Page 2 Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
Page 3: Table Of Contents
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Table of Contents Intended Readers ................................1 Typographical Conventions............................. 1 Notes, Notices and Cautions ............................1 Chapter 1 - Web-based Switch Configuration ....................... 2 Introduction..................................2 Login to the Web Manager ..............................
Page 4 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide SNMP Traps Settings ..............................56 SNMP Linkchange Traps Settings ..........................57 SNMP View Table Settings ............................57 SNMP Community Table Settings ..........................58 SNMP Group Table Settings ............................. 59 SNMP Engine ID Settings ............................
Page 5 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide IP Forwarding Table ..............................155 Chapter 6 - QoS ..............................156 802.1p Settings ................................158 802.1p Default Priority Settings ..........................158 802.1p User Priority Settings ........................... 158 802.1p Map Settings ..............................
Page 6 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Web-based Access Control (WAC) ..........................240 WAC Global Settings ............................... 242 WAC User Settings ..............................243 WAC Port Settings ..............................244 WAC Authentication State ............................244 Japanese Web-based Access Control (JWAC) ......................
Page 7 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide CFM MP Table ................................ 310 Ethernet OAM ................................311 Ethernet OAM Settings ............................311 Ethernet OAM Configuration Settings ........................312 Ethernet OAM Event Log ............................314 Ethernet OAM Statistics ............................
Page 8: Intended Readers
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Intended Readers Typographical Conventions Notes, Notices and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DES-3528/DES-3552 Series Web UI Reference Guide contains information for setup and management of the Switch.
Page 9: Chapter 1 - Web-Based Switch Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 1 - Web-based Switch Configuration Introduction Login to the Web Manager Web-based User Interface Web Pages Introduction All software functions of the Switch can be managed, configured and monitored via the embedded web-based (HTML) interface.
Page 10: Web-Based User Interface
Area Number Function Select the menu or window to display. Open folders and click the hyperlinked menu buttons and subfolders contained within them to display menus. Click the D-Link logo to go to the D-Link AREA 1 Website. Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports, console and management port, showing port activity.
Page 11: Web Pages
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a Web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the Web interface: Folder Description...
Page 12: Chapter 2 - System Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 2 - System Configuration Device Information System Information Settings Dual Configuration Settings Firmware Information Settings Port Configuration Serial Port Settings System Log configuration Time Range Settings Time Settings User Accounts Settings Stacking...
Page 13: System Information Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide System Information Settings The user can enter a System Name, System Location, and System Contact to aid in defining the Switch. This window also displays the MAC Address, Firmware Version and Hardware Version. To view the following window, click System Configuration >...
Page 14: Firmware Information Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide This window holds the following information: Parameter Description State the ID number of the configuration file located in the Switch’s memory. The Switch can store two configuration files for use. ID 1 will be the default boot up configuration file for the Switch unless otherwise configured by the user.
Page 15: Port Configuration
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide States the IP address of the origin of the firmware. There are five ways firmware may From be downloaded to the Switch. • R – If the IP address has this letter attached, it denotes a firmware upgrade through the serial port RS232.
Page 16: Ddm Temperature Threshold Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-3 DDM Settings window The fields that can be configured are described below: Parameter Description Specify whether to send the trap, when the operating parameter exceeds the alarm or Trap State warning threshold.
Page 17: Ddm Voltage Threshold Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click System Configuration > Port Configuration > DDM > DDM Temperature Threshold Settings, as show below: Figure 2-4 DDM Temperature Threshold Settings window The fields that can be configured are described below: Parameter Description...
Page 18: Ddm Bias Current Threshold Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click System Configuration > Port Configuration > DDM > DDM Voltage Threshold Settings, as show below: Figure 2-5 DDM Voltage Threshold Settings window The fields that can be configured are described below: Parameter Description...
Page 19: Ddm Tx Power Threshold Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-6 DDM Bias Current Threshold Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 20: Ddm Rx Power Threshold Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-7 DDM TX Power Threshold Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 21 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-8 DDM RX Power Threshold Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select a range of ports to be configured. From Port / To Port This is the highest threshold for the alarm.
Page 22: Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-9 DDM Status Table window Port Settings This page used to configure the details of the switch ports. To view the following window, click System Configuration > Port Configuration > Port Settings, as shown below:...
Page 23 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-10 Port Settings window To configure switch ports: 1. Choose the port or sequential range of ports using the From Port and To Port pull-down menus. 2.
Page 24: Port Description Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The 1000M Full_Master and 1000M Full_Slave parameters refer to connections running a 1000BASE-T cable for connection between the Switch port and other device capable of a gigabit connection. The master setting (1000M Full_Master) will allow the port to advertise capabilities related to duplex, speed and physical layer type.
Page 25: Port Error Disabled
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-11 Port Description Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select the appropriate port range used for the configuration here. From Port / To Port Specify the medium type for the selected ports.
Page 26: Jumbo Frame Settings
Powered Devices (PDs) over Category 5 or Category 3 UTP Ethernet cables. The DES-3528P/DES- 3552P follows the standard PSE (Power Sourcing Equipment) pinout Alternative A, whereby power is sent out over pins 1, 2, 3 and 6. The DES-3528P/3552P works with all D-Link 802.3af capable devices. The DES-3528P/DES-3552P includes the following PoE features: •...
Page 27: Poe System Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide • The Auto-disable feature occurs under two conditions: firstly, if the total power consumption exceeds the system power limit; and secondly, if the per port power consumption exceeds the per port power limit. •...
Page 28: Poe Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-14 PoE System Settings window The following parameters can be configured: Parameter Description Select the unit to configure. Tick the All check box to select all units. Unit (1, 3-5) Sets the limit of power to be used from the Switch’s power source to PoE ports.
Page 29 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-15 PoE Port Settings window The following parameters can be configured: Parameter Description Select the unit to configure. Unit Select a range of ports from the pull-down menus to be enabled or disabled for PoE. From Port / To Port Use the pull-down menu to enable or disable ports for PoE.
Page 30: Serial Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Class 1 : 4000mW Class 2 : 7000mW Class 3 : 15400mW User define: 30000mW (15400~30000 only applies to ports 1 - 8) As well as these four pre-defined settings, users can directly specify any value ranging from 1000mW to 30000mW on DES-3528P/DES-3552P ports 1 to 8 and 1000mW - 15400mW on DES-3528P ports 9 to 24/DES-3552P ports 9 to 48.
Page 31: System Log Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click System Configuration > System Log Configuration > System Log Settings, as shown below: Figure 2-17 System Log Settings window The fields that can be configured are described below: Parameter Description Use the radio buttons to enable or disable the system log settings.
Page 32: System Log
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Use the drop-down menu to select the higher level of messages that will be sent. All Severity messages which level is higher than selecting level will be sent. The options are Emergency, Alert, Critical, Error, Warning, Notice, Informational and Debug.
Page 33: System Log & Trap Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Display the time in days, hours, minutes, and seconds since the Switch was last restarted. Time Display the level of the log entry. Level Display text describing the event that triggered the history log entry. Log Text Click the Find button to display the log in the display section according to the selection made.
Page 34: Time Range Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-21 System Severity Settings window The fields that can be configured are described below: Parameter Description Choose how the alerts are used from the drop-down menu. Select Log to send the alert of the System Severity Severity Type configured to the Switch’s log for analysis.
Page 35: Time Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide following parameters: Start Time - Use this parameter to identify the starting time of the time range, in hours, minutes and seconds, based on the 24-hour time system. End Time - Use this parameter to identify the ending time of the time range, in hours, minutes and seconds, based on the 24-hour time system.
Page 36 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-24 User Accounts Settings window To add a new user, type in a User Name and New Password and retype the same password in the Confirm New Password field.
Page 37: Command Logging Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Command Logging Settings To view the following window, click System Configuration > Command Logging Settings, as shown below: Figure 2-25 Command Logging Settings window The fields that can be configured are described below: Parameter Description Select this option to enable or disable the command logging feature.
Page 38 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 2-26 Switches stacked in a Duplex Chain Figure 2-27 Switches stacked in a Duplex Ring Within each of these topologies, each switch plays a role in the Switch stack. These roles can be set by the user per individual Switch, or if desired, can be automatically determined by the Switch stack.
Page 39 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Backup Master – The Backup Master is the backup to the Primary Master, and will take over the functions of the Primary Master if the Primary Master fails or is removed from the Stack. It also monitors the status of neighboring switches in the stack, will perform commands assigned to it by the Primary Master and will monitor the running status of the Primary Master.
Page 40: Stacking Device Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide NOTE: If there is a Box ID conflict when the stack is in the discovery phase, the device will enter a special standalone topology mode. Users can only get device information, configure Box IDs, save and reboot.
Page 41 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide...
Page 42: Chapter 3 - Management
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 3 - Management Gratuitous ARP IPv6 Neighbor Settings IP Interface Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings Static ARP Settings The Address Resolution Protocol is a TCP/IP protocol that converts IP addresses into physical addresses.
Page 43: Proxy Arp Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Proxy ARP Settings The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP responder. Therefore, the Switch can then route packets to the intended destination without configuring static routing or a default gateway.
Page 44: Gratuitous Arp
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. Gratuitous ARP Gratuitous ARP Global Settings An ARP announcement (also known as Gratuitous ARP) is a packet (usually an ARP Request) containing a valid SHA and SPA for the host which sent it, with TPA equal to SPA.
Page 45: Gratuitous Arp Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Gratuitous ARP Settings The user can configure the IP interface’s gratuitous ARP parameter. To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Settings, as shown below: Figure 3-5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter...
Page 46: Ip Interface
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-6 IPv6 Neighbor Settings window The fields that can be configured are described below: Parameter Description Enter the interface name of the IPv6 neighbor. Interface Name Enter the neighbor IPv6 address.
Page 47 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-7 System IP Address Settings window The fields that can be configured are described below: Parameter Description Allow to assign the entry of an IP address, subnet mask, and a default gateway for the Static Switch manually.
