D-Link DGS-3120-24TC Product Manual
D-Link DGS-3120-24TC Manual
 |
View all D-Link DGS-3120-24TC manuals
Add to My Manuals
Save this manual to your list of manuals |
D-Link DGS-3120-24TC manual content summary:
- D-Link DGS-3120-24TC | Product Manual - Page 1
- D-Link DGS-3120-24TC | Product Manual - Page 2
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Information in this document is subject to change without notice. © 2010 D-Link Corporation. All rights reserved. Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly - D-Link DGS-3120-24TC | Product Manual - Page 3
® DGS-3120 Series Managed Switch Web UI Reference Guide Table of Contents Intended Readers...1 Typographical Conventions...1 Notes, Notices and Cautions...1 Chapter 1 Web-based Switch Configuration 2 Introduction ...2 Login to the Web Manager...2 Web-based User Interface ...2 Areas of the User - D-Link DGS-3120-24TC | Product Manual - Page 4
DGS-3120 Series Managed Switch Web UI Reference Guide Interface Settings...30 Management Settings ...33 Session Table...34 Single IP Management...35 Single IP Settings ...37 Topology ...37 Firmware User Table Settings...51 SNMP Host Table Settings...52 SNMPv6 Host Table Settings (EI 83 Link Aggregation - D-Link DGS-3120-24TC | Product Manual - Page 5
Settings (SI Mode Only)...132 IPv4 Static/Default Route Settings (EI Mode Only)...132 IPv4 Route Table ...133 IPv6 Static/Default Route Settings (EI Mode Only)...134 IP Forwarding Table ...134 Chapter 6 QoS...135 802.1p Settings ...136 802.1p Default Priority Settings ...136 802.1p User Priority - D-Link DGS-3120-24TC | Product Manual - Page 6
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Adding an IPv6 ACL Profile ...157 Adding a Packet Content ACL Profile ...161 CPU Access Profile List ...165 Adding a CPU Ethernet ACL Profile...166 Adding a CPU IPv4 ACL Profile ...169 Adding a CPU IPv6 ACL Profile ...173 Adding a CPU - D-Link DGS-3120-24TC | Product Manual - Page 7
DGS-3120 Series Managed Switch Web UI Reference Guide Settings 246 SSH User Authentication List Zone Settings ...261 Flash File System Settings...262 Chapter 10 OAM...265 Ethernet OAM...276 Ethernet OAM Settings...276 Ethernet OAM Configuration Settings ...277 Ethernet OAM Event Log...278 Ethernet - D-Link DGS-3120-24TC | Product Manual - Page 8
DGS-3120 Series Managed Switch Web UI Reference Guide Statistics ...284 Port Statistics...284 Packet Size...292 Mirror ...294 Port Mirror Settings...294 RSPAN Settings ...294 sFlow (EI TFTP ...310 Upload Log To HTTP...310 Reset ...311 Reboot System...311 Appendix Section...313 Appendix A Mitigating - D-Link DGS-3120-24TC | Product Manual - Page 9
Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DGS-3120 Series Web UI Reference Guide contains information for setup and management of the Switch. This manual indicate system messages problem. A CAUTION indicates a potential for property damage - D-Link DGS-3120-24TC | Product Manual - Page 10
should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch. NOTE: The factory default IP address is 10.90.90.90. This opens the management module's user authentication window, as seen below. Figure 1-1 Enter Network Password window Leave both the - D-Link DGS-3120-24TC | Product Manual - Page 11
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Areas of the User Interface The figure below shows the user interface. Three distinct areas divide the user interface, as described in the table. AREA 2 AREA 1 AREA 3 Area Number Area 1 Area 2 Area 3 Figure 1-2 Main Web-Manager page - D-Link DGS-3120-24TC | Product Manual - Page 12
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the - D-Link DGS-3120-24TC | Product Manual - Page 13
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 2 System Configuration Device Information System Information Settings Port Configuration PoE Serial Port Settings Warning Temperature Settings System Log configuration Time Range Settings Port Group Settings (EI Mode Only) Time - D-Link DGS-3120-24TC | Product Manual - Page 14
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-2 Device Information window (EI Mode Only) Click the Settings link to navigate to the appropriate feature page for configuration. System Information Settings The user can enter a System Name, System Location, and System Contact - D-Link DGS-3120-24TC | Product Manual - Page 15
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide System Contact Enter a contact name for the Switch, if so desired. Click the Apply button to implement changes made. Port Configuration Port Settings This page used to configure the details of the switch ports. To view the following - D-Link DGS-3120-24TC | Product Manual - Page 16
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The 1000M Full_Master and 1000M Full_Slave parameters refer to connections running a 1000BASE-T cable for connection between the Switch port and other device capable of a gigabit connection. The master setting (1000M Full_Master) will - D-Link DGS-3120-24TC | Product Manual - Page 17
DGS-3120 Series Managed Switch Web UI Reference Guide Copper or Fiber. Description Users may then enter a description Ethernet frames with more than 1,518 bytes of payload. The Switch supports jumbo frames with a maximum frame size of up to 13312 bytes. To view the following window, click System - D-Link DGS-3120-24TC | Product Manual - Page 18
function on the Switch. The default is Disabled. When disabled, the maximum frame size is 1536 bytes. When enabled, the maximum frame size is 13312 bytes. Click the Apply button to implement changes made. PoE The DGS-3120-24PC and DGS-3120-48PC switches support Power over Ethernet (PoE) as defined - D-Link DGS-3120-24TC | Product Manual - Page 19
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-8 PoE System Settings window The the Switch's power source to PoE ports. The user may configure a Power Limit between 37W and 740W for the DGS-3120-24PC and DGS-3120-48PC. The default setting is 740W. The PoE controller - D-Link DGS-3120-24TC | Product Manual - Page 20
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-9 PoE Port Settings window The following parameters can be set to deny low priority port, the priority of each port will be used by the system to manage the supply of power to ports. This function is used to configure the per- - D-Link DGS-3120-24TC | Product Manual - Page 21
DGS-3120 Series Managed Switch Web UI Reference Guide Class 0 - 16200mW Class 1 - 4200mW Class 2 - 7400mW Class 3 - 16200mW User Define - 35000mW Click Apply to implement changes made. The port status of all PoE Switch using the console port, the baud rate must be set to 115200, which is the default - D-Link DGS-3120-24TC | Product Manual - Page 22
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-11 Warning Temperature switch log to the flash memory. The user has three options: On Demand - Users who choose this method will only save log files when they manually tell the Switch to do so, either using the Save Log link - D-Link DGS-3120-24TC | Product Manual - Page 23
® DGS-3120 Series Managed Switch Web UI Reference Guide Time Interval - Users who choose this method can configure a time interval by which the Switch will save the log files, in the box adjacent to this configuration field. The user may set a time between 1 and 65535 minutes. Log Trigger - Users - D-Link DGS-3120-24TC | Product Manual - Page 24
DGS-3120 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Click the Delete All button to remove all servers configured. System Log Users can view and delete the local history log as compiled by the Switch name must be manually entered. Available - D-Link DGS-3120-24TC | Product Manual - Page 25
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-16 System Log & Trap Settings window (SI Mode Only) Figure 2-17 System Log & Trap Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name Enter the IP - D-Link DGS-3120-24TC | Product Manual - Page 26
DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description System Severity Choose how the alerts are used from the drop-down menu. Select Log to send the alert of the Severity Type configured to the Switch Settings (EI Mode - D-Link DGS-3120-24TC | Product Manual - Page 27
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-20 Port Group Settings window The to remove the specific entry. Time Settings Users can configure the time settings for the Switch. To view the following window, click System Configuration > Time Settings, as show below: - D-Link DGS-3120-24TC | Product Manual - Page 28
Configuration Admin Read/Write Network Monitoring Community Strings and Trap Stations Update Firmware and Configuration Files System Utilities Factory Reset User Account Management Add/Update/Delete User Accounts View User Accounts Read/Write Read/Write Read/Write Read/Write Read/Write Read - D-Link DGS-3120-24TC | Product Manual - Page 29
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Command Logging Settings This window is used to enable or disable the command logging settings. To view this window, click System Configuration > Command Logging Settings, as shown below: Figure 2-23 Command Logging Settings window The - D-Link DGS-3120-24TC | Product Manual - Page 30
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Within each of these topologies, each switch plays a role in the Switch stack. These roles can be set by the user per individual Switch, or if desired, can be automatically determined by the Switch stack. Three possible roles exist when - D-Link DGS-3120-24TC | Product Manual - Page 31
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide If the Backup Master has been hot removed, a new Backup Master will be chosen through the election process previously described. Switches in the stack will clear the configurations of the unit removed, and dynamically learned databases, - D-Link DGS-3120-24TC | Product Manual - Page 32
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Force Master user may choose any number between 1 and 6 to identify the switch in the switch stack. Auto will automatically assign a box number to the switch in the switch stack. Priority (1-63) Displays the priority ID of the Switch - D-Link DGS-3120-24TC | Product Manual - Page 33
DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 3 Management ARP Gratuitous ARP IPv6 Neighbor Settings (EI Mode Only) IP Interface Management Settings Session Table Single IP age-out time, in minutes. The default is 20 minutes. IP Address The IP address of the ARP entry. MAC Address - D-Link DGS-3120-24TC | Product Manual - Page 34
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Proxy ARP Settings (EI Mode Only) The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP - D-Link DGS-3120-24TC | Product Manual - Page 35
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Gratuitous ARP Gratuitous ARP Global Settings The user can enable or disable the gratuitous ARP global settings here. To view the following window, click Management > Gratuitous ARP > Gratuitous ARP Global Settings, as show - D-Link DGS-3120-24TC | Product Manual - Page 36
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter Description Trap Use the drop-down menu to enable or disable the trap option. By default the trap is disabled. Log Use the - D-Link DGS-3120-24TC | Product Manual - Page 37
entered in the fields. IP Interface System IP Address Settings The IP address may initially be set using the console interface prior to connecting to it through the Ethernet. The Web manager will display the Switch's current IP settings. NOTE: The Switch's factory default IP address is 10.90.90 - D-Link DGS-3120-24TC | Product Manual - Page 38
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide BOOTP server to provide it with this information before using the default or previously entered settings. The following table will describe the fields that are about the System Interface. Parameter Description Interface Name Display - D-Link DGS-3120-24TC | Product Manual - Page 39
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-9 Interface Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name Enter the name of the IP interface to search for. Click the Find button to locate a - D-Link DGS-3120-24TC | Product Manual - Page 40
DGS-3120 Series Managed Switch Web UI Reference Guide Click the IPv4 Edit button to see the following window. Figure 3-11 IPv4 Interface Settings - Edit window The fields that can be configured are described below: Parameter Description Get IP IPv6 Interface Settings window (EI Mode Only) The - D-Link DGS-3120-24TC | Product Manual - Page 41
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NS Retransmit Time Enter the Neighbor solicitation /or TFTP server software instructions. The user may also consult the Upload Log File window description located in the Tools section of this manual. If the Switch is unable to complete - D-Link DGS-3120-24TC | Product Manual - Page 42
