Product Manual
Page 14
D-Link Unified Access System Software User Manual 12/10/09 Section 5: Configuring Quality of Service 325 Configuring Differentiated Services ...326 Defining DiffServ...326 Diffserv Configuration ...326 ... CoS Interface Queue Configuration ...340 Configuring Auto VoIP ...342 Auto VoIP Configuration ...342 Section 6: Configuring Access Control Lists 344 IP Access Control Lists...345 IP ACL Configuration...345 IP ACL Rule Configuration ...346 MAC Access Control Lists ...351 MAC ACL Configuration ...351 MAC ACL Rule Configuration...352 ACL Interface Configuration ...355 Assigning an...
D-Link Unified Access System Software User Manual 12/10/09 Section 5: Configuring Quality of Service 325 Configuring Differentiated Services ...326 Defining DiffServ...326 Diffserv Configuration ...326 ... CoS Interface Queue Configuration ...340 Configuring Auto VoIP ...342 Auto VoIP Configuration ...342 Section 6: Configuring Access Control Lists 344 IP Access Control Lists...345 IP ACL Configuration...345 IP ACL Rule Configuration ...346 MAC Access Control Lists ...351 MAC ACL Configuration ...351 MAC ACL Rule Configuration...352 ACL Interface Configuration ...355 Assigning an...
Product Manual
Page 15
Software User Manual 12/10/09 D-Link Unified Access System Adding a Local User ...370 Configuring Users in the Local Database 371 Configuring Users in a Remote RADIUS Server 372 Interface Association...... Client Statistics...380 Viewing the Client Interface Association Status 381 Viewing the Client CP Association Status 382 SNMP Trap Configuration...382 Port Access Control...383 Global Port Access Control Configuration 384 Port Configuration ...385 Port Access Entity Capability Configuration 386 Supplicant Port Configuration ...387 User Login Configuration ...389 Port Access Privileges...
Software User Manual 12/10/09 D-Link Unified Access System Adding a Local User ...370 Configuring Users in the Local Database 371 Configuring Users in a Remote RADIUS Server 372 Interface Association...... Client Statistics...380 Viewing the Client Interface Association Status 381 Viewing the Client CP Association Status 382 SNMP Trap Configuration...382 Port Access Control...383 Global Port Access Control Configuration 384 Port Configuration ...385 Port Access Entity Capability Configuration 386 Supplicant Port Configuration ...387 User Login Configuration ...389 Port Access Privileges...
Product Manual
Page 19
Software User Manual 12/10/09 D-Link Unified Access System WIDS Client Configuration ...527 Visualizing the Wireless Network ...529 Importing and Configuring a Background Image 530 Setting Up the Graph Components...the Graph ...538 Appendix A: Configuration Examples 539 Configuring VLANs ...539 Configuring Multiple Spanning Tree Protocol 542 Configuring VLAN Routing...545 Configuring 802.1X Network Access Control 548 Configuring a Virtual Access Point ...550 Configuring Differentiated Services for VoIP 554 Appendix B: Limited Warranty (USA Only 557 Product Registration...559 Appendix C: ...
Software User Manual 12/10/09 D-Link Unified Access System WIDS Client Configuration ...527 Visualizing the Wireless Network ...529 Importing and Configuring a Background Image 530 Setting Up the Graph Components...the Graph ...538 Appendix A: Configuration Examples 539 Configuring VLANs ...539 Configuring Multiple Spanning Tree Protocol 542 Configuring VLAN Routing...545 Configuring 802.1X Network Access Control 548 Configuring a Virtual Access Point ...550 Configuring Differentiated Services for VoIP 554 Appendix B: Limited Warranty (USA Only 557 Product Registration...559 Appendix C: ...
Product Manual
Page 28
D-Link Unified Access System Software User Manual 12/10/09 Figure 244: IP ACL Rule Configuration (Extended ACL Rule 347 Figure 245: MAC ACL Configuration ...351 ... ...382 Figure 271: SNMP Trap Configuration...383 Figure 272: Port Access Control-Port Configuration 384 Figure 273: Port Access Control Port Configuration 385 Figure 274: PAE Capability Configuration ...387 Figure 275: Port Access Control Supplicant Port Configuration 387 Figure 276: Port Access Control Login ...389 Figure 277: Port Access Privileges ...390 Figure 278: RADIUS...