Page 48: Interface Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Interface Settings Users can display the Switch’s current IP interface settings. To view the following window, click Management > IP Interface > Interface Settings, as shown below: Figure 3-8 Interface Settings window The fields that can be configured are described below: Parameter...
Page 49 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Use the drop-down menu to enable or disable the Interface Admin State. Interface Admin State Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. Click the IPv4 Edit button to see the following window.
Page 50: Management Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-11 IPv6 Interface Settings – IPv6 Edit window The fields that can be configured are described below: Parameter Description Display the IPv6 interface name. Interface Name Use the drop-down menu to enable or disable IPv6 State.
Page 51 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide This window is also used to enable the DHCP auto configuration feature on the Switch. When enabled, the Switch is instructed to receive a configuration file from a TFTP server, which will set the Switch to become a DHCP client automatically on boot-up.
Page 52: Session Table
Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the “Single IP Management” feature: 1.
Page 53 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide a. It has an IP Address. b. It is not a command switch or member switch of another Single IP group. c. It is connected to the member switches through its management VLAN. 2.
Page 54: Single Ip Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 2. The topology map now includes new features for connections that are a member of a port trunking group. It will display the speed and number of Ethernet connections creating this port trunk group, as shown in the adjacent picture.
Page 55: Topology
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide After enabling the Switch to be a Commander Switch (CS), the Single IP Management folder will then contain four added links to aid the user in configuring SIM through the web, including Topology, Firmware Upgrade, Configuration File Backup/Restore and Upload Log File.
Page 56 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-17 Topology view This window will display how the devices within the Single IP Management Group connect to other groups and devices. Possible icons on this window are as follows: Icon Description Icon...
Page 57 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Setting the mouse cursor over a line between two devices will display the connection speed between the two devices, as shown below. Figure 3-19 Port Speed Utilizing the Tool Tip Right-click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 58 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-21 Property window Parameter Description This field will display the Device Name of the switches in the SIM group configured by the Device Name user. If no Device Name is configured by the name, it will be given the name default and tagged with the last six digits of the MAC Address to identify it.
Page 59 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-23 Right-clicking a Member icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. •...
Page 60: Firmware Upgrade
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-27 Preference window Group • Add to group – Add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group.
Page 61: Configuration File Backup/Restore
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide under the Port heading. To update the firmware, enter the Server IP Address where the firmware resides and enter the Path/Filename of the firmware. Click Download to initiate the file transfer. To view the following window, click Management >...
Page 62: Snmp Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices.
Page 63: Snmp Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The Switch supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The administrator can specify the SNMP version used to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 64: Snmp Linkchange Traps Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enable this option to use the SNMP Link Change Traps feature. Linkchange Traps Enable this option to use the SNMP Cold Start Traps feature. Coldstart Traps Enable this option to use the SNMP Warm Start Traps feature.
Page 65: Snmp Community Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-36 SNMP View Table Settings window The fields that can be configured are described below: Parameter Description Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view View Name being created.
Page 66: Snmp Group Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-37 SNMP community Table Settings window The fields that can be configured are described below: Parameter Description Type an alphanumeric string of up to 32 characters that is used to identify members of an Community Name SNMP community.
Page 67: Snmp Engine Id Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-38 SNMP Group Table Settings window The fields that can be configured are described below: Parameter Description Type an alphanumeric string of up to 32 characters. This is used to identify the new Group Name SNMP group of SNMP users.
Page 68: Snmp User Table Settings
SNMP management private enterprise number as assigned by IANA (D-Link is 171). The fifth octet is 03 to indicate the rest is the MAC address of this device. The sixth to eleventh octets is the MAC address.
Page 69: Snmp Host Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide This name is used to specify the SNMP group created can request SNMP messages. Group Name V3 – Indicates that SNMP version 3 is in use. SNMP Version Use the drop-down menu to enable encryption for SNMP V3.
Page 70: Snmpv6 Host Table Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide level. Enter the community string or SNMP V3 user name as appropriate. Community String / SNMPv3 User Name Click the Apply button to accept the changes made. Click the Delete button to remove the specific entry.
Page 71: Telnet Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click Management > SNMP Settings > RMON Settings, as shown below: Figure 3-43 RMON Settings window The fields that can be configured are described below: Parameter Description Enable this option to use the RMON Rising Alarm Trap Feature.
Page 72 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3-45 Web Settings window The fields that can be configured are described below: Parameter Description Web-based management is Enabled by default. If you choose to disable this by clicking Web Status Disabled, you will lose the ability to configure the system through the Web interface as soon as these settings are applied.
Page 73: Chapter 4 - L2 Features
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 4 - L2 Features VLAN Q-in-Q Layer 2 Protocol Tunneling Settings Spanning Tree Link Aggregation L2 Multicast Control Multicast Filtering ERPS Settings LLDP VLAN Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously.
Page 74 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide A VLAN is a collection of end nodes grouped by logic instead of physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are physically on the network.
Page 75 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The main characteristics of IEEE 802.1Q are as follows: • Assigns packets to VLANs by filtering. • Assumes the presence of a single global spanning tree. •...
Page 76 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-3 Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact.
Page 77 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. Other 802.1Q compliant devices on the network to make packet-forwarding decisions can then use the VLAN information in the tag.
Page 78: 802.1Q Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide On port-based VLANs, NICs do not need to be able to identify 802.1Q tags in packet headers. NICs send and receive normal Ethernet packets. If the packet’s destination lies on the same segment, communications take place using normal Ethernet protocols.
Page 79 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-5 802.1Q VLAN Settings – Add/Edit VLAN Tab window The fields that can be configured are described below: Parameter Description Allow the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit VLAN tab.
Page 80 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-6 802.1Q VLAN Settings – Find VLAN Tab window Enter the VLAN ID number in the field offered and then click the Find button. You will be redirected to the VLAN List tab.
Page 81: 802.1V Protocol Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide notifying that they may join the existing VLAN. Allows an individual port list to be added or deleted as a member of the VLAN. Port List Specify the port as 802.1Q tagged.
Page 82: V Protocol Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter a value for the Group. The protocol value is used to identify a protocol of the frame Protocol Value (0- type specified. The form of the input is 0x0 to 0xffff. Depending on the frame type, the octet FFFF) string will have one of the following values: For Ethernet II, this is a 16-bit (2-octet) hex value.
Page 83: Asymmetric Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide forwarded to the CoS queue specified previously by the user. Click the corresponding box if you want to set the 802.1p default priority of a packet to the value entered in the Priority (0-7) field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 84: Gvrp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-11 GVRP Global Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the GVRP State. GVRP State Enter the Join Time value in milliseconds.
Page 85: Mac-Based Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-12 GVRP Port Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select the starting and ending ports to use. From Port / To Port This field is used to manually assign a PVID to a VLAN.
Page 86: Pvid Auto Assign Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-13 MAC-based VLAN Settings The fields that can be configured are described below: Parameter Description Specify the MAC address to be used to create a MAC-based VLAN entry. MAC Address Select this option and enter the VLAN ID.
Page 87: Subnet Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Subnet VLAN The Switch uses IP subnet-based VLAN classification to group devices. Figure 3 - 1 Application of Subnet VLAN The above figure is an example of subnet-based VLAN. The IP address of customer A is 172.18.0.1 and IP address of customer B is 172.18.0.2.
Page 88: Vlan Precedence Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click L2 Features > VLAN > Subnet VLAN > Subnet VLAN Settings, as shown below: Figure 4-15 Subnet VLAN Settings window The following parameters can be configured: Parameter Description The VLAN Name to be associated with the subnet.
Page 89: Vlan Counter Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-16 VLAN Precedence Settings window The following parameters can be configured: Parameter Description Select a unit to be configured. Unit Specify the port or range of ports to configure. From Port / To Port Use the drop down menu to select the VLAN precedence, choose either MAC-based VLAN VLAN Precedence...
Page 90: Voice Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Click the radio button and enter a list of VLAN ID. VID List (e.g.: 1, 4- Click the radio button and enter a VLAN name. VLAN Name Enter a port or range of ports to configure.
Page 91: Voice Vlan Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description The state of the voice VLAN. Voice VLAN State The name of the voice VLAN. Voice VLAN Name The VLAN ID of the voice VLAN. Voice VID (1-4094) The priority of the voice VLAN, the range is 0 to 7.
Page 92: Voice Vlan Oui Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Voice VLAN OUI Settings This page is used to configure the user-defined voice traffic’s OUI. The OUI is used to identify the voice traffic. There are a number of pre-defined OUIs. The user can further define the user-defined OUIs if needed. The user- defined OUI cannot be the same as the pre-defined OUI.
Page 93: Vlan Trunk Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Select the unit to be displayed. Unit VLAN Trunk Settings Enable VLAN on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 94: Browse Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Select All button to tick all ports. Click the Clear All button to deselect all ports. Browse VLAN Users can display the VLAN status for each of the Switch's ports viewed by VLAN. Enter a VID (VLAN ID) in the field at the top of the window and click the Find button.
Page 95: Q-In-Q
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-25 Show VLAN Ports window Click the View All button to display all the existing entries. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. Q-in-Q Q-in-Q Settings This function allows the user to enable or disable the Q-in-Q function.
Page 96 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-26 Q-in-Q Settings window The fields that can be configured are described below: Parameter Description Click the radio button to enable or disable the Q-in-Q Global Settings. QinQ State This is used to decide if the ingress packet is c-tagged.
Page 97: Vlan Translation Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Deselect the Disabled check box and enter an inner tag for the packet to use. Add Inner Tag (hex: 0x1-0xffff) Click the Apply button to accept the changes made for each individual section. VLAN Translation Settings VLAN translation translates the VLAN ID carried in the data packets it receives from private networks into those used in the Service Providers...
Page 98: Layer 2 Protocol Tunneling Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Layer 2 Protocol Tunneling Settings The layer 2 protocol tunneling is used to tunnel the layer 2 protocol packets. When the device is operating with the Q-in-Q enabled, DA will be replaced by the tunnel multicast address, and the BPDU will be tagged with the tunnel VLAN based on the QinQ VLAN configuration and the tunnel/uplink setting.
