D-link DAS-3626 User Manual [ru]
©Copyright 2009. All rights reserved
User Manual
Product Model: DAS-3626
VDSL2 Switch
Release 1.00
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
_________________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks
of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products.
D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
October 2009 P/N 651EV3726015G
ii
DAS-3626 VDSL2 Switch User Manual
Table of Contents
Web-based Switch Configuration .................................................................................................................................... 6
System Configuration .................................................................................................................................................... 14
Switch Configuration ...................................................................................................................................................... 26
VDSL Configuration ....................................................................................................................................................... 53
Multicasting .................................................................................................................................................................... 59
Storm Control ................................................................................................................................................................ 74
QoS ............................................................................................................................................................................... 76
ACL ............................................................................................................................................................................... 84
VLAN ........................................................................................................................................................................... 103
Security ........................................................................................................................................................................ 109
CPE Management ....................................................................................................................................................... 122
Status .......................................................................................................................................................................... 135
Maintenance ................................................................................................................................................................ 154
System Log Entries ..................................................................................................................................................... 163
Glossary ...................................................................................................................................................................... 174
Password Recovery Procedure ................................................................................................................................... 176
iii
DAS-3626 VDSL2 Switch User Manual
Preface
The DAS-3626 User Manual is divided into sections that describe the system installation and operating instructions.
Section 2 through Section 13 corresponds to a menu folder in the web management interface presented in the same
order they appear in the web interface.
Section 1, Introduction to Web-based Switch Management – Describes how to connect to and use the Webbased switch management feature on the switch.
Section 2, System Configuration – Details for configuring some of the basic functions of the switch including
System Information, IP Settings, Interface Settings, IPv6 Neighbor Settings, User Accounts, SNTP Settings and
System Log Configuration. The Quick Configuration section of the home page includes a few menus that are not
accessable in the main menu folders; these menus are featured in this section as well.
Section 3, Switch Configuration – This section describes menus common to Layer 2 switching for configuration of
MAC Address Aging, Port Mirroring, Ethernet Settings, Traffic Segmentation, Forwarding Database configuration,
CLI Paging, Port Mirroring, Port Trunks, LACP Port configuration, Loopback Detection setting, GVRP, DHCP Relay
and Spanning Tree Protocol/Multiple Spanning Tree and CFM settings.
Section 4, VDSL Configuration – Settings for configuration of VDSL Profiles, VDSL Ports and various VDSL
Status display menus are located here.
Section 5, Multicasting – Configuration menus for IGMP Snooping, Multicast Profile, Limited Range, Group
settings and Multicast Listener Discovery (MLD) configuration.
Section 6, Storm Control – Configuration menus for multicast and broadcast storm control.
Section 7, QoS – Information for Quality of Service configuration. Menus include Bandwidth Control, 802.1P Default
Priority, 802.1P User Priority, QoS Scheduling Mechanism, QoS Scheduling and In Band Manage Settings.
Section 8, ACL Configuration – Menus for configuration of ACL including the ACL Configuration Wizard, Access
Profile List and ACL Finder.
Section 9, VLAN – Information for configuration of 802.1Q VLANs, 802.1v Protocol VLAN configuration.
Section 10, Security – Features information on security functions, including Safeguard Engine, Trusted Host, Port
Security , MAC Spoofing Access, SSL setting, SSH setting and Access Authentication Control settings.
Section 11, CPE Management – Menus for configuration, upgrade and testing of remote CPE equipment and client
LAN settings.
Section 12, Status – Features information about the monitoring switch and network functions including CPU
Utilization, Port Utilization, Packet Size, Memory Utilization, Packets, Errors, System Log, Ping Test, VDSL
monitoring and system Firmware Information.
Section 13, Maintenance – Menus for Firmware Upgrade, Configuration File Backup and restore, as well as the
SNMP Settings menu folder are also located in the Maintenance folder.
Appendix A, System Log Entries – This table lists all the possible entries and their corresponding meanings that
will appear in the System Log of this switch.
Appendix B, Glossary – Lists definitions for terms and acronyms used in this document.
Appendix C, Password Recovery Procedure - This section describes the procedure for resetting passwords on
D-Link switches.
iv
DAS-3626 VDSL2 Switch User Manual
Intended Readers
The DAS-3626 User Manual Manual contains information for setup and management of the switch. This manual is
intended for network managers familiar with network management concepts and terminology.