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-14 Management Settings window The learn more about the D-Link Green Technologies, go to http://green.dlink.com/ for more details. Session Table Users can display the management sessions since the Switch was last rebooted. To - D-Link DGS-3120-24TC | Product Manual - Page 43
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-15 Session Table window Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet - D-Link DGS-3120-24TC | Product Manual - Page 44
the CS. o If report packets from the CS to the MS time out. • The user can manually configure a CaS to become a CS • The CaS can be configured through the CS to become a MS. After configuring one switch to operate as the CS of a SIM group, additional DGS-3120 Series switches may join the group by - D-Link DGS-3120-24TC | Product Manual - Page 45
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide c. Log - The Switch now supports uploading MS log files to a TFTP server. 4. The user may zoom in and zoom out when utilizing the topology window to get a better, more defined view of the configurations. Single IP Settings The Switch is - D-Link DGS-3120-24TC | Product Manual - Page 46
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-17 Single IP Management window - Tree View The Topology window holds the following information on the Data tab: Parameter Description Device Name This field will display the Device Name of the switches in the SIM group - D-Link DGS-3120-24TC | Product Manual - Page 47
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-18 Topology view This window will display how the devices within the Single IP Management Group connect to other groups and devices. Possible icons on this window are as follows: Icon Description Group Icon Description - D-Link DGS-3120-24TC | Product Manual - Page 48
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-19 Device Information Utilizing the Tool Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group - D-Link DGS-3120-24TC | Product Manual - Page 49
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide • Collapse - To collapse the group that will be represented by a single Device Name of the switches in the SIM group configured by the user. If no Device Name is configured by the name, it will be given the name default and tagged with - D-Link DGS-3120-24TC | Product Manual - Page 50
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Member Switch Icon Figure 3-24 Right-clicking a Member icon The following options may appear for the user to configure: • Collapse - To collapse the group that will be represented by a single icon. • Expand - To expand the SIM group, in - D-Link DGS-3120-24TC | Product Manual - Page 51
Group • xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Add to group - Add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group. Click OK to - D-Link DGS-3120-24TC | Product Manual - Page 52
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Configuration File Backup/Restore This screen is used to upgrade configuration files from the Commander Switch to the Member Switch using a TFTP server. Member Switches will be listed in the table and will be specified by ID, Port (port - D-Link DGS-3120-24TC | Product Manual - Page 53
DGS-3120 Series Managed Switch Web UI Reference Guide • private - Allows authorized management stations to retrieve and modify MIB objects. SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users The Switch supports the - D-Link DGS-3120-24TC | Product Manual - Page 54
DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description SNMP State Enable this option to use the SNMP feature. Click the Apply button to accept the changes made. SNMP Traps Settings Users the SNMP Link Change Traps - D-Link DGS-3120-24TC | Product Manual - Page 55
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-35 SNMP Linkchange Traps Settings -down menu to enable or disable the SNMP link change Trap. Click the Apply button to accept the changes made. SNMP View Table Settings Users can assign views to community strings that define - D-Link DGS-3120-24TC | Product Manual - Page 56
DGS-3120 Series Managed Switch Web UI Reference Guide to remove the specific entry. SNMP Community Table Settings Users can create an SNMP community string to define the List of IP addresses of SNMP managers that are permitted to use the community string to gain access to the Switch's SNMP agent - D-Link DGS-3120-24TC | Product Manual - Page 57
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-37 SNMP community Table Settings entry. SNMP Group Table Settings An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous window. To view the following - D-Link DGS-3120-24TC | Product Manual - Page 58
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-38 SNMP Group Table Settings window The fields the Switch's SNMP agent. User-based Security Model SNMPv1 - Specify that SNMP version 1 will be used. SNMPv2 - Specify that SNMP version 2c will be used. The SNMPv2 supports both - D-Link DGS-3120-24TC | Product Manual - Page 59
DGS-3120 Series Managed Switch Web UI Reference Guide default value is suggested in RFC2271. The very first bit is 1, and the first four octets are set to the binary equivalent of the agent's SNMP management private enterprise number as assigned by IANA (D-Link to identify the SNMP users. This name is - D-Link DGS-3120-24TC | Product Manual - Page 60
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked. This field will require the user to enter a password. SHA - Specify that the HMAC-SHA authentication protocol will be used. This field - D-Link DGS-3120-24TC | Product Manual - Page 61
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SNMPv6 Host Table Settings (EI Mode Only) Users can set up SNMP trap recipients the remote management station that will serve as the SNMP host for the Switch. User-based Security Model SNMPv1 - Specifies that SNMP version 1 will be used - D-Link DGS-3120-24TC | Product Manual - Page 62
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Trap RMON Falling Alarm Trap Enable this option to use the RMON Falling Alarm Trap Feature. Click the Apply button to accept the changes made. Telnet Settings Users can configure Telnet Settings on the Switch. To view the following - D-Link DGS-3120-24TC | Product Manual - Page 63
DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 4 L2 Features VLAN QinQ (EI Mode Only) Spanning Tree Link Aggregation FDB L2 Multicast Control Multicast Filtering ERPS Settings (EI alleviate problems associated with weighted round robin system are employed on the Switch to determine the - D-Link DGS-3120-24TC | Product Manual - Page 64
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide A VLAN is a collection of end nodes Switch supports IEEE 802.1Q VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag-unaware. • The Switch's default - D-Link DGS-3120-24TC | Product Manual - Page 65
DGS-3120 Series Managed Switch Web UI Reference Guide so they can be carried across Ethernet backbones), and 12 bits of VLAN ID (VID). The 3 bits of user priority are used by 802.1p , but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than - D-Link DGS-3120-24TC | Product Manual - Page 66
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-3 Adding an IEEE 802.1Q Tag 1Q ports are also assigned a PVID, for use within the Switch. If no VLANs are defined on the Switch, all ports are then assigned to a default VLAN with a PVID equal to 1. Untagged packets are assigned - D-Link DGS-3120-24TC | Product Manual - Page 67
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. Other 802.1Q compliant devices on - D-Link DGS-3120-24TC | Product Manual - Page 68
® DGS-3120 Series Managed Switch Web UI Reference Guide On port-based VLANs, NICs do not need to be able to identify 802.1Q tags in packet headers. NICs send and receive normal Ethernet packets. If the packet's destination lies on the same segment, communications take place using normal Ethernet - D-Link DGS-3120-24TC | Product Manual - Page 69
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-5 802.1Q VLAN Settings - Add/Edit the VLAN name in the Add/Edit VLAN tab. Advertisement Enable this function to allow the Switch sending out GVRP packets to outside sources, notifying that they may join the existing VLAN. Unit - D-Link DGS-3120-24TC | Product Manual - Page 70
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-6 802.1Q VLAN Settings - Find VLAN Tab VLAN ID List that can be added, deleted or configured. Enabling this function will allow the Switch to send out GVRP packets to outside sources, notifying that they may join the existing VLAN - D-Link DGS-3120-24TC | Product Manual - Page 71
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide becoming a member of the VLAN dynamically. Use the drop-down menu to designate the port as forbidden. Click the Apply button to accept the changes made. NOTE: The Switch supports up to 4k static VLAN entries. 802.1v Protocol VLAN 802.1v - D-Link DGS-3120-24TC | Product Manual - Page 72
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Delete Group button to remove the entry completely. NOTE: The Group name value should be less than 33 characters. 802.1v Protocol VLAN Settings The user can configure Protocol VLAN settings. The lower half of the table displays - D-Link DGS-3120-24TC | Product Manual - Page 73
DGS-3120 Series Managed Switch Web UI Reference Guide required, would be if the client was on a distinct IP subnet, or if there was some confidentiality-related need to segregate traffic changes. GVRP GVRP Global Settings Users can determine whether the Switch will share its VLAN configuration information - D-Link DGS-3120-24TC | Product Manual - Page 74
DGS-3120 Series Managed Switch Web UI Reference Guide service provide site. It can use 802.1d GVRP address, 802.1ad service provider GVRP address or a user defined multicast address. The range of the user manually assign a PVID to a VLAN. The Switch's default is to assign all ports to the default - D-Link DGS-3120-24TC | Product Manual - Page 75
DGS-3120 Series Managed Switch Web UI Reference Guide a VLAN. GVRP is Disabled by default. Ingress Checking This drop-down menu allows the user to enable the port to compare the entry is created for a user, the traffic from this user will be able to be serviced under the specified VLAN regardless - D-Link DGS-3120-24TC | Product Manual - Page 76
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide associate a secondary VLAN with a primary VLAN. member port cannot be configured with the traffic segmentation function. This window allows the user to configure the private VLAN parameters. To view the following window, click L2 Features - D-Link DGS-3120-24TC | Product Manual - Page 77
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured . Click the View Private VLAN List link to view all the private VLAN. PVID Auto Assign Settings Users can enable or disable PVID Auto Assign Status. The default setting is enabled. To view the following - D-Link DGS-3120-24TC | Product Manual - Page 78
DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Voice VLAN State The state of the voice VLAN. Voice VLAN Name The name of the voice VLAN. Voice VID The VLAN ID of the voice VLAN. Priority The priority of the voice VLAN, the range is 0 - 7. The default be reset and - D-Link DGS-3120-24TC | Product Manual - Page 79
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Mode Here the user can configure the mode of the port. Click the Apply button to accept the changes made. Voice VLAN OUI Settings This page is used to configure the user-defined voice traffic's OUI. The OUI is used to identify the - D-Link DGS-3120-24TC | Product Manual - Page 80
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide VLAN Trunk Settings Enable VLAN on a port (s). Refer to the following figure for an illustrated example. Figure 4-21 Example of VLAN Trunk Users can combine a number of VLAN ports together to create VLAN trunks. To view the following - D-Link DGS-3120-24TC | Product Manual - Page 81
DGS-3120 Series Managed Switch Web UI Reference Guide Port (U) and Forbidden Port (F). Show VLAN Ports Users can display the VLAN ports of the Switch's viewed by VID. Enter a Port or a to a specific page when multiple pages exist. QinQ (EI Mode Only) Double or Q-in-Q VLANs allow network providers - D-Link DGS-3120-24TC | Product Manual - Page 82
DGS-3120 Series Managed Switch Web UI Reference Guide therefore greatly expanding the VLAN network and enabling greater support of customers utilizing multiple VLANs on the network. existing IEEE 802.1Q VLANs which we will call SPVIDs (Service Provider VLAN IDs). These VLANs are marked by a TPID - D-Link DGS-3120-24TC | Product Manual - Page 83
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 2. All ports must be configured as Access Ports or Uplink ports. Access ports can only be Ethernet ports while Uplink ports must be Gigabit ports. 3. Provider Edge switches must allow frames of at least 1522 bytes or more, due to the - D-Link DGS-3120-24TC | Product Manual - Page 84
DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description QinQ State Selecting this option enable the QinQ feature. Inner TPID Enter an Inner TPID in SP-VLAN tag here. Unit Specifies the unit ID to be configured. From Port - To Port Here the user . By default the Disabled - D-Link DGS-3120-24TC | Product Manual - Page 85
DGS-3120 Series Managed Switch Web UI Reference Guide Click the Edit button to re-configure the specific entry. Click the Delete button to remove a specific entry. Spanning Tree This Switch supports have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the - D-Link DGS-3120-24TC | Product Manual - Page 86
DGS-3120 Series Managed Switch Web UI Reference Guide RSTP compliant bridge links. Ports do not be P2P ports, unless manually overridden through configuration. 802 -1998 STP will not benefit from the rapid transition user-defined group of ports basis. STP Bridge Global Settings On this page the user - D-Link DGS-3120-24TC | Product Manual - Page 87
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-28 STP Bridge Global in determining that the Switch has spanning tree configuration values consistent with other devices on the bridged LAN. The user may choose a time between 6 and 40 seconds. The default value is 20 seconds. - D-Link DGS-3120-24TC | Product Manual - Page 88
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NNI BPDU Address Used to determine the BPDU protocol address for GVRP in service provide site. It can use 802.1d GVRP address, 802.1ad service provider GVRP address or a user defined multicast address. The range of the user defined - D-Link DGS-3120-24TC | Product Manual - Page 89
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide P2P Choosing the True parameter indicates a point-to-point (P2P) shared link. P2P ports are similar to edge ports; however they are restricted in that a P2P port must operate in full duplex. Like edge ports, P2P ports - D-Link DGS-3120-24TC | Product Manual - Page 90
DGS-3120 Series Managed Switch Web UI Reference Guide configured VLANs set on the Switch. Supported VIDs on the Switch range from ID number 1 currently set on the Switch and allows users to change the Priority of An entry of 0 denotes the CIST (default MSTI). Priority Enter the priority in this - D-Link DGS-3120-24TC | Product Manual - Page 91
DGS-3120 Series Managed Switch Web UI Reference Guide field denotes the CIST (default MSTI). Internal Path Cost This Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The Switch supports - D-Link DGS-3120-24TC | Product Manual - Page 92
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 4-33 Example of Port Trunk Group The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a - D-Link DGS-3120-24TC | Product Manual - Page 93
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: If any ports within the trunk group become disconnected, packets intended for the disconnected port will be load shared among the other linked ports of the link aggregation group. Port Trunking Settings On this page the user can - D-Link DGS-3120-24TC | Product Manual - Page 94
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > Link Aggregation > LACP Port Settings, devices must designate LACP ports as active. Both devices must support LACP. Passive - LACP ports that are designated as passive cannot initially send LACP - D-Link DGS-3120-24TC | Product Manual - Page 95
DGS-3120 Series Managed Switch Web UI Reference Guide Static FDB Settings Unicast Static FDB Settings Users can set up static unicast forwarding on the Switch 1:5) or "port number" (e.g. 5). When only entering port number, the default unit ID is 1. Click the Apply button to accept the changes made - D-Link DGS-3120-24TC | Product Manual - Page 96
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-37 Multicast Static FDB Settings window window allows you to globally set MAC notification on the Switch. Users can set MAC notification for individual ports on the Switch. To view the following window, click L2 Features > FDB - D-Link DGS-3120-24TC | Product Manual - Page 97
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-38 MAC Notification Settings window The fields that can be configured are described below: Parameter Description State Enable or disable MAC notification globally on the Switch Interval The time in seconds between - D-Link DGS-3120-24TC | Product Manual - Page 98
DGS-3120 Series Managed Switch Web UI Reference Guide default setting is 300 seconds. Click the Apply button to accept the changes made. MAC Address Table This allows the Switch's MAC address forwarding table to be viewed. When the Switch the user can find the ARP and FDB table parameters. 90 - D-Link DGS-3120-24TC | Product Manual - Page 99
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > FDB > ARP & FDB Table, as show below: Figure 4-41 ARP & FDB Table window (SI Mode Only) Figure 4-42 ARP & FDB Table window (EI Mode Only) The fields that can be configured are described - D-Link DGS-3120-24TC | Product Manual - Page 100
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IGMP messages sent from the device to the IGMP host or vice versa. The Switch monitors IGMP messages and discontinues forwarding multicast packets when there are no longer hosts requesting that they continue. To view the following window, - D-Link DGS-3120-24TC | Product Manual - Page 101
DGS-3120 Series Managed Switch Web UI Reference Guide specific port/VLAN. The rate is specified in packet per second. The packets that exceed the limited rate will be dropped. Querier IP Displays the querier IP in seconds to wait for reports from members. The default setting is 10 seconds. - D-Link DGS-3120-24TC | Product Manual - Page 102
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-45 IGMP Snooping Router Port Settings made and return to the previous page. IGMP Snooping Rate Limit Settings On this page the user can configure the IGMP snooping rate limit parameters. To view the following window, click L2 - D-Link DGS-3120-24TC | Product Manual - Page 103
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Port List Here the user can enter the port list used for this configuration. VID List Here the user can enter the VID list used for this configuration. Rate Limit Here the user can enter the IGMP snooping - D-Link DGS-3120-24TC | Product Manual - Page 104
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-48 IGMP Snooping Static Group Settings window Port (F). IGMP Snooping Group Users can view the Switch's IGMP Snooping Group Table. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC - D-Link DGS-3120-24TC | Product Manual - Page 105
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-50 IGMP Snooping Group window The user may search the IGMP Snooping Group Table by either VLAN Name or VID List by entering it in the top left hand corner and clicking - D-Link DGS-3120-24TC | Product Manual - Page 106
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. IGMP Snooping Counter Users can view the switch's IGMP Snooping counter table. To view the - D-Link DGS-3120-24TC | Product Manual - Page 107
DGS-3120 Series Managed Switch Web UI Reference Guide through the use of queries and reports produced by the requesting ports and by the router to ask if any link is requesting multicast data. There are two 2 switch that is recording and sending IP multicast data. The switch needs to forward IP data - D-Link DGS-3120-24TC | Product Manual - Page 108
DGS-3120 Series Managed Switch Web UI Reference Guide MLD Snooping Settings Users a specific entry. Click the Modify Router Port link to configure the MLD Snooping Router Port Settings for The default setting is 125 seconds. The maximum time in seconds to wait for reports from listeners. The default - D-Link DGS-3120-24TC | Product Manual - Page 109
® DGS-3120 Series Managed Switch Web UI Reference Guide decides is Disabled by default. Report Suppression Here the user can enable or disable the report suppression features. Data to the previous page. After clicking the Modify Router Port link, the following page will appear: Figure 4-56 MLD - D-Link DGS-3120-24TC | Product Manual - Page 110
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Static Router Port This section is used and return to the previous page. MLD Snooping Rate Limit Settings Users can configure the rate limit of the MLD control packet that the switch can process on a specific port or VLAN in this page. - D-Link DGS-3120-24TC | Product Manual - Page 111
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-58 MLD Snooping Static Group Settings previous page. MLD Router Port Users can display which of the Switch's ports are currently configured as router ports in IPv6. A router port configured by a user (using the console or Web- - D-Link DGS-3120-24TC | Product Manual - Page 112
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-60 MLD Router Port window Enter a VID Router Port (D) and Forbidden Router Port (F). MLD Snooping Group Users can view MLD Snooping Groups present on the Switch. MLD Snooping is an IPv6 function comparable to IGMP Snooping for - D-Link DGS-3120-24TC | Product Manual - Page 113
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Clear All Data Driven button to delete all MLD snooping groups which is learned by the Data Driven feature of specified VLANs. MLD Snooping Forwarding Table This page displays the switch's current MLD snooping forwarding table. - D-Link DGS-3120-24TC | Product Manual - Page 114
DGS-3120 Series Managed Switch Web UI Reference Guide Statistics link to view the MLD Snooping Counter Settings for the specific entry. After clicking the Packet Statistics link, through the Switch, the switch must forward separate different copies of the data to each VLAN on the system, which, in - D-Link DGS-3120-24TC | Product Manual - Page 115
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 4. The normal display of configured VLANs will not display configured Multicast VLANs. 5. Once an ISM VLAN is enabled, the corresponding IGMP snooping state of this VLAN will also be enabled. Users cannot disable the IGMP feature for an - D-Link DGS-3120-24TC | Product Manual - Page 116
DGS-3120 Series Managed Switch Web UI Reference Guide VLAN Settings On this page the user can configure the IGMP snooping default setting is None. Replace Priority Specify that the packet's priority will be changed by the switch entry. Click the Profile List link to configure the IGMP Snooping - D-Link DGS-3120-24TC | Product Manual - Page 117
DGS-3120 Series Managed Switch Web UI Reference Guide state. Replace Source IP With the IGMP snooping function, the IGMP report packet sent by the default setting is None. Replace Priority Specify that the packet's priority will be changed by the switch link, the following page will appear: 109 - D-Link DGS-3120-24TC | Product Manual - Page 118
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-69 IGMP Snooping Multicast VLAN Group Click the Show IGMP Snooping Multicast VLAN Entries link to view the IGMP Snooping Multicast VLAN Settings. MLD Multicast Group Profile Settings Users can add, delete, or configure the MLD - D-Link DGS-3120-24TC | Product Manual - Page 119
DGS-3120 Series Managed Switch Web UI Reference Guide state. Enter the VLAN name used. Enter the VID value used. The user can select this option to enable the Remap Priority feature. Specify the remap will be used. The default setting is None. Tick the check box to specify that the packet's priority - D-Link DGS-3120-24TC | Product Manual - Page 120
DGS-3120 Series Managed Switch Web UI Reference Guide List link to IP address will not be replaced. 0-7 - The remap priority value (0 to 7) to be associated with the data traffic to be forwarded on the multicast VLAN. None - If None is specified, the packet's original priority is used. The default - D-Link DGS-3120-24TC | Product Manual - Page 121
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide multicast VLAN. Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for - D-Link DGS-3120-24TC | Product Manual - Page 122
DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-75 IPv4 Multicast Profile Settings window The fields that can be configured are described below: Parameter Description Profile ID Enter a Profile ID between 1 and 24. Profile Name Enter a name for the IP Group List link, the - D-Link DGS-3120-24TC | Product Manual - Page 123
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features to a specific page when multiple pages exist. IPv4 Max Multicast Group Settings Users can configure the ports and VLANs on the switch that will be a part of the maximum filter group, up to - D-Link DGS-3120-24TC | Product Manual - Page 124
DGS-3120 Series Managed Switch Web UI Reference Guide Max Group If the checkbox Infinite is not selected, the user reports (Permit) or deny reports (Deny) coming into the specified switch ports. IPv6 Multicast Profile Settings Users name for the IP Multicast Profile. Group List link to configure - D-Link DGS-3120-24TC | Product Manual - Page 125