Page 99 DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 802.1D-2004 RSTP and 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1D-1998 STP, 802.1D-2004 RSTP, and 802.1Q-2005 MSTP.
Page 100 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide All three protocols calculate a stable topology in the same way. Every segment will have a single path to the root bridge. All bridges listen for BPDU packets. However, BPDU packets are sent more frequently - with every Hello packet.
Page 101 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The Loop-back timer plays a key role in the next step for the Switch to take to resolve this problem. Choosing a non-zero value on the timer will enable the Auto-Recovery Mechanism. When the timer expires, the Switch will again look for its returning BPDU packet on the same port.
Page 102: Stp Bridge Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide STP Bridge Global Settings On this page the user can configure the STP bridge global parameters. To view the following window, click L2 Features > Spanning Tree > STP Bridge Global Settings, as shown below: Figure 4-28 STP Bridge Global Settings window The fields that can be configured are described below:...
Page 103: Stp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Used to set the maximum number of Hello packets transmitted per interval. The count TX Hold Count (1-10) can be specified from 1 to 10. The default is 6. Used to set the number of hops between devices in a spanning tree region before the Max Hops (6-40) BPDU (bridge protocol data unit) packet sent by the Switch will be discarded.
Page 104: Mst Configuration Identification
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Select the unit to configure. Unit Select the starting and ending ports to be configured. From Port / To Port This defines a metric that indicates the relative cost of forwarding packets to the External Cost (0=Auto) specified port list.
Page 105: Stp Instance Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-30 MST Configuration Identification window The fields that can be configured are described below: Parameter Description This name uniquely identifies the MSTI (Multiple Spanning Tree Instance). If a Configuration Name Configuration Name is not set, this field will show the MAC address to the device running MSTP.
Page 106: Mstp Port Information
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-31STP Instance Settings window The fields that can be configured are described below: Parameter Description Enter the MSTI ID in this field. An entry of 0 denotes the CIST (default MSTI). MSTI ID Enter the priority in this field.
Page 107 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Select the unit to configure. Unit Select the port to configure. Port The MSTI ID of the instance to be configured. Enter a value between 0 and 15. An entry Instance ID of 0 in this field denotes the CIST (default MSTI).
Page 108: Link Aggregation
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The Switch supports up to eight port trunk groups with two to eight ports in each group. A potential bit rate of 8000 Mbps can be achieved.
Page 109: Port Trunking Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Load balancing is automatically applied to the ports in the aggregated group, and a link failure within the group causes the network traffic to be directed to the remaining links in the group. The Spanning Tree Protocol will treat a link aggregation group as a single link, on the switch level.
Page 110: Lacp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Clear All button to clear out all the information entered. Click the Add button to add a new entry based on the information entered. NOTE: The maximum number of ports that can be configured in one Static Trunk or LACP Group are 8 ports.
Page 111: Fdb
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Static FDB Settings Unicast Static FDB Settings Users can set up static unicast forwarding on the Switch. To view the following window, click L2 Features > FDB > Static FDB Settings > Unicast Static FDB Settings, as shown below: Figure 4-36 Unicast Static FDB Settings window The fields that can be configured are described below:...
Page 112: Mac Notification Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-37 Multicast Static FDB Settings window The fields that can be configured are described below: Parameter Description The VLAN ID of the VLAN the corresponding MAC address belongs to. The static destination MAC address of the multicast packets.
Page 113: Mac Address Aging Time Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-38 MAC Notification Settings window The fields that can be configured are described below: Parameter Description Enable or disable MAC notification globally on the Switch State The time in seconds between notifications.
Page 114: Mac Address Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide the MAC address’ age-out time in seconds. The MAC Address Aging Time can be set to any value between 10 and 1000000 seconds. The default setting is 300 seconds.
Page 115: Arp & Fdb Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. ARP & FDB Table On this page the user can find the ARP and FDB table parameters. To view the following window, click L2 Features >...
Page 116 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > IGMP Snooping > IGMP Snooping Settings, as shown below: Figure 4-42 IGMP Snooping Settings window The fields that can be configured are described below: Parameter Description...
Page 117 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Displays the querier IP address Querier IP Displays the querier expiry time. Querier Expiry Time Specify the amount of time in seconds between general query transmissions. The Query Interval (1-65535) default setting is 125 seconds..
Page 118: Igmp Snooping Rate Limit Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-44 IGMP Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit This section is used to designate a range of ports as being connected to multicast- Static Router Port enabled routers.
Page 119: Igmp Snooping Static Group Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-45 IGMP Snooping Rate Limit Settings window The fields that can be configured are described below: Parameter Description Enter the port list used for this configuration. Port List Enter the VID list used for this configuration.
Page 120: Igmp Router Port
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the IPv4 address. IPv4 Address Click the Find button to locate a specific entry based on the information entered. Click the Create button to add a new entry based on the information entered. Click the Delete button to remove the specific entry based on the information entered.
Page 121: Igmp Snooping Group
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. NOTE: The abbreviations used on this page are Static Router Port (S), Dynamic Router Port (D) and Forbidden Router Port (F).
Page 122: Igmp Snooping Counter
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > IGMP Snooping > IGMP Snooping Forwarding Table, as shown below: Figure 4-50 IGMP Snooping Forwarding Table window The fields that can be configured are described below: Parameter Description...
Page 123: Cpu Filter L3 Control Packet Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. Click the Packet Statistics link to view the IGMP Snooping Counter Table.
Page 124: Mld Snooping
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 3 - 2 CPU Filter L3 Control Packet Settings window The following fields can be set: Parameter Description Select a unit to be configured. Unit Check the corresponding boxes for the port(s) to filter control packets.
Page 125: Mld Snooping Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide query, which advertises a specific multicast address that is also ready. These two types of messages are distinguished by a multicast destination address located in the IPv6 header and a multicast address in the Multicast Listener Query Message.
Page 126 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the MLD snooping state. MLD Snooping State Enter the maximum learning entry value.
Page 127 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide By default, the robustness variable is set to 2. You might want to increase this value if you expect a subnet to be loosely. The maximum amount of time between group-specific query messages, including Last Listener Query those sent in response to done-group messages.
Page 128: Mld Snooping Rate Limit Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide enabled routers. This will ensure that all packets with such a router as its destination will reach the multicast-enabled router regardless of the protocol. This section is used to designate a range of ports as being not connected to multicast- Forbidden Router Port enabled routers.
Page 129: Mld Router Port
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > MLD Snooping > MLD Snooping Static Group Settings, as shown below: Figure 4-58 MLD Snooping Static Group Settings window The fields that can be configured are described below: Parameter Description...
Page 130: Mld Snooping Group
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-60 MLD Router Port window Enter a VID (VLAN ID) in the field at the top of the window. Click the Find button to locate a specific entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.
Page 131: Mld Snooping Forwarding Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Clear All Data Driven button to delete all MLD snooping groups which is learned by the Data Driven feature of specified VLANs. MLD Snooping Forwarding Table This page displays the Switch’s current MLD snooping forwarding table.
Page 132 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-63 MLD Snooping Counter window The fields that can be configured are described below: Parameter Description Specify a VLAN name to be displayed. VLAN Name Specify a list of VLANs to be displayed.
Page 133: Multicast Vlan
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Refresh button to refresh the display table so that new information will appear. Click the <<Back button to return to the previous page. Multicast VLAN In a switching environment, multiple VLANs may exist.
Page 134: Igmp Snooping Multicast Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter a name for the IP Multicast Profile. Profile Name Click the Add button to add a new entry based on the information entered. Click the Find button to locate a specific entry based on the information entered. Click the Delete All button to remove all the entries listed.
Page 135 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the radio buttons to enable or disable the IGMP Multicast VLAN state. IGMP Multicast VLAN State Click the radio buttons to enable or disable the IGMP Multicast VLAN Forwarding IGMP Multicast VLAN state.
Page 136 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 0-7 – The remap priority value (0 to 7) to be associated with the data traffic to be Remap Priority forwarded on the multicast VLAN. None – If None is specified, the packet’s original priority is used. The default setting is None.
Page 137: Mld Multicast Group Profile Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide MLD Multicast Group Profile Settings Users can add, delete, or configure the MLD multicast group profile on this page. To view the following window, click L2 Features > L2 Multicast Control > Multicast VLAN > MLD Multicast Group Profile Settings, as shown below: Figure 4-70 MLD Multicast Group Profile Settings window The fields that can be configured are described below:...
Page 138 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > L2 Multicast Control > Multicast VLAN > MLD Snooping Multicast Group VLAN Settings, as shown below: Figure 4-72 MLD Snooping Multicast VLAN Settings window The fields that can be configured are described below: Parameter Description...
Page 139 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-73 MLD Snooping Multicast VLAN Settings – Edit window The fields that can be configured are described below: Parameter Description This option will display the VLAN name of the VLAN configured. VLAN Name Use the drop-down menu to enable or disable the state.
Page 140: Multicast Filtering
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. After clicking the Profile List link, the following page will appear:...
Page 141: Ipv4 Limited Multicast Range Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter a profile ID between 1 and 24. Profile ID Enter a name for the IP Multicast Profile. Profile Name Click the Add button to add a new entry based on the information entered.
Page 142: Ipv4 Max Multicast Group Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-77 IPv4 Limited Multicast Range Settings window The fields that can be configured are described below: Parameter Description Select the appropriate port(s) or VLAN IDs used for the configuration. Ports / VID List Assign access permissions to the ports selected.
Page 143: Multicast Filtering Mode
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Select the appropriate port(s) or VLAN IDs used for the configuration here. Ports / VID List If the check box Infinite is not ticked, the user can enter a Max Group value. Max Group (1-1024) Tick the check box to enable or disable the use of the Infinite value.
Page 144: Erps Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide ERPS Settings ERPS (Ethernet Ring Protection Switching) is the first industry standard (ITU-T G.8032) for Ethernet ring protection switching. It is achieved by integrating mature Ethernet operations, administration, and maintenance (OAM) * functions and a simple automatic protection switching (APS) protocol for Ethernet ring networks.
Page 145 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-81 ERPS Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the ERPS State. The default is Disabled. ERPS State Click the radio buttons to enable or disable the ERPS Log.
