Page 2: Table Of Contents
Installing the Device ........................18 Connecting the Device ........................21 Initial Configuration ....................... 22 Getting Started........................37 Starting the D-Link Embedded Web Interface................38 Understanding the D-Link Embedded Web Interface..............40 Using Screen and Table Options ....................43 Resetting the Device ........................45 Logging Off from the Device ......................
Page 3 Switching the Stacking Master ...................... 68 Configuring Ports ........................71 Aggregating Ports ......................... 75 Configuring LACP.......................... 76 LAG Membership........................... 78 Configuring VLANs ....................... 79 Defining VLAN Properties......................80 Defining VLAN Membership ......................82 Defining the Forwarding Database ..................85 Defining Static Forwarding Database Entries ................86 Defining Dynamic Forwarding Database Entries ................
Page 4 DES-3228PA Embedded Web System User Guide Defining General QoS Settings ....................169 Configuring QoS Mapping......................174 Configuring Basic Mode ......................176 Configuring SNMP ......................179 SNMP v1 and v2c ........................179 SNMP v3 ............................. 179 Configuring SNMP Security ......................180 Configuring SNMP Notifications....................
Page 5 Page 4...
Page 6: Preface
Interface web pages are easy-to-use and easy-to-navigate. In addition, The D-Link Embedded Web Interface pro- vides real time graphs and RMON statistics to help system administrators monitor network performance. This preface provides an overview to the D-Link Embedded Interface User Guide, and includes the following sec- tions: •...
Page 7: Using The Installation Guide
Section 3. Initial Configuration — Provides step-by-step instructions for the initial device configuration. Using the Embedded Web Interface User Guide This section provides an overview to the D-Link Web System Interface User Guide. The D-Link Web System Inter- face User Guide provides the following sections: •...
Page 8: Intended Audience
DES-3228PA Embedded Web System User Guide • Section 20. Managing Device Diagnostics — Provides information about configuring port mirroring, testing copper and fiber cables, and viewing device health information. • Section 21. Viewing Statistics — Provides information about viewing device statistics, including RMON sta- tistics, device history events, and port and LAG utilization statistics.
Page 9: Viewing The Device
Device Description Viewing the Device Section 1. Device Description This section contains a description of the D-Link DES-3228PA and contains the following topics: • Viewing the Device • Ports Description • Cable Specifications • LED Definitions • Cable, Port, and Pinout Information •...
Page 10: Back Panel
DES-3228PA Embedded Web System User Guide • 2 Copper 100BASE-T/1000BASE-T ports — RJ-45 TX auto-sensing switching ports designated as ports Ports 25 and 26, which are also Combo ports. • 2 1000Base-T stacking ports — Two RJ-45 stacking ports designated as ports Ports 27 and 28. •...
Page 11: Device Description
Device Description Ports Description Figure 3: Inserting a GBIC into the Device 1000Base-T Stacking Ports Copper stacking ports that support 1000Base-T standard. Stacking Ports The device provides two stacking HyperG.Link interface ports. One stacking port provides an Up connection, while the second provides a Down stacking connection.
Page 12: Cable Specifications
DES-3228PA Embedded Web System User Guide Cable Specifications The following table contains the various cable specification for the DES-3228PA: Table 1: DES- 3228PA Cable Specifications Cab le Typ e D escr ip tio n 10/100Base-T UTP CAT-3/4/5 (100 meters maximum) UTP Cat.
Page 13 Device Description LED Definitions The RJ-45 ports have three LEDs, one for speed, one for Link /activity and one for PoE. The LED indications are described in the following table: Table 2: DES - 3228PA Fast Ethernet RJ-45 Port LED Indications Por t Des criptio n L ED In dica tio n D escr ip tio n...
Page 14: System Leds
DES-3228PA Embedded Web System User Guide System LEDs The DES-3228PA system LEDs located on the left side of the device. The following figure illustrates the DES- 3228PA system LEDs. Figure 5: DES-3228PA System LEDs The LED indications are described in the following table: Table 5: System LEDs LED Des cription...
Page 15: Cable, Port, And Pinout Information
Device Description Cable, Port, and Pinout Information Cable, Port, and Pinout Information This section describes the devices physical interfaces and provides information about cable connections. Stations are connected to the device ports through the physical interface ports on the front panel. For each station, the appropriate mode (Half/Full Duplex, Auto Negotiation) is set.
Page 16 DES-3228PA Embedded Web System User Guide Page 15...
Page 17: Installation Precautions
Mounting Device Preparing for Installation Section 2. Mounting Device This section contains information for installing the device, and includes the following sections: • Preparing for Installation • Installing the Device • Connecting the Device • Rack Installation Preparing for Installation This section provides an explanation for preparing the installation site, and includes the following topics: •...
Page 18: Site Requirements
Carefully remove the device from the container and place it on a secure and clean surface. Remove all the packaging material. Inspect the product for damage. Report any damage immediately. If any item is found missing or damaged, please contact your local D-Link reseller for replacement. Page 17...
Page 19: Mounting Device
Mounting Device Installing the Device Installing the Device The device can be installed on a flat surface or mounted in a rack. This section includes the following topics: • Desktop or Shelf Installation • Rack Installation Desktop or Shelf Installation When installing the switch on a desktop or shelf, the rubber feet included with the device should first be attached.
Page 20: Rack Installation
DES-3228PA Embedded Web System User Guide Rack Installation The device can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, the device the mounting brackets must first be attached on the devices’s sides. Notes •...
Page 21: Installing The Device
Mounting Device Installing the Device Figure 9: Mounting Device in a Rack Secure the unit to the rack with the rack screws (not provided). Fasten the lower pair of screws before the upper pair of screws. This ensures that the weight of the unit is evenly distributed during installation. Ensure that the ventilation holes are not obstructed.
Page 22: Connecting The Device
DES-3228PA Embedded Web System User Guide Connecting the Device This section describes how to connect the device, and includes the following sections: • Connecting the Switch to a Terminal • AC Power Connection Connecting the Switch to a Terminal The device is connected to a terminal through an console port on the front panel, which enables a connection to a terminal desktop system running terminal emulation software for monitoring and configuring the device.
Page 23 Initial Configuration Section 3. Initial Configuration This section describes the initial device configuration and includes the following topics: • General Configuration Information • Booting the Switch • Configuration Overview • Advanced Configuration • Software Download and Reboot • Startup Menu Functions After completing all external connections, connect a terminal to the device to monitor the boot and other proce- dures.
Page 24: Booting The Switch
DES-3228PA Embedded Web System User Guide Device Port Default Settings The following table describes the device port default settings. Table 5: Device Port Defaults Function Default Settings Port speed and mode 100M Auto-negotiation Copper/Fiber GE 1000M Port forwarding state Enabled Head of line blocking prevention On (Enabled) Flow Control...
Page 25: Initial Configuration
Initial Configuration As the switch boots, the bootup test first counts the device memory availability and then continues to boot. The fol- lowing screen is an example of the displayed POST. ------ Performing the Power-On Self Test (POST) ------ UART Channel Loopback Test......PASS Testing the System SDRAM......PASS Boot1 Checksum Test.......PASS Boot2 Checksum Test.......PASS...
Page 26 DES-3228PA Embedded Web System User Guide Note The following screen is an example configuration.Items such as addresses, versions, and dates may differ for each device. Preparing to decompress... Decompressing SW from image-1 638000 Running from RAM... ********************************************************************* *** Running SW Ver. x.x.x.x Date 11-Jan-200x Time 15:43:13 *** ********************************************************************* HW version is Base Mac address is: 00:00:b0:24:11:80...
Page 27: Configuration Overview
Initial Configuration After the switch boots successfully, a system prompt appears (console>) and the local terminal can be used to begin configuring the switch. However, before configuring the switch, ensure that the software version installed on the device is the latest version. If it is not the latest version, download and install the latest version. See "Software Download and Reboot."...
Page 28 DES-3228PA Embedded Web System User Guide Note 100.1.1.33 is the IP address of the next hop that can be used to reach the management network 192.168.2.0. Console# show ip interface Proxy ARP is disabled IP Address Type Directed Broadcast 100.1.1.1/24 vlan 1 static disable...
Page 29 Initial Configuration Note The device switch is delivered with no community strings configured. The following screen displays the default device configuration: Console(config)# show snmp Community-String Community-Access IP address ---------------- ---------------- ---------- System Contact: System Location: The community-string, community-access, and IP address can be configured through the local terminal during the initial configuration procedure.
Page 30: Advanced Configuration
DES-3228PA Embedded Web System User Guide Console# configure Config(config)# rw 11.1.1.2 router snmp-server community private type Config(config)# exit Console(config)# show snmp Community-String Community-Access IP address ---------------- ---------------- ---------- private readWrite 11.1.1.2 Traps are enabled. Authentication-failure trap is enabled. Trap-Rec-Address Trap-Rec-Community Version ---------------- ------------------...
