Page 1 D-Link ™ DES-6500 Modular Layer 3 Chassis-based Ethernet Switch Firmware Release 2.5 Manual...
Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
Introduction ............................15 Switch Description ................................15 Features......................................15 DES-6500 chassis contains 9 slots to install the following available modules ................17 DES-6504 12 port 100BASE-FX (SFF) Fast Ethernet Switch module ..................17 DES-6505 8-port 1000BASE-SX (SC) Gigabit Ethernet Switch module................... 17 DES-6507 12-port 10BASE-T/100BASE-TX/1000BASE-T Switch module ................
Page 4 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Introduction to Switch Management....................27 Management Options ................................27 Web-based Management Interface..............................27 SNMP-Based Management................................27 Command Line Console Interface through the Serial Port ......................27 Connecting the Console Port (RS-232 DCE)..........................27 First Time Connecting to the Switch ............................... 29 Password Protection..................................
Page 5 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual STP Instance Settings ..................................62 STP Port Settings..................................... 65 Forwarding & Filtering ..............................67 Unicast Forwarding ..................................67 Static Multicast Forwarding................................67 VLANs ....................................69 Understanding IEEE 802.1p Priority ............................... 69 VLAN Description................................... 69 Notes about VLANs in the DES-6500............................69 IEEE 802.1Q VLANs ..................................
Page 6 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual CPU Interface Filtering State Settings ............................110 CPU Interface Filtering Table................................ 110 Port Access Entity (802.1X)............................121 802.1x Port-Based and MAC-Based Access Control........................121 Authentication Server................................121 Authenticator.................................... 122 Client ......................................123 Authentication Process ................................124 Understanding 802.1x Port-based and MAC-based Network Access Control ................
Page 7 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IGMP Interface Configuration..............................176 DVMRP Interface Configuration..............................177 DVMRP Configuration ................................177 DVMRP Interface Settings............................... 178 PIM-DM Interface Configuration ..............................179 PIM-DM Configuration................................179 DNS Relay..................................... 181 DNS Relay Information................................181 DNS Relay Static Settings................................ 182 DHCP / BOOTP Relay ..................................
Page 8 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNMP Group Table ..................................221 SNMP Community Table ................................223 SNMP Host Table..................................224 SNMP Engine ID................................... 225 Monitoring ............................226 CPU Utilization ................................226 Port Utilization ................................228 Packets.....................................229 Received (RX) ....................................229 UMB Cast (RX)..................................... 231 Transmitted (TX) ...................................
Page 9 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Browse DVMRP Neighbor Table............................. 269 Browse DVMRP Routing Next Hop Table ..........................269 PIM Monitoring..................................... 270 PIM Neighbor Address Table..............................270 Switch Maintenance ........................... 271 TFTP Services .................................271 Download Firmware ..................................271 Download Configuration ................................272 Upload Configuration ..................................
Page 10 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Cables and Connectors ................................308 Appendix D ............................309 Cable Lengths................................... 309 Glossary............................... 310 Warranties and Registration ............................312 International Offices .......................... 349...
Page 11: Preface
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Preface The DES-6500 Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features. Section 2, Installation- Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch.
Page 12: Intended Readers
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Intended Readers The DES-6500 Manual contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention Description In a command line, square brackets indicate an optional entry. For example: [copy filename] means that optionally you can type copy followed by the name of the file.
Page 13: Safety Instructions
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow.
Page 14: General Precautions For Rack-Mountable Products
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual • To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable.
Page 15: Protecting Against Electrostatic Discharge
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual • Do not overload the AC supply branch circuit that provides power to the rack. The total rack load should not exceed 80 percent of the branch circuit rating. • Ensure that proper airflow is provided to components in the rack.
Page 16: Introduction
6502 CPU management module and up to eight modules that can provide up to 192 10/100 Mbps Fast Ethernet ports or up to 96 1000 Mbps Gigabit Ethernet ports. These modules can be hot-swapped, and the DES-6500 chassis allows the installation of a redundant power supply, for maximum flexibility and reliability.
Page 17 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual System Log Support • High performance switching engine performs forwarding and filtering at full wire speed up to 160Gbps. • Full- and half-duplex for all gigabit ports. Full duplex allows the switch port to simultaneously transmit and •...
Page 18: Des-6500 Chassis Contains 9 Slots To Install The Following Available Modules
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6500 chassis contains 9 slots to install the following available modules DES-6501 Backplane chassis • DES-6502 Management Module • DES-6506 Patch Panel for 24 port RJ45 • DES-6507 12-port 10BASE-T/100BASE-TX/1000BASE-T + Combo 2 SFP •...
Page 19: Des-6508 16-Port 10Base-T/100Base-Tx Fast Ethernet Switch Module
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6510 RJ21 connectors provide 24-port 10BASE-T/100BASE-TX Fast Ethernet Switch module 2 RJ21, each support 12-port 10BASE-T/100BASE-TX ports • Fully compliant with IEEE802.3 10BASE-T, IEEE802.3u 100BASE-TX • All of 10/100Mbps ports support auto-negotiation •...
Page 20: Ethernet Technology
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Ethernet Technology Fast Ethernet The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks. A number of high-speed LAN technologies are proposed to provide greater bandwidth and improve client/server response times.
Page 21: Front-Panel Components And Led Indicators
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual NOTE: For customers interested in D-View, D-Link Corporation's proprietary SNMP management software, go to the D-Link Website (www.dlink.com.cn) and download the software and manual. Front-Panel Components and LED Indicators The front panel of the Switch consists of LED indicators for Power, System, Reset and Alarm Off. Also on the front panel, there is a RS-232 communication port.
Page 22: Installation
This Manual with Registration Card. • If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
Page 23: Installing The Switch Without The Rack
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Installing the Switch without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity.
Page 24: Mounting The Switch In A Standard 19" Rack
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Mounting the Switch in a Standard 19" Rack Figure 2- 3. Installing Switch in a rack Power On Plug one end of the AC power cord into the power connector of the Switch and the other end into the local power source outlet.
Page 25: Connecting The Switch
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Section 3 Connecting the Switch Switch To End Node Switch to Hub or Switch Connecting To Network Backbone or Server NOTE: All high-performance N-Way Ethernet ports can support both MDI- II and MDI-X connections.
Page 26: Switch To Hub Or Switch
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Switch to Hub or Switch These connections can be accomplished in a number of ways using a normal cable. A 10BASE-T hub or switch can be connected to the Switch via a twisted-pair Category 3, 4 or 5 UTP/STP •...
Page 27: Using The Des-6500 As A Network Backbone
PCs, printers, hubs, routers or other switches. The topology configurations are endless but be sure that connections coming from the DES-6500 are at a equal or slower speed than the ISP uplink to avoid bottlenecking.
Page 28: Introduction To Switch Management
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Section 4 Introduction to Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface through the Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to the Switch...
Page 29 12. Enter the commands to complete your desired tasks. Many commands require administrator-level access privileges. Read the next section for more information on setting up user accounts. See the DES-6500 Command Line Interface Reference Manual on the documentation CD for a list of all commands and additional information on using the CLI.
Page 30: First Time Connecting To The Switch
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 4- 1. Initial screen after first connection. First Time Connecting to the Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch.
Page 31: Password Protection
Password Protection The DES-6500 switch does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged access to the...
Page 32: Snmp Settings
The DES-6500 switch supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the...
Page 33: Traps
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual In SNMP v.1 and v.2c, user authentication is accomplished using 'community strings', which function like passwords. The remote user SNMP application and the Switch SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped).
Page 34 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 4- 4. “show switch” command The Switch's MAC address can also be found from the Web management program on the Switch Information (Basic Settings) window on the Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
Page 35: Connecting Devices To The Switch
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual In the above example, the Switch was assigned an IP address of 10.53.13.144 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management.
Page 36: Introduction To Web-Based Switch Configuration
IGMP Snooping Status Introduction All software functions of the DES-6500 switch can be managed, configured and monitored via the embedded web-based (HTML) interface. The Switch can be managed from remote stations anywhere on the network through a standard browser such as Netscape Navigator/Communicator, Mozilla or Microsoft Internet Explorer. The browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol.
Page 37: Web-Based User Interface
Select the menu or window to be displayed. The folder icons can be opened to display the hyperlinked menu buttons and subfolders contained within them. Click the D-Link logo to go to the D-Link website. Area 2 Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports and expansion modules, showing port activity, duplex mode, or flow control, depending on the specified mode.
Page 38: Web Pages
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual NOTICE: Any changes made to the Switch configuration during the current session must be saved in the Save Changes web menu (explained below) or by using the command line interface (CLI) command save.
Page 39: Configuring The Switch
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Section 6 Configuring the Switch Switch Information Switch IP Settings Advanced Settings Port Configuration Port Mirroring Configuration Link Aggregation IGMP Snooping Spanning Tree Forward & Filtering VLAN Traffic Control Port Security Port Lock Entries...
Page 40: Switch Information
The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the introduction of the DES-6500 Command Line Interface Reference Manual or return to Section 4 of this manual for more information.
Page 41 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 2. IP Address Settings window To manually assign the Switch's IP address, subnet mask, and default gateway address: 1. Select Manual from the Get IP From drop-down menu. 2. Enter the appropriate IP Address and Subnet Mask.
Page 42: Setting The Switch's Ip Address Using The Console Interface
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Default IP address that determines where packets with a destination address outside the current Gateway subnet should be sent. This is usually the address of a router or a host acting as an IP gate- way.
