Product Manual
Page 2
...Matching Order for Globs 13 Port Lists...14 Command-Line Editing...15 Keyboard Shortcuts...15 History Buffer...15 Tabs...15 Single-Asterisk (*) Wildcard Character 16 Double-Asterisk (**) Wildcard Characters 16 Using CLI Help...16 Understanding Command Descriptions 17 DWS-1008 Setup Methods...18 Overview...18... Quick Starts...18 CLI...18 Web View...18 Web Quick Start...19 Web Quick Start Parameters 19 Web Quick Start Requirements 19 Accessing the Web Quick Start 20 CLI quickstart Command...22 Quickstart Example...23 D-Link DWS-1008 User ...
...Matching Order for Globs 13 Port Lists...14 Command-Line Editing...15 Keyboard Shortcuts...15 History Buffer...15 Tabs...15 Single-Asterisk (*) Wildcard Character 16 Double-Asterisk (**) Wildcard Characters 16 Using CLI Help...16 Understanding Command Descriptions 17 DWS-1008 Setup Methods...18 Overview...18... Quick Starts...18 CLI...18 Web View...18 Web Quick Start...19 Web Quick Start Parameters 19 Web Quick Start Requirements 19 Accessing the Web Quick Start 20 CLI quickstart Command...22 Quickstart Example...23 D-Link DWS-1008 User ...
Product Manual
Page 3
...Time Configuration via the Console 27 Enabling an Administrator...27 Setting the Switch Enable Password 28 Setting the Enable Password for the First Time ...Port Speed 41 Disabling or Reenabling a Port 41 Disabling or Reenabling Power over Ethernet 42 Resetting a Port...42 Displaying Port Information 42 Displaying Port Configuration and Status 42 Displaying PoE State...43 Displaying Port Statistics 43 Clearing Statistics Counters 44 Monitoring Port Statistics 44 Configuring Load-Sharing Port Groups 45 Load Sharing...45 Link Redundancy...45 Configuring a Port Group 46 D-Link DWS-1008...
...Time Configuration via the Console 27 Enabling an Administrator...27 Setting the Switch Enable Password 28 Setting the Enable Password for the First Time ...Port Speed 41 Disabling or Reenabling a Port 41 Disabling or Reenabling Power over Ethernet 42 Resetting a Port...42 Displaying Port Information 42 Displaying Port Configuration and Status 42 Displaying PoE State...43 Displaying Port Statistics 43 Clearing Statistics Counters 44 Monitoring Port Statistics 44 Configuring Load-Sharing Port Groups 45 Load Sharing...45 Link Redundancy...45 Configuring a Port Group 46 D-Link DWS-1008...
Product Manual
Page 4
... Forwarding...49 802.1Q Tagging...49 Configuring a VLAN...50 Creating a VLAN...50 Adding Ports to a VLAN 51 Removing an Entire VLAN or a VLAN Port 51 Restricting Layer 2 Forwarding Among Clients 52 Displaying VLAN Information 53 Managing the Layer...Configuring the Aging Timeout Period 57 Displaying the Aging Timeout Period 57 Changing the Aging Timeout Period 57 Port and VLAN Configuration Scenario 58 Configuring and Managing IP Interfaces and Services 61 MTU Support...61 Configuring ...IP Routes...67 Adding a Static Route...68 Removing a Static Route...69 D-Link DWS-1008 User Manual iii
... Forwarding...49 802.1Q Tagging...49 Configuring a VLAN...50 Creating a VLAN...50 Adding Ports to a VLAN 51 Removing an Entire VLAN or a VLAN Port 51 Restricting Layer 2 Forwarding Among Clients 52 Displaying VLAN Information 53 Managing the Layer...Configuring the Aging Timeout Period 57 Displaying the Aging Timeout Period 57 Changing the Aging Timeout Period 57 Port and VLAN Configuration Scenario 58 Configuring and Managing IP Interfaces and Services 61 MTU Support...61 Configuring ...IP Routes...67 Adding a Static Route...68 Removing a Static Route...69 D-Link DWS-1008 User Manual iii
Product Manual
Page 5
... Managing SSH...69 Login Timeouts...69 Enabling SSH...70 Adding an SSH User...70 Changing the SSH Service Port Number 71 Managing SSH Server Sessions 71 Managing SSH Server Sessions 72 Managing Telnet...72 Telnet Login Timers...... Enabling Telnet...72 Adding a Telnet User...73 Displaying Telnet Status 73 Changing the Telnet Service Port Number 73 Resetting the Telnet Service Port Number to Its Default 73 Managing Telnet Server Sessions 74 Managing HTTPS...74 Enabling HTTPS...74 ... to the Default 84 Enabling the NTP Client...84 Displaying NTP Information 84 D-Link DWS-1008 User Manual iv