Page 31 Initial Configuration – Assigning Dynamic IP Addresses: console# configure console(config)# interface ethernet console(config-if)# <string> ip address dhcp hostname console(config-if)# exit console(config)# The interface receives the IP address automatically. To verify the IP address, enter the show ip interface command at the system prompt as shown in the following example.
Page 32: Security Management And Password Configuration
DES-3228PA Embedded Web System User Guide Note When the device reboot begins, any input at the ASCII terminal or keyboard automatically cancels the BOOTP process before completion and the device does not receive an IP address from the BOOTP server. The following example illustrates the process: Console>...
Page 33: Configuring An Initial Console Password
Initial Configuration Configuring an Initial Console Password To configure an initial console password, enter the following commands: Console(config)# aaa authentication login default line Console(config)# aaa authentication enable default line Console(config)# line console Console(config-line)# login authentication default Console(config-line)# enable authentication default Console(config-line)# george password...
Page 34: Configuring An Initial Https Password
DES-3228PA Embedded Web System User Guide Configuring an initial HTTPS Password To configure an initial HTTPS password, enter the following commands: Console(config)# ip https authentication local Console(config)# admin user1 username password level Enter the following commands once when configuring to use a console, a Telnet, or an SSH session in order to use an HTTPS session.
Page 35 Initial Configuration Software Download Through TFTP Server This section contains instructions for downloading device software (system and boot images) through a TFTP server. The TFTP server must be configured before downloading the software. The switch boots and runs when decompressing the system image from the flash memory area where a copy of the system image is stored.
Page 36: Boot Image Download
DES-3228PA Embedded Web System User Guide Enter the command reload. The following message is displayed: Console# reload This command will reset the whole system and disconnect your current session.Do you want to continue (y/n)[n]? Enter “Y” to reboot the switch. Boot Image Download Loading a new boot image from the TFTP server and programming it into the flash updates the boot image.
Page 37 Initial Configuration The Startup menu is displayed and contains the following configuration functions: [1]Download Software [2]Erase Flash File [3]Erase Flash Sectors [4]Password Recovery Procedure [5]Enter Diagnostic Mode [6]Back Enter your choice or press 'ESC' to exit: The following sections describe the Startup menu options. If no selection is made within 25 seconds (default), the switch times out and the device continues to load normally.
Page 38 DES-3228PA Embedded Web System User Guide The following message is displayed. Write Flash file name (Up to 8 characters, Enter for none.):config File config (if present) will be erased after system initialization ========Press Enter To Continue ======== Enter as the name of the flash file. The configuration is erased and the device reboots. config Perform the switch’s initial configuration.
Page 39 Initial Configuration Page 38...
Page 40: Getting Started
DES-3228PA Embedded Web System User Guide Section 4. Getting Started This section provides an introduction to the user interface, and includes the following topics: • Starting the D-Link Embedded Web Interface • Understanding the D-Link Embedded Web Interface • Using Screen and Table Options •...
Page 41: Starting The D-Link Embedded Web Interface
Notes • Disable the popup blocker before beginning device configuration using the EWS. This section contains information on starting the D-Link Embedded Web interface. To access the D-Link user interface: Open an Internet browser. Ensure that pop-up blockers are disabled. If pop-up blockers are enable, edit, add, and device information messages may not open.
Page 42 DES-3228PA Embedded Web System User Guide Figure 11: D-Link Embedded Web Interface Home Page Page 39...
Page 43: Understanding The D-Link Embedded Web Interface
Understanding the D-Link Embedded Web Interface Understanding the D-Link Embedded Web Interface The D-Link Embedded Web Interface Home Page contains the following views: • Port LED Indicators — Located at the top of the home page, the port LED indicators provide a visual repre- sentation of the ports on the D-Link front panel.
Page 44: Device Representation
EWS. This section provides the following additional information: • Device Representation — Provides an explanation of the D-Link user interface buttons, including both man- agement buttons and task icons. • Using the D-Link Embedded Web Interface Management Buttons — Provides instructions for adding, modifying, and deleting configuration parameters.
Page 45 Getting Started Understanding the D-Link Embedded Web Interface Using the D-Link Embedded Web Interface Management Buttons Configuration Management buttons and icons provide an easy method of configuring device information, and include the following: Table 7: D-Link Web Interface Configuration Buttons...
Page 46: Using Screen And Table Options
• Deleting Configuration Information Adding Configuration Information User-defined information can be added to specific D-Link Web Interface pages, by opening a new Add page. To add information to tables or D-Link Web Interface pages: Open an D-Link Web Interface page.
Page 47: Deleting Configuration Information
Modify the fields. Click . The fields are modified, and the information is saved to the device. Deleting Configuration Information Open The D-Link Embedded Web Interface page. Select a table row. Select the Remove checkbox. Click . The information is deleted, and the device is updated.
Page 48: Resetting The Device
DES-3228PA Embedded Web System User Guide Resetting the Device The Reset page enables resetting the device from a remote location. Note To prevent the current configuration from being lost, save all changes from the running configuration file to the startup configuration file before resetting the device. For instructions, see Copying Files. To reset the device: Click System >...
Page 49: Logging Off From The Device
Getting Started Logging Off from the Device Logging Off from the Device Click . The Logout Page opens. Figure 18: Logout Page Click . The D-Link Embedded Web Interface Home Page closes. Page 46...
Page 50: Managing Device Information
DES-3228PA Embedded Web System User Guide Section 5. Managing Device Information This section contains information for setting general system information, and includes the following sections: • Defining the System Description • Configuring System Time Defining the System Description The System Description Page contains parameters for configuring general device information, including the sys- tem name, location, and contact, the system MAC Address, System Object ID, System Up Time, System IP and MAC addresses, and both software and hardware versions.
Page 51 Managing Device Information • Base MAC Address — Displays the device MAC address. • Hardware Version — Displays the installed device hardware version number. • Software Version — Displays the installed software version number. • Boot Version — Displays the current boot version running on the device. Page 48...
Page 52: Configuring System Time
DES-3228PA Embedded Web System User Guide Configuring System Time This section provides information for configuring system time parameters, including: • Configuring Daylight Savings Time Page 49...
Page 53: Configuring Daylight Savings Time
Managing Device Information Configuring Daylight Savings Time Configuring Daylight Savings Time The Time Page contains fields for defining system time parameters for both the local hardware clock and the external SNTP clock. If the system time is kept using an external SNTP clock, and the external SNTP clock fails, the system time reverts to the local hardware clock.
Page 54 DES-3228PA Embedded Web System User Guide • Mexico — From the first Sunday in April at 02:00 to the last Sunday in October at 02:00. • Moldova — From the last weekend of March until the last weekend of October. •...
Page 55 Managing Device Information Configuring Daylight Savings Time Figure 20: Time Page The Time Page contains the following sections: • Clock Source — The source used to set the system clock. The possible field values are: – None — Indicates that a clock source is not used. The clock is set locally. –...
Page 56 DES-3228PA Embedded Web System User Guide – Month — The month of the year in which DST begins. The possible field range is Jan-Dec. – Year — The year in which the configured DST begins. – Time — The time at which DST begins. The field format is HH:MM. For example: 05:30. •...
Page 57: Resetting The Device
Managing Device Information Resetting the Device Resetting the Device The Reboot Page enables resetting the device from a remote location. To prevent the current configuration from being lost, save all changes from the running configuration file to the startup configuration file before resetting the device. For instructions, see Copying Files. To reset the device: Click System >...
Page 58: Configuring Sntp
DES-3228PA Embedded Web System User Guide Configuring SNTP The device supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The device operates only as an SNTP client, and cannot provide time services to other systems. The device can poll the following server types for the server time: •...
Page 59 Managing Device Information Configuring SNTP This section contains the following topics: ² Defining SNTP Global Settings ² Defining SNTP Authentication ² Defining SNTP Servers • Defining SNTP Interface Settings Page 56...
Page 60: Defining Sntp Global Settings
DES-3228PA Embedded Web System User Guide Defining SNTP Global Settings The SNTP Properties Page provides information for defining SNTP parameters globally. To define SNTP global parameters: Click System > SNTP > Properties. The SNTP Properties Page opens: Figure 22: SNTP Properties Page The SNTP Properties Page contains the following fields: •...
Page 61 Managing Device Information Defining SNTP Global Settings Define the Poll Interval, Enable Receive Broadcast Servers Update, Enable Receive Anycast Servers Update, Enable Receive Unicast Servers Update, and Enable Poll Unicast Servers fields and select at least one of the Enable fields. Click .
Page 62: Defining Sntp Authentication