Page 43: Advanced Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Advanced Settings The Advanced Settings window contains the main settings for all major functions for the Switch. To view the Advanced Settings window, click its link in the Configuration folder. This will enable the following window to be viewed and configured.
Page 44 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IGMP Snooping To enable system-wide IGMP Snooping capability select Enabled. IGMP snooping is Disabled by default. Enabling IGMP snooping allows you to specify use of a multicast router only (see below). To configure IGMP Snooping for individual VLANs, use the IGMP Snooping page under the IGMP folder.
Page 45: Port Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Configuration This section contains information for configuring various attributes and properties for individual physical ports, including port speed and address learning. Clicking on Port Configurations in the Configuration menu will display the following window for the user: Figure 6- 4.
Page 46 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual speed and physical layer type. The master setting will also determine the master and slave relationship between the two connected physical layers. This relationship is necessary for establishing the timing control between the two physical layers.
Page 47: Port Mirroring Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Mirroring Configuration The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 48: Link Aggregation
Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The DES-6500 switch supports up to 32 port trunk groups with 2 to 8 ports in each group. A potential bit rate of 8000 Mbps can be achieved.
Page 49 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The Spanning Tree Protocol will treat a link aggregation group as a single link, on the switch level. On the port level, the STP will use the port parameters of the Master Port in the calculation of port cost and in determining the state of the link aggregation group.
Page 50 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 9. Link Aggregation Group Configuration window - Modify The user-changeable parameters are as follows: Parameter Description Group ID Select an ID number for the group, between 1 and 32. This pull-down menu allows you to select between Static and LACP (Link Type Aggregation Control Protocol).
Page 51: Lacp Port Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual LACP Port Settings The LACP Port Settings window is used in conjunction with the Link Aggregation window to create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP control frames.
Page 52: Igmp Snooping
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IGMP Snooping Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch.
Page 53: Static Router Ports
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description VLAN ID This is the VLAN ID that, along with the VLAN Name, identifies the VLAN for which to modify the IGMP Snooping Settings. This is the VLAN Name that, along with the VLAN ID, identifies the VLAN for which to VLAN Name modify the IGMP Snooping Settings.
Page 54 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual All UDP multicast packets will be forwarded to the router port. Because routers do not send IGMP reports or • implement IGMP snooping, a multicast router connected to the router port of a Layer 3 switch would not be able to receive UDP data streams unless the UDP multicast packets were all forwarded to the router port.
Page 55: Spanning Tree
802.1d STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP.
Page 56: Edge Port
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual discarding, there is no functional difference, the port is not active in the network topology. Table 6-1 below compares how the three protocols differ regarding the port state transition. All three protocols calculate a stable topology in the same way. Every segment will have a single path to the root bridge.
Page 57: Stp Bridge Global Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual STP Bridge Global Settings To open the following window, open the Spanning Tree folder in the Configuration menu and click the STP Bridge Global Settings link. Figure 6- 15. STP Bridge Global Settings – STP compatible Figure 6- 16.
Page 58 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description STP Status Use the pull-down menu to enable or disable STP globally on the Switch. The default is Disabled. Use the pull-down menu to choose the desired version of STP to be implemented STP Version on the Switch.
Page 59: Mst Configuration Identification
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual MST Configuration Identification The following screens in the MST Configuration Table window allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree instance set on the Switch. The Switch initially possesses one CIST or Common Internal Spanning Tree of which the user may modify the parameters for but cannot change the MSTI ID for, and cannot be deleted.
Page 60 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 19. Instance ID Settings window- Add The user may configure the following parameters to create a MSTI in the Switch. Parameter Description MSTI ID Enter a number between 1 and 15 to set a new MSTI on the Switch.
Page 61: Mstp Port Information
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Click Apply to implement changes made. To configure the parameters for a previously set MSTI, click on its hyperlinked MSTI ID number, which will reveal the following screen for configuration. Figure 6- 21. Instance ID Settings window - Modify The user may configure the following parameters for a MSTI on the Switch.
Page 62 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 22. MSTP Port Information window To view the MSTI settings for a particular port, select the Port number, located in the top left hand corner of the screen and click Apply. To modify the settings for a particular MSTI Instance, click on its hyperlinked MSTI ID, which will reveal the following window.
Page 63: Stp Instance Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual STP Instance Settings The following window displays MSTIs currently set on the Switch. To view the following table, click Configuration > Spanning Tree > STP Instance Settings: Figure 6- 24. STP Instance Settings...
Page 64 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 26. STP Instance Operational Status – Previously Configured MSTI The following parameters may be viewed in the STP Instance Operational Status windows: Parameter Description Designated Root This field will show the priority and MAC address of the Root Bridge.
Page 65 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Switch has spanning tree configuration values consistent with other devices on the bridged LAN. If the value ages out and a BPDU has still not been received from the Root Bridge, the Switch will start sending its own BPDU to all other switches for permission to become the Root Bridge.
Page 66: Stp Port Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual STP Port Settings STP can be set up on a port per port basis. To view the following window click Configuration > Spanning Tree > STP Port Settings: Figure 6- 27. STP Port Settings and Table window...
Page 67 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual External Cost (0 = Auto) External Cost - This defines a metric that indicates the relative cost of forwarding packets to the specified port list. Port cost can be set automatically or as a metric value.
Page 68: Forwarding & Filtering
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Forwarding & Filtering Unicast Forwarding Open the Forwarding & Filtering folder in the Configuration menu and click on the Unicast Forwarding link. This will open the Setup Static Unicast Forwarding Table, as shown below: Figure 6- 28.
Page 69 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The Static Multicast Forwarding Settings page displays all of the entries made into the Switch's static multicast forwarding table. Click the Add button to open the Setup Static Multicast Forwarding Table, as shown below: Figure 6- 30.
Page 70: Vlans
VLANs without a network device performing a routing function between the VLANs. The DES-6500 switch supports IEEE 802.1Q VLANs, Port-Based VLANs and Protocol-Based VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag-unaware.
Page 71: Ieee 802.1Q Vlans
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IEEE 802.1Q VLANs Some relevant terms: Tagging - The act of putting 802.1Q VLAN information into the header of a packet. Untagging - The act of stripping 802.1Q VLAN information out of the packet header.
Page 72: 802.1Q Vlan Tags
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet's EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
Page 73: Port Vlan Id
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 74: Default Vlans
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual VID) as the ingress port. If it does not, the packet is dropped. If it has the same VID, the packet is forwarded and the destination port transmits it on its attached network segment.
Page 75: Vlan And Trunk Groups
Protocol VLANs The DES-6500 switch incorporates protocol-based VLANs. This standard, defined by the IEEE 802.1v standard maps packets to protocol-defined VLANs by examining the type octet within the packet header to discover the type of protocol associated with it. After assessing the protocol, the Switch will forward the packets to all ports within the protocol-assigned VLAN.
Page 76: Vlan Entry
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual VLAN Entry In the Configuration folder, open the VLAN folder and click the VLAN Entry link to open the following window: Figure 6- 34. Current 802.1Q Static VLANs Entries window The 802.1Q Static VLANs menu lists all previously configured VLANs by VLAN ID and VLAN Name. To delete an existing 802.1Q VLAN, click the corresponding...
Page 77 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 36. 802.1Q Static VLANs Entry Settings - Modify The following fields can then be set in either the Add or Modify 802.1Q Static VLANs menus: Parameter Description Unit Choose the Switch ID number of the Switch in the switch stack to be modified.
Page 78 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual VLAN if the tag in the packet header is concurrent with this protocol. This packet header information is defined by Novell NetWare 802.3 (IPX - Internet Packet Exchange). ipx802dot2 - Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol.
Page 79: Gvrp Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Settings Allows an individual port to be specified as member of a VLAN. Specifies the port as either 802.1Q tagging or 802.1Q untagged. Checking the box will designate the port as Tagged.
Page 80 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Unit Choose the Switch ID number of the Switch in the switch stack to be modified. From/To These two fields allow you to specify the range of ports that will be included in the Port-based VLAN that you are creating using the GVRP Settings page.
Page 81: Traffic Control
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Traffic Control Use the Traffic Control menu to enable or disable storm control and adjust the threshold for multicast and broadcast storms, as well as DLF (Destination Look Up Failure). Traffic control settings are applied to individual Switch modules.
Page 82: Port Security
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Security A given ports’ (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be locked by using the Admin State pull-down menu to Enabled, and clicking Apply.
Page 83: Port Lock Entries
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Lock Entries The Port Lock Entry Delete window is used to remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view the following window, click Configuration > Port Lock Entries: Figure 6- 40.
Page 84 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual MAC Address The MAC address of the entry in the forwarding database table that has been permanently learned by the Switch. The ID number of the Switch in the switch stack that has permanently learned the Unit MAC address.
Page 85: Qos
View the following map to see how the DES-6500 switch implements basic 802.1P priority queuing. Figure 6- 41. An Example of the Default QoS Mapping on the Switch The picture above shows the default priority setting for the Switch.
Page 86: Understanding Qos
CoS until there are no more packets for this CoS. The other CoS queues that have been given a nonzero value, and depending upon the weight, will follow a common weighted round-robin scheme. Remember that the DES-6500 switch has 7 configurable priority queues (and seven Classes of Service) for each port on the Switch.
Page 87: Bandwidth Control
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. In the Configuration folder, click QoS > Bandwidth Control, to view the screen shown below.
Page 88: Qos Scheduling Mechanism
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual QoS Scheduling Mechanism This drop-down menu allows you to select between a Weight Fair and a Strict mechanism for emptying the priority classes. In the Configuration menu open the QoS folder and click QoS Scheduling Mechanism, to view the screen shown below.
Page 89: Qos Output Scheduling
Configuring the Combination Queue. Configuring the Combination Queue Utilizing the QoS Output Scheduling Configuration window shown above, the DES-6500 switch can implement a combination queue for forwarding packets. This combination queue allows for a combination of strict and weight-fair (weighted round-robin “WRR”) scheduling for emptying given classes of service.
