D-Link xStack DGS-3427 User manual

xStack®DGS-3400 Series Layer 2 Managed Gigabit Ethernet Switch
i
Web UI Reference Guide
Product Model: xStack®DGS-3400 Series
Layer 2 Managed Gigabit Ethernet Switch
Release 2.7

xStack®DGS-3400 Series Layer 2 Managed Gigabit Ethernet Switch
ii
_____________________________________________
Information in this document is subject to change without notice.
© 2010 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft
Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Corporation
disclaims any proprietary interest in trademarks and trade names other than its own.
April 2010 P/N: 651GS34XX015G

Table of Contents
Intended Readers........................................................................................................................................................................... ix
Typographical Conventions...........................................................................................................................................................................ix
Notes, Notices, and Cautions ........................................................................................................................................................ ix
Web-based Switch Configuration...................................................................................................................1
Introduction.................................................................................................................................................................................... 1
Logging in to the Web Manager .................................................................................................................................................... 1
Web-based User Interface.............................................................................................................................................................. 2
Areas of the User Interface ........................................................................................................................................................................2
Web Pages...................................................................................................................................................................................... 3
Administration .................................................................................................................................................4
Device Information ........................................................................................................................................................................ 5
IPv6.................................................................................................................................................................................................................7
Overview.........................................................................................................................................................................................................7
Packet Format .................................................................................................................................................................................................9
IPv6 Header...............................................................................................................................................................................................9
Extension Headers ...................................................................................................................................................................................10
Packet Fragmentation ..............................................................................................................................................................................10
Address Format.............................................................................................................................................................................................10
Types .......................................................................................................................................................................................................11
ICMPv6.........................................................................................................................................................................................................12
Neighbor Discovery......................................................................................................................................................................................12
Neighbor Unreachability Detection .........................................................................................................................................................12
Duplicate Address Detection (DAD) .......................................................................................................................................................13
Assigning IP Addresses...........................................................................................................................................................................13
IP Interface Setup ....................................................................................................................................................................................13
IP Address.................................................................................................................................................................................... 14
Interface Settings.......................................................................................................................................................................... 16
IPv4 Interface Settings..................................................................................................................................................................................16
IPv6 Interface Settings..................................................................................................................................................................................18
Stacking........................................................................................................................................................................................ 21
Stacking Mode Settings ................................................................................................................................................................................23
Force Master Role Settings...........................................................................................................................................................................24
Box Information............................................................................................................................................................................................24
Port Configuration........................................................................................................................................................................ 25
Port Configuration ........................................................................................................................................................................................25
Port Error Disabled .......................................................................................................................................................................................26
Port Description............................................................................................................................................................................................27
Port Auto Negotiation Information ...............................................................................................................................................................28
Port Details ...................................................................................................................................................................................................29
Port Media Type ...........................................................................................................................................................................................30
Cable Diagnostics .........................................................................................................................................................................................31
User Accounts.............................................................................................................................................................................. 32
Password Encryption.................................................................................................................................................................... 33
Mirror........................................................................................................................................................................................... 34
Port Mirror Global Settings...........................................................................................................................................................................34
Port Mirror Settings ......................................................................................................................................................................................34
System Log .................................................................................................................................................................................. 36
System Log Host...........................................................................................................................................................................................36
System Log Save Mode Settings...................................................................................................................................................................38
System Log Source Interface Settings...........................................................................................................................................................39
System Severity Settings.............................................................................................................................................................. 39
Command Logging Settings......................................................................................................................................................... 40
SNTP Settings.............................................................................................................................................................................. 40
Time Settings................................................................................................................................................................................................40
Time Zone and DST......................................................................................................................................................................................41
MAC Notification Settings .......................................................................................................................................................... 44
TFTP Services.............................................................................................................................................................................. 44
Global Settings ........................................................................................................................................................................................44
Port Settings.............................................................................................................................................................................................44
Multiple Image Services .............................................................................................................................................................. 46
Firmware Information...................................................................................................................................................................................46
Config Firmware Image................................................................................................................................................................................47
RCP.............................................................................................................................................................................................. 48
RCP Server Settings......................................................................................................................................................................................48
RCP Services ................................................................................................................................................................................................49

