Home » D-Link Manuals » Hubs & Switches » D-Link DES-6500 » Manual Viewer

D-Link DES-6500 Product Manual - Page 218

Configuration, SSL Status, Cache Timeout 60

UPC - 790069264580

Add to My Manuals
Save this manual to your list of manuals

Page 218 highlights

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SSL Status Cache Timeout (6086400) Configuration Use the pull down menu to enable or disable the SSL status on the switch. The default is Disabled. This field will set the time between a new key exchange between a client and a host using the SSL function. A new SSL session is established every time the client and host go through a key exchange. Specifying a longer timeout will allow the SSL session to reuse the master key on future connections with that particular host, therefore speeding up the negotiation process. The default setting is 600 seconds. NOTE: Certain implementations concerning the function and configuration of SSL are not available on the web-based management of this Switch and need to be configured using the command line interface. For more information on SSL and its functions, see the xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI, located on the documentation CD of this product. NOTE: Enabling the SSL command will disable the web-based switch management. To log on to the Switch again, the header of the URL must begin with https://. Entering anything else into the address field of the web browser will result in an error and no authentication will be granted. 203

Section	Page
Table of Contents	3
Intended Readers	12
Typographical Conventions	12
Notes, Notices, and Cautions	12
Safety Instructions	13
Safety Cautions	13
General Precautions for Rack-Mountable Products	14
Protecting Against Electrostatic Discharge	15
	16
	16
	16
Switch Description	16
Gigabit Combo Ports	16
Fast Ethernet Technology	16
Switch Description	16
Features	16
DES-6504 12-port 100BASE-FX (SFF) Fast Ethernet Switch module	18
DES-6505 8-port 1000BASE-SX (SC) Gigabit Ethernet Switch module	18
DES-6506 Patch Panel	18
DES-6507 12-port 10BASE-T/100BASE-TX/1000BASE-T Switch module	18
DES-6508 16-port 10BASE-T/100BASE-TX Fast Ethernet Switch module	19
DES-6509 12-port Mini GBIC (SFP) switch module	19
DES-6510 RJ21 connectors provide 24-port 10BASE-T/100BASE-TX Fast Ethernet Switch module	19
DES-6511 Power Supply Modules	19
DES-6512 2-port 10 GE XFP Switch Module	19
Ethernet Technology	20
Fast Ethernet	20
Gigabit Ethernet Technology	20
Switching Technology	20
Front-Panel Components and LED Indicators	21
Package Contents	22
Before You Connect to the Network	22
Installing the Switch without the Rack	22
Rack Installation	22
Power On	22
The Optional Module	22
Redundant Power System	22
Package Contents	22
Before You Connect to the Network	22
Installing the Switch without the Rack	23
Installing the Switch in a Rack	23
Mounting the Switch in a Standard 19\	24
Power On	24
Power Failure	24
External Redundant Power System	24
Switch To End Node	25
Switch to Hub or Switch	25
Connecting To Network Backbone or Server	25
Switch to End Node	25
Switch to Hub or Switch	26
Using the xStack DES-6500 Layer 3 modular chassis Ethernet switch as a Network Backbone	27
Management Options	28
Web-based Management Interface	28
SNMP-Based Management	28
Managing User Accounts	28
Command Line Console Interface through the Serial Port	28
Connecting the Console Port (RS-232 DCE)	28
First Time Connecting to the Switch	28
Password Protection	28
SNMP Settings	28
IP Address Assignment	28
Connecting Devices to the Switch	28
Management Options	28
Web-based Management Interface	28
SNMP-Based Management	28
Command Line Console Interface through the Serial Port	28
Connecting the Console Port (RS-232 DCE)	28
First Time Connecting to the Switch	30