DES-3228PA Embedded Web System User Guide Defining SNTP Authentication The SNTP Authentication Page provides parameters for defining the means by which the SNTP server is authen- ticated. To define SNTP authentication: Click System > SNTP > Authentication. The SNTP Authentication Page opens: Figure 23: SNTP Authentication Page The SNTP Authentication Page contains the following fields:...
Page 63 Managing Device Information Defining SNTP Authentication To define SNTP authentication parameters: Click . The Add SNTP Authentication page opens: Figure 24: Add SNTP Authentication Define the Encryption Key ID, Authentication Key, and Trusted Key fields. Click . The SNTP Authentication Key is added, and the device is updated. Page 60...
Page 64: Defining Sntp Servers
DES-3228PA Embedded Web System User Guide Defining SNTP Servers The SNTP Servers Page contains information for enabling SNTP servers, as well as adding new SNTP servers. In addition, the SNTP Servers Page enables the device to request and accept SNTP traffic from a server. To define an SNTP server: Click System >...
Page 65 Managing Device Information Defining SNTP Servers Figure 26: Add SNTP Server Page Define the SNTP Server, Enable Poll Interval, and Encryption Key ID fields. Click . The SNTP Server is added, and the device is updated. Page 62...
Page 66: Defining Sntp Interface Settings
DES-3228PA Embedded Web System User Guide Defining SNTP Interface Settings The SNTP Interface Settings Page contains fields for setting SNTP on different interfaces. To define SNTP inter- face settings: Click System > SNTP > Interface Settings. The SNTP Interface Settings Page opens: Figure 27: SNTP Interface Settings Page The SNTP Interface Settings Page contains the following fields:...
Page 67 Managing Device Information Defining SNTP Interface Settings Figure 28: Add SNTP Interface Page Define the Interface and Receive Server Updates fields. Click . The SNTP interface is added, and the device is updated. Page 64...
Page 68: Managing Stacking
DES-3228PA Embedded Web System User Guide Section 6. Managing Stacking Stacking provides multiple switch management through a single point as if all stack members are a single unit. All stack members are accessed through a single IP address through which the stack is managed. The stack is can be managed from the following: •...
Page 69: Understanding The Stack Topology
Managing Stacking Understanding the Stack Topology Understanding the Stack Topology The DES-3228PA provides the following of stacking topologies: • Ring Topology • Chain Topology Ring Topology A stacked Ring topology is where all devices in the stack are connected to each other forming a circle. Each stacked device accepts data and sends it to the device to which it is physically connected.
Page 70: Stacking Members And Unit Id
DES-3228PA Embedded Web System User Guide Stacking Members and Unit ID Stacking Unit IDs are essential to the stacking configuration. The stacking operation is determined during the boot process. The Operation Mode is determined by the Unit ID selected during the initialization process. For example, if the user selected stand-alone mode, the device boots as a stand-alone device.
Page 71: Exchanging Stacking Members
Managing Stacking Exchanging Stacking Members • Uploading Configuration files to an external TFTP Server • Downloading Configuration files from an external TFTP Server Whenever a reboot occurs, topology discovery is performed, and the master learns all units in the stack. Unit IDs are saved in the unit and are learned through topology discovery.
Page 72: Configuring Stacking
DES-3228PA Embedded Web System User Guide Configuring Stacking The Stack Page allows network managers to either reset the entire stack or a specific device. To ensure that device configuration changes are saved to the device, save the Start Up configuration file before resetting the device.
Page 73 Managing Stacking Switching the Stacking Master Page 70...
Page 74: Configuring Ports
DES-3228PA Embedded Web System User Guide Section 7. Configuring Ports The Interface Configuration Page contains fields for defining port parameters. To define port parameters: Click Basic Setup > Interface > Interface Configuration. The Interface Configuration Page opens. Figure 31: Interface Configuration Page The Interface Configuration Page is divided into the following sections: •...
Page 75 Configuring Ports – Full — The interface supports transmission between the device and its link partner in both directions simultaneously. – Half — The interface supports transmission between the device and the client in only one direction at a time. •...
Page 76 DES-3228PA Embedded Web System User Guide Click . The Port or LAG Interface Settings Page opens: Note In addition to the fields in the Interface Configuration Page, the Port or LAG Configuration Settings Page includes the Reactivate Suspended Port or Reactivate Suspended LAG fields. Select Reactivate Suspended Port or Reactivate Suspended LAG fields to return a suspended port or LAG to active status.
Page 77 Configuring Ports Figure 33: Interface Properties Page The Interface Properties Page is contains the following fields: • Unit Number — Displays the unit number • Interface — Displays the port number. • Port Type — Displays the port type. The possible field values are: –...
Page 78: Aggregating Ports
DES-3228PA Embedded Web System User Guide Section 8. Aggregating Ports Link Aggregation optimizes port usage by linking a group of ports together to form a single LAG. Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy. The device supports both static LAGs and Link Aggregation Control Protocol (LACP) LAGs.
Page 79: Configuring Lacp
Aggregating Ports Configuring LACP Configuring LACP LAG ports can contain different media types if the ports are operating at the same speed. Aggregated links can be set up manually or automatically established by enabling LACP on the relevant links. Aggregate ports can be linked into link-aggregation port-groups.
Page 80 DES-3228PA Embedded Web System User Guide Figure 36: LACP Parameters Settings Page Edit the Port Priority and LACP Timeout fields. Click . The LACP settings are saved, and the device is updated Page 77...
Page 81: Lag Membership
Aggregating Ports LAG Membership LAG Membership The LAG Membership Page contains fields for configuring parameters for configured LAGs. The device supports up to eight ports per LAG, and eight LAGs per system. To define LAG parameters: Click Advanced Setup > Interface > LAG Membership. The LAG Membership Page opens. Figure 37: LAG Membership Page The LAG Membership Page contains the following fields: •...
Page 82: Configuring Vlans
DES-3228PA Embedded Web System User Guide Section 9. Configuring VLANs VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups.
Page 83: Defining Vlan Properties
Configuring VLANs Defining VLAN Properties Defining VLAN Properties The VLAN Properties Page provides information and global parameters for configuring and working with VLANs. To define VLAN properties: Click Basic Setup > VLAN > Membership > Properties. The VLAN Properties Page opens. Figure 38: VLAN Properties Page The VLAN Properties Page contains the following fields: •...
Page 84 DES-3228PA Embedded Web System User Guide Figure 39: Add VLAN Page Define the VLAN ID and VLAN Name fields. Click . The VLAN ID is defined, and the device is updated. To edit the VLAN Settings: Click System > VLAN > Membership > Properties. The Edit VLAN Page opens. Click .
Page 85: Defining Vlan Membership
Configuring VLANs Defining VLAN Membership Defining VLAN Membership The VLAN Membership Page contains a table that maps VLAN parameters to ports. Ports are assigned VLAN membership by toggling through the Port Control settings. To define VLAN membership: Click Basic Setup > VLAN > Membership > Membership. The VLAN Membership Page opens. Figure 41: VLAN Membership Page The VLAN Membership Page contains the following fields: •...
Page 86: Defining Vlan Interface Settings
DES-3228PA Embedded Web System User Guide Defining VLAN Interface Settings The VLAN Interface Settings Page contains fields for managing ports that are part of a VLAN. The Port Default VLAN ID (PVID) is configured on the VLAN Interface Settings Page. All untagged packets arriving at the device are tagged with the port PVID.
Page 87 Configuring VLANs Defining VLAN Membership Click . The VLAN Interface Settings Page opens: Figure 43: VLAN Interface Settings Page Define the Interface, Port VLAN Mode, Dynamic, PVID, Frame Type, Ingress Filtering, Current Reserved VLAN and Reserve VLAN for Internal Use fields. Click .
Page 88: Defining The Forwarding Database
DES-3228PA Embedded Web System User Guide Section 10. Defining the Forwarding Database Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port. The Dynamic MAC Address Table can be sorted by interface, VLAN, or MAC Address, whereas MAC addresses are dynamically learned as packets from sources that arrive at the device.
Page 89: Defining Static Forwarding Database Entries
Defining the Forwarding Database Defining Static Forwarding Database Entries Defining Static Forwarding Database Entries The Forwarding Database Static Addresses Page contains parameters for defining the age interval on the device. To prevent static MAC addresses from being deleted when the device is reset, ensure that the port attached to the MAC address is locked.
Page 90 DES-3228PA Embedded Web System User Guide To add a new static forwarding database entry: Click Advanced Setup > Forwarding Database > Static Addresses. The Forwarding Database Static Addresses Page opens. Click . The Add Forwarding Database Page opens: Figure 45: Add Forwarding Database Page Define the Interface, MAC Address, VLAN ID or VLAN Name, and Status fields.
Page 91: Defining Dynamic Forwarding Database Entries
Defining the Forwarding Database Defining Dynamic Forwarding Database Entries Defining Dynamic Forwarding Database Entries The Dynamic Addresses Page contains parameters for querying information in the Dynamic MAC Address Table, including the interface type, MAC addresses, VLAN, and table storing. The Dynamic MAC Address table contains information about the aging time before a dynamic MAC address is erased, and includes parameters for querying and viewing the Dynamic MAC Address table.
Page 92 DES-3228PA Embedded Web System User Guide • Address Table Sort Key — Specifies the means by which the Dynamic MAC Address Table is sorted. The address table can be sorted by address, VLAN, or interface. Define the fields. Click . The Dynamic Address Aging field is defined, and the device is updated. To query the Dynamic MAC Address Table: Click Advanced Setup >...
Page 93 Defining the Forwarding Database Defining Dynamic Forwarding Database Entries Page 90...
Page 94: Configuring Spanning Tree
