Page 2 Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
Mounting the Switch in a Standard 19" Rack ..........................10 Power On (AC Power) ....................................11 Power Failure ........................................11 Connecting DC Power to DES-3526DC ............................11 Connecting the Switch ..................................12 Switch to End Node ..................................12 Switch to Hub or Switch ................................13 Connecting To Network Backbone or Server ..........................
Page 4 SNMP Settings..................................... 19 Traps ..........................................19 MIBs ..........................................19 IP Address Assignment ................................20 Connecting Devices to the Switch ............................... 21 Web-based Switch Configuration ..............................22 Introduction......................................22 Login to Web Manager ................................22 Web-based User Interface ................................23 Areas of the User Interface ...................................23 Web Pages....................................
Page 5 Unicast Forwarding..................................55 Multicast Forwarding ................................... 55 Multicast Port Filtering Mode ..............................57 VLANs....................................... 58 Understanding IEEE 802.1p Priority................................58 VLAN Description ..................................58 Notes about VLANs on the xStack DES-3500 Series switches ........................58 IEEE 802.1Q VLANs................................... 58 802.1Q VLAN Tags......................................60 Port VLAN ID.......................................60 Tagging and Untagging....................................61 Ingress Filtering ......................................61...
Page 6 Client...........................................104 Authentication Process................................104 Port-Based Network Access Control............................105 MAC-Based Network Access Control ............................106 Configure Authenticator................................107 PAE System Control .................................. 109 Port Capability ......................................109 Initializing Ports for Port Based 802.1x ..............................110 Initializing Ports for MAC Based 802.1x..............................111 Reauthenticate Port(s) for Port Based 802.1x .............................111 RADIUS Server ..................................
Page 7 SSH User Authentication ................................140 SNMP Manager ....................................141 SNMP Settings................................... 141 Traps ...........................................141 MIBs ...........................................141 SNMP User Table ..................................142 SNMP View Table ..................................144 SNMP Group Table..................................145 SNMP Community Table Configuration ........................... 146 SNMP Host Table ..................................147 SNMP Engine ID ..................................
Page 8 Reset ........................................ 177 Reset System....................................178 Reset Config ....................................178 Reboot Device....................................178 Logout......................................178 D-Link Single IP Management ................................ 179 Single IP Management (SIM) Overview............................179 The Upgrade to v1.6....................................180 SIM Using the Web Interface ................................181 Topology......................................182 Tool Tips......................................
Page 9: Preface
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Preface The DES-3500 Series Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features. Section 2, Installation- Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch.
Page 10: Intended Readers
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Intended Readers The DES-3500 Manual contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention Description...
Page 11: Safety Instructions
230 V/50 Hz in most of Europe, the Middle East, and the Far East • –48 VDC for DC power supply unit on DES-3526DC only • Also, be sure that attached devices are electrically rated to operate with the power available in your location.
Page 12: General Precautions For Rack-Mountable Products
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual • Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip. •...
Page 13: Protecting Against Electrostatic Discharge
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside your system. To prevent static damage, discharge static electricity from your body before you touch any of the electronic components, such as the microprocessor. You can do so by periodically touching an unpainted metal surface on the chassis.
Page 14: Introduction
The following manual describes the installation, maintenance and configurations concerning members of the xStack DES-3500 switch series. These three switches, the DES-3526, DES-3526DC, and the DES-3550 are all very similar in configurations and basic hardware and consequentially, most of the information in this manual will be universal to the whole xStack DES-3500 switch series.
Page 15: Features
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual This stand-alone Switch enables the network to use some of the most demanding multimedia and imaging applications concurrently with other user applications without creating bottlenecks. The built-in console interface can be used to configure the Switch's settings for priority queuing, VLANs, and port trunk groups, port monitoring, and port speed.
Page 16: Ports
Figure 1- 1. Front Panel View of the DES-3526 switch Figure 1- 2. Front Panel View of the DES-3550 switch The DES-3526DC does not support a redundant power supply and therefore the RPS indicator does not appear on the front panel. Figure 1- 3. Front Panel View of DES-3526DC...
Page 17: Led Indicators
RS-232 console port in the back of the Switch using a straight-through serial cable. (DES-3526DC This LED will be lit when the redundant power supply is present and in use. Otherwise it will not supported) remain dark.
Page 18: Rear Panel Description
The rear panel also includes an outlet for an optional external power supply. When power fails, the optional external RPS will take over all the power immediately and automatically. Figure 1- 8. Rear panel view of DES-3526DC The rear panel of the DC power version of the Switch includes an opening designed to accommodate the DC power wiring assembly.
Page 19: Gigabit Combo Ports
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 1- 10. Side panels of the DES-3550 Gigabit Combo Ports In addition to the 24 (or 48) 10/100 Mbps ports, the Switch features two Gigabit Ethernet Combo ports. These two ports are 1000BASE-T copper ports (provided) and Mini-GBIC ports (optional).
Page 20 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 1- 13. Installing the Mini-GBIC Module...
Page 21: Installation
• RS-232 console cable If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
Page 22: Installing The Switch Without The Rack
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Installing the Switch without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device.
Page 23: Installing The Switch In A Rack
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Installing the Switch in a Rack The Switch can be mounted in a standard 19" rack. Use the following diagrams to guide you. Figure 2- 2. Fasten mounting brackets to the DES-3526 Figure 1- 15.
Page 24: Mounting The Switch In A Standard 19" Rack
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Mounting the Switch in a Standard 19" Rack CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances. Therefore, always install the stabilizers before installing components in the rack.
Page 25: Power On (Ac Power)
Switch back in. Connecting DC Power to DES-3526DC Follow the instructions below to connect the DC power supply of the DES-3526DC to a DC power source. Figure 2- 5. Power connections attached to contacts on assembly 1. Firmly attach the DC power to the negative and positive contacts on the wiring assembly.
Page 26: Connecting The Switch
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 3 Connecting the Switch Switch to End Node Switch to Hub or Switch Connecting To Network Backbone or Server NOTE: All 24 (48 for the DES-3550) high-performance NWay Ethernet ports can support both MDI-II and MDI-X connections.
Page 27: Switch To Hub Or Switch
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Switch to Hub or Switch These connections can be accomplished in a number of ways using a normal cable. • A 10BASE-T hub or switch can be connected to the Switch via a twisted-pair Category 3, 4 or 5 UTP/STP cable. •...
Page 28: Connecting To Network Backbone Or Server
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Connecting To Network Backbone or Server The two Mini-GBIC combo ports are ideal for unlinking to a network backbone or server. The copper ports operate at a speed of 1000, 100 or 10Mbps in full or half duplex mode.
Page 29: Introduction To Switch Management
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 4 Introduction to Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface through the Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to the Switch Password Protection SNMP Settings...
Page 30 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To connect a terminal to the console port: 1. Connect the female connector of the RS-232 cable directly to the console port on the Switch, and tighten the captive retaining screws.
Page 31: First Time Connecting To The Switch
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual First Time Connecting to the Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch. NOTE: The passwords used to access the Switch are case-sensitive;...
Page 32 NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps necessary to resolve this issue.
Page 33: Snmp Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices.
Page 34: Ip Address Assignment
Switch's Telnet or Web-based management agent. NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps necessary to resolve this issue.
