Product Manual
Page 5
xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch PVID Auto Assign Settings ...79 Port Trunking ...80 VLAN Trunk Settings ...83 LACP Port Settings...84 Traffic Segmentation...85 IGMP Snooping ...85 IGMP Snooping Settings ...... Filtering Mode...112 QoS ...113 Bandwidth Control...115 Traffic Control ...116 802.1p Default Priority...118 802.1p User Priority ...118 QoS Scheduling Mechanism ...119 Security ...120 Safeguard Engine ...120 Trusted Host...122 IP-MAC-Port Binding (IMPB)...123 IMPB Global Settings ...125 IMPB Port Settings ...126 IMPB Entry Settings ...128...
xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch PVID Auto Assign Settings ...79 Port Trunking ...80 VLAN Trunk Settings ...83 LACP Port Settings...84 Traffic Segmentation...85 IGMP Snooping ...85 IGMP Snooping Settings ...... Filtering Mode...112 QoS ...113 Bandwidth Control...115 Traffic Control ...116 802.1p Default Priority...118 802.1p User Priority ...118 QoS Scheduling Mechanism ...119 Security ...120 Safeguard Engine ...120 Trusted Host...122 IP-MAC-Port Binding (IMPB)...123 IMPB Global Settings ...125 IMPB Port Settings ...126 IMPB Entry Settings ...128...
Product Manual
Page 12
... before extending a component from the bottom up, and load the heaviest item in the optional D-Link Wall Mount kit (DRE-KIT018). NOTE: A qualified electrician must comply with applicable local or national...codes and practices. Do not attempt to connect power to the system until grounding cables are secured to the rack, extended to the floor, and that t he AC supply bra nch ...the rack, make sure t hat the sta bilizers are connected. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch CAUTION: Installing systems in a rack without the front and side stabilizers installed could...
... before extending a component from the bottom up, and load the heaviest item in the optional D-Link Wall Mount kit (DRE-KIT018). NOTE: A qualified electrician must comply with applicable local or national...codes and practices. Do not attempt to connect power to the system until grounding cables are secured to the rack, extended to the floor, and that t he AC supply bra nch ...the rack, make sure t hat the sta bilizers are connected. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch CAUTION: Installing systems in a rack without the front and side stabilizers installed could...
Product Manual
Page 16
..., IMPB Port Settings, IMPB Entry Settings, DHCP Snooping Entries, MAC Blocked List, Port Security, Port Security Settings, Port Lo ck Entries, DHCP Server Screening, DHCP Screening Port Settings , DHCP Offer... Enter a user name and password to TFTP, Reset, and Reboot System. 3 Contains links for Save Configuration, Save Log, and Save All. C ontains the following windows: Download ... Settings. Tools - Save - xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Web Pages When connecting to the management mode of the Switch with a Web browser, a login screen is...
..., IMPB Port Settings, IMPB Entry Settings, DHCP Snooping Entries, MAC Blocked List, Port Security, Port Security Settings, Port Lo ck Entries, DHCP Server Screening, DHCP Screening Port Settings , DHCP Offer... Enter a user name and password to TFTP, Reset, and Reboot System. 3 Contains links for Save Configuration, Save Log, and Save All. C ontains the following windows: Download ... Settings. Tools - Save - xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Web Pages When connecting to the management mode of the Switch with a Web browser, a login screen is...
Product Manual
Page 22
... are allowed. This allows the entry of the window to choose either DHCP or BOOTP. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch NOTE: The Switch's factory default IP address is 10.90.90.90 with a destination address outside your local network, you can leave this option is set ... IP address on the network assigned for use the DHCP or BOOTP protocols to manage the Switch in the Trusted Host window (Security > Trusted Host). The Switch will not be able to assign the Switch an IP address, subnet mask, and default gateway address: Use the radio button at the...
... are allowed. This allows the entry of the window to choose either DHCP or BOOTP. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch NOTE: The Switch's factory default IP address is 10.90.90.90 with a destination address outside your local network, you can leave this option is set ... IP address on the network assigned for use the DHCP or BOOTP protocols to manage the Switch in the Trusted Host window (Security > Trusted Host). The Switch will not be able to assign the Switch an IP address, subnet mask, and default gateway address: Use the radio button at the...
Product Manual
Page 28
... Fiber. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Address Learning Medium Type Enable or disable MAC address learning for reasons of security or efficiency. When Enabled..., destination and source MAC addresses are automatically listed in the Port Description window. 15 When address learning is Enabled. To view the following window, click Configuration > Port Configuration > Port Description: Figure 2- 10...
... Fiber. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Address Learning Medium Type Enable or disable MAC address learning for reasons of security or efficiency. When Enabled..., destination and source MAC addresses are automatically listed in the Port Description window. 15 When address learning is Enabled. To view the following window, click Configuration > Port Configuration > Port Description: Figure 2- 10...