Typographical Conventions
Convention Description
[ ] In a command line, square brackets indicate an optional entry. For example: [copy
filename] means that optionally you can type copy followed by the name of the file. Do not
type the brackets.
Bold font Indicates a button, a toolbar icon, menu, or menu item. For example: Open the File menu
and choose Cancel. Used for emphasis. May also indicate system messages or prompts
appearing on your screen. For example: You have mail. Bold font is also used to
represent filenames, program names and commands. For example: use the copy
command.
Boldface Typewriter
Font
Indicates commands and responses to prompts that must be typed exactly as printed in
the manual.
Initial capital letter Indicates a window name. Names of keys on the keyboard have initial capitals. For
example: Click Enter.
Italics Indicates a window name or a field. Also can indicate a variables or parameter that is
replaced with an appropriate word or string. For example: type filename means that you
should type the actual filename instead of the word shown in italic.
Menu Name > Menu
Option
Menu Name > Menu Option Indicates the menu structure. Device > Port > Port
Properties means the Port Properties menu option under the Port menu option that is
located under the Device menu.
Notes, Notices, and Cautions
A NOTE indicates important information that helps you make better use of your device.
A NOTICE indicates either potential damage to hardware or loss of data and tells you
how to avoid the problem.
A CAUTION indicates a potential for property damage, personal injury, or death.
5
DAS-3626 VDSL2 Switch User Manual
Section 1
Web-based Switch Configuration
Introduction
Out-of-Band Access to System Management
Interface IP Settings for Switch Management
Login to Web Manager
Web-based User Interface
Web Pages
Introduction
All software functions of the switch can be managed, configured and monitored via the embedded web-based (HTML)
interface. The switch can be managed from remote stations anywhere on the network through a standard browser
such as Microsoft Internet Explorer.
The web-based management module and command line interface (console program or Telnet) are different ways to
access the same internal switching software and configure it. Thus, all settings encountered in web-based
management are the same as those found in the command line interface (CLI).
Out-of-Band Access to System Management
Management access to the System can be done out-of-band with a physical connection directly to the switch. Connect
to the RS-232 Console serial port on the front panel, or use the Mangament Ethernet port located next to the
Console port. Use standard terminal emulation software for Console port access as described in the CLI Command
Reference Manual. Use of the Management port provides the options of using either the web-based management
module or the command line interface via Telnet. The Management port must reside on a different subnet than the inband System interface. The default IP settings for the Management port are 192.168.1.10/255.255.255.0 while the
default IP settings for the in-band network interface are 10.90.90.90/255.0.0.0. See below for instructions on how to
change the IP settings for the in-band and out-of-band interfaces used for switch management. For more information
about physical ports and other hardware information please see the Hardware Manual.
Figure 1. Front panel in-band and out-of-band ports
Use either Gigabit Ethernet port
(ports 25 and 26) for in-band
access.
Use the Management Ethernet port
(default IP address 192.168.1.10) or
the Console (RS-232) port for outof-band access.
6
DAS-3626 VDSL2 Switch User Manual
Interface IP Settings for Switch Management
The switch maintains two IP interfaces used for management, one in-band IP interface named System, and one outof-band IP interface named outband. These IP interfaces cannot reside within the same subnet. If the outband
interface is configured with IP settings that place it within the same subnet as the System IP interface, the IP interface
for outband is invalidated.
The default IP settings of the in-band IP interface System are 10.90.90.90/255.0.0.0. The default IP settings for the
ou-of-band IP interface outband are 192.168.1.10/255.255.255.0. The CLI command syntax used to change the IP
settings of the in-band IP interface is config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy where the x’s
represent the IP address to be assigned to the IP interface named System and the y’s represent the corresponding
subnet mask. The CLI command syntax used to change the IP settings of the out-of-band IP interface is config ipif
outband ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Alternatively you can use CIDR notation for the IP settings,
xxx.xxx.xxx.xxx/z, where the x’s represents the corresponding number of subnets.
Connection to the switch using Telnet can be done by connecting to the Management Ethernet port and launching the
Windows Command Prompt or similar software. Make sure your computer’s IP settings allow connection to the switch
default IP subnet of the outband interface (192.168.1.0) and Telnet to 192.168.1.10. You will be prompted for a User
Name and Password, there is no default user name or password, simply press the Enter at each prompt to obtain the
administrator’s prompt DAS-3626:admin# as seen in the example below. The switch is not ready for configuration.
