D-Link DWS-1008 User manual

D-Link DWS-1008 User Manual i
Table of Contents
Product Overview .............................................................................................................................1
Product Contents..........................................................................................................................1
System Requirements ..................................................................................................................1
Introduction...................................................................................................................................2
Hardware Overview (Front Panel) ................................................................................................3
Features .......................................................................................................................................4
Text and Syntax Conventions .......................................................................................................5
Installation.........................................................................................................................................6
Serial Console Cable....................................................................................................................6
10/100 Ethernet Cable Wiring ......................................................................................................6
Installation Hardware and Tools....................................................................................................7
Getting Started .............................................................................................................................8
Using the Command-Line Interface................................................................................................9
CLI Conventions ...........................................................................................................................9
Command Prompts................................................................................................................9
Syntax Notation ...................................................................................................................10
Text Entry Conventions and Allowed Characters.................................................................10
MAC Address Notation ....................................................................................................11
IP Address and Mask Notation........................................................................................11
Globs ...................................................................................................................................12
User Globs.......................................................................................................................12
MAC Address Globs ........................................................................................................13
VLAN Globs.....................................................................................................................13
Matching Order for Globs ................................................................................................13
Port Lists..............................................................................................................................14
Command-Line Editing...............................................................................................................15
Keyboard Shortcuts .............................................................................................................15
History Buffer.......................................................................................................................15
Tabs .....................................................................................................................................15
Single-Asterisk (*) Wildcard Character ................................................................................16
Double-Asterisk (**) Wildcard Characters............................................................................16
Using CLI Help ...........................................................................................................................16
Understanding Command Descriptions......................................................................................17
DWS-1008 Setup Methods .............................................................................................................18
Overview.....................................................................................................................................18
Quick Starts .........................................................................................................................18
CLI .......................................................................................................................................18
Web View.............................................................................................................................18
Web Quick Start .........................................................................................................................19
Web Quick Start Parameters ...............................................................................................19
Web Quick Start Requirements ...........................................................................................19
Accessing the Web Quick Start ...........................................................................................20
CLI quickstart Command............................................................................................................22
Quickstart Example..............................................................................................................23

D-Link DWS-1008 User Manual ii
Overview.....................................................................................................................................25
Configuring AAA for Administrative and Local Access .............................................................25
Before You Start..........................................................................................................................26
About Administrative Access ......................................................................................................26
Access Modes .....................................................................................................................26
Types of Administrative Access ...........................................................................................26
First-Time Configuration via the Console ...................................................................................27
Enabling an Administrator....................................................................................................27
Setting the Switch Enable Password ...................................................................................28
Setting the Enable Password for the First Time...............................................................28
Authenticating at the Console..............................................................................................29
Customizing AAA with “Globs” and Groups .........................................................................30
Setting User Passwords.......................................................................................................30
Adding and Clearing Local Users for Administrative Access...............................................31
Configuring Accounting for Administrative Users .......................................................................31
Displaying the AAA Configuration...............................................................................................32
Saving the Configuration......................................................................................................33
Administrative AAA Configuration Scenarios..............................................................................33
Local Authentication.............................................................................................................33
Local Authentication for Console Users and RADIUS Authentication for Telnet Users........34
Local Override and Backup Local Authentication ................................................................34
Authentication When RADIUS Servers Do Not Respond ....................................................35
Configuring and Managing Ports and VLANs..............................................................................36
Configuring and Managing Ports................................................................................................36
Setting the Port Type............................................................................................................36
Setting a Port for a Directly Connected Access Point......................................................37
Configuring for a Distributed AP......................................................................................38
Setting a Port for a Wired Authentication User ................................................................38
Clearing a Port.................................................................................................................39
Clearing a Distributed AP ................................................................................................40
Configuring a Port Name .....................................................................................................40
Setting a Port Name ........................................................................................................40
Removing a Port Name ...................................................................................................40
Configuring Port Operating Parameters...............................................................................41
Autonegotiation and Port Speed......................................................................................41
Disabling or Reenabling a Port........................................................................................41
Disabling or Reenabling Power over Ethernet .................................................................42
Resetting a Port...............................................................................................................42
Displaying Port Information..................................................................................................42
Displaying Port Configuration and Status........................................................................42
Displaying PoE State.......................................................................................................43
Displaying Port Statistics .................................................................................................43
Clearing Statistics Counters ............................................................................................44
Monitoring Port Statistics.................................................................................................44
Configuring Load-Sharing Port Groups ...............................................................................45
Load Sharing ...................................................................................................................45
Link Redundancy.............................................................................................................45
Configuring a Port Group.................................................................................................46

