Page 1: User Manual
User Manual DES-6500 Product Model: Modular Layer 3 Chassis Ethernet Switch Release 3.5...
Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Table of Contents Preface................................xi Intended Readers..................................xii Typographical Conventions ..................................xii Notes, Notices, and Cautions ............................... xii Safety Instructions..................................xiii Safety Cautions ......................................xiii General Precautions for Rack-Mountable Products .............................xiv Protecting Against Electrostatic Discharge ..............................xv Introduction..............................1 Switch Description ..................................
Page 4 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP-Based Management...................................13 Command Line Console Interface through the Serial Port..........................13 Connecting the Console Port (RS-232 DCE)............................13 First Time Connecting to the Switch................................15 Password Protection......................................17 SNMP Settings......................................18 Traps ........................................18 MIBs ........................................18 IP Address Assignment ....................................19 Connecting Devices to the Switch ................................20 Introduction to Web-based Switch Configuration ..................21...
Page 5 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VLANs......................................55 Understanding IEEE 802.1p Priority................................55 VLAN Description......................................55 Notes about VLANs in the xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch ..............55 IEEE 802.1Q VLANs ....................................56 802.1Q VLAN Tags....................................57 Port VLAN ID ......................................58 Tagging and Untagging ...................................58 Ingress Filtering .......................................58 Default VLANs......................................59...
Page 6 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Client ........................................112 Authentication Process ..................................113 Understanding 802.1x Port-based and MAC-based Network Access Control ....................114 Port-Based Network Access Control................................114 MAC-Based Network Access Control ................................115 802.1x Auth Mode Settings..................................116 802.1X Authenticator Settings ..................................116 Local Users ......................................118 PAE System Control ....................................119 Port Capability .......................................119...
Page 7 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Register and Register Suppression Messages ............................167 Assert Messages.....................................168 PIM-DM Interface Configuration ................................168 PIM Global Settings....................................168 PIM Interface Settings ....................................168 PIM Candidate BSR Settings ..................................170 PIM Parameter Settings ....................................171 PIM Candidate RP Global Settings ................................172 PIM Candidate RP Settings..................................172 PIM Register Checksum Settings................................173 PIM Static RP Settings....................................174...
Page 8 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP Settings......................................204 SNMP Trap Settings ....................................205 SNMP User Table .......................................205 SNMP View Table ......................................207 SNMP Group Table ....................................208 SNMP Community Table....................................210 SNMP Host Table .......................................211 SNMP Engine ID ......................................212 Monitoring ..............................213 CPU Utilization..................................
Page 9 Ping Test ....................................259 Traceroute ....................................259 Save Configuration..................................260 Reset......................................260 Reboot Device.................................... 260 Logout ......................................261 D-Link Single IP Management ........................262 Single IP Management (SIM) Overview............................ 262 SIM Using the Web Interface..............................263 Topology ....................................265 Tool Tips....................................267 Right Click........................................267 Group Icon......................................268...
Page 10 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Firmware Downgrade Procedure ................................287 Appendix C ..............................293 Cables and Connectors...................................293 Appendix D ..............................294 Cable Lengths ......................................294 Glossary ................................295 Warranties and Registration ............................... 297 Tech Support ..............................308 International Offices ....................................336...
Page 11: Preface
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Preface The xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features. Section 2, Installation- Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch.
Page 12: Intended Readers
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Intended Readers The xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention Description...
Page 13: Safety Instructions
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( ) is used to indicate cautions and precautions that you need to review and follow.
Page 14: General Precautions For Rack-Mountable Products
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual • Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip. •...
Page 15: Protecting Against Electrostatic Discharge
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual NOTE: A qualified electrician must perform all connections to DC power and to safety grounds. All electrical wiring must comply with applicable local or national codes and practices. CAUTION: Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground conductor.
Page 16: Introduction
Switch Description The xStack DES-6500 layer 3 modular chassis Ethernet switch is a member of the D-Link xStack family. Ranging from 10/100Mbps edge switches to core gigabit switches, the xStack switch family has been future-proof designed to provide a stacking architecture with fault tolerance, flexibility, port density, robust security and maximum throughput with a user-friendly management interface for the networking professional.
Page 17 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual High performance switching engine performs forwarding and filtering at full wire speed up to 160Gbps. • Full- and half-duplex for all gigabit ports. Full duplex allows the switch port to simultaneously transmit and receive •...
Page 18: Des-6504 12-Port 100Base-Fx (Sff) Fast Ethernet Switch Module
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The xStack DES-6500 Layer 3 modular chassis Ethernet switch contains 9 slots to install the following available modules: DES-6501 Backplane chassis • DES-6502 Management Module • DES-6506 Patch Panel for 24 port RJ45 •...
Page 19: Des-6508 16-Port 10Base-T/100Base-Tx Fast Ethernet Switch Module
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DES-6508 16-port 10BASE-T/100BASE-TX Fast Ethernet Switch module Sixteen 10BASE-T/100BASE-TX ports • Fully compliant with IEEE802.3 10BASE-T, IEEE802.3u • 100BASE-TX All of 10/100Mbps ports support auto-negotiation • Back pressure Flow Control support for Half-duplex mode •...
Page 20: Ethernet Technology
Today's switches are an ideal solution to most kinds of local area network congestion problems. NOTE: For customers interested in D-View, D-Link Corporation's proprietary SNMP management software, go to the D-Link Website (www.dlink.com.cn) and download the software and manual.
Page 21: Front-Panel Components And Led Indicators
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Front-Panel Components and LED Indicators The front panel of the Switch consists of LED indicators for Power, System, Reset and Alarm Off. Also on the front panel resides a RS-232 communication port. Figure 1- 1.
Page 22: Installation
This Manual with Registration Card. • If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Before You Connect to the Network The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
Page 23: Installing The Switch Without The Rack
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Installing the Switch without the Rack When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity.
Page 24: Mounting The Switch In A Standard 19" Rack
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Mounting the Switch in a Standard 19" Rack Figure 2- 3. Installing Switch in a rack Power On Plug one end of the AC power cord into the power connector of the Switch and the other end into the local power source outlet. After the Switch is powered on, the LED indicators will momentarily blink.
Page 25: Connecting The Switch
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 3 Connecting the Switch Switch To End Node Switch to Hub or Switch Connecting To Network Backbone or Server NOTE: All high-performance N-Way Ethernet ports can support both MDI- II and MDI-X connections.
Page 26: Switch To Hub Or Switch
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Switch to Hub or Switch These connections can be accomplished in a number of ways using a normal cable. A 10BASE-T hub or switch can be connected to the Switch via a twisted-pair Category 3, 4 or 5 UTP/STP cable. •...
Page 27: Using The Xstack Des-6500 Layer 3 Modular Chassis Ethernet Switch As A Network Backbone
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Using the xStack DES-6500 Layer 3 modular chassis Ethernet switch as a Network Backbone The xStack DES-6500 chassis switch can be employed as a network backbone for offices or buildings that require many Ethernet connections within a confined space.
Page 28: Introduction To Switch Management
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 4 Introduction to Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface through the Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to the Switch Password Protection SNMP Settings...
Page 29 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual 2. Connect the other end of the cable to a terminal or to the serial connector of a computer running terminal emulation software. Set the terminal emulation software as follows: 3.
Page 30: First Time Connecting To The Switch
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual First Time Connecting to the Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch. NOTE: The passwords used to access the Switch are case-sensitive;...
Page 31 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 4- 3. Command Prompt NOTE: The first user automatically gets Administrator level privileges. It is recommended to create at least one Admin-level user account for the Switch.
Page 32: Password Protection
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Password Protection The xStack DES-6500 chassis switch does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If logging in using a predefined administrator-level user name, users will have privileged access to the Switch's management software.
Page 33: Snmp Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices.
Page 34: Ip Address Assignment
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IP Address Assignment Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch's default IP address is 10.90.90.90. The default Switch IP address can be changed to meet the specification of specific networking address schemes.
Page 35: Connecting Devices To The Switch
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 4- 5. Assigning the Switch an IP Address In the above example, the Switch was assigned an IP address of 10.53.13.144 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully.
Page 36: Introduction To Web-Based Switch Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 5 Introduction to Web-based Switch Configuration Introduction Logging on to the Web Manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software functions of the xStack DES-6500 chassis switch can be managed, configured and monitored via the embedded web- based (HTML) interface.
Page 37: Web-Based User Interface
Area 1 Select the menu or window to be displayed. The folder icons can be opened to display the hyper- linked menu buttons and subfolders contained within them. Click the D-Link logo to go to the D-Link website. Area 2 Presents a graphical near real-time image of the front panel of the Switch.
Page 38: Web Pages
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Web Pages When you connect to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list and description of the main folders available in the web interface: Configurations - Contains screens concerning configurations for IP Address, Switch Information, Advanced Settings, Port Configuration, Port Mirroring, IGMP, Spanning Tree, Forwarding Filtering, VLANs, Port Bandwidth, SNTP Settings, Port...
Page 39: Configuring The Switch
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 6 Configuring the Switch Switch Information Switch IP Settings Advanced Settings Port Configuration Port Mirroring Configuration Link Aggregation IGMP Snooping Spanning Tree Forward & Filtering VLAN Traffic Control Port Security Port Lock Entries System Log Server System Severity Log...
Page 40: Switch Information
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Switch Information The subsections below describe how to change some of the basic settings for the Switch such as changing IP settings and assigning user names and passwords for management access privileges, as well as how to save the changes and restart the Switch. Click the Switch Information link in the Configuration menu.
Page 41: Switch Ip Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Switch IP Settings The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address has not yet been changed, read the introduction of the xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI or return to Section 4 of this manual for more information.
