D-Link DGS-3120-48TC Product Manual
D-Link DGS-3120-48TC Manual
 |
View all D-Link DGS-3120-48TC manuals
Add to My Manuals
Save this manual to your list of manuals |
D-Link DGS-3120-48TC manual content summary:
- D-Link DGS-3120-48TC | Product Manual - Page 1
- D-Link DGS-3120-48TC | Product Manual - Page 2
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Information in this document is subject to change without notice. © 2010 D-Link Corporation. All rights reserved. Reproduction of this document in any manner whatsoever without the written permission of D-Link Corporation is strictly - D-Link DGS-3120-48TC | Product Manual - Page 3
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Table of Contents Intended Readers...1 Typographical Conventions...1 Notes, Notices and Cautions...1 Chapter 1 Web-based Switch Configuration 2 Introduction ...2 Login to the Web Manager...2 Web-based User Interface ...2 Areas of the - D-Link DGS-3120-48TC | Product Manual - Page 4
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Interface Settings...30 Management Settings ...33 Session Table...34 Single IP Management...35 Single IP Settings ...37 Topology ...37 Firmware Upgrade...43 Configuration File Backup/Restore...44 Upload Log File ...44 SNMP Settings ...44 - D-Link DGS-3120-48TC | Product Manual - Page 5
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MAC Notification Settings...88 MAC Address Aging Time Settings ...89 MAC Address Table ...90 ARP & FDB Table...90 L2 Multicast Control ...91 IGMP Snooping ...91 - D-Link DGS-3120-48TC | Product Manual - Page 6
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Adding an User Settings...202 Guest VLAN Settings...203 RADIUS ...204 Authentication RADIUS Server Settings ...204 RADIUS Accounting Settings ...206 RADIUS Authentication ...206 RADIUS Account Client...208 IP-MAC-Port Binding (IMPB) (EI - D-Link DGS-3120-48TC | Product Manual - Page 7
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Settings ...241 Local Enable Password Settings ...242 SSL Settings and Algorithm Settings 246 SSH User Authentication List ...248 Trusted Host Ethernet OAM Settings...276 Ethernet OAM Configuration Settings ...277 Ethernet OAM Event Log - D-Link DGS-3120-48TC | Product Manual - Page 8
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Statistics ...284 Port Statistics...284 Packet Size...292 Mirror ...294 Port Mirror Settings...294 RSPAN Settings ...294 sFlow (EI Mode Only)...296 sFlow Global Settings...296 sFlow Analyzer Server Settings ...296 sFlow Flow Sampler - D-Link DGS-3120-48TC | Product Manual - Page 9
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Intended Readers Typographical Conventions Notes, Notices and Cautions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge The DGS-3120 Series Web UI Reference Guide the manual. - D-Link DGS-3120-48TC | Product Manual - Page 10
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 1 Web-based Switch Configuration Introduction Login to the Web Manager Web-based User Interface Web Pages Introduction All software functions of the DGS-3120 Series switches can be managed, configured and monitored via the - D-Link DGS-3120-48TC | Product Manual - Page 11
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Areas of the User Interface The figure below shows the user interface. Three distinct areas divide the user interface, as described in the table. AREA 2 AREA 1 AREA 3 Area Number Area 1 Area 2 Area 3 Figure 1-2 Main Web-Manager page - D-Link DGS-3120-48TC | Product Manual - Page 12
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the - D-Link DGS-3120-48TC | Product Manual - Page 13
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 2 System Configuration Device Information System Information Settings Port Configuration PoE Serial Port Settings Warning Temperature Settings System Log configuration Time Range Settings Port Group Settings (EI Mode Only) Time - D-Link DGS-3120-48TC | Product Manual - Page 14
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-2 Device Information window (EI Mode Only) Click the Settings link to navigate to the appropriate feature page for configuration. System Information Settings The user can enter a System Name, System Location, and System Contact - D-Link DGS-3120-48TC | Product Manual - Page 15
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide System Contact Enter a contact name for the Switch, if so desired. Click the Apply button to implement changes made. Port Configuration Port Settings This page used to configure the details of the switch ports. To view the following - D-Link DGS-3120-48TC | Product Manual - Page 16
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The 1000M Full_Master and 1000M Full_Slave parameters refer to connections running a 1000BASE-T cable for connection between the Switch port and other device capable of a gigabit connection. The master setting (1000M Full_Master) will - D-Link DGS-3120-48TC | Product Manual - Page 17
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Unit Select the unit you wish to configure. From Port / To Port Select the appropriate port range used for the configuration here. Medium Type Specify - D-Link DGS-3120-48TC | Product Manual - Page 18
Jumbo Frame function on the Switch. The default is Disabled. When disabled, the maximum frame size is 1536 bytes. When enabled, the maximum frame size is 13312 bytes. Click the Apply button to implement changes made. PoE The DGS-3120-24PC and DGS-3120-48PC switches support Power over Ethernet (PoE - D-Link DGS-3120-48TC | Product Manual - Page 19
Power Disconnect Method Legacy PD Sets the limit of power to be used from the Switch's power source to PoE ports. The user may configure a Power Limit between 37W and 740W for the DGS-3120-24PC and DGS-3120-48PC. The default setting is 740W. The PoE controller uses either Deny Next Port or Deny Low - D-Link DGS-3120-48TC | Product Manual - Page 20
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-9 PoE Port Settings window The following parameters can be configured: Parameter Description Unit From Port / To Port State Time Range Priority Power Limit Select the unit you wish to configure. Select a range of ports from - D-Link DGS-3120-48TC | Product Manual - Page 21
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Class 0 - 16200mW Class 1 - 4200mW Class 2 - 7400mW Class 3 - 16200mW User Define - 35000mW Click Apply to implement changes made. The port status of all PoE configured ports is displayed in the table in the bottom half of the screen - D-Link DGS-3120-48TC | Product Manual - Page 22
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-11 Warning Temperature Settings window The fields that can be configured are described below: Parameter Description Traps State Use the drop-down menu to enable or disable the traps state option of the warning temperature - D-Link DGS-3120-48TC | Product Manual - Page 23
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Time Interval - Users who choose this method can configure a time interval by which the Switch will save the log files, in the box adjacent to this configuration field. The user may set a time between 1 and 65535 minutes. Log Trigger - - D-Link DGS-3120-48TC | Product Manual - Page 24
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Delete button to remove the specific entry. Click the Delete All button to remove all servers configured. System Log Users can view and delete the local history log as compiled by the Switch must be manually entered. Available - D-Link DGS-3120-48TC | Product Manual - Page 25
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-16 System Log & Trap Settings window (SI Mode Only) Figure 2-17 System Log & Trap Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name Enter the IP - D-Link DGS-3120-48TC | Product Manual - Page 26
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description System Severity Choose how the alerts are used from the drop-down menu. Select Log to send the alert of the Severity Type configured to the Switch's log for - D-Link DGS-3120-48TC | Product Manual - Page 27
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-20 Port Group Settings window The fields that can be configured are described entry. Time Settings Users can configure the time settings for the Switch. To view the following window, click System Configuration > Time Settings, - D-Link DGS-3120-48TC | Product Manual - Page 28
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 2-22 User Accounts Settings window To add a new user, type in a User Name and New Password and retype the same password in the Confirm New Password field. Choose the level of privilege (Admin, Operator, Power User or User) from - D-Link DGS-3120-48TC | Product Manual - Page 29
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Command Logging Settings This window is used to enable or disable the command logging settings. To view this window, click System Configuration > Command Logging Settings, as shown below: Figure 2-23 Command Logging Settings window The - D-Link DGS-3120-48TC | Product Manual - Page 30
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Within each of these topologies, each switch plays a role in the Switch stack. These roles can be set by the user per individual Switch, or if desired, can be automatically determined by the Switch stack. Three possible roles exist when - D-Link DGS-3120-48TC | Product Manual - Page 31
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide If the Backup Master has been hot removed, a new Backup Master will be chosen through the election process previously described. Switches in the stack will clear the configurations of the unit removed, and dynamically learned databases, - D-Link DGS-3120-48TC | Product Manual - Page 32
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Force Master Role Use the radio buttons to enable or disable the function. It is used to ensure the master role is unchanged when adding a new device to the current stacking topology. If the Enabled radio button is selected, the master - D-Link DGS-3120-48TC | Product Manual - Page 33
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 3 Management ARP Gratuitous ARP IPv6 Neighbor Settings (EI Mode Only) IP Interface Management Settings Session Table Single IP Management SNMP Settings Telnet Settings Web Settings ARP Static ARP Settings The Address Resolution - D-Link DGS-3120-48TC | Product Manual - Page 34
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Proxy ARP Settings (EI Mode Only) The Proxy ARP (Address Resolution Protocol) feature of the Switch will allow the Switch to reply to ARP requests destined for another device by faking its identity (IP and MAC Address) as the original ARP - D-Link DGS-3120-48TC | Product Manual - Page 35
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Gratuitous ARP Gratuitous ARP Global Settings The user source IP address that is identical to the IP that the packet is queries for. By default, . Gratuitous ARP Settings The user can configure the IP interface's gratuitous ARP parameter. - D-Link DGS-3120-48TC | Product Manual - Page 36
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-5 Gratuitous ARP Settings window The fields that can be configured are described below: Parameter Description Trap Use the drop-down menu to enable or disable the trap option. By default the trap is disabled. Log Use the - D-Link DGS-3120-48TC | Product Manual - Page 37
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Neighbor IPv6 Address Enter the neighbor IPv6 address. Link Layer MAC Address Enter the link layer MAC address. Interface Name Enter the name of the IPv6 neighbor. Tick the All check box to search for all current interfaces on the - D-Link DGS-3120-48TC | Product Manual - Page 38
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide BOOTP server to provide it with this information before using the default or previously entered settings. The following table will describe the fields that are about the System Interface. Parameter Description Interface Name Display - D-Link DGS-3120-48TC | Product Manual - Page 39
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-9 Interface Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Interface Name Enter the name of the IP interface to search for. Click the Find button to locate a - D-Link DGS-3120-48TC | Product Manual - Page 40
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the IPv4 Edit button to see the following window. Figure 3-11 IPv4 Interface Settings - Edit window The fields that can be configured are described below: Parameter Description Get IP From Use the drop-down menu to specify the - D-Link DGS-3120-48TC | Product Manual - Page 41
and/or TFTP server software instructions. The user may also consult the Upload Log File window description located in the Tools section of this manual. If the Switch is unable to complete the DHCP auto configuration, the previously saved configuration file present in the Switch's memory will be used - D-Link DGS-3120-48TC | Product Manual - Page 42
