D-Link DWS-3160 Series Reference Manual - Port Security

Manual is about: Gigabit Ehernet Unified Switch

Summary of DWS-3160 Series

  • Page 1

    Fdo.

  • Page 2

    Dws-3160 series gigabit ethernet unified switch web ui reference guide i information in this document is subject to change without notice. © 2011 d-link corporation. All rights reserved. Reproduction of this document in any manner whatsoever without the written permission of d-link corporation is st...

  • Page 3: Table Of Contents

    Dws-3160 series gigabit ethernet unified switch web ui reference guide ii table of contents intended readers ............................................................................................................................................................ 1 typographical conventions .........

  • Page 4

    Dws-3160 series gigabit ethernet unified switch web ui reference guide iii ipv4 static/default route settings .......................................................................................................................... 126 ipv4 route table .................................................

  • Page 5

    Dws-3160 series gigabit ethernet unified switch web ui reference guide iv mirror ....................................................................................................................................................................... 303 sflow ............................................

  • Page 6: Intended Readers

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 1 intended readers typographical conventions notes, notices and cautions safety instructions general precautions for rack-mountable products protecting against electrostatic discharge the dws-3160 series web ui reference guide co...

  • Page 7: Section 1

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 2 section 1 web-based switch configuration introduction login to the web manager web-based user interface web pages chapter 1 introduction all software functions of the dws-3160 series switches can be managed, configured and moni...

  • Page 8

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 3 figure 2-1 enter network password window leave both the user name field and the password field blank and click ok. This will open the web-based user interface. The switch management features available in the web-based manager a...

  • Page 9: Chapter 4  Web Pages

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 4 figure 3-1 main web-manager page area number function area 1 this navigation window presents lan and wlan tabs. Click the tabs to display the features, settings and functions. Select the menu or window to display. Open folders ...

  • Page 10

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 5 l2 features - in this section the user will be able to configure features regarding the layer 2 functionality of the switch. L3 features - in this section the user will be able to configure features regarding the layer 3 functi...

  • Page 11: Section 2

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 6 section 2 lan this section describes all the available configurations in the lan tab. Chapter 1 system configuration device information system information settings port configuration poe serial port settings warning temperature...

  • Page 12: System Information Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 7 system information settings the user can enter a system name, system location, and system contact to aid in defining the switch. To view the following window, click system configuration > system information settings, as show be...

  • Page 13

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 8 figure 5-3 port settings window to configure switch ports: 1. Choose the port or sequential range of ports using the from port and to port drop-down menus. 2. Use the remaining drop-down menus to configure the parameters descri...

  • Page 14: Port Description Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 9 from a data stream received from the master. If one connection is set for 1000m full_master, the other side of the connection must be set for 1000m full_slave. Any other configuration will result in a link down status for both ...

  • Page 15: Port Error Disabled

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 10 the fields that can be configured are described below: parameter description from port / to port select the appropriate port range used for the configuration here. Medium type specify the medium type for the selected ports. If...

  • Page 16: Poe

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 11 poe the dws-3160-24pc switches support power over ethernet (poe) as defined by the ieee 802.3af and 802.3at. All ports can support poe up to 30w. Ports 1-24 can supply about 48 vdc power to powered devices (pds) over category ...

  • Page 17: Poe Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 12 figure 5-7 poe system settings window the following parameters can be configured: parameter description power limit (37- 760) sets the limit of power to be used from the switch’s power source to poe ports. The user may configu...

  • Page 18

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 13 figure 5-8 poe port settings window the following parameters can be configured: parameter description from port / to port select a range of ports from the drop-down menus to be enabled or disabled for poe. State use the drop-d...

  • Page 19: Serial Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 14 click apply to implement changes made. The port status of all poe configured ports is displayed in the table in the bottom half of the screen shown above. Serial port settings this window allows the user to adjust the baud rat...

  • Page 20: System Log Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 15 temperature setting. High threshold enter the high threshold value of the warning temperature setting. Low threshold enter the low threshold value of the warning temperature setting. Click the apply button to implement changes...

  • Page 21: System Log

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 16 figure 5-12 system log server settings the fields that can be configured are described below: parameter description server id syslog server settings index (1 to 4). Severity use the drop-down menu to select the higher level of...

  • Page 22: System Severity Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 17 log type in the drop-down menu the user can select the log type that will be displayed. Severity - when selecting severity from the drop-down menu, a secondary tick must be made. Secondary ticks are emergency, alert, critical,...

  • Page 23: Time Range Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 18 to view the following window, click system configuration > system log configuration > system severity settings, as show below: figure 5-15 system severity settings window the fields that can be configured are described below: ...

  • Page 24: Port Group Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 19 weekdays use the check boxes to select the corresponding days of the week that this time range is to be enabled. Tick the select all days check box to configure this time range for every day of the week. Click the apply button...

  • Page 25: User Accounts Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 20 user accounts settings the switch allows the control of user privileges. To view the following window, click system configuration > user accounts settings, as show below: figure 5-19 user accounts settings window to add a new ...

  • Page 26: Command Logging Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 21 command logging settings this window is used to enable or disable the command logging settings. To view this window, click system configuration > command logging settings, as shown below: figure 5-20 command logging settings w...

  • Page 27: Chapter 2  Management

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 22 chapter 2 management arp gratuitous arp ipv6 neighbor settings ip interface management settings session table single ip management snmp settings telnet settings web settings arp static arp settings the address resolution proto...

  • Page 28: Arp Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 23 the host, usually a layer 3 switch, will respond to packets destined for another device. For example, if hosts a and b are on different physical networks, b will not receive arp broadcast requests from a and therefore cannot r...

  • Page 29: Gratuitous Arp Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 24 gratuitous arp global settings the user can enable or disable the gratuitous arp global settings here. To view the following window, click management > gratuitous arp > gratuitous arp global settings, as show below: figure 6-4...

  • Page 30: Ipv6 Neighbor Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 25 figure 6-5 gratuitous arp settings window the fields that can be configured are described below: parameter description trap use the drop-down menu to enable or disable the trap option. By default the trap is disabled. Log use ...

  • Page 31: Ip Interface

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 26 figure 6-6 ipv6 neighbor settings window the fields that can be configured are described below: parameter description interface name enter the interface name of the ipv6 neighbor. Neighbor ipv6 address enter the neighbor ipv6 ...

  • Page 32

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 27 to view the following window, click management > ip interface > system ip address settings, as show below: figure 6-7 system ip address settings window the fields that can be configured are described below: parameter descripti...

  • Page 33: Interface Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 28 current subnet should be sent. This is usually the address of a router or a host acting as an ip gateway. If your network is not part of an intranet, or you do not want the switch to be accessible outside your local network, y...

  • Page 34

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 29 vlan name enter the vlan name used. Interface admin state use the drop-down menu to enable or disable the interface admin state. Secondary interface tick the check box to use this interface as a secondary interface. When the p...

  • Page 35: Management Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 30 parameter description interface name display the ipv6 interface name. Ipv6 state use the drop-down menu to enable or disable ipv6 state. Interface admin state use the drop-down menu to enable or disable the interface admin sta...

  • Page 36: Session Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 31 figure 6-13 management settings window the fields that can be configured are described below: parameter description cli paging state command line interface paging stops each page at the end of the console. This allows you to s...

  • Page 37: Single Ip Management

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 32 click the refresh button to refresh the display table so that new entries will appear. Single ip management simply put, d-link single ip management is a concept that will stack switches together over ethernet instead of using ...

  • Page 38: Single Ip Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 33 o being configured as a cas through the cs. O if report packets from the cs to the ms time out. • the user can manually configure a cas to become a cs • the cas can be configured through the cs to become a ms. After configurin...

  • Page 39: Topology

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 34 to view the following window, click management > single ip management > single ip settings, as show below: figure 6-15 single ip settings window the fields that can be configured are described below: parameter description sim ...

  • Page 40

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 35 figure 6-16 single ip management window - tree view the topology window holds the following information on the data tab: parameter description device name this field will display the device name of the switches in the sim grou...

  • Page 41

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 36 figure 6-17 topology view this window will display how the devices within the single ip management group connect to other groups and devices. Possible icons on this window are as follows: icon description icon description grou...

  • Page 42

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 37 figure 6-18 device information utilizing the tool tip setting the mouse cursor over a line between two devices will display the connection speed between the two devices, as shown below. Figure 6-19 port speed utilizing the too...

  • Page 43

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 38 figure 6-20 right-clicking a group icon the following options may appear for the user to configure: • collapse – to collapse the group that will be represented by a single icon. • expand – to expand the sim group, in detail. •...

  • Page 44

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 39 figure 6-22 right-clicking a commander icon the following options may appear for the user to configure: • collapse – to collapse the group that will be represented by a single icon. • expand – to expand the sim group, in detai...

  • Page 45: Firmware Upgrade

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 40 • property – to pop up a window to display the device information. The single ip management window contains a menu bar for device configurations, as seen below. Menu bar figure 6-26 menu bar of the topology view • print setup ...

  • Page 46: Upload Log File

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 41 to view the following window, click management > single ip management > firmware upgrade, as show below: figure 6-29 firmware upgrade window configuration file backup/restore this screen is used to upgrade configuration files ...

  • Page 47: Snmp Global Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 42 information controlled by the on-board snmp agent. Snmp defines both the format of the mib specifications and the protocol used to access this information over the network. The switch supports the snmp versions 1, 2c, and 3. T...

  • Page 48: Snmp Traps Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 43 to view the following window, click management > snmp settings > snmp global settings, as show below: figure 6-32 snmp global settings window the fields that can be configured are described below: parameter description snmp st...

  • Page 49: Snmp View Table Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 44 figure 6-34 snmp linkchange traps settings window the fields that can be configured are described below: parameter description from port / to port select the starting and ending ports to use. State use the drop-down menu to en...

  • Page 50

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 45 parameter description view name type an alphanumeric string of up to 32 characters. This is used to identify the new snmp view being created. Subtree oid type the object identifier (oid) subtree for the view. The oid identifie...

  • Page 51: Snmp Group Table Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 46 snmp group table settings an snmp group created with this table maps snmp users (identified in the snmp user table) to the views created in the previous window. To view the following window, click management > snmp settings > ...

  • Page 52: Snmp User Table Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 47 to view the following window, click management > snmp settings > snmp engine id settings, as show below: figure 6-38 snmp engine id settings window the fields that can be configured are described below: parameter description e...

  • Page 53: Snmp Host Table Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 48 has been checked. This field will require the user to enter a password. Sha – specify that the hmac-sha authentication protocol will be used. This field is only operable when v3 is selected in the snmp version field and the en...

  • Page 54: Rmon Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 49 to view the following window, click management > snmp settings > snmpv6 host table settings, as show below: 6-41 snmpv6 host table settings the fields that can be configured are described below: parameter description host ipv6...

  • Page 55: Telnet Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 50 rmon falling alarm trap enable this option to use the rmon falling alarm trap feature. Click the apply button to accept the changes made. Telnet settings users can configure telnet settings on the switch. To view the following...

  • Page 56: Chapter 3  L2 Features

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 51 chapter 3 l2 features vlan qinq spanning tree link aggregation fdb l2 multicast control multicast filtering erps settings lldp nlb fdb settings vlan priority tagging is a function defined by the ieee 802.1p standard designed t...

  • Page 57

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 52 a vlan is a collection of end nodes grouped by logic instead of physical location. End nodes that frequently communicate with each other are assigned to the same vlan, regardless of where they are physically on the network. Lo...

  • Page 58

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 53 the main characteristics of ieee 802.1q are as follows: • assigns packets to vlans by filtering. • assumes the presence of a single global spanning tree. • uses an explicit tagging scheme with one-level tagging. • 802.1q vlan ...

  • Page 59

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 54 figure 7-3 adding an ieee 802.1q tag packets that are tagged (are carrying the 802.1q vid information) can be transmitted from one 802.1q compliant network device to another with the vlan information intact. This allows 802.1q...

  • Page 60

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 55 if a packet has previously been tagged, the port will not alter the packet, thus keeping the vlan information intact. Other 802.1q compliant devices on the network to make packet-forwarding decisions can then use the vlan info...

  • Page 61: 802.1Q Vlan Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 56 on port-based vlans, nics do not need to be able to identify 802.1q tags in packet headers. Nics send and receive normal ethernet packets. If the packet’s destination lies on the same segment, communications take place using n...

  • Page 62

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 57 figure 7-5 802.1q vlan settings – add/edit vlan tab window the fields that can be configured are described below: parameter description vid allow the entry of a vlan id or displays the vlan id of an existing vlan in the add/ed...

