Page 2 Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Table of Contents Intended Readers ................................1 Typographical Conventions ............................. 1 Notes, Notices and Cautions............................1 Chapter 1 Web-based Switch Configuration ................2 Introduction ..................................2 Login to the Web Manager .............................. 2 Web-based User Interface ..............................
Page 4 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Interface Settings ............................... 30 Management Settings ..............................33 Session Table................................34 Single IP Management ..............................35 Single IP Settings ..............................37 Topology ..................................37 Firmware Upgrade ..............................43 Configuration File Backup/Restore ..........................44 Upload Log File .................................
Page 5 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MAC Notification Settings ............................88 MAC Address Aging Time Settings ........................... 89 MAC Address Table ..............................90 ARP & FDB Table ..............................90 L2 Multicast Control ..............................91 IGMP Snooping ................................. 91 MLD Snooping ................................
Page 6 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Adding an IPv6 ACL Profile ............................. 157 Adding a Packet Content ACL Profile ........................161 CPU Access Profile List .............................. 165 Adding a CPU Ethernet ACL Profile ........................166 Adding a CPU IPv4 ACL Profile ..........................169 Adding a CPU IPv6 ACL Profile ..........................
Page 7 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Traffic Segmentation Settings ............................. 231 NetBIOS Filtering Settings ............................232 DHCP Server Screening ............................. 233 DHCP Server Screening Port Settings ........................233 DHCP Offer Permit Entry Settings .......................... 234 Access Authentication Control ............................ 235 Enable Admin ................................
Page 8 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Statistics ..................................284 Port Statistics ................................284 Packet Size ................................292 Mirror ................................... 294 Port Mirror Settings ..............................294 RSPAN Settings ..............................294 sFlow (EI Mode Only) ..............................296 sFlow Global Settings .............................. 296 sFlow Analyzer Server Settings ..........................
Page 9: Intended Readers
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Intended Readers Typographical Conventions Notes, Notices and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DGS-3120 Series Web UI Reference Guide contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology.
Page 10: Chapter 1 Web-Based Switch Configuration
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 1 Web-based Switch Configuration Introduction Login to the Web Manager Web-based User Interface Web Pages Introduction All software functions of the DGS-3120 Series switches can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 11: Areas Of The User Interface
Select the menu or window to display. Open folders and click the hyperlinked menu buttons Area 1 and subfolders contained within them to display menus. Click the D-Link logo to go to the D- Link website. Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports, console and management port, showing port activity.
Page 12: Web Pages
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the Web interface: System Configuration - In this section the user will be able to configure features regarding the Switch’s configuration.
Page 13: Chapter 2 System Configuration
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 2 System Configuration Device Information System Information Settings Port Configuration Serial Port Settings Warning Temperature Settings System Log configuration Time Range Settings Port Group Settings (EI Mode Only) Time Settings User Accounts Settings Command Logging Settings Stacking...
Page 14: System Information Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–2 Device Information window (EI Mode Only) Click the Settings link to navigate to the appropriate feature page for configuration. System Information Settings The user can enter a System Name, System Location, and System Contact to aid in defining the Switch. To view the following window, click System Configuration >...
Page 15: Port Configuration
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide System Contact Enter a contact name for the Switch, if so desired. Click the Apply button to implement changes made. Port Configuration Port Settings This page used to configure the details of the switch ports. To view the following window, click System Configuration >...
Page 16: Port Description Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The 1000M Full_Master and 1000M Full_Slave parameters refer to connections running a 1000BASE-T cable for connection between the Switch port and other device capable of a gigabit connection. The master setting (1000M Full_Master) will allow the port to advertise capabilities related to duplex, speed and physical layer type.
Page 17: Port Error Disabled
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Unit Select the unit you wish to configure. From Port / To Port Select the appropriate port range used for the configuration here. Medium Type Specify the medium type for the selected ports.
Page 18: Poe
Devices (PDs) over Category 5 or Category 3 UTP Ethernet cables. The Switch follows the standard PSE (Power Sourcing Equipment) pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6. The Switches work with all D-Link 802.3af capable devices. The Switch includes the following PoE features: •...
Page 19: Poe Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–8 PoE System Settings window The following parameters can be configured: Parameter Description Unit Select the unit you wish to configure. Tick the All check box to select all units. Power Limit (37- Sets the limit of power to be used from the Switch’s power source to PoE ports.
Page 20 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–9 PoE Port Settings window The following parameters can be configured: Parameter Description Unit Select the unit you wish to configure. From Port / To Port Select a range of ports from the pull-down menus to be enabled or disabled for PoE. State Use the pull-down menu to enable or disable ports for PoE.
Page 21: Serial Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Class 0 – 16200mW Class 1 – 4200mW Class 2 – 7400mW Class 3 – 16200mW User Define – 35000mW Click Apply to implement changes made. The port status of all PoE configured ports is displayed in the table in the bottom half of the screen shown above.
Page 22: System Log Configuration
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–11 Warning Temperature Settings window The fields that can be configured are described below: Parameter Description Traps State Use the drop-down menu to enable or disable the traps state option of the warning temperature setting.
Page 23: System Log Server Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Time Interval – Users who choose this method can configure a time interval by which the Switch will save the log files, in the box adjacent to this configuration field. The user may set a time between 1 and 65535 minutes.
Page 24: System Log
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Click the Delete All button to remove all servers configured. System Log Users can view and delete the local history log as compiled by the Switch's management agent. To view the following window, click System Configuration >...
Page 25: System Severity Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–16 System Log & Trap Settings window (SI Mode Only) Figure 2–17 System Log & Trap Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name...
Page 26: Time Range Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description System Severity Choose how the alerts are used from the drop-down menu. Select Log to send the alert of the Severity Type configured to the Switch’s log for analysis. Choose Trap to send it to an SNMP agent for analysis, or select All to send the chosen alert type to an SNMP agent and the Switch’s log for analysis.
Page 27: Time Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–20 Port Group Settings window The fields that can be configured are described below: Parameter Description Group Name Enter the name of a port group. Group ID (1-64) Enter the ID of a port group Port List Enter a port or list of ports.
Page 28 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2–22 User Accounts Settings window To add a new user, type in a User Name and New Password and retype the same password in the Confirm New Password field. Choose the level of privilege (Admin, Operator, Power User or User) from the Access Right drop- down menu.
Page 29: Command Logging Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Command Logging Settings This window is used to enable or disable the command logging settings. To view this window, click System Configuration > Command Logging Settings, as shown below: Figure 2–23 Command Logging Settings window The fields that can be configured are described below: Parameter Description...
Page 30 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Within each of these topologies, each switch plays a role in the Switch stack. These roles can be set by the user per individual Switch, or if desired, can be automatically determined by the Switch stack. Three possible roles exist when stacking with the Switch.
Page 31: Stacking Device Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide If the Backup Master has been hot removed, a new Backup Master will be chosen through the election process previously described. Switches in the stack will clear the configurations of the unit removed, and dynamically learned databases, such as ARP, will be cleared as well.
Page 32 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Force Master Use the radio buttons to enable or disable the function. It is used to ensure the master role Role is unchanged when adding a new device to the current stacking topology. If the Enabled radio button is selected, the master’s priority will become zero after the stacking has stabilized.
Page 33: Chapter 3 Management
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 3 Management Gratuitous ARP IPv6 Neighbor Settings (EI Mode Only) IP Interface Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings Static ARP Settings The Address Resolution Protocol is a TCP/IP protocol that converts IP addresses into physical addresses. This table allows network managers to view, define, modify, and delete ARP information for specific devices.
Page 34: Proxy Arp Settings (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Proxy ARP Settings (EI Mode Only) The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP responder. Therefore, the Switch can then route packets to the intended destination without configuring static routing or a default gateway.
Page 35: Gratuitous Arp
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Gratuitous ARP Gratuitous ARP Global Settings The user can enable or disable the gratuitous ARP global settings here. To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Global Settings, as show below: Figure 3–4 Gratuitous ARP Global Settings Window The fields that can be configured are described below:...
Page 36: Ipv6 Neighbor Settings (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter Description Trap Use the drop-down menu to enable or disable the trap option. By default the trap is disabled.
Page 37: Ip Interface
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Neighbor IPv6 Address Enter the neighbor IPv6 address. Link Layer MAC Enter the link layer MAC address. Address Interface Name Enter the name of the IPv6 neighbor. Tick the All check box to search for all current interfaces on the Switch.
Page 38: Interface Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide BOOTP server to provide it with this information before using the default or previously entered settings. The following table will describe the fields that are about the System Interface. Parameter Description Interface Name Display the System interface name.
Page 39 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–9 Interface Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name Enter the name of the IP interface to search for. Click the Find button to locate a specific entry based on the information entered.
