D-Link DGS-1250 Series Reference Manual

permission of the D-Link Corporation, is strictly forbidden. Trademarks used in this text: D-Link and the D-Link logo are trademarks of the D-Link Corporation; Microsoft and Windows are registered trademarks of the Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either as the entities claiming the marks and the names or their products. D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own. © 2019 D-Link Corporation. All rights reserved. July 2019, P/N 651GS1250015G

i Table of Contents 1. Introduction ........................................................................................................................................................... 1 Audience ................................................................................................................................................................. 1 Other Documentation .............................................................................................................................................. 1 Conventions ............................................................................................................................................................ 1 Notes, Notices, and Cautions ................................................................................................................................. 2 2. Web-based Switch Configuration ....................................................................................................................... 3 Management Options ............................................................................................................................................. 3 Logging into the Web UI ......................................................................................................................................... 4 Smart Wizard .......................................................................................................................................................... 5 Step 1 - Web Mode ............................................................................................................................................ 5 Step 2 - System IP Information.......................................................................................................................... 6 Step 3 - User Accounts Settings ....................................................................................................................... 7 Step 4 - SNMP Settings ..................................................................................................................................... 8 Web User Interface (Web UI) ................................................................................................................................. 9 Areas of the User Interface................................................................................................................................ 9 3. System ................................................................................................................................................................. 12 Device Information ................................................................................................................................................ 12 System Information Settings ................................................................................................................................. 13 Peripheral Settings ............................................................................................................................................... 13 Port Configuration ................................................................................................................................................. 14 Port Settings .................................................................................................................................................... 14 Port Status ....................................................................................................................................................... 16 Port Auto Negotiation ...................................................................................................................................... 16 Error Disable Settings ...................................................................................................................................... 17 Jumbo Frame .................................................................................................................................................. 18 Interface Description ............................................................................................................................................. 19 PoE ....................................................................................................................................................................... 19 PoE System ..................................................................................................................................................... 20 PoE Status ....................................................................................................................................................... 21 PoE Configuration ........................................................................................................................................... 21 PoE Statistics .................................................................................................................................................. 23 PoE Measurement ........................................................................................................................................... 23 PoE LLDP Classification .................................................................................................................................. 24 System Log ........................................................................................................................................................... 24 System Log Settings ........................................................................................................................................ 24 System Log Discriminator Settings ................................................................................................................. 25 System Log Server Settings ............................................................................................................................ 26 System Log ...................................................................................................................................................... 27 System Attack Log ........................................................................................................................................... 28 Time and SNTP .................................................................................................................................................... 28 Clock Settings .................................................................................................................................................. 28 Time Zone Settings ......................................................................................................................................... 29 SNTP Settings ................................................................................................................................................. 31 Time Range .......................................................................................................................................................... 32 4. Management ........................................................................................................................................................ 33 User Accounts Settings ........................................................................................................................................ 33 SNMP .................................................................................................................................................................... 34 SNMP Global Settings ..................................................................................................................................... 35 SNMP Linkchange Trap Settings .................................................................................................................... 36

