Page 2 Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Table of Contents Intended Readers ................................1 Typographical Conventions ............................. 1 Notes, Notices and Cautions............................1 Safety Instructions ................................1 Safety Cautions ................................2 General Precautions for Rack-Mountable Products......................3 Protecting Against Electrostatic Discharge ........................4 Chapter 1 Web-based Switch Configuration ................
Page 4 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Gratuitous ARP Global Settings ..........................30 Gratuitous ARP Settings ............................30 IPv6 Neighbor Settings ..............................31 IP Interface ..................................32 System IP Address Settings ............................32 Interface Settings ............................... 33 Loopback Interface Settings ............................37 Management Settings ..............................
Page 5 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Layer 2 Protocol Tunneling Settings ..........................87 Spanning Tree ................................87 STP Bridge Global Settings ............................89 STP Port Settings ..............................91 MST Configuration Identification ..........................92 STP Instance Settings ............................... 93 MSTP Port Information ..............................
Page 6 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Route Preference Settings ............................159 ECMP Algorithm Settings ............................159 Route Redistribution Settings ............................160 IP Tunnel (EI Mode Only) ............................161 IP Tunnel Settings ..............................161 IP Tunnel GRE Settings ............................162 OSPF ...................................
Page 7 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Queue Bandwidth Control Settings ......................... 265 Traffic Control Settings ..............................265 HOL Blocking Prevention ............................268 Scheduling Settings ..............................268 QoS Scheduling ............................... 268 QoS Scheduling Mechanism ........................... 269 Chapter 7 ACL ........................
Page 8 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Japanese Web-based Access Control (JWAC) ......................353 JWAC Global Settings ............................. 353 JWAC Port Settings ..............................355 JWAC User Settings ..............................356 JWAC Authentication State ............................. 357 JWAC Customize Page Language .......................... 357 JWAC Customize Page ............................
Page 9 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide DNS Resolver Static Name Server Settings ......................405 DNS Resolver Dynamic Name Server Table ......................406 DNS Resolver Static Host Name Settings ....................... 406 DNS Resolver Dynamic Host Name Table ......................407 RCP Server Settings ..............................
Page 10 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Stacking Information ..............................449 Download Firmware ..............................451 Download Firmware from TFTP ..........................451 Download Firmware from RCP ..........................451 Download Firmware from HTTP ..........................452 Upload Firmware ................................. 452 Upload Firmware to TFTP ............................452 Upload Firmware to RCP ............................
Page 11: Intended Readers
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Intended Readers Typographical Conventions Notes, Notices and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DGS-3620 Series Web UI Reference Guide contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology.
Page 12: Safety Cautions
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Safety Cautions To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment observe the following precautions: • Observe and follow service markings. Do not service any product except as explained in the system documentation. Opening or removing covers that are marked with the triangular symbol with a lightning bolt may expose the user to electrical shock.
Page 13: General Precautions For Rack-Mountable Products
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Install the power supply before connecting the power cable to the power supply. Unplug the power cable before removing the power supply. If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supplies.
Page 14: Protecting Against Electrostatic Discharge
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Protecting Against Electrostatic Discharge Static electricity can harm delicate components inside the system. To prevent static damage, discharge static electricity from your body before touching any of the electronic components, such as the microprocessor. This can be done by periodically touching an unpainted metal surface on the chassis.
Page 15: Chapter 1 Web-Based Switch Configuration
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 1 Web-based Switch Configuration Introduction Login to the Web Manager Web-based User Interface Web Pages Introduction All software functions of the DGS-3620 Series switches can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 16: Web-Based User Interface
Function Number Select the menu or window to display. Open folders and click the hyperlinked menu buttons and subfolders contained within them to display menus. Click the D-Link logo to go to the D- Area 1 Link website. Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports, console and management port, showing port activity.
Page 17: Web Pages
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the Web interface: System Configuration - In this section the user will be able to configure features regarding the Switch’s configuration.
Page 18: Chapter 2 System Configuration
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 2 System Configuration Device Information System Information Settings Port Configuration Serial Port Settings Warning Temperature Settings System Log configuration Time Range Settings Port Group Settings Time Settings User Accounts Settings Command Logging Settings Stacking Device Information...
Page 19: System Information Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 2-1 Device Information window Click the Settings link to navigate to the appropriate feature page for configuration. System Information Settings The user can enter a System Name, System Location, and System Contact to aid in defining the Switch. To view the following window, click System Configuration >...
Page 20: Port Configuration
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter a contact name for the Switch, if so desired. System Contact Click the Apply button to implement changes made. Port Configuration Port Settings This page used to configure the details of the switch ports. To view the following window, click System Configuration >...
Page 21: Port Description Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide among 10, 100 and 1000 Mbps devices, in full- or half-duplex (except 1000 Mbps which is always full duplex). The Auto setting allows the port to automatically determine the fastest settings the device the port is connected to can handle, and then to use those settings.
Page 22: Port Error Disabled
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 2-4 Port Description Settings window The fields that can be configured are described below: Parameter Description Select the unit you wish to configure. Unit Select the appropriate port range used for the configuration here. From Port / To Port Specify the medium type for the selected ports.
Page 23: Port Auto Negotiation Information
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be displayed are described below: Parameter Description Display the port that has been error disabled. Port Describe the current running state of the port, whether enabled or disabled. Port State Display the uplink status of the individual ports, whether enabled or disabled.
Page 24: Jumbo Frame Settings
Devices (PDs) over Category 5 or Category 3 UTP Ethernet cables. The Switch follows the standard PSE (Power Sourcing Equipment) pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6. The Switches work with all D-Link 802.3af capable devices.
Page 25: Poe System Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The Switch includes the following PoE features: • Auto-discovery recognizes the connection of a PD (Powered Device) and automatically sends power to it. • The Auto-disable feature occurs under two conditions: firstly, if the total power consumption exceeds the system power limit;...
Page 26: Poe Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide PoE Port Settings To view the following window, click System Configuration > PoE > PoE Port Settings, as show below: Figure 2-9 PoE Port Settings window The following parameters can be configured: Parameter Description Select the unit you wish to configure.
Page 27: Serial Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Serial Port Settings This window allows the user to adjust the Baud Rate and the Auto Logout values. To view the following window, click System Configuration > Serial Port Settings, as show below: Figure 2-10 Serial Port Settings window The fields that can be configured are described below: Parameter...
Page 28: System Log Configuration
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide (-500-500) Enter the low threshold value of the warning temperature setting. Low Threshold (-500-500) Click the Apply button to implement changes made. System Log configuration System Log Settings The Switch allows users to choose a method for which to save the switch log to the flash memory of the Switch. To view the following window, click System Configuration >...
Page 29: System Log
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 2-13 System Log Server Settings The fields that can be configured are described below: Parameter Description Syslog server settings index (1 to 4). Server ID Use the drop-down menu to select the higher level of messages that will be sent. All Severity messages which level is higher than selecting level will be sent.
Page 30: System Log & Trap Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description In the drop-down menu the user can select the log type that will be displayed. Log Type Severity - When selecting Severity from the drop-down menu, a secondary tick must be made.
Page 31: System Severity Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide System Severity Settings The Switch can be configured to allow alerts be logged or sent as a trap to an SNMP agent. The level at which the alert triggers either a log entry or a trap message can be set as well. Use the System Severity Settings window to set the criteria for alerts.
Page 32: Port Group Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This parameter is used to set the time in the day that this time range is to be enabled Hours (HH MM SS) using the following parameters: Start Time - Use this parameter to identify the starting time of the time range, in hours, minutes and seconds, based on the 24-hour time system.
Page 33: User Accounts Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enter the current day, month, and year to update the system clock. Date (DD/MM/YYYY) Enter the current time in hours, minutes, and seconds. Time (HH:MM:SS) Click the Apply button to accept the changes made. User Accounts Settings The Switch allows the control of user privileges.
Page 34: Command Logging Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide NOTICE: In case of lost passwords or password corruption, refer to Appendix B Password Recovery Procedure which will guide you through the steps necessary to resolve this issue. NOTE: User Name should be less than 16 characters. Password should be less than 16 or 35 characters.
Page 35 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 2-22 Switches stacked in a Duplex Chain Figure 2-23 Switches stacked in a Duplex Ring Within each of these topologies, each switch plays a role in the Switch stack. These roles can be set by the user per individual Switch, or if desired, can be automatically determined by the Switch stack.
Page 36: Stacking Device Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide MAC address. Yet, if adding two stacks together that have both previously undergone the election process, and therefore both have a Primary Master and a Backup master, a new Primary Master will be elected from one of the already existing Primary Masters, based on priority or MAC address.
Page 37 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 2-25 Stacking Mode Settings window The fields that can be configured or viewed are described below: Parameter Description The stacking mode is disabled by default. Stacking Mode Use the radio buttons to enable or disable the function. It is used to ensure the master role Force Master is unchanged when adding a new device to the current stacking topology.
Page 38: Chapter 3 Management
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 3 Management Gratuitous ARP IPv6 Neighbor Settings IP Interface Management Settings Out of Band Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings Static ARP Settings The Address Resolution Protocol is a TCP/IP protocol that converts IP addresses into physical addresses.
Page 39: Proxy Arp Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Proxy ARP Settings The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP responder. Therefore, the Switch can then route packets to the intended destination without configuring static routing or a default gateway.
Page 40: Gratuitous Arp
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Gratuitous ARP Gratuitous ARP Global Settings The user can enable or disable the gratuitous ARP global settings here. To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Global Settings, as show below: Figure 3-4 Gratuitous ARP Global Settings Window The fields that can be configured are described below:...
Page 41: Ipv6 Neighbor Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter Description Use the drop-down menu to enable or disable the trap option. By default the trap is Trap disabled.
Page 42: Ip Interface
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the interface name of the IPv6 neighbor. Tick the All check box to search Interface Name for all current interfaces on the Switch. Tick the Hardware check box to display all the neighbor cache entries which were written into the hardware table.
Page 43: Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The Switch will send out a BOOTP broadcast request when it is powered up. The BOOTP BOOTP protocol allows IP addresses, network masks, and default gateways to be assigned by a central BOOTP server. If this option is set, the Switch will first look for a BOOTP server to provide it with this information before using the default or previously entered settings.
Page 44 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete All button to remove all the entries listed. Click the IPv4 Edit button to edit the IPv4 settings for the specific entry. Click the IPv6 Edit button to edit the IPv6 settings for the specific entry. Click the Delete button to remove the specific entry.
Page 45 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enter the IP Layer MTU value used. The value is between 512 and 1712. The default IP MTU (512-1712) value is 1500. Use the drop-down menu to enable or disable the IP directed-broadcast state of the IP Directed Broadcast interface.
Page 46 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to enable or disable the Automatic Link Local Address. Automatic Link Local Address Use the drop-down menu to enable or disable router advertisement. State Enter the lifetime of the router between 0 and 9000 seconds as the default router. Life Time (0-9000) Enter the amount of time that a node can consider a neighboring node reachable Reachable Time (0-...
Page 47: Loopback Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Loopback Interface Settings This window is used to configure loopback interfaces. A loopback interface is a logical IP interface which is always active, until a user disables or deletes it. It is independent of the state of any physical interfaces. To view this window, click Management >...
Page 48: Management Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Management Settings Users can stop the scrolling of multiple pages beyond the limits of the console when using the Command Line Interface. This window is also used to enable the DHCP auto configuration feature on the Switch. When enabled, the Switch is instructed to receive a configuration file from a TFTP server, which will set the Switch to become a DHCP client automatically on boot-up.
Page 49: Out Of Band Management Settings
Being enabled, will allow the user to perform a password recovery of the Configuration running configuration. Click the Apply button to accept the changes made. To learn more about the D-Link Green Technologies, go to http://green.dlink.com/ for more details. Out of Band Management Settings This window is used to configure the out of band management port settings.
Page 50: Single Ip Management
DGS-3620 Series Managed Switch Web UI Reference Guide Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the “Single IP Management” feature: 1.
Page 51: Single Ip Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide • The user can manually configure a CaS to become a CS • The CaS can be configured through the CS to become a MS. After configuring one switch to operate as the CS of a SIM group, additional DGS-3620 Series switches may join the group by manually configuring the Switch to be a MS.
Page 52: Topology
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-19 Single IP Settings window The fields that can be configured are described below: Parameter Description Use the drop-down menu to either enable or disable the SIM state on the Switch. Disabled SIM State will render all SIM functions on the Switch inoperable.
Page 53 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-20 Single IP Management window - Tree View The Topology window holds the following information on the Data tab: Parameter Description This field will display the Device Name of the switches in the SIM group configured by the Device Name user.
Page 54 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-21 Topology view This window will display how the devices within the Single IP Management Group connect to other groups and devices. Possible icons on this window are as follows: Icon Description Icon...
Page 55 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-22 Device Information Utilizing the Tool Tip Setting the mouse cursor over a line between two devices will display the connection speed between the two devices, as shown below. Figure 3-23 Port Speed Utilizing the Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 56 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-24 Right-Clicking a Group Icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. •...
Page 57 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide • Expand – To expand the SIM group, in detail. • Property – To pop up a window to display the group information. Member Switch Icon Figure 3-27 Right-clicking a Member icon The following options may appear for the user to configure: •...
Page 58: Firmware Upgrade
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide • Preference – Will set display properties, such as polling interval, and the views to open at SIM startup. Group • Add to group – Add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group.
Page 59: Configuration File Backup/Restore
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Configuration File Backup/Restore This screen is used to upgrade configuration files from the Commander Switch to the Member Switch using a TFTP server. Member Switches will be listed in the table and will be specified by ID, Port (port on the CS where the MS resides), MAC Address, Model Name and Firmware Version.
Page 60: Snmp Global Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide • private – Allows authorized management stations to retrieve and modify MIB objects. SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers.
Page 61: Snmp Traps Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enable this option to use the SNMP feature. SNMP State Click the Apply button to accept the changes made. SNMP Traps Settings Users can enable and disable the SNMP trap support function of the switch and SNMP authentication failure trap support, respectively.
Page 62: Snmp View Table Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-38 SNMP Linkchange Traps Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select the starting and ending ports to use. From Port / To Port Use the drop-down menu to enable or disable the SNMP link change Trap.
Page 63: Snmp Community Table Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-39 SNMP View Table Settings window The fields that can be configured are described below: Parameter Description Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP View Name view being created.
Page 64: Snmp Group Table Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Type an alphanumeric string of up to 32 characters that is used to identify members of Community Name an SNMP community. This string is used like a password to give remote SNMP managers access to MIB objects in the Switch’s SNMP agent.
Page 65: Snmp Engine Id Settings
SNMP management private enterprise number as assigned by IANA (D-Link is 171). The fifth octet is 03 to indicate the rest is the MAC address of this device. The sixth to eleventh octets is the MAC address.
