of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and nam es or their products.
D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
July 2009 P/N
651370012005G
ii
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Table of Contents
Preface ......................................................................................................................................................................... xi
Login to Web Manager ............................................................................................................................................................... 2
Web-based User Interface ......................................................................................................................................................... 3
Web Pages ................................................................................................................................................................................ 4
Device Information ........................................................................................................................................................ 7
System Information ....................................................................................................................................................... 7
Serial Port Settings ....................................................................................................................................................... 8
IP Address .................................................................................................................................................................... 9
Setting the Swith’s IP Address using the Console Interface .................................................................................................... 11
Port Configuration ....................................................................................................................................................... 14
Port Settings ............................................................................................................................................................................ 14
Port Description ....................................................................................................................................................................... 15
Port Error Disabled .................................................................................................................................................................. 16
User Accounts ............................................................................................................................................................ 17
System Log Configuration .......................................................................................................................................... 20
System Log Settings ................................................................................................................................................................ 20
System Log Server .................................................................................................................................................................. 20
System Severity Settings ............................................................................................................................................ 22
Out of Band Management Settings ............................................................................................................................ 28
DHCP Auto Configuration Sett ings ............................................................................................................................. 29
MAC Address Aging Time .......................................................................................................................................... 30
Web Settings .............................................................................................................................................................. 30
iii
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Firmware Information .................................................................................................................................................. 31
Ping Test ..................................................................................................................................................................... 33
Local Loopback Ports Settings ................................................................................................................................... 34
Time Settings ........................................................................................................................................................................... 36
MAC Notification Settings ........................................................................................................................................... 38
MAC Notification Global Settings ............................................................................................................................................. 38
MAC Notification Port Settings ................................................................................................................................................. 39
SNMP Global State Settings .................................................................................................................................................... 41
SNMP Group Table .................................................................................................................................................................. 42
SNMP User Table .................................................................................................................................................................... 43
SNMP Community Table.......................................................................................................................................................... 44
SNMP Engine ID ...................................................................................................................................................................... 46
Time Range Settings .................................................................................................................................................. 47
sFlow Global State Settings ..................................................................................................................................................... 48
sFlow Analyzer Server Settings ............................................................................................................................................... 48
Single IP Management ............................................................................................................................................... 51
Single IP Settings ..................................................................................................................................................................... 52
Menu Bar ................................................................................................................................................................................. 59
Browse DDM Status List .......................................................................................................................................................... 61
DDM Temperature Threshold S etting s .................................................................................................................................... 62
DDM Voltage Threshold Settings ............................................................................................................................................. 63
iv
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
DDM Bias Current Threshold Settings ..................................................................................................................................... 63
DDM Tx Power Threshold Settings .......................................................................................................................................... 64
DDM Rx Power Threshold Settings ......................................................................................................................................... 64
L2 Features ................................................................................................................................... 66
GVRP Global Settings ................................................................................................................................................ 85
PVID Auto Assign Settings ......................................................................................................................................... 86
Port Trunking .............................................................................................................................................................. 87
LACP Port Settings ..................................................................................................................................................... 89
IPv4 Limited Multicast Range Settings ..................................................................................................................................... 97
IPv4 Max Multicast Group Settings .......................................................................................................................................... 97
MLD Snooping Static Group Settings .................................................................................................................................... 101
MLD Mul ticast Group Profile Settings .................................................................................................................................... 101
v
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
IPv6 Limited Multicast Range Settings ................................................................................................................................... 104
IPv6 Max Multicast Group Settings ........................................................................................................................................ 104
Port Mirror ................................................................................................................................................................. 105
Spanning Tree .......................................................................................................................................................... 107
STP Bridge Global Settings ................................................................................................................................................... 109
STP Port Settings .................................................................................................................................................................. 111
MSTP Port Information .......................................................................................................................................................... 114
LLDP Global Settings ............................................................................................................................................................. 117
LLDP Port Settings ................................................................................................................................................................ 118
LLDP Management Address List ........................................................................................................................................... 119
LLDP Statistics System .......................................................................................................................................................... 121
LLDP Local Port Information .................................................................................................................................................. 122
LLDP Remote Port Information .............................................................................................................................................. 123
CFM Port Settings .................................................................................................................................................................. 123
Advantages of QoS ................................................................................................................................................... 130