... Managing SSH...69 Login Timeouts...69 Enabling SSH...70 Adding an SSH User...70 Changing the SSH Service Port Number 71 Managing SSH Server Sessions 71 Managing SSH Server Sessions 72 Managing Telnet...72 Telnet Login Timers...... Enabling Telnet...72 Adding a Telnet User...73 Displaying Telnet Status 73 Changing the Telnet Service Port Number 73 Resetting the Telnet Service Port Number to Its Default 73 Managing Telnet Server Sessions 74 Managing HTTPS...74 Enabling HTTPS...74 ... to the Default 84 Enabling the NTP Client...84 Displaying NTP Information 84 D-Link DWS-1008 User Manual iv
Product Manual
Page 7
... 125 Converting an AP Configured by the Auto-AP Profile into a Permanent AP 126 Configuring AP Port Parameters 126 Setting the Port Type for a Directly Connected AP 127 Configuring an Indirectly Connected AP 127 Configuring Static IP Addresses...Firmware Upgrades 131 Forcing an AP To Download its Operational Image from the DWS-1008 131 Enabling LED Blink Mode 132 Configuring AP-Switch Security 132 Encryption Key Fingerprint 132 Encryption Options...133 Verifying an AP's Fingerprint on... Disabling Idle-Client Probing 139 Changing the User Idle Timeout 139 D-Link DWS-1008 User Manual vi
... 125 Converting an AP Configured by the Auto-AP Profile into a Permanent AP 126 Configuring AP Port Parameters 126 Setting the Port Type for a Directly Connected AP 127 Configuring an Indirectly Connected AP 127 Configuring Static IP Addresses...Firmware Upgrades 131 Forcing an AP To Download its Operational Image from the DWS-1008 131 Enabling LED Blink Mode 132 Configuring AP-Switch Security 132 Encryption Key Fingerprint 132 Encryption Options...133 Verifying an AP's Fingerprint on... Disabling Idle-Client Probing 139 Changing the User Idle Timeout 139 D-Link DWS-1008 User Manual vi
Product Manual
Page 10
... Interval 206 Changing the STP Forwarding Delay 207 Changing the STP Maximum Age 207 Configuring and Managing STP Fast Convergence Features 207 Port Fast Convergence...208 Backbone Fast Convergence 208 Uplink Fast Convergence 208 Configuring Port Fast Convergence 208 Displaying Port Fast Convergence Information 209 Configuring Backbone Fast Convergence 209 D-Link DWS-1008 User Manual ix
... Interval 206 Changing the STP Forwarding Delay 207 Changing the STP Maximum Age 207 Configuring and Managing STP Fast Convergence Features 207 Port Fast Convergence...208 Backbone Fast Convergence 208 Uplink Fast Convergence 208 Configuring Port Fast Convergence 208 Displaying Port Fast Convergence Information 209 Configuring Backbone Fast Convergence 209 D-Link DWS-1008 User Manual ix
Product Manual
Page 11
...Interval 218 Changing Robustness...218 Enabling Router Solicitation...219 Changing the Router Solicitation Interval 219 Configuring Static Multicast Ports 219 Adding or Removing a Static Multicast Router Port 220 Adding or Removing a Static Multicast Receiver Port 220 Displaying Multicast Information 220 Displaying Multicast Configuration Information and Statistics 220 Displaying Multicast Statistics Only 222 Clearing...228 Setting an ICMP ACL...229 Setting TCP and UDP ACLs 230 Setting a TCP ACL...230 Setting a UDP ACL...230 Determining the ACE Order 231 D-Link DWS-1008 User Manual
...Interval 218 Changing Robustness...218 Enabling Router Solicitation...219 Changing the Router Solicitation Interval 219 Configuring Static Multicast Ports 219 Adding or Removing a Static Multicast Router Port 220 Adding or Removing a Static Multicast Receiver Port 220 Displaying Multicast Information 220 Displaying Multicast Configuration Information and Statistics 220 Displaying Multicast Statistics Only 222 Clearing...228 Setting an ICMP ACL...229 Setting TCP and UDP ACLs 230 Setting a TCP ACL...230 Setting a UDP ACL...230 Determining the ACE Order 231 D-Link DWS-1008 User Manual
Product Manual
Page 12