ii SNMP View Table Settings ............................................................................................................................. 37 SNMP Community Table Settings ................................................................................................................... 37 SNMP Group Table Settings ........................................................................................................................... 39 SNMP Engine ID Local Settings ...................................................................................................................... 40 SNMP User Table Settings.............................................................................................................................. 40 SNMP Host Table Settings .............................................................................................................................. 42 RMON ................................................................................................................................................................... 43 RMON Global Settings .................................................................................................................................... 43 RMON Statistics Settings ................................................................................................................................ 43 RMON History Settings ................................................................................................................................... 44 RMON Alarm Settings ..................................................................................................................................... 45 RMON Event Settings ..................................................................................................................................... 46 Telnet/Web............................................................................................................................................................ 47 Session Timeout ................................................................................................................................................... 48 DHCP .................................................................................................................................................................... 48 Service DHCP ................................................................................................................................................. 48 DHCP Class Settings ...................................................................................................................................... 49 DHCP Relay .................................................................................................................................................... 50 DHCPv6 Relay ................................................................................................................................................ 56 DHCP Auto Configuration ..................................................................................................................................... 61 DNS ...................................................................................................................................................................... 61 DNS Global Settings ........................................................................................................................................ 61 DNS Name Server Settings ............................................................................................................................. 62 DNS Host Settings ........................................................................................................................................... 63 File System ........................................................................................................................................................... 63 D-Link Discovery Protocol .................................................................................................................................... 66 5. Layer 2 Features ................................................................................................................................................. 67 FDB ....................................................................................................................................................................... 67 Static FDB........................................................................................................................................................ 67 MAC Address Table Settings .......................................................................................................................... 68 MAC Address Table ........................................................................................................................................ 69 MAC Notification .............................................................................................................................................. 70 VLAN ..................................................................................................................................................................... 71 VLAN Configuration Wizard............................................................................................................................. 71 802.1Q VLAN .................................................................................................................................................. 74 VLAN Interface ................................................................................................................................................ 75 Asymmetric VLAN ........................................................................................................................................... 78 L2VLAN Interface Description ......................................................................................................................... 79 Auto Surveillance VLAN .................................................................................................................................. 79 Voice VLAN ..................................................................................................................................................... 85 STP ....................................................................................................................................................................... 88 STP Global Settings ........................................................................................................................................ 90 STP Port Settings ............................................................................................................................................ 92 MST Configuration Identification ..................................................................................................................... 93 STP Instance ................................................................................................................................................... 94 MSTP Port Information .................................................................................................................................... 95 Loopback Detection .............................................................................................................................................. 95 Link Aggregation ................................................................................................................................................... 97 L2 Multicast Control .............................................................................................................................................. 99 IGMP Snooping ............................................................................................................................................... 99 MLD Snooping ............................................................................................................................................... 105 Multicast Filtering Mode ................................................................................................................................. 111

iii LLDP ................................................................................................................................................................... 112 LLDP Global Settings .................................................................................................................................... 112 LLDP Port Settings ........................................................................................................................................ 113 LLDP Management Address List ................................................................................................................... 114 LLDP Basic TLVs Settings ............................................................................................................................ 114 LLDP Dot1 TLVs Settings.............................................................................................................................. 116 LLDP Dot3 TLVs Settings.............................................................................................................................. 117 LLDP-MED Port Settings ............................................................................................................................... 118 LLDP Statistics Information ........................................................................................................................... 119 LLDP Local Port Information ......................................................................................................................... 120 LLDP Neighbor Port Information ................................................................................................................... 121 6. Layer 3 Features ............................................................................................................................................... 124 ARP ..................................................................................................................................................................... 124 ARP Aging Time ............................................................................................................................................ 124 Static ARP ..................................................................................................................................................... 125 ARP Table ..................................................................................................................................................... 125 Gratuitous ARP ................................................................................................................................................... 126 IPv6 Neighbor ..................................................................................................................................................... 127 Interface .............................................................................................................................................................. 127 IPv4 Interface ................................................................................................................................................ 127 IPv6 Interface ................................................................................................................................................ 129 IPv4 Static/Default Route .................................................................................................................................... 132 IPv4 Route Table ................................................................................................................................................ 134 IPv6 Static/Default Route .................................................................................................................................... 134 IPv6 Route Table ................................................................................................................................................ 135 IP Multicast Routing Protocol.............................................................................................................................. 136 IPMC .............................................................................................................................................................. 136 IPv6MC .......................................................................................................................................................... 136 7. Quality of Service (QoS) ................................................................................................................................... 138 Basic Settings ..................................................................................................................................................... 138 Port Default CoS ............................................................................................................................................ 138 Port Scheduler Method .................................................................................................................................. 139 Queue Settings .............................................................................................................................................. 140 CoS to Queue Mapping ................................................................................................................................. 141 Port Rate Limiting .......................................................................................................................................... 141 Queue Rate Limiting ...................................................................................................................................... 142 Advanced Settings .............................................................................................................................................. 143 DSCP Mutation Map ...................................................................................................................................... 143 Port Trust State and Mutation Binding .......................................................................................................... 144 DSCP CoS Mapping ...................................................................................................................................... 145 Class Map ...................................................................................................................................................... 145 Policy Map ..................................................................................................................................................... 147 Policy Binding ................................................................................................................................................ 149 8. Access Control List (ACL) ............................................................................................................................... 150 ACL Configuration Wizard .................................................................................................................................. 150 Step 1 - Create/Update .................................................................................................................................. 150 Step 2 - Select Packet Type .......................................................................................................................... 151 Step 3 - Add Rule .......................................................................................................................................... 152 Step 4 - Apply Port ........................................................................................................................................ 159 ACL Access List .................................................................................................................................................. 160 Standard IP ACL ............................................................................................................................................ 162

