D-Link xStack DGS-3426G User manual

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
®
User Manual
Product Model : xStack® DGS-3426G
Layer 2+ Gigabit Ethernet Managed Switch
Release 2.61
i

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
ii
_____________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft
Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Corporation
disclaims any proprietary interest in trademarks and trade names other than its own.
June 2009 P/N 651GS3400085G

Table of Contents
Intended Readers........................................................................................................................................................................... xi
Typographical Conventions...........................................................................................................................................................................xi
Notes, Notices, and Cautions ........................................................................................................................................................ xi
Web-based Switch Configuration...................................................................................................................1
Introduction.................................................................................................................................................................................... 1
Logging in to the Web Manager .................................................................................................................................................... 1
Web-based User Interface.............................................................................................................................................................. 2
Areas of the User Interface........................................................................................................................................................................2
Web Pages...................................................................................................................................................................................... 4
Administration.................................................................................................................................................5
Device Information ........................................................................................................................................................................ 6
IPv6.................................................................................................................................................................................................................8
Overview.........................................................................................................................................................................................................8
Packet Format ...............................................................................................................................................................................................10
IPv6 Header.............................................................................................................................................................................................10
Extension Headers...................................................................................................................................................................................11
Packet Fragmentation ..............................................................................................................................................................................11
Address Format.............................................................................................................................................................................................11
Types .......................................................................................................................................................................................................12
ICMPv6.........................................................................................................................................................................................................13
Neighbor Discovery......................................................................................................................................................................................13
Neighbor Unreachability Detection .........................................................................................................................................................13
Duplicate Address Detection (DAD).......................................................................................................................................................14
Assigning IP Addresses...........................................................................................................................................................................14
IP Interface Setup ....................................................................................................................................................................................14
IP Address.................................................................................................................................................................................... 15
Setting the Switch's IP Address using the Console Interface...................................................................................................................16
Interface Settings.......................................................................................................................................................................... 17
IPv4 Interface Settings..................................................................................................................................................................................17
IPv6 Interface Settings..................................................................................................................................................................................18
Stacking........................................................................................................................................................................................ 21
Stack Switch Swapping ...........................................................................................................................................................................22
Stacking Mode Settings ................................................................................................................................................................................23
Box Information............................................................................................................................................................................................23
Port Configuration........................................................................................................................................................................ 24
Port Error Disabled.......................................................................................................................................................................................25
Port Description............................................................................................................................................................................................26
Port Auto Negotiation Information...............................................................................................................................................................26
Port Details ...................................................................................................................................................................................................27
Port Media Type ...........................................................................................................................................................................................28
Cable Diagnostics .........................................................................................................................................................................................29

User Accounts.............................................................................................................................................................................. 30
Password Encryption.................................................................................................................................................................... 31
Port Mirroring.............................................................................................................................................................................. 32
Mirroring within the Switch Stack...........................................................................................................................................................33
System Log .................................................................................................................................................................................. 33
System Log Host...........................................................................................................................................................................................33
System Log Save Mode Settings...................................................................................................................................................................35
System Severity Settings.............................................................................................................................................................. 35
SNTP Settings.............................................................................................................................................................................. 36
Time Settings ................................................................................................................................................................................................36
Time Zone and DST......................................................................................................................................................................................37
MAC Notification Settings .......................................................................................................................................................... 39
TFTP Services.............................................................................................................................................................................. 40
Multiple Image Services .............................................................................................................................................................. 41
Firmware Information...................................................................................................................................................................................41
Config Firmware Image................................................................................................................................................................................42
Ping Test ...................................................................................................................................................................................... 42
IPv4 Ping Test...............................................................................................................................................................................................42
IPv6 Ping Test...............................................................................................................................................................................................43
IPv6 Neighbor.............................................................................................................................................................................. 44
IPv6 Neighbor Settings.................................................................................................................................................................................44
Routing Table............................................................................................................................................................................... 46
IPv4 Static/Default Route Settings................................................................................................................................................................46