... 233 Clearing Security ACLs...234 Mapping Security ACLs...234 Mapping User-Based Security ACLs 235 Mapping Security ACLs to Ports, VLANs, Virtual Ports, or Distributed APs 236 Displaying ACL Maps to Ports, VLANs, and Virtual Ports 237 Clearing a Security ACL Map 237 Modifying a Security ACL...238 Adding Another ACE to a Security ACL 239 Placing... #12 Object Files 258 Certificates Automatically Generated by MSS 260 Creating Keys and Certificates 260 Choosing the Appropriate Certificate Installation Method for Your Network 261 D-Link DWS-1008 User Manual xi
... 233 Clearing Security ACLs...234 Mapping Security ACLs...234 Mapping User-Based Security ACLs 235 Mapping Security ACLs to Ports, VLANs, Virtual Ports, or Distributed APs 236 Displaying ACL Maps to Ports, VLANs, and Virtual Ports 237 Clearing a Security ACL Map 237 Modifying a Security ACL...238 Adding Another ACE to a Security ACL 239 Placing... #12 Object Files 258 Certificates Automatically Generated by MSS 260 Creating Keys and Certificates 260 Choosing the Appropriate Certificate Installation Method for Your Network 261 D-Link DWS-1008 User Manual xi
Product Manual
Page 14
... of the Login Page 292 WebAAA Requirements and Recommendations 292 DWS-1008 Switch Requirements 293 Portal ACL and User ACLs 295 Network Requirements 295 Switch Recommendations 295 Client NIC Recommendations 295 Client Web Browser Recommendations...Portal WebAAA Session Timeout Period 306 Configuring Last-Resort Access 307 Configuring Last-Resort Access for Wired Authentication Ports 308 Configuring AAA for Users of Third-Party APs 309 Authentication Process for Users of a Third-... Accounting Update Records 328 Enabling System Accounting Messages 328 D-Link DWS-1008 User Manual xiii
... of the Login Page 292 WebAAA Requirements and Recommendations 292 DWS-1008 Switch Requirements 293 Portal ACL and User ACLs 295 Network Requirements 295 Switch Recommendations 295 Client NIC Recommendations 295 Client Web Browser Recommendations...Portal WebAAA Session Timeout Period 306 Configuring Last-Resort Access 307 Configuring Last-Resort Access for Wired Authentication Ports 308 Configuring AAA for Users of Third-Party APs 309 Authentication Process for Users of a Third-... Accounting Update Records 328 Enabling System Accounting Messages 328 D-Link DWS-1008 User Manual xiii
Product Manual
Page 15
... Group...345 RADIUS and Server Group Configuration Scenario 345 Managing 802.1X...347 Managing 802.1X on Wired Authentication Ports 347 Enabling and Disabling 802.1X Globally 347 Setting 802.1X Port Control 347 Managing 802.1X Encryption Keys 348 Enabling 802.1X Key Transmission 349 Configuring 802.1X Key Transmission Time... 352 Setting the 802.1X Reauthentication Period 353 Setting the Bonded Authentication Period 353 Managing Other Timers...354 Setting the 802.1X Quiet Period 354 D-Link DWS-1008 User Manual xiv
... Group...345 RADIUS and Server Group Configuration Scenario 345 Managing 802.1X...347 Managing 802.1X on Wired Authentication Ports 347 Enabling and Disabling 802.1X Globally 347 Setting 802.1X Port Control 347 Managing 802.1X Encryption Keys 348 Enabling 802.1X Key Transmission 349 Configuring 802.1X Key Transmission Time... 352 Setting the 802.1X Reauthentication Period 353 Setting the Bonded Authentication Period 353 Managing Other Timers...354 Setting the 802.1X Quiet Period 354 D-Link DWS-1008 User Manual xiv
Product Manual
Page 18
Backup and Restore Examples 412 Upgrading the System Image...413 Preparing the Switch for the Upgrade 413 Upgrading an Individual Switch Using the CLI 413 Troubleshooting...415 Fixing Common Setup Problems 415 Recovering the System When ...Port Mirroring 431 Displaying the Port Mirroring Configuration 431 Clearing the Port Mirroring Configuration 431 Remotely Monitoring Traffic...431 How Remote Traffic Monitoring Works 432 Using Snoop Filters on Radios That Use Active Scan 432 All Snooped Traffic Is Sent in the Clear 432 Best Practices for Remote Traffic Monitoring 433 D-Link DWS-1008...