HOL Blocking Pevention ........................................................................................................................................... 133
Bandwidth Control .................................................................................................................................................... 133
Traffic Control ........................................................................................................................................................... 134
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
802.1p User Priority .................................................................................................................................................. 137
In Band Manage Settings ......................................................................................................................................... 139
SRED Drop Counter .............................................................................................................................................................. 142
MAC Block List ....................................................................................................................................................................... 151
Port Security ............................................................................................................................................................. 151
Port Security Port Settings ..................................................................................................................................................... 151
Port Security VLAN Settings .................................................................................................................................................. 152
Port Security Entries .............................................................................................................................................................. 153
DHCP Server Screening Settings ............................................................................................................................. 153
DHCP Screening Port Settings .............................................................................................................................................. 154
802.1X Port-Based and Host-Based Access Control ............................................................................................................. 155
Understanding 802.1X Port-ba sed and Host-based Network Access Control........................................................................ 158
Port-Based Network Access Control ...................................................................................................................................... 158
Host-Based Network Access Control ..................................................................................................................................... 159
802.1X Global Settings .......................................................................................................................................................... 160
802.1X Port Settings .............................................................................................................................................................. 160
802.1X User ........................................................................................................................................................................... 162
Authentication RADIUS Server .............................................................................................................................................. 162
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
SSH Authmode and Algorithm Settings ................................................................................................................................. 169
SSH User Authentication Lists ............................................................................................................................................... 170
Access Authentication Control .................................................................................................................................. 171
Authentication Server Group .................................................................................................................................................. 174
Authentication Server ............................................................................................................................................................. 175
Notes About MAC-based Access Control .............................................................................................................................. 180
MAC-based Access Control Settings ..................................................................................................................................... 180
MAC-based Access Control Local Settings............................................................................................................................ 182
Web Authentication ................................................................................................................................................... 183
Conditions and Limitations ..................................................................................................................................................... 184
Web-based Access Control Settings ...................................................................................................................................... 184
Web-based Access Control User Settings ............................................................................................................................. 185
Access Profile List .................................................................................................................................................... 188
CPU Interface Filtering ............................................................................................................................................. 205
CPU Access Prof ile List ............................................................................................................................................ 206
ACL Finder ................................................................................................................................................................ 217
ACL Flow Meter ........................................................................................................................................................ 217
Device Status ............................................................................................................................................................ 220
CPU Utilization .......................................................................................................................................................... 221
Port Utilization ........................................................................................................................................................... 222
Received (RX) ........................................................................................................................................................................ 224
Received (RX) ........................................................................................................................................................................ 230
Port Access Control .................................................................................................................................................. 233
viii
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Authenticator State ................................................................................................................................................................ 236
Show VLAN Ports ..................................................................................................................................................... 243
IGMP Snooping Group ........................................................................................................................................................... 243
Browse MLD Router Port ....................................................................................................................................................... 245
MLD Snooping Group ............................................................................................................................................................ 245
Browse CFM Port MP List ...................................................................................................................................................... 248
MAC Address Table .................................................................................................................................................. 249
System Log ............................................................................................................................................................... 253
Save Services and Tools ........................................................................................................... 255
Save Configuration ID 1 ............................................................................................................................................ 255
Save Configuration ID 2 ............................................................................................................................................ 256
Save Log ................................................................................................................................................................... 256
Save All ..................................................................................................................................................................... 256
Reboot System ......................................................................................................................................................... 258
Mitigating ARP Spoofing Attacks Using Packet Content ACL ............................................... 259
System Log Entries ................................................................................................................... 267
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Preface
The DGS-3700 Series User Manual is divided into sections that describe the system installation and operating
instructions with examples.
Section 1, Introduction to Web-based Switch Management – Describes how to connect to and use the W ebbased switch management feature on the Switch.
Section 2, Configuration – A detailed discussion about configuring some of the basic functions of the Switch,
including accessing the System information, Serial Port Settings, IP Address, Interface Settings, IPv6 Route
Settings, IPv6 Neighbor Settings, Port Configuration, Static ARP Settings, User Accounts, System Log
Configuration, S ystem Sev erity Set tings , DH CP Re la y, Out of B and Managem ent Setti ngs, Extern al Alar m Setti ngs,
DHCP Auto Configurati on Sett ings , MAC Addr es s Aging Time, Web Settings, Tel net S etti ngs , P as sw ord E nc ryption,
Clipaging Settings, Firmware Information, Dual Configuration Settings, Ping Test, Local Loopback Port Settings,
VLAN Counter Settings , SNTP Settings, MAC Notificat ion Settings, SNMP Settings, T ime Range Settings, sFlow,
Single IP Management and DDM.
Section 3, L2 Features – A discussion of the Layer 2 features on the Switch, including Jumbo Frame, 802.1Q
VLAN, Subnet VLAN, QinQ, 802.1v Protoc ol VLAN , R SP AN Sett in gs , GVRP Settings, GVRP G lo bal Set tings, MACbased VLAN Settings, PVID Auto Ass ign Settings , Port Trunk ing, LACP Port Set tings, Traff ic Segmentation, BPDU
Tunneling Settings, IGMP Snooping, MLD Snooping, Port Mirror, Loopback Detection Settings, Spanning Tree,
Forwarding & Filtering, LLDP, CFM and Ethernet OAM.
Section 4, QoS – F eatures information on Switch QoS f unctions, including HOL Blocking Pre vention, Bandwidth
Control, Traffic Control, 802.1P Default Priority, 802.1P User Priority, QoS Scheduling Mechanism, QoS Scheduling,
In Band Manage Settings and SRED.
Section 5, Security – Fe atures information on S witch security functions, inc lud ing Saf eguard Engine, Trus ted Hos t,
IP-MAC-Port Bindin g, Port Security, DHCP S erver Screening, 802. 1X, SSL Settings, SSH, Access Authentication
Control, MAC-based Access Control, Web Authentication, and NetBIOS Filtering Settings.