Figure 2. Menus Command Prompt using out-of-band Telnet connection
NOTE: Telnet can also be used in-band by connecting through port 25 or
26. The Factory default IP address of the in-band interface “System” is
10.90.90.90.
7
DAS-3626 VDSL2 Switch User Manual
Login to Web Manager
To use the web-based management module for switch management, run the browser you have installed on your
computer and point it to the IP address you have defined for the device. The URL in the address bar should read
something like: http://123.123.123.123, where the numbers 123 represent the IP address of the switch; this opens the
management module's user authentication window, as seen below.
Figure 3. Enter Network Password dialog
There is no default user name or password. At the User Name and Password fields, click on OK. This opens the webbased management interface. Switch management features available in the web-based manager are explained below.
8
DAS-3626 VDSL2 Switch User Manual
Web-based User Interface
The user interface provides access to various switch configuration and management windows, allows you to view
performance statistics, and permits you to graphically monitor the system status.
Areas of the User Interface
The figure below shows the user interface. The user interface is divided into three distinct areas as described in the
table.
Figure 4. Main Web-Manager page
Area Function
Area 1 Select the folder or window to be displayed. The folder icons can be opened to display the hyper-
linked window buttons and subfolders contained within them. Click the D-Link logo to go to the DLink website.
Area 2 Presents a graphical near real-time image of the front panel of the switch. This area displays the
switch's ports and expansion modules showing port activity.
Various areas of the graphic can be selected for performing management functions, including port
configuration.
Area 3 Presents switch information based on your selection and the entry of configuration data.
Area 4 Links to configuration menus, some of which are not accessable in the configuration menu folders
(displayed in Area 1) are located here.
Save and back up configuration
settings, reboot, reset
configuration and download
firmware drop-down menus.
Area 2
Area 1
NOTICE: Any changes made to the switch configuration during the
current session must be saved using the drop-down Save menu or use
the command line interface (CLI) command save.
9
DAS-3626 VDSL2 Switch User Manual
System Save Menus
The web interface for the switch includes two drop-down menus, the Save and Tools menus, located just above the
menu folders. The Save menu includes options to save switch configuration settings and switch log.
Figure 5. Save Configuration drop-down menu
To save the current configuration, from the Save drop-down menu, pull the cursor down to the Save Configuration
option. The Save Configuration menu display appears during the saving process. Upon successfully saving the
configuration, a message informs you the save is completed.
Figure 6. Save Configuration display
In addition to the Save Configuration option, the Save menus offer a Save Log and Save All option. The Save All
option saves both the System Log and the current configuration file.
10
DAS-3626 VDSL2 Switch User Manual
System Tools Menus
The Tools drop-down menu includes links Configuration File Backup & Restore, Upload Log File, Reset,
Download Firmware and Reboot System menus.
Figure 7. Tools drop-down menu
These menus are described below.
Configuration File Backup & Restore
The switch supports dual image storage for configuration file backup and restoration. The firmware and configuration
images are indexed by ID number 1 or 2. To change the boot firmware image, use the Configuration ID drop-down
menu to select the desired configuration file to backup or restore. The default switch settings will use image ID 1 as
the boot configuration or firmware.
To backup the configuration file, enter the Server IP (either IPv4 or IPv6), interface name, file/path name, desired
Configuration ID, and click Backup.
To restore the configuration file, enter the Server IP (either IPv4 or IPv6), interface name, file/path name, desired
Configuration ID, and click Restore.
Figure 8. Configuration File Backup & Restore menu
Upload Log File
A history and attack log can be uploaded from the switch to a TFTP server. To upload a log file, enter a Server IP
address, Interface Name and file/path name and then click Upload or Upload Attack Log.
Figure 9. Upload Log File menu
11
DAS-3626 VDSL2 Switch User Manual
Reset
The Reset function has several options when resetting the switch. Some of the current configuration parameters can
be retained while resetting all other configuration parameters to their factory defaults.
NOTE: Only the Reset System option will enter the factory default parameters into the switch's
non-volatile RAM, and then restart the switch. All other options enter the factory defaults into the
current configuration, but do not save this configuration. Reset System will return the switch's
configuration to the state it was when it left the factory
NOTE: The serial port’s baud rate will not be changed by the reset command. It will not be restored
to the factory default setting.