Page 35: Connecting Devices To The Switch
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 4- 4. Assigning the Switch an IP Address In the above example, the Switch was assigned an IP address of 10.41.44.254 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully.
Page 36: Web-Based Switch Configuration
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 5 Web-based Switch Configuration Introduction Login to Web manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software functions of the DES-3500 Series switches can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 37: Web-Based User Interface
Area 1 Select the menu or window to be displayed. The folder icons can be opened to display the hyper- linked menu buttons and subfolders contained within them. Click the D-Link logo to go to the D-Link website. Area 2 Presents a graphical near real-time image of the front panel of the Switch.
Page 38: Web Pages
Switch to the greater network. NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps necessary to resolve this issue.
Page 39: Configuring The Switch
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 6 Configuring the Switch Switch Information IP Address Advanced Settings Port Configuration Port Description Port Mirroring Link Aggregation LACP Port Setting MAC Notification IGMP Spanning Tree Forward Filtering VLANs Traffic Control Port Security...
Page 40: Switch Information
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Switch Information The subsections below describe how to change some of the basic settings for the Switch such as changing IP settings and assigning user names and passwords for management access privileges, as well as how to save the changes and restart the Switch. Click the Switch Information link in the Configuration menu.
Page 41 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual 3. If you want to access the Switch from a different subnet from the one it is installed on, enter the IP address of the Default Gateway. If you will manage the Switch from the subnet on which it is installed, you can leave the default address (0.0.0.0) in this field.
Page 42 Click Apply to let your changes take effect. NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps necessary to resolve this issue.
Page 43: Advanced Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Advanced Settings The Switch Information (Advanced Settings) window contains the main settings for all major functions for the Switch. To view the Advanced Settings window, click its link in the Configuration folder. This will enable the following window to be viewed and configured.
Page 44 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Link Aggregation The algorithm that the Switch uses to balance the load across the ports that make up the Algorithm port trunk group is defined by this definition. Choose MAC Source, MAC Destination, MAC Src &...
Page 45: Port Configurations
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Configurations This section contains information for configuring various attributes and properties for individual physical ports, including port speed and flow control. Clicking on Port Configurations in the Configuration menu will display the following window for the user: Figure 6- 4.
Page 46: Port Description
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Description The DES-3500 Series switches support a port description feature where the user may name various ports on the Switch. To assign names to various ports, click the Port Description on the Configuration menu: Figure 6- 5.
Page 47: Port Mirroring
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 48: Link Aggregation
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The DES-3500 Series switches support up to six port trunk groups with 2 to 8 ports in each group. A potential bit rate of 8000 Mbps can be achieved.
Page 49 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent. NOTE: If any ports within the trunk group become disconnected, packets intended for the discon- nected port will be load shared among the other unlinked ports of the link aggregation group.
Page 50 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 10. Link Aggregation Settings window - Modify The user-changeable parameters are as follows: Parameter Description Group ID Select an ID number for the group, between 1 and 6. State Trunk groups can be toggled between Enabled and Disabled.
Page 51: Lacp Port Setting
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual LACP Port Setting The LACP Port Setting window is used in conjunction with the Link Aggregation window to create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP control frames.
Page 52: Mac Notification
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MAC Notification MAC Notification is used to monitor MAC addresses learned and entered into the forwarding database. MAC Notification Global Settings To globally set MAC notification on the Switch, open the following window by opening the MAC Notification folder and clicking the MAC Notification Global Settings link: Figure 6- 12.
Page 53: Mac Notification Port Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MAC Notification Port Settings To change MAC notification settings for a port or group of ports on the Switch, click Port Settings in the MAC Notification folder, which will display the following window: Figure 6- 13.
Page 54: Igmp
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IGMP Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch.
Page 55 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual VLAN Name This is the VLAN Name that, along with the VLAN ID, identifies the VLAN the user wishes to modify the IGMP Snooping Settings for. Query Interval The Query Interval field is used to set the time (in seconds) between transmitting IGMP queries.
Page 56: Static Router Ports Entry
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Static Router Ports Entry A static router port is a port that has a multicast router attached to it. Generally, this router would have a connection to a WAN or to the Internet.
Page 57: Forbidden Router Ports Entry
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Forbidden Router Ports Entry The Forbidden Router Ports Entry section will allow users to set a port or group of ports belonging to a VLAN as being forbidden from receiving information from or being connected to multicast routers.
Page 58: Spanning Tree
STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP.
Page 59: Edge Port
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual 802.1d MSTP 802.1w RSTP 802.1d STP Forwarding Learning Discarding Discarding Disabled Discarding Discarding Blocking Discarding Discarding Listening Learning Learning Learning Forwarding Forwarding Forwarding Table 6- 1. Comparing Port States RSTP is capable of a more rapid transition to a forwarding state - it no longer relies on timer configurations - RSTP compliant bridges are sensitive to feedback from other RSTP compliant bridge links.
Page 60: Stp Bridge Global Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Regulations and Restrictions for the Loopback Detection Function • All three versions of STP (STP, RSTP and MSTP) can enable this feature. • May be configured globally (STP Global Bridge Settings), or per port (MSTP Port Information). •...
Page 61 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 22. STP Bridge Global Settings window - MSTP NOTE: The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will occur. Observe the following formulas when setting the above parameters: Max.
Page 62 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual TX Hold Count Used to set the maximum number of Hello packets transmitted per interval. The count can be specified from 1 to 10. The default is 3. Forwarding This field can be Enabled or Disabled.
Page 63: Mst Configuration Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MST Configuration Table The following screens in the MST Configuration Table window allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree instance set on the Switch. The Switch initially possesses one CIST or Common Internal Spanning Tree of which the user may modify the parameters for but cannot change the MSTI ID for, and cannot be deleted.
Page 64 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To configure the settings for the CIST, click on its hyperlinked name in the Current MST Configuration Identification window, which will reveal the following window to configure: Figure 6- 25. Instance ID Settings window - CIST modify The user may configure the following parameters to configure the CIST on the Switch.
Page 65: Msti Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Priority (0-61440) Select a value between 0 and 61440 to specify the priority for a specified MSTI for forwarding packets. The lower the value, the higher the priority. This entry must be divisible by 4094 and can only be utilized if the Type chosen is Set Priority Only.
Page 66: Stp Instance Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual STP Instance Settings The following window displays MSTIs currently set on the Switch. To view the following table, click Configuration > Spanning Tree > STP Instance Settings: Figure 6- 29. STP Instance Table window The following information is displayed: Parameter Description...
Page 67: Mstp Port Information
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MSTP Port Information STP can be set up on a port per port basis. To view the following window click Configuration > Spanning Tree > MST Port Information: Figure 6- 31.
Page 68 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual NOTE: If you want to enable Forwarding BPDU on a per port basis, the following settings must first be in effect: 1. STP must be globally disabled and 2. Forwarding BPDU must be globally enabled. These are the default settings configurable in the STP Bridge Global Settings menu discussed previously.
Page 69: Forwarding Filtering
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Forwarding Filtering Unicast Forwarding Open the Forwarding Filtering folder in the Configuration menu and click on the Unicast Forwarding link. This will open the Setup Static Unicast Forwarding Table, as shown below: Figure 6- 32.