DES-3228PA Embedded Web System User Guide Section 11. Configuring Spanning Tree Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP also provides a sin- gle path between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended network can cause bridges to for- ward traffic indefinitely, resulting in increased traffic and reducing network efficiency.
Page 95: Defining Classic Spanning Tree
Configuring Spanning Tree Defining Classic Spanning Tree Defining Classic Spanning Tree The STP Properties Page contains parameters for enabling STP on the device. To enable STP on the device: Click Advanced Setup > Spanning Tree > STP > Properties. The STP Properties Page opens: Figure 47: STP Properties Page The STP Properties Page contains the following fields: •...
Page 96 DES-3228PA Embedded Web System User Guide • Path Cost Default Values — Specifies the method used to assign default path cost to STP ports. The possi- ble field values are: – Short — Specifies 1 through 65,535 range for port path cost. This is the default value. –...
Page 97: Defining Stp On Interfaces
Configuring Spanning Tree Defining STP on Interfaces Defining STP on Interfaces Network administrators can assign STP settings to specific interfaces using the STP Interface Page. The Global LAGs section displays the STP information for Link Aggregated Groups. To assign STP settings to an interface: Click Advanced Setup >...
Page 98 Designated Bridge ID — Indicates the bridge priority and the MAC Address of the designated bridge. • Designated Port ID — Indicates the selected port D-Link priority and interface. • Designated Cost — Indicates the cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops.
Page 99: Defining Rapid Spanning Tree
Configuring Spanning Tree Defining Rapid Spanning Tree Defining Rapid Spanning Tree While Classic STP prevents Layer 2 forwarding loops in a general network topology, convergence can take between 30-60 seconds. This time may delay detecting possible loops and propagating status topology changes. Rapid Spanning Tree Protocol (RSTP) detects and uses network topologies that allow a faster STP convergence without creating forwarding loops.
Page 100 DES-3228PA Embedded Web System User Guide – Disabled — The port is not participating in the Spanning Tree. • Mode — Displays the current STP mode. The STP mode is selected in the STP Properties Page. The possi- ble field values are: –...
Page 101: Defining Multiple Spanning Tree
Configuring Spanning Tree Defining Multiple Spanning Tree Defining Multiple Spanning Tree Multiple Spanning Tree (MSTP) provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port can be placed in the Forwarding state in another STP instance. The MSTP Properties Page contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops.
Page 102: Defining Mstp Instance Settings
DES-3228PA Embedded Web System User Guide Defining MSTP Instance Settings MSTP maps VLANs into STP instances. Packets assigned to various VLANs are transmitted along different paths within Multiple Spanning Tree Regions (MST Regions). Regions are one or more Multiple Spanning Tree bridges by which frames can be transmitted.
Page 103: Defining Mstp Interface Settings
Configuring Spanning Tree Defining Multiple Spanning Tree Figure 54: VLAN Instance Configuration Table Define the Instance ID field. Click . The MSTP Instances are assigned, and the device is updated. Defining MSTP Interface Settings Network Administrators can assign MSTP Interface settings in the MSTP Instance Settings Page To define MSTP interface settings: Click Advanced Setup >...
Page 104 DES-3228PA Embedded Web System User Guide MSTP Instance Settings Page contains the following fields: • Instance ID — Lists the MSTP instances configured on the device. Possible field range is 0-15. • Interface — Displays the interface for which the MSTP settings are displayed. The possible field values are: –...
Page 105 Configuring Spanning Tree Defining Multiple Spanning Tree – Backup — Provides a backup path to the designated port path toward the Spanning Tree leaves. Backup ports occur only when two ports are connected in a loop by a point-to-point link or when a LAN has two or more connections connected to a shared segment.
Page 106 DES-3228PA Embedded Web System User Guide Figure 56: MSTP Interface Table Define the Port Priority and the Path Cost fields. Click . The MSTP interface settings are defined, and the device is updated. Page 103...
Page 107 Configuring Spanning Tree Defining Multiple Spanning Tree Page 104...
Page 108: Configuring Device Security
DES-3228PA Embedded Web System User Guide Section 12. Configuring Device Security This section provides access to security pages that contain fields for setting security parameters for ports, device management methods, users, and server security. This section contains the following topics: •...
Page 109: Configuring Management Security
Configuring Device Security Configuring Management Security Configuring Management Security This section provides information for configuring device management security. This section includes the following topics: • Configuring Authentication Methods • Configuring Passwords Configuring Authentication Methods This section provides information for configuring device authentication methods. This section includes the topics: •...
Page 110: Defining Access Profiles
DES-3228PA Embedded Web System User Guide Defining Access Profiles Access profiles are profiles and rules for accessing the device. Access to management functions can be limited to user groups. User groups are defined for interfaces according to IP addresses or IP subnets. Access profiles con- tain management methods for accessing and managing the device.
Page 111 Configuring Device Security Configuring Management Security • Remove — Removes the selected access profile. The possible field values are: – Checked — Removes the selected access profile. Access Profiles cannot be removed when Active. – Unchecked — Maintains the access profiles. Click .
Page 112 DES-3228PA Embedded Web System User Guide • Interface — Defines the interface on which the access profile is defined. The possible field values are: – Port — Specifies the port on which the access profile is defined. – LAG — Specifies the LAG on which the access profile is defined. –...
Page 113: Defining Profile Rules
Configuring Device Security Configuring Management Security Defining Profile Rules Access profiles can contain up to 128 rules that determine which users can manage the switch module, and by which methods. Users can also be blocked from accessing the device. Rules are composed of filters including: •...
Page 114 DES-3228PA Embedded Web System User Guide – All — Assigns all management methods to the rule. – Telnet — Assigns Telnet access to the rule. If selected, users accessing the device using Telnet meeting access profile criteria are permitted or denied access to the device. –...
Page 115 Configuring Device Security Configuring Management Security To modify a Profile Rule: Click System > Management Security > Authentication > Profile Rules. The Access Profile Page opens Click . The Profile Rules PageProfile Rule SettingsProfile Rule Settings opens: Figure 61: Profile Rule SettingsProfile Rule Settings Modify the fields.
Page 116: Defining Authentication Profiles
DES-3228PA Embedded Web System User Guide Defining Authentication Profiles Authentication profiles allow network administrators to assign authentication methods for user authentication. User authentication can be performed either locally or on an external server. User authentication occurs in the order the methods are selected. If the first authentication method is not available, the next selected method is used.
Page 117 Configuring Device Security Configuring Management Security Figure 63: Add Authentication Profile Page Define the Profile Method, Profile Name and Authentication Methods fields. Click . The authentication profile is defined, and the device is updated. To modify an authentication profile: Click System > Management Security > Authentication > Authentication Profiles. The Authentication Profile Page opens.
Page 118 DES-3228PA Embedded Web System User Guide Click . The authentication method is selected, and the device is updated. Page 115...
Page 119: Mapping Authentication Methods
Configuring Device Security Configuring Management Security Mapping Authentication Methods After authentication profiles are defined, they can be applied to management access methods. For example, con- sole users can be authenticated by Authentication Profile List 1, while Telnet users are authenticated by Authenti- cation Method List 2.
Page 120 DES-3228PA Embedded Web System User Guide – None — Indicates that no authentication method is used for access. – RADIUS — Indicates that Authentication occurs at the RADIUS server. Define the Console, Telnet, and Secure Telnet (SSH) fields. Map the authentication method in the Secure HTTP selection box. Map the authentication method in the HTTP selection box.
Page 121: Defining Radius Settings
Configuring Device Security Configuring Management Security Defining RADIUS Settings Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. RADIUS servers provide a centralized authentication method for web access. The default parameters are user-defined, and are applied to newly defined RADIUS servers. If new default param- eters are not defined, the system default values are applied to newly defined RADIUS servers.
Page 122 DES-3228PA Embedded Web System User Guide The RADIUS Page also contains the following fields: • IP Address — Lists the RADIUS server IP addresses. • Priority — Displays the RADIUS server priority. The possible values are 1-65535, where 1 is the highest value.
Page 123 Configuring Device Security Configuring Management Security Figure 67: Add Radius Server Page Define the Host IP Address, Priority, Authenticated Port, Timeout for Reply, Dead Time, and Usage Type fields. Click . The RADIUS server is added, and the device is updated. Page 120...
Page 124 DES-3228PA Embedded Web System User Guide To edit RADIUS Server Settings: Click System > Management Security > Authentication > Radius. The RADIUS Page opens. Click . The RADIUS Server Settings Page opens: Figure 68: RADIUS Server Settings Page Define the Host IP Address, Priority, Source IP Address, Key String, Number of Retries, Authentication Port, Timeout for Reply, Dead Time, and Usage Type fields.
Page 125: Configuring Passwords
Configuring Device Security Configuring Management Security Configuring Passwords This section contains information for defining device passwords, and includes the following topics. • Defining Local Users • Defining Line Passwords • Defining Enable Passwords Defining Local Users Network administrators can define users, passwords, and access levels for users using the Local User Page. define local users: Click System >...