Reset gives the option of retaining the switch's User Accounts and History Log while resetting all other configuration
parameters to their factory defaults. If the switch is reset using this window, and Save Changes is not executed, the
switch will return to the last saved configuration when rebooted.
Figure 10. Reset System menu
Download Firmware
The following window is used to download firmware for the switch.
Figure 11. Download Firmware menu
Enter the Server IP address, the Interface Name, the path/file name and select the desired Image ID. Click Download
to initiate the file transfer.
Reboot System
The following window is used to restart the switch.
Figure 12. Reboot System menu
Clicking the Yes radio button will instruct the switch to save the current configuration to non-volatile RAM before
restarting the switch.
Clicking the No radio button instructs the switch not to save the current configuration before restarting the switch. All of
the configuration information entered from the last time Save Changes was executed will be lost.
Click the Reboot button to restart the switch.
12
DAS-3626 VDSL2 Switch User Manual
Device Information and Quick Configuration Links
This window contains the main settings for all major functions on the switch and appears automatically when you log
on. To return to the Device Information and Quick Configuration likns, click the DAS-3626 device name above the
menu folders. The Device Information display shows the switch’s MAC Address (assigned by the factory and
unchangeable), the Boot PROM Version, Firmware Version and Hardware Version as well as other information
about different settings on the switch. This information is helpful to keep track of PROM and firmware updates and to
obtain the switch's MAC address for entry into another network device's address table, if necessary. In addition, this
window displays the status of functions on the switch to quickly assess their current global status. Some functions are
hyper-linked to their configuration window for easy access from the Device Information window.
Figure 13. Device Information display and Quick Configuration links
13
DAS-3626 VDSL2 Switch User Manual
Section 2
System Configuration
System Information
IP Settings
IPv6 Neighbor Settings
Serial Port Settings
Web Settings
Telnet Setting
Time Setting
TimeZone Setting
Users Setting
System Log Setting
System Log Server
Configuration menus in the System Configuration folder are used to change general system settings sucha as IP
settings for the two switch IP interfaces, system time settings and user account settings.This section describes the
menus contained in the System Configuration menu directory.
14
DAS-3626 VDSL2 Switch User Manual
System Information
Use the System Information menu to add name, location and administrator contact information.
To view the menu, click System Configuration > System Information as shown below:
Figure 14. System Information menu
Interface Settings
The Interface Settings menu is used to access the IP settings for the two IP interefaces of the switch.
To view the menu, click System Configuration > IP Settings as shown below:
Figure 15. Interface Settings menu
The parameter values below are displayed in the Interface Settings menu:
Parameter Description
Interface The name of the IP interfaces used to manage the switch.
VLAN Name
The name of the VLAN that includes the System interface. This can be configured in the IPv4 or
IPv6 Interface Settings menu for the interface.
Admin. State
Displays the current state of the interface. Access the IPv4 or IPv6 Interface Settings menu to
enable or disable the interface.
To change the IP settings, VLAN Name, or Admin.State, click on the IPv4 Edit or IPv6 Edit button for the interface to
be configured.
In the new menu, enter the new VLAN Name, IPv4 Address and Subnet Mask, select the IPv4 State and click Apply.
To edit an entry for IPv4 features click the corresponding IPv4 Edit button.
Figure 16. IPv4 Interface Settings Edit menu
15
DAS-3626 VDSL2 Switch User Manual
The following parameters can be configured:
Parameter Description
Interface Name Displays the interface being edited.
VLAN Name Enter the name of the VLAN corresponding to the interface. (System interface only)
IPv4 Address
Enter an alternative IPv4 address. Currently an interface can only have one IPv4 address defined.
Therefore multinetting configuration of IPv4 must be done through creation of a secondary
interface on the same VLAN, instead of directly configuring multiple IPv4 addresses on the same
interface.
Subnet Mask Enter the corresponding subnet mask.
IPv4 State This function allows user to enable the IPv4 address on the IP interface.
Click Apply to implement changes made.
To edit an entry for IPv6 features click the corresponding IPv6 Edit button.
Figure 17. IPv6 Interface Settings Edit menu
The following parameters can be configured:
Parameter Description
Interface Name Displays the interface being edited.