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-80 Multicast Address Group List Settings to remove the specific entry. IPv6 Limited Multicast Range Settings Users can configure the ports and VLANs on the Switch that will be involved in the Limited IPv6 Multicast Range. - D-Link DGS-3120-24TC | Product Manual - Page 126
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Add button to add a new entry based VLAN IDs used for the configuration here. Max Group If the checkbox Infinite is not selected, the user can enter a Max Group value. Infinite Tick the check box to enable or disable the use - D-Link DGS-3120-24TC | Product Manual - Page 127
DGS-3120 Series Managed Switch Web UI Reference Guide All Groups - This will instruct the Switch to forward all multicast packets Ethernet layer. One link within a ring will be blocked to avoid Loop (RPL, Ring Protection Link). When the failure happens, protection switching blocks the failed link - D-Link DGS-3120-24TC | Product Manual - Page 128
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-84 ERPS Settings Window The fields that can be configured are described below: Parameter Description ERPS State Here the user can enable or disable the ERPS State. ERPS Log Here the user can enable or disable the ERPS Log - D-Link DGS-3120-24TC | Product Manual - Page 129
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click on the Edit button to re-configure the specific entry. Click on the - D-Link DGS-3120-24TC | Product Manual - Page 130
DGS-3120 Series Managed Switch Web UI Reference Guide function. The default ring MEL is 1. Holdoff Time Specifies the hold-off time of the R-APS function. The default hold-off time the previous window. After clicking the Sub-Ring Information link, the following window will appear: The fields that - D-Link DGS-3120-24TC | Product Manual - Page 131
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the LLDP Global Settings, as show - D-Link DGS-3120-24TC | Product Manual - Page 132
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide LLDP Port Settings On this page the user can configure the LLDP port parameters. nor receive LLDP frames. The default value is TX And RX. Subtype Use the drop-down menu to select the type of the IP address information will be sent. - D-Link DGS-3120-24TC | Product Manual - Page 133
DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: The IPv4 or IPv6 address entered here should be an existing LLDP management IP address. LLDP Management Address List On this page the user These include Port Description, System Name, System Description and System Capability. To view the - D-Link DGS-3120-24TC | Product Manual - Page 134
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-88 LLDP Basic TLVs Settings window System Name Use the drop-down menu to enable or disable the System Name option. System Description Use the drop-down menu to enable or disable the System Description option. System - D-Link DGS-3120-24TC | Product Manual - Page 135
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-89 LLDP Dot1 TLVs Settings window to enable or disable, and configure the Dot1 TLV Protocol Identity option. After enabling this option the user can select to either use EAPOL, LACP, GVRP, STP, or All. Click the Apply button - D-Link DGS-3120-24TC | Product Manual - Page 136
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-90 supports the auto-negotiation function, whether the function is enabled, whether it has auto-negotiated advertised capability, and what is the operational MAU type. The default state is Disabled. Link Aggregation The Link - D-Link DGS-3120-24TC | Product Manual - Page 137
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-91 LLDP Statistics System window LLDP Local Port Information The LLDP Local Port Information page displays the information on a per port basis currently available for populating outbound LLDP advertisements - D-Link DGS-3120-24TC | Product Manual - Page 138
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-93 LLDP Local Port Information - Show . LLDP Remote Port Information This page displays port information learned from the neighbors. The switch receives packets from a remote station but is able to store the information as local. - D-Link DGS-3120-24TC | Product Manual - Page 139
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-96 LLDP Remote Port Information - Show Normal window Click the - D-Link DGS-3120-24TC | Product Manual - Page 140
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 5 L3 Features IPv4 Default Route Settings (SI Mode Only) IPv4 Static/Default Route Settings (EI Mode Only) IPv4 Route Table IPv6 Static/Default Route Settings (EI Mode Only) IP Forwarding Table IPv4 Default Route Settings (SI Mode - D-Link DGS-3120-24TC | Product Manual - Page 141
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 5-2 IPv4 Static/Default Route Settings window The fields that can be configured are described below: Parameter Description IP Address This field allows the entry of an IPv4 address to be assigned to the Static or Default - D-Link DGS-3120-24TC | Product Manual - Page 142
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IPv6 Static/Default Route Settings (EI Mode Only) A static entry of an IPv6 address can be entered into the Switch's routing table for IPv6 formatted addresses. To view the following window, click L3 Features > IPv6 Static/Default Route - D-Link DGS-3120-24TC | Product Manual - Page 143
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 6 QoS 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation - D-Link DGS-3120-24TC | Product Manual - Page 144
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Understanding QoS The Switch supports 802.1p priority queuing. The Switch has eight priority queues. These priority queues are numbered from 7 (Class 7) - the highest priority queue - to 0 (Class 0) - the lowest priority queue. The eight - D-Link DGS-3120-24TC | Product Manual - Page 145
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-2 Default Priority Settings window Click the Apply button to accept the changes made. 802.1p User Priority Settings The Switch allows the assignment of a class of service to each of the 802.1p priorities. To view the following - D-Link DGS-3120-24TC | Product Manual - Page 146
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-3 802.1p User Priority Settings window Once a priority has been assigned to the port groups on the Switch, then a Class may be assigned to each of the eight levels of 802.1p priorities using the drop-down menus on this window. User - D-Link DGS-3120-24TC | Product Manual - Page 147
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-4 Bandwidth Control Settings window The allows the input of the data rate that will be the limit for the selected port. The user may choose a rate between 64 and 1024000 Kbits per second. Effective RX If a RADIUS server - D-Link DGS-3120-24TC | Product Manual - Page 148
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Queue Bandwidth Control Settings To view this window, click made. NOTE: The minimum granularity of queue bandwidth control is 64Kbit/sec. The system will adjust the number to the multiple of 64 automatically. Traffic Control Settings On - D-Link DGS-3120-24TC | Product Manual - Page 149
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide malfunctioning device, such as a faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch network. To help rectify this packet storm, the Switch will monitor and - D-Link DGS-3120-24TC | Product Manual - Page 150
DGS-3120 Series Managed Switch Web UI Reference Guide user manually resets the port using the Port Settings window (Configuration> Port Configuration> Port Settings). Choosing this option obligates the user between 5 and 600 seconds, with a default setting of 5 seconds. Threshold (0-255000) - D-Link DGS-3120-24TC | Product Manual - Page 151
DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: Traffic Control cannot be implemented on ports that are set for Link the DSCP trust mode, the switch will insert the priority tag to untagged packets by using the DSCP Map settings instead of the default port priority. To view the - D-Link DGS-3120-24TC | Product Manual - Page 152
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop-down menu to select a range of port to configure. State Enable/disable to trust DSCP. By default, DSCP trust is disabled. Click - D-Link DGS-3120-24TC | Product Manual - Page 153
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-9 DSCP Map Settings - DSCP DSCP window and forward the packet directly to have lower latency and better performance. On this page the user can enable or disable HOL Blocking Prevention. To view the following window, click QoS > - D-Link DGS-3120-24TC | Product Manual - Page 154
® DGS-3120 Series Managed Switch Web UI Reference Guide HOL Blocking Prevention State Click the radio buttons to enable of disable the HOL blocking prevention global settings. Click the Apply button to accept the changes made. Scheduling Settings QoS Scheduling This window allows the user to - D-Link DGS-3120-24TC | Product Manual - Page 155
DGS-3120 Series Managed Switch Web UI Reference Guide QoS Scheduling Mechanism Changing the output scheduling used for the hardware queues in the Switch algorithm to handle packets in an even distribution in priority classes of service. Click the Apply button to accept the changes made. NOTE: The - D-Link DGS-3120-24TC | Product Manual - Page 156
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 7 ACL ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Egress Access Profile List (EI Mode Only) Egress ACL Flow Meter (EI Mode Only) ACL Configuration Wizard The ACL Configuration - D-Link DGS-3120-24TC | Product Manual - Page 157
® DGS-3120 Series Managed Switch Web UI Reference Guide Any - Selecting this option will include any starting category to this rule. MAC Address - Selecting this option will allow the user to enter a range of MAC addresses for this rule. IPv4 Address - Selecting this option will allow the user to - D-Link DGS-3120-24TC | Product Manual - Page 158
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-2 Access Profile List window Click page when multiple pages exist. There are four Add Access Profile windows; • one for Ethernet (or MAC address-based) profile configuration, • one for IPv6 address-based profile configuration, - D-Link DGS-3120-24TC | Product Manual - Page 159
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are this as the, or part of the criterion for forwarding. Ethernet Type Selecting this option instructs the Switch to examine the Ethernet type value in each frame's header. Click the Select button - D-Link DGS-3120-24TC | Product Manual - Page 160
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the - D-Link DGS-3120-24TC | Product Manual - Page 161
DGS-3120 Series Managed Switch Web UI Reference Guide Replace Priority Tick this check box to replace the Priority value in the adjacent field. Replace DSCP (0-63) Select this option to instruct the Switch that the IP precedence of the default not, the user will be window (Ethernet ACL) Click - D-Link DGS-3120-24TC | Product Manual - Page 162
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Select ACL Type 802.1Q VLAN IPv4 DSCP IPv4 Source IP Mask IPv4 Destination IP Mask Protocol Enter a - D-Link DGS-3120-24TC | Product Manual - Page 163
DGS-3120 Series Managed Switch Web UI Reference Guide value. Select IGMP to instruct the Switch . The user may choose between urg (urgent), ack (acknowledgement), psh (push), rst (reset), syn - Specify that the rule applies to the IP protocol ID traffic. User Define - Specify the Layer 4 part mask - D-Link DGS-3120-24TC | Product Manual - Page 164
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-10 Access Rule List window (IPv4 ACL) value can be set from 1 to 256. Auto Assign - Ticking this check box will instruct the Switch to automatically assign an Access ID for the rule being created. Select Permit to specify that - D-Link DGS-3120-24TC | Product Manual - Page 165
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide defined in the config mirror port command. Port Mirroring must be enabled and a target port must be set. Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet to the value - D-Link DGS-3120-24TC | Product Manual - Page 166
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-13 Add ACL Profile window instruct the Switch to examine the flow label field of the IPv6 header. This flow label field is used by a source to label sequences of packets such as non-default quality of service or real time service - D-Link DGS-3120-24TC | Product Manual - Page 167
