Product Manual
Page 3
... Configuration Overview...34 Initial Configuration ...34 Advanced Configuration...39 Receiving an IP Address from a DHCP Server 39 Receiving an IP Address from a BOOTP Server 39 Security Management and Password Configuration 40 Startup Procedures ...43 Startup Menu Procedures ...43 Software Download and Reboot ...44 D-Link DES 3010FA/GA EWS User Guide 48 Getting Started...49 Starting the...
... Configuration Overview...34 Initial Configuration ...34 Advanced Configuration...39 Receiving an IP Address from a DHCP Server 39 Receiving an IP Address from a BOOTP Server 39 Security Management and Password Configuration 40 Startup Procedures ...43 Startup Menu Procedures ...43 Software Download and Reboot ...44 D-Link DES 3010FA/GA EWS User Guide 48 Getting Started...49 Starting the...
Product Manual
Page 4
Defining Private VLANs ...113 Configuring GARP ...116 Defining GARP ...116 Defining GVRP ...118 Configuring IP Information 120 Configuring IP Interfaces ...120 Defining IP Addresses ...121 Defining Default Gateways ...124 Configuring DHCP ...125 Configuring ARP ...127 Configuring Domain Name Servers 129 Defining DNS Servers...130 Defining DNS Host Mapping...132 ...
Defining Private VLANs ...113 Configuring GARP ...116 Defining GARP ...116 Defining GVRP ...118 Configuring IP Information 120 Configuring IP Interfaces ...120 Defining IP Addresses ...121 Defining Default Gateways ...124 Configuring DHCP ...125 Configuring ARP ...127 Configuring Domain Name Servers 129 Defining DNS Servers...130 Defining DNS Host Mapping...132 ...
Product Manual
Page 8
... D-Link DES-3010FA/GA User Guide Overview D-Link DES-3010FA/GA User Guide Overview This user guide is divided into the following sections to the D-Link Web System Interface User Guide. Provides information about using the EWS, including The D-Link Embedded Web Interface interface, management, and information buttons, as well as information about defining device IP addresses, ARP...
... D-Link DES-3010FA/GA User Guide Overview D-Link DES-3010FA/GA User Guide Overview This user guide is divided into the following sections to the D-Link Web System Interface User Guide. Provides information about using the EWS, including The D-Link Embedded Web Interface interface, management, and information buttons, as well as information about defining device IP addresses, ARP...
Product Manual
Page 35
.... There are completed, and the initial configuration uses the following information must be obtained from the network administrator: • The IP address to be assigned to be managed from an SNMP-based management station, SNMP community strings must be configured. • A default...D-Link DES-3010FA/GA User Guide If the system boot process is not configured with basic security considerations. • Advanced Configuration - After the device boots successfully, a system prompt is displayed (console>) which starts after the device has booted successfully, includes static IP address...
.... There are completed, and the initial configuration uses the following information must be obtained from the network administrator: • The IP address to be assigned to be managed from an SNMP-based management station, SNMP community strings must be configured. • A default...D-Link DES-3010FA/GA User Guide If the system boot process is not configured with basic security considerations. • Advanced Configuration - After the device boots successfully, a system prompt is displayed (console>) which starts after the device has booted successfully, includes static IP address...
Product Manual
Page 36
...at the system prompt, as follows: console# show ip interface command. To manage the switch from a remote network, a static route must belong to where packets are sent when no entries are port specific. Note that the IP address has been correctly configured as shown in the following assumptions...: • The IP address to be assigned to ...
...at the system prompt, as follows: console# show ip interface command. To manage the switch from a remote network, a static route must belong to where packets are sent when no entries are port specific. Note that the IP address has been correctly configured as shown in the following assumptions...: • The IP address to be assigned to ...
Product Manual
Page 37
...Page 36 Access rights to manage the device. D-Link DES-3010FA/GA User Guide console (config) # ip default-gateway 100.1.1.110 console (config) # snmp-server community private rw console(config)# exit console# Verifying the IP and Default Gateway Addresses To ensure that supports a set of the MIB .... Note Only the administrator (super-user) with the highest privilege level (15) is allowed to the switch is SNMP-compliant, and contains an SNMP agent that the IP address and the default gateway were properly assigned, execute the following command and examine its output: console # -...
