Product Manual
Page 6
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DSCP ...155 DSCP Trust Settings ...155 DSCP Map Settings...156 HOL Blocking Prevention ...158 Scheduling Settings ...159 QoS Scheduling...159 QoS Scheduling Mechanism ...160 SRED ...162 SRED Settings...162 SRED Drop Counter ...164 Chapter 7 ACL ...165 ACL Configuration Wizard...165 Access Profile...
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide DSCP ...155 DSCP Trust Settings ...155 DSCP Map Settings...156 HOL Blocking Prevention ...158 Scheduling Settings ...159 QoS Scheduling...159 QoS Scheduling Mechanism ...160 SRED ...162 SRED Settings...162 SRED Drop Counter ...164 Chapter 7 ACL ...165 ACL Configuration Wizard...165 Access Profile...
Product Manual
Page 9
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Ping Test ...328 Trace Route...329 Peripheral ...331 Device Status...331 Chapter 12 Save and Tools ...332 Save Configuration ID 1 ... Address Resolution Protocol works ...339 How ARP Spoofing Attacks a Network ...341 Prevent ARP Spoofing via Packet Content ACL...342 Configuration ...342 Appendix B System Log and Trap List 345 System Log Entries ...345 DES-3528/DES-3552 Series Trap List...353 Proprietary Trap List...353 Appendix C Password Recovery Procedure 356 Appendix D Glossary ...357...
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Ping Test ...328 Trace Route...329 Peripheral ...331 Device Status...331 Chapter 12 Save and Tools ...332 Save Configuration ID 1 ... Address Resolution Protocol works ...339 How ARP Spoofing Attacks a Network ...341 Prevent ARP Spoofing via Packet Content ACL...342 Configuration ...342 Appendix B System Log and Trap List 345 System Log Entries ...345 DES-3528/DES-3552 Series Trap List...353 Proprietary Trap List...353 Appendix C Password Recovery Procedure 356 Appendix D Glossary ...357...
Product Manual
Page 13
... the user will be able to the greater network. 4 OAM - Security - L3 Features - In this section the user will be able to access the Switch's management mode. ACL - xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Area 3 here. Presents switch information based on user selection and the entry of the...
... the user will be able to the greater network. 4 OAM - Security - L3 Features - In this section the user will be able to access the Switch's management mode. ACL - xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Area 3 here. Presents switch information based on user selection and the entry of the...
Product Manual
Page 29
...to identify the access profile and associated rule to surf the Internet on weekdays. Time Settings Users can configure the time based ACL to allow users to surf the Internet on the 24-hour time system. Use this parameter to accept the changes made ... System Configuration > Time Settings, as ACL. For example, the administrator can configure the time settings for every day of the time range, in hours, minutes and seconds, based on the Switch. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide are described below...
...to identify the access profile and associated rule to surf the Internet on weekdays. Time Settings Users can configure the time based ACL to allow users to surf the Internet on the 24-hour time system. Use this parameter to accept the changes made ... System Configuration > Time Settings, as ACL. For example, the administrator can configure the time settings for every day of the time range, in hours, minutes and seconds, based on the Switch. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide are described below...
Product Manual
Page 153
State Use the drop-down menu to implement the changes made. Next Hop IPv4 Address Enter an IP address routing next hop. Click the xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Profile ID (1-14) Enter an ACL profile ID. Click the Apply button to enable or disable the rule. Access ID (1-128) Enter an ACL access ID.
State Use the drop-down menu to implement the changes made. Next Hop IPv4 Address Enter an IP address routing next hop. Click the xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Parameter Description Profile ID (1-14) Enter an ACL profile ID. Click the Apply button to enable or disable the rule. Access ID (1-128) Enter an ACL access ID.
Product Manual
Page 174
... rule, enter the Profile Name for the new rule. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 7 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter ACL ACL Configuration Wizard The ACL Configuration Wizard will create a Normal ACL Rule. Selecting this rule. Selecting this rule. After selecting...
... rule, enter the Profile Name for the new rule. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Chapter 7 ACL Configuration Wizard Access Profile List CPU Access Profile List ACL Finder ACL Flow Meter ACL ACL Configuration Wizard The ACL Configuration Wizard will create a Normal ACL Rule. Selecting this rule. Selecting this rule. After selecting...