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IPv6 Destination Mask The user may specify an IP address mask for the destination IPv6 address by ticking the corresponding check box and entering the IP address mask. Click the Select button to select an ACL type. Click the Create - D-Link DGS-3120-24TC | Product Manual - Page 168
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-16 Add Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Action Priority (0-7) Replace Priority - D-Link DGS-3120-24TC | Product Manual - Page 169
DGS-3120 Series Managed Switch Web UI Reference Guide Replace ToS Precedence (0-7) Specify that the IP precedence of the outgoing packet is changed with the new value. If used without an action priority, the packet is sent to the default this window. If not, the user will be presented with an error - D-Link DGS-3120-24TC | Product Manual - Page 170
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide . Figure 7-18 Add ACL Profile (Packet Content ACL for the type of profile. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header. Select IPv4 ACL to instruct the Switch to examine the IPv4 address in - D-Link DGS-3120-24TC | Product Manual - Page 171
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide offset_chunk_1 0 0x0000ffff will match packet byte offset,0,1 NOTE: Only one packet_content_mask profile can be created. With this advanced unique Packet Content Mask (also known as Packet Content Access Control List ACL), the D-Link - D-Link DGS-3120-24TC | Product Manual - Page 172
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-21 Add Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Action Priority (0-7) Replace - D-Link DGS-3120-24TC | Product Manual - Page 173
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace ToS Precedence Specify that the IP precedence of the outgoing packet is changed with the new (0-7) value. If used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter - D-Link DGS-3120-24TC | Product Manual - Page 174
DGS-3120 Series Managed Switch Web UI Reference Guide Users may globally enable or disable the CPU Interface Filtering State mechanism by using the radio buttons to change the running state. Choose Enabled to enable CPU packets to be scrutinized by the Switch ; • one for Ethernet (or MAC address- - D-Link DGS-3120-24TC | Product Manual - Page 175
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-24 Add CPU ACL Profile (Ethernet ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Select ACL Type Source MAC Mask Destination MAC Mask 802.1Q VLAN 802.1p Ethernet Type Enter - D-Link DGS-3120-24TC | Product Manual - Page 176
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the - D-Link DGS-3120-24TC | Product Manual - Page 177
DGS-3120 Series Managed Switch Web UI Reference Guide page will appear: Figure 7-28 CPU Access Rule Detail Information (Ethernet ACL) Click the Show All Rules button to navigate back shown below is the Add CPU ACL Profile window for IP (IPv4). To use specific filtering masks in this ACL profile - D-Link DGS-3120-24TC | Product Manual - Page 178
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-29 Add CPU ACL Profile (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Select ACL Type 802.1Q VLAN IPv4 DSCP Source IP Mask Destination IP Mask Protocol Enter a - D-Link DGS-3120-24TC | Product Manual - Page 179
DGS-3120 Series Managed Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value. Select IGMP to instruct the Switch the IP Protocol ID Traffic. User - D-Link DGS-3120-24TC | Product Manual - Page 180
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-31 CPU Access Rule List (IPv4 ACL) . Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that the packets - D-Link DGS-3120-24TC | Product Manual - Page 181
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Ports Ticking the All Ports check box will denote all ports on the Switch. Click the Apply button to accept the changes made. Click the - D-Link DGS-3120-24TC | Product Manual - Page 182
Checking this field will instruct the Switch to examine the flow label field of the IPv6 header. This flow label field is used by a source to label sequences of packets such as non-default quality of service or real time service packets. IPv6 Source Mask The user may specify an IP address mask for - D-Link DGS-3120-24TC | Product Manual - Page 183
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Enter a page number and click the instruct the Switch to examine the flow label field of the IPv6 header. This flow label field is used by a source to label sequences of packets such as non-default quality of service or real time service - D-Link DGS-3120-24TC | Product Manual - Page 184
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-38 CPU Ethernet to instruct the Switch to examine the layer 2 part of each packet header. Select IPv4 to instruct the Switch to examine the IP address in each frame's header. Select IPv6 to instruct the Switch to examine the IP - D-Link DGS-3120-24TC | Product Manual - Page 185
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value specified: 0-15 - Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte. 16-31 - Enter a - D-Link DGS-3120-24TC | Product Manual - Page 186
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-42 Add CPU Access Rule (Packet packets that match the access profile are not forwarded by the Switch and will be filtered. Offset This field will instruct the Switch to mask the packet header beginning with the offset value - D-Link DGS-3120-24TC | Product Manual - Page 187
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-43 CPU Access Rule Detail Information ( to select the state. Normal - Allow the user to find normal ACL rules. CPU - Allow the user to find CPU ACL rules. Egress - Allow the user to find Egress ACL rules. Click the Find button - D-Link DGS-3120-24TC | Product Manual - Page 188
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide trTCM - Two Rate Three Color Marker. This, along with the srTCM, are two methods available on the switch for metering and marking packet flow. The trTCM meters and IP flow and marks it as a color based on the flow's surpassing of two - D-Link DGS-3120-24TC | Product Manual - Page 189
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-45 ACL Flow Meter The fields that can be configured are described below: Parameter Description Profile ID Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name - D-Link DGS-3120-24TC | Product Manual - Page 190
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Profile ID Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name for the flow meter. Access ID - D-Link DGS-3120-24TC | Product Manual - Page 191
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-47 ACL Flow meter Display window Click the - D-Link DGS-3120-24TC | Product Manual - Page 192
DGS-3120 Series Managed Switch Web UI Reference Guide Profile Name Select ACL Type Source MAC Mask Destination MAC Mask 802.1Q VLAN 802.1p Ethernet Type Enter a profile name for the profile created. Select profile based on Ethernet . Selecting this option instructs the Switch to examine the 802 - D-Link DGS-3120-24TC | Product Manual - Page 193
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide After clicking the Add Rule button, the following page will appear: Figure 7-51 Add Egress Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Ethernet Type - D-Link DGS-3120-24TC | Product Manual - Page 194
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide when this access rule will be implemented on the Switch. Counter Here the user can page will appear: Figure 7-52 Egress Access Rule Detail Information window (Ethernet ACL) Click the Show All Rules button to navigate back to the - D-Link DGS-3120-24TC | Product Manual - Page 195
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-53 Add Egress ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Profile Name Select ACL Type 802.1Q VLAN IPv4 DSCP IPv4 Source IP Mask IPv4 Destination IP - D-Link DGS-3120-24TC | Product Manual - Page 196
DGS-3120 Series Managed Switch Web UI Reference Guide Select IGMP to instruct the Switch field. The user may choose between urg (urgent), ack (acknowledgement), psh (push), rst (reset), syn - Specify that the rule applies to the IP protocol ID traffic. User Define - Specify the Layer 4 part mask - D-Link DGS-3120-24TC | Product Manual - Page 197
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-55 Egress Access Rule List window ( This value can be set from 1 to 128. Auto Assign - Ticking this check box will instruct the Switch to automatically assign an Access ID for the rule being created. Specify the value of DSCP. - D-Link DGS-3120-24TC | Product Manual - Page 198
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered. Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet - D-Link DGS-3120-24TC | Product Manual - Page 199
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-58 Add Egress ACL Profile window (IPv6 to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. IPv6 Source Mask IPv6 Destination Mask The user may specify an IP address mask - D-Link DGS-3120-24TC | Product Manual - Page 200
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Select button to select an ACL type. Click the Create button to create a profile. Click the - D-Link DGS-3120-24TC | Product Manual - Page 201
DGS-3120 Series Managed Switch Web UI Reference Guide Figure user priority re-written to its original value before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual. Select this option to instruct the Switch - D-Link DGS-3120-24TC | Product Manual - Page 202
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Counter Here the user can select the counter. By checking the All Rules button to navigate back to the Access Rule List. Egress ACL Flow Meter (EI Mode Only) This window is used to configure the packet flow-based metering based on an - D-Link DGS-3120-24TC | Product Manual - Page 203
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based Name Access ID Mode Here the user can enter the Profile ID for the flow meter. Here the user can enter the Profile Name for the flow meter. Here the user can enter the Access ID for - D-Link DGS-3120-24TC | Product Manual - Page 204
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide equal or less than PIR. PIR - Specify the yellow packet flow. Yellow packet flows may have excess packets permitted through or dropped. Users may replace the DSCP field of these packets by checking its radio button and entering a new - D-Link DGS-3120-24TC | Product Manual - Page 205
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 8 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) (EI Mode Only The IEEE 802.1X standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local - D-Link DGS-3120-24TC | Product Manual - Page 206
® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch - D-Link DGS-3120-24TC | Product Manual - Page 207
DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Process Utilizing the three roles stated above, the 802.1X protocol provides a stable and secure way of authorizing and authenticating users active device at the remote end of the link, or an active device becoming inactive. These - D-Link DGS-3120-24TC | Product Manual - Page 208
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Host-Based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create "logical" Ports, one for each attached device that required access to the LAN. The Switch would - D-Link DGS-3120-24TC | Product Manual - Page 209
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X The initialization value is used for the awhile timer when timing out the Supplicant. Its default value is 30 seconds; however, if the type of challenge involved in the current - D-Link DGS-3120-24TC | Product Manual - Page 210
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide TxPeriod ReAuthPeriod ReAuthentication Port Control This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default - D-Link DGS-3120-24TC | Product Manual - Page 211
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-11 802.1X User Settings window The fields that can be configured are described below: Parameter Description 802.1X User The user can enter an 802.1X user's username in here. Password The user can enter an 802.1X user's - D-Link DGS-3120-24TC | Product Manual - Page 212
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Limitations Using the Guest VLAN 1. Ports supporting Guest VLANs cannot be GVRP enabled and vice versa Settings The RADIUS feature of the Switch allows the user to facilitate centralized user administration as well as providing protection - D-Link DGS-3120-24TC | Product Manual - Page 213
DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-14 Authentication RADIUS Server Settings window (SI Mode Only) Figure 8-15 Authentication RADIUS Server Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Index Server IP (SI - D-Link DGS-3120-24TC | Product Manual - Page 214