Page 90: 802.1P Default Priority
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The example window below displays an example of the combination queue where Class-1 will have a strict priority for emptying its class, while the other classes will follow a weight fair scheduling. Figure 6- 45. QoS Output Scheduling window – Combination queue example 802.1p Default Priority...
Page 91: 802.1P User Priority
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual 802.1p User Priority The DES-6500 switch allows the assignment of a class of service to each of the 802.1p priorities. In the Configuration folder open the QoS folder and click 802.1p User Priority, to view the screen shown below.
Page 92 Configuring traffic segmentation on the DES-6500 switch is accomplished in two parts. First, you specify a switch from a switch stack by using the Unit pull-down menu, and then a port from that switch, using the Port pull-down menu. Then specify a second switch from the switch stack, and then you select which ports (or different ports on the same switch,) on that switch that you want to be able to receive packets from the switch and port you specified in the first part.
Page 93: System Log Server
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual System Log Server The Switch can send Syslog messages to up to four designated servers using the System Log Host window. In the Configuration folder, click System Log Host, to view the screen shown below.
Page 94: System Severity Log
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual mail system system daemons security/authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem log audit log alert clock daemon...
Page 95 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual To configure the system severity levels, open the following window by clicking Configuration > System Severity Log in the main menu. Figure 6- 52. System Severity Log Configurations window The user may set the following parameters to configure the System Severity. Configurations will be displayed in the System Severity Table.
Page 96: Sntp Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNTP Settings Time Settings To configure the time settings for the Switch, open the Configuration folder, then the SNTP folder and click on the Time Settings link, revealing the following screen for the user to configure.
Page 97: Time Zone And Dst
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Time Settings - Set Current Time Year Enter the current year, if you want to update the system clock. Month Enter the current month, if you would like to update the system clock.
Page 98 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Time Zone and DST Daylight Saving Use this pull-down menu to Enable or Disable the DST Settings. Time State Daylight Saving Use this pull-down menu to specify the amount of time that will constitute your local DST offset - 30, 60, 90, or 120 minutes.
Page 99: Access Profile Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Access Profile Table Configuring the Access Profile Table Access profiles allow you to establish criteria to determine whether the Switch will forward packets based on the information contained in each packet's header. These criteria can be specified on a basis of VLAN, MAC address or IP address.
Page 100 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Profile ID (1-8) Type in a unique identifier number for this profile set. This value can be set from 1 - 8. Type Select profile based on Ethernet (MAC Address), IP address or packet content mask.
Page 101 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The page shown below is the IP Access Profile Configuration page. Figure 6- 57. Access Profile Configuration (IP) The following parameters can be set, for IP: Parameter Description Profile ID (1-8) Type in a unique identifier number for this profile set. This value can be set from 1 - 8.
Page 102 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Destination IP Mask Enter an IP address mask for the destination IP address. DSCP Selecting this option instructs the Switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding.
Page 103 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 58. Access Profile Configuration window (Packet Content Mask) This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask:...
Page 104 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual To establish the rule for a previously created Access Profile: In the Configuration folder, click the Access Profile Table link opening the Access Profile Table. Under the heading Access Rule, clicking Modify, will open the following window.
Page 105 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Type Selected profile based on Ethernet (MAC Address), IP address or Packet Content Mask. Ethernet instructs the Switch to examine the layer 2 part of each packet • header. IP instructs the Switch to examine the IP address in each frame's header.
Page 106 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 61. Access Rule Display window (IP) To configure the Access Rule for Ethernet, open the Access Profile Table and click Modify for an Ethernet entry. This will open the following screen: Figure 6- 62.
Page 107 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 63. Access Rule Configuration window - Ethernet. To set the Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description This is the identifier number for this profile set.
Page 108 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Source MAC Source MAC Address - Enter a MAC Address for the source MAC address. Destination MAC Destination MAC Address - Enter a MAC Address mask for the destination MAC address. 802.1p (0-7) Enter a value from 0-7 to specify that the access profile will apply only to packets with this 802.1p priority value.
Page 109 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 66. Access Rule Configuration - Packet Content Mask To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set.
Page 110 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Offset This field will instruct the Switch to mask the packet header beginning with the offset value specified: value (0-15) - Enter a value in hex form to mask the packet from the beginning •...
Page 111: Cpu Interface Filtering
Ethernet, IP and Packet Content Mask packet headers destined for the CPU and will either forward them or filter them, based on the user’s implementation. As an added feature for the CPU Filtering, the DES-6500 allows the CPU filtering mechanism to be enabled or disabled globally, permitting the user to create various lists of rules without immediately enabling them.
Page 112 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 70. CPU Interface Filtering Configuration window – Ethernet Parameter Description Profile ID (1-5) Type in a unique identifier number for this profile set. This value can be set from 1 - 5.
Page 113 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The page shown below is the IP Access Profile Configuration page. Figure 6- 71. CPU Interface Filtering Configuration window- IP Parameter Description Profile ID (1-5) Type in a unique identifier number for this profile set. This value can be set from 1 - 5.
Page 114 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Protocol Selecting this option instructs the Switch to examine the protocol type value in each frame's header. You must then specify what protocol(s) to include according to the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header.
Page 115 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The page shown below is the Packet Content Mask configuration window. Figure 6- 72. CPU Interface Filtering Configuration window- Packet Content This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified.
Page 116 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Specify a port or group of ports for this Access Profile. The port list is specified by listing the lowest slot number and the beginning port number on that slot, separated by a colon. Then the highest slot number, and the highest port number of the range (also separated by a colon) are specified.
Page 117 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 75. CPU Interface Filtering Rule Configuration – Ethernet To set the Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description Profile ID This is the identifier number for this profile set.
Page 118 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 76. CPU Interface Filtering Rule Display – Ethernet The following window is the CPU Interface Filtering Rule Table for IP. Figure 6- 77. CPU Interface Filtering Rule Table – IP To create a new rule set for an access profile click the Add button. A new window is displayed. To remove a previously created rule, click the corresponding button.
Page 119 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 120: Parameters Description
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 80. CPU Interface Filtering Rule Table – Packet Content To remove a previously created rule, select it and click the button. To add a new Access Rule, click the Add button: Figure 6- 81.
Page 121 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Offset This field will instruct the Switch to mask the packet header beginning with the offset value specified: value (0-15) - Enter a value in hex form to mask the packet from the •...
Page 122: Port Access Entity (802.1X)
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model. This is accomplished by using a RADIUS server to authenticate users trying to access a network by relaying Extensible Authentication Protocol over LAN (EAPOL) packets between the Client and the Server.
Page 123: Authenticator
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 85. The Authentication Server Authenticator The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator servers two purposes when utilizing 802.1x. The first purpose is to request certification information from the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before access is granted to the Client.
Page 124: Client
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Client The Client is simply the endstation that wishes to gain access to the LAN or switch services. All endstations must be running software that is compliant with the 802.1x protocol. For users running Windows XP, that software is included within the operating system.
Page 125: Authentication Process
Figure 6- 88. The 802.1x Authentication Process The D-Link implementation of 802.1x allows network administrators to choose between two types of Access Control used on the Switch, which are: 1.
Page 126: Understanding 802.1X Port-Based And Mac-Based Network Access Control
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Understanding 802.1x Port-based and MAC-based Network Access Control The original intent behind the development of 802.1X was to leverage the characteristics of point-to-point in LANs. As any single LAN segment in such infrastructures has no more than two devices attached to it, one of which is a Bridge Port.
Page 127: Mac-Based Network Access Control
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client Client Client Client...
Page 128: 802.1X Auth Mode Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual 802.1x Auth Mode Settings The following window is used to set the type of authentication mode used in employing the 802.1X security settings. Simply use the pull down menu to select port_based or mac_based 802.1X and click the Apply button.
Page 129 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 93. 802.1X Authenticator Settings – Modify window This screen allows you to set the following features: Parameter Description Unit Choose the Switch ID number of the Switch in the switch stack to be modified.
Page 130: Local Users
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual TxPeriod This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default setting is 30 seconds.
Page 131: Pae System Control
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual PAE System Control Existing 802.1x port and MAC settings are displayed and can be configured using the windows below. Port Capability Click Port Access Entity > PAE System Control > 802.1x Capability Settings to view the following window: Figure 6- 95.
Page 132: Initializing Ports For Port Based 802.1X
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Initializing Ports for Port Based 802.1x Existing 802.1x port and MAC settings are displayed and can be configured using the window below. Click Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 6- 96.
Page 133: Initializing Ports For Mac Based 802.1X
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Initializing Ports for MAC Based 802.1x To initialize ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advanced Settings window. Click Configuration > Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 6- 97.
Page 134: Reauthenticate Port(S) For Port Based 802.1X
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Reauthenticate Port(s) for Port Based 802.1x This window allows you to reauthenticate a port or group of ports by choosing a port or group of ports by using the pull down menus From and To and clicking Apply. The Reauthenticate Port Table displays the current status of the reauthenticated port(s) once you have clicked Apply.
Page 135: Reauthenticate Port(S) For Mac-Based 802.1X
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Reauthenticate Port(s) for MAC-based 802.1x To reauthenticate ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advanced Settings window. Click Configuration > Port Access Entity > PAE System Control > Reauthenticate Port(s) to open the following window: Figure 6- 99.
Page 136: Radius Server