...Page 36 Access rights to manage the device. D-Link DES-3010FA/GA User Guide console (config) # ip default-gateway 100.1.1.110 console (config) # snmp-server community private rw console(config)# exit console# Verifying the IP and Default Gateway Addresses To ensure that supports a set of the MIB .... Note Only the administrator (super-user) with the highest privilege level (15) is allowed to the switch is SNMP-compliant, and contains an SNMP agent that the IP address and the default gateway were properly assigned, execute the following command and examine its output: console # -...
Product Manual
Page 38
... snmp-server community private rw 11.1.1.2 type router config(config)# exit console(config)# show snmp Community-String Community-Access IP address private readWrite 11.1.1.2 Traps are : • Community string. - The public string allows authorized management stations to retrieve... MIB objects, while the private string allows authorized management stations to configure IP address or not. Community members can view and modify configuration information. - At the console prompt, enter the command Enable. ...
... snmp-server community private rw 11.1.1.2 type router config(config)# exit console(config)# show snmp Community-String Community-Access IP address private readWrite 11.1.1.2 Traps are : • Community string. - The public string allows authorized management stations to retrieve... MIB objects, while the private string allows authorized management stations to configure IP address or not. Community members can view and modify configuration information. - At the console prompt, enter the command Enable. ...
Product Manual
Page 40
... and enables the switch to automatically download its IP host configuration from any port to a BOOTP server or subnet containing such a server. 2. Page 39 To receive an IP address from a DHCP server, perform the following commands to use the selected port for receiving the IP address. To verify the IP address, enter the show ip interface IP Address I/F Type 100.1.1.1/24...
... and enables the switch to automatically download its IP host configuration from any port to a BOOTP server or subnet containing such a server. 2. Page 39 To receive an IP address from a DHCP server, perform the following commands to use the selected port for receiving the IP address. To verify the IP address, enter the show ip interface IP Address I/F Type 100.1.1.1/24...
Product Manual
Page 41
D-Link DES-3010FA/GA User Guide The device reboots with no default password configured; The device receives the IP address automatically. AAA uses both local and remote user databases. The security passwords can be configured for the local terminal only and ... rights to continue (y/n)[n the device reboots */ 3. Are you sure you want to the device from the BOOTP server. To verify the IP address, enter the show ip interface command. The device is handled through the AAA (Authentication, Authorization, and Accounting) mechanism that manages user access rights, privileges, and...
D-Link DES-3010FA/GA User Guide The device reboots with no default password configured; The device receives the IP address automatically. AAA uses both local and remote user databases. The security passwords can be configured for the local terminal only and ... rights to continue (y/n)[n the device reboots */ 3. Are you sure you want to the device from the BOOTP server. To verify the IP address, enter the show ip interface command. The device is handled through the AAA (Authentication, Authorization, and Accounting) mechanism that manages user access rights, privileges, and...
Product Manual
Page 46
... image through a TFTP server. Make sure that appears: console# copy tftp://176.215.31.3/file1.ros image Page 45 Enter copy tftp://{tftp address}/{file name} image to copy a new system image to the device one of the information that appears: console# sh bootvar Images currently available...for next boot) Image-2 not active console# 5. This section contains the following is configured on one time without a password. Ensure that an IP address is an example of the device ports and pings can perform the password recovery procedure from the Startup menu. The following topics: • ...
... image through a TFTP server. Make sure that appears: console# copy tftp://176.215.31.3/file1.ros image Page 45 Enter copy tftp://{tftp address}/{file name} image to copy a new system image to the device one of the information that appears: console# sh bootvar Images currently available...for next boot) Image-2 not active console# 5. This section contains the following is configured on one time without a password. Ensure that an IP address is an example of the device ports and pings can perform the password recovery procedure from the Startup menu. The following topics: • ...
Product Manual
Page 47
... copies. Ensure that the file to be sent to continue (y/n) [n]? 7. Enter the command xmodem: boot. Many periods in progress. Ensure that an IP address is configured on one of the information that appears: console# boot copy tftp://176.215.31.3/332448-10018.rfb boot Copy: 2739187 bytes copied in...:13 [hh:mm:ss] 5. The following message is displayed: console# reload This command will reset the whole system and disconnect your current session. D-Link DES-3010FA/GA User Guide Copy took 00:01:11 [hh:mm:ss] Exclamation points indicate that a copying process is in a row indicate that the...