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-14 Management Settings window The fields that can be configured are described below: Parameter Description CLI Paging State Command Line Interface paging stops each page at the end of the console. This allows you to stop - D-Link DGS-3120-48TC | Product Manual - Page 43
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-15 Session Table window Click the Refresh button to refresh the display table so that new entries will appear. Single IP Management Simply put, D-Link Single IP Management is a concept that will stack switches together over - D-Link DGS-3120-48TC | Product Manual - Page 44
a SIM group, additional DGS-3120 Series switches may join the group by manually configuring the Switch to be a MS. The CS will then serve as the in band entry point for access to the MS. The CS's IP address will become the path to all MS's of the group and the CS's Administrator's password, and/or - D-Link DGS-3120-48TC | Product Manual - Page 45
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide c. Log - The Switch now supports uploading MS log files to a TFTP server. 4. The user may zoom in and zoom out when utilizing the topology window to get a better, more defined view of the configurations. Single IP Settings The Switch is - D-Link DGS-3120-48TC | Product Manual - Page 46
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-17 Single IP Management window - Tree View The Topology window holds the following information on the Data tab: Parameter Description Device Name This field will display the Device Name of the switches in the SIM group configured - D-Link DGS-3120-48TC | Product Manual - Page 47
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-18 Topology view This window will display how the devices within the Single IP Management Group connect to other groups and devices. Possible icons on this window are as follows: Icon Description Group Icon Description - D-Link DGS-3120-48TC | Product Manual - Page 48
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-19 Device Information Utilizing the Tool Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group - D-Link DGS-3120-48TC | Product Manual - Page 49
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide • Collapse - To collapse the group that will be represented by a single Device Name of the switches in the SIM group configured by the user. If no Device Name is configured by the name, it will be given the name default and tagged with the - D-Link DGS-3120-48TC | Product Manual - Page 50
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Member Switch Icon Figure 3-24 Right-clicking a Member icon The following options may appear for the user to configure: • Collapse - To collapse the group that will be represented by a single icon. • Expand - To expand the SIM group, in - D-Link DGS-3120-48TC | Product Manual - Page 51
Group • xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Add to group - Add a candidate to a group. Clicking this option will reveal the following dialog box for the user to enter a password for authentication from the Candidate Switch before being added to the SIM group. Click OK to - D-Link DGS-3120-48TC | Product Manual - Page 52
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Configuration File Backup/Restore This screen is used to upgrade configuration files from the Commander Switch to the Member Switch using a TFTP server. Member Switches will be listed in the table and will be specified by ID, Port (port - D-Link DGS-3120-48TC | Product Manual - Page 53
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide • private - Allows authorized management stations to retrieve and modify MIB objects. SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their - D-Link DGS-3120-48TC | Product Manual - Page 54
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description SNMP State Enable this option to use the SNMP feature. Click the Apply button to accept the changes made. SNMP Traps Settings Users can enable and disable - D-Link DGS-3120-48TC | Product Manual - Page 55
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-35 SNMP Linkchange Traps Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select the starting and ending ports to - D-Link DGS-3120-48TC | Product Manual - Page 56
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-36 SNMP View Table Settings window The fields that can be configured are described below: Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view - D-Link DGS-3120-48TC | Product Manual - Page 57
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-37 SNMP community Table Settings window The fields that can be configured Table Settings An SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous window. To - D-Link DGS-3120-48TC | Product Manual - Page 58
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-38 SNMP Group Table Settings window The fields that can be configured are described below: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group - D-Link DGS-3120-48TC | Product Manual - Page 59
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 3-39 SNMP Engine ID Settings window The fields that can be configured are described below: Parameter Description Engine ID To change the Engine ID, type the new Engine ID value in the space provided. The SNMP engine - D-Link DGS-3120-48TC | Product Manual - Page 60
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked. This field will require the user to enter a password. SHA - Specify that the HMAC-SHA authentication protocol will be used. This field - D-Link DGS-3120-48TC | Product Manual - Page 61
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SNMPv6 Host Table Settings (EI Mode Only) Users can configured are described below: Parameter Description Host IPv6 Address Type the IPv6 address of the remote management station that will serve as the SNMP host for the Switch. User - D-Link DGS-3120-48TC | Product Manual - Page 62
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Trap RMON Falling Alarm Trap Enable this option to use the RMON Falling Alarm Trap Feature. Click the Apply button to accept the changes made. Telnet Settings Users can configure Telnet Settings on the Switch. To view the following - D-Link DGS-3120-48TC | Product Manual - Page 63
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 4 L2 Features VLAN QinQ (EI Mode Only) Spanning Tree Link Aggregation FDB L2 Multicast Control Multicast Filtering ERPS Settings (EI Mode Only) LLDP NLB FDB Settings VLAN Understanding IEEE 802.1p Priority Priority tagging is a - D-Link DGS-3120-48TC | Product Manual - Page 64
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Switch supports Switch's default is to assign all ports to a single 802.1Q VLAN named "default." • The "default configured as either tagging or untagging. The untagging feature of IEEE 802.1Q VLANs allows VLANs to work with legacy switches - D-Link DGS-3120-48TC | Product Manual - Page 65
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide in the following two octets and consists of 3 bits of user priority, 1 bit of Canonical Format Identifier (CFI - used for but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than - D-Link DGS-3120-48TC | Product Manual - Page 66
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide switch (or switch stack). Every physical port on a switch has a PVID. 802.1Q ports are also assigned a PVID, for use within the Switch. If no VLANs are defined on the Switch, all ports are then assigned to a default switch can be configured - D-Link DGS-3120-48TC | Product Manual - Page 67
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. Other 802.1Q compliant devices on - D-Link DGS-3120-48TC | Product Manual - Page 68
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide On port-based VLANs, NICs do show below: Figure 4-4 802.1Q VLAN Settings -VLAN List Tab window Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry. Enter a page number and click - D-Link DGS-3120-48TC | Product Manual - Page 69
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-5 802.1Q VLAN Settings - Add/Edit VLAN Tab window The fields that can be configured are described below: Parameter Description VID Allow the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit - D-Link DGS-3120-48TC | Product Manual - Page 70
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-6 802.1Q VLAN Settings - Find VLAN Tab window Enter the VLAN ID number in the field offered and then click the Find button. You will be redirected to the VLAN List tab. To create, delete and configure a VLAN Batch entry click the - D-Link DGS-3120-48TC | Product Manual - Page 71
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide becoming a member of the VLAN dynamically. Use the drop-down menu to designate the port as forbidden. Click the Apply button to accept the changes made. NOTE: The Switch supports up to 4k static VLAN entries. 802.1v Protocol VLAN 802.1v - D-Link DGS-3120-48TC | Product Manual - Page 72
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Delete Group button to remove the entry completely. NOTE: The Group name value should be less than 33 characters. 802.1v Protocol VLAN Settings The user can configure Protocol VLAN settings. The lower half of the table displays - D-Link DGS-3120-48TC | Product Manual - Page 73
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Show All button to display all the Protocol VLANs configured. Click the Delete All button to remove all the entries listed. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific - D-Link DGS-3120-48TC | Product Manual - Page 74
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description GVRP State Click you want to configure. Select the starting and ending ports to use. This field is used to manually assign a PVID to a VLAN. The Switch's default is to assign all ports to the default VLAN with a - D-Link DGS-3120-48TC | Product Manual - Page 75
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide packets. If the port is specified to accept only tagged frames - as tagging, and an untagged packet is forwarded to the port for transmission, the - D-Link DGS-3120-48TC | Product Manual - Page 76
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide associate a secondary VLAN with a primary VLAN. A be configured as a layer 3 interface. The private VLAN member port cannot be configured with the traffic segmentation function. This window allows the user to configure the private - D-Link DGS-3120-48TC | Product Manual - Page 77
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: the View Private VLAN List link to view all the private VLAN. PVID Auto Assign Settings Users can enable or disable PVID Auto Assign Status. The default setting is enabled. To view - D-Link DGS-3120-48TC | Product Manual - Page 78
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Voice VLAN State The state of the voice VLAN. Voice VLAN Name The name of the voice VLAN. Voice VID The VLAN ID of the voice VLAN. Priority The priority of the voice VLAN, the range is 0 - 7. The default - D-Link DGS-3120-48TC | Product Manual - Page 79
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Mode Here the user can configure the mode of the port. Click the Apply button to accept the changes made. Voice VLAN OUI Settings This page is used to configure the user-defined voice traffic's OUI. The OUI is used to identify the - D-Link DGS-3120-48TC | Product Manual - Page 80
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide VLAN Trunk Settings Enable VLAN on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure VLAN Trunk Users can combine - D-Link DGS-3120-48TC | Product Manual - Page 81
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide (U) and Forbidden Port (F). Show VLAN Ports Users can display the VLAN ports of the Switch's viewed by VID. Enter a Port or . QinQ (EI Mode Only) Double or Q-in-Q VLANs allow network providers to expand their VLAN configurations to place - D-Link DGS-3120-48TC | Product Manual - Page 82
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide more customer LAN points without over-complicating configurations on the client's side. Not only will overcomplication be avoided, but also now the administrator has over 4000 VLANs in which over 4000 VLANs can be placed, therefore - D-Link DGS-3120-48TC | Product Manual - Page 83
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 2. All ports must be configured as Access Ports or Uplink ports. Access ports can only be Ethernet ports while Uplink ports must be Gigabit ports. 3. Provider Edge switches must allow frames of at least 1522 bytes or more, due to the - D-Link DGS-3120-48TC | Product Manual - Page 84
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description QinQ State Selecting this option enable the QinQ feature. Inner TPID Enter an Inner TPID in SP-VLAN tag here. Unit Specifies the unit ID to be configured. From Port - To Port Here the user By default the - D-Link DGS-3120-48TC | Product Manual - Page 85