  • Page 63

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 58 figure 7-6 802.1q vlan settings – find vlan tab window enter the vlan id number in the field offered and then click the find button. You will be redirected to the vlan list tab. To create, delete and configure a vlan batch ent...

  • Page 64: 802.1V Protocol Vlan

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 59 the port as forbidden. Click the apply button to accept the changes made. Note: the switch supports up to 4k static vlan entries. 802.1v protocol vlan 802.1v protocol group settings the user can create protocol vlan groups and...

  • Page 65

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 60 note: the group name value should be less than 33 characters. 802.1v protocol vlan settings the user can configure protocol vlan settings. The lower half of the table displays any previously created settings. To view the follo...

  • Page 66: Asymmetric Vlan Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 61 click the delete all button to remove all the entries listed. Click the edit button to re-configure the specific entry. Click the delete button to remove the specific entry. Asymmetric vlan settings shared vlan learning is a p...

  • Page 67: Gvrp Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 62 leave time (100-100000) enter the leave time value in milliseconds. Leave all time (100- 100000) enter the leave all time value in milliseconds. Nni bpdu address used to determine the bpdu protocol address for gvrp in service ...

  • Page 68: Mac-Based Vlan Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 63 gvrp the garp vlan registration protocol (gvrp) enables the port to dynamically become a member of a vlan. Gvrp is disabled by default. Ingress checking this drop-down menu allows the user to enable the port to compare the vid...

  • Page 69

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 64 port of the primary vlan will behave as the tagged member of the secondary vlan. A secondary vlan cannot be specified with advertisement. Only the primary vlan can be configured as a layer 3 interface. The private vlan member ...

  • Page 70: Pvid Auto Assign Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 65 community. Secondary vlan name enter a secondary vlan name. Secondary vlan list enter a list of secondary vlan id. Click the add button to add a new entry based on the information entered. Click the delete button to remove the...

  • Page 71: Voice Vlan Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 66 voice vlan name the name of the voice vlan. Voice vid (1-4094) the vlan id of the voice vlan. Priority the priority of the voice vlan, the range is 0 – 7. The default priority is 5. Aging time (1-65535) the aging time to set, ...

  • Page 72: Voice Vlan Device

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 67 this page is used to configure the user-defined voice traffic’s oui. The oui is used to identify the voice traffic. There are a number of pre-defined ouis. The user can further define the user-defined ouis if needed. The user-...

  • Page 73: Browse Vlan

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 68 refer to the following figure for an illustrated example. Figure 7-21 example of vlan trunk users can combine a number of vlan ports together to create vlan trunks. To view the following window, click l2 features > vlan > vlan...

  • Page 74: Show Vlan Ports

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 69 enter a page number and click the go button to navigate to a specific page when multiple pages exist. Note: the abbreviations used on this page are tagged port (t), untagged port (u) and forbidden port (f). Show vlan ports use...

  • Page 75

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 70 figure 7-25 qinq example window in this example, the service provider access network switch (provider edge switch) is the device creating and configuring double vlans. Both cevlans (customer vlans), 10 and 11, are tagged with ...

  • Page 76: Qinq Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 71 qinq settings this window is used to configure the q-in-q parameters. To view the following window, click l2 features > qinq > qinq settings, as show below: figure 7-26 qinq settings window the fields that can be configured ar...

  • Page 77: Spanning Tree

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 72 configured rule. On egress at this port, the sp-vlan tag will be recovered to c-vlan tag or be striped. The priority will be the priority in the sp-vlan tag if the inner priority flag is disabled for the receipt port. To view ...

  • Page 78

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 73 each switch utilizing the mstp on a network will have a single mstp configuration that will have the following three attributes: 1. A configuration name defined by an alphanumeric string of up to 32 characters (defined in the ...

  • Page 79

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 74 the topology to stabilize before transitioning to a forwarding state. In order to allow this rapid transition, the protocol introduces two new variables: the edge port and the point-to-point (p2p) port. The edge port is a conf...

  • Page 80: Stp Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 75 mstp - select this parameter to set the multiple spanning tree protocol (mstp) globally on the switch. Forwarding bpdu this field can be enabled or disabled. When enabled, it allows the forwarding of stp bpdu packets from othe...

  • Page 81

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 76 figure 7-29 stp port settings window the fields that can be configured are described below: parameter description from port / to port select the starting and ending ports to be configured. External cost (0=auto) this defines a...

  • Page 82: Stp Instance Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 77 packets. If a bpdu packet is received, it automatically loses edge port status. Choosing the false parameter indicates that the port does not have edge port status. Alternatively, the auto option is available. Restricted role ...

  • Page 83: Mstp Port Information

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 78 to view the following window, click l2 features > spanning tree > stp instance settings, as show below: figure 7-31stp instance settings window the fields that can be configured are described below: parameter description msti ...

  • Page 84: Link Aggregation

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 79 occurs. A lower internal cost represents a quicker transmission. Selecting 0 (zero) for this parameter will set the quickest route automatically and optimally for an interface. Priority enter a value between 0 and 240 to set t...

  • Page 85: Port Trunking Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 80 all of the ports in the group must be members of the same vlan, and their stp status, static multicast, traffic control; traffic segmentation and 802.1p default priority configurations must be identical. Port locking, port mir...

  • Page 86: Lacp Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 81 active ports shows the ports that are currently forwarding packets. Click the apply button to accept the changes made. Click the clear all button to clear out all the information entered. Click the add button to add a new entr...

  • Page 87: Fdb

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 82 fdb static fdb settings unicast static fdb settings users can set up static unicast forwarding on the switch. To view the following window, click l2 features > fdb > static fdb settings > unicast static fdb settings, as show b...

  • Page 88: Mac Notification Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 83 figure 7-37 multicast static fdb settings window the fields that can be configured are described below: parameter description vid the vlan id of the vlan the corresponding mac address belongs to. Multicast mac address the stat...

  • Page 89

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 84 figure 7-38 mac notification settings window the fields that can be configured are described below: parameter description state enable or disable mac notification globally on the switch interval (1-2147483647) the time in seco...

  • Page 90: Mac Address Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 85 time (10-1000000) forwarding table without being accessed (that is, how long a learned mac address is allowed to remain idle). To change this option, type in a different value representing the mac address’ age-out time in seco...

  • Page 91: L2 Multicast Control

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 86 figure 7-41 arp & fdb table window the fields that can be configured are described below: parameter description port select the port number to use for this configuration. Mac address enter the mac address to use for this confi...

  • Page 92

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 87 figure 7-42 igmp snooping settings window the fields that can be configured are described below: parameter description igmp snooping state click to enable or disable the igmp snooping state. Max learning entry value (1-1024) e...

  • Page 93

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 88 fast leave enable or disable the igmp snooping fast leave function. If enabled, the membership is immediately removed when the system receive the igmp leave message. State if the state is enable, it allows the switch to be sel...

  • Page 94

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 89 click the clear all button to unselect all the ports for configuration. Click the apply button to accept the changes made. Click the button to discard the changes made and return to the previous window. Igmp snooping rate limi...

  • Page 95: Igmp Router Port

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 90 the fields that can be configured are described below: parameter description vlan name enter the vlan name of the multicast group. Vid list enter the vid list or of the multicast group. Ipv4 address enter the ipv4 address. Cli...

  • Page 96: Igmp Snooping Group

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 91 note: the abbreviations used on this page are static router port (s), dynamic router port (d) and forbidden router port (f). Igmp snooping group users can view the switch’s igmp snooping group table. Igmp snooping allows the s...

  • Page 97: Igmp Snooping Counter

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 92 figure 7-50 igmp snooping forwarding table window the fields that can be configured are described below: parameter description vlan name the vlan name of the multicast group. Vid list the vlan id list of the multicast group. C...

  • Page 98: Igmp Host Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 93 figure 7-52 browse igmp snooping counter window click the clear counter button to clear all the information displayed in the fields. Click the refresh button to refresh the display table so that new information will appear. Cl...

  • Page 99: Mld Snooping

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 94 mld snooping multicast listener discovery (mld) snooping is an ipv6 function used similarly to igmp snooping in ipv4. It is used to discover ports on a vlan that are requesting multicast data. Instead of flooding all ports on ...

  • Page 100: Mld Snooping Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 95 mld snooping settings users can configure the settings for mld snooping. To view the following window, click l2 features > l2 multicast control > mld snooping > mld snooping settings, as show below: figure 7-54 mld snooping se...

  • Page 101

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 96 other querier present interval - amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the querier. Last listener query count - number of group-specific querie...

  • Page 102

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 97 forbidden router port this section is used to designate a range of ports as being not connected to multicast-enabled routers. This ensures that the forbidden router port will not propagate routing packets out. Dynamic router p...

  • Page 103: Mld Router Port

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 98 figure 7-58 mld snooping static group settings window the fields that can be configured are described below: parameter description vlan name the name of the vlan on which the static group resides. Vid list the id of the vlan o...

  • Page 104: Mld Snooping Group

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 99 figure 7-60 mld router port window parameter description vid enter a vlan id. Click the find button to locate a specific entry based on the information entered. Enter a page number and click the go button to navigate to a spec...

  • Page 105: Mld Snooping Counter

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 100 click the clear all data driven button to delete all mld snooping groups which is learned by the data driven feature of specified vlans. Mld snooping forwarding table this page displays the switch’s current mld snooping forwa...

  • Page 106: Mld Host Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 101 port list specify a list of ports to be displayed. Click the find button to locate a specific entry based on the information entered. Click the view all button to display all the existing entries. Click the packet statistics ...

  • Page 107: Multicast Vlan

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 102 click the find button to locate a specific entry based on the information entered. Click the view all button to display all the existing entries. Multicast vlan in a switching environment, multiple vlans may exist. Every time...

  • Page 108

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 103 click the find button to locate a specific entry based on the information entered. Click the delete all button to remove all the entries listed. Click the view all button to display all the existing entries. Click the delete ...

  • Page 109

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 104 forwarded on the multicast vlan. None – if this is specified, the packet’s original priority is used. The default setting is none. Replace priority specify that the packet’s priority will be changed by the switch, based on th...

  • Page 110

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 105 click the select all button to select all the ports for configuration. Click the clear all button to unselect all the ports for configuration. Click the apply button to accept the changes made. Click the button to discard the...

  • Page 111

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 106 figure 7-72 multicast group profile multicast address settings window the fields that can be configured are described below: parameter description multicast address list enter the multicast address list. Click the add button ...

  • Page 112

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 107 click the edit button to configure the mld snooping multicast vlan settings for the specific entry. Click the delete button to remove the specific entry. Click the profile list link to configure the mld snooping multicast vla...

  • Page 113: Multicast Filtering

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 108 figure 7-75 mld snooping multicast vlan group list settings window the fields that can be configured are described below: parameter description profile name use the drop-down menu to select the igmp snooping multicast vlan gr...

  • Page 114

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 109 click the delete button to remove the specific entry. After clicking the group list link, the following page will appear: figure 7-77 multicast address group list settings window the fields that can be configured are describe...

  • Page 115: Ipv6 Multicast Filtering

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 110 click the delete button to remove the specific entry. Click the find button to locate a specific entry based on the information entered. Enter a page number and click the go button to navigate to a specific page when multiple...

  • Page 116

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 111 figure 7-80 ipv4 multicast profile settings window the fields that can be configured are described below: parameter description profile id (1-24) enter a profile id between 1 and 24. Profile name enter a name for the ip multi...

  • Page 117

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 112 figure 7-82 ipv6 limited multicast range settings window the fields that can be configured are described below: parameter description ports / vid list select the appropriate port(s) or vlan ids used for the configuration here...

  • Page 118: Multicast Filtering Mode

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 113 click the apply button to accept the changes made. Click the find button to locate a specific entry based on the information entered. Enter a page number and click the go button to navigate to a specific page when multiple pa...

  • Page 119

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 114 rpl (ring protection link) – link designated by mechanism that is blocked during idle state to prevent loop on bridged ring rpl owner – node connected to rpl that blocks traffic on rpl during idle state and unblocks during pr...

  • Page 120

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 115 figure 7-86 erps settings - detail information window click on the edit button to re-configure the specific entry. Click on the button to return to the erps settings page. After click the edit button, the following window wil...

  • Page 121: Lldp

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 116 operational east port here the operational east port value will be displayed. Admin rpl port specifies the rpl port used. Options to choose from are west port, east port, and none. Operational rpl port here the operational rp...

  • Page 122: Lldp

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 117 lldp lldp global settings on this page the user can configure the lldp global parameters. To view the following window, click l2 features > lldp > lldp > lldp global settings, as show below: figure 7-89 lldp global settings w...

  • Page 123: Lldp Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 118 lldp port settings on this page the user can configure the lldp port parameters. To view the following window, click l2 features > lldp > lldp > lldp port settings, as show below: figure 7-90 lldp port settings window the fie...

