Wichtige Sicherheitshinweise Bitte lesen Sie sich diese Hinweise sorgfältig durch. Heben Sie diese Anleitung für den spätern Gebrauch auf. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Vervenden Sie keine Flüssig- oder Aerosolreiniger. Am besten dient ein angefeuchtetes Tuch zur Reinigung. Um eine Beschädigung des Gerätes zu vermeiden sollten Sie nur Zubehörteile verwenden, die vom Hersteller zugelassen sind.
D-Link offices is provided at the back of this manual, together with a copy of the Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting warranty service.
D-Link Offices for Registration and Warranty Service The product's Registration Card, provided at the back of this manual, must be sent to a D-Link office. To obtain an RMA number for warranty service as to a hardware product, or to obtain warranty service as to a software product, contact the D-Link office nearest you.
Page 5
Attenzione! Il presente prodotto appartiene alla classe A. Se utilizzato in ambiente domestico il prodotto può causare interferenze radio, nel cui caso è possibile che l`utente debba assumere provvedimenti adeguati. VCCI Warning BSMI Warning...
STP Port States ... 23 User-Changeable STP Parameters ... 25 Illustration of STP ... 25 VLANs ... 27 Notes About VLANs on the DES-3226 ... 27 IEEE 802.1Q VLANs... 27 802.1Q VLAN Packet Forwarding ... 28 802.1Q VLAN Tags ... 29 Port VLAN ID...
Page 8
Ingress Filtering ... 31 VLANs ... 32 DHCP ... 33 802.1X Port-based Network Access Control ... 34 Configuring the Switch Using the Console Interface ... 37 Before You Start ... 37 Connecting to the Switch ... 37 User Accounts Management ... 39 Save Changes ...
Page 9
Dynamic Group Registration ... 135 VLAN Status ... 136 Port Access Control ... 136 Maintenance... 141 TFTP Services... 141 Switch History... 144 Ping Test ... 145 Save Changes... 145 Factory Reset ... 146 Restart System... 146 Connection Timeout ... 147 Logout...
Page 10
Packet Corruption ... 160 Resource Errors ... 160 Identifying a Data Loop ... 160 Avoiding Trouble ... 160 Brief Review of Bitwise Logical Operations... 163 Index... 164...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide This User’s Guide tells you how to install your DES-3226, how to connect it to your Ethernet/Fast Ethernet/Gigabit Ethernet network, and how to set its configuration using the built-in console interface. Overview of this User’s Guide •...
Switch features include: Ports • 24 (DES-3226) high performance NWay (MDI-II/MDI-X) ports for connecting to end stations, servers and hubs. Every port can be used for an uplink connection. • All UTP ports can auto-negotiate (NWay) between 10Mbps/100Mbps, half-duplex or full duplex, and feature flow control.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide • Data filtering rate eliminates all error packets, runts, etc. at 14,880 pps per port at 100% of wire- speed for 10Mbps speed. • Data filtering rate eliminates all error packets, runts, etc. at 148,800 pps per port at 100% of wire-speed for 100Mbps speed.
Page 14
802.1X MIB Enterprise MIB Mini-RMON MIB (RFC 1757) – 4 groups. The RMON specification defines the Counters for the Receive functions only. However, the DES-3226 implements counters for both receive and transmit functions. • Supports Web-based management. • TFTP support.
Switch. Do not place heavy objects on the Switch. Desktop or Shelf Installation When installing the Switch on a desktop or shelf, the rubber feet included with the device should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Allow adequate space for ventilation between the device and the objects around it.
Figure 2-1. Installing rubber feet for desktop installation Rack Installation The DES-3226 can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, attach the mounting brackets on the Switch’s side panels (one on each side) and secure them with the screws provided.
Figure 2-2B. Installing the Switch in an equipment rack Power on The Switch can be used with AC power supply 100-240 VAC, 50 - 60 Hz. The Switch’s power supply will adjust to the local power source automatically and may be powered on without having any or all LAN segment cables connected.
Comprehensive LED indicators display the status of the Switch and the network (see the LED Indicators section below). • An RS-232 DCE console port for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program. •...
Supported input voltages range from 100 ~ 240 VAC at 50 ~ 60 Hz. Side Panels The right side panel of the Switch contains two system fans (see the top part of the diagram below). The left side panel contains heat vents.
Page 20
Two 100BASE-FX (with SC type connector) Fiber ports. • Fully compliant with IEEE802.3u. • Support Full-duplex operation only. • IEEE 802.3x compliant Flow Control support for full duplex. 100BASE-FL Module (15Km) Figure 3-6. Optional 100BASE 1-port front panel module DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide...
