Page 2 Information in this document is subject to change without notice. Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Table of Contents Intended Readers ................................x Typographical Conventions ............................x Notes, Notices, and Cautions ............................x Safety Instructions ................................x Safety Cautions ................................ xi Chapter 1 Web-based Switch Configuration ......................
Page 4 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Single IP Management ..............................35 Single IP Settings ..............................37 Topology .................................. 38 Firmware Upgrade ..............................43 Configuration File Backup/Restore ......................... 43 Upload Log File ............................... 44 SNMP Settings ................................
Page 5 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Q-in-Q Settings ................................ 91 VLAN Translation Settings ............................93 Double Tagged VLAN Translation Settings ......................94 VLAN Translation Port Mapping Settings ........................ 95 VLAN Translation Profile List ..........................96 Layer 2 Protocol Tunneling Settings ..........................
Page 6 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide IP Tunnel GRE Settings ............................172 OSPF ..................................173 OSPFv2 ................................. 193 RIP ....................................201 RIP Settings................................203 RIPng (EI Mode Only) ............................204 IP Multicast Routing Protocol ............................. 206 IGMP ..................................
Page 7 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Initialize Port(s) ..............................299 Reauthenticate Port(s) ............................300 RADIUS ..................................301 Authentication RADIUS Server Settings ....................... 301 RADIUS Accounting Settings ..........................302 RADIUS Authentication ............................302 RADIUS Account Client ............................304 IP-MAC-Port Binding (IMPB) ............................
Page 8 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enable Method Lists Settings ..........................346 Local Enable Password Settings ........................... 347 SSL Settings ................................348 SSH .................................... 350 SSH Settings ................................. 351 SSH Authentication Method and Algorithm Settings ..................... 351 SSH User Authentication Lists ..........................
Page 9 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Mirror ..................................412 Port Mirror Settings ............................... 412 RSPAN Settings ..............................413 sFlow ..................................414 sFlow Global Settings ............................415 sFlow Analyzer Server Settings ..........................415 sFlow Flow Sampler Settings ..........................416 sFlow Counter Poller Settings ..........................
Page 10: Intended Readers
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Intended Readers Intended Readers Typographical Conventions Notes, Notices, and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DES-3810 Series Web UI Reference Guide contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology.
Page 11: Safety Cautions
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Safety Cautions To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment observe the following precautions: • Observe and follow service markings. Do not service any product except as explained in the system documentation.
Page 12 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supplies. • Move products with care; ensure that all casters and/or stabilizers are firmly connected to the system. Avoid sudden stops and uneven surfaces.
Page 13: Protecting Against Electrostatic Discharge
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside the system. To prevent static damage, discharge static electricity from your body before touching any of the electronic components, such as the microprocessor. This can be done by periodically touching an unpainted metal surface on the chassis.
Page 14: Chapter 1 Web-Based Switch Configuration
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 1 Web-based Switch Configuration Introduction Logging in to the Web Manager Web-based User Interface Web Pages Introduction All software functions of the DES-3810 Series Switch can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 15: Web-Based User Interface
Area Number Function Select the menu or window to display. Open folders and click the hyperlinked menu buttons and subfolders contained within them to display menus. Click the D-Link logo to go to the D- Area 1 Link website. Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports, console and management port, showing port activity.
Page 16: Web Pages
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the Web interface: System Configuration - In this section the user will be able to configure features regarding the Switch’s configuration.
Page 17: Chapter 2 System Configuration
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 2 System Configuration Device Information System Information Settings Port Configuration Serial Port Settings Warning Temperature Settings System Log Configuration Time Range Settings Time Settings User Account Settings SRM (EI Mode Only) Device Information This window contains the main settings for all the major functions for the Switch.
Page 18: System Information Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-2 Device Information window (SI Mode Only) Click on the Settings link to navigate to the appropriate feature page for configuration. System Information Settings The user can enter a System Name, System Location, and System Contact to aid in defining the Switch. To view the following window, click System Configuration >...
Page 19: Port Configuration
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Port Configuration This folder contains windows that perform Digital Diagnostic Monitoring (DDM) functions on the Switch. There are windows that allow the user to view the digital diagnostic monitoring status of SFP modules inserting to the Switch and to configure alarm settings, warning settings, temperature threshold settings, voltage threshold settings, bias current threshold settings, Tx power threshold settings, and Rx power threshold settings.
Page 20: Ddm Temperature Threshold Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide DDM Temperature Threshold Settings This window is used to configure the DDM Temperature Threshold Settings for specific ports on the Switch. To view the following window, click System Configuration > Port Configuration > DDM > DDM Temperature Threshold Settings, as show below: Figure 2-5 DDM Temperature Threshold Settings window The fields that can be configured are described below:...
Page 21: Ddm Bias Current Threshold Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-6 DDM Voltage Threshold Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 22: Ddm Tx Power Threshold Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-7 DDM Bias Current Threshold Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 23: Ddm Rx Power Threshold Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-8 DDM TX Power Threshold Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 24 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-9 DDM RX Power Threshold Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 25: Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-10 DDM Status Table window Port Settings This page used to configure the details of the switch ports. To view the following window, click System Configuration > Port Configuration > Port Settings, as shown below:...
Page 26 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-11 Port Settings window To configure switch ports: 1. Choose the port or sequential range of ports using the From Port and To Port pull-down menus. 2.
Page 27: Port Description Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide set for 1000M Full_Master, the other side of the connection must be set for 1000M Full_Slave. Any other configuration will result in a link down status for both ports. Displays the flow control scheme used for the various port configurations.
Page 28: Port Error Disabled
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Select the appropriate port range used for the configuration here. From Port / To Port Specify the medium type for the selected ports. If configuring the Combo ports, the Medium Type Medium Type defines the type of transport medium to be used, whether Copper or Fiber.
Page 29: Serial Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Apply button to accept the changes made. Serial Port Settings Here the user can adjust the Baud Rate and the Auto Logout values. To view the following window, click System Configuration > Serial Port Settings, as shown below: Figure 2-15 Serial Port Settings window The fields that can be configured or displayed are described below: Parameter...
Page 30: System Log Configuration
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide setting. Here the user can enter the high threshold value of the warning temperature setting. High Threshold Here the user can enter the low threshold value of the warning temperature setting. Low Threshold Click the Apply button to accept the changes made.
Page 31: System Log
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 2-18 System Log Server Settings window The fields that can be configured are described below: Parameter Description Syslog server settings index (1 to 4). Server ID This drop-down menu allows you to select the higher level of messages that will be Severity sent.
Page 32: System Log & Trap Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide In the drop-down menu the user can select the log type that will be displayed. Log Type Severity - When the user selects Severity then a secondary tick must be made. Secondary ticks are Emergency, Alert, Critical, Error, Warning, Notice, Informational and Debug.
Page 33: System Severity Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide System Severity Settings The Switch can be configured to allow alerts be logged or sent as a trap to an SNMP agent or both. The level at which the alert triggers either a log entry or a trap message can be set as well.
Page 34: Time Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide This parameter is used to set the time in the day that this time range is to be enabled Hours (HH MM SS) using the following parameters: Start Time - Use this parameter to identify the starting time of the time range, in hours, minutes and seconds, based on the 24-hour time system.
Page 35: Srm (Ei Mode Only)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Management Admin Operator User Configuration Read/Write Read/Write–partly Network Monitoring Read/Write Read/Write Read-only Community Strings and Trap Stations Read/Write Read-only Read-only Update Firmware and Configuration Files Read/Write System Utilities Read/Write Factory Reset Read/Write...
Page 36 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select the Routing option to specify that more hardware resources will be assigned to SRM Configured Mode the L3 routing functions. Select the VPWS option to specify that more hardware resources will be assigned to MPLS functions.
Page 37: Chapter 3 Management
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 3 Management Gratuitous ARP IPv6 Neighbor Settings IP Interface Management Settings Out of Band Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings Power Saving Static ARP Settings The Address Resolution Protocol is a TCP/IP protocol that converts IP addresses into physical addresses.
Page 38: Arp Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP responder. Therefore, the Switch can then route packets to the intended destination without configuring static routing or a default gateway.
Page 39: Gratuitous Arp Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Global Settings, as shown below: Figure 3-4 Gratuitous ARP Global Settings window The fields that can be configured are described below: Parameter Description The command is used to enable/disable sending of gratuitous ARP request packets while...
Page 40: Ipv6 Neighbor Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enable or disable the trap option. By default the trap is disabled. Trap Here the user can enable or disable the logging option. By default the event log is enabled.
Page 41: Ip Interface
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide of the window, tick the All check box. Select the Hardware option to display all the neighbor cache entries which were written into the hardware table. Use the drop-down menu to select All, Address, Static, or Dynamic. When the user State selects address from the drop-down menu, the user will be able to enter an IP address in the space provided next to the state option.
Page 42: Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The following table will describe the fields that are about the System Interface. Parameter Description Here the System interface name will be displayed. IP Interface This allows the entry of a VLAN name from which a management station will be allowed Management VLAN to manage the Switch using TCP/IP (in-band via Web manager or Telnet).
Page 43 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-8 Interface Settings window The fields that can be configured are described below: Parameter Description Here the user can enter the name of the IP interface to search for. IP Interface Name Click the Find button to locate a specific entry based on the information entered.
Page 44 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-10 IPv4 Interface Settings window The fields that can be configured are described below: Parameter Description Here the user can specify the method this Interface will use to acquire an IP Address. Get IP From Here the user can enter the name of the IP interface being configured.
Page 45 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enter the Neighbor solicitation’s retransmit timer in millisecond here. It has the same NS Retransmit Time (0- value as the RA retransmit time in the configuration of the IPv6 ND RA command. If this 1294967295) field is configure, it will duplicate the enter into the RA field.
Page 46: Loopback Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Loopback Interface Settings This window is used to configure loopback interfaces. A loopback interface is a logical IP interface which is always active, until a user disables or deletes it. It is independent of the state of any physical interfaces. To view this window, click Management >...
Page 47: Out Of Band Management Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide This window is also used to enable the DHCP auto configuration feature on the Switch. When enabled, the Switch is instructed to receive a configuration file from a TFTP server, which will set the Switch to become a DHCP client automatically on boot-up.
Page 48: Session Table
Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the “Single IP Management” feature: 1.
Page 49 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide • A SIM group can only have one Commander Switch (CS). • All switches in a particular SIM group must be in the same IP subnet (broadcast domain). Members of a SIM group cannot cross a router.
Page 50: Single Ip Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To better improve SIM management, the DES-3810-28 Series switches have been upgraded to version 1.61 in this release. Many improvements have been made, including: 1. The Commander Switch (CS) now has the capability to automatically rediscover member switches that have left the SIM group, either through a reboot or web malfunction.
Page 51: Topology
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Choosing this option will also enable the Switch to be configured for SIM. Enter a Group Name in this textbox. This is optional. This name is used to segment Group Name switches into different SIM groups.
Page 52 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Displays the connection speed between the CS and the MS or CaS. Speed Displays the number of the physical port on the MS or CaS to which the CS is connected. Remote Port The CS will have no entry in this field.
Page 53 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
Page 54 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide • Property – To pop up a window to display the group information. Figure 3-25 Properties window Parameter Description This field will display the Device Name of the switches in the SIM group configured by the Device Name user.
Page 55 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-27 Member Switch Icon window The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. •...
Page 56: Firmware Upgrade
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide • Add to group – Add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group.
Page 57: Upload Log File
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-33 Configuration File Backup/Restore window Upload Log File The following window is used to upload log files from SIM member switches to a specified PC. To upload a log file, enter the Server IP address of the SIM member switch and then enter a Path\Filename on your PC where you wish to save this file.
Page 58: Snmp Global Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Using SNMPv3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB.
Page 59: Snmp Link Change Traps Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-36 SNMP Traps Settings window The fields that can be configured are described below: Parameter Description Enable this option to use the SNMP Traps feature. SNMP Traps Enable this option to use the SNMP Authentication Traps feature.
Page 60: Snmp View Table Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Here the user can select the starting and ending ports to use. From Port / To Port Here the user can enable or disable the SNMP link change Trap.
Page 61: Snmp Group Table Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Management > SNMP Settings > SNMP Community Table Settings, as shown below: Figure 3-39 SNMP Community Table Settings window The fields that can be configured are described below: Parameter Description Type an alphanumeric string of up to 32 characters that is used to identify members of an...
Page 62: Snmp Engine Id Settings
SNMP management private enterprise number as assigned by IANA (D-Link is 171). The fifth octet is 03 to indicate the rest is the MAC address of this device. The sixth to eleventh octets is the MAC address.
Page 63: Snmp User Table Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: The Engine ID length is 10-64 and accepted characters can range from 0 to F. SNMP User Table Settings This window displays all of the SNMP User’s currently configured on the Switch. To view the following window, click Management >...
Page 64: Snmp V6Host Table Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-43 SNMP Host Table Settings window The fields that can be configured are described below: Parameter Description Type the IP address of the remote management station that will serve as the SNMP host Host IP Address for the Switch.
Page 65: Rmon Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide SNMPv1 – Specifies that SNMP version 1 will be used. User-based Security Model SNMPv2 – Specifies that SNMP version 2 will be used. SNMPv3 – Specifies that SNMP version 3 will be used. NoAuthNoPriv –...
