Product Manual
Page 43
..., complex network. Software User Manual 12/10/09 D-Link Unified Access System ABOUT THIS DOCUMENT This guide describes how to configure the D-Link 4000 Series switch software features by using the Web interface, command-line interface, and Simple Network Management Protocol (SNMP). You should have basic knowledge of software modules so that a platform running D-Link software can manage multiple access points on the network. • Appendix A "Configuration Examples" describe how to configure selected features on page 405 describes how to manage the D-Link software ACLs. •...
..., complex network. Software User Manual 12/10/09 D-Link Unified Access System ABOUT THIS DOCUMENT This guide describes how to configure the D-Link 4000 Series switch software features by using the Web interface, command-line interface, and Simple Network Management Protocol (SNMP). You should have basic knowledge of software modules so that a platform running D-Link software can manage multiple access points on the network. • Appendix A "Configuration Examples" describe how to configure selected features on page 405 describes how to manage the D-Link software ACLs. •...
Product Manual
Page 45
... port. Enter admin as the IP address, subnet mask, and default gateway by connecting to the switch command line interface (CLI) using the terminal interface via the EIA-232 port. The command prompt changes to the console (serial) port. Stop bit: 1 - Baud rate: 115200 bps - Press ENTER at the password prompt if you configure network information, such as HyperTerminal or TeraTerm. 2 Configure the terminal-emulation program to use the following settings: - The default IP address/subnet mask of the switch through SSH, telnet, a Web...
... port. Enter admin as the IP address, subnet mask, and default gateway by connecting to the switch command line interface (CLI) using the terminal interface via the EIA-232 port. The command prompt changes to the console (serial) port. Stop bit: 1 - Baud rate: 115200 bps - Press ENTER at the password prompt if you configure network information, such as HyperTerminal or TeraTerm. 2 Configure the terminal-emulation program to use the following settings: - The default IP address/subnet mask of the switch through SSH, telnet, a Web...
Product Manual
Page 59
... Synchronized." You may use to the network interface. Enter the name you want to use up to 31 alpha-numeric characters. Enter the location of this switch. If no SNTP server has been configured and the time is blank. Enter the contact person for the switch's enterprise MIB. The factory default is blank. Software User Manual 12/10/09 D-Link Unified Access System Figure 10: System...
... Synchronized." You may use to the network interface. Enter the name you want to use up to 31 alpha-numeric characters. Enter the location of this switch. If no SNTP server has been configured and the time is blank. Enter the contact person for the switch's enterprise MIB. The factory default is blank. Software User Manual 12/10/09 D-Link Unified Access System Figure 10: System...
Product Manual
Page 61
... new values across a power cycle, you change the mode, click Submit to apply the changes to view information about the cards installed in the navigation menu. To access the Card Configuration page, click LAN > Administration > Card Configuration in a switch. The factory default is 5 percent of port speed. Specify the data rate at which storm control activates. Enables or disables IEEE 802.3x flow control on any Ethernet port exceeds the configured threshold. Figure 12 shows...
... new values across a power cycle, you change the mode, click Submit to apply the changes to view information about the cards installed in the navigation menu. To access the Card Configuration page, click LAN > Administration > Card Configuration in a switch. The factory default is 5 percent of port speed. Specify the data rate at which storm control activates. Enables or disables IEEE 802.3x flow control on any Ethernet port exceeds the configured threshold. Figure 12 shows...
Product Manual
Page 67
... zero. MAC Address Type Select the MAC address to use the burned-in MAC address. • Burned-In: Use the factory default MAC address. • Locally Administered: Use the MAC address you entered in -band connectivity if you choose not to locally administered. Network Configuration Protocol Current Specify what the switch should do following power-up . The options are not valid. Web Mode Java Mode Controls whether the switch user interface can be set the MAC address type to configure a locally administered address. Document 34CSFP6XXUWS...
... zero. MAC Address Type Select the MAC address to use the burned-in MAC address. • Burned-In: Use the factory default MAC address. • Locally Administered: Use the MAC address you entered in -band connectivity if you choose not to locally administered. Network Configuration Protocol Current Specify what the switch should do following power-up . The options are not valid. Web Mode Java Mode Controls whether the switch user interface can be set the MAC address type to configure a locally administered address. Document 34CSFP6XXUWS...
Product Manual
Page 110
... Unicast Storm Recovery Mode Unicast Storm Recovery Level LACP Mode Specify the data rate at which storm control activates. For information about port monitoring and probe ports, see "Creating Port Channels (Trunking)" on page 238. The value is a percentage of port speed and ranges from 0-100. For more information about configuring port channels, see "Multiple Port Mirroring" on page 115. • Probe: Indicates that the port has been configured as a link Aggregation Group (LAG). The factory default is 5 percent of port speed. The value is disabled...
