Page 1 D-Link ™ DXS-3326GSR Managed 24-port Gigabit and 4 1000Base-T Combo Ports Layer 3 Stackable Ethernet Switch Manual...
Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
DXS-3326GSR Gigabit Layer 3 Switch Table of Contents Preface.....................................ix Intended Readers..................................x Typographical Conventions..............................x Notes, Notices, and Cautions ..............................x Safety Instructions...................................xi Safety Cautions...................................xi General Precautions for Rack-Mountable Products......................xii Protecting Against Electrostatic Discharge ........................xiii Introduction....................................1 Fast Ethernet..................................1 Gigabit Ethernet Technology ..............................1 Switching Technology.................................2...
Page 4 DXS-3326GSR Gigabit Layer 3 Switch Management Options ................................22 Web-based Management Interface..............................22 SNMP-based Management ................................22 Command Line Console Interface Through the Serial Port ......................22 Connecting the Console Port (RS-232 DCE)........................... 22 First Time Connecting to the Switch ............................... 24 Password Protection..................................
Page 5 DXS-3326GSR Gigabit Layer 3 Switch VLANs ....................................65 Static VLAN Entry ..................................71 GVRP Setting ....................................73 Traffic Control...................................75 Port Security..................................77 Port Lock Entries................................79 QoS....................................81 Bandwidth Control................................... 82 QoS Scheduling Mechanism................................84 QoS Output Scheduling ................................... 84 802.1p Default Priority ..................................86 802.1p User Priority..................................
Page 6 DXS-3326GSR Gigabit Layer 3 Switch DHCP/BOOTP Relay..............................158 DHCP/BOOTP Global Settings..............................158 DHCP/BOOTP Relay Settings ..............................158 DNS Relay..................................159 DNS Global Settings..................................159 DNS Relay Static Setting................................160 VRRP ....................................161 VRRP Global Settings ................................... 161 VRRP Configuration ..................................161 IP Multicast Routing Protocol ............................165 IGMP Interface Settings ................................
Page 7 DXS-3326GSR Gigabit Layer 3 Switch Port Utilization ................................202 CPU Utilization ................................203 Packets.....................................204 Received (RX) ....................................204 UMB Cast (RX)..................................... 206 Transmitted (TX) ................................... 208 Errors....................................210 Received (RX) ....................................210 Transmitted (TX) ................................... 212 Size ....................................214 Stacking Information ...............................216 Device Status...................................217 MAC Address..................................218...
Page 8 DXS-3326GSR Gigabit Layer 3 Switch Config Firmware Image................................. 243 Ping Test..................................243 Save Changes ..................................244 Reset ....................................245 Reboot Device .................................246 Logout .....................................247 Single IP Management .................................248 SIM Settings..................................249 Topology ..................................250 Firmware Upgrade................................259 Configuration File Backup/Restore ..........................260 Appendix A ..................................261 Technical Specifications..............................261 Appendix B ..................................263...
Page 9: Preface
DXS-3326GSR Gigabit Layer 3 Switch Preface The DXS-3326GSR Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, “Introduction” – Describes the Switch and its features. Section 2, “Installation” – Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch.
Page 10: Intended Readers
DXS-3326GSR Gigabit Layer 3 Switch Intended Readers The DXS-3326GSR Manual contains information for setup and management of the Switch. It is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention Description In a command line, square brackets indicate an optional entry. For example: [copy filename] means that optionally you can type copy followed by the name of the file.
Page 11: Safety Instructions
DXS-3326GSR Gigabit Layer 3 Switch Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow.
Page 12: General Precautions For Rack-Mountable Products
DXS-3326GSR Gigabit Layer 3 Switch remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded plugs. • Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
Page 13: Protecting Against Electrostatic Discharge
DXS-3326GSR Gigabit Layer 3 Switch • Do not step on or stand on any component when servicing other components in a rack. NOTE: A qualified electrician must perform all connections to DC power and to safety grounds. All electrical wiring must comply with applicable local or national codes and practices.
Page 14: Introduction
DXS-3326GSR Gigabit Layer 3 Switch Section 1 Introduction Fast Ethernet Gigabit Ethernet Technology Switching Technology Switch Description Features Ports Front-Panel Components LED Indicators Rear Panel Description Side Panel Description Fast Ethernet The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks.
Page 15: Switching Technology
Also included at the rear of the Switch are two 10-gigabit stacking ports used to stack up to eight other switches. The DXS-3326GSR may be used as a slave or master unit of a switch stack when utilizing these two ports and can be configured in a Star or Ring topology, and in total, may provide a stacking solution of up to 288 gigabit ports.
Page 16 DXS-3326GSR Gigabit Layer 3 Switch IEEE 802.3u compliant • IEEE 802.3ab compliant • IEEE 802.3ae compliant (for optional XFP module) • IEEE 802.1p Priority Queues • IEEE 802.3ad Link Aggregation Control Protocol support. • IEEE 802.1x Port-based and MAC-based Access Control •...
Page 17: Ports
• console terminal or PC using a terminal emulation program. NOTE: For customers interested in D-View, D-Link Corporation's proprietary SNMP management software, go to the D-Link Website (www.dlink.com.cn) and download the software and manual. Installing the SFP ports The Switch is equipped with 24 SFP (Small Form Factor Portable) ports, which are to be used with fiber optical transceiver cabling in order to uplink various other networking devices for a gigabit link that may span great distances.
Page 18: Front-Panel Components
24 SFP ports, four 1000BASE-T gigabit Ethernet ports and a RS-232 DCE console port for Switch management. DXS-3326GSR Figure 1- 2. Front Panel View of the DXS-3326GSR as shipped Comprehensive LED indicators display the status of the Switch and the network.
Page 19: Rear Panel Description
DXS-3326GSR Gigabit Layer 3 Switch Description Power This LED will light green after the Switch is powered on to indicate the ready state of the device. The indicator is dark when the Switch is powered off. This LED will light solid green when the Switch is configured to be a master switch of a Master switch stack in a ring topology or when it is in use as a stand-alone switch.
Page 20 DXS-3326GSR Gigabit Layer 3 Switch Figure 1- 5. Side Panels...
Page 21: Installation
This Manual • If any item is found missing or damaged, please contact your local D-Link reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
Page 22: Installing The Switch Without The Rack
DXS-3326GSR Gigabit Layer 3 Switch Install the Switch in a site free from strong electromagnetic field generators (such as motors), vibration, dust, • and direct exposure to sunlight. When installing the Switch on a level surface, attach the rubber feet to the bottom of the device. The rubber feet •...
Page 23: Mounting The Switch In A Standard 19" Rack
Optional Module At the rear of the DXS-3326GSR resides an optional module slot. This slot may be equipped with a 2-port 10GE XFP Uplink Module, sold separately. Adding the DEM-420X optional module will allow the administrator to add 2 fiber-optic ports which will transmit information at a rate of 10 gigabits a second.
Page 24: External Redundant Power System
Switch. The module should fit snugly into the corresponding receptors. Figure 2- 6. Inserting the optional module into the DXS-3326GSR Now tighten the two screws at adjacent ends of the module into the available screwholes on the Switch. The upgraded DXS-3326GSR is now ready for use.
Page 25 DXS-3326GSR Gigabit Layer 3 Switch Figure 2- 8. The DXS-3326GSR with the DPS-500 Redundant External Power Supply Figure 2- 9. The DXS-3326GSR with the DPS-900 chassis RPS NOTE: See the DPS-500 documentation for more information.
Page 26 DXS-3326GSR Gigabit Layer 3 Switch CAUTION: Do not use the Switch with any redundant power system other than the DPS-500.
Page 27: Connecting The Switch
DXS-3326GSR Gigabit Layer 3 Switch Section 3 Connecting the Switch Switch To End Node Switch To Hub or Switch Connecting To Network Backbone or Server Stacking and the DXS-3326GSR NOTE: All 24 high-performance NWay Ethernet ports can support both MDI-II and MDI-X connections.
Page 28: Connecting To Network Backbone Or Server
DXS-3326GSR Gigabit Layer 3 Switch Figure 3- 2. Switch connected to a port on a hub or switch using either a straight or crossover cable- any normal cable is fine Figure 3- 3. Switch connected to switch using fiber-optic cabling...
Page 29: Stacking And The Dxs-3326Gsr
The DXS-3326GSR is equipped with two 10-gigabit stacking ports at the rear of the Switch, as seen in the following figure. These stacking ports may be used to stack the DXS-3326GSR to a master switch to be used in a switch stack.
Page 30 DXS-3326GSR Gigabit Layer 3 Switch Figure 3- 6. Stacking LEDs at the front of the DXS-3326GSR The Switch can be stacked in a star or ring topology, as previously mentioned. For a star architecture, only one of the two Gigabit stacking ports will be in use. This port will be connected to the master switch of the switch stack and will act as a slave switch of the stack.
Page 31: Stacking Limitations Utilizing A Ring Or Star Toplogy
For stacking the in a ring architecture, both SIO ports will be in use, as shown in the following diagram. Up to 12 DXS-3326GSR switches may be stacked together in the ring architecture switch stack, though there are limitations on stacking, which will be discussed in the following section.
Page 32 Number of Switches ≤ 16 For this example, a maximum of 16 DXS-3326GSR switches (where all of these switches have a 10G uplink) can be ring stacked according to the previous calculations, but we must remember that there is a maximum limitation of 12 switches, so the actual maximum number of DXS-3326GSR switches that can be stacked together in the ring topology is twelve.