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual RADIUS Server The RADIUS feature of the Switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. The Web Manager offers three windows. Click Configuration > Port Access Entity > RADIUS Server > Authentic RADIUS Server to open the Authentic RADIUS Server Setting window shown below: Figure 6- 100.
Page 137: Layer 3 Ip Networking
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Layer 3 IP Networking Layer 3 Global Advanced Settings The L3 Global Advanced Settings window allows the user to enable and disable Layer 3 settings and functions from a single window. The full settings and descriptions for these functions will appear later in this section. To view this window, open the Configuration folder and then the Layer 3 IP Networking folder and click on the L3 Global Advanced Settings link to access the following window.
Page 138: Ip Multinetting
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IP Multinetting IP Multinetting is a function that allows multiple IP interfaces to be assigned to the same VLAN. This is beneficial to the administrator when the number of IPs on the original interface is insufficient and the network administrator wishes not to resize the interface.
Page 139 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Using a 10.xxx.xxx.xxx IP address notation, the above example would give six network addresses and six subnets. Any IP address from the allowed range of IP addresses for each subnet can be chosen as an IP address for an IP interface on the switch.
Page 140 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 103. IP Interface Configuration window Enter a name for the new interface to be added in the Interface Name field (if you are editing an IP interface, the Interface Name will already be in the top field as seen in the window above). Enter the interface’s IP address and subnet mask in the corresponding fields.
Page 141: Md5 Key Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual MD5 Key Configuration The MD5 Key Configuration menu allows the entry of a sixteen-character Message Digest − version 5 (MD5) key which can be used to authenticate every packet exchanged between OSPF routers. It is used as a security mechanism to limit the exchange of network topology information to the OSPF routing domain.
Page 142: Route Redistribution Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Route Redistribution Settings Route redistribution allows routers on the network, which are running different routing protocols to exchange routing information. This is accomplished by comparing the routes stored in the various routers routing tables and assigning appropriate metrics.
Page 143 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Dst. Protocol Allows for the selection of the protocol for the destination device. Choose between RIP and OSPF. Allows for the selection of the protocol for the source device. Choose between RIP, Src.
Page 144: Static/Default Route Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Static/Default Route Settings Entries into the Switch’s forwarding table can be made using both MAC addresses and IP addresses. Static IP forwarding is accomplished by the entry of an IP address into the Switch’s Static IP Routing Table. To view the following window, click Configuration >...
Page 145 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The following fields can be set: Parameter Description Backup State Allows the user to configure the type of IP route entries on the Switch. Default – Choosing this parameter will allow the user to configure the default gateway for the next hop router only.
Page 146: Static Arp Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Static ARP Table The Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses into physical addresses. This table allows network managers to view, define, modify and delete ARP information for specific devices.
Page 147: Rip
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The Routing Information Protocol is a distance-vector routing protocol. There are two types of network devices running RIP - active and passive. Active devices advertise their routes to others through RIP messages, while passive devices listen to these messages.
Page 148: Rip Global Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Update Response Update Acknowledgement RIP Command Codes The field VERSION contains the protocol version number (1 in this case), and is used by the receiver to verify which version of RIP the packet was sent.
Page 149: Rip Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual RIP Settings RIP settings are configured for each IP interface on the Switch. Click the RIP Interface Settings link in the RIP folder. The menu appears in table form listing settings for IP interfaces currently on the Switch. To configure RIP settings for an individual interface, click on the hyperlinked Interface Name.
Page 150 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Password A password to be used to authenticate communication between routers on the network. Toggle between Disabled and Enabled to disable or enable this RIP interface on the State switch. Interface Metric A read only field that denotes the Metric value of the current IP Interface setting.
Page 151: Ospf
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual OSPF The Open Shortest Path First (OSPF) routing protocol uses a link-state algorithm to determine routes to network destinations. A “link” is an interface on a router and the “state” is a description of that interface and its relationship to neighboring routers.
Page 152 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Shortest Path Tree To build Router A’s shortest path tree for the network diagramed below, Router A is put at the root of the tree and the smallest cost link to each destination network is calculated.
Page 153 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Router A 128.213.0.0 Router B Router C 192.213.11.0 222.211.10.0 Figure 6- 116. Constructing a Shortest Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A. The cost of the link from Router B to Router A, for instance is not important to constructing Router A’s shortest path tree, but is very important when Router B is constructing...
Page 154: Ospf Authentication
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Router link-state updates are flooded to all routers in the current area. These updates describe the destinations reachable through all of the router’s interfaces. Summary link-state updates are generated by Border Routers to distribute routing information about other networks within the AS.
Page 155: Partitioning The Backbone
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Partitioning the Backbone OSPF also allows virtual links to be configured to connect the parts of the backbone that are discontinuous. This is the equivalent to linking different area 0s together using a logical path between each area 0. Virtual links can also be added for redundancy to protect against a router failure.
Page 156: Ospf Packet Formats
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual • Loading − The routers are finalizing the information exchange. Routers have link-state request list and a link- state retransmission list. Any information that looks incomplete or outdated will be put on the request list. Any update that is sent will be put on the retransmission list until it gets acknowledged.
Page 157 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Router ID The Router ID of the packet’s source. Area ID A 32-bit number identifying the area that this packet belongs to. All OSPF packets are associated with a single area. Packets traversing a virtual link are assigned the backbone Area ID of 0.0.0.0...
Page 158 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Field Description Network Mask The network mask associated with this interface. Options The optional capabilities supported by the router. Hello Interval The number of seconds between this router’s Hello packets. Router Priority This router’s Router Priority. The Router Priority is used in the election of the DR and BDR.
Page 159 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Field Description Options The optional capabilities supported by the router. I - bit The Initial bit. When set to 1, this packet is the first in the sequence of Database Description packets. M - bit The More bit.
Page 160 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Link-State Update Packet Link-State Update packets are OSPF packet type 4. These packets implement the flooding of link-state advertisements. Each Link-State Update packet carries a collection of link-state advertisements one hop further from its origin. Several link-state advertisements may be included in a single packet.
Page 161 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Link-State Acknowledgment Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Link-State Advertisement Header ... Figure 6- 122. Link State Acknowledge Packet Each acknowledged link-state advertisement is described by its link-state advertisement header. It contains all the information required to uniquely identify both the advertisement and the advertisement’s current instance.
Page 162: Router Links Advertisements
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Link-State Advertisement Header Link-State Age Options Link-State Type Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Figure 6- 123. Link State Advertisement Header Field Description Link State Age The time is seconds since the link state advertisement was originated.
Page 163 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Routers Links Advertisements Link-State Age Options Link-State Type Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Reserved Reserved Number of Links Link ID Link Data Type No. Of TOS TOS 0 Metric...
Page 164: Network Links Advertisements
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Field Description Type A quick classification of the router link. One of the following: Type Description Point-to-point connection to another router. Connection to a transit network. Connection to a stub network. Virtual link.
Page 165: Summary Link Advertisements
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Network Link Advertisements Link-State Age Options Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Network Mask Attached Router Figure 6- 125. Network Link Advertisements Field Description Network Mask The IP address mask for the network.
Page 166: Autonomous Systems External Link Advertisements
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual summary route, the advertisement’s Link State ID is always set to the Default Destination − 0.0.0.0, and the Network Mask is set to 0.0.0.0. Separate costs may be advertised for each IP Type of Service. Note that the cost for TOS 0 must be included, and is always listed first.
Page 167: Ospf General Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Field Description Network Mask The IP address mask for the advertised destination. E - bit The type of external metric. If the E - bit is set, the metric specified is a Type 2 external metric. This means the metric is considered larger than any link state path.
Page 168: Ospf Area Id Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual OSPF Area ID Settings This menu allows the configuration of OSPF Area IDs and to designate these areas as either Normal or Stub. Normal OSPF areas allow Link-State Database (LSDB) advertisements of routes to networks that are external to the area. Stub areas do not allow the LSDB advertisement of external routes.
Page 169: Ospf Interface Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Stub Import Displays whether or not the selected Area will allow Summary Link-State Advertisements (Summary LSAs) to be imported into the area from other areas. Summary LSA Displays the default cost for the route to the stub of between 0 and 65,535. The default Stub Default Cost is 1.
Page 170 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Interface Name Displays the of an IP interface previously configured on the Switch. IP Address Displays the IP address of the interface and its current status (Link Up / Link Down) Network Medium A read only field describing the type of network medium in use.
Page 171: Ospf Virtual Interface Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Transmit Delay A read only field that denotes the estimated time to transmit a Link State Update Packet over this interface, in seconds. A read only field that denotes the time between LSA retransmissions over this Retransmit Time interface, in seconds.
Page 172: Ospf Area Aggregation Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Neighbor Router The OSPF router ID for the remote router. This is a 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the remote area’s Area Border Router. Hello Interval (1- Specify the interval between the transmission of OSPF Hello packets, in seconds.
Page 173 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 135. OSPF Area Aggregation Settings table Use the menu below to change settings or add a new OSPF Area Aggregation setting. Figure 6- 136. OSPF Area Aggregation Settings – Add window Specify the OSPF aggregation settings and click the Apply button to add or change the settings.
Page 174: Ospf Host Route Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual OSPF Host Route Settings OSPF host routes work in a way analogous to RIP, only this is used to share OSPF information with other OSPF routers. This is used to work around problems that might prevent OSPF information sharing between routers.
Page 175: Ip Multicast Routing Protocol