Page 42: Setting The Switch's Ip Address Using The Console Interface
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Manual Allows the entry of an IP address, Subnet Mask, and a Default Gateway for the Switch. These fields should be of the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal form) between 0 and 255.
Page 43: Advanced Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Advanced Settings The Advanced Settings window contains the main settings for all major functions for the Switch. To view the Advanced Settings window, click its link in the Configuration folder. This will enable the following window to be viewed and configured. Figure 6- 3.
Page 44 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual GVRP Status Use this pull-down menu to enable or disable GVRP on the Switch. Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet, choose Disabled.
Page 45: Port Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Configuration This section contains information for configuring various attributes and properties for individual physical ports, including port speed and address learning. Clicking on Port Configurations in the Configuration menu will display the following window for the user: Figure 6- 4.
Page 46 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Flow Control Displays the flow control scheme used for the various port configurations. Ports configured for full-duplex use 802.3x flow control, half-duplex ports use backpressure flow control, and Auto ports use an automatic selection of the two. The default is Disabled. Learning Enable or disable MAC address learning for the selected ports.
Page 47: Port Mirroring Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Mirroring Configuration The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
Page 48: Link Aggregation
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Link Aggregation Understanding Port Trunk Groups Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline. The xStack DES-6500 chassis switch supports up to 32 port trunk groups with 2 to 8 ports in each group. A potential bit rate of 8000 Mbps can be achieved.
Page 49 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent. NOTE: If any ports within the trunk group become disconnected, packets intended for the disconnected port will be load shared among the other uplinked ports of the link aggregation group.
Page 50 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 8. Link Aggregation Group Configuration window – Add Figure 6- 9. Link Aggregation Group Configuration window - Modify The user-changeable parameters are as follows: Parameter Description Group ID Select an ID number for the group, between 1 and 32.
Page 51: Lacp Port Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Unit Choose the unit of the switch in the chassis to be configured. Choose Member Ports Choose the members of a trunked group. 2 to 8 ports can be assigned to an individual group.
Page 52: Igmp Snooping
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IGMP Snooping Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch.
Page 53 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VLAN Name This is the VLAN Name that, along with the VLAN ID, identifies the VLAN for which to modify the IGMP Snooping Settings. Query Interval The Query Interval field is used to set the time (in seconds) between transmitting IGMP queries.
Page 54: Static Router Port Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Static Router Port Settings A static router port is a port that has a multicast router attached to it. Generally, this router would have a connection to a WAN or to the Internet.
Page 55: Spanning Tree
STP will be familiar to most networking professionals. However, since 802.1w RSTP and 802.1s MSTP has been recently introduced to D-Link managed Ethernet switches, a brief introduction to the technology is provided below followed by a description of how to set up 802.1d STP, 802.1w RSTP and 802.1s MSTP.
Page 56: Port Transition States
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Transition States An essential difference between the three protocols is in the way ports transition to a forwarding state and in the way this transition relates to the role of the port (forwarding or not forwarding) in the topology. MSTP and RSTP combine the transition states disabled, blocking and listening used in 802.1d and creates a single state Discarding.
Page 57: Stp Loopback Detection
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual STP Loopback Detection When connected to other switches, STP is an important configuration in consistency for delivering packets to ports and can greatly improve the throughput of your switch. Yet, even this function can malfunction with the emergence of STP BPDU packets that occasionally loopback to the Switch, such as BPDU packets looped back from an unmanaged switch connected to the DES- 6500.
Page 58: Stp Bridge Global Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual STP Bridge Global Settings To open the following window, open the Spanning Tree folder in the Configuration menu and click the STP Bridge Global Settings link. Figure 6- 15. STP Bridge Global Settings – STP compatible and RSTP (default) Figure 6- 16.
Page 59 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Max Age The Max Age may be set to ensure that old information does not endlessly circulate through redundant paths in the network, preventing the effective propagation of the new information. Set by the Root Bridge, this value will aid in determining that the Switch has spanning tree configuration values consistent with other devices on the bridged LAN.
Page 60: Mst Configuration Identification
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual MST Configuration Identification The following screens in the MST Configuration Table window allow the user to configure a MSTI instance on the Switch. These settings will uniquely identify a multiple spanning tree instance set on the Switch. The Switch initially possesses one CIST or Common Internal Spanning Tree of which the user may modify the parameters for but cannot change the MSTI ID for, and cannot be deleted.
Page 61 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description MSTI ID Enter a number between 1 and 15 to set a new MSTI on the Switch. Type Create is selected to create a new MSTI. No other choices are available for this field when creating a new MSTI.
Page 62 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description MSTI ID Displays the MSTI ID previously set by the user. Type This field allows the user to choose a desired method for altering the MSTI settings. The user has 2 choices.
Page 63: Mstp Port Information
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual MSTP Port Information This window displays the current MSTI configuration settings and can be used to update the port configuration for an MSTI ID. If a loop occurs, the MSTP function will use the port priority to select an interface to put into the forwarding state. Set a higher priority value for interfaces to be selected for forwarding first.
Page 64: Stp Instance Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual STP Instance Settings The following window displays MSTIs currently set on the Switch. To view the following table, click Configuration > Spanning Tree > STP Instance Settings: Figure 6- 23. STP Instance Settings The following information is displayed: Parameter Description...
Page 65 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The following parameters may be viewed in the STP Instance Operational Status windows: Parameter Description Designated Root Bridge This field will show the priority and MAC address of the Root Bridge. External Root Cost This defines a metric that indicates the relative cost of forwarding packets to the specified port list.
Page 66: Stp Port Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual STP Port Settings STP can be set up on a port per port basis. To view the following window click Configuration > Spanning Tree > STP Port Settings: Figure 6- 26. STP Port Settings and Table window In addition to setting Spanning Tree parameters for use on the switch level, the Switch allows for the configuration of groups of ports, each port-group of which will have its own spanning tree, and will require some of its own configuration settings.
Page 67 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Migration Setting this parameter as "yes" will set the ports to send out BPDU packets to other bridges, requesting information on their STP setting If the Switch is configured for RSTP, the port will be capable to migrate from 802.1d STP to 802.1w RSTP.
Page 68: Forwarding & Filtering
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Forwarding & Filtering Unicast Forwarding Open the Forwarding & Filtering folder in the Configuration menu and click on the Unicast Forwarding link. This will open the Setup Static Unicast Forwarding Table, as shown below: Figure 6- 27.
Page 69 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 29. Setup Static Multicast Forwarding Table The following parameters can be set: Parameter Description Unit Choose the Switch ID number of the Switch in the switch stack to be modified. The VLAN ID of the VLAN to which the corresponding MAC address belongs.
Page 70: Vlans
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VLANs Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing traffic on a network where many different types of data may be transmitted simultaneously. It is intended to alleviate problems associated with the delivery of time critical data over congested networks.
Page 71: Ieee 802.1Q Vlans
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IEEE 802.1Q VLANs Some relevant terms: Tagging - The act of putting 802.1Q VLAN information into the header of a packet. Untagging - The act of stripping 802.1Q VLAN information out of the packet header. Ingress port - A port on a switch where packets are flowing into the Switch and VLAN decisions must be made.
Page 72: 802.1Q Vlan Tags
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet's EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
Page 73: Port Vlan Id
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another with the VLAN information intact. This allows 802.1Q VLANs to span network devices (and indeed, the entire network, if all network devices are 802.1Q compliant).
Page 74: Default Vlans
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual This process is referred to as ingress filtering and is used to conserve bandwidth within the Switch by dropping packets that are not on the same VLAN as the ingress port at the point of reception. This eliminates the subsequent processing of packets that will just be dropped by the destination port.
Page 75: Vlan And Trunk Groups
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VLAN and Trunk Groups The members of a trunk group have the same VLAN setting. Any VLAN setting on the members of a trunk group will apply to the other member ports. NOTE: In order to use VLAN segmentation in conjunction with port trunk groups, first set the port trunk group(s), and then configure VLAN settings.
Page 76: Vlan Entry
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VLAN Entry In the Configuration folder, open the VLAN folder and click the VLAN Entry link to open the following window: Figure 6- 33. Current 802.1Q Static VLANs Entries window The 802.1Q Static VLANs menu lists all previously configured VLANs by VLAN ID and VLAN Name.
Page 77 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Unit Choose the Switch ID number of the line card in the chassis to be modified. VID (VLAN ID) Allows the entry of a VLAN ID in the Add dialog box, or displays the VLAN ID of an existing VLAN in the Modify dialog box.
Page 78 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual vines - Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol. This packet header information is defined by the Banyan Virtual Integrated Network Service (VINES) Protocol.
Page 79: Gvrp Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual GVRP Settings In the Configuration menu, open the VLANs folder and click GVRP Settings. The GVRP Settings dialog box, shown below, allows users to determine whether the Switch will share its VLAN configuration information with other GARP VLAN...
Page 80: Traffic Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Traffic Control On a computer network, packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure. At times, this traffic may increase do to a malicious endstation on the network or a malfunctioning device, such as a faulty network card.
Page 81 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Storm Control Recover Unit Select the Unit of the line card in the chassis where the Shutdown port resides. From… To Select the ports to be manually recovered from the Shutdown state. Storm Trap Configuration Storm Trap Enable sending of Storm Trap messages when the type of action taken by the Traffic Control...
Page 82 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Interval The Interval will set the time between Multicast and Broadcast packet counts sent from the Switch’s chip to the Traffic Control function. These packet counts are the determining factor in deciding when incoming packets exceed the Threshold value.
Page 83: Port Security
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Security A given ports’ (or a range of ports') dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be locked by using the Admin State pull-down menu to Enabled, and clicking Apply.
Page 84: Port Lock Entries
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Lock Entries The Port Lock Entry Delete window is used to remove an entry from the port security entries learned by the Switch and entered into the forwarding database. To view the following window, click Configuration > Port Lock Entries: Figure 6- 39.
Page 85: Qos
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The xStack DES-6500 chassis switch supports 802.1p priority queuing Quality of Service. The following section discusses the implementation of QoS (Quality of Service) and the benefits of using 802.1p priority queuing. The Advantages of QoS QoS is an implementation of the IEEE 802.1p standard that allows network administrators a method of reserving bandwidth for important functions that require a large bandwidth or have a high priority, such as VoIP (voice-over Internet Protocol), web...
Page 86: Understanding Qos
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Understanding QoS The Switch has eight priority classes of service, one of which is internal and not configurable. These priority classes of service are labeled as 6, the high class to 0, the lowest class. The eight priority tags, specified in IEEE 802.1p are mapped to the Switch's priority classes of service as follows: Priority 0 is assigned to the Switch's Q2 class.