D-Link DWS-1008 User Manual iii
Removing a Port Group...................................................................................................47
Displaying Port Group Information...................................................................................47
Interoperating with Cisco Systems EtherChannel ...........................................................47
Configuring and Managing VLANs .............................................................................................48
Understanding VLANs in MSS.............................................................................................48
VLANs, IP Subnets, and IP Addressing ..........................................................................48
Users and VLANs ............................................................................................................49
VLAN Names...................................................................................................................49
Traffic Forwarding ............................................................................................................49
802.1Q Tagging ...............................................................................................................49
Configuring a VLAN .............................................................................................................50
Creating a VLAN..............................................................................................................50
Adding Ports to a VLAN...................................................................................................51
Removing an Entire VLAN or a VLAN Port......................................................................51
Restricting Layer 2 Forwarding Among Clients....................................................................52
Displaying VLAN Information ...............................................................................................53
Managing the Layer 2 Forwarding Database..............................................................................54
Types of Forwarding Database Entries................................................................................54
How Entries Enter the Forwarding Database.......................................................................54
Displaying Forwarding Database Information ......................................................................55
Displaying the Size of the Forwarding Database.............................................................55
Displaying Forwarding Database Entries.........................................................................55
Adding an Entry to the Forwarding Database......................................................................56
Removing Entries from the Forwarding Database...............................................................56
Configuring the Aging Timeout Period .................................................................................57
Displaying the Aging Timeout Period...............................................................................57
Changing the Aging Timeout Period................................................................................57
Port and VLAN Configuration Scenario ......................................................................................58
Configuring and Managing IP Interfaces and Services ..............................................................61
MTU Support ..............................................................................................................................61
Configuring and Managing IP Interfaces ....................................................................................61
Adding an IP Interface .........................................................................................................62
Statically Configuring an IP Interface ..............................................................................62
Enabling the DHCP Client ...............................................................................................62
How MSS Resolves Conflicts with Statically Configured IP Parameters.........................63
Configuring the DHCP Client...........................................................................................63
Displaying DHCP Client Information................................................................................64
Disabling or Reenabling an IP Interface ..............................................................................64
Removing an IP Interface ....................................................................................................64
Displaying IP Interface Information ......................................................................................65
Configuring the System IP Address............................................................................................65
Designating the System IP Address ....................................................................................65
Displaying the System IP Address.......................................................................................65
Clearing the System IP Address..........................................................................................65
Configuring and Managing IP Routes.........................................................................................66
Displaying IP Routes............................................................................................................67
Adding a Static Route..........................................................................................................68
Removing a Static Route.....................................................................................................69

D-Link DWS-1008 User Manual iv
Managing the Management Services.........................................................................................69
Managing SSH.....................................................................................................................69
Login Timeouts ................................................................................................................69
Enabling SSH ..................................................................................................................70
Adding an SSH User .......................................................................................................70
Changing the SSH Service Port Number ........................................................................71
Managing SSH Server Sessions .....................................................................................71
Managing SSH Server Sessions .....................................................................................72
Managing Telnet...................................................................................................................72
Telnet Login Timers .........................................................................................................72
Enabling Telnet ................................................................................................................72
Adding a Telnet User .......................................................................................................73
Displaying Telnet Status ..................................................................................................73
Changing the Telnet Service Port Number ......................................................................73
Resetting the Telnet Service Port Number to Its Default .................................................73
Managing Telnet Server Sessions ...................................................................................74
Managing HTTPS ................................................................................................................74
Enabling HTTPS..............................................................................................................74
Displaying HTTPS Information ........................................................................................75
Changing the Idle Timeout for CLI Management Sessions..................................................75
Configuring and Managing DNS.................................................................................................76
Enabling or Disabling the DNS Client ..................................................................................76
Configuring DNS Servers ....................................................................................................76
Adding a DNS Server ......................................................................................................77
Removing a DNS Server .................................................................................................77
Configuring a Default Domain Name...................................................................................77
Adding the Default Domain Name ...................................................................................77
Removing the Default Domain Name ..............................................................................77
Displaying DNS Server Information .....................................................................................78
Configuring and Managing Aliases.............................................................................................78
Adding an Alias....................................................................................................................78
Removing an Alias...............................................................................................................79
Displaying Aliases................................................................................................................79
Configuring and Managing Time Parameters .............................................................................79
Setting the Time Zone..........................................................................................................80
Displaying the Time Zone ................................................................................................80
Clearing the Time Zone...................................................................................................80
Configuring the Summertime Period....................................................................................81
Displaying the Summertime Period .................................................................................81
Clearing the Summertime Period ....................................................................................81
Statically Configuring the System Time and Date................................................................82
Displaying the Time and Date..............................................................................................82
Configuring and Managing NTP ..........................................................................................82
Adding an NTP Server.........................................................................................................83
Removing an NTP Server....................................................................................................83
Changing the NTP Update Interval......................................................................................83
Resetting the Update Interval to the Default........................................................................84
Enabling the NTP Client ......................................................................................................84
Displaying NTP Information .................................................................................................84

D-Link DWS-1008 User Manual v
Managing the ARP Table............................................................................................................85
Displaying ARP Table Entries ..............................................................................................85
Adding an ARP Entry...........................................................................................................86
Changing the Aging Timeout ...............................................................................................86
Pinging Another Device ..............................................................................................................87
Logging In to a Remote Device ..................................................................................................88
Tracing a Route ..........................................................................................................................89
Configuring SNMP..........................................................................................................................90
Overview.....................................................................................................................................90
Configuring SNMP......................................................................................................................90
Setting the System Location and Contact Strings ...............................................................91
Enabling SNMP Versions.....................................................................................................91
Configuring Community Strings (SNMPv1 and SNMPv2c Only).........................................91
Creating a USM User for SNMPv3 ......................................................................................92
Command Examples .......................................................................................................94
Setting SNMP Security ........................................................................................................94
Command Example.........................................................................................................95
Configuring a Notification Profile .........................................................................................95
Command Examples .......................................................................................................97
Configuring a Notification Target..........................................................................................98
Command Examples .....................................................................................................100
Enabling the SNMP Service ..............................................................................................100
Displaying SNMP Information...................................................................................................100
Displaying SNMP Version and Status Information.............................................................100
Displaying the Configured SNMP Community Strings.......................................................101
Displaying USM Settings ...................................................................................................101
Displaying Notification Profiles...........................................................................................101
Displaying Notification Targets...........................................................................................101
Displaying SNMP Statistics Counters................................................................................101
Configuring DWL-8220AP Access Points ..................................................................................102
Overview...................................................................................................................................102
Country of Operation .........................................................................................................103
Directly Connected APs and Distributed APs....................................................................103
Distributed AP Network Requirements..........................................................................104
Distributed APs and STP...............................................................................................105
Distributed APs and DHCP Option 43...........................................................................105
AP Parameters ..............................................................................................................106
Resiliency and Dual-Homing Options for APs ...............................................................107
Boot Process for Distributed APs.......................................................................................108
Establishing Connectivity on the Network .....................................................................108
How a Distributed AP Obtains an IP Address through DHCP.......................................108
Static IP Address Configuration for Distributed APs......................................................109
Contacting a Switch.......................................................................................................109
How a Distributed AP Contacts a Switch (DHCP-Obtained Address)...........................109
How a Distributed AP Contacts an Switch (Statically Configured Address)..................111
Loading and Activating an Operational Image...............................................................113
Obtaining Configuration Information from the Switch....................................................113
Session Load Balancing................................................................................................114