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Confirm Key Confirm the key the same as that of the RADIUS server. Click the Apply button to accept the changes made. RADIUS Accounting Settings Users can configure the state of the specified RADIUS accounting service. To view this - D-Link DGS-3120-24TC | Product Manual - Page 215
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-17 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where "s" stands for seconds. The default value is one second. The fields that can be configured - D-Link DGS-3120-24TC | Product Manual - Page 216
DGS-3120 Series Managed Switch Web UI Reference Guide user may also select the desired time interval to update the statistics, between 1s and 60s, where "s" stands for seconds. The default NAS-Identifier of the RADIUS accounting client. The IP address of the RADIUS authentication server referred to - D-Link DGS-3120-24TC | Product Manual - Page 217
to access an IP-MAC binding enabled port, the system will block the access by dropping its packet. For the xStack® DGS-3120 series of switches, active and inactive entries use the same database. The maximum number of entries is 510. The creation of authorized users can be manually configured by CLI - D-Link DGS-3120-24TC | Product Manual - Page 218
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MAC-port binding configuration set on the Switch. The default is Disabled. DHCP Snooping State Click the radio buttons to enable or disable DHCP snooping for IP-MAC-port binding. The default is Disabled. Recover Learning Ports Enter - D-Link DGS-3120-24TC | Product Manual - Page 219
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide legal IP packets are forwarded, while the illegal IP packets are dropped. When IP Inspection is enabled, and ARP Inspection is disabled, all non-IP packets (Ex. L2 packets, or ARP) are forwarded by default. The default value is Disabled. - D-Link DGS-3120-24TC | Product Manual - Page 220
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-22 MAC Block List The fields that can Snooping DHCP Snooping Maximum Entry Settings Users can configure the maximum DHCP snooping entry for ports on this page. To view this window, click Security > IP-MAC-Port Binding (IMPB) > - D-Link DGS-3120-24TC | Product Manual - Page 221
DGS-3120 Series Managed Switch Web UI Reference Guide ports. To view this window, click Security > IP-MAC-Port Binding (IMPB) > DHCP Snooping > DHCP are supported. In MAC-based access control, MAC user be blocked by the Switch. 3. Ports that have been enabled for Link Aggregation and Port Security - D-Link DGS-3120-24TC | Product Manual - Page 222
DGS-3120 Series Managed Switch Web UI Reference Guide associated with the MAC-based access control function of the Switch, and configure ports to be enabled or disabled for the MAC-based access control feature of the Switch port. The user may choose . The default password is "default". Use the - D-Link DGS-3120-24TC | Product Manual - Page 223
DGS-3120 Series Managed Switch Web UI Reference Guide Trap State Use the drop-down menu to enable or disable trap state. Log State Use the drop-down menu to enable or disable log state. Max User Enter the maximum amount of users of the Switch 1 and 1440 minutes. The default is 1440. To set this - D-Link DGS-3120-24TC | Product Manual - Page 224
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find by MAC button to locate a specific entry based on the MAC address entered. Click the Find by VLAN button to locate a specific - D-Link DGS-3120-24TC | Product Manual - Page 225
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The Switch can be the authentication server itself and do the authentication based on a local database, or be a RADIUS client and perform the authentication process via the RADIUS protocol with a remote RADIUS server. The client user - D-Link DGS-3120-24TC | Product Manual - Page 226
® DGS-3120 Series Managed Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2. Certain functions exist on the Switch - D-Link DGS-3120-24TC | Product Manual - Page 227
DGS-3120 Series Managed Switch Web UI Reference Guide WAC Global Settings Users can configure the Switch Web Authentication on the Switch. Virtual IP Enter a virtual IP address. This address is only the TCP port will run the WAC HTTPS protocol. The default value is 443. HTTPS cannot run at TCP port - D-Link DGS-3120-24TC | Product Manual - Page 228
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC User Settings Users can view and set local database user accounts for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC User Settings as shown below: Figure 8-31 WAC User Settings window - D-Link DGS-3120-24TC | Product Manual - Page 229
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-32 WAC Port Settings window The box to indicate the Idle state of the authenticated host on the port will never be checked. The default value is infinite. Block Time (0-300) This parameter is the period of time a host will be - D-Link DGS-3120-24TC | Product Manual - Page 230
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC Authentication State Users can view and delete the hosts for Web authentication. for multiple authentication to be supported on the Switch. Compound Authentication Settings Users can configure Authorization Network State Settings - D-Link DGS-3120-24TC | Product Manual - Page 231
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-34 Compound Authentication Settings window (SI Mode Only) Figure 8-35 Compound Authentication Settings window (EI Mode Only) The fields that can be configured are described below: 223 - D-Link DGS-3120-24TC | Product Manual - Page 232
DGS-3120 Series Managed Switch Web UI Reference Guide will stay on the original VLAN. Block (default setting). The client is always regarded as security module is active on a port depends on its system state. 802.1X+IMPB - 802.1X will be Guest VLAN Settings (EI Mode Only) Users can assign ports to - D-Link DGS-3120-24TC | Product Manual - Page 233
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-36 Compound Authentication Guest VLAN Settings window The fields that can be configured are described below: Parameter Description VLAN Name Click the button and - D-Link DGS-3120-24TC | Product Manual - Page 234
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-37 Port Security Settings window The fields that can be configured are described below: Parameter Description Port Security Trap/Log Settings Use the radio button to enable or disable Port Security Traps and Logs on the Switch - D-Link DGS-3120-24TC | Product Manual - Page 235
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-38 Port Security Port-VLAN Settings window Click the Apply button to accept the changes made. Click the - D-Link DGS-3120-24TC | Product Manual - Page 236
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-40 Port Security Entries window The fields that can be configured are described below: Parameter Description VLAN Name The VLAN Name of the entry in the forwarding database table that has been permanently learned by the Switch - D-Link DGS-3120-24TC | Product Manual - Page 237
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Gateway MAC Address Enter the gateway MAC address to help prevent ARP Spoofing. Ports Enter the port numbers that this feature applies to. Alternatively the user can select All Ports to apply this feature to all the ports of the switch - D-Link DGS-3120-24TC | Product Manual - Page 238
DGS-3120 Series Managed Switch Web UI Reference Guide Both. Recover Time Specify the BPDU protection Auto-Recovery timer. The default value of the recovery timer is 60. Unit Select the unit implemented on a range of ports at a time. The user may enable or disable this function using the pull-down - D-Link DGS-3120-24TC | Product Manual - Page 239
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-43 Loopback Detection Settings window The fields that can be configured are described below: Parameter Description LBD State Use the radio button to enable or disable loopback detection. The default is Disabled. Mode Use - D-Link DGS-3120-24TC | Product Manual - Page 240
DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-44 Traffic Segmentation Settings window The fields that can be configured are described below: Parameter Description Port List Here the user User Interface, was created as a data-link- 1002, NetBIOS over TCP/IP (NBT). If the network - D-Link DGS-3120-24TC | Product Manual - Page 241
DGS-3120 Series Managed Switch Web UI Reference Guide DHCP services to IP address is the same as the DHCP server's IP user has configured. When DHCP Server filter function is enabled all DHCP Server packets will be filtered from a specific port. DHCP Server Screening Port Settings The Switch supports - D-Link DGS-3120-24TC | Product Manual - Page 242
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-46 DHCP Server Screening Port Disabled to disable it. The default is Disabled. Click the Apply button to accept the changes made for each individual section. DHCP Offer Permit Entry Settings Users can add or delete permit - D-Link DGS-3120-24TC | Product Manual - Page 243
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Server IP Address The IP address of the DHCP server to be permitted. Client's MAC Address The MAC address of the DHCP client. Ports The port numbers of - D-Link DGS-3120-24TC | Product Manual - Page 244
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide order preferable, and defined by the user for normal user authentication on the Switch, and may contain up to eight authentication techniques. When a user attempts to access the Switch, the Switch will select the first technique listed - D-Link DGS-3120-24TC | Product Manual - Page 245
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Policy Settings Users can enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication - D-Link DGS-3120-24TC | Product Manual - Page 246
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Method List and Enable Method List for authentication for users utilizing user level to admin-level users utilizing a previously configured method list. The user may use the default Method List or other Method List configured by the user - D-Link DGS-3120-24TC | Product Manual - Page 247
DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-53 Authentication Server Group Settings - Edit Server Group window To add an Authentication Server Host to the list, enter its name in the Group Name field, IP address in the IP each other. The maximum supported number of server hosts is - D-Link DGS-3120-24TC | Product Manual - Page 248
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-54 Authentication Server Settings window The fields that can be configured are described below: Parameter Description IP Address The IP address of the remote server host to add. Protocol The protocol used by the server - D-Link DGS-3120-24TC | Product Manual - Page 249
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-55 Login Method Lists Settings window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the Delete button corresponding to the - D-Link DGS-3120-24TC | Product Manual - Page 250
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful authentication using any of these methods will give the user an "Admin" privilege. NOTE: To set the Local Enable Password, see the next section, entitled Local Enable Password. To view this window, click Security > Access - D-Link DGS-3120-24TC | Product Manual - Page 251
® DGS-3120 Series Managed Switch Web UI Reference Guide To user to choose a message digest function which will determine a Message Authentication Code. This Message Authentication Code will be encrypted with a sent message to provide integrity and prevent against replay attacks. The Switch supports - D-Link DGS-3120-24TC | Product Manual - Page 252
DGS-3120 Series Managed Switch Web UI Reference Guide TFTP server. The Switch supports SSLv3. Other versions of SSL may not be compatible with this Switch and may cause problems buttons to enable or disable the SSL status on the Switch. The default is Disabled. This field will set the time between a - D-Link DGS-3120-24TC | Product Manual - Page 253
DGS-3120 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. To set up the SSL cipher suite function on the Switch This field is Enabled by default. RSA EXPORT with RC4 Server IP Address remote login and secure network services over an insecure network. - D-Link DGS-3120-24TC | Product Manual - Page 254
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide three choices as to the method SSH will use to authorize the user, which are Host , and 60 min. The default setting is Never. TCP Port Number Here the user can enter the TCP Port Number used for SSH. The default value is 22. Click the - D-Link DGS-3120-24TC | Product Manual - Page 255
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view this window, click Security > SSH > SSH users requiring SSH authentication techniques and the host computer is running the Linux operating system with a SSH program previously installed. This parameter is enabled by default - D-Link DGS-3120-24TC | Product Manual - Page 256