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Edit button to re-configure the specific entry. Click the Delete button to remove a specific entry. Spanning Tree This Switch supports have been recently introduced to D-Link managed Ethernet switches, a brief introduction to the - D-Link DGS-3120-48TC | Product Manual - Page 86
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide link between bridges is sensitive to the status of the link. Ultimately this difference results in faster detection of failed links are considered to be P2P ports, unless manually overridden through configuration. 802.1D-1998/802.1D-2004/ - D-Link DGS-3120-48TC | Product Manual - Page 87
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-28 STP Bridge Global Settings window The fields that can be configured are described below: Parameter Description STP Status STP Version Forwarding BPDU Bridge Max Age (6 - 40) Bridge Hello Time (1 - 2) Bridge Forward Delay - D-Link DGS-3120-48TC | Product Manual - Page 88
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NNI BPDU Address Used to determine the BPDU protocol address for GVRP in service provide site. It can use 802.1d GVRP address, 802.1ad service provider GVRP address or a user defined multicast address. The range of the user defined - D-Link DGS-3120-48TC | Product Manual - Page 89
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide P2P Choosing the True parameter indicates a point-to-point (P2P) shared link. P2P ports are similar to edge ports; however they are restricted in that a P2P port must operate in full duplex. Like edge ports, P2P ports - D-Link DGS-3120-48TC | Product Manual - Page 90
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Configuration Name This name uniquely identifies the MSTI (Multiple Spanning Tree Instance). If a Configuration the VID range from configured VLANs set on the Switch. Supported VIDs on the Switch range from ID - D-Link DGS-3120-48TC | Product Manual - Page 91
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MSTP Port Information This window displays the current MSTI configuration information and can be used to update the port configuration for an MSTI ID. If a loop occurs, the MSTP function will use the port priority to select an interface - D-Link DGS-3120-48TC | Product Manual - Page 92
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 4-33 Example of Port Trunk Group The Switch treats all ports in a trunk group configured by the user, and all configuration options, including the VLAN configuration that can be applied to the Master Port, are applied to the entire link - D-Link DGS-3120-48TC | Product Manual - Page 93
® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: If any ports within the trunk group become disconnected, packets intended for the disconnected port will be load shared among the other linked ports of the link aggregation group. Port Trunking Settings On this page the user can configure - D-Link DGS-3120-48TC | Product Manual - Page 94
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > Link Aggregation > LACP Port Settings, as show below: Figure 4-35 LACP Port Settings window The fields that can be configured are described below: Parameter Description Unit From Port - D-Link DGS-3120-48TC | Product Manual - Page 95
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Static FDB Settings Unicast Static FDB Settings Users can set up static unicast forwarding on the Switch or "port number" (e.g. 5). When only entering port number, the default unit ID is 1. Click the Apply button to accept the changes - D-Link DGS-3120-48TC | Product Manual - Page 96
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-37 Multicast Static FDB Settings window The fields that can be configured to globally set MAC notification on the Switch. Users can set MAC notification for individual ports on the Switch. To view the following window, click L2 - D-Link DGS-3120-48TC | Product Manual - Page 97
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-38 MAC Notification Settings window The fields that can be configured are described below: Parameter Description State Enable or disable MAC notification globally on the Switch Interval The time in seconds between - D-Link DGS-3120-48TC | Product Manual - Page 98
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description MAC Address Aging Time MAC Address Table window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port The port to which the MAC address - D-Link DGS-3120-48TC | Product Manual - Page 99
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > FDB > ARP & FDB Table, as show below: Figure 4-41 ARP & FDB Table window (SI Mode Only) Figure 4-42 ARP & FDB Table window (EI Mode Only) The fields that can be configured are described - D-Link DGS-3120-48TC | Product Manual - Page 100
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IGMP messages sent from the device to the IGMP host or vice versa. The Switch monitors IGMP messages and discontinues forwarding multicast packets when there are no longer hosts requesting that they continue. To view the following window, - D-Link DGS-3120-48TC | Product Manual - Page 101
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide specific port/VLAN. The rate is specified in packet per second. The packets that exceed the limited rate will be dropped. Querier IP Displays the querier IP following IGMP message intervals: By default, the robustness variable is set - D-Link DGS-3120-48TC | Product Manual - Page 102
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-45 IGMP Snooping Router Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure On this page the user can configure the IGMP snooping rate - D-Link DGS-3120-48TC | Product Manual - Page 103
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Port List Here the user can enter the port list used for this configuration. VID List Here the user can enter the VID list used for this configuration. Rate Limit Here the user can enter the IGMP snooping - D-Link DGS-3120-48TC | Product Manual - Page 104
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-48 IGMP Snooping Static Group Settings window Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the - D-Link DGS-3120-48TC | Product Manual - Page 105
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-50 IGMP Snooping Group window The user may search the IGMP Snooping Group Table by either VLAN Name or VID List by entering it in the top left hand corner and clicking Find. The fields that can be configured are described - D-Link DGS-3120-48TC | Product Manual - Page 106
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries. IGMP Snooping Counter Users can view the switch's IGMP Snooping counter table. To view the - D-Link DGS-3120-48TC | Product Manual - Page 107
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide this message is sent by the router to ask if any link is requesting multicast data. There are two types of MLD query to a Layer 2 switch that is recording and sending IP multicast data. The switch needs to forward IP data to a data - D-Link DGS-3120-48TC | Product Manual - Page 108
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MLD Snooping Settings Users can configure the settings for MLD snooping. To general query transmissions. The default setting is 125 seconds. The maximum time in seconds to wait for reports from listeners. The default setting is 10 seconds - D-Link DGS-3120-48TC | Product Manual - Page 109
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide VLAN. This field is Disabled by default. Report Suppression Here the user can enable or disable the report link, the following page will appear: Figure 4-56 MLD Snooping Router Port Settings window The fields that can be configured - D-Link DGS-3120-48TC | Product Manual - Page 110
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Static Router Port This section is used and return to the previous page. MLD Snooping Rate Limit Settings Users can configure the rate limit of the MLD control packet that the switch can process on a specific port or VLAN in this page. - D-Link DGS-3120-48TC | Product Manual - Page 111
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-58 MLD Snooping Static Group Settings window The fields that can be configured Router Port Users can display which of the Switch's ports are currently configured as router ports in IPv6. A router port configured by a user (using - D-Link DGS-3120-48TC | Product Manual - Page 112
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-60 MLD Router Port window Enter a VID Router Port (D) and Forbidden Router Port (F). MLD Snooping Group Users can view MLD Snooping Groups present on the Switch. MLD Snooping is an IPv6 function comparable to IGMP Snooping for - D-Link DGS-3120-48TC | Product Manual - Page 113
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Clear All Data Driven button to delete all MLD snooping groups which is learned by the Data Driven feature of specified VLANs. MLD Snooping Forwarding Table This page displays the switch that can be configured are described below - D-Link DGS-3120-48TC | Product Manual - Page 114
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide VID List Users are to set up a source port, where the multicast traffic is entering the switch, and then set the ports where the incoming multicast traffic is to be sent. The source port cannot be a recipient port and if configured - D-Link DGS-3120-48TC | Product Manual - Page 115
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 4. The normal display of configured VLANs will not display configured Multicast VLANs. 5. Once an ISM VLAN is enabled, the corresponding IGMP snooping state of this VLAN will also be enabled. Users cannot disable the IGMP feature for an - D-Link DGS-3120-48TC | Product Manual - Page 116
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide On this page the user can configure the IGMP snooping multicast default setting is None. Replace Priority Specify that the packet's priority will be changed by the switch Click the Profile List link to configure the IGMP Snooping Multicast - D-Link DGS-3120-48TC | Product Manual - Page 117
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-68 IGMP Snooping Multicast VLAN Settings - Edit window The fields that can be configured are described below: Parameter Description VLAN Name This option will display the VLAN name of the VLAN configured. State Use the - D-Link DGS-3120-48TC | Product Manual - Page 118
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-69 IGMP Snooping Multicast VLAN Group List Settings window The fields that can be configured link to view the IGMP Snooping Multicast VLAN Settings. MLD Multicast Group Profile Settings Users can add, delete, or configure - D-Link DGS-3120-48TC | Product Manual - Page 119
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-71 Multicast Group Profile Multicast Address Settings window The fields that can be configured . Enter the VID value used. The user can select this option to enable the default setting is None. Tick the check box to specify - D-Link DGS-3120-48TC | Product Manual - Page 120
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide based on the remap priority. This flag will entry. Click the Delete button to remove the specific entry. Click the Profile List link to configure the MLD Snooping Multicast VLAN Settings for the specific entry. After clicking the Edit - D-Link DGS-3120-48TC | Product Manual - Page 121
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide multicast VLAN. Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made. Click the - D-Link DGS-3120-48TC | Product Manual - Page 122
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-75 IPv4 Multicast Profile Settings window The fields that can be configured are described below: Parameter Description Profile ID Enter a Profile ID between 1 and 24. Profile Name Enter a name for the IP Multicast Profile - D-Link DGS-3120-48TC | Product Manual - Page 123
DGS-3120 Series Managed Switch Web UI Reference Guide To view the following window, click L2 Features > Multicast Filtering > IPv4 Multicast Filtering > IPv4 Limited Multicast Range Settings, as show below: Figure 4-77 IPv4 Limited Multicast Range Settings window The fields that can be configured - D-Link DGS-3120-48TC | Product Manual - Page 124
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Max Group If the checkbox Infinite is not selected, the user can enter a Max Group value. Infinite Tick the check box to enable or disable the use of the Infinite value. Action Use the drop-down - D-Link DGS-3120-48TC | Product Manual - Page 125
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-80 Multicast Address Group List Settings window The fields that can be configured specific entry. IPv6 Limited Multicast Range Settings Users can configure the ports and VLANs on the Switch that will be involved in the Limited - D-Link DGS-3120-48TC | Product Manual - Page 126