Page 21
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide • One 100BASE-FL (with SC type connector) port. • Fully compliant with IEEE802.3u. • Support Full-duplex operation only. • IEEE 802.3x compliant Flow Control support for full duplex. 100BASE-FL Module (15Km) Figure 3-7. Optional 100BASE 2-port front panel module •...
Page 22
Connects to 1000BASE-T devices at 1000M/full duplex, 100M/full duplex, 100M/half duplex, and Auto. • Supports Category 5+ or higher cable connections of up to 100 meters. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide 62.5µm Unit: MHz*km Unit: meters 2.33 Unit: dB 62.5µm...
• Power – This indicator on the front panel should be lit during the Power-On Self Test (POST). It will light green approximately 2 seconds after the switch is powered on to indicate the ready state of the device. •...
Ethernet Network Interface Card (NIC) and most routers. An end node can be connected to the Switch via a two-pair Category 3, 4, or 5 UTP/STP cable. The end node should be connected to any of the ports of the Switch.
Page 25
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 4-2. Switch connected to a normal (non-Uplink) port on a hub or switch using a straight or crossover cable...
Switch (see Chapter 6, “Using the Console Interface”). A network administrator can manage, control and monitor the switch from the console program. The DES-3226 contains a CPU, memory for data storage, flash memory for configuration data, operational programs, and SNMP agent firmware. These components allow the Switch to be actively managed and monitored from either the console port or the network itself (out-of-band, or in-band).
100. If you still don’t see anything, try hitting <Ctrl> + r to refresh the screen. IP Addresses and SNMP Community Names Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90.
For security, you can set in the Switch a list of IP Addresses of the network managers that allow you to manage the Switch. You can also change the default SNMP Community Strings in the Switch and set the access rights of these Community Strings.
• Modifying the configuration of network devices. The DES-3226 has a software program called an ‘agent’ that processes SNMP requests, but the user program that makes the requests and collects the responses runs on a management station (a designated computer on the network). The SNMP agent and the user program both use the UDP/IP protocol to exchange packets.
If the Aging Time is too short however, many entries may be aged out too soon. This will result in a high percentage of received packets whose source addresses cannot be found in the forwarding table, in which case the switch will broadcast the packet to all ports, negating many of the benefits of having a switch.
The DES-3226 STP allows two levels of spanning trees to be configured. The first level constructs a spanning tree on the links between switches. This is referred to as the Switch or Global level. The second level is on a port basis.
STP communicates between switches on the network using Bridge Protocol Data Units (BPDUs). Each BPDU contains the following information: • The unique identifier of the switch that the transmitting switch currently believes is the root switch • The path cost to the root from the transmitting port DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide...
A designated switch is selected. This is the switch closest to the root switch through which packets will be forwarded to the root. • A port for each switch is selected. This is the port providing the best path from the switch to the root switch. •...
Page 34
• From disabled to blocking When you enable STP, every port on every switch in the network goes through the blocking state and then transitions through the states of listening and learning at power up. If properly configured, each port stabilizes to the forwarding or blocking state.
The user changeable parameters in the Switch are as follows: • Priority – A Priority for the switch can be set from 0 to 65535. 0 is equal to the highest Priority. •...
Page 36
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Setting-up STP using values other than the defaults can be complex. Therefore, you are advised to keep the default factory settings and STP will automatically assign root bridges/ports and block loop connections.
Note also that the example network topology is intended to provide redundancy to protect the network against a link or port failure – not a switch failure or removal. For example, a failure of switch A would isolate LAN 1 from connecting to LAN 2 or LAN 3.
IEEE 802.1Q (tagged) VLANs are implemented on the DES-3226. 802.1Q VLANs require tagging, which enables them to span the entire network (assuming all switches on the network are IEEE 802.1Q- compliant).
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 5-6. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 5-7. IEEE 802.1Q Tag The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
Tag-aware switches must keep a table to relate PVIDs within the switch to VIDs on the network. The switch will compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet.
If the packet is not tagged with VLAN information, the ingress port will tag the packet with its own PVID as a VID (if the port is a tagging port). The switch then determines if the destination port is a member of the same VLAN (has the same VID) as the ingress port.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Engineering Marketing Finance Sales Table 5-5. VLAN Example – Assigned Network Addresses Note: IP interfaces consist of two parts – a subnet mask and a network address. Note: Each IP interface listed above will give a maximum of 2,080,800 unique IP addresses per interface (assuming the 10.xxx.xxx.xxx notation).
Through this mechanism, users have to be authorized before being able to access the network. See the following figure: Figure 5-9. Typical 802.1X Configuration Prior to User Authentication Once the user is authenticated, the switch unblocks the port that is connected to the user as shown in the next figure.
Page 45
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 5-10. Typical 802.1X Configuration with User Authentication The user’s information, including account number, password, and configuration details such as IP address and billing information, is stored in a centralized RADIUS server.