D-Link Unified Access System Software User Manual 12/10/09 Figure 244: IP ACL Rule Configuration (Extended ACL Rule 347 Figure 245: MAC ACL Configuration ...351 ... ...382 Figure 271: SNMP Trap Configuration...383 Figure 272: Port Access Control-Port Configuration 384 Figure 273: Port Access Control Port Configuration 385 Figure 274: PAE Capability Configuration ...387 Figure 275: Port Access Control Supplicant Port Configuration 387 Figure 276: Port Access Control Login ...389 Figure 277: Port Access Privileges ...390 Figure 278: RADIUS...
Product Manual
Page 39
Software User Manual 12/10/09 D-Link Unified Access System Table 209: Policy Configuration Fields ...331 Table 210: Policy Class Definition Fields ...332 Table 211: Service Configuration Fields...334 Table 212: 802.... ...380 Table 238: Client Interface Association Connection Statistics 381 Table 239: Interface - Client Status ...382 Table 241: SNMP Trap Configuration ...383 Table 242: Port Access Control-Port Configuration Fields 384 Table 243: Port Access Control Port Configuration Fields 385 Document 34CSFP6XXUWS-SWUM100-D7 Page 39 Client Status ...382 Table 240: CP -
Software User Manual 12/10/09 D-Link Unified Access System Table 209: Policy Configuration Fields ...331 Table 210: Policy Class Definition Fields ...332 Table 211: Service Configuration Fields...334 Table 212: 802.... ...380 Table 238: Client Interface Association Connection Statistics 381 Table 239: Interface - Client Status ...382 Table 241: SNMP Trap Configuration ...383 Table 242: Port Access Control-Port Configuration Fields 384 Table 243: Port Access Control Port Configuration Fields 385 Document 34CSFP6XXUWS-SWUM100-D7 Page 39 Client Status ...382 Table 240: CP -
Product Manual
Page 40
D-Link Unified Access System Software User Manual 12/10/09 Table 244: PAE Capability Configuration...387 Table 245: Dot1x Supplicant Port Configuration 387 Table 246: Port Access Control user Login Configuration Fields 389 Table 247: Port Access Privileges Fields...390 Table 248: RADIUS Configuration Fields ...391 Table 249: RADIUS Server Configuration Fields 393...
D-Link Unified Access System Software User Manual 12/10/09 Table 244: PAE Capability Configuration...387 Table 245: Dot1x Supplicant Port Configuration 387 Table 246: Port Access Control user Login Configuration Fields 389 Table 247: Port Access Privileges Fields...390 Table 248: RADIUS Configuration Fields ...391 Table 249: RADIUS Server Configuration Fields 393...
Product Manual
Page 43
... also have an understanding of Service, and Auto VoIP features. • Section 6: "Configuring Access Control Lists" on page 344 describes how to configure the D-Link 4000 Series switch software features by using the Web interface, command-line interface, and Simple Network Management...information such as captive portal configuration, port access control, TACACS+, and RADIUS server settings. • Section 8: "Configuring the Wireless Features" on the switch by using the Web-based graphical user interface (GUI). The D-Link 4000 Series switch architecture accommodates a variety of ...
... also have an understanding of Service, and Auto VoIP features. • Section 6: "Configuring Access Control Lists" on page 344 describes how to configure the D-Link 4000 Series switch software features by using the Web interface, command-line interface, and Simple Network Management...information such as captive portal configuration, port access control, TACACS+, and RADIUS server settings. • Section 8: "Configuring the Wireless Features" on the switch by using the Web-based graphical user interface (GUI). The D-Link 4000 Series switch architecture accommodates a variety of ...
Product Manual
Page 45
... switch command line interface (CLI) using the terminal interface via the EIA-232 port. Flow control: none 3 Power on the switch. To use a DHCP server to enter Privileged EXEC mode... system. Stop bit: 1 - After a successful login, the screen shows the system prompt(DWS-4026)>. 5 At the (DWS-4026)> prompt, enter enable to start a terminal-emulation program, such as the user name. Press... if you did not change the default password. Software User Manual 12/10/09 D-Link Unified Access System Section 1: Getting Started This section describes how to enter the Privileged ...