  • Page 124: Lldp Basic Tlvs Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 119 lldp management address list on this page the user can view the lldp management address list. To view the following window, click l2 features > lldp > lldp > lldp management address list, as show below: figure 7-91 lldp manag...

  • Page 125: Lldp Dot1 Tlvs Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 120 figure 7-92 lldp basic tlvs settings window the fields that can be configured are described below: parameter description from port / to port select the port range to use for this configuration. Port description use the drop-d...

  • Page 126: Lldp Dot3 Tlvs Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 121 figure 7-93 lldp dot1 tlvs settings window the fields that can be configured are described below: parameter description from port / to port use the drop-down menu to select the port range to use for this configuration. Dot1 t...

  • Page 127: Lldp Statistic System

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 122 figure 7-94 lldp dot3 tlvs settings window the fields that can be configured are described below: parameter description from port / to port use the drop-down menu to select the port range to use for this configuration. Mac / ...

  • Page 128: Lldp Local Port Information

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 123 figure 7-95 lldp statistics system window the fields that can be configured are described below: parameter description port use the drop-down menu to select a port. Click the find button to locate a specific entry based on th...

  • Page 129

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 124 figure 7-97 lldp local port information – show normal window the fields that can be configured are described below: parameter description unit select the unit you want to configure. Port use the drop-down menu to select a por...

  • Page 130: Nlb Fdb Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 125 port use the drop-down menu to select a port. Click the find button to locate a specific entry based on the information entered. To view the normal lldp remote port information page per port, click the show normal button. Aft...

  • Page 131: Chapter 4  L3 Features

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 126 chapter 4 l3 features ipv4 static/default route settings ipv4 route table ipv6 static/default route settings ipv6 route table ip forwarding table vrrp ipv4 static/default route settings the switch supports static routing for ...

  • Page 132: Ipv4 Route Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 127 ipv4 route table the ip routing table stores all the external routes information of the switch. This window is used to display all the external route information on the switch. To view the following window, click l3 features ...

  • Page 133: Ip Forwarding Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 128 backup routes according to the order learnt by the routing table until route success. This field represents the backup state for the ipv6 configured. This field may be primary or backup. Click the apply button to accept the c...

  • Page 134: Vrrp Global Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 129 vrrp global settings this window is used to configure the vrrp global settings. To view the following window, click l3 features > vrrp > vrrp global settings, as show below: figure 8-5 vrrp global settings window the fields t...

  • Page 135

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 130 interval (1-255) preempt mode use the drop-down menu to determine the behavior of backup routers within the vrrp group by controlling whether a higher priority backup router will preempt a lower priority master router. If tru...

  • Page 136

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 131 advertisement interval (1-255) enter the interval between sending advertisement messages. Preempt mode use the drop-down menu to determine the behavior of backup routers within the vrrp group by controlling whether a higher p...

  • Page 137

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 132 figure 8-10 vrrp authentication settings - edit window the fields that can be configured are described below: parameter description authentication type use the drop-down menu to select the vrrp’s authentication type. None - t...

  • Page 138: Chapter 5  Qos

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 133 chapter 5 qos 802.1p settings bandwidth control traffic control settings dscp hol blocking prevention scheduling settings the switch supports 802.1p priority queuing quality of service. The following section discusses the imp...

  • Page 139: 802.1P Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 134 understanding qos the switch supports 802.1p priority queuing. The switch has eight priority queues. These priority queues are numbered from 7 (class 7) — the highest priority queue — to 0 (class 0) — the lowest priority queu...

  • Page 140

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 135 figure 9-2 default priority settings window the fields that can be configured are described below: parameter description from port / to port select the starting and ending ports to use. Priority use the drop-down menu to sele...

  • Page 141: Bandwidth Control

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 136 bandwidth control the bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. Bandwidth control settings the effective rx/tx rate refers to the actual bandwid...

  • Page 142

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 137 effective tx if a radius server has assigned the tx bandwidth, then it will be the effective tx bandwidth. The authentication with the radius sever can be per port or per user. For per user authentication, there may be multip...

  • Page 143: Traffic Control Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 138 traffic control settings on a computer network, packets such as multicast packets and broadcast packets continually flood the network as normal procedure. At times, this traffic may increase due to a malicious end station on ...

  • Page 144

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 139 parameter description from port / to port use the drop-down menu to select the port range to use for this configuration. Action select the method of traffic control from the drop-down menu. The choices are: drop – utilizes th...

  • Page 145: Dscp

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 140 note: traffic control cannot be implemented on ports that are set for link aggregation (port trunking). Note: ports that are in the shutdown forever mode will be seen as discarding in spanning tree windows and implementations...

  • Page 146: Dscp Map Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 141 click the apply button to accept the changes made. Dscp map settings the mapping of dscp to queue will be used to determine the priority of the packet (which will be then used to determine the scheduling queue) when the port ...

  • Page 147: Hol Blocking Prevention

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 142 dscp map use the drop-down menu to select one of two options: dscp priority – specifies a list of dscp values to be mapped to a specific priority. Dscp dscp – specifies a list of dscp value to be mapped to a specific dscp. Ds...

  • Page 148: Qos Scheduling Mechanism

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 143 figure 9-11 qos scheduling window the following parameters can be configured: parameter description from port / to port enter the port or port list you wish to configure. Class id select the class id, from 0-7 to configure fo...

  • Page 149

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 144 figure 9-12 qos scheduling mechanism the following parameters can be configured: parameter description from port / to port enter the port or port list you wish to configure. Scheduling mechanism strict – the highest class of ...

  • Page 150: Chapter 6  Acl

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 145 chapter 6 acl acl configuration wizard access profile list cpu access profile list acl finder acl flow meter egress access profile list egress acl flow meter acl configuration wizard the acl configuration wizard will aid the ...

  • Page 151: Access Profile List

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 146 ipv6 – selecting this option will allow the user to enter a range of ipv6 addresses for this rule. Action select permit to specify that the packets that match the access profile are forwarded by the switch, according to any a...

  • Page 152

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 147 click the add/view rules button to view or add acl rules within the specified profile id. Click the delete button to remove the specific entry. Enter a page number and click the go button to navigate to a specific page when m...

  • Page 153

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 148 header. Select ipv4 acl to instruct the switch to examine the ipv4 address in each frame's header. Select ipv6 aclto instruct the switch to examine the ipv6 address in each frame's header. Select packet content to instruct th...

  • Page 154

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 149 figure 10-6 add access rule window (ethernet acl) the fields that can be configured are described below: parameter description access id (1-256) type in a unique identifier number for this access. This value can be set from 1...

  • Page 155

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 150 when this access rule will be implemented on the switch. Counter here the user can select the counter. By checking the counter, the administrator can see how many times that the rule was hit. Ports when a range of ports is to...

  • Page 156

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 151 figure 10-8 add acl profile window (ipv4 acl) the fields that can be configured are described below: parameter description profile id (1-6) enter a unique identifier number for this profile set. This value can be set from 1 t...

  • Page 157

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 152 select icmp to instruct the switch to examine the internet control message protocol (icmp) field in each frame's header. Select type to further specify that the access profile will apply an icmp type value, or specify code to...

  • Page 158

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 153 figure 10-10 access rule list window (ipv4 acl) click the add rule button to create a new acl rule in this profile. Click the button to return to the previous window. Click the show details button to view more information abo...

  • Page 159

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 154 previously in this command, before forwarding it on to the specified cos queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the switch. For more i...

  • Page 160

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 155 figure 10-13 add acl profile window (ipv6 acl) the fields that can be configured are described below: parameter description profile id (1-6) enter a unique identifier number for this profile set. This value can be set from 1 ...

  • Page 161

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 156 icmp select icmp to instruct the switch to examine the internet control message protocol (icmp) field in each frame's header. Ipv6 source mask the user may specify an ip address mask for the source ipv6 address by ticking the...

  • Page 162

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 157 figure 10-16 add access rule (ipv6 acl) the fields that can be configured are described below: parameter description access id (1-256) type in a unique identifier number for this access. This value can be set from 1 to 256. A...

  • Page 163

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 158 time range name tick the check box and enter the name of the time range settings that has been previously configured in the time range settings window. This will set specific times when this access rule will be implemented on...

  • Page 164

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 159 . Figure 10-18 add acl profile (packet content acl) the fields that can be configured are described below: parameter description profile id (1-6) enter a unique identifier number for this profile set. This value can be set fr...

  • Page 165

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 160 b0, b1 b4, b5 b8, b9 b116, b117 b120, b121 b124, b125 example: offset_chunk_1 0 0xffffffff will match packet byte offset 126,127,0,1 offset_chunk_1 0 0x0000ffff will match packet byte offset,0,1 note: only one packet_content_...

  • Page 166

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 161 figure 10-21 add access rule (packet content acl) the fields that can be configured are described below: parameter description access id (1-256) type in a unique identifier number for this access. This value can be set from 1...

  • Page 167: Cpu Access Profile List

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 162 (0-7) value. If used without an action priority, the packet is sent to the default tc. Time range name tick the check box and enter the name of the time range settings that has been previously configured in the time range set...

  • Page 168

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 163 figure 10-23 cpu access profile list window the fields that can be configured are described below: parameter description cpu interface filtering state click to enable or disable the cpu interface filtering state. Click the ap...

  • Page 169

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 164 figure 10-24 add cpu acl profile (ethernet acl) the fields that can be configured are described below: parameter description profile id (1-5) enter a unique identifier number for this profile set. This value can be set from 1...

  • Page 170

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 165 after clicking the show details button, the following page will appear: figure 10-25 cpu access profile detail information (ethernet acl) click the show all profiles button to navigate back to the cpu acl profile list page. A...

  • Page 171

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 166 parameter description access id (1-100) type in a unique identifier number for this access. This value can be set from 1 to 100. Action select permit to specify that the packets that match the access profile are forwarded by ...

  • Page 172

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 167 figure 10-29 add cpu acl profile (ipv4 acl) the fields that can be configured are described below: parameter description profile id (1-5) enter a unique identifier number for this profile set. This value can be set from 1 to ...

  • Page 173

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 168 select type to further specify that the access profile will apply an icmp type value, or specify code to further specify that the access profile will apply an icmp code value. Select igmp to instruct the switch to examine the...

  • Page 174

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 169 figure 10-31 cpu access rule list (ipv4 acl) click the add rule button to create a new cpu acl rule in this profile. Click the button to return to the previous window. Click the show details button to view more information ab...

  • Page 175

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 170 click the button to discard the changes made and return to the previous window. After clicking the show details button in the cpu access rule list, the following page will appear: figure 10-33 cpu access rule detail informati...

  • Page 176

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 171 packet content mask. This will change the menu according to the requirements for the type of profile. Select ethernet to instruct the switch to examine the layer 2 part of each packet header. Select ipv4 to instruct the switc...

  • Page 177

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 172 figure 10-37 add cpu access rule (ipv6 acl) the fields that can be configured are described below: parameter description access id (1-100) enter a unique identifier number for this access. This value can be set from 1 to 100....

  • Page 178

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 173 adding a cpu packet content acl profile the window shown below is the add cpu acl profile window for packet content. To use specific filtering masks in this acl profile, click the packet filtering mask field to highlight it r...

  • Page 179

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 174 64-79 – enter a value in hex form to mask the packet from byte 64 to byte 79. Click the select button to select a cpu acl type. Click the create buttonto create a profile. Click the button to discard the changes made and retu...

  • Page 180

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 175 figure 10-42 add cpu access rule (packet content acl) the fields that can be configured are described below: parameter description access id (1-100) type in a unique identifier number for this access. This value can be set fr...

  • Page 181: Acl Finder

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 176 figure 10-43 cpu access rule detail information (packet content acl) click the show all rules button to navigate back to the cpu access rule list. Acl finder the acl rule finder helps you to identify any rules that have been ...

  • Page 182

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 177 trtcm, the packet flow is marked green if it doesn’t exceed the cir and yellow if it does. The configured rate of the cir must not exceed that of the pir. The cir can also be configured for unexpected packet bursts using the ...

  • Page 183

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 178 parameter description profile id use the drop-down menu to select it and enter the profile id for the flow meter. Profile name use the drop-down menu to select it and enter the profile name for the flow meter. Access id (1-25...

  • Page 184: Egress Access Profile List

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 179 packets with a high precedence. Trtcm – specify the “two-rate three-color mode.” cir – specify the committed information rate. The unit is kbps. Cir should always be equal or less than pir. Pir – specify the peak information ...

  • Page 185

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 180 figure 10-48 egress access profile list window click the add egress acl button to add an entry to the egress access profile list. Click the delete all button to remove all access profiles from this table. Click the show detai...