... copies. Ensure that the file to be sent to continue (y/n) [n]? 7. Enter the command xmodem: boot. Many periods in progress. Ensure that an IP address is configured on one of the information that appears: console# boot copy tftp://176.215.31.3/332448-10018.rfb boot Copy: 2739187 bytes copied in...:13 [hh:mm:ss] 5. The following message is displayed: console# reload This command will reset the whole system and disconnect your current session. D-Link DES-3010FA/GA User Guide Copy took 00:01:11 [hh:mm:ss] Exclamation points indicate that a copying process is in a row indicate that the...
Product Manual
Page 51
... may not open. 3. Notes • The device is admin and a password that pop-up blockers are disabled. Enter the device IP address in the address bar and press . Open an Internet browser. 2. Ensure that is blank, and can be configured without entering a password. •.... Click . To access the D-Link user interface: 1. The Enter Network Password Page opens: Figure 15: Enter Network Password Page 4. The D-Link Embedded Web Interface Home Page opens: Page 50 D-Link DES-3010FA/GA User Guide Starting the D-Link Embedded Web Interface This section contains information...
... may not open. 3. Notes • The device is admin and a password that pop-up blockers are disabled. Enter the device IP address in the address bar and press . Open an Internet browser. 2. Ensure that is blank, and can be configured without entering a password. •.... Click . To access the D-Link user interface: 1. The Enter Network Password Page opens: Figure 15: Enter Network Password Page 4. The D-Link Embedded Web Interface Home Page opens: Page 50 D-Link DES-3010FA/GA User Guide Starting the D-Link Embedded Web Interface This section contains information...
Product Manual
Page 64
.... The Access Profile Page contains the currently configured access profiles and their activity status. The access profile name can access the switch module via other interfaces. To configure access profiles: 1. The device management methods include: • All • Telnet •...Configuring Device Security Configuring Management Security Defining Access Profiles Access profiles are defined for interfaces according to IP addresses or IP subnets. Click System > Management Security > Authentication > Access Profiles. User groups are profiles and rules for accessing and ...
.... The Access Profile Page contains the currently configured access profiles and their activity status. The access profile name can access the switch module via other interfaces. To configure access profiles: 1. The device management methods include: • All • Telnet •...Configuring Device Security Configuring Management Security Defining Access Profiles Access profiles are defined for interfaces according to IP addresses or IP subnets. Click System > Management Security > Authentication > Access Profiles. User groups are profiles and rules for accessing and ...
Product Manual
Page 66
...which the access profile is defined. - Defines the interface source IP address to which the access profile is defined. - Define the Access Profile Name, Rule Priority, Management Method, Interface, Source IP Address, Network Mask or Prefix Length, and Action fields. 4. The...device is valid for a subnetwork. 3. Configuring Device Security Configuring Management Security • Interface - Port - Page 65 Source IP Address - The Source IP Address field is updated. Click . Specifies the VLAN on which the access profile is defined. - LAG - Defines the interface on...
...which the access profile is defined. - Defines the interface source IP address to which the access profile is defined. - Define the Access Profile Name, Rule Priority, Management Method, Interface, Source IP Address, Network Mask or Prefix Length, and Action fields. 4. The...device is valid for a subnetwork. 3. Configuring Device Security Configuring Management Security • Interface - Port - Page 65 Source IP Address - The Source IP Address field is updated. Click . Specifies the VLAN on which the access profile is defined. - LAG - Defines the interface on...
Product Manual
Page 67
Users can manage the switch module, and by which methods. The Profile Rules Page ... a rule, user groups are composed of filters including: • Rule Priority • Interface • Management Method • IP Address • Prefix Length • Forwarding Action The rule order in the profile rules table is attached. • Priority - To... Port - Indicates the interface type to the selected port. Attaches the rule to which the rule applies. D-Link DES-3010FA/GA User Guide Defining Profile Rules Access profiles can contain up to 128 rules that determine which users can...
Users can manage the switch module, and by which methods. The Profile Rules Page ... a rule, user groups are composed of filters including: • Rule Priority • Interface • Management Method • IP Address • Prefix Length • Forwarding Action The rule order in the profile rules table is attached. • Priority - To... Port - Indicates the interface type to the selected port. Attaches the rule to which the rule applies. D-Link DES-3010FA/GA User Guide Defining Profile Rules Access profiles can contain up to 128 rules that determine which users can...
Product Manual
Page 68
...are : - Assigns HTTPS access to the rule. SNMP - Defines the number of bits that comprise the source IP address prefix, or the network mask of the source IP address. • Action -Defines the action attached to the device. - Permits access to the rule. This is..., users accessing the device using Telnet meeting access profile criteria are permitted or denied access to the device. - Defines the interface source IP address to the device. - Checked - Deny - Removes the selected rule from the selected access profiles. Configuring Device Security Configuring Management Security ...
