D-Link DES-3528 - xStack Switch - Stackable User manual

®
User Manual
Product Model: xStack®DES-3528/DES-3552 Series
Layer 2 Managed Stackable Fast Ethernet Switch
Release 2.0

©Copyright 2009. All rights reserved.
_________________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks
of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products.
D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
September 2009 P/N 651ES3500055G

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
ii
Table of Contents
Web-based Switch Configuration ............................................................................................... 11
Introduction.................................................................................................................................................................11
Login to Web Manager............................................................................................................................................................. 11
Web-based User Interface....................................................................................................................................................... 12
Web Pages .............................................................................................................................................................................. 13
Configuration ............................................................................................................................... 14
Device Information......................................................................................................................................................15
System Information.....................................................................................................................................................15
Serial Port Settings.....................................................................................................................................................16
IP Address ..................................................................................................................................................................16
Port Configuration.......................................................................................................................................................19
Port Settings ............................................................................................................................................................................ 19
Port Description ....................................................................................................................................................................... 21
Port Error Disabled .................................................................................................................................................................. 21
Static ARP Settings ....................................................................................................................................................22
User Accounts ............................................................................................................................................................23
System Log Configuration ..........................................................................................................................................24
System Log Settings................................................................................................................................................................ 24
System Log Server .................................................................................................................................................................. 25
System Severity Settings............................................................................................................................................26
DHCP Relay................................................................................................................................................................27
DHCP Relay Global Settings ................................................................................................................................................... 27
DHCP Relay Interface Settings................................................................................................................................................ 30
DHCP Relay Option 60 Default Settings.................................................................................................................................. 30
DHCP Relay Option 60 Settings.............................................................................................................................................. 31
DHCP Relay Option 61 Default Settings.................................................................................................................................. 32
DHCP Relay Option 61 Settings.............................................................................................................................................. 32
DHCP Local Relay Settings........................................................................................................................................33
DHCP Auto Configuration Settings.............................................................................................................................33
MAC Address Aging Time ..........................................................................................................................................34
Web Settings ..............................................................................................................................................................34
Telnet Settings............................................................................................................................................................34
Password Encryption..................................................................................................................................................34
Clipaging Settings.......................................................................................................................................................35
Firmware Information..................................................................................................................................................35
Dual Configuration Settings........................................................................................................................................36
PPPoE Circuit ID Insertion Settings ...........................................................................................................................37
Ping Test.....................................................................................................................................................................37
SNTP Settings ............................................................................................................................................................38

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
iii
Time Settings........................................................................................................................................................................... 38
TimeZone Settings................................................................................................................................................................... 39
MAC Notification Settings...........................................................................................................................................40
MAC Notification Global Settings............................................................................................................................................. 40
MAC Notification Port Settings................................................................................................................................................. 41
PoE.............................................................................................................................................................................42
PoE System Settings............................................................................................................................................................... 43
PoE Port Settings..................................................................................................................................................................... 44
SNMP Settings ...........................................................................................................................................................45
SNMP Global Settings............................................................................................................................................................. 46
SNMP View Table.................................................................................................................................................................... 46
SNMP Group Table.................................................................................................................................................................. 47
SNMP User Table.................................................................................................................................................................... 48
SNMP Community Table.......................................................................................................................................................... 49
SNMP Host Table.................................................................................................................................................................... 50
SNMP Engine ID...................................................................................................................................................................... 50
SNMP Trap Configuration........................................................................................................................................................ 51
sFlow...........................................................................................................................................................................51
sFlow Global State Settings..................................................................................................................................................... 51
sFlow Analyzer Server Settings............................................................................................................................................... 52
sFlow Flow Sampler Settings................................................................................................................................................... 52
sFlow Counter Poller Settings.................................................................................................................................................. 53
Stacking......................................................................................................................................................................54
Stacking Mode Settings........................................................................................................................................................... 56
Time Range Settings..................................................................................................................................................56
Single IP Management ...............................................................................................................................................57
Single IP Settings..................................................................................................................................................................... 58
Topology.................................................................................................................................................................................. 59
Tool Tips.................................................................................................................................................................................. 62
Right-Click................................................................................................................................................................................ 63
Menu Bar ................................................................................................................................................................................. 65
Firmware Upgrade................................................................................................................................................................... 66
Configuration File Backup/Restore .......................................................................................................................................... 66
Upload Log File........................................................................................................................................................................ 66
L2 Features ................................................................................................................................... 68
Jumbo Frame..............................................................................................................................................................68
VLANs.........................................................................................................................................................................69
Understanding IEEE 802.1p Priority........................................................................................................................................ 69
VLAN Description..................................................................................................................................................................... 69
IEEE 802.1Q VLANs................................................................................................................................................................ 70
Double VLANs ......................................................................................................................................................................... 73
802.1Q VLAN........................................................................................................................................................................... 75
Voice VLAN.................................................................................................................................................................79
Voice VLAN Global Settings .................................................................................................................................................... 79