Product Manual
Page 175
... view Access Profile List window, click ACL > Access Profile List, as compared to all the terms that match the access profile are mirrored to accept the changes made. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide for this rule.... Selecting this option will forward packets based on the Switch. Replace ToS Precedence - Enter the ToS Precedence ...
... view Access Profile List window, click ACL > Access Profile List, as compared to all the terms that match the access profile are mirrored to accept the changes made. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide for this rule.... Selecting this option will forward packets based on the Switch. Replace ToS Precedence - Enter the ToS Precedence ...
Product Manual
Page 176
... button, the following page will add more filed to highlight it red. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-2 Access Profile List window Click the Add ACL Profile button to add an entry to remove the specific entry. Click the Delete button to the Access Profile...
... button, the following page will add more filed to highlight it red. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-2 Access Profile List window Click the Add ACL Profile button to add an entry to remove the specific entry. Click the Delete button to the Access Profile...
Product Manual
Page 177
... header. Selecting this as the full or partial criterion for forwarding. Enter a profile name for the profile created. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-3 Add ACL Profile window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Profile ID Profile Name Select...
... header. Selecting this as the full or partial criterion for forwarding. Enter a profile name for the profile created. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-3 Add ACL Profile window (Ethernet ACL) The fields that can be configured are described below: Parameter Description Profile ID Profile Name Select...
Product Manual
Page 178
Click the Select button to examine the Ethernet type value in each frame's header. Click the Ethernet Type Selecting this as the, or part of the criterion for forwarding. Click the Create button to create a profile. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide packet header and use this option instructs the Switch to select an ACL type.
Click the Select button to examine the Ethernet type value in each frame's header. Click the Ethernet Type Selecting this as the, or part of the criterion for forwarding. Click the Create button to create a profile. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide packet header and use this option instructs the Switch to select an ACL type.
Product Manual
Page 179
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-6 Add Access Rule window (Ethernet ACL) The fields that can be filtered. Otherwise, a packet will be configured are described below ). For more information on to automatically assign an Access... the selected criteria) with the value entered in the adjacent field. When an ACL rule is changed when both the priority and DSCP of an IPv4 packet, only one of this option to instruct the Switch to replace the DSCP value (in a packet that match the access profile are...
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-6 Add Access Rule window (Ethernet ACL) The fields that can be filtered. Otherwise, a packet will be configured are described below ). For more information on to automatically assign an Access... the selected criteria) with the value entered in the adjacent field. When an ACL rule is changed when both the priority and DSCP of an IPv4 packet, only one of this option to instruct the Switch to replace the DSCP value (in a packet that match the access profile are...
Product Manual
Page 180
... how many times that the rule was hit. VLAN Name Specify the VLAN name to apply to the access rule. Click the xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Replace ToS Precedence (0-7) Specify that the IP precedence of the outgoing packet is sent to the default...
... how many times that the rule was hit. VLAN Name Specify the VLAN name to apply to the access rule. Click the xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Replace ToS Precedence (0-7) Specify that the IP precedence of the outgoing packet is sent to the default...
Product Manual
Page 181
... an IP address mask for this option instructs the Switch to examine the IPv4 address in each frame's header. Select IPv6 ACL to instruct the Switch to 14. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below...
... an IP address mask for this option instructs the Switch to examine the IPv4 address in each frame's header. Select IPv6 ACL to instruct the Switch to 14. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-8 Add ACL Profile window (IPv4 ACL) The fields that can be configured are described below...
Product Manual
Page 182
... 0x00xffff). Selecting UDP requires that determine what protocol(s) to include according to the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. Destination Port Mask - Protocol ID Mask -...which you wish to filter. Click the Create button to select an ACL type. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Protocol Selecting this option instructs the Switch to examine the protocol type value in an incoming packet as the...
... 0x00xffff). Selecting UDP requires that determine what protocol(s) to include according to the following guidelines: Select ICMP to instruct the Switch to examine the Internet Control Message Protocol (ICMP) field in each frame's header. Destination Port Mask - Protocol ID Mask -...which you wish to filter. Click the Create button to select an ACL type. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Protocol Selecting this option instructs the Switch to examine the protocol type value in an incoming packet as the...