Page 146 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Tick the check box and use the drop-down menu to enable or disable the ring status. Ring Status Tick the check box to configure the information.
Page 147: Lldp
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the VLAN ID of a sub-ring connected to another ring. Sub-ring R-APS VLAN Tick the check box and select Add or Delete from the drop-down menu to add or State remove the sub-ring to this ring.
Page 148: Lldp Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide advertisements to LLDP neighbors by changing the multiplier used by an LLDP Multiplier (2-10) Switch. When the Time-to-Live for an advertisement expires the advertised data is then deleted from the neighbor Switch’s MIB.
Page 149: Lldp Management Address List
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide RX - the local LLDP agent can only receive LLDP frames. TX And RX - the local LLDP agent can both transmit and receive LLDP frames. Disabled - the local LLDP agent can neither transmit nor receive LLDP frames.
Page 150: Lldp Dot1 Tlvs Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-87 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description Select a unit to configure. Unit Select the port range to use for this configuration. From Port / To Port Use the drop-down menu to enable or disable the Port Description option.
Page 151: Lldp Dot3 Tlvs Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-88 LLDP Dot1 TLVs Settings window The fields that can be configured are described below: Parameter Description Select a unit to configure. Unit Use the drop-down menu to select the port range to use for this configuration. From Port / To Port Use the drop-down menu to enable or disable and configure the Dot1 TLV PVID Dot1 TLV PVID...
Page 152: Lldp Statistic System
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-89 LLDP Dot3 TLVs Settings window The fields that can be configured are described below: Parameter Description Select a unit to configure. Unit Use the drop-down menu to select the port range to use for this configuration. From Port / To Port This TLV optional data type indicates that the LLDP agent should transmit the MAC / PHY...
Page 153: Lldp Local Port Information
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-90 LLDP Statistics System window LLDP Local Port Information The LLDP Local Port Information page displays the information on a per port basis currently available for populating outbound LLDP advertisements in the local port brief table shown below.
Page 154: Lldp Remote Port Information
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-92 LLDP Local Port Information – Show Normal window Select a Port number and click the Find button to locate a specific entry. To view more details about, for example, the Management Address Count, click on the Show Detail hyperlink.
Page 155: Lldp-Med
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4-95 LLDP Remote Port Information – Show Normal window Click the <<Back button to return to the previous page. LLDP-MED LLDP-MED (Media-Endpoint-Discovery) extends the LLDP industry standard to support advanced features on the network edges with specialized capabilities and LLDP-MED standards-based functionality.
Page 156 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L2 Features > LLDP > LLDP-MED > LLDP-MED Port Settings, as shown below: Figure 4–97 LLDP-MED Port Settings Window The fields that can be configured are described below: Parameter Description Select a unit to configure.
Page 157 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 4–98 LLDP-MED Local Port Information Window Click the Find button to locate a specific entry based on the information entered. LLDP-MED Remote Port Information On this page the LLDP-MED Remote Port Information will be displayed. To view the following window, click L2 Features >...
Page 158: Chapter 5 - L3 Features
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 5 - L3 Features Local Route Settings IPv4 Static/Default Route Settings IPv4 Route Table IPv6 Static/Default Route Settings IPv6 Route Table Policy Route Settings IP Forwarding Table Local Route Settings This window is used to configure the IPv4 and IPv6 local route settings.
Page 159: Ipv4 Route Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L3 Features > IPv4 Static/Default Route Settings, as shown below: Figure 5-2 IPv4 Static/Default Route Settings window The fields that can be configured are described below: Parameter Description This field allows the entry of an IPv4 address to be assigned to the Static or Default route.
Page 160: Ipv6 Static/Default Route Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Click the radio buttons and enter the network address. Network Address Click the radio buttons and enter the IP address. IP Address Click the Find button to locate a specific entry based on the information entered. IPv6 Static/Default Route Settings A static entry of an IPv6 address can be entered into the Switch’s routing table for IPv6 formatted addresses.
Page 161: Policy Route Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view the following window, click L3 Features > IPv6 Route Table, as shown below: Figure 5-5 IPv6 Route Table window The fields that can be configured are described below: Parameter Description Enter the IPv6 network address.
Page 162: Ip Forwarding Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter an ACL profile ID. Profile ID (1-14) Enter an ACL access ID. Access ID (1-128) Enter an IP address routing next hop.
Page 163: Chapter 6 - Qos
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 6 - 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings SRED The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing.
Page 164 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide For example, let’s say a user wishes to have a video conference between two remotely set computers. The administrator can add priority tags to the video packets being sent out, utilizing the Access Profile commands. Then, on the receiving end, the administrator instructs the Switch to examine packets for this tag, acquires the tagged packets and maps them to a class queue on the Switch.
Page 165: 802.1P Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 802.1p Settings 802.1p Default Priority Settings The Switch allows the assignment of a default 802.1p priority to each port on the Switch. This page allows the user to assign a default 802.1p priority to any given port on the Switch that will insert the 802.1p priority tag to untagged packets received.
Page 166 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 6-3 802.1p User Priority Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select the starting and ending ports to use. From Port / To Port Use the drop-down menu to select a value from 0 to 7.
Page 167: 802.1P Map Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 802.1p Map Settings This window is used to enable 802.1p Map Settings. To view the following window, click QoS > 802.1p Settings > 802.1p Map Settings, as shown below: The fields that can be configured are described below: Parameter Description...
Page 168: Bandwidth Control
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. Bandwidth Control Settings The Effective RX/TX Rate refers to the actual bandwidth of the Switch port, if it does not match the configured rate.
Page 169: Queue Bandwidth Control Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide limit. This field allows the input of the data rate that will be the limit for the selected port. The Rate (64-1024000) user may choose a rate between 64 and 1024000 Kbits per second. If a RADIUS server has assigned the RX bandwidth, then it will be the effective RX Effective RX bandwidth.
Page 170: Traffic Control Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide NOTE: The minimum granularity of queue bandwidth control is 64Kbit/sec. The system will adjust the number to the multiple of 64 automatically. Traffic Control Settings On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure.
Page 171 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 6-6 Traffic Control Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to select the port range to use for this configuration. From Port / To Port Select the method of traffic control from the pull-down menu.
Page 172 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The Time Interval will set the time between Multicast and Broadcast packet counts Time Interval (5-600) sent from the Switch’s chip to the Traffic Control function. These packet counts are the determining factor in deciding when incoming packets exceed the Threshold value.
Page 173: Dscp
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide DSCP DSCP Trust Settings This page is to configure the DSCP trust state of ports. When ports are under the DSCP trust mode, the Switch will insert the priority tag to untagged packets by using the DSCP Map settings instead of the default port priority.
Page 174 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 6-8 DSCP Map Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to select a range of port to configure. From Port / To Port Use the drop-down menu to select one of three options: DSCP Map...
Page 175 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Select the unit to configure. Unit Use the drop-down menu to select a range of port to configure. From Port / To Port Use the drop-down menu to select one of two options: DSCP Map DSCP Priority –...
Page 176: Hol Blocking Prevention
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide HOL Blocking Prevention HOL (Head of Line) Blocking happens when one of the destination ports of a broadcast or multicast packet are busy. The Switch will hold this packet in the buffer while the other destination port will not transmit the packet even they are not busy.
Page 177: Qos Scheduling Mechanism
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The following parameters can be configured: Parameter Description Select the unit to configure. Unit Enter the port or port list to configure. From Port / To Port Select the Class ID, from 0 to 6 to configure for the QoS parameters.
Page 178 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide NOTE: The settings you assign to the queues, numbers 0-7, represent the IEEE 802.1p priority tag number. Do not confuse these settings with port numbers.
Page 179: Sred
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide SRED Random Early Detection (RED) is a congestion avoidance mechanism at the gateway in packet switched networks. RED gateways keep the average queue size low while allowing occasional bursts of packets in the queue. Simple random early detection (sRED) is a simplified RED mechanism based on ASIC capability.
Page 180 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 6-14 SRED Settings window The following parameters can be configured: Parameter Description Click the radio buttons to enable or disable sRED. SRED State Select the unit to configure. Unit Enter the port or port list to configure.
Page 181: Sred Drop Counter
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide SRED Drop Counter This window is used to display sRED drop counter. To view this window, click QoS > SRED > SRED Drop Counter, as shown below: Figure 6-15 SRED Drop Counter window The fields that can be configured are described below: Parameter...
Page 182: Chapter 7 - Acl
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 7 - ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter ACL Configuration Wizard The ACL Configuration Wizard will aid the user in the creation of access profiles and ACL Rules automatically by simply inputting the address or service type and the action needed.
Page 183: Access Profile List
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide MAC Address – Selecting this option will allow the user to enter a range of MAC addresses for this rule. IPv4 Address – Selecting this option will allow the user to enter a range of IPv4 addresses for this rule.
Page 184: Add An Ethernet Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-2 Access Profile List window Click the Add ACL Profile button to add an entry to the Access Profile List. Click the Delete All button to remove all access profiles from this table. Click the Show Details button to display the information of the specific profile ID entry.
Page 185 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-3 Add ACL Profile window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to 14. Profile ID Enter a profile name for the profile created.
Page 186 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-4 Access Profile Detail Information window (Ethernet ACL) Click the Show All Profiles button to navigate back to the Access Profile List window. After clicking the Add/View Rules button, the following window will appear: Figure 7-5 Access Rule List window (Ethernet ACL) Click the Add Rule button to create a new ACL rule in this profile.
Page 187 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-6 Add Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 128. Access ID (1-128) Tick the Auto Assign check box to instruct the Switch to automatically assign an Access ID for the rule being created.
Page 188: Adding An Ipv4 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual.
Page 189 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this profile set. This value can be set from 1 to Profile ID Enter a profile name for the profile created.
Page 190 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value. Select IGMP to instruct the Switch to examine the Internet Group Management Protocol (IGMP) field in each frame's header.
Page 191 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-10 Access Rule List window (IPv4 ACL) Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created.
Page 192 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Specify the VLAN name to apply to the access rule. VLAN Name Specify the VLAN ID to apply to the access rule. VLAN ID Select and enter the VLAN mask value used here. VLAN Mask Enter the DSCP value used here.
Page 193: Adding An Ipv6 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-12 Access Rule Detail Information (IPv4 ACL) Click the Show All Rules button to navigate back to the Access Rule List. Adding an IPv6 ACL Profile The window shown below is the Add ACL Profile window for IPv6.
