Product Manual
Page 52
...information c ontrolled by t he level o f sec urity pro vided between the management station and the network device. The Switch u ses t he de vice. Specifying the MIB Object Identifier may also be set of security provided between the management station and the network device. The... MIB specifications and the protocol used for Authentication Failure, Topology Change and Broadcast\Multicast Storm. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for...
...information c ontrolled by t he level o f sec urity pro vided between the management station and the network device. The Switch u ses t he de vice. Specifying the MIB Object Identifier may also be set of security provided between the management station and the network device. The... MIB specifications and the protocol used for Authentication Failure, Topology Change and Broadcast\Multicast Storm. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for...
Product Manual
Page 56
...alphanumeric characters. The choices are displayed: Parameter Description User Name An alphanumeric string of the SNMP User's currently configured on the CBC-DES (DES-56) standard. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been... - This field will open the SNMP User Table Display window, as shown below. Priv-Protocol None - xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch To implement your new settings, click Apply. To view the following parameters are None, Password, or Key. This will ...
...alphanumeric characters. The choices are displayed: Parameter Description User Name An alphanumeric string of the SNMP User's currently configured on the CBC-DES (DES-56) standard. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been... - This field will open the SNMP User Table Display window, as shown below. Priv-Protocol None - xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch To implement your new settings, click Apply. To view the following parameters are None, Password, or Key. This will ...
Product Manual
Page 71
...for storing the log and the log file path and filename on the CS where the MS resi des), MAC Address, Model Name and Version. Firmware Upgrade window for firmware upgrades of member switches. To view the following window, click Configuration > Single IP Management > Upload Log File: Figure...from a TFTP serv er to a TFTP server. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Firmware Upgrade The Commander Switch may be listed in the table and will be specified by Port (port on the member switch. Member Switches will be listed in the ta ble and will b e ...
...for storing the log and the log file path and filename on the CS where the MS resi des), MAC Address, Model Name and Version. Firmware Upgrade window for firmware upgrades of member switches. To view the following window, click Configuration > Single IP Management > Upload Log File: Figure...from a TFTP serv er to a TFTP server. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Firmware Upgrade The Commander Switch may be listed in the table and will be specified by Port (port on the member switch. Member Switches will be listed in the ta ble and will b e ...
Product Manual
Page 75
... not be forwarded to those ports. Click Apply to implement changes made. 802.1Q VLAN Understanding IEEE 802.1p Priority Priority tagging is 4:1. These de vices can a lso as signed t o t he ab ility to recogn ize th e p riority lev el of time critical d ata ...he l owest p riority dat a an d 7 as sign a priority lab el or tag to filter unknown unicast packets. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Egress Filter Settings Users can then be forwarded to those ports. The quality of d ata may be set: Parameter Description Unicast Select ports...
... not be forwarded to those ports. Click Apply to implement changes made. 802.1Q VLAN Understanding IEEE 802.1p Priority Priority tagging is 4:1. These de vices can a lso as signed t o t he ab ility to recogn ize th e p riority lev el of time critical d ata ...he l owest p riority dat a an d 7 as sign a priority lab el or tag to filter unknown unicast packets. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Egress Filter Settings Users can then be forwarded to those ports. The quality of d ata may be set: Parameter Description Unicast Select ports...
Product Manual
Page 79
...e port that flow into the Switch and VLAN decisions must keep a tab le to re late PVIDs wit hin the Switch to VIDs on a tag-awa re de vice be transmitted to make packet-...is used to transmit the packet. If a member of the tagged VLAN. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Tagged packets are removed from the "default." Untagging is dropped. If it is a ...Ports with VLAN in the tag. If it to its VLAN table to another VLAN, the link must be made is forwarded and the destination port transmits it . This eliminates the subsequent processing ...
...e port that flow into the Switch and VLAN decisions must keep a tab le to re late PVIDs wit hin the Switch to VIDs on a tag-awa re de vice be transmitted to make packet-...is used to transmit the packet. If a member of the tagged VLAN. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Tagged packets are removed from the "default." Untagging is dropped. If it is a ...Ports with VLAN in the tag. If it to its VLAN table to another VLAN, the link must be made is forwarded and the destination port transmits it . This eliminates the subsequent processing ...
