D-Link DES-3028 User manual

User Manual
Product Model : DES-3028/DES-3028P/DES-3028G/DES-
3052/DES-3052P
Managed 10/100Mbps Fast Ethernet Switch
Release 2
©Copyright 2009. All rights reserved.

©Copyright 2009. All rights reserved.
________________________________________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of
Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer
Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
January 2009 P/N 651ES3028025G

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
Table of Contents
Preface........................................................................................................................................................... viii
Intended Readers ............................................................................................................................................ix
Typographical Conventions ...........................................................................................................................ix
Notes, Notices, and Cautions..........................................................................................................................ix
Safety Instructions ...........................................................................................................................................x
Safety Cautions.............................................................................................................................................................................. x
General Precautions for Rack-Mountable Products......................................................................................................................xi
Protecting Against Electrostatic Discharge..................................................................................................................................xii
Introduction......................................................................................................................................................1
DES-3028/28P/28G/52/52P..............................................................................................................................1
Features.......................................................................................................................................................................................... 1
Ports............................................................................................................................................................................................... 2
LED Indicators............................................................................................................................................................................... 3
Front-Panel Description................................................................................................................................................................. 5
Rear Panel Description................................................................................................................................................................... 6
Side Panel Description................................................................................................................................................................... 6
Gigabit Combo Ports...................................................................................................................................................................... 7
Installing the SFP ports.................................................................................................................................................................. 8
Installation........................................................................................................................................................9
Package Contents........................................................................................................................................................................... 9
Before You Connect to the Network.............................................................................................................................................. 9
Installing the Switch without the Rack ........................................................................................................................................ 10
Installing the Switch in a Rack..................................................................................................................................................... 10
Mounting the Switch in a Standard 19" Rack.............................................................................................................................. 11
Connecting the Switch ...................................................................................................................................12
Switch to End Node..................................................................................................................................................................... 12
Switch to Hub or Switch.............................................................................................................................................................. 13
Introduction to Switch Management ...........................................................................................................14
Management Options.....................................................................................................................................14
Web-based Management Interface............................................................................................................................................... 14
SNMP-Based Management.......................................................................................................................................................... 14
Connecting the Console Port (RS-232 DCE)............................................................................................................................... 14
First Time Connecting to the Switch ........................................................................................................................................... 16
Password Protection..................................................................................................................................................................... 16
SNMP Settings............................................................................................................................................................................. 17
IP Address Assignment................................................................................................................................................................ 18
Web-based Switch Configuration.................................................................................................................21
Introduction....................................................................................................................................................21
ii

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
Login to Web Manager................................................................................................................................................................ 21
Web-based User Interface............................................................................................................................................................ 22
Web Pages.................................................................................................................................................................................... 24
Administration ...............................................................................................................................................25
Device Information ........................................................................................................................................26
IP Address.......................................................................................................................................................28
Setting the Swith’s IP Address using the Console Interface........................................................................................................ 30
Port Configuration.........................................................................................................................................31
Port Settings................................................................................................................................................................................. 31
Port Description........................................................................................................................................................................... 33
Port Error Disabled ...................................................................................................................................................................... 33
DHCP/BOOTP Relay ....................................................................................................................................35
DHCP/BOOTP Relay Global Settings......................................................................................................................................... 35
DHCP/BOOTP Relay Interface Settings...................................................................................................................................... 38
DHCP Local Relay Settings......................................................................................................................................................... 38
User Accounts.................................................................................................................................................40
Cable Diagnostics...........................................................................................................................................42
Port Mirroring ...............................................................................................................................................44
System Log Settings .......................................................................................................................................45
Log Settings ....................................................................................................................................................47
SNTP Settings.................................................................................................................................................48
Time Settings............................................................................................................................................................................... 48
Time Zone and DST..................................................................................................................................................................... 49
MAC Notification Settings ............................................................................................................................51
TFTP Services ................................................................................................................................................52
Multiple Image Services ................................................................................................................................53
Firmware Information.................................................................................................................................................................. 53
Config Firmware Image............................................................................................................................................................... 53
Ping Test .........................................................................................................................................................54
Safeguard Engine...........................................................................................................................................54
SNMP Manager..............................................................................................................................................57
SNMP Settings............................................................................................................................................................................. 57
SNMP Traps Settings................................................................................................................................................................... 58
SNMP User Table........................................................................................................................................................................ 58
SNMP View Table....................................................................................................................................................................... 60
SNMP Group Table ..................................................................................................................................................................... 61
SNMP Community Table Configuration ..................................................................................................................................... 62
SNMP Host Table........................................................................................................................................................................ 63
SNMP Engine ID......................................................................................................................................................................... 64
PoE System .....................................................................................................................................................65
iii