Page 33 Number of Switches ≤ 32/4 Number of Switches ≤ 8 In this case, a maximum of eight DXS-3326GSR switches (where all of these switches have a 10G uplink) can be ring stacked. Adding a different switch type to an existing stack In this example, there are three different switch types, each with different token costs.
Page 34: Stacking In A Star Topology
DXS-3326GSR Gigabit Layer 3 Switch Stacking In a Star Topology In this case, the DGS-3324SRi is the Master Switch in a star topology. And up to six slave switches can be stacked with Master Stackable Switch. Check the following examples as a reference guide.
Page 35: Introduction To Switch Management
DXS-3326GSR Gigabit Layer 3 Switch Section 4 Introduction To Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface Through The Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to The Switch...
Page 36 12. Enter the commands to complete your desired tasks. Many commands require administrator-level access privileges. Read the next section for more information on setting up user accounts. See the DXS-3326GSR Command Line Interface Reference Manual on the documentation CD for a list of all commands and additional information on using the CLI.
Page 37: First Time Connecting To The Switch
DXS-3326GSR Gigabit Layer 3 Switch Figure 4- 1. Initial screen after first connection. First Time Connecting to the Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch.
Page 38: Password Protection
Password Protection The DXS-3326GSR does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged access to the Switch's management software.
Page 39: Snmp Settings
The DXS-3326GSR supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 40: Mibs
DXS-3326GSR Gigabit Layer 3 Switch and sends them to the trap recipient (or network manager). Typical traps include trap messages for Authentication Failure, Topology Change and Broadcast\Multicast Storm. MIBs Management and counter information are stored by the Switch in the Management Information Base (MIB). The Switch uses the standard MIB-II Management Information Base module.
Page 41: Connecting Devices To The Switch
DXS-3326GSR Gigabit Layer 3 Switch The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a management station to the Switch's Telnet or Web-based management agent.
Page 42: Introduction To Web-Based Switch Configuration
Network Monitoring IGMP Snooping Status All software functions of the DXS-3326GSR can be managed, configured and monitored via the embedded web-based (HTML) interface. The Switch can be managed from remote stations anywhere on the network through a standard browser such as Opera, Netscape Navigator/Communicator or Microsoft Internet Explorer. The browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol.
Page 43: Web-Based User Interface
Select the folder or window to be displayed. The folder icons can be opened to display the hyperlinked windows and subfolders contained within them. Click the D-Link logo to go to the D-Link website. Area 2 Presents a graphical near real-time image of the front panel of the Switch. This area displays the Switch's ports and expansion modules, showing port activity, duplex mode, or flow control, depending on the specified mode.
Page 44: Web Pages
DXS-3326GSR Gigabit Layer 3 Switch Various areas of the graphic can be selected for performing management functions, including port configuration. Area 3 Presents switch information based on your selection and the entry of configuration data. NOTICE: Any changes made to the Switch configuration during the current session must be saved in the Save Settings window (explained below) or use the command line interface (CLI) command save.
Page 45: Configuration
DXS-3326GSR Gigabit Layer 3 Switch Section 6 Configuration Switch Information IP Address Box Information Advanced Settings Port Configuration Port Description Port Mirroring Link Aggregation LACP Port Setting MAC Notification MAC Notification Global Settings MAC Notification Port Settings IGMP Snooping IGMP Snooping Settings...
Page 46: Switch Information
DXS-3326GSR Gigabit Layer 3 Switch 802.1p Default Priority 802.1p User Priority Traffic Segmentation System Log Server SNTP Setting Time Setting Time Zone and DST Access Profile Table Port Access Entity Configure Authenticator Local users PAE System Control Port Capability Settings...
Page 47: Ip Address
The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the introduction of the DXS-3326GSR Command Line Interface Manual or return to Section 4 of this manual for more information.
Page 48: Box Information
DXS-3326GSR Gigabit Layer 3 Switch server. If this option is set, the Switch will first look for a DHCP server to provide it with this information before using the default or previously entered settings. Manual Allows the entry of an IP address, Subnet Mask, and a Default Gateway for the Switch.
Page 49: Advanced Settings
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 3. Box Information Configuration window This window is used to configure the Master switch of a switch stack. The Master switch is the switch that will be used to configure the software applications regarding the switch stack.
Page 50 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 4. Switch Information (Advanced Settings) window Parameter Description Serial Port Auto Select the logout time used for the console interface. This automatically logs the user Logout Time out after an idle period of time, as defined. Choose from the following options: 2 Minutes, 5 Minutes, 10 Minutes, 15 Minutes or Never.
Page 51: Port Configuration
DXS-3326GSR Gigabit Layer 3 Switch Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet choose Disabled. The Telnet TCP port number. TCP ports are numbered between 1 and 65535. The...
Page 52 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 5. Port Configuration window To configure switch ports: 1. Choose the unit and the port or sequential range of ports using the Unit and From/To pull-down menus. 2. Use the remaining pull-down menus to configure the parameters described below:...
Page 53: Port Description
Click Apply to implement the new settings on the Switch. Port Description The DXS-3326GSR supports a port description feature where the user may name various ports on the Switch. To assign names to various ports, click the Port Description on the Configuration menu:...
Page 54: Port Mirroring
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 6. Port Description Setting window Use the Unit and From/To pull-down menus to choose a unit and port or range of ports to describe, and then enter a description of the port(s). Click Apply to set the descriptions in the Port Description Table.
Page 55: Link Aggregation
Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The DXS-3326GSR supports up to 32 port trunk groups with two to eight ports in each group. This includes link aggregation groups that spread over multiple switches in the switch stack.
Page 56 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 8. Example of Port Trunk Group The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent.
Page 57 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 9. Current Link Aggregation Group Entries window To configure port trunk groups, click the Add button to add a new trunk group and use the Link Aggregation Group Configuration window (see example below) to set up trunk groups. To modify a port trunk group, click the Modify button corresponding to the entry you wish to alter.
Page 58: Lacp Port Setting
DXS-3326GSR Gigabit Layer 3 Switch Master Port Choose the Master Port for the trunk group using the pull-down menu. Unit Choose the Unit for the trunk group using the pull-down menu. Member Ports Choose the members of a trunked group. Up to 8 ports per group can be assigned to a group.
Page 59 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 11. LACP Port Setting window The user may set the following parameters: Parameter Description Unit Choose the desired Unit. From/To A consecutive group of ports may be configured starting with the selected port.
Page 60: Mac Notification
DXS-3326GSR Gigabit Layer 3 Switch group may be changed dynamically as needs require. In order to utilize the ability to change an aggregated port group, that is, to add or subtract ports from the group, at least one of the participating devices must designate LACP ports as active. Both devices must support LACP.
Page 61 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 13. MAC Notification Port Settings window The following parameters may be set:...
Page 62: Igmp Snooping
DXS-3326GSR Gigabit Layer 3 Switch Parameter Description Unit Choose the desired unit. From…To Select a port or group of ports to enable for MAC notification using the pull-down menus. State Enable MAC Notification for the ports selected using the pull-down menu.
Page 63 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 15. second IGMP Snooping Settings window The following parameters may be viewed or modified: Parameter Description VLAN ID This is the VLAN ID that, along with the VLAN Name, identifies the VLAN the user wishes to modify the IGMP Snooping Settings for.
Page 64: Static Router Port Settings
DXS-3326GSR Gigabit Layer 3 Switch Leave Timer (1- This specifies the maximum amount of time in seconds between the Switch receiving 16711450) a leave group message from a host, and the Switch issuing a group membership query. If no response to the membership query is received before the Leave Timer expires, the (multicast) forwarding entry for that host is deleted.
Page 65: Spanning Tree
802.1d STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP.
Page 66: W Rapid Spanning Tree
DXS-3326GSR Gigabit Layer 3 Switch regions on the network, continuing to allow simple and full processing of frames, regardless of administrative errors in defining VLANs and their respective spanning trees. Each switch utilizing the MSTP on a network will have a single MSTP configuration that will have the following three attributes: 1.
Page 67: Stp Bridge Global Settings
DXS-3326GSR Gigabit Layer 3 Switch 802.1d MSTP 802.1w RSTP 802.1d STP Forwarding Learning Discarding Discarding Disabled Discarding Discarding Blocking Discarding Discarding Listening Learning Learning Learning Forwarding Forwarding Forwarding Table 6- 1. Comparing Port States RSTP is capable of a more rapid transition to a forwarding state - it no longer relies on timer configurations - RSTP compliant bridges are sensitive to feedback from other RSTP compliant bridge links.
Page 68 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 18. STP Bridge Global Settings window The following parameters can be set: Parameter Description STP Status Use the pull-down menu to enable or disable STP globally on the Switch. The default is Disabled.
Page 69: Mst Configuration Table
DXS-3326GSR Gigabit Layer 3 Switch Max Hops (1-20) <20> Used to set the number of hops between devices in a spanning tree region before the BPDU (bridge protocol data unit) packet sent by the Switch will be discarded. Each switch on the hop count will reduce the hop count by one until the value reaches zero.
Page 70 DXS-3326GSR Gigabit Layer 3 Switch Revision Level This value, along with the Configuration Name, identifies the MSTP region configured on the Switch. This field shows the MSTI IDs currently set on the Switch. This field will always have MSTI ID the CIST MSTI, which may be configured but not deleted.