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Add button to add a new navigate to a specific page when multiple pages exist. IPv6 Max Multicast Group Settings Users can configure the ports and VLANs on the switch that will be a part of the maximum filter group, up to a - D-Link DGS-3120-48TC | Product Manual - Page 127
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description VLAN Name/VID List The VLAN to which the specified filtering action applies. Tick the All check box to apply - D-Link DGS-3120-48TC | Product Manual - Page 128
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-84 ERPS Settings Window The fields that can be configured are described below: Parameter Description ERPS State Here the user can enable or disable the ERPS State. ERPS Log Here the user can enable or disable the ERPS Log - D-Link DGS-3120-48TC | Product Manual - Page 129
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click on the Edit button to re-configure the specific entry. Click on the - D-Link DGS-3120-48TC | Product Manual - Page 130
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide function. The default ring MEL is 1. Holdoff Time Specifies the hold-off time of the R-APS function. The default hold-off Sub-Ring Information link, the following window will appear: The fields that can be configured are described below - D-Link DGS-3120-48TC | Product Manual - Page 131
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the LLDP Global Settings, as show - D-Link DGS-3120-48TC | Product Manual - Page 132
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide LLDP Port Settings On this page the user can configure the LLDP port parameters. To nor receive LLDP frames. The default value is TX And RX. Subtype Use the drop-down menu to select the type of the IP address information will be sent. - D-Link DGS-3120-48TC | Product Manual - Page 133
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: The IPv4 or IPv6 address entered here should be an existing LLDP management IP address. LLDP Management Address List On this page the user can view the LLDP management address list. To view the following window, click L2 Features > - D-Link DGS-3120-48TC | Product Manual - Page 134
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-88 LLDP Basic TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select the starting and ending ports to use. From Port / To Port Select the port range to use for - D-Link DGS-3120-48TC | Product Manual - Page 135
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-89 LLDP Dot1 TLVs Settings window The fields that can be configured -down menu to enable or disable, and configure the Dot1 TLV Protocol Identity option. After enabling this option the user can select to either use EAPOL, LACP, - D-Link DGS-3120-48TC | Product Manual - Page 136
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-90 LLDP Dot3 TLVs Settings window The fields that can be configured are described below: Parameter Description Unit Select the starting and ending ports to use. From Port / To Port Use the drop-down menu to select - D-Link DGS-3120-48TC | Product Manual - Page 137
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-91 LLDP Statistics System window LLDP Local Port Information The LLDP Local Port Information page displays the information on a per port basis currently available - D-Link DGS-3120-48TC | Product Manual - Page 138
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-93 LLDP Local Port Information - Show . LLDP Remote Port Information This page displays port information learned from the neighbors. The switch receives packets from a remote station but is able to store the information as local. - D-Link DGS-3120-48TC | Product Manual - Page 139
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 4-96 LLDP Remote Port Information - Show Normal window Click the - D-Link DGS-3120-48TC | Product Manual - Page 140
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 5 L3 Features IPv4 Default Route Settings (SI Mode Only) IPv4 Static/Default Route Settings (EI Mode Only) IPv4 Route Table IPv6 Static/Default Route Settings (EI Mode Only) IP Forwarding Table IPv4 Default Route Settings (SI Mode - D-Link DGS-3120-48TC | Product Manual - Page 141
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 5-2 IPv4 Static/Default Route Settings window The fields that can be configured are described below: Parameter Description IP Address This field allows the entry of an IPv4 address to be assigned to the Static or Default - D-Link DGS-3120-48TC | Product Manual - Page 142
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IPv6 Static/Default Route Settings (EI Mode Only) A static entry of an IPv6 address can be entered into the Switch's routing table for IPv6 formatted addresses. To view the following window, click L3 Features > IPv6 Static/Default Route - D-Link DGS-3120-48TC | Product Manual - Page 143
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 6 QoS 802.1p Settings Bandwidth Control Traffic Control Settings DSCP HOL Blocking Prevention Scheduling Settings The Switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation - D-Link DGS-3120-48TC | Product Manual - Page 144
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Understanding QoS The Switch supports 802.1p priority queuing. The Switch has eight priority queues. These priority queues are numbered from 7 (Class 7) - the highest priority queue - to 0 (Class 0) - the lowest priority queue. The eight - D-Link DGS-3120-48TC | Product Manual - Page 145
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-2 Default Priority Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select the starting and ending ports to use. - D-Link DGS-3120-48TC | Product Manual - Page 146
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-3 802.1p User Priority Settings window Once a priority has been assigned to the port groups on the Switch, then a Class may be assigned to each of the eight levels of 802.1p priorities using the drop-down menus on this window. - D-Link DGS-3120-48TC | Product Manual - Page 147
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-4 Bandwidth Control Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop-down menu to select the port - D-Link DGS-3120-48TC | Product Manual - Page 148
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Queue Bandwidth Control Settings To view this window, Control Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop - D-Link DGS-3120-48TC | Product Manual - Page 149
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide malfunctioning device, such as a faulty network card. Thus, switch throughput problems will arise and consequently affect the overall performance of the switch network. To help rectify this packet storm, the Switch will monitor and - D-Link DGS-3120-48TC | Product Manual - Page 150
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide From Port / To Port Action Use the drop-down menu to select the port range to use for this configuration. Select the method of traffic control from the pull-down menu. The choices are: Drop - Utilizes the hardware Traffic Control - D-Link DGS-3120-48TC | Product Manual - Page 151
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: Traffic Control cannot be implemented on ports that are set for Link Aggregation (Port Trunking). NOTE: Ports that are in the Shutdown Forever mode will be seen as Discarding in Spanning Tree windows and implementations though these - D-Link DGS-3120-48TC | Product Manual - Page 152
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Unit Select the unit you want to configure. From Port / To Port Use the drop-down menu to select a range of port to configure. State Enable/disable to trust DSCP. By default, DSCP trust is disabled. Click - D-Link DGS-3120-48TC | Product Manual - Page 153
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 6-9 DSCP Map Settings - DSCP DSCP window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure performance. On this page the user can enable or disable HOL - D-Link DGS-3120-48TC | Product Manual - Page 154
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide HOL Blocking Prevention State Click the radio buttons to enable of disable the HOL blocking prevention global settings. Click the Apply button to accept the changes made. Scheduling Settings QoS Scheduling This window allows the user - D-Link DGS-3120-48TC | Product Manual - Page 155
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide QoS Scheduling Mechanism Changing the output scheduling used for the hardware queues in the Switch can customize QoS. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower - D-Link DGS-3120-48TC | Product Manual - Page 156
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 7 ACL ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter Egress Access Profile List (EI Mode Only) Egress ACL Flow Meter (EI Mode Only) ACL Configuration Wizard The ACL Configuration - D-Link DGS-3120-48TC | Product Manual - Page 157
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Any - Selecting this option will include any starting category to this rule. MAC Address - Selecting this option will allow the user to enter a range of MAC addresses for this rule. IPv4 Address - Selecting this option will allow the - D-Link DGS-3120-48TC | Product Manual - Page 158
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-2 Access Profile List window Click -based) profile configuration, • one for IPv6 address-based profile configuration, • one for IPv4 address-based profile configuration, and • one for packet content profile configuration. Add an - D-Link DGS-3120-48TC | Product Manual - Page 159
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter or part of the criterion for forwarding. Ethernet Type Selecting this option instructs the Switch to examine the Ethernet type value in each frame's header. Click the - D-Link DGS-3120-48TC | Product Manual - Page 160
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the - D-Link DGS-3120-48TC | Product Manual - Page 161
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace Priority Tick this check box to replace the Priority value in the adjacent field. Replace DSCP (0-63) Select this option to instruct the Switch to replace the DSCP value (in a packet that meets the selected criteria) with the - D-Link DGS-3120-48TC | Product Manual - Page 162
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Select ACL Type 802.1Q VLAN IPv4 DSCP IPv4 Source IP Mask IPv4 Destination IP Mask Protocol Enter a - D-Link DGS-3120-48TC | Product Manual - Page 163
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value. Select IGMP to instruct the Switch The user may choose between urg (urgent), ack (acknowledgement), psh (push), rst (reset), syn Specify that the rule applies to the IP protocol ID traffic. User Define - Specify the Layer 4 part - D-Link DGS-3120-48TC | Product Manual - Page 164
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide configured are described below: Parameter Description Access ID (1-256) Action Type in a unique identifier number for this access. This value can be set from 1 to 256. Auto Assign - Ticking this check box will instruct the Switch - D-Link DGS-3120-48TC | Product Manual - Page 165
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide defined in the config mirror port command. Port Mirroring must be enabled and a target port must be set. Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet to the value - D-Link DGS-3120-48TC | Product Manual - Page 166
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-13 Add ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Profile ID Select ACL Type IPv6 Class IPv6 Flow Label IPv6 TCP IPv6 UDP ICMP Enter a unique identifier number - D-Link DGS-3120-48TC | Product Manual - Page 167
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide IPv6 Destination Mask The user may specify an IP address mask for the destination IPv6 address by ticking the corresponding check box and entering the IP address mask. Click the Select button to select an ACL type. Click the Create - D-Link DGS-3120-48TC | Product Manual - Page 168
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-16 Add Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Action Priority (0-7) Replace Priority Replace DSCP (0-63) Type in a unique identifier number for - D-Link DGS-3120-48TC | Product Manual - Page 169
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace ToS Precedence (0-7) Specify that the IP precedence of the outgoing packet is changed with the new value. If used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter - D-Link DGS-3120-48TC | Product Manual - Page 170
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide . Figure 7-18 Add ACL Profile (Packet Content ACL) The fields that can be configured are described below: Parameter Description Profile ID Select ACL Type Packet Content Enter a unique identifier number for this profile set. This - D-Link DGS-3120-48TC | Product Manual - Page 171