Page 40 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the IPv4 Edit button to see the following window. Figure 3–11 IPv4 Interface Settings – Edit window The fields that can be configured are described below: Parameter Description Get IP From Use the drop-down menu to specify the method that this Interface uses to acquire an IP address.
Page 41: Management Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NS Retransmit Time Enter the Neighbor solicitation’s retransmit timer in millisecond here. It has the same value as the RA retransmit time in the config ipv6 nd ra command. If this field is configured, it will duplicate the entry into the RA field.
Page 42: Session Table
Being enabled, will allow the user to perform a password recovery of the running configuration. Click the Apply button to accept the changes made. To learn more about the D-Link Green Technologies, go to http://green.dlink.com/ for more details. Session Table Users can display the management sessions since the Switch was last rebooted.
Page 43: Single Ip Management
Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the “Single IP Management” feature: 1.
Page 44 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The following rules also apply to the above roles: • Each device begins in a Candidate state. • CSs must change their role to CaS and then to MS, to become a MS of a SIM group. Thus, the CS cannot directly be converted to a MS.
Page 45: Single Ip Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide c. Log – The Switch now supports uploading MS log files to a TFTP server. 4. The user may zoom in and zoom out when utilizing the topology window to get a better, more defined view of the configurations.
Page 46 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–17 Single IP Management window - Tree View The Topology window holds the following information on the Data tab: Parameter Description Device Name This field will display the Device Name of the switches in the SIM group configured by the user.
Page 47 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–18 Topology view This window will display how the devices within the Single IP Management Group connect to other groups and devices. Possible icons on this window are as follows: Icon Description Icon...
Page 48 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–19 Device Information Utilizing the Tool Tip Setting the mouse cursor over a line between two devices will display the connection speed between the two devices, as shown below. Figure 3–20 Port Speed Utilizing the Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 49 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide • Collapse – To collapse the group that will be represented by a single icon. • Expand – To expand the SIM group, in detail. • Property – To pop up a window to display the group information. Figure 3–22 Property window Parameter Description...
Page 50 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Member Switch Icon Figure 3–24 Right-clicking a Member icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. •...
Page 51: Firmware Upgrade
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Group • Add to group – Add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group.
Page 52: Configuration File Backup/Restore
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Configuration File Backup/Restore This screen is used to upgrade configuration files from the Commander Switch to the Member Switch using a TFTP server. Member Switches will be listed in the table and will be specified by ID, Port (port on the CS where the MS resides), MAC Address, Model Name and Firmware Version.
Page 53: Snmp Global Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide • private – Allows authorized management stations to retrieve and modify MIB objects. SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers.
Page 54: Snmp Traps Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description SNMP State Enable this option to use the SNMP feature. Click the Apply button to accept the changes made. SNMP Traps Settings Users can enable and disable the SNMP trap support function of the switch and SNMP authentication failure trap support, respectively.
Page 55: Snmp View Table Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–35 SNMP Linkchange Traps Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select the starting and ending ports to use.
Page 56: Snmp Community Table Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–36 SNMP View Table Settings window The fields that can be configured are described below: Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view being created.
Page 57: Snmp Group Table Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–37 SNMP community Table Settings window The fields that can be configured are described below: Parameter Description Community Name Type an alphanumeric string of up to 32 characters that is used to identify members of an SNMP community.
Page 58: Snmp Engine Id Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3–38 SNMP Group Table Settings window The fields that can be configured are described below: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users.
Page 59: Snmp User Table Settings
SNMP management private enterprise number as assigned by IANA (D-Link is 171). The fifth octet is 03 to indicate the rest is the MAC address of this device. The sixth to eleventh octets is the MAC address.
Page 60: Snmp Host Table Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked. This field will require the user to enter a password. SHA – Specify that the HMAC-SHA authentication protocol will be used. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked.
Page 61: Snmpv6 Host Table Settings (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SNMPv6 Host Table Settings (EI Mode Only) Users can set up SNMP trap recipients for IPv6. To view the following window, click Management > SNMP Settings > SNMPv6 Host Table Settings, as show below: 3–42 SNMPv6 Host Table Settings The fields that can be configured are described below:...
Page 62: Telnet Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Trap RMON Falling Alarm Enable this option to use the RMON Falling Alarm Trap Feature. Trap Click the Apply button to accept the changes made. Telnet Settings Users can configure Telnet Settings on the Switch. To view the following window, click Management >...
Page 63: Chapter 4 L2 Features
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 4 L2 Features VLAN QinQ (EI Mode Only) Spanning Tree Link Aggregation L2 Multicast Control Multicast Filtering ERPS Settings (EI Mode Only) LLDP NLB FDB Settings VLAN Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously.
Page 64 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide A VLAN is a collection of end nodes grouped by logic instead of physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are physically on the network.
Page 65 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The main characteristics of IEEE 802.1Q are as follows: • Assigns packets to VLANs by filtering. • Assumes the presence of a single global spanning tree. • Uses an explicit tagging scheme with one-level tagging.
Page 66 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–3 Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 67 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. Other 802.1Q compliant devices on the network to make packet-forwarding decisions can then use the VLAN information in the tag.
Page 68: 802.1Q Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide On port-based VLANs, NICs do not need to be able to identify 802.1Q tags in packet headers. NICs send and receive normal Ethernet packets. If the packet’s destination lies on the same segment, communications take place using normal Ethernet protocols.
Page 69 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–5 802.1Q VLAN Settings – Add/Edit VLAN Tab window The fields that can be configured are described below: Parameter Description Allow the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit VLAN tab.
Page 70 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–6 802.1Q VLAN Settings – Find VLAN Tab window Enter the VLAN ID number in the field offered and then click the Find button. You will be redirected to the VLAN List tab.
Page 71: 802.1V Protocol Vlan
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide becoming a member of the VLAN dynamically. Use the drop-down menu to designate the port as forbidden. Click the Apply button to accept the changes made. NOTE: The Switch supports up to 4k static VLAN entries. 802.1v Protocol VLAN 802.1v Protocol Group Settings The user can create Protocol VLAN groups and add protocols to that group.
Page 72: V Protocol Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Delete Group button to remove the entry completely. NOTE: The Group name value should be less than 33 characters. 802.1v Protocol VLAN Settings The user can configure Protocol VLAN settings. The lower half of the table displays any previously created settings. To view the following window, click L2 Features >...
Page 73: Asymmetric Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Show All button to display all the Protocol VLANs configured. Click the Delete All button to remove all the entries listed. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry.
Page 74: Gvrp Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description GVRP State Click the radio buttons to enable or disable the GVRP State. Join Time Enter the Join Time value in milliseconds. Leave Time Enter the Leave Time value in milliseconds. Leave All Time Enter the Leave All Time value in milliseconds.
Page 75: Mac-Based Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide packets. If the port is specified to accept only tagged frames - as tagging, and an untagged packet is forwarded to the port for transmission, the port will add an 802.1Q tag using the PVID to write the VID in the tag. When the packet arrives at its destination, the receiving device will use the PVID to make VLAN forwarding decisions.
Page 76 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide associate a secondary VLAN with a primary VLAN. A secondary VLAN cannot be associated with multiple primary VLANs. The untagged member port of the primary VLAN is named as the promiscuous port. The tagged member port of the primary VLAN is named as the trunk port. A promiscuous port of a private VLAN cannot be promiscuous port of other private VLANs.
Page 77: Pvid Auto Assign Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Secondary VLAN Type Use the drop-down menu to select secondary VLAN type between Isolated or Community. Secondary VLAN Name Enter a secondary VLAN name. Secondary VLAN List Enter a list of secondary VLAN ID.
Page 78: Voice Vlan Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Voice VLAN State The state of the voice VLAN. Voice VLAN Name The name of the voice VLAN. Voice VID The VLAN ID of the voice VLAN. Priority The priority of the voice VLAN, the range is 0 – 7. The default priority is 5. Aging Time The aging time to set, the range is 1 –...
Page 79: Voice Vlan Oui Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Mode Here the user can configure the mode of the port. Click the Apply button to accept the changes made. Voice VLAN OUI Settings This page is used to configure the user-defined voice traffic’s OUI. The OUI is used to identify the voice traffic. There are a number of pre-defined OUIs.
Page 80: Vlan Trunk Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide VLAN Trunk Settings Enable VLAN on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 81: Show Vlan Ports
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–23 Browse VLAN window Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. NOTE: The abbreviations used on this page are Tagged Port (T), Untagged Port (U) and Forbidden Port (F).
Page 82 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide more customer LAN points without over-complicating configurations on the client's side. Not only will over- complication be avoided, but also now the administrator has over 4000 VLANs in which over 4000 VLANs can be placed, therefore greatly expanding the VLAN network and enabling greater support of customers utilizing multiple VLANs on the network.
Page 83: Qinq Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 2. All ports must be configured as Access Ports or Uplink ports. Access ports can only be Ethernet ports while Uplink ports must be Gigabit ports. 3. Provider Edge switches must allow frames of at least 1522 bytes or more, due to the addition of the SPVID tag.
Page 84: Vlan Translation Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description QinQ State Selecting this option enable the QinQ feature. Inner TPID Enter an Inner TPID in SP-VLAN tag here. Unit Specifies the unit ID to be configured. From Port – To Here the user can select a range of ports to use in the configuration.
Page 85: Spanning Tree
802.1Q-2005 MSTP. 802.1D-1998 STP will be familiar to most networking professionals. However, since 802.1D-2004 RSTP and 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1D-1998 STP, 802.1D-2004 RSTP, and 802.1Q-2005 MSTP.