Page 71: Msti Port Settings
DXS-3326GSR Gigabit Layer 3 Switch Parameter Description MSTI ID The MSTI ID of the CIST is 0 and cannot be altered. Type The type of configuration about to be processed. This window is used to add or delete VIDs to the configured MSTI or internal CIST. All other parameters are permanently set and therefore unchangeable.
Page 72: Stp Instance Settings
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 23. MSTI Port Information window To view the MSTI settings for a particular port, select the Port number, located in the top left hand corner of the window and click Apply. To modify the settings for a particular MSTI Instance, click on its hyperlinked MSTI ID, which will reveal the following window.
Page 73: Stp Port Settings
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 25. STP Instance Table window The following information is displayed: Parameter Description Instance Type Displays the instance type(s) currently configured on the Switch. Each instance type is classified by an MSTI ID. CIST refers to the default MSTI configuration set on the Switch.
Page 74 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 27. STP Port Settings window In addition to setting Spanning Tree parameters for use on the switch level, the Switch allows for the configuration of groups of ports, each port-group of which will have its own spanning tree, and will require some of its own configuration...
Page 75 DXS-3326GSR Gigabit Layer 3 Switch settings. An STP Group will use the switch-level parameters entered above, with the addition of Port Priority and Port Cost. An STP Group spanning tree works in the same way as the switch-level spanning tree, but the root bridge concept is replaced with a root port concept.
Page 76: Forwarding & Filtering
DXS-3326GSR Gigabit Layer 3 Switch True. State <Disabled> This drop-down menu allows you to enable or disable STP for the selected group of ports. The default is Enabled. Click Apply to implement changes made. Forwarding & Filtering Unicast Forwarding Open the Forwarding & Filtering folder in Configuration and click on the Unicast Forwarding link. This will open the Setup Static Unicast Forwarding Table window, as shown below: Figure 6- 28.
Page 77 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 29. Static Multicast Forwarding Settings window This window displays all of the entries made into the Switch's static multicast forwarding table. Click the Add button to open the Setup Static Multicast Forwarding Table window, as shown below: Figure 6- 30.
Page 78: Vlans
VLANs without a network device performing a routing function between the VLANs. The DXS-3326GSR supports IEEE 802.1Q VLANs and Port-Based VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag-unaware.
Page 79 DXS-3326GSR Gigabit Layer 3 Switch Untagging - The act of stripping 802.1Q VLAN information out of the packet header. Ingress port - A port on a switch where packets are flowing into the Switch and VLAN decisions must be made.
Page 80: Q Vlan Tags
DXS-3326GSR Gigabit Layer 3 Switch 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet's EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
Page 81: Port Vlan Id
DXS-3326GSR Gigabit Layer 3 Switch Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 82: Default Vlans
DXS-3326GSR Gigabit Layer 3 Switch VID) as the ingress port. If it does not, the packet is dropped. If it has the same VID, the packet is forwarded and the destination port transmits it on its attached network segment. This process is referred to as ingress filtering and is used to conserve bandwidth within the Switch by dropping packets that are not on the same VLAN as the ingress port at the point of reception.
Page 83: Vlan And Trunk Groups
DXS-3326GSR Gigabit Layer 3 Switch VLAN and Trunk Groups The members of a trunk group have the same VLAN setting. Any VLAN setting on the members of a trunk group will apply to the other member ports. NOTE: In order to use VLAN segmentation in conjunction with port trunk groups, you can first set the port trunk group(s), and then you may configure VLAN settings.
Page 84: Static Vlan Entry
DXS-3326GSR Gigabit Layer 3 Switch In configuring the user-defined protocol, the administrator must make sure that the pre-defined user type header does not match any other type header. A match may cause discrepancies within the local network and failure to define the VLAN to forward packets to.
Page 85 DXS-3326GSR Gigabit Layer 3 Switch The following fields can then be set: Parameter Description Unit Choose the desired Unit. VID (VLAN ID) Allows the entry of a VLAN ID in the Add dialog box, or displays the VLAN ID of an existing VLAN in the Modify dialog box.
Page 86: Gvrp Setting
DXS-3326GSR Gigabit Layer 3 Switch information is defined by the Systems Network Architecture(SNA) 802.2 Protocol. netBios - Using this parameter will instruct the switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol. This packet header information is defined by the NetBIOS Protocol.
Page 87 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 36. GVRP Settings window The following fields can be set: Parameter Description Unit Choose the desired unit. From/To These two fields allow you to specify the range of ports that will be included in the...
Page 88: Traffic Control
DXS-3326GSR Gigabit Layer 3 Switch Port-based VLAN that you are creating using the GVRP Settings window. GVRP The Group VLAN Registration Protocol (GVRP) enables the port to dynamically become a member of a VLAN. GVRP is Disabled by default. Ingress Check This field can be toggled using the space bar between Enabled and Disabled.
Page 89 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 37. Traffic Control Settings window The purpose of broadcast, multicast or unknown unicast storm control is to limit too many broadcast, multicast or unknown unicast packets flooding in the network. Each port has a counter that tracks the number of broadcast packets received per second.
Page 90: Port Security
DXS-3326GSR Gigabit Layer 3 Switch The Threshold value is the upper threshold at which the specified traffic control is switched on. This is the number of Broadcast, Multicast or DLF packets, in Kbps, received by the Switch that will trigger the storm traffic control measures.
Page 91 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 38. Port Security Settings window The following parameters can be set: Parameter Description Unit Choose the desired unit. From/To A consecutive group of ports may be configured starting with the selected port. Admin State This pull-down menu allows you to enable or disable Port Security (locked MAC address table for the selected ports).
Page 92: Port Lock Entries
DXS-3326GSR Gigabit Layer 3 Switch selected switch and group of ports. Mode This pull-down menu allows you to select how the MAC address table locking will be implemented on the Switch, for the selected group of ports. The options are: Permanent –...
Page 93 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 39. Port Lock Entries Table This function is only operable if the Mode in the Port Security window is selected as Permanent or DeleteOnReset, or in other words, only addresses that are permanently learned by the Switch can be deleted. Once the entry has been defined by...
Page 94: Qos
MAC address that was permanently learned by the Switch. The DXS-3326GSR supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and benefits of using 802.1p priority queuing.
Page 95: Bandwidth Control
CoS until there are no more packets for this CoS. The other CoS queues that have been given a nonzero value, and depending upon the weight, will follow a common weighted round-robin scheme. Remember that the DXS-3326GSR has seven classes of service for each port on the Switch. Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port.
Page 96 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 41. Bandwidth Settings window The following parameters can be set or are displayed: Parameter Description Unit Choose the desired unit. From/To A consecutive group of ports may be configured starting with the selected port.
Page 97: Qos Scheduling Mechanism
DXS-3326GSR Gigabit Layer 3 Switch transmitting, or both receiving and transmitting packets. no_limit This drop-down menu allows you to specify that the selected port will have no bandwidth limit. Enabled disables the limit. Rate This field allows you to enter the data rate, in Mbit/s, that will be the limit for the selected port.
Page 98: Configuring The Combination Queue
Configuring the Combination Queue. Configuring the Combination Queue Utilizing the QoS Output Scheduling Configuration window shown above, the DXS-3326GSR can implement a combination queue for forwarding packets. This combination queue allows for a combination of strict and weight-fair (weighted round-robin “WRR”) scheduling.
Page 99: 802.1P Default Priority
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 44. QoS Output Scheduling Configuration window – Combination Queue Example 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. In the Configuration folder open...
Page 100: 802.1P User Priority
0, the lowest priority, to 7, the highest priority. Click Apply to implement your settings. 802.1p User Priority The DXS-3326GSR allows the assignment of a class of service to each of the 802.1p priorities. In the Configuration folder open the QoS folder and click 802.1p User Priority, to view the screen shown below.
Page 101: Traffic Segmentation
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 46. User Priority Configuration window Once you have assigned a priority to the port groups on the Switch, you can then assign this Class to each of the eight levels of 802.1p priorities. Click Apply to set your changes.
Page 102 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 47. Current Traffic Segmentation Table window This window allows you to view which port on a given switch will be allowed to forward packets to other ports on that switch. The user may set the following parameters:...
Page 103: System Log Server
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 48. Setup Forwarding ports window This window allows you to determine which port on a given switch in a switch stack will be allowed to forward packets to other ports on that switch.
Page 104 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 50. Configure System Log Server-Add window The following parameters can be set: Parameter Description Index (1-4) Syslog server settings index (1-4). Server IP The IP address of the Syslog server. Severity This drop-down menu allows you to select the level of messages that will be sent. The options are Warning, Informational, and ALL.
Page 105: Sntp Setting
DXS-3326GSR Gigabit Layer 3 Switch clock daemon local use 0 (local0) local use 1 (local1) local use 2 (local2) local use 3 (local3) local use 4 (local4) local use 5 (local5) local use 6 (local6) local use 7 (local7) UDP Port (514 or Type the UDP port number used for sending Syslog messages.
Page 106 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 51. Current Time window The following parameters can be set or are displayed: Parameter Description Current Time: Status System Boot Time Displays the time when the Switch was initially started for this session.