... switch command line interface (CLI) using the terminal interface via the EIA-232 port. Flow control: none 3 Power on the switch. To use a DHCP server to enter Privileged EXEC mode... system. Stop bit: 1 - After a successful login, the screen shows the system prompt(DWS-4026)>. 5 At the (DWS-4026)> prompt, enter enable to start a terminal-emulation program, such as the user name. Press... if you did not change the default password. Software User Manual 12/10/09 D-Link Unified Access System Section 1: Getting Started This section describes how to enter the Privileged ...
Product Manual
Page 60
... Page 60 Switch Configuration Document 34CSFP6XXUWS-SWUM100-D7 If you want the switch to high-priority and/or network control traffic loss. When 802.3x flow control is updated. To display the Switch Configuration page, click LAN >Administration > Switch Configuration in the navigation tree... can communicate with higher speed switches by pausing a port when the port becomes oversubscribed and dropping all traffic for the switch. D-Link Unified Access System Software User Manual 12/10/09 Defining System Information 1 Open the System Description page. 2 Define the following fields...
... Page 60 Switch Configuration Document 34CSFP6XXUWS-SWUM100-D7 If you want the switch to high-priority and/or network control traffic loss. When 802.3x flow control is updated. To display the Switch Configuration page, click LAN >Administration > Switch Configuration in the navigation tree... can communicate with higher speed switches by pausing a port when the port becomes oversubscribed and dropping all traffic for the switch. D-Link Unified Access System Software User Manual 12/10/09 Defining System Information 1 Open the System Description page. 2 Define the following fields...
Product Manual
Page 61
...higher speed switches. • Disable: Disables flow control so that display when the slot contains a card. The factory default is 5 percent of port speed. The factory default is disabled. Software User Manual 12/10/09 D-Link Unified Access System Field Broadcast Storm Recovery Mode ...Broadcast Storm Recovery Level Multicast Storm Recovery Mode Multicast Storm Recovery Level Unicast Storm Recovery Mode Unicast Storm Recovery Level IEEE 802.3x Flow Control Mode Table 6: Switch Configuration Fields...
...higher speed switches. • Disable: Disables flow control so that display when the slot contains a card. The factory default is 5 percent of port speed. The factory default is disabled. Software User Manual 12/10/09 D-Link Unified Access System Field Broadcast Storm Recovery Mode ...Broadcast Storm Recovery Level Multicast Storm Recovery Mode Multicast Storm Recovery Level Unicast Storm Recovery Mode Unicast Storm Recovery Level IEEE 802.3x Flow Control Mode Table 6: Switch Configuration Fields...
Product Manual
Page 65
Figure 15: Serial Port Field Serial Port Login Timeout (minutes) Baud Rate (bps) Character Size (bits) Flow Control Stop Bits Parity Table 9: Serial Port Fields Description Indicates how many minutes of inactivity should occur on the switch cannot be the same. It ...serial port settings on the serial port. The factory default is enabled or disabled. Whether hardware flow control is 115200. The number of stop bits per character. Software User Manual 12/10/09 D-Link Unified Access System SERIAL PORT The Serial Port Configuration page allows you to change any data, click Submit...
Figure 15: Serial Port Field Serial Port Login Timeout (minutes) Baud Rate (bps) Character Size (bits) Flow Control Stop Bits Parity Table 9: Serial Port Fields Description Indicates how many minutes of inactivity should occur on the switch cannot be the same. It ...serial port settings on the serial port. The factory default is enabled or disabled. Whether hardware flow control is 115200. The number of stop bits per character. Software User Manual 12/10/09 D-Link Unified Access System SERIAL PORT The Serial Port Configuration page allows you to change any data, click Submit...
Product Manual
Page 67
...burned-in -band connectivity if you want to configure on your selection, different fields display. Web Mode Java Mode Controls whether the switch user interface can be configured. Controls whether to display the Java applet that is None. Depending on the interface. i.e., byte 0 must also set...8226; Locally Administered: Use the MAC address you must have a value between each byte. Software User Manual 12/10/09 D-Link Unified Access System Table 10: Network Connectivity Fields Field Description Protocol Selects the IP protocol version you choose not to configure a locally...