Page 46
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 5-11. Typical Configuration with 802.1X Fully Implemented State Machine Name Port Timers state machine Authenticator PAE state machine The Authenticator Key Transmit state machine Reauthentication Timer state machine Backend Authentication state machine...
Notes are added where clarification is necessary. Before You Start The DES-3226 supports a wide array of functions and gives great flexibility and increased network performance by eliminating the routing bottleneck between the WAN or Internet and the Intranet. Its function in a network can be thought of as a new generation of router that performs routing functions in hardware, rather than software.
Note: The passwords used to access the Switch are case-sensitive; therefore, “S” is not the same as “s.” When you first connect to the Switch, you will be presented with the first login screen (shown below). Note: Press Ctrl+R to refresh the screen. This command can be used at any time to force the console program in the Switch to refresh the console screen.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Press Enter in both the Username and Password fields. You will be given access to the main menu shown below: Figure 6-2. Main menu Note: The first user automatically gets Root privileges (See Table 6-1). It is recommended to create at least one Root-level user for the Switch.
Page 50
5. A listing of all user accounts and access levels is shown below the user setup menu. This list is updated when APPLY is executed. 6. Please remember that APPLY makes changes to the switch configuration for the current session only. All changes (including User additions or updates) must be entered into non-volatile ram using the Save Changes command on the main menu - if you want these changes to be permanent.
Switch. Save Changes The DES-3226 has two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective by highlighting APPLY and pressing Enter. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-6. Save changes screen Once the switch configuration settings have been saved to NV-RAM, they become the default settings for the switch. These settings will be used every time the Switch is rebooted.
Page 53
(or just reboot the Switch). Loading the Factory Default Configuration will erase any User Accounts (and all other configuration settings) you may have entered and return the Switch to the state it was in when it was purchased. The Load Factory Default Configuration Except IP Address option is used when the Switch will be managed by the Telnet manager, which requires knowledge of the Switch’s IP address to function.
7. You must enter the configuration changes into the non-volatile ram (NV-RAM) using Save Changes from the main menu if you want the configuration to be used after a switch reboot. Only a user with Root privileges can make changes to user accounts.
Some settings must be entered to allow the Switch to be managed from an SNMP-based Network Management System such as SNMP v1 or to be able to access the Switch using the Telnet protocol. The Remote Management Setup screen lets you specify how the Switch will be assigned an IP address to allow the Switch to be identified on the network.
Page 56
BOOTP protocol allows IP addresses, network masks, and default gateways to be assigned by a central BOOTP server. If this option is set, the Switch will first look for a BOOTP server to provide it with this information before using the default or previously entered settings.
Highlight Configure Switch Information and Advanced Settings on the Configuration menu and press Enter: The Switch Information menu shows the type of switch, which (if any) external modules are installed, and the Switch’s MAC Address (assigned by the factory and unchangeable). In addition, the Boot PROM and Firmware Version numbers are shown.
Page 58
Switch will broadcast the packet to all ports, negating many of the benefits of having a Switch.
Switch 802.1X:<Disabled> – Set the 802.1X access control by toggling between Enabled and Disabled. • Switch Filtering EAPOL PDU:<Yes> – This option is only available if 802.1X is disabled. It filters Extensible Authentication Protocol Over LANs Packet Data Units (EAPOL PDU) when enabled. •...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Configure Bandwidth The Bandwidth Configuration menu allows you to access screens that set and display the Ingress bandwidth and Egress bandwidth of specified ports on the Switch. Highlight Configure Bandwidth on the Configuration menu and press Enter: Figure 6-15.
To globally configure STP on the Switch, highlight Configure Spanning Tree Protocol on the Configuration menu and press Enter: The Spanning Tree Protocol (STP) operates on two levels: on the switch level, the settings are globally implemented. On the port level, the settings are implemented on a per user-defined group basis.
Page 62
BPDU packets sent by the Root Bridge to tell all other Switches that it is indeed the Root Bridge. If you set a Hello Time for your Switch, and it is not the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge.
[ ] to [ ] field. After enabling or disabling STP Status, you can set the spanning tree port cost and priority. Toggle the Bypass field to Yes if you want to enable the Switch to skip the usual waiting time associated with the listening state.
Page 64
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-21. Setup Unicast Filtering Table screen The Action field can be toggled between Add/Modify and Delete using the space bar. Enter the VID in the VLAN ID field and the MAC address to be statically entered in the forwarding table in the MAC Address field.
NV-RAM. Configure VLANs The Switch reserves one VLAN, VID = 1, called the DEFAULT_VLAN for internal use. The factory default setting assigns all ports on the Switch to the DEFAULT_VLAN. As new VLANs are configured, their respective member ports are removed from the DEFAULT_VLAN.