D-Link DWS-1008 User Manual vi
Service Profiles..................................................................................................................114
Public and Private SSIDs ..............................................................................................117
Encryption .....................................................................................................................117
Radio Profiles ....................................................................................................................118
RF Auto-Tuning..............................................................................................................119
Default Radio Profile......................................................................................................119
Radio-Specific Parameters............................................................................................119
Configuring DWL-8220AP Access Points.................................................................................120
Specifying the Country of Operation..................................................................................120
Configuring an Auto-AP Profile for Automatic AP Configuration........................................122
How an Unconfigured AP Finds a Switch To Configure It..............................................122
Configured APs Have Precedence Over Unconfigured APs .........................................123
Configuring an Auto-AP Profile......................................................................................123
Changing AP Parameter Values ........................................................................................124
Enabling the Auto-AP Profile .........................................................................................125
Specifying the Radio Profile Used by the Auto-AP Profile.............................................125
Displaying Status Information for APs Configured by the Auto-AP Profile ....................125
Converting an AP Configured by the Auto-AP Profile into a Permanent AP .................126
Configuring AP Port Parameters........................................................................................126
Setting the Port Type for a Directly Connected AP ........................................................127
Configuring an Indirectly Connected AP........................................................................127
Configuring Static IP Addresses on Distributed APs.....................................................128
Specifying IP Information...............................................................................................128
Specifying Switch Information .......................................................................................128
Specifying VLAN information.........................................................................................129
Clearing an AP from the Configuration..........................................................................129
Changing AP Names.....................................................................................................130
Changing Bias ...............................................................................................................130
Configuring a Load-Balancing Group ............................................................................130
Disabling or Reenabling Automatic Firmware Upgrades ...............................................131
Forcing an AP To Download its Operational Image from the DWS-1008.......................131
Enabling LED Blink Mode..............................................................................................132
Configuring AP-Switch Security.........................................................................................132
Encryption Key Fingerprint ............................................................................................132
Encryption Options........................................................................................................133
Verifying an AP’s Fingerprint on a Switch......................................................................133
Finding the Fingerprint ..................................................................................................133
Verifying a Fingerprint on the Switch.............................................................................134
Fingerprint Log Message...............................................................................................135
Configuring a Service Profile .............................................................................................135
Creating a Service Profile..............................................................................................135
Removing a Service Profile ...........................................................................................136
Changing a Service Profile Setting................................................................................136
Disabling or Reenabling Encryption for an SSID...........................................................136
Disabling or Reenabling Beaconing of an SSID ............................................................137
Changing the Fallthru Authentication Type ....................................................................137
Changing Transmit Rates ..............................................................................................137
Disabling Idle-Client Probing .........................................................................................139
Changing the User Idle Timeout....................................................................................139

D-Link DWS-1008 User Manual vii
Changing the Short Retry Threshold.............................................................................140
Changing the Long Retry Threshold..............................................................................140
Configuring a Radio Profile................................................................................................140
Creating a New Profile...................................................................................................141
Changing Radio Parameters .........................................................................................141
Changing the Beacon Interval .......................................................................................141
Changing the DTIM Interval...........................................................................................142
Changing the RTS Threshold ........................................................................................142
Changing the Fragmentation Threshold ........................................................................143
Changing the Maximum Receive Threshold..................................................................143
Changing the Maximum Transmit Threshold .................................................................143
Changing the Preamble Length.....................................................................................144
Resetting a Radio Profile Parameter to its Default Value ..............................................144
Removing a Radio Profile..............................................................................................145
Configuring Radio-Specific Parameters.............................................................................145
Configuring the Channel and Transmit Power ...............................................................145
Mapping the Radio Profile to Service Profiles ...................................................................147
Assigning a Radio Profile and Enabling Radios ................................................................147
Disabling or Reenabling Radios ...............................................................................................148
Enabling or Disabling Individual Radios.............................................................................148
Disabling or Reenabling All Radios Using a Profile ...........................................................148
Resetting a Radio to its Factory Default Settings ..............................................................149
Restarting an AP ...............................................................................................................149
Displaying AP Information ........................................................................................................149
Displaying AP Configuration Information ...........................................................................150
Displaying Connection Information for Distributed APs .....................................................151
Displaying a List of Distributed APs that Are Not Configured ............................................151
Displaying Active Connection Information for Distributed APs...........................................152
Displaying Service Profile Information ...............................................................................152
Displaying Radio Profile Information..................................................................................153
Displaying AP Status Information ......................................................................................153
Displaying Static IP Address Information for Distributed APs............................................154
Displaying AP Statistics Counters......................................................................................155
Configuring User Encryption ......................................................................................................156
Configuring WPA.......................................................................................................................157
WPA Cipher Suites ............................................................................................................157
TKIP Countermeasures .....................................................................................................158
WPA Authentication Methods.............................................................................................159
WPA Information Element..................................................................................................159
Client Support....................................................................................................................160
Configuring WPA................................................................................................................161
Creating a Service Profile for WPA................................................................................161
Enabling WPA................................................................................................................161
Specifying the WPA Cipher Suites.................................................................................161
Changing the TKIP Countermeasures Timer Value.......................................................162
Enabling PSK Authentication.........................................................................................163
Disabling 802.1X Authentication for WPA......................................................................164
Displaying WPA Settings ...............................................................................................164