Ping Test ...................................................................................................................................................................................... 50
IPv4 Ping Test...............................................................................................................................................................................................50
IPv6 Ping Test...............................................................................................................................................................................................51
IPv6 Neighbor.............................................................................................................................................................................. 52
IPv6 Neighbor Settings.................................................................................................................................................................................52
Route Redistribution Settings....................................................................................................................................................... 53
Static/Default Route Settings ....................................................................................................................................................... 54
IPv4 Static/Default Route Settings................................................................................................................................................................54
IPv6 Static/Default Route Settings................................................................................................................................................................56
Route Preference Settings............................................................................................................................................................ 57
Gratuitous ARP Settings .............................................................................................................................................................. 58
Static ARP Settings...................................................................................................................................................................... 59
DHCP Auto Configuration Settings............................................................................................................................................. 60
DHCP/BOOTP Relay................................................................................................................................................................... 60
DHCP / BOOTP Relay Global Settings........................................................................................................................................................60
DHCP/BOOTP Relay Interface Settings.......................................................................................................................................................64
DHCP Relay Option 60 Default Settings......................................................................................................................................................64
DHCP Relay Option 60 Settings...................................................................................................................................................................65
DHCP Relay Option 61 Default Settings......................................................................................................................................................66
DHCP Relay Option 61 Settings...................................................................................................................................................................66
DHCP/BOOTP Local Relay Settings........................................................................................................................................... 67
DHCPv6 Relay............................................................................................................................................................................. 68
DHCPv6 Relay Global Settings....................................................................................................................................................................68
DHCPv6 Relay Interface Settings.................................................................................................................................................................68
DHCP Server................................................................................................................................................................................ 70
DHCP Server Global Settings.......................................................................................................................................................................70
DHCP Server Exclude Address Settings.......................................................................................................................................................71
DHCP Server Pool Settings ..........................................................................................................................................................................71
DHCP Server Dynamic Binding...................................................................................................................................................................74
DHCP Server Manual Binding......................................................................................................................................................................75
DHCPv6 Server............................................................................................................................................................................ 76
DHCPv6 Server Global Settings...................................................................................................................................................................76
DHCPv6 Server Pool Settings.......................................................................................................................................................................77
DHCPv6 Server Manual Binding Settings....................................................................................................................................................78
DHCPv6 Server Dynamic Binding Settings..................................................................................................................................................79
DHCPv6 Server Interface Settings................................................................................................................................................................80
DHCPv6 Server Excluded Address Settings.................................................................................................................................................81
Filter DHCP Server...................................................................................................................................................................... 82
Filter DHCP Server Global Settings .............................................................................................................................................................82
Filter DHCP Server Port Settings..................................................................................................................................................................83
Layer 2 Protocol Tunneling Settings............................................................................................................................................ 84
RSPAN......................................................................................................................................................................................... 85
RSPAN State Settings...................................................................................................................................................................................85
RSPAN Settings............................................................................................................................................................................................86
DNS Relay ................................................................................................................................................................................... 88
DNS Relay Global Settings...........................................................................................................................................................................89
DNS Relay Static Settings ............................................................................................................................................................................89
DNS Resolver .............................................................................................................................................................................. 90
DNS Resolver Global Settings......................................................................................................................................................................90
DNS Resolver Static Name Server Settings..................................................................................................................................................90
DNS Resolver Dynamic Name Server Table ................................................................................................................................................91
DNS Resolver Static Host Name Settings.....................................................................................................................................................91
DNS Resolver Dynamic Host Name Table...................................................................................................................................................92
SNMP Manager............................................................................................................................................................................ 93
SNMP Settings..............................................................................................................................................................................................93
SNMP Trap Settings .....................................................................................................................................................................................94
SNMP User Table.........................................................................................................................................................................................95
SNMP View Table........................................................................................................................................................................................97
SNMP Group Table ......................................................................................................................................................................................98
SNMP Community Table..............................................................................................................................................................................99
SNMP Host Table.......................................................................................................................................................................................100
SNMP Engine ID........................................................................................................................................................................................102
Trap Source Interface Settings................................................................................................................................................... 102
PoE............................................................................................................................................................................................. 103
PoE System Settings ...................................................................................................................................................................................103
PoE Port Settings ........................................................................................................................................................................................105
sFlow.......................................................................................................................................................................................... 107
sFlow Global Settings.................................................................................................................................................................................108
sFlow Analyzer Settings .............................................................................................................................................................................108

sFlow Sampler Settings...............................................................................................................................................................................110
sFlow Poller Settings ..................................................................................................................................................................................112
IP Multicast VLAN Replication................................................................................................................................................. 114
IP Multicast VLAN Replication Global Settings........................................................................................................................................114
IP Multicast VLAN Replication Settings....................................................................................................................................................115
Single IP Management (SIM) Overview.................................................................................................................................... 118
SIM Settings ...............................................................................................................................................................................................120
Topology.....................................................................................................................................................................................................121
Tool Tips ...............................................................................................................................................................................................124
Menu Bar...............................................................................................................................................................................................128
Firmware Upgrade ......................................................................................................................................................................................129
Configuration Backup/Restore....................................................................................................................................................................129
Upload Log.................................................................................................................................................................................................130
RIP ............................................................................................................................................................................................. 130
RIP..............................................................................................................................................................................................................131
RIP Global Settings ...............................................................................................................................................................................132
RIP Interface Settings............................................................................................................................................................................132
RIPng..........................................................................................................................................................................................................133
RIPng Global Settings ...........................................................................................................................................................................133
RIPng Interface Settings........................................................................................................................................................................134
IP Tunnel Settings...................................................................................................................................................................... 135
L2 Features...................................................................................................................................................137
VLANs....................................................................................................................................................................................... 137
Static VLAN Entry......................................................................................................................................................................................142
VLAN Trunk...............................................................................................................................................................................................144
GVRP Settings............................................................................................................................................................................................146
Double VLANs...........................................................................................................................................................................................147
Double VLAN Settings...............................................................................................................................................................................149
PVID Auto Assign......................................................................................................................................................................................151
MAC-based VLAN Settings .......................................................................................................................................................................152
Protocol VLAN...........................................................................................................................................................................................152
Protocol VLAN Group Settings.............................................................................................................................................................153
Protocol VLAN Port Settings ................................................................................................................................................................154
Subnet VLAN .............................................................................................................................................................................................155
Subnet VLAN Settings ..........................................................................................................................................................................156
VLAN Precedence Settings ...................................................................................................................................................................156
Trunking..................................................................................................................................................................................... 158
Link Aggregation........................................................................................................................................................................................159
LACP Port Settings.....................................................................................................................................................................................162
IGMP Snooping ......................................................................................................................................................................... 164
IGMP Snooping Settings.............................................................................................................................................................................164
Router Port Settings....................................................................................................................................................................................166
IGMP Snooping Static Group Settings .......................................................................................................................................................168
ISM VLAN Settings....................................................................................................................................................................................169
Limited IP Multicast Address Range Settings.............................................................................................................................................172
MLD Snooping .......................................................................................................................................................................... 174
MLD Snooping Settings..............................................................................................................................................................................174
MLD Router Port Settings ..........................................................................................................................................................................177
Loop-back Detection Global Settings ........................................................................................................................................ 179
Spanning Tree............................................................................................................................................................................ 181
STP Bridge Global Settings........................................................................................................................................................................183
MST Configuration Identification...............................................................................................................................................................185
MSTP Port Information ..............................................................................................................................................................................188
STP Instance Settings..................................................................................................................................................................................190
STP Port Settings........................................................................................................................................................................................191
Forwarding & Filtering .............................................................................................................................................................. 193
Unicast Forwarding.....................................................................................................................................................................................193
Multicast Forwarding..................................................................................................................................................................................193
Multicast Filtering Mode.............................................................................................................................................................................194
LLDP.......................................................................................................................................................................................... 195
LLDP Global Settings.................................................................................................................................................................................196
Basic LLDP Port Settings ...........................................................................................................................................................................197
802.1 Extension LLDP Port Settings ..........................................................................................................................................................198
802.3 Extension LLDP Port Settings ..........................................................................................................................................................200
LLDP Management Address Settings.........................................................................................................................................................202
LLDP Statistics...........................................................................................................................................................................................204
LLDP Management Address Table.............................................................................................................................................................205
LLDP Local Port Table...............................................................................................................................................................................205
LLDP Remote Port Table............................................................................................................................................................................208
Q-in-Q........................................................................................................................................................................................ 210