Page 66: Web Settings
TCP port for the Web protocol is 80. Click the Apply button to accept the changes made. Power Saving Power Saving is one part of D-Link Green Technologies. To learn more about the D-Link Green Technologies, go to http://green.dlink.com/ for more details.
Page 67: Power Saving Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Power Saving Settings This window allows the user to implement the Switch’s built-in power saving features and set the schedule to enforce the settings. To view this window, click Management > Power Saving > Power Saving Settings as shown below: Figure 3-49 Power Saving Settings window The fields that can be configured are described below: Parameter...
Page 68: Power Saving Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3-50 Power Saving LED Settings window The fields that can be configured are described below: Parameter Description Use the drop down menu to add or delete the schedule. Action Enter the name of the schedule used here.
Page 69: Chapter 4 Vpn (Ei Mode Only)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 4 VPN (EI Mode Only) MPLS VPWS MPLS Multiprotocol Label Switching (MPLS) is a protocol that works between the network layer and the data link layer of the TCP/IP protocol stack and is used to replace conventional IP forwarding with label switching.
Page 70 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide When a packet enters the MPLS domain, the LER is responsible for adding a label to the packet. Also when a packet leaves the MPLS domain, the LER is responsible for removing the label. Inside the MPLS domain, packets will be transferred based on their label.
Page 71: Ldp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide LDP Settings This window is used to configure the LDP Settings used on this Switch To view this window, click VPN > MPLS > LDP > LDP Settings as shown below: Figure 4-4 LDP Settings window The fields that can be configured are described below: Parameter...
Page 72 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide transport address. Select the LSP control mode used here. In Independent LSP Control, each LSR LDP Control Mode independently binds a label to a FEC and distributes the binding to its label distribution peers.
Page 73 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 4-5 LDP Statistic Table window Click the Clear button to clear all the information listed. LDP IP Interface Settings This window is used to configure the LDP parameters for a specified interface. To view this window, click VPN >...
Page 74 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide LDP Targeted Peer Settings This window is used to configure the LDP targeted peer. To view this window, click VPN > MPLS > LDP > LDP Targeted Peer Settings as shown below: Figure 4-7 LDP Targeted Peer Settings window The fields that can be configured are described below: Parameter...
Page 75 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 4-10 LDP Peer Password Settings window The fields that can be configured are described below: Parameter Description Enter the peer IP address used here. The IP address shall be the peer’s LSR ID. IP Address Select and enter the peer password used here.
Page 76: Mpls Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 4-13 LDP Session Statistic window Click the <<Back button to return to the previous page. LDP Binding Table This window is used to display all LDP label binding information. To view this window, click VPN >...
Page 77: Mpls Static Lsp Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enable or disable the MPLS trap state here. Trap Click the Apply button to accept the changes made. MPLS Static LSP Settings This window is used to configure the MPLS static LSP settings. To view this window, click VPN >...
Page 78: Mpls Dynamic Lsp Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide MPLS Dynamic LSP Table This window is used to locate and display dynamic MPLS LSP entries. To view this window, click VPN > MPLS > MPLS Dynamic LSP Table as shown below: Figure 4-18 MPLS Dynamic LSP Table window The fields that can be configured are described below: Parameter...
Page 79: Mpls Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter the IP prefix FEC address of the LSP here. IP Prefix Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the configure entries.
Page 80: Mpls Fec Exp Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enter the CoS value used here. This value must be between 0 and 7. CoS (0-7) Click the Apply button to accept the changes made. MPLS FEC EXP Settings This window is used to configure the EXP assignment of FEC.
Page 81: Vpws Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Pseudo-Wire (PW) and AC based on local information. A PW is an emulated point-to-point connection over a packet switched network that allows the interconnection of two nodes with any Layer 2 technology. The required functions of PWs include encapsulating service-specific bit streams, cells, or PDUs arriving at an ingress port and carrying them across an IP path or MPLS tunnel.
Page 82 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 4-25 VPWS Settings window The fields that can be configured are described below: Parameter Description Select the VPWS type used here. VPWS types are used to distinguish between different VPWS Type VPWS services.
Page 83 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Delete button to remove the specified entry. After click the View Detail link, the following page will be displayed. Figure 4-26 VPWS VC Detail window Click the <<Back button to return to the previous page.
Page 84: Chapter 5 L2 Features
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 5 L2 Features VLAN QinQ Layer 2 Protocol Tunneling Settings Spanning Tree Link Aggregation L2 Multicast Control Multicast Filtering ERPS Settings Local Loopback Port Settings LLDP NLB FDB Settings VLAN Understanding IEEE 802.1p Priority...
Page 85 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide A VLAN is a collection of end nodes grouped by logic instead of physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are physically on the network.
Page 86 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The main characteristics of IEEE 802.1Q are as follows: • Assigns packets to VLANs by filtering. • Assumes the presence of a single global spanning tree. • Uses an explicit tagging scheme with one- level tagging.
Page 87 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 88 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide If the packet is tagged with VLAN information, the ingress port will first determine if the ingress port itself is a member of the tagged VLAN. If it is not, the packet will be dropped. If the ingress port is a member of the 802.1Q VLAN, the Switch then determines if the destination port is a member of the 802.1Q VLAN.
Page 89: 802.1Q Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: In order to use VLAN segmentation in conjunction with port trunk groups, first set the port trunk group(s), and then configure the VLAN settings. To change the port trunk grouping with VLANs already in place it is unnecessary to reconfigure the VLAN settings after changing the port trunk group settings.
Page 90 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Allows the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit VLAN tab.
Page 91: 802.1V Protocol Group Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-7 802.1Q VLAN Settings window The fields that can be configured are described below: Parameter Description Enter a VLAN ID List that can be added, deleted or configured. VID List (e.g.: 2-5) Enabling this function will allow the Switch to send out GVRP packets to outside sources, Advertisement...
Page 92: V Protocol Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-8 802.1v Protocol Group Settings window The fields that can be configured are described below: Parameter Description Select an ID number for the group, between 1 and 8. Group ID (1-8) This is used to identify the new Protocol VLAN group.
Page 93: Gvrp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-9 802.1v Protocol VLAN Settings window The fields that can be configured are described below: Parameter Description Select a previously configured Group ID from the drop-down menu. Group ID Select a previously configured Group Name from the drop-down menu.
Page 94: Gvrp Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide incoming packets whose PVID does not match the PVID of the port. Results can be seen in the table under the configuration settings. To view the following window, click L2 Features > VLAN > GVRP > GVRP Global Settings, as shown below: Figure 5-10 GVRP Global Settings window The fields that can be configured are described below: Parameter...
Page 95 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-11 GVRP Port Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be configured. From Port / To Port This field is used to manually assign a PVID to a VLAN.
Page 96: Mac-Based Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide MAC-based VLAN Settings Users can create new MAC-based VLAN entries, search and delete existing entries. When a static MAC-based VLAN entry is created for a user, the traffic from this user will be able to be serviced under the specified VLAN regardless of the authentication function operating on this port.
Page 97 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-13 Private VLAN Settings window The fields that can be configured are described below: Parameter Description The user can enter a VLAN Name here. VLAN Name The user can enter a VID value here.
Page 98: Pvid Auto Assign Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide PVID Auto Assign Settings Users can enable or disable PVID Auto Assign Status. The default setting is enabled. To view the following window, click L2 Features > VLAN > PVID Auto Assign Settings, as shown below: Figure 5-15 PVID Auto Assign Settings window Click the Apply button to accept the changes made.
Page 99: Vlan Counter Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Delete button to remove the specific entry based on the information entered. Click the Show All button to display all the existing entries. Click the Delete All button to remove all the entries listed. Click the Delete button to remove the specified entry.
Page 100: Voice Vlan
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Voice VLAN Voice VLAN Global Settings Voice VLAN is a VLAN used to carry voice traffic from IP phone. Because the sound quality of an IP phone call will be deteriorated if the data is unevenly sent, the quality of service (QoS) for voice traffic shall be configured to ensure the transmission priority of voice packet is higher than normal traffic.
Page 101: Voice Vlan Oui Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-19 Voice VLAN Port Settings window The fields that can be configured are described below: Parameter Description Here the user can select a range of port to display. From Port / To Port Here the user can configure the state of the port.
Page 102: Vlan Trunk Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-20 Voice VLAN OUI Settings window The fields that can be configured are described below: Parameter Description User defined OUI MAC address. OUI Address User defined OUI MAC address mask. Mask The description for the user defined OUI.
Page 103: Browse Vlan
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Users can combine a number of VLAN ports together to create VLAN trunks. To view the following window, click L2 Features > VLAN > VLAN Trunk Settings, as shown below: Figure 5-22 VLAN Trunk Settings window The fields that can be configured are described below: Parameter...
Page 104: Show Vlan Ports
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: The abbreviations used in this window are, Tagged Port (T), Untagged Port (U) and Forbidden Port (F). Show VLAN Ports Users can display the VLAN ports of the Switch's viewed by ports. To view the following window, click L2 Features >...
Page 105 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-25 Q-in-Q Example window In this example, the Service Provider Access Network switch (Provider edge switch) is the device creating and configuring Double VLANs. Both CEVLANs (Customer VLANs), 10 and 11, are tagged with the SPVID 100 on the Service Provider Access Network and therefore belong to one VLAN on the Service Provider’s network, thus being a member of two VLANs.
Page 106: Vlan Translation Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > QinQ > QinQ Settings, as shown below: Figure 5-26 QinQ Settings window The fields that can be configured are described below: Parameter Description Selecting this option enable the QinQ feature.
Page 107: Double Tagged Vlan Translation Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-27 VLAN Translation Settings window The fields that can be configured are described below: Parameter Description Here the user can select a range of ports to use in the configuration. From Port / To Port Here the user can enter the C-VLAN ID to match.
Page 108: Vlan Translation Port Mapping Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Here the user can enter the S-VLAN ID to match. SVID (1-4094) When both SVID and CVID are matched, replace original SVID with the new SVID New SVID (1-4094) Here the user can select the priority of the s-tag.
Page 109: Vlan Translation Profile List
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide VLAN Translation Profile List This page is used to create a Q-in-Q profile and to assign the SP-VLAN. Multiple rules can be specified for a Q-in-Q profile. Outer tags to frames can be added or replaced to match the translation profiles. To view the following window, click L2 Features >...
Page 110: Layer 2 Protocol Tunneling Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Here the user can specify the SP-VLAN ID to be assigned to the matched packet. SVID (1-4094) Here the user can specify the priority of the SP-VLAN. If priority is not specified, the value Priority is default to the port default priority.
Page 111: Spanning Tree
802.1Q-2005 MSTP. 802.1D-1998 STP will be familiar to most networking professionals. However, since 802.1D-2004 RSTP and 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1D-1998 STP, 802.1D- 2004 RSTP, and 802.1Q-2005 MSTP.
Page 112 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The Switch implements three versions of the Spanning Tree Protocol, the Multiple Spanning Tree Protocol (MSTP) as defined by the IEEE 802.1Q-2005, the Rapid Spanning Tree Protocol (RSTP) as defined by the IEEE 802.1D-2004 specification and a version compatible with the IEEE 802.1D-1998 STP.
Page 113: Stp Bridge Global Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The Spanning Tree Protocol (STP) operates on two levels: 1. On the switch level, the settings are globally implemented. 2. On the port level, the settings are implemented on a per-user-defined group of ports basis. STP Bridge Global Settings On this page the user can configure the STP bridge global parameters.
Page 114: Stp Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Used to set the maximum number of Hello packets transmitted per interval. The count can Tx Hold Count (1-10) be specified from 1 to 10. The default is 6. Used to set the number of hops between devices in a spanning tree region before the Max Hops (6-40) BPDU (bridge protocol data unit) packet sent by the Switch will be discarded.
Page 115: Mst Configuration Identification
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide similar to edge ports; however they are restricted in that a P2P port must operate in full duplex. Like edge ports, P2P ports transition to a forwarding state rapidly thus benefiting from RSTP.
Page 116: Stp Instance Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide the Switch. 65535) Enter a number between 1 and 15 to set a new MSTI on the Switch. MSTI ID (1-15) This field allows the user to choose a desired method for altering the MSTI settings. The Type user has two choices: Add VID - Select this parameter to add VIDs to the MSTI ID, in conjunction with the VID...
Page 117 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > Spanning Tree > MSTP Port Information, as shown below: Figure 5-37 MSTP Port Information window The fields that can be configured are described below: Parameter Description Select a port to view its MSTI settings.
Page 118: Link Aggregation
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The Switch supports up to fourteen port trunk groups with two to eight ports in each group.
Page 119 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-39 Port Trunking Settings window The fields that can be configured are described below: Parameter Description This is the traffic hash algorithm among the ports of the link aggregation group. Options to Algorithm choose from are MAC Source Dest, IP Source Dest and Lay4 Source Dest.
Page 120: Lacp Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide LACP Port Settings In conjunction with the Trunking window, users can create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP control frames. To view the following window, click L2 Features >...
Page 121: Multicast Static Fdb Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > FDB > Static FDB Settings > Unicast Static FDB Settings, as shown below: Figure 5-41 Unicast Static FDB Settings window The fields that can be configured are described below: Parameter Description...
Page 122: Mac Notification Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide None - No restrictions on the port dynamically joining the multicast group. When None is chosen, the port will not be a member of the Static Multicast Group. Click the All button to select all the ports.