Page 66
F (Forbidden Non-Member) – Defines the port as a non-member and also forbids the port from joining a VLAN dynamically. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-23. IEEE 802.1Q VLANs Configuration menu Figure 6-24. 802.1Q Static VLAN Settings screen...
Page 67
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide • – (Non-Member) – Specifies the port as not being a member of the VLAN, but the port can become a member of the VLAN dynamically. Next, determine which of the ports that are members of the new VLAN will be Tagged or Untagged ports.
Page 68
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-26. Port VLAN assignment screen Highlight the Configure Port from [1 ] to [1 ] field and enter the range of port numbers you want to configure. Next, highlight the PVID field and enter the PVID for the VLAN’s member ports you want to configure.
GVRP updates dynamic VLAN registration entries and communicates the new VLAN information across the network. This allows, among other things, for stations to physically move to other switch ports and keep their same VLAN settings, without having to reconfigure VLAN settings on the Switch.
Page 70
To configure IGMP Snooping: Toggle the Switch IGMP Snooping field to Enabled. Toggle the Querier State field to the appropriate choice between Non-Querier, V1-Querier, and V2-Querier to determine the version of IGMP that is used in your network. A value between 1 and 255 can be entered for the Robustness Variable (default is 2).
If two redundant port trunking groups are configured on the Switch, STP will block one entire group – in the same way STP will block a single port that has a redundant link.
Configure Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
To use the features on this screen, toggle the desired option to Enabled, enter a threshold, and then press APPLY. Configure Port Security To configure security for a specified port or range of ports on the Switch, select Configure Port Security on the Configuration menu and press Enter. Figure 6-33. Port Security Settings screen...
Configure Class of Service, Default Priority and Traffic Class The DES-3226 allows you to customize class of service, port default priority, and traffic class settings on the following menu. Select Configure Class of Service, Default Priority and Traffic Class on the Configuration menu and press Enter.
Page 75
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide can be entered in this field are from 1 to 255. Entering zero instructs the Switch to continue processing packets until there are no more packets in the CoS transaction queue. •...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide This screen allows you to configure traffic class priority by specifying the class value, from 0 to 3, of the Switch’s eight levels of priority. Press APPLY to let your changes take effect.
TOS value – Enter a TOS value between 0 and 7 in this field. Configure Port Access Entity The DES-3226 allows you to set the authentication status of individual ports on your Switch on the following menu. Select Configure Port Access Entity on the Configuration menu and press Enter.
Page 78
SystemAuthControl. It also allows you to access the following three additional Port Access Entity System Configuration screens. To set up the Switch’s 802.1X port-based authentication, select which ports are to be configured in the Configure Port from [ ] to [ ] field. Next, enable the selected ports by toggling the 802.1X Capability field to Authenticator.
Page 79
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide This screen allows you to initialize a port or group of ports. The table also displays the current status of the port(s) once you press START. This screen displays the following information: •...
Page 80
PortControl – The controlled port can be forceUnauthorized, auto, or forceAuthorized. Configure 802.1X – Authenticator Configuration Select Configure Authenticator on the PAE Configuration menu and press Enter to access the following screen: DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-44. Reauthenticate Ports(s) menu...
Page 81
EAP Request/Identity packet transmitted to the client. • QuietPeriod:[60 ] – This allows you to set the number of seconds that the switch remains in the quiet state following a failed authentication exchange with the client.
Page 82
Radius Dead Time:[1 ] –This specifies the number of minutes a RADIUS server which is not responding to authentication requests is considered unavailable and is passed over by further requests for RADIUS authentication. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-46. Configure Radius Server menu...
Page 83
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide • Radius Time Out:[10 ] – This specifies the number of seconds NAS waits for a reply to a RADIUS request before transmitting the request. • Radius Maximum Retransmit:[2 ] –This specifies the number of times NAS transmits each RADIUS request to the server before giving up.
To display the network data compiled by the Switch, highlight Network Monitoring on the main menu and press Enter. Figure 6-50. Network Monitoring Menu Port Utilization To view the port utilization of all the ports on the Switch, highlight Port Utilization on the Network Monitoring Menu and press Enter:...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-51. Port Utilization screen The Port Utilization screen shows the number of packets transmitted and received per second and calculates the percentage of the total available bandwidth being used on the port (displayed under %Util.).
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-53. Packet Analysis table In addition to the size of packets received or transmitted by the selected port, statistics on the number of unicast, multicast, and broadcast packets are displayed. Highlight CLEAR COUNTER and press Enter to reset the counters.