Q-in-Q Settings...........................................................................................................................................................................................210
VLAN Translation Settings.........................................................................................................................................................................211
ERPS.......................................................................................................................................................................................... 212
ERPS Global Settings .................................................................................................................................................................................212
ERPS RAPS VLAN Settings ......................................................................................................................................................................213
DULD Settings........................................................................................................................................................................... 216
NLB Multicast FDB Settings..................................................................................................................................................... 218
QoS................................................................................................................................................................220
QoS ............................................................................................................................................................................................ 220
The Advantages of QoS..............................................................................................................................................................................220
Understanding IEEE 802.1p Priority...........................................................................................................................................................223
802.1p Settings........................................................................................................................................................................... 223
802.1p Default Priority Settings..................................................................................................................................................................224
802.1p User Priority Settings......................................................................................................................................................................225
Bandwidth Control..................................................................................................................................................................... 226
Bandwidth Control Settings........................................................................................................................................................................226
Per Queue Bandwidth Control Settings.......................................................................................................................................................228
HOL Prevention Settings ........................................................................................................................................................... 230
Schedule Settings ....................................................................................................................................................................... 230
QoS Output Scheduling Settings.................................................................................................................................................................230
QoS Scheduling Mechanism Settings .........................................................................................................................................................232
ACL (Access Control List)..........................................................................................................................235
Time Range................................................................................................................................................................................ 235
Access Profile Table .................................................................................................................................................................. 236
ACL Flow Meter........................................................................................................................................................................ 254
CPU Interface Filtering.............................................................................................................................................................. 258
Security .........................................................................................................................................................275
Authorization Attributes State Settings...................................................................................................................................... 275
Traffic Control ........................................................................................................................................................................... 276
Port Security............................................................................................................................................................................... 278
Port Security Settings..................................................................................................................................................................................278
Port Security Entries ...................................................................................................................................................................................279
IP-MAC-Port Binding................................................................................................................................................................ 280
IMPB Global Settings.................................................................................................................................................................................282
IMPB Port Settings .....................................................................................................................................................................................283
IMPB Entry Settings...................................................................................................................................................................................285
DHCP Snoop Entries ..................................................................................................................................................................................286
MAC Block List..........................................................................................................................................................................................287
ND Snoop Entries.......................................................................................................................................................................................287
802.1X........................................................................................................................................................................................ 288
802.1X Port Settings...................................................................................................................................................................................293
Guest VLAN Settings .................................................................................................................................................................................296
Authentication RADIUS Server Settings....................................................................................................................................................297
802.1X User Settings ..................................................................................................................................................................................298
Initialize Port(s) ..........................................................................................................................................................................................299
Reauthenticate Port(s).................................................................................................................................................................................300
Web-based Access Control (WAC) ........................................................................................................................................... 302
WAC Global Settings..................................................................................................................................................................................303
WAC Port Settings......................................................................................................................................................................................304
WAC User Account....................................................................................................................................................................................306
WAC Authentication State..........................................................................................................................................................................307
Trust Host................................................................................................................................................................................... 308
BPDU Attack Protection Settings .............................................................................................................................................. 310
ARP Spoofing Prevention Settings ............................................................................................................................................ 311
Access Authentication Control................................................................................................................................................... 312
Authentication Policy and Parameter Settings ............................................................................................................................................314
Application's Authentication Settings.........................................................................................................................................................314
Authentication Server Group ......................................................................................................................................................................315
Authentication Server Host.........................................................................................................................................................................316
Login Method Lists.....................................................................................................................................................................................318
Enable Method Lists ...................................................................................................................................................................................319
Configure Local Enable Password..............................................................................................................................................................321
Enable Admin .............................................................................................................................................................................................322
RADIUS Accounting Settings ....................................................................................................................................................................323
MAC-based Access Control (MAC).......................................................................................................................................... 325
MAC-based Access Control Global Settings..............................................................................................................................................325
MAC-based Access Control Local MAC Settings......................................................................................................................................328
Safeguard Engine ....................................................................................................................................................................... 329