Page 87: Bandwidth Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. In the Configuration folder, click QoS > Bandwidth Control, to view the screen shown below. Figure 6- 41.
Page 88: Qos Scheduling Mechanism
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual QoS Scheduling Mechanism This drop-down menu allows a selection between a Weight Fair and a Strict mechanism for emptying the priority classes. In the Configuration menu open the QoS folder and click QoS Scheduling Mechanism, to view the screen shown below. Figure 6- 42.
Page 89: Qos Output Scheduling
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual QoS Output Scheduling QoS can be customized by changing the output scheduling used for the hardware classes of service in the Switch. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority classes of service is affected.
Page 90: Configuring The Combination Queue
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Configuring the Combination Queue Utilizing the QoS Output Scheduling Configuration window shown above, the xStack DES-6500 chassis switch can implement a combination queue for forwarding packets. This combination queue allows for a combination of strict and weight-fair (weighted round-robin “WRR”) scheduling for emptying given classes of service.
Page 91: 802.1P Default Priority
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. In the Configuration folder open the QoS folder and click 802.1p Default Priority, to view the screen shown below. Figure 6- 45.
Page 92: Traffic Segmentation
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Traffic Segmentation Traffic segmentation is used to limit traffic flow from a single port to a group of ports on either a single Switch (in standalone mode) or a group of ports on another switch in a switch stack. This method of segmenting the flow of traffic is similar to using VLANs to limit traffic, but is more restrictive.
Page 93 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The Unit drop-down menu under the Setup Forwarding ports heading allows users to select a line card from the chassis using that line card’s Unit ID. The Forward Port click boxes allow users to select which of the ports on the selected line card will be able to forward packets.
Page 94: System Log Server
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual System Log Server The Switch can send Syslog messages to up to four designated servers using the System Log Host window. In the Configuration folder, click System Log Server, to view the screen shown below. Figure 6- 49.
Page 95 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual UUCP subsystem clock daemon security/authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 (local0) local use 1 (local1) local use 2 (local2) local use 3 (local3) local use 4 (local4) local use 5 (local5) local use 6 (local6)
Page 96: System Severity Log
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual System Severity Log The System Severity Log allows users to configure where and when events occurring on the Switch will be recorded. These events are classified by the Switch into the following three categories: Information –...
Page 97: Sntp Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNTP Settings Time Settings To configure the time settings for the Switch, open the Configuration folder, then the SNTP folder and click on the Time Settings link, revealing the following screen for the user to configure. Figure 6- 52.
Page 98: Time Zone And Dst
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Time Zone and DST The following are screens used to configure time zones and Daylight Savings time settings for SNTP. Open the Configuration folder, then the SNTP folder and click on the Time Zone and DST link, revealing the following screen. Figure 6- 53.
Page 99 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual From: Month Enter the month DST will start on. From: Time in Enter the time of day that DST will start on. HH:MM To: Which Day Enter the week of the month the DST will end. Enter the day of the week that DST will end.
Page 100: Access Profile Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Access Profile Table Access profiles allow users to establish criteria to determine whether the Switch will forward packets based on the information contained in each packet's header. These criteria can be specified on a basis of VLAN, MAC address, IP address or IPv6 address. Due to a chipset limitation, the Switch supports a maximum of 8 access profiles.
Page 101: Configuring The Access Profile Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Due to a backward compatibility issue, when a user upgrades to R3 firmware (3.00-B33), all settings previously configured for any ACL function (CPU ACL included) on the Switch will be lost. We recommend that the user save a configuration file of current settings before upgrading to R3 firmware.
Page 102 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header. • Select IP to instruct the Switch to examine the IP address in each frame's header. •...
Page 103 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Select IPv6 to instruct the Switch to examine the IPv6 part of each packet header. • VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding.
Page 104 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 57. Access Profile Configuration window (Packet Content Mask) This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask: Parameter Description...
Page 105 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 58. Access Profile Configuration window (IPv6) The following parameters can be set, for IP: Parameter Description Type in a unique identifier number for this profile set. This value can be set from 1 - 8. Profile ID (1-8) Type Select profile based on Ethernet (MAC Address), IP address, Packet Content Mask or IPv6.
Page 106: Parameters Description
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 59. Access Rule Table To remove a previously created rule, select it and click the button. To add a new Access Rule, click the Add button: Figure 6- 60. Access Rule Configuration window - Ethernet. To set the Access Rule for Ethernet, adjust the following parameters and click Apply.
Page 107 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual CoS queue specified previously by the user. replace priority − Click the corresponding box to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 108 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 62. Access Rule Table window – IP To create a new rule set for an access profile click the Add button. A new window is displayed. To remove a previously created rule, click the corresponding button.
Page 109 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual queue specified previously by the user. Replace priority with − Click the corresponding box to re-write the 802.1p default priority of a packet to the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue.
Page 110 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 65. Access Rule Table (Packet Content Mask) To remove a previously created rule, select it and click the button. To add a new Access Rule, click the Add button: Figure 6- 66.
Page 111 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual This parameter can be specified to re-write the 802.1p default priority previously set in the Priority Switch, which is used to determine the CoS queue to which packets are forwarded. Once this field is specified, packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user.
Page 112 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual To configure the Access Rule for IPv6, open the Access Profile Table and click Modify for an IPv6 entry. This will open the following screen: Figure 6- 68. Access Rule Table Click Add to open the next screen to configure the IPv6 entry for an access rule.
Page 113 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Priority This parameter is specified to re-write the 802.1p default priority previously set in the Switch, which is used to determine the CoS queue to which packets are forwarded. Once this field is specified, packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user.
Page 114: Cpu Interface Filtering
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual CPU Interface Filtering Due to a chipset limitation and needed extra switch security, the xStack DES-6500 chassis switch incorporates CPU Interface filtering. This added feature increases the running security of the Switch by enabling the user to create a list of access rules for packets destined for the Switch’s CPU interface.
Page 115 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 73. CPU Interface Filtering Configuration window – Ethernet Parameter Description Profile ID (1-5) Type in a unique identifier number for this profile set. This value can be set from 1 - 5. Type Select profile based on Ethernet (MAC Address), IP address or Packet Content Mask.
Page 116 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 74. CPU Interface Filtering Configuration window- IP Parameter Description Type in a unique identifier number for this profile set. This value can be set from 1 - 5. Profile ID (1-5) Type Select profile based on Ethernet (MAC Address), IP address or Packet Content Mask.
Page 117 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The page shown below is the Packet Content Mask configuration window. Figure 6- 75. CPU Interface Filtering Configuration window- Packet Content This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask: Parameter Description...
Page 118 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual To establish the rule for a previously created CPU Access Profile: In the Configuration folder, click the CPU Interface Filtering > CPU Interface Filtering State to open the CPU Interface Filtering Table.
Page 119 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameters Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 120 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The following window is the CPU Interface Filtering Rule Table for IP. Figure 6- 80. CPU Interface Filtering Rule Table – IP To create a new rule set for an access profile click the Add button. A new window is displayed. To remove a previously created rule, click the corresponding button.
Page 121 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VLAN Name Allows the entry of a name for a previously configured VLAN. Source IP Source IP Address - Enter an IP Address mask for the source IP address. Destination IP Destination IP Address- Enter an IP Address mask for the destination IP address.
Page 122 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 84. CPU Interface Filtering Rule Configuration - Packet Content To set the Access Rule for Ethernet, adjust the following parameters and click Apply. Parameters Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below).
Page 123 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 85. CPU Interface Filtering Rule Display – Packet Content...
Page 124: Safeguard Engine
Developed by D-Link, the Safeguard Engine is a robust and innovative technology which will automatically reduce the negative impact of repeated packet flooding to the Switch's CPU. As a result, D-Link Switches will be better protected from frequent interruptions by malicious viruses or worm attacks.
Page 125 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 86. Safeguard Engine Settings window To configure, set the following parameters and click Apply. Parameter Description Safeguard Engine Settings State Use the pull-down menu to globally enable or disable the Safeguard Engine settings for the Switch.
Page 126: Port Access Entity (802.1X)
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.1x standard is a security measure for authorizing and authenticating users to gain access to various wired or wireless devices on a specified Local Area Network by using a Client and Server based access control model.
Page 127: Authentication Server
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch). Clients connected to a port on the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any services offered by the Switch on the LAN.
Page 128: Authentication Process
Figure 6- 92. The 802.1x Authentication Process The D-Link implementation of 802.1x allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-Based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network.
Page 129: Understanding 802.1X Port-Based And Mac-Based Network Access Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Understanding 802.1x Port-based and MAC-based Network Access Control The original intent behind the development of 802.1X was to leverage the characteristics of point-to-point in LANs. As any single LAN segment in such infrastructures has no more than two devices attached to it, one of which is a Bridge Port. The Bridge Port detects events that indicate the attachment of an active device at the remote end of the link, or an active device becoming inactive.
Page 130: Mac-Based Network Access Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X Client Client Client Client Client Client Client Client Client Client Client Client...
Page 131: 802.1X Auth Mode Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual 802.1x Auth Mode Settings The following window is used to set the type of authentication mode used in employing the 802.1X security settings. Simply use the pull down menu to select Port-based or MAC-based 802.1X and click the Apply button. Figure 6- 95.
Page 132 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 97. 802.1X Authenticator Settings – Modify window This screen allows you to set the following features: Parameter Description Unit Choose the Switch ID number of the line card in the chassis to be modified. From [ ] To [ ] Enter the port or ports to be set.
Page 133: Local Users
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual QuietPeriod This allows the user to set the number of seconds that the Switch remains in the quiet state following a failed authentication exchange with the client. The default setting is 60 seconds. SuppTimeout This value determines timeout conditions in the exchanges between the Authenticator and the client.
Page 134: Pae System Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PAE System Control Existing 802.1x port and MAC settings are displayed and can be configured using the windows below. Port Capability Click Port Access Entity > PAE System Control > 802.1x Capability Settings to view the following window: Figure 6- 99.
Page 135: Initializing Ports For Port Based 802.1X