  • Page 186

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 181 figure 10-49 add egress acl profile window (ethernet acl) the fields that can be configured are described below: parameter description profile id (1-4) enter a unique identifier number for this profile set. This value can be ...

  • Page 187

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 182 after clicking the show details button, the following page will appear: figure 10-50 egress access profile detail information window (ethernet acl) click the show all profiles button to navigate back to the access profile lis...

  • Page 188

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 183 parameter description access id (1-128) type in a unique identifier number for this access. This value can be set from 1 to 128. Auto assign – ticking this check box will instruct the switch to automatically assign an access ...

  • Page 189

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 184 adding an ipv4 acl profile the window shown below is the add egress acl profile window for ipv4. To use specific filtering masks in this egress acl profile, click the packet filtering mask field to highlight it red. This will...

  • Page 190

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 185 mask protocol selecting this option instructs the switch to examine the protocol type value in each frame's header. Then the user must specify what protocol(s) to include according to the following guidelines: select icmp to ...

  • Page 191

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 186 click the show all profiles button to navigate back to the access profile list page. After clicking the add/view rules button, the following page will appear: figure 10-56 egress access rule list window (ipv4 acl) click the a...

  • Page 192

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 187 priority (0-7) tick the corresponding check box if you want to re-write the 802.1p default priority of a packet to the value entered in the priority field, which meets the criteria specified previously in this command, before...

  • Page 193

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 188 figure 10-59 add egress acl profile window (ipv6 acl) the fields that can be configured are described below: parameter description profile id (1-4) enter a unique identifier number for this profile set. This value can be set ...

  • Page 194

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 189 255.255.255.255. Ipv6 destination mask the user may specify an ip address mask for the destination ipv6 address by ticking the corresponding check box and entering the ip address mask, e.G. 255.255.255.255. Click the select b...

  • Page 195

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 190 figure 10-62 add egress access rule (ipv6 acl) the fields that can be configured are described below: parameter description access id (1-128) type in a unique identifier number for this access. This value can be set from 1 to...

  • Page 196: Egress Acl Flow Meter

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 191 error message and the access rule will not be configured. Ticking the all ports check box will denote all ports on the switch. Port group id specify the port group id to apply to the access rule. Port group name specify the p...

  • Page 197

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 192 figure 10-65 egress acl flow meter configuration window the fields that can be configured are described below: parameter description profile id (1-4) here the user can enter the profile id for the flow meter. Profile name her...

  • Page 198

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 193 using this parameter and entering the dscp value to replace. Counter – use this parameter to enable or disable the packet counter for the specified acl entry in the green flow. Exceed – this field denotes the yellow packet fl...

  • Page 199: Chapter 7  Security

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 194 chapter 7 security 802.1x radius ip-mac-port binding (impb) mac-based access control (mac) compound authentication port security arp spoofing prevention settings bpdu attack protection loopback detection settings traffic segm...

  • Page 200

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 195 the authentication server is a remote device that is connected to the same network as the client and authenticator, must be running a radius server program and must be configured properly on the authenticator (switch). Client...

  • Page 201

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 196 utilizing the three roles stated above, the 802.1x protocol provides a stable and secure way of authorizing and authenticating users attempting to access the network. Only eapol traffic is allowed to pass through the specifie...

  • Page 202: 802.1X Global Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 197 in order to successfully make use of 802.1x in a shared media lan segment, it would be necessary to create “logical” ports, one for each attached device that required access to the lan. The switch would regard the single phys...

  • Page 203: 802.1X Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 198 802.1x port settings users can configure the 802.1x authenticator port settings. To view this window, click security > 802.1x > 802.1x port settings as shown below: figure 11-10 802.1x port settings the fields that can be con...

  • Page 204: 802.1X User Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 199 client. The default setting is 30 seconds. Reauthperiod (1-65535) a constant that defines a nonzero number of seconds between periodic re- authentication of the client. The default setting is 3600 seconds. Reauthentication de...

  • Page 205: Guest Vlan Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 200 figure 11-11 802.1x user settings window the fields that can be configured are described below: parameter description 802.1x user the user can enter an 802.1x user’s username in here. Password the user can enter an 802.1x use...

  • Page 206: Authenticator State

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 201 2. A port cannot be a member of a guest vlan and a static vlan simultaneously. 3. Once a client has been accepted into the target vlan, it can no longer access the guest vlan. Remember, to set an 802.1x guest vlan, the user m...

  • Page 207: Authenticator Statistics

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 202 authenticator statistics this window is used to display the authenticator statistics information. To view this window, click security > 802.1x > authenticator statistics as shown below: figure 11-15 authenticator statistics w...

  • Page 208: Authenticator Diagnostics

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 203 figure 11-16 authenticator session statistics window the fields that can be configured are described below: parameter description time interval use the drop-down menu to select the interval. Click the ok button to accept the ...

  • Page 209: Initialize Port(S)

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 204 figure 11-17 authenticator diagnostics window note: the user must first globally enable authentication mode in the 802.1x global settings window before initializing ports. Information in this window cannot be viewed before en...

  • Page 210: Reauthenticate Port(S)

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 205 figure 11-19 initialize port(s) – mac-based window the fields that can be configured are described below: parameter description from port / to port select a range of ports to be displayed. Mac address tick the check box and e...

  • Page 211: Radius

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 206 note: the user must first globally enable authentication mode in the 802.1x global settings window before initializing ports. Information in this window cannot be viewed before enabling the authentication mode for either port...

  • Page 212: Radius Accounting Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 207 radius accounting settings this window is used to configure the state of the specified radius accounting service. To view this window, click security > radius > radius accounting settings as shown below: figure 11-23 radius a...

  • Page 213

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 208 figure 11-24 raius authentication window the user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be c...

  • Page 214: Radius Account Client

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 209 this server. Accessresponses the number of malformed radius access-response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or known type...

  • Page 215: Ip-Mac-Port Binding (Impb)

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 210 the user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. The fields that can be configured are described below: parameter ...

  • Page 216: Impb Global Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 211 impb global settings users can enable or disable the trap/log state and dhcp snoop state on the switch. The trap/logfield will enable and disable the sending of trap/log messages for ip-mac-port binding. When enabled, the swi...

  • Page 217

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 212 figure 11-27 impb port settings window the fields that can be configured are described below: parameter description from port / to port select a range of ports to set for ip-mac-port binding. Arp inspection when the arp inspe...

  • Page 218: Impb Entry Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 213 impb entry settings this window is used to create static ip-mac-binding port entries and view all impb entries on the switch. To view this window, click security > ip-mac-port binding (impb) > impb entry settings as shown bel...

  • Page 219: Dhcp Snooping

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 214 click the view all button to display all the existing entries. Click the delete all button to remove all the entries listed. Dhcp snooping dhcp snooping maximum entry settings users can configure the maximum dhcp snooping ent...

  • Page 220

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 215 figure 11-31 dhcp snooping entry window the fields that can be configured are described below: parameter description unit select the unit you want to configure. Port use the drop-down menu to select the desired port. Ports sp...

  • Page 221

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 216 figure 11-32 mac-based access control settings window the fields that can be configured are described below: parameter description mac-based access control state toggle to globally enable or disable the mac-based access contr...

  • Page 222

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 217 member ports enter the list of ports that have been configured for the guest vlan. From port / to port use the drop-down menus to select a range of ports to be configured for mac-based access control. State use this drop-down...

  • Page 223: Compound Authentication

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 218 figure 11-34 mac-based access control local settings – edit by name window to change the selected mac address’ vid value, the user can click the edit by id button. Figure 11-35 mac-based access control local settings – edit b...

  • Page 224

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 219 compound authentication settings users can configure authorization network state settings and compound authentication methods for a port or ports on the switch. To view this window, click security > compound authentication > ...

  • Page 225

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 220 on a port at the same time. In any (mac, 802.1x, or cp) mode, whether an individual security module is active on a port depends on its system state. 802.1x+impb - 802.1x will be verified first, and then impb will be verified....

  • Page 226: Port Security

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 221 port security port security settings a given port’s (or a range of ports') dynamic mac address learning can be locked such that the current source mac addresses entered into the mac address forwarding table cannot be changed ...

  • Page 227

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 222 deleteonreset – the locked addresses will not age out until the switch has been reset or rebooted. Max learning address (0-3072) specify the maximum value of port security entries that can be learned on this port. Click the a...

  • Page 228: Port Security Entries

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 223 max learning address specify the maximum number of port-security entries that can be learned by this vlan. Tick the no limit check box to have unlimited number of port security entries that can be learned by the vlan. Click t...

  • Page 229: Bpdu Attack Protection

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 224 figure 11-43 arp spoofing prevention settings window the fields that can be configured are described below: parameter description gateway ip address enter the gateway ip address to help prevent arp spoofing. Gateway mac addre...

  • Page 230: Loopback Detection Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 225 figure 11-44 bpdu attack protection window the fields that can be configured are described below: parameter description bpdu attack protection state click the radio buttons to enable or disable the bpdu attack protection stat...

  • Page 231

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 226 loopback detection port will restart (change to normal state) when the loopback detectionrecover time times out. The loopback detection function can be implemented on a range of ports at a time. The user may enable or disable...

  • Page 232: Netbios Filtering Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 227 to view this window, click security > traffic segmentation settings as shown below: figure 11-46 traffic segmentation settings window the fields that can be configured are described below: parameter description port list ente...

  • Page 233: Dhcp Server Screening

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 228 figure 11-47 netbios filtering settings window the fields that can be configured are described below: parameter description netbios filtering ports select the appropriate port to include in the netbios filtering configuration...

  • Page 234

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 229 figure 11-48 dhcp server screening port settings window the fields that can be configured are described below: parameter description dhcp server trap log state click to enable or disable filtering dhcp server trap and log. Il...

  • Page 235

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 230 parameter description server ip address the ip address of the dhcp server to be permitted. Client’s mac address the mac address of the dhcp client. Ports the port numbers of the filter dhcp server. Tick the all ports check bo...

  • Page 236: Enable Admin

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 231 listed for authentication. If the first technique goes through its authentication server hosts and no authentication is returned, the switch will then go to the next technique listed in the server group for authentication, un...

  • Page 237

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 232 authentication policy settings users can enable an administrator-defined authentication policy for users trying to access the switch. When enabled, the device will check the login method list and choose a technique for user a...

  • Page 238

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 233 (command line interface) application, the telnet application, ssh, and the web (http) application. Login method list using the drop-down menu, configure an application for normal login on the user level, utilizing a previousl...

  • Page 239

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 234 figure 11-55 authentication server group settings – edit server group window to add an authentication server host to the list, enter its name in the group name field, ip address in the ip address field, use the drop-down menu...

  • Page 240

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 235 parameter description ip address the ip address of the remote server host to add. Protocol the protocol used by the server host. The user may choose one of the following: tacacs - enter this parameter if the server host utili...

  • Page 241

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 236 the switch contains one method list that is set and cannot be removed, yet can be modified. To delete a login method list defined by the user, click the delete button corresponding to the entry desired to be deleted. To modif...

  • Page 242

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 237 figure 11-58 enable method lists settings window to delete an enable method list defined by the user, click the delete button corresponding to the entry desired to be deleted. To modify an enable method list, click on its cor...

  • Page 243: Ssl Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 238 the fields that can be configured are described below: parameter description old local enable password if a password was previously configured for this entry, enter it here in order to change it to a new password new local en...

  • Page 244

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 239 users can download a certificate file for the ssl function on the switch from a tftp server. The certificate file is a data record used for authenticating devices on the network. It contains information on the owner, keys for...

  • Page 245: Ssh

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 240 suite. This field is enabled by default. Click the apply button to accept the changes made. To download ssl certificates, configure the parameters in the ssl certificate download section described below. Parameter description...

  • Page 246

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 241 figure 11-61 ssh settings window the fields that can be configured are described below: parameter description ssh server state use the radio buttons to enable or disable ssh on the switch. The default is disabled. Max. Sessio...

  • Page 247

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 242 the fields that can be configured for ssh authentication mode are described below: parameter description password this may be enabled or disabled to choose if the administrator wishes to use a locally configured password for ...

  • Page 248

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 243 parameter description hmac-rsa use the check box to enable or disable the hmac (hash for message authentication code) mechanism utilizing the rsa encryption algorithm. The default is enabled. Hmac-dsa use the check box to ena...

  • Page 249: Trusted Host Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 244 trusted host settings up to thirty trusted host secure ip addresses or ranges may be configured and used for remote switch management. It should be noted that if one or more trusted hosts are enabled, the switch will immediat...