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide offset_chunk_1 0 0x0000ffff will match packet byte offset,0,1 NOTE: Only one packet_content_mask profile can be created. With this advanced unique Packet Content Mask (also known as Packet Content Access Control List ACL), the D-Link - D-Link DGS-3120-48TC | Product Manual - Page 172
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-21 Add Access Rule (Packet Content ACL) The fields that can be configured are described below: Parameter Description Access ID (1-256) Action Priority (0-7) Replace Priority Replace DSCP (0-63) Type in a unique identifier - D-Link DGS-3120-48TC | Product Manual - Page 173
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Replace ToS Precedence Specify that the IP precedence of the outgoing packet is changed with the new (0-7) value. If used without an action priority, the packet is sent to the default TC. Time Range Name Tick the check box and enter - D-Link DGS-3120-48TC | Product Manual - Page 174
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Users may globally enable or disable the CPU Interface Filtering State mechanism by using the radio buttons to change the running state. Choose Enabled to enable CPU packets to be scrutinized by the Switch and Disabled to disallow this - D-Link DGS-3120-48TC | Product Manual - Page 175
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-24 Add CPU ACL Profile (Ethernet ACL) The fields that can be configured Select IPv4 to instruct the Switch to examine the IP address in each frame's header. Select IPv6 to instruct the Switch to examine the IP address in each - D-Link DGS-3120-48TC | Product Manual - Page 176
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the - D-Link DGS-3120-48TC | Product Manual - Page 177
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description IPv4 ACL Profile The window shown below is the Add CPU ACL Profile window for IP (IPv4). To use specific filtering masks in this ACL profile, click the packet - D-Link DGS-3120-48TC | Product Manual - Page 178
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-29 Add CPU ACL Profile (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID (1-5) Select ACL Type 802.1Q VLAN IPv4 DSCP Source IP Mask Destination IP Mask Protocol Enter a - D-Link DGS-3120-48TC | Product Manual - Page 179
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select Type to further specify that the access profile will apply an ICMP type value, or specify Code to further specify that the access profile will apply an ICMP code value. Select IGMP to instruct the Switch IP Protocol ID Traffic. User - D-Link DGS-3120-48TC | Product Manual - Page 180
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-31 CPU Access Rule List (IPv4 ACL) appear: Figure 7-32 Add CPU Access Rule (IPv4 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-100) Action VLAN Name Time Range Name Type - D-Link DGS-3120-48TC | Product Manual - Page 181
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Ports Ticking the All Ports check box will denote all ports on the Switch. Click the Apply button to accept the changes made. Click the - D-Link DGS-3120-48TC | Product Manual - Page 182
Checking this field will instruct the Switch to examine the flow label field of the IPv6 header. This flow label field is used by a source to label sequences of packets such as non-default quality of service or real time service packets. IPv6 Source Mask The user may specify an IP address mask for - D-Link DGS-3120-48TC | Product Manual - Page 183
be filtered. Flow Label Configuring this field, in hex form, will instruct the Switch to examine the flow label field of the IPv6 header. This flow label field is used by a source to label sequences of packets such as non-default quality of service or real time service packets. Time Range Name - D-Link DGS-3120-48TC | Product Manual - Page 184
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide configured are described below: Parameter Description Profile ID (1-5) Select ACL Type Offset Here the user can instruct the Switch to examine the IP address in each frame's header. Select IPv6 to instruct the Switch to examine the IP - D-Link DGS-3120-48TC | Product Manual - Page 185
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value specified: 0-15 - Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte. 16-31 - Enter a - D-Link DGS-3120-48TC | Product Manual - Page 186
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-42 Add CPU Access Rule (Packet Content ACL) The fields that can be configured access profile are not forwarded by the Switch and will be filtered. Offset This field will instruct the Switch to mask the packet header beginning - D-Link DGS-3120-48TC | Product Manual - Page 187
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 7-44 ACL Finder window The fields that can be configured are described below: Parameter Description Profile ID Use the the user to find normal ACL rules. CPU - Allow the user to find CPU ACL rules. Egress - Allow the user to find - D-Link DGS-3120-48TC | Product Manual - Page 188
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide trTCM - Two Rate Three Color Marker. This, along with the srTCM, are two methods available on the switch for metering and marking packet flow. The trTCM meters and IP flow and marks it as a color based on the flow's surpassing of two - D-Link DGS-3120-48TC | Product Manual - Page 189
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-45 ACL Flow Meter The fields that can be configured are described below: Parameter Description Profile ID Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name - D-Link DGS-3120-48TC | Product Manual - Page 190
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Profile ID Here the user can enter the Profile ID for the flow meter. Profile Name Here the user can enter the Profile Name for the flow meter. Access ID - D-Link DGS-3120-48TC | Product Manual - Page 191
® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-47 ACL Flow meter Display window Click the - D-Link DGS-3120-48TC | Product Manual - Page 192
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Profile Name Select ACL Type Source MAC Mask header and use this as the full or partial criterion for forwarding. Selecting this option instructs the Switch to examine the 802.1p priority value of each packet header and use this as the - D-Link DGS-3120-48TC | Product Manual - Page 193
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide After clicking the Add Rule button, the following page will appear: Figure 7-51 Add Egress Access Rule window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Ethernet Type - D-Link DGS-3120-48TC | Product Manual - Page 194
® DGS-3120 Series Managed Switch Web UI Reference Guide when this access rule will be implemented on the Switch. Counter Here the user can select the counter. By checking the counter, the administrator can see how many times that the rule was hit. Port When a range of ports is to be configured - D-Link DGS-3120-48TC | Product Manual - Page 195
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-53 Add Egress ACL Profile window (IPv4 ACL) The fields that can be configured are described below: Parameter Description Profile ID Profile Name Select ACL Type 802.1Q VLAN IPv4 DSCP IPv4 Source IP Mask IPv4 Destination IP - D-Link DGS-3120-48TC | Product Manual - Page 196
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select IGMP to instruct the Switch . The user may choose between urg (urgent), ack (acknowledgement), psh (push), rst (reset), syn - Specify that the rule applies to the IP protocol ID traffic. User Define - Specify the Layer 4 part mask - D-Link DGS-3120-48TC | Product Manual - Page 197
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide configured are described below: Parameter Description Access ID (1-128) DSCP Action Type in a unique identifier number for this access. This value can be set from 1 to 128. Auto Assign - Ticking this check box will instruct the Switch - D-Link DGS-3120-48TC | Product Manual - Page 198
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered. Priority (0-7) Tick the corresponding check box if you want to re-write the 802.1p default priority of a packet - D-Link DGS-3120-48TC | Product Manual - Page 199
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-58 Add Egress ACL Profile window (IPv6 ACL) The fields that can be configured are described below: Parameter Description Profile ID Profile Name Select ACL Type IPv6 Class IPv6 TCP IPv6 UDP ICMP Enter a unique identifier - D-Link DGS-3120-48TC | Product Manual - Page 200
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Select button to select an ACL type. Click the Create button to create a profile. Click the - D-Link DGS-3120-48TC | Product Manual - Page 201
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 7-61 Add Egress Access Rule (IPv6 ACL) The fields that can be configured are described below: Parameter Description Access ID (1-128) Class Action Priority (0-7) Replace DSCP (0-63) Time Range Name Type in a unique identifier - D-Link DGS-3120-48TC | Product Manual - Page 202
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Counter Here the user can select the counter. By checking the counter, the administrator can see how many times that the rule was hit. Ports When a range of ports is to be configured (EI Mode Only) This window is used to configure the - D-Link DGS-3120-48TC | Product Manual - Page 203
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find button to locate a Egress ACL Flow Meter Configuration window The fields that can be configured are described below: Parameter Description Profile ID Profile Name Access ID Mode Here the user can enter the Profile - D-Link DGS-3120-48TC | Product Manual - Page 204
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide equal or less than PIR. PIR - Specify the yellow packet flow. Yellow packet flows may have excess packets permitted through or dropped. Users may replace the DSCP field of these packets by checking its radio button and entering a new - D-Link DGS-3120-48TC | Product Manual - Page 205
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 8 Security 802.1X RADIUS IP-MAC-Port Binding (IMPB) (EI Mode Only The IEEE 802.1X standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local - D-Link DGS-3120-48TC | Product Manual - Page 206
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator ( - D-Link DGS-3120-48TC | Product Manual - Page 207
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Process Utilizing the three roles stated above, the 802.1X protocol provides a stable and secure way of authorizing and authenticating users attempting to access the network. Only EAPOL traffic is allowed to pass through - D-Link DGS-3120-48TC | Product Manual - Page 208
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Host-Based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create "logical" Ports, one for each attached device that required access to the LAN. The Switch would - D-Link DGS-3120-48TC | Product Manual - Page 209
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 802.1X Port Settings Users can configure the 802.1X authenticator port settings. To view this window, click Security > 802.1X > 802.1X Port Settings as shown below: Figure 8-10 802.1X Port Settings The fields that can be configured are - D-Link DGS-3120-48TC | Product Manual - Page 210
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide TxPeriod ReAuthPeriod ReAuthentication Port Control This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default - D-Link DGS-3120-48TC | Product Manual - Page 211
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-11 802.1X User Settings window The fields that can be configured are described below: Parameter Description 802.1X User The user can enter an 802.1X user's username in here. Password The user can enter an 802.1X user's - D-Link DGS-3120-48TC | Product Manual - Page 212
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Limitations Using the Guest VLAN 1. Ports supporting , to set an 802.1X guest VLAN, the user must first configure a normal VLAN, which can be enabled here for the Switch allows the user to facilitate centralized user administration as - D-Link DGS-3120-48TC | Product Manual - Page 213
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-14 Authentication RADIUS Server Settings window (SI Mode Only) Figure 8-15 Authentication RADIUS Server Settings window (EI Mode Only) The fields that can be configured are described below: Parameter Description Index Server - D-Link DGS-3120-48TC | Product Manual - Page 214
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Confirm Key Confirm the key the same as that of the RADIUS server. Click the Apply button to accept the changes made. RADIUS Accounting Settings Users can configure the state of the specified RADIUS accounting service. To view this - D-Link DGS-3120-48TC | Product Manual - Page 215