Section 6, ACL – Discussion on the ACL functions of the Switch, including ACL Configuration Wizard, Access
Profile List, CPU Access Prof ile List, ACL Find er , and ACL Flo w Met er.
Section 7, Monitoring – Features information about the monitoring functions on the Switch including, Cable
Diagnostic, CPU Utilization, Port Utilizat ion, Packet Size, Memory Utilization, Packets , Errors, Port Access Control,
Browse ARP Table, Bro wse VLAN, IGMP Snooping, MLD Snoo ping, Browse Session Table, CFM, MAC Addr ess
Table, Browse VLAN Counter Statistics, Ethernet OAM and Historical Counter & Utilization.
Section 8, Save Services and Tools – Save Configuration ID 1, Save Configuration ID 2, Save Log, Save All,
Configuration File Backup and Restore, Upload Log File, Reset, Download Firmware, and Reboot System.
Appendix A, Mitigating ARP Spoofing Attacks Using Packet Content ACL – This section introduces ARP
protocol, ARP spoof ing attacks, and the counter measure br ought by D-Link's switches to counter ARP spoofing
attacks.
Appendix B, System Log Entries – This table lists all the possible entr ies and the ir correspondin g meanings tha t
will appear in the System Log of this Switch.
Appendix C, Glossary – Lists definitions for terms and acronyms used in this document.
Appendix D, Passw ord R ecover y Proced ure - This section describes the procedure for resetting passwords on D-
Link Switches.
xi
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Boldface Typewriter
Menu Name > Menu
Intended Readers
The DGS-3700 Series Man ual contains information for setup and management of the Switch. This manual is intended
for network managers familiar with network management concepts and terminology.
Typographical Con venti ons
Convention Description
[ ] In a command line, square brackets indicate an optional entry. For example: [copy
filename] means that optionally you can type copy followed by the name of the file. Do not
type the brackets.
Bold font Indicates a button, a toolbar icon, menu, or menu i tem. For example: Ope n t he File menu
and choose Cancel. Used for em phasis. Ma y also in dicate s ystem messages or prom pts
appearing on your screen. For example: You have mail. Bold font is also used to
represent filenames, program names and commands. For example: use the copy
command.
Indicates comm ands and responses to prompts that must be typed exactl y as printed in
Font
the manual.
Initial capital letter Indicates a window name. Names of keys on the keyboard have initial capitals. For
example: Click Enter.
Italics Indicates a window n ame or a field. Also can indicate a variables or parameter that is
replaced with an appropr iate word or string. For exam ple: type filename means that you
should type the actual filenam e instead of the word sh o wn in italic.
Menu Name > Menu Option Indicates the menu structure. Device > Port > Port
Option
Properties means the Port Properties menu option u nder the Port menu option that is
located under the Device menu.
Notes, Notices, and Cautions
A NOTE indicates important information that helps you make better use of your device.
A NOTICE i ndicates either potential dam age to hardware or loss of data and te lls you
how to avoid the problem.
A CAUTION indicates a potential for property damage, personal injury, or death.
1
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Section 1
Web-based Switch Configuration
Introduction
Login to Web Manager
Web-based User Interface
Web Pages
Introduction
All software functions of the Switch can be m anag ed, configured and m onitore d via the embedde d we b-bas e d (H T ML)
interface. The Switch c an be managed from remote s tations anywhere on the network thr ough a standard browser
such as Opera, Netscape Navigator/Communicator, or Micros oft Internet Explorer. The browser acts as a uni versal
access tool and can communicate directly with the Switch using the HTTP protocol.
The Web-based m anagement module and the Cons ole program (and Telnet) are dif ferent ways to access the sam e
internal switching s oftware and conf igure it. Thus, al l settings encount ered in web-based management ar e the same
as those found in the console program.
Login to Web Manager
To begin managing the Switch, simply run the browser you have installed on your com puter and point it to the IP
address you have defined for the device. The URL in the address bar should read something like:
http://123.123.123.123, where the numbers 123 represent the IP address of the Switch.
NOTE: The Factory default IP address for the Switch is 10.90.90.90.
This opens the management module's user authentication window, as seen below.
2
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Figure 1 - 1 Enter Network Password dialog
Enter “admin” in bo th the Us er Nam e and Pass word fields and clic k OK. T his will open t he W eb-based user interface.
The Switch management features available in the web-based manager are explained below.
Web-based User Interface
The user interface provides access to various Switch configuration and m anagement windows, allows you to view
performance statistics, and permits you to graphically monitor the system status.
Areas of the User Interface
The figure below shows the us er interface. The user interface is di vided into three distinct areas as desc ribed in the
table.
3
Area 1
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Area 2
Area 3
Area Function
Area 1
Area 2
Area 3
Select the folder or window to be displayed. T he folder icons can be ope ned to display the h yperlinked window buttons and subfolders conta ined within them. Click the D-Link logo to go to the DLink website.
Presents a graphical near real-time im age of the front panel of the Switch. T his area displays the
Switch's ports and expansion modules, showing port activity, duplex mode, or flow control,
depending on the specified mode.