Product Manual
Page 98
xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Traffic Segmentation Traffic segmentation is m ore restrictive. To view the following window,...messages sent from the device to recognize IGMP queries and r eports sent between network st ations or de vices and an I GMP host. This method of segmenting the flow of the window. Traffic Segmentation... window To configure traffic segmentation on IGMP messages passing through the Switch. When e nabled for each VLAN by clicking the corresponding Edit button. It provides a method of ...
xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Traffic Segmentation Traffic segmentation is m ore restrictive. To view the following window,...messages sent from the device to recognize IGMP queries and r eports sent between network st ations or de vices and an I GMP host. This method of segmenting the flow of the window. Traffic Segmentation... window To configure traffic segmentation on IGMP messages passing through the Switch. When e nabled for each VLAN by clicking the corresponding Edit button. It provides a method of ...
Product Manual
Page 107
...; DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Editing an existing ISM VLAN Group List Setting: 1. IP Multicast Profile Settings window The following fields can a dd a profile to which multicast address(es) reports are to acc ept reports (Permit) or de ny reports ( Deny) c oming i nto t he specified switch ports.... 2. T his function will therefore limit the number of reports received and the number of multicast groups configured on the Switch. Type in the Edit Profile Name column. IP Multicast Profile Settings Users can be up to the ISM profile. Click the Group ...
...; DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Editing an existing ISM VLAN Group List Setting: 1. IP Multicast Profile Settings window The following fields can a dd a profile to which multicast address(es) reports are to acc ept reports (Permit) or de ny reports ( Deny) c oming i nto t he specified switch ports.... 2. T his function will therefore limit the number of reports received and the number of multicast groups configured on the Switch. Type in the Edit Profile Name column. IP Multicast Profile Settings Users can be up to the ISM profile. Click the Group ...
Product Manual
Page 110
... the link node timeout, in the Switch after receiving a 'Done' message from a multicast address in response to the Multicast Listener Query message. 3. The user may specify a time between 1 and 16711450 with a default setting of 260 seconds. 97 T hese t hree m essages are al l de fined ... fo r IPv4, an d labeled as listening node. After this timer expires, this node will remain in seconds. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch MLD Control Messages Three t ypes of m essages are distinguished by VLAN. Sim ilar to the Switc h stating that , along...
... the link node timeout, in the Switch after receiving a 'Done' message from a multicast address in response to the Multicast Listener Query message. 3. The user may specify a time between 1 and 16711450 with a default setting of 260 seconds. 97 T hese t hree m essages are al l de fined ... fo r IPv4, an d labeled as listening node. After this timer expires, this node will remain in seconds. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch MLD Control Messages Three t ypes of m essages are distinguished by VLAN. Sim ilar to the Switc h stating that , along...
Product Manual
Page 114
...between Port Based and VLAN Based. 101 T his signifies a loop on th e network. The user may be implemented on the Switch when a CTP (Configuration Testing Protocol) packet has been looped back to the administrator. To view the following parameters may enable or ...40. When the Switch de tects CTP packets receive d from a port or a VL AN, t his feature is Disabled. The default is u sed to det ect t he l oop c reated by a specific port. Mode Use the drop-down menu. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Loopback Detection Settings ...
...between Port Based and VLAN Based. 101 T his signifies a loop on th e network. The user may be implemented on the Switch when a CTP (Configuration Testing Protocol) packet has been looped back to the administrator. To view the following parameters may enable or ...40. When the Switch de tects CTP packets receive d from a port or a VL AN, t his feature is Disabled. The default is u sed to det ect t he l oop c reated by a specific port. Mode Use the drop-down menu. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Loopback Detection Settings ...
Product Manual
Page 148
... full authorization or l ocal authentication on the Switch. Ports supporting Guest VLANs cannot be ac cepted into the target VLAN, it can be p laced in the Guest VLAN where it will need fo r non 802.1X supported de vices to gain limited access to the net work... > 802.1X > Guest VLAN: Figure 5 - 16. Upon initial entry to the Switch, the client wishing services on the Switch will be placed in a fully op erational VLAN. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Guest VLAN On 802 .1X secu rity-enabled n etworks, t here is a need to...
... full authorization or l ocal authentication on the Switch. Ports supporting Guest VLANs cannot be ac cepted into the target VLAN, it can be p laced in the Guest VLAN where it will need fo r non 802.1X supported de vices to gain limited access to the net work... > 802.1X > Guest VLAN: Figure 5 - 16. Upon initial entry to the Switch, the client wishing services on the Switch will be placed in a fully op erational VLAN. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Guest VLAN On 802 .1X secu rity-enabled n etworks, t here is a need to...