Page 107: Time Zone And Dst
DXS-3326GSR Gigabit Layer 3 Switch Year Enter the current year, if you want to update the system clock. Month Enter the current month, if you would like to update the system clock. Enter the current day, if you would like to update the system clock.
Page 108: Access Profile Table
DXS-3326GSR Gigabit Layer 3 Switch Daylight Saving Use this pull-down menu to enable or disable the DST Settings. Time State Use this pull-down menu to specify the amount of time that will constitute your local DST Daylight Saving Time Offset in offset - 30, 60, 90, or 120 minutes.
Page 109 DXS-3326GSR Gigabit Layer 3 Switch Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame the Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the Switch will use to determine what to do with the frame.
Page 110 DXS-3326GSR Gigabit Layer 3 Switch packet header. Select IP to instruct the Switch to examine the IP address in each frame's • header. Select Packet Content Mask to specify a mask to hide the content of the • packet header.
Page 111 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 55. Access Profile Configuration (IP) window The following parameters can be set, for IP: Parameter Description Profile ID (1-8) Type in a unique identifier number for this profile set. This value can be set from 1 to Type Select profile based on Ethernet (MAC Address), IP address or packet content mask.
Page 112 DXS-3326GSR Gigabit Layer 3 Switch Destination IP Mask Enter an IP address mask for the destination IP address. DSCP Selecting this option instructs the Switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding.
Page 113 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 56. Access Profile Configuration (Packet Content Mask) window This window will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask:...
Page 114 DXS-3326GSR Gigabit Layer 3 Switch Select IP to instruct the Switch to examine the IP address in each frame's • header. Select Packet Content Mask to specify a mask to hide the content of the • packet header. Offset This field will instruct the Switch to mask the packet header beginning with the offset...
Page 115 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 58. Access Rule Configuration window (IP) window Configure the following Access Rule Configuration settings: Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 116 DXS-3326GSR Gigabit Layer 3 Switch QoS section of this manual. Replace DSCP (0- Select this option to instruct the Switch to replace the DSCP value (in a packet that meets the selected criteria) with the value entered in the adjacent field.
Page 117 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 60. Access Rule Table window To remove a previously created rule, select it and click the button. To add a new Access Rule, click the Add button: Figure 6- 61. Access Rule Configuration (Ethernet) window To set the Access Rule for Ethernet, adjust the following parameters and click Apply.
Page 118 DXS-3326GSR Gigabit Layer 3 Switch Mask. Ethernet instructs the Switch to examine the layer 2 part of each packet • header. IP instructs the Switch to examine the IP address in each frame's header. • Packet Content Mask instructs the Switch to examine the packet header •...
Page 119 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 62. Access Rule Display (Ethernet) window To configure the Access Rule for Packet Content Mask, open the Access Profile Table window and click Modify for a Packet Content Mask entry. This will open the following window: Figure 6- 63.
Page 120 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 64. Access Rule Configuration (Packet Content Mask) window To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set.
Page 121 DXS-3326GSR Gigabit Layer 3 Switch Select Deny to specify that packets that do not match the access profile are not forwarded by the Switch and will be filtered. Access ID Type in a unique identifier number for this access. This value can be set from 1 to 50.
Page 122: Port Access Entity
DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 65. Access Rule Display window (Packet Content Mask) window Port Access Entity The original intent behind the development of 802.1X was to leverage the characteristics of point-to-point in LANs. As any single LAN segment in such infrastructures has no more than two devices attached to it, one of which is a Bridge Port.
Page 123 DXS-3326GSR Gigabit Layer 3 Switch Port-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client Network access controlled port Network access uncontrolled port Figure 6- 66.
Page 124: Configure Authenticator
DXS-3326GSR Gigabit Layer 3 Switch MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client Client Client Client Network access controlled port Network access uncontrolled port Figure 6- 67.
Page 125 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 68. first 802.1X Authenticator Settings window To configure the settings by port, click on the hyperlinked port number under the Port heading, which will display the following table to configure:...
Page 126 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 69. second 802.1X Authenticator Settings window This window allows you to set the following features: Parameter Description Unit Choose the desired unit. From [ ] To [ ] Enter the port or ports to be set.
Page 127: Local Users
DXS-3326GSR Gigabit Layer 3 Switch The default setting is Auto. TxPeriod <30 > This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default setting is 30 seconds.
Page 128: Port Capability Settings
DXS-3326GSR Gigabit Layer 3 Switch Port Capability Settings Click Port Access Entity > PAE System Control > Port Capability Settings to view the following window: Figure 6- 71. 802.1x Capability Settings window To set up the Switch's 802.1x port-based authentication, select which unit and ports are to be configured in the Unit and From/To fields.
Page 129: Initialize Ports
DXS-3326GSR Gigabit Layer 3 Switch Parameter Description Unit Unit being configured for 802.1x settings. From and To Ports being configured for 802.1x settings. Capability Two role choices can be selected: Authenticator - A user must pass the authentication process to gain access to the network.
Page 130 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 72. Initialize Port (Port-Based) window...
Page 131 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 73. Initialize Port(s) (MAC-Based) window These two windows allow you to initialize a port or group of ports. The Initialize Port Table in the bottom half of the window displays the current status of the port(s) once you have clicked Apply.
Page 132 DXS-3326GSR Gigabit Layer 3 Switch Figure 6- 74. Reauthenticate Port (Port-Based) window Figure 6- 75. Reauthenticate Port (MAC-Based) window These windows display the following information: Parameter Description Unit The unit where the reauthenticated port resides. Port The port number of the reauthenticated port.
Page 133: Radius Server
DXS-3326GSR Gigabit Layer 3 Switch PortStatus The status of the controlled port can be Authorized, Unauthorized, or N/A. RADIUS Server The RADIUS feature of the Switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. The Web Manager offers three windows.
Page 134: Layer 3 Ip Networking
DXS-3326GSR Gigabit Layer 3 Switch Section 7 Layer 3 IP Networking L3 Global Advanced Settings IP Interfaces Tables MD5 Key Table Configuration Route Redistribution Settings Static/Default Route Route Preference Setting Static ARP Settings RIP Global Settings RIP Interface Settings OSPF...
Page 135: L3 Global Advanced Settings
DXS-3326GSR Gigabit Layer 3 Switch L3 Global Advanced Settings The L3 Global Advanced Settings window allows the user to enable and disable Layer 3 settings and functions from a single window. The full settings and descriptions for these functions will appear later in this section. To view this window, open the Configuration folder and then the Layer 3 IP Networking folder and click on the L3 Global Advanced Settings link to access the following window.
Page 136 DXS-3326GSR Gigabit Layer 3 Switch Sales 1, 2, 3, 4 Backbone 25, 26 Table 7- 1. VLAN Example - Assigned Ports In this case, six IP interfaces are required, so a CIDR notation of 10.32.0.0/11 (or a 11-bit) addressing scheme will work.
Page 137 DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 3. IP Interface Configuration – Add window Figure 7- 4. IP Interface Configuration – Edit window Choose a name for the interface to be added and enter it in the Interface Name field (if you are editing an IP Interface, the Interface Name will already be in the top field as seen in the window above).
Page 138: Md5 Key Table Configuration
The Switch can redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP. Routing information entered into the Static Routing Table on the local DXS-3326GSR switch is also redistributed.
Page 139 DXS-3326GSR Gigabit Layer 3 Switch Routing information source − OSPF and the Static Route table. Routing information will be redistributed to RIP. The following table lists the allowed values for the routing metrics and the types (or forms) of the routing information that will be redistributed.
Page 140: Static/Default Route
DXS-3326GSR Gigabit Layer 3 Switch NOTE: The source protocol (Src Protocol) entry and the destination protocol (Dest Protocol) entry cannot be the same. Static/Default Route Entries into the Switch’s forwarding table can be made using both MAC addresses and IP addresses. Static IP forwarding is accomplished by the entry of an IP address into the Switch’s Static IP Routing Table.
Page 141: Route Preference Setting
DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 8. Static/Default Route Settings – Add window The following fields can be set: Parameter Description IP Address <0.0.0.0> Allows the entry of an IP address that will be a static entry into the Switch’s Routing Table.
Page 142 DXS-3326GSR Gigabit Layer 3 Switch Route Type Validity Range Default Value Local 0 - Permanently set on the switch and unconfigurable. Static 1 - 999 OSPF Intra 1 - 999 OSPF Inter 1 - 999 1 - 999 OSPF ExtT1...
Page 143 DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 9. Current Route Preference Settings window The following fields can be viewed or set: Parameter Description RIP (1-999) Enter a value between 1 and 999 to set the route preference for RIP. The lower the value, the higher the chance the specified protocol will be chosen as the best path for routing packets.
Page 144: Static Arp Settings
DXS-3326GSR Gigabit Layer 3 Switch OSPF ExtT2 (1-999) Enter a value between 1 and 999 to set the route preference for OSPF AS external route type 2. The lower the value, the higher the chance the specified protocol will be chosen as the best path for routing packets.
Page 145: Rip Version 1 Message Format
DXS-3326GSR Gigabit Layer 3 Switch RIP measures distance by an integer count of the number of hops from one network to another. A router is one hop from a directly connected network, two hops from a network that can be reached through a router, etc. The more routers between a source and a destination, the greater the RIP distance (or hop count).
Page 146: Rip Global Settings