Page 194 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter a profile name for the profile created. Profile Name Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or Select ACL Type packet content. This will change the window according to the requirements for the type of profile.
Page 195 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-15 Access Rule List window (IPv6 ACL) Click the Add Rule button to create a new ACL rule in this profile. Click the <<Back button to return to the previous page. Click the Show Details button to view more information about the specific rule created.
Page 196 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Specify the VLAN name to apply to the access rule. VLAN Name Specify the VLAN ID to apply to the access rule. VLAN ID Select this option to enable the TCP protocol. Enter the value of the IPv6 layer 4 TCP source port here.
Page 197: Adding A Packet Content Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-17 Access Rule Detail Information (IPv6 ACL) Click the Show All Rules button to navigate back to the Access Rule List. Adding a Packet Content ACL Profile The window shown below is the Add ACL Profile window for Packet Content: To use specific filtering masks in this ACL profile, click the packet filtering mask field to highlight it red.
Page 198 NOTE: Only one packet_content_mask profile can be created. With this advanced unique Packet Content Mask (also known as Packet Content Access Control List - ® D-Link xStack switch family can effectively mitigate some network attacks like the ACL), the common ARP Spoofing attack that is wide spread today. This is why the Packet Content ACL is able to inspect any specified content of a packet in different protocol layers.
Page 199 However, ARP is vulnerable as it can be easily spoofed and utilized to attack a LAN (i.e. an ARP spoofing attack). For a more detailed explanation on how ARP protocol works and how to employ D-Link’s unique Packet Content ACL to prevent ARP spoofing attack, please see Appendix E at the end of this manual.
Page 200 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-21 Add Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-128) 128.
Page 201 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Select this option to instruct the Switch to replace the DSCP value (in a packet that Replace DSCP (0-63) meets the selected criteria) with the value entered in the adjacent field. When an ACL rule is added to change both the priority and DSCP of an IPv4 packet, only one of them can be modified due to a chip limitation.
Page 202: Cpu Access Profile List
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide CPU Access Profile List Due to a chipset limitation and needed extra switch security, the Switch incorporates CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets destined for the Switch’s CPU interface.
Page 203: Adding A Cpu Ethernet Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide • one for Ethernet (or MAC address-based) profile configuration, • one for IPv6 address-based profile configuration, • one for IPv4 address-based profile configuration, and • one for packet content profile configuration. Adding a CPU Ethernet ACL Profile The window shown below is the Add CPU ACL Profile window for Ethernet.
Page 204 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Selecting this option instructs the Switch to examine the VLAN identifier of each packet 802.1Q VLAN header and use this as the full or partial criterion for forwarding. Selecting this option instructs the Switch to specify that the access profile will apply only 802.1p to packets with this 802.1p priority value.
Page 205 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-27 Add CPU Access Rule (Ethernet ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to Access ID (1-100) 100.
Page 206: Adding A Cpu Ipv4 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-28 CPU Access Rule Detail Information (Ethernet ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU IPv4 ACL Profile The window shown below is the Add CPU ACL Profile window for IP (IPv4).
Page 207 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide • Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header. • Select IPv4 ACL to instruct the Switch to examine the IP address in each frame's header.
Page 208 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Protocol ID Mask – Specify that the rule applies to the IP Protocol ID Traffic. User Define – Specify the L4 part mask. Click the Select button to select an CPU ACL type. Click the Create button to create a profile.
Page 209 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-32 Add CPU Access Rule (IPv4 ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 100. Access ID (1-100) Specify the VLAN name to apply to the access rule.
Page 210: Adding A Cpu Ipv6 Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide After clicking the Show Details button in the CPU Access Rule List, the following page will appear: Figure 7-33 CPU Access Rule Detail Information (IPv4 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List.
Page 211 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide packet content mask. This will change the window according to the requirements for the type of profile. • Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header.
Page 212 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide After clicking the Add Rule button, the following page will appear: Figure 7-37 Add CPU Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Enter a unique identifier number for this access.
Page 213: Adding A Cpu Packet Content Acl Profile
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-38 CPU Access Rule Detail Information (IPv6 ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List. Adding a CPU Packet Content ACL Profile The window shown below is the Add CPU ACL Profile window for Packet Content.
Page 214 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide header. Select IPv4 ACL to instruct the Switch to examine the IP address in each frame's header. Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's header. Select Packet Content ACL to specify a mask to hide the content of the packet header.
Page 215 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-42 Add CPU Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Type in a unique identifier number for this access. This value can be set from 1 to 100. Access ID (1-100) This field will instruct the Switch to mask the packet header beginning with the offset value Offset...
Page 216: Acl Finder
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide After clicking the Show Details button in the CPU Access Rule List, the following page will appear: Figure 7-43 CPU Access Rule Detail Information (Packet Content ACL) Click the Show All Rules button to navigate back to the CPU Access Rule List.
Page 217: Acl Flow Meter
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide ACL Flow Meter This page is used to configure the flow-based metering function. The metering function supports three modes: single rate two color, single rate three color, and two rate three color. The access rule must be created before the parameters of this function can be applied.
Page 218 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 7-46 ACL Flow meter Configuration window The fields that can be configured are described below: Parameter Description Enter the Profile ID for the flow meter. Profile ID (1-14) Enter the Profile Name for the flow meter.
Page 219 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide • EBS – Specify the Excess Burst Size. The unit is in kilobyte. Conform – This field denotes the green packet flow. Green packet flows may have their DSCP Action field rewritten to a value stated in this field.
Page 220: Chapter 8 - Security
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 8 - Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) MAC-based Access Control (MAC) Web-based Access Control (WAC) Japanese Web-based Access Control (JWAC) Compound Authentication Port Security ARP Spoofing Prevention Settings BPDU Attack Protection Loopback Detection Settings...
Page 221 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch).
Page 222 Figure 8-6 The 802.1X Authentication Process The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 223: 802.1X Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Host-based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device that required access to the LAN.
Page 224: 802.1X Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X authenticator port settings. To view this window, click Security > 802.1X > 802.1X Port Settings, as shown below: Figure 8-10 802.1X Port Settings The fields that can be configured are described below: Parameter...
Page 225: 802.1X User Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Determines whether regular re-authentication will take place on this port. The default ReAuthentication setting is Disabled. This allows the user to control the port authorization state. Port Control Select ForceAuthorized to disable 802.1X and cause the port to transition to the authorized state without any authentication exchange required.
Page 226: Guest Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-11 802.1X User Settings window The fields that can be configured are described below: Parameter Description Enter an 802.1X user’s username. 802.1X User Enter an 802.1X user’s password. Password Re-enter an 802.1X user’s password.
Page 227: Authenticator State
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide access. The adjacent figure should give the user a better understanding of the Guest VLAN process. Limitations Using the Guest VLAN 1. Ports supporting Guest VLANs cannot be GVRP enabled and vice versa. 2.
Page 228: Authenticator Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Select the unit to be displayed. Unit Select a port to be displayed. Port Click the Find button to locate a specific entry based on the information entered. Click the Refresh button to refresh the display table so that new entries will appear.
Page 229: Authenticator Session Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Select the port to be displayed. Port Click the Apply button to accept the changes made. NOTE: The Authenticator State cannot be viewed on the Switch unless 802.1X is enabled. To enable 802.1X, go to Security >...
Page 230: Authenticator Diagnostics
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Authenticator Diagnostics This table contains the diagnostic information regarding the operation of the Authenticator associated with each port. An entry appears in this table for each port that supports the Authenticator function. To view this window, click Security >...
Page 231: Reauthenticate Port(S)
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click Security > 802.1X > Initialize Port(s), as shown below. Figure 8-18 Initialize Port(s) window The fields that can be configured are described below: Parameter Description Select the unit to be displayed.
Page 232: Radius
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide RADIUS Authentication RADIUS Server Settings The RADIUS feature of the Switch allows the user to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. To view this window, click Security >...
Page 233: Radius Accounting Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide RADIUS Accounting Settings Users can configure the state of the specified RADIUS accounting service. To view this window, click Security > RADIUS > RADIUS Accounting Settings, as shown below: Figure 8-21 RADIUS Accounting Settings window The fields that can be configured are described below: Parameter...
Page 234 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-22 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be configured are described below: Parameter Description...
Page 235: Radius Account Client
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission. The number of authentication timeouts to this server. After a timeout the client may Timeouts retry to the same server, send to a different server, or give up.
Page 236: Ip-Mac-Port Binding (Impb)
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Request that matched it from this RADIUS accounting server. The number of RADIUS Accounting-Request packets sent. This does not include Requests retransmissions. The number of RADIUS Accounting-Request packets retransmitted to this RADIUS Retransmissions accounting server.
Page 237: Impb Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-24 IMPB Global Settings window The fields that can be configured are described below: Parameter Description This field will enable and disable the sending of trap/log messages for IP-MAC-port Trap / Log binding.
Page 238: Impb Entry Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Parameter Description Select a unit you want to configure. Unit Select a range of ports to set for IP-MAC-port binding. From Port / To Port Use the pull-down menu to enable or disable these ports for IP-MAC-port binding. IPv4 State / IPv6 State This mode provides a stricter method of control.
Page 239: Mac Block List
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-26 IMPB Entry Settings window The fields that can be configured are described below: Parameter Description Click the radio button to enter the IP address to bind to the MAC address set below. IPv4 Address Click the radio button to enter the IPv6 address to bind to the MAC address set below.
Page 240: Dhcp Snooping
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Delete All button to remove all the entries listed. DHCP Snooping DHCP Snooping Maximum Entry Settings Users can configure the maximum DHCP snooping entry for ports on this page. To view this window, click Security >...
Page 241: Nd Snooping
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-29 DHCP Snooping Entry window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the desired port. Port Specify the ports for which to view or clear DHCP snooping entries.
Page 242 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-30 ND Snooping Maximum Entry Settings window The fields that can be configured are described below: Parameter Description Select a unit to configure. Unit Use the drop-down menus to select a range of ports to use. From Port / To Port Enter the maximum entry value.