Page 86: Stp Bridge Global Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Port Transition States An essential difference between the three protocols is in the way ports transition to a forwarding state and in the way this transition relates to the role of the port (forwarding or not forwarding) in the topology. MSTP and RSTP combine the transition states disabled, blocking and listening used in 802.1D-1998 and creates a single state Discarding.
Page 87 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–28 STP Bridge Global Settings window The fields that can be configured are described below: Parameter Description STP Status Use the radio button to globally enable or disable STP. STP Version Use the pull-down menu to choose the desired version of STP: STP - Select this parameter to set the Spanning Tree Protocol (STP) globally on the switch.
Page 88: Stp Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NNI BPDU Address Used to determine the BPDU protocol address for GVRP in service provide site. It can use 802.1d GVRP address, 802.1ad service provider GVRP address or a user defined multicast address. The range of the user defined address is 0180C2000000 - 0180C2FFFFFF.
Page 89: Mst Configuration Identification
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Choosing the True parameter indicates a point-to-point (P2P) shared link. P2P ports are similar to edge ports; however they are restricted in that a P2P port must operate in full duplex. Like edge ports, P2P ports transition to a forwarding state rapidly thus benefiting from RSTP.
Page 90: Stp Instance Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Configuration Name This name uniquely identifies the MSTI (Multiple Spanning Tree Instance). If a Configuration Name is not set, this field will show the MAC address to the device running MSTP.
Page 91: Mstp Port Information
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MSTP Port Information This window displays the current MSTI configuration information and can be used to update the port configuration for an MSTI ID. If a loop occurs, the MSTP function will use the port priority to select an interface to put into the forwarding state.
Page 92 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 4–33 Example of Port Trunk Group The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent.
Page 93: Port Trunking Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: If any ports within the trunk group become disconnected, packets intended for the disconnected port will be load shared among the other linked ports of the link aggregation group. Port Trunking Settings On this page the user can configure the port trunk settings for the switch.
Page 94 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > Link Aggregation > LACP Port Settings, as show below: Figure 4–35 LACP Port Settings window The fields that can be configured are described below: Parameter Description Unit...
Page 95: Fdb
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Static FDB Settings Unicast Static FDB Settings Users can set up static unicast forwarding on the Switch. To view the following window, click L2 Features > FDB > Static FDB Settings > Unicast Static FDB Settings, as show below: Figure 4–36 Unicast Static FDB Settings window The fields that can be configured are described below:...
Page 96: Mac Notification Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–37 Multicast Static FDB Settings window The fields that can be configured are described below: Parameter Description The VLAN ID of the VLAN the corresponding MAC address belongs to. Multicast MAC Address The static destination MAC address of the multicast packets.
Page 97: Mac Address Aging Time Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–38 MAC Notification Settings window The fields that can be configured are described below: Parameter Description State Enable or disable MAC notification globally on the Switch Interval The time in seconds between notifications. Value range to use is 1 to 2147483647. History Size The maximum number of entries listed in the history log used for notification.
Page 98: Mac Address Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description MAC Address Aging This field specify the length of time a learned MAC Address will remain in the Time (10-1000000) forwarding table without being accessed (that is, how long a learned MAC Address is allowed to remain idle).
Page 99: L2 Multicast Control
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > FDB > ARP & FDB Table, as show below: Figure 4–41 ARP & FDB Table window (SI Mode Only) Figure 4–42 ARP & FDB Table window (EI Mode Only) The fields that can be configured are described below: Parameter Description...
Page 100 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IGMP messages sent from the device to the IGMP host or vice versa. The Switch monitors IGMP messages and discontinues forwarding multicast packets when there are no longer hosts requesting that they continue. To view the following window, click L2 Features >...
Page 101 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide specific port/VLAN. The rate is specified in packet per second. The packets that exceed the limited rate will be dropped. Querier IP Displays the querier IP address Querier Expiry Time Displays the querier expiry time. Query Interval Specify the amount of time in seconds between general query transmissions.
Page 102: Igmp Snooping Rate Limit Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–45 IGMP Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Static Router Port This section is used to designate a range of ports as being connected to multicast- enabled routers.
Page 103: Igmp Snooping Static Group Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Port List Here the user can enter the port list used for this configuration. VID List Here the user can enter the VID list used for this configuration. Rate Limit Here the user can enter the IGMP snooping rate limit used.
Page 104: Igmp Router Port
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–48 IGMP Snooping Static Group Settings window Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made.
Page 105: Igmp Snooping Forwarding Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–50 IGMP Snooping Group window The user may search the IGMP Snooping Group Table by either VLAN Name or VID List by entering it in the top left hand corner and clicking Find. The fields that can be configured are described below: Parameter Description...
Page 106: Igmp Snooping Counter
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. IGMP Snooping Counter Users can view the switch’s IGMP Snooping counter table. To view the following window, click L2 Features >...
Page 107: Mld Snooping
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the <<Back button to return to the previous page. MLD Snooping Multicast Listener Discovery (MLD) Snooping is an IPv6 function used similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data.
Page 108: Mld Snooping Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MLD Snooping Settings Users can configure the settings for MLD snooping. To view the following window, click L2 Features > L2 Multicast Control > MLD Snooping > MLD Snooping Settings, as show below: Figure 4–54 MLD Snooping Settings window The fields that can be configured are described below: Parameter...
Page 109 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide decides there are no more listeners of a group on a network. Other Querier present interval - Amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the Querier. Last listener query count - Number of group-specific queries sent before the router assumes there are no local listeners of a group.
Page 110: Mld Snooping Rate Limit Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Static Router Port This section is used to designate a range of ports as being connected to multicast- enabled routers. This will ensure that all packets with such a router as its destination will reach the multicast-enabled router regardless of the protocol.
Page 111: Mld Router Port
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–58 MLD Snooping Static Group Settings window The fields that can be configured are described below: Parameter Description VLAN Name The name of the VLAN on which the static group resides. VID List The ID of the VLAN on which the static group resides.
Page 112: Mld Snooping Group
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–60 MLD Router Port window Enter a VID (VLAN ID) in the field at the top of the window. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 113: Mld Snooping Forwarding Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Clear All Data Driven button to delete all MLD snooping groups which is learned by the Data Driven feature of specified VLANs. MLD Snooping Forwarding Table This page displays the switch’s current MLD snooping forwarding table. It provides an easy way for user to check the list of ports that the multicast group comes from and specific sources that it will be forwarded to.
Page 114: Multicast Vlan
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide VID List Specify a list of VLANs to be displayed. Port List Specify a list of ports to be displayed. Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries.
Page 115: Igmp Multicast Group Profile Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 4. The normal display of configured VLANs will not display configured Multicast VLANs. 5. Once an ISM VLAN is enabled, the corresponding IGMP snooping state of this VLAN will also be enabled. Users cannot disable the IGMP feature for an enabled ISM VLAN.
Page 116: Igmp Snooping Multicast Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Multicast Address List Enter the multicast address list value. Click the Add button to add a new entry based on the information entered. Click the <<Back button to discard the changes made and return to the previous page. Click the Delete button to remove the corresponding entry.
Page 117 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–68 IGMP Snooping Multicast VLAN Settings – Edit window The fields that can be configured are described below: Parameter Description VLAN Name This option will display the VLAN name of the VLAN configured. State Use the drop-down menu to enable or disable the state.
Page 118: Mld Multicast Group Profile Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–69 IGMP Snooping Multicast VLAN Group List Settings window The fields that can be configured are described below: Parameter Description Display the VLAN ID. VLAN Name Display the VLAN name. Profile Name Use the drop-down menu to select the IGMP Snooping Multicast VLAN Group Profile name.
Page 119: Mld Snooping Multicast Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–71 Multicast Group Profile Multicast Address Settings window The fields that can be configured are described below: Parameter Description Multicast Address List Enter the multicast address list. Click the Add button to add a new entry based on the information entered. Click the <<Back button to discard the changes made and return to the previous page.
Page 120 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide based on the remap priority. This flag will only take effect when the remap priority is set. Click the Apply button to accept the changes made for each individual section. Click the Add button to add a new entry based on the information entered. Click the Edit button to configure the MLD Snooping Multicast VLAN Settings for the specific entry.
Page 121: Multicast Filtering
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide multicast VLAN. Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page.
Page 122: Ipv4 Limited Multicast Range Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–75 IPv4 Multicast Profile Settings window The fields that can be configured are described below: Parameter Description Profile ID Enter a Profile ID between 1 and 24. Profile Name Enter a name for the IP Multicast Profile. Click the Add button to add a new entry based on the information entered.
Page 123: Ipv4 Max Multicast Group Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > Multicast Filtering > IPv4 Multicast Filtering > IPv4 Limited Multicast Range Settings, as show below: Figure 4–77 IPv4 Limited Multicast Range Settings window The fields that can be configured are described below: Parameter Description...
Page 124: Ipv6 Multicast Filtering
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Max Group If the checkbox Infinite is not selected, the user can enter a Max Group value. Infinite Tick the check box to enable or disable the use of the Infinite value. Action Use the drop-down menu to select the appropriate action for this rule.
Page 125: Ipv6 Limited Multicast Range Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–80 Multicast Address Group List Settings window The fields that can be configured are described below: Parameter Description Profile ID Display the profile ID. Profile Name Display the profile name. Multicast Address List Enter the multicast address list here.