DXS-3326GSR Gigabit Layer 3 Switch RIP 1 Message RIP is not limited to TCP/IP. Its address format can support up to 14 octets (when using IP, the remaining 10 octets must be zeros). Other network protocol suites can be specified in the Family of Source Network field (IP has a value of 2). This will determine how the address field is interpreted.
Page 147 DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 13. RIP Interface Settings window Click the hyperlinked name of the interface you want to set up for RIP, which will give access to the following window: Figure 7- 14. RIP Interface Settings - Edit window Refer to the table below for a description of the available parameters for RIP interface settings.
Page 148: Ospf
DXS-3326GSR Gigabit Layer 3 Switch Interface Metric A read-only field that denotes the Metric value of the current IP Interface setting. Click Apply to implement changes made. OSPF The Open Shortest Path First (OSPF) routing protocol uses a link-state algorithm to determine routes to network destinations.
Page 149 DXS-3326GSR Gigabit Layer 3 Switch Shortest Path Tree To build Router A’s shortest path tree for the network diagramed below, Router A is put at the root of the tree and the smallest cost link to each destination network is calculated.
Page 150 DXS-3326GSR Gigabit Layer 3 Switch Router A 128.213.0.0 Router B Router C 192.213.11.0 222.211.10.0 Figure 7- 17. Constructing a Shortest Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A. The cost of the link from Router B to Router A, for instance is not important to constructing Router A’s shortest path tree, but is very important when Router B is constructing...
Page 151: Ospf Authentication
DXS-3326GSR Gigabit Layer 3 Switch Router link-state updates are flooded to all routers in the current area. These updates describe the destinations reachable through all of the router’s interfaces. Summary link-state updates are generated by Border Routers to distribute routing information about other networks within the AS.
Page 152: Designated Router Election
DXS-3326GSR Gigabit Layer 3 Switch Neighbors Routers that are connected to the same area or segment become neighbors in that area. Neighbors are elected via the Hello protocol. IP multicast is used to send out Hello packets to other routers on the segment. Routers become neighbors when they see themselves listed in a Hello packet sent by another router on the same segment.
Page 153: Ospf Packet Formats
DXS-3326GSR Gigabit Layer 3 Switch Adjacencies on Point-to-Point Interfaces OSPF Routers that are linked using point-to-point interfaces (such as serial links) will always form adjacencies. The concepts of DR and BDR are unnecessary. OSPF Packet Formats All OSPF packet types begin with a standard 24-byte header and there are five packet types. The header is described first, and each packet type is described in a subsequent section.
Page 154 DXS-3326GSR Gigabit Layer 3 Switch Checksum A standard IP checksum that includes all of the packet’s contents except for the 64-bit authentication field. Authentication Type The type of authentication to be used for the packet. Authentication A 64-bit field used by the authentication scheme.
Page 155 DXS-3326GSR Gigabit Layer 3 Switch Router Dead Interval The number of seconds that must pass before declaring a silent router as down. Designated Router The identity of the DR for this network, in the view of the advertising router. The DR is identified here by its IP interface address on the network.
Page 156 DXS-3326GSR Gigabit Layer 3 Switch indicates the opposite. DD Sequence Number User to sequence the collection of Database Description Packets. The initial value (indicated by the Initial bit being set) should be unique. The DD sequence number then increments until the complete database description has been sent.
Page 157 DXS-3326GSR Gigabit Layer 3 Switch Link-State Update Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Number of Advertisements Link-State Advertisements ... Figure 7- 22. Link-State Update Packet The body of the Link-State Update packet consists of a list of link-state advertisements. Each advertisement begins with a common 20-byte header, the link-state advertisement header.
Page 158 DXS-3326GSR Gigabit Layer 3 Switch Link-State Advertisement Formats There are five distinct types of link-state advertisements. Each link-state advertisement begins with a standard 20-byte link- state advertisement header. Succeeding sections then diagram the separate link-state advertisement types. Each link-state advertisement describes a piece of the OSPF routing domain. Every router originates a router links advertisement.
Page 159: Router Links Advertisements
DXS-3326GSR Gigabit Layer 3 Switch depend on the advertisement’s Link State Type. Advertising Router The Router ID of the router that originated the Link State Advertisement. For example, in network links advertisements this field is set to the Router ID of the network’s Designated Router.
Page 160 DXS-3326GSR Gigabit Layer 3 Switch In router links advertisements, the Link State ID field is set to the router’s OSPF Router ID. The T - bit is set in the advertisement’s Option field if and only if the router is able to calculate a separate set of routes for each IP Type of Service (TOS).
Page 161: Network Links Advertisements
DXS-3326GSR Gigabit Layer 3 Switch values that are not specified defaults to the TOS 0 cost. Metrics must be listed in order of increasing TOS encoding. For example, the metric for TOS 16 must always follow the metric for TOS 8 when both are specified.
Page 162: Autonomous Systems External Link Advertisements
DXS-3326GSR Gigabit Layer 3 Switch Summary Link Advertisements Link-State Age Options Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Network Mask Metric Figure 7- 27. Summary Link Advertisements For stub area, Type 3 summary link advertisements can also be used to describe a default route on a per-area basis. Default summary routes are used in stub area instead of flooding a complete set of external routes.
Page 163: Ospf Global Settings
DXS-3326GSR Gigabit Layer 3 Switch AS External Link Advertisements Link-State Age Options Link-State ID Advertising Router Link-State Sequence Number Link-State Checksum Length Network Mask Metric Forwarding Address External Route Tag Figure 7- 28. AS External Link Advertisements Field Description Network Mask The IP address mask for the advertised destination.
Page 164: Ospf Area Id Setting
DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 29. OSPF Global Settings window The following parameters are used for general OSPF configuration: Parameter Description A 32-bit number (in the same format as an IP address − xxx.xxx.xxx.xxx) that uniquely OSPF Route ID identifies the Switch in the OSPF domain.
Page 165: Ospf Interface Settings
DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 31. OSPF Area ID Setting Example window See the parameter descriptions below for information on the OSPF Area ID Settings. The Area ID settings are as follows: Parameter Description Area ID A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the OSPF area in the OSPF domain.
Page 166 DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 33. OSPF Interface Settings – Edit window Configure each IP interface individually using the OSPF Interface Settings - Edit menu. Click the Apply button when you have entered the settings. The new configuration appears listed in the OSPF Interface Settings window. To return to...
Page 167: Ospf Virtual Interface Settings
DXS-3326GSR Gigabit Layer 3 Switch divisible by the Hello Interval. State Allows the OSPF interface to be disabled for the selected area without changing the configuration for that area. Auth. Type This field can be toggled between None, Simple, and MD5 using the space bar. This allows a choice of authorization schemes for OSPF packets that may be exchanged over the OSPF routing domain.
Page 168 DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 35. OSPF Virtual Link Setting – Add window Configure the following parameters if you are adding or changing an OSPF Virtual Interface: Parameter Description Transit Area ID Allows the entry of an OSPF Area ID − previously defined on the Switch − that allows a remote area to communicate with the backbone (area 0).
Page 169: Ospf Area Aggregation Settings
DXS-3326GSR Gigabit Layer 3 Switch NOTE: For OSPF to function properly some settings should be identical on all participating OSPF devices. These settings include the Hello Interval and Dead Interval. For networks using authorization for OSPF devices, they Authorization Type and Password or Key used must likewise be identical.
Page 170: Ospf Host Route Settings
DXS-3326GSR Gigabit Layer 3 Switch Network Mask The corresponding network mask for the Network Number specified above. LSDB Type Specifies the type of address aggregation, which is set at Summary. Advertisement Select Enabled or Disabled to determine whether the selected OSPF Area will advertise it’s summary LSDB (Network-Number and Network-Mask).
Page 171: Dhcp/Bootp Relay
DXS-3326GSR Gigabit Layer 3 Switch DHCP/BOOTP Relay The BOOTP hops count limit allows the maximum number of hops (routers) that the BOOTP messages can be relayed through to be set. If a packet’s hop count is more than the hop count limit, the packet is dropped. The range is between 1 and 16 hops, with a default value of 4.
Page 172: Dns Relay
DXS-3326GSR Gigabit Layer 3 Switch The following parameters may be configured or viewed. Parameter Description Interface The IP interface on the Switch that will be connected directly to the Server. Server IP Enter the IP address of the DHCP/BOOTP server. Up to four Server IPs can be...
Page 173: Dns Relay Static Setting
DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 42. DNS Global Settings window The following fields can be set: Parameter Description DNS Relay Status This field can be toggled between Disabled and Enabled using the pull-down menu, <Disabled> and is used to enable or disable the DNS Relay service on the Switch.
Page 174: Vrrp
DXS-3326GSR Gigabit Layer 3 Switch VRRP VRRP or Virtual Routing Redundancy Protocol is a function on the Switch that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router that controls the IP address associated with a virtual router is called the Master, and will forward packets sent to this IP address.
Page 175 DXS-3326GSR Gigabit Layer 3 Switch Parameter Description Interface Name An IP interface name that has been enabled for VRRP. This entry must have been previously set in the IP Interface Table window. Authentication type Displays the type of authentication used to compare VRRP packets received by a virtual router.
Page 176 DXS-3326GSR Gigabit Layer 3 Switch This IP interface must be assigned to a VLAN on the Switch. VRID (1-255) Enter a value between 1 and 255 to uniquely identify this VRRP group on the Switch. All routers participating in this group must be assigned the same VRID value. This value MUST be different from other VRRP groups set on the Switch.
Page 177 DXS-3326GSR Gigabit Layer 3 Switch will require the user to enter an alphanumeric string of no more than 8 characters to identify VRRP packets received by a router. IP will require the user to enter a MD5 message digest for authentication in comparing VRRP messages received by the router.
Page 178: Ip Multicast Routing Protocol