Safeguard Engine Settings ..........................................................................................................................................................................330
Traffic Segmentation.................................................................................................................................................................. 331
Secure Socket Layer (SSL)........................................................................................................................................................ 332
SSL............................................................................................................................................................................................. 333
Secure Shell (SSH)..................................................................................................................................................................... 334
SSH Server Configuration...........................................................................................................................................................................335
SSH Authentication Mode and Algorithm Settings ....................................................................................................................................336
SSH User Authentication Mode..................................................................................................................................................................338
Compound Authentication ......................................................................................................................................................... 339
Compound Authentication Global Settings.................................................................................................................................................340
Compound Authentication Settings ............................................................................................................................................................341
Authentication Guest VLAN Settings.........................................................................................................................................................343
Japanese Web-based Access Control (JWAC)........................................................................................................................... 344
JWAC Global Settings................................................................................................................................................................................344
JWAC Port Settings....................................................................................................................................................................................347
JWAC User Account...................................................................................................................................................................................350
JWAC Authentication State........................................................................................................................................................................351
JWAC Customize Page Language Settings.................................................................................................................................................352
JWAC Customize Page...............................................................................................................................................................................353
Monitoring....................................................................................................................................................354
Device Status.............................................................................................................................................................................. 354
Stacking Information.................................................................................................................................................................. 355
Stacking Device ......................................................................................................................................................................... 356
Module Information................................................................................................................................................................... 356
DRAM & Flash Utilization........................................................................................................................................................ 357
CPU Utilization.......................................................................................................................................................................... 358
Port Utilization........................................................................................................................................................................... 359
Packets ....................................................................................................................................................................................... 360
Received (RX) ............................................................................................................................................................................................360
UMB Cast (RX)..........................................................................................................................................................................................362
Transmitted (TX) ........................................................................................................................................................................................364
Errors.......................................................................................................................................................................................... 366
Received (RX) ............................................................................................................................................................................................366
Transmitted (TX) ........................................................................................................................................................................................368
Packet Size................................................................................................................................................................................. 370
Browse Router Port.................................................................................................................................................................... 372
Browse MLD Router Port.......................................................................................................................................................... 373
VLAN Status.............................................................................................................................................................................. 373
VLAN Status Port...................................................................................................................................................................... 374
Port Access Control.................................................................................................................................................................... 374
Authenticator State......................................................................................................................................................................................374
Authenticator Statistics...............................................................................................................................................................................375
Authenticator Session Statistics..................................................................................................................................................................375
Authenticator Diagnostics...........................................................................................................................................................................376
RADIUS Authentication.............................................................................................................................................................................376
RADIUS Account Client.............................................................................................................................................................................376
MAC Address Table .................................................................................................................................................................. 378
IGMP Snooping Group .............................................................................................................................................................. 379
IGMP Snooping Data Driven Group.......................................................................................................................................... 379
MLD Snooping Group ............................................................................................................................................................... 380
MLD Snooping Data Driven Group........................................................................................................................................... 380
Trace Route................................................................................................................................................................................ 381
Trace IPv4 Route...................................................................................................................................................................................381
Trace IPv6 Route...................................................................................................................................................................................382
Switch Logs................................................................................................................................................................................ 383
Browse ARP Table..................................................................................................................................................................... 384
Session Table ............................................................................................................................................................................. 384
IP Forwarding Table .................................................................................................................................................................. 385
Routing Table............................................................................................................................................................................. 385
Browse Routing Table...........................................................................................................................................................................385
Browse IPv6 Routing Table...................................................................................................................................................................386
MAC-based Access Control Authentication Status ................................................................................................................... 386
Save, Reset and Reboot................................................................................................................................387
Reset........................................................................................................................................................................................... 387
Reboot System ........................................................................................................................................................................... 387
Save Services ............................................................................................................................................................................. 388
Save Changes..............................................................................................................................................................................................388

Configuration Information..........................................................................................................................................................................389
Current Configuration Settings ...................................................................................................................................................................390
Appendix A...................................................................................................................................................391
Mitigating ARP Spoofing Attacks Using Packet Content ACL..................................................................................................................391
Appendix B...................................................................................................................................................398
Switch Log Entries......................................................................................................................................................................................398
Appendix C...................................................................................................................................................409
Trap Logs....................................................................................................................................................................................................409
Glossary ........................................................................................................................................................414

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
ix
Intended Readers
The xStack®DGS-3400 Series User Manual contains information for setup and management of the Switch. This manual is
intended for network managers familiar with network management concepts and terminology.
Typographical Conventions
Convention Description
[ ] In a command line, square brackets indicate an optional entry. For example: [copy
filename] means that optionally you can type copy followed by the name of the file. Do
not type the brackets.
Bold font Indicates a button, a toolbar icon, menu, or menu item. For example: Open the File
menu and choose Cancel. Used for emphasis. May also indicate system messages or
prompts appearing on screen. For example: You have mail. Bold font is also used to
represent filenames, program names and commands. For example: use the copy
command.
Boldface Typewriter
Font Indicates commands and responses to prompts that must be typed exactly as printed in
the manual.
Initial capital letter Indicates a window name. Names of keys on the keyboard have initial capitals. For
example: Click Enter.
Italics Indicates a window name or a field. Also can indicate a variables or parameter that is
replaced with an appropriate word or string. For example: type filename means that the
actual filename should be typed instead of the word shown in italic.
Menu Name > Menu
Option Menu Name > Menu Option Indicates the menu structure. Device > Port > Port Properties means the Port Properties menu option under the Port menu option that is
located under the Device menu.
Notes, Notices, and Cautions
A NOTE indicates important information that helps make better use of the
device.
A NOTICE indicates either potential damage to hardware or loss of data
and tells how to avoid the problem.
A CAUTION indicates a potential for property damage, personal injury, or
death.