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IP Multicast Routing Protocol The functions supporting IP multicasting are added under the IP Multicast Routing Protocol folder, from the Layer 3 IP Networking folder. IGMP, DVMRP, and PIM-DM can be enabled or disabled on the Switch without changing the individual protocol’s configuration.
Page 176 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Multicast routers send IGMP queries (to the all-hosts group address: 224.0.0.1) periodically to see whether any group members exist on their subnetworks. If there is no response from a particular group, the router assumes that there are no group members on the network.
Page 177: Igmp Interface Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IGMP Interface Configuration The Internet Group Multicasting Protocol (IGMP) can be configured on the Switch on a per-IP interface basis. To view the IGMP Interface Table, open the IP Multicast Routing Protocol folder under Configuration and click IGMP Interface Settings.
Page 178: Dvmrp Interface Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Version Enter the IGMP version (1, 2 or 3) that will be used to interpret IGMP queries on the interface. Allows the entry of a value between 1 and 65535 seconds, with a default of 125 Query Interval seconds.
Page 179: Dvmrp Interface Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DVMRP Interface Settings To view the DVMRP Interface Table, click Configuration > Layer 3 IP Networking > IP Multicast Routing Protocol > DVMRP Interface Settings. This menu allows the Distance-Vector Multicast Routing Protocol (DVMRP) to be configured for each IP interface defined on the Switch.
Page 180: Pim-Dm Interface Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual PIM-DM Interface Configuration The Protocol Independent Multicast - Dense Mode (PIM-DM) protocol should be used in networks with a low delay (low latency) and high bandwidth as PIM-DM is optimized to guarantee delivery of multicast packets, not to reduce overhead.
Page 181 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 148. PIM-DM Interface Settings - Edit window The following fields can be set or viewed: Parameter Description Interface Name Allows the entry of the name of the IP interface for which PIM-DM is to be configured.
Page 182: Dns Relay
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DNS Relay Computer users usually prefer to use text names for computers for which they may want to open a connection. Computers themselves, require 32 bit IP addresses. Somewhere, a database of network devices’ text names and their corresponding IP addresses must be maintained.
Page 183: Dns Relay Static Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description DNS Relay Status This field can be toggled between Disabled and Enabled using the pull-down menu, and is used to enable or disable the DNS Relay service on the Switch. Allows the entry of the IP address of a primary domain name server (DNS).
Page 184: Dhcp / Bootp Relay
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DHCP / BOOTP Relay The BOOTP hops count limit allows the maximum number of hops (routers) that the BOOTP messages can be relayed through to be set. If a packet’s hop count is more than the hop count limit, the packet is dropped. The range is between 1 and 16 hops, with a default value of 4.
Page 185: Dhcp/Bootp Relay Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DHCP/BOOTP Relay Settings The DHCP/ BOOTP Relay Settings allow the user to set up a server, by IP address, for relaying DHCP / BOOTP information to the Switch. The user may enter a previously configured IP interface on the Switch that will be connected directly to the DHCP/BOOTP server using the following window.
Page 186: Vrrp
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual VRRP VRRP or Virtual Routing Redundancy Protocol is a function on the Switch that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router that controls the IP address associated with a virtual router is called the Master, and will forward packets sent to this IP address.
Page 187: Vrrp Virtual Router Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual VRRP Virtual Router Settings The following window will allow the user to view the parameters for the VRRP function on the Switch. To view this window, click Configuration > Layer 3 IP Networking > VRRP > VRRP Virtual Router Settings: Figure 6- 155.
Page 188 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Or, the user may click the hyperlinked Interface Name to view the same window: The following parameters may be set to configure an existing or new VRRP virtual router. Parameter Description VRID (1-255) Enter a value between 1 and 255 to uniquely identify this VRRP group on the Switch.
Page 189 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 6- 157. VRRP Virtual Router Settings - Display window This window displays the following information: Parameter Description VRID Displays the virtual router ID set by the user. This will uniquely identify the VRRP Interface on the network.
Page 190: Vrrp Authentication Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Admin. State Displays the current state of the router. Up will be displayed if the virtual router is enabled and Down, if the virtual router is disabled. Displays the priority of the virtual router. A higher priority will increase the probability Priority that this router will become the Master router of the group.
Page 191 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Interface Name The name of a previously created IP interface for which to configure the VRRP authentication. Specifies the type of authentication used. The Auth. Type must be consistent with all Auth.
Page 192: Security Management
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Section 7 Security Management Security IP User Accounts Access Authentication Control (TACACS) Secure Sockets Layer (SSL) Secure Shell (SSH) The following section will aid the user in configuring security functions for the Switch. The Switch includes various functions for security, including TACACS, Security IPs, SSL, and SSH, all discussed in detail in the following section.
Page 193: Admin And User Privileges
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 3. User Accounts Modify Table - Add Add a new user by typing in a User Name, and New Password and retype the same password in the Confirm New Password. Choose the level of privilege (Admin or User) from the Access Right drop-down menu.
Page 194 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Factory Reset User Account Management Add/Update/Delete User Accounts View User Accounts Table 7- 1. Admin and User Privileges After establishing a User Account with Admin-level privileges, be sure to save the changes by opening the Maintenance...
Page 195: Secure Shell (Ssh)
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Secure Shell (SSH) SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows a secure login to remote host computers, a safe method of executing commands on a remote end node, and will provide secure encrypted and authenticated communication between two non-trusted hosts.
Page 196 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual To configure the SSH server on the Switch, modify the following parameters and click Apply: Parameter Description SSH Server Status Use the pull-down menu to enable or disable SSH on the Switch. The default is Disabled.
Page 197: Ssh Algorithm
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SSH Algorithm The SSH Algorithm window allows the configuration of the desired types of SSH algorithms used for authentication encryption. There are three categories of algorithms listed and specific algorithms of each may be enabled or disabled by using their corresponding pull-down menus.
Page 198 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual AES128-CBC Use the pull-down to enable or disable the Advanced Encryption Standard AES128 encryption algorithm with Cipher Block Chaining. The default is Enabled. Use the pull-down to enable or disable the Advanced Encryption Standard AES192 AES192-CBC encryption algorithm with Cipher Block Chaining.
Page 199: Ssh User Authentication Mode
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SSH User Authentication Mode The following windows are used to configure parameters for users attempting to access the Switch through SSH. To access the following window, click Security Management > Secure Shell > SSH User Authentication.
Page 200 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Click Apply to implement changes made. NOTE: To set the SSH User Authentication parameters on the Switch, a User Account must be previously configured. For more information on configuring local User Accounts on the Switch, see the User Accounts...
Page 201: Access Authentication Control
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Access Authentication Control The TACACS / XTACACS / TACACS+ / RADIUS commands let you secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
Page 202: Authentication Policy & Parameters
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Authentication Policy & Parameters This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login.
Page 203: Application's Authentication Settings
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Application's Authentication Settings This window is used to configure switch configuration applications (console, Telnet, SSH, web) for login at the user level and at the administration level (Enable Admin) utilizing a previously configured method list. To view the following window, click Security Management >...
Page 204: Authentication Server Group
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Authentication Server Group This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to group TACACS/XTACACS/TACACS+/RADIUS server hosts into user-defined categories for authentication using method lists.
Page 205 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 13. Authentication Server Group Table Add Settings window Enter a group name of up to 15 characters into the Group Name field and click Apply. The entry should appear in the Authentication Server Group Settings window, as shown in Figure 8-12 (Trinity).
Page 206: Authentication Server Host
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Authentication Server Host This window will set user-defined Authentication Server Hosts for the TACACS / XTACACS / TACACS+ / RADIUS security protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the Switch will send authentication packets to a remote TACACS / XTACACS / TACACS+ / RADIUS server host on a remote host.
Page 207 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port (1-65535) Enter a number between 1 and 65535 to define the virtual port number of the authentication protocol on a server host. The default port number is 49 for TACACS/XTACACS/TACACS+ servers and 1813 for RADIUS servers but the user may set a unique port number for higher security.
Page 208: Login Method Lists
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Login Method Lists This command will configure a user-defined or default Login Method List of authentication techniques for users logging on to the Switch. The sequence of techniques implemented in this command will affect the authentication result. For example, if a user enters a sequence of techniques, for example TACACS - XTACACS- local, the Switch will send an authentication request to the first TACACS host in the server group.
Page 209 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 18. Login Method List – Add window To define a Login Method List, set the following parameters and click Apply: Parameter Description Method List Name Enter a method list name defined by the user of up to 15 characters.
Page 210: Enable Method Lists
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Enable Method Lists The Enable Method Lists window is used to set up Method Lists to promote users with user level privileges to Administrator (Admin) level privileges using authentication methods on the Switch. Once a user acquires normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch, which is defined by the Administrator.
Page 211 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 21. Enable Method List - Add window To define an Enable Login Method List, set the following parameters and click Apply: Parameter Description Enter a method list name defined by the user of up to 15 characters.
Page 212: Local Enable Password
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Local Enable Password This window will configure the locally enabled password for the Enable Admin command. When a user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch.
Page 213: Enable Admin
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Enable Admin The Enable Admin window is for users who have logged on to the Switch on the normal user level, and wish to be promoted to the administrator level. After logging on to the Switch, users will have only user level privileges. To gain access to administrator level privileges, the user will open this window and will have to enter an authentication password.
Page 214: Secure Socket Layer (Ssl)
Both the server and the client must have consistent certificate files for optimal use of the SSL function. The Switch only supports certificate files with .der file extensions. Currently, all DES-6500 switches come with a certificate pre-loaded though the user may need to download more, depending on user circumstances.
Page 215: Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Parameter Description Server IP Enter the IP address of the TFTP server where the certificate files are located. Certificate File Name Enter the path and the filename of the certificate file to download. This file must have a .der extension.