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
iv
Voice VLAN Port Settings........................................................................................................................................................ 80
Voice VLAN OUI Settings ........................................................................................................................................................ 81
Subnet-based VLAN...................................................................................................................................................82
Subnet-based VLAN Settings .................................................................................................................................................. 83
VLAN Precedence Settings...................................................................................................................................................... 84
Q-in-Q.........................................................................................................................................................................85
Q-in-Q Settings........................................................................................................................................................................ 85
VLAN Translation Settings....................................................................................................................................................... 86
Q-in-Q and VLAN Translation Rules........................................................................................................................................ 87
802.1v Protocol VLAN ................................................................................................................................................87
802.1v Protocol Group Settings............................................................................................................................................... 87
802.1v Protocol VLAN Settings................................................................................................................................................ 88
RSPAN Settings .........................................................................................................................................................89
GVRP Settings............................................................................................................................................................90
GVRP Timer Settings .................................................................................................................................................91
Asymmetric VLAN Settings.........................................................................................................................................91
MAC-based VLAN Settings ........................................................................................................................................92
PVID Auto Assign Settings.........................................................................................................................................92
VLAN Trunk Settings ..................................................................................................................................................93
Port Trunking ..............................................................................................................................................................94
LACP Port Settings.....................................................................................................................................................96
Traffic Segmentation...................................................................................................................................................97
IGMP Snooping ..........................................................................................................................................................98
IGMP Snooping Settings.......................................................................................................................................................... 98
IGMP Snooping Rate Limit Settings....................................................................................................................................... 100
IGMP Snooping Static Group Settings................................................................................................................................... 101
IGMP Multicast Group Profile Settings................................................................................................................................... 101
IGMP Snooping Multicast VLAN Settings.............................................................................................................................. 102
IPv4 Multicast Profile Settings................................................................................................................................................ 103
IPv4 Limited Multicast Range Settings................................................................................................................................... 104
IPv4 Max Multicast Group Settings........................................................................................................................................ 104
Multicast Filtering Mode......................................................................................................................................................... 105
CPU Filter L3 Control Packet Settings................................................................................................................................... 106
MLD Snooping Settings............................................................................................................................................107
MLD Snooping Settings......................................................................................................................................................... 107
MLD Snooping Rate Limit Settings........................................................................................................................................ 110
MLD Snooping Static Group Settings .................................................................................................................................... 111
MLD Multicast Group Profile Settings.................................................................................................................................... 111
MLD Snooping Multicast VLAN Settings................................................................................................................................ 112
Port Mirror.................................................................................................................................................................113
Loopback Detection Settings....................................................................................................................................114
BPDU Attack Protection Settings .............................................................................................................................115
Spanning Tree ..........................................................................................................................................................116

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
v
STP Bridge Global Settings ................................................................................................................................................... 118
STP Port Settings .................................................................................................................................................................. 120
MST Configuration Identification............................................................................................................................................ 121
STP Instance Settings ........................................................................................................................................................... 122
MSTP Port Information .......................................................................................................................................................... 123
Forwarding & Filtering...............................................................................................................................................124
Unicast Forwarding................................................................................................................................................................ 124
Multicast Forwarding.............................................................................................................................................................. 124
LLDP.........................................................................................................................................................................125
LLDP Global Settings............................................................................................................................................................. 125
LLDP Port Settings ................................................................................................................................................................ 126
LLDP Management Address List ........................................................................................................................................... 127
LLDP Basic TLVs Settings..................................................................................................................................................... 128
LLDP Dot1 TLVs Settings...................................................................................................................................................... 129
LLDP Dot3 TLVs Settings...................................................................................................................................................... 130
LLDP Statistics System.......................................................................................................................................................... 131
LLDP Local Port Information.................................................................................................................................................. 131
LLDP Remote Port Information.............................................................................................................................................. 132
CFM..........................................................................................................................................................................133
CFM Port Settings.................................................................................................................................................................. 133
CFM CCM PDUs Forwarding Mode....................................................................................................................................... 133
CFM MPs Reply LTRs ........................................................................................................................................................... 134
CFM Mipccm List................................................................................................................................................................... 134
Connectivity Fault Management Settings............................................................................................................................... 135
CFM Loopback Settings......................................................................................................................................................... 136
CFM Linktrace Settings.......................................................................................................................................................... 137
CFM Packet Counter List....................................................................................................................................................... 138
CFM Packet Counter CCM List.............................................................................................................................................. 138
Browse CFM Fault Mep ......................................................................................................................................................... 139
Browse CFM Port MP List...................................................................................................................................................... 139
Ethernet OAM...........................................................................................................................................................139
Ethernet OAM Settings.......................................................................................................................................................... 140
Ethernet OAM Configuration Settings.................................................................................................................................... 141
L3 Features ................................................................................................................................. 142
IPv4 Interface Settings..............................................................................................................................................142
IPv4 Default Route Settings......................................................................................................................................143
Gratuitous ARP.........................................................................................................................................................144
Gratuitous ARP Global Settings............................................................................................................................................. 144
Gratuitous ARP Settings........................................................................................................................................................ 145
ARP Spoofing Prevention Settings...........................................................................................................................145
DNS Relay................................................................................................................................................................146
DNS Relay Global Settings.................................................................................................................................................... 146
DNS Relay Static Settings ..................................................................................................................................................... 147
DHCP Server............................................................................................................................................................147