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Initializing Ports for Port Based 802.1x Existing 802.1x port and MAC settings are displayed and can be configured using the window below. Click Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 6- 100.
Page 136: Initializing Ports For Mac Based 802.1X
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Initializing Ports for MAC Based 802.1x To initialize ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advanced Settings window. Click Configuration > Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 6- 101.
Page 137: Reauthenticate Port(S) For Mac-Based 802.1X
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Unit Choose the Switch ID number of the line card in the chassis to be modified. Port The port number of the reauthenticated port. Displays the physical address of the Switch where the port resides. MAC Address Auth PAE State The Authenticator State will display one of the following: Initialize, Disconnected, Connecting,...
Page 138: Radius Server
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual RADIUS Server The RADIUS feature of the Switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. The Web Manager offers three windows. Click Configuration >...
Page 139: Layer 3 Ip Networking
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Layer 3 IP Networking Layer 3 Global Advanced Settings The L3 Global Advanced Settings window allows the user to enable and disable Layer 3 settings and functions from a single window.
Page 140: Ip Multinetting
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IP Multinetting IP Multinetting is a function that allows multiple IP interfaces to be assigned to the same VLAN. This is beneficial to the administrator when the number of IPs on the original interface is insufficient and the network administrator wishes not to resize the interface.
Page 141 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Any IP address from the allowed range of IP addresses for each subnet can be chosen as an IP address for an IP interface on the switch. For this example, we have chosen the next IP address above the network address for the IP interface’s IP Address: VLAN Name Network Number IP Address...
Page 142 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual fields. Pull the State pull-down menu to Enabled and click Apply to enter to make the IP interface effective. To view entries in the IP Interface Table, click the Show All IP Interface Entries hyperlink.
Page 143: Md5 Key Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual MD5 Key Configuration The MD5 Key Configuration menu allows the entry of a sixteen-character Message Digest − version 5 (MD5) key which can be used to authenticate every packet exchanged between OSPF routers. It is used as a security mechanism to limit the exchange of network topology information to the OSPF routing domain.
Page 144: Route Redistribution Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Route Redistribution Settings Route redistribution allows routers on the network, which are running different routing protocols to exchange routing information. This is accomplished by comparing the routes stored in the various routers routing tables and assigning appropriate metrics. This information is then exchanged among the various routers according to the individual routers current routing protocol.
Page 145: Static/Default Route Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Static/Default Route Settings Entries into the Switch’s forwarding table can be made using both MAC addresses and IP addresses. Static IP forwarding is accomplished by the entry of an IP address into the Switch’s Static IP Routing Table. To view the following window, click Configuration >...
Page 146 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Backup State Allows the user to configure the type of IP route entries on the Switch. Default – Choosing this parameter will allow the user to configure the default gateway for the next hop router only.
Page 147: Static Arp Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Static ARP Table The Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses into physical addresses. This table allows network managers to view, define, modify and delete ARP information for specific devices. Static entries can be defined in the ARP Table.
Page 148: Rip
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The Routing Information Protocol is a distance-vector routing protocol. There are two types of network devices running RIP - active and passive. Active devices advertise their routes to others through RIP messages, while passive devices listen to these messages.
Page 149: Rip Global Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual RIP 1 Message RIP is not limited to TCP/IP. Its address format can support up to 14 octets (when using IP, the remaining 10 octets must be zeros). Other network protocol suites can be specified in the Family of Source Network field (IP has a value of 2). This will determine how the address field is interpreted.
Page 150: Rip Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual RIP Settings RIP settings are configured for each IP interface on the Switch. Click the RIP Interface Settings link in the RIP folder. The menu appears in table form listing settings for IP interfaces currently on the Switch. To configure RIP settings for an individual interface, click on the hyperlinked Interface Name.
Page 151: Ospf
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF The Open Shortest Path First (OSPF) routing protocol uses a link-state algorithm to determine routes to network destinations. A “link” is an interface on a router and the “state” is a description of that interface and its relationship to neighboring routers. The state contains information such as the IP address, subnet mask, type of network the interface is attached to, other routers attached to the network, etc.
Page 152 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 118. Constructing a Shortest Path Tree Router A 128.213.0.0 Router B Router C 192.213.11.0 Router D 222.211.10.0 Figure 6- 119. Constructing a Shortest Path Tree The diagram above shows the network from the viewpoint of Router A. Router A can reach 192.213.11.0 through Router B with a cost of 10 + 5 = 15.
Page 153 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Router A 128.213.0.0 Router B Router C 192.213.11.0 222.211.10.0 Figure 6- 120. Constructing a Shortest Path Tree - Completed Note that this shortest path tree is only from the viewpoint of Router A. The cost of the link from Router B to Router A, for instance is not important to constructing Router A’s shortest path tree, but is very important when Router B is constructing its shortest path tree.
Page 154: Ospf Authentication
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual External link-state updates carry routing information to networks outside the Autonomous System. The Autonomous System Border Router is responsible for generating and distributing these updates. OSPF Authentication OSPF packets can be authenticated as coming from trusted routers by the use of predefined passwords. The default for routers is to use not authentication.
Page 155: Designated Router Election
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual • Authentication − OSPF allows for the configuration of a password for a specific area. Two routers on the same segment and belonging to the same area must also have the same OSPF password before they can become neighbors. •...
Page 156 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Link-State Request packet • Link-State Update packet • Link-State Acknowledgment packet • OSPF Packet Header Every OSPF packet is preceded by a common 24-byte header. This header contains the information necessary for a receiving router to determine if the packet should be accepted for further processing.
Page 157 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Hello Packet Version No. Packet Length Router ID Area ID Checksum Authentication Type Authentication Authentication Network Mask Hello Interval Options Router Priority Router Dead Interval Designated Router Backup Designated Router Neighbor Figure 6- 122.
Page 158 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Database Description Packet Packet Length Version No. Router ID Area ID Checksum Authentication Type Authentication Authentication Reserved I M MS Reserved Options DD Sequence No. Link-State Advertisement Header ... Figure 6- 123. Database Description Packet Field Description Options...
Page 159 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Link-State Request Packet Link-State Request packets are OSPF packet type 3. After exchanging Database Description packets with a neighboring router, a router may find that parts of its topological database are out of date. The Link-State Request packet is used to request the pieces of the neighbor’s database that are more up to date.
Page 160 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Link-State Update Packet Link-State Update packets are OSPF packet type 4. These packets implement the flooding of link-state advertisements. Each Link-State Update packet carries a collection of link-state advertisements one hop further from its origin. Several link-state advertisements may be included in a single packet.
Page 161 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Link-State Advertisement Formats There are five distinct types of link-state advertisements. Each link-state advertisement begins with a standard 20-byte link-state advertisement header. Succeeding sections then diagram the separate link-state advertisement types. Each link-state advertisement describes a piece of the OSPF routing domain.
Page 162 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Link State Advertisement Header All link state advertisements begin with a common 20-byte header. This header contains enough information to uniquely identify the advertisements (Link State Type, Link State ID, and Advertising Router). Multiple instances of the link state advertisement may exist in the routing domain at the same time.
Page 163 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Router Links Advertisements Router links advertisements are type 1 link state advertisements. Each router in an area originates a routers links advertisement. The advertisement describes the state and cost of the router’s links to the area. All of the router’s links to the area must be described in a single router links advertisement.
Page 164 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Field Description Type A quick classification of the router link. One of the following: Type Description Point-to-point connection to another router. Connection to a transit network. Connection to a stub network. Virtual link. Link ID Identifies the object that this router link connects to.
Page 165 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Network Links Advertisements Network links advertisements are Type 2 link state advertisements. A network links advertisement is originated for each transit network in the area. A transit network is a multi-access network that has more than one attached router. The network links advertisement is originated by the network’s Designated router.
Page 166 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Summary Link Advertisements Summary link advertisements are Type 3 and 4 link state advertisements. These advertisements are originated by Area Border routers. A separate summary link advertisement is made for each destination known to the router, that belongs to the Autonomous System (AS), yet is outside the area.
Page 167 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Autonomous Systems External Link Advertisements Autonomous Systems (AS) link advertisements are Type 5 link state advertisements. These advertisements are originated by AS boundary routers. A separate advertisement is made for each destination known to the router that is external to the AS. AS external link advertisements usually describe a particular external destination.
Page 168: Ospf General Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF General Settings The OSPF General Settings menu allows OSPF to be enabled or disabled on the Switch − without changing the Switch’s OSPF configuration. To view the following window, click Configuration > Layer 3 IP Networking > OSPF > General. To enable OSPF, first supply an OSPF Route ID (see below), select Enabled from the State drop-down menu and click the Apply button.
Page 169: Ospf Interface Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 134. OSPF Area Settings example window See the parameter descriptions below for information on the OSPF Area ID Settings. The Area ID settings are as follows: Parameter Description Area ID A 32-bit number in the form of an IP address (xxx.xxx.xxx.xxx) that uniquely identifies the OSPF area in the OSPF domain.
Page 170 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 136. OSPF Interface Settings - Edit window Configure each IP interface individually using the OSPF Interface Settings - Edit menu. Click the Apply button when settings have been entered. The new configuration appears listed in the OSPF Interface Settings table. To return to the OSPF Interface Settings table, click the Show All OSPF Interface Entries link.
Page 171 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Auth Type This field can be toggled between None, Simple, and MD5 using the space bar. This allows a choice of authorization schemes for OSPF packets that may be exchanged over the OSPF routing domain.
Page 172: Ospf Virtual Interface Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF Virtual Interface Settings Click the OSPF Virtual Interface Settings link to view the current OSPF Virtual Interface Settings. There are not virtual interface settings configured by default, so the first time this table is viewed there will be not interfaces listed. To add a new OSPF virtual interface configuration set to the table, click the Add button.
Page 173 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Password/Auth. Key Enter a case-sensitive password for simple authorization or enter the MD5 key you set in the MD5 Key settings menu. Transmit Delay The number of seconds required to transmit a link state update over this virtual link. Transit delay takes into account transmission and propagation delays.
Page 174: Ospf Area Aggregation Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF Area Aggregation Settings Area Aggregation allows all of the routing information that may be contained within an area to be aggregated into a summary LSDB advertisement of just the network address and subnet mask. This allows for a reduction in the volume of LSDB advertisement traffic as well as a reduction in the memory overhead in the Switch used to maintain routing tables.