Page 70 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 34. Setup Static Multicast Forwarding Table window The following parameters can be set: Parameter Description The VLAN ID of the VLAN to which the corresponding MAC address belongs. Multicast MAC The MAC address of the static source of multicast packets.
Page 71: Multicast Port Filtering Mode
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Multicast Port Filtering Mode The following figure and table describe how to set up multicast forwarding on the Switch. Open the Forwarding Filtering folder and click on the Multicast Port Filtering Mode Setup link to see the entry window below: Figure 6- 35.
Page 72: Vlans
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual VLANs Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously. It is intended to alleviate problems associated with the delivery of time critical data over congested networks.
Page 73 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IEEE 802.1Q (tagged) VLANs are implemented on the Switch. 802.1Q VLANs require tagging, which enables them to span the entire network (assuming all switches on the network are IEEE 802.1Q-compliant). VLANs allow a network to be segmented in order to reduce the size of broadcast domains.
Page 74: 802.1Q Vlan Tags
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet's EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
Page 75: Tagging And Untagging
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Unfortunately, not all network devices are 802.1Q compliant. These devices are referred to as tag-unaware. 802.1Q devices are referred to as tag-aware. Prior to the adoption of 802.1Q VLANs, port-based and MAC-based VLANs were in common use. These VLANs relied upon a Port VLAN ID (PVID) to forward packets.
Page 76: Port-Based Vlans
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual NOTE: If no VLANs are configured on the Switch, then all packets will be forwarded to any desti- nation port. Packets with unknown source addresses will be flooded to all ports. Broadcast and multicast packets will also be flooded to all ports.
Page 77: Asymmetric Vlans
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Asymmetric VLANs The xStack DES-3500 Switch Series has the capability to create and utilize Asymmetric VLANs on the Switch. Asymmetric VLANs allow devices to transmit packets on one VLAN and receive it on another VLAN. This configuration is accomplished through the use of three functions: enabling Asymmetric VLANs, VLAN creation, and GVRP configuration.
Page 78: Vlan And Trunk Groups
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual VLAN and Trunk Groups The members of a trunk group have the same VLAN setting. Any VLAN setting on the members of a trunk group will apply to the other member ports.
Page 79 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual NOTE: The Switch supports up to 255 static VLAN entries. Figure 6- 42. 802.1Q Static VLAN window - Modify The following fields can then be set in either the Add or Modify 802.1Q Static VLANs windows: Parameter Description VID (VLAN ID)
Page 80: Gvrp Setting
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual GVRP Setting In the Configuration menu, open the VLANs folder and click GVRP Setting. The 802.1Q Port Settings window, shown below, allows you to determine whether the Switch will share its VLAN configuration information with other GARP VLAN Registration Protocol (GVRP) enabled switches.
Page 81: Traffic Control
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Traffic Control On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
Page 82 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Traffic Control Settings Storm Type Select the type of Storm Type to detect, either Broadcast Multicast or DLF. Once selected , use the pull-down menu to enable or disable this storm detection. Action Select the method of traffic Control from the pull down menu.
Page 83: Port Security
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Security A given port's (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled.
Page 84: Qos
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual The DES-3500 Series switches supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing. Advantages of QoS QoS is an implementation of the IEEE 802.1p standard that allows network administrators a method of reserving bandwidth for important functions that require a large bandwidth or have a high priority, such as VoIP (voice-over Internet Protocol), web...
Page 85: Understanding Qos
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Understanding QoS The Switch has four priority queues. These priority queues are labeled as 3, the high queue to 0, the lowest queue. The eight priority tags, specified in IEEE 802.1p are mapped to the Switch's priority tags as follows: •...
Page 86: Port Bandwidth
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Bandwidth The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. In the Configuration folder, click Port Bandwidth, to view the window shown below. Figure 6- 47.
Page 87: Scheduling
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Scheduling Changing the output scheduling used for the hardware queues in the Switch can customize QoS. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority queues is affected. Changes in scheduling may result in unacceptable levels of packet loss or significant transmission delay.
Page 88: 802.1P Default Priority
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. In the Configuration folder open the QoS folder and click 802.1p Default Priority, to view the window shown to the right.
Page 89: Traffic Segmentation
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single port to a group of ports on either a single switch (in standalone mode) or a group of ports on another switch in a switch stack (Single IP). This method of segmenting the flow of traffic is similar to using VLANs to limit traffic, but is more restrictive.
Page 90: System Severity Alerts
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual System Severity Alerts The Switch can be configured to allow alerts be logged or sent as a trap to an SNMP agent or both. The level at which the alert triggers either a log entry or a trap message can be set as well.
Page 91 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual The following parameters can be set: Parameter Description Index Syslog server settings index (1-4). Server IP The IP address of the Syslog server. Severity This drop-down menu allows you to select the level of messages that will be sent. The options are Warning, Informational, and All.
Page 92: Sntp Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SNTP Settings Time Setting To configure the time settings for the Switch, open the Configuration folder, then the SNTP folder and click on the Current Time Setting link, revealing the following window for the user to configure. Figure 6- 55.
Page 93: Time Zone And Dst
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Time Zone and DST The following are windows used to configure time zones and Daylight Savings time settings for SNTP. Open the Configuration folder, then the SNTP folder and click on the Time Zone and DST link, revealing the following window. Figure 6- 56.
Page 94 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To: Day of Week Enter the day of the week that DST will end. To: Month Enter the month that DST will end. To: time in HH:MM Enter the time DST will end. DST Annual Settings Using annual mode will enable DST seasonal time adjustment.
Page 95: Access Profile Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Access Profile Table Configuring the Access Profile Table Access profiles allow you to establish criteria to determine whether or not the Switch will forward packets based on the information contained in each packet's header.
Page 96 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. The number is used to set the relative priority for the profile. Priority is set relative to other profiles where the lowest profile ID has the highest priority.
Page 97 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. The number is used to set the relative priority for the profile. Priority is set relative to other profiles where the lowest profile ID has the highest priority.
Page 98 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 60. Access Profile Configuration window (Packet Content Mask) This screen will aid the user in Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask: Parameter Description...
Page 99 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To establish the rule for a previously created Access Profile: In the Configuration folder, click the Access Profile Table link opening the Access Profile Table window. Under the heading Access Rule, clicking Modify, will open the following window.
Page 100 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Access ID (1-65535) Type in a unique identifier number for this access. This value can be set from 1 - 65535. Auto Assign – Checking this field will instruct the Switch to automatically assign an Access ID for the rule being created.
Page 101: Parameters Description
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 64. Access Rule Table window (Ethernet) The user may search for the settings of a particular Access ID by entering that ID into the Access ID field above and clicking Find. The user may display all Access ID entries by clicking the View All Entry button.
Page 102 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Priority (0-7) This parameter is specified if you want to re-write the 802.1p default priority previously set in the Switch, which is used to determine the CoS queue to which packets are forwarded to. Once this field is specified, packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user.
Page 103 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 67. Access Rule Table window (Packet Content Mask) The user may search for the settings of a particular Access ID by entering that ID into the Access ID field above and clicking Find. The user may display all Access ID entries by clicking the View All Entry button.
Page 104 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the Switch, according to any additional rule, forwards the packets that match the access profile added (see below).