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Twofish128 Use the check box to enable or disable the twofish128 encryption algorithm. The default is enabled. Twofish192 Use the check box to enable or disable the twofish192 encryption algorithm. The default is enabled. Twofish256 - D-Link DGS-3120-24TC | Product Manual - Page 257
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide attempting to access the Switch. Host Based - This parameter should be chosen if the administrator wishes to use a remote SSH server for authentication purposes. Choosing this parameter requires the user to input the following - D-Link DGS-3120-24TC | Product Manual - Page 258
DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-63 Trusted Host window (EI Mode Only) When the user clicks the Edit button, one will be able to edit the service this mode, the Switch will drop all ARP and IP broadcast packets and packets from un-trusted IP addresses for a calculated - D-Link DGS-3120-24TC | Product Manual - Page 259
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide stopped, the Switch will again begin accepting all packets. Yet, if the checking shows that there continues to be too many packets flooding the Switch, it will stop accepting all ARP and IP broadcast packets and packets from untrusted IP - D-Link DGS-3120-24TC | Product Manual - Page 260
Mode Used to select the type of Safeguard Engine to be activated by the Switch when the CPU utilization reaches a high rate. The user may select: Fuzzy - If selected, this function will instruct the Switch to minimize the IP and ARP traffic flow to the CPU by dynamically allotting an even bandwidth - D-Link DGS-3120-24TC | Product Manual - Page 261
DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 9 Network Application DHCP SNTP Flash File System Settings DHCP DHCP Relay DHCP Relay Global Settings Users It is used to enable or disable the DHCP Relay service on the Switch. The default is Disabled. This field allows an entry between 1 - D-Link DGS-3120-24TC | Product Manual - Page 262
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide State DHCP Relay Agent Information Option 82 Check DHCP Relay Agent Information Option 82 Policy DHCP Relay Agent Information Option 82 Remote ID DHCP Relay - D-Link DGS-3120-24TC | Product Manual - Page 263
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide enable - Select this option to enable the DHCP Relay the information check feature so that the Switch does not remove the option 82 field from the packet. Users may configure the action that the Switch takes when it receives a packet with - D-Link DGS-3120-24TC | Product Manual - Page 264
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The Implementation of DHCP Relay Agent Information Option 82 The DHCP Relay Option 82 command configures the DHCP relay agent information option 82 setting of the Switch. The formats for the circuit ID sub-option and the remote ID sub- - D-Link DGS-3120-24TC | Product Manual - Page 265
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 9-4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description Interface Name The IP interface on the Switch that will be connected directly to the Server. Server IP - D-Link DGS-3120-24TC | Product Manual - Page 266
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 9-6 DHCP Relay Option 60 Server Settings window The fields that can be configured are described below: Parameter Description Server IP Address Enter the DHCP Relay Option 60 Server Relay IP Address. Mode Use the drop-down - D-Link DGS-3120-24TC | Product Manual - Page 267
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Match Type Here the user can enter Default Here the user can select the DHCP Relay Option 61 default action. Drop - Specify to drop the packet. Relay - Specify to relay the packet to an IP address. Enter the IP Address of the default - D-Link DGS-3120-24TC | Product Manual - Page 268
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Add button to add a new entry based dissemination services, organize the SNTP subnet of servers and clients, and adjust the system clock in each participant. SNTP Settings Users can configure the time settings for the Switch. - D-Link DGS-3120-24TC | Product Manual - Page 269
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description SNTP State Use this radio button to enable or disable SNTP. Current Time Displays the Current Time. Time Source Displays the time source for the system. - D-Link DGS-3120-24TC | Product Manual - Page 270
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Offset In Minutes DST offset - 30, 60, 90, Flash File System in our system: The Flash File System is used to provide the user with flexible file operation on the Flash. All the firmware, configuration information and system log - D-Link DGS-3120-24TC | Product Manual - Page 271
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide In case the file system gets corrupted, Z-modem can be used to download the backup files directly to the system. To view this window, click Network Application > Flash File System Settings as shown below: Figure 9-12 Flash File System - D-Link DGS-3120-24TC | Product Manual - Page 272
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When copying a file to the file system of this switch, the user must enter the Source and Destination path. Click the Apply button to initiate the copy. Click the Cancel button the discard the process. After clicking - D-Link DGS-3120-24TC | Product Manual - Page 273
DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 10 CFM Ethernet OAM Cable Diagnostics OAM CFM CFM Settings On this page the user can Here the user can select the maintenance domain level. This is the control creations of MIPs. None - Don't create MIPs. This is the default value. - D-Link DGS-3120-24TC | Product Manual - Page 274
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chassis - Transmit sender ID TLV with chassis ID information. below: Parameter Description MA Here the user can enter the maintenance association name. MA Index Here the user can enter the maintenance association index. VID - D-Link DGS-3120-24TC | Product Manual - Page 275
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-3 CFM MA Settings (Edit) Window The of the MEP ID is 1-8191. Add - Add MEP ID(s). Delete - Delete MEP ID(s). By default, there is no MEP ID in a newly created maintenance association. Click the Apply button to accept the - D-Link DGS-3120-24TC | Product Manual - Page 276
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-4 CFM MIP Port Table Window Click to discard the changes made and return to the previous page. Click the View Detail link to view more information regarding the specific entry. Click the Delete button to remove the specific - D-Link DGS-3120-24TC | Product Manual - Page 277
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-6 CFM MEP Information Window Click the Edit button to re-configure the specific entry. Click the - D-Link DGS-3120-24TC | Product Manual - Page 278
DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description MEP State This is the MEP administrative state. Enable - MEP is enabled. Disable - MEP is disabled. This is the default The default value is 250. Alarm Reset Time - D-Link DGS-3120-24TC | Product Manual - Page 279
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 1sec - Specifies that the transmitting interval will be set to 1 second. 1min - Specifies that the transmitting interval will be set to 1 minute. Level The client level ID to which the MEP sends AIS PDU. The default client MD level is - D-Link DGS-3120-24TC | Product Manual - Page 280
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-10 CFM Port Settings Window The fields that can be configured are described below: Parameter Description Unit Specifies the unit's ID used. From Port ~ To Port Here the user can select the port range used for this - D-Link DGS-3120-24TC | Product Manual - Page 281
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-12 CFM Loopback Settings Window . LBMs Number Number of LBMs to be sent. The default value is 4. LBM Payload Length The payload length of LBM to be sent. The default is 0. LBM Payload Pattern An arbitrary amount of data - D-Link DGS-3120-24TC | Product Manual - Page 282
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-13 CFM Linktrace Settings Window Maintenance Association index used. MAC Address Here the user can enter the destination MAC address. TTL Link-trace message TTL value. The default value is 64. PDU Priority The 802.1p - D-Link DGS-3120-24TC | Product Manual - Page 283
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-14 CFM Packet Counter Window The fields that can be configured are described below: Parameter Description Port List Which ports' counter to show. - D-Link DGS-3120-24TC | Product Manual - Page 284
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide CFM MP Table To view this window, click OAM > CFM > CFM MP Table, as shown below: Figure 10-16 CFM MP Table Window The fields that can be configured are described below: Parameter Description Port Here the user can select the unit - D-Link DGS-3120-24TC | Product Manual - Page 285
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-17 Ethernet OAM Settings window The fields that can Mode Use the drop-down menu to select to operate in either Active or Passive. The default mode is Active. State Use the drop-down menu to enable or disable the OAM function - D-Link DGS-3120-24TC | Product Manual - Page 286
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-18 Ethernet OAM Configuration Settings window configure. Link Event Use the drop-down menu to select the link events, Link Monitor or Critical Link Event. Link Monitor Use the drop-down menu to select link monitor. - D-Link DGS-3120-24TC | Product Manual - Page 287
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-19 Ethernet OAM Event Log window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select the unit - D-Link DGS-3120-24TC | Product Manual - Page 288
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-20 Ethernet OAM Statistics window The Cable Diagnostics The cable diagnostics feature is designed primarily for administrators or customer service representatives to verify and test copper cables; it can rapidly determine the - D-Link DGS-3120-24TC | Product Manual - Page 289
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-21 Cable Diagnostics window To view limitations. Cable length detection is only supported on GE ports. Ports must be linked up and running at 1000M speed. Cross-talk errors detection is not supported on FE ports. NOTE: The - D-Link DGS-3120-24TC | Product Manual - Page 290
DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 11 Utilization Statistics Mirror sFlow (EI Mode Only) Ping Test Trace Route Peripheral Monitoring Utilization CPU Utilization Users seconds. The default value is one second. Select number of times the Switch will be polled between 20 and - D-Link DGS-3120-24TC | Product Manual - Page 291
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value is 200. Show/Hide Check whether or not to display Five Seconds, One Minute, and Five Minutes. Click the Apply button to accept the changes made. DRAM & Flash Utilization On this page the user can view information regarding the - D-Link DGS-3120-24TC | Product Manual - Page 292
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. The fields that can be - D-Link DGS-3120-24TC | Product Manual - Page 293
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-4 Received (RX) window (for Bytes and Packets) Click the View Table link to display the information stands for seconds. The default value is one second. Select number of times the Switch will be polled between 20 and 200. The - D-Link DGS-3120-24TC | Product Manual - Page 294
® DGS-3120 Series Managed Switch Web UI Reference Guide value link to display the information in a line graph rather than a table. UMB_Cast (RX) To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch - D-Link DGS-3120-24TC | Product Manual - Page 295
DGS-3120 Series Managed Switch Web UI Reference Guide link to display the information in a line graph rather than a table. Transmitted (TX) To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch - D-Link DGS-3120-24TC | Product Manual - Page 296
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-8 Transmitted (TX) window (for Bytes and Packets) Click the View Table link to display the information in for seconds. The default value is one second. Select number of times the Switch will be polled between 20 and 200. The - D-Link DGS-3120-24TC | Product Manual - Page 297