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
PoE System Configuration........................................................................................................................................................... 65
PoE Port Configuration................................................................................................................................................................ 66
Single IP Settings............................................................................................................................................68
SIM Settings................................................................................................................................................................................. 69
Topology...................................................................................................................................................................................... 71
Tool Tips...................................................................................................................................................................................... 73
Right-Click................................................................................................................................................................................... 74
Menu Bar ..................................................................................................................................................................................... 76
Firmware Upgrade....................................................................................................................................................................... 77
Configuration Backup/Restore..................................................................................................................................................... 77
Upload Log .................................................................................................................................................................................. 78
Forwarding & Filtering.................................................................................................................................78
Unicast Forwarding...................................................................................................................................................................... 78
Multicast Forwarding................................................................................................................................................................... 79
Multicast Filtering Mode ............................................................................................................................................................. 81
SMTP Service.................................................................................................................................................82
SMTP Server Settings.................................................................................................................................................................. 83
SMTP Service.............................................................................................................................................................................. 83
L2 Features.....................................................................................................................................................85
VLANs.............................................................................................................................................................85
Static VLAN Entry....................................................................................................................................................................... 90
GVRP Settings............................................................................................................................................................................. 92
VLAN Trunk Settings.................................................................................................................................................................. 94
QinQ............................................................................................................................................................................................. 96
Trunking .........................................................................................................................................................98
Link Aggregation......................................................................................................................................................................... 99
LACP Port Settings...................................................................................................................................................................... 99
IGMP Snooping............................................................................................................................................101
Router Ports Settings.................................................................................................................................................................. 103
IGMP Authentication................................................................................................................................................................. 105
Dynamic IP Multicast Learning................................................................................................................................................. 107
ISM VLAN Settings................................................................................................................................................................... 108
IP Multicast Filter Profile Settings............................................................................................................................................. 110
Limited Multicast Range Settings.............................................................................................................................................. 111
Max Multicast Group Settings................................................................................................................................................... 113
MLD Snooping .............................................................................................................................................114
MLD Snooping Settings............................................................................................................................................................. 114
MLD Snooping Router Port Settings......................................................................................................................................... 116
Spanning Tree ..............................................................................................................................................117
STP Bridge Global Settings....................................................................................................................................................... 120
STP Port Settings....................................................................................................................................................................... 123
iv

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
MST Configuration Identification.............................................................................................................................................. 125
STP Instance Settings................................................................................................................................................................. 127
MSTP Port Information ............................................................................................................................................................. 128
Loopback Detection Settings.......................................................................................................................130
LLDP.............................................................................................................................................................131
LLDP Global Settings................................................................................................................................................................ 131
Basic LLDP Port Settings .......................................................................................................................................................... 133
802.1 Extension LLDP Port Settings ......................................................................................................................................... 134
802.3 Extension LLDP Port Settings ......................................................................................................................................... 136
LLDP Management Address Settings........................................................................................................................................ 138
LLDP Statistics.......................................................................................................................................................................... 139
LLDP Management Address Table............................................................................................................................................ 140
LLDP Local Port Table.............................................................................................................................................................. 140
LLDP Remote Port Table .......................................................................................................................................................... 142
CoS ................................................................................................................................................................143
Port Bandwidth ............................................................................................................................................146
802.1p Default Priority ................................................................................................................................147
802.1p User Priority.....................................................................................................................................149
CoS Scheduling Mechanism........................................................................................................................149
CoS Output Scheduling ...............................................................................................................................150
Priority Settings ...........................................................................................................................................151
TOS Priority Settings ..................................................................................................................................153
DSCP Priority Settings ................................................................................................................................154
Port Mapping Priority Settings ..................................................................................................................155
MAC Priority ...............................................................................................................................................156
ACL ...............................................................................................................................................................157
Time Range...................................................................................................................................................157
Access Profile Table.....................................................................................................................................157
CPU Interface Filtering...............................................................................................................................169
CPU Interface Filtering State..................................................................................................................................................... 169
CPU Interface Filtering Profile Table........................................................................................................................................ 169
Security .........................................................................................................................................................181
Traffic Control .............................................................................................................................................181
Port Security.................................................................................................................................................185
Port Lock Entries.........................................................................................................................................186
IP-MAC-Port Binding .................................................................................................................................187
IMP Global Settings................................................................................................................................................................... 187
IMP Port Settings....................................................................................................................................................................... 187
IMP Entry Settings..................................................................................................................................................................... 189
v