Figure 6-55. Switch History screen IGMP Snooping This allows the Switch’s IGMP Snooping table to be viewed. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. The ports where the IGMP packets were snooped are displayed, signified with an M.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Dynamic Group Registration Table To view the Dynamic Group Registration Table, highlight Dynamic Group Registration Table on the Network Monitoring Menu and press Enter. Figure 6-57. Dynamic Group Registration Table screen This read-only table contains filtering information for VLANs configured into the bridge by (local or network) management, or learned dynamically, specifying the set of ports to which frames received on a VLAN for this FDB and containing a specific Group destination address are allowed to be forwarded.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Port Access Control Statistics To view the Monitor Authentication Statistics menu, highlight Port Access Control Statistics on the Network Monitoring Menu and press Enter. Select the item from the screen above to show the desired information.
Page 90
Rx RespId – The number of EAP Resp/Id frames that have been received by this Authenticator. • Rx Error – The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-61. Show Authenticator Statistics screen...
Page 91
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-62. Show Authenticator Session-Counters screen This read-only field displays Authenticator Session-Counters information. The polling interval can be set between 2 seconds and 1 minute using the space bar. The information on this screen is described as follows: •...
The Switch sends out SNMP traps to network management stations whenever certain exceptional events occur, such as when the Switch is turned on or when a system reset occurs. The Switch allows traps to be routed to up to four different network management hosts.
Page 93
• IP Address – The IP address of the network management station to receive traps. The Security IP section allows you to create a list of IP addresses that are allowed to access the Switch via SNMP or Telnet. Highlight APPLY and press Enter to allow your changes to take effect.
TFTP server to the Switch. A configuration file can also be loaded into the Switch from a TFTP server, switch settings can be saved to the TFTP server, and a history log can be uploaded from the Switch to the TFTP server.
TFTP Server and press Enter. Figure 6-68. Use Configuration File on TFTP Server screen Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server. Highlight APPLY and press Enter to record the IP address of the TFTP server. Use Save Changes from the main menu to enter the address into NV-RAM Highlight START and press Enter to initiate the file transfer.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 6-69. Save Settings to TFTP Server screen Enter the IP address of the TFTP server and the path and filename of the settings file on the TFTP server and press APPLY. Highlight START and press Enter to initiate the file transfer.
The reboot options are as follows: • Reboot – Simply restarts the Switch. Any configuration settings not saved using Save Changes from the main menu will be lost. The Switch’s configuration will be restored to the last configuration saved in NV-RAM. Figure 6-71. Ping screen...
Page 98
All configuration data will be lost. This is identical to using Factory Reset and then Reboot. • Reboot & Load Factory Default Configuration Except IP Address – Restarts the Switch using the default factory configuration, except the user configured IP address will be retained. All other configuration data will be lost.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide ASED ETWORK ANAGEMENT Introduction The DES-3226 offers an embedded Web-based (HTML) interface allowing users to manage the Switch from anywhere network through standard browser, such Opera, Netscape Navigator/Communicator, or Microsoft Internet Explorer. The Web browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol.
Page 100
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Click OK as there is no preset user name or password on the Switch. This opens the main page in the management module. The panel on the left-hand side contains the main menu. The featured items include: Configuration, Management, Monitoring, Maintenance, and Help.
Switch. If you enable DHCP, a Dynamic Host Configuration Protocol request will be sent when the Switch is powered up. Once you have selected a setting under Get IP From, click Apply to activate the new settings.
Figure 7-2. Switch Information (Basic Settings) window To set basic switch settings, enter a System Name in the first field, the physical location of the Switch in the System Location field, and the name of the contact person responsible for the Switch in the System Contact field.
Switch will broadcast the packet to all ports, negating many of the benefits of having a Switch.
Page 104
Telnet Status [Enabled] – Toggle to Enabled to allow access to the Switch over the network using the TCP/IP Telnet protocol. • Web Status [Enabled] – You can also use a Web-based browser to manage the Switch by toggling to Enabled. •...
Select the port you want to configure by using the drop-down menus in the From and To fields or click on the port in the Switch front panel display at the top of the window. Follow these steps: 1. Enable or disable the port. If you choose Disabled in the State field, devices connected to that port cannot use the Switch, and the Switch purges their addresses from its address table after the MAC address aging time elapses.
3. Click Apply to let your changes take effect. Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port.
– to the backbone of a network. The Switch allows the creation of up to 6 port trunking groups, each group consisting of up to 8 links (ports). The trunked ports can be non-continuous (that is, have non-sequential port numbers). All of the ports in the group must be members of the same VLAN.
If two redundant port trunking groups are configured on the Switch, STP will block one entire group – in the same way STP will block a single port that has a redundant link.
Page 109
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide The user-changeable parameters in the Switch are as follows: • VLAN ID [ 1] – Enter a VLAN ID number in this field. • State [Enabled] – Use the drop-down menu to enable or disable IGMP settings.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Port GMRP Figure 7-8. Port GMRP Settings window This window allows you to turn on or turn off Group Multicast Registration Protocol (GMRP) on a specific port. Click Apply to let your changes take effect.