VLAN Name Enter the name of the VLAN corresponding to the interface. (System interface only)
IPv6 Network
Address
Enter the IPv6 Network Address to be configured. The interface can have multiple IPv6
addresses defined. Configuration of IPv6 addresses must be done through the command
config ipif.
IPv6 State Allows the user to enable or disable the IPv6 state on the interface.
NS Retransmit time
(0-4294967295)
This field is used to set the interval, in milliseconds that the switch will produce neighbor
solicitation packets to be sent out over the local network. This is used to discover IPv6
neighbors on the local network. The user may select a time between 0 and 4294967295
milliseconds. The default is 0.
Automatic Link
Local Address
Enables or disables the automatic configuration of link local addresses when there are no
IPv6 addresses explicitly configured. When an IPv6 address is explicitly configured, the link
local address will be automatically configured, and the IPv6 processing will be started. When
there is no IPv6 address explicitly configured, by default, link local address is not configured
and the IPv6 processing will be disabled. By enabling this automatic configuration, the link
local address will be automatically configured and IPv6 processing will be started.
Click Apply to implement changes made.
16
DAS-3626 VDSL2 Switch User Manual
IPv6 Neighbor Settings
This window allows the user to create and configure IPv6 Neighbor settings on the switch. The switch’s current IPv6
neighbor settings will be displayed in the table at the bottom of this window.
To view this window, click System Configuration > IPv6 Neighbor Settings as shown below:
Figure 18. IPv6 Neighbor Settings menu
The following parameters can be configured:
Parameter Description
Interface Name
Enter the interface name of the IPv6 neighbor you wish to configure.
Neighbor IPv6
Address
Enter the neighbor IPv6 address of the entry you wish to configure.
Link Layer MAC
Address
Enter the MAC address of the neighbor device to be added as an IPv6 neighbor on the IP
interface.
Interface Name
In order to search for a previously configured Interface name enter the appropriate information
and click Find. To remove a previously configured Interface enter the Interface name and click
Clear.
State
To find or delete specific entries use the pull down menu to select All, Address, Static, or
Dynamic.
All – Select All to view all configured neighbor devices which are IPv6 neighbors of the IP
interface previously created.
Address – Select Address and enter the IPv6 address of the entry you wish to find.
Static – Select Static to view all statically entered IPv6 neighbors on the switch.
Dynamic – Select Dynamic to view all dynamically configured neighbor devices which are IPv6
neighbors of the IP interface previously created.
Click Add to add a new entry, click Find to search for a specific entry or click Clear to remove an entry.
17
DAS-3626 VDSL2 Switch User Manual
Serial Port Setting
Use the Serial Port Setting window to console serial port setting, config Baud Rate and Auto Logout setting.
To view this window, click System Configuration > Serial Port Settings as shown below:
Figure 19. Serial Port Settings
The following fields can be set:
Parameter Description
Baud Rate Select the baud rate used for the console serial port.
Auto Logout To configure console logout time, choose 2, 5, 10, 15 minutes or never logout from the pull-down
menu.
Web Settings
Web-based management is Enabled by default. If you choose to disable this by selecting Disabled, you will lose the
ability to configure the system through the web interface as soon as these settings are applied.
To view this menu, click the Web Settings link in the Quick Configuration menu as shown below:
Figure 20. Web Settings menu
Telnet Settings
Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet
choose Disabled. The TCP ports are numbered between 1 and 65535. The "well-known" TCP port for the Telnet
protocol is 23.
To view this menu, click the Telnet Settings link in the Quick Configuration menu as shown below:
Figure 21. Telnet Settings menu
18
DAS-3626 VDSL2 Switch User Manual
System Time and SNTP Settings
Simple Network Time Protocol Settings used to set system time are configured in two menus, the Time Settings and
Time Zone Settings menus.
Time Settings
This window is used to configure the time settings for the switch.
To view this window, click System Configuration > Time Settings (alternatively this menu is also displayed by
clicking the SNTP Settings link in the Quick Configuration menu in the Device Information page) as shown below:
Figure 22. Time Settings menu
The following parameters can be set or are displayed:
Parameter Description
Status
SNTP State Use the radius button to select an Enabled or Disabled SNTP state.
Current Time Displays the Current Time set on the switch.
Time Source Displays the time source for the system.