IPv6 Static/Default Route Settings................................................................................................................................................................47
Gratuitous ARP Settings.............................................................................................................................................................. 48
Static ARP Settings...................................................................................................................................................................... 50
DHCP Auto Configuration Settings............................................................................................................................................. 51
DHCP/BOOTP Relay................................................................................................................................................................... 51
DHCP / BOOTP Relay Global Settings........................................................................................................................................................51
The Implementation of DHCP Information Option 82............................................................................................................................54
DHCP/BOOTP Relay Interface Settings.......................................................................................................................................................55
DHCP Relay Option 60 Default Settings......................................................................................................................................................55
DHCP Relay Option 60 Settings...................................................................................................................................................................56
DHCP Relay Option 61 Default Settings......................................................................................................................................................57
DHCP Relay Option 61 Settings...................................................................................................................................................................57
DHCP Server................................................................................................................................................................................ 58
DHCP Server Global Settings.......................................................................................................................................................................58
DHCP Server Exclude Address Settings.......................................................................................................................................................59
DHCP Server Pool Settings ..........................................................................................................................................................................60
DHCP Server Dynamic Binding ...................................................................................................................................................................62
DHCP Server Manual Binding......................................................................................................................................................................63
DHCP Server Screening............................................................................................................................................................... 64
DHCP Server Screening Global Settings......................................................................................................................................................64
DHCP Server Screening Port Settings ..........................................................................................................................................................65

Layer 2 Protocol Tunneling (L2PT) Settings............................................................................................................................... 66
RSPAN......................................................................................................................................................................................... 67
RSPAN State Settings...................................................................................................................................................................................67
RSPAN Settings............................................................................................................................................................................................67
SNMP Manager............................................................................................................................................................................ 70
SNMP Settings..............................................................................................................................................................................................70
SNMP Trap Settings .....................................................................................................................................................................................71
SNMP User Table.........................................................................................................................................................................................72
SNMP View Table........................................................................................................................................................................................74
SNMP Group Table ......................................................................................................................................................................................75
SNMP Community Table..............................................................................................................................................................................76
SNMP Host Table.........................................................................................................................................................................................77
SNMP Engine ID..........................................................................................................................................................................................79
PoE............................................................................................................................................................................................... 79
PoE System Settings .....................................................................................................................................................................................80
PoE Port Settings ..........................................................................................................................................................................................80
sFlow............................................................................................................................................................................................ 82
sFlow Global Settings...................................................................................................................................................................................83
sFlow Analyzer Settings ...............................................................................................................................................................................83
sFlow Sampler Settings.................................................................................................................................................................................85
sFlow Poller Settings ....................................................................................................................................................................................86
IP Multicast VLAN Replication................................................................................................................................................... 88
IP Multicast VLAN Replication Global Settings..........................................................................................................................................88
IP Multicast VLAN Replication Settings......................................................................................................................................................88
Single IP Management (SIM) Overview...................................................................................................................................... 91
The Upgrade to v1.61 ..............................................................................................................................................................................92
Single IP vs. Switch Stacking..................................................................................................................................................................93
SIM Using the Web Interface........................................................................................................................................................................93
Topology.......................................................................................................................................................................................................94
Tool Tips .................................................................................................................................................................................................97
Menu Bar...............................................................................................................................................................................................101
Firmware Upgrade ......................................................................................................................................................................................102
Configuration Backup/Restore....................................................................................................................................................................103
Upload Log.................................................................................................................................................................................................103
L2 Features...................................................................................................................................................104
VLANs....................................................................................................................................................................................... 104
VLAN Description......................................................................................................................................................................................104
Notes about VLANs on the DGS-3426G...............................................................................................................................................104
IEEE 802.1Q VLANs............................................................................................................................................................................104
802.1Q VLAN Tags...............................................................................................................................................................................106
Port VLAN ID .......................................................................................................................................................................................106
Tagging and Untagging .........................................................................................................................................................................107
Ingress Filtering.....................................................................................................................................................................................107
Default VLANs......................................................................................................................................................................................107
Port-based VLANs.................................................................................................................................................................................108

VLAN Segmentation .............................................................................................................................................................................108
VLAN and Trunk Groups......................................................................................................................................................................108