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-17 RAIUS Authentication window The user may also select the desired time interval to update the statistics, between 1s and 60s, where "s" stands for seconds. The default value is one second. The fields that can be configured - D-Link DGS-3120-48TC | Product Manual - Page 216
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide user may also select the desired time interval to update the statistics, between 1s and 60s, where "s" stands for seconds. The default value is one second. The fields that can be configured accounting client. The IP address of the RADIUS - D-Link DGS-3120-48TC | Product Manual - Page 217
access an IP-MAC binding enabled port, the system will block the access by dropping its packet. For the xStack® DGS-3120 series of switches, active and inactive entries use the same database. The maximum number of entries is 510. The creation of authorized users can be manually configured by CLI or - D-Link DGS-3120-48TC | Product Manual - Page 218
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide MAC-port binding configuration set on the Switch. The default is Disabled. DHCP Snooping State Click the radio buttons to enable or disable DHCP snooping for IP-MAC-port binding. The default is Disabled. Recover Learning Ports Enter - D-Link DGS-3120-48TC | Product Manual - Page 219
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide legal IP packets are forwarded, while the illegal IP packets are dropped. When IP Inspection is enabled, and ARP Inspection is disabled, all non-IP packets (Ex. L2 packets, or ARP) are forwarded by default. The default value is Disabled. - D-Link DGS-3120-48TC | Product Manual - Page 220
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-22 MAC Block List The fields that can be configured are described below: Entry Settings Users can configure the maximum DHCP snooping entry for ports on this page. To view this window, click Security > IP-MAC-Port Binding - D-Link DGS-3120-48TC | Product Manual - Page 221
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide supported. In MAC-based access control, MAC user the Switch. 3. Ports that have been enabled for Link Switch. The user can set the running state, method of authentication, RADIUS password, view the Guest VLAN configuration to be 213 - D-Link DGS-3120-48TC | Product Manual - Page 222
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide associated with the MAC-based access control function of the Switch, and configure ports to be enabled or disabled for the MAC-based access control feature of the Switch. Please remember, ports enabled for certain other features, listed - D-Link DGS-3120-48TC | Product Manual - Page 223
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Trap State Use the drop-down menu to enable or disable trap state. Log State Use the drop-down menu to enable or disable log state. Max User Enter the maximum amount of users of the Switch. VLAN Name Enter the name of the - D-Link DGS-3120-48TC | Product Manual - Page 224
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Find by MAC button to locate a specific entry based on the MAC address entered. Click the Find by VLAN button to locate a specific - D-Link DGS-3120-48TC | Product Manual - Page 225
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The Switch can be the authentication server itself and do the authentication based on a local database, or be a RADIUS client and perform the authentication process via the RADIUS protocol with a remote RADIUS server. The client user - D-Link DGS-3120-48TC | Product Manual - Page 226
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2. Certain functions exist on the - D-Link DGS-3120-48TC | Product Manual - Page 227
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC Global Settings Users can configure the Switch users trying to access the network via the switch. This RADIUS server must have already been pre-assigned by the administrator the WAC HTTPS protocol. The default value is 443. HTTPS cannot - D-Link DGS-3120-48TC | Product Manual - Page 228
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC User Settings Users can view and set local database user accounts for Web authentication. To view this window, click Security > Web-based Access Control (WAC) > WAC User Settings as shown below: Figure 8-31 WAC User Settings window - D-Link DGS-3120-48TC | Product Manual - Page 229
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-32 WAC Port Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure port will never be checked. The default value is infinite. Block Time (0- - D-Link DGS-3120-48TC | Product Manual - Page 230
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide WAC Authentication State Users can view and delete the hosts for Web authentication. for multiple authentication to be supported on the Switch. Compound Authentication Settings Users can configure Authorization Network State Settings and - D-Link DGS-3120-48TC | Product Manual - Page 231
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-34 Compound Authentication Settings window (SI Mode Only) Figure 8-35 Compound Authentication Settings window (EI Mode Only) The fields that can be configured are described below: 223 - D-Link DGS-3120-48TC | Product Manual - Page 232
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Authorization Network State Click the radio buttons to enable of disable the Authorization Network State. Authentication Server Failover Click the radio buttons to configure Settings (EI Mode Only) Users can - D-Link DGS-3120-48TC | Product Manual - Page 233
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-36 Compound Authentication Guest VLAN Settings window The fields that can be configured are described below: Parameter Description VLAN Name Click the button and assign a VLAN as a Guest VLAN. The VLAN must be an existing - D-Link DGS-3120-48TC | Product Manual - Page 234
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-37 Port Security Settings window The fields that can be configured are DeleteOnReset - The locked addresses will not age out until the Switch has been reset or rebooted. Max Learning Address Specify the maximum value of port - D-Link DGS-3120-48TC | Product Manual - Page 235
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-38 Port Security Port-VLAN Settings window Click the Apply button to accept the changes made. Click the - D-Link DGS-3120-48TC | Product Manual - Page 236
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-40 Port Security Entries window The fields that can be configured Prevention Settings The user can configure the spoofing configured are described below: Parameter Description Gateway IP Address Enter the gateway IP - D-Link DGS-3120-48TC | Product Manual - Page 237
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Gateway MAC Address Enter the gateway MAC address to help prevent ARP Spoofing. Ports Enter the port numbers that this feature applies to. Alternatively the user can select All Ports to apply this feature to all the ports of the switch - D-Link DGS-3120-48TC | Product Manual - Page 238
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description BPDU Attack Protection State Click the radio buttons to enable or disable the BPDU Attack Protection state. Trap State Specify when a trap will - D-Link DGS-3120-48TC | Product Manual - Page 239
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-43 Loopback Detection Settings window The fields that can be configured are described below: Parameter Description LBD State Use the radio button to enable or disable loopback detection. The default is Disabled. Mode Use - D-Link DGS-3120-48TC | Product Manual - Page 240
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-44 Traffic Segmentation Settings window The fields that can be configured are described below: Parameter Description Port List Here the user User Interface, was created as a data-link /IP (NBT). If the network administrator - D-Link DGS-3120-48TC | Product Manual - Page 241
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-45 NetBIOS Filtering Settings window The fields that can be configured are described below: Parameter Description NetBIOS Filtering Ports Select the appropriate port to include in the NetBIOS filtering configuration. Ports - D-Link DGS-3120-48TC | Product Manual - Page 242
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-46 DHCP Server Screening Port Settings window The fields that can be configured are described below: Parameter Description Filter DHCP Server Trap Log State Enable or disable this feature. Illegal Server Log Suppress - D-Link DGS-3120-48TC | Product Manual - Page 243
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description Server IP Address The IP address of the DHCP server to be permitted. Client's MAC Address The MAC address of the DHCP client. Ports The port numbers of - D-Link DGS-3120-48TC | Product Manual - Page 244
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide order preferable, and defined by the user for normal user authentication on the Switch, and may contain up to eight authentication techniques. When a user attempts to access the Switch, the Switch will select the first technique listed - D-Link DGS-3120-48TC | Product Manual - Page 245
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Authentication Policy Settings Users can enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication - D-Link DGS-3120-48TC | Product Manual - Page 246
® DGS-3120 Series Managed Switch Web UI Reference Guide Method List and Enable Method List for authentication for users utilizing the Console (Command Line Interface) application, the Telnet application, SSH, and the Web (HTTP) application. Login Method List Using the pull-down menu, configure an - D-Link DGS-3120-48TC | Product Manual - Page 247
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-53 Authentication Server Group Settings - Edit Server Group window To add an Authentication Server Host to the list, enter its name in the Group Name field, IP address in the IP Address field, use the drop-down menu to choose the - D-Link DGS-3120-48TC | Product Manual - Page 248
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-54 Authentication Server Settings window The fields that can be configured are described below: Parameter Description IP Address The IP address of the remote server host to add. Protocol The protocol used by the server - D-Link DGS-3120-48TC | Product Manual - Page 249
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-55 Login Method Lists Settings window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the Delete button corresponding to the - D-Link DGS-3120-48TC | Product Manual - Page 250
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful authentication using any of these methods will give the user an "Admin" privilege. NOTE: To set the Local Enable Password, see the next section, entitled Local Enable Password. To view this window, click Security > Access - D-Link DGS-3120-48TC | Product Manual - Page 251
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view this window, click Security > Access Authentication Control > Local Enable Password Settings as shown below: Figure 8-57 Local Enable Password Settings window The fields that can be configured are described below: Parameter - D-Link DGS-3120-48TC | Product Manual - Page 252
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide TFTP server. The Switch supports SSLv3. Other versions of SSL may not be compatible with this Switch and may cause problems upon authentication and transfer of messages from client to host. The SSL Settings window located on the next page - D-Link DGS-3120-48TC | Product Manual - Page 253
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Apply button to accept the changes made. To set up the SSL cipher suite function on the Switch, configure the parameters in the SSL Cipher suite Settings section described below: Parameter Description RSA with RC4_128_MD5 - D-Link DGS-3120-48TC | Product Manual - Page 254
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide three choices as to the method SSH will use to authorize the user, which are Host Based, Password, and Public Key. 3 Configure the encryption algorithm that SSH will use to encrypt and decrypt messages sent between the SSH client and the - D-Link DGS-3120-48TC | Product Manual - Page 255
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To view this window, click Security > SSH > SSH Authentication method and Algorithm Settings as shown below: Figure 8-60 SSH Authentication Method and Algorithm Settings window The fields that can be configured for SSH Authentication - D-Link DGS-3120-48TC | Product Manual - Page 256
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Twofish128 Use the check box to enable or disable the twofish128 encryption algorithm. The default is enabled. Twofish192 Use the check box to enable or disable the twofish192 encryption algorithm. The default is enabled. Twofish256 - D-Link DGS-3120-48TC | Product Manual - Page 257