...burned-in -band connectivity if you want to configure on your selection, different fields display. Web Mode Java Mode Controls whether the switch user interface can be configured. Controls whether to display the Java applet that is None. Depending on the interface. i.e., byte 0 must also set...8226; Locally Administered: Use the MAC address you must have a value between each byte. Software User Manual 12/10/09 D-Link Unified Access System Table 10: Network Connectivity Fields Field Description Protocol Selects the IP protocol version you choose not to configure a locally...
Product Manual
Page 74
You are now ready to create the name and display the Method fields for system login or IEEE 802.1X port access control. Configuring an Authentication List To modify an authentication list, use this button if you must perform a save. To retain the changes across...delete will fail if the selected login list is set as the initial authentication method. Page 74 Authentication List Configuration Document 34CSFP6XXUWS-SWUM100-D7 D-Link Unified Access System Software User Manual 12/10/09 Creating an Authentication List To create a new authentication list, use the following procedures. 1...
You are now ready to create the name and display the Method fields for system login or IEEE 802.1X port access control. Configuring an Authentication List To modify an authentication list, use this button if you must perform a save. To retain the changes across...delete will fail if the selected login list is set as the initial authentication method. Page 74 Authentication List Configuration Document 34CSFP6XXUWS-SWUM100-D7 D-Link Unified Access System Software User Manual 12/10/09 Creating an Authentication List To create a new authentication list, use the following procedures. 1...
Product Manual
Page 75
... to authenticate the users for system login access. Shows the users assigned to this login list on page 77. Shows the port access control users assigned to this row. This list is used to authenticate the users for the list. Software User Manual 12/10/09... D-Link Unified Access System AUTHENTICATION LIST SUMMARY Use the Authentication List Summary page to view information about 802.1X port security users. This list is used to a specific authentication list, see "Port Access Control" on the system and which users are associated ...
... to authenticate the users for system login access. Shows the users assigned to this login list on page 77. Shows the port access control users assigned to this row. This list is used to authenticate the users for the list. Software User Manual 12/10/09... D-Link Unified Access System AUTHENTICATION LIST SUMMARY Use the Authentication List Summary page to view information about 802.1X port security users. This list is used to a specific authentication list, see "Port Access Control" on the system and which users are associated ...
Product Manual
Page 78
... then configured value. • TCP Fragment: IP Fragment Offset = 1. • TCP Flag: TCP Flag SYN set and Source Port < 1024 or TCP Control Flags = 0 and TCP Sequence Number = 0 or TCP Flags FIN, URG, and PSH set and TCP Sequence Number = 0 or TCP Flags SYN and... entry field. Enabling ICMP DoS prevention causes the switch to configure DoS control. Specify the Min TCP Hdr Size allowed. If First Fragment DoS prevention is disabled. The factory default is disabled. D-Link software provides support for classifying and blocking specific types of Service Protection Document...
... then configured value. • TCP Fragment: IP Fragment Offset = 1. • TCP Flag: TCP Flag SYN set and Source Port < 1024 or TCP Control Flags = 0 and TCP Sequence Number = 0 or TCP Flags FIN, URG, and PSH set and TCP Sequence Number = 0 or TCP Flags SYN and... entry field. Enabling ICMP DoS prevention causes the switch to configure DoS control. Specify the Min TCP Hdr Size allowed. If First Fragment DoS prevention is disabled. The factory default is disabled. D-Link software provides support for classifying and blocking specific types of Service Protection Document...
Product Manual
Page 79
... the source port. Enable or disable this option by selecting the corresponding line on the source port, that have a size greater than 1024 or TCP control flags set to 0 and TCP sequence number set to 0 or TCP flags FIN, URG, and PSH set and TCP sequence number set to 0 or ...Mirroring Page 79 The factory default is disabled. Use the Multiple Port Mirroring page to the destination IP address. Software User Manual 12/10/09 D-Link Unified Access System Table 19: Denial of Service Configuration Fields (Cont.) Field Denial of Service Max ICMP Size Denial of Service L4 Port Denial of...
