Options This system may be managed out-of-band through the console port on the front panel or in-band using Telnet. The user may also choose the web-based management, accessible through a web browser. Web-based Management Interface After you have successfully installed the Switch, you can configure the Switch, monitor the LED panel, and display statistics graphically using a web browser, such as Netscape Navigator (version 6.2 and higher) or Microsoft® Internet Explorer (version 5.0). SNMP-Based Management You can manage the Switch with an SNMP-compatible console program. The Switch supports SNMP version 1.0, version 2.0 and version 3.0. The SNMP agent decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database. The SNMP agent updates the MIB objects to generate statistics and counters. Command Line Console Interface through the Serial Port You can also connect a computer or terminal to the serial console port to access the Switch. The command-line-driven interface provides complete access to all Switch management features. Connecting the Console Port (RS-232 DCE) The Switch provides an RS-232 serial port that enables a connection to a computer or terminal for monitoring and configuring the Switch. This p is a female DB-9 connector, implemented as a data terminal equipment (DTE) ort connection. To use the console port, you need the following equipment: · · A terminal or a computer with both a serial port and the ability to emulate a terminal. A null modem or crossover RS-232 cable with a female DB-9 connector for the console port on the Switch. 36 xStack Stackable Gigabit Layer 3 Switch Manual To connect a terminal to the console port: 1. 2. 3. 4. 5. 6. 7. 8. Connect the female connector of the RS-232 cable directly to the console port on the Switch, and tighten the captive retaining screws. Connect the other end of the cable to a terminal or to the serial connector of a computer running terminal emulation software. Set the terminal emulation software as follows: Select the appropriate serial port (COM port 1 or COM port 2). Set the data rate to 115200 baud. Set the data format to 8 data bits, 1 stop bit, and no parity. Set flow control to none. Under Properties, select VT100 for Emulation mode. Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that you select Terminal keys (not Windows keys). NOTE: When you use HyperTerminal with the Microsoft® Windows® 2000 operating system, ensure that you have Windows 2000 Service Pack 2 or later installed. Windows 2000 Service Pack 2 allows you to use arrow keys in HyperTerminal's V T100 emulation. See www.microsoft.com for information on Windows 2000 service packs. 9. After you have correctly set up the terminal, plug the power cable into the power receptacle on the back of the Switch. The boot sequence appears in the terminal. 10. After the boot sequence completes, the console login screen displays. 11. If you have not logged into the command line interface (CLI) program, press the Enter key at the User name and password prompts. There is no default user name and password for the Switch. User names and passwords must first be created by the administrator. If you have previously set up user accounts, log in and continue to configure the Switch. 12. Enter the commands to complete your desired tasks. Many commands require administrator-level access privileges. Read the next section for more information on setting up user accounts. See the xStack Command Line Interface Reference Manual on the documentation CD for a list of all commands and additional information on using the CLI. 13. When you have completed your tasks, exit the session with the logout command or close the emu lator program. Make sure the terminal or PC you are using to make this connection is configured to match these settings. If you are having problems making this connection on a PC, make sure the emulation is set to VT -100. You will be able to set the emulation by clicking on the File menu in you HyperTerminal window, clicking on Properties in the drop-down menu, and then clicking the Settings tab. This is where you will find the Emulation options. If you still do not see anything, try rebooting the Switch by disconnecting its power supply. Once connected to the console, the screen below will appear on your console screen. This is where the user will enter commands to perform all the available management functions. The Switch will prompt the user to enter a user name and a password. Upon the initial connection, there is no user name or password and therefore just press enter twice to access the command line interface. 37 xStack Stackable Gigabit Layer 3 Switch Manual Figure 4- 1. Initial screen after first connection. First Time Connecting to the Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch. NOTE: The passwords used to access the Switch are case-sensitive; therefore, "S" is not the same as "s." When you first connect to the Switch, you will be presented with the first login screen (shown below). NOTE: Press Ctrl+R to refresh the screen. This command can be used at any time to force the console program in the Switch to refresh the console screen. 38 xStack Stackable Gigabit Layer 3 Switch Manual Figure 4- 2. Initial screen, first time connecting to the Switch Press Enter in both the Username and Password fields. You will be given access to the command prompt DGS -3324SRi:4#, DGS-3324SR:4#, DXS-3326GSR:4# or DXS-3350SR:4# as shown below: There is no initial username or password. Leave the Username and Password fields blank. Figure 4- 3. Command Prompt NOTE: The first user automatically gets Administrator level privileges. It is recommended to create at least one Admin-level user account for the Switch. Password Protection The xStack family of switches does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged access to the Switch's management software. 