Various areas of the graphic can be selected for performing managem ent functions, including port
configuration.
Presents switch information based on your selection and the entry of configuration data.
Figure 1 - 2 Main Web-Manager page
NOTICE: Any changes made to the Switch configuration during the
current session mus t be s a ved in th e S ave Changes web m enu (ex pl ain ed
below) or use the command line interface (CLI) command save.
Web Pages
When you connect to the management m ode of the Switch with a web br owser, a login windo w is displayed. E nter a
user name and password to access the Switch's management mode.
4
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Below is a list and description of the main folders available in the web interface:
Configuration – A detaile d discussion about configur ing some of the basic functions of the Switch, accessing the
System information, Serial Port Settings, IP Address, Interface Settings, IPv6 Route Settings, IPv6 Neighbor
Settings, Port Configuration, Static ARP Settings, User Accounts, System Log Configuration, System Severity
Settings, DHCP Relay, Out of Band Management Settings, External Alarm Settings, DHCP Auto Configuration
Settings, MAC Address Aging Time, Web Settings, Telnet Settings, Password Encryption, Clipaging Settings,
Firmware Information, Dual Configuration Settings, Ping Test, Local Loopback Port Settings, VLAN Counter
Settings, SNTP Settings, MAC Notification Settings, SNMP Settings, Time Range Settings, sFlow, Single IP
Management and DDM.
L2 Features – A discussion of the Layer 2 features on the Switch, includ ing Jum bo Frame, 802.1Q VLAN, Sub net
VLAN, QinQ, 802.1v Protoc ol VLAN, RSPAN Settings, GVR P Settings, GVRP Global Settings, MAC-based VLAN
Settings, PVID Auto Assign Settings, Port Trunking, LACP Port Settings, Traffic Segmentation, BPDU Tunneling
Settings, IGMP Snooping, MLD Snooping, Port Mirror, Loopb ack Detection Settings, Spa nning Tree, For warding &
Filtering, LLDP, CFM and Ethernet OAM.
QoS – Features information on Switch QoS functions, including HOL Blocking Prevention, Bandwidth Control,
Traffic Control, 802.1P Default Priority, 802.1P User Priority, QoS Sc he dul in g Me chani s m, QoS Scheduling, In Band
Manage Settings and SRED.
Security – Features inf ormation on Switch securit y functions, including S afeguard Engine, Trusted H ost, IP-MACPort Binding, Port Security, DHCP Server Scr eening, 802.1X, SSL Settings, SSH, Access Authentication Cont rol,
MAC-based Access Control, Web Authentication, and NetBIOS Filtering Settings.
ACL – Discussion on the ACL functions of the Switch, including ACL Configuration Wizard, Access Profile List, CPU
Access Profile List, ACL Finder, and ACL Flow Meter.
Monitoring – Features inform ation about the monitoring func tions on the Switch inclu ding, Cable Diagnosti c, CPU
Utilization, Port Utilization, Packet Size, Memory Utilization, Packets, Errors, Port Access Control, Browse ARP
Table, Browse VLAN, IGMP Sno oping, MLD Snooping, Br owse Session Table, CFM, MAC Address Table, Browse
VLAN Counter Statistics, Ethernet OAM and Historical Counter & Utilization and System Log.
NOTE: Be sure to configure the user name and password in the User
Accounts window before connecting the Switch to the greater network.
5
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Configuration
Device Information
System Information
Serial Port Settings
IP Address
Interface Settings
IPv6 Route Settings
IPv6 Neighbor Settings
Port Configuration
Static ARP Settings
User Accounts
System Log Configuration
Section 2
System Severity Settings
DHCP Relay
Out of Band Management Settings
External Alarm Settings
DHCP Auto Configuration Settings
MAC Address Aging Time
Web Settings
Telnet Settings
Password Encryption
Clipaging Settings
Firmware Information
Dual Configuration Settings
Ping Test
Local Loopback Ports Settings
VLAN Counter Settings
SNTP Settings
MAC Notification Settings
SNMP Settings
Time Range Settings
sFlow
Single IP Management
DDM
6
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Device Information
This window con tains the m ain settings for all m ajor functions on the S witch and appear s automaticall y when you log
on. To return to the Device Information window, click the DGS-3700-12/DGS-3700-12G Web Management Tool
folder. The Device Information window shows the Switch’s MAC Address (assigned by the factory and
unchangeable), the Boot PROM Version, Firmware Version, Hardware Version and Serial Number as well as
other information about different settings on the Switch. This information is helpful to keep track of PROM and
firmware updates and t o obtain the Switch's MAC address f or entry into another network device's addr ess table, if
necessary. In addit io n, this window displays the status of f unc tions on th e S witc h t o q uic k l y as ses s the i r current global
status. Some func tions are hyper-link ed to their configurati on window for eas y access from the Device Information
window.
Figure 2 - 1 Device Information window
System Information
This window contains the System Information details. The user may enter a System N ame, System Location and
System Contact to aid in defining the Switch, to the user's preference. This window displays the MAC Address,
Firmware Version and Hardware Version.
To view this window, click Configuration>System Information as shown below:
7
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
the default setting.