... the source port. Enable or disable this option by selecting the corresponding line on the source port, that have a size greater than 1024 or TCP control flags set to 0 and TCP sequence number set to 0 or TCP flags FIN, URG, and PSH set and TCP sequence number set to 0 or ...Mirroring Page 79 The factory default is disabled. Use the Multiple Port Mirroring page to the destination IP address. Software User Manual 12/10/09 D-Link Unified Access System Table 19: Denial of Service Configuration Fields (Cont.) Field Denial of Service Max ICMP Size Denial of Service L4 Port Denial of...
Product Manual
Page 86
D-Link Unified Access System Software User Manual 12/10/09 This log message has a severity level of file mstp_api.c. COMMAND LOGGER CONFIGURATION Use the Command Logger ... Description This field determines whether to update the page with the other system logs messages. CONSOLE LOG CONFIGURATION Use the Console Log Configuration page to control logging to any serial device attached to the system. This is a debug message. The message was generated on August 24 05:34:05 by the...
D-Link Unified Access System Software User Manual 12/10/09 This log message has a severity level of file mstp_api.c. COMMAND LOGGER CONFIGURATION Use the Command Logger ... Description This field determines whether to update the page with the other system logs messages. CONSOLE LOG CONFIGURATION Use the Console Log Configuration page to control logging to any serial device attached to the system. This is a debug message. The message was generated on August 24 05:34:05 by the...
Product Manual
Page 93
...be allowed, but existing sessions are disconnected immediately. Any sessions that originate on the switch. Software User Manual 12/10/09 D-Link Unified Access System TELNET SESSIONS Telnet is set to disable, then all active and inactive sessions immediately. The Telnet Session Configuration page... is Enable. • If you change any number from 1 to five simultaneous telnet sessions. From the drop-down the telnet port. Controls whether to allow a user on a telnet session before the session is 5, which are telnet sessions that have been idle longer than the...
...be allowed, but existing sessions are disconnected immediately. Any sessions that originate on the switch. Software User Manual 12/10/09 D-Link Unified Access System TELNET SESSIONS Telnet is set to disable, then all active and inactive sessions immediately. The Telnet Session Configuration page... is Enable. • If you change any number from 1 to five simultaneous telnet sessions. From the drop-down the telnet port. Controls whether to allow a user on a telnet session before the session is 5, which are telnet sessions that have been idle longer than the...
Product Manual
Page 94
... 1 to 160 minutes. • If you must perform a save. Page 94 Outbound Telnet Client Configuration Document 34CSFP6XXUWS-SWUM100-D7 D-Link Unified Access System Software User Manual 12/10/09 OUTBOUND TELNET CLIENT CONFIGURATION The outbound telnet feature is not available on all platforms. Use... the outbound telnet client settings to control the telnet sessions that originate from the switch. Specifies the maximum number of Outbound Telnet Sessions allowed. The default value is ...
... 1 to 160 minutes. • If you must perform a save. Page 94 Outbound Telnet Client Configuration Document 34CSFP6XXUWS-SWUM100-D7 D-Link Unified Access System Software User Manual 12/10/09 OUTBOUND TELNET CLIENT CONFIGURATION The outbound telnet feature is not available on all platforms. Use... the outbound telnet client settings to control the telnet sessions that originate from the switch. Specifies the maximum number of Outbound Telnet Sessions allowed. The default value is ...
Product Manual
Page 110
Specify the data rate at which storm control activates. The possible values for this field are : • Mirrored: Indicates that the port has been configured as a link Aggregation Group (LAG). The value is a percentage of port speed and ranges from 0-100. For more information about configuring.... Specify the data rate at which is 5 percent of port speed. The factory default is disabled. Selects the Link Aggregation Control Protocol administration state: • Enable: Specifies that the port has been configured as a member of a portchannel, which can...
Specify the data rate at which storm control activates. The possible values for this field are : • Mirrored: Indicates that the port has been configured as a link Aggregation Group (LAG). The value is a percentage of port speed and ranges from 0-100. For more information about configuring.... Specify the data rate at which is 5 percent of port speed. The factory default is disabled. Selects the Link Aggregation Control Protocol administration state: • Enable: Specifies that the port has been configured as a member of a portchannel, which can...