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
vi
DHCP Server Global Settings................................................................................................................................................ 148
DHCP Server Excluded Address Settings ............................................................................................................................. 149
DHCP Server Pool Settings................................................................................................................................................... 149
DHCP Server Manual Binding................................................................................................................................................ 151
Policy Route Settings................................................................................................................................................152
QoS ............................................................................................................................................. 154
Advantages of QoS................................................................................................................................................................ 154
Understanding QoS ............................................................................................................................................................... 155
HOL Blocking Pevention...........................................................................................................................................156
Bandwidth Control ....................................................................................................................................................157
Traffic Control ...........................................................................................................................................................157
802.1p Default Priority..............................................................................................................................................160
802.1p User Priority..................................................................................................................................................161
QoS Scheduling Mechanism ....................................................................................................................................162
QoS Scheduling........................................................................................................................................................163
CoS Bandwidth Control Settings ..............................................................................................................................164
SRED........................................................................................................................................................................165
SRED Settings....................................................................................................................................................................... 165
SRED Drop Counter .............................................................................................................................................................. 166
DSCP Trust Settings.............................................................................................................................................................. 167
DSCP Map Settings............................................................................................................................................................... 168
802.1p Map Settings.............................................................................................................................................................. 170
Security ....................................................................................................................................... 171
Safeguard Engine.....................................................................................................................................................171
Trusted Host .............................................................................................................................................................173
IP-MAC-Port Binding ................................................................................................................................................173
IMP Binding Global Settings .................................................................................................................................................. 174
IMP Binding Port Settings...................................................................................................................................................... 175
IMP Binding Entry Settings .................................................................................................................................................... 176
DHCP Snooping Entries ........................................................................................................................................................ 177
MAC Block List....................................................................................................................................................................... 177
Port Security .............................................................................................................................................................177
Port Security Settings ............................................................................................................................................................ 177
Port Security FDB Entries...................................................................................................................................................... 179
DHCP Server Screening Settings.............................................................................................................................179
DHCP Screening Port Settings.............................................................................................................................................. 180
DHCP Offer Filtering.............................................................................................................................................................. 181
802.1X.......................................................................................................................................................................181
802.1X Force Disconnect....................................................................................................................................................... 186
802.1X Global Settings.......................................................................................................................................................... 186
802.1X Settings...................................................................................................................................................................... 188
802.1X User........................................................................................................................................................................... 189
Authentication RADIUS Server.............................................................................................................................................. 190