... Unicast Storm Recovery Mode Unicast Storm Recovery Level LACP Mode Specify the data rate at which storm control activates. For information about port monitoring and probe ports, see "Creating Port Channels (Trunking)" on page 238. The value is a percentage of port speed and ranges from 0-100. For more information about configuring port channels, see "Multiple Port Mirroring" on page 115. • Probe: Indicates that the port has been configured as a link Aggregation Group (LAG). The factory default is 5 percent of port speed. The value is disabled...
Product Manual
Page 113
... block broadcast traffic if traffic on receipt of port speed. The factory default is 5 percent of a frame. The port role will place that is enabled is the data rate at which storm control activates. Shows the Multicast Storm Recovery Level, which is assigned a Port Role for each spanning tree. Software User Manual 12/10/09 D-Link Unified Access System Field Forwarding State Port Role Media Type ARP Type Admin Mode Bcast Storm Mode Bcast Storm Level Mcast Storm Mode Mcast Storm Level Ucast Storm Mode Ucast Storm Level Table 44: Port Summary...
... block broadcast traffic if traffic on receipt of port speed. The factory default is 5 percent of a frame. The port role will place that is enabled is the data rate at which storm control activates. Shows the Multicast Storm Recovery Level, which is assigned a Port Role for each spanning tree. Software User Manual 12/10/09 D-Link Unified Access System Field Forwarding State Port Role Media Type ARP Type Admin Mode Bcast Storm Mode Bcast Storm Level Mcast Storm Mode Mcast Storm Level Ucast Storm Mode Ucast Storm Level Table 44: Port Summary...
Product Manual
Page 137
... the selected port. The number of successfully transmitted frames on a particular interface for this port due to clear all ports on the switch. Document 34CSFP6XXUWS-SWUM100-D7 Viewing System Statistics Page 137 Software User Manual 12/10/09 D-Link Unified Access System Field Total Transmit Packets Discarded Total Output Packets Drops Single Collision Frames Multiple Collision Frames Excessive Collision Frames Late Collision Frames Port Membership Discards Lost/No Carrier Frames Protocol Statistics STP BPDUs Received STP BPDUs...
... the selected port. The number of successfully transmitted frames on a particular interface for this port due to clear all ports on the switch. Document 34CSFP6XXUWS-SWUM100-D7 Viewing System Statistics Page 137 Software User Manual 12/10/09 D-Link Unified Access System Field Total Transmit Packets Discarded Total Output Packets Drops Single Collision Frames Multiple Collision Frames Excessive Collision Frames Late Collision Frames Port Membership Discards Lost/No Carrier Frames Protocol Statistics STP BPDUs Received STP BPDUs...
Product Manual
Page 146
... time when upgrading/downgrading the D-Link software. Use the Multiple Image Service page to the user. When a configuration file created by the newer software version is discovered by the newer software version. After you are uploading a D-Link image (Code), select the image on the switch to upload. One image is the active image, and the second image is not available. 3 Complete the TFTP Server Address Type, TFTP Server IP Address, and TFTP File Name (full path without TFTP server...
... time when upgrading/downgrading the D-Link software. Use the Multiple Image Service page to the user. When a configuration file created by the newer software version is discovered by the newer software version. After you are uploading a D-Link image (Code), select the image on the switch to upload. One image is the active image, and the second image is not available. 3 Complete the TFTP Server Address Type, TFTP Server IP Address, and TFTP File Name (full path without TFTP server...
Product Manual
Page 214
... forwarded throughout the network to determine which range from broadcasting the traffic to all nodes connected to transmit new packets onto the shared media for only a small number of wasting bandwidth is even worse when the LAN segment is received, the switch will rarely incur any interest in Full Duplex links. D-Link Unified Access System Software User Manual 12/10/09 CONFIGURING IGMP SNOOPING Internet Group Management Protocol (IGMP) Snooping...
... forwarded throughout the network to determine which range from broadcasting the traffic to all nodes connected to transmit new packets onto the shared media for only a small number of wasting bandwidth is even worse when the LAN segment is received, the switch will rarely incur any interest in Full Duplex links. D-Link Unified Access System Software User Manual 12/10/09 CONFIGURING IGMP SNOOPING Internet Group Management Protocol (IGMP) Snooping...