D-Link DWS-1008 User Manual viii
Assigning the Service Profile to Radios and Enabling the Radios ................................165
Configuring RSN (802.11i) .......................................................................................................166
Creating a Service Profile for RSN................................................................................166
Enabling RSN................................................................................................................166
Specifying the RSN Cipher Suites.................................................................................167
Changing the TKIP Countermeasures Timer Value.......................................................167
Enabling PSK Authentication.........................................................................................167
Displaying RSN Settings ...............................................................................................167
Assigning the Service Profile to Radios and Enabling the Radios ................................168
Configuring WEP ......................................................................................................................168
Setting Static WEP Key Values..........................................................................................169
Assigning Static WEP Keys ...............................................................................................169
Encryption Configuration Scenarios .........................................................................................170
Enabling WPA with TKIP ....................................................................................................170
Enabling Dynamic WEP in a WPA Network .......................................................................171
Configuring Encryption for MAC Clients ............................................................................173
Configuring RF Auto-Tuning .......................................................................................................176
RF Auto-Tuning Overview.........................................................................................................176
Initial Channel and Power Assignment ..............................................................................176
How Channels Are Selected..........................................................................................177
Channel and Power Tuning ................................................................................................177
Power Tuning .................................................................................................................177
Channel Tuning..............................................................................................................178
Tuning the Transmit Data Rate ......................................................................................179
RF Auto-Tuning Parameters...............................................................................................179
Changing RF Auto-Tuning Settings ..........................................................................................180
Changing Channel Tuning Settings....................................................................................180
Disabling or Reenabling Channel Tuning.......................................................................180
Changing the Channel Tuning Interval...........................................................................180
Changing the Channel Holddown Interval.....................................................................181
Changing Power Tuning Settings .......................................................................................181
Enabling Power Tuning ..................................................................................................181
Changing the Power Tuning Interval ..............................................................................181
Changing the Maximum Default Power Allowed On a Radio.........................................182
Locking Down Tuned Settings...................................................................................................182
Displaying RF Auto-Tuning Information ....................................................................................183
Displaying RF Auto-Tuning Settings ..................................................................................183
Displaying RF Neighbors ...................................................................................................184
Displaying RF Attributes ....................................................................................................185
Configuring APs To Be AeroScout Listeners.............................................................................186
Configuring AP Radios to Listen for AeroScout RFID Tags......................................................186
Locating an RFID Tag...............................................................................................................188
Configuring Quality of Service....................................................................................................189
About QoS................................................................................................................................189
Summary of QoS Features................................................................................................189
QoS Mode..........................................................................................................................190
WMM QoS Mode...........................................................................................................191
WMM QoS on the DWS-1008 Switch............................................................................191

D-Link DWS-1008 User Manual ix
WMM QoS on an AP .....................................................................................................192
SVP QoS Mode .............................................................................................................192
U-APSD Support ...............................................................................................................193
Call Admission Control ......................................................................................................193
Broadcast Control..............................................................................................................194
Static CoS..........................................................................................................................194
Overriding CoS ..................................................................................................................194
Changing QoS Settings............................................................................................................195
Changing the QoS Mode ...................................................................................................195
Enabling U-APSD Support.................................................................................................195
Configuring Call Admission Control...................................................................................196
Enabling CAC ................................................................................................................196
Changing the Maximum Number of Active Sessions.....................................................196
Configuring Static CoS ......................................................................................................196
Changing CoS Mappings...................................................................................................197
Enabling Broadcast Control...............................................................................................197
Displaying QoS Information......................................................................................................198
Displaying a Radio Profile’s QoS Settings .........................................................................198
Displaying a Service Profile’s QoS Settings ......................................................................199
Displaying CoS Mappings..................................................................................................200
Displaying the Default CoS Mappings ...........................................................................200
Displaying a DSCP-to-CoS Mapping.............................................................................200
Displaying a CoS-to-DSCP Mapping.............................................................................200
Displaying the DSCP Table................................................................................................201
Displaying AP Forwarding Queue Statistics ......................................................................201
Configuring and Managing Spanning Tree Protocol .................................................................202
Enabling the Spanning Tree Protocol .......................................................................................202
Changing Standard Spanning Tree Parameters .......................................................................203
Bridge Priority ....................................................................................................................203
Port Cost............................................................................................................................203
Port Priority........................................................................................................................204
Changing the Bridge Priority..............................................................................................204
Changing STP Port Parameters ........................................................................................204
Changing the STP Port Cost .........................................................................................204
Resetting the STP Port Cost to the Default Value .........................................................205
Changing the STP Port Priority .....................................................................................205
Resetting the STP Port Priority to the Default Value .....................................................206
Changing Spanning Tree Timers........................................................................................206
Changing the STP Hello Interval ...................................................................................206
Changing the STP Forwarding Delay ............................................................................207
Changing the STP Maximum Age .................................................................................207
Configuring and Managing STP Fast Convergence Features ..................................................207
Port Fast Convergence ......................................................................................................208
Backbone Fast Convergence.............................................................................................208
Uplink Fast Convergence...................................................................................................208
Configuring Port Fast Convergence...................................................................................208
Displaying Port Fast Convergence Information..................................................................209
Configuring Backbone Fast Convergence .........................................................................209