Page 105 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 69. Access Rule Display window (Packet Content)
Page 106: Cpu Interface Filtering
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual CPU Interface Filtering Due to a chipset limitation and the need for extra switch security, the xStack DES-3500 Series switches incorporate CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets destined for the Switch’s CPU interface.
Page 107 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Type in a unique identifier number for this profile set. This value can be set from 1 - 5. Profile ID (1-5) Type Select profile based on Ethernet (MAC Address), IP address or packet content mask. This will change the menu according to the requirements for the type of profile.
Page 108 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Profile ID (1-5) Type in a unique identifier number for this profile set. This value can be set from 1 - 5. Type Select profile based on Ethernet (MAC Address), IP address or Packet Content Mask. This will change the menu according to the requirements for the type of profile.
Page 109 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 73. CPU Interface Filtering Profile Configuration window for Packet Content Mask This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask: Parameter Description...
Page 110 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To establish the rule for a previously created CPU Access Profile: In the ACL folder, click CPU Interface Filtering to open the CPU Interface Filtering Profile Table. In this window, the user may add a rule to a previously created CPU access profile by clicking the corresponding Add Rule button of the entry to configure Ethernet, IP or Packet Content Mask.
Page 111 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 76. CPU Interface filtering rule Configuration window for Ethernet To set the CPU Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description Profile ID This is the identifier number for this profile set.
Page 112 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 77. CPU Interface Filtering Rule Display for Ethernet The following window is the CPU Interface Filtering Rule Configuration for IP. Figure 6- 78. CPU Interface Filtering Rule Configuration window for IP Configure the following CPU Interface Filtering Rule Configuration settings for IP: Parameter Description...
Page 113 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Type Selected profile based on Ethernet (MAC Address), IP address or Packet Content. Ethernet instructs the Switch to examine the layer 2 part of each packet header. • IP instructs the Switch to examine the IP address in each frame's header.
Page 114 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 6- 80. CPU Interface Filtering Rule Configuration window for Packet Content Mask To set the rule for CPU Packet Content, adjust the following parameters and click Apply. Parameters Description Profile ID...
Page 115 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual To view the settings of a previously correctly configured rule, click in the Access Rule Table to view the following screen: Figure 6- 81. CPU Interface Filtering Rule Display for IP...
Page 116: Port Access Entity (802.1X)
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model.
Page 117: Authentication Server
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch). The Authentication Server (RADIUS) must authenticate clients connected to a port on the Switch before attaining any services offered by the Switch on the LAN.
Page 118: Client
MAC address if 802.1x is enabled by MAC address) is granted access and therefore successfully “unlocks” the port. Once unlocked, normal traffic is allowed to pass through the port. The D-Link implementation of 802.1x allows network administrators to choose between two types of Access Control used on the Switch, which are: 1.
Page 119: Port-Based Network Access Control
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port-Based Network Access Control The original intent behind the development of 802.1x was to leverage the characteristics of point-to-point in LANs. Any single LAN segment in such an infrastructures has no more than two devices attached to it, one of which is a Bridge Port. The Bridge Port detects events that indicate the attachment of an active device at the remote end of the link, or an active device becoming inactive.
Page 120: Mac-Based Network Access Control
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client Client...
Page 121: Configure Authenticator
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Configure Authenticator To configure the 802.1X Authenticator Settings, click Port Access Entity > Configure Authenticator: Figure 6- 89. 802.1X Authenticator Settings window To configure the settings by port, click on the hyperlinked port number under the Port heading, which will display the following table to configure: Figure 6- 90.
Page 122 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description From [ ] To [ ] Enter the port or ports to be set. Sets the administrative-controlled direction to either in or both. AdmCtrlDir If in is selected, control is only exerted over incoming traffic through the port you selected in the first field.
Page 123: Pae System Control
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual PAE System Control Existing 802.1x port settings are displayed and can be configured using the windows below. Port Capability Click Port Access Entity > PAE System Control > Port Capability to view the following window: Figure 6- 91.
Page 124: Initializing Ports For Port Based 802.1X
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Initializing Ports for Port Based 802.1x Existing 802.1x port and MAC settings are displayed and can be configured using the window below. Click Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 6- 92.
Page 125: Initializing Ports For Mac Based 802.1X
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Initializing Ports for MAC Based 802.1x To initialize ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advanced Settings window.
Page 126: Radius Server
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Port The port number of the reauthenticated port. Displays the physical address of the Switch where the port resides. MAC Address Auth State The Authenticator State will display one of the following: Initialize, Disconnected, Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuth, ForceUnauth, and N/A.
Page 127: Ip-Mac Binding
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IP-MAC Binding The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to restrict the access to a switch to a number of authorized users.
Page 128 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual The user may only remove these two entries by disabling the ACL Mode in the IP-MAC Binding Port window. Also, rules will be created for every port on the Switch. To view the ACL rule configurations set for the ACL mode, click the corresponding modify button of the entry in the Access Profile Table, which will produce a window similar to the example to the...
Page 129: Ip-Mac Binding Port
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IP-MAC Binding Port To enable or disable IP-MAC binding on specific ports, click IP-MAC Binding Port in the IP-MAC Binding folder on the Configuration Menu to open the IP-MAC Binding Ports Setting window. Select a port or a range of ports with the From and To fields.
Page 130: Ip-Mac Binding Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IP-MAC Binding Table The window shown below can be used to create IP-MAC binding entries. Click the IP-MAC Binding Table on the IP-MAC Binding folder on the Configuration menu to view the IP-MAC Binding Setting window. Enter the IP and MAC addresses of the authorized users in the appropriate fields and click Add.
Page 131: Ip-Mac Binding Blocked
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IP-MAC Binding Blocked To view unauthorized devices that have been blocked by IP-MAC binding restrictions open the IP-MAC Binding Blocked window show below. Click IP-MAC Binding Blocked in the IP-MAC Blocked folder on the Configuration menu to open the IP-MAC Binding Blocked window.
Page 132: Limited Ip Multicast Range Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Limited IP Multicast Range Settings The Limited IP Multicast Range window allows the user to specify which multicast address(es) reports are to be received on specified ports on the switch. This function will therefore limit the number of reports received and the number of multicast groups configured on the Switch.
Page 133: Layer 3 Ip Networking
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Layer 3 IP Networking Static ARP Table The Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses into physical addresses. This table allows network managers to view, define, modify and delete ARP information for specific devices. Static entries can be defined in the ARP Table.
Page 134: Dhcp/Bootp Relay
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual DHCP/BOOTP Relay The relay hops count limit allows the maximum number of hops (routers) that the DHCP/BOOTP messages can be relayed through to be set. If a packet’s hop count is more than the hop count limit, the packet is dropped. The range is between 1 and 16 hops, with a default value of 4.
Page 135 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual DHCP Agent This field can be toggled between Enabled and Disabled using the pull-down menu. It is Information Option 82 used to enable or disable the Switches ability to check the validity of the packet’s option 82 Check field.
Page 136: The Implementation Of Dhcp Information Option 82 In The Xstack Des-3500 Series Switches
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual The Implementation of DHCP Information Option 82 in the xStack DES-3500 Series switches The config dhcp_relay option_82 command configures the DHCP relay agent information option 82 setting of the switch. The formats for the circuit ID sub-option and the remote ID sub-option are as follows: NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero.