Product Manual
Page 42
... management interface. SNMP - If the IP address has the word WEB next to it, it denotes a firmware upgrade through the Secure Shell (SSH). Firmware Information window (DGS-3200-24 model) The following : Input the path of the firmware. If the IP address has the word SNMP next... to it, it denotes a firmware upgrade through the Single IP Management feature. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Figure 2 - 29. If the IP address has the word SIM next to it, it denotes a firmware upgrade through the ...
... management interface. SNMP - If the IP address has the word WEB next to it, it denotes a firmware upgrade through the Secure Shell (SSH). Firmware Information window (DGS-3200-24 model) The following : Input the path of the firmware. If the IP address has the word SNMP next... to it, it denotes a firmware upgrade through the Single IP Management feature. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Figure 2 - 29. If the IP address has the word SIM next to it, it denotes a firmware upgrade through the ...
Product Manual
Page 45
... is being used to it, it denotes a configuration upgrade through the Single IP Management feature. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Update Time From User Boot Up Path Name (DGS-3200-24 model only) States the specific time the configuration version was downloaded to the... it denotes a configuration upgrade through Telnet. If the IP address has the word SSH next to it, it denotes a configuration upgrade using Secure Shell (SSH). If the IP address has the word WEB next to it, it denotes a configuration upgrade through the Console Serial Port (...
... is being used to it, it denotes a configuration upgrade through the Single IP Management feature. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Update Time From User Boot Up Path Name (DGS-3200-24 model only) States the specific time the configuration version was downloaded to the... it denotes a configuration upgrade through Telnet. If the IP address has the word SSH next to it, it denotes a configuration upgrade using Secure Shell (SSH). If the IP address has the word WEB next to it, it denotes a configuration upgrade through the Console Serial Port (...
Product Manual
Page 46
... 25, yet a value between 1 and 65535 can benefit the Switch administrator by simplifying the management of small workgroups or wiring closets, increasing the speed of handling emergency Switch events, and enhancing security by recording questionable events occurring on a remote device. SMTP Settings ...Port Enter the virtual port number that 64 alphanumeric characters. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SMTP Settings SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on the SMTP server.
... 25, yet a value between 1 and 65535 can benefit the Switch administrator by simplifying the management of small workgroups or wiring closets, increasing the speed of handling emergency Switch events, and enhancing security by recording questionable events occurring on a remote device. SMTP Settings ...Port Enter the virtual port number that 64 alphanumeric characters. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SMTP Settings SMTP or Simple Mail Transfer Protocol is a function of the Switch that will send switch events to mail recipients based on the SMTP server.
Product Manual
Page 52
...of security provided between the management station and the network device. An a dditional layer of t he o n-board SNMP agent. Traps Traps are : public - Specifying the MIB Object Identifier may also be restricted with a shared set for the Switch read...values for specific tasks. SNMP management can specify the SNMP version use the same community string. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for ...
...of security provided between the management station and the network device. An a dditional layer of t he o n-board SNMP agent. Traps Traps are : public - Specifying the MIB Object Identifier may also be restricted with a shared set for the Switch read...values for specific tasks. SNMP management can specify the SNMP version use the same community string. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for ...
Product Manual
Page 55
...- xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Group Table An SNMP G roup c reated with t his t able maps SNM P u sers (i dentified in th e SNMP User Tab le) t o the views created in the Structure of Management Information (SMI) and adds some security features. To add...delete an existing SNMP Group Table entry, click the Delete button next to devices through a combination of packets sent between the Switch and a remote SNMP manager. Security Model SNMPv1 - The following window, click Configuration > SNMP Settings > SNMP Group Table: Figure 2 - 42. Notify ...
...- xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Group Table An SNMP G roup c reated with t his t able maps SNM P u sers (i dentified in th e SNMP User Tab le) t o the views created in the Structure of Management Information (SMI) and adds some security features. To add...delete an existing SNMP Group Table entry, click the Delete button next to devices through a combination of packets sent between the Switch and a remote SNMP manager. Security Model SNMPv1 - The following window, click Configuration > SNMP Settings > SNMP Group Table: Figure 2 - 42. Notify ...
Product Manual
Page 58
... entry, click the Delete button corresponding to the entry to the Switch's SNMP Ho st Table, enter the information at the top of the remote management station that SNMP version 2c will be used, with a NoAuth-NoPriv security level. To specify that the SNMP version 3 will be used...user name as the SNMP host for IPv4. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Host Table Users can set up SNMP trap recipients for the Switch. To specify that will be used , with an Auth-NoPriv security level. V3-AuthNoPriv - To view the following parameters can ...