Page 123: Mac Address Aging Time Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Apply button to accept the changes made for each individual section. MAC Address Aging Time Settings Users can configure the MAC Address aging time on the Switch. To view the following window, click L2 Features >...
Page 124: Arp & Fdb Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the View All Entries button to display all the existing entries. Click the Clear All Entries button to remove all the entries listed in the table. Click the Add to Static MAC table button to add the specific entry to the Static MAC table.
Page 125 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-47 IGMP Proxy Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the IGMP Proxy Global State. IGMP Proxy State The VLAN name for the interface.
Page 126: Igmp Snooping
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Specify the VLAN Name which belongs to the IGMP proxy downstream interface. VLAN Name Specify a list of VLANs which belong to the IGMP proxy downstream interface. VID List Here the user can Add or Delete a downstream interface.
Page 127 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-51 IGMP Snooping Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the IGMP Snooping state. IGMP Snooping State Here the user can enter the maximum learning entry value.
Page 128 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Specify the data driven group lifetime in seconds. Data Drive Group Expiry Time (1-65535) Specify to enable or disable the querier state. Querier State Enable or disable the IGMP snooping fast leave function. If enabled, the membership is Fast Leave immediately removed when the system receive the IGMP leave message.
Page 129: Igmp Snooping Rate Limit Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Displays router ports that have been dynamically configured. Dynamic Router Port Select the appropriate ports individually to include them in the Router Port configuration. Ports Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration.
Page 130 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-55 IGMP Snooping Static Group Settings window The fields that can be configured are described below: Parameter Description The VLAN Name of the multicast group. VLAN Name The VID List or of the multicast group.
Page 131: Igmp Router Port
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide IGMP Router Port Users can display which of the Switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. A router port that is dynamically configured by the Switch is designated by D, while a Forbidden port is designated by F.
Page 132: Igmp Snooping Forwarding Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The user may search the IGMP Snooping Group Table by either VLAN Name or VID List by entering it in the top left hand corner and clicking Find. The fields that can be configured are described below: Parameter Description...
Page 133: Igmp Host Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-60 IGMP Snooping Counter window The fields that can be configured are described below: Parameter Description The VLAN Name of the multicast group. VLAN Name The VLAN ID list of the multicast group. VID List The Port List of the multicast group.
Page 134: Cpu Filter L3 Control Packet Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-62 IGMP Host Table window The fields that can be configured are described below: Parameter Description The VLAN Name of the multicast group. VLAN Name The VLAN ID list of the multicast group. VID List The Port List of the multicast group.
Page 135: Mld Proxy
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-63 CPU Filter L3 Control Packet Settings window The fields that can be configured are described below: Parameter Description Here the user can select the port range to use for the CPU Filter configuration. From Port / To Port Here the user can enable or disable the CPU Filtering.
Page 136 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide MLD Proxy Settings Users can configure the MLD proxy state and MLD proxy upstream interface in this page. To view the following window, click L2 Features > L2 Multicast Control > MLD Proxy > MLD Proxy Settings, as shown below: Figure 5-64 MLD Proxy Settings window The fields that can be configured are described below:...
Page 137: Mld Snooping
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-65 MLD Proxy Downstream Settings window The fields that can be configured are described below: Parameter Description The VLAN name for the interface. VLAN Name The VID List for the interface. VID List Here the user can select the appropriate action.
Page 138: Mld Snooping Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide the port directly attached to it into the correct IPv6 multicast table, and begins the process of forwarding multicast traffic to that port. This entry in the multicast routing table records the port, the VLAN ID, and the associated multicast IPv6 multicast group address, and then considers this port to be an active listening port.
Page 139 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-68 MLD Snooping Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the MLD snooping state. MLD Snooping State Here the user can enter the maximum learning entry value.
Page 140 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide • Last listener query count - Number of group-specific queries sent before the router assumes there are no local listeners of a group. The default number is the value of the robustness variable.
Page 141: Mld Snooping Rate Limit Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide enabled routers. This will ensure that all packets with such a router as its destination will reach the multicast-enabled router regardless of the protocol. This section is used to designate a range of ports as being not connected to multicast- Forbidden Router Port enabled routers.
Page 142: Mld Router Port
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-72 MLD Snooping Static Group Settings window The fields that can be configured are described below: Parameter Description The name of the VLAN on which the static group resides. VLAN Name The ID of the VLAN on which the static group resides.
Page 143: Mld Snooping Group
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-74 MLD Router Port window The fields that can be configured are described below: Parameter Description Enter a VLAN ID to be displayed. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 144: Mld Snooping Forwarding Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enter the group IPv6 address used here. Group IPv6 Address If Data Drive is selected, only data driven groups will be displayed. Data Driven Click the Find button to locate a specific entry based on the information entered. Click the Clear Data Driven button to delete the specific MLD snooping group which is learned by the Data Driven feature of the specified VLAN.
Page 145: Mld Host Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-77 MLD Snooping Counter window The fields that can be configured are described below: Parameter Description Specifies a VLAN name to be displayed. VLAN Name Specifies a list of VLANs to be displayed. VID List Specifies a list of ports to be displayed.
Page 146: Multicast Vlan
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > MLD Snooping > MLD Host Table, as shown below: Figure 5-79 MLD Host Table window The fields that can be configured are described below: Parameter Description...
Page 147: Igmp Multicast Group Profile Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide IGMP Multicast Group Profile Settings Users can add a profile to which multicast address reports are to be received on specified ports on the Switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the Switch.
Page 148 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > Multicast VLAN > IGMP Snooping Multicast VLAN Settings, as shown below: Figure 5-82 IGMP Snooping Multicast VLAN Settings window The fields that can be configured are described below: Parameter Description...
Page 149: Mld Multicast Group Profile Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Here the user can enable or disable the state. State With the IGMP snooping function, the IGMP report packet sent by the host will be Replace Source IP forwarded to the source port.
Page 150: Mld Snooping Multicast Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > Multicast VLAN > MLD Multicast Group Profile Settings, as shown below: Figure 5-85 MLD Multicast Group Profile Settings window The fields that can be configured are described below: Parameter Description...
Page 151 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-87 MLD Snooping Multicast VLAN Settings window The fields that can be configured are described below: Parameter Description Here user can enable or disable the MLD multicast VLAN state. MLD Multicast VLAN State Here user can enable or disable the MLD multicast VLAN Forward Unmatched state.
Page 152: Ip Multicast Vlan Replication
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enable or disable the state. State With the MLD snooping function, the MLD report packet sent by the host will be forwarded Replace Source IP to the source port.
Page 153: Ip Multicast Vlan Replication Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > IP Multicast VLAN Replication > IP Multicast VLAN Replication Global Settings, as shown below: Figure 5-90 IP Multicast VLAN Replication Global Settings window The fields that can be configured are described below: Parameter...
Page 154 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-92 IP Multicast VLAN Replication Source Settings window The fields that can be configured are described below: Parameter Description Here the user can choose to enter a VLAN Name, VID value or Group value. VID / VLAN Name Here the user can select the action to be taken.
Page 155: Multicast Filtering
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Multicast Filtering IPv4 Multicast Filtering IPv4 Multicast Profile Settings Users can add a profile to which multicast address(s) reports are to be received on specified ports on the Switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the Switch.
Page 156: Ipv4 Limited Multicast Range Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Add button to add a new entry based on the information entered. Click the <<Back button to discard the changes made and return to the previous page. Click the Edit button to re-configure the specific entry.
Page 157: Ipv6 Multicast Filtering
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-97 IPv4 Max Multicast Group Settings window The fields that can be configured are described below: Parameter Description Please select the appropriate port(s) or VLAN IDs used for the configuration here. Ports / VID List Deselect the Infinite check box to enter a Max Group value here.
Page 158: Ipv6 Limited Multicast Range Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Delete All button to remove all the entries listed. Click the Group List link to configure the multicast address group list settings for the specific entry. Click the Edit button to re-configure the specific entry.
Page 159: Multicast Filtering Mode
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry. Click the Find button to locate a specific entry based on the information entered.
Page 160: Erps Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-102 Multicast Filtering Mode window The fields that can be configured are described below: Parameter Description The VLAN to which the specified filtering action applies. Tick the All option to apply this VLAN Name / VID List feature to all the VLANs.
Page 161 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > ERPS Settings, as shown below: Figure 5-103 ERPS Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the ERPS State.
Page 162 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After click the Edit button, the following window will appear: Figure 5-105 ERPS Settings - Detail Information Edit window The fields that can be configured or displayed are described below: Parameter Description Display the R-APS VLAN ID.
Page 163: Local Loopback Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide APS revertive option. Display the current Ring state. Current Ring State Click the Apply button to accept the changes made. Click the <<Back button to return to the previous window. After clicking the Sub-Ring Information link, the following window will appear:...
Page 164: Lldp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-107 Local Loopback Port Settings window The fields that can be configured are described below: Parameter Description Here the user can select the port range to use for this configuration. From Port / To Port Here the user can select the Loopback mode used.
Page 165: Lldp Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > LLDP > LLDP > LLDP Global Settings, as shown below: Figure 5-108 LLDP Global Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the LLDP feature.
Page 166 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-109 LLDP Port Settings window The fields that can be configured are described below: Parameter Description Here the user can select the ports used for this configuration. From Port / To Port Use the pull-down menu to enable or disable the status of the LLDP notification.
Page 167: Lldp Management Address List
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide LLDP Management Address List On this page the user can view the LLDP management address list. To view the following window, click L2 Features > LLDP > LLDP > LLDP Management Address List, as shown below: Figure 5-110 LLDP Management Address List window The fields that can be configured are described below:...
Page 168: Lldp Dot1 Tlvs Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-111 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description Here the user can enter the port range to use for this configuration. From Port / To Port Here the user can enable or disable the Port Description option.
Page 169: Lldp Dot3 Tlvs Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-112 LLDP Dot1 TLVs Settings window The fields that can be configured are described below: Parameter Description Here the user can enter the port range to use for this configuration. From Port / To Port Here the user can enable or disable and configure the Dot1 TLV PVID option.
Page 170: Lldp Statistics System
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-113 LLDP Dot3 TLVs Settings window The fields that can be configured are described below: Parameter Description Here the user can enter the port range to use for this configuration. From Port / To Port This TLV optional data type indicates that the LLDP agent should transmit the MAC/PHY MAC / PHY...
Page 171: Lldp Local Port Information
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-114 LLDP Statistics System window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a port. Port Click the Find button to locate a specific entry based on the information entered. LLDP Local Port Information The LLDP Local Port Information page displays the information on a per port basis currently available for populating outbound LLDP advertisements in the local port brief table shown below.
Page 172: Lldp Remote Port Information
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-116 LLDP Local Port Information - Show Normal window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a port. Port Click the Find button to locate a specific entry based on the information entered.
Page 173: Lldp-Med
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the normal LLDP Remote Port information page per port, click the Show Normal button. After clicking the Show Normal button, the following page will appear: Figure 5-119 LLDP Remote Port Information window Click the <<Back button to return to the previous page.
Page 174 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-121 LLDP-MED Port Settings window The fields that can be configured are described below: Parameter Description Specified a range of ports to be configured. From Port / To Port Here the user can enable or disable the notification topology change status.
Page 175 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 5-122 LLDP-MED Local Port Information window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a port. Port Click the Find button to locate a specific entry based on the information entered.
Page 176: Nlb Fdb Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NLB FDB Settings The Switch supports Network Load Balancing (NLB). This is a MAC forwarding control for supporting the Microsoft server load balancing application where multiple servers can share the same IP address and MAC address. The requests from clients will be forwarded to all servers, but will only be processed by one of them.
Page 177: Chapter 6 L3 Features
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 6 L3 Features IPv4 Static/Default Route Settings IPv4 Route Table IPv6 Static/Default Route Settings IPv6 Route Table Policy Route Settings IP Forwarding Table IP Multicast Forwarding Table IP Multicast Interface Table Route Preference Settings ECMP Algorithm Settings...
Page 178: Ipv4 Route Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide mask of the IP address. This field allows the entry of a Gateway IP Address to be applied to the corresponding Gateway gateway of the IP address. Represents the metric value of the IP interface entered into the table.
Page 179: Ipv6 Route Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-3 IPv6 Static/Default Route Settings window The fields that can be configured are described below: Parameter Description The IPv6 address and corresponding Prefix Length of the IPv6 Static or Default Route IPv6 Address/Prefix entry.
Page 180: Policy Route Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Length Tick the check box and enter the destination IPv6 address of the route to be displayed. IPv6 Address Tick the check box to display the static route. Static Tick the check box to display routes that are related to RIPng.
Page 181: Ip Forwarding Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-6 Policy Route Settings window Click the Add button to add a new entry based on the information entered. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry.
Page 182: Ip Multicast Forwarding Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-8 IP Forwarding Table window The fields that can be configured are described below: Parameter Description Enter the IP address of the Interface here. IP Address Click the Find button to locate a specific entry based on the information entered.
Page 183: Route Preference Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-10 IP Multicast Interface Table window The fields that can be configured are described below: Parameter Description Enter the interface name Interface Name Use the drop-down menu to select the protocol. Protocol Click the Find button to locate a specific entry based on the information entered.