Product Manual
Page 183
Click the xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Show All Profiles button to navigate back to create a new ACL rule in this profile. After clicking the Add/View Rules button, the following page will appear: Figure 7-10 Access Rule List window (IPv4 ACL) Click the Add Rule button to the Access Profile List Page.
Click the xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Click the Show All Profiles button to navigate back to create a new ACL rule in this profile. After clicking the Add/View Rules button, the following page will appear: Figure 7-10 Access Rule List window (IPv4 ACL) Click the Add Rule button to the Access Profile List Page.
Product Manual
Page 184
...Specify the VLAN name to apply to the access rule. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Action Select Permit to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered. Replace DSCP (0-63) Select ... in the Time Range Settings window. Replace Priority Tick this access rule will set to any additional rule added (see below). When an ACL rule is sent to be configured, the Auto Assign check box MUST be set. Time Range Name Tick the check box and enter the...
...Specify the VLAN name to apply to the access rule. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Action Select Permit to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered. Replace DSCP (0-63) Select ... in the Time Range Settings window. Replace Priority Tick this access rule will set to any additional rule added (see below). When an ACL rule is sent to be configured, the Auto Assign check box MUST be set. Time Range Name Tick the check box and enter the...
Product Manual
Page 185
...mask field to the mask. This value can be set . Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each frame's header. Select IPv6 ACL to instruct the Switch to examine the IPv6 address in this profile set from 1 to 14. ...frame's header. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of profile. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Adding an IPv6 ACL Profile The window shown below : Parameter Description Profile ID Select ACL Type Enter a unique identifier...
...mask field to the mask. This value can be set . Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each frame's header. Select IPv6 ACL to instruct the Switch to examine the IPv6 address in this profile set from 1 to 14. ...frame's header. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of profile. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Adding an IPv6 ACL Profile The window shown below : Parameter Description Profile ID Select ACL Type Enter a unique identifier...
Product Manual
Page 186
...select an ACL type. Source Port Mask - Destination Port Mask - The user may specify an IPv6 address mask for the destination IPv6 address by ticking the corresponding check box and entering the IPv6 address mask. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web ...UI Reference Guide IPv6 Class IPv6 Flow Label IPv6 TCP IPv6 UDP IPv6 Source Mask IPv6 Destination Mask Ticking this check box will instruct the Switch to examine the class field...
...select an ACL type. Source Port Mask - Destination Port Mask - The user may specify an IPv6 address mask for the destination IPv6 address by ticking the corresponding check box and entering the IPv6 address mask. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web ...UI Reference Guide IPv6 Class IPv6 Flow Label IPv6 TCP IPv6 UDP IPv6 Source Mask IPv6 Destination Mask Ticking this check box will instruct the Switch to examine the class field...
Product Manual
Page 187
...will be filtered. Select this option to instruct the Switch to replace the DSCP value (in the adjacent field. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-16 Add Access Rule (IPv6 ACL) The fields that match the access profile are ...not forwarded by the Switch and will have its incoming 802....
...will be filtered. Select this option to instruct the Switch to replace the DSCP value (in the adjacent field. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Figure 7-16 Add Access Rule (IPv6 ACL) The fields that match the access profile are ...not forwarded by the Switch and will have its incoming 802....
Product Manual
Page 188
... will be presented with the new value. Click the Apply button to the access rule. Counter Select the counter. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Replace ToS Precedence (0-7) Specify that the IP precedence of the Time Range settings that the rule... box will be configured. VLAN Name Specify the VLAN name to apply to the default TC. This will not be implemented on the Switch. Ports When a range of ports is to be configured, the Auto Assign check box MUST be ticked in the Time Range Settings ...
... will be presented with the new value. Click the Apply button to the access rule. Counter Select the counter. xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide Replace ToS Precedence (0-7) Specify that the IP precedence of the Time Range settings that the rule... box will be configured. VLAN Name Specify the VLAN name to apply to the default TC. This will not be implemented on the Switch. Ports When a range of ports is to be configured, the Auto Assign check box MUST be ticked in the Time Range Settings ...