iv Extended IP ACL ........................................................................................................................................... 163 Standard IPv6 ACL ........................................................................................................................................ 165 Extended IPv6 ACL ....................................................................................................................................... 166 Extended MAC ACL ...................................................................................................................................... 169 ACL Interface Access Group .............................................................................................................................. 170 9. Security .............................................................................................................................................................. 172 Port Security ....................................................................................................................................................... 172 Port Security Global Settings......................................................................................................................... 172 Port Security Port Settings ............................................................................................................................ 173 Port Security Address Entries........................................................................................................................ 174 802.1X ................................................................................................................................................................. 174 802.1X Global Settings .................................................................................................................................. 178 802.1X Port Settings ...................................................................................................................................... 179 Authentication Sessions Information ............................................................................................................. 180 Authenticator Statistics .................................................................................................................................. 180 Authenticator Session Statistics .................................................................................................................... 181 Authenticator Diagnostics .............................................................................................................................. 182 AAA ..................................................................................................................................................................... 183 AAA Global Settings ...................................................................................................................................... 183 Authentication Settings .................................................................................................................................. 183 RADIUS .............................................................................................................................................................. 184 RADIUS Global Settings ................................................................................................................................ 184 RADIUS Server Settings ............................................................................................................................... 184 RADIUS Group Server Settings .................................................................................................................... 185 RADIUS Statistic ........................................................................................................................................... 186 IMPB ................................................................................................................................................................... 187 IPv4 ................................................................................................................................................................ 187 IPv6 ................................................................................................................................................................ 199 DHCP Server Screening ..................................................................................................................................... 205 DHCP Server Screening Global Settings ...................................................................................................... 206 DHCP Server Screening Port Settings .......................................................................................................... 207 ARP Spoofing Prevention ................................................................................................................................... 208 Network Access Authentication .......................................................................................................................... 208 Guest VLAN ................................................................................................................................................... 208 Network Access Authentication Global Settings ........................................................................................... 209 Network Access Authentication Port Settings ............................................................................................... 210 Network Access Authentication Sessions Information .................................................................................. 211 Safeguard Engine ............................................................................................................................................... 211 Safeguard Engine Settings ............................................................................................................................ 213 CPU Protect Counters ................................................................................................................................... 213 CPU Protect Sub-Interface ............................................................................................................................ 214 CPU Protect Type .......................................................................................................................................... 215 Trusted Host ....................................................................................................................................................... 215 Traffic Segmentation Settings............................................................................................................................. 216 Storm Control Settings ........................................................................................................................................ 217 DoS Attack Prevention Settings ......................................................................................................................... 219 SSH ..................................................................................................................................................................... 220 SSH Global Settings ...................................................................................................................................... 221 Host Key ........................................................................................................................................................ 222 SSH Server Connection ................................................................................................................................ 223 SSH User Settings ......................................................................................................................................... 223 SSL ..................................................................................................................................................................... 224