Page 184: Route Redistribution Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-12 ECMP Algorithm Settings window The fields that can be configured are described below: Parameter Description Specifies whether the ECMP OSPF State is enable or disabled. ECMP OSPF State Click the Apply button to accept the changes made.
Page 185: Ip Tunnel Gre Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-14 IP Tunnel Settings window The fields that can be configured are described below: Parameter Description Enter the IP tunnel interface name. Interface Name Click the Add button to add a new entry based on the information entered. Click the Find button to locate a specific entry based on the information entered.
Page 186: Ospf
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-16 IP Tunnel GRE Settings window The fields that can be configured are described below: Parameter Description Enter the IP tunnel interface name. Interface Name Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries.
Page 187 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide neighboring routers. The state contains information such as the IP address, subnet mask, type of network the interface is attached to, other routers attached to the network, etc. The collection of link-states is then collected in a link-state database that is maintained by routers running OSPF.
Page 188 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-18 Constructing a Shortest Path Tree Figure 6-19 Constructing a Shortest Path Tree The diagram above shows the network from the viewpoint of Router A. Router A can reach 192.213.11.0 through Router B with a cost of 10 + 5 = 15.
Page 189 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Router A 128.213.0.0 Router B Router C 192.213.11.0 222.211.10.0 Figure 6-20 Constructing a Shortest Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A. The cost of the link from Router B to Router A, for instance is not important to constructing Router A’s shortest path tree, but is very important when Router B is constructing its shortest path tree.
Page 190 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The format of these link-state updates is described in more detail below. Router link-state updates are flooded to all routers in the current area. These updates describe the destinations reachable through all of the router’s interfaces.
Page 191 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Partitioning the Backbone OSPF also allows virtual links to be configured to connect the parts of the backbone that are discontinuous. This is the equivalent to linking different area 0s together using a logical path between each area 0. Virtual links can also be added for redundancy to protect against a router failure.
Page 192 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide information. One router will become the primary and the other will become secondary. The primary router will poll the secondary for information. • Exchange - Routers will describe their entire link-state database by sending database description packets. •...
Page 193 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description The OSPF version number. Version No. The OSPF packet type. The OSPF packet types are as follows: Type Description Hello Type Database Description Link-State Request Link-State Update Link-State Acknowledgment. The length of the packet in bytes.
Page 194 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Hello Packet Version No. Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Network Mask Hello Interval Options Router Priority Router Dead Interval Designated Router Backup Designated Router Neighbor Figure 6-22 Hello Packet...
Page 195 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Database Description Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Reserved I M MS Reserved Options DD Sequence No. Link-State Advertisement Header ... Figure 6-23 Database Description Packet Parameter Description...
Page 196 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Link-State Request Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Link-State Type Link-State ID Advertising Router Figure 6-24 Link-State Request Packet Each advertisement requested is specified by its Link-State Type, Link-State ID, and Advertising Router.
Page 197 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Link-State Update Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Number of Advertisements Link-State Advertisements ... Figure 6-25 Link-State Update Packet The body of the Link-State Update packet consists of a list of link-state advertisements.
Page 198 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Link-State Acknowledgment Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Link-State Advertisement Header ... Figure 6-26 Link State Acknowledge Packet Each acknowledged link-state advertisement is described by its link-state advertisement header. It contains all the information required to uniquely identify both the advertisement and the advertisement’s current instance.
Page 199 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Link-State Advertisement Header Link-State Age Options Link-State Type Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Figure 6-27 Link State Advertisement Header Parameter Description The time is seconds since the link state advertisement was originated. Link State Age The optional capabilities supported by the described portion of the routing domain.
Page 200 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Routers Links Advertisements Link-State Age Options Link-State Type Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Reserved Reserved Number of Links Link ID Link Data Type No.
Page 201 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description A quick classification of the router link. One of the following: Type Description: Point-to- Type point connection to another router. Connection to a transit network. Connection to a stub network.
Page 202 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Network Link Advertisements Link-State Age Options Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Network Mask Attached Router Figure 6-29 Network Link Advertisements Parameter Description The IP address mask for the network.
Page 203 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide For stub area, Type 3 summary link advertisements can also be used to describe a default route on a per-area basis. Default summary routes are used in stub area instead of flooding a complete set of external routes. When describing a default summary route, the advertisement’s Link State ID is always set to the Default Destination 0.0.0.0, and the Network Mask is set to 0.0.0.0.
Page 204 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description The IP address mask for the advertised destination. Network Mask The type of external metric. If the E-bit is set, the metric specified is a Type 2 external E-bit metric.
Page 205 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Type-7 LSA (Link State Advertisement) packets are used to import external routes into the NSSA. These packets can originate from NSSA ASBRs or NSSA ABRs and are defined by setting the P-Bit in the LSA type-7 packet header.
Page 206: Ospfv2
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Also included in the Options field of the LSA type-7 packet, the P-Bit (propagate) is used to define whether or not to translate the LSA type-7 packet into an LSA type-5 packet for distribution outside the NSSA. LSA Type-7 Packet Features •...
Page 207: Ospf Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-35 OSPF Area Settings window The fields that can be configured are described below: Parameter Description A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the Area ID OSPF area in the OSPF domain.
Page 208 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click L3 Features > OSPF > OSPFv2 > OSPF Interface Settings, as shown below: Figure 6-37 OSPF Interface Settings window The fields that can be configured are described below: Parameter Description Enter the name of the IP interface here...
Page 209: Ospf Virtual Link Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Specifies the priority for the Designated Router election. If a Router Priority of 0 is set, the Priority (0-255) Switch cannot be elected as the DR for the network. Specifies the interface metric used.
Page 210: Ospf Area Aggregation Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Allows the specification of the length of time between the receipts of Hello packets from a Dead Interval (1-65535) neighbor router before the selected area declares that router down. The Dead Interval must be evenly divisible by the Hello Interval.
Page 211: Ospf Host Route Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the Area ID OSPF area in the OSPF domain.
Page 212: Ospf Lsdb Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-43 OSPF Default Information Originate Settings window The fields that can be configured are described below: Parameter Description Select the status of the originating default information here. Selecting Default specifies Originate that the external default route will be originated only when one default route already exists.
Page 213: Ospf Neighbor Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter a 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely Area ID identifies the OSPF area in the OSPF domain. Enter the router ID of the advertising router. Advertise Router ID Specifies the LSDB type to be displayed.
Page 214: Rip
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-47 OSPF Virtual Neighbor Table window The fields that can be configured are described below: Parameter Description A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the Transit Area ID OSPF area in the OSPF domain.
Page 215 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide There are a few rules to the routing table update process that help to improve performance and stability. A router will not replace a route with a newly learned one if the new route has the same hop count (sometimes referred to as ‘cost’).
Page 216: Rip Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide RIP specifies that the IP address, 0.0.0.0, denotes a default route. The distances, measured in router hops are entered in the Distance to Source Network, and Distance to Destination Network fields.
Page 217: Ripng (Ei Mode Only)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After clicking the Edit button, the following page with be displayed. Figure 6-49 RIP Settings window The fields that can be configured are described below: Parameter Description Specifies the IP interface name used for this configuration.
Page 218: Ripng Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Click to enable or disable the RIPng state. RIPng State Use the drop-down menu to select the method of RIPng. Method No Horizon –...
Page 219: Ip Multicast Routing Protocol
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Select to enable or disable the RIPng state on the selected interfaces. State Enter the metric value used here. The RIPng route that was learned from the interface will Metric add this value as a new route metric.
Page 220: Igmp Check Subscriber Source Network Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-54 IGMP Interface Settings – Edit window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the IGMP version that will be used to interpret IGMP Version queries on the interface.
Page 221: Igmp Group Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter the IP interface name, used for this search, here. Interface Name Click the Edit button and choose to enable or disable the flag that determines whether or Subscriber Source not to check the subscriber source IP when an IGMP report or leave message is received.
Page 222: Dvmrp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the <<Back button to return to the previous window. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. IGMP Static Group Settings This window is used to create an IGMP static group on the switch.
Page 223: Dvmrp Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide DVMRP Interface Settings This window is used to configure the DVMRP global state and allow the DVMRP to be configured for each IP interface defined on the Switch. Each IP interface configured on the Switch is displayed in the below DVMRP Interface Settings window.
Page 224: Dvmrp Neighbor Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide DVMRP Neighbor Table This window is used to display DVMRP neighbor table on the Switch. To view the following window, click L3 Features > IP Multicast Routing Protocol > DVMRP > DVMRP Neighbor Table, as shown below: Figure 6-61 DVMRP Neighbor Table window The fields that can be configured are described below:...
Page 225: Pim
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Protocol Independent Multicast (PIM) is a family of multicast routing protocols for Internet Protocol (IP) networks that provide one-to-many and many-to-many distribution of data over a LAN, WAN or the Internet. PIM is protocol- independent as it does not include its own topology discovery mechanism, but uses routing information supplied by other traditional routing protocols, such as RIP or OSPF.
Page 226: Pim Global Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide one not. The RP will detect this flaw and then return a Register-stop message to the DR requesting it to discontinue sending encapsulated packets. Assert Messages At times on the PIM-SM enabled network, parallel paths are created from source to receiver, meaning some receivers will receive the same multicast packets twice.
Page 227: Pim Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-63 PIM Global Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable PIM global state. PIM Global State Enter a time to send a NULL register message from the DR to the RP before the Register Register Probe Time...
Page 228: Pim Candidate Bsr Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-65 PIM Interface Settings – Edit window The fields that can be configured are described below: Parameter Description This field will set the interval time between the sending of Hello Packets from this IP Hello Interval (1-18724) interface to neighboring routers one hop away.
Page 229: Pim Candidate Rp Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-66 PIM Candidate BSR Settings The fields that can be configured are described below: Parameter Description Enter a hash mask length, which will be used with the IP address of the candidate RP Candidate BSR Hash and the multicast group address, to calculate the hash algorithm used by the router to Mask Len (0-32)
Page 230: Pim Static Rp Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-68 PIM Candidate RP Settings window The fields that can be configured are described below: Parameter Description This field is used to set the time Candidate RP (CRP) advertisements are valid on the Candidate RP Hold PIM-SM enabled network.
Page 231: Pim Register Checksum Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter the multicast group address for this Static RP. This address must be a class D Group Address address. Enter the mask for the multicast group address stated above. Group Mask Enter the IP address of the Rendezvous Point.
Page 232 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enter the IP address of the destination. Neighbor IP Address Enter the netmask of the destination. Neighbor Netmask Click the Find button to find the interface entered. Click the View All button to view all the interfaces configured on this switch.
Page 233: Vrrp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the radio buttons to enable or disable the SSM service model on the Switch. SSM Service Model State Enter the group address range for the SSM service in IPv4. Tick the Default check box to SSM Group Address indicate that the group address range is 232.0.0.0/8.
Page 234 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-76 VRRP Virtual Router Settings window The fields that can be configured are described below: Parameter Description Specifies the IP interface name used to create a VRRP entry. Interface Name Specifies the state of the virtual router function of the interface.
Page 235: Vrrp Authentication Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-77 VRRP Virtual Router Settings window The fields that can be configured are described below: Parameter Description Displays the IP interface used to create a VRRP entry. Interface Name Specifies the virtual router’s IP address used.
Page 236: Md5 Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6-78 VRRP Authentication Settings window Click the Edit button to re-configure a specific entry listed. The fields that can be configured are described below: Parameter Description Specifies the VRRP’s authentication type.
Page 237 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Specifies an alphanumeric string of between 1 and 16 case-sensitive characters used to Password generate the Message Digest which is in turn, used to authenticate OSPF packets within the OSPF routing domain.
Page 238: Chapter 7 Qos
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 7 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings QoS is an implementation of the IEEE 802.1p standard that allows network administrators a method of reserving bandwidth for important functions that require a large bandwidth or have a high priority, such as VoIP (voice-over Internet Protocol), web browsing applications, file server applications or video conferencing.
Page 239: 802.1P Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide • Priority 2 is assigned to the Switch’s Q1 queue. • Priority 3 is assigned to the Switch’s Q3 queue. • Priority 4 is assigned to the Switch’s Q4 queue. •...
Page 240: 802.1P User Priority Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 7-2 802.1p Default Priority Settings window The fields that can be configured are described below: Parameter Description Specifies the list of ports, to be used for this configuration, here. From Port / To Port Specifies the priority value that will be applied to the selected ports.
Page 241: Bandwidth Control
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Specifies the priority value that will be applied to the selected Class ID. Priority Specifies the Class ID used here. Once a priority has been assigned to the port groups on Class ID the Switch, then a Class may be assigned to each of the eight levels of 802.1p priorities.
Page 242: Queue Bandwidth Control Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide This drop-down menu allows the user to specify that the selected port will have no No Limit bandwidth limit or not. NOTE: If the configured number is larger than the port speed, it means no bandwidth limit. This field allows the input of the data rate that will be the limit for the selected port.
Page 243: Traffic Control Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Traffic Control Settings On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious end station on the network or a malfunctioning device, such as a faulty network card.
Page 244 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Select a range of ports to be configured. From Port / To Port Select the method of traffic control from the pull-down menu. The choices are: Action Drop –...
Page 245: Dscp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: The minimum storm control threshold granularity: FE port 500pps, GE port 640pps. DSCP DSCP Trust Settings This page is to configure the DSCP trust state of ports. When ports are under the DSCP trust mode, the switch will insert the priority tag to untagged packets by using the DSCP Map settings instead of the default port priority.