Page 175: Ospf Host Route Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF Host Route Settings OSPF host routes work in a way analogous to RIP, only this is used to share OSPF information with other OSPF routers. This is used to work around problems that might prevent OSPF information sharing between routers. To configure OSPF host routes, click the OSPF Host Route Settings link.
Page 176: Ip Multicast Routing Protocol
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IP Multicast Routing Protocol The functions supporting IP multicasting are added under the IP Multicast Routing Protocol folder, from the Layer 3 IP Networking folder. IGMP, DVMRP, and PIM can be enabled or disabled on the Switch without changing the individual protocol’s configuration. IGMP Computers and network devices that want to receive multicast transmissions need to inform nearby routers that they will become members of a multicast group.
Page 177: Igmp Version 3
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IGMP version 2 introduces some enhancements such as a method to elect a multicast querier for each LAN, an explicit leave message, and query messages that are specific to a given group. The states a computer will go through to join or to leave a multicast group are shown below: Figure 6- 144.
Page 178 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual part of a report packet. If the filter mode is exclude, traffic is being denied from at least one specific source, yet other hosts may be accepting traffic from the multicast group. If the group timer expires for the multicast group, the filter mode is changed to include and other hosts can receive traffic from the source.
Page 179: Igmp Interface Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IGMP Interface Configuration The Internet Group Multicasting Protocol (IGMP) can be configured on the Switch on a per-IP interface basis. To view the IGMP Interface Table, open the IP Multicast Routing Protocol folder under Configuration and click IGMP Interface Settings. Each IP interface configured on the Switch is displayed in the below IGMP Interface Table dialog box.
Page 180: Dvmrp Interface Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Max Response Time Sets the maximum amount of time allowed before sending an IGMP response report. A value between 1 and 25 seconds can be entered, with a default of 10 seconds. Robustness Variable A tuning variable to allow for subnetworks that are expected to lose a large number of packets.
Page 181 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 148. DVMRP Interface Settings window Figure 6- 149. DVMRP Interface Settings – Edit window The following fields can be set: Parameter Description Interface Name Displays the name of the IP interface for which DVMRP is to be configured. This must be a previously defined IP interface.
Page 182: Pim Protocol
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PIM Protocol PIM or Protocol Independent Multicast is a method of forwarding traffic to multicast groups over the network using any pre- existing unicast routing protocol, such as RIP or OSPF, set on routers within a multicast network. The xStack DES-6500 Series supports two types of PIM, Dense Mode (PIM-DM) and Sparse Mode (PIM-SM).
Page 183: Assert Messages
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Assert Messages At times on the PIM-SM enabled network, parallel paths are created from source to receiver, meaning some receivers will receive the same multicast packets twice. To improve this situation, Assert messages are sent from the receiving device to both multicast sources to determine which single router will send the receiver the necessary multicast data.
Page 184 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 152. PIM Interface Settings – Edit window The following fields can be set: Parameter Description Interface Name This read-only field denotes the IP interface selected to be configured for PIM. IP Address This read-only field denotes the IP address of the IP interface selected to be configured for PIM.
Page 185: Pim Candidate Bsr Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PIM Candidate BSR Settings The following windows are used to configure the Candidate Boot Strap Router (C-BSR) settings for the switch and the priority of the selected IP interface to become the Boot Strap Router (BSR) for the PIM enabled network.
Page 186: Pim Parameter Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PIM Parameter Settings The following window will configure the parameter settings for the PIM distribution tree. To view this window, click Configuration > Layer 3 IP Networking > IP Multicast Routing Protocol > PIM Protocol > PIM Parameter Settings. Figure 6- 155.
Page 187: Pim Candidate Rp Global Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PIM Candidate RP Global Settings The following window is used to set the Parameters for this Switch to become the RP of its distribution tree. To view this window, click Configuration > Layer 3 IP Networking > IP Multicast Routing Protocol > PIM Protocol > PIM Candidate RP Global Settings.
Page 188: Pim Register Checksum Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 6- 158. PIM Candidate RP Settings – Add window The following fields can be viewed or set: Parameter Description Group Address Enter the multicast group address for this CRP. This address must be a class D address. Group Mask Enter the mask for the multicast group address stated above.
Page 189: Pim Static Rp Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PIM Static RP Settings This window is used to view the Static RP settings for this router. To view this window, click Configuration > Layer 3 IP Networking > IP Multicast Routing Protocol > PIM Protocol > PIM Static RP Settings. Figure 6- 161.
Page 190: Dns Relay
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DNS Relay Computer users usually prefer to use text names for computers for which they may want to open a connection. Computers themselves, require 32 bit IP addresses. Somewhere, a database of network devices’ text names and their corresponding IP addresses must be maintained.
Page 191: Dns Relay Static Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DNSR Cache Status This can be toggled between Disabled and Enabled. This determines if a DNS cache will be enabled on the Switch. DNSR Static Table State This field can be toggled using the pull-down menu between Disabled and Enabled. This determines if the static DNS table will be used or not.
Page 192: Dhcp / Bootp Relay
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DHCP / BOOTP Relay The BOOTP hops count limit allows the maximum number of hops (routers) that the BOOTP messages can be relayed through to be set. If a packet’s hop count is more than the hop count limit, the packet is dropped. The range is between 1 and 16 hops, with a default value of 4.
Page 193: Dhcp/Bootp Relay Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DHCP/BOOTP Relay Settings The DHCP/ BOOTP Relay Settings allow the user to set up a server, by IP address, for relaying DHCP / BOOTP information to the Switch. The user may enter a previously configured IP interface on the Switch that will be connected directly to the DHCP/BOOTP server using the following window.
Page 194 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description DHCP Relay Option This field can be toggled between Enabled and Disabled using the pull-down menu. It is State used to enable or disable the DHCP Agent Information Option on the Switch. The default is Disabled.
Page 195: Vrrp
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VRRP VRRP or Virtual Routing Redundancy Protocol is a function on the Switch that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router that controls the IP address associated with a virtual router is called the Master, and will forward packets sent to this IP address.
Page 196: Vrrp Virtual Router Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VRRP Virtual Router Settings The following window will allow the user to view the parameters for the VRRP function on the Switch. To view this window, click Configuration > Layer 3 IP Networking > VRRP > VRRP Virtual Router Settings: Figure 6- 170.
Page 197 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Interface Name Enter the name of a previously configured IP interface for which to create a VRRP entry. This IP interface must be assigned to a VLAN on the Switch. Enter the IP address that will be assigned to the VRRP router.
Page 198 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description VRID Displays the virtual router ID set by the user. This will uniquely identify the VRRP Interface on the network. Interface Name An IP interface name that has been enabled for VRRP. This entry must have been previously set in the IP Interface Settings table.
Page 199: Vrrp Authentication Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual VRRP Authentication Settings The VRRP Authentication Settings window is used to set the authentication for each Interface configured for VRRP. This authentication is used to identify incoming message packets received by a router. If the authentication is not consistent with incoming packets, they will be discarded.
Page 200: Security Management
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 7 Security Management Security IP User Accounts Access Authentication Control (TACACS) Secure Sockets Layer (SSL) Secure Shell (SSH) The following section will aid the user in configuring security functions for the Switch. The Switch includes various functions for security, including TACACS, Security IPs, SSL, and SSH, all discussed in detail in the following section.
Page 201: Admin And User Privileges
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 7- 3. User Accounts Modify Table - Add Add a new user by typing in a User Name, and New Password and retype the same password in the Confirm New Password. Choose the level of privilege (Admin or User) from the Access Right drop-down menu.
Page 202: Secure Shell (Ssh)
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Secure Shell (SSH) SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an insecure network. It allows a secure login to remote host computers, a safe method of executing commands on a remote end node, and will provide secure encrypted and authenticated communication between two non-trusted hosts.
Page 203: Ssh Algorithm
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description SSH Server Status Use the pull-down menu to enable or disable SSH on the Switch. The default is Disabled. Max Session (1-8) Enter a value between 1 and 8 to set the number of users that may simultaneously access the Switch.
Page 204 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The following algorithms may be set: Parameter Description Encryption Algorithm 3DES-CBC Use the pull-down to enable or disable the Triple Data Encryption Standard encryption algorithm with Cipher Block Chaining. The default is Enabled. Blow-fish CBC Use the pull-down to enable or disable the Blowfish encryption algorithm with Cipher Block Chaining.
Page 205: Ssh User Authentication Mode
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SSH User Authentication Mode The following windows are used to configure parameters for users attempting to access the Switch through SSH. To access the following window, click Security Management > Secure Shell > SSH User Authentication. Figure 7- 7.
Page 206: Access Authentication Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Access Authentication Control The TACACS / XTACACS / TACACS+ / RADIUS commands allows secure access to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privilege, he or she is prompted for a password.
Page 207: Authentication Policy & Parameters
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authentication Policy & Parameters This command will enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device will check the Login Method List and choose a technique for user authentication upon login. To access the following window, click Security Management >...
Page 208: Application's Authentication Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Application's Authentication Settings This window is used to configure switch configuration applications (console, Telnet, SSH, web) for login at the user level and at the administration level (Enable Admin) utilizing a previously configured method list. To view the following window, click Security Management >...
Page 209: Authentication Server Group
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authentication Server Group This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to group TACACS/XTACACS/TACACS+/RADIUS server hosts into user-defined categories for authentication using method lists. The user may define the type of server group by protocol or by previously defined server group.
Page 210: Authentication Server Host
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authentication Server Host This window will set user-defined Authentication Server Hosts for the TACACS / XTACACS / TACACS+ / RADIUS security protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the Switch will send authentication packets to a remote TACACS / XTACACS / TACACS+ / RADIUS server host on a remote host.
Page 211: Login Method Lists
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Click Apply to add the server host. Login Method Lists This command will configure a user-defined or default Login Method List of authentication techniques for users logging on to the Switch.
Page 212: Enable Method Lists
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Method List Name Enter a method list name defined by the user of up to 15 characters. The user may add one, or a combination of up to four (4) of the following authentication Method 1, 2, 3, 4 methods to this method list: tacacs - Adding this parameter will require the user to be authenticated using the...
Page 213 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual To delete an Enable Method List defined by the user, click the under the Delete heading corresponding to the entry desired to be deleted. To modify an Enable Method List, click on its hyperlinked Method List Name. To configure a Method List, click the Add button.
Page 214: Local Enable Password
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Local Enable Password This window will configure the locally enabled password for the Enable Admin command. When a user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch.
Page 215 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 7- 2 . Enter Network Password window...
Page 216: Secure Socket Layer (Ssl)