Protocol VLANs....................................................................................................................................................................................108
Static VLAN Entry .....................................................................................................................................................................................109
GVRP Settings............................................................................................................................................................................................111
Double VLANs...........................................................................................................................................................................................112
Regulations for Double VLANs ............................................................................................................................................................113
Double VLAN Settings...............................................................................................................................................................................114
PVID Auto Assign......................................................................................................................................................................................116
MAC-based VLAN Settings.......................................................................................................................................................................117
Protocol VLAN...........................................................................................................................................................................................117
Protocol VLAN Group Settings.............................................................................................................................................................118
Protocol VLAN Port Settings ................................................................................................................................................................119
Trunking..................................................................................................................................................................................... 121
Understanding Port Trunk Groups..............................................................................................................................................................121
Link Aggregation........................................................................................................................................................................................122
LACP Port Settings.....................................................................................................................................................................................125
IGMP Snooping ......................................................................................................................................................................... 127
IGMP Snooping Settings ............................................................................................................................................................................127
Router Port Settings....................................................................................................................................................................................129
IGMP Snooping Static Group Settings .......................................................................................................................................................130
ISM VLAN Settings....................................................................................................................................................................................132
Restrictions and Provisos.......................................................................................................................................................................132
Limited IP Multicast (IGMP Filtering) Address Range Settings.................................................................................................................134
MLD Snooping .......................................................................................................................................................................... 136
MLD Control Messages.........................................................................................................................................................................136
MLD Snooping Settings..............................................................................................................................................................................136
MLD Router Port Settings ..........................................................................................................................................................................138
Loop-back Detection Global Settings........................................................................................................................................ 140
Spanning Tree............................................................................................................................................................................ 142
802.1s MSTP.........................................................................................................................................................................................142
802.1w Rapid Spanning Tree.................................................................................................................................................................142
Port Transition States.............................................................................................................................................................................142
Edge Port...............................................................................................................................................................................................143
P2P Port.................................................................................................................................................................................................143
802.1D/802.1w/802.1s Compatibility....................................................................................................................................................143
STP Bridge Global Settings........................................................................................................................................................................144
MST Configuration Identification...............................................................................................................................................................147
MSTP Port Information ..............................................................................................................................................................................149
STP Instance Settings..................................................................................................................................................................................151
STP Port Settings........................................................................................................................................................................................152
Forwarding & Filtering.............................................................................................................................................................. 153
Unicast Forwarding.....................................................................................................................................................................................153
Multicast Forwarding..................................................................................................................................................................................154
Multicast Filtering Mode.............................................................................................................................................................................155

LLDP.......................................................................................................................................................................................... 155
LLDP Global Settings.................................................................................................................................................................................156
Basic LLDP Port Settings ...........................................................................................................................................................................157
802.1 Extension LLDP Port Settings ..........................................................................................................................................................158
802.3 Extension LLDP Port Settings ..........................................................................................................................................................160
LLDP Management Address Settings.........................................................................................................................................................162
LLDP Statistics...........................................................................................................................................................................................164
LLDP Management Address Table.............................................................................................................................................................165
LLDP Local Port Table...............................................................................................................................................................................165
LLDP Remote Port Table............................................................................................................................................................................168
Q-in-Q........................................................................................................................................................................................ 170
Q-in-Q Settings...........................................................................................................................................................................................170
VLAN Translation Settings.........................................................................................................................................................................171
QoS................................................................................................................................................................173
QoS ............................................................................................................................................................................................ 173
The Advantages of QoS..............................................................................................................................................................................173
Understanding QoS................................................................................................................................................................................174
Understanding IEEE 802.1p Priority...........................................................................................................................................................176
Bandwidth Control..................................................................................................................................................................... 176
QoS Scheduling Mechanism...................................................................................................................................................... 178
QoS Output Scheduling.............................................................................................................................................................. 179
Configuring the Combination Queue.....................................................................................................................................................180
802.1p Default Priority............................................................................................................................................................... 180
802.1p User Priority................................................................................................................................................................... 182
ACL (Access Control List)..........................................................................................................................183