Differentiated Services brings scalable Quality of Service to the Internet Protocol environment, using a Type of Service (TOS) field in the IP header. The Switch has the capability to change the TOS precedence field (the first 3 bits of the TOS field) based on the packet classification.
Bridge Max Age (6-40 Sec) [ 20 ] – The Maximum Age can be from 6 to 40 seconds. At the end of the Maximum Age, if a BPDU has still not been received from the Root ridge, your Switch...
BPDU packets sent by the Root Bridge to tell all other switches that it is indeed the Root Bridge. If you set a Hello Time for your Switch, and it is not the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge.
Static Filtering Table Unicast Filtering The window above allows you to set up static packet filtering on the Switch. Click Apply to add or modify an entry on this table. The information on the window is described as follows: •...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Multicast Filtering The information on the window is described as follows: • MAC Address [00:00:00:00:00:00] – The MAC address of the static source of multicast packets. • VID [ 1] – The VLAN ID number of the VLAN to which the MAC address belongs.
Page 116
VLAN. • Forbidden – Specifies the port that is not allowed to be a member of the VLAN. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-15. 802.1Q Static VLAN Setup window...
Page 117
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Port VLAN ID (PVID) Figure 7-16. 802.1Q Port Settings window This window allows you to assign a Port VLAN ID (PVID) number, enable or disable the ingress filtering check, and enable or disable GVRP for individual ports.
To configure ingress bandwidth for a specific port, select the desired port under Port Num and enter a bandwidth between 1 and 127 in the next field. Click Apply to let your changes take effect. To delete an entry, click the Delete icon. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-17. Ingress Bandwidth Settings window...
Threshold of Broadcast Figure 7-19. Threshold of Broadcast/Multicast/DA-Unknown Storm window The Switch allows you to set the threshold for three types of storms: broadcast, multicast, and destination address unknown. The higher the threshold, the more packets the Switch can accept per second.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Port Priority Figure 7-20. Default Port Priority assignment window This window allows you to set a default priority for packets that have not already been assigned a priority value. After filling out the two fields offered, click Apply to let your changes take effect.
CoS. The values that can be entered in this field are from 1 to 255. Entering zero instructs the Switch to continue processing packets until there are no more packets in the CoS transaction queue.
To set up security for a port or ports, enter the port or ports in the first two fields, change the Admin State to Enabled, enter the maximum number of addresses, the desired Mode, and then click Apply. PAE System Control The Port Access Entity Control section allows you to use the Switch’s 802.1X port-based authentication feature.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Configure Authenticator This window allows you to set the following features: • From [ ] To [ ] – Enter the port or ports to be set. • AdmDir [both] – Sets the administrative-controlled direction to either in or both. If in is selected, control is only exerted over incoming traffic through the port you selected in the first field.
Page 124
EAP Request/Identity packet is transmitted to the client. • QuietPeriod [60 ] – This allows you to set the number of seconds that the switch remains in the quiet state following a failed authentication exchange with the client.
Port Authenticating Settings Figure 7-25. 802.1X Capability Settings window To set up the Switch’s 802.1X port-based authentication, select which ports are to be configured in the From and To fields. Next, enable the ports by selecting Authenticator from the drop-down menu under...
Page 126
This window allows you to reauthenticate a port or group of ports. The Reauthenticate Port Table displays the current status of the port(s) once you have clicked Apply. This window displays the following information: DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-26. Initialize Port window Figure 7-27. Reauthenticate Port window...
PortControl – The controlled port can be forceUnauthorized, auto, or forceAuthorized. Radius Server The RADIUS feature of the switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. The Web Manager offers three windows.
Confirm Key – Confirm the shared key is the same as that of the RADIUS server. • Accounting Method [Invalid] – This allows you to set the RADIUS server as Valid or Invalid. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Local User Figure 7-30. Local Users Setting window The fields on this window allow you to add or remove local users. Management This category includes: Security IP, SNMP Manager, Trap Manager, and User Accounts.
The information is described as follows: • Trap Receiving Station [0.0.0.0] – The IP address of the trap receiving station. • Community String – A user-defined SNMP community name. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-32. SNMP Manager Configuration window...
Status [Invalid] – Option to set the trap receiving station to Valid or Invalid. User Accounts The Switch allows you to set up and manage user accounts in the following two windows. User Account Management The information on the window is described as follows: •...
Time Interval [1s ]– Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. • Record Number [200] – Select number of times the Switch will be polled between 20 and 200. The default value is 20. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide • Show/Hide – Check whether or not to display Utilization. • Clear – Clicking this button clears all statistics counters on this window. Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. The six...