Page 246 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 7-8 DSCP Map Settings – DSCP Priority window To view the following window, click QoS > DSCP > DSCP Map Settings and select DSCP DSCP from the DSCP Map drop-down menu, as show below: Figure 7-9 DSCP Map Settings –...
Page 247: Hol Blocking Prevention
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide HOL Blocking Prevention HOL (Head of Line) Blocking happens when one of the destination ports of a broadcast or multicast packet are busy. The switch will hold this packet in the buffer while the other destination port will not transmit the packet even they are not busy.
Page 248: Scheduling Group Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 7-11 Scheduling Profile Settings window The fields that can be configured are described below: Parameter Description Here the user can select the profile ID to configure. Profile ID Here the user can select the range on CoS to configure.
Page 249 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 7-12 Scheduling Group Settings window The fields that can be configured are described below: Parameter Description Here the user can select the profile ID to configure. Profile ID Here the user can enter the port range to configure.
Page 250: Chapter 8 Acl
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 8 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Egress Access Profile List Egress ACL Flow Meter ACL Configuration Wizard The ACL Configuration Wizard will aid the user in the creation of access profiles and ACL Rules automatically by simply inputting the address or service type and the action needed.
Page 251: Access Profile List
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide This rule can be created to apply to four different categories: From / To Any – Selecting this option will include any starting category to this rule. MAC Address –...
Page 252 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame the Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the Switch will use to determine what to do with the frame.
Page 253 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-3 Add ACL Profile window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Here the user can enter a unique identifier number for this profile set. This value can be Profile ID (1-1024) set from 1 to 1024 Here the user can enter a profile name for the profile created.
Page 254 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-4 Access Profile Detail Information window (Ethernet ACL) Click the Show All Profiles button to navigate back to the Access Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 8-5 Access Rule List window (Ethernet ACL) Click the Add Rule button to create a new ACL rule in this profile.
Page 255 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-6 Add Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Enter the access ID for this rule here. This ID must be between 1 and 1024. Access ID (1-1024) Auto Assign –...
Page 256 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Permit to specify that the packets that match the access profile are forwarded by Action the Switch, according to any additional rule added (see below). Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered.
Page 257: Adding An Ipv4 Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Adding an IPv4 ACL Profile The window shown below is the Add ACL Profile window for IPv4. To use specific filtering masks in this ACL profile, click on the packet filtering mask field to highlight it red. This will add more filed to the mask. After clicking the Add ACL Profile button, the following page will appear: Figure 8-8 Adding ACL Profile window (IPv4 ACL) The fields that can be configured are described below:...
Page 258 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an IGMP type value. Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion.
Page 259 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created. Click the Delete Rules button to remove the specific entry.
Page 260 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enter the destination IP address used here. Destination IP Address Select and enter the destination IP address mask used here. Destination IP Address Mask Enter the DSCP value used here. DSCP Select this option to specify that the rule will be applied to ICMP traffic.
Page 261: Adding An Ipv6 Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-12 Access Rule Detail Information window (IPv4 ACL) Click the Show All Rules button to navigate back to the Access Rule List. Adding an IPv6 ACL Profile The window shown below is the Add ACL Profile window for IPv6.
Page 262 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's Select ACL Type header. Ticking this check box will instruct the Switch to examine the class field of the IPv6 IPv6 Class header.
Page 263 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-16 Add Access Rule window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Enter the access ID for this rule here. This ID must be between 1 and 1024. Access ID (1-1024) Auto Assign –...
Page 264 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Mirror to specify that packets that match the access profile are mirrored to a port defined in the config mirror port command. Port Mirroring must be enabled and a target port must be set.
Page 265: Adding A Packet Content Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Adding a Packet Content ACL Profile The window shown below is the Add ACL Profile window for Packet Content: To use specific filtering masks in this ACL profile, click on the packet filtering mask field to highlight it red. This will add more filed to the mask. After clicking the Add ACL Profile button, the following page will appear: Figure 8-18 Add ACL Profile window (Packet Content ACL) The fields that can be configured are described below:...
Page 266 However, ARP is vulnerable as it can be easily spoofed and utilized to attack a LAN (i.e. an ARP spoofing attack). For a more detailed explanation on how ARP protocol works and how to employ D-Link’s unique Packet Content ACL to prevent ARP spoofing attack, please see Appendix E at the end of this manual.
Page 267 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-21 Add Access Rule window (Packet Content ACL) The fields that can be configured are described below: Parameter Description Enter the access ID for this rule here. This ID must be between 1 and 1024. Access ID (1-1024) Auto Assign –...
Page 268 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide target port must be set. Tick the corresponding check box if you want to re-write the 802.1p default priority of Priority (0-7) a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 269: Cpu Access Profile List
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide CPU Access Profile List Due to a chipset limitation and needed extra switch security, the Switch incorporates CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets destined for the Switch’s CPU interface.
Page 270: Adding A Cpu Ethernet Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Adding a CPU Ethernet ACL Profile The window shown below is the Add CPU ACL Profile window for Ethernet. To use specific filtering masks in this ACL profile, click on the packet filtering mask field to highlight it red. This will add more filed to the mask. After clicking the Add CPU ACL Profile button, the following page will appear: Figure 8-24 Add CPU ACL Profile window (Ethernet ACL) The fields that can be configured are described below:...
Page 271 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After clicking the Show Details button, the following page will appear: Figure 8-25 CPU Access Profile Detail Information window (Ethernet ACL) Click the Show All Profiles button to navigate back to the CPU ACL Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 8-26 CPU Access Rule List window (Ethernet ACL) Click the Add Rule button to create a new CPU ACL rule in this profile.
Page 272 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-27 Add CPU Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 100. Access ID (1-100) Enter the VLAN name used here.
Page 273: Adding A Cpu Ipv4 Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered. Enter the appropriate Ethernet Type information. Ethernet Type (0-FFFF) Tick the check box and enter the name of the Time Range settings that has been Time Range Name...
Page 274 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-29 Add CPU ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Here the user can enter a unique identifier number for this profile set. This value can be Profile ID (1-6) set from 1 to 6.
Page 275 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion. Selecting TCP requires a source port mask and/or a destination port mask is to be specified.
Page 276 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Delete Rules button to remove the specific entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the Add Rule button, the following page will appear: Figure 8-32 Add CPU Access Rule window (Ethernet ACL) The fields that can be configured are described below:...
Page 277: Adding A Cpu Ipv6 Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select this option to specify that the rule will be applied to ICMP traffic. ICMP Type – Enter the ICMP packet type value used here. Code – Enter the ICMP code value used here. Select Permit to specify that the packets that match the access profile are forwarded by Action the Switch, according to any additional rule added (see below).
Page 278 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-34 Add CPU ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Here the user can enter a unique identifier number for this profile set. This value can Profile ID (1-6) be set from 1 to 6.
Page 279 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After clicking the Show Details button, the following page will appear: Figure 8-35 CPU Access Profile Detail Information window (IPv6 ACL) Click the Show All Profiles button to navigate back to the CPU ACL Profile List Page. After clicking the Add/View Rules button, the following page will appear: Figure 8-36 CPU Access Rule List window (IPv6 ACL) Click the Add Rule button to create a new CPU ACL rule in this profile.
Page 280 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-37 Add CPU Access Rule window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 100. Access ID (1-100) Enter the IPv6 class mask value used here.
Page 281: Adding A Cpu Packet Content Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-38 CPU Access Rule Detail Information window (IPv6 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU Packet Content ACL Profile The window shown below is the Add CPU ACL Profile window for Packet Content.
Page 282 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Packet Content Mask to specify a mask to hide the content of the packet header. This field will instruct the Switch to mask the packet header beginning with the offset Offset value specified: 0-15 - Enter a value in hex form to mask the packet from the beginning of the packet to...
Page 283 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-42 Add CPU Access Rule window (Packet Content ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 100. Access ID (1-100) This field will instruct the Switch to mask the packet header beginning with the offset Offset...
Page 284: Acl Finder
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-43 CPU Access Rule Detail Information window (Packet Content ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. ACL Finder The ACL rule finder helps you to identify any rules that have been assigned to a specific port and edit existing rules quickly.
Page 285 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide trTCM – Two Rate Three Color Marker. This, along with the srTCM, are two methods available on the switch for metering and marking packet flow. The trTCM meters and IP flow and marks it as a color based on the flow’s surpassing of two rates, the CIR and the PIR.
Page 286 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enter the Profile ID for the flow meter. Profile ID Here the user can enter the Profile Name for the flow meter. Profile Name Here the user can enter the Access ID for the flow meter.
Page 287 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Drop Packet – Drop the packet immediately. Remark DSCP – Mark the packet with a specified DSCP. The packet is set to drop for packets with a high precedence. trTCM –...
Page 288: Egress Access Profile List
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the <<Back button to return to the previous page. Egress Access Profile List Egress ACL performs per-flow processing of packets when they egress from the Switch ports. The Switch supports three Profile Types, Ethernet ACL, IPv4 ACL, and IPv6 ACL.
Page 289 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select profile based on Ethernet (MAC Address), IPv4 address, or IPv6 address. This will Select ACL Type change the window according to the requirements for the type of profile. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header.
Page 290 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-52 Add Egress Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 500. Access ID (1-500) Auto Assign –...
Page 291: Adding An Ipv4 Egress Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Permit to specify that the packets that match the access profile are forwarded by Action the Switch, according to any additional rule added (see below). Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered.
Page 292 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-54 Add Egress ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 500. Profile ID (1-500) Enter a profile name for the profile created.
Page 293 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an IGMP type value. Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion.
Page 294 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the <<Back button to return to the previous page. Click the Add Rule button to create a new ACL rule in this profile. Click the Show Details button to view more information about the specific rule created. Click the Delete Rules button to remove the specific entry.
Page 295 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Mask Enter the destination IP address used here. Destination IP Address Select and enter the destination IP address mask used here. Destination IP Address Mask Enter the DSCP value used here. DSCP Select this option to specify that the rule will be applied to ICMP traffic.
Page 296: Adding An Ipv6 Egress Acl Profile
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-58 Egress Access Rule Detail Information (IPv4 ACL) Click the Show All Rules button to navigate back to the Access Rule List. Adding an IPv6 Egress ACL Profile The window shown below is the Add Egress ACL Profile window for IPv6.
Page 297 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select profile based on Ethernet (MAC Address), IPv4 address, or IPv6 address. This Select ACL Type will change the window according to the requirements for the type of profile. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header.
Page 298 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-62 Add Egress Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 500. Access ID (1-500) Auto Assign –...
Page 299: Egress Acl Flow Meter
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual.
Page 300 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 8-64 Egress ACL Flow Meter window The fields that can be configured are described below: Parameter Description Here the user can enter the Profile ID for the flow meter. Profile ID Here the user can enter the Profile Name for the flow meter.
Page 301 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After clicking the View button, the following page will appear: Figure 8-66 Egress ACL Flow meter Display window Click the <<Back button to return to the previous page.
Page 302: Chapter 9 Security
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 9 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) MAC-based Access Control (MAC) Web-based Access Control (WAC) Japanese Web-based Access Control (JWAC) Compound Authentication Port Security ARP Spoofing Prevention Settings BPDU Attack Protection Loopback Detection Settings Traffic Segmentation Settings...
Page 303 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch).
Page 304 Figure 9-6 Authentication Process window The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 305: 802.1X Global Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device that required access to the LAN. The Switch would regard the single physical Port connecting it to the shared media segment as consisting of a number of distinct logical Ports, each logical Port being...
Page 306 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-10 802.1X Port Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be configured. From Port / To Port This allows the user to set the number of seconds that the Switch remains in the quiet QuietPeriod (0-65535) state following a failed authentication exchange with the client.
Page 307: 802.1X User Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide services to the client through the interface. If Auto is selected, it will enable 802.1X and cause the port to begin in the unauthorized state, allowing only EAPOL frames to be sent and received through the port. The authentication process begins when the link state of the port transitions from down to up, or when an EAPOL-start frame is received.
Page 308: Guest Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: The 802.1X User and Password values should be less than 16 characters. Guest VLAN Settings On 802.1X security-enabled networks, there is a need for non- 802.1X supported devices to gain limited access to the network, due to lack of the proper 802.1X software or incompatible devices, such as computers running Windows 98 or older operating systems, or the...
Page 309: Authenticator State
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter the pre-configured VLAN name to create as an 802.1X guest VLAN. VLAN Name Set the ports to be enabled for the 802.1X guest VLAN. Click the All button to select all Port the ports.
Page 310: Authenticator Session Statistics
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-15 Authenticator Statistics – Port-based window Figure 9-16 Authenticator Statistics - MAC-based window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a port to display. Port Click the Apply button to accept the changes made.
Page 311: Authenticator Diagnostics
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-17 Authenticator Session Statistics - Port-based window Figure 9-18 Authenticator Session Statistics - MAC-based window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a port to display.
Page 312: Initialize Port(S)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view this window, click Security > 802.1X > Authenticator Diagnostics as shown below: Figure 9-19 Authenticator Diagnostics - Port-based window Figure 9-20 Authenticator Diagnostics - MAC-based window The fields that can be configured are described below: Parameter Description...