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
vii
RADIUS Attributes Assignment.............................................................................................................................................. 191
Guest VLAN Configuration..................................................................................................................................................... 193
Guest VLAN........................................................................................................................................................................... 194
SSL Settings.............................................................................................................................................................194
Download Certificate.............................................................................................................................................................. 195
Ciphersuite............................................................................................................................................................................. 195
SSH...........................................................................................................................................................................197
SSH Settings.......................................................................................................................................................................... 197
SSH Authmode and Algorithm Settings................................................................................................................................. 198
SSH User Authentication Lists............................................................................................................................................... 199
Access Authentication Control..................................................................................................................................201
Authentication Policy Settings................................................................................................................................................ 202
Application Authentication Settings........................................................................................................................................ 202
Authentication Server Group.................................................................................................................................................. 203
Authentication Server............................................................................................................................................................. 204
Login Method Lists................................................................................................................................................................. 205
Enable Method Lists .............................................................................................................................................................. 206
Local Enable Password Settings............................................................................................................................................ 207
RADIUS Accounting Services................................................................................................................................................ 208
MAC-based Access Control......................................................................................................................................209
MAC-based Access Control Settings..................................................................................................................................... 209
MAC-based Access Control Local Settings............................................................................................................................ 211
Web Authentication...................................................................................................................................................212
Web-based Access Control Settings...................................................................................................................................... 214
Web-based Access Control User Settings............................................................................................................................. 215
Web-based Access Control Port Settings.............................................................................................................................. 216
JWAC (Japanese Web-based Access Control)........................................................................................................217
JWAC Global Settings ........................................................................................................................................................... 217
JWAC Port Settings............................................................................................................................................................... 219
JWAC User Settings.............................................................................................................................................................. 220
JWAC Customize Page Language......................................................................................................................................... 220
JWAC Customize Page ......................................................................................................................................................... 221
NetBIOS Filtering Settings........................................................................................................................................221
Multiple Authentication..............................................................................................................................................222
Multiple Authentication Settings............................................................................................................................................. 224
Guest VLAN........................................................................................................................................................................... 225
ACL ............................................................................................................................................. 226
ACL Configuration Wizard........................................................................................................................................226
Access Profile List ....................................................................................................................................................228
CPU Interface Filtering .............................................................................................................................................244
CPU Access Profile List............................................................................................................................................245
ACL Finder................................................................................................................................................................256
ACL Flow Meter........................................................................................................................................................256

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
viii
Monitoring .................................................................................................................................. 259
Device Status............................................................................................................................................................259
Cable Diagnostics.....................................................................................................................................................260
CPU Utilization..........................................................................................................................................................261
Port Utilization...........................................................................................................................................................262
Packet Size...............................................................................................................................................................263
Packets.....................................................................................................................................................................265
Received (RX)........................................................................................................................................................................ 265
UMB_cast (RX)...................................................................................................................................................................... 267
Transmitted (TX).................................................................................................................................................................... 268
Errors........................................................................................................................................................................270
Received (RX)........................................................................................................................................................................ 270
Transmitted (TX).................................................................................................................................................................... 272
Port Access Control..................................................................................................................................................273
RADIUS Authentication.......................................................................................................................................................... 274
RADIUS Account Client ......................................................................................................................................................... 275
Authenticator State ................................................................................................................................................................ 277
Authenticator Statistics .......................................................................................................................................................... 277
Authenticator Session Statistics............................................................................................................................................. 279
Authenticator Diagnostics...................................................................................................................................................... 280
Browse ARP Table ...................................................................................................................................................282
Browse Route Table.................................................................................................................................................282
Browse VLAN ...........................................................................................................................................................282
Show VLAN Ports.....................................................................................................................................................283
Browse Voice VLAN Device .....................................................................................................................................283
Browse DHCP Server Dynamic Binding...................................................................................................................283
Browse DHCP Conflict IP.........................................................................................................................................284
Browse Session Table..............................................................................................................................................284
MLD Snooping..........................................................................................................................................................284
Browse MLD Router Port....................................................................................................................................................... 284
MLD Snooping Group............................................................................................................................................................ 285
MLD Snooping Forwarding .................................................................................................................................................... 285
Browse MLD Snooping Counter............................................................................................................................................. 286
IGMP Snooping ........................................................................................................................................................286
Browse IGMP Router Port...................................................................................................................................................... 286
IGMP Snooping Group........................................................................................................................................................... 287
IGMP Snooping Forwarding................................................................................................................................................... 288
Browse IGMP Snooping Counter........................................................................................................................................... 288
Ethernet OAM...........................................................................................................................................................288
Browse Ethernet OAM Event Log.......................................................................................................................................... 288
Browse Ethernet OAM Statistics............................................................................................................................................ 289
JWAC Authentication State ......................................................................................................................................290
MBA Authentication State.........................................................................................................................................290

xStack®DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
ix
WAC Authentication State........................................................................................................................................290
ARP & FDB Table.....................................................................................................................................................291
MAC Address Table..................................................................................................................................................292
System Log...............................................................................................................................................................293
Save Services and Tools ........................................................................................................... 294
Save Configuration ID 1............................................................................................................................................294
Save Configuration ID 2............................................................................................................................................295
Save Log...................................................................................................................................................................295
Save All.....................................................................................................................................................................295
Configuration File Backup & Restore .......................................................................................................................296
Upload Log File.........................................................................................................................................................296
Reset.........................................................................................................................................................................296
Download Firmware..................................................................................................................................................297
Reboot System .........................................................................................................................................................297
Mitigating ARP Spoofing Attacks Using Packet Content ACL ............................................... 298
System Log and Trap List ......................................................................................................... 306
Glossary...................................................................................................................................... 318
Password Recovery Procedure ................................................................................................ 321