Page 134
Time Interval [1s ] – Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. • Record Number [200 ] – Select number of times the Switch will be polled between 20 and 200. The default value is 20. •...
Page 135
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide UMB-cast (RX) Figure 7-39. Rx Packets Analysis window for UMB (Line Chart) Figure 7-40. Rx Packets Analysis window for MBU (Table)
Page 136
Time Interval [1s ] – Select the desired setting between 1s and 60s, where “s” stands for seconds. • Record Number [200 ] – Select number of times the Switch will be polled between 20 and 200. • Unicast – Counts the total number of good packets that were received by a unicast address.
Time Interval [1s ] – Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. • Record Number [200 ] – Select number of times the Switch will be polled between 20 and 200. The default value is 200. •...
Page 138
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Received (RX) Figure 7-43. Rx Error Analysis window (Line Chart) Figure 7-44. Rx Error Analysis window (Table) The information is described as follows:...
Page 139
Clear – Clicking this button clears all statistics counters on this window. • View Table – Clicking this button instructs the Switch to display a table rather than a line graph. • View Line Chart – Clicking this button instructs the Switch to display a line graph rather than a table.
Page 140
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Transmitted (TX) Figure 7-45. Tx Error Analysis window (Line Chart) Figure 7-46. Tx Error Analysis window (Table) The information is described as follows:...
Time Interval [1s ] – Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. • Record Number [200 ] – Select number of times the Switch will be polled between 20 and 200. The default value is 200. •...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Packet Size Figure 7-47. Tx/Rx Size Analysis window (Line Chart) Figure 7-48. Packet Analysis window (Table) The information is described as follows:...
View Table – Clicking this button instructs the Switch to display a table rather than a line graph. • View Line Chart – Clicking this button instructs the Switch to display a line graph rather than a table. MAC Address The Web Manager allows the Switch’s MAC address table (sometimes referred to as a forwarding table)
Page 144
Jump – Allows the user to move to a sector of the database corresponding to a user defined port, VLAN, or MAC address. • Find – Click the icon to find the data entry. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-49. MAC Address Table window...
Next – Click this button to view the next page of the address table. IGMP Snooping The Switch’s IGMP snooping table can be browsed using the Web Manager. The table is displayed by VLAN ID (VID). The information is described as follows: •...
• Static Port List – Displays the ports that have forwarded multicast packets. Port Access Control There are five windows that comprise the 802.1X port-based authentication section. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-53. VLAN Status window...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Authenticator State This window displays the Authenticator Status for an individual port. To select a port, click a port on the front panel display. A polling interval between 1 and 60 seconds can be set using the drop-down menu at the top of the window.
Rx RespId – The number of EAP Resp/Id frames that have been received by this Authenticator. • Rx Error – The number of EAPOL frames that have been received by this Authenticator in which the frame type is not recognized. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-54. Authenticator Statistics window...
Page 149
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Authenticator Session-Counter Figure 7-55. Authenticator Session Counter window This window displays the Authenticator Session Counter for an individual port. To select a port, click a port on the front panel display. A polling interval between 1 and 60 seconds can be set using the drop- down menu at the top of the window.
• Accepts – The counter for the number of acceptances from RADIUS authentication. • Rejects – The counter for the number of rejections from RADIUS authentication. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Figure 7-56. show Radius Authentication window...
Trivial File Transfer Protocol (TFTP) services allow the Switch firmware to be upgraded by downloading a new firmware file from a TFTP server to the Switch. A configuration file can also be loaded into the Figure 7-57. show Radius Accounting window...
File Name – The full file name (including path) of the new firmware file on the TFTP server. Configuration File A configuration file can be downloaded from a TFTP server to the Switch. This file is then used by the Switch to configure itself.
Save History Log The Switch’s management agent can upload its history log file to a TFTP server. Please note that an empty history file on the TFTP server must exist on the server before the Switch can upload its history file.
File Name – The full file name (including path) of the new firmware file on the TFTP server. Switch History The Web Manager allows the Switch’s history log, as compiled by the Switch’s management agent, to be viewed. The Switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC connected to the console manager.
(3 is usually enough). Click Start to initiate the Ping program. Save Changes Figure 7-64. Save Configuration window To save all the changes made in the current session to the Switch’s flash memory, click the Save Configuration button.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Factory Reset Figure 7-65. Factory Reset to Default Value window A remote reset returns the Switch to the initial parameters set at the factory. Click Reset to Factory Default to reset the Switch. Restart System Figure 7-66.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Connection Timeout Figure 7-67. Web Timeout Setup window To use this Web timeout feature, enter the desired age-out time and then click Apply. Logout Figure 7-68. Logout Web Setups window To exit the setup pages and return to the main page, click Apply.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide AC inputs: Power Consumption: DC fans: Operating Temperature: Storage Temperature: Humidity: Dimensions: Weight: EMI: Safety: Transmission Method: RAM Buffer: Filtering Address Table: Packet Filtering/ Forwarding Rate: MAC Address Learning: Forwarding Table Age...