Page 313: Reauthenticate Port(S)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view this window, click Security > 802.1X > Initialize Port(s) as shown below: Figure 9-21 Initialize Port(s) - Port-based window Figure 9-22 Initialize Port(s) - MAC-based window The fields that can be configured are described below: Parameter Description...
Page 314: Radius
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Use the drop-down menus to select a range of ports to re-authenticate. From Port / To Port Select and enter the appropriate MAC address used here. This option is only available MAC Address when the Authentication Mode has been set to MAC-based in the 802.1X Global Settings window.
Page 315: Radius Accounting Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Set the key the same as that of the RADIUS server. Confirm the key the same as that of the RADIUS server. Confirm Key Click the Apply button to accept the changes made. Click the Edit button to re-configure the specified entry.
Page 316 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-27 RADIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be displayed are described below: Parameter Description...
Page 317: Radius Account Client
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide a Request as well as a timeout. The number of RADIUS packets of unknown type which were received from this server UnknownTypes on the authentication port The number of RADIUS packets of which were received from this server on the PacketsDropped authentication port and dropped for some other reason.
Page 318: Ip-Mac-Port Binding (Impb)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide unknown types are not included as malformed accounting responses. The number of RADIUS Accounting-Response packets, which contained invalid BadAuthenticators authenticators, received from this server. The number of RADIUS Accounting-Request packets sent to this server that have not yet PendingRequests timed out or received a response.
Page 319: Impb Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Click the radio buttons to enable or disable the sending of trap/log messages for IP- Trap / Log MAC-port binding. When Enabled, the Switch will send a trap message to the SNMP agent and the Switch log when an ARP/IP packet is received that doesn’t match the IP- MAC-port binding configuration set on the Switch.
Page 320: Impb Entry Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enabled (Strict) - This mode provides a stricter method of control. If the user selects this mode, all packets will be sent to the CPU, thus all packets will not be forwarded by the hardware until the S/W learns the entries for the ports.
Page 321: Mac Block List
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter the IPv4 address to bind to the MAC address set below. IPv4 Address Enter the IPv6 address to bind to the MAC address set below. IPv6 Address Enter the MAC address to bind to the IP Address set above.
Page 322 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-33 DHCP Snooping Max Entry Settings window The fields that can be configured are described below: Parameter Description Here the user can select a range of ports to use. From Port / To Port Enter the maximum entry value.
Page 323: Nd Snooping
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the desired port. Port Specify the ports for DHCP snooping entries. Tick the All Ports check box to select all Ports entries for all ports.
Page 324: Mac-Based Access Control (Mac)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide ND Snooping Entry This window is used to view dynamic entries on specific ports. To view this window, click Security > IP-MAC-Port Binding (IMPB) > ND Snooping > ND Snooping Entry as shown below: Figure 9-36 ND Snooping Entry window The fields that can be configured are described below:...
Page 325 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide based access control feature of the Switch. Please remember, ports enabled for certain other features, listed previously, and cannot be enabled for MAC-based access control. To view the following window, click Security > MAC-based Access Control (MAC) > MAC-based Access Control Settings, as shown below: Figure 9-37 MAC-based Access Control Settings window The fields that can be configured are described below:...
Page 326: Mac-Based Access Control Local Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the button and enter a Guest VLAN ID. VID (1-4094) Enter the list of ports that have been configured for the Guest VLAN. Member Ports Select a range of ports to be configured for MAC-based access control. From Port / To Port Use this drop-down menu to enable or disable MAC-based access control on the port or State...
Page 327: Mac-Based Access Control Authentication State
WAC by attempting to gain Web access. D-Link’s implementation of WAC uses a virtual IP that is exclusively used by the WAC function and is not known by any other modules of the Switch. In fact, to avoid affecting a Switch’s other features, WAC will only use a virtual IP...
Page 328 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide address to communicate with hosts. Thus, all authentication requests must be sent to a virtual IP address but not to the IP address of the Switch’s physical interface. Virtual IP works like this, when a host PC communicates with the WAC Switch through a virtual IP, the virtual IP is transformed into the physical IPIF (IP interface) address of the Switch to make the communication possible.
Page 329: Wac Global Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide 3. If a RADIUS server is to be used for authentication, the user must first establish a RADIUS Server with the appropriate parameters, including the target VLAN, before enabling Web Authentication on the Switch. WAC Global Settings Users can configure the Switch for the Web-based access control function.
Page 330: Wac User Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide WAC User Settings Users can view and set local database user accounts for Web authentication. To view the following window, click Security > Web-based Access Control (WAC) > WAC User Settings, as shown below: Figure 9-44 WAC User Settings window The fields that can be configured are described below:...
Page 331: Wac Authentication State
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-45 WAC Port Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be enabled as WAC ports. From Port / To Port This parameter specifies the time period during which an authenticated host will remain in Aging Time (1-1440)
Page 332: Japanese Web-Based Access Control (Jwac)
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-46 WAC Authentication State window The fields that can be configured are described below: Parameter Description Use the drop-down menus to select the desired range of ports and tick the appropriate Port List check box(s), Authenticated, Authenticating, and Blocked.
Page 333 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-47 JWAC Global Settings window The fields that can be configured are described below: Parameter Description Use this selection menu to either enable or disable JWAC on the Switch. JWAC State This parameter specifies the JWAC Virtual IP address that is used to accept Virtual IP...
Page 334: Jwac Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide either the Quarantine Server or the JWAC Login Page. This parameter specifies the Delay Time before an unauthenticated host is redirected to Redirect Delay Time (0- the Quarantine Server or JWAC Login Page. Enter a value between 0 and 10 seconds. A value of 0 indicates no delay in the redirect.
Page 335: Jwac User Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-48 JWAC Port Settings window The fields that can be configured are described below: Parameter Description Select a range of ports to be enabled as JWAC ports. From Port / To Port Use this drop-down menu to enable the configured ports as JWAC ports.
Page 336: Jwac Authentication State
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-49 JWAC User Settings window The fields that can be configured are described below: Parameter Description Enter a username of up to 15 alphanumeric characters. User Name Enter the password the administrator has chosen for the selected user.
Page 337: Jwac Customize Page Language
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Enter a port or range of ports. Port List Tick this check box to only clear authenticated client hosts. Authenticated Tick this check box to only clear client hosts in the authenticating process. Authenticating Tick this check box to only clear client hosts being temporarily blocked because of the Blocked...
Page 338: Compound Authentication
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-52 JWAC Login window Figure 9-53 JWAC Login window Complete the JWAC authentication information on this window to set the JWAC page settings. Enter a name for the Authentication in the first field and then click the Apply button.
Page 339 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-54 Any (MAC, 802.1X or WAC) Mode window Any (MAC, 802.1X or JWAC) Mode In the diagram below the Switch port has been configured to allow clients to authenticate using 802.1X, MAC, or JWAC.
Page 340 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-56 802.1X & IMPB Mode window IMPB & WAC/JWAC Mode This mode adds an extra layer of security by checking the IP MAC-Binding Port Binding (IMPB) table after trying one of the supported authentication methods.
Page 341: Compound Authentication Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide being sent by authorized hosts have been granted or not. In the above diagram the Switch port has been configured to allow clients to authenticate using MAC. If the client is in the IMPB table and tries to connect to the network using this authentication method and the client is listed in the white list for legal IP/MAC/port checking, access will be granted.
Page 342 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-59 Compound Authentication Settings window The fields that can be configured are described below: Parameter Description Here the user can enable of disable the Authorization Network State. Authorization Attributes State Here the user can configure the authentication server failover function.
Page 343: Compound Authentication Guest Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Toggle between Host Based and Port Based. When Port Based is selected, if one of the Authorized Mode attached hosts passes the authentication, all hosts on the same port will be granted access to the network.
Page 344 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-61 Port Security Settings window The fields that can be configured are described below: Parameter Description Use the radio button to enable or disable Port Security Traps and Log Settings on the Port Security Trap/Log Switch.
Page 345: Port Security Vlan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-62 Port Security Port-VLAN Settings window The fields that can be configured are described below: Parameter Description Select and enter the VLAN name for this configuration here. VLAN Name Select and enter the VLAN ID for this configuration here.
Page 346: Port Security Entries
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Port Security Entries Users can remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view the following window, click Security > Port Security > Port Security Entries, as shown below: Figure 9-64 Port Security Entries window The fields that can be configured are described below: Parameter...
Page 347: Bpdu Attack Protection
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-65 ARP Spoofing Prevention Settings window The fields that can be configured are described below: Parameter Description Here the user can enter the gateway IP address to help prevent ARP Spoofing. Gateway IP Address Here the user can enter the gateway MAC address to help prevent ARP Spoofing.
Page 348: Loopback Detection Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-66 BPDU Attack Protection window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the BPDU Attack Protection state. BPDU Attack Protection State Here the user can specify when a trap will be sent.
Page 349 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide network. The Switch will automatically block the port or the VLAN and send an alert to the administrator. The Loopback Detection port will restart (change to discarding state) when the Loopback Detection Recover Time times out.
Page 350: Traffic Segmentation Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Traffic Segmentation Settings Traffic segmentation is used to limit traffic flow from a single or group of ports, to a group of ports. This method of segmenting the flow of traffic is similar to using VLANs to limit traffic, but is more restrictive. It provides a method of directing traffic that does not increase the overhead of the master switch CPU.
Page 351: Dhcp Server Screening
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Security > NetBIOS Filtering Settings, as shown below: Figure 9-69 NetBIOS Filtering Settings window The fields that can be configured are described below: Parameter Description Here the user can select the appropriate port to include in the NetBIOS filtering...
Page 352: Dhcp Offer Permit Entry Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-70 DHCP Server Screening Port Settings window The fields that can be configured are described below: Parameter Description Enable or disable this feature. Filter DHCP Server Trap Log State Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30 minutes.
Page 353: Access Authentication Control
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-71 DHCP Offer Permit Entry Settings window The fields that can be configured are described below: Parameter Description The IP address of the DHCP server to be permitted. Server IP Address The MAC address of the DHCP client.
Page 354: Enable Admin
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Groups and when a user tries to gain access to the Switch, the Switch will ask the first Authentication Server Hosts for authentication. If no authentication is made, the second server host in the list will be queried, and so on. The built-in Authentication Server Groups can only have hosts that are running the specified protocol.
Page 355: Application Authentication Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-73 Authentication Policy Settings window The fields that can be configured are described below: Parameter Description Use the pull-down menu to enable or disable the Authentication Policy on the Switch. Authentication Policy This field will set the time the Switch will wait for a response of authentication from the Response Timeout (0-...
Page 356: Authentication Server Group Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide users utilizing a previously configured method list. The user may use the default Method List or other Method List configured by the user. See the Enable Method Lists window, in this section, for more information Click the Apply button to accept the changes made.
Page 357: Authentication Server Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-76 Authentication Server Group Settings –Edit Server Group window To add an Authentication Server Host to the list, enter its name in the Group Name field, IP address in the IP Address field, use the drop-down menu to choose the Protocol associated with the IP address of the Authentication Server Host, and then click Add to add this Authentication Server Host to the group.
Page 358: Login Method Lists Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-77 Authentication Server Settings window The fields that can be configured are described below: Parameter Description The IP address of the remote server host to add. IP Address The protocol used by the server host.
Page 359: Enable Method Lists Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Security > Access Authentication Control > Login Method Lists Settings, as shown below: Figure 9-78 Login Method Lists Settings window The fields that can be configured are described below: Parameter Description Enter a method list name defined by the user of up to 15 characters.
Page 360: Local Enable Password Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: To set the Local Enable Password, see the next section, entitled Local Enable Password. To view the following window, click Security > Access Authentication Control > Enable Method Lists Settings, as shown below: Figure 9-79 Enable Method Lists Settings window The fields that can be configured are described below:...
Page 361: Ssl Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-80 Local Enable Password Settings window The fields that can be configured are described below: Parameter Description If a password was previously configured for this entry, enter it here in order to change it to Old Local Enable a new password Password...
Page 362 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The SSL Settings window located on the next page will allow the user to enable SSL on the Switch and implement any one or combination of listed cipher suites on the Switch. A cipher suite is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session.
Page 363: Ssh
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide 128-bit keys and the MD5 Hash Algorithm. Use the radio buttons to enable or disable this RC4_128_MD5 cipher suite. This field is Enabled by default. This cipher suite combines the RSA key exchange, CBC Block Cipher 3DES_EDE RSA with 3DES EDE encryption and the SHA Hash Algorithm.
Page 364: Ssh Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After completing the preceding steps, a SSH Client on a remote PC can be configured to manage the Switch using a secure, in band connection. SSH Settings Users can configure and view settings for the SSH server.
Page 365 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 9-83 SSH Authentication Method and Algorithm Settings window The fields that can be configured for SSH Authentication Mode are described below: Parameter Description This may be enabled or disabled to choose if the administrator wishes to use a locally Password configured password for authentication on the Switch.
Page 366: Ssh User Authentication Lists
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the Apply button to accept the changes made. The fields that can be configured for the Data Integrity Algorithm are described below: Parameter Description Use the check box to enable or disable the HMAC (Hash for Message Authentication HMAC-MD5 Code) mechanism utilizing the MD5 Message Digest encryption algorithm.