D-Link DWS-1008 User Manual x
Displaying the Backbone Fast Convergence State............................................................209
Configuring Uplink Fast Convergence ...............................................................................210
Displaying Uplink Fast Convergence Information ..............................................................210
Displaying Spanning Tree Information ......................................................................................210
Displaying STP Bridge and Port Information .....................................................................211
Displaying the STP Port Cost on a VLAN Basis ................................................................212
Displaying Blocked STP Ports ...........................................................................................212
Displaying Spanning Tree Statistics...................................................................................213
Clearing STP Statistics......................................................................................................213
Spanning Tree Configuration Scenario .....................................................................................213
Configuring and Managing IGMP Snooping ..............................................................................216
Disabling or Reenabling IGMP Snooping .................................................................................216
Disabling or Reenabling Proxy Reporting.................................................................................216
Enabling the Pseudo-Querier ...................................................................................................217
Changing IGMP Timers ............................................................................................................217
Changing the Query Interval..............................................................................................218
Changing the Other-Querier-Present Interval....................................................................218
Changing the Query Response Interval ............................................................................218
Changing the Last Member Query Interval........................................................................218
Changing Robustness .......................................................................................................218
Enabling Router Solicitation .....................................................................................................219
Changing the Router Solicitation Interval ..........................................................................219
Configuring Static Multicast Ports.............................................................................................219
Adding or Removing a Static Multicast Router Port...........................................................220
Adding or Removing a Static Multicast Receiver Port .......................................................220
Displaying Multicast Information...............................................................................................220
Displaying Multicast Configuration Information and Statistics ...........................................220
Displaying Multicast Statistics Only ...............................................................................222
Clearing Multicast Statistics...........................................................................................222
Displaying Multicast Queriers ............................................................................................222
Displaying Multicast Routers..............................................................................................222
Displaying Multicast Receivers ..........................................................................................223
Configuring and Managing Security ACLs.................................................................................224
About Security Access Control Lists.........................................................................................224
Overview of Security ACL Commands...............................................................................224
Security ACL Filters...........................................................................................................225
Order in Which ACLs are Applied to Traffic........................................................................225
Traffic Direction..............................................................................................................226
Selection of User ACLs .................................................................................................226
Creating and Committing a Security ACL.................................................................................226
Setting a Source IP ACL....................................................................................................227
Wildcard Masks .............................................................................................................228
Class of Service ............................................................................................................228
Setting an ICMP ACL.........................................................................................................229
Setting TCP and UDP ACLs ..............................................................................................230
Setting a TCP ACL ........................................................................................................230
Setting a UDP ACL........................................................................................................230
Determining the ACE Order...............................................................................................231

D-Link DWS-1008 User Manual xi
Committing a Security ACL................................................................................................231
Viewing Security ACL Information .....................................................................................231
Viewing the Edit Buffer ..................................................................................................232
Viewing Committed Security ACLs................................................................................232
Viewing Security ACL Details ........................................................................................233
Displaying Security ACL Hits.........................................................................................233
Clearing Security ACLs......................................................................................................234
Mapping Security ACLs............................................................................................................234
Mapping User-Based Security ACLs .................................................................................235
Mapping Security ACLs to Ports, VLANs, Virtual Ports, or Distributed APs.......................236
Displaying ACL Maps to Ports, VLANs, and Virtual Ports..............................................237
Clearing a Security ACL Map ........................................................................................237
Modifying a Security ACL .........................................................................................................238
Adding Another ACE to a Security ACL.............................................................................239
Placing One ACE before Another ......................................................................................240
Modifying an Existing Security ACL...................................................................................241
Clearing Security ACLs from the Edit Buffer......................................................................242
Using ACLs to Change CoS .....................................................................................................243
Filtering Based on DSCP Values .......................................................................................244
Using the dscp Option ...................................................................................................244
Using the precedence and tos Options .........................................................................245
Enabling Prioritization for Legacy Voice over IP .......................................................................246
General Guidelines............................................................................................................246
Enabling VoIP Support for TeleSym VoIP...........................................................................247
Enabling SVP Optimization for SpectraLink Phones .........................................................248
Known Limitations .........................................................................................................248
Configuring a Service Profile for RSN (WPA2)..............................................................249
Configuring a Service Profile for WPA ...........................................................................249
Configuring a Radio Profile............................................................................................250
Configuring a VLAN and AAA for Voice Clients .............................................................250
Configuring an ACL to Prioritize Voice Traffic ................................................................251
Reason the ACL Needs To Be Mapped to Both Traffic Directions .................................252
Setting 802.11b/g Radios to 802.11b (for Siemens SpectraLink VoIP Phones only).....252
Disabling RF Auto-Tuning Before Upgrading a SpectraLink Phone...............................253
Restricting Client-To-Client Forwarding Among IP-Only Clients...............................................253
Security ACL Configuration Scenario.......................................................................................254
Managing Keys and Certificates .................................................................................................255
Why Use Keys and Certificates? ..............................................................................................255
Wireless Security through TLS ..........................................................................................255
PEAP-MS-CHAP-V2 Security............................................................................................256
About Keys and Certificates .....................................................................................................256
Public Key Infrastructures ..................................................................................................257
Public and Private Keys .....................................................................................................257
Digital Certificates..............................................................................................................258
PKCS #7, PKCS #10, and PKCS #12 Object Files ...........................................................258
Certificates Automatically Generated by MSS..........................................................................260
Creating Keys and Certificates ................................................................................................260
Choosing the Appropriate Certificate Installation Method for Your Network ......................261