Page 126: Multicast Filtering Mode
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 127: Erps Settings (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description VLAN Name/VID List The VLAN to which the specified filtering action applies. Tick the All check box to apply this feature to all the VLANs. Multicast Filtering This drop-down menu allows you to select the action the Switch will take when it Mode...
Page 128 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–84 ERPS Settings Window The fields that can be configured are described below: Parameter Description ERPS State Here the user can enable or disable the ERPS State. ERPS Log Here the user can enable or disable the ERPS Log. ERPS Trap Here the user can enable or disable the ERPS Trap.
Page 129 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click on the Edit button to re-configure the specific entry. Click on the <<Back button to return to the ERPS settings page. After click the Edit button, the following window will appear: The fields that can be configured are described below: Parameter Description...
Page 130 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Admin West Port Specifies the port as the west ring port and also specifies the virtual port channel used. Operational West Port Here the operational west port value will be displayed. Admin East Port Specifies the port as the east ring port and also specifies the virtual port channel used.
Page 131: Lldp
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the <<Back button to return to the previous window. LLDP LLDP Global Settings On this page the user can configure the LLDP global parameters. To view the following window, click L2 Features > LLDP > LLDP Global Settings, as show below: Figure 4–85 LLDP Global Settings window The fields that can be configured are described below: Parameter...
Page 132: Lldp Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide LLDP Port Settings On this page the user can configure the LLDP port parameters. To view the following window, click L2 Features > LLDP > LLDP Port Settings, as show below: Figure 4–86 LLDP Port Settings window The fields that can be configured are described below: Parameter...
Page 133: Lldp Management Address List
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: The IPv4 or IPv6 address entered here should be an existing LLDP management IP address. LLDP Management Address List On this page the user can view the LLDP management address list. To view the following window, click L2 Features >...
Page 134: Lldp Dot1 Tlvs Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–88 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select the starting and ending ports to use. From Port / To Port Select the port range to use for this configuration.
Page 135: Lldp Dot3 Tlvs Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–89 LLDP Dot1 TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select the starting and ending ports to use. From Port / To Port Use the drop-down menu to select the port range to use for this configuration.
Page 136: Lldp Statistic System
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–90 LLDP Dot3 TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select the starting and ending ports to use. From Port / To Port Use the drop-down menu to select the port range to use for this configuration.
Page 137: Lldp Local Port Information
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–91 LLDP Statistics System window LLDP Local Port Information The LLDP Local Port Information page displays the information on a per port basis currently available for populating outbound LLDP advertisements in the local port brief table shown below. To view the following window, click L2 Features >...
Page 138: Lldp Remote Port Information
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–93 LLDP Local Port Information – Show Normal window Select a Port number and click the Find button to locate a specific entry. To view more details about, for example, the Management Address Count, click on the Show Detail hyperlink.
Page 139: Nlb Fdb Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4–96 LLDP Remote Port Information – Show Normal window Click the <<Back button to return to the previous page. NLB FDB Settings The Switch supports Network Load Balancing (NLB). This is a MAC forwarding control for supporting the Microsoft server load balancing application where multiple servers can share the same IP address and MAC address.
Page 140: Chapter 5 L3 Features
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 5 L3 Features IPv4 Default Route Settings (SI Mode Only) IPv4 Static/Default Route Settings (EI Mode Only) IPv4 Route Table IPv6 Static/Default Route Settings (EI Mode Only) IP Forwarding Table IPv4 Default Route Settings (SI Mode Only) Entries into the Switch’s forwarding table can be made using both an IP address subnet mask and a gateway.
Page 141: Ipv4 Route Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 5–2 IPv4 Static/Default Route Settings window The fields that can be configured are described below: Parameter Description IP Address This field allows the entry of an IPv4 address to be assigned to the Static or Default route.
Page 142: Ipv6 Static/Default Route Settings (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IPv6 Static/Default Route Settings (EI Mode Only) A static entry of an IPv6 address can be entered into the Switch’s routing table for IPv6 formatted addresses. To view the following window, click L3 Features > IPv6 Static/Default Route Settings, as show below: Figure 5–5 IPv6 Static/Default Route Settings window The fields that can be configured are described below: Parameter...
Page 143: Chapter 6 Qos
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 6 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing. Advantages of QoS QoS is an implementation of the IEEE 802.1p standard that allows network administrators a method of reserving bandwidth for important functions that require a large bandwidth or have a high priority, such as VoIP (voice-over...
Page 144: 802.1P Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Understanding QoS The Switch supports 802.1p priority queuing. The Switch has eight priority queues. These priority queues are numbered from 7 (Class 7) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows: •...
Page 145: 802.1P User Priority Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6–2 Default Priority Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select the starting and ending ports to use. Priority Use the drop-down menu to select a value from 0 to 7.
Page 146: Bandwidth Control
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6–3 802.1p User Priority Settings window Once a priority has been assigned to the port groups on the Switch, then a Class may be assigned to each of the eight levels of 802.1p priorities using the drop-down menus on this window. User priority mapping is not only for the default priority configured in the last page, but also for all the incoming tagged packets with 802.1p tag.
Page 147 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6–4 Bandwidth Control Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop-down menu to select the port range to use for this configuration. Type This drop-down menu allows a selection between RX (receive), TX (transmit), and Both.
Page 148: Queue Bandwidth Control Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Queue Bandwidth Control Settings To view this window, click QoS > Bandwidth Control > Queue Bandwidth Control Settings, as shown below. To view the following window, click QoS > Bandwidth Control > Queue Bandwidth Control Settings, as show below: Figure 6–5 Queue Bandwidth Control Settings window The fields that can be configured are described below:...
Page 149 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide malfunctioning device, such as a faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch network. To help rectify this packet storm, the Switch will monitor and control the situation.
Page 150 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide From Port / To Port Use the drop-down menu to select the port range to use for this configuration. Action Select the method of traffic control from the pull-down menu. The choices are: Drop –...
Page 151: Dscp
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: Traffic Control cannot be implemented on ports that are set for Link Aggregation (Port Trunking). NOTE: Ports that are in the Shutdown Forever mode will be seen as Discarding in Spanning Tree windows and implementations though these ports will still be forwarding BPDUs to the Switch’s CPU.
Page 152: Dscp Map Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop-down menu to select a range of port to configure. State Enable/disable to trust DSCP. By default, DSCP trust is disabled. Click the Apply button to accept the changes made.
Page 153: Hol Blocking Prevention
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6–9 DSCP Map Settings - DSCP DSCP window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop-down menu to select a range of port to configure.
Page 154: Scheduling Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide HOL Blocking Click the radio buttons to enable of disable the HOL blocking prevention global Prevention State settings. Click the Apply button to accept the changes made. Scheduling Settings QoS Scheduling This window allows the user to configure the way the Switch will map an incoming packet per port based on its 802.1p user priority, to one of the eight available hardware priority queues available on the Switch.
Page 155: Qos Scheduling Mechanism
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide QoS Scheduling Mechanism Changing the output scheduling used for the hardware queues in the Switch can customize QoS. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority queues are affected.
Page 156: Chapter 7 Acl
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 7 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Egress Access Profile List (EI Mode Only) Egress ACL Flow Meter (EI Mode Only) ACL Configuration Wizard The ACL Configuration Wizard will aid the user in the creation of access profiles and ACL Rules automatically by simply inputting the address or service type and the action needed.
Page 157: Access Profile List
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Any – Selecting this option will include any starting category to this rule. MAC Address – Selecting this option will allow the user to enter a range of MAC addresses for this rule. IPv4 Address –...
Page 158: Add An Ethernet Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–2 Access Profile List window Click the Add ACL Profile button to add an entry to the Access Profile List. Click the Delete All button to remove all access profiles from this table. Click the Show Details button to display the information of the specific profile ID entry.
Page 159 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to 6. Profile Name Enter a profile name for the profile created.
Page 160 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created. Click the Delete Rules button to remove the specific entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 161: Adding An Ipv4 Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace Priority Tick this check box to replace the Priority value in the adjacent field. Replace DSCP (0-63) Select this option to instruct the Switch to replace the DSCP value (in a packet that meets the selected criteria) with the value entered in the adjacent field.
Page 162 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content.
Page 163 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value. Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header. Select Type to further specify that the access profile will apply an IGMP type value. Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion.
Page 164 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–10 Access Rule List window (IPv4 ACL) Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created.
Page 165: Adding An Ipv6 Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide defined in the config mirror port command. Port Mirroring must be enabled and a target port must be set. Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 166 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–13 Add ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content.
Page 167 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IPv6 Destination Mask The user may specify an IP address mask for the destination IPv6 address by ticking the corresponding check box and entering the IP address mask. Click the Select button to select an ACL type. Click the Create button to create a profile.
Page 168 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–16 Add Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Type in a unique identifier number for this access. This value can be set from 1 to 256.