  • Page 250

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 245 mode, when the switch either (a) receives too many packets to process or (b) exerts too much memory, it will enter the exhaustedmode. When in this mode, the switch will drop all arp and ip broadcast packets and packets from u...

  • Page 251: Captive Portal (Cp)

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 246 figure 11-66 safeguard engine settings window the fields that can be configured are described below: parameter description safeguard engine state use the radio button to globally enable or disable safeguard engine settings fo...

  • Page 252: Cp Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 247 figure 11-67 global configuration window the fields that can be configured or displayed are described below: parameter description cp global state click the radio buttons to enable or disable the cp global state. Cp global op...

  • Page 253

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 248 figure 11-68 cp configuration - cp summary window the fields that can be configured or displayed are described below: parameter description cp configuration enter a name of cp configuration. Configuration display the captive ...

  • Page 254

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 249 figure 11-69 cp configuration - edit window the fields that can be configured are described below: parameter description enable captive portal click the radio buttons to enable or disable the cp configuration. Configuration n...

  • Page 255

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 250 max total enter the maximum sum number of bytes the user is allowed to transmit and receive. After this limit has been reached the user will be disconnected. User group when local or radius is selected in verification mode, a...

  • Page 256

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 251 background. Alternatively, click the ... Button to display the available images. Click the image to select it. To specify that no background image is to be used, select (no selection) from the drop-down menu. Branding image u...

  • Page 257

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 252 password label enter the text to display next to the password text box. Button label enter the text to display on the button for users to click and connect to the network. Acceptance use policy text box enter the text to disp...

  • Page 258

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 253 click the clear button to wipe all the configurations and set back to the default settings. Click the preview button to view the result of the web page. Select logout page from the drop-down menu on the top of the page to see...

  • Page 259: Local User

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 254 figure 11-74 cp configuration – customize window (logout success page) the fields that can be displayed or configured are described below: parameter description background image display the name of the current background imag...

  • Page 260

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 255 figure 11-75 local user - summary window click the add button to create a new user to the local database. Tick the corresponding check box, and click the delete button to remove the specific entry. Click the delete all button...

  • Page 261

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 256 user group assign the user to at least one user group. To assign the user to more than one group, press the ctrl key and click each group. Session timeout (secs) enter the time in seconds that allows the user to remain connec...

  • Page 262: Interface Association

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 257 (bytes/sec) portal. Max down rate (bytes/sec) enter the maximum receiving speed, in bytes per second, when using the captive portal. Max receive (bytes) enter the maximum number of bytes that the user is allowed to receive wh...

  • Page 263

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 258 figure 11-79 cp global status window the fields that can be displayed are described below: parameter description cp global operational status display the status of the cp operational status. Cp global disable reason when capt...

  • Page 264: Interface Status

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 259 figure 11-80 cp activation and activity status window use the drop-down menu to select a cp to see its activation and activity status. Click block to prevent users from gaining access to the network through the selected capti...

  • Page 265: Client Connection Status

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 260 figure 11-82 interface capability status window the fields that can be displayed are described below: parameter description bytes received counter display whether the interface supports displaying the number of bytes received...

  • Page 266

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 261 figure 11-83 client summary window the fields that can be displayed are described below: parameter description mac address display the mac address of the wired client (if applicable). If the mac address is marked with an aste...

  • Page 267

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 262 figure 11-84 client connection status window the fields that can be displayed are described below: parameter description client ip address display the ip address of the wired client (if applicable). User name display the user...

  • Page 268

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 263 figure 11-85 client statistics window use the drop-down menu to select the mac address of the associated client to view the statistical information. After clicking the interface - client status tab, the following page will ap...

  • Page 269: Snmp Trap Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 264 figure 11-87 cp-client status window use the drop-down menu to select a cp to see the information of the clients connected to the cp. Enter a page number and click the go button to navigate to a specific page when multiple pa...

  • Page 270

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 265.

  • Page 271: Dhcp

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 266 chapter 8 network application dhcp sntp flash file system settings dhcp dhcp relay dhcp relay global settings this window is used to enable and configure dhcp relay global settings. The relay hops count limit allows the maxim...

  • Page 272

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 267 configured), to the packet. Once the option 82 information has been added to the packet it is sent on to the dhcp server. When the dhcp server receives the packet, if the server is capable of option 82, it can implement polic...

  • Page 273

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 268 note: if the switch receives a packet that contains the option 82 field from a dhcp client and the information-checking feature is enabled, the switch drops the packet because it is invalid. However, in some instances, users ...

  • Page 274

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 269 this window. Properly configured settings will be displayed in the dhcp relay interface tableat the bottom of the window, once the user clicks the apply button. The user may add up to four server ips per ip interface on the s...

  • Page 275

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 270 this option decides whether the dhcp relay will process the dhcp option 60 or not to view this window, click network application > dhcp > dhcp relay > dhcp relay option 60 settings as shown below: figure 12-6 dhcp relay optio...

  • Page 276: Dhcp Local Relay Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 271 figure 12-7 dhcp relay option 61 settings window the fields that can be configured are described below: parameter description dhcp relay option 61 default here the user can select the dhcp relay option 61 default action. Drop...

  • Page 277: Sntp

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 272 state vlan name this is the vlan name that identifies the vlan the user wishes to apply the dhcp local relay operation. State enable or disable the configure dhcp local relay for vlan state. Click the apply button to accept t...

  • Page 278

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 273 figure 12-10 time zone settings window the fields that can be configured are described below: parameter description daylight saving time state use this drop-down menu to enable or disable the dst settings. Daylight saving tim...

  • Page 279: Flash File System Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 274 parameter description dst annual settings using annual mode will enable dst seasonal time adjustment. Annual mode requires that the dst beginning and ending date be specified concisely. For example, specify to begin dst on ap...

  • Page 280

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 275 figure 12-12 flash file system setting – search for drive window click the previous button to return to the previous window. Click the create directory to create a new directory within the file system of the switch. Click the...

  • Page 281: Chapter 9  Oam

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 276 chapter 9 oam cfm ethernet oam cable diagnostics cfm cfm settings this window is used to configure the cfm parameters. To view this window, click oam > cfm > cfm settings,as shown below: figure 13-1 cfm settings window the fi...

  • Page 282

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 277 click the edit button to re-configure the specific entry. Click the delete button to remove the specific entry. Note: the md name value should be less than 22 characters. To add a maintenance association (ma), click on the ad...

  • Page 283

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 278 auto - mips can always be created on any ports in this ma, if that port is not configured with a mep of that ma. Explicit - mip can be created on any ports in this ma, only if the next existent lower level has a mep configure...

  • Page 284

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 279 the fields that can be configured are described below: parameter description mep name mep name. It is unique among all meps configured on the device. Mep id (1-8191) mep mepid. It should be configured in the ma’s mep id list....

  • Page 285

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 280 figure 13-7 cfm mep information - edit window the fields that can be configured are described below: parameter description mep state this is the mep administrative state. Enable - mep is enabled. Disable - mep is disabled. Th...

  • Page 286

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 281 figure 13-8 cfm extension ais window the fields that can be configured are described below: parameter description state specifies to enable or disable the ais function. Period the transmitting interval of ais pdu. The default...

  • Page 287: Cfm Port Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 282 cfm port settings this window is used to enable or disable the cfm function on a per-port basis. To view this window, click oam > cfm > cfm port settings,as shown below: figure 13-10 cfm port settings window the fields that c...

  • Page 288: Cfm Linktrace Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 283 figure 13-12 cfm loopback settings window the fields that can be configured are described below: parameter description mep name select and enter the maintenance end point name used. Mep id (1-8191) select and enter the mainte...

  • Page 289: Cfm Packet Counter

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 284 figure 13-13 cfm linktrace settings window the fields that can be configured are described below: parameter description mep name select and enter the maintenance end point name used. Mep id (1-8191) select and enter the maint...

  • Page 290: Cfm Fault Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 285 figure 13-14 cfm packet counter window the fields that can be configured are described below: parameter description port list enter a list of ports to be displayed. Tick the all ports check box to display all ports. Type tran...

  • Page 291: Cfm Mp Table

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 286 ma index select and enter the maintenance association index used. Click the find button to locate a specific entry based on the information entered. Cfm mp table to view this window, click oam > cfm > cfm mp table,as shown be...

  • Page 292

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 287 figure 13-17 ethernet oam settings window the fields that can be configured are described below: parameter description from port / to port select a range of ports you wish to configure. Mode use the drop-down menu to select t...

  • Page 293: Ethernet Oam Event Log

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 288 figure 13-18 ethernet oam configuration settings window the fields that can be configured are described below: parameter description from port / to port select a range of ports you wish to configure. Link event use the drop-d...

  • Page 294: Ethernet Oam Statistics

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 289 figure 13-19 ethernet oam event log window the fields that can be configured are described below: parameter description port use the drop-down menu to select the port number to view. Port list enter a list of ports. Tick the ...

  • Page 295: Cable Diagnostics

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 290 figure 13-20 ethernet oam statistics window the fields that can be configured are described below: parameter description port use the drop-down menu to select t the port number to view. Port list enter a list of ports. Tick t...

  • Page 296

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 291 to view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click test. The information will be displayed in this window. Note: cable diagnostic function limitations. Cable length detect...

  • Page 297: Chapter 10  Monitoring

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 292 chapter 10 monitoring utilization statistics mirror sflow ping test trace route peripheral utilization cpu utilization users can display the percentage of the cpu being used, expressed as an integer percentage and calculated ...

  • Page 298: Port Utilization

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 293 figure 14-2 dram & flash utilization window port utilization users can display the percentage of the total available bandwidth being used on the port. To view this window, click monitoring > utilization > port utilization as ...

  • Page 299: Port Statistics

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 294 port statistics packets the web manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (rx) to select a port to view these statistics for, select the port by...

  • Page 300

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 295 figure 14-5 rx packets analysis table window the fields that can be configured or displayed are described below: parameter description port use the drop-down menu to choose the port that will display statistics. Time interval...

  • Page 301

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 296 figure 14-6 umb_cast (rx) window (for unicast, multicast, and broadcast packets) click the view table link to display the information in a table rather than a line graph. Figure 14-7 rx packets analysis window (table for unic...

  • Page 302

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 297 multicast counts the total number of good packets that were received by a multicast address. Broadcast counts the total number of good packets that were received by a broadcast address. Show/hide check whether or not to displ...

  • Page 303: Errors

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 298 figure 14-9 tx packets analysis window (table for bytes and packets) the fields that can be configured or displayed are described below: parameter description port use the drop-down menu to choose the port that will display s...

  • Page 304

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 299 figure 14-10 received (rx) window (for errors) click the view table link to display the information in a table rather than a line graph. Figure 14-11 rx error analysis window (table) the fields that can be configured or displ...

  • Page 305

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 300 undersize the number of packets detected that are less than the minimum permitted packets size of 64 bytes and have a good crc. Undersize packets usually indicate collision fragments, a normal network occurrence. Oversize cou...

  • Page 306: Packet Size

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 301 figure 14-13 tx error analysis window (table) the fields that can be configured or displayed are described below: parameter description port use the drop-down menu to choose the port that will display statistics. Time interva...

  • Page 307

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 302 figure 14-14 packet size window click the view table link to display the information in a table rather than a line graph. Figure 14-15 rx size analysis window (table) the fields that can be configured or displayed are describ...

  • Page 308: Mirror

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 303 64 the total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including fcs octets). 65-127 the total number of packets (including bad packets) received that were be...

  • Page 309: Rspan Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 304 rx click the radio buttons to select whether the port should include incoming traffic. Both click the radio buttons to select whether the port should include both incoming and outgoing traffic. None click the radio buttons to...

  • Page 310: Sflow

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 305 figure 14-18 rspan settings – modify window the fields that can be configured are described below: parameter description source ports if the ports are not specified by option, the source of rspan will come from the source spe...

  • Page 311

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 306 sflow analyzer server settings the switch can support 4 different analyzer servers at the same time and each sampler or poller can select a collector to send the samples. We can send different samples from different samplers ...

  • Page 312

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 307 note: if the user wants the change the analyze server id, he needs to delete the flow sampler and creates a new one. Figure 14-21 sflow flow sampler settings window the fields that can be configured are described below: param...

  • Page 313: Ping Test

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 308 analyzer server id (1- 4) the analyzer server id specifies the id of a server analyzer where the packet will be forwarded. Interval (20-120) the maximum number of seconds between successive samples of the counters. Tick the d...

  • Page 314: Trace Route

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 309 destination. If the packet fails to find the ip address in this specified time, the ping packet will be dropped. Click the start button to initiate the ping test. After clicking the start button, the following page will appea...