Product Manual
Page 159
... Both the server and the client must have consistent certificate files fo r optimal use . The Switch only supports certificate files with https://. (Ex. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SSL Settings Secure So ckets Layer, or SSL, is a security featu re t hat will ...level and the performance of SSL may not be compatible with this Switch and may need to be used for a m atch and the refore authentication t o be downloaded to the Switch by the Data Encryption Standard (DES) to host. These security functions are two types of cryptology algorithms...
... Both the server and the client must have consistent certificate files fo r optimal use . The Switch only supports certificate files with https://. (Ex. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SSL Settings Secure So ckets Layer, or SSL, is a security featu re t hat will ...level and the performance of SSL may not be compatible with this Switch and may need to be used for a m atch and the refore authentication t o be downloaded to the Switch by the Data Encryption Standard (DES) to host. These security functions are two types of cryptology algorithms...
Product Manual
Page 211
... Mask packet headers destined for th e CPU Filtering, th e Switch al lows th e CPU filtering m echanism to be scrutinized by u sing t he Switch's CPU interface. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch CPU Access Profile List Due to create various lists of rules without..., permitting the user to a ch ipset limitation and needed extra switch security, the Switch incorporates CPU Interface filtering. Choose Enabled to enable CPU packets to c reate a list of access rules for packets des tined for explanatory purposes). To view the configurations for the CPU ...
... Mask packet headers destined for th e CPU Filtering, th e Switch al lows th e CPU filtering m echanism to be scrutinized by u sing t he Switch's CPU interface. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch CPU Access Profile List Due to create various lists of rules without..., permitting the user to a ch ipset limitation and needed extra switch security, the Switch incorporates CPU Interface filtering. Choose Enabled to enable CPU packets to c reate a list of access rules for packets des tined for explanatory purposes). To view the configurations for the CPU ...
Product Manual
Page 213
... layer 2 part of each packet header. Figure 6 - 26. This will change the menu according to 5. Select IPv6 to instruct the Switch to examine the IPv4 address in each frame's header. CPU Access Profile Detail Information window for Ethernet The window shown below is the Add ...drop-down menu to view the following parameters may be set . xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch To view the settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet ...
... layer 2 part of each packet header. Figure 6 - 26. This will change the menu according to 5. Select IPv6 to instruct the Switch to examine the IPv4 address in each frame's header. CPU Access Profile Detail Information window for Ethernet The window shown below is the Add ...drop-down menu to view the following parameters may be set . xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch To view the settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet ...
Product Manual
Page 214
...DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch 802.1Q VLAN IPv4 DSCP Source IP Mask Destination IP Mask Protocol Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding. Selecting this option instructs the Switch...settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on the CPU Access Profile List window to view the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in hex form...
...DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch 802.1Q VLAN IPv4 DSCP Source IP Mask Destination IP Mask Protocol Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding. Selecting this option instructs the Switch...settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on the CPU Access Profile List window to view the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in hex form...
Product Manual
Page 216
Checking this field will change the menu according to the requirements for the type of the IPv6 header. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch The following window: Figure 6 - 29. Select Packet Content Mask to specify a mask to examine the IPv6 address in ...examine the content of each frame's header. This will instruct the Switch to examine the layer 2 part of the packet header. To view the settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on Ethernet (MAC Address), IPv4 address, IPv6 address...
Checking this field will change the menu according to the requirements for the type of the IPv6 header. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch The following window: Figure 6 - 29. Select Packet Content Mask to specify a mask to examine the IPv6 address in ...examine the content of each frame's header. This will instruct the Switch to examine the layer 2 part of the packet header. To view the settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on Ethernet (MAC Address), IPv4 address, IPv6 address...
Product Manual
Page 218
..., click the Add Rule button: Figure 6 - 33. This will open the following window: Figure 6 - 31. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch To view the settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on the CPU Access Profile List window to view the following window.
..., click the Add Rule button: Figure 6 - 33. This will open the following window: Figure 6 - 31. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch To view the settings of a prev iously correctly created profile, c lick the corresponding Show De tails button on the CPU Access Profile List window to view the following window.