Time Range................................................................................................................................................................................ 183
Access Profile Table .................................................................................................................................................................. 184
ACL Flow Meter........................................................................................................................................................................ 201
CPU Interface Filtering.............................................................................................................................................................. 205
CPU Interface Filtering State Settings ........................................................................................................................................................205
CPU Interface Filtering Table.....................................................................................................................................................................205
Security.........................................................................................................................................................220
Authorization Network State Settings........................................................................................................................................ 220
Traffic Control ........................................................................................................................................................................... 221
Port Security............................................................................................................................................................................... 223
Port Security Entries ...................................................................................................................................................................................224
IP-MAC-Port Binding................................................................................................................................................................ 225
General Overview..................................................................................................................................................................................225
Common IP Management Security Issues .............................................................................................................................................225
Solutions to Improve IP Management Security .....................................................................................................................................225
ARP Mode.............................................................................................................................................................................................225
ACL Mode.............................................................................................................................................................................................225
Strict and Loose State............................................................................................................................................................................226
DHCP Snooping Option ........................................................................................................................................................................226

IMP Global Settings....................................................................................................................................................................................226
IMP Port Settings........................................................................................................................................................................................228
IMP Entry Settings......................................................................................................................................................................................229
DHCP Snooping Entries .............................................................................................................................................................................230
MAC Block List..........................................................................................................................................................................................230
802.1X........................................................................................................................................................................................ 231
Guest VLANs..............................................................................................................................................................................................236
Limitations Using the Guest VLAN ......................................................................................................................................................236
Configure 802.1X Guest VLAN .................................................................................................................................................................236
Configure 802.1X Authenticator Parameter................................................................................................................................................238
802.1X User................................................................................................................................................................................................240
Initialize Port(s) ..........................................................................................................................................................................................241
Reauthenticate Port(s).................................................................................................................................................................................242
Authentic RADIUS Server..........................................................................................................................................................................244
Web-based Access Control (WAC) ........................................................................................................................................... 245
Conditions and Limitations....................................................................................................................................................................245
WAC Global State ......................................................................................................................................................................................245
WAC Port Settings......................................................................................................................................................................................247
WAC User Account....................................................................................................................................................................................249
WAC Host Table Settings...........................................................................................................................................................................250
Trust Host................................................................................................................................................................................... 251
Access Authentication Control................................................................................................................................................... 252
Authentication Policy & Parameter Settings...............................................................................................................................................253
Application's Authentication Settings.........................................................................................................................................................253
Authentication Server Group ......................................................................................................................................................................254
Authentication Server Host.........................................................................................................................................................................255
Login Method Lists.....................................................................................................................................................................................257
Enable Method Lists ...................................................................................................................................................................................258
Configure Local Enable Password..............................................................................................................................................................260
Enable Admin .............................................................................................................................................................................................261
RADIUS Accounting Settings ....................................................................................................................................................................262
MAC-based Access Control (MAC).......................................................................................................................................... 263
Notes About MAC-based Access Control .............................................................................................................................................263
MAC-based Access Control Global Settings..............................................................................................................................................263
MAC-based Access Control Local MAC Settings......................................................................................................................................266
Safeguard Engine....................................................................................................................................................................... 267
Safeguard Engine Settings ..........................................................................................................................................................................268
Traffic Segmentation.................................................................................................................................................................. 269
Secure Socket Layer (SSL)........................................................................................................................................................ 270
SSL............................................................................................................................................................................................. 271
Secure Shell (SSH)..................................................................................................................................................................... 272
SSH Server Configuration...........................................................................................................................................................................273
SSH Authentication Mode and Algorithm Settings ....................................................................................................................................274
SSH User Authentication Mode..................................................................................................................................................................276
Multiple Authentication............................................................................................................................................................. 277

Multiple Authentication Settings ................................................................................................................................................................277
Authentication Guest VLAN Settings.........................................................................................................................................................279
JWAC (Japanese Web-based Access Control)........................................................................................................................... 280
JWAC Global Configuration.......................................................................................................................................................................280