Page 66: Snmp Host Table Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-43 SNMP User Table Settings window The fields that can be configured are described below: Parameter Description An alphanumeric string of up to 32 characters. This is used to identify the SNMP User Name users.
Page 67: Snmpv6 Host Table Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Type the IP address of the remote management station that will serve as the SNMP Host IP Address host for the Switch. SNMPv1 –...
Page 68: Rmon Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the Delete button to remove the specific entry. RMON Settings This window is used to enable or disable remote monitoring (RMON) for the rising and falling alarm trap feature for the SNMP function on the Switch.
Page 69: Telnet Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-48 SNMP community Maskking Settings window The fields that can be configured are described below: Parameter Description Use the drop-down menu to choose the MIB view name. View Name Use the drop-down menu to select the access right for the user using the Access right community string.
Page 70 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 3-50 Web Settings window The fields that can be configured are described below: Parameter Description Web-based management is Enabled by default. If you choose to disable this by clicking Web Status Disabled, you will lose the ability to configure the system through the web interface as soon as these settings are applied.
Page 71: Chapter 4 L2 Features
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 4 L2 Features VLAN QinQ Layer 2 Protocol Tunneling Settings Spanning Tree Link Aggregation L2 Multicast Control Multicast Filtering ERPS Settings LLDP NLB FDB Settings VLAN Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously.
Page 72 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide that packets are forwarded only between ports within the VLAN. Typically, a VLAN corresponds to a particular subnet, although not necessarily. VLANs can enhance performance by conserving bandwidth, and improve security by limiting traffic to specific domains.
Page 73 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The main characteristics of IEEE 802.1Q are as follows: • Assigns packets to VLANs by filtering. • Assumes the presence of a single global spanning tree. • Uses an explicit tagging scheme with one-level tagging.
Page 74 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-3 Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 75 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. Other 802.1Q compliant devices on the network to make packet-forwarding decisions can then use the VLAN information in the tag.
Page 76: 802.1Q Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide On port-based VLANs, NICs do not need to be able to identify 802.1Q tags in packet headers. NICs send and receive normal Ethernet packets. If the packet’s destination lies on the same segment, communications take place using normal Ethernet protocols.
Page 77 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-5 802.1Q VLAN Settings – Add/Edit VLAN Tab window The fields that can be configured are described below: Parameter Description Allow the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit VLAN tab.
Page 78 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-6 802.1Q VLAN Settings – Find VLAN Tab window Enter the VLAN ID number in the field offered and then click the Find button. You will be redirected to the VLAN List tab.
Page 79: 802.1V Protocol Vlan
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide becoming a member of the VLAN dynamically. Use the drop-down menu to designate the port as forbidden. Click the Apply button to accept the changes made. NOTE: The Switch supports up to 4k static VLAN entries. 802.1v Protocol VLAN 802.1v Protocol Group Settings The user can create Protocol VLAN groups and add protocols to that group.
Page 80: V Protocol Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete Group button to remove the entry completely. NOTE: The Group name value should be less than 33 characters. 802.1v Protocol VLAN Settings The user can configure Protocol VLAN settings. The lower half of the table displays any previously created settings. To view the following window, click L2 Features >...
Page 81: Asymmetric Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Show All button to display all the Protocol VLANs configured. Click the Delete All button to remove all the entries listed. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry.
Page 82: Gvrp Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Click the radio buttons to enable or disable the GVRP State. GVRP State Enter the Join Time value in milliseconds. Join Time (100-100000) Enter the Leave Time value in milliseconds. Leave Time (100-100000) Enter the Leave All Time value in milliseconds.
Page 83: Mac-Based Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This field is used to manually assign a PVID to a VLAN. The Switch's default is to PVID (1-4094) assign all ports to the default VLAN with a VID of 1.The PVID is used by the port to tag internally outgoing, untagged packets, and to make filtering decisions about incoming packets.
Page 84 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide A secondary VLAN cannot be associated with multiple primary VLANs. The untagged member port of the primary VLAN is named as the promiscuous port. The tagged member port of the primary VLAN is named as the trunk port. A promiscuous port of a private VLAN cannot be promiscuous port of other private VLANs.
Page 85: Pvid Auto Assign Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Use the drop-down menu to select secondary VLAN type between Isolated or Secondary VLAN Type Community. Enter a secondary VLAN name. Secondary VLAN Name Enter a list of secondary VLAN ID. Secondary VLAN List Click the Add button to add a new entry based on the information entered.
Page 86: Vlan Precedence Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter a VLAN ID. Enter a list of VLAN IDs. VID List The user can enter the IPv4 address used in here. Remember to include the subnet IPv4 Network Address mask using the / notation. The user can enter the IPv6 address used in here.
Page 87: Super Vlan
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Super VLAN This section is used to create a super VLAN. The specified VLAN must be an 802.1Q VLAN. If the specified VLAN does not exist, the operation will not be successful. NOTE: 1.
Page 88 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-20 Super VLAN Settings - Modify window The fields that can be configured are described below: Parameter Description Use the drop-down menu to add or delete the specified sub VLANs. Action Enter the sub VLANs of the super VLAN.
Page 89: Voice Vlan
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-22 Sub VLAN Settings - IP Range List window The fields that can be configured are described below: Parameter Description Use the drop-down menu to add or delete the specified IP addresses of the sub VLANs. Action Enter the IP address to start from.
Page 90: Voice Vlan Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The priority of the voice VLAN, the range is 0 – 7. The default priority is 5. Priority The aging time to set, the range is 1 – 65535 minutes. The default value is 720 Aging Time (1-65535) minutes.
Page 91: Voice Vlan Oui Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Voice VLAN OUI Settings This window is used to configure the user-defined voice traffic’s OUI. The OUI is used to identify the voice traffic. There are a number of pre-defined OUIs. The user can further define the user-defined OUIs if needed. The user- defined OUI cannot be the same as the pre-defined OUI.
Page 92: Vlan Trunk Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-27 Voice VLAN LLDP-MED Voice Device window Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. VLAN Trunk Settings Enable VLAN on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 93: Browse Vlan
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Browse VLAN Users can display the VLAN status for each of the Switch's ports viewed by VLAN. Enter a VID (VLAN ID) in the field at the top of the window and click the Find button. To view the following window, click L2 Features >...
Page 94 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Q-in-Q VLANs allow network providers to expand their VLAN configurations to place customer VLANs within a larger inclusive VLAN, which adds a new layer to the VLAN configuration. This basically lets large ISP's create L2 Virtual Private Networks and also create transparent LANs for their customers, which will connect two or more customer LAN points without over-complicating configurations on the client's side.
Page 95: Qinq Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 2. Ports can be configured as UNI ports or NNI ports. UNI ports can only be Ethernet ports while NNI ports must be Gigabit ports. 3. Provider Edge switches must allow frames of at least 1522 bytes or more, due to the addition of the SPVID tag.
Page 96: Vlan Translation Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select the unit you want to configure. Unit Here the user can select a range of ports to use in the configuration. From Port / To Port Port role in Q-in-Q mode, it can be UNI port or NNI port. Role This option enables or disables C-VLAN based SP-VLAN assignment miss drop.
Page 97: Layer 2 Protocol Tunneling Settings
802.1Q-2005 MSTP. 802.1D-1998 STP will be familiar to most networking professionals. However, since 802.1D-2004 RSTP and 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1D-1998 STP, 802.1D-2004 RSTP, and 802.1Q-2005 MSTP.
Page 98 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Frames designated for these VLANs will be processed quickly and completely throughout interconnected bridges utilizing any of the three spanning tree protocols (STP, RSTP or MSTP). This protocol will also tag BPDU packets so receiving devices can distinguish spanning tree instances, spanning tree regions and the VLANs associated with them.
Page 99: Stp Bridge Global Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 802.1Q-2005 MSTP 802.1D-2004 RSTP 802.1D-1998 STP Forwarding Learning Disabled Disabled Disabled Discarding Discarding Blocking Discarding Discarding Listening Learning Learning Learning Forwarding Forwarding Forwarding RSTP is capable of a more rapid transition to a forwarding state - it no longer relies on timer configurations - RSTP compliant bridges are sensitive to feedback from other RSTP compliant bridge links.
Page 100 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-36 STP Bridge Global Settings window The fields that can be configured are described below: Parameter Description Use the radio button to globally enable or disable STP. STP Status Use the drop-down menu to choose the desired version of STP: STP Version STP - Select this parameter to set the Spanning Tree Protocol (STP) globally on the switch.
Page 101: Stp Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide NOTE: The Bridge Hello Time cannot be longer than the Bridge Max Age. Otherwise, a configuration error will occur. Observe the following formulas when setting the above parameters: Bridge Max Age <= 2 x (Bridge Forward Delay - 1 second) Bridge Max Age >...
Page 102: Mst Configuration Identification
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide P2P value were False. The default setting for this parameter is Auto. Topology Change Notification is a simple BPDU that a bridge sends out to its root Restricted TCN port to signal a topology change. Restricted TCN can be toggled between True and False.
Page 103: Stp Instance Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The user has two choices: Add VID - Select this parameter to add VIDs to the MSTI ID, in conjunction with the VID List parameter. Remove VID - Select this parameter to remove VIDs from the MSTI ID, in con- junction with the VID List parameter.
Page 104: Link Aggregation
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-40 MSTP Port Information window To view the MSTI settings for a particular port, use the drop-down menu to select the Port number. To modify the settings for a particular MSTI instance, enter a value in the Instance ID field, an Internal Path Cost, and use the drop-down menu to select a Priority.
Page 105 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 4-41 Example of Port Trunk Group The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent.
Page 106: Port Trunking Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide NOTE: If any ports within the trunk group become disconnected, packets intended for the disconnected port will be load shared among the other linked ports of the link aggregation group. Port Trunking Settings On this page the user can configure the port trunk settings for the switch.
Page 107: Fdb
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > Link Aggregation > LACP Port Settings, as show below: Figure 4-43 LACP Port Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure.
Page 108: Multicast Static Fdb Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > FDB > Static FDB Settings > Unicast Static FDB Settings, as show below: Figure 4-44 Unicast Static FDB Settings window The fields that can be configured are described below: Parameter Description Click the radio button and enter the VLAN name of the VLAN on which the associated...
Page 109: Mac Notification Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide multicast MAC address. The format of the destination MAC address is 01-xx-xx-xx- xx-xx, but 01-00-5E-xx-xx-xx should be excluded. The function does not support the destination MAC address with 01-00-5E-xx-xx-xx. Select the unit you want to configure. Unit Allows the selection of ports that will be members of the static multicast group and Port...
Page 110: Mac Address Aging Time Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The time in seconds between notifications. Value range to use is 1 to 2147483647. Interval (1-2147483647) The maximum number of entries listed in the history log used for notification. Up to History Size (1-500) 500 entries can be specified.
Page 111: Arp & Fdb Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-48 MAC Address Table window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit The port to which the MAC address below corresponds. Port Enter a VLAN Name for the forwarding table to be browsed by.
Page 112: L2 Multicast Control
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select the port number to use for this configuration. Port Enter the MAC address to use for this configuration. MAC Address Enter the IP address the use for this configuration.
Page 113 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button and enter the VLAN ID for the interface. Enter the source IP address of the upstream protocol packet. If it is not specified, zero Source IP Address IP address will be used as the protocol source IP address.
Page 114: Igmp Snooping
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-52 IGMP Proxy Group window Click the Member Ports link to view the IGMP proxy member port information. After clicking the Member Ports option, the following window will appear. Figure 4-53 IGMP Proxy Group – Member Ports window IGMP Snooping Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host.
Page 115 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Edit button to configure the IGMP Snooping Parameters Settings. Click the Modify Router Port link to configure the IGMP Snooping Router Port Settings. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the Edit button, the following page will appear: Figure 4-55 IGMP Snooping Parameters Settings window The fields that can be configured are described below:...
Page 116: Igmp Snooping Rate Limit Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide After clicking the Modify Router Port link, the following page will appear: Figure 4-56 IGMP Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure.
Page 117: Igmp Snooping Static Group Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the port list used for this configuration. Port List Enter the VID list used for this configuration. VID List Enter the IGMP snooping rate limit used. By selecting the No Limit check box, the rate Rate Limit (1- limit for the entered port(s) will be ignored.
Page 118: Igmp Router Port
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-59 IGMP Snooping Static Group Settings – Edit window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select the appropriate ports individually to include them in the IGMP snooping static Ports group settings.
Page 119: Igmp Snooping Group
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide IGMP Snooping Group Users can view the Switch’s IGMP Snooping Group Table. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. To view the following window, click L2 Features >...
Page 120: Igmp Snooping Counter
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the View All button to display all the existing entries. IGMP Snooping Counter Users can view the switch’s IGMP Snooping counter table. To view the following window, click L2 Features > L2 Multicast Control > IGMP Snooping > IGMP Snooping Counter, as show below: Figure 4-63 IGMP Snooping Counter window The fields that can be configured are described below:...
Page 121: Mld Proxy
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide MLD Proxy MLD Proxy Settings This window is used to configure the MLD proxy state and MLD proxy upstream interface. To view the following window, click L2 Features > L2 Multicast Control > MLD Proxy > MLD Proxy Settings, as show below: Figure 4-65 MLD Proxy Settings window The fields that can be configured are described below:...
Page 122: Mld Snooping
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-66 MLD Proxy Downstream Settings window The fields that can be configured are described below: Parameter Description Enter the VLAN Name which belongs to the MLD proxy downstream interface. VLAN Name Enter a list of VLANs which belong to the MLD proxy downstream interface.
Page 123: Mld Snooping Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide associated multicast IPv6 multicast group address, and then considers this port to be an active listening port. The active listening ports are the only ones to receive multicast group data. MLD Control Messages Three types of messages are transferred between devices using MLD snooping.
Page 124 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-70 MLD Snooping Parameters Settings window The fields that can be configured are described below: Parameter Description Specify the amount of time in seconds between general query transmissions. The Query Interval (1- default setting is 125 seconds.
Page 125: Mld Snooping Rate Limit Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-71 MLD Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit This section is used to designate a range of ports as being connected to multicast- Static Router Port enabled routers.
Page 126: Mld Snooping Static Group Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the Port List here. Port List Enter the VID List value here. VID List Configure the rate limit of MLD control packet that the switch can process on a Rate Limit specific port/VLAN.
Page 127: Mld Router Port
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-74 MLD Snooping Static Group Settings – Edit window Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made.
Page 128: Mld Snooping Forwarding Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-76 MLD Snooping Group window The fields that can be configured are described below: Parameter Description Click the radio button and enter the VLAN name of the multicast group. VLAN Name Click the radio button and enter a VLAN list of the multicast group.
Page 129: Mld Snooping Counter
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide MLD Snooping Counter This page displays the statistics counter for MLD protocol packets that are received by the switch since MLD Snooping is enabled. To view the following window, click L2 Features > L2 Multicast Control > MLD Snooping > MLD Snooping Counter, as show below: Figure 4-78 MLD Snooping Counter window The fields that can be configured are described below:...