Backup and Restore Examples 412 Upgrading the System Image...413 Preparing the Switch for the Upgrade 413 Upgrading an Individual Switch Using the CLI 413 Troubleshooting...415 Fixing Common Setup Problems 415 Recovering the System When ...Port Mirroring 431 Displaying the Port Mirroring Configuration 431 Clearing the Port Mirroring Configuration 431 Remotely Monitoring Traffic...431 How Remote Traffic Monitoring Works 432 Using Snoop Filters on Radios That Use Active Scan 432 All Snooped Traffic Is Sent in the Clear 432 Best Practices for Remote Traffic Monitoring 433 D-Link DWS-1008...
Product Manual
Page 19
...and Logging Into Web View 442 System Requirements...442 Browser Requirements...442 Switch Requirements...442 Logging Into Web View...443 Supported RADIUS Attributes...444 Supported Standard and Extended Attributes 444 Traffic Ports Used by MSS...448 DHCP Server...449 How the MSS DHCP ...Server Works 450 Configuring the DHCP Server 451 Displaying DHCP Server Information 452 Glossary...453 Technical Specifications...475 Warranty...478 Registration...483 D-Link DWS-1008 User Manual xviii
...and Logging Into Web View 442 System Requirements...442 Browser Requirements...442 Switch Requirements...442 Logging Into Web View...443 Supported RADIUS Attributes...444 Supported Standard and Extended Attributes 444 Traffic Ports Used by MSS...448 DHCP Server...449 How the MSS DHCP ...Server Works 450 Configuring the DHCP Server 451 Displaying DHCP Server Information 452 Glossary...453 Technical Specifications...475 Warranty...478 Registration...483 D-Link DWS-1008 User Manual xviii
Product Manual
Page 20
... with consideration to operate the equipment. Such modifications could void the user's authority to these ambient conditions. Product Overview Product Contents DWS-1008 8-Port Wireless Switch Power Supply Serial Cable for any radio or TV interference caused by qualified service personnel only. To reduce the risk of 0°.../100 Ethernet network DWL-8220AP Access Point(s) Warning: Installation must be installed in the documentation. The DWS-1008 switch has been designed and tested to be performed by unauthorized modifications to 104° F). D-Link DWS-1008 User Manual
... with consideration to operate the equipment. Such modifications could void the user's authority to these ambient conditions. Product Overview Product Contents DWS-1008 8-Port Wireless Switch Power Supply Serial Cable for any radio or TV interference caused by qualified service personnel only. To reduce the risk of 0°.../100 Ethernet network DWL-8220AP Access Point(s) Warning: Installation must be installed in the documentation. The DWS-1008 switch has been designed and tested to be performed by unauthorized modifications to 104° F). D-Link DWS-1008 User Manual
Product Manual
Page 21
... IP multicast streams. D-Link DWS-1008 User Manual It also supports IGMP snooping, which is vital to the network. Introduction The D-Link® AirPremier® MobileLAN™ DWS-1008 is powered by Trapeze Networks and executes Trapeze Networks' Mobility System Software (MSS), which maintains the intelligence of the MobileLAN system. The D-Link MobileLAN solution is a wireless LAN switch optimized for deployment in...
... IP multicast streams. D-Link DWS-1008 User Manual It also supports IGMP snooping, which is vital to the network. Introduction The D-Link® AirPremier® MobileLAN™ DWS-1008 is powered by Trapeze Networks and executes Trapeze Networks' Mobility System Software (MSS), which maintains the intelligence of the MobileLAN system. The D-Link MobileLAN solution is a wireless LAN switch optimized for deployment in...
Product Manual
Page 22
... switch. D-Link DWS-1008 User Manual AP (1-6): Solid green For an DWL-8220AP's active link, with an access point is off. Unlit Port is not configured as an AP access port, or PoE is operational. Traffic is operational. Ports 1-6 support PoE. LEDS: Link (1-8): Solid green Solid amber Blinking green Blinking amber 100Mbps link is operational. 10Mbps link is active on the DWS-1008 switch...
... switch. D-Link DWS-1008 User Manual AP (1-6): Solid green For an DWL-8220AP's active link, with an access point is off. Unlit Port is not configured as an AP access port, or PoE is operational. Traffic is operational. Ports 1-6 support PoE. LEDS: Link (1-8): Solid green Solid amber Blinking green Blinking amber 100Mbps link is operational. 10Mbps link is active on the DWS-1008 switch...