JWAC Port Settings....................................................................................................................................................................................283
JWAC User Account...................................................................................................................................................................................286
JWAC Host Information.............................................................................................................................................................................287
JWAC Customize Page Language Settings.................................................................................................................................................288
JWAC Customize Page...............................................................................................................................................................................288
Monitoring....................................................................................................................................................290
Device Status.............................................................................................................................................................................. 290
Stacking Information.................................................................................................................................................................. 291
Stacking Device ......................................................................................................................................................................... 292
Module Information................................................................................................................................................................... 292
CPU Utilization.......................................................................................................................................................................... 293
Port Utilization........................................................................................................................................................................... 294
Packets ....................................................................................................................................................................................... 295
Received (Rx) .............................................................................................................................................................................................295
UMB Cast (RX)..........................................................................................................................................................................................297
Transmitted (TX) ........................................................................................................................................................................................299
Errors.......................................................................................................................................................................................... 301
Received (RX) ............................................................................................................................................................................................301
Transmitted (TX) ........................................................................................................................................................................................303
Packet Size................................................................................................................................................................................. 305
Browse Router Port.................................................................................................................................................................... 307
Browse MLD Router Port.......................................................................................................................................................... 307
VLAN Status.............................................................................................................................................................................. 308
VLAN Status Port...................................................................................................................................................................... 308
Port Access Control.................................................................................................................................................................... 309
Authenticator State......................................................................................................................................................................................309
Authenticator Statistics ...............................................................................................................................................................................310
Authenticator Session Statistics..................................................................................................................................................................310
Authenticator Diagnostics...........................................................................................................................................................................311
RADIUS Authentication.............................................................................................................................................................................311
RADIUS Account Client.............................................................................................................................................................................311
MAC Address Table .................................................................................................................................................................. 313
IGMP Snooping Group.............................................................................................................................................................. 314
MLD Snooping Group ............................................................................................................................................................... 314
Switch Logs................................................................................................................................................................................ 315
Browse ARP Table..................................................................................................................................................................... 316
Session Table ............................................................................................................................................................................. 316
IP Forwarding Table .................................................................................................................................................................. 316
Browse Routing Table................................................................................................................................................................ 317
MAC-based Access Control Authentication Status ................................................................................................................... 317

Save, Reset and Reboot................................................................................................................................318
Reset........................................................................................................................................................................................... 318
Reboot System ........................................................................................................................................................................... 318
Save Services ............................................................................................................................................................................. 319
Save Changes..............................................................................................................................................................................................319
Configuration Information..........................................................................................................................................................................320
Current Configuration Settings ...................................................................................................................................................................321
Appendix A...................................................................................................................................................322
Mitigating ARP Spoofing Attacks Using Packet Content ACL..................................................................................................................322
Appendix B...................................................................................................................................................329
Switch Log Entries......................................................................................................................................................................................329
Appendix C...................................................................................................................................................339
Trap Logs....................................................................................................................................................................................................339
Glossary ........................................................................................................................................................344

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
xi
Intended Readers
The xStack®DGS-3426G Manual contains information for setup and management of the Switch. This manual is intended for
network managers familiar with network management concepts and terminology.
Typographical Conventions
Convention Description
[ ] In a command line, square brackets indicate an optional entry. For example: [copy
filename] means that optionally you can type copy followed by the name of the file. Do
not type the brackets.
Bold font Indicates a button, a toolbar icon, menu, or menu item. For example: Open the File
menu and choose Cancel. Used for emphasis. May also indicate system messages or
prompts appearing on screen. For example: You have mail. Bold font is also used to
represent filenames, program names and commands. For example: use the copy
command.
Boldface Typewriter
Font Indicates commands and responses to prompts that must be typed exactly as printed in
the manual.
Initial capital letter Indicates a window name. Names of keys on the keyboard have initial capitals. For
example: Click Enter.
Italics Indicates a window name or a field. Also can indicate a variables or parameter that is
replaced with an appropriate word or string. For example: type filename means that the
actual filename should be typed instead of the word shown in italic.
Menu Name > Menu
Option Menu Name > Menu Option Indicates the menu structure. Device > Port > Port
Properties means the Port Properties menu option under the Port menu option that is
located under the Device menu.
Notes, Notices, and Cautions
A NOTE indicates important information that helps make better use of the
device.
A NOTICE indicates either potential damage to hardware or loss of data
and tells how to avoid the problem.
A CAUTION indicates a potential for property damage, personal injury, or
death.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
1
Section 1
Web-based Switch Configuration
Introduction
Logging on to the Web Manager
Web-Based User Interface
Basic Setup
Web Pages
Introduction
All software functions of the xStack®DGS-3426G Switch can be managed, configured and monitored via the embedded web-
based (HTML) interface. Manage the Switch from remote stations anywhere on the network through a standard browser. The
browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol.
The Web-based management module and the Console program (and Telnet) are different ways to access the same internal
switching software and configure it. Thus, all settings encountered in web-based management are the same as those found in the
console program.
Logging in to the Web Manager
To begin managing the Switch, simply run the browser installed on your computer and point it to the IP address you have defined
for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent
the IP address of the Switch.