Password Protection	32
SNMP Settings	33
Traps	33
MIBs	33
IP Address Assignment	34
Connecting Devices to the Switch	35
Introduction	36
Logging on to the Web Manager	36
Web-Based User Interface	36
Basic Setup	36
Reboot	36
Basic Switch Setup	36
Network Management	36
Switch Utilities	36
Network Monitoring	36
IGMP Snooping Status	36
Introduction	36
Logging on to the Web Manager	36
Web-based User Interface	37
Areas of the User Interface	37
Web Pages	38
Switch Information	39
Switch IP Settings	39
Advanced Settings	39
Port Configuration	39
Port Mirroring Configuration	39
Link Aggregation	39
IGMP Snooping	39
Spanning Tree	39
Forward & Filtering	39
VLAN	39
Traffic Control	39
Port Security	39
Port Lock Entries	39
QoS	39
System Log Server	39
System Severity Log	39
SNTP Settings	39
Access Profile Table	39
CPU Interface Filtering	39
Safeguard Engine	39
Port Access Entity	39
Layer 3 IP Networking	39
L3 Global Advanced Settings	39
IP Interface Table	39
MD5 Key Configuration	39
Route Redistribution Settings	39
Static Default Route	39
Static ARP Settings	39
RIP	39
OSPF	39
IP Multicast Routing Protocol	39
DNS Relay	39
DHCP/Bootp Relay	39
VRRP	39
Switch Information	40
Switch IP Settings	41
	42
Setting the Switch's IP Address using the Console Interface	42
Advanced Settings	43
Port Configuration	45
Port Mirroring Configuration	47
Link Aggregation	48
	48
Understanding Port Trunk Groups	48
LACP Port Settings	51
IGMP Snooping	52
Static Router Port Settings	54
Spanning Tree	55
	55
802.1s MSTP	55
802.1w Rapid Spanning Tree	55
Port Transition States	56
Edge Port	56
P2P Port	56
802.1d / 802.1w / 802.1s Compatibility	56
STP Loopback Detection	57
	57
	57
	57
Setting the Loopback Timer	57
Regulations and Restrictions for the Loopback Detection Function	57
STP Bridge Global Settings	58
MST Configuration Identification	60
MSTP Port Information	63
STP Instance Settings	64
STP Port Settings	66
Forwarding & Filtering	68
Unicast Forwarding	68
Static Multicast Forwarding	68
VLANs	70
Understanding IEEE 802.1p Priority	70
VLAN Description	70
Notes about VLANs in the xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch	70
IEEE 802.1Q VLANs	71
802.1Q VLAN Tags	72
Port VLAN ID	73
Tagging and Untagging	73
Ingress Filtering	73
Default VLANs	74
Port-based VLANs	74
VLAN Segmentation	74
VLAN and Trunk Groups	75
Protocol VLANs	75
VLAN Entry	76
GVRP Settings	79
Traffic Control	80
Port Security	83
Port Lock Entries	84
QoS	85
The Advantages of QoS	85
Understanding QoS	86
Bandwidth Control	87
QoS Scheduling Mechanism	88
QoS Output Scheduling	89
Configuring the Combination Queue	90
802.1p Default Priority	91
802.1p User Priority	91
Traffic Segmentation	92
System Log Server	94
System Severity Log	96
SNTP Settings	97
	97
Time Settings	97
Time Zone and DST	98
Access Profile Table	100
Configuring the Access Profile Table	101
CPU Interface Filtering	114
CPU Interface Filtering State Settings	114
CPU Interface Filtering Table	114
Safeguard Engine	124
Port Access Entity (802.1X)	126
802.1x Port-Based and MAC-Based Access Control	126
Authentication Server	127
Authenticator	127
Client	127
Authentication Process	128
Understanding 802.1x Port-based and MAC-based Network Access Control	129
Port-Based Network Access Control	129
MAC-Based Network Access Control	130
802.1x Auth Mode Settings	131
802.1X Authenticator Settings	131
Local Users	133
PAE System Control	134
Port Capability	134
Initializing Ports for Port Based 802.1x	135
Initializing Ports for MAC Based 802.1x	136
Reauthenticate Port(s) for Port Based 802.1x	136
Reauthenticate Port(s) for MAC-based 802.1x	137
RADIUS Server	138
Layer 3 IP Networking	139
Layer 3 Global Advanced Settings	139
IP Multinetting	140
IP Interface Setup	140
MD5 Key Configuration	143
Route Redistribution Settings	144
Static/Default Route Settings	145