D-Link DWS-1008 User Manual xii
Creating Public-Private Key Pairs ......................................................................................262
Generating Self-Signed Certificates ..................................................................................262
Installing a Key Pair and Certificate from a PKCS #12 Object File....................................263
Creating a CSR and Installing a Certificate from a PKCS #7 Object File..........................264
Installing a CA’s Own Certificate .......................................................................................265
Displaying Certificate and Key Information...............................................................................265
Key and Certificate Configuration Scenarios............................................................................266
Creating Self-Signed Certificates ......................................................................................266
Installing CA-Signed Certificates from PKCS #12 Object Files .........................................268
Installing CA-Signed Certificates Using a PKCS #10 Object File (CSR) and a PKCS #7 Object
File.....................................................................................................................................269
Configuring AAA for Network Users...........................................................................................272
About AAA for Network Users ..................................................................................................272
Authentication ....................................................................................................................272
Authentication Types......................................................................................................273
Authentication Algorithm................................................................................................274
SSID Name “Any” ..........................................................................................................274
Last-Resort Processing.................................................................................................274
User Credential Requirements ......................................................................................275
Authorization......................................................................................................................275
Accounting.........................................................................................................................277
Summary of AAA Features................................................................................................277
AAA Tools for Network Users....................................................................................................278
“Globs” and Groups for Network User Classification .........................................................278
AAA Methods for IEEE 802.1X and Web Network Access ................................................278
AAA Rollover Process ...................................................................................................279
Local Override Exception ..............................................................................................279
Remote Authentication with Local Backup ....................................................................279
IEEE 802.1X Extensible Authentication Protocol Types.....................................................280
Ways a Switch Can Use EAP ............................................................................................281
Effects of Authentication Type on Encryption Method........................................................281
Configuring 802.1X Authentication...........................................................................................282
Configuring EAP Offload....................................................................................................282
Using Pass-Through ..........................................................................................................283
Authenticating via a Local Database..................................................................................283
Binding User Authentication to Machine Authentication ....................................................283
Authentication Rule Requirements ................................................................................284
Bonded Auth Period.......................................................................................................285
Bonded Auth Configuration Example ............................................................................286
Displaying Bonded Auth Configuration Information .......................................................286
Configuring Authentication and Authorization by MAC Address...............................................287
Adding and Clearing MAC Users and User Groups Locally ..............................................288
Adding MAC Users and Groups ....................................................................................288
Clearing MAC Users and Groups..................................................................................288
Configuring MAC Authentication and Authorization...........................................................289
Changing the MAC Authorization Password for RADIUS ..................................................290
Configuring Web Portal WebAAA .............................................................................................291
How Web Portal WebAAA Works.......................................................................................291

D-Link DWS-1008 User Manual xiii
Display of the Login Page..............................................................................................292
WebAAA Requirements and Recommendations...............................................................292
DWS-1008 Switch Requirements ..................................................................................293
Portal ACL and User ACLs............................................................................................295
Network Requirements..................................................................................................295
Switch Recommendations.............................................................................................295
Client NIC Recommendations .......................................................................................295
Client Web Browser Recommendations ........................................................................296
Configuring Web Portal WebAAA ......................................................................................296
Web Portal WebAAA Configuration Example ................................................................296
Displaying Session Information for Web Portal WebAAA Users....................................299
Using a Custom Login Page ..............................................................................................300
Copying and Modifying the Web Login Page.................................................................301
Custom Login Page Scenario........................................................................................302
Using Dynamic Fields in WebAAA Redirect URLs ............................................................304
Using an ACL Other Than portalacl ...................................................................... 305
Configuring the Web Portal WebAAA Session Timeout Period..........................................306
Configuring Last-Resort Access...............................................................................................307
Configuring Last-Resort Access for Wired Authentication Ports........................................308
Configuring AAA for Users of Third-Party APs .........................................................................309
Authentication Process for Users of a Third-Party AP .......................................................309
Requirements ....................................................................................................................310
Third-Party AP Requirements........................................................................................310
Switch Requirements.....................................................................................................310
RADIUS Server Requirements......................................................................................311
Configuring Authentication for 802.1X Users of a Third-Party AP with Tagged SSIDs ......311
Configuring Authentication for Non-802.1X Users of a Third-Party AP with Tagged SSIDs313
Configuring Access for Any Users of a Non-Tagged SSID ................................................313
Assigning Authorization Attributes............................................................................................313
Assigning Attributes to Users and Groups.........................................................................317
Assigning SSID Default Attributes to a Service Profile ......................................................318
Assigning a Security ACL to a User or a Group ................................................................318
Assigning a Security ACL Locally..................................................................................319
Assigning a Security ACL on a RADIUS Server............................................................320
Clearing a Security ACL from a User or Group .............................................................320
Assigning Encryption Types to Wireless Users..................................................................320
Assigning and Clearing Encryption Types Locally .........................................................321
Assigning and Clearing Encryption Types on a RADIUS Server...................................322
Keeping Users on the Same VLAN Even After Roaming...................................................322
Overriding or Adding Attributes Locally with a Location Policy.................................................323
About the Location Policy ..................................................................................................323
How the Location Policy Differs from a Security ACL ........................................................324
Setting the Location Policy.................................................................................................324
Applying Security ACLs in a Location Policy Rule.........................................................325
Displaying and Positioning Location Policy Rules .........................................................326
Clearing Location Policy Rules and Disabling the Location Policy ....................................326
Configuring Accounting for Wireless Network Users................................................................327
Configuring Periodic Accounting Update Records.............................................................328
Enabling System Accounting Messages............................................................................328