v SSL Global Settings ...................................................................................................................................... 225 Crypto PKI Trustpoint .................................................................................................................................... 226 SSL Service Policy ........................................................................................................................................ 227 Network Protocol Port Protect Settings .............................................................................................................. 228 10. OAM .................................................................................................................................................................... 229 Cable Diagnostics ............................................................................................................................................... 229 11. Monitoring ......................................................................................................................................................... 231 Utilization ............................................................................................................................................................ 231 Port Utilization ............................................................................................................................................... 231 Statistics .............................................................................................................................................................. 232 Port ................................................................................................................................................................ 232 Interface Counters ......................................................................................................................................... 234 Counters ........................................................................................................................................................ 235 Mirror Settings .................................................................................................................................................... 236 Device Environment ............................................................................................................................................ 238 12. Green .................................................................................................................................................................. 239 Power Saving ...................................................................................................................................................... 239 EEE ..................................................................................................................................................................... 241 13. Toolbar ............................................................................................................................................................... 242 Save .................................................................................................................................................................... 242 Save Configuration ........................................................................................................................................ 242 Tools ................................................................................................................................................................... 242 Firmware Upgrade & Backup ........................................................................................................................ 242 Configuration Restore & Backup ................................................................................................................... 244 Certificate & Key Restore & Backup .............................................................................................................. 247 Log Backup .................................................................................................................................................... 249 Ping ................................................................................................................................................................ 250 Language Management ................................................................................................................................. 251 Reset ............................................................................................................................................................. 252 Reboot System .............................................................................................................................................. 252 Wizard ................................................................................................................................................................. 253 Online Help ......................................................................................................................................................... 253 D-Link Support Site ....................................................................................................................................... 253 User Guide .................................................................................................................................................... 253 Surveillance Mode .............................................................................................................................................. 253 Logout ................................................................................................................................................................. 254 14. Surveillance Mode ............................................................................................................................................ 255 Surveillance Overview ........................................................................................................................................ 255 Surveillance Topology ................................................................................................................................... 255 Device Information ......................................................................................................................................... 257 Port Information .................................................................................................................................................. 258 Group Details ................................................................................................................................................. 259 IP-Camera Information ....................................................................................................................................... 260 NVR Information ................................................................................................................................................. 261 PoE Information .................................................................................................................................................. 262 PoE Scheduling .................................................................................................................................................. 263 Management ....................................................................................................................................................... 264 File System .................................................................................................................................................... 264 Time .................................................................................................................................................................... 266 Clock Settings ................................................................................................................................................ 266 SNTP Settings ............................................................................................................................................... 267

vi Surveillance Settings .......................................................................................................................................... 268 Surveillance Log ................................................................................................................................................. 269 Health Diagnostic ................................................................................................................................................ 270 Toolbar ................................................................................................................................................................ 271 Wizard ............................................................................................................................................................ 271 Tools .............................................................................................................................................................. 271 Save ............................................................................................................................................................... 275 Help ............................................................................................................................................................... 276 Online Help .................................................................................................................................................... 277 Standard Mode .............................................................................................................................................. 277 Appendix A - System Log Entries ............................................................................................................................. 278 802.1X ................................................................................................................................................................. 278 AAA ..................................................................................................................................................................... 278 Auto Surveillance VLAN ..................................................................................................................................... 279 Configuration/Firmware ...................................................................................................................................... 279 DAI ...................................................................................................................................................................... 282 DHCPv6 Client .................................................................................................................................................... 282 DHCPv6 Relay .................................................................................................................................................... 283 DNS Resolver ..................................................................................................................................................... 283 DoS Prevention ................................................................................................................................................... 283 Interface .............................................................................................................................................................. 284 LACP ................................................................................................................................................................... 284 LBD ..................................................................................................................................................................... 284 LLDP-MED .......................................................................................................................................................... 285 Login/Logout CLI ................................................................................................................................................ 286 MSTP Debug Enhancement ............................................................................................................................... 288 Peripheral............................................................................................................................................................ 289 PoE ..................................................................................................................................................................... 290 Port Security ....................................................................................................................................................... 290 Safeguard ........................................................................................................................................................... 290 SNMP .................................................................................................................................................................. 291 SSH ..................................................................................................................................................................... 291 Storm Control ...................................................................................................................................................... 291 System Log Summary ........................................................................................................................................ 291 Telnet .................................................................................................................................................................. 292 Voice-VLAN ........................................................................................................................................................ 292 Web ..................................................................................................................................................................... 293 Appendix B - Trap Entries .......................................................................................................................................... 294 802.1X ................................................................................................................................................................. 294 Authentication Fail .............................................................................................................................................. 294 DHCP Server Screen Prevention ....................................................................................................................... 294 DoS Prevention ................................................................................................................................................... 295 ErrDisable ........................................................................................................................................................... 295 General Management ......................................................................................................................................... 295 Gratuitous ARP Function .................................................................................................................................... 295 IMPB ................................................................................................................................................................... 295 LACP ................................................................................................................................................................... 296 LBD ..................................................................................................................................................................... 296 LLDP ................................................................................................................................................................... 297 MAC-notification ................................................................................................................................................. 297 MSTP .................................................................................................................................................................. 297 Peripheral............................................................................................................................................................ 298