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide attempting to access the Switch. Host Based - This parameter should be chosen if the administrator wishes to use a remote SSH server for authentication purposes. Choosing this parameter requires the user to input the following - D-Link DGS-3120-48TC | Product Manual - Page 258
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-63 Trusted Host window (EI Mode Only) When the user clicks the Edit button, one will be able to edit the service allowed to the selected host. The fields that can be configured are described below: Parameter Description - D-Link DGS-3120-48TC | Product Manual - Page 259
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide stopped, the Switch will again begin accepting all packets. Yet, if the checking shows that there continues to be too many packets flooding the Switch, it will stop accepting all ARP and IP broadcast packets and packets from untrusted IP - D-Link DGS-3120-48TC | Product Manual - Page 260
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 8-65 Safeguard Engine Settings window The fields that can be configured Switch when the CPU utilization reaches a high rate. The user may select: Fuzzy - If selected, this function will instruct the Switch to minimize the IP and - D-Link DGS-3120-48TC | Product Manual - Page 261
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 9 Network Application DHCP SNTP Flash File System Settings DHCP DHCP Relay DHCP Relay Global Settings Users can enable and configure enable or disable the DHCP Relay service on the Switch. The default is Disabled. This field allows - D-Link DGS-3120-48TC | Product Manual - Page 262
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Agent Information Option 82 on the Switch. The default is Disabled. Enabled -When this and the IP address of the relay agent (if the relay agent is configured), to DHCP Relay Option 60 state. Here the user can enable or disable the use of - D-Link DGS-3120-48TC | Product Manual - Page 263
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide enable - Select this option to enable the DHCP Relay and the information-checking feature is enabled, the Switch drops the packet because it is invalid. However, in some instances, users may configure a client with the option 82 field. In - D-Link DGS-3120-48TC | Product Manual - Page 264
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The Implementation of DHCP Relay Agent Information Option 82 The DHCP Relay Option 82 command configures the DHCP relay agent information option 82 setting of the Switch. The formats for the circuit ID sub-option and the remote ID sub- - D-Link DGS-3120-48TC | Product Manual - Page 265
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 9-4 DHCP Relay Interface Settings window The fields that can be configured are described below: Parameter Description Interface Name The IP interface on the Switch that will be connected directly to the Server. Server IP - D-Link DGS-3120-48TC | Product Manual - Page 266
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 9-6 DHCP Relay Option 60 Server Settings window The fields that can be configured are described below: Parameter Description Server IP Address Enter the DHCP Relay Option 60 Server Relay IP by the default relay server - D-Link DGS-3120-48TC | Product Manual - Page 267
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Match Type Here the user can enter the DHCP Relay fields that can be configured are described below: Parameter Description DHCP Relay Option 61 Default Here the user can select the DHCP Relay Option 61 default action. Drop - Specify - D-Link DGS-3120-48TC | Product Manual - Page 268
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the Add button to add a new entry State. The default is Disabled. VLAN Name This is the VLAN Name that identifies the VLAN the user wishes to apply the DHCP Local Relay operation. State Enable or disable the configure DHCP Local - D-Link DGS-3120-48TC | Product Manual - Page 269
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured IP address of the primary server from which the SNTP information will be taken. SNTP Second Server The IP . Time Zone Settings Users can configure time zones and Daylight Savings Time settings for SNTP - D-Link DGS-3120-48TC | Product Manual - Page 270
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Offset In Minutes DST offset - 30, 60, real file size. If the Flash space is enough, the user could download more configuration files or firmware files and use commands to display Flash file information, rename file names, and delete - D-Link DGS-3120-48TC | Product Manual - Page 271
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide In case the file system gets corrupted, Z-modem can be used to download the backup files navigate to the path entered. Click the C: link to navigate the C: drive After clicking the C: link button, the following page will appear: Figure 9- - D-Link DGS-3120-48TC | Product Manual - Page 272
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When copying a file to the file system of this switch, the user must enter File System Settings - Move window When moving a file to another place, the user must enter the Source and Destination path. Click the Apply button to initiate the - D-Link DGS-3120-48TC | Product Manual - Page 273
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 10 CFM Ethernet OAM Cable Diagnostics OAM CFM CFM Settings On this page the user can configure the CFM parameters. To view this window, click OAM > CFM > CFM Settings, as shown below: Figure 10-1 CFM Settings Window The - D-Link DGS-3120-48TC | Product Manual - Page 274
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chassis - Transmit sender ID TLV with chassis ID information. fields that can be configured are described below: Parameter Description MA Here the user can enter the maintenance association name. MA Index Here the user can enter the - D-Link DGS-3120-48TC | Product Manual - Page 275
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-3 CFM MA Settings (Edit) Window The fields that can be configured are described 1-8191. Add - Add MEP ID(s). Delete - Delete MEP ID(s). By default, there is no MEP ID in a newly created maintenance association. Click the - D-Link DGS-3120-48TC | Product Manual - Page 276
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-4 CFM MIP Port Table Window Click the - D-Link DGS-3120-48TC | Product Manual - Page 277
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-6 CFM MEP Information Window Click the Edit button to re-configure the specific entry. Click the - D-Link DGS-3120-48TC | Product Manual - Page 278
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The fields that can be configured are described below: Parameter Description MEP State This is the MEP administrative state. Enable - MEP is enabled. Disable - MEP is disabled. This is the default default value is 250. Alarm Reset - D-Link DGS-3120-48TC | Product Manual - Page 279
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 1sec - Specifies that the transmitting interval will be set to 1 second. 1min - Specifies that the transmitting interval will be set to 1 minute. Level The client level ID to which the MEP sends AIS PDU. The default be configured are - D-Link DGS-3120-48TC | Product Manual - Page 280
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-10 CFM Port Settings Window The fields that can be configured are described below: Parameter Description Unit Specifies the unit's ID used. From Port ~ To Port Here the user can select the port range used for this - D-Link DGS-3120-48TC | Product Manual - Page 281
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-12 CFM Loopback Settings Window The fields that can be configured of LBMs to be sent. The default value is 4. LBM Payload Length The payload length of LBM to be sent. The default is 0. LBM Payload Pattern An arbitrary - D-Link DGS-3120-48TC | Product Manual - Page 282
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-13 CFM Linktrace Settings Window The fields that can be configured are index used. MAC Address Here the user can enter the destination MAC address. TTL Link-trace message TTL value. The default value is 64. PDU Priority - D-Link DGS-3120-48TC | Product Manual - Page 283
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-14 CFM Packet Counter Window The fields that can be configured are described below: Parameter Description Port List Which ports' counter to show. If not specified, all ports will be shown. All Ports Select this option - D-Link DGS-3120-48TC | Product Manual - Page 284
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide CFM MP Table To view this window, click OAM > CFM > CFM MP Table, as shown below: Figure 10-16 CFM MP Table Window The fields that can be configured are described below: Parameter Description Port Here the user can select the unit - D-Link DGS-3120-48TC | Product Manual - Page 285
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-17 Ethernet OAM Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select a range of ports you wish to configure. - D-Link DGS-3120-48TC | Product Manual - Page 286
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-18 Ethernet OAM Configuration Settings window The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. From Port / To Port Select a range of ports you wish - D-Link DGS-3120-48TC | Product Manual - Page 287
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-19 Ethernet OAM Event Log window The fields that can be configured are described below: Parameter Description Port Use the drop-down menu to select the unit ID and the port number to view. Port List Enter a - D-Link DGS-3120-48TC | Product Manual - Page 288
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-20 Ethernet OAM Statistics window The fields that can be configured are The cable diagnostics feature is designed primarily for administrators or customer service representatives to verify and test copper cables; it - D-Link DGS-3120-48TC | Product Manual - Page 289
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 10-21 Cable Diagnostics window To view limitations. Cable length detection is only supported on GE ports. Ports must be linked up and running at 1000M speed. Cross-talk errors detection is not supported on FE ports. NOTE: The - D-Link DGS-3120-48TC | Product Manual - Page 290
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 11 Utilization Statistics Mirror sFlow (EI Mode Only) Ping Test Trace Route Peripheral Monitoring Utilization CPU Utilization Users can display the percentage of the CPU being used, expressed as an integer percentage and - D-Link DGS-3120-48TC | Product Manual - Page 291
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide value is 200. Show/Hide Check whether or not to display Five Seconds, One Minute, and Five Minutes. Click the Apply button to accept the changes made. DRAM & Flash Utilization On this page the user can view information regarding the - D-Link DGS-3120-48TC | Product Manual - Page 292
DGS-3120 Series Managed Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. The fields that can be configured - D-Link DGS-3120-48TC | Product Manual - Page 293
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-4 Received (RX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11-5 RX Packets Analysis Table window The fields that can be configured are - D-Link DGS-3120-48TC | Product Manual - Page 294
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide link to display the information in a line graph rather than a table. UMB_Cast (RX) To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch - D-Link DGS-3120-48TC | Product Manual - Page 295
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-7 RX Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port Use the - D-Link DGS-3120-48TC | Product Manual - Page 296
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-8 Transmitted (TX) window (for Bytes and Packets) Click the View Table link to display the information in a table rather than a line graph. Figure 11-9 TX Packets Analysis window (table for Bytes and Packets) The fields that - D-Link DGS-3120-48TC | Product Manual - Page 297
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide View Table link to display the information in a table rather than a line graph. Click the View Graphic link to display by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by - D-Link DGS-3120-48TC | Product Manual - Page 298
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-11 RX Error Analysis window (table) The fields that can be configured are described below: Parameter Description Unit Select the unit you want to configure. Port Use the drop-down menu to choose the port that will - D-Link DGS-3120-48TC | Product Manual - Page 299