Figure 2 - 2 System Information window
The fields that can be configured are described below:
Parameter Description
System Name
System Location
System Contact
Click Apply to implement changes made.
Enter a system name for the Switch, if so desired. This name will identify it in the Switch
network.
Enter the location of the Switch, if so desired.
Enter a contact name for the Switch, if so desired.
Serial Port Settings
The following window co nta ins infor mation about the Serial Port Sett in gs inclu di ng the B aud Rate and the Auto Log out
settings.
To view this window, click Configuration >Serial Port Settings as shown below:
Figure 2 - 3 Serial Port Settings window
The fields that can be configured are described below:
Parameter Description
Baud Rate
Auto Logout
Click Apply to implement changes made.
This field specifies the baud rate for the serial port on the Switch. There are four possible
baud rates to choose f rom, 9600, 19200, 38400 and 115200. For a conn ection to the Switch
using the CLI interface, the baud rate must be set to 115200, which is the default setting.
Select the logout tim e us ed f or the cons ol e in terface. This automatic all y logs t h e u ser out af ter
an idle period of tim e, as defined. Choose from the following options : 2 Minutes, 5 Minutes, 1 0 Minutes, 15 Minutes or Never. The default setting is 10 minutes.
NOTE: If a user configures the serial port’s baud rate, the baud rate will take ef fect and save
immediate ly. B aud rat e set tings wi ll no t chan ge e ven if the us er r esets or r eboo ts th e Swi tch. T he
Baud rate will only change when the user configures it again. The serial port’s baud rate setting is
not stored in th e Switch’s conf iguration fil e. Resetting t he Switch will no t restore the bau d rate to
8
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
IP Address
The IP address ma y initially be set using the console interface prior to connecting to it throug h the Ethernet. If the
Switch IP address has not yet been change d, read the introduction of the DGS-3700 Series CLI Manual for more
information.
To view this window, click Configuration> IP Address as shown below:
Figure 2 - 4 IP Address Settings window
The upper part of the pag e allows you to manual ly assign the S witch's IP a ddress , subnet m ask, and defaul t gatewa y
address:
1. Select Static at the top of the screen.
2. Enter the appropriate IP Address and Subnet Mas k .
3. If you want to access the Switch from a dif fer ent subn et fr om the on e it is insta lled on, enter the I P addr ess of
the Gateway. If you will m anage t he Switc h fr om the subne t on which it is insta lled, you can leave th e defaul t
address (0.0.0.0) in this field.
4. If no VLANs have been pre vious ly configured on the Sw itch, you can use the default VLAN Name. The default VLAN c ontains all of the Switch p orts as m embers. If VLANs have been pr eviously conf igured on the S witch,
you will need to enter the Management VLAN Name of the VLAN that contains the port connected to the
management station th at will acc ess the Switc h. The S witch will a llow managem ent acc ess fr om stations wi th
the same VID listed here.
NOTE: The Switch's factory default IP address is 10.90.90.90 with a
subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0.
To use the BOOTP or DHCP protocols to assign the Switch an IP address, subnet mask, and default gateway
address:
Select BOOTP or DHCP, this will determine how the Switch will be assigned an IP address.
The lower part of the page is to display the Out-of-band management information that has been configured in
Configuration> Out of Band Management Settings window.
The IP Address Settings options are:
9
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Interface Admin
Parameter Description
Static
DHCP
BOOTP
IP Interface
Management
VLAN Name
State
Allows the entry of an IP address, Subnet Mask, and a Def ault Gateway for the Switch. Thes e
fields should be of the form xxx. xxx.xxx.xxx , where each x xx is a num ber (represente d in decim al
form) between 0 and 2 55. This address should be a unique addr ess on the n etwork assigned for
use by the network administrator.
The Switch will sen d out a DHCP broadcas t request when it is powered up. T he DHCP pro tocol
allows IP address es, network masks, and defaul t gateways to be assigned b y a DHCP server . If
this option is set, the Sw itch will first look for a DHCP server to provide it with this information
before using the default or previously entered settings.
The Switch will send out a BOOTP broadcast request when it is powered up. The BOOTP
protocol allows IP addr esses, network masks , and default gateways to be assigned b y a central
BOOTP server. If t his optio n is set, the S witch will first lo ok f or a BOOT P server t o provide it with
this information before using the default or previously entered settings.
This field displays the IP Interface that is currently being used on the Switch.
This allows the entry of a VLAN Name from which a management station will be allowed to
manage the Switch usin g TCP/IP (in-band via web manager or Telne t). M anagement stations th at
are on VLANs other than the one entered here will not be able to m anage the Switch in-band
unless their IP address es are entered in the Securit y IP Management window. If VLANs have
not yet been configur ed for the Switch, t he default VL AN contains all of the Switc h's ports. Ther e
are no entries in th e Security IP Mana gement table, by d efault, so any m anagement station that
can connect to the Switch can access the Switch until a management VLAN is specified or
Management Station IP Addresses are assigned.