NOTE: The factory default IP address is 10.90.90.90.
This opens the management module's user authentication dialog box, as seen below.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
2
Figure 1- 1 Enter Network Password dialog box
Leave both the User Name field and the Password field blank and click OK. This will open the Web-based user interface. The
Switch management features available in the Web-based manager are explained below.
Web-based User Interface
The user interface provides access to various Switch configuration and management windows, allows the user to view
performance statistics, and permits graphical monitoring of the system status.
Areas of the User Interface
The figure below shows the user interface. Three distinct areas divide the user interface, as described in the table.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
3
Area 2
Area 1 Area 3
Figure 1- 2 Main Web-Manager window
Area Function
Area 1 Select the menu or window to display. Open folders and click the hyperlinked menu buttons and
subfolders contained within them to display menus. Click the D-Link logo to go to the D-Link website.
Area 2 Presents a graphical near real-time image of the front panel of the Switch. This area displays the
Switch's ports and expansion modules, showing port activity, duplex mode, or flow control,
depending on the specified mode.
Some management functions, including port configuration are accessible here.
Area 3 Presents switch information based on user selection and the entry of configuration data.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
4
Web Pages
When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and
password to access the Switch's management mode.
Below is a list of the main folders available in the Web interface:
Administration – Contains the following folders and windows: IP Address, Interface Settings, Stacking, Port Configuration, User
Accounts, Password Encryption, Port Mirroring, System Log, System Severity Settings, SNTP Settings, MAC Notification
Settings, TFTP Services, Multiple Image Services, Ping Test, IPv6 Neighbor, Routing Table, Gratuitous ARP Settings, Static
ARP Settings, DHCP Auto Configuration, DHCP/BOOTP Relay, DHCP Server, DHCP Server Screening, L2PT Tunneling
Settings, RSPAN, SNMP Manager, PoE, sFlow, IP Multicast VLAN Replication, and Single IP Management Settings.
L2 Features – Contains the following folders and windows: VLAN, Trunking, IGMP Snooping, MLD Snooping, Loopback
Detection Global Settings, Spanning Tree, Forwarding & Filtering, LLDP, and QinQ.
QoS – Contains the following folders and windows: Bandwidth Control, QoS Scheduling Mechanism, QoS Output Scheduling,
802.1p Default Priority, and 802.1p User Priority.
ACL – Contains the following following folders and windows: Time Range, Access Profile Table, ACL Flow Meter and CPU
Interface Filtering.
Security – Contains the following folders and windows: Authorization Network State Settings, Traffic Control, Port Security, IP-
MAC-Port Binding, 802.1X, Web Authentication, Trust Host, Access Authentication Control, MAC Based Access Control,
Safeguard Engine, Traffic Segmentation, SSL, SSH, Multiple Authentication, and JWAC.
Monitoring – Contains the following folders and windows: Device Status, Module Information, CPU Utilization, Port Utilization,
Packets, Errors, Packet Size, Browse Router Port, Browse MLD Router Port, VLAN Status, VLAN Status Port, Port Access
Control, MAC Address Table, IGMP Snooping Group, MLD Snooping Group, Switch Logs, Browse ARP Table, Session Table,
IP Forwarding Table, Browse Routing Table and MAC Based Access Control Authentication Status.
Save Services – Contains the following folders and windows: Save Changes, Configure Information, and Current Configuration
Settings.
Reset, Reboot System and Logout window links are displayed in the main directory.
NOTE: Be sure to configure the user name and password in the User
Accounts window before connecting the Switch to the greater network.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
5
Section 2
Administration
DGS-3426G Web Management Tool
IP Address
Interface Settings
Stacking
Port Configuration
User Accounts
Password Encryption
Port Mirroring
System Log
System Severity Settings
SNTP Settings
MAC Notification Settings
TFTP Services
Multiple Image Services
Ping Test
IPv6 Neighbor
Routing Table
Gratuitous ARP Settings
Static ARP Settings
DHCP Auto Configuration Settings
DHCP/BOOTP Relay
DHCP Server
DHCP Server Screening
Layer 2 Protocol Tunneling (L2PT) Settings
RSPAN
SNMP Manager
PoE
sFlow
IP Multicast VLAN Replication
Single IP Management (SIM) Overview

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
6
Device Information
The Device Information window contains the main
settings for all major functions for the Switch. It
appears automatically when you log on to the Switch.