Page 126 DES-3228PA Embedded Web System User Guide Figure 70: Add Local User Page In addition to the fields in the Local User Page, the Add Local User Page contains the following fields: • Password — Defines the local user password. Local user passwords can contain up to 159 characters. •...
Page 127: Defining Line Passwords
Configuring Device Security Configuring Management Security Defining Line Passwords Network administrators can define line passwords in the Line Password Page. After the line password is defined, a management method is assigned to the password. The device can be accessed using the following methods: •...
Page 128: Defining Enable Passwords
DES-3228PA Embedded Web System User Guide Defining Enable Passwords The Enable Password Page sets a local password for a particular access level. To enable passwords: Click System > Management Security > Passwords > Enable Password. The Enable Password Page opens: Figure 73: Enable Password Page The Enable Password Page contains the following fields: •...
Page 129: Configuring Network Security
Configuring Device Security Configuring Network Security Configuring Network Security Network security manages both access control lists and locked ports. This section contains the following topics: • Network Security Overview • Defining Network Authentication Properties • Defining Port Authentication • Configuring Traffic Control Network Security Overview This section provides an overview of network security and contains the following topics: •...
Page 130 DES-3228PA Embedded Web System User Guide Advanced port-based authentication is implemented in the following modes: • Single Host Mode — Allows port access only to the authorized host. • Multiple Host Mode — Multiple hosts can be attached to a single port. Only one host must be authorized for all hosts to access the network.
Page 131: Defining Network Authentication Properties
Configuring Device Security Configuring Network Security Defining Network Authentication Properties The Security Suite Authentication Properties Page allows network managers to configure network authentication parameters. In addition, Guest VLANs are enabled from the Security Suite Authentication Properties Page. To define the network authentication properties: Click Advanced Setup >...
Page 132: Defining Port Authentication
DES-3228PA Embedded Web System User Guide Defining Port Authentication The Port Authentication Page allows network managers to configure port-based authentication global parameters. To define the port-based authentication global properties: Click Advanced Setup > Security Suite > Authentication > Port Authentication. The Port Authentication Page opens.
Page 133 Configuring Device Security Configuring Network Security • Periodic Reauthentication — Permits immediate port reauthentication. The possible field values are: – Enable — Enables immediate port reauthentication. This is the default value. – Disable — Disables port reauthentication. • Reauthentication Period — Displays the time span (in seconds) in which the selected port is reauthenti- cated.
Page 134: Configuring Multiple Hosts
DES-3228PA Embedded Web System User Guide Configuring Multiple Hosts The Multiple Host Page allows network managers to configure advanced port-based authentication settings for specific ports and VLANs. For more information on advanced port-based authentication, see Advanced Port- Based Authentication. To define the network authentication global properties: Click Advanced Setup >...
Page 135 Configuring Device Security Configuring Network Security – Unauthorized — Indicates that either the port control is Force Unauthorized and the port link is down, or the port control is Auto but a client has not been authenticated via the port. –...
Page 136: Defining Authentication Hosts
DES-3228PA Embedded Web System User Guide Defining Authentication Hosts The Authenticated Host Page contains a list of authenticated users. To define authenticated users: Click Advanced Setup > Security Suite > Authentication > Authenticated Host. The Authenticated Host Page opens: Figure 79: Authenticated Host Page The Authenticated Host Page contains the following fields: •...
Page 137: Configuring Traffic Control
Configuring Device Security Configuring Network Security Configuring Traffic Control This section contains information for managing both port security and storm control, and includes the following topics: • Managing Port Security • Enabling Storm Control Page 134...
Page 138: Managing Port Security
MAC addresses. These addresses are either manually defined on the port, or learned on that port up to the point when it is locked. When a packet is received on a locked port, and the packet D-Link source MAC address is not tied to that port (either it was learned on a different port, or it is unknown to the system), the protec- tion mechanism is invoked, and can provide various options.
Page 139 Configuring Device Security Configuring Network Security – Not in Auto Mode — Indicates that the port control is Forced Authorized, and clients have full port access. – Single-host Lock — Indicates that the port control is Auto and a single client has been authenticated via the port.
Page 140: Enabling Storm Control
DES-3228PA Embedded Web System User Guide Enabling Storm Control Storm control limits the amount of Multicast and Broadcast frames accepted and forwarded by the device. When Layer 2 frames are forwarded, Broadcast, and Multicast frames are flooded to all ports on the relevant VLAN. This occupies bandwidth, and loads all nodes on all ports.
Page 141 Configuring Device Security Configuring Network Security • Broadcast Control — Indicates if forwarding Broadcast packet types on the interface. • Broadcast Mode — Specifies the Broadcast mode currently enabled on the device. The possible field values are: – Unknown Unicast, Multicast & Broadcast — Counts Unicast, Multicast, and Broadcast traffic. –...
Page 142: Configuring Ip Information
DES-3228PA Embedded Web System User Guide Section 13. Configuring IP Information This section contains information for defining IP interfaces, and includes the following sections: • Defining IP Addresses • Defining Default Gateways • Configuring DHCP • Configuring ARP Page 139...
Page 143: Defining Ip Addresses
Configuring IP Information Defining IP Addresses The IP Interface Page contains fields for assigning IP addresses. Packets are forwarded to the default IP when frames are sent to a remote network. The configured IP address must belong to the same IP address subnet of one of the IP interfaces.
Page 144 DES-3228PA Embedded Web System User Guide Figure 85: Add IP Interface Page Define the IP Address, Network Mask or Prefix Length, and Interface fields. Click . The IP configuration fields are saved, and the device is updated. To modify an IP interface: Click Basic Setup >...
Page 145 Configuring IP Information Modify the IP Address, Network Mask or Prefix Length, and Interface fields. Click . The IP Interface is modified, and the device is updated. Page 142...
Page 146: Defining Default Gateways
DES-3228PA Embedded Web System User Guide Defining Default Gateways Packets are forwarded to the default IP when frames are sent to a remote network via the default gateway. The configured IP address must belong to the same subnet of one of the IP interfaces. To define a default gateway: Click Basic Setup >...
Page 147: Configuring Dhcp
Configuring IP Information Configuring DHCP The Dynamic Host Configuration Protocol (DHCP) assigns dynamic IP addresses to devices on a network. DHCP ensures that network devices can have a different IP address every time the device connects to the network. To define a DHCP Interface: Click Basic Setup >...
Page 148 DES-3228PA Embedded Web System User Guide Figure 89: Add DHCP IP Interface Page Define the Interface and Host Name fields. Click . The DHCP interface is added, and the device is updated. Page 145...
Page 149: Configuring Arp
Configuring IP Information Configuring ARP The Address Resolution Protocol (ARP) converts IP addresses into physical addresses, and maps the IP address to a MAC address. ARP allows a host to communicate with other hosts only when the IP address of its neighbors is known.
Page 150 DES-3228PA Embedded Web System User Guide – Checked — Removes the selected ARP entries. Unchecked — Maintains the current ARP entries. Define the ARP Entry Age Out and Clear ARP Table Entries fields. Click . The ARP parameters are defined, and the device is updated. To create a new ARP entry: Click Basic Setup >...
Page 151 Configuring IP Information Page 148...
Page 152: Configuring Multicast Forwarding
DES-3228PA Embedded Web System User Guide Section 14. Configuring Multicast Forwarding Multicast forwarding allows a single packet to be forwarded to multiple destinations. L2 Multicast service is based on L2 switch receiving a single packet addressed to a specific multicast address. Multicast forwarding creates copies of the packet, and transmits the packets to the relevant ports.
Page 153: Defining Igmp Snooping
Configuring Multicast Forwarding Defining IGMP Snooping Defining IGMP Snooping When IGMP Snooping is enabled globally, all IGMP packets are forwarded to the CPU. The CPU analyzes the incoming packets and determines: • Which ports want to join which Multicast groups. •...
Page 154 DES-3228PA Embedded Web System User Guide • Host Timeout — Indicates the amount of time host waits to receive a message before timing out. The default time is 260 seconds. • MRouter Timeout — Indicates the amount of the time the Multicast router waits to receive a message before it times out.
Page 155: Defining Multicast Bridging Groups
Configuring Multicast Forwarding Defining Multicast Bridging Groups Defining Multicast Bridging Groups The Multicast Group Page displays the ports and LAGs attached to the Multicast service group in the Ports and LAGs tables. The Port and LAG tables also reflect the manner in which the port or LAGs joined the Multicast group.
Page 156 DES-3228PA Embedded Web System User Guide The following table contains the IGMP port and LAG members management settings: Table 9: IGMP Port/LAG Members Table Control Settings Po rt C on tr ol De f in iti o n Dynamically joins ports/LAG to the Multicast group in the Current Row.
Page 157: Defining Multicast Forward All Settings
Configuring Multicast Forwarding Defining Multicast Bridging Groups Defining Multicast Forward All Settings The Multicast Forward All Page contains fields for attaching ports or LAGs to a device that is attached to a neigh- boring Multicast router/switch. Once IGMP Snooping is enabled, Multicast packets are forwarded to the appropri- ate port or VLAN.