vii PoE ..................................................................................................................................................................... 298 Port ..................................................................................................................................................................... 299 Port Security ....................................................................................................................................................... 299 RMON ................................................................................................................................................................. 299 Safeguard ........................................................................................................................................................... 300 Start .................................................................................................................................................................... 300 Storm Control ...................................................................................................................................................... 300 System File ......................................................................................................................................................... 300 Appendix C - RADIUS Attributes Assignment ......................................................................................................... 302 Appendix D - IETF RADIUS Attributes Support ....................................................................................................... 303

1 1. Introduction This manual’s software descriptions are based on the software release 1.00. The features listed here are the subset of features that are supported by the DGS-1250 Series Switch. Audience This reference manual is intended for network administrators and other IT networking professionals responsible for managing the Switch by using the Web User Interface (Web UI). The Web UI is the secondary management interface to the DGS-1250 Series Switch, which will be generally be referred to simply as the "Switch" within this manual. This manual is written in a way that assumes that you already have the experience and knowledge of Ethernet and modern networking principles for Local Area Networks. Other Documentation The documents below are a further source of information in regards to configuring and troubleshooting the Switch. All the documents are available either from the CD, bundled with this Switch, or from the D-Link website. Other documents related to this Switch are: • DGS-1250 Series Hardware Installation Guide • DGS-1250 Series CLI Reference Guide Conventions Convention Description Boldface Font Indicates a button, a toolbar icon, menu, or menu item. For example, open the File menu and choose Cancel. Used for emphasis. May also indicate system messages or prompts appearing on screen. For example, You have mail. Bold font is also used to represent filenames, program names, and commands. For example, use the copy command. Initial capital letter Indicates a window name. Names of keys on the keyboard have initial capitals. For example, Click Enter. Menu Name > Menu Option Indicates the menu structure. Device > Port > Port Properties means the Port Properties menu option under the Port menu option that is located under the Device menu. Blue Courier Font This convention is used to represent an example of a screen console display including example entries of CLI command input with the corresponding output.

2 Notes, Notices, and Cautions Below are examples of the three types of indicators used in this manual. When administering your Switch using the information in this document, you should pay special attention to these indicators. Each example below provides an explanatory remark regarding each type of indicator. NOTE: A note indicates important information that helps you make better use of your device. NOTICE: A notice indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. CAUTION: A caution indicates a potential for property damage, personal injury, or death.

3 2. Web-based Switch Configuration Management Options Logging into the Web UI Smart Wizard Web User Interface (Web UI) Management Options The Switch provides multiple access platforms that can be used to configure, manage, and monitor networking features available on this Switch. Currently there are three management platforms available, which are described below. Command Line Interface (CLI) The Switch can be managed, out-of-band, by using the console port on the front panel of the Switch. Alternatively, the Switch can also be managed, in-band, by using a Telnet connection to any of the LAN ports on the Switch. Refer to the DGS-1250 Series CLI Reference Guide for more detailed information about the CLI. SNMP-based Management The Switch can be managed with an SNMP-compatible Network Management System (NMS). The Switch supports SNMP v1/v2c/v3. The SNMP agent on the Switch decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database. The SNMP agent on the Switch updates the MIB objects to generate statistics and counters. Web User Interface (Web UI) The Web UI can be accessed from any computer running web browsing software connected to any of the RJ45 or SFP/SFP+ ports. The Web UI on the Switch can also be accessed using an HTTPS (SSL) connection. The Web UI is a graphical representation of the features that can be viewed and configured on the Switch. Most of the features available through the CLI can be accessed through the Web UI. Web browsers like Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, or Safari can be used.