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
1
Section 1
Web-based Switch Configuration
Introduction
Logging in to the Web Manager
Web-based User Interface
Web Pages
Introduction
All software functions of the xStack®DGS-3400 switch series can be managed, configured and monitored via the embedded web-
based (HTML) interface. Manage the Switch from remote stations anywhere on the network through a standard browser. The
browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol.
The Web-based management module and the Console program (and Telnet) are different ways to access the same internal
switching software and configure it. Thus, all settings encountered in web-based management are the same as those found in the
console program.
Logging in to the Web Manager
To begin managing the Switch, simply run the browser installed on your computer and point it to the IP address you have defined
for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent
the IP address of the Switch.
NOTE: The factory default IP address is 10.90.90.90.
This opens the management module's user authentication dialog box, as seen below.
Figure 1 - 1 Enter Network Password dialog box

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
2
Leave both the User Name field and the Password field blank and click OK. This will open the Web-based user interface. The
Switch management features available in the Web-based manager are explained below.
Web-based User Interface
The user interface provides access to various Switch configuration and management windows, allows the user to view
performance statistics, and permits graphical monitoring of the system status.
Areas of the User Interface
The figure below shows the user interface. Three distinct areas divide the user interface, as described in the table.
Figure 1- 2 Main Web-Manager window
Area Function
Area 1 Select the menu or window to display. Open folders and click the hyperlinked menu buttons and
subfolders contained within them to display menus. Click the D-Link logo to go to the D-Link website.
Area 2 Presents a graphical near real-time image of the front panel of the Switch. This area displays the
Switch's ports and expansion modules, showing port activity, duplex mode, or flow control,
depending on the specified mode.
Some management functions, including port configuration are accessible here.
Area 3 Presents Switch information based on user selection and the entry of configuration data.
Area 2
Area 1
Area 3

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
3
Web Pages
When connecting to the management mode of the Switch with a Web browser, a login screen is displayed. Enter a user name and
password to access the Switch's management mode.
Below is a list of the main folders available in the Web interface:
Administration – Contains the following menu pages and sub-directories: IP Address, Interface Settings, Stacking, Port
Configuration, User Accounts, Password Encryption, Mirror, System Log, System Severity Settings, Command Logging Settings,
SNTP Settings, MAC Notification Settings, TFTP Services, Multiple Image Services, RCP, Ping Test, IPv6 Neighbor, Route
Redistribution Settings, Static/Default Route Settings, Route Preference Settings, Gratuitous ARP Settings, Static ARP Settings,
DHCP Auto Configuration Settings, DHCP/BOOTP Relay, DHCP/BOOTP Local Relay Settings, DHCPv6 Relay, DHCP Server,
DHCPv6 Server, Filter DHCP Server, Lyer 2 Protocol Tunneling Settings, RSPAN, DNS Relay, DNS Resolver, SNMP Manager,
Trap Source Interface Settings, PoE (DGS-3426P only), sFlow, IP Multicast VLAN Replication, Single IP Management Settings,
RIP, and IP Tunnel Settings.
L2 Features – Contains the following menu pages and sub-directories: VLAN, Trunking, IGMP Snooping, MLD Snooping,
Loopback Detection Global Settings, Spanning Tree, Forwarding & Filtering, LLDP, Q-in-Q, ERPS, DULD Settings, and NLB
Multicast FDB Settings.
QoS – Contains the following menu pages and sub-directories: 802.1p Settings, Bandwidth Control, HOL Prevention Settings,
and Schedule Settings.
ACL – Contains the following menu pages and sub-directories: Time Range, Access Profile Table, ACL Flow Meter and CPU
Interface Filtering.
Security – Contains the following menu pages and sub-directories: Authorization Network State Settings, Traffic Control, Port
Security, IP-MAC-Port Binding, 802.1X, Web-based Access Control (WAC), Trust Host, BPDU Attack Protection Settings, ARP
Spoofing Prevention Settings, Access Authentication Control, MAC-based Access Control, Safeguard Engine, Traffic
Segmentation, SSL, SSH, Compound Authentication, and Japanese Web-based Access Control (JWAC).
Monitoring – Contains the following menu pages and sub-directories: Device Status, Stacking Information (only when stacking
mode is enabled), Stacking Device(only when stacking mode is enabled), Module Information, DRAM & FLASH Utilization,
CPU Utilization, Port Utilization, Packets, Errors, Packet Size, Browse Router Port, Browse MLD Router Port, VLAN Status,
VLAN Status Port, Port Access Control, MAC Address Table, IGMP Snooping Group, IGMP Snooping Data Driven Group,
MLD Snooping Group, MLD Snooping Data Driven Group, Trace Route, Switch Logs, Browse ARP Table, Session Table, IP
Forwarding Table, Routing Table, and MAC-based Access Control Authentication Status.
Save Services – Contains the following menu pages and sub-directories: Save Changes, Configure Information, and Current
Configuration Settings.
Reset, Reboot System and Logout menu links are displayed in the main directory.
NOTE: Be sure to configure the user name and password in the User
Accounts window before connecting the Switch to the greater network.

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
4
Section 2
Administration
DGS-3400 Web Management Tool
IP Address
Interface Settings
Stacking
Port Configuration
User Accounts
Password Encryption
Mirror
System Log
System Severity Settings
Command Logging Settings
SNTP Settings
MAC Notification Settings
TFTP Services
Multiple Image Services
RCP
Ping Test
IPv6 Neighbor
Route Redistribution Settings
Static/Default Route Settings
Route Preference Settings
Gratuitous ARP Settings
Static ARP Settings
DHCP Auto Configuration Settings
DHCP/BOOTP Relay
DHCP/BOOTP Local Relay Settings
DHCPv6 Relay
DHCP Server
DHCPv6 Server
Filter DHCP Server
Layer 2 Protocol Tunneling Settings
RSPAN
DNS Relay
DNS Resolver
SNMP Manager
Trap Source Interface Settings
PoE

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
5
sFlow
IP Multicast VLAN Replication
Single IP Management (SIM) Overview
RIP
IP Tunnel Settings
Device Information
Figure 2 - 1 Device Information window
Device Information window configurable parameters include those described in the table below.
The Device Information window contains the main
settings for all major functions for the Switch. It
appears automatically when you log on to the Switch.
To return to the Device Information window after
viewing other windows, click the DGS-3400 Web
Management Tool folder. The Device Information
window shows the Switch’s MAC Address (assigned
by the factory and unchangeable), IP Address, VLAN
Name, Subnet Mask, Default Gateway, Boot PROM,
Firmware Version,
Hardware Version and Serial
Number. This information is helpful to keep track of
PROM and firmware updates and to obtain the
Switch's MAC address for entry into another network
device's address table, if necessary. The user may also
enter a System Name, System Location and System
Contact to aid in defining the Switch, to the user's
preference. In addition, this window displays the
status of functions on the Switch to quickly assess
their current global status. Some Functions are hyper-
linked for easy access from the Device Information
window.
Many miscellaneous functions are enabled and
disabled in the Device Information window.