Page 130: Multicast Vlan
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Multicast VLAN In a switching environment, multiple VLANs may exist. Every time a multicast query passes through the Switch, the switch must forward separate different copies of the data to each VLAN on the system, which, in turn, increases data traffic and may clog up the traffic path.
Page 131: Igmp Snooping Multicast Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the corresponding entry. Click the Group List link to configure the Multicast Group Profile Address Settings for the specific entry. After clicking the Group List link, the following page will appear: Figure 4-81 Multicast Group Profile Multicast Address Settings window The fields that can be configured are described below:...
Page 132 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Tick the check box to specify that the packet’s priority will be changed by the Replace Priority Switch, based on the remap priority. This flag will only take effect when the remap priority is set.
Page 133: Mld Multicast Group Profile Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Profile List link, the following page will appear: Figure 4-84 IGMP Snooping Multicast VLAN Group List Settings window The fields that can be configured or displayed are described below: Parameter...
Page 134: Mld Snooping Multicast Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide After clicking the Group List link, the following page will appear: Figure 4-86 Multicast Group Profile Multicast Address Settings window The fields that can be configured are described below: Parameter Description Multicast Address List Enter the multicast address list.
Page 135 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide set. Click the Apply button to accept the changes made for each individual section. Click the Add button to add a new entry based on the information entered. Click the Edit button to configure the MLD Snooping Multicast VLAN Settings for the specific entry. Click the Delete button to remove the specific entry.
Page 136: Multicast Filtering
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Profile List link, the following page will appear: Figure 4-89 MLD Snooping Multicast VLAN Group List Settings window The fields that can be configured are described below: Parameter...
Page 137: Ipv4 Limited Multicast Range Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter a name for the IP Multicast Profile. Profile Name Click the Add button to add a new entry based on the information entered. Click the Find button to locate a specific entry based on the information entered. Click the Delete All button to remove all the entries listed.
Page 138: Ipv6 Multicast Filtering
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Select the appropriate port(s) or VLAN IDs used for the configuration. Ports / VID List Assign access permissions to the ports selected. Options listed are Permit and Deny. Access Use the drop-down menu to select the profile ID or profile name used and then assign Profile ID / Profile Permit or Deny access to them.
Page 139: Ipv6 Multicast Profile Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide IPv6 Multicast Profile Settings Users can add, delete, and configure the IPv6 multicast profile on this page. To view the following window, click L2 Features > Multicast Filtering > IPv6 Multicast Filtering > IPv6 Multicast Profile Settings, as show below: Figure 4-94 IPv6 Multicast Profile Settings window The fields that can be configured are described below:...
Page 140: Ipv6 Limited Multicast Range Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide IPv6 Limited Multicast Range Settings Users can configure the ports and VLANs on the Switch that will be involved in the Limited IPv6 Multicast Range. To view the following window, click L2 Features > Multicast Filtering > IPv6 Multicast Filtering > IPv6 Limited Multicast Range Settings, as show below: Figure 4-96 IPv6 Limited Multicast Range Settings window The fields that can be configured are described below:...
Page 141: Multicast Filtering Mode
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide If the checkbox Infinite is not selected, the user can enter a Max Group value. Max Group Tick the check box to enable or disable the use of the Infinite value. Infinite Use the drop-down menu to select the appropriate action for this rule.
Page 142 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide One link within a ring will be blocked to avoid Loop (RPL, Ring Protection Link). When the failure happens, protection switching blocks the failed link and unblocks the RPL. When the failure clears, protection switching blocks the RPL again and unblocks the link on which the failure is cleared.
Page 143 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Edit button to re-configure the specific entry. Click the <<Back button to return to the ERPS settings page. After click the Edit button, the following window will appear: The fields that can be configured or displayed are described below: Parameter Description Display the R-APS VLAN ID.
Page 144 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide ring. Tick the check box and use the drop-down menu to specify the port as the west ring Admin West Port port and also the virtual port channel used. The operational west port value is displayed. Operational West Port Tick the check box and use the drop-down menu to specify the port as the east ring Admin East Port...
Page 145: Lldp
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. Click the <<Back button to return to the previous window. LLDP LLDP LLDP Global Settings On this page the user can configure the LLDP global parameters. To view the following window, click L2 Features >...
Page 146: Lldp Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide from an LLDP neighbor. To set the LLDP Notification Interval, enter a value between 5 and 3600 seconds. Click the Apply button to accept the changes made for each individual section. LLDP Port Settings On this page the user can configure the LLDP port parameters.
Page 147: Lldp Management Address List
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to enable or disable the action field. Action Enter the IP address that will be sent. Address Click the Apply button to accept the changes made. NOTE: The IPv4 or IPv6 address entered here should be an existing LLDP management IP address. LLDP Management Address List On this page the user can view the LLDP management address list.
Page 148: Lldp Dot1 Tlvs Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-103 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description Select a unit you want to configure. Unit Select the port range to use for this configuration. From Port / To Port Use the drop-down menu to enable or disable the Port Description option.
Page 149: Lldp Dot3 Tlvs Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-104 LLDP Dot1 TLVs Settings window The fields that can be configured are described below: Parameter Description Select a unit you want to configure. Unit Select the port range to use for this configuration. From Port / To Port Use the drop-down menu to enable or disable and configure the Dot1 TLV PVID Dot1 TLV PVID...
Page 150 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-105 LLDP Dot3 TLVs Settings window The fields that can be configured are described below: Parameter Description Select a unit you want to configure. Unit Select the port range to use for this configuration. From Port / To Port This TLV optional data type indicates that the LLDP agent should transmit the MAC / PHY...
Page 151: Lldp Statistic System
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide LLDP Statistic System The LLDP Statistics System page allows you an overview of the neighbor detection activity, LLDP Statistics and the settings for individual ports on the Switch. To view the following window, click L2 Features > LLDP > LLDP> LLDP Statistic System, as show below: Figure 4-106 LLDP Statistics System window Select a Unit and Port number from the drop-down menu and click the Find button to view statistics for a certain...
Page 152: Lldp Remote Port Information
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view the normal LLDP Local Port information page per port, click the Show Normal button. To view the brief LLDP Local Port information page per port, click the Show Brief button. Figure 4-108 LLDP Local Port Information –...
Page 153: Lldp-Med
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-111 LLDP Remote Port Information – Show Normal window Click the <<Back button to return to the previous page. LLDP-MED LLDP-MED System Settings This window is used to configure the LLDP-MED log state and the fast start repeat count, and display the LLDP- MED system information.
Page 154 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-113 LLDP-MED Port Settings window The fields that can be configured are described below: Parameter Description Select a unit you want to configure. Unit Select the port range to use for this configuration. From Port / To Port Use the drop-down menu to enable or disable Notification Topology Change NTCS...
Page 155: Nlb Fdb Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-114 LLDP-MED Local Port Information window Select a Unit and Port number from the drop-down menu and click the Find button to view statistics for a certain port. LLDP-MED Remote Port Information This window displays the information learned from the neighbor parameters.
Page 156: Ptp
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view this window, click L2 Features > NLB FDB Settings, as shown below: Figure 4-117 NLB FDB Settings window The fields that can be configured are described below: Parameter Description Click the radio button and enter the VLAN name of the NLB multicast FDB entry to VLAN Name be created.
Page 157: Ptp Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-118 PTP Global Settings window The fields that can be configured are described below: Parameter Description Use the drop-down menu to enable or disable the PTP state. PTP State Use the drop-down menu to select the PTP device type of the Switch. The Switch PTP Mode supports three PTP device types, Boundary, P2P Transparent, and E2E Transparent.
Page 158: Ptp Boundary Clock Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-119 PTP Port Settings window The fields that can be configured are described below: Parameter Description Select a unit you want to configure. Unit Select the port range to use for this configuration. From Port / To Port Use the drop-down menu to enable or disable the PTP clock state on the specified State...
Page 159: Ptp Boundary Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide range is from 0 to 255. Zero indicates the highest precedence. Click the Apply button to accept the changes made. PTP Boundary Port Settings This window is used to configure the attributes of the PTP boundary clock. The configuration takes effect when the PTP device is a boundary type.
Page 160: Ptp Peer To Peer Transparent Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide delay time of an event message. E2E - The port is configured to use the delay request-response mechanism. P2P - The peer delay mechanism. The default is E2E. Enter the permitted mean time interval between successive delay request messages Delay Request which are sent by a slave to a specific port on the master.
Page 161: Ptp Clock Information
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide PTP Clock Information This window is used to display the active attributes of the PTP clock. When PTP State is disabled in PTP Global Settings window, PTP Clock Identity displays 0000000000000000. To view this window, click L2 Features >...
Page 162 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 4-125 PTP Foreign Master Records Port Information window...
Page 163: Chapter 5 L3 Features
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 5 L3 Features IPv4 Static/Default Route Settings IPv4 Route Table IPv6 Static/Default Route Settings IPv6 Route Table Policy Route Settings IP Forwarding Table IP Multicast Forwarding Table IP Multicast Interface Table Static Multicast Route Settings Route Preference Settings ECMP Algorithm Settings...
Page 164: Ipv4 Route Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-1 IPv4 Static/Default Route Settings window The fields that can be configured are described below: Parameter Description This field allows the entry of an IPv4 address to be assigned to the Static route. Tick the IP Address Default check box to be assigned to the default route.
Page 165: Ipv6 Static/Default Route Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enter the destination network address of the route want to be displayed. Network Address Enter the destination IP address of the route want to be displayed. The longest prefix IP Address matched route will be displayed.
Page 166: Ipv6 Route Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide IPv6 Route Table This window is used to display the current IPv6 routing table. To view the following window, click L3 Features > IPv6 Route Table, as show below: Figure 5-4 IPv6 Route Table window The fields that can be configured are described below: Parameter Description...
Page 167: Ip Forwarding Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-6 Policy Route Settings - Edit window The fields that can be configured are described below: Parameter Description Enter the ACL profile ID. Profile ID (1-6) Enter the ACL access ID. Access ID (1-256) Enter the next hop IP address.
Page 168: Ip Multicast Interface Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-8 IP Multicast Forwarding Table window Enter a Group Address and Network Address, and click Find to search for the information. Click the View All button to display all the existing entries. IP Multicast Interface Table This window displays the current IP multicasting interfaces located on the Switch.
Page 169: Route Preference Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enter the source IP address of the received IP multicast packet matches this IP Address network, the RPF address is used to do RPF check. Enter the subnet mask of the above specified IP address. If the source IP address Subnet Mask of the received IP multicast packet matches the IP address and subnet mask, RPF address will be used to check whether packets are received from legal interface.
Page 170: Route Redistribution Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-12 ECMP Algorithm Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the ECMP OSPF state. ECMP OSPF State Tick the check box so that the ECMP algorithm will include the destination IP.
Page 171: Ip Tunnel (Ei Mode Only)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide External - To redistribute only the OSPF AS-external routes, including Ext Type1 and Ext Type2 routes. Ext Type1 - To redistribute only the OSPF AS-external type-1 routes. Ext Type2 - To redistribute only the OSPF AS-external type-2 routes. Inter-E1 - To redistribute only the OSPF AS-external type-1 and OSPF AS-internal routes.
Page 172: Ip Tunnel Gre Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-15 IP tunnel Settings - Edit window The fields that can be configured are described below: Parameter Description Use the drop-down menu to enable or disable the interface admin state. Interface Admin State Use the drop-down menu to select the tunnel modes.
Page 173: Ospf
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. Click the Edit button to re-configure the specific entry. Click the Edit button to see the following window.
Page 174 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide to neighboring routers. The state contains information such as the IP address, subnet mask, type of network the interface is attached to, other routers attached to the network, etc. The collection of link-states is then collected in a link-state database that is maintained by routers running OSPF.
Page 175 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Shortest Path Tree To build Router A’s shortest path tree for the network diagramed below, Router A is put at the root of the tree and the smallest cost link to each destination network is calculated. Figure 5-18 Constructing a Shortest Path Tree Figure 5-19 Constructing a Shortest Path Tree The diagram above shows the network from the viewpoint of Router A.
Page 176 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide is higher than the route through Router C. This higher-cost route will not be included in the Router A’s shortest path tree. The resulting tree will look like this: Router A 128.213.0.0 Router B Router C...
Page 177 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 3. Network Link-State Updates - Issued by multi-access areas that have more than one attached router. One router is elected as the Designated Router (DR) and this router issues the network link-state updates describing every router on the segment.
Page 178 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 1. Linking an area that does not have a physical connection to the backbone. 2. Patching the backbone in case there is a discontinuity in area 0. Areas Not Physically Connected to Area 0 All areas of an OSPF network should have a physical connection to the backbone, but in some cases it is not possible to physically connect a remote area to the backbone.
Page 179 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide • Attempt - On non-broadcast multi-access networks (such as Frame Relay or X.25), this state indicates that no recent information has been received from the neighbor. An effort should be made to contact the neighbor by sending Hello packets at the reduced rate set by the Poll Interval.
Page 180 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide OSPF Packet Header Type Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Figure 5-21 OSPF Packet Header Format Parameter Description The OSPF version number. Version No. The OSPF packet type.
Page 181 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Hello Packet Version No. Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Network Mask Hello Interval Options Router Priority Router Dead Interval Designated Router Backup Designated Router Neighbor Figure 5-22 Hello Packet Parameter Description...
Page 182 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Database Description Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Reserved I M MS Reserved Options DD Sequence No. Link-State Advertisement Header ... Figure 5-23 Database Description Packet Parameter Description The optional capabilities supported by the router.
Page 183 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Link-State Request Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Link-State Type Link-State ID Advertising Router Figure 5-24 Link-State Request Packet Each advertisement requested is specified by its Link-State Type, Link-State ID, and Advertising Router. This uniquely identifies the advertisement, but not its instance.
Page 184 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Link-State Update Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Number of Advertisements Link-State Advertisements ... Figure 5-25 Link-State Update Packet The body of the Link-State Update packet consists of a list of link-state advertisements. Each advertisement begins with a common 20-byte header, the link-state advertisement header.
Page 185 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Link-State Acknowledgment Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Link-State Advertisement Header ... Figure 5-26 Link State Acknowledge Packet Each acknowledged link-state advertisement is described by its link-state advertisement header. It contains all the information required to uniquely identify both the advertisement and the advertisement’s current instance.
Page 186 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Link-State Advertisement Header Link-State Age Options Link-State Type Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Figure 5-27 Link State Advertisement Header Parameter Description The time is seconds since the link state advertisement was originated. Link State Age The optional capabilities supported by the described portion of the routing domain.
Page 187 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Routers Links Advertisements Link-State Age Options Link-State Type Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Reserved Reserved Number of Links Link ID Link Data Type No. Of TOS TOS 0 Metric Metric Metric...