Static ARP Table	147
RIP	148
	148
	148
	148
	148
RIP Version 1 Message Format	148
RIP Command Codes	148
RIP 1 Message	149
RIP 1 Route Interpretation	149
RIP Version 2 Extensions	149
RIP2 Message Format	149
RIP Global Configuration	149
RIP Settings	150
OSPF	151
	151
	151
	151
	151
Link-State Algorithm	151
Shortest Path Algorithm	151
OSPF Cost	151
Shortest Path Tree	151
Areas and Border Routers	153
Link-State Packets	153
OSPF Authentication	154
Message Digest Authentication (MD-5)	154
Simple Password Authentication	154
Backbone and Area 0	154
Virtual Links	154
Areas Not Physically Connected to Area 0	154
Partitioning the Backbone	154
Neighbors	154
Adjacencies	155
Designated Router Election	155
Building Adjacency	155
Adjacencies on Point-to-Point Interfaces	155
OSPF Packet Formats	155
OSPF Packet Header	156
Hello Packet	156
Database Description Packet	157
Link-State Request Packet	159
Link-State Update Packet	160
Link-State Acknowledgment Packet	160
Link-State Advertisement Formats	161
Link State Advertisement Header	162
Router Links Advertisements	163
Network Links Advertisements	165
Summary Link Advertisements	166
Autonomous Systems External Link Advertisements	167
OSPF General Settings	168
OSPF Area ID Settings	168
OSPF Interface Settings	169
OSPF Virtual Interface Settings	172
OSPF Area Aggregation Settings	174
OSPF Host Route Settings	175
IP Multicast Routing Protocol	176
IGMP	176
IGMP Versions 1 and 2	176
IGMP Version 3	177
IGMP Interface Configuration	179
DVMRP Interface Configuration	180
DVMRP Configuration	180
DVMRP Interface Settings	180
PIM Protocol	182
PIM-SM	182
Discovering and Joining the Multicast Group	182
Distribution Trees	182
Register and Register Suppression Messages	182
Assert Messages	183
PIM-DM Interface Configuration	183
PIM Global Settings	183
PIM Interface Settings	183
PIM Candidate BSR Settings	185
PIM Parameter Settings	186
PIM Candidate RP Global Settings	187
PIM Candidate RP Settings	187
PIM Register Checksum Settings	188
PIM Static RP Settings	189
DNS Relay	190
	190
	190
	190
	190
Mapping Domain Names to Addresses	190
Domain Name Resolution	190
DNS Relay Information	190
DNS Relay Static Settings	191
DHCP / BOOTP Relay	192
DHCP Auto Configuration Settings	192
DHCP / BOOTP Relay Information	192
DHCP/BOOTP Relay Settings	193
DHCP Relay Option 82 Settings	193
VRRP	195
VRRP Global Settings	195
VRRP Virtual Router Settings	196
VRRP Authentication Settings	199
Security IP	200
User Accounts	200
Access Authentication Control (TACACS)	200
Secure Sockets Layer (SSL)	200
Secure Shell (SSH)	200
Security IP	200
User Account Management	200
	201
Admin and User Privileges	201
Secure Shell (SSH)	202
SSH Configuration	202
SSH Algorithm	203
SSH User Authentication Mode	205
Access Authentication Control	206
Authentication Policy & Parameters	207
Application's Authentication Settings	208
Authentication Server Group	209
Authentication Server Host	210
Login Method Lists	211
Enable Method Lists	212
Local Enable Password	214
Enable Admin	214
Secure Socket Layer (SSL)	216
Download Certificate	216
Configuration	217
SNMP Settings	219
	219
	219
	219
	219
Traps	219
MIBs	219
SNMP Trap Settings	220
SNMP User Table	220
SNMP View Table	222
SNMP Group Table	223
SNMP Community Table	225
SNMP Host Table	226
SNMP Engine ID	227
CPU Utilization	228
Port Utilization	228
Packets	228
Errors	228
Size	228
Stacking Information	228
Device Status	228
MAC Address	228
Switch History Log	228
IGMP Snooping Group	228
IGMP Snooping Forward	228
Browse Router Port	228
Port Access Control	228
Layer 3 Feature	228
Browse IP Address	228
Browse Routing Table	228
Browse ARP Table	228
Browse IP Multicast Forwarding Table	228
Browse IP Multicast Interface Table	228
Browse IGMP Group Table	228
OSPF Monitor	228
DVMRP Monitor	228