Page 169: Adding A Packet Content Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace ToS Specify that the IP precedence of the outgoing packet is changed with the new value. Precedence (0-7) If used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window.
Page 170 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–18 Add ACL Profile (Packet Content ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to 6. Select ACL Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet Type...
Page 171 However, ARP is vulnerable as it can be easily spoofed and utilized to attack a LAN (i.e. an ARP spoofing attack). For a more detailed explanation on how ARP protocol works and how to employ D-Link’s unique Packet Content ACL to prevent ARP spoofing attack, please see Appendix E at the end of this manual.
Page 172 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–21 Add Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Type in a unique identifier number for this access. This value can be set from 1 to 256.
Page 173: Cpu Access Profile List
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace ToS Precedence Specify that the IP precedence of the outgoing packet is changed with the new (0-7) value. If used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window.
Page 174: Adding A Cpu Ethernet Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Users may globally enable or disable the CPU Interface Filtering State mechanism by using the radio buttons to change the running state. Choose Enabled to enable CPU packets to be scrutinized by the Switch and Disabled to disallow this scrutiny.
Page 175 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–24 Add CPU ACL Profile (Ethernet ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Enter a unique identifier number for this profile set. This value can be set from 1 to 5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
Page 176 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the <<Back button to discard the changes made and return to the previous page. After clicking the Show Details button, the following page will appear: Figure 7–25 CPU Access Profile Detail Information (Ethernet ACL) Click the Show All Profiles button to navigate back to the CPU ACL Profile List Page.
Page 177: Adding A Cpu Ipv4 Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100.
Page 178 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–29 Add CPU ACL Profile (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Enter a unique identifier number for this profile set. This value can be set from 1 to 5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
Page 179 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value. Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header.
Page 180 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–31 CPU Access Rule List (IPv4 ACL) Click the Add Rule button to create a new CPU ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created.
Page 181: Adding A Cpu Ipv6 Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Ports Ticking the All Ports check box will denote all ports on the Switch. Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Show Details button in the CPU Access Rule List, the following page will appear: Figure 7–33 CPU Access Rule Detail Information (IPv4 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List.
Page 182 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Profile ID (1-5) Enter a unique identifier number for this profile set. This value can be set from 1 to5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
Page 183 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the Add Rule button, the following page will appear: Figure 7–37 Add CPU Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description...
Page 184: Adding A Cpu Packet Content Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–38 CPU Access Rule Detail Information (IPv6 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU Packet Content ACL Profile The window shown below is the Add CPU ACL Profile window for Packet Content.
Page 185 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value specified: 0-15 - Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte. 16-31 – Enter a value in hex form to mask the packet from byte 16 to byte 31. 32-47 –...
Page 186 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–42 Add CPU Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 187: Acl Finder
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–43 CPU Access Rule Detail Information (Packet Content ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. ACL Finder The ACL rule finder helps you to identify any rules that have been assigned to a specific port and edit existing rules quickly.
Page 188 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide trTCM – Two Rate Three Color Marker. This, along with the srTCM, are two methods available on the switch for metering and marking packet flow. The trTCM meters and IP flow and marks it as a color based on the flow’s surpassing of two rates, the CIR and the PIR.
Page 189 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–45 ACL Flow Meter The fields that can be configured are described below: Parameter Description Profile ID Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name for the flow meter.
Page 190 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Profile ID Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name for the flow meter. Access ID Here the user can enter the Access ID for the flow meter.
Page 191: Egress Access Profile List (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–47 ACL Flow meter Display window Click the <<Back button to return to the previous page. Egress Access Profile List (EI Mode Only) Egress ACL performs per-flow processing of packets when they egress the Switch. The Switch supports three Profile Types, Ethernet ACL, IPv4 ACL, and IPv6 ACL.
Page 192 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Profile Name Enter a profile name for the profile created. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, or IPv6 address. This will change the window according to the requirements for the type of profile. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header.
Page 193 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide After clicking the Add Rule button, the following page will appear: Figure 7–51 Add Egress Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Type in a unique identifier number for this access.
Page 194: Adding An Ipv4 Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide when this access rule will be implemented on the Switch. Counter Here the user can select the counter. By checking the counter, the administrator can see how many times that the rule was hit. Port When a range of ports is to be configured, the Auto Assign check box MUST be ticked in the Access ID field of this window.
Page 195 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–53 Add Egress ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to Profile Name Enter a profile name for the profile created.
Page 196 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header. Select Type to further specify that the access profile will apply an IGMP type value. Select TCP to use the TCP port number contained in an incoming packet as the forwarding criterion.
Page 197 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–55 Egress Access Rule List window (IPv4 ACL) Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created.
Page 198: Adding An Ipv6 Acl Profile
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered. Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 199 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–58 Add Egress ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Profile ID Enter a unique identifier number for this profile set. This value can be set from 1 to Profile Name Enter a profile name for the profile created.
Page 200 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Select button to select an ACL type. Click the Create button to create a profile. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Show Details button, the following page will appear: Figure 7–59 Egress Access Profile Detail Information window (IPv6 ACL) Click the Show All Profiles button to navigate back to the Access Profile List Page.
Page 201 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7–61 Add Egress Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Type in a unique identifier number for this access. This value can be set from 1 to 128.
Page 202: Egress Acl Flow Meter (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Counter Here the user can select the counter. By checking the counter, the administrator can see how many times that the rule was hit. Ports When a range of ports is to be configured, the Auto Assign check box MUST be ticked in the Access ID field of this window.
Page 203 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the Add button to add a new entry based on the information entered. Click the View All button to display all the existing entries. Click the Delete All button to remove all the entries listed.
Page 204 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide equal or less than PIR. PIR – Specify the Peak information Rate. The unit is Kbps. PIR should always be equal to or greater than CIR. CBS – Specify the Committed Burst Size. The unit is in kilobyte. PBS –...
Page 205: Chapter 8 Security
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 8 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) (EI Mode Only) MAC-based Access Control (MAC) Web-based Access Control (WAC) Compound Authentication Port Security ARP Spoofing Prevention Settings BPDU Attack Protection Loopback Detection Settings Traffic Segmentation Settings NetBIOS Filtering Settings DHCP Server Screening...
Page 206 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch).
Page 207 Figure 8–6 The 802.1X Authentication Process The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 208: 802.1X Global Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Host-Based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device that required access to the LAN. The Switch would regard the single physical Port connecting it to the shared media segment as consisting of a number of distinct logical Ports, each logical Port...
Page 209: 802.1X Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X authenticator port settings. To view this window, click Security > 802.1X > 802.1X Port Settings as shown below: Figure 8–10 802.1X Port Settings The fields that can be configured are described below: Parameter Description...
Page 210: 802.1X User Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide TxPeriod This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default setting is 30 seconds. ReAuthPeriod A constant that defines a nonzero number of seconds between periodic re- authentication of the client.
Page 211: Guest Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–11 802.1X User Settings window The fields that can be configured are described below: Parameter Description 802.1X User The user can enter an 802.1X user’s username in here. Password The user can enter an 802.1X user’s password in here. Confirm Password The user can re-enter an 802.1X user’s password in here.
Page 212: Radius
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Limitations Using the Guest VLAN 1. Ports supporting Guest VLANs cannot be GVRP enabled and vice versa. 2. A port cannot be a member of a Guest VLAN and a static VLAN simultaneously. 3.
Page 213 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–14 Authentication RADIUS Server Settings window (SI Mode Only) Figure 8–15 Authentication RADIUS Server Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Index Choose the desired RADIUS server to configure: 1, 2 or 3 and select the IPv4 Address.
Page 214: Radius Accounting Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Confirm Key Confirm the key the same as that of the RADIUS server. Click the Apply button to accept the changes made. RADIUS Accounting Settings Users can configure the state of the specified RADIUS accounting service. To view this window, click Security >...
Page 215 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–17 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be configured are described below: Parameter Description...
Page 216: Radius Account Client
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. UnknownTypes The number of RADIUS packets of unknown type which were received from this server on the authentication port PacketsDropped The number of RADIUS packets of which were received from this server on the...
Page 217: Ip-Mac-Port Binding (Impb) (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MalformedResponses The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. BadAuthenticators The number of RADIUS Accounting-Response packets, which contained invalid authenticators, received from this server.