Page 158 DES-3228PA Embedded Web System User Guide The following table summarizes the Multicast settings which can be assigned to ports in the Multicast Forward All Page. Table 10: Bridge Multicast Forward All Router/Port Control Settings Table Port Control D e f i n i t i o n Attaches the port to the Multicast router or switch as a dynamic port.
Page 159 Configuring Multicast Forwarding Defining Multicast Bridging Groups Page 156...
Page 160: Managing Power Over Ethernet Devices
DES-3228PA Embedded Web System User Guide Section 15. Managing Power over Ethernet Devices Power over Ethernet (PoE) provides power to devices over existing LAN cabling, without updating or modifying the network infrastructure. Power over Ethernet removes the necessity of placing network devices next to power sources.
Page 161: Defining Poe System Information
Managing Power over Ethernet Devices Defining PoE System Information Defining PoE System Information The PoE Properties Page contains system PoE information for enabling PoE on the device, monitoring the current power usage, and enabling PoE traps.To enable PoE on the device: Click the System >...
Page 162: Displaying And Editing Poe System Information
DES-3228PA Embedded Web System User Guide Displaying and Editing PoE System Information The PoE Interface Page displays system PoE information on the device, monitoring the current power usage, and enabling PoE traps. To display system PoE information on the device: Click the System >...
Page 163 Managing Power over Ethernet Devices Displaying and Editing PoE System Information – Low — Defines the PoE priority level as low. This is the default level. – High — Defines the PoE priority level as high. – Critical — Defines the PoE priority level as Critical. This is the highest PoE priority level. •...
Page 164: Managing System Files
DES-3228PA Embedded Web System User Guide Section 16. Managing System Files The configuration file structure consists of the following configuration files: • Startup Configuration File — Contains the commands required to reconfigure the device to the same set- tings as when the device is powered down or rebooted. The Startup file is created by copying the configura- tion commands from the Running Configuration file or the Backup Configuration file.
Page 165: Downloading System Files
Managing System Files Downloading System Files Downloading System Files The File Download page contains parameters for downloading system files. To download system files: Click System > File Management > File Download. The File Download Page opens: Figure 100:File Download Page File Download Page is divided into sections based on the following system file types: •...
Page 166: Configuration Download
DES-3228PA Embedded Web System User Guide • Download to Master Only — Downloads the file to the Stacking Master only. • Download to All Units — Downloads the file to all stacking members. Configuration Download The Configuration Download section contains the following fields: •...
Page 167: Uploading System Files
Managing System Files Uploading System Files Uploading System Files The contains fields for uploading the software from the device to the TFTP server. To upload a system file: To upload system files: Click System > File Management > File Upload. The opens: Figure 101: The is divided into the following sections: •...
Page 168: Configuration Upload
DES-3228PA Embedded Web System User Guide Configuration Upload The Configuration Upload section contains the following fields: • TFTP Server IP Address — Specifies the TFTP Server IP Address to which the Configuration file is uploaded. • Destination File Name— Specifies the file name to which the Startup Configuration file is uploaded. •...
Page 169: Activating Image Files
Managing System Files Activating Image Files Activating Image Files The Active Image Page allows network managers to select and reset the Image files. The Active Image file for each unit in a stacking configuration can be individually selected. To open the Active Image Page : Click System >...
Page 170: Copying Files
DES-3228PA Embedded Web System User Guide Copying Files Files can be copied and deleted from the Copy Files Page. To copy files: To open the Copy Files Page: Click System > File Management > Copy Files The Copy Files Page opens: Figure 103:Copy Files Page The Copy Files Page contains the following fields: •...
Page 171: Configuring The File System
Managing System Files Configuring the File System Restoring the Default Configuration File Click System > File Management > Copy Files. The opens. Select Restore Configuration Factory Defaults. Click . The factory defaults are restored, and the device is updated. Configuring the File System The File System Page provides information about files currently stored on the system, including file names, file sizes, files modifications, and file permissions.
Page 172: Configuring Quality Of Service
DES-3228PA Embedded Web System User Guide Section 17. Configuring Quality of Service This section contains information for configuring QoS, and includes the following topics: • Quality of Service Overview • Defining General QoS Settings • Configuring QoS Mapping • Configuring Basic Mode Quality of Service Overview Quality of Service (QoS) provides the ability to implement QoS and priority queuing within a network.
Page 173 Configuring Quality of Service Defining General QoS Settings Configuring CoS General Settings The CoS Global Parameters Page contains information for enabling CoS globally and on specific interfaces. After CoS has been configured, the original device CoS default settings can be reassigned to the interface in the CoS Global Parameters Page.
Page 174: Restoring Factory Default Qos Interface Settings
DES-3228PA Embedded Web System User Guide Restoring Factory Default QoS Interface Settings Click Basic Setup > Quality of Service > Global Parameters > CoS. The CoS Global Parameters Page opens. Select an interface by clicking the Default CoS from Incoming traffic field. Check the Restore Defaults checkbox.
Page 175 Configuring Quality of Service Defining General QoS Settings • Engress Rate Limit — Indicates the traffic limit for the port. – Status — Indicates the Engress traffic limit status. – CIR — Defines CIR as the queue shaping type. The possible field value is 4096 - 1,000,000,000 bits per second.
Page 176: Defining Queues
DES-3228PA Embedded Web System User Guide Defining Queues The Queue Page contains fields for defining the QoS queue forwarding types. To set the queue settings: Click Basic Setup > Quality of Service > General Settings > Queue. The Queue Page opens. Figure 108:Queue Page The Queue Page contains the following fields: •...
Page 177: Configuring Qos Mapping
Configuring Quality of Service Configuring QoS Mapping Configuring QoS Mapping This section contains information for mapping CoS and DSCP values to queues, and includes the following sections: • Mapping CoS Values to Queues • Mapping DSCP Values to Queues Mapping CoS Values to Queues The CoS to Queue Page contains fields for mapping CoS values to traffic queues.
Page 178: Mapping Dscp Values To Queues
DES-3228PA Embedded Web System User Guide Mapping DSCP Values to Queues DSCP to Queue Page The DSCP to Queue Page contains fields for mapping DSCP settings to traffic queues. For example, a packet with a DSCP tag value of 3 can be assigned to queue 2. To map CoS values to queues: Click Basic Setup >...
Page 179: Configuring Basic Mode
Configuring Quality of Service Configuring Basic Mode Configuring Basic Mode This section contain information for configuring the Basic QoS Mode. Configuring Trust Mode The Trust Setup Page contains information for enabling Trust on the device. Trust is set on a per interface basis. Packets entering a QoS domain are classified at the edge of the QoS domain.
Page 180: Configuring Dscp Rewrite
DES-3228PA Embedded Web System User Guide Configuring DSCP Rewrite The DSCP Rewrite Summary page allows network managers to assign new DSCP values to incoming packets. To enable DSCP Rewrite: Click Basic Setup > Quality of Service > Basic Mode > DSCP Rewrite. The DSCP Rewrite Page opens: Figure 112: DSCP Rewrite Page The DSCP Rewrite Page contains the following: •...
Page 181 Configuring Quality of Service Configuring Basic Mode Page 178...
Page 182: Configuring Snmp
DES-3228PA Embedded Web System User Guide Section 18. Configuring SNMP Simple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP versions: • SNMP version 1 • SNMP version 2c • SNMP version 3 SNMP v1 and v2c The SNMP agents maintain a list of variables, which are used to manage the device.
Page 183: Configuring Snmp Security
Configuring SNMP Configuring SNMP Security Configuring SNMP Security This section contains information for configuring SNMP security parameters, and contains the following topics: • Defining SNMP Security • Defining SNMP Views • Defining SNMP Group Profiles • Defining SNMP Group Members •...
Page 184: Defining Snmp Views
DES-3228PA Embedded Web System User Guide Defining SNMP Views SNMP Insert space views provide or block access to device features or portions of features. For example, a view can be defined which provides that SNMP group A has Read Only (R/O) access to Multicast groups, while SNMP group B has Read-Write (R/W) access to Multicast groups.
Page 185 Configuring SNMP Configuring SNMP Security Figure 115: Add SNMP View Page Define the View Name field. Define the view using Define the View Type field. Click . The view is defined, and the device is updated. Page 182...
Page 186: Defining Snmp Group Profiles
DES-3228PA Embedded Web System User Guide Defining SNMP Group Profiles The SNMP Group Profile Page provides information for creating SNMP groups, and assigning SNMP access con- trol privileges to SNMP groups. Groups allow network managers to assign access rights to specific device fea- tures, or feature aspects.
Page 187 Configuring SNMP Configuring SNMP Security – Checked — Removes the selected SNMP group. – Unchecked — Maintains the SNMP groups. Click . The Add SNMP Group Profile Page opens: Figure 117: Add SNMP Group Profile Page Define the Group Name, Security Model, Security Level, and Operation fields. Click .
Page 188: Defining Snmp Group Members
DES-3228PA Embedded Web System User Guide Defining SNMP Group Members The SNMP Group Membership Page enables assigning system users to SNMP groups, as well as defining the user authentication method. Click System > SNMP > Security > Group Membership. The SNMP Group Membership Page opens: Figure 119: SNMP Group Membership Page The SNMP Group Membership Page contains the following fields: •...