SNTP Settings
SNTP First Server This is the IP address of the primary server the SNTP information will be taken from.
SNTP Second Server This is the IP address of the secondary server the SNTP information will be taken from.
SNTP Poll Interval in
Seconds (30-99999)
This is the interval, in seconds, between requests for updated SNTP information.
Set Current Time
Date (DD/MM/YYYY) Enter the current date in day, month and year to update the system clock.
Time in (HH:MM:SS) Enter the current time in hours, minutes, and seconds.
Click Apply to implement changes made.
19
DAS-3626 VDSL2 Switch User Manual
Time Zone Settings
The following window is used to configure time zones and Daylight Savings time settings for SNTP.
To view this window, click System Configuration > TimeZone Settings as shown below:
Figure 23. Time Zone and DST Settings menu
The following parameters can be set:
Time Zone and DST
Daylight Saving
Time State
Use this pull-down menu to enable or disable the DST Settings.
Daylight Saving
Time Offset in
Minutes
Use this pull-down menu to specify the amount of time that will constitute your local DST offset
30, 60, 90, or 120 minutes.
Time Zone Offset
from GMT in +/HH:MM
Use these pull-down menus to specify your local time zone's offset from Greenwich Mean
Time (GMT.)
20
DAS-3626 VDSL2 Switch User Manual
DST Repeating Settings
Using repeating mode will enable DST seasonal time adjustment. Repeating mode requires that the DST beginning
and ending date be specified using a formula. For example, specify to begin DST on Saturday during the second week
of April and end DST on Sunday during the last week of October.
From :Which Week
of the Month
Enter the week of the month that DST will start.
From: Day of the
Week
Enter the day of the week that DST will start on.
From: Month Enter the month DST will start on.
From: Time in
HH:MM
Enter the time of day that DST will start on.
To: Which Week of
the Month
Enter the week of the month the DST will end.
To: Day of the
Week
Enter the day of the week that DST will end.
To: Month Enter the month that DST will end.
To:Time in HH:MM Enter the time DST will end.
DST Annual Settings
Using annual mode will enable DST seasonal time adjustment. Annual mode requires that the DST beginning and
ending date be specified concisely. For example, specify to begin DST on April 3 and end DST on October 14.
From: Month Enter the month DST will start on, each year.
From: Day Enter the day of the week DST will start on, each year.
From: Time in
HH:MM
Enter the time of day DST will start on, each year.
To: Month Enter the month DST will end on, each year.
To: Day Enter the date DST will end on, each year.
To: Time in HH:MM Enter the time of day that DST will end on, each year.
Click Apply to implement changes made to the Time Zone and DST window.
21
DAS-3626 VDSL2 Switch User Manual
User Account Settings
The User Accounts menu is used to control user privileges, create new users and view existing User Accounts.
To view the menu, click System Configuration > User Settings:
Figure 24. User Accounts menu
The following fields can be set:
Parameter Description
User Name The name of the user, an alphanumeric string of up to 15 characters.
Access Right There are three levels of user privileges, Admin, Operator and User. Some menu selections
available to users with Admin privileges may not be available to those with User or Operator
level privileges.
There are 3 levels of security offered on the switch, the Operator level privilege will allow users to
configure and view configurations on the switch, except for those involving security features,
which are still left to the Admin level privilege. Operator level users can be authenticated through
either the local authentication method of the switch, or through the Access Authentication Control
feature, discussed later in this document. Once the user has logged in to the switch in the
Operator level, certain security screens and windows will not be made available to view, or to
configure. Only Admin level users have access to these features.
(Ошибка: источник перекрестной ссылки не найден below summarizes Admin, Operator and
User level privileges)
New Password Enter a password for the new user.
Confirm New
Password
Retype the new password.
To add a new user, enter the appropriate information and click Apply. To delete an account click the corresponding
Delete button. To modify an existing user account, click Edit as shown below.
22
DAS-3626 VDSL2 Switch User Manual
Figure 25. User Accounts menu
Enter the Old Password for the account, the New Password you wish to use, and retype the new password in the
Confirm Password field. Use the drop-down menu to select the type of encryption (Default, Plain Text or Sha 1), and
click Apply.
NOTICE: In case of lost passwords or password corruption, please refer to the
D-Link website and the White Paper entitled “Password Recovery Procedure”,
which will guide you through the steps necessary to resolve this issue.