Page 243: Mac-Based Access Control (Mac)
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide MAC-based Access Control (MAC) MAC-based access control is a method to authenticate and authorize access using either a port or host. For port- based MAC, the method decides port access rights, while for host-based MAC, the method determines the MAC access rights.
Page 244 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-32 MAC-based Access Control Settings window The fields that can be configured are described below: Parameter Description Toggle to globally enable or disable the MAC-based access control function on the MAC-based Access Switch.
Page 245: Mac-Based Access Control Local Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The beginning port of a range of ports to be configured for MAC-based access control. From Port The ending port of a range of ports to be configured for MAC-based access control. To Port Use this drop-down menu to enable or disable MAC-based access control on the port or State...
Page 246: Mac-Based Access Control Authentication State
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-34 MAC-based Access Control Local Settings – Edit by Name window To change the selected MAC address’ VID value, the user can click the Edit by ID button. Figure 8-35 MAC-based Access Control Local Settings –...
Page 247: Web-Based Access Control (Wac)
WAC by attempting to gain Web access. D-Link’s implementation of WAC uses a virtual IP that is exclusively used by the WAC function and is not known by any other modules of the Switch. In fact, to avoid affecting a Switch’s other features, WAC will only use a virtual IP address to communicate with hosts.
Page 248 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2.
Page 249: Wac Global Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide WAC Global Settings Users can configure the Switch for the Web-based access control function. To view this window, click Security > Web-based Access Control (WAC) > WAC Global Settings, as shown below: Figure 8-37 WAC Global Settings window The fields that can be configured are described below:...
Page 250: Wac User Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide HTTPS – Specify that the TCP port will run the WAC HTTPS protocol. The default value is 443. HTTPS cannot run at TCP port 80. Click the Apply button to accept the changes made for each individual section. NOTE: A successful authentication should direct the client to the stated Web page.
Page 251: Wac Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide WAC Port Settings Users can view and set port configurations for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC Port Settings, as shown below: Figure 8-39 WAC Port Settings window The fields that can be configured are described below: Parameter...
Page 252: Japanese Web-Based Access Control (Jwac)
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click Security > Web-based Access Control (WAC) > WAC Authentication State, as shown below: Figure 8-40 WAC Authentication State window The fields that can be configured are described below: Parameter Description Use the drop-down menus to select the desired range of ports and tick the appropriate...
Page 253 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-41 JWAC Global Settings The fields that can be configured are described below: Parameter Description Use this drop-down menu to either enable or disable JWAC on the Switch. JWAC State Specify the JWAC Virtual IP address that is used to accept authentication requests from Virtual IP...
Page 254: Jwac Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide access will be denied. NOTE: When enabling redirect to the quarantine server, a quarantine server must be configured first. This parameter specifies the destination before an unauthenticated host is redirected to Redirect Destination either the Quarantine Server or the JWAC Login Page.
Page 255: Jwac User Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-42 JWAC Port Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menus to select a port or range of ports to configure. From Port / To Port Specify the state of the configured ports.
Page 256: Jwac Authentication State
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-43 JWAC User Settings window The fields that can be configured are described below: Parameter Description Enter a username of up to 15 alphanumeric characters. User Name Enter the password of the user.
Page 257: Jwac Customize Page Language
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Tick this check box to clear all authenticated users for a port. Authenticated Tick this check box to clear all authenticating users for a port. Authenticating Tick this check box to clear all blocked users for a port.
Page 258: Jwac Customize Page
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide JWAC Customize Page To view this window, click Security > JWAC > JWAC Customize page, as shown below: Figure 8-46 JWAC Customize Page window The fields that can be configured are described below: Parameter Description Click the link to toggle between English and Japanese.
Page 259: Compound Authentication
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Compound Authentication Compound Authentication settings allows for multiple authentication to be supported on the Switch. Compound Authentication Modern networks employ many authentication methods. The Compound Authentication methods supported by this Switch include 802.1X, MAC-based access control (MAC), Web-based Access Control (WAC), Japan Web-based Access Control (JWAC), and IP-MAC-Port Binding (IMPB).
Page 260: Compound Authentication Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide This mode adds an extra layer of security by checking the IP MAC-Binding Port Binding (IMPB) table before trying one of the supported authentication methods. The IMPB Table is used to create a ‘white-list’...
Page 261 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-47 Compound Authentication Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable of disable the Authorization Network State. Authorization Network State Click the radio buttons to configure the authentication server failover function.
Page 262: Compound Authentication Guest Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide authentication methods need to be passed. MAC+IMPB - MAC will be verified first, and then IMPB will be verified. Both authentication methods need to be passed. Toggle between Host-based and Port-based.
Page 263: Port Security
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Port Security Port Security Settings A given port’s (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table cannot be changed once the port lock is enabled. The port can be locked by changing the Admin State pull-down menu to Enabled and clicking Apply.
Page 264: Port Security Vlan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide or rebooted. Specify the maximum value of port security entries that can be learned on this port. Max Learning Address Click the Apply button to accept the changes made for each individual section. Click the Edit button to re-configure the specific entry.
Page 265: Port Security Entries
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Port Security Entries Users can remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view this window, click Security > Port Security > Port Security Entries, as shown below: Figure 8-52 Port Security Entries window The fields that can be configured are described below: Parameter...
Page 266: Bpdu Attack Protection
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-53 ARP Spoofing Prevention Settings window The fields that can be configured are described below: Parameter Description Enter the gateway IP address to help prevent ARP Spoofing. Gateway IP Address Enter the gateway MAC address to help prevent ARP Spoofing.
Page 267: Traffic Segmentation Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-54 BPDU Attack Protection window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the BPDU attack protection state. BPDU Attack Protection State Specify when a trap will be sent.
Page 268: Netbios Filtering Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-55 Traffic Segmentation Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select the ports to be included in the traffic segmentation setup. From Port / To Port Select the ports to be included in the traffic segmentation setup by simply ticking the Forward Port List...
Page 269: Dhcp Server Screening
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-56 NetBIOS Filtering Settings window The fields that can be configured are described below: Parameter Description Select to unit to be configured. Unit Tick the appropriate ports that will be included in the NetBIOS or Extensive NetBIOS Ports filtering configuration.
Page 270: Dhcp Offer Permit Entry Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click Security > DHCP Server Screening > DHCP Server Screening Port Settings, as shown below: Figure 8-57 DHCP Server Screening Port Settings window The fields that can be configured are described below: Parameter Description...
Page 271: Access Authentication Control
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description The IP address of the DHCP server to be permitted. Server IP Address The MAC address of the DHCP client. Client’s MAC Address The port numbers of the filter DHCP server.
Page 272: Enable Admin
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The administrator for the Switch may set up six different authentication techniques per user-defined method list (TACACS / XTACACS / TACACS+ / RADIUS / local / none) for authentication. These techniques will be listed in an order preferable, and defined by the user for normal user authentication on the Switch, and may contain up to eight authentication techniques.
Page 273: Application Authentication Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-60 Authentication Policy Settings window The fields that can be configured are described below: Parameter Description Use the pull-down menu to enable or disable the Authentication Policy on the Switch. Authentication Policy This field will set the time the Switch will wait for a response of authentication from the Response Timeout (0-...
Page 274: Authentication Server Group Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide section, for more information. Using the pull-down menu, configure an application to promote user level to admin-level Enable Method List users utilizing a previously configured method list. The user may use the default Method List or other Method List configured by the user.
Page 275: Authentication Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-63 Authentication Server Group Settings – Edit Server Group window To add an Authentication Server Host to the list, enter its name in the Group Name field, IP address in the IP Address field, use the drop-down menu to choose the Protocol associated with the IP address of the Authentication Server Host, and then click Add to add this Authentication Server Host to the group.
Page 276: Login Method Lists Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-64 Authentication Server Settings window The fields that can be configured are described below: Parameter Description The IP address of the remote server host to add. IP Address The protocol used by the server host.
Page 277: Enable Method Lists Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Successful login using any of these techniques will give the user a "User" privilege only. If the user wishes to upgrade his or her status to the administrator level, the user must use the Enable Admin window, in which the user must enter a previously configured password, set by the administrator.
Page 278 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The sequence of methods implemented in this command will affect the authentication result. For example, if a user enters a sequence of methods like TACACS - XTACACS - Local Enable, the Switch will send an authentication request to the first TACACS host in the server group.
Page 279: Local Enable Password Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Local Enable Password Settings Users can configure the locally enabled password for Enable Admin. When a user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch.
Page 280 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 3. Hash Algorithm: This part of the cipher suite allows the user to choose a message digest function which will determine a Message Authentication Code. This Message Authentication Code will be encrypted with a sent message to provide integrity and prevent against replay attacks.
Page 281 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Use the radio buttons to enable or disable the SSL status on the Switch. The default is SSL State Disabled.
Page 282: Ssh
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows a secure login to remote host computers, a safe method of executing commands on a remote end node, and will provide secure encrypted and authenticated communication between two non-trusted hosts.
Page 283: Ssh Authentication Method And Algorithm Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Allows the Administrator to set the maximum number of attempts that a user may try to Authfail Attempts (2- log on to the SSH Server utilizing the SSH authentication. After the maximum number of attempts has been exceeded, the Switch will be disconnected and the user must reconnect to the Switch to attempt another login.
Page 284 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured for the Encryption Algorithm are described below: Parameter Description Use the check box to enable or disable the Triple Data Encryption Standard encryption 3DES-CBC algorithm with Cipher Block Chaining.
Page 285: Ssh User Authentication List
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide SSH User Authentication List Users can configure parameters for users attempting to access the Switch through SSH. In the window above, the User Account “username” has been previously set using the User Accounts window in the Configuration folder. A User Account MUST be set in order to set the parameters for the SSH user.