Product Manual
Page 259
...; Disable: The port is enabled. Only packets with source MAC addresses that only packets with allowable source MAC addresses can effectively disable dynamic locking by setting the number of allowable dynamic entries to the list of Dynamically Learned MAC Addresses Allowed Add a Static MAC Address Determines whether port security is not locked, so no more addresses are learned on the selected interface. Software User Manual 12/10/09 D-Link Unified Access System PORT SECURITY INTERFACE CONFIGURATION Use this page to configure the port...
...; Disable: The port is enabled. Only packets with source MAC addresses that only packets with allowable source MAC addresses can effectively disable dynamic locking by setting the number of allowable dynamic entries to the list of Dynamically Learned MAC Addresses Allowed Add a Static MAC Address Determines whether port security is not locked, so no more addresses are learned on the selected interface. Software User Manual 12/10/09 D-Link Unified Access System PORT SECURITY INTERFACE CONFIGURATION Use this page to configure the port...
Product Manual
Page 286
... destination UDP port number to the interface. D-Link Unified Access System Software User Manual 12/10/09 Field MAC Address Encapsulation Type Proxy ARP Local Proxy ARP IP MTU Bandwidth Destination Unreachables ICMP Redirects Table 177: IP Interface Configuration Fields (Cont.) Description The burned-in Kbps. Valid range is Enable. Helper IP Interface Configuration Use the Helper IP Interface Configuration page to add a Helper IP address to a single IPv4 address (the helper address). The router sends an...
... destination UDP port number to the interface. D-Link Unified Access System Software User Manual 12/10/09 Field MAC Address Encapsulation Type Proxy ARP Local Proxy ARP IP MTU Bandwidth Destination Unreachables ICMP Redirects Table 177: IP Interface Configuration Fields (Cont.) Description The burned-in Kbps. Valid range is Enable. Helper IP Interface Configuration Use the Helper IP Interface Configuration page to add a Helper IP address to a single IPv4 address (the helper address). The router sends an...
Product Manual
Page 344
... assign a unique ACL ID. Then, you use the ID number to assign the ACL to provide traffic flow control, restrict contents of routing updates, decide which can identify protocols, source and destination IP and MAC addresses, and other packet-matching criteria. ACLs are forwarded or blocked, and above all provide security for the network. The total number of traffic are used to a port. D-Link software supports IPv4 and MAC ACLs. Page 344 Configuring Access Control Lists Document 34CSFP6XXUWS-SWUM100...
... assign a unique ACL ID. Then, you use the ID number to assign the ACL to provide traffic flow control, restrict contents of routing updates, decide which can identify protocols, source and destination IP and MAC addresses, and other packet-matching criteria. ACLs are forwarded or blocked, and above all provide security for the network. The total number of traffic are used to a port. D-Link software supports IPv4 and MAC ACLs. Page 344 Configuring Access Control Lists Document 34CSFP6XXUWS-SWUM100...
Product Manual
Page 398
... between the switch and the TACACS+ server you make any changes to the page, click Submit to apply the new settings to the following services: • Authentication: Provides authentication during login and via user names and user-defined passwords. • Authorization: Performed at login. Page 398 TACACS+ Settings Document 34CSFP6XXUWS-SWUM100-D7 D-Link Unified Access System Software User Manual 12/10/09 TACACS+ SETTINGS D-Link software provides Terminal Access Controller Access Control System (TACACS+) client support.
... between the switch and the TACACS+ server you make any changes to the page, click Submit to apply the new settings to the following services: • Authentication: Provides authentication during login and via user names and user-defined passwords. • Authorization: Performed at login. Page 398 TACACS+ Settings Document 34CSFP6XXUWS-SWUM100-D7 D-Link Unified Access System Software User Manual 12/10/09 TACACS+ SETTINGS D-Link software provides Terminal Access Controller Access Control System (TACACS+) client support.
Product Manual
Page 406
...) Each access point supports up to configure and monitor all AP settings and maintain a consistent configuration among all APs in the network. Page 406 D-Link Unified Access System Components Document 34CSFP6XXUWS-SWUM100-D7 The VAP feature allows you manage it by a switch, the managed mode on the AP must be enabled. D-Link Unified Access System Software User Manual 12/10/09 DWS-4026 UNIFIED SWITCH The Unified Switch handles Layer 2, 3, and 4 switching and routing functions for traffic on...
...) Each access point supports up to configure and monitor all AP settings and maintain a consistent configuration among all APs in the network. Page 406 D-Link Unified Access System Components Document 34CSFP6XXUWS-SWUM100-D7 The VAP feature allows you manage it by a switch, the managed mode on the AP must be enabled. D-Link Unified Access System Software User Manual 12/10/09 DWS-4026 UNIFIED SWITCH The Unified Switch handles Layer 2, 3, and 4 switching and routing functions for traffic on...