Page 137: Dhcp/Bootp Relay Interface Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual DHCP/BOOTP Relay Interface Settings The DHCP/ BOOTP Relay Interface Settings allow the user to set up a server, by IP address, for relaying DHCP/ BOOTP information to the Switch. The user may enter a previously configured IP interface on the Switch that will be connected directly to the DHCP/BOOTP server using the following window.
Page 138: Management
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 7 Management Security IP User Accounts Access Authentication Control (TACACS) Secure Sockets Layer (SSL) Secure Shell (SSH) SNMP Manager Safeguard Engine Settings The following section will aid the user in configuring security functions for the Switch. The Switch includes various functions for security, including TACACS, Security IPs, SSL, SSH and SNMP, all discussed in detail in the following section.
Page 139: Admin And User Privileges
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 7- 3. User Accounts Modify Table window - Add Add a new user by typing in a User Name, and New Password and retype the same password in the Confirm New Password. Choose the level of privilege (Admin or User) from the Access Right drop-down menu.
Page 140: Access Authentication Control
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Access Authentication Control TACACS/XTACACS/TACACS+/RADIUS commands secure access Switch using TACACS/XTACACS/TACACS+/RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password. If TACACS/XTACACS/TACACS+/RADIUS authentication is enabled on the Switch, it will contact a TACACS/XTACACS/TACACS+/RADIUS server to verify the user.
Page 141: Policy & Parameters
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Policy & Parameters This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login. To access the following window, click Security Management >...
Page 142: Authentication Server Group Settings
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Enable Method List Using the pull down menu, configure an application for normal login on the user level, utilizing a previously configured method list. The user may use the default Method List or other Method List configured by the user.
Page 143: Authentication Server Hosts
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Enter a group name of up to 15 alphanumeric characters to identify the users Group Name and click Add. The user’s new Group Name will then appear in the Authentication Server Group Settings window as seen below, defined as Trinity. Figure 7- 10.
Page 144 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 7- 12. Authentication Server Host Settings – Add window Configure the following parameters to add an Authentication Server Host: Parameter Description IP Address The IP address of the remote server host the user wishes to add. Protocol The protocol used by the server host.
Page 145: Login Method Lists
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Login Method Lists This command will configure a user-defined or default Login Method List of authentication techniques for users logging on to the Switch. The sequence of techniques implemented in this command will affect the authentication result. For example, if a user enters a sequence of techniques, for example TACACS - XTACACS- local, the Switch will send an authentication request to the first TACACS host in the server group.
Page 146: Enable Method Lists
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Method List Name Enter a method list name defined by the user of up to 15 characters. The user may add one, or a combination of up to four of the following authentication Method 1, 2, 3, 4 methods to this method list: tacacs - Adding this parameter will require the user to be authenticated using the...
Page 147: Local Enable Password
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 7- 17. Enable Method List - Edit window Figure 7- 18. Enable Method List - Add window To define an Enable Login Method List, set the following parameters and click Apply: Parameter Description Method List Name...
Page 148: Enable Admin
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 7- 19. Configure Local Enable Password window To set the Local Enable Password, set the following parameters and click Apply. Parameter Description Old Local Enabled If a password was previously configured for this entry, enter it here in order to change it to a new password.
Page 149: Secure Socket Layer (Ssl)
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Secure Socket Layer (SSL) Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a ciphersuite, which is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels: 1.
Page 150: Configuration
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Configuration This window will allow the user to enable SSL on the Switch and implement any one or combination of listed ciphersuites on the Switch. A ciphersuite is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session.
Page 151: Secure Shell (Ssh)
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Secure Shell (SSH) SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows a secure login to remote host computers, a safe method of executing commands on a remote end node, and will provide secure encrypted and authenticated communication between two non-trusted hosts.
Page 152: Ssh Algorithm
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Auth. Fail (2-20) Allows the Administrator to set the maximum number of attempts that a user may try to log on to the SSH Server utilizing the SSH authentication. After the maximum number of attempts has been exceeded, the Switch will be disconnected and the user must reconnect to the Switch to attempt another login.
Page 153 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual AES192-CBC Use the pull-down to enable or disable the Advanced Encryption Standard AES192 encryption algorithm with Cipher Block Chaining. The default is Enabled. AES256-CBC Use the pull-down to enable or disable the Advanced Encryption Standard AES-256 encryption algorithm with Cipher Block Chaining.
Page 154: Ssh User Authentication
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SSH User Authentication The following windows are used to configure parameters for users attempting to access the Switch through SSH. To access the following window, click Security Management > Secure Shell > SSH User Authentication. Figure 7- 26.
Page 155: Snmp Manager
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SNMP Manager SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices.
Page 156: Snmp User Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SNMP User Table The SNMP User Table displays all of the SNMP User's currently configured on the Switch. In the SNMP Manager folder, located in the Security Management folder, click on the SNMP User Table link. This will open the SNMP User Table window, as shown below.
Page 157 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 7- 30. SNMP User Table Configuration window The following parameters can set: Parameter Description User Name Enter an alphanumeric string of up to 32 characters. This is used to identify the SNMP user. Group Name This name is used to specify the SNMP group created can request SNMP messages.
Page 158: Snmp View Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SNMP View Table The SNMP View Table is used to assign views to community strings that define which MIB objects can be accessed by a remote SNMP manager. To view the SNMP View Table window, open the SNMP Manager folder under Security Management and click the SNMP View Table entry.
Page 159: Snmp Group Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SNMP Group Table An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu. To view the SNMP Group Table window, open the SNMP Manager folder in the Security Management folder and click the SNMP Group Table entry.
Page 160: Snmp Community Table Configuration
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual The following parameters can set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users. Read View Name This name is used to specify the SNMP group created can request SNMP messages.
Page 161: Snmp Host Table
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Community Name Type an alphanumeric string of up to 33 characters that is used to identify members of an SNMP community. This string is used like a password to give remote SNMP managers access to MIB objects in the Switch's SNMP agent.
Page 162: Snmp Engine Id
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Community Type in the community string or SNMP V3 user name as appropriate. String/SNMP User Name To implement your new settings, click Apply. To return to the SNMP Host Table, click the Show All SNMP Host Table Entries link.
Page 163: Safeguard Engine
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Safeguard Engine Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the Safeguard Engine beyond its capability. To alleviate this problem, the Safeguard Engine function was added to the Switch’s software.
Page 164 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 7- 41. Safeguard Engine window To configure the Switch’s Safeguard Engine, change the State to Enabled. To configure the parameters for the Safeguard Engine, click the Advanced Settings button which will alter the previous screen to look like this: Figure 7- 42.
Page 165: Monitoring
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 8 Monitoring Port Utilization CPU Utilization Packets Errors Size MAC Address Switch History Log IGMP Snooping Group IGMP Snooping Forwarding VLAN Status Router Port Port Access Control Layer 3 Feature Safeguard Engine Status Port Utilization...
Page 166: Cpu Utilization
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual CPU Utilization The CPU Utilization window displays the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval. To view this window, open the Monitoring folder and click the CPU Utilization link. Figure 8- 2.