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide To select a port to view these statistics for, select the port by using the Port pull-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view this window, click - D-Link DGS-3120-48TC | Product Manual - Page 300
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. - D-Link DGS-3120-48TC | Product Manual - Page 301
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Click the View Table link to display the information in a table rather than a line graph. Figure 11-15 RX Size Analysis window (table) The fields that can be configured are described below: Parameter Description Unit Select the unit - D-Link DGS-3120-48TC | Product Manual - Page 302
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Mirror The Switch for network monitoring and troubleshooting purposes. Port Mirror Settings the unit you want to configure. TX (Egress) Click cause throughput problems. The port you are copying frames from should always support an equal - D-Link DGS-3120-48TC | Product Manual - Page 303
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide NOTE: RSPAN VLAN mirroring will only work when RSPAN is enabled (when one RSPAN VLAN has been configured with a source port). The RSPAN redirect function will work when RSPAN is enabled and at least one RSPAN VLAN has been configured with - D-Link DGS-3120-48TC | Product Manual - Page 304
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Tick Add or Delete to add or delete source ports. Redirect Port List Specify the output port list for the RSPAN VLAN packets. If the redirect port is a Link Aggregation port, the Link Aggregation behavior will apply to the RSPAN - D-Link DGS-3120-48TC | Product Manual - Page 305
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-20 sFlow Analyzer Server Settings window The fields that can be configured specified, its default value is 400. Collector Address The IP address of the user can configure the sFlow flow sampler parameters. By configuring the - D-Link DGS-3120-48TC | Product Manual - Page 306
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-21 sFlow Flow Sampler Settings window The fields that can be configured are described below: Parameter Description Unit Select a unit to configure default user can configure the sFlow counter poller parameters. If the user - D-Link DGS-3120-48TC | Product Manual - Page 307
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SI Mode Only) Figure 11-24 Ping Test window (EI Mode Only) The user may click the Infinite times radio button, in the Repeat Pinging for field, which will tell the ping program to keep sending ICMP Echo packets to the specified IP - D-Link DGS-3120-48TC | Product Manual - Page 308
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Parameter Description Target IP Address Enter an IP address to be pinged. Repeat Pinging for Enter the number of times desired to attempt to Ping either the IPv4 address or the IPv6 address configured in this window. Users may enter - D-Link DGS-3120-48TC | Product Manual - Page 309
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 11-27 Trace Route window (EI Mode Only) The fields that can be configured are described below: Parameter Description IPv4 Address / IPv6 Address IP address of the destination station. TTL The time to live value of the trace - D-Link DGS-3120-48TC | Product Manual - Page 310
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Peripheral Device Environment The device environment feature displays the Switch internal temperature status. To view this window, click Monitoring > Peripheral > Device Environment as shown below: Figure 11-29 Device Environment window - D-Link DGS-3120-48TC | Product Manual - Page 311
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Chapter 12 Save and Tools Save Configuration / Log Stacking Information Download firmware Upload Firmware Download Configuration Upload Configuration Upload Log File Reset Reboot System Save Configuration / Log To view this window, click - D-Link DGS-3120-48TC | Product Manual - Page 312
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The number of switches in the switch stack (up to 6 total) are displayed next to the Tools drop-down menu. The icons are in the same order as their respective Unit numbers, with the Unit 1 switch corresponding to the icon in the upper - D-Link DGS-3120-48TC | Product Manual - Page 313
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Download firmware The following window is used to download firmware for the Switch. Download Firmware From TFTP This page allows the user to download firmware from a TFTP Server to the Switch and updates the switch. Figure 12-5 Download - D-Link DGS-3120-48TC | Product Manual - Page 314
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12-7 Download Firmware - HTTP window The fields that can be configured are described below: Parameter Description Unit Use the drop-down menu to select a unit for receiving the firmware. Select All for all units. - D-Link DGS-3120-48TC | Product Manual - Page 315
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Unit Use the drop-down menu to select a unit for uploading the firmware. TFTP Server IP Enter the TFTP server IP address used. IPv4 Click the radio button to enter the TFTP server IP address used. IPv6 (EI Mode Only) Click the - D-Link DGS-3120-48TC | Product Manual - Page 316
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Destination File Enter the location and name of the Destination File. Source File Enter the location and name of the Source File. Click Download to initiate the download. Download Configuration From HTTP This page allows the user to - D-Link DGS-3120-48TC | Product Manual - Page 317
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12-14 Upload Configuration - TFTP window (EI Mode Only) The fields that can be configured are described below: Parameter Description Unit Use the drop-down menu to select a unit for uploading the configuration file. TFTP - D-Link DGS-3120-48TC | Product Manual - Page 318
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Upload Log File The following window is used to upload the log file from the Switch. Upload Log To TFTP This page allows the user to upload the log file from the Switch to a TFTP Server. Figure 12-16 Upload Log - TFTP window (SI Mode Only - D-Link DGS-3120-48TC | Product Manual - Page 319
not save this configuration. Reset System will return the Switch's configuration to the state it was when it left the factory Reset gives the option of retaining the Switch's User Accounts and History Log while resetting all other configuration parameters to their factory defaults. If the Switch is - D-Link DGS-3120-48TC | Product Manual - Page 320
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Figure 12-20 Reboot System Window Selecting the Yes radio button will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Selecting the No radio button instructs the Switch not to save - D-Link DGS-3120-48TC | Product Manual - Page 321
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix Section IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing). This document is intended to introduce the ARP protocol, ARP spoofing attacks, and the countermeasures brought by D-Link's switches - D-Link DGS-3120-48TC | Product Manual - Page 322
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When the switch receives the frame, it will check the "Source Address" in the Ethernet frame's header. If the address is not in its Forwarding Table, the switch will learn PC A's MAC and the associated port into its Forwarding Table. In - D-Link DGS-3120-48TC | Product Manual - Page 323
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The switch will also examine the "Source Address" of the Ethernet frame and find that the address is not in the Forwarding Table. The switch of Service IP address of another node (such as the default gateway). Any traffic meant for that IP - D-Link DGS-3120-48TC | Product Manual - Page 324
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide A common DoS attack today can be done by associating a nonexistent or any specified MAC address to the IP address of the network's default gateway. The malicious attacker only needs to broadcast one Gratuitous ARP to the network claiming - D-Link DGS-3120-48TC | Product Manual - Page 325
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Offset Offset Offset Offset Offset Offset Sender IP in ARP packet. (Green in Table 6, 29th and 30th bytes) The third chunk starts from Chunk 8 mask for Sender IP in ARP packet. (Brown in Table 6, 31st and 32nd bytes) Configure access - D-Link DGS-3120-48TC | Product Manual - Page 326
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide 0xA5A offset_chunk_3 0x5A5A0000 Step 5: save Save configuration. 318 - D-Link DGS-3120-48TC | Product Manual - Page 327
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix B Password Recovery Procedure This document describes the procedure for resetting passwords on D-Link Switches. Authenticating any user who tries to access networks is necessary and important. The basic authentication method - D-Link DGS-3120-48TC | Product Manual - Page 328
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix C System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category System Event Description System started up System warm start Log - D-Link DGS-3120-48TC | Product Manual - Page 329
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Firmware upgrade was unsuccessful [Unit ,] Firmware upgrade by console was unsuccessful! (Username: , IP: ) Warning Configuration successfully downloaded Configuration successfully downloaded by console( - D-Link DGS-3120-48TC | Product Manual - Page 330
Interface Stacking Console Web xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Firmware successfully uploaded Firmware successfully uploaded by console (Username: , IP: ) Informational Firmware upload was unsuccessful Firmware upload by console was unsuccessful! - D-Link DGS-3120-48TC | Product Manual - Page 331
STP DoS SSH xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Logout through configuration ID VLAN mapping table added Spoofing attack 1. The source IP is same as switch's interface IP but the source Mac is different 2. Source IP is the same as the switch's IP in ARP packet 3. Self IP - D-Link DGS-3120-48TC | Product Manual - Page 332
AAA xStack® DGS-3120 Series Managed Switch Web UI Reference Guide SSH server is disabled SSH server is Web from due to AAA server timeout or improper configuration (Username: ) 324 Warning Informational Warning Warning There are no IP and MAC if login by console. There are no - D-Link DGS-3120-48TC | Product Manual - Page 333
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Successful login through Web(SSL) authenticated by AAA server Login failed through Web(SSL) authenticated by AAA server Login failed through Web(SSL) due to AAA server timeout or improper configuration Successful login through Telnet - D-Link DGS-3120-48TC | Product Manual - Page 334
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide through SSH due to AAA server timeout or improper configuration port security is exceeded to its maximum learning size user number on a port reaches the max user limit. The authorized user number on a port is below the max user limit - D-Link DGS-3120-48TC | Product Manual - Page 335
WAC IMPB IP and Password Changed xStack® DGS-3120 Series Managed Switch Web UI Reference Guide The authorized user number on whole device reaches the max user limit. The authorized user number on whole device is below the max user limit in a time interval(interval is project depended). A host - D-Link DGS-3120-48TC | Product Manual - Page 336
BPDU Protection Monitor CFM CFM Extension xStack® DGS-3120 Series Managed Switch Web UI Reference Guide cleared Multicast storm occurrence Multicast storm duplicate IP. Detect untrusted DHCP server IP address BPDU attack happened BPDU attack automatically recover BPDU attack manually recover - D-Link DGS-3120-48TC | Product Manual - Page 337
Voice VLAN ERPS Command logging xStack® DGS-3120 Series Managed Switch Web UI Reference Guide When a new voice device is detected in the port While the port join to the voice VLAN while the port is auto voice VLAN mode - D-Link DGS-3120-48TC | Product Manual - Page 338
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide Appendix D Trap Log Entries This table lists the trap logs found on the Switch that violate the pre-defined port security configuration will trigger trap messages to be sent IP address detected is just sent once to - D-Link DGS-3120-48TC | Product Manual - Page 339
xStack® DGS-3120 Series Managed Switch Web UI Reference Guide warmStart linkDown linkUp authenticationFailure risingAlarm fallingAlarm newRoot topologyChange itself and that its configuration the ifOperStatus object for one of its communication links left the down state and transitioned into some
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
 |
 |