  • Page 315: Peripheral

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 310 port (30000-64900) the port number. The value range is from 30000 to 64900. Timeout (1-65535) defines the timeout period while waiting for a response from the remote device. A value of 1 to 65535 seconds can be specified. The...

  • Page 316

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 311 chapter 11 save and tools.

  • Page 317: Section 3

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 312 section 3 wlan this section describes all the available configurations in the wlan tab. Chapter 1 security captive portal (cp) captive portal (cp) captive portal (cp) is the feature that controls the accessibility of both wir...

  • Page 318: Cp Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 313 peer switch statistics reporting interval (15-3600) when clustering is supported on the switch, enter an interval that the peer switches send its authenticated client statistics to the cluster controller periodically. The rep...

  • Page 319

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 314 after clicking the link or the tab, the following page will appear: figure 1-3 cp configuration - edit window the fields that can be configured are described below: parameter description enable captive portal click the radio ...

  • Page 320

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 315 max transmit enter the maximum number of bytes that a client is allowed to transmit when using the captive portal. After this limit has been reached the user will be disconnected. Max total enter the maximum sum number of byt...

  • Page 321

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 316 button. You can only delete images that you download. Background image use the drop-down menu to select the name of the image to display as the page background. Alternatively, click the ... Button to display the available ima...

  • Page 322

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 317 user label enter the text to display next to the user name text box. Password label enter the text to display next to the password text box. Button label enter the text to display on the button for users to click and connect ...

  • Page 323

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 318 text enter the optional text to further identify the network to be access by the cp user. Click the apply button to accept the changes made. Click the clear button to wipe all the configurations and set back to the default se...

  • Page 324: Local User

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 319 figure 1-8 cp configuration – customize window (logout success page) the fields that can be displayed or configured are described below: parameter description background image display the name of the current background image ...

  • Page 325

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 320 figure 1-9 local user - summary window click the add button to create a new user to the local database. Tick the corresponding check box, and click the delete button to remove the specific entry. Click the delete all button t...

  • Page 326

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 321 user group assign the user to at least one user group. To assign the user to more than one group, press the ctrl key and click each group. Session timeout (secs) enter the time in seconds that allows the user to remain connec...

  • Page 327: Interface Association

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 322 (bytes/sec) portal. Max down rate (bytes/sec) enter the maximum receiving speed, in bytes per second, when using the captive portal. Max receive (bytes) enter the maximum number of bytes that the user is allowed to receive wh...

  • Page 328

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 323 figure 1-13 cp global status window the fields that can be displayed are described below: parameter description cp global operational status display the status of the cp operational status. Cp global disable reason when capti...

  • Page 329: Interface Status

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 324 figure 1-14 cp activation and activity status window use the drop-down menu to select a cp to see its activation and activity status. Click block to prevent users from gaining access to the network through the selected captiv...

  • Page 330: Client Connection Status

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 325 figure 1-16 interface capability status window the fields that can be displayed are described below: parameter description bytes received counter display whether the interface supports displaying the number of bytes received ...

  • Page 331

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 326 figure 1-17 client summary window the fields that can be displayed are described below: parameter description mac address display the mac address of the wireless client (if applicable). If the mac address is marked with an as...

  • Page 332

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 327 figure 1-18 client connection status window the fields that can be displayed are described below: parameter description client ip address display the ip address of the wireless client (if applicable). User name display the us...

  • Page 333

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 328 figure 1-19 client statistics window use the drop-down menu to select the mac address of the associated client to view the statistical information. After clicking the interface - client status tab, the following page will app...

  • Page 334: Snmp Trap Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 329 figure 1-21 cp-client status window use the drop-down menu to select a cp to see the information of the clients connected to the cp. Enter a page number and click the go button to navigate to a specific page when multiple pag...

  • Page 335

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 330

  • Page 336: Chapter 2  Monitoring

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 331 chapter 2 monitoring global peer switch access point client qos global the unified switch periodically collects information from the aps it manages and from associated peer switches. This window is used to show status and sta...

  • Page 337

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 332 are not cluster controllers can display information only about locally attached devices. Cluster controller ip address the ip address of the peer switch that is the cluster controller. Total access points total number of mana...

  • Page 338

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 333 total pre-authentication history entries current number of pre-authentication history entries in use by the system. Maximum roam history entries maximum number of entries that can be recorded in the roam history for all detec...

  • Page 339

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 334 figure 2-2 switch status window use the drop-down menu to select a switch to view the information. The fields that can be displayed are described below: parameter description total access points total number of managed aps in...

  • Page 340

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 335 transmitted wlan packets transmitted total packets transmitted across all aps managed by the switch. Wlan bytes received total bytes received across all aps managed by the switch. Wlan packets received total packets received ...

  • Page 341

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 336 total number of discovered-filed entries display the amount of devices that have an ip address configured in the ip discovery list that the switch has attempted to contact and failed to authenticate or validate. Total entries...

  • Page 342

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 337 • global – receive the basic and advanced global settings. • discovery – receive the l2 and l3 discovery information, including the vlan and ip list. • channel/power – receive the rf management settings. • ap database – recei...

  • Page 343

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 338 after clicking the hardware type hyperlink or the radio detail tab under the ap hardware capability tab, the following page will appear: figure 2-6 ap hardware capability - radio detail window use the drop-down menu to select...

  • Page 344: Peer Switch

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 339 figure 2-7 ap hardware capability - image table window after clicking the image availability tab under the ap hardware capability tab, the following page will appear: figure 2-8 ap hardware capability - image availability win...

  • Page 345

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 340 figure 2-9 peer switch – status window the fields that can be displayed are described below: parameter description total entries total number of entries displayed in the table below. Ip address ip address of the peer wireless...

  • Page 346

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 341 figure 2-10 peer switch – configuration window the fields that can be displayed are described below: parameter description total entries total number of entries displayed in the table below. Peer ip address the ip address of ...

  • Page 347: Access Point

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 342 figure 2-11 peer switch – managed ap window use the drop-down menu to select the ip address of a peer switch. The fields that can be displayed are described below: parameter description total entries total number of entries d...

  • Page 348

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 343 figure 2-12 all ap status window the fields that can be displayed are described below: parameter description mac address display the mac address of the access point. Location a location description for the ap. This is the val...

  • Page 349: Managed Ap Status

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 344 managed ap status this window is used to display a variety of information about each ap that the switch manages. This window contains two main tabs, status and statistics. The status tab provides configuration and association...

  • Page 350

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 345 configuration status this status indicates if the ap is configured successfully with the assigned profile. The status is one of the following: • not configured - the profile has not been sent to the ap yet, the ap may be disc...

  • Page 351

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 346 is enabled), but it is not configured. • managed - the ap profile configuration has been applied to the ap and it's operating in managed mode. • failed - the unified switch lost contact with the ap, a failed entry will remain...

  • Page 352

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 347 • ip poll received - the ap was discovered via an ip poll from the unified switch, its ip address is configured in the ip polling list. • peer redirect - the ap was discovered through a peer switch redirect, the ap tried to a...

  • Page 353

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 348 channel the current operating channel for the radio. Transmit power the current transmit power for the radio. Authenticated clients total count of clients authenticated by the ap on the physical radio. This is a sum of all th...

  • Page 354

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 349 statistics. Authenticated clients total count of clients authenticated with the ap on the physical radio. This is a sum of all the clients authenticated with the ap for each vap enabled on the radio. Transmit power the curren...

  • Page 355

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 350 the fields that can be displayed are described below: parameter description neighbor ap mac the ethernet mac address of the neighbor ap network, this could be a physical radio interface or vap mac address. For d-link aps this...

  • Page 356

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 351 neighbor client mac the ethernet address of client station. Rssi received signal strength indication, this is an indicator of the signal strength relative to the neighbor and may give an idea of the neighbor's distance from t...

  • Page 357

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 352 figure 2-20 managed ap status – distributed tunneling window use the drop down menu to select ap’s mac address to view the distributed tunneling information. The fields that can be displayed are described below: parameter des...

  • Page 358

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 353 figure 2-21 managed ap statistics – wlan summary window the fields that can be displayed are described below: parameter description mac address the ethernet address of the unified switch-managed ap. Packets received total pac...

  • Page 359

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 354 the fields that can be displayed are described below: parameter description mac address the ethernet address of the unified switch-managed ap. Packets received total packets received by the ap on the wired network. Bytes rece...

  • Page 360

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 355 ethernet packets received total packets received by the ap on the wired network. Ethernet bytes received total bytes received by the ap on the wired network. Ethernet packets transmitted total packets transmitted by the ap on...

  • Page 361

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 356 wlan packets received dropped number of packets received by the ap on this radio interface that were dropped. Wlan bytes received dropped number of bytes received by the ap on this radio interface that were dropped. Wlan pack...

  • Page 362

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 357 figure 2-25 managed ap statistics – vap window use the drop down menu to select ap’s mac address and vap’s id, and click the radio button to select a radio to view the information about the client failures and number of packe...

  • Page 363

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 358 figure 2-26 managed ap statistics – distributed tunneling window use the drop down menu to select ap’s mac address to view information about the number of packets and bytes transmitted and received by clients that use l2 dist...

  • Page 364: Ap Rf Scan Status

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 359 click the button to return to the previous window. Ap rf scan status this window is used to display the information about all aps detected via rf scan, including those reported as rogues. To view this window, click monitoring...

  • Page 365

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 360 figure 2-30 ap rf scan status – detail window the fields that can be displayed are described below: parameter description mac address the ethernet mac address of the detected ap. This could be a physical radio interface or va...

  • Page 366

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 361 physical mode display the 802.11 mode being used on the ap. Security mode security mode used by the ap. 802.11n mode display whether this ap supports ieee 802.11n mode. Beacon interval beacon interval for the neighbor ap netw...

  • Page 367

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 362 after clicking the wids ap rogue classification tab, the following page will appear: figure 2-32 ap rf scan status – wids ap rogue classification window the fields that can be displayed are described below: parameter descript...

  • Page 368: Client

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 363 test config display whether this test is configured to report rogues. Each test can be globally enabled or disabled to report a positive result as a rogue. Test result display whether this test reported the device as rogue. I...

  • Page 369

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 364 figure 2-34 associated clients status - summary window the fields that can be displayed are described below: parameter description mac address the ethernet address of the client station. If the mac address is followed by an a...

  • Page 370

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 365 figure 2-35 associated clients status - detail window the fields that can be displayed are described below: parameter description ssid display the network on which the client is connected. Bssid display the ethernet mac addre...

  • Page 371

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 366 is associated. Location the descriptive location configured for the managed ap. Radio display the managed ap radio interface the client is associated to and its configured mode. Vlan if the client is on a vap using vlan data ...

  • Page 372

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 367 kbps. A value of 0 means no bandwidth limiting is in effect in this direction. Bandwidth limit up display the maximum rate at which the client transmits traffic to the ap in bits per second. The rate shown in this field is th...

  • Page 373

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 368 switch. • ad hoc rogue - the client was detected as part of an ad hoc network with this ap. Enter a page number and click the go button to navigate to a specific page when multiple pages exist. After clicking the distributed ...

  • Page 374

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 369 figure 2-39 associated clients ssid status window the fields that can be displayed are described below: parameter description ssid the network on which the client is connected. Client mac address the ethernet address of the c...

  • Page 375

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 370 bssid the ethernet mac address for the managed ap vap where this client is associated. Ap mac address the base ap ethernet mac address for the managed ap. Location the descriptive location configured for the managed ap. Radio...

  • Page 376

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 371 figure 2-42 associated clients statistics - summary window the fields that can be displayed are described below: parameter description mac address the ethernet address of the client station. Packets received packets received ...

  • Page 377

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 372 if the client roams from one ap to another ap but remains connected to the same network, the session continues and the session statistics continue to accumulate. If the client closes the wireless connection or roams out of th...

  • Page 378

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 373 bytes transmit dropped number of bytes transmitted to the client station that were dropped. Fragments received total fragmented packets received from the client station. Fragments transmitted total fragmented packets transmit...

  • Page 379: Detected Clients

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 374 duplicates received total duplicate packets received from the client station. Detected clients this window is used to display the information about clients that have authenticated with an ap as well as information about clien...

  • Page 380

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 375 after clicking the mac address hyperlink, the following page will appear: figure 2-47 detected client summary –detected client status window the fields that can be displayed are described below: parameter description mac addr...

  • Page 381

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 376 authenticated. The possible range is from -128 to 128 dbm. Noise last channel noise reported by the managed ap with which the client is authenticated. The possible range is from -128 to 128 dbm. Probe req recorded number of p...

  • Page 382

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 377 figure 2-48 detected client summary –wids client rogue classification window the fields that can be displayed are described below: parameter description mac address the ethernet mac address of the detected wireless client. Te...