Page 167: Packets
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) Click the Received (RX) link in the Packets folder of the Monitoring menu to view the following graph of packets received on the Switch.
Page 168: Umb Cast (Rx)
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Select number of times the Switch will be polled between 20 and 200. The default value is 20. Record Number Bytes Counts the number of bytes received on the port.
Page 169 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 8- 6. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Select the desired setting between 1s and 60s, where "s" stands for seconds. The default Time Interval value is one second.
Page 170: Transmitted (Tx)
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Transmitted (TX) Click the Transmitted (TX) link in the Packets folder of the Monitoring menu to view the following graph of packets transmitted from the Switch. Figure 8- 7. Tx Packets Analysis window (line graph for Bytes and Packets) To view the Transmitted (TX) Table, click the link View Table, which will show the following table:...
Page 171 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Select number of times the Switch will be polled between 20 and 200. The default value is 20. Record Number Bytes Counts the number of bytes successfully sent from the port.
Page 172: Errors
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Errors The Web Manager allows port error statistics compiled by the Switch's management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) Click the Received (RX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch.
Page 173: Transmitted (Tx)
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Select number of times the Switch will be polled between 20 and 200. The default value is Record Number Crc Error Counts otherwise valid packets that did not end on a byte (octet) boundary.
Page 174 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 8- 12. Tx Error Analysis window (table) The following fields may be set or viewed: Parameter Description Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 175: Size
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table. Two windows are offered. Figure 8- 13.
Page 176 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual 65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets). 128-255 The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
Page 177: Mac Address
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MAC Address This allows the Switch's dynamic MAC address forwarding table to be viewed. When the Switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table.
Page 178: Switch History Log
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Switch History Log The Web manager allows the Switch's history log, as compiled by the Switch's management agent, to be viewed. To view the Switch history log, open the Maintenance folder and click the Switch History Log link. Figure 8- 16.
Page 179: Igmp Snooping Group
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IGMP Snooping Group IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. The number of IGMP reports that were snooped is displayed in the Reports field. To view the IGMP Snooping Table, click IGMP Snooping Group in the Monitoring menu: Figure 8- 17.
Page 180: Igmp Snooping Forwarding
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual IGMP Snooping Forwarding This window will display the current IGMP snooping forwarding table entries currently configured on the Switch. To view the following screen, open the Monitoring folder and click the IGMP Snooping Forwarding link. Figure 8- 18.
Page 181: Vlan Status
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual VLAN Status This allows the VLAN status for each of the Switch's ports to be viewed by VLAN. This window displays the ports on the Switch that are currently Egress or Tag ports. To view the following table, open the Monitoring folder and click the VLAN Status Link. Figure 8- 19.
Page 182: Port Access Control
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Port Access Control The following windows are used to monitor 802.1x statistics of the Switch, on a per port basis. To view the Port Access Control windows, open the monitoring folder and click the Port Access Control folder. There are six windows to monitor. Authenticator State The following section describes the 802.1X Status on the Switch.
Page 183 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 8- 22. Show Authenticator State window – MAC-Based 802.1x This window displays the Authenticator State for individual ports on a selected device. To select unit within the switch stack, use the pull-down menu at the top of the window and click Apply.
Page 184: Layer 3 Feature
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Layer 3 Feature Browse ARP Table The ARP Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This window will show current ARP entries on the Switch.
Page 185: Safeguard Engine Status
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Safeguard Engine Status The following window displays parameters configured for and about the Safeguard Engine Status currently set on the Switch. Figure 7- 43. Safeguard Engine Status and CPU Utilization Information window The information is described as follows: Parameter Description...
Page 186: Maintenance
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Section 9 Maintenance TFTP Services Multiple Image Services Switch History Ping Test Save Changes Reboot Services Logout TFTP Services Trivial File Transfer Protocol (TFTP) services allow the Switch's firmware to be upgraded by transferring a new firmware file from a TFTP server to the Switch.
Page 187: Download Configuration File
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Information about firmware on the Switch can be viewed in the Firmware Management table in the same window. It holds the following information: Parameter Description The user-defined Section ID of the firmware on the Switch. Boot Status The firmware that is currently being run on the Switch will be identified in this field with the term "Boot".
Page 188: Upload Log
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Upload Log To upload the switch history log file to a TFTP server, open the TFTP Services folder in the Maintenance folder and then click the Upload Log link: Figure 9- 4.
Page 189: Multiple Image Services
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Multiple Image Services The Multiple Image Services folder allows users of the xStack family of switches to configure and view information regarding firmware located on the Switch. The Switch allows two firmware images to be stored in its memory and either can be configured to be the boot up firmware for the Switch.
Page 190: Config Firmware Image
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Config Firmware Image The Config Firmware Image window allows users to configure firmware images saved in the memory of the Switch. To access the following window, click Maintenance > MULTIPLE IMAGE Services > Config Firmware Image. Figure 9- 6.
Page 191: Save Changes
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Save Changes The DES-3500 Series switches have two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective by clicking the Apply button. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
Page 192: Reset System
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Reset System In addition, the Reset System option is added to reset all configuration parameters to their factory defaults, save these parameters to the Switch's non-volatile RAM, and then restart the Switch. This option is equivalent to Reset Config followed by Save Changes.
Page 193: D-Link Single Ip Management
Configuration Backup/Restore Single IP Management (SIM) Overview Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the "Single IP Management" feature: 1.
Page 194: The Upgrade To V1.6
It will display the speed and number of Ethernet connections creating this port trunk group, as shown in the adjacent picture. NOTE: For more details regarding improvements made in SIMv1.6, please refer to the D-Link Single IP Management White Paper located on the D-Link website.
Page 195: Sim Using The Web Interface
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual SIM Using the Web Interface All DES-3500 Series switches are set as Candidate (CaS) switches, as their factory default configuration and Single IP Management will be disabled. To enable SIM for the Switch using the Web interface, go to the Single IP Management folder and click the SIM Settings link, revealing the following window.
Page 196: Topology
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Topology The Topology window will be used to configure and manage the Switch within the SIM group and requires Java script to function properly on your computer. The following message should appear the first time the user clicks the Topology link in the Single IP Management folder.
Page 197 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 10- 5. Topology view This window will display how the devices within the Single IP Management Group are connected to other groups and devices. Possible icons in this window are as follows: Icon Description Group...
Page 198: Tool Tips
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
Page 199: Right-Click
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 10- 7. Port Speed Utilizing the Tool Tip Right-Click Right clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 200: Commander Switch Icon
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Figure 10- 9. Property window Commander Switch Icon Figure 10- 10. Right-Clicking a Commander Icon The following options may appear for the user to configure: • Collapse - to collapse the group that will be represented by a single icon. •...
Page 201: Member Switch Icon
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Member Switch Icon Figure 10- 12. Right-Clicking a Member icon The following options may appear for the user to configure: • Collapse - to collapse the group that will be represented by a single icon. •...
Page 202 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual • Add to group - add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group. Click OK to enter the password or Cancel to exit the window.
Page 203: Menu Bar
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Menu Bar The Single IP Management window contains a menu bar for device configurations, as seen below. Figure 10- 17. Menu Bar of the Topology View The five menus on the menu bar are as follows. File •...