Product Manual
Page 25
...+ 6 RD- 7 PoE- 8 PoE- The 10/100 Ethernet ports on the DWS-1008 switch provide automatic MDI/MDX, which automatically crosses over Ethernet (PoE) is enabled on all other surfaces, you can use CAT5 cable with consideration to -DB-9-female PC modem cable. For installation on the port. D-Link DWS-1008 User Manual To reduce the risk of 0°...
...+ 6 RD- 7 PoE- 8 PoE- The 10/100 Ethernet ports on the DWS-1008 switch provide automatic MDI/MDX, which automatically crosses over Ethernet (PoE) is enabled on all other surfaces, you can use CAT5 cable with consideration to -DB-9-female PC modem cable. For installation on the port. D-Link DWS-1008 User Manual To reduce the risk of 0°...
Product Manual
Page 28
...Port Lists" on the switch that you become enabled as an administrative user by typing enable and supplying a suitable password, MSS displays the following prompt for example, 1008) and the nnnnnn portion shows the last 6 digits of the DWS-1008 switch and DWL-8220AP access points. Using the Command-Line Interface Mobility System Software (MSS) operates a D-Link... prompts as follows: DWS> DWS# D-Link DWS-1008 User Manual Use clear commands to reset parameters to configure and manage the switch and its attached access points. The mmmm portion shows the switch model number (for ...
...Port Lists" on the switch that you become enabled as an administrative user by typing enable and supplying a suitable password, MSS displays the following prompt for example, 1008) and the nnnnnn portion shows the last 6 digits of the DWS-1008 switch and DWL-8220AP access points. Using the Command-Line Interface Mobility System Software (MSS) operates a D-Link... prompts as follows: DWS> DWS# D-Link DWS-1008 User Manual Use clear commands to reset parameters to configure and manage the switch and its attached access points. The mmmm portion shows the switch model number (for ...
Product Manual
Page 29
...as the accented É in DÉCOR. For example, you must type. D-Link recommends that you do not configure two separate VLANs with different capitalizations for a value. D-Link DWS-1008 User Manual 10 For example, you enter either enable or disable, not both, in ... square brackets [] indicate an optional parameter. The CLI has specific notation requirements for tabs and spaces, and is optional: clear fdb {dynamic | port port-list} [vlan vlan-id] A vertical bar (|) separates mutually exclusive options within a list of international characters such as SSIDs and VLANs: ampersand ...
...as the accented É in DÉCOR. For example, you must type. D-Link recommends that you do not configure two separate VLANs with different capitalizations for a value. D-Link DWS-1008 User Manual 10 For example, you enter either enable or disable, not both, in ... square brackets [] indicate an optional parameter. The CLI has specific notation requirements for tabs and spaces, and is optional: clear fdb {dynamic | port port-list} [vlan vlan-id] A vertical bar (|) separates mutually exclusive options within a list of international characters such as SSIDs and VLANs: ampersand ...
Product Manual
Page 33
... list format. For example: DWS-1008# show port status 1-3,6 D-Link DWS-1008 User Manual 14 Hyphens take precedence over commas. For example: DWS-1008# show port poe 1,2,4,6 • A hyphen-separated range of port numbers, with no spaces. Port Lists The physical Ethernet ports on a switch are numbered 1 through 8. For example: DWS-1008# set for port-list: • A single port number. For example: DWS-1008# reset port 1-4 • Any combination of...
... list format. For example: DWS-1008# show port status 1-3,6 D-Link DWS-1008 User Manual 14 Hyphens take precedence over commas. For example: DWS-1008# show port poe 1,2,4,6 • A hyphen-separated range of port numbers, with no spaces. Port Lists The physical Ethernet ports on a switch are numbered 1 through 8. For example: DWS-1008# set for port-list: • A single port number. For example: DWS-1008# reset port 1-4 • Any combination of...
Product Manual
Page 35
...Help The CLI provides online help ' for more information telnet telnet IP address [server port] traceroute Print the route packets take to network host To see "User Globs" on page 12. D-Link DWS-1008 User Manual 16 For details, see a subset of the online help, type the ...command for more information show help . To see the full range of commands available at your access level, type the following command: DWS-1008# help Commands clear Clear, use...
...Help The CLI provides online help ' for more information telnet telnet IP address [server port] traceroute Print the route packets take to network host To see "User Globs" on page 12. D-Link DWS-1008 User Manual 16 For details, see a subset of the online help, type the ...command for more information show help . To see the full range of commands available at your access level, type the following command: DWS-1008# help Commands clear Clear, use...