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
6
Parameter Description
System Name Enter a system name for the Switch, if so desired. This name will identify it in the Switch
network.
System Location Enter the location of the Switch, if so desired.
System Contact Enter a contact name for the Switch, if so desired.
Serial Port Auto
Logout Time Select the logout time used for the console interface. This automatically logs the user out after an idle period of time, as defined. Choose from the following options: 2 Minutes, 5 Minutes, 10
Minutes, 15 Minutes or Never. The default setting is 10 minutes.
Serial Port Baud
Rate This field specifies the baud rate for the serial port on the Switch. The default setting is 115200.
MAC Address
Aging Time (10-
1000000)
This field specifies the length of time a learned MAC Address will remain in the forwarding table
without being accessed (that is, how long a learned MAC Address is allowed to remain idle). To
change this, type in a different value representing the MAC address age-out time in seconds.
The MAC Address Aging Time can be set to any value between 10 and 1,000,000 seconds. The
default setting is 300 seconds.
IGMP Snooping To enable system-wide IGMP Snooping capability, select Enabled. IGMP snooping is Disabled
by default. Enabling IGMP snooping allows the user to specify use of a multicast router only
(see below). To configure IGMP Snooping for individual VLANs, use the IGMP Snooping
window under the IGMP Snooping folder.
MLD Snooping To enable system-wide MLD Snooping capability, select Enabled. MLD snooping is Disabled by
default. Enabling MLD snooping allows you to specify use of a multicast router only (see below).
To configure MLD Snooping for individual VLANs, use the MLD Snooping window under the
MLD Snooping folder.
GVRP Status Use this pull-down menu to enable or disable GVRP on the Switch.
Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the
system through Telnet choose Disabled.
Telnet TCP Port
Number (1-65535) The TCP port number used for Telnet management of the Switch. The “well-known” TCP port for the Telnet protocol is 23.
Web Status Web-based management is Enabled by default. If you choose to disable this by selecting
Disabled, you will lose the ability to configure the system through the Web interface as soon as
these settings are applied.
Web TCP Port
Number (1-65535) The TCP port number used for Web-based management of the Switch. The “well-known” TCP port for the Telnet protocol is 80.
SNMP Status Simple Network Management Protocol (SNMP) of the Switch is Enabled or Disabled here.
RMON Status Remote monitoring (RMON) of the Switch is Enabled or Disabled here.
Link Aggregation
Algorithm The algorithm that the Switch uses to balance the load across the ports that make up the port trunk group is defined by this definition. Choose MAC Source, MAC Destination, MAC Src &
Dest, IP Source, IP Destination or IP Src & Dest (See the Link Aggregation section of this
manual).
Switch 802.1X MAC Address may enable by port or the Switch’s 802.1X function; the default is Disabled. This
field must be enabled to view and configure certain windows for 802.1X. More information
regarding 802.1X, its functions and implementation can be found later in this section, under the
Port Access Entity folder.
Port-based 802.1X specifies that ports configured for 802.1X are initialized based on the port
number only and are subject to any authorization parameters configured.
MAC-based Authorization specifies that ports configured for 802.1X are initialized based on the
port number and the MAC address of the computer being authorized and are then subject to any
authorization parameters configured.
Auth Protocol The user may use the pull-down menu to choose between RADIUS EAP and Local for the
802.1X authentication protocol on the Switch. The default setting is RADIUS EAP.
802.1X Authen
The user may use the pull-down menu to Enableor Disable the 802.1X Authen Network

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
7
Network RADIUS
RADIUS on the Switch. The default setting is Enabled.
Forward EAPOL
PDU The user may use the pull-down menu to Enable or Disable the Forward EAPOL PDU on the Switch. The default setting is Disabled.
HOL Prevention If this option is enabled it prevents the forwarding of data to a port that is blocked. Traffic that
would normally be sent to the buffer memory of the Switch’s TX queue is dropped so that
memory usage is conserved and performance across all ports remains high.
Jumbo Frame This field will enable or disable the Jumbo Frame function on the Switch. The default is
Disabled. Max. Jumbo frame size = 9216 bytes if this is enabled.
Syslog State The user may globally enable or disable the Syslog function here by using the pull-down menu.
The default is Disabled.
Broadcast Ping
Replay State The user may use the pull-down menu to Enable or Disable the broadcast ping relay.
ARP Aging time
(0-65535) The user may set the ARP Aging Time here by entering a time between 0 and 65535 minutes.
The default setting is 20 minutes.
Click Apply to implement changes made.
IPv6
The xStack®DGS-3400 has the capability to support the following:
•IPv6 unicast, multicast and anycast addresses
•Allow for IPv6 packet forwarding
•IPv6 fragmentation and re-assembly
•Processing of IPv6 packet and extension headers
•Static IPv6 route configuration
•IPv6 Neighbor Discovery
•Link-Layer Address resolution, Neighbor Unreachability Detection, and Duplicate Address Detection over broadcast
mediums (ex: Ethernet)
•Send Router Advertisement
•ICMPv6 functionality
The following sections will briefly explain IPv6, its functionality and how IPv6 is implemented on this Switch.
Overview
IP version 6 is the logical successor to IP version 4. It was known that IPv4 could not support the amount of addresses that would
eventually be needed for not only each person, but each device that would require an IP address, and therefore a system with a
larger pool of IP addresses was required. IPv6 has addressed that issue, along with other issues that enhance routing over the
network, provide better security and improve Quality of Service for Internet users. Some of the improvements made were:
Expanding the Capabilities for IP Addressing – IPv6 has increased the size of the IP address from 32 bits to 128 bits. As a
result, the addressing hierarchy has been greatly expanded, more nodes now have the capability of having a unique IP address and
the method of assigning an IP address to an interface has become cleaner and quicker. Unicast and multicast addresses still exist
but in a purer form and multicast addresses now have a scope field which increases the scalability of multicast routing. Also, an
anycast address has been added, which will send packets to the closest node which is a part of a group of nodes, thereby
eliminating a specified device for a particular group.
Simplifying the Packet Header – The IPv6 packet header has been simplified from IPv4 as some headers have been modified or
dropped altogether, which improves processing speed and cost. The IPv6 header now has a fixed length of 40 bytes consisting of
an 8-byte header and two 16-byte IP addresses (source and destination).
Extensions and Options Enhancement – Packet header option fields encoding has been enhanced to allow for proficient
forwarding of packets due to lesser restrictions on packet option length and encoding method. This enhancement will also allow