Page 218: Impb Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MAC-port binding configuration set on the Switch. The default is Disabled. DHCP Snooping State Click the radio buttons to enable or disable DHCP snooping for IP-MAC-port binding. The default is Disabled. Recover Learning Enter the port numbers used to recover the learning port state.
Page 219: Impb Entry Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide legal IP packets are forwarded, while the illegal IP packets are dropped. When IP Inspection is enabled, and ARP Inspection is disabled, all non-IP packets (Ex. L2 packets, or ARP) are forwarded by default. The default value is Disabled.
Page 220: Dhcp Snooping
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–22 MAC Block List The fields that can be configured are described below: Parameter Description VLAN Name Enter a VLAN Name. MAC Address Enter a MAC address. Click the Find button to find an unauthorized device that has been blocked by the IP-MAC binding restrictions Click the View All button to display all the existing entries.
Page 221: Mac-Based Access Control (Mac)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide From Port / To Port Use the drop-down menus to select a range of ports to use. Maximum Entry Enter the maximum entry value. Click the Apply button to accept the changes made. DHCP Snooping Entry This window is used to view dynamic entries on specific ports.
Page 222 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide associated with the MAC-based access control function of the Switch, and configure ports to be enabled or disabled for the MAC-based access control feature of the Switch. Please remember, ports enabled for certain other features, listed previously, and cannot be enabled for MAC-based access control.
Page 223: Mac-Based Access Control Local Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Trap State Use the drop-down menu to enable or disable trap state. Log State Use the drop-down menu to enable or disable log state. Max User Enter the maximum amount of users of the Switch. VLAN Name Enter the name of the previously configured Guest VLAN being used for this function.
Page 224: Mac-Based Access Control Authentication State
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find by MAC button to locate a specific entry based on the MAC address entered. Click the Find by VLAN button to locate a specific entry based on the VLAN name or ID entered. Click the View All button to display all the existing entries.
Page 225 WAC by attempting to gain Web access. D-Link’s implementation of WAC uses a virtual IP that is exclusively used by the WAC function and is not known by any other modules of the Switch. In fact, to avoid affecting a Switch’s other features, WAC will only use a virtual IP address to communicate with hosts.
Page 226 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2.
Page 227: Wac Global Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC Global Settings Users can configure the Switch for the Web-based access control function. To view this window, click Security > Web-based Access Control (WAC) > WAC Global Settings as shown below: Figure 8–30 WAC Global Settings window The fields that can be configured are described below:...
Page 228: Wac User Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC User Settings Users can view and set local database user accounts for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC User Settings as shown below: Figure 8–31 WAC User Settings window The fields that can be configured are described below: Parameter...
Page 229 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–32 WAC Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port Use this drop-down menu to select the beginning port of a range of ports to be enabled as WAC ports.
Page 230: Wac Authentication State
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC Authentication State Users can view and delete the hosts for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC Authentication State as shown below: Figure 8–33 WAC Authentication State window The fields that can be configured are described below: Parameter...
Page 231 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–34 Compound Authentication Settings window (SI Mode Only) Figure 8–35 Compound Authentication Settings window (EI Mode Only) The fields that can be configured are described below:...
Page 232: Compound Authentication Guest Vlan Settings (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Authorization Network State Click the radio buttons to enable of disable the Authorization Network State. Authentication Server Click the radio buttons to configure the authentication server failover function. Failover Local.
Page 233: Port Security
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–36 Compound Authentication Guest VLAN Settings window The fields that can be configured are described below: Parameter Description VLAN Name Click the button and assign a VLAN as a Guest VLAN. The VLAN must be an existing static VLAN.
Page 234 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–37 Port Security Settings window The fields that can be configured are described below: Parameter Description Port Security Use the radio button to enable or disable Port Security Traps and Logs on the Switch. Trap/Log Settings System Max Address Enter the system maximum address.
Page 235: Port Security Vlan Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–38 Port Security Port-VLAN Settings window Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. Port Security VLAN Settings Users can configure the maximum number of port-security entries that can be learned on a specific VLAN.
Page 236: Arp Spoofing Prevention Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–40 Port Security Entries window The fields that can be configured are described below: Parameter Description VLAN Name The VLAN Name of the entry in the forwarding database table that has been permanently learned by the Switch.
Page 237: Bpdu Attack Protection
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Gateway MAC Address Enter the gateway MAC address to help prevent ARP Spoofing. Ports Enter the port numbers that this feature applies to. Alternatively the user can select All Ports to apply this feature to all the ports of the switch. Click the Apply button to accept the changes made.
Page 238: Loopback Detection Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description BPDU Attack Click the radio buttons to enable or disable the BPDU Attack Protection state. Protection State Trap State Specify when a trap will be sent. Options to choose from are None, Attack Detected, Attack Cleared or Both.
Page 239: Traffic Segmentation Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–43 Loopback Detection Settings window The fields that can be configured are described below: Parameter Description LBD State Use the radio button to enable or disable loopback detection. The default is Disabled.
Page 240: Netbios Filtering Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–44 Traffic Segmentation Settings window The fields that can be configured are described below: Parameter Description Port List Here the user can select the ports to be included in the traffic segmentation setup. Forward Port List Here the user can select the ports to be included in the traffic segmentation setup by simply ticking the corresponding port’s tick box.
Page 241: Dhcp Server Screening
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–45 NetBIOS Filtering Settings window The fields that can be configured are described below: Parameter Description NetBIOS Filtering Ports Select the appropriate port to include in the NetBIOS filtering configuration. Ports Tick the appropriate ports that will be included in the NetBIOS filtering configuration.
Page 242: Dhcp Offer Permit Entry Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–46 DHCP Server Screening Port Settings window The fields that can be configured are described below: Parameter Description Filter DHCP Server Enable or disable this feature. Trap Log State Illegal Server Log Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30 Suppress Duration minutes.
Page 243: Access Authentication Control
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Server IP Address The IP address of the DHCP server to be permitted. Client’s MAC Address The MAC address of the DHCP client. Ports The port numbers of the filter DHCP server.
Page 244: Enable Admin
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide order preferable, and defined by the user for normal user authentication on the Switch, and may contain up to eight authentication techniques. When a user attempts to access the Switch, the Switch will select the first technique listed for authentication.
Page 245: Authentication Policy Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Policy Settings Users can enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login. To view this window, click Security >...
Page 246: Authentication Server Group Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Method List and Enable Method List for authentication for users utilizing the Console (Command Line Interface) application, the Telnet application, SSH, and the Web (HTTP) application. Login Method List Using the pull-down menu, configure an application for normal login on the user level, utilizing a previously configured method list.
Page 247: Authentication Server Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–53 Authentication Server Group Settings – Edit Server Group window To add an Authentication Server Host to the list, enter its name in the Group Name field, IP address in the IP Address field, use the drop-down menu to choose the Protocol associated with the IP address of the Authentication Server Host, and then click Add to add this Authentication Server Host to the group.
Page 248: Login Method Lists Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–54 Authentication Server Settings window The fields that can be configured are described below: Parameter Description IP Address The IP address of the remote server host to add. Protocol The protocol used by the server host. The user may choose one of the following: TACACS - Enter this parameter if the server host utilizes the TACACS protocol.
Page 249: Enable Method Lists Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–55 Login Method Lists Settings window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the Delete button corresponding to the entry desired to be deleted. To modify a Login Method List, click on its corresponding Edit button.
Page 250: Local Enable Password Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful authentication using any of these methods will give the user an "Admin" privilege. NOTE: To set the Local Enable Password, see the next section, entitled Local Enable Password. To view this window, click Security > Access Authentication Control > Enable method Lists Settings as shown below: Figure 8–56 Enable method Lists Settings window To delete an Enable Method List defined by the user, click the Delete button corresponding to the entry desired to...
Page 251: Ssl Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view this window, click Security > Access Authentication Control > Local Enable Password Settings as shown below: Figure 8–57 Local Enable Password Settings window The fields that can be configured are described below: Parameter Description Old Local Enable...
Page 252 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide TFTP server. The Switch supports SSLv3. Other versions of SSL may not be compatible with this Switch and may cause problems upon authentication and transfer of messages from client to host. The SSL Settings window located on the next page will allow the user to enable SSL on the Switch and implement any one or combination of listed cipher suites on the Switch.
Page 253: Ssh
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. To set up the SSL cipher suite function on the Switch, configure the parameters in the SSL Cipher suite Settings section described below: Parameter Description RSA with...
Page 254: Ssh Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide three choices as to the method SSH will use to authorize the user, which are Host Based, Password, and Public Key. Configure the encryption algorithm that SSH will use to encrypt and decrypt messages sent between the SSH client and the SSH server, using the SSH Authentication Method and Algorithm Settings window.
Page 255 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view this window, click Security > SSH > SSH Authentication method and Algorithm Settings as shown below: Figure 8–60 SSH Authentication Method and Algorithm Settings window The fields that can be configured for SSH Authentication Mode are described below: Parameter Description Password...
Page 256: Ssh User Authentication List
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Twofish128 Use the check box to enable or disable the twofish128 encryption algorithm. The default is enabled. Twofish192 Use the check box to enable or disable the twofish192 encryption algorithm. The default is enabled.