  • Page 383

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 378 figure 2-49 detected client summary –pre-auth history window the fields that can be displayed are described below: parameter description mac address mac address of the client. Ap mac address mac address of the managed ap to w...

  • Page 384

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 379 figure 2-50 detected client summary –triangulation window the fields that can be displayed are described below: parameter description mac address mac address of the client. Ap function identifies whether the radio that detect...

  • Page 385

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 380 figure 2-51 detected client summary –roam history window the fields that can be displayed are described below: parameter description mac address mac address of the detected client. Ap mac address mac address of the managed ap...

  • Page 386

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 381 figure 2-52 detected client pre-authentication history summary window the fields that can be displayed are described below: parameter description mac address mac address of the detected client. Ap mac address mac address of t...

  • Page 387: Ad Hoc Clients

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 382 ap mac address mac address of the managed ap to which the client authenticated. This field can show the mac address of the last ten aps to which the client has roamed and authenticated. Ad hoc clients this window is used to d...

  • Page 388

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 383 figure 2-55 ip access control lists window use the type select drop-down menu to display various types of ip acl. Click the rules id hyperlink to see the detail information about the rule. Enter a page number and click the go...

  • Page 389

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 384 figure 2-57 ip access control lists - rule id window (extended ip acl) the fields that can be displayed are described below: parameter description ip acl name the id of the ip acl. Rule id the number identifier for each rule ...

  • Page 390: Ipv6 Access Control Lists

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 385 parameter description ip acl name the name of the ip acl. Rule id the number identifier for each rule that is defined for the ip acl. Action the action associated with each rule. Available values are permit and deny. Match ev...

  • Page 391: Mac Access Control Lists

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 386 parameter description ipv6 acl name ipv6 acl identifier. Rule id the ordered rule number identifier defined within the ipv6 acl. Action the action associated with each rule. Available values are permit and deny. Match every d...

  • Page 392: Differentiated Services

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 387 parameter description mac acl name mac acl identifier. Rule id the ordered rule number identifier defined within the mac acl. Action the action associated with each rule. Available values are permit and deny. Match every disp...

  • Page 393: Policy Attribute Summary

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 388 figure 2-64 policy summary window the fields that can be displayed are described below: parameter description policy name the name of this policy. Policy type the policy type. Member classes list of all class names associated...

  • Page 394

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 389 figure 2-66 policy attribute summary window the fields that can be displayed are described below: parameter description policy name the name of this policy. Policy type the policy type. Class name the name of this class. Attr...

  • Page 395: Chapter 3  Administration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 390 chapter 3 administration basic setup ap management advanced configuration basic setup this window is used to configure the wireless basic setup. To view this window, click administration > basic setup as shown below: figure 3...

  • Page 396

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 391 figure 3-2 basic setup discovery window the fields that can be configured are described below: parameter description l3/ip discovery tick the check box to enable ip-based discovery of access points and peer wireless switches....

  • Page 397

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 392 figure 3-3 basic setup profile window the fields that can be configured are described below: parameter description hardware type use the drop-down menu to select the hardware type for the aps that use this profile. Wired netw...

  • Page 398

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 393 parameter description wireless default radio settings click the radio button to select the radio between 802.11a/n and 802.11b/g/n. State click to have the radio on or off. Mode use the drop-down menu to select the physical l...

  • Page 399

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 394 channel assignment process. Available msc indices tick the check boxes to add mcs index when operating in 802.11n mode. Rate sets (mbps) display the transmission rate sets. Basic tick the check boxes to indicate the data rate...

  • Page 400

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 395 figure 3-6 basic setup ssid – edit window the fields that can be configured or displayed are described below: parameter description ssid enter service set identifier (ssid) of the network, which is an alphanumeric key that un...

  • Page 401

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 396 2. If the network has peer switches and the tunnel is established between the aps managed by the peer switches then, when a switch managing the home ap fails, the switch managing the association ap detects the failure and ter...

  • Page 402

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 397 wep wired equivalent privacy (wep) is a data encryption protocol for 802.11 wireless networks. If this security mechanism is selected, all wireless clients and access points on the network are configured with a 64-bit or 128-...

  • Page 403

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 398 wpa/wpa2 wpa and wpa2 are wi-fi alliance ieee 802.11i standards, which include aes-ccmp and tkip mechanisms. Select wpa/wpa2 to see the following options. Wpa personal – select this to configure static key management. • wpa v...

  • Page 404

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 399 associate with the ap using the ssid in the previous field. Client qos bandwidth limit down enter the maximum allowed transmission rate from the ap to the wireless client in bits per second. Client qos bandwidth limit up ente...

  • Page 405

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 400 enter a page number and click the go button to navigate to a specific page when multiple pages exist. After clicking the mac address hyperlink, the following page will appear: figure 3-8 basic setup valid ap – valid access po...

  • Page 406

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 401 standalone select this to have the ap acting as an individual access point in the network. When standalone is selected, the following options appear at the bottom half of the page: expected ssid - enter the ssid that identifi...

  • Page 407: Ap Management

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 402 oui description enter the organization name associated with the oui. Click the add button to add a new entry based on the information entered. Tick one or more oui values and click the delete button to remove the entry. Click...

  • Page 408

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 403 the fields that can be configured are described below: parameter description channel plan the 2.4 ghz (802.11b/g/n) and 5 ghz (802.11 a/n) frequencies use different channel plans. Click the radio button to select the frequenc...

  • Page 409

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 404 figure 3-12 rf management channel plan history window the fields that can be configured or displayed are described below: parameter description 5 ghz (802.11 a/n) / 2.4 ghz (802.11 b/g/n) the 5 ghz and 2.4 ghz radios use diff...

  • Page 410

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 405 • the channel is not valid for the radio mode. • the ap has been rebooted since the channel plan was computed and acquires a static channel that has been set statically via local database. • the channel has been set manually ...

  • Page 411

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 406 click the radio buttons to select the radio frequency in order to see its channel plan. Click the apply button to accept the proposed channel change. Click the clear button to remove the entries. Click the start button to man...

  • Page 412: Software Download

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 407 software download this window is used to upgrade software on the aps that the switch manages. The cluster controller can update code on aps managed by peer wireless switches. To view this window, click administration > ap man...

  • Page 413: Advanced Settings

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 408 figure 3-16 ap image management window the fields that can be configured are described below: parameter description tftp server ip enter the ip address of the tftp server. Source file enter the file name. Image type use the d...

  • Page 414: Ap Provisioning

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 409 figure 3-18 advanced settings – debug window the fields that can be configured are described below: parameter description password enter the admin password for the ap. Confirm password retype the password to confirm. Enable d...

  • Page 415

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 410 figure 3-20 ap provisioning window tick the specific mac address and click the provision button to perform provisioning. Tick the specific mac address and click the delete button to remove the entry. Click the delete all butt...

  • Page 416: Advanced Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 411 address provisioned. New backup ip address tick the check box and enter ip address of the backup switch that the ap to be provisioned. Profile id use the drop-down menu to select the profile id to be used when provisioning. C...

  • Page 417

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 412 addresses, specified in the known client database and not explicitly granted access, are denied access. If the mac address is not in the database then the access to the client is granted. Rf scan status timeout (hours) enter ...

  • Page 418

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 413 figure 3-23 global snmp traps window the fields that can be configured are described below: parameter description ap failure traps select enable to allow the snmp agent sending a trap if an ap fails to associate or authentica...

  • Page 419: Networks

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 414 figure 3-24 global distributed tunneling window the fields that can be configured are described below: parameter description distributed tunnel clients enter the maximum number of distributed tunneling clients that can roam a...

  • Page 420

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 415 the fields that can be configured are described below: parameter description network name enter the ssid. Click the add button to add a new entry based on the information entered. Tick the check box of a specific ssid and cli...

  • Page 421

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 416 redirect url enter the url where all initial http accesses should be redirected to. This text box is accessible only when http is selected as the redirect type. Wireless arp suppression mode use the drop-down menu to enable o...

  • Page 422

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 417 wep wired equivalent privacy (wep) is a data encryption protocol for 802.11 wireless networks. If this security mechanism is selected, all wireless clients and access points on the network are configured with a 64-bit or 128-...

  • Page 423

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 418 wpa/wpa2 wpa and wpa2 are wi-fi alliance ieee 802.11i standards, which include aes-ccmp and tkip mechanisms. Select wpa/wpa2 to see the following options. Wpa personal – select this to configure static key management. • wpa v...

  • Page 424: Ap Profiles

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 419 associate with the ap using the ssid in the previous field. Client qos bandwidth limit down enter the maximum allowed transmission rate from the ap to the wireless client in bits per second. Client qos bandwidth limit up ente...

  • Page 425

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 420 tick the check box of a specific profile and click the delete button to remove the entry. Click the refresh button to update the information. Click the profile hyperlink to see more information. After clicking the profile hyp...

  • Page 426

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 421 figure 3-29 ap profile configuration – radio window the fields that can be configured or displayed are described below: parameter description access point profile radio configuration click the radio button to select the radio...

  • Page 427

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 422 awaiting pickup. Specify a dtim period within the given range (1-255). The measurement is in beacons. For example, if you set this field to 1, clients will check for buffered data on the ap at every beacon. If you set this fi...

  • Page 428

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 423 equal to the rts threshold. Long retries display the maximum number of transmission attempts on frame sizes greater than the rts threshold. Transmit lifetime (msecs) display the number of milliseconds to wait before terminati...

  • Page 429

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 424 figure 3-30 ap profile configuration – vap window the fields that can be configured are described below: parameter description access point profile vap configuration click to select the radio to configure the settings for bef...

  • Page 430

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 425 parameter description ssid enter service set identifier (ssid) of the network, which is an alphanumeric key that uniquely identifies a wireless local area network. Hide ssid tick the check box to hide the ssid broadcast to di...

  • Page 431

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 426 l3 tunnel mask enter the subnet mask for the network ip address on the l3 tunnel subnet. Radius use network configuration this parameter is used to control whether the vap uses the network or global raidus accounting settings...

  • Page 432

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 427 wpa/wpa2 wpa and wpa2 are wi-fi alliance ieee 802.11i standards, which include aes-ccmp and tkip mechanisms. Select wpa/wpa2 to see the following options. Wpa personal – select this to configure static key management. • wpa v...

  • Page 433

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 428 associate with the ap using the ssid in the previous field. Client qos bandwidth limit down enter the maximum allowed transmission rate from the ap to the wireless client in bits per second. Client qos bandwidth limit up ente...

  • Page 434: Peer Switch

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 429 cwmax (msecs) enter the upper limit, in milliseconds, for the doubling of the random backoff value. Max. Burst (usecs) enter a value in milliseconds to specify the maximum burst length allowed for packet bursts on the wireles...

  • Page 435

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 430 after clicking the configuration enable/disable tab, the following page will appear: figure 3-34 peer switch configuration enable/disable window the fields that can be configured are described below: parameter description glo...

  • Page 436: Wids Security

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 431 figure 3-35 peer switch mutual authentication window the fields that can be configured are described below: parameter description switch provisioning mode select enabled to enable switch provisioning mode. Network mutual auth...

  • Page 437

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 432 figure 3-36 wids security ap configuration window the fields that can be configured or displayed are described below: parameter description administrator configured rogue ap if the source mac address is in the valid-ap databa...

  • Page 438

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 433 ap is operating on an illegal channel select enabled to detect hackers or incorrectly configured devices that are operating on channels that are not legal in the country where the wireless system is set up. Note: in order for...

  • Page 439

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 434 not present in oui database test select enabled to check whether a client is present in the oui db test. Not present in known client database test select enabled to check whether the client, which is identified by its mac add...

  • Page 440: Clients

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 435 clients known clients this window is used to display the wireless clients currently in the known client database. To view this window, click administration > advanced configuration > clients > known clients as shown below: fi...

  • Page 441: Switch Provisioning

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 436 switch provisioning this window is used to configure switch provisioning. To view this window, click administration > advanced configuration > switch provisioning as shown below: figure 3-40 switch certificate request window ...

  • Page 442

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 437 the fields that can be configured are described below: parameter description switch ip address enter the ip address of the peer switch. Click the start button to perform switch provisioning..

  • Page 443: Chapter 4  Qos

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 438 chapter 4 qos access control lists differentiated services access control lists ip access control lists ip access control lists (acl) allow network managers to define classification actions and rules for wireless networks. To...

  • Page 444

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 439 parameter description new ip acl name enter a new name of ip acl. Click the apply button to accept the changes made. Click the cancel button to discard the configuration. After clicking the add / delete rules button or the sp...