Page 367: Trusted Host Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Mode field. Enter the corresponding IP address of the SSH user. This parameter is only used in Host IP conjunction with the Host Based choice in the Auth. Mode field. Click the Edit button to re-configure the specific entry.
Page 368: Safeguard Engine Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enter an IPv4 address to add to the trusted host list. IPv4 Address Here the user can enter a IPv4 Net Mask address to add to the trusted host list. Net Mask Here the user can enter an IPv6 address to add to the trusted host list.
Page 369 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide at 5-second intervals. (First stop = 5 seconds, second stop = 10 seconds, third stop = 20 seconds) Once the flooding is no longer detected, the wait period for dropping ARP and IP broadcast packets will return to 5 seconds and the process will resume.
Page 370: Chapter 10 Network Application
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 10 Network Application DHCP PPPoE Circuit ID Insertion Settings RCP Server Settings SMTP Settings SNTP Flash File System Settings DHCP DHCP Relay DHCP Relay Global Settings Users can enable and configure DHCP Relay Global Settings.
Page 371 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The default is Disabled. Enabled –When this field is toggled to Enabled, the relay agent will insert and remove DHCP relay information (option 82 field) in messages between DHCP servers and clients. When the relay agent receives the DHCP request, it adds the option 82 information, and the IP address of the relay agent (if the relay agent is configured), to the packet.
Page 372: Dhcp Relay Interface Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero. Circuit ID sub-option format: Figure 10-2 Circuit ID sub-option format 1. Sub-option type 2.
Page 373: Dhcp Relay Option 60 Server Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description The IP interface on the Switch that will be connected directly to the client. Interface Enter the IP address of the DHCP server.
Page 374: Dhcp Relay Option 61 Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Network Application > DHCP > DHCP Relay > DHCP Relay Option 60 Settings, as shown below: Figure 10-6 DHCP Relay Option 60 Settings window The fields that can be configured are described below: Parameter Description...
Page 375: Dhcp Server
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-7 DHCP Relay Option 61 Settings window The fields that can be configured are described below: Parameter Description Here the user can select the DHCP Relay Option 61 default action. DHCP Relay Option 61 Default Drop –...
Page 376: Dhcp Server Exclude Address Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Network Application > DHCP > DHCP Server > DHCP Server Global Settings, as shown below: Figure 10-8 DHCP Server Global Settings window The fields that can be configured are described below: Parameter Description...
Page 377 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Network Application > DHCP > DHCP Server > DHCP Server Pool Settings, as shown below: Figure 10-10 DHCP Server Pool Settings window The fields that can be configured are described below: Parameter Description...
Page 378 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-12 DHCP Server Pool Settings –Edit window The fields that can be configured are described below: Parameter Description Here the user can enter the network address of the pool. IP Address Here the user can enter the Netmask for the network address.
Page 379: Dhcp Server Manual Binding
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-13 DHCP Server Class Settings window The fields that can be configured are described below: Parameter Description Click to enable or disable the DHCP server class state. Class State Enter the DHCP server’s class name.
Page 380: Dhcp Server Dynamic Binding
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-15 DHCP Server Manual Binding window The fields that can be configured are described below: Parameter Description Here the user can enter the DHCP Server Pool name. Pool Name IP address which will be assigned to specified client.
Page 381: Dhcp Local Relay Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To view the following window, click Network Application > DHCP > DHCP Server > DHCP Conflict IP, as shown below: Figure 10-17 DHCP Conflict IP window Click the Clear All button to remove all the entries listed in the table. DHCP Local Relay Settings The DHCP local relay settings allows the user to add option 82 into DHCP request packets when the DHCP local relay is enabled in the VLAN which received the DHCP request.
Page 382 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-19 DHCPv6 Relay Global Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the DHCPv6 relay function. DHCPv6 Relay State Enter the number of relay agents that have to be relayed in this message.
Page 383: Dns
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-21 DHCPv6 Relay Settings - View Detail window Click the <<Back button to discard the changes made and return to the previous page. Computer users usually prefer to use text names for computers for which they may want to open a connection. Computers themselves, require 32 bit IP addresses.
Page 384: Dns Relay Static Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-22 DNS Relay Global Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the DNS relay state. DNS Relay State Here the user can enter the primary DNS server IP address.
Page 385: Pppoe Circuit Id Insertion Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide PPPoE Circuit ID Insertion Settings When the setting is enabled, the system will insert the circuit ID tag to the received PPPoE discover and request packet if the tag is absent, and remove the circuit ID tag from the received PPPoE offer and session confirmation packet.
Page 386 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide management of small workgroups or wiring closets, increasing the speed of handling emergency Switch events, and enhancing security by recording questionable events occurring on the Switch. Users can set up the SMTP server for the Switch, along with setting e-mail addresses to which switch log files can be sent when a problem arises on the Switch.
Page 387: Sntp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-26 SMTP Settings window The fields that can be configured are described below: Parameter Description Use the radio button to enable or disable the SMTP service on this device. SMTP State Enter the IP address of the SMTP server on a remote device.
Page 388: Sntp Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide SNTP Settings Users can configure the time settings for the Switch. To view the following window, click Network Application > SNTP > SNTP Settings, as shown below: Figure 10-27 SNTP Settings window The fields that can be configured or displayed are described below: Parameter...
Page 389 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 10-28 Time Zone Settings window The fields that can be configured are described below: Parameter Description Use this pull-down menu to enable or disable the DST Settings. Daylight Saving Time State Use this pull-down menu to specify the amount of time that will constitute your local DST...
Page 390: Flash File System Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Enter the week of the month the DST will end. To: Which Week Of The Month Enter the day of the week that DST will end. To: Day Of Week Enter the month that DST will end.
Page 391 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After clicking the link button, the following page will appear: Figure 10-30 Flash File System Settings window Click the Previous button to return to the previous page. Click the Create Directory to create a new directory within the file system of the switch.
Page 392: Chapter 11 Oam
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 11 Ethernet OAM DULD Settings Cable Diagnostics Connectivity Fault Management (CFM) or Ethernet Connectivity Fault Management is an end-to-end Ethernet layer OAM protocol. CFM is defined by IEEE 802.1ag and includes connectivity monitoring, fault notification and means of isolating faults on large Ethernet metropolitan-area networks (MANs) and WANs.
Page 393 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Maintenance Point A maintenance point in CFM is a point of demarcation on a port within a maintenance domain. Maintenance points filter CFM frames within the boundaries of an MD by dropping frames that do not belong to the correct maintenance level.
Page 394: Cfm Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-1 OAM Domain Architecture • Maintenance Association (MA) – Boundaries of an Administrator’s scope of monitoring part of the network • Maintenance Domain (MD) – A level of monitoring within the hierarchy •...
Page 395 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide This is the control creations of MIPs. None – Don’t create MIPs. This is the default value. Auto – MIPs can always be created on any ports in this MD, if that port is not configured with a MEP of this MD.
Page 396 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-4 CFM MA Settings - Edit window The fields that can be configured are described below: Parameter Description This is the control creation of MIPs. None - Don’t create MIPs. Auto - MIPs can always be created on any ports in this MA, if that port is not configured with a MEP of that MA.
Page 397 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-6 CFM MEP Settings window The fields that can be configured are described below: Parameter Description Enter the MEP name here. It is unique among all MEPs configured on the device. MEP Name Enter the MEP Identifier here.
Page 398 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide After clicking the Edit button, the following page will appear: Figure 11-8 CFM MEP Information – Edit window The fields that can be configured are described below: Parameter Description This is the MEP administrative state.
Page 399: Cfm Port Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-9 CFM Extension AIS window The fields that can be configured are described below: Parameter Description Tick the check box and use the drop-down menu to enable or disable the AIS function. State Tick the check box and use the drop-down menu to select the transmitting interval of AIS Period...
Page 400: Cfm Mipccm Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-11 CFM Port Settings window The fields that can be configured are described below: Parameter Description Here the user can select the port range used for this configuration. From Port / To Port Here the user can enable or disable the state of specific port regarding the CFM State...
Page 401: Cfm Linktrace Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-13 CFM Loopback Settings window The fields that can be configured are described below: Parameter Description Here the user can enter the MEP name. MEP Name Here the user can enter the MEP ID.
Page 402: Cfm Packet Counter
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enter the MEP name. MEP Name Here the user can enter the MEP ID. MEP ID (1-8191) Here the user can enter the maintenance domain name. MD Name Here the user can enter the maintenance association name.
Page 403: Cfm Mp Table
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-16 CFM Fault Table window The fields that can be configured are described below: Parameter Description Here the user can enter the maintenance domain name. MD Name Here the user can enter the maintenance association name.
Page 404: Ethernet Oam Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide The major features of Ethernet OAM are: OAM discovery, link monitoring, remote fault indication and remote loopbacks. Ethernet OAM Settings This window is used to configure the ports Ethernet OAM mode. In Active mode the ports can initiate OAM discovery and start or stop remote loopback.
Page 405: Ethernet Oam Configuration Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Ethernet OAM Configuration Settings On this page the user can configure the Ethernet OAM parameters. To view the following window, click OAM > Ethernet OAM > Ethernet OAM Configuration Settings, as shown below: Figure 11-19 Ethernet OAM Configuration Settings window The fields that can be configured are described below:...
Page 406: Ethernet Oam Event Log
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Specify to enable or disable the event notification. The default state is enable. Notify Click the Apply button to accept the changes made. Ethernet OAM Event Log The page is used to show ports Ethernet OAM event log information.
Page 407: Duld Settings
Click the Clear button to clear all the information entered in the fields. DULD Settings The Switch features a D-Link Unidirectional Link Detection (DULD) module. The unidirectional link detection provides a mechanism that can be used to detect unidirectional link for Ethernet switches whose PHYs do not support unidirectional OAM operation.
Page 408: Cable Diagnostics
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-22 DULD Settings window The fields that can be configured are described below: Parameter Description Select a range of ports you wish to configure. From Port / To Port Use the drop-down menu to enable or disable the selected ports unidirectional link Admin State detection status.
Page 409 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 11-23 Cable Diagnostics window To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test The information will be displayed in this window. NOTE: Cable diagnostic function limitations: Cable length detection is only supported on GE ports.
Page 410: Chapter 12 Monitoring
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Chapter 12 Monitoring Utilization Statistics Mirror sFlow Ping Test Trace Route Device Environment NOTE: The real time monitoring engine requires the JAVA runtime v1.6 or above platform. Please download the software from http://www.java.com/getjava Utilization...
Page 411: Dram & Flash Utilization
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide value is one second. Select number of times the Switch will be polled between 20 and 200. The default value is Record Number 200. Check whether or not to display Five Seconds, One Minute, and Five Minutes. Show/Hide Click the Apply button to accept the changes made.
Page 412: Statistics
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. The fields that can be configured are described below: Parameter Description...
Page 413 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-4 Received (RX) window Click the View Table link to display the information in a table rather than a line graph. Figure 12-5 RX Packets Analysis Table window The fields that can be configured or displayed are described below:...
Page 414 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second.
Page 415 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the View Table link to display the information in a table rather than a line graph. Figure 12-7 RX Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured or displayed are described below: Parameter Description...
Page 416 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-8 Transmitted (TX) window Click the View Table link to display the information in a table rather than a line graph. Figure 12-9 TX Packets Analysis window (table for Bytes and Packets) The fields that can be configured or displayed are described below:...
Page 417 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second.
Page 418 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-10 Received (RX) window Click the View Table link to display the information in a table rather than a line graph. Figure 12-11 Received(RX) Table – View Table window The fields that can be configured or displayed are described below: Parameter Description...
Page 419 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second. Select number of times the Switch will be polled between 20 and 200. The default value is Record Number 200.
Page 420 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-12 Transmitted (TX) window Click the View Table link to display the information in a table rather than a line graph. Figure 12-13 Transmitted (TX) –View Table window The fields that can be configured or displayed are described below:...
Page 421: Packet Size
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second.
Page 422 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Click the View Table link to display the information in a table rather than a line graph. Figure 12-15 Packet Size – View Table window The fields that can be configured or displayed are described below: Parameter Description Use the drop-down menu to choose the port that will display statistics.
Page 423: Vlan Counter Statistics
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide VLAN Counter Statistics On this page the user can view VLAN counter statistics. To view the following window, click Monitoring > Statistics > VLAN Counter Statistics, as shown below: Figure 12-16 VLAN Counter Statistics window The fields that can be configured are described below: Parameter...
Page 424 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-17 Historical Counter window The fields that can be configured are described below: Parameter Description Here the user can select the appropriate port to view. Port Selecting this option will display a frame count based on the packets send and received.
Page 425: Mirror
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-18 Historical Utilization – CPU window Click the Find button to locate a specific entry based on the information entered. Figure 12-19 Historical Utilization – Memory window Click the Find button to locate a specific entry based on the information entered.
Page 426: Rspan Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-20 Port Mirror Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the Port Mirroring feature. State Here the user can select the Target Port used for Port Mirroring.
Page 427: Sflow
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-21 RSPAN Settings window The fields that can be configured are described below: Parameter Description Here the user can enable or disable the RSPAN feature. RSPAN State Create the RSPAN VLAN by VLAN name.