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
DHCP Snooping Entries ............................................................................................................................................................ 190
MAC Block List......................................................................................................................................................................... 190
SSL ................................................................................................................................................................191
Download Certificate................................................................................................................................................................. 191
Ciphersuite................................................................................................................................................................................. 191
SSH................................................................................................................................................................194
SSH Server Configuration ......................................................................................................................................................... 194
SSH Authentication Mode and Algorithm Settings................................................................................................................... 195
SSH User Authentication........................................................................................................................................................... 197
802.1X............................................................................................................................................................198
802.1X Authenticator Settings................................................................................................................................................... 205
Local Users ................................................................................................................................................................................ 208
802.1X Capability Settings ........................................................................................................................................................ 209
Configure 802.1X Guest VLAN ................................................................................................................................................ 209
Initializing Ports for Port Based 802.1X.................................................................................................................................... 210
Initializing Ports for Host Based 802.1X................................................................................................................................... 211
Reauthenticate Port(s) for Port Based 802.1X ........................................................................................................................... 212
Reauthenticate Port(s) for Host-based 802.1X........................................................................................................................... 213
RADIUS Server ......................................................................................................................................................................... 213
Trusted Host.................................................................................................................................................214
Access Authentication Control ...................................................................................................................215
Authentication Policy and Parameter Settings........................................................................................................................... 216
Application Authentication Settings .......................................................................................................................................... 216
Authentication Server Group ..................................................................................................................................................... 217
Authentication Server Host........................................................................................................................................................ 218
Login Method Lists.................................................................................................................................................................... 221
Enable Method Lists .................................................................................................................................................................. 222
Configure Local Enable Password............................................................................................................................................. 225
Enable Admin ............................................................................................................................................................................ 225
Traffic Segmentation ...................................................................................................................................226
DoS Attack Prevention ................................................................................................................................227
Monitoring....................................................................................................................................................232
CPU Utilization ............................................................................................................................................232
Port Utilization.............................................................................................................................................233
Packets ..........................................................................................................................................................234
Received (RX) ........................................................................................................................................................................... 235
UMB Cast (RX)......................................................................................................................................................................... 237
Transmitted (TX) ....................................................................................................................................................................... 239
Packet Errors ...............................................................................................................................................241
Received (RX) ........................................................................................................................................................................... 241
vi

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
Transmitted (TX) ....................................................................................................................................................................... 243
Packet Size ....................................................................................................................................................245
MAC Address ...............................................................................................................................................247
Switch Log ....................................................................................................................................................249
IGMP Snooping Group ...............................................................................................................................250
Browse Router Port .....................................................................................................................................251
VLAN Status.................................................................................................................................................251
MLD Snooping Group.................................................................................................................................251
Browse MLD Snooping Router Port..........................................................................................................252
Static ARP Settings......................................................................................................................................253
ARP-FDB......................................................................................................................................................253
Gratuitous ARP Settings .............................................................................................................................255
Session Table ................................................................................................................................................256
Port Access Control .....................................................................................................................................256
RADIUS Authentication............................................................................................................................................................ 256
RADIUS Accounting................................................................................................................................................................. 258
Reset ..............................................................................................................................................................259
Reboot System ..............................................................................................................................................260
Save Changes................................................................................................................................................260
Logout ...........................................................................................................................................................261
Technical Specifications ..............................................................................................................................262
System Log Entries ......................................................................................................................................268
Standard Trap List...................................................................................................................................................................... 278
Proprietary Trap List.................................................................................................................................................................. 279
Proprietary Trap List (project dependent).................................................................................................................................. 279
Cable Lengths...............................................................................................................................................281
Password Recovery Procedure ...................................................................................................................282
Glossary ........................................................................................................................................................284
ARP Packet Content ACL...........................................................................................................................286
Warranties/Registration..............................................................................................................................296
Tech Support ................................................................................................................................................305
vii