Page 216 SSL are not available on the web-based management of this Switch and need to be configured using the command line interface. For more information on SSL and its functions, see the DES-6500 Command Line Interface Reference Manual, located on the documentation CD of this product.
Page 217: Snmp Manager
The DES-6500 switch supports the SNMP versions 1, 2c, and 3. You can specify which version of the SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 218: Snmp Trap Settings
SNMP version used for specific tasks. The DES-6500 switch supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The administrator can specify the SNMP version used to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 219 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 29. SNMP User Table Display The following parameters are displayed: Parameter Description User Name An alphanumeric string of up to 32 characters. This is used to identify the SNMP users. Group Name This name is used to specify the SNMP group created can request SNMP messages.
Page 220 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The following parameters can set: Parameter Description User Name Enter an alphanumeric string of up to 32 characters. This is used to identify the SNMP user. Group Name This name is used to specify the SNMP group created can request SNMP messages.
Page 221: Snmp View Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNMP View Table The SNMP View Table is used to assign views to community strings that define which MIB objects can be accessed by a remote SNMP manager. To view the SNMP View Table, open the SNMP Manager folder and click the SNMP View Table entry.
Page 222: Snmp Group Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNMP Group Table An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu. To view the SNMP Group Table, open the SNMP Manager folder and click the SNMP Group Table entry.
Page 223 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 35. SNMP Group Table Configuration – Add window The following parameters can set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users.
Page 224: Snmp Community Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNMP Community Table Use this table to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the Switch. One or more of the following...
Page 225: Snmp Host Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNMP Host Table Use the SNMP Host Table to set up SNMP trap recipients. Open the SNMP Manager folder and click on the SNMP Host Table link. This will open the SNMP Host Table page, as shown below.
Page 226: Snmp Engine Id
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SNMP Engine ID The Engine ID is a unique identifier used for SNMP V3 implementations. This is an alphanumeric string used to identify the SNMP engine on the Switch. To display the Switch's SNMP Engine ID, open the SNMP Manger folder and click on the SNMP Engine ID link. This will open the SNMP Engine ID Configuration window, as shown below.
Page 227: Monitoring
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Section 9 Monitoring CPU Utilization Port Utilization Packets Errors Size Stacking Information Device Status MAC Address Switch History Log IGMP Snooping Group IGMP Snooping Forward Browse Router Port Port Access Control Layer 3 Feature...
Page 228 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 9- 1. CPU Utilization graph To view the CPU utilization by port, use the real-time graphic of the Switch and/or switch stack at the top of the web page by simply clicking on a port. Click Apply to implement the configured settings. The window will automatically refresh with new updated statistics.
Page 229: Port Utilization
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Port Utilization The Port Utilization page displays the percentage of the total available bandwidth being used on the port. To view the port utilization, open the Monitoring folder and then the Port Utilization link: Figure 9- 2.
Page 230: Packets
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) Click the Received (RX) link in the Packets folder of the Monitoring menu to view the following graph of packets received on the Switch.
Page 231 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 9- 4. Rx Packets Analysis Table The following fields may be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 232: Umb Cast (Rx)
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual UMB Cast (RX) Click the UMB Cast (RX) link in the Packets folder of the Monitoring menu to view the following graph of UMB cast packets received on the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 233 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 9- 6. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 234: Transmitted (Tx)
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Transmitted (TX) Click the Transmitted (TX) link in the Packets folder of the Monitoring menu to view the following graph of packets transmitted from the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 235 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 9- 8. Tx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 236: Errors
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Errors The Web Manager allows port error statistics compiled by the Switch's management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) Click the Received (RX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch.
Page 237 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 40. Rx Error Analysis window (table) The following fields can be set: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 238: Transmitted (Tx)
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Transmitted (TX) Click the Transmitted (TX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 239 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 8- 42. Tx Error Analysis window (table) The following fields may be set or viewed: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 240: Size
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table. Two windows are offered. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 241 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual The following fields can be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200.
Page 242: Stacking Information
Stacking Information The following window displays detailed information about the stacking of the line cards set in the chassis. The DES-6500 may incorporate up to eight hot-swappable line cards for varying port counts of up to one hundred and ninety-two (192) 10/100 Mbps Fast Ethernet ports or up to ninety-two (92) 1000 Mbps Gigabit Ethernet ports.
Page 243: Device Status
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Device Status The Device Status window can be found in the Monitoring menu by clicking the Device Status link. This window shows the status of the physical attributes of the Switch, including power sources and fans.
Page 244: Mac Address
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual MAC Address This allows the Switch's dynamic MAC address forwarding table to be viewed. When the Switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table. These entries are then used to forward packets through the Switch.
Page 245 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Unit – Port Select the switch Unit ID of the switch in the Switch stack and then the port by using the corresponding pull-down menus. Allows the user to move to a sector of the database corresponding to a user defined Find port, VLAN, or MAC address.
Page 246: Switch History Log
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Switch History Log The Web manager allows the Switch's history log, as compiled by the Switch's management agent, to be viewed. To view the Switch history log, open the Maintenance folder and click the Switch History Log link.
Page 247: Igmp Snooping Group
Port Map These are the ports where the IGMP packets were snooped are displayed. NOTE: To configure IGMP snooping for the DES-6500 switch, go to the Configuration folder and select IGMP Snooping. Configuration and other information concerning IGMP snooping may be found in Section 6 of this...
Page 248: Igmp Snooping Forwarding
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual IGMP Snooping Forwarding This window will display the current IGMP snooping forwarding table entries currently configured on the Switch. To view the following screen, open the Monitoring folder and click the IGMP Snooping Forwarding link.
Page 249: Browse Router Port
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Browse Router Port This displays which of the Switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. A router port that is dynamically configured by the Switch is designated by D and a Forbidden port is designated by F.
Page 250: Port Access Control
NOTE: The Authenticator State, Authenticator Statistics, Authenticator Session Statistics and Authenticator Diagnostics windows in this section cannot be viewed on the DES-6500 switch unless 802.1x is enabled by port or by MAC address. To enable 802.1x, go to the Port Access Entity folder in the configuration folder and select the heading 802.1X Auth Mode Settings.
Page 251 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 9- 18. Authenticator State window – MAC-Based 802.1x This window displays the Authenticator State for individual ports on a selected device. To select unit within the switch stack, use the pull-down menu at the top of the window and click Apply. A polling interval between 1 and 60 seconds can be set using the drop-down menu at the top of the window and clicking OK.
Page 252: Authenticator Diagnostics
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Authenticator Diagnostics This table contains the diagnostic information regarding the operation of the Authenticator associated with each port. The user may choose the line card and port to view these statistics for by using the pull-down menus in the top left and corner.
Page 253 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual EntersAuthenticating Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant. SuccessWhileAuthenticating Counts the number of times that the state machine transitions...
Page 254 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual BackendOtherRequestsToSupplicant Counts the number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure, or Success message) to the Supplicant (i.e., executes txReq on entry to the REQUEST state). Indicates that the Authenticator chose an EAP-method.
Page 255: Authenticator Session Statistics
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Authenticator Session Statistics This table contains the session statistics objects for the Authenticator PAE associated with each port. To view the Authenticator Session Statistics, click Monitoring > Port Access Control > Authenticator Session Statistics.
Page 256 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual SessionFramesRx The number of user data frames received on this port during the session. SessionFramesTx The number of user data frames transmitted on this port during the session. SessionID A unique identifier for the session, in the form of a printable ASCII string of at least three characters.
Page 257: Authenticator Statistics
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Authenticator Statistics This table contains the statistics objects for the Authenticator PAE associated with each port. An entry appears in this table for each port that supports the Authenticator function. To view the Authenticator Statistics, click Monitoring > Port Access Control >...
Page 258 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual EapolStartFramesRx The number of EAPOL Start frames that have been received by this Authenticator. The number of EAP Req/Id frames that have been transmitted by this EapolReqIdFramesTx Authenticator. EapolLogoffFramesRx The number of EAPOL Logoff frames that have been received by this Authenticator.
Page 259: Radius Accounting
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual RADIUS Accounting This window shows managed objects used for managing RADIUS accounting clients, and the current statistics associated with them. To view the RADIUS Accounting, click Monitoring > Port Access Control > RADIUS Accounting.
Page 260 The number of RADIUS packets, which were received from this server on the accounting port and dropped for some other reason. Note: To configure 802.1x features for the DES-6500, go to the Configuration folder and select Port Access Entity. Configuration and other information concerning 802.1x may be found in Section 6 of this...
Page 261: Radius Authentication
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual RADIUS Authentication This table contains information concerning the activity of the RADIUS authentication client on the client side of the RADIUS authentication protocol. To view the RADIUS Authentication, click Monitoring > Port Access Control >...
Page 262 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual ClientIdentifier The NAS-Identifier of the RADIUS authentication client. (This is not necessarily the same as sysName in MIB II.) The identification number assigned to each RADIUS Authentication server ServerIndex that the client shares a secret with.
Page 263: Layer 3 Feature
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Layer 3 Feature This folder in the Monitoring section will display information concerning settings configured in Layer 3 IP Networking of the Configuration folder. These settings and parameters have been previously described in Section 6 of this manual, under Layer 3 IP Networking.