Page 188 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description A quick classification of the router link. One of the following: Type Description: Point-to-point Type connection to another router. Connection to a transit network. Connection to a stub network. Virtual link.
Page 189 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Network Link Advertisements Link-State Age Options Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Network Mask Attached Router Figure 5-29 Network Link Advertisements Parameter Description The IP address mask for the network. Network Mask The Router IDs of each of the routers attached to the network.
Page 190 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide For stub area, Type 3 summary link advertisements can also be used to describe a default route on a per-area basis. Default summary routes are used in stub area instead of flooding a complete set of external routes. When describing a default summary route, the advertisement’s Link State ID is always set to the Default Destination 0.0.0.0, and the Network Mask is set to 0.0.0.0.
Page 191 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description The IP address mask for the advertised destination. Network Mask The type of external metric. If the E-bit is set, the metric specified is a Type 2 external E-bit metric.
Page 192 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Type-7 LSA (Link State Advertisement) packets are used to import external routes into the NSSA. These packets can originate from NSSA ASBRs or NSSA ABRs and are defined by setting the P-Bit in the LSA type-7 packet header.
Page 193: Ospfv2
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide be created for the function that accepts these packets to verify these two bits (N and E-Bit). Bits matching the checking feature will be accepted, while other bit combinations will be dropped. The P-Bit Also included in the Options field of the LSA type-7 packet, the P-Bit (propagate) is used to define whether or not to translate the LSA type-7 packet into an LSA type-5 packet for distribution outside the NSSA.
Page 194: Ospf Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-35 OSPF Area Settings window The fields that can be configured are described below: Parameter Description A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies Area ID the OSPF area in the OSPF domain.
Page 195 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view the following window, click L3 Features > OSPF > OSPFv2 > OSPF Interface Settings, as shown below: Figure 5-37 OSPF Interface Settings window The fields that can be configured are described below: Parameter Description Enter the name of the IP interface here...
Page 196: Ospf Virtual Link Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the specification of the interval between the transmissions of OSPF Hello Hello Interval (1-65535) packets, in seconds. The Hello Interval, Dead Interval, Authorization Type, and Authorization Key should be the same for all routers on the same network. Enter the specification of the length of time between the receipts of Hello packets Dead Interval (1-65535) from a neighbor router before the selected area declares that router down.
Page 197: Ospf Area Aggregation Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the selected entry. After clicking the Edit button, the following window will appear. Figure 5-40 OSPF Virtual Link Settings - Edit window The fields that can be configured are described below: Parameter Description Enter the specification of the interval between the transmissions of OSPF Hello...
Page 198: Ospf Lsdb Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the IP address that uniquely identifies the network that corresponds to the OSPF IP Address Area. Enter the network mask that uniquely identifies the network that corresponds to the OSPF Network Mask Area.
Page 199: Ospf Neighbor Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter a 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely Area ID identifies the OSPF area in the OSPF domain. Enter the router ID of the advertising router.
Page 200: Ospfv3 (Ei Mode Only)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-46 OSPF Virtual Neighbor Table window The fields that can be configured are described below: Parameter Description A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies Transit Area ID the OSPF area in the OSPF domain.
Page 201 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-48 OSPFv3 Area Settings window The fields that can be configured are described below: Parameter Description Enter the OSPFv3 area’s ID. It is a 32-bit number in the form of an IPv4 address that Area ID uniquely identifies the OSPFv3 area in the OSPFv3 domain.
Page 202 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-50 OSPFv3 Interface Settings window The fields that can be configured are described below: Parameter Description Enter the OSPFv3 IP interface name. Interface Name Click the Find button to find the interface entered. Click the View All button to view all the interfaces configured on this switch.
Page 203 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to enable or disable this interface to run OSPFv3. The Administrative State default value is Disabled. Assign the designated entry to be a passive interface. A passive interface will not Passive Mode advertise to any other routers than those within its OSPF intranet.
Page 204 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter the interval time between the transmissions of OSPFv3 Hello packets, in Hello Interval (1-65535) seconds. The Hello Interval and Dead Interval should be the same for all routers on the same link.
Page 205 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-55 OSPFv3 LSDB Table window The fields that can be configured are described below: Parameter Description Enter a 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely Area ID identifies the OSPFv3 area in the OSPFv3 domain.
Page 206: Ospfv3 Neighbor Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide OSPFv3 Neighbor Table This window is used to display OSPFv3 neighbor information. To view the following window, click L3 Features > OSPF > OSPFv3 > OSPFv3 Neighbor Table, as shown below: Figure 5-59 OSPFv3 Neighbor Table window The fields that can be configured are described below: Parameter...
Page 207: Rip
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The Routing Information Protocol is a distance-vector routing protocol. There are two types of network devices running RIP - active and passive. Active devices advertise their routes to others through RIP messages, while passive devices listen to these messages.
Page 208: Rip Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Turn on trace mode. Turn off trace mode. Reserved for Sun Microsystems internal use. Update Request. Update Response. Update Acknowledgement RIP Command Codes The field VERSION contains the protocol version number (1 in this case), and is used by the receiver to verify which version of RIP the packet was sent.
Page 209 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-61 RIP Settings window The fields that can be configured are described below: Parameter Description Specifies that the RIP state will be enabled or disabled. If the state is disabled, then RIP State RIP packets will not be either transmitted or received by the interface.
Page 210: Ripng (Ei Mode Only)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Specifies the RIP receive mode Options to choose from are v1 Only, v2 Only and v1 or v2. RX Mode Select Disable to disable this option. Specifies that the RIP state will be enabled or disabled. If the state is disabled, then RIP State packets will not be either transmitted or received by the interface.
Page 211: Ip Multicast Routing Protocol
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide RIPng Interface Settings This window allows users to configure RIPng interface settings. To view the following window, click L3 Features > RIP>RIPng > RIPng Interface Settings, as shown below: Figure 5-64 RIPng Interface Settings window The fields that can be configured are described below: Parameter Description...
Page 212 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The IGMP Type codes are shown below: Type Meaning Membership Query (if Group Address is 0.0.0.0) 0x11 Specific Group Membership Query (if Group Address is Present) 0x11 Membership Report (version 2) 0x16 Leave a Group (version 2) 0x17...
Page 213: Igmp Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide • In IGMP v2, Membership reports could contain only one multicast group whereas in v3, these reports can contain multiple multicast groups and multiple sources within the multicast group. • Leaving a multicast group could only be accomplished using a specific leave message in v2. In v3, leaving a multicast group is done through a Membership report, which includes a block message in the group report packet.
Page 214: Igmp Check Subscriber Source Network Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Edit button to re-configure the specific entry. Click the Edit button to see the following window. Figure 5-68 IGMP Interface Settings – Edit window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the IGMP version that will be used to interpret...
Page 215: Igmp Group Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-69 IGMP Check Subscriber Source Network Settings window The fields that can be configured are described below: Parameter Description Enter the IP interface name used for this configuration. Interface Name Click the Find button to find the interface entered.
Page 216: Mld
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-71 IGMP Group Detail Information window Click the <<Back button to return to the previous window. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. The Multicast Listener Discovery Protocol (MLD) is used by IPv6 routers, much as IGMP is used in IPv4 routers, to discover the presence of multicast listeners (i.e., nodes that wish to receive multicast packets) on their directly attached links, and to discover specifically which multicast addresses are of interest to those neighboring nodes.
Page 217 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-73 MLD Interface Settings –Edit window The fields that can be configured are described below: Parameter Description Enter a value between 1 and 31744 seconds, with a default of 125 seconds. This Query Interval (1- specifies the interval between sending MLD queries.
Page 218: Dvmrp (Ei Mode Only)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter the IP interface name used for this configuration. Interface Name Enter the IPv6 multicast group address. Multicast Group Click the Find button to find the interface entered. Click the View All button to view all the interfaces configured on this switch.
Page 219: Dvmrp Routing Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view the following window, click L3 Features > IP Multicast Routing Protocol > DVMRP > DVMRP Interface Settings, as shown below: Figure 5-76 DVMRP Interface Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the DVMRP state.
Page 220: Pim
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-78 DVMRP Neighbor Table window The fields that can be configured are described below: Parameter Description Enter the name of the interface. Interface Name Enter the IP address of the destination. Source IP Address Enter the netmask of the destination.
Page 221 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide PIM-SM Protocol Independent Multicast - Sparse Mode (PIM-SM) is a multicast routing protocol that can use the underlying unicast routing information base or a separate multicast-capable routing information base. It builds unidirectional shared trees rooted at a Rendezvous Point (RP) per group, and optionally creates shortest-path trees per source.
Page 222: Pim Global Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide PIM-SSM The Source Specific Multicast (SSM) feature is an extension of IP multicast where datagram traffic is forwarded to receivers from only those multicast sources to which the receivers have explicitly joined. For multicast groups in SSM range, only source-specific multicast distribution trees (no shared trees) are created.
Page 223: Pim Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter a time to send a probe message from the DR to the RP before the Register Register Probe Time Suppression time expires. If a Register Stop message is received by the DR, the (1-127) Register Suppression Time will be restarted.
Page 224: Pim Candidate Bsr Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This field will set the interval time between the sending of Join/Prune packets stating Join/Prune Interval which multicast groups are to join the PIM enabled network and which are to be (1-18724) removed or “pruned”...
Page 225: Pim Candidate Rp Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Edit button to see the following window. Figure 5-84 PIM Candidate BSR Settings - Edit window The fields that can be configured are described below: Parameter Description Enter a value -1 or from 0 to 255. The default value is -1 which means the BSR state Priority is disabled.
Page 226: Pim Static Rp Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The user may set the Prefix Count value of the wildcard group address here by Candidate RP choosing a value between 0 and 1 with a default setting of 0. Wildcard Prefix Count (0-1) Enter the IP address of the device to be added as a Candidate RP.
Page 227: Pim Neighbor Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enter the IP address of the RP for which the data part will be included when RP Address calculating checksum for registering packets to the RP. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry.
Page 228 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This window is used to display list all the RP-Set information. To view the following window, click L3 Features > IP Multicast Routing Protocol > PIM > PIM for IPv4 > PIM RP-Set Table, as shown below: Figure 5-90 PIM RP-Set Table window Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 229 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-92 PIM for IPv6 global Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the PIM for IPv6 global state. PIM for IPv6 Global State Enter the time before the Register-Stop Timer (RST) expires when a DR may send a...
Page 230 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-94 PIM for IPv6 Interface Settings – Edit window The fields that can be configured are described below: Parameter Description Enter the time between issuing hello packets to find neighboring routers. A value of Hello Interval (1-18000) zero represents an ‘infinite’...
Page 231 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to enable or disable the interface to be a PIM for IPv6 BSR Domain Border domain border. If this interface configures a border, which will prevent bootstrap router (BSR) messages from being sent or received through it.
Page 232 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-96 PIM for IPv6 Candidate RP Settings window The fields that can be configured are described below: Parameter Description Enter the IPv6 group address range served by the RP. Group Enter the interface that will act as the Candidate RP.
Page 233 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This window is used to display the current PIM for IPv6 neighbor router table. To view the following window, click L3 Features > IP Multicast Routing Protocol > PIM > PIM for IPv6 > PIM for IPv6 Neighbor Table, as shown below: Figure 5-98 PIM for IPv6 Neighbor Table window The fields that can be configured are described below:...
Page 234 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-100 PIM for IPv6 Multicast Route Table - View Detail window The fields that can be configured are described below: Parameter Description Enter the IPv6 source address. If this parameter is chosen, the (S, G) or (S, G, rpt) Source Address entries will be displayed;...
Page 235 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-102 PIM for IPv6 RP-Set Table window Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. PIM for IPv6 Multicast Route Star-G Table This window is used to display the multicast routing information for (*, G) entries generated by PIM for IPv6.
Page 236 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-104 PIM for IPv6 Multicast Route Star-G Table - View Detail window Click the <<Back button to return to the previous window. Click the View Detail button to display the information of the specific entry. Click the View Detail button to see the following window.
Page 237 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-106 PIM for IPv6 Multicast Route S-G Table window The fields that can be configured are described below: Parameter Description Enter the IPv6 multicast group address. Group Address Enter the source IPv6 interface. Soruce Address Click the Find button to find the interface entered.
Page 238: Vrrp
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-108 PIM for IPv6 Multicast Route S-G Table- View Detail window The fields that can be configured are described below: Parameter Description Enter the IPv6 interface name. Interface Name Click the Find button to find the interface entered. Click the <<Back button to return to the previous window.
Page 239: Vrrp Virtual Router Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-109 VRRP Global Settings Window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the VRRP Global state. VRRP State Click the radio buttons to enable or disable that the virtual IP address is allowed to be Non-owner Response pinged from other host end nodes to verify connectivity.
Page 240 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Specifies an IP address of the physical device that will provide the most direct route Critical IP Address to the Internet or other critical network connections from this virtual router. This must be a real IP address of a real device on the network.
Page 241: Vrrp Authentication Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Specifies the ID of the Virtual Router used. All routers participating in this group VRID (1-255) must be assigned the same VRID value. This value must be different from other VRRP groups set on the Switch. Specifies the state of the virtual router function of the interface.
Page 242: Bgp (Ei Mode Only)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Specifies the authentication data used in the Simple and IP authentication algorithm. Authentication Data This entry must be consistent with all routers participating in the same IP interface. Simple - Simple will require the user to enter an alphanumeric string of no more than eight characters to identify VRRP packets received by a router.
Page 243 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to enable or disable the Border Gateway Protocol state. By BGP State disabling the BGP protocol, all peers will be disconnected and dynamic routes will be deleted. All the static configurations however will be reserved. If BGP is enabled again, the previous configurations can be re-applied.
Page 244: Bgp Aggregate Address Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The valid values are from 0 to 65535. This specifies the interval at which keepalive Keepalive Time messages are sent to its peer. If the keepalive value is set to zero, then the keepalive (0-65535) message will not be sent out.
Page 245: Bgp Dampening Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view the following window, click L3 Features > BGP > BGP Network Settings, as shown below: Figure 5-115 BGP Network Settings window The fields that can be configured are described below: Parameter Description Enter the IP address of the local network that BGP will advertise.
Page 246: Bgp Peer Group Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Use the drop-down menu to enable or disable the BGP dampening function’s state. Dampening State Enter the time (in minutes) after which the penalty of the reachable routes will be Half Life (1-45) down, by half.
Page 247: Bgp Neighbor
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the number of the autonomous system to which the peer group belongs to. The Remote AS Number range is from 0 to 65535. (0-65535) Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered.
Page 248 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button and enter the number of autonomous systems to which the peer Remote AS Number group belongs to. The range is from 1 to 65535. (1-65535) Click the radio button and use the drop-down menu to select a name of the BGP peer Peer Group Name group.
Page 249 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button and enter the IP address of the BGP speaking neighbor. IP Address Click the radio button and use the drop-down menu to select a name of the BGP peer Peer Group Name group.