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
8
new option fields to be integrated into the IPv6 system without hassles and limitations. These optional headers are placed between
the header and the payload of a packet, if they are necessary at all.
Authentication and Privacy Extension Support – New authentication capabilities use extensions for data integrity and data
confidentiality for IPv6.
Flow Labeling – This new capability allows packets to be streamlined into certain traffic “flows” if labeled by the sender. In this
way, services such as “real time services or non-default quality of service can receive special attention for improved flow quality.

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
9
Packet Format
As in IPv4, the IPv6 packet consists of the packet header and the payload, but the difference occurs in the packet header which has
been amended and improved for better packet flow and processing. The following will outline and detail the IPv6 enhancements
and parts of the IPv6 packet, with special attention to the packet header.
IPv6 Header
The IPv6 packet header has been modified and simplified from IPv4. The header length, identification, flags, fragment offset and
header checksum have all been removed in the IPv6 header due to lack of necessity or improvement to a better function of the
header. The minimum header length is now 40 bytes. The following picture is an example of an IPv6 packet header.
Eight fields make up the basic IPv6 packet header:
Version – This 4-bit field defines the packet version, which is IPv6 and is defined as the number 6.
Traffic Class – This 1-byte field replaces the Type of Service field used in IPv4 and is used to process real-time data and other
data requiring special packet management. This field defines the Class of Service priority of an IPv6 packet.
Flow Label – This 20-bit field is used to facilitate the handling of real-time traffic. Hosts sending data can place a flow label into
this field to identify a sequence of packets that have an identical set of options. In this way, router can process these packets more
efficiently once the flow class has been identified and the rest of the packet header no longer needs to be fully processed, just the
flow label and the source address. All flow label packets must have identical source and destination addresses.
Payload Length – Known as the datagram length in IPv4, this 16-bit field specifies the length of the IPv6 data carried after the
header of the packet. Extension headers are considered part of the payload and are included in the length specified here.
Next Header – This 8-bit field is used to identify the header immediately following the IPv6 header. When this field is set after
the hop by-hop header, it defines the extension header that will appear after the destination address. Each extension header must
be preceded by a Next Header field. Integers used to define extension headers in the next Header field use the same values as IPv4
(ex: 6=TCP, 17=UDP, etc.).
Hop Limit - Similar to the TTL field in IPv4, this 8-bit field defines the number of hops remaining after the packet has been
processed by a node, instead of the number of seconds left to live as on an IPv4 network. This field will decrement by one after
every node it passes and the packet will be discarded once this field reaches zero.
Source Address – This 16-byte field defines the IPv6 address of the source node sending the packet.
Destination Address – This 16-byte field defines the IPv6 address of the destination node receiving the packet. This may or may
not be the final destination node of this packet, depending on the routing header, if present.

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
10
Extension Headers
Extension headers are used to identify optional parameters regarding IPv6 packets such as routing, fragmentation of packets or
authentication parameters. The types of extension headers supported are Hop-by-Hop, Routing, Fragment, Destination Options,
Authentication and Encapsulating Security Payload. These extension headers are placed between the IPv6 packet header and the
payload and are linked together by the aforementioned Next Header, as shown below.
IPv6 header
Next Header = TCP
TCP header + data
IPv6 header
Next Header = Routing
Routing Header
Next Header = TCP
TCP header + data
IPv6 header
Next Header =
Destination Options
Destination Options
Header
Next Header = Routing
Routing Header
Next Header = TCP
TCP header + data
Each header has a specific place in the header chain and must follow the following order:
•IPv6 Header
•Hop-By-Hop Header (Must follow the IPv6 header)
•Destination Options
•Routing Header
•Fragment Header
•Authentication Header
•Encapsulating Security Payload Header
•Destination Options Header
•Upper Layer Header
There may be zero, one or more extension headers in the IPv6 header, they must be processed in order and they are to be in
increments of 8 octets in the IPv6 packet. Nodes that do not recognize the field of the extension header will discard the packet and
send a relevant ICMPv6 message back to the source.
Packet Fragmentation
At times, packets are sent out to a destination that exceed the size of the Path MTU, so the source node is required to split these
packets into fragments in individual packets which will be rebuilt when it reaches its final destination. Each of the packets that
will be fragmented is given an Identification value, by the source node. It is essential that each of these Identification values is
different than any other fragmented packet recently sent that include the same source and destination address. The original packet
is divided into two parts, a fragmentable part and an unfragmentable part. The unfragmentable part of the packet consists of the
IPv6 header and any extension headers present, up to the routing extension header. The fragmentable part has the payload plus any
extension headers that must be processed by the final destination node. This part will be divided into multiple packets that are of a
size that can be accepted by the Path MTU. The IPv6 header is then included with this fragmented part and sent to its destination.
Once all parts of the fragmented packet reach its destination, they are reassembled using the Fragment Identification value,
provided that the source and destination addresses are identical.
Address Format
To address the problem of finding a larger pool of IP addresses for IPv6, the size and format of the IPv4 format needed to be
changed. Quadrupling the size of the address, from 32 bits to 128 bits, and encoding addresses using the hexadecimal form were
used to solve the problem. In IPv4, the format of the address looked like xxx.xxx.xxx.xxx, where the x’s represent integers from
0-9 (ex. 136.145.225.121). Now in IPv6, the format of the address resembles xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx where a