Page 264: Browse Routing Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Browse Routing Table The Browse Routing Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This screen shows the current IP routing table of the Switch. To find a specific IP route, enter an IP address into the Destination Address field along with a proper subnet mask into the Mask field and click Find.
Page 265: Browse Ip Multicast Forwarding Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Browse IP Multicast Forwarding Table The Browse IP Multicast Forwarding Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This window will show current IP multicasting information on the Switch. To search a specific entry, enter an multicast group IP address into the Multicast Group field or a Source IP address and click Find.
Page 266: Ospf Monitoring
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual OSPF Monitoring This section offers windows regarding OSPF (Open Shortest Path First) information on the Switch, including the OSPF LSDB Table, OSPF Neighbor Table and the OSPF Virtual Neighbor Table. To view these tables, open the Monitoring folder and click OSPF Monitoring.
Page 267: Browse Ospf Neighbor Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual If Adv. Router ID is selected, you must enter the IP address in the Advertisement Router ID field, and then click Find. If LSDB is selected, you must select the type of link state (RtrLink, NetLink, Summary, ASSummary and ASExtLink) in the LSDB Type field, and then click Find.
Page 268: Ospf Virtual Neighbor
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual OSPF Virtual Neighbor This table can be found in the OSPF Monitoring folder by clicking on the Browse OSPF Virtual Neighbor Table link. This table displays a list of Virtual OSPF Neighbors of the Switch. The user may choose specifically search a virtual...
Page 269: Dvmrp Monitoring
Switch. This folder, found in the Monitoring folder, offers 3 screens for monitoring; Browse DVMRP Routing Table, Browse DVMRP Neighbor Address Table and Browse DVMRP Routing Next Hop Table. Information on DVMRP and its features in relation to the DES-6500 can be found in Section 6, under IP Multicast Routing Protocol. Browse DVMRP Routing Table Multicast routing information is gathered and stored by DVMRP in the DVMRP Routing Table, which may be found in the Monitoring folder under Browse DVMRP Monitoring, contains one row for each port in a DVMRP mode.
Page 270: Browse Dvmrp Neighbor Table
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Browse DVMRP Neighbor Table This table, found in the Monitoring menu under DVMRP Monitor > Browse DVMRP Neighbor Table contains information about DVMRP neighbors of the Switch. To search this table, enter either an Interface Name or Neighbor Address into the respective field and click the Find button.
Page 271: Pim Monitoring
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual PIM Monitoring Multicast routers use Protocol Independent Multicast (PIM) to determine which other multicast routers should receive multicast packets. To find out more information concerning PIM and its configuration on the Switch, see the IP Multicast Routing Protocol chapter of Section 6, Configuration.
Page 272: Switch Maintenance
Click Start to record the IP address of the TFTP server and initiate the file transfer. NOTE: Please check the firmware version of the CPU and line cards of the DES-6500 before upgrading to firmware release 2.00-B-20. For firmware upgrading information, cautions and procedures for release 2,...
Page 273: Download Configuration
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Download Configuration To download a configuration file from a TFTP server, click on the TFTP Service folder in the Maintenance folder and then the Download Configuration File link: Figure 10- 2. Download Configuration window Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server.
Page 274: Ping Test
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Ping Test Ping is a small program that sends ICMP Echo packets to the IP address you specify. The destination node then responds to or "echoes" the packets sent from the Switch. This is very useful to verify connectivity between the Switch and other nodes on the network.
Page 275: Save Configuration
The default is 1. Save Configuration The DES-6500 switch has two levels of memory, normal RAM and non-volatile or NV-RAM. Configuration changes are made effective clicking the Apply button. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
Page 276 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 10- 8. Factory Reset to Default Value window...
Page 277: Reboot Device
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Reboot Device The following menu is used to restart the Switch. Figure 10- 9. Reboot System window Clicking the Yes click-box will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch.
Page 278: D-Link Single Ip Management
SIM allows intermediate devices that do not support SIM. This enables the user to manage switches that are more than one hop away from the CS. The SIM group is a group of switches that are managed as a single entity. The DES-6500 switch may take on three different roles: 1.
Page 279: Sim Using The Web Interface
• After configuring one switch to operate as the CS of a SIM group, additional DES-6500 switches may join the group by manually configuring the Switch to be a MS. The CS will then serve as the in band entry point for access to the MS. The CS's IP address will become the path to all MS's of the group and the CS's Administrator's password, and/or authentication will control access to all MS's of the SIM group.
Page 280 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 11- 2. SIM Settings window (enabled) The following parameters can be set: Parameters Description SIM State Use the pull down menu to either enable or disable the SIM state on the Switch. Dis- abled will render all SIM functions on the Switch inoperable.
Page 281: Topology
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Topology The Topology window will be used to configure and manage the Switch within the SIM group and requires Java script to function properly on your computer. The Java Runtime Environment on your server should initiate and lead you to the topology window, as seen below.
Page 282 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 11- 4. Topology view This screen will display how the devices within the Single IP Management Group are connected to other groups and devices. Possible icons in this screen are as follows:...
Page 283: Tool Tips
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Layer 2 candidate switch Layer 3 candidate switch Unknown device Non-SIM devices Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
Page 284: Right Click
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 11- 6. Port Speed Utilizing the Tool Tip Right Click Right clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 285: Commander Switch Icon
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Figure 11- 8. Property window Commander Switch Icon Figure 11- 9. Right Clicking a Commander Icon The following options may appear for the user to configure: Collapse - to collapse the group that will be represented by a single icon.
Page 286: Member Switch Icon
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Member Switch Icon Figure 11- 11. Right Clicking a Member icon The following options may appear for the user to configure: Collapse - to collapse the group that will be represented by a single icon.
Page 287 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Add to group - add a candidate to a group. Clicking this option will reveal the following screen for the user to • enter a password for authentication from the Candidate Switch before being added to the SIM group. Click OK to enter the password or Cancel to exit the window.
Page 288: Menu Bar
About - Will display the SIM information, including the current SIM version. • NOTE: Upon this firmware release, some functions of the SIM can only be configured through the Command Line Interface. See the DES-6500 Command Line Interface Reference Manual for more information on SIM and its configurations.
Page 289: Firmware Upgrade
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Firmware Upgrade This screen is used to upgrade firmware from the Commander Switch to the Member Switch. To access the following window, click Single IP Management > Firmware Upgrade. Member Switches will be listed in the table and will be specified by Port (port on the CS where the MS resides), MAC Address, Model Name and Version.
Page 290: Appendix A
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Appendix A General IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1D Spanning Tree IEEE 802.1w Rapid Spanning Tree IEEE 802.1s Multiple Spanning Tree Standards IEEE 802.1 P/Q VLAN IEEE 802.1p Priority Queues IEEE 802.1x Port and MAC Based Access Control...
Page 291 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6505: 20W maximum DES-6507: 30W maximum DES-6508: 27W maximum DES-6509: 20W maximum DES-6510: 28W maximum DC fans: Four built-in 80 x 80 x 25 mm fans. Operating Temperature: 0 to 40 degrees Celsius...
Page 292: Appendix B
Failing to follow these rules may result in inoperability of the switch or installed line cards. Line Card Firmware Compatibility The DES-6500 chassis switch supports the following line cards: DES-6504 12-port 100BASE-FX (SFF) Fast Ethernet Switch module •...
Page 293: Upgrading To R2.50-B12
PROM code, the user MSUT first upgrade the runtime firmware for both the CPU and any line cards set in the DES-6500 to R2.0, R2.5 or later. These upgrades can be performed through a TFTP server application, yet the PROM code itself must be upgraded through the CLI interface only.
Page 294 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6500:4#show switch Command: show switch Device Type : DES-6500 Chassis Ethernet Switch MAC Address : DA-10-21-00-00-01 IP Address : 10.41.44.22 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version : Build 1.50-B19...
Page 295 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6500:4#show stack_information Command: show stack_information Prio- Prom Runtime Type Exist rity version version version ----------- ----- ----- -------- -------- -------- DES-6505 exist 0.00-B16 2.00-B20 DES-6507 exist 0.00-B16 2.00-B20 USR-NOT-CFG DES-6508 exist 1.50-B19 2.00-B20...
Page 296 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Before installing the DES-6512 line card, the user must upgrade the CPU and line card runtime firmware codes to R2.50-B12. Failure to do this may result in inoperability of the switch and/or inserted line cards.
Page 297 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step 7 Once the whole system has been upgraded to R2.50-B12 with PROM code R2.00-B20, the user may verify all downloads have been successful by checking the “show switch” and “show stack_information” commands in the CLI one final time.
Page 298 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6500:4#show switch Command: show switch Device Type : DES-6500 Chassis Ethernet Switch MAC Address : DA-10-21-00-00-01 IP Address : 10.41.44.22 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version : Build 2.00-B20...
Page 299: Adding Runtime R1.01 Des-6505/Des-6507/Des-6509 Line Cards To The Runtime R1.30/1.4/2.0/2.5 Chassis
For owners of the DES-6500 chassis switch, certain software incongruencies have surfaced with the adding and removing new line cards in the chassis. If a DES-6500 chassis switch has been uploaded with R1.30/1.4/2.0/2.5 or later runtime code, and yet line cards DES-6505/DES-6507/DES-6509 are R1.01, line cards DES-6504/DES-6508/DES-6510/DES-6512 cannot be recognized by the chassis’...
Page 300 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step 2 Remove all DES-6504/DES-6508/DES-6510/DES-6512 line cards from the slots in the chassis switch. Next enter the “reset system” command and the whole system should reboot with stacking in tact. Enter the “show stack_information”...
Page 301 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step 3 After removing the DES-6504/DES-6508/DES-6510/DES-6512 line cards from the switch, enter the new DES-6505/DES- 6507/DES-6509 into the chassis. Check the “show stack_information” command again to see if the new line card(s) are recognized by the switch.
Page 302 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step 5 Check the upgrade result with the “show stack_information” command. DES-6500:4#show stack_information Command: show stack_information Prio- Prom Runtime Type Exist rity version version version ----------- ----- ----- -------- -------- -------- DES-6505 exist 2.00-B20 2.50-B12...
Page 303: Firmware Downgrade Procedure
4. Finally, the user must once again execute the “reset system” command into the CLI interface. Downgrade Example This downgrade example will refer to the downgrade procedure from R2.00-B20 to R1.20-B09 but is universal to all firmware downgrade procedures for the DES-6500 chassis switch.
Page 304 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step1 Power on the chassis and once it has booted completely, enter the “show switch” command into the CLI interface to view the firmware version of the CPU runtime code currently employed in the chassis.
Page 305 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step 2 Next enter the “show stack_information” command into the CLI to display the Runtime Version Code of the line cards currently set in the chassis. DES-6500:4#show stack_information Command: show stack_information Prio- Prom...
Page 306 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6500:4#reset system Command: reset system Are you sure you want to proceed with the system reset?(y/n) (reset all, save, reboot) y Reboot & Load Factory Default Configuration… Saving all configurations to NV-RAM…….. Done...