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
Preface
The DES-3028/DES-3028P/DES-3028G/DES-3052/DES-3052P User Manual is divided into sections that describe the system
installation and operating instructions with examples.
Section 1, Introduction - Describes the Switch and its features.
Section 2, Installation - Helps you get started with the basic installation of the Switch and also describes the front panel, rear
panel, side panels, and LED indicators of the Switch.
Section 3, Connecting the Switch - Tells how you can connect the Switch to your Ethernet/Fast Ethernet network.
Section 4, Introduction to Switch Management - Introduces basic Switch management features, including password protection,
SNMP settings, IP address assignment and connecting devices to the Switch.
Section 5, Introduction to Web-based Switch Management - Talks about connecting to and using the Web-based switch
management feature on the Switch.
Section 6, Administration - A detailed discussion about configuring the basic functions of the Switch, including Device
Information, IP Address, Port Configuration, DHCP/BOOTP Relay, User Accounts, Cable Diagnostics, Port Mirroring, System
Log Settings, Log Settings, SNTP Settings, MAC Notification Settings, TFTP Services, Multiple Image Services, Ping Test,
Safeguard Engine, SNMP Manager, Single IP Settings, Forwarding & Filtering, and SMTP Service.
Section 7, Layer 2 Features - A discussion of Layer 2 features of the Switch, including VLAN, QinQ, Trunking, IGMP
Snooping, MLD Snooping, Spanning Tree, Loopback Detection and LLDP.
Section 8, CoS - Features information on CoS, including Port Bandwidth, 802.1P Default Priority, 802.1P User Priority, CoS
Scheduling Mechanism, CoS Output Scheduling, Priority Settings, TOS Priority Settings, DSCP Priority Settings, Port Mapping
Priority Settings, and MAC Priority.
Section 9, ACL - Discussion on the ACL function of the Switch, including Time Range, Access Profile Table and CPU Interface
Filtering.
Section 10, Security - A discussion on the Security functions on the Switch, including Traffic Control, Port Security, Port Lock
Entries, IP-MAC-Port Binging, SSL, SSH, 802.1X, Trusted Host, Access Authentication Control, Traffic Segmentation and DoS
Attack Prevention.
Section 11, Monitoring - Features information on Monitoring including CPU Utilization, Port Utilization, Packets, Packet Errors,
Packet Size, MAC Address, Switch Log, IGMP Snooping Group, Browse Router Port, VLAN Status, MLD Snooping Group,
Browse MLD Snooping Router Port, Static ARP Settings, ARP-FDB, Gratuitous ARP Settings, Session Table, and Port Access
Control.
Appendix A, Technical Specifications - Technical specifications for the DES-3028/DES-3028P/DES-3028G/DES-3052 and the
DES-3052P.
Appendix B, System Log Entries - Information on the System Log Entries
Appendix C, Cable Lengths - Information on cable types and maximum distances.
Appendix D, Glossary - Lists definitions for terms and acronyms used in this document.
viii

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch
ix
Intended Readers
The DES-3028/DES-3028P/DES-3028G/DES-3052/DES-3052P User Manual contains information for setup and management of
the Switch. The term, “the Switch” will be used when referring to all five switches. This manual is intended for network managers
familiar with network management concepts and terminology.
Typographical Conventions
Convention Description
[ ] In a command line, square brackets indicate an optional entry. For example: [copy filename]
means that optionally you can type copy followed by the name of the file. Do not type the
brackets.
Bold font Indicates a button, a toolbar icon, menu, or menu item. For example: Open the File menu
and choose Cancel. Used for emphasis. May also indicate system messages or prompts
appearing on your screen. For example: You have mail. Bold font is also used to represent
filenames, program names and commands. For example: use the copy command.
Boldface
Typewriter Font
Indicates commands and responses to prompts that must be typed exactly as printed in the
manual.
Initial capital letter Indicates a window name. Names of keys on the keyboard have initial capitals. For example:
Click Enter.
Italics Indicates a window name or a field. Also can indicate a variables or parameter that is
replaced with an appropriate word or string. For example: type filename means that you
should type the actual filename instead of the word shown in italic.
Menu Name > Menu
Option Menu Name > Menu Option Indicates the menu structure. Device > Port > Port
Properties means the Port Properties menu option under the Port menu option that is
located under the Device menu.
Notes, Notices, and Cautions
A NOTE indicates important information that helps you make better use of your device.
A NOTICE indicates either potential damage to hardware or loss of data and tells you
how to avoid the problem.
A CAUTION indicates a potential for property damage, personal injury, or death.