Admin, Operator and User Privileges
Recently added to the levels of security offered on the switch, the Operator level privilege will allow users to configure
and view configurations on the switch, except for those involving security features, which are still left to the Admin
privilege. Operator users can be authenticated through either the local authentication method of the switch, or through
the Access Authentication Control feature, discussed later in this document. Once the user has logged in to the switch
in the Operator level, certain security screens and windows will not be made available to view, or to configure. Only
Admin level users have access to these features.
There are three levels of user privileges, Admin, Operator and User. Some menu selections available to users with
Admin privileges may not be available to those with User or Operator privileges.
The following table summarizes the Admin, Operator and User privileges:
Management Admin Operator User
Configuration Yes Yes Read-only
Network Monitoring Yes Yes Read-only
Community Strings and Trap Stations Yes Yes Read-only
Update Firmware and Configuration Files Yes No No
System Utilities Yes Yes No
Factory Reset Yes No No
User Account Management
Add/Update/Delete User Accounts Yes No No
View User Accounts Yes No No
Figure 26. Admin, Operator and User Privileges
23
DAS-3626 VDSL2 Switch User Manual
System Log Configuration
This section contains information for configuring various attributes and properties for System Log Configurations,
including System Log Settings and System Log Host.
System Log Settings
This window allows the user to enable or disable the System Log and specify the System Log Save Mode Settings.
To view this window, click System Configuration > System Log Settings as shown below:
Figure 27. System Log Settings menu
The following parameters can be set:
Parameter Description
System Log To activate the System Log select Enabled or Disabled.
Save Mode Use this drop-down menu to specify the method that will trigger a log entry. You can choose
between On Demand, Time Interval and Log Trigger.
On Demand – This method will only save log files when they manually tell the switch to do so,
using the Save Log link in the Save folder.
Time Interval – This method configures a time interval by which the switch will save the log
files. The user may set a time between 1 and 65535 minutes.
Log Trigger – This method will save log files to the switch every time a log event occurs on the
switch.
Minutes (1-65535) Enter a time interval, in minutes, for which you would like a log entry to be made.
To add a new entry, enter the appropriate information and click Apply.
System Log Server
The switch can send Syslog messages to up to four designated servers using the System Log Server.
To view this window, click System Configuration > System Log Configuration > System Log Server as shown
below:
Figure 28. System Log Server menu
24
DAS-3626 VDSL2 Switch User Manual
The following parameters can be set:
Parameter Description
Server ID Syslog server settings index (1-4).
Server IP Address The IP address of the Syslog server.
UDP Port
(514 or 6000-65535)
Type the UDP port number used for sending Syslog messages. The default is 514.
Severity This drop-down menu allows you to select the level of messages that will be sent. The options
are Warning, Informational, and All.
Facility Some of the operating system daemons and processes have been assigned Facility values.
Processes and daemons that have not been explicitly assigned a Facility may use any of the
"local use" facilities or they may use the "user-level" Facility. Those Facilities that have been
designated are shown in the following: Bold font indicates the facility values that the switch is
currently employing.
Numerical Facility Code Numerical Facility Code
0
1
2
3
4
5
7
8
9
10
11
kernel messages
user-level messages
mail system
system daemons
security/authorization messages
messages generated internally by
syslog line printer subsystem
network news subsystem
UUCP subsystem
clock daemon
security/authorization messages
FTP daemon
12
13
14
15
16
17
18
19
20
21
22
23
NTP subsystem
log audit
log alert
clock daemon
local use 0 (local0)
local use 1 (local1)
local use 2 (local2)
local use 3 (local3)
local use 4 (local4)
local use 5 (local5)
local use 6 (local6)
local use 7 (local7)
Status Choose Enabled or Disabled to activate or deactivate.
25
DAS-3626 VDSL2 Switch User Manual
Section 3
Switch Configuration
MAC Address Aging Time
Ethernet Settings
FDB
Traffic Segmentation
CLI Paging
Port Mirror
LACP Port Settings
Loopback Detection Settings
QinQ Settings
GVRP
DHCP/BOOTP Relay Settings
Spanning Tree Settings
Multiple Spanning Tree Settings
CFM
The Switch Configurtion Section includes these functions discussed in detail.