Page 257: Trusted Host Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide attempting to access the Switch. Host Based – This parameter should be chosen if the administrator wishes to use a remote SSH server for authentication purposes. Choosing this parameter requires the user to input the following information to identify the SSH user. Password –...
Page 258: Safeguard Engine Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–63 Trusted Host window (EI Mode Only) When the user clicks the Edit button, one will be able to edit the service allowed to the selected host. The fields that can be configured are described below: Parameter Description IPv4 Address...
Page 259 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide stopped, the Switch will again begin accepting all packets. Yet, if the checking shows that there continues to be too many packets flooding the Switch, it will stop accepting all ARP and IP broadcast packets and packets from un- trusted IP addresses for double the time of the previous stop period.
Page 260 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8–65 Safeguard Engine Settings window The fields that can be configured are described below: Parameter Description Safeguard Engine Use the radio button to globally enable or disable Safeguard Engine settings for the State Switch.
Page 261: Chapter 9 Network Application
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 9 Network Application DHCP SNTP Flash File System Settings DHCP DHCP Relay DHCP Relay Global Settings Users can enable and configure DHCP Relay Global Settings. The relay hops count limit allows the maximum number of hops (routers) that the DHCP messages can be relayed through to be set.
Page 262 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide State It is used to enable or disable the DHCP Relay Agent Information Option 82 on the Switch. The default is Disabled. Enabled –When this field is toggled to Enabled, the relay agent will insert and remove DHCP relay information (option 82 field) in messages between DHCP servers and clients.
Page 263 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide enable – Select this option to enable the DHCP Relay Option 61 state, in order to relay DHCP packets. disable - Select this option to disable the DHCP Relay Option 61 state. Click the Apply button to accept the changes made for each individual section.
Page 264: Dhcp Relay Interface Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The Implementation of DHCP Relay Agent Information Option 82 The DHCP Relay Option 82 command configures the DHCP relay agent information option 82 setting of the Switch. The formats for the circuit ID sub-option and the remote ID sub-option are as follows: NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero.
Page 265: Dhcp Relay Option 60 Server Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 9–4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description Interface Name The IP interface on the Switch that will be connected directly to the Server. Server IP Address Enter the IP address of the DHCP server.
Page 266: Dhcp Relay Option 60 Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 9–6 DHCP Relay Option 60 Server Settings window The fields that can be configured are described below: Parameter Description Server IP Address Enter the DHCP Relay Option 60 Server Relay IP Address. Mode Use the drop-down menu to select the DHCP Relay Option 60 Server mode.
Page 267: Dhcp Relay Option 61 Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Match Type Here the user can enter the DHCP Relay Option 60 Match Type value. Exact Match – The option 60 string in the packet must full match with the specified string.
Page 268: Dhcp Local Relay Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry based on the information entered. Click the Delete All button to remove all the entries listed. DHCP Local Relay Settings The DHCP local relay settings allows the user to add option 82 into DHCP request packets when the DHCP client gets an IP address from the same VLAN.
Page 269: Time Zone Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description SNTP State Use this radio button to enable or disable SNTP. Current Time Displays the Current Time. Time Source Displays the time source for the system. SNTP First Server The IP address of the primary server from which the SNTP information will be taken.
Page 270: Flash File System Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Offset In Minutes DST offset – 30, 60, 90, or 120 minutes. Time Zone Offset Use these pull-down menus to specify your local time zone’s offset from Greenwich From GMT In +/- Mean Time (GMT.) HH:MM Parameter...
Page 271 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide In case the file system gets corrupted, Z-modem can be used to download the backup files directly to the system. To view this window, click Network Application > Flash File System Settings as shown below: Figure 9–12 Flash File System Settings window Enter the Current Path string and click the Go button to navigate to the path entered.
Page 272 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When copying a file to the file system of this switch, the user must enter the Source and Destination path. Click the Apply button to initiate the copy. Click the Cancel button the discard the process. After clicking the Move button, the following page will appear: Figure 9–15 Flash File System Settings –...
Page 273: Chapter 10 Oam
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 10 Ethernet OAM Cable Diagnostics CFM Settings On this page the user can configure the CFM parameters. To view this window, click OAM > CFM > CFM Settings, as shown below: Figure 10–1 CFM Settings Window The fields that can be configured are described below: Parameter...
Page 274 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chassis – Transmit sender ID TLV with chassis ID information. Manage – Transmit sender ID TLV with managed address information. Chassis Manage – Transmit sender ID TLV with chassis ID information and manage address information.
Page 275 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–3 CFM MA Settings (Edit) Window The fields that can be configured are described below: Parameter Description This is the control creation of MIPs. None - Don’t create MIPs. Auto - MIPs can always be created on any ports in this MA, if that port is not configured with a MEP of that MA.
Page 276 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–4 CFM MIP Port Table Window Click the <<Back button to return to the previous page. After clicking the Add MEP button, the following page will appear: Figure 10–5 CFM MEP Settings (Add) Window The fields that can be configured are described below: Parameter Description...
Page 277 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–6 CFM MEP Information Window Click the Edit button to re-configure the specific entry. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Edit button, the following page will appear: Figure 10–7 CFM MEP Information (Edit) Window...
Page 278 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description MEP State This is the MEP administrative state. Enable - MEP is enabled. Disable - MEP is disabled. This is the default value. CCM State This is the CCM transmission state.
Page 279: Cfm Port Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 1sec - Specifies that the transmitting interval will be set to 1 second. 1min - Specifies that the transmitting interval will be set to 1 minute. Level The client level ID to which the MEP sends AIS PDU. The default client MD level is MD level at which the most immediate client layer MIPs and MEPs exist.
Page 280: Cfm Mipccm Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–10 CFM Port Settings Window The fields that can be configured are described below: Parameter Description Unit Specifies the unit’s ID used. From Port ~ To Port Here the user can select the port range used for this configuration. State Here the user can enable or disable the state of specific port regarding the CFM configuration.
Page 281: Cfm Linktrace Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–12 CFM Loopback Settings Window The fields that can be configured are described below: Parameter Description MEP Name Select and enter the Maintenance End Point name used. MEP ID Select and enter the Maintenance End Point ID used. MD Name Select and enter the Maintenance Domain name used.
Page 282: Cfm Packet Counter
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–13 CFM Linktrace Settings Window The fields that can be configured are described below: Parameter Description MEP Name Select and enter the Maintenance End Point name used. MEP ID Select and enter the Maintenance End Point ID used. MD Name Select and enter the Maintenance Domain name used.
Page 283: Cfm Fault Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–14 CFM Packet Counter Window The fields that can be configured are described below: Parameter Description Port List Which ports’ counter to show. If not specified, all ports will be shown. All Ports Select this option to include all the port in this configuration.
Page 284: Cfm Mp Table
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide CFM MP Table To view this window, click OAM > CFM > CFM MP Table, as shown below: Figure 10–16 CFM MP Table Window The fields that can be configured are described below: Parameter Description Port...
Page 285: Ethernet Oam Configuration Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-17 Ethernet OAM Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select a range of ports you wish to configure. Mode Use the drop-down menu to select to operate in either Active or Passive.
Page 286: Ethernet Oam Event Log
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-18 Ethernet OAM Configuration Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select a range of ports you wish to configure.
Page 287: Ethernet Oam Statistics
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-19 Ethernet OAM Event Log window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select the unit ID and the port number to view. Port List Enter a list of ports.
Page 288: Cable Diagnostics
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-20 Ethernet OAM Statistics window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select the unit ID and the port number to view. Port List Enter a list of ports.
Page 289 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10–21 Cable Diagnostics window To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test The information will be displayed in this window. NOTE: Cable diagnostic function limitations.
Page 290: Chapter 11 Monitoring
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 11 Monitoring Utilization Statistics Mirror sFlow (EI Mode Only) Ping Test Trace Route Peripheral Utilization CPU Utilization Users can display the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval.
Page 291: Dram & Flash Utilization
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value is 200. Show/Hide Check whether or not to display Five Seconds, One Minute, and Five Minutes. Click the Apply button to accept the changes made. DRAM & Flash Utilization On this page the user can view information regarding the DRAM and Flash utilization. To view this window, click Monitoring >...
Page 292: Statistics
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. The fields that can be configured are described below: Parameter Description...
Page 293 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–4 Received (RX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11–5 RX Packets Analysis Table window The fields that can be configured are described below: Parameter Description...
Page 294 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value is 200. Bytes Counts the number of bytes received on the port. Packets Counts the number of packets received on the port. Unicast Counts the total number of good packets that were received by a unicast address. Multicast Counts the total number of good packets that were received by a multicast address.
Page 295 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–7 RX Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port Use the drop-down menu to choose the port that will display statistics.
Page 296 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–8 Transmitted (TX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11–9 TX Packets Analysis window (table for Bytes and Packets) The fields that can be configured are described below: Parameter Description...
Page 297 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Bytes Counts the number of bytes successfully sent on the port. Packets Counts the number of packets successfully sent on the port. Unicast Counts the total number of good packets that were transmitted by a unicast address. Multicast Counts the total number of good packets that were transmitted by a multicast address.