Page 189 Configuring SNMP Configuring SNMP Security Click . The Add SNMP Group Membership Page opens: Figure 120:Add SNMP Group Membership Page In addition to the fields in the SNMP Group Membership Page, the Add SNMP Group Membership Page contains the following fields: •...
Page 190 DES-3228PA Embedded Web System User Guide Figure 121:SNMP Group Membership Settings Page Modify the Group Name, Engine ID, Authentication Method, Password, Authentication Key, and Privacy Key fields. Click . The SNMP group membership is modified, and the device is updated. Page 187...
Page 191: Defining Snmp Communities
Configuring SNMP Configuring SNMP Security Defining SNMP Communities Access rights are managed by defining communities in the SNMP Communities Page. When the community names are changed, access rights are also changed. SNMP communities are defined only for SNMP v1 and SNMP v2c.
Page 192 DES-3228PA Embedded Web System User Guide • Remove — Removes a community. The possible field values are: – Checked — Removes the selected SNMP community. – Unchecked — Maintains the SNMP communities. SNMP Communities Advanced Tables The SNMP Community Settings Page contains the following fields: •...
Page 193 Configuring SNMP Configuring SNMP Security Figure 124: SNMP Community Settings Page Modify the SNMP Management Station, Community String, and Basic or Advanced fields. Click . The SNMP community is modified, and the device is updated. Page 190...
Page 194: Configuring Snmp Notifications
DES-3228PA Embedded Web System User Guide Configuring SNMP Notifications This section contains information for configuring SNMP Notifications, and contains the following topics: • Defining SNMP Notification Global Parameters • Defining SNMP Notification Filters • Defining SNMP Notification Recipients Page 191...
Page 195: Defining Snmp Notification Global Parameters
Configuring SNMP Configuring SNMP Notifications Defining SNMP Notification Global Parameters The SNMP Notification Properties Page contains parameters for defining SNMP notification parameters. To define SNMP notification global parameters: Click System > SNMP > Notification > Properties. The SNMP Notification Properties Page opens: Figure 125:SNMP Notification Properties Page The SNMP Notification Properties Page contains the following fields: •...
Page 196: Defining Snmp Notification Filters
DES-3228PA Embedded Web System User Guide Defining SNMP Notification Filters TheSNMP Notification Filter Page permits filtering traps based on OIDs. Each OID is linked to a device feature or a portion of a feature. The SNMP Notification Filter Page also allows network managers to filter notifications. To define SNMP notification filters: Click System >...
Page 197 Configuring SNMP Configuring SNMP Notifications Figure 127:Add SNMP Notification Filter Page Define the Filter Name, New Object Identifier Tree, and Filter Type fields. Click . The SNMP notification filter is defined, and the device is updated. Page 194...
Page 198: Defining Snmp Notification Recipients
DES-3228PA Embedded Web System User Guide Defining SNMP Notification Recipients The SNMP Notification Receiver Page contains information for defining filters that determine whether traps are sent to specific users, and the trap type sent. SNMP notification filters provide the following services: •...
Page 199 Configuring SNMP Configuring SNMP Notifications SNMPv1,2c Notification Recipient The SNMP v1, v2c Recipient table contains the following fields: • Recipients IP — Displays the IP address to which the traps are sent. • Notification Type — Displays the notification sent. The possible field values are: –...
Page 200: Snmpv3 Notification Recipient
DES-3228PA Embedded Web System User Guide SNMPv3 Notification Recipient The SNMPv3 Notification Recipient table contains the following fields: • Recipient IP — Displays the IP address to which the traps are sent. • Notification Type — Displays the type of notification sent. The possible field values are: –...
Page 201 Configuring SNMP Configuring SNMP Notifications Click . The SNMP Notification recipients are defined, and the device is updated. To modify SNMP notification recipients: Click System > SNMP > Notification > Notification Receiver. The SNMP Notification Receiver Page opens. Click . The SNMP Notification Receiver Settings Page opens: Figure 130:SNMP Notification Receiver Settings Page Modify the Notification Type, SNMPV1,v2c or SNMPv3, UPD Port, Filter Name, TImeout, and Retries fields.
Page 202: Viewing The Device
DES-3228PA Embedded Web System User Guide Section 19. Managing System Logs This section provides information for managing system logs. The system logs enable viewing device events in real time, and recording the events for later usage. System Logs record and manage events and report errors and informational messages.
Page 203: Enabling System Logs
Managing System Logs Enabling System Logs Enabling System Logs The Syslog Properties Page contains fields for defining which events are recorded to which logs. It contains fields for enabling logs globally, and parameters for defining logs. Log messages are listed from the highest severity to the lowest severity level.
Page 204 DES-3228PA Embedded Web System User Guide Note When a severity level is selected, all severity level choices above the selection are selected automatically. – Console — Defines the minimum severity level from which logs are sent to the console. – RAM Logs —...
Page 205: Viewing The Device Memory Logs
Managing System Logs Viewing the Device Memory Logs Viewing the Device Memory Logs The Device Memory Log Page contains all system logs in a chronological order that are saved in RAM (Cache). To open the Device Memory Log Page: • Click System >...
Page 206: Clearing Flash Logs
DES-3228PA Embedded Web System User Guide Figure 133:Syslog FLASH Page The Syslog Flash Page contains the following fields: • Log Index — Displays the log number. • Log Time — Displays the time at which the log was generated. • Severity —...
Page 207 Managing System Logs Viewing the Device Memory Logs Figure 134:Syslog Server Settings Page The Syslog Server Settings Page contains the following fields: • Server — Specifies the server to which logs can be sent. • UDP Port — Defines the UDP port to which the server logs are sent. The possible range is 1 - 65535. The default value is 514.
Page 208 DES-3228PA Embedded Web System User Guide Define the Log Server IP Address, UDP Port, Facility, Description, and Minimum servers fields. Click . The Syslog Server is defined, and the device is updated. Page 205...
Page 209 Managing System Logs Viewing the Device Memory Logs Page 206...
Page 210: Managing Device Diagnostics
DES-3228PA Embedded Web System User Guide Section 20. Managing Device Diagnostics This section contains the following topics: • Configuring Port Mirroring • Viewing Integrated Cable Tests • Viewing Optical Transceivers • Viewing the CPU Utilization Page 207...
Page 211: Configuring Port Mirroring
Managing Device Diagnostics Configuring Port Mirroring Configuring Port Mirroring Port mirroring monitors and mirrors network traffic by forwarding copies of incoming and outgoing packets from one port to a monitoring port. Port mirroring can be used as a diagnostic tool as well as a debugging feature. Port mirroring also enables switch performance monitoring.
Page 212 DES-3228PA Embedded Web System User Guide Figure 137:Add Port Mirroring Page Select a port in the Source Port field. Select a port type in the Type field. Click . The port mirroring session is defined, and the device is updated. To edit the port mirroring settings: Click System >...
Page 213: Viewing Integrated Cable Tests
Managing Device Diagnostics Viewing Integrated Cable Tests Viewing Integrated Cable Tests The Copper Cable Tests Page contains fields for performing tests on copper cables. Cable testing provides infor- mation about where errors occurred in the cable, the last time a cable test was performed, and the type of cable error, which occurred.
Page 214: Viewing Optical Transceivers
DES-3228PA Embedded Web System User Guide Viewing Optical Transceivers The Optical Transceiver page allows network managers to perform tests on Fiber Optic cables. Optical transceiver diagnostics can be performed only when the link is present. To test cables: Click System > Diagnostics > Optical Transceivers tab. The Optical Transceivers Page opens: Figure 140: Optical Transceivers Page The Optical Transceivers Page contains the field: •...
Page 215 Managing Device Diagnostics Viewing Optical Transceivers Figure 141: CPU Utilization Page The CPU Utilization Page contains the following fields: • Displays CPU resource utilization information. CPU Utilization — The possible field values are: – Enabled — Enables viewing CPU utilization information. This is the default value. –...
Page 216: Viewing Statistics
DES-3228PA Embedded Web System User Guide Section 21. Viewing Statistics This section provides device statistics for RMON, interfaces, GVRP, EAP, and Etherlike statistics. This section contains the following topics: • Viewing Interface Statistics • Managing RMON Statistics Viewing Interface Statistics This section contains the following topics: •...
Page 217: Viewing Device Interface Statistics
Viewing Statistics Viewing Interface Statistics Viewing Device Interface Statistics The Interface Statistics Page contains statistics for both received and transmitted packets. Click Basic Setup > Interface Statistics > Interface. The Interface Statistics Page opens. Figure 142:Interface Statistics Page The Interface Statistics Page contains the following fields: •...
Page 218 DES-3228PA Embedded Web System User Guide Transmit Statistics • Total Bytes (Octets) — Displays the number of octets transmitted on the selected interface. • Unicast Packets — Displays the number of Unicast packets transmitted on the selected interface. • Multicast Packets — Displays the number of Multicast packets transmitted on the selected interface. •...
Page 219: Managing Rmon Statistics
Viewing Statistics Managing RMON Statistics Managing RMON Statistics This section contains the following topics: • Viewing RMON Statistics • Viewing the RMON History Table • Configuring RMON Events • Defining RMON Alarms Page 216...
Page 220: Viewing Rmon Statistics
DES-3228PA Embedded Web System User Guide Viewing RMON Statistics The RMON Statistics Page contains fields for viewing information about device utilization and errors that occurred on the device. To view RMON statistics: Click Advanced Setup > RMON > Statistics. The RMON Statistics Page opens. Figure 143:RMON Statistics Page The RMON Statistics Page contains the following fields: •...