26
DAS-3626 VDSL2 Switch User Manual
MAC Address Aging Time
This table specifies the length of time a learned MAC Address will remain in the forwarding table without being
accessed (that is, how long a learned MAC Address is allowed to remain idle). To change this, enter a value
representing the MAC address age-out time in seconds. The MAC Address Aging Time can be set to any value
between 10 and 1,000,000 seconds. The default setting is 300 seconds.
To view this window, click Switch Configuration > MAC Address Aging Time as shown below:
Figure 29. MAC Address Aging Time menu
Ethernet Settings
Figure 30. (Ethernet) Port Settings
Users may configure the speed and duplex of Ethernet port 1 here.
Auto negotiate – Turning on this feature will automatically adjust the speed and duplex of this port to its optimum
settings.
Speed – Users may set the port speed here, as 10, 100 or 1000Mbps.
Duplex – Users may set the duplex settings for the port her, as half or full.
27
DAS-3626 VDSL2 Switch User Manual
FDB
Use the MAC Address Table menu to view or clear entries from the switch's MAC address forwarding data base (FDB)
To view this menu, click Switch Configuration > FDB as shown below:
Figure 31. Forwarding Database entry table
Search options include searching by Port number, VLAN Name or specific MAC Address. To search the FDB, select
the entry menu for the type of search to conduct (Port, VLAN Name or MAC Address), enter or select the port, VLAN
name or MAC address, and click on the Find button.
To scroll through the FDB list manually, click on the Next and Back buttons.
To clear FDB entries choose to clear dynamic entries for a specified Port or VLAN by clicking on the Clear Dynamic
Entries button for the search option used. Alternatively, to clear all entries in the FDB, click on the Clear All Entries
button.
The MAC Address Table lists the following information:
Parameter Description
VID The VID of the VLAN from which packets are forwarded.
Port The corresponding VDSL line of which the VID is a member.
MAC Address The MAC address that resides on the port where traffic is forwarded.
Type The type of FDB entry, Dynamic or Static.
28
DAS-3626 VDSL2 Switch User Manual
Traffic Segmentation
Traffic segmentation is used to limit traffic flow from a single port to a group of ports on either a single switch or a
group of ports on another switch in a switch stack. This method of segmenting the flow of traffic is similar to using
VLANs to limit traffic, but is more restrictive. It provides a method of directing traffic that does not increase the
overhead of the Master switch CPU. This page allows you to view which port on a given switch will be allowed to
forward packets to other ports on that switch. Select a port number from the drop down menu to display the forwarding
ports. To configure new forwarding ports for a particular port, select a port from the menu and click Apply.
To view this window, click Switch Configuration > Traffic Segmentation as shown below:
Figure 32. Traffic Segmentation menu
The following fields can be set
Parameter Description
From Port / To Port Check the corresponding boxes for the port(s) to transmit packets.
Forward Portlist Check the boxes to select which of the ports on the switch will be able to forward packets.
These ports will be allowed to receive packets from the port specified above.
Clicking the Apply button will enter the combination of transmitting port and allowed receiving ports into the switch's
Current Traffic Segmentation Table.
CLI Paging Settings
Clipaging Status can be Enabled or Disabled in this window, it is Enabled by default. Clipaging settings are used when
issuing a command which causes the console screen to rapidly scroll through several pages. This command will cause
the console to pause at the end of each page.
To view this menu, click the CLI Paging link in the Quick Configuration menu as shown below:
Figure 33. CLI Paging Settings menu
29
DAS-3626 VDSL2 Switch User Manual
Port Mirror
The switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You
can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the
packets passing through the first port. This is useful for network monitoring and troubleshooting purposes.
To view this window, click Switch Configuration > Port Mirror as shown below:
Figure 34. Port Mirror menu
To configure a mirror port:
1. Change the status to Enabled.
2. Select the Source Port from where you want to the frames to come from.
3. Select the Target Port, which receives the copies from the source port.
4. Click Apply to let the changes take effect.
NOTE: You cannot mirror a fast port onto a slower port. For example, if you try to mirror the
traffic from a 100 Mbps port onto a 10 Mbps port, this can cause throughput problems. The port
you are copying frames from should always support an equal or lower speed than the port to
which you are sending the copies. Also, the target port for the mirroring cannot be a member of
a trunk group. Please note a target port and a source port cannot be the same port.
30
Loading...