D-Link DWS-1008 User Manual xiv
Viewing Local Accounting Records ...................................................................................329
Viewing Roaming Accounting Records..............................................................................329
Displaying the AAA Configuration.............................................................................................330
Avoiding AAA Problems in Configuration Order .......................................................................331
Using the Wildcard “Any” as the SSID Name in Authentication Rules...............................331
Using Authentication and Accounting Rules Together .......................................................332
Configuration Producing an Incorrect Processing Order...............................................332
Configuration for a Correct Processing Order ...............................................................333
Network User Configuration Scenarios ....................................................................................334
General Use of Network User Commands ........................................................................334
Enabling RADIUS Pass-Through Authentication ...............................................................336
Enabling PEAP-MS-CHAP-V2 Authentication ...................................................................336
Enabling PEAP-MS-CHAP-V2 Offload ..............................................................................337
Combining EAP Offload with Pass-Through Authentication ..............................................337
Overriding AAA-Assigned VLANs ......................................................................................338
Configuring Communication with RADIUS ................................................................................339
RADIUS Overview ....................................................................................................................339
Before You Begin ......................................................................................................................339
Configuring RADIUS Servers ...................................................................................................339
Configuring Global RADIUS Defaults ................................................................................340
Setting the System IP Address as the Source Address.....................................................341
Configuring Individual RADIUS Servers ............................................................................341
Deleting RADIUS Servers..................................................................................................342
Configuring RADIUS Server Groups ........................................................................................342
Creating Server Groups.....................................................................................................342
Ordering Server Groups................................................................................................343
Configuring Load Balancing ..........................................................................................343
Adding Members to a Server Group..............................................................................344
Deleting a Server Group....................................................................................................345
RADIUS and Server Group Configuration Scenario.................................................................345
Managing 802.1X ..........................................................................................................................347
Managing 802.1X on Wired Authentication Ports .....................................................................347
Enabling and Disabling 802.1X Globally............................................................................347
Setting 802.1X Port Control...............................................................................................347
Managing 802.1X Encryption Keys...........................................................................................348
Enabling 802.1X Key Transmission....................................................................................349
Configuring 802.1X Key Transmission Time Intervals........................................................349
Managing WEP Keys .........................................................................................................349
Configuring 802.1X WEP Rekeying...............................................................................350
Configuring the Interval for WEP Rekeying ...................................................................350
Setting EAP Retransmission Attempts .....................................................................................351
Managing 802.1X Client Reauthentication ...............................................................................351
Enabling and Disabling 802.1X Reauthentication..............................................................352
Setting the Maximum Number of 802.1X Reauthentication Attempts................................352
Setting the 802.1X Reauthentication Period......................................................................353
Setting the Bonded Authentication Period .........................................................................353
Managing Other Timers ............................................................................................................354
Setting the 802.1X Quiet Period ........................................................................................354

D-Link DWS-1008 User Manual xv
Setting the 802.1X Timeout for an Authorization Server....................................................354
Setting the 802.1X Timeout for a Client.............................................................................355
Displaying 802.1X Information..................................................................................................355
Viewing 802.1X Clients......................................................................................................355
Viewing the 802.1X Configuration......................................................................................356
Viewing 802.1X Statistics ..................................................................................................356
Configuring SODA Endpoint Security ........................................................................................357
About SODA Endpoint Security................................................................................................357
SODA Endpoint Security Support......................................................................................358
How SODA Functionality Works ........................................................................................358
Configuring SODA Functionality...............................................................................................360
Configuring Web Portal WebAAA for the Service Profile ...................................................361
Creating the SODA Agent with SODA Manager ................................................................361
Copying the SODA Agent to the Switch.............................................................................362
Installing the SODA Agent Files.........................................................................................362
Enabling SODA Functionality for the Service Profile .........................................................363
Disabling Enforcement of SODA Agent Checks ................................................................363
Specifying a SODA Agent Success Page..........................................................................364
Specifying a SODA Agent Failure Page.............................................................................364
Specifying a Remediation ACL ..........................................................................................365
Specifying a SODA Agent Logout Page ............................................................................366
Specifying an Alternate SODA Agent Directory for a Service Profile ................................366
Uninstalling the SODA Agent Files from the Switch ..........................................................367
Displaying SODA Configuration Information......................................................................367
Managing Sessions ......................................................................................................................369
About the Session Manager .....................................................................................................369
Displaying and Clearing Administrative Sessions.....................................................................369
Displaying and Clearing All Administrative Sessions.........................................................369
Displaying and Clearing an Administrative Console Session ............................................370
Displaying and Clearing Administrative Telnet Sessions ...................................................370
Displaying and Clearing Client Telnet Sessions.................................................................370
Displaying and Clearing Network Sessions..............................................................................371
Displaying Verbose Network Session Information .............................................................372
Displaying and Clearing Network Sessions by Username.................................................372
Displaying and Clearing Network Sessions by MAC Address ...........................................374
Displaying and Clearing Network Sessions by VLAN Name..............................................374
Displaying and Clearing Network Sessions by Session ID................................................375
Displaying and Changing Network Session Timers..................................................................376
Disabling Keepalive Probes...............................................................................................376
Changing or Disabling the User Idle Timeout ....................................................................376
Rogue Detection and Countermeasures....................................................................................377
About Rogues and RF Detection..............................................................................................377
Rogue Access Points and Clients......................................................................................377
Rogue Classification......................................................................................................377
Rogue Detection Lists ...................................................................................................378
RF Detection Scans...........................................................................................................379
Dynamic Frequency Selection (DFS) ............................................................................379
Countermeasures ..............................................................................................................380

D-Link DWS-1008 User Manual xvi
Summary of Rogue Detection Features ...................................................................................380
Configuring Rogue Detection Lists...........................................................................................381
Configuring a Permitted Vendor List ..................................................................................381
Configuring a Permitted SSID List.....................................................................................382
Configuring a Client Black List...........................................................................................383
Configuring an Attack List..................................................................................................384
Configuring an Ignore List..................................................................................................385
Enabling Countermeasures......................................................................................................386
Disabling or Reenabling Active Scan........................................................................................387
Enabling AP Signatures............................................................................................................387
Disabling or Reenabling Logging of Rogues ............................................................................387
Enabling Rogue and Countermeasures Notifications...............................................................388
IDS and DoS Alerts ..................................................................................................................388
Flood Attacks .....................................................................................................................388
DoS Attacks .......................................................................................................................388
Netstumbler and Wellenreiter Applications ........................................................................389
Wireless Bridge..................................................................................................................389
Ad-Hoc Network.................................................................................................................390
Weak WEP Key Used by Client .........................................................................................390
Disallowed Devices or SSIDs ............................................................................................390
Displaying Statistics Counters ...........................................................................................390
IDS Log Message Examples ............................................................................................390
Displaying RF Detection Information ........................................................................................392
Displaying Rogue Clients...................................................................................................393
Displaying Rogue Detection Counters...............................................................................394
Displaying RF Detect Data.................................................................................................395
Displaying the APs Detected by an AP Radio ..................................................................395
Displaying Countermeasures Information..........................................................................396
Managing System Files................................................................................................................397
About System Files ..................................................................................................................397
Displaying Software Version Information ...........................................................................397
Displaying Boot Information...............................................................................................398
Working with Files ....................................................................................................................399
Displaying a List of Files ....................................................................................................399
Copying a File....................................................................................................................402
Using an Image File’s MD5 Checksum To Verify Its Integrity.............................................404
Deleting a File....................................................................................................................405
Creating a Subdirectory.....................................................................................................405
Removing a Subdirectory ..................................................................................................406
Managing Configuration Files...................................................................................................406
Displaying the Running Configuration................................................................................406
Saving Configuration Changes ..........................................................................................408
Specifying the Configuration File to Use After the Next Reboot ........................................408
Loading a Configuration File..............................................................................................409
Specifying a Backup Configuration File .............................................................................409
Resetting to the Factory Default Configuration ..................................................................410
Backing Up and Restoring the System.....................................................................................411
Managing Configuration Changes .....................................................................................412