This field enables or disables the Interface Admin State. When the state is enabled, the IPv4
processing will be start ed when the IPv4 addr ess is configured on t he IPIF. The IPv6 proc essing
will be started when the IPv6 address is explicitly configured on the IPIF.
IPv4 Address
The address should specify a host address and length of the network prefix. There can be
multiple IPv4 addresses defined on an interface. Thus, as a new address is defined, it is added on
this IP Interface.
Subnet Mask
A Bitmask that determ ines the extent of the subnet that the S witch is on. Shoul d be of the form
xxx.xxx.xxx.xx x, where each xxx is a number (repr esented in decimal) bet ween 0 and 255. The
value should be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and
255.255.255.0 for a Class C network, but custom subnet masks are allowed.
Gateway
IP address that determ ines where pack ets with a destination a ddress outside th e current subnet
should be sent. This is usually the address of a rout er or a host ac ting as an IP gate way. If your
network is not part of an Intranet, or you do not want the S witch to be accessible outside your
local network, you can leave this field unchanged.
Click Apply to implement changes made.
10
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Setting the Swith’s IP Address using the Console Interface
Each Switch must be ass igned its own I P Address, which is used for c omm unication with an SN MP network m anager
or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. You can
change the default Switch IP address to meet the specification of your networking address scheme.
The IP address for the Switch must be set before it can be managed with the W eb-based manager. The Swit ch IP
address can be aut omaticall y set usin g BOOT P or DHCP protocols , in wh ich cas e the actu al addres s assigned to the
Switch must be known. T he IP address may be set using the C ommand Line Interfac e (CLI) over the console serial
port as follows:
Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy, where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z, where the x’s represents the corresponding
number of subnets in CIDR notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be
used to connect a management station to the Switch’s Telnet or Web-based management agent.
The system message Success indicated that the command was executed successfully. The Switch can now be
configured and managed via Telnet and the CLI or via the Web-based management ag ent us ing th e abo ve ip addr ess
to connect to the Switch.
Interface Setti ngs
This window allows the user to create and configure interfaces on the Switch.
To view this window, click Configuration> Interface Settings as shown below:
Figure 2 - 5 Interface Settings window
The following parameters can be configured:
Parameter Description
Interface Name
VLAN Name
Interface Admin.
State
Click Create to create the entry or D elete All to delete all the current IP Interface entries.
Enter the name you wish to give the IP Interface.
Enter the name of the VLAN corresponding to the System interface.
Allows the user to enable or disable the interface administration state.
To edit the VLAN Name or Admin. State click the IPv4 Edit or IPv6 Edit button as shown below.
Figure 2 - 6 Interface Settings Edit window
11
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
IPv6 Network
NS Retransmit
Enter the new VLAN Name and Admin. State and click Apply. To edit an entry for IPv4 features click the
corresponding IPv4 Edit button.
Figure 2 - 7 IPv4 Interface Settings Edit window
The following parameters can be configured:
Parameter Description
Interface Name
VLAN Name
IPv4 Address
Displays the interface being edited.
Enter the name of the VLAN corresponding to the interface.
Enter an alternative IPv4 address. Currently an interface can only have one IPv4 address defined.
Therefore multinetting configuration of IPv4 must be done through creation of a secondary
interface on the sam e VLAN, instead of dir ectly config uring multiple I Pv4 addresses on the same
interface.
Subnet Mask
IPv4 State
Enter the corresponding subnet mask.
This function allows user to enable the IPv4 address on the IP interface.
Click Apply to implement changes made.
To edit an entry for IPv6 features click the corresponding IPv6 Edit button.
The following parameters can be configured:
Parameter Description
Interface Name
VLAN Name
Address
IPv6 State
time (0-
4294967295)
Figure 2 - 8 IPv6 Interface Settings Edit window
Displays the interface being edited.
Enter the name of the VLAN corresponding to the interface.
Enter the IPv6 Network Address to be configured. The interface can have multiple IPv6 addresses
defined. Configuration of IPv6 addresses must be done through the command config ipif.
Allows the user to enable or disable the IPv6 state on the interface.
This field is used to set the interval, in milliseconds that the Switch will produce neighbor
solicitation pack ets to be s ent out over the local net work . This is use d to disc over IP v6 neigh bors
on the local network. The user may select a time between 0 and 4294967295 milliseconds. The
default is 0.
12
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Automatic Link
Enables or disables the automatic configurat ion of link local addresses when there are no IPv6
Local Address
Click Apply to implement changes made.
addresses explicitly configured. When an IPv6 address is explicitly configured, the link local
address will be aut omatically configur ed, and the IPv6 processing will be started. When there is
no IPv6 address explicitl y configure d, by default, li nk local ad dress is not c onfigured and th e IPv6
processing will b e disab le d. By enabling this aut omatic configuration, the link local ad dr ess will b e
automatically configured and IPv6 processing will be started.
IPv6 Route Settings
This window allows the user to create and configure IPv6 Route interfaces to the Switch’s IP routing table.
To view this window, click Configuration> IPv6 Route Settings as shown below:
Figure 2 - 9 IPv6 Route Settings window
The following parameters can be configured:
Parameter Description
Interface Name
Nexthop
Address
Metric (1-65535)
Backup State
Click Apply to implement changes made. To remove any entry, click the Delete All button.