DGS-3120 Series Managed Switch Web UI Reference Guide View Table link to display the information in a table rather than a line graph. Click the View Graphic link to display by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by - D-Link DGS-3120-24TC | Product Manual - Page 298
DGS-3120 Series Managed Switch Web UI Reference Guide default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default View Table link to display the information in a table rather than a line graph. Click the View Graphic link to display - D-Link DGS-3120-24TC | Product Manual - Page 299
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view this window, click - D-Link DGS-3120-24TC | Product Manual - Page 300
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. - D-Link DGS-3120-24TC | Product Manual - Page 301
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the View Table link to display the information in a table stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. 64 - D-Link DGS-3120-24TC | Product Manual - Page 302
DGS-3120 Series Managed Switch Web UI Reference Guide Mirror The Switch . This is useful for network monitoring and troubleshooting purposes. Port Mirror Settings To view this port, this can cause throughput problems. The port you are copying frames from should always support an equal or lower speed - D-Link DGS-3120-24TC | Product Manual - Page 303
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: RSPAN VLAN mirroring will only work when RSPAN is enabled (when one RSPAN VLAN has been configured with a source port). The RSPAN redirect function - D-Link DGS-3120-24TC | Product Manual - Page 304
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Tick Add or Delete to add or delete source ports. Redirect Port List Specify the output port list for the RSPAN VLAN packets. If the redirect port is a Link Aggregation port, the Link Aggregation behavior will apply to the RSPAN - D-Link DGS-3120-24TC | Product Manual - Page 305
DGS-3120 Series Managed Switch Web UI Reference Guide be deleted. If not specified, its default value is 400. Collector Address The IP address of the analyzer server. If not entry. sFlow Flow Sampler Settings On this page the user can configure the sFlow flow sampler parameters. By configuring - D-Link DGS-3120-24TC | Product Manual - Page 306
DGS-3120 Series Managed Switch Web UI Reference Guide encapsulated and forwarded to the server. If not specified, the default value is 128. Click the Apply button to accept the Settings On this page the user can configure the sFlow counter poller parameters. If the user wants to change the analyzer - D-Link DGS-3120-24TC | Product Manual - Page 307
® DGS-3120 Series Managed Switch Web UI Reference Guide forwarded SI Mode Only) Figure 11-24 Ping Test window (EI Mode Only) The user may click the Infinite times radio button, in the Repeat Pinging for field, which will tell the ping program to keep sending ICMP Echo packets to the specified IP - D-Link DGS-3120-24TC | Product Manual - Page 308
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Target IP Address Enter an IP address to be pinged. Repeat Pinging for Enter the number of times desired to attempt to Ping either the IPv4 address or the IPv6 address configured in this window. Users may enter - D-Link DGS-3120-24TC | Product Manual - Page 309
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-27 Trace Route window (EI Mode Only) The fields that can be configured are described below: Parameter Description IPv4 Address / IPv6 Address IP address of the destination station. TTL The time to live value of the trace - D-Link DGS-3120-24TC | Product Manual - Page 310
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Peripheral Device Environment The device environment feature displays the Switch internal temperature status. To view this window, click Monitoring > Peripheral > Device Environment as shown below: Figure 11-29 Device Environment window - D-Link DGS-3120-24TC | Product Manual - Page 311
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 12 Save and Tools Save Configuration / Log Stacking Information Download firmware Upload Firmware Download Configuration Upload Configuration Upload Log File Reset Reboot System Save Configuration / Log To view this window, click - D-Link DGS-3120-24TC | Product Manual - Page 312
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The number of switches in the switch stack (up to 6 total) are displayed next to the Tools drop-down menu. The icons are in the same order as their respective Unit numbers, with the Unit 1 switch corresponding to the icon in the upper - D-Link DGS-3120-24TC | Product Manual - Page 313
DGS-3120 Series Managed Switch Web UI Reference Guide Download firmware The following window is used to download firmware for the Switch. Download Firmware From TFTP This page allows the user to download firmware from a TFTP Server to the Switch and updates the switch. Figure 12-5 Download Firmware - D-Link DGS-3120-24TC | Product Manual - Page 314
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12-7 Download Firmware - HTTP window The fields that can be configured are described below: Parameter Description Unit Use the drop-down menu to select a unit for receiving the firmware. Select All for all units. - D-Link DGS-3120-24TC | Product Manual - Page 315
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Unit Use the drop-down menu to select a unit for uploading the firmware. TFTP Server IP Enter the TFTP server IP address used. IPv4 Click the radio button to enter the TFTP server IP address used. IPv6 (EI Mode Only) Click the - D-Link DGS-3120-24TC | Product Manual - Page 316
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Destination File Enter the location and name of the Destination File. Source File Enter the location and name of the Source File. Click Download to initiate the download. Download Configuration From HTTP This page allows the user to - D-Link DGS-3120-24TC | Product Manual - Page 317
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12-14 Upload Configuration - TFTP window (EI Mode Only) The fields that can be configured are described below: Parameter Description Unit Use the drop-down menu to select a unit for uploading the configuration file. TFTP Server IP - D-Link DGS-3120-24TC | Product Manual - Page 318
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Upload Log File The following window is used to upload the log file from the Switch. Upload Log To TFTP This page allows the user to upload the log file from the Switch to a TFTP Server. Figure 12-16 Upload Log - TFTP window (SI Mode Only - D-Link DGS-3120-24TC | Product Manual - Page 319
configuration. Reset System will return the Switch's configuration to the state it was when it left the factory Reset gives the option of retaining the Switch's User Accounts and History Log while resetting all other configuration parameters to their factory defaults. If the Switch is reset using - D-Link DGS-3120-24TC | Product Manual - Page 320
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12-20 Reboot System Window Selecting the Yes radio button will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Selecting the No radio button instructs the Switch not to save - D-Link DGS-3120-24TC | Product Manual - Page 321
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix Section Appendix A Mitigating -00-00," while PC B's IP address will be written into the "Target Protocol Address," shown in Table1. Table 1 ARP Payload The ARP request will be encapsulated into an Ethernet frame and sent out. As - D-Link DGS-3120-24TC | Product Manual - Page 322
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When the switch receives the frame, it will check the "Source Address" in the Ethernet frame's header. If the address is not in its Forwarding Table, the switch will learn PC A's MAC and the associated port into its Forwarding Table. In - D-Link DGS-3120-24TC | Product Manual - Page 323
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The switch will also examine the "Source Address" of the Ethernet frame and find that the address is not in the Forwarding Table. The switch will learn PC B's MAC and update its Forwarding Table. How ARP Spoofing Attacks a Network ARP - D-Link DGS-3120-24TC | Product Manual - Page 324
DGS-3120 Series Managed Switch Web UI Reference Guide A common DoS attack today can be done by associating a nonexistent or any specified MAC address to the IP address of the network's default but the users will not discover. Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can - D-Link DGS-3120-24TC | Product Manual - Page 325
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Offset Offset Ethernet Type. (Blue in Table 6, 13th and 14th bytes) The second chunk starts from Chunk 7 mask for Sender IP in ARP packet. (Green in Table 6, 29th and 30th bytes) The third chunk starts from Chunk 8 mask for Sender IP - D-Link DGS-3120-24TC | Product Manual - Page 326
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 0xA5A offset_chunk_3 0x5A5A0000 Step 5: save Save configuration. 318 - D-Link DGS-3120-24TC | Product Manual - Page 327
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix B Password Recovery Procedure This document describes the procedure for resetting passwords on D-Link Switches. Authenticating any user who tries to access networks is necessary and important. The basic authentication method - D-Link DGS-3120-24TC | Product Manual - Page 328
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category System Event Description System started up System warm start Log - D-Link DGS-3120-24TC | Product Manual - Page 329
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Firmware upgrade was unsuccessful [Unit ,] Firmware upgrade by console was unsuccessful! (Username: , IP: ) Warning Configuration successfully downloaded Configuration successfully downloaded by console( - D-Link DGS-3120-24TC | Product Manual - Page 330
Interface Stacking Console Web xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Firmware successfully uploaded Firmware successfully uploaded by console (Username: , IP: ) Informational Firmware upload was unsuccessful Firmware upload by console was unsuccessful! - D-Link DGS-3120-24TC | Product Manual - Page 331
Telnet SNMP STP DoS SSH xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Logout through Web(SSL) Web(SSL) The source IP is same as switch's interface IP but the source Mac is different 2. Source IP is the same as the switch's IP in ARP packet 3. Self IP packet detected Successful - D-Link DGS-3120-24TC | Product Manual - Page 332
AAA xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SSH server is disabled SSH server is disabled Informational Authentication or improper configuration (Username: ) 324 Warning Informational Warning Warning There are no IP and MAC if login by console. There are no - D-Link DGS-3120-24TC | Product Manual - Page 333
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful login through Web(SSL) authenticated by AAA server Login failed through Web(SSL) authenticated by AAA server Login failed through Web(SSL) due to - D-Link DGS-3120-24TC | Product Manual - Page 334
Port Security MBAC xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful Enable Admin through Telnet pass the authentication The authorized user number on a port reaches the max user limit. The authorized user number on a port is below the max user limit in a time interval( - D-Link DGS-3120-24TC | Product Manual - Page 335
WAC IMPB IP and Password Changed xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The authorized user number on whole device reaches the max user limit. The authorized user number on whole device is below the max user limit in a time interval(interval is project depended). A host - D-Link DGS-3120-24TC | Product Manual - Page 336
Loopback Dection Gratuitous ARP DHCP BPDU Protection Monitor CFM CFM Extension xStack® DGS-3120 Series Managed Switch Web UI Reference Guide cleared Multicast storm occurrence Multicast storm cleared Port shut down due to a packet storm Port loop occurred Port loop detection restarted after - D-Link DGS-3120-24TC | Product Manual - Page 337
Voice VLAN ERPS Command logging xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When a new voice device is detected in the port While the port join to the voice VLAN while the port is auto voice VLAN mode - D-Link DGS-3120-24TC | Product Manual - Page 338
DGS-3120 Series Managed Switch Web UI Reference Guide Appendix D Trap Log Entries This table lists the trap logs found on the Switch trap indicates System change operation mode from normal to exhausted. This trap indicates System change IP address detected is just sent once to - D-Link DGS-3120-24TC | Product Manual - Page 339
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide warmStart linkDown linkUp authenticationFailure risingAlarm in an agent role, has detected that the ifOperStatus object for one of its communication links is about to enter the down state from some other state (but not from the
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
 |
 |