... entry, click the Delete button corresponding to the entry to the Switch's SNMP Ho st Table, enter the information at the top of the remote management station that SNMP version 2c will be used, with a NoAuth-NoPriv security level. To specify that the SNMP version 3 will be used...user name as the SNMP host for IPv4. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP Host Table Users can set up SNMP trap recipients for the Switch. To specify that will be used , with an Auth-NoPriv security level. V3-AuthNoPriv - To view the following parameters can ...
Product Manual
Page 59
... Table: Figure 2 - 46. V3-NoAuthNoPriv - SNMP Version V1 - To specify that the SNMP version 3 will be used, with an Auth-Priv security level. V3-AuthPriv - Community String / Type in the community string or SNMP V3 user name as the SNMP host for IPv6. V2c - V3-AuthNoPriv...2c will serve as appropriate. To specify that will be used . xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP v6Host Table Users can set up SNMP trap recipients for the Switch. To view the following parameters can set : Parameter Description Host IPv6 Address Type...
... Table: Figure 2 - 46. V3-NoAuthNoPriv - SNMP Version V1 - To specify that the SNMP version 3 will be used, with an Auth-Priv security level. V3-AuthPriv - Community String / Type in the community string or SNMP V3 user name as the SNMP host for IPv6. V2c - V3-AuthNoPriv...2c will serve as appropriate. To specify that will be used . xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch SNMP v6Host Table Users can set up SNMP trap recipients for the Switch. To view the following parameters can set : Parameter Description Host IPv6 Address Type...
Product Manual
Page 74
...and click Apply. 61 To view the following section will enable or disable the Jumbo Frame function on the Switch. Jumbo Frame window Description This field will aid the user in configuring security functions for VLAN, Trunking, IGMP Snooping, MLD Snooping, Spanning Tree, and Forwarding & Filtering, all discussed... es are Et hernet fram es wi th m ore t han 1 ,500 by tes of 10240 bytes. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Section 3 L2 Features Jumbo Frame Egress Filter Settings 802.1Q VLAN Private VLAN Settings 802.1v Protocol VLAN MAC-based VLAN Settings...
...and click Apply. 61 To view the following section will enable or disable the Jumbo Frame function on the Switch. Jumbo Frame window Description This field will aid the user in configuring security functions for VLAN, Trunking, IGMP Snooping, MLD Snooping, Spanning Tree, and Forwarding & Filtering, all discussed... es are Et hernet fram es wi th m ore t han 1 ,500 by tes of 10240 bytes. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Section 3 L2 Features Jumbo Frame Egress Filter Settings 802.1Q VLAN Private VLAN Settings 802.1v Protocol VLAN MAC-based VLAN Settings...
Product Manual
Page 76
... a single global spanning tree. Uses an explicit tagging scheme with leg acy switch es t hat do n't recog nize VLAN tag s i n packet headers. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch VLAN Description A Virtual Local Area Network (VLAN) is a network topology configured according to... out of physical location. IEEE 802.1Q VLANs will only be made. Egress p ort - The main characteristics of security to span the entire network (assuming all ports and work with one-level tagging. 802.1Q VLAN Packet Forwarding ...
... a single global spanning tree. Uses an explicit tagging scheme with leg acy switch es t hat do n't recog nize VLAN tag s i n packet headers. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch VLAN Description A Virtual Local Area Network (VLAN) is a network topology configured according to... out of physical location. IEEE 802.1Q VLANs will only be made. Egress p ort - The main characteristics of security to span the entire network (assuming all ports and work with one-level tagging. 802.1Q VLAN Packet Forwarding ...
Product Manual
Page 133
...the threshold has been crossed, the Switch will again begin accepting all ARP and IP broadcast packets and packets from untrusted IP addresses for double the time of packets. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Security Safeguard Engine Trusted Host IP-MAC-...Port Binding (IMPB) Port Security DHCP Server Screening Guest VLAN 802.1X SSL Settings SSH Access Authentication Control ...
...the threshold has been crossed, the Switch will again begin accepting all ARP and IP broadcast packets and packets from untrusted IP addresses for double the time of packets. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Security Safeguard Engine Trusted Host IP-MAC-...Port Binding (IMPB) Port Security DHCP Server Screening Guest VLAN 802.1X SSL Settings SSH Access Authentication Control ...
Product Manual
Page 134
...Security > Safeguard Engine: Figure 5 - 2. To view the following parameters and click Apply. 121 NOTICE: When Safeguard Engine is enabled, the Switch... will allot bandwidth to various traffic flows (ARP, IP) using the FFP (Fast Filter Processor) metering table to Safeguard Engine State at 5-second in terval checking and dynamically adjust the packet flow to Normal mode, the p acket flow will th en return t o its in tervals. (First sto p = 5 seconds, second stop = 10...the Switch. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Figure 5 - 1. ...