Enter the name you wish to give the IPv6 Route Interface.
Enter the IPv6 address for the next hop router.
Allows the entr y of a ro uti n g pr ot oc ol metric entry repres enti ng the n umber of routers betw ee n t he
Switch and the IP address above. The default setting is 1.
The user may choose b etween Prim ary and Back up. If the Prim ary Static/Def ault Route f ails, the
Backup Route will support the entry.
IPv6 Neighbor Settings
This window allows the user to creat e and config ure IPv6 Neig hbor settings on the Switch . The Switch ’s current IPv6
neighbor settings will be displayed in the table at the bottom of this window.
To view this window, click Configuration> IPv6 Neighbor Settings as shown below:
The following parameters can be configured:
Figure 2 - 10 IPv6 Neighbor Settings window
13
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Neighbor IPv6
neighbors of the IP interface previously created.
Parameter Description
Interface Name
Address
Link Layer MAC
Address
Interface Name
State
Click Add to add a new entry, click Find to search for a specific entry or click Clear to remove an entry.
Enter the interface name of the IPv6 neighbor you wish to configure.
Enter the neighbor IPv6 address of the entry you wish to configure.
Enter the MAC address of the neighbor device to be added as an IPv6 neighbor on the IP
interface.
In order to search f or a previously configured Interfac e name enter the appropriate inform ation
and click Find. To remove a prev iously configured Interface enter the I nterface name and click
Clear.
To find or delete specific entries use the pull down menu to select All, Address, Static, or
Dynamic.
All – Select All to view all configured neighbor devices which are IPv6 neighbors of the IP
interface previously created.
Address – Select Address and enter the IPv6 address of the entry you wish to find.
Static – Select Static to view all statically entered IPv6 neighbors on the Switch.
Dynamic – Select Dynamic to view all dynamically configured neighbor devices which are IPv6
Port Configuration
This section contains information for configuring various attributes and properties for individual physical ports,
including port speed and flow control.
Port Settings
To view this window, click Configuration > Port Configuration > Port Settings as shown below:
To configure switch ports:
Choose the port or sequential range of ports using the From Port / To Port port pull-down menus.
Use the remaining pull-down menus to configure the parameters described below:
The following parameters can be configured:
Figure 2 - 11 Port Settings window
14
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
will allow the port to
Parameter Description
From Port / To Port
State
Speed/Duplex
Flow Control
Use the pull-down menus to select the port or range of ports to be configured.
Toggle this field to either enable or disable a given port or group of ports.
Toggle the Speed/Duplex field to either se lect the s peed an d duplex/ half-dup lex s tate of th e
port. Auto denot es aut o-negotiation between 1 0 an d 1 00 Mb ps de vices , i n f ull- or half-duplex.
The Auto sett in g al lo ws t he port to automatically determine the f as test setti ngs th e d ev ic e t he
port is connected to can ha ndle, and then to use thos e settings. The other options are Auto,
10M/Half, 10M/Full, 100M/Half and 100M/Full, 1000M/Full_M, 1000M/Full_S and 1000M/Full.
There is no automatic adjustment of port settings with any option other than Auto.
The Switch allows the us er to config ure two types of gigabit connec tions; 1000M/Full_M and
1000M/Full_S. G igabit connections on ly support full duplex connect ions and take on certain
characteristics that are different from the other choices listed.
The 1000M/Full_M (master) and 1000M/Full_S (slave) parameters refer to connections
running a 1000BASE-T cable for connection between the Switch port and other device
capable of a gigabit connection. The master setting (1000M/Full_M)
advertise capabilities r elat e d to du pl ex, s peed and physical layer type. T he master setting will
also determine the m aster and sla ve relat ionship b etween th e t wo connected ph ysical la yers.
This relationship is necessary for establishing the timing control between the two physical
layers. The timing control is set on a master physical layer by a local source. The slave
setting (1000M/Full_S) uses loop timing, where the timing comes form a data stream
received from the m aster. If one connection is set f or 1000M/Full_M, the other side of the
connection mus t be set for 1000M/Full_S. An y other configuration will result in a link down
status for both ports.
Displays the flo w control scheme used for the various port configurations . Ports configured
for full-duplex use 802 .3x flow control, half-dup lex ports use backpressur e flow control, and
Auto ports use an automatic selection of the two. The default is Disabled.
Address Learning When Enabled, destination and source MAC addresses are automatically listed in the
forwarding table. The default setting is Enabled.
Medium Type
Click Apply to implement the new settings on the Switch. Click Refresh to reload the page.
This applies onl y to the Co mbo ports. If configuring the Combo p orts this def ines the t ype of
transport medium used. SFP ports shou ld be set at Fiber and t he Combo 10 00BASE-T ports
should be set at Copper.
Port Description
The Switch supports a port description feature where the user may assign names to various ports on the Switch.
Use the From Port / To Port pull-down menu to choose a port or range of ports to describe, and then enter a
description of the port(s). Click Apply to set the descriptions in the Port Description Table.