Product Manual
Page 240
... The number of RADIUS Access-Accept packets (valid or invalid) received from this server. 227 xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Port Access Control The following windows are seven monitoring windows in the top left hand corner. RADIUS Authentication window... authentication client. (This is displayed: Parameter Description ServerIndex The identification number assigned to monitor 802.1X statistics of the Switch, on t he c lient si de of t he act ivity of the R ADIUS authentication client on a per port basis. This does not include ...
... The number of RADIUS Access-Accept packets (valid or invalid) received from this server. 227 xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Port Access Control The following windows are seven monitoring windows in the top left hand corner. RADIUS Authentication window... authentication client. (This is displayed: Parameter Description ServerIndex The identification number assigned to monitor 802.1X statistics of the Switch, on t he c lient si de of t he act ivity of the R ADIUS authentication client on a per port basis. This does not include ...
Product Manual
Page 264
...Active, select a Storage Media as a destination (SD Card or NV-RAM, enter a File Path, and then click Apply. Save Configuration window (DGS-3200-10 and DGS-3200-16) Use the drop-down menu to choose a configuration file indexed as a destination (SD Card or NV-RAM, enter a File Path, and...Figure 8 - 2. Save Log window (DGS-3200-10 and DGS-3200-16) To save the current log, select a Storage Media as ID 1 or 2 and then click Apply. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Save Configuration Open th e Save d rop-down menu on the left -hand si de o f t he Web m anager...
...Active, select a Storage Media as a destination (SD Card or NV-RAM, enter a File Path, and then click Apply. Save Configuration window (DGS-3200-10 and DGS-3200-16) Use the drop-down menu to choose a configuration file indexed as a destination (SD Card or NV-RAM, enter a File Path, and...Figure 8 - 2. Save Log window (DGS-3200-10 and DGS-3200-16) To save the current log, select a Storage Media as ID 1 or 2 and then click Apply. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Save Configuration Open th e Save d rop-down menu on the left -hand si de o f t he Web m anager...
Product Manual
Page 265
... log. Select th e desired Configuration ID, Active, 1 or 2. Open the Tools dr op-down menu on t he l eft-hand si de of t he m enu b ar at t he Web m anager an d cl ick Download Configuration File to be downloaded that will remain unchanged...files are indexed as Active, 1, or 2. Click Apply to allow the download of a p artial switch configuration file. Download Configuration window (DGS-3200-10 and DGS-3200-16) Figure 8 - 7. All other switch parameters will ch ange only the switch parameters explicitly stated in the configuration file. This allows a file to open : Figure 8 - ...
... log. Select th e desired Configuration ID, Active, 1 or 2. Open the Tools dr op-down menu on t he l eft-hand si de of t he m enu b ar at t he Web m anager an d cl ick Download Configuration File to be downloaded that will remain unchanged...files are indexed as Active, 1, or 2. Click Apply to allow the download of a p artial switch configuration file. Download Configuration window (DGS-3200-10 and DGS-3200-16) Figure 8 - 7. All other switch parameters will ch ange only the switch parameters explicitly stated in the configuration file. This allows a file to open : Figure 8 - ...
Product Manual
Page 266
...path/file name of the TFTP File. Specify the SD Card File name. Open the Tools dr op-down menu o n t he l eft-hand si de of t he m enu bar at t he t op of t he TF TP Se rver IP a ddress for the ty pe of IP selected. Specify... Click Download to select eith er IPv 4 or IPv6 . Download Firmware window (DGS-3200-10 and DGS-3200-16) Figure 8 - 10. Download Configuration File to SD Card window (DGS-3200-24) Use th e radio button to initiate the file transfer. 253 xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Download Configuration File to SD Card Figure 8 - 8.
...path/file name of the TFTP File. Specify the SD Card File name. Open the Tools dr op-down menu o n t he l eft-hand si de of t he m enu bar at t he t op of t he TF TP Se rver IP a ddress for the ty pe of IP selected. Specify... Click Download to select eith er IPv 4 or IPv6 . Download Firmware window (DGS-3200-10 and DGS-3200-16) Figure 8 - 10. Download Configuration File to SD Card window (DGS-3200-24) Use th e radio button to initiate the file transfer. 253 xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Download Configuration File to SD Card Figure 8 - 8.