4 Logging into the Web UI To access the Web UI open a standard web browser and enter the IP address of the Switch into the address bar of the browser and press the ENTER key. NOTE: The factory default IP address of the Switch is 10.90.90.90 with a subnet mask of 255.0.0.0. NOTE: The factory default username and password is admin. Figure 2-1 Displays entering the IP address in Internet Explorer After pressing the Enter key, the following authentication window should appear, as shown below. Figure 2-2 Web UI Login Window Enter the User Name and Password in the corresponding fields and click the Login button. After clicking the Login button, the Web UI opens. The management features available in the Web UI of the Switch are explained in the chapters below. NOTE: The Switch only supports ASCII characters for input values.

5 Smart Wizard After successfully connecting to the Web UI for the first time, the Smart Wizard embedded Web utility will be launched. This wizard will guide the user through basic configuration steps that is essential for first time connection to the Switch. Step 1 - Web Mode The Switch supports two Web Modes: Standard Mode and Surveillance Mode. • The Standard Mode is used to configure, manage, and monitor most of the software features on the Switch. • The Surveillance Mode is an additional web mode specifically designed to assist the user with surveillance features supported by the Switch. NOTE: The Web Mode can only be changed when one user session is connected to the Web UI of the Switch. Figure 2-3 Web Mode The fields that can be configured are described below: Parameter Description Standard Mode Select this option to access the Standard Mode after the Smart Wizard was completed. Surveillance Mode Select this option to access the Surveillance Mode after the Smart Wizard was completed. Tick the Ignore the wizard next time option to skip the Smart Wizard on the next login.

6 Click the Exit button to discard the changes made, exit the Smart Wizard, and continue to the Web UI. Click the Next button to accept the changes made and continue to the next step. Step 2 - System IP Information In this step, we can configure System IP Information. NOTE: The Switch will probe for surveillance devices every 30 seconds. If a surveillance device is not in the same subnet as the switch, it will not be discovered automatically. Place the Switch management IP in the same subnet as the surveillance devices for ONVIF cameras to be added to the Surveillance Mode Web UI automatically. Figure 2-4 System IP Information The fields that can be configured are described below: Parameter Description Static Select this option to manually assign and configure the IP address settings for the Switch. DHCP Select this option to obtain IP address settings automatically from a DHCP server for the Switch. IP Address After selecting the Static option, manually enter the IP address of the Switch here. Netmask After selecting the Static option, manually select the Netmask option here. Gateway After selecting the Static option, manually enter the IP address of the default gateway here. Tick the Ignore the wizard next time option to skip the Smart Wizard on the next login.

7 Click the Exit button to discard the changes made, exit the Smart Wizard, and continue to the Web UI. Click the Next button to accept the changes made and continue to the next step. Step 3 - User Accounts Settings In this step, we can configure the user account settings. Figure 2-5 User Account Settings The fields that can be configured are described below: Parameter Description User Name Select the user name here. Password Type Select the password type here. Options to choose from are: • None - Specifies that no password will be configured for this user account. • Plain Text - Specifies that the password for this user account will be in the plain text form. Password After selecting Plain Text as the Password Type, enter the password for the user account here. Tick the Ignore the wizard next time option to skip the Smart Wizard on the next login. Click the Exit button to discard the changes made, exit the Smart Wizard, and continue to the Web UI. Click the Back button to discard the changes made and return to the previous step.

8 Step 4 - SNMP Settings In this step, we can enable or disable the SNMP feature. Figure 2-6 SNMP Window The fields that can be configured are described below: Parameter Description SNMP Select to enable or disable the SNMP function here. Tick the Ignore the wizard next time option to skip the Smart Wizard on the next login. Click the Exit button to discard the changes made, exit the Smart Wizard, and continue to the Web UI. Click the Back button to discard the changes made and return to the previous step. Click the Apply & Save button to accept the changes made and continue to the Web UI.