Page 428: Sflow Global Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide sFlow Global Settings Here the user can enable or disable the sFlow feature. To view the following window, click Monitoring > sFlow > sFlow Global Settings, as shown below: Figure 12-23 sFlow Global Settings window The fields that can be configured are described below: Parameter...
Page 429: Sflow Flow Sampler Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description The analyzer server ID specifies the ID of a server analyzer where the packet will be Analyzer Server ID forwarded. The entity making use of this sFlow analyzer server. When owner is set or modified, the Owner Name timeout value will become 400 automatically.
Page 430: Sflow Counter Poller Settings
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide encapsulated and forwarded to the server. If not specified, the default value is 128. 256) Click the Apply button to accept the changes made. Click the Delete All button to remove all the entries listed. Click the Edit button to re-configure the specific entry.
Page 431 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-27 Ping Test window The user may click the Infinite times radio button, in the Repeat Pinging for field, which will tell the ping program to keep sending ICMP Echo packets to the specified IP address until the program is stopped.
Page 432: Trace Route
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 12-28 Ping Test – Result window Click the Stop button to halt the Ping Test Click the Resume button to resume the Ping Test Trace Route The trace route page allows the user to trace a route between the switch and a given host on the network.
Page 433: Device Environment
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide 1 to 65535 seconds can be specified. The default is 5 seconds. The number of probing. The range is from 1 to 9. If unspecified, the default value is 1. Probe (1-9) Click the Start button to initiate the Trace Route After clicking the Start button, the following page will appear:...
Page 434: Chapter 13 Save And Tools
Select All from the Type field and click Apply. Figure 13-3 Save – All window License Management This window is used to install and display D-Link License Management System (DLMS) activation code. To view this window, click Tools > License Management, as shown below.
Page 435: Download Firmware
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-4 License Management window The fields that can be configured are described below: Parameter Description Enter an activation code. Activation Code Click the Install button to install the DLMS activation code. Download Firmware The following window is used to download firmware for the Switch.
Page 436: Download Firmware From Http
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-6 Download Firmware From TFTP window The fields that can be configured are described below: Parameter Description Here the user can enter the FTP Server IP Address used. FTP Server IP Here the user can enter the appropriate Username used.
Page 437: Download Firmware From Rcp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Download Firmware From RCP This page allows the user to download firmware from a RCP Server to the Switch and updates the switch. Figure 13-8 Download Firmware From RCP window The fields that can be configured are described below: Parameter Description...
Page 438: Upload Firmware To Ftp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enter the TFTP Server IP Address used. The user can select IPv4 to TFTP Server IP input an IPv4 address or select IPv6 to input an IPv6 address in the space provided. Here the user can enter the location and name of the Destination File.
Page 439: Download Configuration
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-11 Upload Firmware To RCP window The fields that can be configured are described below: Parameter Description Here the user can enter the RCP Server IP Address used. RCP Server IP Here the user can enter the appropriate Username used.
Page 440: Download Configuration From Ftp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Here the user can enter the location and name of the Destination File. Destination File Here the user can enter the location and name of the Source File. Source File Click Download to initiate the download.
Page 441: Download Configuration From Rcp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-14 Download Configuration From HTTP window The fields that can be configured are described below: Parameter Description Here the user can enter the location and name of the Destination File. Destination File Here the user can enter the location and name of the Source File.
Page 442: Upload Configuration
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Upload Configuration The following window is used to upload the configuration file from the Switch. To view the following window, click Tools > Upload Configuration, as shown below: Upload Configuration To TFTP This page allows the user to upload the configuration file from the Switch to a TFTP Server.
Page 443: Upload Configuration To Http
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-17 Upload Configuration To FTP window The fields that can be configured are described below: Parameter Description Here the user can enter the FTP Server IP Address used. FTP Server IP Here the user can enter the appropriate Username used.
Page 444: Upload Configuration To Rcp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enter the location and name of the Destination File. Destination File Click Upload to initiate the upload. Upload Configuration To RCP This page allows the user to upload the configuration file from the Switch to a RCP Server.
Page 445: Upload Log To Ftp
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-20 Upload Log To TFTP window The fields that can be configured are described below: Parameter Description Here the user can enter the TFTP Server IP Address used. The user can select IPv4 to TFTP Server IP input an IPv4 address or select IPv6 to input an IPv6 address in the space provided.
Page 446: Upload Log To Http
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Here the user can enter the appropriate Password used. Password Here the user can enter the TCP Port number used. TCP Port Here the user can enter the location and name of the Destination File. Destination File Here the user can select the type of log to be transferred.
Page 447: Reset
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameter Description Here the user can enter the RCP Server IP Address used. RCP Server IP Here the user can enter the appropriate Username used. User Name Here the user can enter the location and name of the Destination File.
Page 448 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 13-25 Reboot System window Selecting the Yes radio button will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Selecting the No radio button instructs the Switch not to save the current configuration before restarting the Switch. All of the configuration information entered from the last time Save Changes was executed will be lost.
Page 449: Appendix A Mitigating Arp Spoofing Attacks Using Packet Content Acl
IP address is known. However, this protocol is vulnerable because crackers can spoof the IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link’s switches to thwart ARP spoofing attacks.
Page 450 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 3 - Ethernet Frame Format When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port into its Forwarding Table. Figure 4 –...
Page 451 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Figure 6 - ARP Payload When PC B replies to the query, the “Destination Address” in the Ethernet frame will be changed to PC A’s MAC address. The “Source Address” will be changed to PC B’s MAC address (see Figure 7). Figure 7 - Ethernet Frame Format The switch will also examine the “Source Address”...
Page 452: How Arp Spoofing Attacks A Network
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide How ARP Spoofing Attacks a Network ARP spoofing, also known as ARP poisoning, is a method to attack an Ethernet network which may allow an attacker to sniff data frames on a LAN, modify the traffic, or stop the traffic altogether (known as a Denial of Service – DoS attack).
Page 453: Prevent Arp Spoofing Using Packet Content Acl
As can be seen in Figure 12 all traffic will be then sniffed by the hacker but the users will not discover. Prevent ARP Spoofing using Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL. Figure 13 – Network with Packet Content ACL...
Page 454 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide For the reason that basic ACL can only filter ARP packets based on packet type, VLAN ID, Source, and Destination MAC information, there is a need for further inspections of ARP packets. To prevent ARP spoofing attack, we will demonstrate here via using Packet Content ACL on the Switch to block the invalid ARP packets which contain faked gateway’s MAC and IP binding.
Page 455 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Command Description Create access profile 1 to match Ethernet Type and Step 1: create access_profile_id 1 Source MAC address. profile_name 1 ethernet source_mac FF-FF-FF-FF-FF-FF ethernet_type Configure access profile 1 Step 2: config access_profile profile_id 1 add access_id 1 ethernet source_mac...
Page 456: Appendix B Password Recovery Procedure
This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.
Page 457: Appendix C System Log Entries
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Log Description Severity Note...
Page 458 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide exceedType: indicate exceed threshold or recover to normal event, the value should be “recovered from” or “exceeded” thesholdSubType: the DDM threshold sub type, the value should be “high” or “low”.
Page 459 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide (Username: <username>, IP: <ipaddr>, MAC: <macaddr>) Parameters description: session: The user’s session. Username: Represent current login user. Ipaddr: Represent client IP address. macaddr : Represent client MAC address. Event description: Configuration download was unsuccessful.
Page 460 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Event description: Firmware applied successfully Informational Log Message: Firmware applied successfully (Username: <username>, IP <ipaddr>) Parameters description: username: user name. ipaddr : RCP server address. Event description: Firmware apply fail Warning Log Message: Firmware apply fail ! (Username: <username>, IP <ipaddr>) Parameters description:...
Page 461 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide username: user name. ipaddr : RCP server address. Event description: Topology changed. Informational MSTP Debug Log Message: Topology changed [( [Instance:<InstanceID> ] ,port:<portNum> Enhancement [,MAC: <macaddr>])] Parameters description: InstanceID: Instance ID.
Page 462 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide port:<portNum>)] <old_role> -> <new_role> Parameters description: InstanceID: Instance ID. portNum:Port ID old_role: Old role new_status:New role Event description: Signal failure detected Notice ERPS Log Message: Signal fail detected on node <macaddr> Parameters description: macaddr: The system MAC of the node Event description: Signal failure cleared...
Page 463 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide >, chassis id: < chassisType>, <chassisID>, port id: < portType>, <portID>, device class: <deviceClass>) Parameters description: portNum: The port number. chassisType: chassis ID subtype. Value list: 1. chassisComponent(1) 2.
Page 464 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameters description: portNum : The port number. macaddr: Voice device MAC address Event description: When a port which is in auto voice VLAN mode joins the Informational voice VLAN Log Message: Port <...
Page 465 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameters description: username: The user that being authenticated. portNum: The port number. macaddr: the MAC address of authenticated device. Event description: Successful login through a session. Informational The IP parameter not for AAA and SSH Log Message: Successful login through <Console | Telnet | Web | Web(SSL) |...
Page 466 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide local: enable admin by AAA local method. none: enable admin by AAA none method. server: enable admin by AAA server method. ipaddr: IP address. ipv6address: IPv6 address. username: user name.
Page 467 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide [<ipaddr> | <ipv6addr>]], MAC :< macaddr >, Port <portNum >). Parameters description: ipaddr: IP address ipv6addr: IPv6 address macaddr: MAC address portNum : The port number Event description: Dynamic IMPB entry conflicts with static NDP Warning Log Message: Dynamic IMPB entry conflicts with static NDP (IP: [<...
Page 468 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide portNum: The port number. Event Description: Port recovered from LBD blocked state under port-based Informational mode. Log Message: Port< portNum> LBD port recovered. Loop detection restarted Parameters Description: portNum: The port number.
Page 469 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide macaddr: MAC address portNum : The port number intf-name: Interface name Event description: Detected untrusted DHCP server IP address. Informational DHCP Server Log Message: Detected untrusted DHCP server(IP: <ipaddr>, Screening Port <portNum>...
Page 470 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Parameters description: vr-id: VRRP virtual router ID. intf-name: Interface name on which virtual router is based. Event description: One virtual router state becomes Init. Informational Log Message: VR <vr-id> at interface <intf-name> switch to Init. Parameters description: vr-id: VRRP virtual router ID.
Page 471 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide vrrp-errcode: Errcode of VRRP protocol behavior. Event description: Failed when deleting a virtual MAC from switch chip L2 table. Error Log Message: Failed to delete virtual MAC <vrrp-mac-addr> from chip L2 table. Errcode <vrrp-errcode>.
Page 472 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide portNum: Represents the logical port number of the MEP. mepdirection: Represents the direction of the MEP. This can be "inward" or "outward". mepid: Represents the MEPID of the MEP. Event description: LCK condition detected Notice Log Message: [CFM_EXT(3):]LCK condition detected.
Page 473 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide portNum: The port number. Username: The user that is being authenticated. Event description: Failed to assign ACL profiles/rules from RADIUS server. Warning Log Message: RADIUS server <ipaddr> assigns <username> ACL failure at port <portNum>...
Page 474: Appendix D Trap Entries
® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Appendix D Trap Entries This table lists the trap logs found on the Switch. Category Trap Name Description Note coldStart/1.3.6.1.6.3.1.1.5.1 A coldStart trap signifies that the SNMP entity, supporting a notification (RFC1907 SNMP originator application, is reinitializing itself and that its configuration may...
Page 475 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide (1)alarmIndex, (2)alarmVariable (3)alarmSampleType, (4)alarmValue, (5)alarmFallingThreshold lldpRemTablesChange/1.0.8802.1.1.2 A lldpRemTablesChange notification is sent when the value of LLDP .0.0.1 lldpStatsRemTableLastChangeTime changes. It can be utilized by an (lldp.mib) NMS to trigger LLDP remote systems table maintenance polls. Binding objects：...
Page 476 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide Trap/ /1.3.6.1.4.1.171.12.23.5.0.1 predefined port security configuration, a trap will be sent out. Binding objects: swIpMacBindingPortIndex swIpMacBindingViolationIP swIpMacBindingViolationMac swIpMacBindingIPv6ViolationTrap/ When the IP-MAC Binding trap is enabled, if there's a new MAC that 1.3.6.1.4.1.171.12.23.5.0.4 violates the pre-defined IPv6 IMPB configuration, a trap will be sent out.
Page 477 ® xStack DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide (1) dot1agCfmMdIndex (2) dot1agCfmMaIndex (3) dot1agCfmMepIdentifier swCFMExtLockOccurred A notification is generated when local MEP enters lock status. / 1.3.6.1.4.1.171.12.86.100.0.3 Binding objects: (1) dot1agCfmMdIndex (2) dot1agCfmMaIndex (3) dot1agCfmMepIdentifier swCFMExtLockCleared A notification is generated when local MEP exits lock status.

D-Link xstack DES-3810 series Reference Manual

Chapter 1 Web-Based Switch Configuration

Chapter 2 System Configuration

Chapter 3 Management

Chapter 4 VPN (EI Mode Only)

Chapter 5 L2 Features

Chapter 6 L3 Features

Chapter 7 Qos

Chapter 8 ACL

Chapter 9 Security

Quick Links

Related Manuals for D-Link xstack DES-3810 series

Summary of Contents for D-Link xstack DES-3810 series