Page 286: Safeguard Engine Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-72 Trusted Host window When the user clicks the Edit button, one will be able to edit the service allowed to the selected host. The fields that can be configured are described below: Parameter Description Enter an IPv4 address to add to the trusted host list.
Page 287 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide there are too many packets flooding the Switch. If the threshold has been crossed, the Switch will initially stop all ingress ARP and IP broadcast packets and packets from un-trusted IP addresses for five seconds. After another five-second checking interval arrives, the Switch will again check the ingress flow of packets.
Page 288 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 8-74 Safeguard Engine Settings window The fields that can be configured are described below: Parameter Description Use the radio button to globally enable or disable Safeguard Engine settings for the Safeguard Engine State Switch.
Page 289: Chapter 9 - Network Application
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 9 - Network Application DHCP PPPoE Circuit ID Insertion Settings SNTP DHCP DHCP Relay DHCP Relay Global Settings Users can enable and configure DHCP Relay Global Settings. The relay hops count limit allows the maximum number of hops (routers) that the DHCP messages can be relayed through to be set.
Page 290 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enabled –When this field is toggled to Enabled, the relay agent will insert and remove DHCP relay information (option 82 field) in messages between DHCP servers and clients.
Page 291: Dhcp Relay Interface Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide NOTE: For the circuit ID sub-option of a standalone switch, the module field is always zero. Circuit ID sub-option format: Figure 9-2 Circuit ID Sub-option Format Sub-option type Length Circuit ID type...
Page 292: Dhcp Relay Option 60 Server Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 9-4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description The IP interface on the Switch that will be connected directly to the server. Interface Name Enter the IP address of the DHCP server.
Page 293: Dhcp Relay Option 60 Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 9-6 DHCP Relay Option 60 Server Settings window The fields that can be configured are described below: Parameter Description Enter the DHCP Relay Option 60 Server Relay IP address. Server IP Address Use the drop-down menu to select the DHCP Relay Option 60 Server mode.
Page 294: Dhcp Relay Option 61 Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the DHCP Relay Option 60 Server IP address. Server IP Address Enter the DHCP Relay Option 60 Match Type value. Match Type Exact Match – The option 60 string in the packet must full match with the specified string. Partial Match –...
Page 295: Dhcp Server
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Delete button to remove the specific entry based on the information entered. Click the Delete All button to remove all the entries listed. DHCP Server For this release, the Switch now has the capability to act as a DHCP server to devices within its locally attached network.
Page 296: Dhcp Server Exclude Address Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide DHCP Server Exclude Address Settings The following window will allow the user to set an IP address, or a range of IP addresses that are NOT to be included in the range of IP addresses that the Switch will allot to clients requesting DHCP service.
Page 297 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Delete button to remove the specific entry. After clicking the Edit button, the following page will appear: Figure 9-12 DHCP Server Pool Settings - Edit window The fields that can be configured are described below: Parameter Description...
Page 298: Dhcp Server Manual Binding
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Using this field, the user can specify the lease time for the DHCP client. This time Pool Lease represents the amount of time that the allotted address is valid on the local network. Users may set the time by entering the days into the open field and then use the pull- down menus to precisely set the time by hours and minutes.
Page 299: Dhcpv6 Relay
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 9-14 DHCP Server Dynamic Binding window The fields that can be configured are described below: Parameter Description Enter the name of the DHCP pool. Pool Name Click the Clear button to remove the specific entry based on the information entered.
Page 300: Dhcpv6 Relay Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide hops DHCPv6 messages can be forwarded. The default hop count is 4. Count Limit (1-32) Click the Apply button to accept the changes made for each individual section. DHCPv6 Relay Settings This window is used to configure DHCPv6 relay settings.
Page 301: Dhcp Local Relay Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide DHCP Local Relay Settings The DHCP local relay settings allows the user to add option 82 into DHCP request packets when the DHCP client gets an IP address from the same VLAN. If the DHCP local relay settings are not configured, the Switch will flood the packets to the VLAN.
Page 302: Dns Relay Static Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide When a DNS server receives a query, it checks to see if the name is in its sub domain. If it is, the server translates the name and appends the answer to the query, and sends it back to the client. If the DNS server cannot translate the name, it determines what type of name resolution the client requested.
Page 303: Sntp
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 9-21 DNS Relay Static Settings window The fields that can be configured are described below: Parameter Description Enter a domain name. Domain Name Enter the IP address associated with the domain name. IP Address Click Apply to implement changes made.
Page 304 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Use this radio button to enable or disable SNTP. SNTP State Displays the current time. Current Time Displays the time source for the system. Time Source The IPv4 address of the primary server from which the SNTP information will be taken.
Page 305: Time Zone Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Time Zone Settings Users can configure time zones and Daylight Savings Time settings for SNTP. To view this window, click Network Application > SNTP > Time Zone Settings, as shown below: Figure 9-23 Time Zone Settings window The fields that can be configured are described below: Parameter...
Page 306: Udp
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the week of the month that DST will start. From: Which Week Of The Month Enter the day of the week that DST will start on. From: Day Of Week Enter the month DST will start on.
Page 307 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 9-24 UDP Helper Settings window The fields that can be configured are described below: Parameter Description Specifies to enable or disable the UDP Helper function on the Switch. UDP Helper State This option is used to add a UDP port for the UDP Helper function on the Switch.
Page 308 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Enter the IP interface name used here. This name can be up to 12 characters long. Interface Name Enter the UDP Helper Server IP address here.
Page 309: Chapter 10 - Oam
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 10 - OAM Ethernet OAM DULD Settings Cable Diagnostics Connectivity Fault Management (CFM) is defined by IEEE 802.1ag, which is a standard for detecting, isolating and reporting connectivity faults in a network.
Page 310 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide This setting controls the creation of MIPs. None – No MIPs will be created. This is the default value. Auto – MIPs are created when the next lower active MD-level on the port is reached or there are no lower active MD levels.
Page 311 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the MEP ID(s) contained in the maintenance association. The range of the MEP ID(s) MEPID is from 1 to 8191. Click the Add button to create a new entry based on the entered information. Click the <<Back button to go back to the CFM Settings window.
Page 312 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-5 CFM MEP Information window Click the Edit button to see the following window. Figure 10-6 CFM MEP Information - Edit window The fields that can be configured are described below: Parameter Description Use the drop-down menu to select the MEP administrative state to Disabled or...
Page 313 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the time period in centisecond to control the fault alarm to be sent if a defect is Alarm Time (250-1000) reported continuously. The default value is 250. Enter the time period in centisecond to reset the fault alarm if a defect hasn’t been Alarm Reset Time (250- reported since the last defect report.
Page 314: Cfm Port Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide CFM Port Settings This table is used to enable or disable the connectivity fault management function on a per port basis. CFM is disabled on all ports by default. To view this window, click OAM >...
Page 315: Cfm Linktrace Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-9 CFM Loopback Settings window The fields that can be configured are described below: Parameter Description The name of the Maintenance End Point. MEP Name (Max:32 characters) The ID for the Maintenance End Point between 1 and 8191.
Page 316: Cfm Packet Counter
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-10 CFM Linktrace Settings window The fields that can be configured are described below: Parameter Description The name of the Maintenance End Point. MEP Name The ID for the Maintenance End Point between 1 and 8191.
Page 317: Cfm Fault Table
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-11 CFM Packet Counter List window The fields that can be configured are described below: Parameter Description Specify which ports’ counter to show. Tick All Ports to view all ports. Port List This drop-down menu allows you to select among Transmit, Receive and CCM.
Page 318: Ethernet Oam
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click OAM > CFM > CFM MP Table, as shown below: Figure 10-13 CFM MP Table window The fields that can be configured are described below: Parameter Description Use the drop-down menu to specify the port number.
Page 319: Ethernet Oam Configuration Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-14 Ethernet OAM Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select a range of ports to be configured. From Port / To Port Specify to operate in either Active mode or Passive mode The default mode is Active.
Page 320 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-15 Ethernet OAM Configuration Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select a range of ports to be configured. From Port / To Port Configure the Ethernet OAM link event.
Page 321: Ethernet Oam Event Log
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Ethernet OAM Event Log The window is used to display the Ethernet OAM event log information. The Switch can record up to 1000 event logs. This event log has more detailed information than system log. Each OAM event is recorded in both OAM event log and system log.
Page 322: Duld Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-17 Ethernet OAM Statistics window The fields that can be configured are described below: Parameter Description Use the drop-down menu to specify the unit number. Unit Specify which ports’...
Page 323: Cable Diagnostics
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-18 DULD Settings window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Select a range of ports to be configured. From Port / To Port Use the drop-down menu to enable or disable the unidirectional link detection status Admin State...
Page 324 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 10-19 Cable Diagnostics window To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test The information will be displayed in this window.
Page 325: Chapter 11 - Monitoring
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 11 - Monitoring Utilization Statistics Mirror sFlow Ping Test Trace Route Peripheral Utilization CPU Utilization Users can display the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval.
Page 326: Dram & Flash Utilization
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide DRAM & Flash Utilization On this page the user can view information regarding the DRAM and Flash utilization. To view this window, click Monitoring > Utilization > DRAM & Flash Utilization, as shown below: Figure 11-2 DRAM &...
Page 327: Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-3 Port Utilization window The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 328 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view this window, click Monitoring >...
Page 329 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-5 Received (RX) Table window (for Bytes and Packets) The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to choose the port that will display statistics.
Page 330 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view this window, click Monitoring >...
Page 331 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-7 RX UMB_cast (RX) Table window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to choose the port that will display statistics.
Page 332 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click Monitoring > Statistics > Port Statistics > Packets > Transmitted (TX), as shown below: Figure 11-8 Transmitted (TX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph.
Page 333 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-9 Transmitted (TX) Table window (table for Bytes and Packets) The fields that can be configured are described below: Parameter Description Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 334 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Received (RX) To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the Web page by simply clicking on a port. To view this window, click Monitoring >...