  • Page 445

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 440 entered. Source ip mask enter the source ip mask. Click the create rule button to add a new rule. Click the cancel button to discard the configuration. After clicking the add rule button to add a rule for extended ip acl, the...

  • Page 446

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 441 ip dscp – select one of the dscp keyword values from the ip dscp drop-down menu. When selecting other, the ip dscp value field appears. Enter a value in the field. Ip precedence – enter a value between 0 and 7 in the ip prece...

  • Page 447

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 442 packet’s tcp/udp destination port. When selecting other, destination port value appears. Enter a value in the field. Service type select one of the following three match conditions for the extended ip acl rule. Ip dscp – sele...

  • Page 448

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 443 figure 4-8 ip access control lists – edit rule (extended ip acl) window the fields that can be configured are described below: parameter description action tick the check box and use the drop-down menu to select the acl forwa...

  • Page 449

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 444 click the apply button to accept the changes made. Click the cancel button to discard the configuration. After clicking the rule id hyperlink or the edit button to modify a rule for named ip acl, the following page appears: f...

  • Page 450: Ipv6 Access Control Lists

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 445 extended ip acl rule. Ip dscp – select one of the dscp keyword values from the ip dscp drop-down menu. When selecting other, the ip dscp value field appears. Enter a value in the field. Ip precedence – enter a value between 0...

  • Page 451

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 446 after clicking the add / delete rules button or the specific ipv6 acl name hyperlink, the following page will appear: figure 4-12 ipv6 access control lists – add / delete rules window click the add rule button to create a new...

  • Page 452

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 447 source prefix enter an ipv6 prefix and a packet’s source ipv6 prefix must match the address entered. Source prefix mask enter the source ipv6 mask. Source l4 port use the drop-down menu to select l4 keyword of source ports to...

  • Page 453: Mac Access Control Lists

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 448 source prefix tick the check box and enter an ipv6 prefix and a packet’s source ipv6 prefix must match the address entered. Source prefix mask enter the source ipv6 mask, when the source prefix check box is selected. Source l...

  • Page 454

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 449 figure 4-16 mac access control lists – rename window the fields that can be configured are described below: parameter description new mac acl name enter a new name of mac acl. Click the apply button to accept the changes made...

  • Page 455

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 450 matches the rule’s criteria. Match every use the drop-down menu to select true or false. True means that all packets will match the selected mac acl and rule, and will be either permitted or denied. When true is selected, the...

  • Page 456: Differentiated Services

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 451 cos tick the check box and enter the 802.1p user priority to compare against an ethernet frame. Destination bpdu tick the check box to use multicast address 01:80:c2:00:00:00 as destination mac and mask is ff:ff:ff:00:00:00. ...

  • Page 457

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 452 figure 4-21 class configuration window the fields that can be configured are described below: parameter description class name enter a class name. Class type select the class type. Class layer 3 protocol select the class laye...

  • Page 458: Policy Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 453 any – all packets are considered to match the specified class and no additional input information is needed. Ip dscp – select this to choose ip dscp keyword in the next window. The packet’s dscp must match the selected keywor...

  • Page 459: Policy Class Definition

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 454 figure 4-23 policy configuration window the fields that can be configured are described below: parameter description policy name enter a policy name. Policy type select the policy type. Click the add button to add a new entry...

  • Page 460

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 455 figure 4-25 policy class definition window the fields that can be configured are described below: parameter description policy selector select a policy to be configured. Click the configuration attribute to configure the spec...

  • Page 461

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 456 mark cos – the packets are marked by diffserv with the specified cos value before being presented to the system forwarding element. Enter a value in the conform cos value field between 0 and 7. Mark ip dscp – the packets are ...

  • Page 462: Download Image

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 457 chapter 5 network visualization download image launch… the wlan visualization component is an optional feature that graphically shows information about the wireless network. Wlan visualization uses a java applet to display sw...

  • Page 463

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 458 figure 5-2 d-link wlan visualization window you can import multiple images to the right window and drag the switches, aps or clients on the left window to the right to create virtual wireless network environment. The d-link w...

  • Page 464

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 459 • exit – exit the wlan visualization application. • new graph… – select to open a window to create and configure a new graph. Edit • edit graph… – select to open a window to configure an existing graph. • delete graph… – sele...

  • Page 465: Section 4

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 460 section 4 save and tools save configuration / log stacking information download firmware upload firmware download configuration upload configuration upload log file reset reboot system chapter 1 save save configuration / log ...

  • Page 466: Chapter 2  Tools

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 461 chapter 2 tools license management this window is used to install an activation code. The activation code is a set of codes which actives/unlocks function on the appliance. Figure 2-1 license management window enter an activa...

  • Page 467: Upload Firmware

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 462 figure 2-3 download firmware – http window the fields that can be configured are described below: parameter description destination file enter the location of the destination file. Source file enter the location of the source...

  • Page 468: Upload Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 463 download configuration from tftp this page allows the user to download the configuration file from a tftp server to the switch and updates the switch. Figure 2-5 download configuration – tftp window the fields that can be con...

  • Page 469: Upload Log File

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 464 upload configuration to tftp this page allows the user to upload the configuration file from the switch to a tftp server. Figure 2-7 upload configuration – tftp window the fields that can be configured are described below: pa...

  • Page 470: Upload Log To Tftp

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 465 upload log to tftp this page allows the user to upload the log file from the switch to a tftp server. Figure 2-9 upload log – tftp window the fields that can be configured are described below: parameter description tftp serve...

  • Page 471: Reboot System

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 466 note: only the reset system option will enter the factory default parameters into the switch's non- volatile ram, and then restart the switch. All other options enter the factory defaults into the current configuration, but d...

  • Page 472

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 467 figure 2-13 system rebooting window.

  • Page 473: Appendices

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 468 appendices appendix a mitigating arp spoofing attacks using packet content acl how address resolution protocol works address resolution protocol (arp) is the standard method for finding a host’s hardware address (mac address)...

  • Page 474

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 469 when the switch receives the frame, it will check the “source address” in the ethernet frame’s header. If the address is not in its forwarding table, the switch will learn pc a’s mac and the associated port into its forwardin...

  • Page 475

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 470 the switch will also examine the “source address” of the ethernet frame and find that the address is not in the forwarding table. The switch will learn pc b’s mac and update its forwarding table. How arp spoofing attacks a ne...

  • Page 476: Configuration

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 471 a common dos attack today can be done by associating a nonexistent or any specified mac address to the ip address of the network’s default gateway. The malicious attacker only needs to broadcast one gratuitous arp to the netw...

  • Page 477

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 472 offset chunk offset chunk0 offset chunk1 offset chunk2 offset chunk3 offset chunk4 offset chunk5 offset chunk6 offset chunk7 offset chunk8 offset chunk9 offset chunk10 offset chunk11 offset chunk12 offset chunk13 offset chunk...

  • Page 478

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 473 0xa5a offset_chunk_3 0x5a5a0000 step 5: save save configuration..

  • Page 479

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 474 appendix b password recovery procedure this document describes the procedure for resetting passwords on d-link switches. Authenticating any user who tries to access networks is necessary and important. The basic authenticatio...

  • Page 480

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 475 appendix c system log entries the following table lists all possible entries and their corresponding meanings that will appear in the system log of this switch. Category event description log information severity remark syste...

  • Page 481

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 476 will no ip information for logging. Firmware upgrade was unsuccessful firmware upgrade by console was unsuccessful! (username: , ip: ) warning "by console" and "ip: " are xor displayed in log string, which means if user login...

  • Page 482

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 477 log message upload was unsuccessful log message upload by console was unsuccessful! (username: , ip: ) warning "by console" and "ip: " are xor displayed in log string, which means if user login by console, there will no ip in...

  • Page 483

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 478 login failed through telnet login failed through telnet (username: , ip: ) warning logout through telnet logout through telnet (username: , ip: ) informational telnet session timed out telnet session timed out (username: , ip...

  • Page 484

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 479 successful login through web authenticated by aaa local method successful login through web from authenticated by aaa local method (username: ) informational login failed through web authenticated by aaa local method login fa...

  • Page 485

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 480 login failed through telnet authenticated by aaa server login failed through telnet from authenticated by aaa server (username: ) warning login failed through telnet due to aaa server timeout or improper configuration login f...

  • Page 486

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 481 configuration successful enable admin through web authenticated by aaa server successful enable admin through web from authenticated by aaa server (username: ) informational enable admin failed through web authenticated by aa...

  • Page 487

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 482 ) dynamic impb entry is conflict with static fdb dynamic impb entry conflicts with static fdb(ip: , mac: , port ) warning dynamic impb entry conflicts with static impb dynamic impb entry conflicts with static impb(ip: , mac: ...

  • Page 488

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 483 temperature recovers to normal. Temperature sensor recovers to normal state. (current temperature: ) informational cfm cross-connect is detected cfm cross-connect. Vlan:, local(md level:, port , direction:) remote(mepid:, mac...

  • Page 489

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 484 database full full client mac: dropped peer switch wireless peer switch discovered wireless peer switch: discovered informational wireless peer switch failed wireless peer switch: failed warning wireless peer switch protocol ...

  • Page 490

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 485 cp client auth failure cp client auth failure: mac: ip: swmac: cpid: interface: user: warning cp client authentication database full cp client authentication database full informational.

  • Page 491

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 486 appendix d trap log entries this table lists the trap logs found on the switch. Log entry description id l2macnotification this trap indicates the mac address variations in the address table. 1.3.6.1.4.1.171.11.101.1.2.100.1....

  • Page 492

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 487 itself and that its configuration may have been altered. Warmstart a warmstart trap signifies that the snmpv2 entity, acting in an agent role, is reinitializing itself such that its configuration is unaltered. 1.3.6.1.6.3.1.1...

  • Page 493

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 488 wsapfailurelistfull a wsapfailurelistfull trap signifies that the snmp entity, acting in an agent role, has detected that ap failure list full. 1.3.6.1.4.1.171.12.96.11.0.6 wsrfscanaplistfull a wsrfscanaplistfull trap signifi...

  • Page 494

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 489 agent role, has detected wlan bandwidth utilization exceeding the limit. Wsadhocclientlistfull a wsadhocclientlistfull trap signifies that the snmp entity, acting in an agent role, has detected that ad hoc client database is ...

  • Page 495

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 490 appendix e radius attributes assignment the radius attributes assignment on the switch is used in the following modules: 802.1x (port-based and host- based), mac-based access control, and captive portal configurations. The de...

  • Page 496

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 491 tunnel-type this attribute indicates the tunneling protocol(s) to be used (in the case of a tunnel initiator) or the tunneling protocol in use (in the case of a tunnel terminatior). 13 (vlan) required tunnel-medium-type this ...

  • Page 497

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 492 attribute-specific field used to assign the acl profile or rule. Acl command for example: acl profile: create access_profile profile_id 6 profile_name 1 ethernet vlan 0xfff; acl rule: config access_profile profile_id 6 add ac...

  • Page 498

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 493 radio-1-power (107) power assignment. Valid will override auto power configuration. Vendor-specifc (26), d-link (171), radio-2-power (108) indicates a fixed power setting for the radio. 0, 1-100 percent 0 indicates automatic ...

  • Page 499

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 494 client-acl-up (121) inbound (up) direction. If this attribute is not present then the client qos default acl up type and name parameters defined in the network configuration are used instead. If this attribute is present but ...

  • Page 500

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 495 tunnel-type (64) for dynamic vlan usage. Vlan (13) optional tunnel-medium-type (65) for dynamic vlan usage. 802 optional tunnel-private-group-id (81) for dynamic vlan usage. Vlanid optional if the global mac authentication ac...

  • Page 501

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 496 (124) has been reached the user will be disconnected. If the attribute is 0 or not present, then use the value configured for the captive portal. Vendor-specific (26), d-link (171), lvl7-max-output-octets (125) maximum number...

  • Page 502

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 497 appendix f wireless switch specific authenticated roaming and clustering: captive portal guidlines in addition to the generic implementation, captive portal also provides two key features for the wireless networks called auth...

  • Page 503

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 498 since the cluster controller function may be disabled by setting the cluster priority to zero, it is possible that all wireless switches in the network are configured to disable the cluster controller function and the network...

  • Page 504

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 499 each wireless device has a copy of a certificate of the device with which it needs to communicate. During tls connection establishment the wireless devices compare the certificate received on the connection setup with all ava...

  • Page 505

    Dws-3160 series gigabit ethernet unified switch web ui reference guide 500 in other words, mba and impb will not work when the mac belongs to a tunnel client. To achieve ip-in-ip tunnel forwarding, the mac addresses of the devices under the tunnel are learned and marked as “static” fdb entries on th...