Page 250 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-123 BGP Neighbor Maximum Prefix Settings window The fields that can be configured are described below: Parameter Description Click the radio button and use the drop-down menu to select the IP address of IP Address the BGP speaking neighbor.
Page 251 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button and use the drop-down menu to select the IP address of the IP Address BGP speaking neighbor. Click the radio button and use the drop-down menu to select the name of the BGP Peer Group Name peer group.
Page 252 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Click the radio button and use the drop-down menu to select the IP address of the IP Address BGP speaking neighbor. Click the radio button and use the drop-down menu to select the name of the BGP Peer Group Name peer group.
Page 253 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button and use the drop-down menu to select the name of the BGP Peer Group Name peer group. Use the drop-down menu to select Add or Delete. Unsuppress Map Action Enter the name of a route map used to selectively advertise routes previously Unsuppress Map...
Page 254 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use to configure an outbound route filter prefix list capability. It can be sent with the Capability ORF following values: Prefix List Type Receive – Enable the ORF prefix list capability in the receiving direction. The local router will install the prefix filter list notified by the remote router.
Page 255: Bgp Reflector Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-129 BGP Neighbor Table - View Detail window Click the View Detail link in ORF Prefix List Name to view more information. Click the <<Back button to return to the previous window. Click the View Detail link in ORF Prefix List Name to see the following window.
Page 256: Bgp Confederation Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the IP address of the cluster ID. The route reflector and its clients together form a Route Reflector cluster. When a single route reflector is deployed in a cluster, the cluster is identified by Cluster ID the router ID of the route reflector.
Page 257: Bgp As Path Access Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter one or multiple AS number partitions, each separated by a comma. These are Confederation Peer AS the Autonomous System numbers for BGP peers that will belong to the List (1-65535) confederation.
Page 258: Bgp Community List Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide BGP Community List Settings This window is used to configure the matching rules for a BGP community list. To view the following window, click L3 Features > BGP > BGP Community List Settings, as shown below: Figure 5-135 BGP Community List Settings window The fields that can be configured are described below: Parameter...
Page 259: Bgp Trap Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Tick the check boxes to select the regular options. Regular Option Internet - Routes with this community will be sent to all peers either internal or external. Local AS - Routes with this community will be sent to peers in the same AS, but will not be sent to peers in another sub AS in the same confederation and to the external peers.
Page 260: Bgp Summary Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-138 BGP Clear Settings window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select IP Address, AS, Peer Group, External, or All. Type IP Address - Specify to reset the session with the specified neighbor.
Page 261: Bgp Routing Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide BGP Routing Table This window displays BGP routing. To view the following window, click L3 Features > BGP > BGP Routing Table, as shown below: Figure 5-140 BGP Routing Table window The fields that can be configured are described below: Parameter Description...
Page 262: Bgp Dampened Route Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Display the route that matches the specified network address. Tick the Longer Prefixes Netowork check box to have more specific routes to be displayed. Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries.
Page 263: Ip Route Filter
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide IP Route Filter IP Prefix List Settings This window is used to create and configure an IP prefix list. To view the following window, click L3 Features > IP Route Filter > IP Prefix List Settings, as shown below: Figure 5-143 IP Prefix List Settings window The fields that can be configured are described below: Parameter...
Page 264: Ip Standard Access List Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-145 IP Prefix List Settings - View Detail window The fields that can be configured are described below: Parameter Description Enter the sequence number for the rule entry. Sequence ID (1- 65535) Use the drop-down menu to Permit or Deny the specified network.
Page 265: Route Map Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the View All button to display all the existing entries. Click the Delete All button to remove all the entries listed. Click the View Detail link to view more information regarding the specific entry. Click the Delete button to remove the specific entry.
Page 266 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Click the View Detail link to see the following window. Figure 5-149 Route Map Settings - View Detail window The fields that can be configured are described below: Parameter Description Enter the sequence number for the rule.
Page 267 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button and specify to match the route according to the prefix list. IP Address Prefix List Click the radio button and specify to match the next hop of the route according to the Next Hop List prefix list.
Page 268: Md5 Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio button to enter the local preference for the matched route. Local Preference (0-4294967295) By default, the BGP router will send the default local preference with the routes. It can be overwritten by the local preference set by the route map.
Page 269: Igmp Static Group Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 5-152 MD5 Settings Window The fields that can be configured are described below: Parameter Description Specifies a number from 1 to 255 used to identify the MD5 Key. Key ID Specifies an alphanumeric string of between 1 and 16 case-sensitive characters used to Password generate the Message Digest which is in turn, used to authenticate OSPF packets within the...
Page 270: Chapter 6 Qos
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 6 802.1p Settings Bandwidth Control Traffic Control Settings HOL Blocking Prevention Scheduling Settings The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing. Advantages of QoS QoS is an implementation of the IEEE 802.1p standard that allows network administrators a method of reserving bandwidth for important functions that require a large bandwidth or have a high priority, such as VoIP (voice-over...
Page 271: 802.1P Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Understanding QoS The Switch supports 802.1p priority queuing. The Switch has eight priority queues. These priority queues are numbered from 7 (Class 7) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows: •...
Page 272: 802.1P User Priority Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 6-2 Default Priority Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select the starting and ending ports to use. From Port / To Port Use the drop-down menu to select a value from 0 to 7.
Page 273: Bandwidth Control
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 6-3 802.1p User Priority Settings window Once a priority has been assigned to the port groups on the Switch, then a Class may be assigned to each of the eight levels of 802.1p priorities using the drop-down menus on this window. User priority mapping is not only for the default priority configured in the last page, but also for all the incoming tagged packets with 802.1p tag.
Page 274 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 6-4 Bandwidth Control Settings window The fields that can be configured or displayed are described below: Parameter Description Select the unit you want to configure. Unit Use the drop-down menu to select the port range to use for this configuration. From Port / To Port This drop-down menu allows a selection between RX (receive), TX (transmit), and Type...
Page 275: Queue Bandwidth Control Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Queue Bandwidth Control Settings To view the following window, click QoS > Bandwidth Control > Queue Bandwidth Control Settings, as show below: Figure 6-5 Queue Bandwidth Control Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure.
Page 276 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide affect the overall performance of the switch network. To help rectify this packet storm, the Switch will monitor and control the situation. Packet storms are monitored to determine if too many packets are flooding the network based on threshold levels provided by the user.
Page 277 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select the method of traffic control from the drop-down menu. The choices are: Action Drop – Utilizes the hardware Traffic Control mechanism, which means the Switch’s hardware will determine the Packet Storm based on the Threshold value stated and drop packets until the issue is resolved.
Page 278: Hol Blocking Prevention
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide NOTE: Traffic Control cannot be implemented on ports that are set for Link Aggregation (Port Trunking). NOTE: Ports that are in the Shutdown Forever mode will be seen as Discarding in Spanning Tree windows and implementations though these ports will still be forwarding BPDUs to the Switch’s CPU.
Page 279: Qos Scheduling Mechanism
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 6-8 QoS Scheduling window The following parameters can be configured: Parameter Description Select the unit you wish to configure. Unit Enter the port or port list you wish to configure. From Port / To Port Select the Class ID, from 0-7 to configure for the QoS parameters.
Page 280 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 6-9 QoS Scheduling Mechanism The following parameters can be configured: Parameter Description Select the unit you wish to configure. Unit Enter the port or port list you wish to configure. From Port / To Port Strict –...
Page 281: Chapter 7 Acl
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 7 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Egress Access Profile List Egress ACL Flow Meter ACL Configuration Wizard The ACL Configuration Wizard will aid the user in the creation of access profiles and ACL Rules automatically by simply inputting the address or service type and the action needed.
Page 282: Access Profile List
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide addresses for this rule. IPv4 Address – Selecting this option will allow the user to enter a range of IPv4 addresses for this rule. IPv6 – Selecting this option will allow the user to enter a range of IPv6 addresses for this rule.
Page 283: Adding An Ethernet Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Add ACL Profile button to add an entry to the Access Profile List. Click the Delete All button to remove all access profiles from this table. Click the Show Details button to display the information of the specific profile ID entry. Click the Add/View Rules button to view or add ACL rules within the specified profile ID.
Page 284 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide packet content. This will change the window according to the requirements for the type of profile. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header.
Page 285 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-6 Add Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-256) 256.
Page 286: Adding An Ipv4 Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Tick the check box and enter the name of the Time Range settings that has been Time Range Name previously configured in the Time Range Settings window. This will set specific times when this access rule will be implemented on the Switch.
Page 287 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to Profile ID (1-6) Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or Select ACL Type...
Page 288 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value.
Page 289 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-10 Access Rule List window (IPv4 ACL) Click the <<Back button to return to the previous page. Click the Add Rule button to create a new ACL rule in this profile. Click the Show Details button to view more information about the specific rule created.
Page 290: Adding An Ipv6 Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch.
Page 291 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-13 Add ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 6. Profile ID (1-6) Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or Select ACL Type...
Page 292 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide (ICMP) field in each frame's header. The user may specify an IPv6 address mask for the source IPv6 address by ticking IPv6 Source Mask the corresponding check box and entering the IPv6 address mask. The user may specify an IPv6 address mask for the destination IPv6 address by IPv6 Destination Mask ticking the corresponding check box and entering the IPv6 address mask.
Page 293 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-16 Add Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-256) 256.
Page 294: Adding A Packet Content Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide previously configured in the Time Range Settings window. This will set specific times when this access rule will be implemented on the Switch. Here the user can select the counter. By checking the counter, the administrator can Counter see how many times that the rule was hit.
Page 295 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-18 Add ACL Profile (Packet Content ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 6. Profile ID (1-6) Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet Select ACL...
Page 296 However, ARP is vulnerable as it can be easily spoofed and utilized to attack a LAN (i.e. an ARP spoofing attack). For a more detailed explanation on how ARP protocol works and how to employ D-Link’s unique Packet Content ACL to prevent ARP spoofing attack, please see Appendix E at the end of this manual.
Page 297 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-21 Add Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-256) 256.
Page 298: Cpu Access Profile List
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Specify that the IP precedence of the outgoing packet is changed with the new Replace ToS Precedence value. If used without an action priority, the packet is sent to the default TC. (0-7) Tick the check box and enter the name of the Time Range settings that has been Time Range Name...
Page 299: Adding A Cpu Ethernet Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Users may globally enable or disable the CPU Interface Filtering State mechanism by using the radio buttons to change the running state. Choose Enabled to enable CPU packets to be scrutinized by the Switch and Disabled to disallow this scrutiny.
Page 300 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-24 Add CPU ACL Profile (Ethernet ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 5. Profile ID (1-5) Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or Select ACL Type...
Page 301 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the <<Back button to discard the changes made and return to the previous page. After clicking the Show Details button, the following page will appear: Figure 7-25 CPU Access Profile Detail Information (Ethernet ACL) Click the Show All Profiles button to navigate back to the CPU ACL Profile List window.
Page 302: Adding A Cpu Ipv4 Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-100) 100.
Page 303 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-29 Add CPU ACL Profile (IPv4 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 5. Profile ID (1-5) Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or Select ACL Type...
Page 304 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value. Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header.
Page 305 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-31 CPU Access Rule List (IPv4 ACL) Click the Add Rule button to create a new CPU ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created.
Page 306: Adding A Cpu Ipv6 Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Ticking the All Ports check box will denote all ports on the Switch. Ports Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Show Details button in the CPU Access Rule List, the following page will appear: Figure 7-33 CPU Access Rule Detail Information (IPv4 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List.
Page 307 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 Profile ID (1-5) to5. Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or Select ACL Type packet content mask.
Page 308 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the Add Rule button, the following page will appear: Figure 7-37 Add CPU Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description...
Page 309: Adding A Cpu Packet Content Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU Packet Content ACL Profile The window shown below is the Add CPU ACL Profile window for Packet Content. To use specific filtering masks in this ACL profile, click the packet filtering mask field to highlight it red.
Page 310 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 32-47 – Enter a value in hex form to mask the packet from byte 32 to byte 47. 48-63 – Enter a value in hex form to mask the packet from byte 48 to byte 63. 64-79 –...
Page 311 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-42 Add CPU Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 100. Access ID (1-100) Auto Assign –...
Page 312: Acl Finder
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-43 CPU Access Rule Detail Information (Packet Content ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. ACL Finder The ACL rule finder helps you to identify any rules that have been assigned to a specific port and edit existing rules quickly.
Page 313 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide CBS – Committed Burst Size. Measured in bytes, the CBS is associated with the CIR and is used to identify packets that exceed the normal boundaries of packet size. The CBS should be configured to accept the biggest IP packet that is expected in the IP flow.
Page 314 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the Add button to add a new entry based on the information entered. Click the View All button to display all the existing entries. Click the Delete All button to remove all the entries listed.
Page 315: Egress Access Profile List
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide PBS – Specify the Peak Burst Size. The unit is in kilobyte. srTCM – Specify the “single-rate three-color mode”. CIR – Specify the Committed Information Rate. The unit is in kilobyte. CBS –...
Page 316 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Adding an Ethernet ACL Profile The window shown below is the Add Egress ACL Profile window for Ethernet. To use specific filtering masks in this egress ACL profile, click the packet filtering mask field to highlight it red. This will add more filed to the mask. After clicking the Add Egress ACL button, the following page will appear: Figure 7-49 Add Egress ACL Profile window (Ethernet ACL) The fields that can be configured are described below:...
Page 317 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Selecting this option instructs the Switch to examine the 802.1p priority value of each 802.1p packet header and use this as the, or part of the criterion for forwarding. Selecting this option instructs the Switch to examine the Ethernet type value in each Ethernet Type frame's header.
Page 318 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-52 Add Egress Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-128) 128.
Page 319: Adding An Ipv4 Egress Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide error message and the access rule will not be configured. Specify the port group ID to apply to the access rule. Port Group ID Specify the port group name to apply to the access rule. Port Group Name Specify the VLAN name to apply to the access rule.
Page 320 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-54 Add Egress ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to Profile ID (1-4) Enter a profile name for the profile created.
Page 321 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value.
Page 322 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-56 Egress Access Rule List window (IPv4 ACL) Click the <<Back button to return to the previous page. Click the Add Rule button to create a new ACL rule in this profile. Click the Show Details button to view more information about the specific rule created.
Page 323: Adding An Ipv6 Egress Acl Profile
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide value before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual. Select this option to instruct the Switch to replace the DSCP value (in a packet that Replace DSCP (0-63) meets the selected criteria) with the value entered in the adjacent field.
Page 324 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-59 Add Egress ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to Profile ID (1-4) Enter a profile name for the profile created.
Page 325 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide FFFF:FFFF::FFFF. The user may specify an IPv6 address mask for the destination IPv6 address by IPv6 Destination Mask ticking the corresponding check box and entering the IPv6 address mask, e.g. FFFF:FFFF::FFFF. Click the Select button to select an ACL type.