39 xStack Stackable Gigabit Layer 3 Switch Manual After your initial login, define new passwords for both default user names to prevent unauthorized access to the Switch, and record the passwords for future reference. To create an administrator-level account for the Switch, do the following: · · · · At the CLI login prompt, enter create account admin followed by the and press the Enter key. You will be asked to provide a password. Type the used for the administrator account being created and press the Enter key. You will be prompted to enter the same password again to verify it. Type the same password and press the Enter key. Successful creation of the new administrator account will be verified by a Success message. NOTE: Passwords are case sensitive. User names and passwords can be up to 15 characters in length. The sample below illustrates a successful creation of a new administrator-level account with the user name "newmanager". DGS-3324SRi:4#create account admin newmanager Command: create account admin newmanager Enter a case -sensitive new password:******** Enter the new password again for confirmation:******** Success. DGS-3324SRi:4# NOTICE: CLI configuration commands only modify the running configuration file and are not saved when the Switch is rebooted. To save all your configuration changes in nonvolatile storage, you must use the save command to copy the running configuration file to the startup configuration. SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices. Use SNMP to configure system features for proper operation, monitor performance and detect potential problems in the Switch, switch group or network. Managed devices that support SNMP include software (referred to as an agent), which runs locally on the device. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device. These objects are defined in a Management Information Base (MIB), which provides a standard presentation of the information controlled by the on-board SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network. The xStack family of switches supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device. 40 xStack Stackable Gigabit Layer 3 Switch Manual In SNMP v.1 and v.2, user authentication is accomplished using 'community strings', which function like passwords. The remote user SNMP application and the Switch SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped). The default community strings for the Switch used for SNMP v.1 and v.2 management access are: · · public - Allows authorized management stations to retrieve MIB objects. private - Allows authorized management stations to retrieve and modify MIB objects. SNMP v.3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMP v.1 while assigning a higher level of security to another group, granting read/write privileges using SNMP v.3. Using SNMP v.3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB. An additional layer of security is available for SNMP v.3 in that SNMP messages may be encrypted. To read more about how to configure SNMP v.3 settings for the Switch read the section entitled Management. Traps Traps are messages that alert network personnel of events that occur on the Switch. The events can be as serious as a reboot (someone accidentally turned OFF the Switch), or less serious like a port status change. The Switch generates traps and sends them to the trap recipient (or network manager). Typical traps include trap messages for Authentication Failure, Topology Change and Broadcast\Multicast Storm. MIBs Management and counter information are stored by the Switch in the Management Information Base (MIB). The Switch uses the standard MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base. The proprietary MIB may also be retrieved by specifying the MIB Object Identifier. MIB values can be either read-only or read-write. IP Address Assignment Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch's default IP address is 10.90.90.90. You can change the default Switch IP address to meet the specification of your networking address scheme. The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found by entering the command "show switch" into the command line interface, as shown below. 41 xStack Stackable Gigabit Layer 3 Switch Manual Figure 4- 4. "show switch" command The Switch's MAC address can also be found from the Web management program on the Switch Information (Basic Settings) window on the Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known. The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows: Starting at the command line prompt, enter the commands config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x's represent the IP address to be assigned to the IP interface named System and the y's represent the corresponding subnet mask. Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x's represent the IP address to be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation. The IP interface named System on the Switch can be assigned an IP address and subnet mask, which can then be used to connect a management station to the Switch's Telnet or Web-based management agent. Figure 4- 5. Assigning the Switch an IP Address 42 xStack Stackable Gigabit Layer 3 Switch Manual In the above example, the Switch was assigned an IP address of 10.53.13.144 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management. Connecting Devices to the Switch After you assign IP addresses to the Switch, you can connect devices to the Switch. To connect a device to an SFP transceiver port: · · · Use your cabling requirements to select an appropriate SFP transceiver type. Insert the SFP transceiver (sold separately) into the SFP transceiver slot. Use the appropriate network cabling to connect a device to the connectors on the SFP transceiver. NOTICE: When the SFP transceiver acquires a link, the associated integrated 10/100/1000BASE-T port is disabled. 43 xStack Stackable Gigabit Layer 3 Switch Manual Section 5 Introduction to Web-based Switch Configuration Introduction Logging on to the Web Manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software functions of the xStack family of switches can be managed, configured and monitored via the embedded webbased (HTML) interface. The Switch can be managed from remote stations anywhere on the network through a standard browser such as Netscape Navigator/Communicator, Mozilla or Microsoft Internet Explorer. The browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol. The Web-based management module and the Console program (and Telnet) are different ways to access the same internal switching software and configure it. Thus, all settings encountered in web-based management are the same as those found in the console program. Logging on to the Web Manager To begin managing your Switch, simply run the browser you have installed on your computer and point it to the IP address you have defined for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch. NOTE: The Factory default IP address for the Switch is 10.90.90.90. In the page that opens, click on the Login button: Figure 5- 1. Login Button This opens the management module's user authentication window, as seen below. 44 xStack Stackable Gigabit Layer 3 Switch Manual