Page 298 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–11 RX Error Analysis window (table) The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s"...
Page 299 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view this window, click Monitoring >...
Page 300: Packet Size
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200.
Page 301 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the View Table link to display the information in a table rather than a line graph. Figure 11–15 RX Size Analysis window (table) The fields that can be configured are described below: Parameter Description Unit...
Page 302: Mirror
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Mirror The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 303 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: RSPAN VLAN mirroring will only work when RSPAN is enabled (when one RSPAN VLAN has been configured with a source port). The RSPAN redirect function will work when RSPAN is enabled and at least one RSPAN VLAN has been configured with redirect ports.
Page 304: Sflow (Ei Mode Only)
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Tick Add or Delete to add or delete source ports. Redirect Port List Specify the output port list for the RSPAN VLAN packets. If the redirect port is a Link Aggregation port, the Link Aggregation behavior will apply to the RSPAN packets. Tick Add or Delete to add or delete redirect ports.
Page 305: Sflow Flow Sampler Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–20 sFlow Analyzer Server Settings window The fields that can be configured are described below: Parameter Description Analyzer Server ID The analyzer server ID specifies the ID of a server analyzer where the packet will be forwarded.
Page 306: Sflow Counter Poller Settings
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–21 sFlow Flow Sampler Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure. From Port / To Port Use the drop-down menus to specify the list of ports to be configured. Analyzer Server ID The analyzer server ID specifies the ID of a server analyzer where the packet will be forwarded.
Page 307: Ping Test
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide forwarded. Interval The maximum number of seconds between successive samples of the counters. Click the Apply button to accept the changes made. Click the Delete All button to remove all the entries listed. Click the Edit button to re-configure the specific entry.
Page 308: Trace Route
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Target IP Address Enter an IP address to be pinged. Repeat Pinging for Enter the number of times desired to attempt to Ping either the IPv4 address or the IPv6 address configured in this window.
Page 309 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11–27 Trace Route window (EI Mode Only) The fields that can be configured are described below: Parameter Description IPv4 Address / IPv6 IP address of the destination station. Address The time to live value of the trace route request. This is the maximum number of routers that a trace route packet can pass.
Page 310: Peripheral
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Peripheral Device Environment The device environment feature displays the Switch internal temperature status. To view this window, click Monitoring > Peripheral > Device Environment as shown below: Figure 11–29 Device Environment window Click the Refresh button to refresh the display table so that new entries will appear.
Page 311: Chapter 12 Save And Tools
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 12 Save and Tools Save Configuration / Log Stacking Information Download firmware Upload Firmware Download Configuration Upload Configuration Upload Log File Reset Reboot System Save Configuration / Log To view this window, click Save > Save Configuration / Log, as shown below. Save Configuration allows the user to backup the configuration of the switch to a folder on the computer.
Page 312 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The number of switches in the switch stack (up to 6 total) are displayed next to the Tools drop-down menu. The icons are in the same order as their respective Unit numbers, with the Unit 1 switch corresponding to the icon in the upper left-most corner of the icon group.
Page 313: Download Firmware
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Download firmware The following window is used to download firmware for the Switch. Download Firmware From TFTP This page allows the user to download firmware from a TFTP Server to the Switch and updates the switch. Figure 12–5 Download Firmware –...
Page 314: Upload Firmware
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12–7 Download Firmware – HTTP window The fields that can be configured are described below: Parameter Description Unit Use the drop-down menu to select a unit for receiving the firmware. Select All for all units.
Page 315: Download Configuration
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Unit Use the drop-down menu to select a unit for uploading the firmware. TFTP Server IP Enter the TFTP server IP address used. IPv4 Click the radio button to enter the TFTP server IP address used. IPv6 (EI Mode Click the radio button to enter the TFTP server IPv6 address Only)
Page 316: Download Configuration From Http
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Destination File Enter the location and name of the Destination File. Source File Enter the location and name of the Source File. Click Download to initiate the download. Download Configuration From HTTP This page allows the user to download the configuration file from a computer to the Switch and updates the switch.
Page 317: Upload Configuration To Http
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12–14 Upload Configuration – TFTP window (EI Mode Only) The fields that can be configured are described below: Parameter Description Unit Use the drop-down menu to select a unit for uploading the configuration file. TFTP Server IP Enter the TFTP server IP address used.
Page 318: Upload Log File
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Upload Log File The following window is used to upload the log file from the Switch. Upload Log To TFTP This page allows the user to upload the log file from the Switch to a TFTP Server. Figure 12–16 Upload Log –...
Page 319: Reset
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12–18 Upload Log – HTTP window The fields that can be configured are described below: Parameter Description Log Type Here the user can select the type of log to be transferred. Selecting the Common Log option here will upload the common log entries.
Page 320 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12–20 Reboot System Window Selecting the Yes radio button will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Selecting the No radio button instructs the Switch not to save the current configuration before restarting the Switch. All of the configuration information entered from the last time Save Changes was executed will be lost.
Page 321: Appendix Section
ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link’s switches to thwart ARP spoofing attacks. In the process of ARP, PC A will first issue an ARP request to query PC B’s MAC address.
Page 322 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port into its Forwarding Table.
Page 323: How Arp Spoofing Attacks A Network
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The switch will also examine the “Source Address” of the Ethernet frame and find that the address is not in the Forwarding Table. The switch will learn PC B’s MAC and update its Forwarding Table. How ARP Spoofing Attacks a Network ARP spoofing, also known as ARP poisoning, is a method to...
Page 324: Prevent Arp Spoofing Via Packet Content Acl
Figure 5 all traffic will be then sniffed by the hacker but the users will not discover. Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL.
Page 325 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Chunk Chunk0 Chunk1 Chunk2 Chunk3 Chunk4 Chunk5 Chunk6 Chunk7 Chunk8 Chunk9 Chunk10 Chunk11 Chunk12 Chunk13 Chunk14 Chunk15...
Page 326 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 0xA5A offset_chunk_3 0x5A5A0000 Step 5: save Save configuration.
Page 327: Reset The Password
This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.
Page 328: Appendix C System Log Entries
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description Log Information Severity Remark System...
Page 329 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Firmware upgrade was [Unit <unitID>,] Firmware upgrade by console Warning "by console" unsuccessful was unsuccessful! (Username: <username>, and "IP: IP: <ipaddr> ) <ipaddr>" are XOR shown in log string, which means if user login by console, there will no IP...
Page 330 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Firmware successfully uploaded Firmware successfully uploaded by console Informational "by console" (Username: <username>, IP: <ipaddr> ) and "IP: <ipaddr>" are XOR shown in log string, which means if user login by console, there will no IP information for...
Page 331 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Logout through Web(SSL) Logout through Web(SSL) (Username: Informational <username>, IP: <ipaddr>) Web(SSL) session timed out Web(SSL) session timed out (Username: Informational <username>, IP: <ipaddr> ) Telnet Successful login through Telnet Successful login through Telnet (Username: Informational <username>, IP: <ipaddr>) Login failed through Telnet...
Page 332 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SSH server is disabled SSH server is disabled Informational Authentication Policy is enabled (Module: Authentication Policy is enabled Informational AAA) Authentication Policy is disabled Authentication Policy is disabled (Module: Informational AAA) Successful login through Successful login through Console Informational...
Page 333 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful login through Successful login through Web(SSL) from Informational Web(SSL) authenticated by AAA <userIP> authenticated by AAA server server <serverIP> (Username: <username> ) Login failed through Web(SSL) from <userIP> Login failed through Web(SSL) Warning authenticated by AAA server authenticated by AAA server <serverIP>...
Page 334 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful Enable Admin Successful Enable Admin through Telnet from Informational through Telnet authenticated by <userIP> authenticated by AAA none method AAA none method (Username: <username>) Successful Enable Admin through SSH from Successful Enable Admin Informational through SSH authenticated by...
Page 335 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The authorized user number on MAC-based Access Control enters stop Warning per system whole device reaches the max learning state. user limit. MAC-based Access Control recovers from The authorized user number on Warning per system whole device is below the max...
Page 336 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide cleared Port <[unitID:]portNum> Multicast storm is Multicast storm occurrence Warning occurring Multicast storm cleared Port <[unitID:]portNum> Multicast storm has Informational cleared Port shut down due to a packet Port <[unitID:]portNum> is currently shut Warning down due to a packet storm storm...
Page 337 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Voice VLAN When a new voice device is New voice device detected Informational detected in the port (MAC:<macaddr>,Port:<[unitID:]portNum>) Port <[unitID:]portNum> add into voice VLAN While the port join to the voice Informational VLAN while the port is auto <vid >...
Page 338: Appendix D Trap Log Entries
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix D Trap Log Entries This table lists the trap logs found on the Switch. Log Entry Description L2macNotification This trap indicates the MAC address 1.3.6.1.4.1.171.11.101.1.2.100.1.2.0.1 variations in the address table. L2PortSecurityViolationTrap When the port security trap is enabled, new 1.3.6.1.4.1.171.11.101.1.2.100.1.2.0.2...
Page 339 xStack® DGS-3120 Series Managed Switch Web UI Reference Guide itself and that its configuration may have been altered. warmStart A warmStart trap signifies that the SNMPv2 1.3.6.1.6.3.1.1.5.2 entity, acting in an agent role, is reinitializing itself such that its configuration is unaltered. linkDown A linkDown trap signifies that the SNMP entity, 1.3.6.1.6.3.1.1.5.3...

This manual is also suitable for:

Dgs-3120-48pc-ei Dgs-3120-48pc-si Dgs-3120-48tc Dgs-3120-24pc-ei Dgs-3120-24pc-si Xstack dgs-3120 series

D-Link DGS-3120-24TC Product Manual

Chapter 1 Web-Based Switch Configuration

Chapter 2 System Configuration

Chapter 3 Management

Chapter 4 L2 Features

Chapter 5 L3 Features

Chapter 6 Qos

Chapter 7 ACL

Chapter 8 Security

Chapter 9 Network Application

Chapter 10 OAM

Chapter 11 Monitoring

Chapter 12 Save and Tools

Quick Links

Related Manuals for D-Link DGS-3120-24TC

Summary of Contents for D-Link DGS-3120-24TC