To return to the Device Information window after
viewing other windows, click the DGS-3426G Web
Management Tool folder. The Device Information
window shows the Switch’s MAC Address (assigned
by the factory and unchangeable), the Boot PROM,
Firmware Version, Hardware Version and Serial
Number. This information is helpful to keep track of
PROM and firmware updates and to obtain the
Switch's MAC address for entry into another network
device's address table, if necessary. The user may also
enter a System Name, System Location and System
Contact to aid in defining the Switch, to the user's
preference. In addition, this window displays the
status of functions on the Switch to quickly assess
their current global status. Some Functions are hyper-
linked for easy access from the Device Information
window.
Many miscellaneous functions are enabled and
disabled in the Device Information window.
Figure 2 - 1 Device Information window
Device Information window configurable parameters include those described in the table below.
Parameter Description
System Name Enter a system name for the Switch, if so desired. This name will identify it in the Switch
network.
System Location Enter the location of the Switch, if so desired.
System Contact Enter a contact name for the Switch, if so desired.
Serial Port Auto
Logout Time Select the logout time used for the console interface. This automatically logs the user out after
an idle period of time, as defined. Choose from the following options: 2 Minutes, 5 Minutes, 10
Minutes, 15 Minutes or Never. The default setting is 10 minutes.
Serial Port Baud
Rate This field specifies the baud rate for the serial port on the Switch. The default setting is 115200.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
7
MAC Address
Aging Time This field specifies the length of time a learned MAC Address will remain in the forwarding table
without being accessed (that is, how long a learned MAC Address is allowed to remain idle). To
change this, type in a different value representing the MAC address age-out time in seconds.
The MAC Address Aging Time can be set to any value between 10 and 1,000,000 seconds. The
default setting is 300 seconds.
IGMP Snooping To enable system-wide IGMP Snooping capability, select Enabled. IGMP snooping is Disabled
by default. Enabling IGMP snooping allows the user to specify use of a multicast router only
(see below). To configure IGMP Snooping for individual VLANs, use the IGMP Snooping
window under the IGMP Snooping folder.
IGMP Multicast
Router Only This field specifies that the Switch should only forward all multicast traffic to a multicast-enabled
router, if enabled. Otherwise, the Switch will forward all multicast traffic to any IP router. The
default is Disabled.
MLD Snooping To enable system-wide MLD Snooping capability, select Enabled. MLD snooping is Disabled by
default. Enabling MLD snooping allows you to specify use of a multicast router only (see below).
To configure MLD Snooping for individual VLANs, use the MLD Snooping window under the
MLD Snooping folder.
MLD Multicast
Router Only This field specifies that the Switch should only forward all multicast traffic to a multicast-enabled
router, if enabled. Otherwise, the Switch will forward all multicast traffic to any IP router. The
default is Disabled.
GVRP Status Use this drop-down menu to enable or disable GVRP on the Switch.
Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the
system through Telnet choose Disabled.
Telnet TCP Port
Number (1-65535) The TCP port number used for Telnet management of the Switch. The "well-known" TCP port for
the Telnet protocol is 23.
Web Status Web-based management is Enabled by default. If you choose to disable this by selecting
Disabled, you will lose the ability to configure the system through the Web interface as soon as
these settings are applied.
Web TCP Port
Number (1-65535) The TCP port number used for Web-based management of the Switch. The "well-known" TCP
port for the Telnet protocol is 80.
SNMP Status SNMP is Disabled by default. The Switch supports the SNMP versions 1, 2c, and 3. Once
SNMP is enabled, you can choose among three versions to monitor and control the Switch. The
three versions of SNMP vary in the level of security provided between the management station
and the network device.
RMON Status Remote monitoring (RMON) of the Switch is Enabled or Disabled here.
Link Aggregation
Algorithm The algorithm that the Switch uses to balance the load across the ports that make up the port
trunk group is defined by this definition. Choose MAC Source, MAC Destination, MAC Src &
Dest, IP Source, IP Destination or IP Src & Dest (See the Link Aggregation section of this
manual).