D-Link DWS-1008 User Manual xvii
Backup and Restore Examples .........................................................................................412
Upgrading the System Image...................................................................................................413
Preparing the Switch for the Upgrade ...............................................................................413
Upgrading an Individual Switch Using the CLI .........................................................................413
Troubleshooting............................................................................................................................415
Fixing Common Setup Problems..............................................................................................415
Recovering the System When the Enable Password is Lost ....................................................416
Configuring and Managing the System Log .............................................................................417
Log Message Components................................................................................................417
Logging Destinations and Levels.......................................................................................417
Using Log Commands .......................................................................................................419
Logging to the Log Buffer ..............................................................................................419
Logging to the Console..................................................................................................421
Logging Messages to a Syslog Server..........................................................................421
Setting Telnet Session Defaults.....................................................................................422
Changing the Current Telnet Session Defaults..............................................................422
Logging to the Trace Buffer............................................................................................423
Enabling Mark Messages ..............................................................................................423
Saving Trace Messages in a File...................................................................................423
Displaying the Log Configuration...................................................................................424
Running Traces.........................................................................................................................424
Using the Trace Command ................................................................................................424
Tracing Authentication Activity.......................................................................................425
Tracing Session Manager Activity..................................................................................425
Tracing Authorization Activity.........................................................................................425
Tracing 802.1X Sessions...............................................................................................425
Displaying a Trace..............................................................................................................426
Stopping a Trace ................................................................................................................426
About Trace Results...........................................................................................................426
Displaying Trace Results....................................................................................................427
Copying Trace Results to a Server.....................................................................................427
Clearing the Trace Log.......................................................................................................428
List of Trace Areas .............................................................................................................428
Using Show Commands...........................................................................................................428
Viewing VLAN Interfaces ...................................................................................................428
Viewing AAA Session Statistics.........................................................................................429
Viewing FDB Information ...................................................................................................430
Viewing ARP Information...................................................................................................430
Port Mirroring............................................................................................................................430
Configuration Requirements..............................................................................................431
Configuring Port Mirroring..................................................................................................431
Displaying the Port Mirroring Configuration .......................................................................431
Clearing the Port Mirroring Configuration ..........................................................................431
Remotely Monitoring Traffic ......................................................................................................431
How Remote Traffic Monitoring Works...............................................................................432
Using Snoop Filters on Radios That Use Active Scan...................................................432
All Snooped Traffic Is Sent in the Clear .........................................................................432
Best Practices for Remote Traffic Monitoring.....................................................................433

D-Link DWS-1008 User Manual xviii
Configuring a Snoop Filter.................................................................................................433
Displaying Configured Snoop Filters .............................................................................435
Editing a Snoop Filter ....................................................................................................435
Deleting a Snoop Filter..................................................................................................435
Mapping a Snoop Filter to a Radio ....................................................................................435
Displaying the Snoop Filters Mapped to a Radio ..........................................................436
Displaying the Snoop Filter Mappings for All Radios.....................................................436
Removing Snoop Filter Mappings .................................................................................436
Enabling or Disabling a Snoop Filter..................................................................................437
Displaying Remote Traffic Monitoring Statistics .................................................................437
Preparing an Observer and Capturing Traffic ....................................................................438
Capturing System Information and Sending it to Technical Support ........................................439
The show tech-support Command.....................................................................................440
Core Files ..........................................................................................................................440
Debug Messages...............................................................................................................441
Enabling and Logging Into Web View .........................................................................................442
System Requirements ..............................................................................................................442
Browser Requirements ......................................................................................................442
Switch Requirements.........................................................................................................442
Logging Into Web View .............................................................................................................443
Supported RADIUS Attributes.....................................................................................................444
Supported Standard and Extended Attributes..........................................................................444
Traffic Ports Used by MSS ...........................................................................................................448
DHCP Server .................................................................................................................................449
How the MSS DHCP Server Works..........................................................................................450
Configuring the DHCP Server ..................................................................................................451
Displaying DHCP Server Information .......................................................................................452
Glossary ........................................................................................................................................453
Technical Specifications..............................................................................................................475
Warranty ........................................................................................................................................478
Registration...................................................................................................................................483

D-Link DWS-1008 User Manual 1
Product Contents
DWS-1008 8-Port Wireless Switch
Power Supply
Serial Cable for Connection to Console
Rack-Mount Brackets (2)
Rubber Feet (4)
Screws (6)
Install Guide
Manual and Reference Guide on CD
System Requirements
An existing 10/100 Ethernet network
DWL-8220AP Access Point(s)
Warning: Installation must be performed by qualified service personnel only. Please
follow all warning notices and instructions marked on the product or included in the
documentation. The manufacturer is not responsible for any radio or TV interference
caused by unauthorized modifications to this equipment. Such modifications could void
the user’s authority to operate the equipment.
The DWS-1008 switch has been designed and tested to be installed in an operating
ambient temperature of 0° C to +40° C (32° F to 104° F).To reduce the risk of equipment
damage, install equipment with consideration to these ambient conditions.
Product Overview