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Secure Socket Layer (SSL) Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication, digital signatures and encryption. These security functions are implemented through the use of a ciphersuite, which is a security string that determines the exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels: 1.
Page 217: Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Certificate File Name Enter the path and the filename of the certificate file to download. This file must have a .der extension. (Ex. c:/cert.der) Key File Name Enter the path and the filename of the key file to download. This file must have a .der extension (Ex.
Page 218 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Configuration SSL Status Use the pull down menu to enable or disable the SSL status on the switch. The default is Disabled. Cache Timeout (60- This field will set the time between a new key exchange between a client and a host using 86400) the SSL function.
Page 219: Snmp Manager
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 8 SNMP Manager SNMP Settings Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices.
Page 220: Snmp Trap Settings
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP settings are configured using the menus located on the SNMP V3 folder of the web manager. Workstations on the network that are allowed SNMP privileged access to the Switch can be restricted with the Management Station IP Address menu. SNMP Trap Settings The following window is used to enable or disable SNMP traps on the Switch.
Page 221 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP Version V1 - Indicates that SNMP version 1 is in use. V2 - Indicates that SNMP version 2 is in use. V3 - Indicates that SNMP version 3 is in use. Auth-Protocol None - Indicates that no authorization protocol is in use.
Page 222: Snmp View Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Auth-Protocol MD5 - Specifies that the HMAC-MD5-96 authentication level will be used. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked.
Page 223: Snmp Group Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual The following parameters can set: Parameter Description Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP View Name view being created. Subtree OID Type the Object Identifier (OID) Subtree for the view.
Page 224 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 8 - 9. SNMP Group Table Configuration – Add window The following parameters can set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users.
Page 225: Snmp Community Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP Community Table Use this table to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the Switch. One or more of the following characteristics can be associated with the community string: An Access List of IP addresses of SNMP managers that are permitted to use the community string to gain access to •...
Page 226: Snmp Host Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP Host Table Use the SNMP Host Table to set up SNMP trap recipients. Open the SNMP Manager folder and click on the SNMP Host Table link. This will open the SNMP Host Table page, as shown below. To delete an existing SNMP Host Table entry, click the corresponding under the Delete heading.
Page 227: Snmp Engine Id
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SNMP Engine ID The Engine ID is a unique identifier used for SNMP V3 implementations. This is an alphanumeric string used to identify the SNMP engine on the Switch. To display the Switch's SNMP Engine ID, open the SNMP Manger folder and click on the SNMP Engine ID link. This will open the SNMP Engine ID Configuration window, as shown below.
Page 228: Monitoring
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 9 Monitoring CPU Utilization Port Utilization Packets Errors Size Stacking Information Device Status MAC Address Switch History Log IGMP Snooping Group IGMP Snooping Forward Browse Router Port Port Access Control Layer 3 Feature Browse IP Address Browse Routing Table...
Page 229: Cpu Utilization
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual CPU Utilization The CPU Utilization displays the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval. To view the CPU Utilization window, open the Monitoring folder and click the CPU Utilization link.
Page 230: Port Utilization
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Utilization The Port Utilization page displays the percentage of the total available bandwidth being used on the port. To view the port utilization, open the Monitoring folder and then the Port Utilization link: Figure 9- 2.
Page 231: Packets
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) Click the Received (RX) link in the Packets folder of the Monitoring menu to view the following graph of packets received on the Switch.
Page 232 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 9- 4. Rx Packets Analysis Table The following fields may be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 233: Umb Cast (Rx)
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual UMB Cast (RX) Click the UMB Cast (RX) link in the Packets folder of the Monitoring menu to view the following graph of UMB cast packets received on the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 234 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 9- 6. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 235: Transmitted (Tx)
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Transmitted (TX) Click the Transmitted (TX) link in the Packets folder of the Monitoring menu to view the following graph of packets transmitted from the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 236 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 9- 8. Tx Packets Analysis window (table for Bytes and Packets) The following fields may be set or viewed: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 237: Errors
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Errors The Web Manager allows port error statistics compiled by the Switch's management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) Click the Received (RX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch.
Page 238 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 7- 2 . Rx Error Analysis window (table) The following fields can be set: Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 239: Transmitted (Tx)
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Transmitted (TX) Click the Transmitted (TX) link in the Error folder of the Monitoring menu to view the following graph of error packets received on the Switch. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 240 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 7- 2 . Tx Error Analysis window (table) The following fields may be set or viewed: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
Page 241: Size
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Size The Web Manager allows packets received by the Switch, arranged in six groups and classed by size, to be viewed as either a line graph or a table. Two windows are offered. To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu and then select the port by using the Port pull down menu.
Page 242 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Time Interval [1s] Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 200.
Page 243: Stacking Information
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Stacking Information The following window displays detailed information about the stacking of the line cards set in the chassis. The xStack DES-6500 may incorporate up to eight hot-swappable line cards for varying port counts of up to one hundred and ninety-two (192) 10/100 Mbps Fast Ethernet ports or up to ninety-two (92) 1000Mbps Gigabit Ethernet ports.
Page 244: Device Status
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Device Status The Device Status window can be found in the Monitoring menu by clicking the Device Status link. This window shows the status of the physical attributes of the Switch, including power sources and fans. Figure 9- 1 .
Page 245: Mac Address
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual MAC Address This allows the Switch's dynamic MAC address forwarding table to be viewed. When the Switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table.
Page 246: Switch History Log
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Switch History Log The Web manager allows the Switch's history log, as compiled by the Switch's management agent, to be viewed. To view the Switch history log, open the Maintenance folder and click the Switch History Log link. Figure 9- 1 .
Page 247: Igmp Snooping Group
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IGMP Snooping Group This window allows the Switch’s IGMP Snooping Group Table to be viewed. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. The number of IGMP reports that were snooped is displayed in the Reports field.
Page 248: Igmp Snooping Forwarding
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual IGMP Snooping Forwarding This window will display the current IGMP snooping forwarding table entries currently configured on the Switch. To view the following screen, open the Monitoring folder and click the IGMP Snooping Forwarding link. Figure 9- 1 .
Page 249: Browse Router Port
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Browse Router Port This displays which of the Switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. A router port that is dynamically configured by the Switch is designated by D and a Forbidden port is designated by F.
Page 250: Port Access Control
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Port Access Control The following screens are used to monitor 802.1x statistics of the Switch, on a per port basis. To view the Port Access Control screens, open the monitoring folder and click the Port Access Control folder. There are six screens to monitor. NOTE: The Authenticator State, Authenticator Statistics, Authenticator Session Statistics and Authenticator Diagnostics windows in this section cannot be viewed on the xStack DES-6500 chassis switch unless 802.1x is enabled by port or by MAC...
Page 251 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 9- 1 . Authenticator State window – MAC-Based 802.1x This window displays the Authenticator State for individual ports on a selected device. To select unit within the switch stack, use the pull-down menu at the top of the window and click Apply.
Page 252: Authenticator Diagnostics
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authenticator Diagnostics This table contains the diagnostic information regarding the operation of the Authenticator associated with each port. The user may choose the line card and port to view these statistics for by using the pull-down menus in the top left and corner.
Page 253 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual ReauthsWhileAuthenticating Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE). EapStartsWhileAuthenticating Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message being received from the Supplicant.
Page 254: Authenticator Session Statistics
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authenticator Session Statistics This table contains the session statistics objects for the Authenticator PAE associated with each port. To view the Authenticator Session Statistics, click Monitoring > Port Access Control > Authenticator Session Statistics. Figure 9- 2 .
Page 255 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual SessionAuthenticMethod The authentication method used to establish the session. Valid Authentic Methods include: (1) Remote Authentic Server - The Authentication Server is external to the Authenticator’s System. (2) Local Authentic Server - The Authentication Server is located within the Authenticator’s System.
Page 256: Authenticator Statistics
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Authenticator Statistics This table contains the statistics objects for the Authenticator PAE associated with each port. An entry appears in this table for each port that supports the Authenticator function. To view the Authenticator Statistics, click Monitoring > Port Access Control >...
Page 257 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual EapolLogoffFramesRx The number of EAPOL Logoff frames that have been received by this Authenticator. EapolReqFramesTx The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator. EapolRespIdFramesRx The number of EAP Resp/Id frames that have been received by this Authenticator.
Page 258: Radius Account Client
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual RADIUS Account Client This window shows managed objects used for managing RADIUS accounting clients, and the current statistics associated with them. To view the RADIUS Accounting, click Monitoring > Port Access Control > RADIUS Account Client. Figure 9- 2 .
Page 259 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual ClientRetransmissions The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct- Delay have been updated, as well as those in which they remain the same. ClientResponses The number of RADIUS packets received on the accounting port from this server.
Page 260: Radius Auth Client
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual RADIUS Auth Client This table contains information concerning the activity of the RADIUS authentication client on the client side of the RADIUS authentication protocol. To view the RADIUS Authentication, click Monitoring > Port Access Control > RADIUS Auth Client.
Page 261 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual ClientServerPortNumber The UDP port the client is using to send requests to this server. ClientRoundTripTime The time interval (in hundredths of a second) between the most recent Access- Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.
Page 262: Layer 3 Feature
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Layer 3 Feature This folder in the Monitoring section will display information concerning settings configured in Layer 3 IP Networking of the Configuration folder. These settings and parameters have been previously described in Section 6 of this manual, under Layer 3 IP Networking.
Page 263: Browse Routing Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Browse Routing Table The Browse Routing Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This screen shows the current IP routing table of the Switch. To find a specific IP route, enter an IP address into the Destination Address field along with a proper subnet mask into the Mask field and click Find.