DXS-3326GSR Gigabit Layer 3 Switch Interface on the network. Virtual IP Address The IP address of the Virtual router configured on the Switch. Virtual MAC Address The MAC address of the device that holds the Virtual router. Virtual Router State Displays the current status of the virtual router.
Page 179 DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 48. IGMP Interface Table window To configure IGMP for a particular interface, click the corresponding hyperlink for that IP interface. This will open the IGMP Interface Configuration window: Figure 7- 49. IGMP Interface Configuration window This window allows the configuration of IGMP for each IP interface configured on the Switch.
Page 180: Dvmrp Global Settings
DXS-3326GSR Gigabit Layer 3 Switch Max Response Time Sets the maximum amount of time allowed before sending an IGMP response report. (1-25) <10> A value between 1 and 25 seconds can be entered, with a default of 10 seconds. A tuning variable to allow for subnetworks that are expected to lose a large number of Robustness Variable (1-255) <2>...
Page 181: Pim
DXS-3326GSR Gigabit Layer 3 Switch Figure 7- 51. first DVMRP Interface Settings window Figure 7- 52. second DVMRP Interface Settings window The following fields can be set: Parameter Description Interface Name Displays the name of the IP interface for which DVMRP is to be configured. This must <System>...
Page 182 DXS-3326GSR Gigabit Layer 3 Switch messages indicating that there are no multicast members on their respective branches. PIM-DM then removes these branches (‘prunes’ them) from the multicast delivery tree. Because a member of a pruned branch of a multicast delivery tree may want to join a multicast delivery group (at some point in the future), the protocol periodically removes the ‘prune’...
Page 183 DXS-3326GSR Gigabit Layer 3 Switch IP Address Displays the IP address for the IP interface named above. Hello Interval (1-18724 This field allows an entry of between 1 and 18724 seconds and determines the sec) <30> interval between sending Hello packets to other routers on the network. The default is 30 seconds.
Page 184: Security Management
DXS-3326GSR Gigabit Layer 3 Switch Section 8 Security Management Security IP User Accounts Access Authentication Control (TACACS) Policy and Parameters Application Authentication Settings Authentication Server Group Authentication Server Host Login Method Lists Enable Method Lists Local Enable Password Enable Admin...
Page 185: User Accounts
DXS-3326GSR Gigabit Layer 3 Switch Use the Security IP Management window to permit remote stations to manage the Switch. If you choose to define one or more designated management stations, only the chosen stations, as defined by IP address, will be allowed management privilege through the web manager or Telnet session.
Page 186: Access Authentication Control
DXS-3326GSR Gigabit Layer 3 Switch To delete the user account, click on the Delete button for that user on the User Account Management window. To change the password, type in the New Password and retype it in the Confirm New Password entry field. The level of privilege (Admin or User) can be viewed in the Access Right field.
Page 187: Policy And Parameters
DXS-3326GSR Gigabit Layer 3 Switch order TACACS/XTACACS/TACACS+/RADIUS security function work properly, TACACS/XTACACS/TACACS+/RADIUS server must be configured on a device other than the Switch, called an Authentication Server Host and it must include usernames and passwords for authentication. When the user is prompted by...
Page 188: Application Authentication Settings
DXS-3326GSR Gigabit Layer 3 Switch 255) the user. The user may set a time between 0 and 255 seconds. The default setting is 30 seconds. User Attempts (1-255) This command will configure the maximum number of times the Switch will accept authentication attempts.
Page 189 DXS-3326GSR Gigabit Layer 3 Switch To view the following window, click Security Management > Access Authentication Control > Authentication Server Group: Figure 8- 7. Authentication Server Group Settings window This window displays the Authentication Server Groups on the Switch. The Switch has four built-in Authentication Server Groups that cannot be removed but can be modified.
Page 190: Authentication Server Host
DXS-3326GSR Gigabit Layer 3 Switch NOTE: The user must configure Authentication Server Hosts using the Authentication Server Hosts window before adding hosts to the list. Authentication Server Hosts must be configured for their specific protocol on a remote centralized server before this function can work properly.
Page 191: Login Method Lists
DXS-3326GSR Gigabit Layer 3 Switch Parameter Description IP Address The IP address of the remote server host the user wishes to add. Protocol The protocol used by the server host. The user may choose one of the following: TACACS - Enter this parameter if the server host utilizes the TACACS •...
Page 192 DXS-3326GSR Gigabit Layer 3 Switch Figure 8- 12. Login Method Lists Settings window The Switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login Method List defined by the user, click the under the Delete heading corresponding to the entry desired to be deleted.
Page 193: Enable Method Lists
DXS-3326GSR Gigabit Layer 3 Switch Method 1, 2, 3, 4 The user may add one, or a combination of up to four of the following authentication methods to this method list: tacacs - Adding this parameter will require the user to be authenticated •...
Page 194 DXS-3326GSR Gigabit Layer 3 Switch To delete an Enable Method List defined by the user, click the under the Delete heading corresponding to the entry desired to be deleted. To modify an Enable Method List, click on its hyperlinked Method List Name. To configure a Method List, click the Add button.
Page 195: Local Enable Password
DXS-3326GSR Gigabit Layer 3 Switch xtacacs - Adding this parameter will require the user to be authenticated • using the XTACACS protocol from a remote XTACACS server. tacacs+ - Adding this parameter will require the user to be authenticated •...
Page 196: Secure Socket Layer (Ssl)
DXS-3326GSR Gigabit Layer 3 Switch Figure 8- 19. Enable Admin window When this window appears, click the Enable Admin button revealing a dialog box for the user to enter authentication (password, username), as seen below. A successful entry will promote the user to Administrator level privileges on the Switch.
Page 197: Download Certificate
DXS-3326GSR Gigabit Layer 3 Switch 3. Hash Algorithm: This part of the ciphersuite allows the user to choose a message digest function which will determine a Message Authentication Code. This Message Authentication Code will be encrypted with a sent message to provide integrity and prevent against replay attacks. The Switch supports two hash algorithms, MD5 (Message Digest 5) and SHA (Secure Hash Algorithm).
Page 198 DXS-3326GSR Gigabit Layer 3 Switch When the SSL function has been enabled, the web will become disabled. To manage the Switch through the web-based management while utilizing the SSL function, the web browser must support SSL encryption and the header of the URL must begin with https://.
Page 199: Secure Shell (Ssh)
SSL are not available on the web-based management of this Switch and need to be configured using the command line interface. For more information on SSL and its functions, see the DXS-3326GSR Command Line Reference Manual, located on the documentation CD of this product.
Page 200: Ssh Algorithm
DXS-3326GSR Gigabit Layer 3 Switch Figure 8- 23. Current SSH Configuration Settings window To configure the SSH server on the Switch, modify the following parameters and click Apply: Parameter Description SSH Server Status Use the pull-down menu to enable or disable SSH on the Switch. The default is Disabled.
Page 201 DXS-3326GSR Gigabit Layer 3 Switch Figure 8- 24. Authentication Mode Configuration window The following algorithms may be set: Parameter Description Authentication Mode Configuration Password This field may be enabled or disabled to choose if the administrator wishes to use a locally configured password for authentication on the Switch.
Page 202: Ssh User Authentication
DXS-3326GSR Gigabit Layer 3 Switch Encryption Algorithm 3DES-CBC Use the pull-down to enable or disable the Triple Data Encryption Standard encryption algorithm with Cipher Block Chaining. The default is Enabled. Blow-fish CBC Use the pull-down to enable or disable the Blowfish encryption algorithm with Cipher Block Chaining.
Page 203 DXS-3326GSR Gigabit Layer 3 Switch Figure 8- 25. Current Accounts window In the example window above, the User Account “Hedo” has been previously set using the User Accounts window in the Security Management folder. A User Account MUST be set in order to set the parameters for the SSH user. To configure the parameters for a SSH user, click on the hyperlinked User Name in the Current Accounts window, which will reveal the following window to configure.
Page 204 DXS-3326GSR Gigabit Layer 3 Switch NOTE: To set the SSH User Authentication parameters on the Switch, a User Account must be previously configured. For more information on configuring local User Accounts on the Switch, see the User Accounts section of this manual located in this section.
Page 205: Snmp Manager
The DXS-3326GSR supports the SNMP versions 1, 2c, and 3. You can specify which version of the SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 206: Snmp User Table
SNMP version used for specific tasks. The DXS-3326GSR supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The administrator can specify the SNMP version used to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 207 DXS-3326GSR Gigabit Layer 3 Switch Parameter Description User Name An alphanumeric string of up to 32 characters. This is used to identify the SNMP users. This name is used to specify the SNMP group created can request SNMP messages. Group Name SNMP Version V1 - Indicates that SNMP version 1 is in use.
Page 208: Snmp View Table
DXS-3326GSR Gigabit Layer 3 Switch has been checked. This field will require the user to enter a password. SHA - Specifies that the HMAC-SHA authentication protocol will be used. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked.
Page 209: Snmp Group Table
DXS-3326GSR Gigabit Layer 3 Switch Figure 9- 5. SNMP View Table Configuration window The SNMP Group created with this table maps SNMP users (identified in the SNMP User Table window) to the views created in the previous window. The following parameters can set:...
Page 210 DXS-3326GSR Gigabit Layer 3 Switch To display the current settings for an existing SNMP Group Table entry, click the hyperlink for the entry under the Group Name. Figure 9- 7. SNMP Group Table Display window To add a new entry to the Switch's SNMP Group Table, click the Add button in the upper left-hand corner of the SNMP Group Table window.
Page 211: Snmp Community Table
DXS-3326GSR Gigabit Layer 3 Switch centralized distributed network management strategies. includes improvements in the Structure of Management Information (SMI) and adds some security features. SNMPv3 - Specifies that the SNMP version 3 will be used. SNMPv3 provides secure access to devices through a combination of authentication and encrypting packets over the network.
Page 212: Snmp Host Table
DXS-3326GSR Gigabit Layer 3 Switch managers access to MIB objects in the Switch's SNMP agent. View Name Type an alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch. The view name must exist in the SNMP View Table.