Product Manual
Page 421
....11n specification allows the use by limiting the number of the channel bandwidth to a 20-MHz channel. Software User Manual 12/10/09 D-Link Unified Access System Field Auto Eligible Rate Sets Basic Supported Table 260: Radio Settings (Cont.) Description Select the Auto Eligible option beneath each channel to include the channel in sentry mode. Enter the rate limit you access the Access Point Profile Radio configuration through the Radio tab for configuration. Any traffic that...
....11n specification allows the use by limiting the number of the channel bandwidth to a 20-MHz channel. Software User Manual 12/10/09 D-Link Unified Access System Field Auto Eligible Rate Sets Basic Supported Table 260: Radio Settings (Cont.) Description Select the Auto Eligible option beneath each channel to include the channel in sentry mode. Enter the rate limit you access the Access Point Profile Radio configuration through the Radio tab for configuration. Any traffic that...
Product Manual
Page 508
... small packets. • The tunneling mode is set up to the AP. Wireless SNMP Trap Configuration If you use L3 tunneling. • The tunneling mode is deleted. If you increase the tunnel IP MTU size, you configure in place, but any of existing network infrastructure which is used only for the Cluster Controller election. Specify the priority of this switch for voice traffic, which the traffic flows...
... small packets. • The tunneling mode is set up to the AP. Wireless SNMP Trap Configuration If you use L3 tunneling. • The tunneling mode is deleted. If you increase the tunnel IP MTU size, you configure in place, but any of existing network infrastructure which is used only for the Cluster Controller election. Specify the priority of this switch for voice traffic, which the traffic flows...
Product Manual
Page 524
D-Link Unified Access System Software User Manual 12/10/09 Field AP Profiles Known Client Captive Portal RADIUS Client QoS ACL Qos DiffServ Table 339: Peer Switch Configuration Enable/Disable Description Enable this field to include all AP profiles in the configuration that the switch pushes to its peers. WIDS SECURITY The D-Link Unified Switch Wireless Intrusion Detection System (WIDS) can be manually pushed to other secure information. These changes can help...
D-Link Unified Access System Software User Manual 12/10/09 Field AP Profiles Known Client Captive Portal RADIUS Client QoS ACL Qos DiffServ Table 339: Peer Switch Configuration Enable/Disable Description Enable this field to include all AP profiles in the configuration that the switch pushes to its peers. WIDS SECURITY The D-Link Unified Switch Wireless Intrusion Detection System (WIDS) can be manually pushed to other secure information. These changes can help...
Product Manual
Page 545
... a Layer 3 switch configured for interface 0/3 to 20. 3 Navigate to support VLAN routing. The script shows the commands you can use the show ip vlan command to determine the VLAN's interface ID so that of a physical port. Document 34CSFP6XXUWS-SWUM100-D7 Configuring VLAN Routing Page 545 The configuration of the VLAN router port is that, after the VLAN has been created, you must use it in the router configuration commands. The diagram in the other. Software User Manual 12/10/09 D-Link Unified Access...
... a Layer 3 switch configured for interface 0/3 to 20. 3 Navigate to support VLAN routing. The script shows the commands you can use the show ip vlan command to determine the VLAN's interface ID so that of a physical port. Document 34CSFP6XXUWS-SWUM100-D7 Configuring VLAN Routing Page 545 The configuration of the VLAN router port is that, after the VLAN has been created, you must use it in the router configuration commands. The diagram in the other. Software User Manual 12/10/09 D-Link Unified Access...
Product Manual
Page 554
... Example Network Diagram 1 To set up a class for all ports to use strict priority mode, go to the LAN > QoS > Class of Service > CoS Interface Queue Configuration page and configure the following settings: • Slot/Port: Global • Queue ID: 5 • Scheduler Type: Strict 2 Click Submit. Page 554 Configuring Differentiated Services for a network to provide acceptable service, a guaranteed transmission rate is inherently time-sensitive: for VoIP Document 34CSFP6XXUWS-SWUM100-D7 VoIP traffic...
... Example Network Diagram 1 To set up a class for all ports to use strict priority mode, go to the LAN > QoS > Class of Service > CoS Interface Queue Configuration page and configure the following settings: • Slot/Port: Global • Queue ID: 5 • Scheduler Type: Strict 2 Click Submit. Page 554 Configuring Differentiated Services for a network to provide acceptable service, a guaranteed transmission rate is inherently time-sensitive: for VoIP Document 34CSFP6XXUWS-SWUM100-D7 VoIP traffic...