Page 326 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-62 Add Egress Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 128. Access ID (1-128) Auto Assign –...
Page 327: Egress Acl Flow Meter
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide will denote all ports on the Switch. Specify the port group ID to apply to the access rule. Port Group ID Specify the port group name to apply to the access rule. Port Group Name Specify the VLAN name to apply to the access rule.
Page 328 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 7-65 Egress ACL Flow Meter Configuration window The fields that can be configured are described below: Parameter Description Enter the Profile ID for the flow meter. Profile ID Enter the Profile Name for the flow meter. Profile Name Enter the Access ID for the flow meter.
Page 329 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Counter – Use this parameter to enable or disable the packet counter for the specified ACL entry in the green flow. Exceed – This field denotes the yellow packet flow. Yellow packet flows may have excess packets permitted through or dropped.
Page 330: Chapter 8 Security
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 8 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) MAC-based Access Control (MAC) Web-based Access Control (WAC) Japanese Web-based Access Control (JWAC) Compound Authentication Port Security ARP Spoofing Prevention Settings BPDU Attack Protection Loopback Detection Settings Traffic Segmentation Settings NetBIOS Filtering Settings...
Page 331 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch).
Page 332 Figure 8-6 The 802.1X Authentication Process The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 333: 802.1X Global Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Host-based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device that required access to the LAN. The Switch would regard the single physical Port connecting it to the shared media segment as consisting of a number of distinct logical Ports, each logical Port...
Page 334: 802.1X Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X authenticator port settings. To view this window, click Security > 802.1X > 802.1X Port Settings as shown below: Figure 8-10 802.1X Port Settings The fields that can be configured are described below: Parameter Description...
Page 335: 802.1X User Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This sets the TxPeriod of time for the authenticator PAE state machine. This value TxPeriod determines the period of an EAP Request/Identity packet transmitted to the client. The default setting is 30 seconds. A constant that defines a nonzero number of seconds between periodic re- ReAuthPeriod authentication of the client.
Page 336: Guest Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-11 802.1X User Settings window The fields that can be configured are described below: Parameter Description The user can enter an 802.1X user’s username in here. 802.1X User The user can enter an 802.1X user’s password in here. Password The user can re-enter an 802.1X user’s password in here.
Page 337: Authenticator State
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Limitations Using the Guest VLAN 1. Ports supporting Guest VLANs cannot be GVRP enabled and vice versa. 2. A port cannot be a member of a Guest VLAN and a static VLAN simultaneously. 3.
Page 338: Authenticator Statistics
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Authenticator Statistics This window is used to display the authenticator statistics information. This window appears when the Authentication State is enabled in 802.1X Global Settings window. To view this window, click Security > 802.1X > Authenticator Statistics as shown below: Figure 8-15 Authenticator Statics window The fields that can be configured are described below: Parameter...
Page 339: Authenticator Diagnostics
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-16 Authenticator Session Statistics window The fields that can be configured are described below: Parameter Description Select a unit you want to display. Unit Use the drop-down menu to select a port to display. Port Click the Apply button to accept the changes made.
Page 340: Initialize Port-Based Port(S)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-17 Authenticator Diagnostics window The fields that can be configured are described below: Parameter Description Select a unit you want to display. Unit Use the drop-down menu to select a port to display. Port Click the Apply button to accept the changes made.
Page 341: Initialize Host-Based Port(S)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Initialize Host-based Port(s) This window displays the current initialized host-based ports. This window appears when the Authentication State is enabled in 802.1X Global Settings window. To view this window, click Security > 802.1X > Initialize Host-based Port(s) as shown below: Figure 8-19 Initialize Host-based Port(s) window The fields that can be configured are described below: Parameter...
Page 342: Radius
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-21 Reauthenticate Host-based Port(s) window The fields that can be configured are described below: Parameter Description Select a unit you want to display. Unit Use the drop-down menus to select a range of ports to display. From Port / To Port Tick the check box and enter the MAC address.
Page 343: Radius Accounting Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Set the RADIUS server retransmit time, in times. Retransmit (1-20) Set the key the same as that of the RADIUS server. Confirm the key the same as that of the RADIUS server. Confirm Key Click the Apply button to accept the changes made.
Page 344 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-24 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be configured are described below: Parameter Description...
Page 345: Radius Account Client
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout. The number of RADIUS packets of unknown type which were received from this UnknownTypes server on the authentication port The number of RADIUS packets of which were received from this server on the...
Page 346: Ip-Mac-Port Binding (Impb)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The number of RADIUS Accounting-Response packets, which contained invalid BadAuthenticators authenticators, received from this server. The number of RADIUS Accounting-Request packets sent to this server that have not PendingRequests yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting- Response, a timeout or a retransmission.
Page 347: Impb Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio buttons to enable or disable DHCP snooping (IPv4) for IP-MAC-port DHCP Snooping (IPv4) binding. The default is Disabled. Click the radio buttons to enable or disable DHCP snooping (IPv6) for IP-MAC-port DHCP Snooping (IPv6) binding.
Page 348: Impb Entry Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide ARP or broadcast IP packet is detected. The default value is Disabled. When both ARP and IP inspections are enabled, all IP packets are checked. The IP Inspection legal IP packets are forwarded, while the illegal IP packets are dropped. When IP Inspection is enabled, and ARP Inspection is disabled, all non-IP packets (Ex.
Page 349: Mac Block List
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide MAC Block List This window is used to view unauthorized devices that have been blocked by IP-MAC binding restrictions. To view this window, click Security > IP-MAC-Port Binding (IMPB) > MAC Block List as shown below: Figure 8-29 MAC Block List The fields that can be configured are described below: Parameter...
Page 350: Dhcp Snooping Entry
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-30 DHCP Snooping Max Entry Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Use the drop-down menus to select a range of ports to use. From Port / To Port Enter the maximum entry value.
Page 351: Nd Snooping
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Use the drop-down menu to select the desired port. Port Specify the ports for DHCP snooping entries. Tick the All Ports check box to select Ports all entries for all ports.
Page 352: Mac-Based Access Control (Mac)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide maximum number of the learned entries. Click the Apply button to accept the changes made. ND Snooping Entry This window is used to view dynamic entries on specific ports. To view this window, click Security > IP-MAC-Port Binding (IMPB) > ND Snooping > ND Snooping Entry as shown below: Figure 8-33 ND Snooping Entry window The fields that can be configured are described below:...
Page 353: Mac-Based Access Control Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide MAC-based Access Control Settings This window is used to set the parameters for the MAC-based access control function on the Switch. The user can set the running state, method of authentication, RADIUS password, view the Guest VLAN configuration to be associated with the MAC-based access control function of the Switch, and configure ports to be enabled or disabled for the MAC-based access control feature of the Switch.
Page 354: Mac-Based Access Control Local Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to enable or disable log state. Log State Use the drop-down menu to select the password type. Available options are Manual Password Type String and Client MAC Address. Enter the password for the RADIUS server, which is to be used for packets being sent Password requesting authentication.
Page 355: Mac-Based Access Control Authentication State
WAC by attempting to gain Web access. D-Link’s implementation of WAC uses a virtual IP that is exclusively used by the WAC function and is not known by any other modules of the Switch. In fact, to avoid affecting a Switch’s other features, WAC will only use a virtual IP address to communicate with hosts.
Page 356 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide host PC and other servers’ IP configurations do not depend on the virtual IP of WAC. The virtual IP does not respond to any ICMP packets or ARP requests, which means it is not allowed to configure a virtual IP on the same subnet as the Switch’s IPIF (IP interface) or the same subnet as the host PCs’...
Page 357 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2.
Page 358: Wac Global Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide WAC Global Settings Users can configure the Switch for the Web-based access control function. To view this window, click Security > Web-based Access Control (WAC) > WAC Global Settings as shown below: Figure 8-37 WAC Global Settings window The fields that can be configured are described below:...
Page 359: Wac User Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide WAC User Settings Users can view and set local database user accounts for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC User Settings as shown below: Figure 8-38 WAC User Settings window The fields that can be configured are described below: Parameter...
Page 360: Wac Authentication State
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-39 WAC Port Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Use the drop-down menus to select a range of ports to be enabled as WAC ports. From Port / To Port This parameter specifies the time period during which an authenticated host will remain Aging Time (1-1440)
Page 361: Wac Customize Page
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-40 WAC Authentication State window The fields that can be configured are described below: Parameter Description Enter a port or range of ports, and tick the appropriate check box(s), Authenticated, Port List Authenticating, and Blocked.
Page 362 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-41 WAC Customize Page window Complete the WAC authentication information on this window to set the WAC page settings. Click the Apply button to implement the changes made. Click the Set to default button to go back to the default settings of all elements. Click the Edit button to re-configure the elements.
Page 363: Japanese Web-Based Access Control (Jwac)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Japanese Web-based Access Control (JWAC) JWAC Global Settings This window is used to enable and configure Japanese Web-based Access Control on the Switch. JWAC and Web Authentication are mutually exclusive functions. That is, they cannot be enabled at the same time. To use the JWAC feature, computer users need to pass through two stages of authentication.
Page 364 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide CHAP, and MS CHAPv2. Use the drop-down menu to enable or disable JWAC Redirect. When the redirect Redirect State quarantine server is enabled, the unauthenticated host will be redirected to the quarantine server when it tries to access a random URL.
Page 365: Jwac Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide JWAC Port Settings This window is used to configure JWAC port settings for the Switch. To view this window, click Security > Japanese Web-based Access Control (JWAC) > JWAC Port Settings as shown below: Figure 8-43 JWAC Port Settings Window The fields that can be configured are described below:...
Page 366: Jwac User Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. JWAC User Settings This window is used to configure a JWAC user of the switch’s local database. To view this window, click Security > Japanese Web-based Access Control (JWAC) > JWAC User Settings as shown below: Figure 8-44 JWAC User Settings Window The fields that can be configured are described below:...
Page 367: Jwac Authentication State
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide JWAC Authentication State This window is used to display Japanese Web-based Access Control Host Table information. To view this window, click Security > Japanese Web-based Access Control (JWAC) > JWAC Authentication State as shown below: Figure 8-45 JWAC Authentication State Window The fields that can be configured are described below:...
Page 368: Jwac Customize Page
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide JWAC Customize Page This window is used to configure JWAC page settings for the Switch. To view this window, click Security > Japanese Web-based Access Control (JWAC) > JWAC Customize Page as shown below: Figure 8-47 JWAC Login Window Figure 8-48 JWAC Login Window...
Page 369 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-49 Compound Authentication Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable of disable the Authorization Attributes State. Authorization Attributes State Click the radio buttons to configure the authentication server failover function.
Page 370: Compound Authentication Guest Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide IMPB+JWAC – IMPB will be verified first, and then JWAC will be verified. Both authentication methods need to be passed. IMPB+WAC - IMPB will be verified first, and then WAC will be verified. Both authentication methods need to be passed.
Page 371: Port Security
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-51 Compound Authentication MAC Format Settings window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the format for the RADIUS authentication username. Case Lowerercase - Use lowercase format, the RADIUS authentication username will be formatted as: aa-bb-cc-dd-ee-ff.
Page 372 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-52 Port Security Settings window The fields that can be configured are described below: Parameter Description Use the radio button to enable or disable Port Security Traps and Logs on the Port Security Trap/Log Switch.
Page 373: Port Security Vlan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-53 Port Security Port-VLAN Settings window The fields that can be configured are described below: Parameter Description Click the radio button and enter a VLAN name. VLAN Name Click the radio button and enter a list of VLAN ID. VID List Enter the maximum number of port security entries that can be learned by this VLAN.
Page 374: Port Security Entries
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Port Security Entries This window is used to remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view this window, click Security > Port Security > Port Security Entries as shown below: Figure 8-55 Port Security Entries window The fields that can be configured or displayed are described below: Parameter...
Page 375: Bpdu Attack Protection
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter the gateway IP address to help prevent ARP Spoofing. Gateway IP Address Enter the gateway MAC address to help prevent ARP Spoofing. Gateway MAC Address Enter the port numbers that this feature applies to.
Page 376 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-57 BPDU Attack Protection window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the BPDU Attack Protection state. BPDU Attack Protection State Specify when a trap will be sent.
Page 377: Loopback Detection Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Loopback Detection Settings The Loopback Detection (LBD) function is used to detect the loop created by a specific port. This feature is used to temporarily shut down a port on the Switch when a CTP (Configuration Testing Protocol) packet has been looped back to the Switch.
Page 378: Traffic Segmentation Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select a range of ports to use for this configuration. From Port / To Port Use the drop-down menu to toggle between Enabled and Disabled. State Click the Apply button to accept the changes made for each individual section. Traffic Segmentation Settings Traffic segmentation is used to limit traffic flow from a single or group of ports, to a group of ports.
Page 379: Netbios Filtering Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide NetBIOS Filtering Settings NetBIOS is an application programming interface, providing a set of functions that applications use to communicate across networks. NetBEUI, the NetBIOS Enhanced User Interface, was created as a data-link-layer frame structure for NetBIOS.
Page 380: Dhcp Server Screening
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide DHCP Server Screening This function allows the user to not only to restrict all DHCP Server packets but also to receive any specified DHCP server packet by any specified DHCP client, it is useful when one or more DHCP servers are present on the network and both provide DHCP services to different distinct groups of clients.
Page 381: Dhcp Offer Permit Entry Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30 Illegal Server Log minutes. Suppress Duration Select the unit you want to configure. Unit A consecutive group of ports may be configured starting with the selected port. From Port / To Port Choose Enabled to enable the DHCP server screening or Disabled to disable it.
Page 382: Enable Admin
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide In order for the TACACS / XTACACS / TACACS+ / RADIUS security function to work properly, a TACACS / XTACACS / TACACS+ / RADIUS server must be configured on a device other than the Switch, called an Authentication Server Host and it must include usernames and passwords for authentication.
Page 383: Authentication Policy Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-63 Enable Admin window When this window appears, click the Enable Admin button revealing a window for the user to enter authentication (password, username), as shown below. A successful entry will promote the user to Administrator level privileges on the Switch.
Page 384: Application Authentication Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the time that the Switch will wait for a response of authentication from the user. Response Timeout The default setting is 30 seconds. (0-255) Enter the maximum number of times that the Switch will accept authentication User Attempts (1-255) attempts.
Page 385 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-67 Authentication Server Group Settings – Server Group List window This window displays the Authentication Server Groups on the Switch. The Switch has four built-in Authentication Server Groups that cannot be removed but can be modified. The fields that can be configured are described below: Parameter Description...
Page 386: Authentication Server Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the IP address of the server host. IP Address use the drop-down menu to choose the Protocol associated with the IP address of Protocol the Authentication Server Host Click the Add button to add a new entry based on the information entered. NOTE: The user must configure Authentication Server Hosts using the Authentication Server Hosts window before adding hosts to the list.