The Medium Type applies only to the Combo ports. If configuring the Combo ports this defines the type of tranport
medium used. SFP ports should be nominated Fiber and the Combo 1000BASE-T ports should be nominated Copper.
The result will be displayed in the appropriate switch port number slot (C for copper ports and F for fiber ports).
To view this window, click Configuration > Port Configuration > Port Description as shown below:
15
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Figure 2 - 12 Port Description window
Port Error Disabled
The following window will display the information about ports that have had their connection status disabled, for
reasons such as Loopback Detection or link down status.
To view this window, click Configuration> Port Configuration > Port Error Disabled as shown below.
Figure 2 - 13 Port Error Disabled window
The following parameters are displayed:
Parameter Description
Port
Port State Describes the current running state of the port, whether Enabled or Disabled.
Connection Status
Reason
Displays the port that has been error disabled.
This field will read the uplink status of the individual ports, whether enabled or Disabled.
Describes the reason why the port has been error-disabled, such as a STP loopback
occurrence.
Static ARP Settings
The Address Resolutio n Protoc ol (ARP) is a TC P/IP pr otocol t hat con verts I P addres ses into ph ysica l addres ses. T his
table allows network managers to view, define, m odify and delete ARP inf ormation for spec ific devices. Sta tic entries
can be defined in the ARP Table. When static entries are defined, a permanent entry is entered and is used to
translate IP address to MAC addresses.
To view this window, click Configuration > Static ARP Settings as shown below:
16
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
available to users with Admin privileges m ay not be available to those with User or Operator
The following fields can be set:
Parameter Description
Figure 2 - 14 Static ARP Settings window
ARP Aging Time
(0-65535)
IP Address
MAC Address
After entering the IP Addr ess and MAC Addres s of the Static ARP e ntry, click Apply to im plement the new entr y. To
completely clear the Static ARP Settings, click the Delete All button.
The user may globally set the maximum amount of time, in minutes, that an Address
Resolution Protocol (ARP) entry can remain in the Switch’s ARP table, without being
accessed, before it is dro pped from the tabl e. The value m ay be set in the range of 0-65535
minutes with a default setting of 20 minutes.
The IP address of the ARP entry.
The MAC address of the ARP entry.
NOTE: The Switch supports up to 255 static ARP entries.
User Accounts
Use the User Account Management window to control user privileges, create new users and view existing User
Accounts.
To view this window, click Configuration>User Accounts as shown below:
Figure 2 - 15 User Accounts window
The following fields can be set:
Parameter Description
User Name
Access Right There are three levels of user privileges, Admin, Operator and User. Some menu selections
The name of the user, an alphanumeric string of up to 15 characters.
17
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
level privileges.
There are 3 leve ls of securit y offered on the Switch, the Operator level privilege will allow us ers
to configure and view conf igurations on the Switch, except f or those involving security features,
which are still left to the Admin level privilege. Operator le vel user s c an be a uth e ntic at ed thr o ugh
either the local authe nticati on m ethod of the Switc h, or through t he Acc ess Auth entic ation Contr ol
feature, discussed later in this document. Once the user has logged in to the Switch in the
Operator level, c ertain security screens and windows wi ll not be made available to view, or to
configure. Only Admin level users have access to these features.
(Table 2 - 1 below summarizes Admin, Operator and User level privileges)
New Password
Confirm New
Password
To add a new user, enter the appropriat e information and click Apply. To del ete an account cl ick the correspond ing
Delete button. To modify an existing user account, click Edit as shown below.
Enter the Old Pass word for the account, the Ne w Password you wish to use, and retype the new passw ord in the
Confirm Password field. Us e the drop-down m enu to select the type of enc ryption (Default,Plain T ext or Sha 1), and
click Apply.
Enter a password for the new user.
Retype the new password.
Figure 2 - 16 User Accounts window
Admin, Operator and User Pri vileges
Recently added to the levels of security offered on the Switch, the Operator level priv ilege will allow users to configure
and view conf igurations on the S witch, except for those in volving security features , which are still left t o the Admin
privilege. Operator us ers c an be auth ent ic ate d thr o ug h eit her th e loc a l au the ntication method of the Sw itch, or thr oug h
the Access Authentication Control feature, discussed later in this document. Once the user has logged in to the Switch
in the Operator level, cer tain security screens and windows will not be made availab le to view, or to configure. Onl y
Admin level users have access to these features.
There are three lev els of user privileges, Admin, Operator and User. Som e menu selections available to users with
Admin privileges may not be available to those with User or Operator privileges.
The following table summarizes the Admin, Operator and User privileges:
NOTICE: In case of lost passwords or password c orruption, please refer to the
D-Link website an d the White Paper entitled “Pass word Recovery Procedure”,
which will guide you through the steps necessary to resolve this issue.
18
DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
Community Strings and Trap Stations Yes Yes Read-only
Update Firmware and Configuration Files Yes No No
System Utilities Yes Yes No
Factory Reset Yes No No
User Account Management
Add/Update/Delete User Accounts Yes No No
View User Accounts Yes No No
Table 2 - 1 Admin, Operator and User Privileges
19
Loading...
+ 262 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.