Page 204: Firmware Upgrade
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Firmware Upgrade This window is used to upgrade firmware from the Commander Switch to the Member Switch. Member Switches will be listed in the table and will be specified by Port (port on the CS where the MS resides), MAC Address, Model Name and Version. To specify a certain Switch for firmware download, click its corresponding check box under the Port heading.
Page 205: Technical Specifications
Cat.5 Enhanced for 1000BASE-T UTP Cat.5, Cat. 5 Enhanced for 100BASE-TX UTP Cat.3, 4, 5 for 10BASE-T EIA/TIA-568 100-ohm screened twisted-pair (STP)(100m) Number of Ports 24 10/100/1000 Mbps ports (DES-3526/DES-DES-3526DC) 48 10/100/1000 Mbps ports (DES-3550) 2 1000BASE-T Mini-GBIC Combo Ports...
Page 206 -40 - 70°C Humidity 5 - 95% non-condensing Dimensions 441 mm 207 mm 44 mm (1U), 19 inch rack-mount width DES-3526 2.56 kg / DES-3526DC 2.5 kg / DES-3550 5Kg Weight CE class A, FCC Class A, C-Tick Safety CSA International...
Page 207: Cables And Connectors
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Appendix B Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagrams and tables show the standard RJ-45 receptacle/connector and their pin assignments.
Page 208: System Log Entries
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Event Category Log Content Severity Remark...
Page 209 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description MAC address information will be included in the log. by console and "IP: <ipaddr>, MAC: <macaddr>" are XOR Configuration successfully Configuration shown in log string, which uploaded by console successfully...
Page 210 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description Login failed through Web Login failed (Username: <username>, IP: Warning through Web <ipaddr>, MAC: <macaddr>) Logout through Web Logout through (Username: <username>, IP: Informational <ipaddr>, MAC: <macaddr>) Successful login through Web...
Page 211 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description Logout through SSH Logout through (Username: <username>, IP: Informational <ipaddr>, MAC: <macaddr>) SSH session timed out SSH session (Username: <username>, IP: Informational timed out <ipaddr>, MAC: <macaddr>)
Page 212 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description Login failed through Telnet Login failed from <userIP> authenticated through Telnet by AAA local method authenticated by Warning (Username: <username>, AAA local MAC: <macaddr>) method Successful login through SSH...
Page 213 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description (Username: <username>) improper configuration Successful login through Web Successful login from <userIP> authenticated through Web by AAA server <serverIP> Informational authenticated by (Username: <username>, AAA server MAC: <macaddr>)
Page 214 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description <macaddr>) configuration Successful login through SSH Successful login from <userIP> authenticated through SSH by AAA server <serverIP> Informational authenticated by (Username: <username>, AAA server MAC: <macaddr>) Login failed through SSH from...
Page 215 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description Enable Admin Enable Admin failed through failed through Web (SSL) from <userIP> Web (SSL) authenticated by AAA authenticated by Warning local_enable method (Username: <username>, local_enable MAC: <macaddr>)
Page 216 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description Successful Enable Admin Successful Enable through Telnet from <userIP> Admin through authenticated by AAA none Telnet Informational method (Username: authenticated by <username>, MAC: AAA none <macaddr>)
Page 217 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description Enable Admin failed through Enable Admin Web (SSL) from <userIP> failed through authenticated by AAA server Web (SSL) Warning <serverIP> (Username: authenticated by <username>, MAC: AAA server...
Page 218 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Event Category Log Content Severity Remark Description port security has reached its Port security violation (Port: Port maximum Warning <portNum>, MAC: <macaddr>) Security learning size and will not learn any new addresses Unauthenticated IP-MAC Unauthenticated...
Page 219: Cable Lengths
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Appendix D Cable Lengths Use the following table to as a guide for the maximum cable lengths. Standard Media Type Maximum Distance Mini-GBIC 1000BASE-LX, Single-mode fiber module 10km 1000BASE-SX, Multi-mode fiber module 550m 1000BASE-LHX, Single-mode fiber module...
Page 220: Glossary
xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual Glossary 1000BASE-LX: A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-SX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX: 100Mbps Ethernet implementation over fiber.
Page 221 xStack DES-3500 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual MDI-X - Medium Dependent Interface Cross-over: An Ethernet port connection where the internal transmit and receive lines are crossed. MIB - Management Information Base: Stores a device's management characteristics and parameters. MIBs are used by the Simple Network Management Protocol (SNMP) to contain attributes of their managed systems.
Page 222 FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this manual, may cause harmful interference to radio communications.
Page 223: Warrenties/Registration
Hardware. The Warranty Period shall extend for an additional ninety (90) days after any repaired or replaced Hardware is delivered. If a material defect is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
Page 224 D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product owner agrees to pay D-Link’s reasonable handling and return shipping charges for any product that is not packaged and shipped in accordance with the foregoing requirements, or that is determined by D-Link not to be defective or non-conforming.
Page 225: Fcc Warning
No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United States Copyright Act of 1976.
Page 226 The customer must submit with the product as part of the claim a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D-Link to confirm the same, along with proof of purchase of the product (such as a copy of the dated purchase invoice for the product) if the product is not registered.
Page 227 Trademarks: D-Link is a registered trademark of D-Link Systems, Inc. Other trademarks or registered trademarks are the property of their respective owners. Copyright Statement: No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems, Inc., as stipulated by the...
Page 228 Product Registration: Register online your D-Link product at http://support.dlink.com/register/ Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
Page 229 D-Link will then provide you with a Limited Lifetime Warranty reference number for this product. Please retain your original dated proof of purchase with a note of the serial number, and Limited Lifetime Warranty reference number together with this warranty statement and place each document in a safe location.
Page 230 To the extent allowed by local law, the remedies in this warranty statement are customer’s sole and exclusive remedies. Except as indicated above, in no event will D-Link or its suppliers be liable for loss of data or for indirect, special, incidental, consequential (including lost profit or data), or other damage, whether based in a contract, tort, or otherwise.
Page 231: Tech Support
Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within Australia: D-Link Technical Support over the Telephone: 1300-766-868 Monday to Friday 8:00am to 8:00pm EST Saturday 9:00am to 1:00pm EST D-Link Technical Support over the Internet: http://www.dlink.com.au...
Page 232: Technical Support
You can find software updates and user documentation on the D-Link website. Tech Support for customers within South Eastern Asia and Korea: D-Link South Eastern Asia and Korea Technical Support over the Telephone: +65-6895-5355 Monday to Friday 9:00am to 12:30pm, 2:00pm-6:00pm...
Page 233 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within India D-Link Technical Support over the Telephone: +91-22-26526741 +91-22-26526696 –ext 161 to 167 Monday to Friday 9:30AM to 7:00PM D-Link Technical Support over the Internet: http://ww.dlink.co.in...
Page 234 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers for the duration of the warranty period on this product. Customers can contact D-Link technical support through our web site or by phone.
Page 235 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within the U.A.E & North Africa: D-Link Technical Support over the Telephone: (971) 4-391-6480 (U.A.E) Sunday to Wednesday 9:00am to 6:00pm GMT+4 Thursday 9:00am to 1:00pm GMT+4 D-Link Middle East &...