xStack®DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
11
set of xxxx represents a 16-bit hexadecimal value (ex. 2D83:0C76:3140:0000:0000:020C:417A:3214). Although this address
looks long and cumbersome, there are some compression rules that will shorten the format of the IPv6 address to make it more
compatible to the user.
One such compression rule that is used is to remove leading zeros from any 16-bit hexadecimal value. This is only for zeros that
begin the value, not for zeros within the value or ones that are ending the value. Therefore, if we take the previous example IPv6
address and use the compression rules, our IPv6 address would look like this:
2D83:0C76:3140:0000:0000:020C:417A:3214 2D83:C76:3140:0:0:20C:417A:3214
The second compression method is to change a string of zero bits into two colons. At times, there may be strings of empty values
in the IPv6 address that are unused for this address, but they are necessary for the format of other IPv6 addresses with alternate
purposes. To compress these zero strings, the format “::”is used to represent multiple zero fields in the address. This double colon
can only be used once in the IPv6 address because when a computer finds a colon, it will expand this field with as many zeros as
is necessary to reach the 128-bit address size. If two strings of zeros are present, separated by another non-zero field, a zero must
be used to represent one of the two zero fields. So, if we reduce our example using this compression, it would look like this:
2D83:0C76:3140:0000:0000:020C:417A:3214 2D83:C76:3140:0:0:20C:417A:3214 2D83:C76:3140::20C:417A:3214
When IPv4 and IPv6 nodes are mixed in a network, the IPv6 notation overcomes the difficulty of using an IPv4 address by
converting it to the IPv6 format using zeros at the beginning of the IPv4 address. For example, an IP address of 192.168.1.1 is
represented in IPv6 format x:x:x:x:d.d.d.d where the x’s are a string of zeros and the d’s represent the normal IPv4 address. (ex.
0:0:0:0:192.168.1.1 or condensed ::192.168.1.1 or hex form ::C0A8:1:1).
Types
IPv6 addresses are classified into three main categories, unicast, multicast and anycast.
Unicast – This address represents a single interface on an IPv6 node. Any packet with a unicast address as its destination address
will only be sent to that specific node. Two types of unicast addresses are mainly used for IPv6.
•Link-Local – Defined by the IPv6 address prefix FE80::/10, link-local addresses allow for communication to occur
between devices on a local link. These addresses are used in neighbor discovery and stateless autoconfiguration.
•Global Aggregateable - Defined using a global routing prefix in the range of 2000::/3 to E000::/3, global addresses are
aggregated using these routing prefixes to produce unique IPv6 addresses, which will limit global routing table entries.
The MAC address of the device is used to produce this address in this form:
Global Routing Prefix + Site Level Aggregator + MAC address (first 3 bits) + FFFE + MAC Address (last 3 bits)
So if your MAC address looks like 00-0C-6E-6B-EB-0C, your IPv6 address may resemble
2000::C:6E:6B:FF:FE:EB:0C/64.
Multicast – Like IPv4, multicast addresses are used to send packets to multiple destinations on a network. These interfaces must
be a part of the multicast group. IPv6 multicast prefixes begin with the prefix FF00::/8. FF represents the binary 1111 1111 which
identifies a multicast address. The first zero, which is a 4-bit integer, represents the lifetime of the packet. An entry of zero in this
field represents a permanent multicast address and an entry of one represents a temporary multicast address. The second zero,
which is also a 4-bit integer, defines the scope of the multicast address. This scope defines to what places the multicast address is
valid. For example, a value of 1 defines the node, 2 defines the link, 5 defines a site, 8 defines a organization and so on. Not all
integers are in use for the scope field. An example of this would be FF02 where the 2 represents a multicast packet going to all the
nodes on a local link.
Anycast – The anycast address will send messages to the nearest node of a particular group. This address is assigned to multiple
interfaces in the group but only the node with the closest proximity will receive the message. These anycast addresses are
allocated from the unicast address space and therefore have no real defined prefix to distinguish it from other IPv6 addresses. The
main purpose of the anycast address is to identify a set of routers owned by an organization providing Internet service. It could
also be used to identify a set of routers connected to a particular subnet or permitting entrance to a specific routing domain.
Two other special types of addresses exist in IPv6. The unspecified address has a value of 0:0:0:0:0:0:0:0 which is comparable to
the 0.0.0.0 address in IPv4. This address is used to indicate the lack of a valid IP address on a node and may be used by a device
when booting and requesting address configuration notification. In its IPv6 condensed form, it appears as “::” and should not be
statically or dynamically assigned to an interface, nor should it be the destination address of an IPv6 packet, or located within the
routing header.
The second type of special address is the loopback address which is represented by 0:0:0:0:0:0:0:1, or ::1 in its compressed form.
It is akin to the 127.0.0.1 address in IPv4 and is used in troubleshooting and testing IP stacks. This address, like the unspecified
address, and should not be statically or dynamically assigned to an interface.