Page 387: Login Method Lists Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide authentication request. The default value is 5 seconds. Enter the value in the retransmit field to change how many times the device will Retransmit (1-20) resend an authentication request when the TACACS server does not respond. Click the Apply button to accept the changes made.
Page 388: Enable Method Lists Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide radius - Adding this parameter will require the user to be authenticated using the RADIUS protocol from a remote RADIUS server. local - Adding this parameter will require the user to be authenticated using the local user account database on the Switch.
Page 389: Local Enable Password Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide methods to this method list: local_enable - Adding this parameter will require the user to be authenticated using the local enable password database on the Switch. The local enable password must be set by the user in the next section entitled Local Enable Password.
Page 390 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Key Exchange: The first part of the Cipher suite string specifies the public key algorithm to be used. This switch utilizes the Rivest Shamir Adleman (RSA) public key algorithm and the Digital Signature Algorithm (DSA), specified here as the DHE DSS Diffie-Hellman (DHE) public key algorithm.
Page 391 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-73 SSL Settings window To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described. The fields that can be configured are described below: Parameter Description Use the radio buttons to enable or disable the SSL status on the Switch.
Page 392: Ssh
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the path and the filename of the certificate file to download. This file must Certificate File Name have a .der extension. (Ex. c:/cert.der) Enter the path and the filename of the key file to download. This file must have Key File Nam a .der extension (Ex.
Page 393: Ssh Authentication Method And Algorithm Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-74 SSH Settings window The fields that can be configured are described below: Parameter Description Use the radio buttons to enable or disable SSH on the Switch. The default is SSH Server State Disabled.
Page 394 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured for SSH Authentication Mode are described below: Parameter Description This may be enabled or disabled to choose if the administrator wishes to use a Password locally configured password for authentication on the Switch.
Page 395: Ssh User Authentication List
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured for the Public Key Algorithm are described below: Parameter Description Use the check box to enable or disable the HMAC (Hash for Message HMAC-RSA Authentication Code) mechanism utilizing the RSA encryption algorithm. The default is enabled.
Page 396: Trusted Host Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Trusted Host Settings Up to thirty trusted host secure IP addresses or ranges may be configured and used for remote Switch management. It should be noted that if one or more trusted hosts are enabled, the Switch will immediately accept remote instructions from only the specified IP address or addresses.
Page 397 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-78 Mapping QoS on the Switch For every consecutive checking interval that reveals a packet flooding issue, the Switch will double the time it will discard ingress ARP and IP broadcast packets and packets from the illegal IP addresses. In the example above, the Switch doubled the time for dropping ARP and IP broadcast packets when consecutive flooding issues were detected at 5-second intervals.
Page 398 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 8-79 Safeguard Engine Settings window The fields that can be configured are described below: Parameter Description Use the radio button to globally enable or disable Safeguard Engine settings for the Safeguard Engine Switch.
Page 399: Chapter 9 Network Application
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 9 Network Application DHCP RCP Server Settings SNTP Flash File System Settings DHCP DHCP Relay DHCP Relay Global Settings Users can enable and configure DHCP Relay Global Settings. The relay hops count limit allows the maximum number of hops (routers) that the DHCP messages can be relayed through to be set.
Page 400 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide This field can be toggled between Enabled and Disabled using the drop-down DHCP Relay Option 82 menu. It is used to enable or disable the DHCP Relay Agent Information Option 82 State on the Switch.
Page 401: Dhcp Relay Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The Implementation of DHCP Relay Agent Information Option 82 The DHCP Relay Option 82 command configures the DHCP relay agent information option 82 setting of the Switch. The formats for the circuit ID sub-option and the remote ID sub-option are as follows: NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero.
Page 402: Dhcp Relay Option 60 Server Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description The IP interface on the Switch that will be connected directly to the client. Interface Name Enter the IP address of the DHCP server.
Page 403: Dhcp Relay Option 61 Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-6 DHCP Relay Option 60 Settings window The fields that can be configured are described below: Parameter Description Enter the DHCP Relay Option 60 String value. Different strings can be specified for the String same relay server, and the same string can be specified with multiple relay servers.
Page 404: Dhcp Server
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Here the user can select the DHCP Relay Option 61 default action. DHCP Relay Option 61 Default Drop – Specify to drop the packet. Relay –...
Page 405: Dhcp Server Exclude Address Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameter Description Click the radio buttons to enable or disable the DHCP Server State. DHCP Server State Enter the numbers of ping packet that the Switch will send out on the network Ping Packets (0-10) containing the IP address to be allotted.
Page 406 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-10 DHCP Server Pool Settings Window The fields that can be configured are described below: Parameter Description Enter the DHCP Server Pool name. Pool Name Click the Add button to add a new entry based on the information entered. Click the Delete All button to remove all the entries listed.
Page 407: Dhcp Server Manual Binding
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide to a DHCP client. Up to three IP addresses can be specified in one command line. IP address of WINS server. Windows Internet Naming Service (WINS) is a name NetBIOS Name Server resolution service that Microsoft DHCP clients use to correlate host names to IP addresses within a general grouping of networks.
Page 408: Dhcpv6 Server
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view this window, click Network Application > DHCP > DHCP Server > DHCP Server Dynamic Binding as shown below: Figure 9-13 DHCP Server Dynamic Binding Window The fields that can be configured are described below: Parameter Description Enter the DHCP Server Pool name.
Page 409: Dhcpv6 Server Pool Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the radio buttons to enable or disable the DHCPv6 Server State. DHCPv6 Server Global State Click the Apply button to accept the changes made. DHCPv6 Server Pool Settings This window is used to create and configure a DHCPv6 pool. To view this window, click Network Application >...
Page 410 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Click the Edit button under Manual Binding to see the following window. Figure 9-18 DHCPv6 Server Manual Binding Settings window The fields that can be configured are described below: Parameter Description Enter the IPv6 address to be statically bound to a device.
Page 411: Dhcpv6 Server Interface Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the <<Back button to return to the previous window. Click the Apply button to accept the changes made. DHCPv6 Server Dynamic Binding This window is used to show the DHCPv6 dynamic binding information. To view this window, click Network Application >...
Page 412: Dhcpv6 Relay
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide DHCPv6 Relay DHCPv6 Relay Global Settings This window is used to configure the DHCPv6 relay function on the Switch. To view this window, click Network Application > DHCP > DHCPv6 Relay > DHCPv6 Relay Global Settings as shown below: Figure 9-22 DHCPv6 Relay Global Settings window The fields that can be configured are described below:...
Page 413: Dhcp Local Relay Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Address Click the Apply button to accept the changes made. Click the Add button to add a new entry based on the information entered. Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries.
Page 414: Dns Relay
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The domain name system can be used by contacting the name servers one at a time, or by asking the domain name system to do the complete name translation. The client makes a query containing the name, the type of answer required, and a code specifying whether the domain name system should do the entire name translation, or simply return the address of the next DNS server if the server receiving the query cannot resolve the name.
Page 415: Dns Resolver
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view this window, click Network Application > DNS > DNS Relay > DNS Relay Static Settings as shown below: Figure 9-26 DNS Relay Static Settings Window The fields that can be configured are described below: Parameter Description Enter the domain name.
Page 416: Dns Resolver Dynamic Name Server Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-28 DNS Resolver Static Name Server Settings window The fields that can be configured are described below: Parameter Description Enter a DNS Resolver name server. Tick the Primary check box to set the name Server IP Address server as a primary name server.
Page 417: Dns Resolver Dynamic Host Name Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide DNS Resolver Dynamic Host Name Table This window displays the current host name entries. To view this window, click Network Application > DNS Resolver > DNS Resolver Dynamic Host Name Table as shown below: Figure 9-31 DNS Resolver Dynamic Host Name Table window RCP Server Settings...
Page 418: Time Zone Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-33 SNTP Settings window The fields that can be configured are described below: Parameter Description Use this radio button to enable or disable SNTP. SNTP State Displays the Current Time. Current Time Displays the time source for the system.
Page 419 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-34 Time Zone Settings window The fields that can be configured are described below: Parameter Description Use this drop-down menu to enable or disable the DST Settings. Daylight Saving Time State Use this drop-down menu to specify the amount of time that will constitute your local Daylight Saving Time...
Page 420: Flash File System Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the time DST will end. To: Time In HH:MM Parameter Description Using annual mode will enable DST seasonal time adjustment. Annual mode DST Annual Settings requires that the DST beginning and ending date be specified concisely. For example, specify to begin DST on April 3 and end DST on October 14.
Page 421 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 9-36 Flash File System Setting – Search for Drive window Click the Previous button to return to the previous page. Click the Create Directory to create a new directory within the file system of the switch. Click the Copy button to copy a specific file to the switch.
Page 422: Chapter 10 Oam
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 10 CFM (EI Mode Only) Ethernet OAM DULD Settings Cable Diagnostics (EI Mode Only) CFM (EI Mode Only) CFM Settings On this page the user can configure the CFM parameters. To view this window, click OAM >...
Page 423 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chassis Manage – Transmit sender ID TLV with chassis ID information and manage address information. Click the Apply button to accept the changes made for each individual section. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry.
Page 424 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Use the drop-down menu to select that the MA will work in the CFM software or Mode hardware mode. Software - The MA works in CFM software mode. This is the default value. Hardware - The MA works in CFM hardware mode.
Page 425 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-5 CFM MEP Settings (Add) Window The fields that can be configured are described below: Parameter Description Enter an MEP name. It is unique among all MEPs configured on the device. MEP Name Enter an MEP ID configured in the MA’s MEP ID list.
Page 426 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-6 CFM MEP Information Window Click the Edit button to re-configure the specific entry. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Edit button, the following page will appear: Figure 10-7 CFM MEP Information (Edit) Window The fields that can be configured are described below: Parameter...
Page 427 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The 802.1p priority is set in the CCMs and the LTMs messages transmitted by the PDU Priority MEP. The default value is 7. This is the control types of the fault alarms sent by the MEP. Fault Alarm All - All types of fault alarms will be sent.
Page 428: Cfm Port Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-9 CFM Extension LCK Settings (Edit) Window The fields that can be configured are described below: Parameter Description Tick the check box and use the drop-down menu to enable or disable the LCK function. State Tick the check box and use the drop-down menu to select the transmitting interval of Period...
Page 429: Cfm Mipccm Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Specifies the unit’s ID used. Unit Use the drop-down menu to select a range of ports used for this configuration. From Port / To Port Use the drop-down menu to enable or disable the state of specific port regarding the State...
Page 430: Cfm Linktrace Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select and enter the Maintenance Association index used. MA Index Enter the destination MAC address used here. MAC Address Number of LBMs to be sent. The default value is 4. LBMs Number (1- 65535) The payload length of LBM to be sent.
Page 431: Cfm Packet Counter
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Delete All button to remove all the entries listed. CFM Packet Counter This window is used to display the CFM packet counter information. This window does not count CCM packet statistics of the MEPs in CFM hardware mode.
Page 432: Cfm Mp Table
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-15 CFM Fault Table Window The fields that can be configured are described below: Parameter Description Select and enter the Maintenance Domain name used. MD Name Select and enter the Maintenance Domain index used. MD Index Select and enter the Maintenance Association name used.
Page 433: Ethernet Oam Configuration Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-17 Ethernet OAM Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select a range of ports you wish to configure. From Port / To Port Use the drop-down menu to select to operate in either Active or Passive.
Page 434: Ethernet Oam Event Log
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-18 Ethernet OAM Configuration Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select a range of ports you wish to configure. From Port / To Port Use the drop-down menu to select the link events, Link Monitor or Critical Link Event.
Page 435: Ethernet Oam Statistics
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-19 Ethernet OAM Event Log window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the unit ID and the port number to view. Port Enter a list of ports.
Page 436: Duld Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-20 Ethernet OAM Statistics window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the unit ID and the port number to view. Port Enter a list of ports.
Page 437: Cable Diagnostics (Ei Mode Only)
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-21 DULD Settings window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Select a range of ports you wish to configure. From Port / To Port Use the drop-down menu to enable or disable the selected ports unidirectional link Admin State...
Page 438 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 10-22 Cable Diagnostics window To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test The information will be displayed in this window. NOTE: Cable diagnostic function limitations.
Page 439: Chapter 11 Monitoring
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 11 Monitoring Utilization Statistics Mirror sFlow Ping Trace Route Peripheral Utilization CPU Utilization This window is used to display the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval.
Page 440: Dram & Flash Utilization
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Check whether or not to display Five Seconds, One Minute, and Five Minutes. Show/Hide Click the Apply button to accept the changes made. DRAM & Flash Utilization This window is used to display information regarding the DRAM and Flash utilization. To view this window, click Monitoring >...
Page 441: Statistics
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s" stands for seconds. The Time Interval default value is one second. Select number of times the Switch will be polled between 20 and 200.
Page 442 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-5 RX Packets Analysis Table window The fields that can be configured are described below: Parameter Description Select the unit you want to configure. Unit Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 443 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-6 UMB_cast (RX) window (for Unicast, Multicast, and Broadcast Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11-7 RX Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured are described below: Parameter Description...
Page 444 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select number of times the Switch will be polled between 20 and 200. The default Record Number value is 200. Counts the total number of good packets that were received by a unicast address. Unicast Counts the total number of good packets that were received by a multicast address.
Page 445 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-9 TX Packets Analysis window (table for Bytes and Packets) The fields that can be configured are described below: Parameter Description Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 446 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide To view this window, click Monitoring > Statistics > Port Statistics > Errors > Received (RX) as shown below: Figure 11-10 Received (RX) window (for errors) Click the View Table link to display the information in a table rather than a line graph. Figure 11-11 RX Error Analysis window (table) The fields that can be configured are described below: Parameter...
Page 447 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select number of times the Switch will be polled between 20 and 200. The default value Record Number is 200. Counts otherwise valid packets that did not end on a byte (octet) boundary. CRCError The number of packets detected that are less than the minimum permitted packets size UnderSize...
Page 448: Packet Size
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the View Table link to display the information in a table rather than a line graph. Figure 11-13 TX Error Analysis window (table) The fields that can be configured are described below: Parameter Description Select the unit you want to configure.
Page 449 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Port drop-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view this window, click Monitoring > Statistics > Packet Size as shown below: Figure 11-14 Packet Size window Click the View Table...
Page 450: Mirror
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide default value is one second. Select number of times the Switch will be polled between 20 and 200. The default value Record Number is 200. The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).
Page 451: Rspan Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the Port Mirroring feature. Mirror Global State Enter a mirror group ID. Group ID (1-4) Click the Apply button to accept the changes made for each individual section.
Page 452: Sflow
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the RSPAN feature. RSPAN State Create the RSPAN VLAN by VLAN name. VLAN Name Create the RSPAN VLAN by VLAN ID.
Page 453: Sflow Analyzer Server Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-20 sFlow Global Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the sFlow feature. sFlow State Click the Apply button to accept the changes made. sFlow Analyzer Server Settings The Switch can support 4 different Analyzer Servers at the same time and each sampler or poller can select a collector to send the samples.