Page 160
RJ-45 P PECIFICATION When connecting the Switch to another switch, a bridge or a hub, a normal cable is necessary. Please review these products for matching cable pin assignment. The following diagram and table show the standard RJ-45 receptacle/connector and their pin assignments for the switch-to-network adapter card connection, and the normal cable for the Switch-to- switch/hub/bridge connection.
Page 161
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Table B-1. The standard Category 3 cable, RJ-45 pin assignment RJ-45 Connector pin assignment Contact Media Direct Interface Signal Tx + (transmit) Tx - (transmit) Rx + (receive) Not used Not used...
BPDUs with other switches. This will determine which switch in the network is the best choice for the root switch. If there is only one switch on the network, no BPDU exchange occurs, the forward delay timer expires, and the ports move to the listening state. All STP enabled ports enter the blocking state following switch boot.
The listening state is the first transition for a port from the blocking state. Listening is an opportunity for the switch to receive BPDUs that may tell the switch that the port should not continue to transition to the forwarding state, but should return to the blocking state (that is, a different port is a better choice).
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Learning State A port in the learning state prepares to participate in frame forwarding. The port enters the learning state from the listening state. A port in the learning state does the following: •...
Receives and responds to network management messages. Disabled State A port in the disabled state does not participate in frame forwarding or STP. A port in the disabled state is virtually non-operational. DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide...
Page 167
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide A disabled port does the following: • Discards packets received from the network segment to which it is attached. • Discards packets sent from another port on the switch for forwarding. •...
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Troubleshooting STP Spanning Tree Protocol Failure A failure in the STA generally leads to a bridging loop. A bridging loop in an STP environment comes from a port that should be in the blocking state, but is forwarding packets.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide In the above example, port 1 on B is configured as a full-duplex port and port 1 on A is either configured as a half-duplex port, or left in auto-negotiation mode. Because port 1 on B is configured as a full-duplex port, it does not do the carrier sense when accessing the link.
Resource Errors The DES-3226 performs its switching and routing functions primarily in hardware, using specialized ASICs. STP is implemented in software and is thus reliant upon the speed of the CPU and other factors to converge. If the CPU is over-utilized, it is possible that BPDUs may not be sent in a timely fashion.
Page 171
Although the STP can elect a root bridge, a well-designed network will have an identifiable root for each VLAN. Careful setup of the STP parameters will lead to the selection of this best switch as the root for each VLAN. Redundant links can then be built into the network. STP is well suited to maintaining connectivity in the event of a device failure or removal, but is poorly suited to designing networks.
Page 172
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide In this example, the VLAN definitions are extended to switches A and B. This gives only a single blocked port per VLAN and allows the removal of all redundant links by removing switch A or B from the network.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide RIEF EVIEW OF The logical operation compares 2 bits and if they are both “ otherwise, the result is “0”. The logical operation compares 2 bits and if either or both bits are otherwise, the result is “0”.
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide Network Classes Class A, B, C for Subnet Mask ... 46 NV-RAM ... 41 NWay ... 2 Operating Temperature ... 149 Out-of-Band/Console Setting menu ... 50 password ... 38 Port Mirroring ... 62 Port Priority...
Page 176
E-MAIL: service@dlink.india.com Italy D-Link Mediterraneo Srl/D-Link Italia Via Nino Bonnet n. 6/b, 20154, Milano, Italy TEL: 39-02-2900-0676 FAX: 39-02-2900-1723 URL: www.dlink.it E-MAIL: info@dlink.it Japan D-Link Japan 10F, 8-8-15 Nishi-Gotanda, Shinagawa-ku, Tokyo 141, Japan TEL: 81-3-5434-9678 FAX: 81-3-5434-9868 URL: www.d-link.co.jp E-MAIL: kida@d-link.co.jp...
Page 177
South Africa D-Link South Africa 102 – 106 Witchhazel Avenue, Einstein Park 2, Block B, Highveld Technopark, Centurion, South Africa TEL: 27 (0) 12-665-2165 FAX: 27 (0) 12-665-2186 URL: www.d-link.co.za E-MAIL: attie@d-link.co.za Spain D-Link Iberia C/Sabino De Arana, 56 Bajos, 08028 Barcelona, Spain TEL: 34 93 4090770 FAX: 34 93 4910795 URL: www.dlinkiberia.es...
Engineering Education Finance Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product? _______________________________________________________________________________________ * Product installed in computer serial No. Personal Use 1000 or more...