PIM Monitor	228
CPU Utilization	229
Port Utilization	230
Packets	231
Received (RX)	231
UMB Cast (RX)	233
Transmitted (TX)	235
Errors	237
Received (RX)	237
Transmitted (TX)	239
Size	241
Stacking Information	243
Device Status	244
MAC Address	245
Switch History Log	246
IGMP Snooping Group	247
IGMP Snooping Forwarding	248
Browse Router Port	249
Port Access Control	250
Authenticator State	250
Authenticator Diagnostics	252
Authenticator Session Statistics	254
Authenticator Statistics	256
RADIUS Account Client	258
RADIUS Auth Client	260
Layer 3 Feature	262
Browse IP Address Table	262
Browse Routing Table	263
Browse ARP Table	263
Browse IP Multicast Forwarding Table	264
Browse IP Multicast Interface Table	264
Browse IGMP Group Table	264
OSPF Monitor	265
Browse OSPF LSDB Table	265
Browse OSPF Neighbor Table	266
OSPF Virtual Neighbor	267
DVMRP Monitoring	268
Browse DVMRP Routing Table	268
Browse DVMRP Neighbor Table	269
Browse DVMRP Routing Next Hop Table	269
PIM Monitoring	270
Browse PIM Neighbor Table	270
PIM IP MRoute Table	270
Browse PIM RP Set Table	271
TFTP Services	272
Ping Test	272
TraceRoute	272
Save Configuration	272
Reset	272
Reboot Services	272
Logout	272
TFTP Services	272
Download Firmware	272
Download Configuration	273
Upload Configuration	273
Upload History Log	273
Ping Test	274
Traceroute	274
Save Configuration	275
Reset	275
Reboot Device	275
Logout	276
Single IP Management (SIM) Overview	277
Topology	277
Firmware Upgrade	277
Configuration Backup/Restore	277
Single IP Management (SIM) Overview	277
SIM Using the Web Interface	278
Topology	280
Tool Tips	282
Right Click	282
Group Icon	283
Commander Switch Icon	283
Member Switch Icon	284
Candidate Switch Icon	285
Menu Bar	286
	286
	286
	286
	286
File	286
Group	286
Device	286
View	286
Firmware Upgrade	288
Configuration File Backup/Restore	288
Upgrading Instructions for Release 3 Firmware (R3.00-B33)	291
Line Card Firmware Compatibility	291
Precautions for Adding New Line Cards to the Chassis	291
Upgrading to R3.00-B33	292
	292
	292
	292
PROM Code	292
Firmware Filenames	292
Upgrading to R3.00-B33	292
Step 1	292
Step 2	294
Step 3	294
Step 5	295
Step 6	295
Step 7	296
Adding Runtime R1.01 DES-6505/DES-6507/DES-6509 Line Cards to the Runtime R1.3/1.4/2.0/2.5/3.0 Chassis	298
	300
	300
	300
Step 3	300
Step 4	300
Step 5	301
Step 6	301
Firmware Downgrade Procedure	302
	302
	302
	302
Procedure Overview	302
Downgrade Example	302
Cables and Connectors	308

Match case Limit results 1 per page

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual

Configuration

SSL Status

Use the pull down menu to enable or disable the SSL status on the switch. The default is

Disabled

Cache Timeout (60-

86400)

This field will set the time between a new key exchange between a client and a host using

the SSL function. A new SSL session is established every time the client and host go through

a key exchange. Specifying a longer timeout will allow the SSL session to reuse the master

key on future connections with that particular host, therefore speeding up the negotiation

process. The default setting is 600 seconds.

NOTE:

Certain implementations concerning the function and configuration of SSL are not

available on the web-based management of this Switch and need to be configured using

the command line interface. For more information on SSL and its functions, see the

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI

, located on the

documentation CD of this product.

NOTE:

Enabling the SSL command will disable the web-based switch management. To

log on to the Switch again, the header of the URL must begin with https://. Entering

anything else into the address field of the web browser will result in an error and no

authentication will be granted.

203