...are : - Assigns HTTPS access to the rule. SNMP - Defines the number of bits that comprise the source IP address prefix, or the network mask of the source IP address. • Action -Defines the action attached to the device. - Permits access to the rule. This is..., users accessing the device using Telnet meeting access profile criteria are permitted or denied access to the device. - Defines the interface source IP address to the device. - Checked - Deny - Removes the selected rule from the selected access profiles. Configuring Device Security Configuring Management Security ...
Product Manual
Page 69
The profile rule is added to the access profile, and the device is updated. To modify a Profile Rule: 1. Click . D-Link DES-3010FA/GA User Guide Figure 28: Add Profile Rule Page 3. Click Security > Management Security > Authentication > Access Profile. The Profile Rule Settings Page opens: Page 68 Define the Access Profile Name, Priority, Management Method, Interface, Source IP Address, Network Mask or Prefix Length, and Action fields. 4. Click . The Access Profile Page opens. 2.
The profile rule is added to the access profile, and the device is updated. To modify a Profile Rule: 1. Click . D-Link DES-3010FA/GA User Guide Figure 28: Add Profile Rule Page 3. Click Security > Management Security > Authentication > Access Profile. The Profile Rule Settings Page opens: Page 68 Define the Access Profile Name, Priority, Management Method, Interface, Source IP Address, Network Mask or Prefix Length, and Action fields. 4. Click . The Access Profile Page opens. 2.
Product Manual
Page 76
... sent to the RADIUS server before retrying the query, or switching to the next server. Defines the default key string used for networks. This key must match the RADIUS encryption. • Source IP Address - Configuring Device Security Configuring Management Security Defining RADIUS Settings Remote... RADIUS Page also contains the following fields: • Retries - tions between the device and the RADIUS server. Defines the default IP address of time (in seconds) the device waits for service requests. Possible field values are applied to newly defined RADIUS servers. Possible ...
... sent to the RADIUS server before retrying the query, or switching to the next server. Defines the default key string used for networks. This key must match the RADIUS encryption. • Source IP Address - Configuring Device Security Configuring Management Security Defining RADIUS Settings Remote... RADIUS Page also contains the following fields: • Retries - tions between the device and the RADIUS server. Defines the default IP address of time (in seconds) the device waits for service requests. Possible field values are applied to newly defined RADIUS servers. Possible ...
Product Manual
Page 77
...the RADIUS server authentication. Specifies the RADIUS server authentication type. All - The Add Radius Server Page opens: Page 76 Lists the RADIUS server IP addresses. • Priority - Displays the RADIUS server priority. The possible field values are 1-10. Unchecked - The authenticated port default is the... All. The RADIUS server is used for an answer from the RADIUS server before retrying the query, or switching to the RADIUS server before a failure occurs. D-Link DES-3010FA/GA User Guide • IP Address - The RADIUS server is used for 802.1X authentication. -
...the RADIUS server authentication. Specifies the RADIUS server authentication type. All - The Add Radius Server Page opens: Page 76 Lists the RADIUS server IP addresses. • Priority - Displays the RADIUS server priority. The possible field values are 1-10. Unchecked - The authenticated port default is the... All. The RADIUS server is used for an answer from the RADIUS server before retrying the query, or switching to the RADIUS server before a failure occurs. D-Link DES-3010FA/GA User Guide • IP Address - The RADIUS server is used for 802.1X authentication. -
Product Manual
Page 78
Click . Click System > Management Security > Authentication > Radius. The RADIUS Server Settings Page opens: Page 77 To edit RADIUS Server Settings: 1. The RADIUS server is added, and the device is updated. Click . The RADIUS Page opens. 2. Figure 35: Add Radius Server Page Configuring Device Security Configuring Management Security 3. Define the Host IP Address, Priority, Authenticated Port, Timeout for Reply, Dead Time, and Usage Type fields. 4.
Click . Click System > Management Security > Authentication > Radius. The RADIUS Server Settings Page opens: Page 77 To edit RADIUS Server Settings: 1. The RADIUS server is added, and the device is updated. Click . The RADIUS Page opens. 2. Figure 35: Add Radius Server Page Configuring Device Security Configuring Management Security 3. Define the Host IP Address, Priority, Authenticated Port, Timeout for Reply, Dead Time, and Usage Type fields. 4.