Page 454: Sflow Flow Sampler Settings
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry. sFlow Flow Sampler Settings On this page the user can configure the sFlow flow sampler parameters. By configuring the sampling function for a port, a sample packet received by this port will be encapsulated and forwarded to the analyzer server at the specified interval.
Page 455: Ping
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-23 sFlow Counter Poller Settings The fields that can be configured are described below: Parameter Description Select a unit to configure. Unit Use the drop-down menus to specify the list of ports to be configured. From Port / To Port The analyzer server ID specifies the ID of a server analyzer where the packet will be Analyzer Server ID...
Page 456 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-25 Ping Test window The user may click the Infinite times radio button, in the Repeat Pinging for field, which will tell the ping program to keep sending ICMP Echo packets to the specified IP address until the program is stopped. The user may opt to choose a specific number of times to ping the Target IP Address by clicking its radio button and entering a number between 1 and 255.
Page 457: Trace Route
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 11-26 Ping Test Result window Click the Stop button to halt the Ping Test. Click the Resume button to resume the Ping Test. Trace Route The trace route page allows the user to trace a route between the switch and a given host on the network. To view this window, click Monitoring >...
Page 458: Peripheral
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide value of 1 to 65535 seconds can be specified. The default is 5 seconds. The number of probing. The range is from 1 to 9. If unspecified, the default value is 1. Probe (1-9) Click the Start button to initiate the Trace Route.
Page 459: Chapter 12 Save And Tools
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Chapter 12 Save and Tools Save Configuration / Log Stacking Information Download Firmware Upload Firmware Download Configuration Upload Configuration Upload Log File Reset Reboot System Save Configuration / Log To view this window, click Save > Save Configuration / Log, as shown below. Save Configuration allows the user to backup the configuration of the switch to a folder on the computer.
Page 460 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The number of switches in the switch stack (up to 12 total) are displayed next to the Tools drop-down menu. The icons are in the same order as their respective Unit numbers, with the Unit 1 switch corresponding to the icon in the upper left-most corner of the icon group.
Page 461: Download Firmware
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Download Firmware The following window is used to download firmware for the Switch. Download Firmware from TFTP This window allows the user to download firmware from a TFTP Server to the Switch and updates the switch. Figure 12-5 Download Firmware from TFTP window The fields that can be configured are described below: Parameter...
Page 462: Download Firmware From Http
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a unit for receiving the firmware. Select All for all Unit units. Enter the RCP server IP address used. RCP Server IP Enter the location and name of the Source File.
Page 463: Upload Firmware To Rcp
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 12-8 Upload Firmware to TFTP window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a unit for uploading the firmware. Unit Enter the TFTP server IP address used.
Page 464: Upload Firmware To Http
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Upload Firmware to HTTP This window allows the user to upload firmware from the Switch to a HTTP Server. Figure 12-10 Upload Firmware to FTP window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a unit for uploading the firmware.
Page 465: Download Configuration From Rcp
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide configuration. Deselect the check box to clear the existing configuration before applying to the new configuration. Click Download to initiate the download. Download Configuration from RCP This window allows the user to download the configuration file from a RCP Server to the Switch and updates the switch.
Page 466: Upload Configuration
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Enter the location and name of the Destination File. Destination File Tick the check box to keep the existing configuration before applying to the new Increment configuration. Deselect the check box to clear the existing configuration before applying to the new configuration.
Page 467: Upload Configuration To Http
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Figure 12-15 Upload Configuration to RCP window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select a unit for uploading the configuration file. Unit Enter the RCP Server IP Address used.
Page 468: Upload Log File
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Upload Log File The following window is used to upload the log file from the Switch. Upload Log to TFTP This window allows the user to upload the log file from the Switch to a TFTP Server. Figure 12-17 Upload Log –...
Page 469: Upload Log To Http
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Select the type of log to be transferred. Selecting the Common Log option here will Log Type upload the common log entries. Selecting the Attack Log option here will upload the log concerning attacks.
Page 470: Reboot System
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Click the Apply button to initiate the Reset action. Reboot System The following window is used to restart the Switch. Figure 12-21 Reboot System Window Selecting the Yes radio button will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch.
Page 471: Appendices
ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link’s switches to thwart ARP spoofing attacks. In the process of ARP, PC A will first issue an ARP request to query PC B’s MAC address.
Page 472 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port into its Forwarding Table.
Page 473: How Arp Spoofing Attacks A Network
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide The switch will also examine the “Source Address” of the Ethernet frame and find that the address is not in the Forwarding Table. The switch will learn PC B’s MAC and update its Forwarding Table. How ARP Spoofing Attacks a Network ARP spoofing, also known as ARP poisoning, is a method to...
Page 474: Prevent Arp Spoofing Via Packet Content Acl
Figure 5 all traffic will be then sniffed by the hacker but the users will not discover. Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL.
Page 475 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Offset Chunk Chunk0 Chunk1 Chunk2 Chunk3 Chunk4 Chunk5 Chunk6 Chunk7 Chunk8 Chunk9 Chunk10 Chunk11 Chunk12 Chunk13 Chunk14 Chunk15...
Page 476 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 0xA5A offset_chunk_3 0x5A5A0000 port 1-12 deny Save configuration. Step 5: save...
Page 477: Appendix B Password Recovery Procedure
This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.
Page 478: Appendix C System Log Entries
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Log Description Severity Note Event description: A host failed to pass the authentication Critical MAC-based...
Page 479 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Log Message: DHCPv6 client on interface <ipif-name> changed state to [enabled | disabled]. Parameters description: <ipif-name>: Name of the DHCPv6 client interface. Event description: DHCPv6 client obtains an ipv6 address from a DHCPv6 Informational server.
Page 480 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameters description: Event description: Firmware upgraded successfully. Informational Log Message: [RCP(1):] [Unit <unitID>,] Firmware upgraded by <session> successfully. (Username: <username>, IP: <ipaddr>, MAC: <macaddr>) Parameters description: unitID: Represent the id of the device in the stacking system. session: The user’s session.
Page 481 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide session: The user’s session. username: Represent current login user. ipaddr: Represent client IP address. macaddr : Represent client MAC address. Event description: Log message upload unsuccessfully. Warning Log Message: [RCP(10):]Log message upload by <session> unsuccessfully. (Username: <username>, IP: <ipaddr>, MAC: <macaddr>) Parameters description: session: The user’s session.
Page 482 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Ipaddr: Represent client IP address. macaddr : Represent client MAC address. Event description: Firmware upload was unsuccessful. Warning Log Message: [TFTP(4):]Firmware upload by <session> was unsuccessful! (Username: <username>, IP: <ipaddr>, MAC: <macaddr>) Parameters description: session: The user’s session.
Page 483 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Username: Represent current login user. Ipaddr: Represent client IP address. macaddr : Represent client MAC address. Event description: Duplicate Domain name cache added, leads a dynamic Informational DNS Resolver domain name cache be deleted Log Message: [DNS_RESOLVER(1):]Duplicate Domain name case name: <domainname>, static IP: <ipaddr>, dynamic IP:<ipaddr>...
Page 484 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameters description: username: The user that is being authenticated. unitID: The unit ID. portNum: The switch port number. macaddr: The MAC address of the authenticated device. Event description: VID assigned from RADIUS server after RADIUS client is Informational RADIUS authenticated by RADIUS server successfully .This VID will be assigned to...
Page 485 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide 5. networkAddress(5) 6. interfaceName(6) 7. local(7) chassisID: chassis ID. portType: port ID subtype. Value list: 1. interfaceAlias(1) 2. portComponent(2) 3. macAddress(3) 4. networkAddress(4) 5. interfaceName(5) 6. agentCircuitId(6) 7. local(7) portID: port ID. deviceClass: LLDP-MED device type.
Page 486 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Log Message: Port < portNum > add into Voice VLAN <vid > Parameters description: portNum : The port number. vid:VLAN ID Event description: When a port leaves the Voice VLAN and at the same time, Informational no voice device is detected in the aging interval for that port, the log message will be sent.
Page 487 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide limit: Max number of prefix allowed to receive. ipaddr: IP address of BGP peer. Event description: The total bgp prefix number received exceeds the limit. Warning Log Message: [BGP(9):] The total number of prefix received reaches max prefix limit.
Page 488 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameters description: intf-name: Name of OSPF interface. nbr-id: Neighbor's router ID. Event description: One OSPF neighbor state’s dead timer expired. Notice Log Message: OSPF nbr <nbr-id> on interface <intf-name> dead timer expired Parameters description: intf-name: Name of OSPF interface.
Page 489 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Log Message: Received ADV msg adv interval mismatch. VR <vr-id> at interface <intf-name> Parameters description: vr-id: VRRP virtual router ID. intf-name: Interface name on which virtual router is based. Event description: A virtual MAC address is added into switch L2 table Notice Log Message: Added a virtual MAC <vrrp-mac-addr>...
Page 490 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide table. Log Message: Failed to delete virtual IP <vrrp-ip-addr> MAC <vrrp-mac-addr> from chip L3 table. Errcode <vrrp-errcode> Parameters description: vrrp-ip-addr: VRRP virtual IP address vrrp-mac-addr: VRRP virtual MAC address vrrp-errcode: Err code of VRRP protocol behavior. Event description: Successful login through Web.
Page 491 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide port: <unitID: portNum> Parameters description: Ipaddr: The ip address macaddr: The violation MAC address. unitID: The unit ID. portNum: The port number. Event description: Successful login. Informational Log Message: Successful login through <Console | Telnet | Web(SSL) | SSH>(Username: <username>, IP: <ipaddr | ipv6address>).
Page 492 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide ipaddr: IP address. ipv6address: IPv6 address. username: user name. Event description: Enable Admin failed authenticated by AAA local or server. Warning Log Message: Enable Admin failed through <Console | Telnet | Web(SSL)| SSH>...
Page 493 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide <ipaddr>, MAC: <macaddr>, Port: <[unitID:]portNum>) Parameters description: string: User name ipaddr: IP address macaddr: MAC address unitID: The unit ID portNum : The port number Event description: This log will be triggered when the number of authorized Warning users reaches the maximum user limit on the whole device.
Page 494 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Log Message: Creating IMPB entry failed due to no ACL rule being available(IP:[<ipaddr> | <ipv6addr>], MAC: <macaddr>, Port <[unitID:]portNum>) Parameters description: ipaddr: IP address ipv6addr: IPv6 address macaddr: MAC address unitID: The unit ID portNum : The port number Event description: IMPB checks a host illegal.
Page 495 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameters description: InstanceID: Instance ID. portNum:Port ID macaddr: MAC address Event description: Spanning Tree new Root Bridge Informational Log Message: [CIST | CIST Regional | MSTI Regional] New Root bridge selected( [Instance: <InstanceID> ]MAC: <macaddr> Priority :<value>) Parameters description: InstanceID: Instance ID.
Page 496 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Parameters description: InstanceID: Instance ID. startvlanid- endvlanid:VLANlist Event description: Cross-connect is detected Critical Log Message: CFM cross-connect. VLAN:<vlanid>, Local(MD Level:<mdlevel>, Port <[unitID:]portNum>, Direction:<mepdirection>) Remote(MEPID:<mepid>, MAC:<macaddr>) Parameters description: vlanid: Represents the VLAN identifier of the MEP. mdlevel: Represents the MD level of the MEP.
Page 497 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide mepid: Represents the MEPID of the MEP. macaddr: Represents the MAC address of the MEP. Event description: AIS condition detected Notice CFM Extension Log Message: [CFM_EXT(1):]AIS condition detected. MD Level:<mdlevel>, VLAN:<vlanid>, Local(Port <[unitID:]portNum>, Direction:<mepdirection>, MEPID:<mepid>) Parameters description: vlanid: Represents the VLAN identifier of the MEP.
Page 498: Appendix D Trap Entries
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide Appendix D Trap Entries This table lists the trap logs found on the Switch. Category Trap Name Description swMacBasedAccessControlLoggedSuc The trap is sent when a MAC-based Access 1.3.6.1.4.1.171.12.35.11.1. MAC-based Access cess Control host is successfully logged in.
Page 499 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide counter pimInterfaceElectionWinCount is incremented, subject to the rate limit specified by pimInterfaceElectionNotificationPeriod. Binding objects: (1) pimInterfaceAddressType (2) pimInterfaceAddress lldpRemTablesChange A lldpRemTablesChange notification is sent 1.0.8802.1.1.2.0.0.1 LLDP when the value of lldpStatsRemTableLastChangeTime changes. Binding objects: (1) lldpStatsRemTablesInserts (2) lldpStatsRemTablesDeletes...
Page 500 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide (1) swUnitMgmtId. (2) swUnitMgmtMacAddr. swUnitRemove Unit Hot Remove notification. 1.3.6.1.4.1.171.12.11.2.2.1. Binding objects: (1) swUnitMgmtId. (2) swUnitMgmtMacAddr. swUnitFailure Unit Failure notification. 1.3.6.1.4.1.171.12.11.2.2.1. Binding objects: (1) swUnitMgmtId. swUnitTPChange The stacking topology change notification. 1.3.6.1.4.1.171.12.11.2.2.1.
Page 501 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide an under attack state, a trap will be sent out. Binding objects: (1)swBpduProtectionPortIndex (2)swBpduProtectionPortMode swBpduProtectionRecoveryTrap When the BPDU Protection trap is enabled, if the 1.3.6.1.4.1.171.12.76.4.0.2 specific port changes from an under attack state to a normal state, a trap will be sent out.
Page 502 xStack® DGS-3620 Series Managed Switch Web UI Reference Guide (3) dot1agCfmMepIdentifier swCFMExtAISCleared A notification is generated when local MEP exits 1.3.6.1.4.1.171.12.86.100.0 AIS status. Binding objects: (1) dot1agCfmMdIndex (2) dot1agCfmMaIndex (3) dot1agCfmMepIdentifier swCFMExtLockOccurred A notification is generated when local MEP 1.3.6.1.4.1.171.12.86.100.0 enters lock status.

This manual is also suitable for:

Dgs-3620-28sc-ei Dgs-3620-28tc-si Dgs-3620-52p-ei Dgs-3620-52p-si Dgs-3620-52t-ei Dgs-3620-28sc-si ... Show all

D-Link DGS-3620-28PC-SI Product Manual

Chapter 1 Web-Based Switch Configuration

Chapter 2 System Configuration

Chapter 3 Management

Chapter 4 L2 Features

Chapter 5 L3 Features

Chapter 6 Qos

Chapter 7 ACL

Chapter 8 Security

Quick Links

Related Manuals for D-Link DGS-3620-28PC-SI

Summary of Contents for D-Link DGS-3620-28PC-SI