Page 307 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Step 5 After the chassis reboots and returns to normal operation and stacking configuration, download Runtime Code Version R1.20-B09 to the chassis CPU. DES-6500:4#download firmware_fromTFTP 10.48.74.121 c:/6500rU_1.20-B09.had unit cpu Command: download firmware_fromTFTP 10.48.74.121 c:/6500rU_1.20-B09.had unit cpu Connecting to server....
Page 308 DES-6500 Chassis-based Layer 3 Ethernet Switch Manual DES-6500:4#show switch Command: show switch Device Type : DES-6500 Chassis Ethernet Switch MAC Address : DA-10-21-00-00-01 IP Address : 10.41.44.22 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version : Build 2.00-B20...
Page 309: Appendix C
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Appendix C Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagrams and tables show the standard RJ-45 receptacle/connector and their pin assignments.
Page 310: Appendix D
DES-6500 Chassis-based Layer 3 Ethernet Switch Manual Appendix D Cable Lengths Use the following table to as a guide for the maximum cable lengths. Standard Media Type Maximum Distance Mini-GBIC 1000BASE-LX, Single-mode fiber module 10km 1000BASE-SX, Multi-mode fiber module 550m...
Page 311: Glossary
DES-6500 Stackable Gigabit Layer 3 Switch User Guide Glossary 1000BASE-LX: A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-SX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX: 100Mbps Ethernet implementation over fiber.
Page 312 DES-6500 Stackable Gigabit Layer 3 Switch User Guide latency: The delay between the time a device receives a packet and the time the packet is forwarded out of the destination port. line speed: See baud rate. main port: The port in a resilient link that carries data traffic in normal operating conditions.
Page 313: Warranties And Registration
Ninety (90) days D-Link’s sole obligation shall be to repair or replace the defective Hardware at no charge to the original owner. Such repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement Hardware need not be new or of an identical make, model or part;...
Page 314 The packaged product shall be insured and shipped to Authorized D-Link Service Office with all shipping costs prepaid. D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package.
Page 315: Fcc Warning
Trademarks Copyright 2005 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of D- Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective proprietors. Copyright Statement No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United...
Page 316 Any repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement hardware need not be new or have an identical make, model or part. D-Link may, at its option, replace the defective Hardware or any part thereof with any reconditioned product that D-Link reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware.
Page 317 D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product owner agrees to pay D-Link’s reasonable handling and return shipping charges for any product that is not packaged and shipped in accordance with the foregoing requirements, or that is determined by D-Link not to be defective or non-conforming.
Page 318 Product Registration Register your D-Link product online at http://support.dlink.com/register Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
Page 319 Limited Product Warranty Period The Limited Product Warranty Period starts on the date of purchase from D-LINK. Your dated sales or delivery receipt, showing the date of purchase of the product, is your proof of the purchase date. You may be required to provide proof of purchase as a condition of receiving warranty service.
Page 320 Laufzeit der eingeschränkten Garantie Die Laufzeit der eingeschränkten Garantie beginnt mit dem Zeitpunkt, zu dem das Produkt von D-LINK gekauft wurde. Als Nachweis für den Zeitpunkt des Kaufs gilt der datierte Kauf- oder Lieferbeleg. Es kann von Ihnen verlangt werden, dass Sie zur Inanspruchnahme von Garantiediensten den Kauf des Produkts nachweisen. Wenn Ihre Hardware-Produkte der Marke D-LINK innerhalb der Laufzeit der eingeschränkten Garantie eine Reparatur benötigen, so sind Sie berechtigt, gemäß...
Page 321 Période de Garantie Produit Limitée La Période de Garantie Produit Limitée court à compter de la date d’achat auprès de D-LINK. La date de votre reçu ou bon de livraison correspond à la date d’achat du produit et constitue la date de votre preuve d’achat.
Page 322 El período de la garantía limitada del producto se inicia en la fecha en que se realizó la compra a D-LINK.
Page 323 Il periodo di garanzia sopra specificato relativamente a tutti i prodotti D-LINK venduti nei Paesi europei da D-LINK o da qualsiasi suo rivenditore o distributore autorizzato decorre dal 1° gennaio 2004. Tutti i prodotti venduti nei Paesi europei da D-LINK o da uno qualsiasi dei suoi rivenditori o distributori autorizzati prima del 1° gennaio 2004 sono coperti da una garanzia di 5 anni fatto salvo per alimentatori, ventole e accessori che hanno 2 anni di garanzia.
Page 324: Technical Support
Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within Australia: D-Link Technical Support over the Telephone: 1300-766-868 Monday to Friday 8:00am to 8:00pm EST Saturday 9:00am to 1:00pm EST D-Link Technical Support over the Internet: http://www.dlink.com.au...
Page 325 You can find software updates and user documentation on the D-Link website. Tech Support for customers within South Eastern Asia and Korea: D-Link South Eastern Asia and Korea Technical Support over the Telephone: +65-6895-5355 Monday to Friday 9:00am to 12:30pm, 2:00pm-6:00pm...
Page 326 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within India D-Link Technical Support over the Telephone: +91-22-26526741 +91-22-26526696 –ext 161 to 167 Monday to Friday 9:30AM to 7:00PM D-Link Technical Support over the Internet: http://ww.dlink.co.in...
Page 327 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers for the duration of the warranty period on this product. Customers can contact D-Link technical support through our web site or by phone.
Page 328 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within the U.A.E & North Africa: D-Link Technical Support over the Telephone: (971) 4-391-6480 (U.A.E) Sunday to Wednesday 9:00am to 6:00pm GMT+4 Thursday 9:00am to 1:00pm GMT+4 D-Link Middle East &...
Page 329 You can find software updates and user documentation on the D-Link website. Tech Support for customers within South Africa and Sub Sahara Region: D-Link South Africa and Sub Sahara Technical Support over the Telephone: +27-12-665-2165 08600 DLINK ( For South Africa only )
Page 330 Technical Support You can find updates and user documentation on the D-Link website Tech Support for Latin America customers: D-Link Technical Support over the followings Telephones: Argentina: 0800-666 1442 Monday to Friday 09:00am to 22:00pm Chile: 800-214 422 Monday to Friday 08:00am to 21:00pm...
Page 331 Обновления программного обеспечения и документация доступны на Интернет-сайте D-Link. D-Link предоставляет бесплатную поддержку для клиентов в течение гарантийного срока. Клиенты могут обратиться в группу технической поддержки D-Link по телефону или через Интернет. Техническая поддержка D-Link: (095) 744-00-99 Техническая поддержка через Интернет http://www.dlink.ru...
Page 332 El servicio de soporte técnico tiene presencia en numerosos países de la Región Latino América, y presta asistencia gratuita a todos los clientes de D-Link, en forma telefónica e internet, a través de la casilla soporte@dlinkla.com Soporte Técnico Help Desk Argentina: Teléfono: 0800-6661442 Lunes a Viernes 09:00 am a 22:00 pm...
Page 333 Você pode encontrar atualizações de software e documentação de usuário no site da D-Link Brasil www.dlinkbrasil.com.br. A D-Link fornece suporte técnico gratuito para clientes no Brasil durante o período de vigência da garantia deste produto. Suporte Técnico para clientes no Brasil: Telefone São Paulo (11) 2185-9301...
Page 335 Technical Support You can find software updates and user documentation on the D- Link website. D-Link provides free technical support for customers within the United States and within Canada for the duration of the warranty period on this product. U.S. and Canadian customers can contact D-Link technical support through our website, or by phone.
Page 336 Technical Support You can find software updates and user documentation on the D-Link websites. D-Link provides free technical support for customers within Canada, the United Kingdom, and Ireland. Customers can contact D-Link technical support through our websites, or by phone.
Page 337 Technische Unterstützung Aktualisierte Versionen von Software und Benutzerhandbuch finden Sie auf der Website von D-Link. D-Link bietet kostenfreie technische Unterstützung für Kunden innerhalb Deutschlands, Österreichs, der Schweiz und Osteuropas. Unsere Kunden können technische Unterstützung über unsere Website, per E-Mail oder telefonisch anfordern.
Page 338: Assistance Technique
Assistance technique Vous trouverez la documentation et les logiciels les plus récents sur le site web D-Link. Le service technique de D-Link est gratuit pour les clients Etats-Unis durant la période de garantie. Ceux-ci peuvent contacter le service technique de D-Link par notre site internet ou par téléphone.
Page 339 D-Link . D-Link ofrece asistencia técnica gratuita para clientes dentro de España durante el periodo de garantía del producto. Los clientes españoles pueden ponerse en contacto con la asistencia técnica de D-Link a través de nuestro sitio web o por teléfono. Asistencia Técnica de D-Link por teléfono:...
Page 340 Supporto tecnico Gli ultimi aggiornamenti e la documentazione sono disponibili sul sito D-Link. Supporto tecnico per i clienti residenti in Italia D-Link Mediterraneo S.r.L. Via N. Bonnet 6/B 20154 Milano Supporto Tecnico dal lunedì al venerdì dalle ore 9.00 alle ore 19.00 con orario continuato...
Page 341 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers within Benelux for the duration of the warranty period on this product. Benelux customers can contact D-Link technical support through our website, or by phone.
Page 342 Pomoc techniczna Najnowsze wersje oprogramowania i dokumentacji użytkownika można znaleźć w serwisie internetowym firmy D-Link. D-Link zapewnia bezpłatną pomoc techniczną klientom w Polsce w okresie gwarancyjnym produktu. Klienci z Polski mogą się kontaktować z działem pomocy technicznej firmy D-Link za pośrednictwem Internetu lub telefonicznie.
Page 343 Technická podpora Aktualizované verze software a uživatelských příruček najdete na webové stránce firmy D-Link. D-Link poskytuje svým zákazníkům bezplatnou technickou podporu Zákazníci mohou kontaktovat oddělení technické podpory přes webové stránky, mailem nebo telefonicky Web: http://www.dlink.de E-Mail: support@dlink.de Telefon: +49 (1805)-2787 Telefonická...
Page 344 Technikai Támogatás Meghajtó programokat és frissítéseket a D-Link Magyarország weblapjáról tölthet le. Telefonon technikai segítséget munkanapokon hétfőtől- csütörtökig 9.00 – 16.00 óráig és pénteken 9.00 – 14.00 óráig kérhet a (1) 461-3001 telefonszámon vagy a support@dlink.hu emailcímen. Magyarországi technikai támogatás : D-Link Magyarország...
Page 345 Teknisk Support Du kan finne programvare oppdateringer og bruker dokumentasjon på D-Links web sider. D-Link tilbyr sine kunder gratis teknisk support under produktets garantitid. Kunder kan kontakte D-Links teknisk support via våre hjemmesider, eller på tlf. Teknisk Support: D-Link Teknisk telefon Support:...
Page 346 Teknisk Support Du finder software opdateringer og bruger- dokumentation på D-Link’s hjemmeside. D-Link tilbyder gratis teknisk support til kunder i Danmark i hele produktets garantiperiode. Danske kunder kan kontakte D-Link’s tekniske support via vores hjemmeside eller telefonisk. D-Link teknisk support over telefonen: Tlf.
Page 347 Teknistä tukea asiakkaille Suomessa: D-Link tarjoaa teknistä tukea asiakkailleen. Tuotteen takuun voimassaoloajan. Tekninen tuki palvelee seuraavasti: Arkisin klo. 9 - 21 numerosta 0800-114 677 Internetin kautta Ajurit ja lisätietoja tuotteista. http://www.dlink.fi Sähköpostin kautta voit myös tehdä kyselyitä. support@dlink.fi...
Page 348 Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformation. D-Link tillhandahåller teknisk support till kunder i Sverige under hela garantitiden för denna produkt. Teknisk Support för kunder i Sverige: D-Link Teknisk Support via telefon: 0770-33 00 35 Vardagar 08.00-20.00...
Page 350: International Offices
URL: www..d-link.co.za URL: www.dlink-france.fr URL: www.dlink.com.au Russia Netherlands India Grafsky per., 14, floor 6 Weena 290 D-Link House, Kurla Bandra Complex Road, Moscow 3012 NJ Rotterdam Off CST Road, Santacruz (East), Mumbai - 129626 Russia Netherlands 400098. TEL: 7-095-744-0099 Tel: +31-10-282-1445...
Page 351: Registration Card
8. What category best describes your company? Aerospace Engineering Education Finance Hospital Legal Insurance/Real Estate Manufacturing Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product? __________________________________________________________________________________________ __________________________________________________________________________________________...
Page 352 DES-6500 Stackable Gigabit Layer 3 Switch User Guide...

D-Link DES-6500 Manual

Preface

Introduction

Installation

Connecting the Switch

Introduction to Switch Management

Introduction to Web-Based Switch Configuration

Configuring the Switch

Security Management

SNMP Manager

Monitoring

Switch Maintenance

D-Link Single IP Management

Appendix A

Appendix B

Quick Links

Related Manuals for D-Link DES-6500

Summary of Contents for D-Link DES-6500