Switch 802.1X MAC Address may enable by port or the Switch’s 802.1X function; the default is Disabled. This
field must be enabled to view and configure certain windows for 802.1X. More information
regarding 802.1X, its functions and implementation can be found later in this section, under the
Port Access Entity folder.
Port-Based 802.1X specifies that ports configured for 802.1X are initialized based on the port
number only and are subject to any authorization parameters configured.
MAC-based Authorization specifies that ports configured for 802.1X are initialized based on the
port number and the MAC address of the computer being authorized and are then subject to any
authorization parameters configured.
Auth Protocol The user may use the drop-down menu to choose between RADIUS EAP and Local for the
802.1X authentication protocol on the Switch. The default setting is RADIUS EAP.
802.1X Authen
Network RADIUS The user may use the drop-down menu to Enable or Disable the 802.1X Authen Network
RADIUS on the Switch. The default setting is Enabled.
802.1X Authen
FailOver The user may use the drop-down menu to Enable or Disable the 802.1X Authen FailOver on the
Switch. The default setting is Disabled.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
8
Forward EAPOL
PDU The user may use the drop-down menu to Enable or Disable the Forward EAPOL PDU on the
Switch. The default setting is Disabled.
HOL Prevention If this option is enabled it prevents the forwarding of data to a port that is blocked. Traffic that
would normally be sent to the buffer memory of the Switch’s TX queue is dropped so that
memory usage is conserved and performance across all ports remains high.
Jumbo Frame This field will enable or disable the Jumbo Frame function on the Switch. The default is
Disabled. Max. Jumbo frame size = 9216 bytes if this is enabled.
Syslog State The user may globally enable or disable the Syslog function here by using the drop-down menu.
The default is Disabled.
ARP Aging time
(0-65535) The user may set the ARP Aging Time here by entering a time between 0 and 65535 minutes.
The default setting is 20 minutes.
Click Apply to implement changes made.
IPv6
The xStack®DGS-3426G has the capability to support the following:
•IPv6 unicast, multicast and anycast addresses
•Allow for IPv6 packet forwarding
•IPv6 fragmentation and re-assembly
•Processing of IPv6 packet and extension headers
•Static IPv6 route configuration
•IPv6 Neighbor Discovery
•Link-Layer Address resolution, Neighbor Unreachability Detection, and Duplicate Address Detection over broadcast
mediums (ex: Ethernet)
•Send Router Advertisement
•ICMPv6 functionality
The following sections will briefly explain IPv6, its functionality and how IPv6 is implemented on this Switch.
Overview
IP version 6 is the logical successor to IP version 4. It was known that IPv4 could not support the amount of addresses that would
eventually be needed for not only each person, but each device that would require an IP address, and therefore a system with a
larger pool of IP addresses was required. IPv6 has addressed that issue, along with other issues that enhance routing over the
network, provide better security and improve Quality of Service for Internet users. Some of the improvements made were:
Expanding the Capabilities for IP Addressing – IPv6 has increased the size of the IP address from 32 bits to 128 bits. As a
result, the addressing hierarchy has been greatly expanded, more nodes now have the capability of having a unique IP address and
the method of assigning an IP address to an interface has become cleaner and quicker. Unicast and multicast addresses still exist
but in a purer form and multicast addresses now have a scope field which increases the scalability of multicast routing. Also, an
anycast address has been added, which will send packets to the closest node which is a part of a group of nodes, thereby
eliminating a specified device for a particular group.
Simplifying the Packet Header – The IPv6 packet header has been simplified from IPv4 as some headers have been modified or
dropped altogether, which improves processing speed and cost. The IPv6 header now has a fixed length of 40 bytes consisting of
an 8-byte header and two 16-byte IP addresses (source and destination).
Extensions and Options Enhancement – Packet header option fields encoding has been enhanced to allow for proficient
forwarding of packets due to lesser restrictions on packet option length and encoding method. This enhancement will also allow
new option fields to be integrated into the IPv6 system without hassles and limitations. These optional headers are placed between
the header and the payload of a packet, if they are necessary at all.
Authentication and Privacy Extension Support – New authentication capabilities use extensions for data integrity and data
confidentiality for IPv6.

xStack
®
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
9
Flow Labeling – This new capability allows packets to be streamlined into certain traffic “flows” if labeled by the sender. In this
way, services such as “real time services or non-default quality of service can receive special attention for improved flow quality.