Page 236 You can find software updates and user documentation on the D-Link website. Tech Support for customers within South Africa and Sub Sahara Region: D-Link South Africa and Sub Sahara Technical Support over the Telephone: +27-12-665-2165 08600 DLINK ( For South Africa only )
Page 237 Technical Support You can find updates and user documentation on the D-Link website Tech Support for Latin America customers: D-Link Technical Support over the followings Telephones: Argentina: 0800-666 1442 Monday to Friday 09:00am to 22:00pm Chile: 800-214 422 Monday to Friday 08:00am to 21:00pm...
Page 238 Обновления программного обеспечения и документация доступны на Интернет-сайте D-Link. D-Link предоставляет бесплатную поддержку для клиентов в течение гарантийного срока. Клиенты могут обратиться в группу технической поддержки D-Link по телефону или через Интернет. Техническая поддержка D-Link: (095) 744-00-99 Техническая поддержка через Интернет http://www.dlink.ru...
Page 239 El servicio de soporte técnico tiene presencia en numerosos países de la Región Latino América, y presta asistencia gratuita a todos los clientes de D-Link, en forma telefónica e internet, a través de la casilla soporte@dlinkla.com Soporte Técnico Help Desk Argentina: Teléfono: 0800-6661442 Lunes a Viernes 09:00 am a 22:00 pm...
Page 240 Você pode encontrar atualizações de software e documentação de usuário no site da D-Link Brasil www.dlinkbrasil.com.br. A D-Link fornece suporte técnico gratuito para clientes no Brasil durante o período de vigência da garantia deste produto. Suporte Técnico para clientes no Brasil: Telefone São Paulo (11) 2185-9301...
Page 242 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers within the United States and within Canada for the duration of the warranty period on this product. U.S. and Canadian customers can contact D-Link technical support through our website, or by phone.
Page 243 Technical Support You can find software updates and user documentation on the D-Link websites. D-Link provides free technical support for customers within Canada, the United Kingdom, and Ireland. Customers can contact D-Link technical support through our websites, or by phone.
Page 244 Montag bis Freitag von 6-22 Uhr und am Wochenende von 11-18 Uhr. 1,75€/Min aus dem Festnetz der Deutschen Telekom. Wenn Sie Kunde von D-Link außerhalb Deutschlands, Österreichs, der Schweiz und Osteuropas sind, wenden Sie sich bitte an die zuständige Niederlassung aus...
Page 245: Assistance Technique
Vous trouverez la documentation et les logiciels les plus récents sur le site web D-Link. Ceux-ci peuvent contacter le service technique de D-Link par notre site internet ou par téléphone. Support technique destiné aux clients établis en France: Assistance technique D-Link par téléphone :...
Page 246 D-Link . D-Link ofrece asistencia técnica gratuita para clientes dentro de España durante el periodo de garantía del producto. Los clientes españoles pueden ponerse en contacto con la asistencia técnica de D-Link a través de nuestro sitio web o por teléfono. Asistencia Técnica de D-Link por teléfono:...
Page 247 Supporto tecnico Gli ultimi aggiornamenti e la documentazione sono disponibili sul sito D-Link. Supporto tecnico per i clienti residenti in Italia D-Link Mediterraneo S.r.L. Via N. Bonnet 6/B 20154 Milano Supporto Tecnico dal lunedì al venerdì dalle ore 9.00 alle ore 19.00 con orario continuato...
Page 248 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers within Benelux for the duration of the warranty period on this product. Benelux customers can contact D-Link technical support through our website, or by phone.
Page 249: Pomoc Techniczna
Pomoc techniczna Najnowsze wersje oprogramowania i dokumentacji użytkownika można znaleźć w serwisie internetowym firmy D-Link. D-Link zapewnia bezpłatną pomoc techniczną klientom w Polsce w okresie gwarancyjnym produktu. Klienci z Polski mogą się kontaktować z działem pomocy technicznej firmy D-Link za pośrednictwem Internetu lub telefonicznie.
Page 250 Technická podpora Aktualizované verze software a uživatelských příruček najdete na webové stránce firmy D-Link. D-Link poskytuje svým zákazníkům bezplatnou technickou podporu Zákazníci mohou kontaktovat oddělení technické podpory přes webové stránky, mailem nebo telefonicky Web: http://www.dlink.cz/suppport/ E-mail: info@dlink.cz Telefon: 0224247500 Telefonická podpora je v provozu:...
Page 251 Technikai Támogatás Meghajtó programokat és frissítéseket a D-Link Magyarország weblapjáról tölthet le. Telefonon technikai segítséget munkanapokon hétfőtől- csütörtökig 9.00 – 16.00 óráig és pénteken 9.00 – 14.00 óráig kérhet a (1) 461-3001 telefonszámon vagy a support@dlink.hu emailcímen. Magyarországi technikai támogatás : D-Link Magyarország...
Page 252 Teknisk Support Du kan finne programvare oppdateringer og bruker dokumentasjon på D-Links web sider. D-Link tilbyr sine kunder gratis teknisk support under produktets garantitid. Kunder kan kontakte D-Links teknisk support via våre hjemmesider, eller på tlf. Teknisk Support: D-Link Teknisk telefon Support:...
Page 253 Teknisk Support Du finder software opdateringer og bruger- dokumentation på D-Link’s hjemmeside. D-Link tilbyder gratis teknisk support til kunder i Danmark i hele produktets garantiperiode. Danske kunder kan kontakte D-Link’s tekniske support via vores hjemmeside eller telefonisk. D-Link teknisk support over telefonen: Tlf.
Page 254 Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformation. D-Link tillhandahåller teknisk support till kunder i Sverige under hela garantitiden för denna produkt. Teknisk Support för kunder i Sverige: D-Link Teknisk Support via telefon: 0770-33 00 35 Vardagar 08.00-20.00...
Page 255 Teknistä tukea asiakkaille Suomessa: D-Link tarjoaa teknistä tukea asiakkailleen. Tuotteen takuun voimassaoloajan. Tekninen tuki palvelee seuraavasti: Arkisin klo. 9 - 21 numerosta 0800-114 677 Internetin kautta Ajurit ja lisätietoja tuotteista. http://www.dlink.fi Sähköpostin kautta voit myös tehdä kyselyitä.
Page 256 Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformation. D-Link tillhandahåller teknisk support till kunder i Sverige under hela garantitiden för denna produkt. Teknisk Support för kunder i Sverige: D-Link Teknisk Support via telefon: 0770-33 00 35 Vardagar 08.00-20.00...
Page 257 Ver 1.00...
Page 258: International Offices
URL: www.dlink.de URL: www.dlink.com.au Highveld Technopark France India Centurion Le Florilege #.2, Allee de la Fresnerie D-Link House, Kurla Bandra Complex Road, Gauteng 78330 Fontenay le Fleury Off CST Road, Santacruz (East), Mumbai - 400098. Republic of South Africa France India...
Page 259: Registration Card
8. What category best describes your company? Aerospace Engineering Education Finance Hospital Legal Insurance/Real Estate Manufacturing Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product?

This manual is also suitable for:

Xstack des-3550 Xstack des-3526

D-Link xStack DES-3526DC User Manual

Quick Links

User Manual

Related Manuals for D-Link xStack DES-3526DC

Summary of Contents for D-Link xStack DES-3526DC