Page 264: Browse Ip Multicast Forwarding Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Browse IP Multicast Forwarding Table The Browse IP Multicast Forwarding Table window may be found in the Monitoring menu in the Layer 3 Feature folder. This window will show current IP multicasting information on the Switch. To search a specific entry, enter an multicast group IP address into the Multicast Group field or a Source IP address and click Find.
Page 265: Ospf Monitor
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF Monitor This section offers windows regarding OSPF (Open Shortest Path First) information on the Switch, including the OSPF LSDB Table, OSPF Neighbor Table and the OSPF Virtual Neighbor Table. To view these tables, open the Monitoring folder and click OSPF Monitoring.
Page 266: Browse Ospf Neighbor Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Parameter Description Area ID Allows the entry of an OSPF Area ID. This Area ID will then be used to search the table, and display an entry − if there is one. LSDB Type Displays which one of eight types of link advertisements by which the current link was discovered by the Switch: All, Router link (RTRLink), Network link (NETLink), Summary link...
Page 267: Ospf Virtual Neighbor
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual OSPF Virtual Neighbor This table can be found in the OSPF Monitoring folder by clicking on the Browse OSPF Virtual Neighbor Table link. This table displays a list of Virtual OSPF Neighbors of the Switch. The user may choose specifically search a virtual neighbor by using one of the two search options at the top of the screen, which are: Figure 9- 3 .OSPF Virtual Neighbor Table Parameter...
Page 268: Dvmrp Monitoring
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DVMRP Monitoring This menu allows the DVMRP (Distance-Vector Multicast Routing Protocol) to be monitored for each IP interface defined on the Switch. This folder, found in the Monitoring folder, offers 3 screens for monitoring; Browse DVMRP Routing Table, Browse DVMRP Neighbor Address Table and Browse DVMRP Routing Next Hop Table.
Page 269: Browse Dvmrp Neighbor Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Browse DVMRP Neighbor Table This table, found in the Monitoring menu under DVMRP Monitor > Browse DVMRP Neighbor Table contains information about DVMRP neighbors of the Switch. To search this table, enter either an Interface Name or Neighbor Address into the respective field and click the Find button.
Page 270: Pim Monitoring
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual PIM Monitoring Multicast routers use Protocol Independent Multicast (PIM) to determine which other multicast routers should receive multicast packets. To find out more information concerning PIM and its configuration on the Switch, see the IP Multicast Routing Protocol chapter of Section 6, Configuration.
Page 271: Browse Pim Rp Set Table
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Browse PIM RP Set Table The following window is used to assess information regarding the Rendezvous Point (RP) Set on the Switch. This screen may be found by clicking Monitoring > Layer 3 Feature > PIM Monitor > Browse PIM RP Set Table. Figure 12- 3.
Page 272: Switch Maintenance
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Section 10 Switch Maintenance TFTP Services Ping Test TraceRoute Save Configuration Reset Reboot Services Logout TFTP Services Trivial File Transfer Protocol (TFTP) services allow the Switch’s firmware to be upgraded by transferring a new firmware file from a TFTP server to the Switch.
Page 273: Download Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Due to a backward compatability issue, when a user upgrades to R3 firmware (3.00-B33), all settings previously configured for any ACL function (CPU ACL included) on the Switch will be lost. We recommend that the user save a configuration file of current settings before upgrading to R3 firmware.
Page 274: Ping Test
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Ping Test Ping is a small program that sends ICMP Echo packets to the IP address you specify. The destination node then responds to or "echoes" the packets sent from the Switch. This is very useful to verify connectivity between the Switch and other nodes on the network.
Page 275: Save Configuration
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Save Configuration The xStack DES-6500 chassis switch has two levels of memory, normal RAM and non-volatile or NV-RAM. Configuration changes are made effective clicking the Apply button. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
Page 276: Logout
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Clicking the Yes click-box will instruct the Switch to save the current configuration to non-volatile RAM before restarting the Switch. Clicking the No click-box instructs the Switch not to save the current configuration before restarting the Switch. All of the configuration information entered from the last time Save Changes was executed, will be lost.
Page 277: D-Link Single Ip Management
Configuration Backup/Restore Single IP Management (SIM) Overview Simply put, D-Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules. There are some advantages in implementing the "Single IP Management" feature: 1.
Page 278: Sim Using The Web Interface
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual MS of a SIM group. A switch configured as a CaS is not a member of a SIM group and will take on the following characteristics: It is not a CS or MS of another Single IP group. •...
Page 279 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 11- 2. SIM Settings window (enabled) The following parameters can be set: Parameters Description SIM State Use the pull down menu to either enable or disable the SIM state on the Switch. Disabled will render all SIM functions on the Switch inoperable.
Page 280: Topology
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Topology The Topology window will be used to configure and manage the Switch within the SIM group and requires Java script to function properly on your computer. The Java Runtime Environment on your server should initiate and lead you to the topology window, as seen below. Figure 11- 3.
Page 281 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 11- 4. Topology view This screen will display how the devices within the Single IP Management Group are connected to other groups and devices. Possible icons in this screen are as follows: Icon Description Group...
Page 282: Tool Tips
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
Page 283: Group Icon
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Group Icon Figure 11- 7. Right Clicking a Group Icon The following options may appear for the user to configure: Collapse - to collapse the group that will be represented by a single icon. •...
Page 284: Member Switch Icon
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Figure 11- 1 . Property window Member Switch Icon Figure 11- 1 . Right Clicking a Member icon The following options may appear for the user to configure: Collapse - to collapse the group that will be represented by a single icon. •...
Page 285: Candidate Switch Icon
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Candidate Switch Icon Figure 11- 1 . Right Clicking a Candidate icon The following options may appear for the user to configure: Collapse - to collapse the group that will be represented by a single icon. •...
Page 286: Menu Bar
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Remote Port No. Displays the number of the physical port on the MS or CaS that the CS is connected to. The CS will have no entry in this field. Local Port No.
Page 287 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual NOTE: Upon this firmware release, some functions of the SIM can only be configured through the Command Line Interface. See the xStack DES- 6500 Modular Layer 3 Chassis Ethernet Switch User CLI for more information on SIM and its configurations.
Page 288: Firmware Upgrade
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Firmware Upgrade This screen is used to upgrade firmware from the Commander Switch to the Member Switch. To access the following window, click Single IP Management > Firmware Upgrade. Member Switches will be listed in the table and will be specified by Port (port on the CS where the MS resides), MAC Address, Model Name and Version.
Page 289: Appendix A
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Appendix A General IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1D Spanning Tree IEEE 802.1w Rapid Spanning Tree IEEE 802.1s Multiple Spanning Tree Standards IEEE 802.1 P/Q VLAN IEEE 802.1p Priority Queues IEEE 802.1x Port and MAC Based Access Control IEEE 802.3ad Link Aggregation Control...
Page 290 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Physical And Environment AC inputs & External Redundant Power 100 - 240 VAC, 50/60 Hz (internal universal power supply) Supply 296W maximum DES-6504: 30W maximum DES-6505: 20W maximum DES-6507: 30W maximum Power Consumption DES-6508: 27W maximum DES-6509: 20W maximum...
Page 291: Appendix B
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Appendix B Upgrading Instructions for Release 3 Firmware (R3.00-B33) For firmware release R3.00-B33, certain guidelines must be followed for proper installation of line cards and their appropriate firmware. Failing to follow these rules may result in inoperability of the switch or installed line cards. Line Card Firmware Compatibility The xStack DES-6500 chassis switch supports the following line cards: DES-6504 12-port 100BASE-FX (SFF) Fast Ethernet Switch module...
Page 292: Upgrading To R3.00-B33
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Upgrading to R3.00-B33 For this firmware version, some procedures and implementations have changed since the previous firmware release. Failure to follow these rules may lead to compatibility problems and inoperability of the Switch. Please see the guide below for detailed information regarding the proper firmware upgrade procedure.
Page 293 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DES-6500:4#show switch Command: show switch Device Type : DES-6500 Chassis Ethernet Switch MAC Address : DA-10-21-00-00-01 IP Address : 10.41.44.22 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version : Build 1.50-B19 Firmware Version...
Page 294 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DES-6500:4#show stack_information Command: show stack_information Prio- Prom Runtime Type Exist rity version version version ----------- ----- ----- -------- -------- -------- DES-6505 exist 0.00-B16 2.00-B20 DES-6507 exist 0.00-B16 2.00-B20 USR-NOT-CFG DES-6508 exist 1.50-B19 2.00-B20 DES-6508...
Page 295 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 5 Once the line cards have rebooted, check the “show stack_information” command in the CLI to verify all line cards are now holding the same firmware version as the CPU. If there is a discrepancy in any line card, the user must again repeat the download firmware process for the line cards in question.
Page 296 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 7 Once the whole system has been upgraded to R3.00-B33 with PROM code R2.00-B20, the user may verify all downloads have been successful by checking the “show switch” and “show stack_information” commands in the CLI one final time. These commands should look similar to the ones shown below.
Page 297 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DES-6500:4#show switch Command: show switch Device Type : DES-6500 Chassis Ethernet Switch MAC Address : DA-10-21-00-00-01 IP Address : 10.41.44.22 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version : Build 2.00-B20 Firmware Version...
Page 298: Adding Runtime R1.01 Des-6505/Des-6507/Des-6509 Line Cards To The Runtime R1.3/1.4/2.0/2.5/3.0 Chassis
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Adding Runtime R1.01 DES-6505/DES-6507/DES-6509 Line Cards to the Runtime R1.3/1.4/2.0/2.5/3.0 Chassis For owners of the xStack DES-6500 chassis switch, certain software incongruencies have surfaced with the adding and removing new line cards in the chassis. If an xStack DES-6500 chassis switch has been uploaded with R1.3 or later runtime code, and yet line cards DES-6505/DES-6507/DES-6509 are R1.01, line cards DES-6504/DES-6508/DES-6510/DES-6512 cannot be recognized by the chassis’...
Page 299 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 2 Remove all DES-6504/DES-6508/DES-6510/DES-6512 line cards from the slots in the chassis switch. Next enter the “reset system” command and the whole system should reboot with stacking in tact. Enter the “show stack_information” command to verify that the switch has completely removed the line card from the chassis.
Page 300 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 3 After removing the DES-6504/DES-6508/DES-6510/DES-6512 line cards from the switch, enter the new DES-6505/DES- 6507/DES-6509 into the chassis. Check the “show stack_information” command again to see if the new line card(s) are recognized by the switch.
Page 301 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 5 Check the upgrade result with the “show stack_information” command. DES-6500:4#show stack_information Command: show stack_information Prio- Prom Runtime Type Exist rity version version version ----------- ----- ----- -------- -------- -------- DES-6505 exist...
Page 302: Firmware Downgrade Procedure
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Firmware Downgrade Procedure For users wishing to downgrade their firmware versions for the chassis CPU and corresponding line cards, there are certain guidelines and steps that need to be followed to ensure optimum functionality of the chassis and supported line cards. Failing to follow these rules may result in inoperability of the chassis and installed line cards.
Page 303 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step1 Power on the chassis and once it has booted completely, enter the “show switch” command into the CLI interface to view the firmware version of the CPU runtime code currently employed in the chassis. DES-6500:4#show switch Command: show switch Device Type...
Page 304 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 2 Next enter the “show stack_information” command into the CLI to display the Runtime Version Code of the line cards currently set in the chassis. DES-6500:4#show stack_information Command: show stack_information Prio- Prom Runtime Type...
Page 305 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DES-6500:4#reset system Command: reset system Are you sure you want to proceed with the system reset?(y/n) (reset all, save, reboot) y Reboot & Load Factory Default Configuration… Saving all configurations to NV-RAM…….. Done DES-6500:4#show stack_information Command: show stack_information Prio- Prom...