Page 213: Snmp Engine Id
DXS-3326GSR Gigabit Layer 3 Switch SNMP Version V1 - To specifies that SNMP version 1 will be used. V2 - To specify that SNMP version 2 will be used. V3-NoAuth-NoPriv - To specify that the SNMP version 3 will be used, with a NoAuth-NoPriv security level.
Page 214: Monitoring
DXS-3326GSR Gigabit Layer 3 Switch Section 10 Monitoring Port Utilization CPU Utilization Packets Received (RX) UMB_cast (RX) Transmitted (TX) Errors Received (RX) Transmitted (TX) Size Packet Size Stacking Information Device Status MAC Address Switch History Log IGMP Snooping Group IGMP Snooping Forward...
Page 215: Port Utilization
DXS-3326GSR Gigabit Layer 3 Switch DVMRP Monitor Browse DVMRP Routing Table Browse DVMRP Neighbor Address Table Browse DVMRP Routing Next Hop Table PIM Monitor PIM Neighbor Address Table Port Utilization The Port Utilization window displays the percentage of the total available bandwidth being used on the port.
Page 216: Cpu Utilization
DXS-3326GSR Gigabit Layer 3 Switch Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Select number of times the Switch will be polled between 20 and 200. The default Record Number value is 200.
Page 217: Packets
DXS-3326GSR Gigabit Layer 3 Switch Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) Click the Received (RX) link in the Packets folder of the Monitoring menu to view the following graph of packets received on the Switch.
Page 218 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 4. Rx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Unit Select the unit to display statistics for. Port Select the port to display statistics for.
Page 219: Umb Cast (Rx)
DXS-3326GSR Gigabit Layer 3 Switch View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. UMB Cast (RX) Click the UMB Cast (RX) link in the Packets folder of the Monitoring menu to view the following graph of UMB cast packets received on the Switch.
Page 220 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 6. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Unit Select the unit to display statistics for. Port Select the port to display statistics for.
Page 221: Transmitted (Tx)
DXS-3326GSR Gigabit Layer 3 Switch Transmitted (TX) Click the Transmitted (TX) link in the Packets folder of the Monitoring menu to view the following graph of packets transmitted from the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 222 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 8. Tx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Unit Select the unit to display statistics for. Port Select the port to display statistics for.
Page 223: Errors
DXS-3326GSR Gigabit Layer 3 Switch View Table Clicking this button instructs the Switch to display a table rather than a line graph. View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table.
Page 224 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 10. Rx Error Analysis window (table) The following fields can be set: Parameter Description Unit Select the unit to display statistics for. Port Select the port to display statistics for. Clear Clicking this button clears all statistics counters on this window.
Page 225: Transmitted (Tx)
DXS-3326GSR Gigabit Layer 3 Switch Show/Hide Check whether or not to display Crc Error, Under Size, Over Size, Fragment, Jabber, and Drop errors. View Table Clicking this button instructs the Switch to display a table rather than a line graph.
Page 226 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 12. Tx Error Analysis window (table) The following fields may be set or viewed: Parameter Description Select the unit to display statistics for. Unit Port Select the port to display statistics for. Clear Clicking this button clears all statistics counters on this window.
Page 227: Size
DXS-3326GSR Gigabit Layer 3 Switch View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table.
Page 228 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 14. Rx Size Analysis window (table) The following fields can be set or viewed: Parameter Description Unit Select the unit to display statistics for. Port Select the port to display statistics for. Clear Clicking this button clears all statistics counters on this window.
Page 229: Stacking Information
DXS-3326GSR Gigabit Layer 3 Switch 1024-1518 The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets). Show/Hide Check whether or not to display 64, 65-127, 128-255, 256-511, 512-1023, and 1024-1518 packets received.
Page 230: Device Status
Displays the priority ID of the Switch. The lower the number, the higher the priority. The box (switch) with the lowest priority number in the stack denotes the Master switch. The DXS-3326GSR will always be the master switch in a Star topology. Prom Version Shows the PROM in use for the Switch.
Page 231: Mac Address
DXS-3326GSR Gigabit Layer 3 Switch MAC Address This allows the Switch's dynamic MAC address forwarding table to be viewed. When the Switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table. These entries are then used to forward packets through the Switch.
Page 232: Switch History Log
DXS-3326GSR Gigabit Layer 3 Switch Parameter Description VLAN Name Enter a VLAN Name for the forwarding table to be browsed by. MAC Address Enter a MAC address for the forwarding table to be browsed by. Unit – Port Select the switch Unit ID of the switch in thye Switch stack and then the port by using the corresponding pull-down menus.
Page 233: Igmp Snooping Group
DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 1 . Switch History window The Switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC connected to the console manager. Click Next to go to the next page of the Switch History Log. Clicking Clear will allow the user to clear the Switch History Log.
Page 234: Igmp Snooping Forward
Port Member These are the ports where the IGMP packets were snooped are displayed. NOTE: To configure IGMP snooping for the DXS-3326GSR, go to the Configuration folder and select IGMP. Configuration and other information concerning IGMP snooping may be found in Section 6 of this manual under IGMP.
Page 235: Browse Router Port
DXS-3326GSR Gigabit Layer 3 Switch The following field can be viewed: Parameter Description VLAN Name The VLAN Name of the multicast group. Source IP The Source IP address of the multicast group. Multicast Group The IP address of the multicast group.
Page 236 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 2 . Authenticator State (Port-Based 802.1x) window...
Page 237 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 2 . Show Authenticator State (MAC-Based 802.1x) window This window displays the Authenticator Status for individual ports on a selected device. To select unit within the switch stack, use the pull-down menu at the top of the window and click Apply. A polling interval between 1 and 60 seconds can be set using the drop-down menu at the top of the window and clicking OK.
Page 238: Authenticator Statistics
DXS-3326GSR Gigabit Layer 3 Switch Backend State The Backend Authentication State can be Request, Response, Success, Fail, Time- out, Idle, Initialize, or N/A. N/A (Not Available) indicates that the port's authenticator capability is disabled. Port Status Controlled Port Status can be Authorized, Unauthorized, or N/A.
Page 239: Authenticator Session-Statistics
DXS-3326GSR Gigabit Layer 3 Switch Rx RespId The number of EAP Resp/Id frames that have been received by this Authenticator. Rx Resp The number of valid EAP Response frames (other than Resp/Id frames) that have been received by this Authenticator.
Page 240: Authenticator Diagnostics
DXS-3326GSR Gigabit Layer 3 Switch Octets Tx The number of octets transmitted in user data frames on this port during the session. Frames Rx The number of user data frames received on this port during the session. Frames Tx The number of user data frames transmitted on this port during the session.
Page 241 DXS-3326GSR Gigabit Layer 3 Switch The following fields can be viewed: Parameter Description Port The identification number assigned to the Port by the System in which the Port resides. Connect Enter Counts the number of times that the state machine transitions to the CONNECTING state from any other state.
Page 242: Radius Authentication
DXS-3326GSR Gigabit Layer 3 Switch AccessChallenges Counts the number of times that the state machine receives an initial Access- Challenge packet from the Authentication server (i.e., aReq becomes TRUE, causing exit from the RESPONSE state). Indicates that the Authentication Server has communication with the Authenticator.
Page 243: Radius Accounting
DXS-3326GSR Gigabit Layer 3 Switch AuthServerAddr The (conceptual) table listing the RADIUS authentication servers with which the client shares a secret. The UDP port the client is using to send requests to this server. ServerPortNumber RoundTripTime The time interval (in hundredths of a second) between the most recent Access- Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.
Page 244 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 2 . RADIUS Accounting window The user may also select the desired time interval to update the statistics, between 1s and 60s, where “s” stands for seconds. The default value is one second. To clear the current statistics shown, click the Clear button in the top left hand corner.
Page 245: Layer 3 Feature
The number of RADIUS packets, which were received from this server on the accounting port and dropped for some other reason. Note: To configure 802.1x features for the DXS-3326GSR, go to the Configuration folder and select Port Access Entity. Configuration and other information concerning 802.1x may be found in Section 6 of this...
Page 246: Browse Routing Table
DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 2 . IP Address Table window Browse Routing Table The Browse Routing Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This window shows the current IP routing table of the Switch. To find a specific IP route, enter an IP address into the Destination Address field along with a proper subnet mask into the Mask field and click Find.
Page 247: Browse Arp Table
DXS-3326GSR Gigabit Layer 3 Switch Browse ARP Table The ARP Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This window will show current ARP entries on the Switch. To search a specific ARP entry, enter an interface name into the Interface Name or an IP address and click Find.
Page 248: Browse Igmp Group Table
DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 3 . IP Multicast Forwarding Table window Browse IGMP Group Table The IGMP Group Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This window will show current IGMP group entries on the Switch.
Page 249: Browse Ospf Neighbor Table
DXS-3326GSR Gigabit Layer 3 Switch To browse the OSPF LSDB Table, you first must select which browse method you want to use in the Search Type field. The choices are All, Area ID, Advertise Router ID, LSDB, Area ID & Advertise Router ID, Area ID & LSDB, and Advertise Router ID &...
Page 250: Dvmrp Monitor
Switch. This folder, found in the Monitoring folder, offers three windows for monitoring: Browse DVMRP Routing Table, Browse DVMRP Neighbor Address Table and Browse DVMRP Routing Next Hop Table. Information on DVMRP and its features in relation to the DXS-3326GSR can be found in Section 6, under IP Multicast Routing Protocol.