Page 221: Resetting Rmon Statistics Counters
Viewing Statistics Managing RMON Statistics • Broadcast Packets Received — Displays the number of good broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. • Multicast Packets Received — Displays the number of good Multicast packets received on the interface since the device was last refreshed.
Page 222: Configuring Rmon History
DES-3228PA Embedded Web System User Guide Configuring RMON History This section contains the following topics: • Defining RMON History Control • Viewing the RMON History Table Defining RMON History Control The RMON History Control Page contains information about samples of data taken from ports. For example, the samples may include interface definitions or polling periods.
Page 223 Viewing Statistics Managing RMON Statistics Click . The RMON History Control Settings Page opens: Figure 145:RMON History Control Settings Page Define the Source Interface, Owner, Sampling Interval, Max. No. of Samples to Keep, and Samples Requested. fields. Click . The entry is added to the RMON History Control Page, and the device is updated. Page 220...
Page 224: Viewing The Rmon History Table
DES-3228PA Embedded Web System User Guide Viewing the RMON History Table The RMON History Table Page contains interface specific statistical network samplings. Each table entry repre- sents all counter values compiled during a single sample. To view the RMON History Table: Click Advanced Setup >...
Page 225 Viewing Statistics Managing RMON Statistics • Fragments — Displays the number of fragments (packets with less than 64 octets, excluding framing bits, but including FCS octets) received on the interface since the device was last refreshed. • Jabbers — Displays the total number of received packets that were longer than 1518 octets. This number excludes frame bits, but includes FCS octets that had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral octet (Alignment Error) number.
Page 226: Configuring Rmon Events
DES-3228PA Embedded Web System User Guide Configuring RMON Events This section includes the following topics: • Defining RMON Events Control • Viewing the RMON Events Logs Defining RMON Events Control The RMON Events Control Page contains fields for defining RMON events. To view RMON events: Click Advanced Setup >...
Page 227: Viewing The Rmon Events Logs
Viewing Statistics Managing RMON Statistics Viewing the RMON Events Logs The RMON Events Logs Page contains a list of RMON events. To view RMON event logs: • Click Advanced Setup > RMON > Events > Events Logs. The RMON Events Logs Page opens. Figure 148:RMON Events Logs Page The RMON Events Logs Page contains the following fields: •...
Page 228: Defining Rmon Alarms
DES-3228PA Embedded Web System User Guide Defining RMON Alarms The RMON Alarm Page contains fields for setting network alarms. Network alarms occur when a network problem, or event, is detected. Rising and falling thresholds generate events. To set RMON alarms: Click Advanced Setup >...
Page 229 Viewing Statistics Managing RMON Statistics • Falling Event — Displays the mechanism in which the alarms are reported. • Startup Alarm — Displays the trigger that activates the alarm generation. Rising is defined by crossing the threshold from a low-value threshold to a higher-value threshold. •...
Page 230: Viewing Etherlike Statistics
DES-3228PA Embedded Web System User Guide Viewing Etherlike Statistics The Etherlike Statistics Page contains interface statistics. To view Etherlike Statistics: Click Basic Setup > Interfaces Statistics > Etherlike. The Etherlike Statistics Page opens Figure 151:Etherlike Statistics Page The Etherlike Statistics Page contains the following fields: •...
Page 231: Resetting Etherlike Statistics Counters
Viewing Statistics Managing RMON Statistics • Transmitted Paused Frames — Displays the number of paused frames transmitted from the selected interface. Select an interface in the Interface field. The Etherlike statistics are displayed. Resetting Etherlike Statistics Counters Open the Etherlike Statistics Page. Click .
Page 232: Viewing Port Utilization Statistics
DES-3228PA Embedded Web System User Guide Viewing Port Utilization Statistics The Port Utilization Page contains information about the system’s Port utilization. To view the Port Utilization: Click Basic Setup > Interfaces Statistics > Port Utilization. The Port Utilization Page opens Figure 152: Port Utilization Page The Port Utilization Page contains the following fields: •...
Page 233: Appendix A, Device Specifications & Features
Appendix A, Device Specifications & Features Appendix A, Device Specifications & Features This appendix contains the device specifications and features pertaining to the DES-3228PA. This section con- tains the following topics: • Hardware Specifications • DES-3228PA Features Hardware Specifications This section contains the DES-3228PA hardware specifications: Ports provides 24-Port 10/100Mbps + 2 Combo Copper/SFP (100BASE-FX/1000BASE-X Fiber ports) + 2 1000 Mbps Copper L2 Management Switch...
Page 234 DES-3228PA Embedded Web System User Guide DES-3228PA Features This appendix describes the device features. The system supports the following features: F e a t u r e D e s c r i p t i o n Auto negotiation allows an device to advertise modes of opera- Auto Negotiation tion.
Page 235 Appendix A, Device Specifications & Features F e a t u r e D e s c r i p t i o n Domain Name System (DNS) converts user-defined domain Domain Name System names into IP addresses. Each time a domain name is assigned the DNS service translates the name into a numeric IP address.
Page 236 DES-3228PA Embedded Web System User Guide F e a t u r e D e s c r i p t i o n Multicast service is a limited broadcast service, which allows one- MAC Multicast Support to-many and many-to-many connections for information distribu- tion.
Page 237 Appendix A, Device Specifications & Features F e a t u r e D e s c r i p t i o n Power over Ethernet (PoE) provide power to devices over exist- Power over Ethernet ing LAN cabling, without updating or modifying the network infra- structure.
Page 238 DES-3228PA Embedded Web System User Guide F e a t u r e D e s c r i p t i o n The Simple Network Time Protocol (SNTP) assures accurate net- SNTP work Ethernet Switch clock time synchronization up to the milli- second.
Page 239 Appendix A, Device Specifications & Features F e a t u r e D e s c r i p t i o n The device always performs VLAN-aware bridging. Classic bridg- VLAN-aware MAC-based Switching ing(IEEE802.1D) is not performed, where frames are forwarded based only on their destination MAC address.
Page 240: Appendix B Troubleshooting
DES-3228PA Embedded Web System User Guide Appendix B Troubleshooting This section describes problems that may arise when installing the and how to resolve these issue. This section includes the following topics: • Problem Solving — Provides information about problem management with DES-3228PA. •...
Page 241 Appendix B Troubleshooting P r o bl em s P os si bl e C au se So lu t io n No response from the Faulty serial cable Replace the serial cable terminal emulation soft- Incorrect serial cable Replace serial cable for a pin-to-pin straight/flat ware cable Reconfigure the emulation software connection set-...
Page 242 DES-3228PA Embedded Web System User Guide P r o bl em s P os si bl e C au se So lu t io n Add and Edit pages do A pop-up blocker is Disable pop-up blockers. not open. enabled. Lost password The Password Recovery Procedure enables the user to override the current password configuration, and...
Page 243 Contacting D-Link Technical Support Software updates and user documentation can be found on the D-Link website. D-Link provides free technical support for customers within the United States and within Canada for the warranty duration. For more information on locating the D-Link office in your region, see International Offices .
Page 244 DES-3228PA Embedded Web System User Guide Page 2...
Page 245 Page 3...
Page 246 DES-3228PA Embedded Web System User Guide Page 4...
Page 247 Page 5...
Page 248 DES-3228PA Embedded Web System User Guide Page 6...
Page 249 Page 7...
Page 250 DES-3228PA Embedded Web System User Guide Page 8...
Page 251 Page 9...
Page 252 DES-3228PA Embedded Web System User Guide Page 10...
Page 253 Page 11...
Page 254 DES-3228PA Embedded Web System User Guide Page 12...
Page 255 Page 13...
Page 256 DES-3228PA Embedded Web System User Guide Page 14...
Page 257 Page 15...
Page 258 DES-3228PA Embedded Web System User Guide Page 16...
Page 259 Page 17...
Page 260 DES-3228PA Embedded Web System User Guide Page 18...
Page 261 Page 19...
Page 262 DES-3228PA Embedded Web System User Guide Page 20...
Page 263 Page 21...
Page 264 DES-3228PA Embedded Web System User Guide Page 22...
Page 265 Page 23...
Page 266 DES-3228PA Embedded Web System User Guide Page 24...
Page 267 Page 25...
Page 268 DES-3228PA Embedded Web System User Guide Page 26...
Page 269 Page 27...
Page 270 Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware. All Hardware or part thereof that is replaced by D-Link, or for which the purchase price is refunded, shall become the property of D- Link upon replacement or refund.
Page 271 UPS Ground or any common carrier selected by D-Link. Return shipping charges shall be prepaid by D-Link if you use an address in the United States, otherwise we will ship the product to you freight collect. Expedited shipping is available upon request and provided shipping charges are prepaid by the customer.
Page 272 HEREIN, THE ENTIRE RISK AS TO THE QUALITY, SELECTION AND PERFORMANCE OF THE PRODUCT IS WITH THE PURCHASER OF THE PRODUCT. Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY...
Page 273: Product Registration
Product Registration http://support.dlink.com/register/ D-Link products can be registered online at . Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights. Page 31...
Page 274: International Offices
FAX: 61-2-8899-1868 TEL: 27-12-665-2165 France URL: www.dlink.com.au FAX: 27-12-665-2186 TEL: 33-1-30238688 India URL: www.d-link.co.za FAX: 33-1-30238689 D-Link House, Kurla Bandra Complex Russia URL: www.dlink-france.fr Road, Grafsky per., 14, floor 6 Netherlands Off CST Road, Santacruz (East), Mumbai - Moscow Weena 290 400098.

D-Link xStack DES-3228PA Web/Installation Manual

Preface

Device Description

Mounting Device

Initial Configuration

Getting Started

Managing Device Information

Managing Stacking

Configuring SNMP

Managing System Logs

Managing Device Diagnostics

Viewing Statistics

Appendix A, Device Specifications & Features

Appendix B Troubleshooting

Quick Links

Related Manuals for D-Link xStack DES-3228PA

Summary of Contents for D-Link xStack DES-3228PA