Page 306 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Step 5 After the chassis reboots and returns to normal operation and stacking configuration, download Runtime Code Version R1.20-B09 to the chassis CPU. DES-6500:4#download firmware_fromTFTP 10.48.74.121 c:/6500rU_1.20-B09.had unit cpu Command: download firmware_fromTFTP 10.48.74.121 c:/6500rU_1.20-B09.had unit cpu Connecting to server....
Page 307 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual DES-6500:4#show switch Command: show switch Device Type : DES-6500 Chassis Ethernet Switch MAC Address : DA-10-21-00-00-01 IP Address : 10.41.44.22 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0 Boot PROM Version : Build 2.00-B20 Firmware Version...
Page 308: Appendix C
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Appendix C Cables and Connectors When connecting the Switch to another switch, a bridge or hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagrams and tables show the standard RJ-45 receptacle/connector and their pin assignments.
Page 309: Appendix D
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Appendix D Cable Lengths Use the following table to as a guide for the maximum cable lengths. Standard Media Type Maximum Distance Mini-GBIC 1000BASE-LX, Single-mode fiber module 10km 1000BASE-SX, Multi-mode fiber module 550m 1000BASE-LHX, Single-mode fiber module 40km...
Page 310: Glossary
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual Glossary 1000BASE-LX: A short laser wavelength on multimode fiber optic cable for a maximum length of 550 meters 1000BASE-SX: A long wavelength for a "long haul" fiber optic cable for a maximum length of 10 kilometers 100BASE-FX: 100Mbps Ethernet implementation over fiber.
Page 311 xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual LAN - Local Area Network: A network of connected computing resources (such as PCs, printers, servers) covering a relatively small geographic area (usually not larger than a floor or building). Characterized by high data rates and low error rates.
Page 312: Warranties And Registration
Hardware. The Warranty Period shall extend for an additional ninety (90) days after any repaired or replaced Hardware is delivered. If a material defect is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
Page 313 D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product owner agrees to pay D-Link’s reasonable handling and return shipping charges for any product that is not packaged and shipped in accordance with the foregoing requirements, or that is determined by D-Link not to be defective or non-conforming.
Page 314: Fcc Warning
Trademarks Copyright 2007 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective proprietors.
Page 315 Warranty Period or ninety (90) days, whichever is longer, and is subject to the same limitations and exclusions. If a material defect is incapable of correction, or if D-Link determines that it is not practical to repair or replace the defective Hardware, the actual price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
Page 316 D-Link. The repaired or replaced packages will be shipped to the customer via UPS Ground or any common carrier selected by D-Link. Return shipping charges shall be prepaid by D-Link if you use an address in the United States, otherwise we will ship the product to you freight collect.
Page 317 For detailed warranty information applicable to products purchased outside the United States, please contact the corresponding local D-Link office. Product Registration Register your D-Link product online at http://support.dlink.com/register Product registration is entirely voluntary and failure to complete or return this...
Page 318: General Terms
Limited Product Warranty Period The Limited Product Warranty Period starts on the date of purchase from D-LINK. Your dated sales or delivery receipt, showing the date of purchase of the product, is your proof of the purchase date. You may be required to provide proof of purchase as a condition of receiving warranty service.
Page 319 Laufzeit der eingeschränkten Garantie Die Laufzeit der eingeschränkten Garantie beginnt mit dem Zeitpunkt, zu dem das Produkt von D-LINK gekauft wurde. Als Nachweis für den Zeitpunkt des Kaufs gilt der datierte Kauf- oder Lieferbeleg. Es kann von Ihnen verlangt werden, dass Sie zur Inanspruchnahme von Garantiediensten den Kauf des Produkts nachweisen. Wenn Ihre Hardware-Produkte der Marke D-LINK innerhalb der Laufzeit der eingeschränkten Garantie eine Reparatur benötigen, so sind Sie berechtigt, gemäß...
Page 320 La Période de Garantie Produit Limitée court à compter de la date d’achat auprès de D-LINK. La date de votre reçu ou bon de livraison correspond à la date d’achat du produit et constitue la date de votre preuve d’achat.
Page 321 Un (1) año Estos períodos de garantía están en vigor para todos los productos D-LINK que hayan sido comprados en países europeos a D-LINK o a alguno de sus proveedores o distribuidores autorizados a partir del 1 de enero del 2004.
Page 322 Il periodo di garanzia sopra specificato relativamente a tutti i prodotti D-LINK venduti nei Paesi europei da D-LINK o da qualsiasi suo rivenditore o distributore autorizzato decorre dal 1° gennaio 2004. Tutti i prodotti venduti nei Paesi europei da D-LINK o da uno qualsiasi dei suoi rivenditori o distributori autorizzati prima del 1° gennaio 2004 sono coperti da una garanzia di 5 anni fatto salvo per alimentatori, ventole e accessori che hanno 2 anni di garanzia.
Page 323: Tech Support
Technical Support You can find software updates and user documentation on the D- Link website. Tech Support for customers within Australia: D-Link Technical Support over the Telephone: 1300-766-868 Monday to Friday 8:00am to 8:00pm EST Saturday 9:00am to 1:00pm EST D-Link Technical Support over the Internet: http://www.dlink.com.au...
Page 324: Technical Support
You can find software updates and user documentation on the D-Link website. Tech Support for customers within South Eastern Asia and Korea: D-Link South Eastern Asia and Korea Technical Support over the Telephone: +65-6895-5355 Monday to Friday 9:00am to 12:30pm, 2:00pm-6:00pm...
Page 325 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within India D-Link Technical Support over the Telephone: +91-22-26526741 +91-22-26526696 –ext 161 to 167 Monday to Friday 9:30AM to 7:00PM D-Link Technical Support over the Internet: http://ww.dlink.co.in...
Page 326 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers for the duration of the warranty period on this product. Customers can contact D-Link technical support through our web site or by phone.
Page 327 Technical Support You can find software updates and user documentation on the D-Link website. Tech Support for customers within the U.A.E & North Africa: D-Link Technical Support over the Telephone: (971) 4-391-6480 (U.A.E) Sunday to Wednesday 9:00am to 6:00pm GMT+4 Thursday 9:00am to 1:00pm GMT+4 D-Link Middle East &...
Page 328 You can find software updates and user documentation on the D- Link website. Tech Support for customers within South Africa and Sub Sahara Region: D-Link South Africa and Sub Sahara Technical Support over the Telephone: +27-12-665-2165 08600 DLINK ( For South Africa only )
Page 329 Technical Support You can find updates and user documentation on the D-Link website Tech Support for Latin America customers: D-Link Technical Support over the followings Telephones: Argentina: 0-800 122 35 465 Monday to Friday 09:00am to 22:00pm Chile: 800 835 465...
Page 330 Техническая поддержка Обновления программного обеспечения и документация доступны на Интернет-сайте D-Link. D-Link предоставляет бесплатную поддержку для клиентов в течение гарантийного срока. Клиенты могут обратиться в группу технической поддержки D-Link по телефону или через Интернет. Техническая поддержка D-Link: (495) 744-00-99 Техническая поддержка через Интернет...
Page 331 El servicio de soporte técnico tiene presencia en numerosos países de la Región Latino América, y presta asistencia gratuita a todos los clientes de D-Link, en forma telefónica e internet, a través de la casilla soporte@dlinkla.com Soporte Técnico Help Desk Argentina: Teléfono: 0-800 122 35 465 Lunes a Viernes 09:00 am a 22:00 pm...
Page 332 Você pode encontrar atualizações de software e documentação de usuário no site da D-Link Brasil www.dlinkbrasil.com.br. A D-Link fornece suporte técnico gratuito para clientes no Brasil durante o período de vigência da garantia deste produto. Suporte Técnico para clientes no Brasil: Telefone São Paulo (11) 2185-9301...
Page 334 Technical Support You can find software updates and user documentation on the D- Link website. D-Link provides free technical support for customers within the United States and within Canada for the duration of the warranty period on this product. U.S. and Canadian customers can contact D-Link technical support through our website, or by phone.
Page 335 Technical Support You can find software updates and user documentation on the D-Link websites. D-Link provides free technical support for customers within Canada, the United Kingdom, and Ireland. Customers can contact D-Link technical support through our websites, or by phone.
Page 336 0,12€/Min aus dem Festnetz der Deutschen Telekom. Telefonische technische Unterstützung erhalten Sie Montags bis Freitags von 09.00 bis 17.30 Uhr. Unterstützung erhalten Sie auch bei der Premiumhotline für D-Link Produkte unter der Rufnummer 09001-475767 Montag bis Freitag von 6-22 Uhr und am Wochenende von 11-18 Uhr.
Page 337: Assistance Technique
Vous trouverez la documentation et les logiciels les plus récents sur le site web D-Link. Ceux-ci peuvent contacter le service technique de D-Link par notre site internet ou par téléphone. Support technique destiné aux clients établis en France: Assistance technique D-Link par téléphone :...
Page 338 Los clientes españoles pueden ponerse en contacto con la asistencia técnica de D-Link a través de nuestro sitio web o por teléfono. Asistencia Técnica de D-Link por teléfono: 34 902 30 45 45...
Page 339 Supporto tecnico Gli ultimi aggiornamenti e la documentazione sono disponibili sul sito D-Link. Supporto tecnico per i clienti residenti in Italia D-Link Mediterraneo S.r.L. Via N. Bonnet 6/B 20154 Milano Supporto Tecnico dal lunedì al venerdì dalle ore 9.00 alle ore 19.00 con orario continuato...
Page 340 Technical Support You can find software updates and user documentation on the D-Link website. D-Link provides free technical support for customers within Benelux for the duration of the warranty period on this product. Benelux customers can contact D-Link technical support through our website, or by phone.
Page 341: Pomoc Techniczna
Pomoc techniczna Najnowsze wersje oprogramowania i dokumentacji użytkownika można znaleźć w serwisie internetowym firmy D-Link. D-Link zapewnia bezpłatną pomoc techniczną klientom w Polsce w okresie gwarancyjnym produktu. Klienci z Polski mogą się kontaktować z działem pomocy technicznej firmy D-Link za pośrednictwem Internetu lub telefonicznie.
Page 342 Technická podpora Aktualizované verze software a uživatelských příruček najdete na webové stránce firmy D-Link. D-Link poskytuje svým zákazníkům bezplatnou technickou podporu Zákazníci mohou kontaktovat oddělení technické podpory přes webové stránky, mailem nebo telefonicky Web: http://www.dlink.cz/support/ E-Mail: info@dlink.cz Telefon: 224 247 503 Telefonická...
Page 343 Technikai Támogatás Meghajtó programokat és frissítéseket a D-Link Magyarország weblapjáról tölthet le. Telefonon technikai segítséget munkanapokon hétfőtől- csütörtökig 9.00 – 16.00 óráig és pénteken 9.00 – 14.00 óráig kérhet a (1) 461-3001 telefonszámon vagy a support@dlink.hu emailcímen. Magyarországi technikai támogatás : D-Link Magyarország...
Page 344 Teknisk Support Du kan finne programvare oppdateringer og bruker dokumentasjon på D-Links web sider. D-Link tilbyr sine kunder gratis teknisk support under produktets garantitid. Kunder kan kontakte D-Links teknisk support via våre hjemmesider, eller på tlf. Teknisk Support: D-Link Teknisk telefon Support:...
Page 345 Teknisk Support Du finder software opdateringer og bruger- dokumentation på D-Link’s hjemmeside. D-Link tilbyder gratis teknisk support til kunder i Danmark i hele produktets garantiperiode. Danske kunder kan kontakte D-Link’s tekniske support via vores hjemmeside eller telefonisk. D-Link teknisk support over telefonen: Tlf.
Page 346 Teknistä tukea asiakkaille Suomessa: D-Link tarjoaa teknistä tukea asiakkailleen. Tuotteen takuun voimassaoloajan. Tekninen tuki palvelee seuraavasti: Arkisin klo. 9 - 21 numerosta 0800-114 677 Internetin kautta Ajurit ja lisätietoja tuotteista. http://www.dlink.fi Sähköpostin kautta voit myös tehdä kyselyitä.
Page 347 Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformation. D-Link tillhandahåller teknisk support till kunder i Sverige under hela garantitiden för denna produkt. Teknisk Support för kunder i Sverige: D-Link Teknisk Support via telefon: 0770-33 00 35 Vardagar 08.00-20.00...
Page 348 Você pode encontrar atualizações de software e documentação de utilizador no site de D-Link Portugal http://www.dlink.pt. A D-Link fornece suporte técnico gratuito para clientes no Portugal durante o período de vigência de garantia deste produto. Suporte Técnico para clientes no Portugal: Assistência Técnica:...
Page 349 Τεχνική Υποστήριξη Μπορείτε να βρείτε software updates και πληροφορίες για τη χρήση των προϊόντων στις ιστοσελίδες της D-Link Η D-Link προσφέρει στους πελάτες της δωρεάν υποστήριξη στον Ελλαδικό χώρο Μπορείτε να επικοινωνείτε µε το τµήµα τεχνικής υποστήριξης µέσω της ιστοσελίδας ή µέσω τηλεφώνου...
Page 351: International Offices
No.71, Jianguo Road, Chaoyang District, Beijing, Highveld Technopark, Centurion, Gauteng India 100025, China Republic of South Africa D-Link House, Kurla Bandra Complex Road, TEL +86-10-58635800 TEL: 27-12-665-2165 Off CST Road, Santacruz (East), Mumbai – 400098, India FAX: +86-10-58635799 FAX: 27-12-665-2186 TEL: 91-022-26526696/30616666 URL: www.dlink.com.cn...
Page 352: Registration Card
1000 or more 3. What network protocol(s) does your organization use ? XNS/IPX TCP/IP DECnet Others_____________________________ 4. What network operating system(s) does your organization use ? D-Link LANsmart Novell NetWare NetWare Lite SCO Unix/Xenix PC NFS 3Com 3+Open Banyan Vines...
Page 353 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product?

This manual is also suitable for:

Xstack des-6500

D-Link DES-6500 - Switch User Manual

Preface

Introduction

Installation

Connecting the Switch

Introduction to Switch Management

Introduction to Web-Based Switch Configuration

Configuring the Switch

Security Management

SNMP Manager

Monitoring

Switch Maintenance

D-Link Single IP Management

Quick Links

User Manual

Related Manuals for D-Link DES-6500 - Switch

Summary of Contents for D-Link DES-6500 - Switch