Page 251: Pim Monitor
DXS-3326GSR Gigabit Layer 3 Switch Browse DVMRP Neighbor Address Table This table, found in the Monitoring menu under DVMRP Monitor > Browse DVMRP Neighbor Address Table contains information about DVMRP neighbors of the Switch. To search this table, enter either an Interface Name or Neighbor Address into the respective field and click the Find button.
Page 252 DXS-3326GSR Gigabit Layer 3 Switch Figure 10- 4 . PIM Neighbor Table window To search this table, enter either an Interface Name or Neighbor Address into the respective field and click the Find button. PIM neighbors of that entry will appear in the PIM Neighbor Table window.
Page 253: Maintenance
DXS-3326GSR Gigabit Layer 3 Switch Section 11 Maintenance TFTP Services Download Firmware Download Configuration File Upload Configuration Upload Log Multiple Image Services Firmware Information Config Firmware Image Ping Test Save Changes Reset Reboot Device Logout TFTP Services Trivial File Transfer Protocol (TFTP) services allow the Switch’s firmware to be upgraded by transferring a new firmware file from a TFTP server to the Switch.
Page 254: Download Configuration File
DXS-3326GSR Gigabit Layer 3 Switch Select the Image ID of the firmware. The DXS-3326GSR can hold two firmware images in its memory. Image ID 1 will always be the boot up firmware for the Switch unless specified by the user. Information on configuring Image IDs can be found in this section, under the heading Multiple Image Services.
Page 255: Multiple Image Services
Multiple Image Services The Multiple Image Services folder allows users of the DXS-3326GSR to configure and view information regarding firmware located on the Switch. The Switch allows two firmware images to be stored in its memory and either can be configured to be the boot up firmware for the Switch.
Page 256: Config Firmware Image
DXS-3326GSR Gigabit Layer 3 Switch upgrade through Telnet. S - If the IP address has this letter attached to it, it denotes a firmware • upgrade through the Simple Network Management Protocol (SNMP). W - If the IP address has this letter attached to it, it denotes a firmware •...
Page 257: Save Changes
Start to initiate the PING program. Save Changes The DXS-3326GSR has two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective clicking the Apply button. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
Page 258: Reset
DXS-3326GSR Gigabit Layer 3 Switch log) Save All (Save config Clicking the radio button for this entry will save both the current switch configuration and log) and the current log file to NV-RAM. Once the Switch configuration settings have been saved to NV-RAM, they become the default settings for the Switch, and one of the following three windows will appear depending on which option you choose in the Save Settings window.
Page 259: Reboot Device
DXS-3326GSR Gigabit Layer 3 Switch NOTE: Only the Reset System option will enter the factory default parameters into the Switch’s non-volatile RAM, and then restart the Switch. All other options enter the factory defaults into the current configuration, but do not save this configuration. Reset System will return the Switch’s configuration to the state it was when it left the...
Page 260: Logout
DXS-3326GSR Gigabit Layer 3 Switch Logout Use the Logout page to logout of the Switch’s Web-based management agent by clicking on the Log Out button. Figure 11- 14. Logout Web Setups window...
Page 261: Single Ip Management
SIM allows intermediate devices that do not support SIM. This enables the user to manage switches that are more than one hop away from the CS. The SIM group is a group of switches that are managed as a single entity. The DXS-3326GSR may take on three different roles: 1.
Page 262: Sim Settings
3. Candidate Switch (CaS) - This is a switch that is ready to join a SIM group but is not yet a member of the SIM group. The Candidate Switch may join the SIM group through an automatic function of the DXS-3326GSR, or by manually configuring it to be a MS of a SIM group.
Page 263: Topology
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 2. SIM Settings window (enabled) The following parameters can be set: Parameters Description SIM State Use the pull-down menu to either enable or disable the SIM state on the Switch. Disabled will render all SIM functions on the Switch inoperable.
Page 264 DXS-3326GSR Gigabit Layer 3 Switch Clicking the here link will setup the Java Runtime Environment on your server and lead you to the topology window, as seen below. Figure 12- 4. Single IP Management Tree View window The Tree View window holds the following information under the Data tab:...
Page 265 DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 5. Topology view This window will display how the devices within the Single IP Management Group are connected to other groups and devices. Possible icons in this screen are as follows: Icon Description...
Page 266: Tool Tips
DXS-3326GSR Gigabit Layer 3 Switch Layer 2 candidate switch Layer 3 candidate switch Unknown device Non-SIM devices Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
Page 267: Group Icon
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 7. Port Speed Utilizing the Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it.
Page 268: Commander Switch Icon
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 9. Property window Commander Switch Icon Figure 12- 1 . Right-clicking a Commander Icon The following options may appear for the user to configure: Collapse - To collapse the group that will be represented by a single icon.
Page 269: Member Switch Icon
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 1 . Property window Member Switch Icon Figure 12- 1 . Right-Clicking a Member icon The following options may appear for the user to configure: Collapse - To collapse the group that will be represented by a single icon.
Page 270: Candidate Switch Icon
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 1 . Property window Candidate Switch Icon Figure 12- 1 . Right-Clicking a Candidate icon The following options may appear for the user to configure: Collapse - To collapse the group that will be represented by a single icon.
Page 271: Menu Bar
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 1 . Device Property window This window holds the following information: Parameter Description Device Name This field will display the Device Name of the switches in the SIM group configured by the user. If no Device Name is configured by the name, it will be given the name default and tagged with the last six digits of the MAC Address to identify it.
Page 272: Firmware Upgrade
About - Will display the SIM information, including the current SIM version. • NOTE: Upon this firmware release, some functions of the SIM can only be configured through the Command Line Interface. See the DXS-3326GSR Command Line Interface Reference Manual for more information on SIM and its configurations.
Page 273: Configuration File Backup/Restore
DXS-3326GSR Gigabit Layer 3 Switch Figure 12- 1 . Firmware Upgrade window Configuration File Backup/Restore This window is used to both backup and restore configuration files from the Commander Switch to the Member Switch using a TFTP server. Member Switches will be listed in the table and will be specified by Port (port on the CS where the MS resides), MAC Address, Model Name and Version.
Page 274: Technical Specifications
DXS-3326GSR Gigabit Layer 3 Switch Appendix A Technical Specifications Physical and Environmental AC Input & External 100 – 120; 200 - 240 VAC, 50/60 Hz (internal universal power supply) Redundant Power Supply Power Consumption 66 watts maximum DC Fans 2 built-in 40 x 40 x10 mm fans...
Page 275 DXS-3326GSR Gigabit Layer 3 Switch EIA/ TIA- 568 150-ohm STP (100 meters max.) 100BASE-TX UTP Cat. 5 (100 meters max.) EIA/TIA-568 150 -ohm STP (100 meters max.) 1000BASE-T UTP Cat. 5e (100 meters max.) 1000BASE-LX Single-mode fiber module (10km) 1000BASE-SX...
Page 276: Cables And Connectors
DXS-3326GSR Gigabit Layer 3 Switch Appendix B Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagrams and tables show the standard RJ-45 receptacle/connector and their pin assignments.
Page 277: Cable Lengths
DXS-3326GSR Gigabit Layer 3 Switch Appendix C Cable Lengths Use the following table to as a guide for the maximum cable lengths. Standard Media Type Maximum Distance Mini-GBIC 1000BASE-LX, Single-mode fiber module 10km 1000BASE-SX, Multi-mode fiber module 550m 1000BASE-LHX, Single-mode fiber module...
Page 278: Glossary
DXS-3326GSR Gigabit Layer 3 Switch Glossary 1000BASE-LX: A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-SX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX: 100Mbps Ethernet implementation over fiber.
Page 279 DXS-3326GSR Gigabit Layer 3 Switch IP address: Internet Protocol address. A unique identifier for a device attached to a network using TCP/IP. The address is written as four octets separated with full-stops (periods), and is made up of a network section, an optional subnet section and a host section.
Page 280 DXS-3326GSR Gigabit Layer 3 Switch UDP - User Datagram Protocol: An Internet standard protocol that allows an application program on one device to send a datagram to an application program on another device. VLAN - Virtual LAN: A group of location- and topology-independent devices that communicate as if they are on a common physical LAN.
Page 281 URL: www.dlink-france.fr URL: www.dlink.com.au Russia Netherlands India Grafsky per., 14, floor 6 Weena 290 Moscow D-Link House, Kurla Bandra Complex Road, 3012 NJ Rotterdam 129626 Russia Off CST Road, Santacruz (East), Mumbai - Netherlands TEL: 7-095-744-0099 400098. FAX: 7-095-744-0099 #350...
Page 282 Spare parts and spare kits Ninety (90) days D-Link’s sole obligation shall be to repair or replace the defective Hardware during the Warranty Period at no charge to the original owner or to refund at D-Link’s sole discretion. Such repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement Hardware need not be new or have an identical make, model or part.
Page 283 Link, with shipping charges prepaid. Expedited shipping is available if shipping charges are prepaid by the customer and upon request. D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package.
Page 284 For detailed warranty outside the United States, please contact corresponding local D-Link office. Register online your D-Link product at http://support.dlink.com/register/...
Page 285: Registration Card
8. What category best describes your company? Aerospace Engineering Education Finance Hospital Legal Insurance/Real Estate Manufacturing Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product? _______________________________________________________________________________________...

D-Link DXS-3326GSR Manual

Preface

Intended Readers

Notes, Notices, and Cautions

Safety Instructions

Introduction

Installation

Connecting the Switch

Introduction to Switch Management

Introduction to Web-Based Switch Configuration

Configuration

Layer 3 IP Networking

Security Management

SNMP Manager

Monitoring

Maintenance

Single IP Management

Appendix A

Appendix B

Appendix C

Glossary

Quick Links

Related Manuals for D-Link DXS-3326GSR

Summary of Contents for D-Link DXS-3326GSR