...Security > Safeguard Engine: Figure 5 - 2. To view the following parameters and click Apply. 121 NOTICE: When Safeguard Engine is enabled, the Switch... will allot bandwidth to various traffic flows (ARP, IP) using the FFP (Fast Filter Processor) metering table to Safeguard Engine State at 5-second in terval checking and dynamically adjust the packet flow to Normal mode, the p acket flow will th en return t o its in tervals. (First sto p = 5 seconds, second stop = 10...the Switch. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Figure 5 - 1. ...
Product Manual
Page 135
...Trusted Host Up to ten trusted host secure IP addresses may select: Fuzzy - To view the following window, click Security > Trusted Host: Figure 5 - 3. Trusted Host window To configure secure IP addresses for the Switch, and will instruct the Switch to minimize the IP and ARP traffic... as up to nine additional IP addresses of CPU utilization as a percentage, where the Switch leaves the Safeguard Engine state and returns to normal mode. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Parameter Safeguard Engine State Rising Threshold (20% - 100%) Falling Threshold (20% - ...
...Trusted Host Up to ten trusted host secure IP addresses may select: Fuzzy - To view the following window, click Security > Trusted Host: Figure 5 - 3. Trusted Host window To configure secure IP addresses for the Switch, and will instruct the Switch to minimize the IP and ARP traffic... as up to nine additional IP addresses of CPU utilization as a percentage, where the Switch leaves the Safeguard Engine state and returns to normal mode. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch Parameter Safeguard Engine State Rising Threshold (20% - 100%) Falling Threshold (20% - ...
Product Manual
Page 136
... en abled on c lient IP i nformation. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch IP-MAC-Port Binding (IMPB) General Overview The DGS-3200 Series switches offer IP-MAC-Port Binding (IMPB), a D-Link security application used most common problem in today's networks, is another ...ACL or AR P mode. Solutions to Improve IP Management Security DGS-3200 Series switches have introduced IMPB technology to choose either ARP or ACL mode. DHCP snoo ping is enabled on the switch. Nonetheless, since the switch only checks ARP packets, it s advantages and disadvantages....
... en abled on c lient IP i nformation. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch IP-MAC-Port Binding (IMPB) General Overview The DGS-3200 Series switches offer IP-MAC-Port Binding (IMPB), a D-Link security application used most common problem in today's networks, is another ...ACL or AR P mode. Solutions to Improve IP Management Security DGS-3200 Series switches have introduced IMPB technology to choose either ARP or ACL mode. DHCP snoo ping is enabled on the switch. Nonetheless, since the switch only checks ARP packets, it s advantages and disadvantages....
Product Manual
Page 137
...DHCP snooping is gene rally cons idered to be on the switch's IMPB list; The distinct advantage of ACL Mode is that t he valid DHCP server's IP-MAC pair m ust be m ore secure because it ensures better security by default when ACL Mode is selected. otherwise the DHCP ...0211-222 Port 2 Figure 5 - 5. ACL Mode can be dropped. Therefore, these PCs will be selected per port. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch ACL Mode In ACL Mode, a switch performs IP Packet Inspection in which PC-A and PC-B g et th eir I P addresses from a D HCP ser ver is d...
...DHCP snooping is gene rally cons idered to be on the switch's IMPB list; The distinct advantage of ACL Mode is that t he valid DHCP server's IP-MAC pair m ust be m ore secure because it ensures better security by default when ACL Mode is selected. otherwise the DHCP ...0211-222 Port 2 Figure 5 - 5. ACL Mode can be dropped. Therefore, these PCs will be selected per port. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch ACL Mode In ACL Mode, a switch performs IP Packet Inspection in which PC-A and PC-B g et th eir I P addresses from a D HCP ser ver is d...
Product Manual
Page 138
...implement the settings made . Type the ports or range of ports you want to enable this function enabled. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch IMPB Global Settings Users can be set: Parameter Description Trap / Log Use the radio buttons to enable or disable the ... n ARP pac ket is Enabled, the Switch will enable and disable the DHCP Snooping option. DHCP Snoop State Use the radio buttons to enable or disable the ARP Inspection option for IP-MAC binding. IMPB Global Settings window The following window, click Security > IP-MAC-Port Binding (IMPB) >...
...implement the settings made . Type the ports or range of ports you want to enable this function enabled. xStack® DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch IMPB Global Settings Users can be set: Parameter Description Trap / Log Use the radio buttons to enable or disable the ... n ARP pac ket is Enabled, the Switch will enable and disable the DHCP Snooping option. DHCP Snoop State Use the radio buttons to enable or disable the ARP Inspection option for IP-MAC binding. IMPB Global Settings window The following window, click Security > IP-MAC-Port Binding (IMPB) >...