Page 335 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-11 Received (RX) Table window (for errors) The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 336 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the Clear button to clear all statistics counters on this window. Click the View Table link to display the information in a table rather than a line graph. Click the View Graphic link to display the information in a line graph rather than a table.
Page 337 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-13 Transmitted (TX) Table window (for errors) The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 338: Packet Size
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Packet Size Users can display packets received by the Switch, arranged in six groups and classed by size, as either a line graph or a table. Two windows are offered. To select a port to view these statistics for, select the port by using the Port pull-down menu.
Page 339 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-15 RX Size Analysis window (table) The fields that can be configured are described below: Parameter Description Select the unit to configure. Unit Use the drop-down menu to choose the port that will display statistics. Port Select the desired setting between 1s and 60s, where "s"...
Page 340: Vlan Counter Statistics
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Click the View Graphic link to display the information in a line graph rather than a table. VLAN Counter Statistics To view this window, click Monitoring > Statistics > VLAN Counter Statistics, as shown below: The fields that can be configured are described below: Parameter Description...
Page 341: Rspan Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-16 Port Mirror Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the Port Mirroring feature. State Use the drop-down menu to select the Target Port used for Port Mirroring.
Page 342 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide To view this window, click Monitoring > Mirror > RSPAN Settings, as shown below: Figure 11-17 RSPAN Settings window The fields that can be configured are described below: Parameter Description Click the radio buttons to enable or disable the RSPAN feature.
Page 343: Sflow
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Add or Delete to add or delete redirect ports. Click the Apply button to accept the changes made. Click the <<Back button to discard the changes made and return to the previous page. sFlow sFlow (RFC3176) is a technology for monitoring traffic in data networks containing switches and routers.
Page 344: Sflow Flow Sampler Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-20 sFlow Analyzer Server Settings window The fields that can be configured are described below: Parameter Description The analyzer server ID specifies the ID of a server analyzer where the packet will be Analyzer Server ID (1- forwarded.
Page 345: Sflow Counter Poller Settings
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-21 sFlow Flow Sampler Settings window The fields that can be configured are described below: Parameter Description Select a unit to configure. Unit Use the drop-down menus to specify the list of ports to be configured. From Port / To Port The analyzer server ID specifies the ID of a server analyzer where the packet will be Analyzer Server ID (1-...
Page 346: Ping Test
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Use the drop-down menus to specify the list of ports to be configured. From Port / To Port The analyzer server ID specifies the ID of a server analyzer where the packet will be Analyzer Server ID (1- forwarded.
Page 347: Trace Route
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Enter the number of times desired to attempt to Ping either the IPv4 address or the IPv6 Repeat Pinging for address configured in this window. Users may enter a number of times between 1 and 255.
Page 348: Peripheral
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description The IP address of the destination station. IPv4 Address / IPv6 Address The time to live value of the trace route request. This is the maximum number of routers TTL (1-60) that a trace route packet can pass.
Page 349 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 11-27 Device Status window Click the Refresh button to refresh the display table.
Page 350: Chapter 12 - Save And Tools
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Chapter 12 - Save and Tools Save Configuration ID 1 Save Configuration ID 2 Save Log Save All Stacking Information Download Firmware Download Configuration File Upload Configuration File Upload Log File Reset Reboot System...
Page 351: Save Log
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Save Log Open the Save drop-down menu at the top of the Web manager and click Save Log to see the following window: Figure 12-3 Save Log window Save All Open the Save drop-down menu at the top of the Web manager and click Save All to see the following window: Figure 12-4 Save All window...
Page 352 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 12-5 Stacking Information window The Stacking Information window displays the following information: Parameter Description Show the current topology employed using this Switch. Topology Display the Box ID of the Switch currently in use. My Box ID Display the Unit ID number of the Primary Master of the Switch stack.
Page 353: Download Firmware
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Download Firmware This window allows the user to download firmware from a TFTP Server to the Switch and updates the switch. Open the Tools drop-down menu at the top of the Web manager and click Download Firmware to see the following window: Figure 12-6 Download Firmware –...
Page 354: Upload Configuration File
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Figure 12-7 Download Configuration – TFTP window The fields that can be configured are described below: Parameter Description Click the IPv4 or IPv6 radio button to enter the TFTP Server IP address. TFTP Server IP Enter the location and name of the file.
Page 355: Upload Log File
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Click the IPv4 or IPv6 radio button to enter the TFTP Server IP address. TFTP Server IP Enter the location and name of the file.
Page 356: Reboot System
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide NOTE: Only the Reset System option will enter the factory default parameters into the Switch's non- volatile RAM, and then restart the Switch. All other options enter the factory defaults into the current configuration, but do not save this configuration.
Page 357: Appendix A - Mitigating Arp Spoofing Attacks Using Packet Content Acl
IP address is known. However, this protocol is vulnerable because crackers can spoof the IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link’s switches to thwart ARP spoofing attacks.
Page 358 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Table 2 Ethernet Frame Format When the switch receives the frame, it will check the “Source Address” in the Ethernet frame’s header. If the address is not in its Forwarding Table, the switch will learn PC A’s MAC and the associated port into its Forwarding Table.
Page 359: How Arp Spoofing Attacks A Network
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Table 4 Ethernet Frame Format The switch will also examine the “Source Address” of the Ethernet frame and find that the address is not in the Forwarding Table.
Page 360: Prevent Arp Spoofing Via Packet Content Acl
Figure 5 all traffic will be then sniffed by the hacker but the users will not discover. Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL.
Page 361 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 2. The switch will deny all other ARP packets which claim they are from the gateway’s IP. The design of Packet Content ACL on the Switch enables users to inspect any offset chunk. An offset chunk is a 4- byte block in a HEX format, which is utilized to match the individual field in an Ethernet frame.
Page 362 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The first chunk starts from Chunk 3 mask for offset_chunk_1 3 0xFFFF offset_chunk_2 7 Ethernet Type. (Blue in Table 6, 13th and 14th 0xFFFF offset_chunk_3 8 0xFFFF0000 bytes) The second chunk starts from Chunk 7 mask for Sender IP in ARP packet.
Page 363: Appendix B - Password Recovery Procedure
This document will explain how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.
Page 364: Appendix C - System Log Entries
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Appendix C - System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description Log Information...
Page 365 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Port link up Port <unitID:portNum> link up, <link state> Informational Interface Port link down Port <unitID:portNum> link down Informational Successful login through [Unit <unitID>,] Successful login through Console Informational Console Console...
Page 366 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide changed [( [Instance:<InstanceID> ], port:<[unitID:] portNum>)] <old_status> -> <new_status> Spanning Tree port role Spanning Tree port status change Informational changed [( [Instance:<InstanceID> ], port:<[unitID:] portNum>)] <old_role> -> <new_role> Spannnig Tree instance Spanning Tree instance create (Instance:<InstanceID>) Informational...
Page 367 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Login failed through Login failed through Web(SSL) from <userIP> Warning Web(SSL) authenticated by authenticated by AAA local method (Username: AAA local method <username>) Successful login through Successful login through Telnet from <userIP>...
Page 368 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Successful login through Successful login through Telnet from <userIP> Informational Telnet authenticated by authenticated by AAA server <serverIP> (Username: AAA server <username>) Login failed through Telnet Login failed through Telnet from <userIP>...
Page 369 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Successful Enable Admin Successful Enable Admin through SSH from <userIP> Informational through SSH authenticated authenticated by AAA none method (Username: by AAA none method <username>) Successful Enable Admin Successful Enable Admin through Console authenticated Informational through Console...
Page 370 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide configuration. Login failed through Telnet Login failed through Telnet from <userIP> due to AAA Warning from user due to AAA server timeout or improper configuration (Username: server timeout or improper <username>) configuration.
Page 371 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Port enter IMPB block state Port <[unitID:]portNum> enter IMPB block state Informational Port recover from IMPB Informational block state Port <[unitID:]portNum> recover from IMPB block state LBD loop occurred Port <portNum>...
Page 372 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Hot remove Unit <unitID>, MAC:<macaddr> Hot removal Informational Firmware upgraded to Firmware upgraded to SLAVE by console successfully Informational SLAVE successfully (Username: <username>) Firmware upgraded to Firmware upgraded to SLAVE by console unsuccessfully! Warning SLAVE unsuccessfully...
Page 373: Appendix D - Trap Entries
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Appendix D - Trap Entries Trap Name/OID Variable Bind Format MIB Name Severity coldStart None RFC1907 Critical 1.3.6.1.6.3.1.1.5.1 (SNMPv2-MIB) warmStart None RFC1907 Critical 1.3.6.1.6.3.1.1.5.2 (SNMPv2-MIB) authenticationFailure None RFC1907 Informational...
Page 374 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide 1.3.6.1.4.1.171.12.19.4.1.0.2 swPktStormOccurred swPktStormCtrlPortIndex PktStormCtrl. Warning 1.3.6.1.4.1.171.12.25.5.0.1 swPktStormCleared swPktStormCtrlPortIndex PktStormCtrl. Warning 1.3.6.1.4.1.171.12.25.5.0.2 swPktStormDisablePort swPktStormCtrlPortIndex PktStormCtrl. Warning 1.3.6.1.4.1.171.12.25.5.0.3 swL2PortSecurityViolationTrap swPortSecPortIndex DES3528- L2MGMT- Warning 1.3.6.1.4.1.171.11.105.1.2.100.1.2.0.2 swL2PortSecurityViolationMac lldpRemTablesChange lldpStatsRemTablesInserts 1.0.8802.1.1.2.0.0.1 lldpStatsRemTablesDeletes LLDP-MIB Warning...
Page 375 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide swBpduProtectionRecoveryTrap wBpduProtectionPortIndex, Warning BPDUProtect swBpduProtectionRecoveryMethod ion-MIB 1.3.6.1.4.1.171.12.76.4.0.2...
Page 376: Appendix E - Radius Attributes Assignment
xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Appendix E - RADIUS Attributes Assignment The RADIUS Attributes Assignment on the Switch is used in the following modules: 802.1X (Port-based and Host- based), Japanese Web-based Access Control, Web-based Access Control, and MAC-based Access Control. The description that follows explains the following RADIUS Attributes Assignment types: •...
Page 377 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide The table below shows the parameters for a VLAN: RADIUS Tunnel Attribute Description Value Usage Tunnel-Type This attribute indicates the 13 (VLAN) Required tunneling protocol(s) to be used (in the case of a tunnel initiator) or the tunneling protocol in use (in the case of a tunnel...
Page 378 xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide Attribute-Specific Field Used to assign the ACL profile or ACL Command Required rule. For example: ACL profile: create access_profile profile_id 100 profile_name 100 ethernet vlan 0xFFF; ACL rule: config access_profile profile_id 100 add...

This manual is also suitable for:

Xstack des-3552 series

D-Link Xstack DES-3528 Series Reference Manual

Chapter 1 - Web-Based Switch Configuration

Chapter 2 - System Configuration

Chapter 3 - Management

Chapter 4 - L2 Features

Chapter 5 - L3 Features

Chapter 6 - Qos

Chapter 7 - ACL

Chapter 8 - Security

Chapter 9 - Network Application

Chapter 10 - OAM

Quick Links

Related Manuals for D-Link Xstack DES-3528 Series

Summary of Contents for D-Link Xstack DES-3528 Series