9 Web User Interface (Web UI) Areas of the User Interface The Web UI on the Switch can be divided into distinct Areas. Different areas in the Web UI provide different manageability options to simplify configuration and feature monitoring. Standard Mode After accessing the Web UI in the Standard Mode, the following will be displayed: Figure 2-7 Web UI (Standard Mode) Area Number Description AREA 1 In this area, a graphical near real-time image of the front panel of the Switch is displayed with ports and expansion modules. Port activity is displayed, depending on the specified mode. Some management functions like port monitoring are also accessible here. Click the D-Link logo to go to the D-Link website. AREA 2 In this area is a toolbar used to access functions like Save, Tools, the Wizard, Online Help, accessing the Web UI in the Surveillance Mode, customized Language preference, and a Logout option. Click the Surveillance Mode option to change the switch mode from Standard Mode to Surveillance Mode. AREA 3 AREA 1 AREA 4 AREA 2

10 Area Number Description The user account and IP address currently logged into the Web UI will also be displayed in this toolbar. AREA 3 In this area, the software features available in the Web UI of the Switch are grouped into folders containing hyperlinks that will open window frames in Area 4. There is also a search option in this area that can be used to search for specific feature keywords in the Web UI to easily find the link to the set of features. AREA 4 In this area, configuration and monitoring window frames are available based on the selections made in Area 3. Surveillance Mode After accessing the Web UI in the Surveillance Mode, the following will be displayed: Figure 2-8 Web UI (Surveillance Mode) Area Number Description AREA 1 In this area is a toolbar used to access functions like the Wizard, Tools, Save, Help, Online Help, accessing the Web UI in the Standard Mode, customized Language preference, and a Logout option. Click the Standard Mode option to change the switch mode from Surveillance Mode to Standard Mode. The user account and IP address currently logged into the Web UI will also be displayed in this toolbar. AREA 3 AREA 1 AREA 2

11 Area Number Description AREA 2 In this area, the software features available in the Web UI of the Switch are grouped into folders containing hyperlinks that will open window frames in Area 3. There is also a search option in this area that can be used to search for specific feature keywords in the Web UI to find the link to the set of features. AREA 3 In this area, configuration and monitoring window frames are available based on the selections made in Area 2. The status of devices, IP cameras, and NVRs discovered on the switch will also be displayed in this area. NOTE: For more information about the Surveillance Mode, refer to Surveillance Mode on page 255.

12 3. System Device Information System Information Settings Peripheral Settings Port Configuration PoE System Log Time and SNTP Time Range Device Information In the Device Information section, the user can view a list of basic information regarding the Switch. It appears automatically when you log on to the Switch. To return to the Device Information window after viewing other windows, click the DGS-1250-28XMP link. Figure 3-1 Device Information Window

13 System Information Settings This window is used to display and configure the system information settings and management interface configuration settings. To view the following window, click System > System Information Settings, as shown below: Figure 3-2 System Information Settings Window The fields that can be configured in System Information Settings are described below: Parameter Description System Name Enter the system name for the Switch here. This name will identify it in the Switch network. System Location Enter the location description of the Switch here. System Contact Enter the contact information for the Switch here. Click the Apply button to accept the changes made. Peripheral Settings This window is used to display and configure the environment trap settings and environment temperature threshold settings. To view the following window, click System > Peripheral Settings, as shown below: Figure 3-3 Peripheral Settings Window The fields that can be configured in Environment Trap Settings are described below: Parameter Description Fan Trap Select to enable or disable the fan trap state for warning fan event (fan failed or fan recover). Power Trap Select to enable or disable the power trap state for warning power event (power failed or power recover). Temperature Trap Select to enable or disable the temperature trap state for warning temperature event (temperature thresholds exceeded or temperature recover).

14 Click the Apply button to accept the changes made. The fields that can be configured in Environment Temperature Threshold Settings are described below: Parameter Description High Threshold Enter the high threshold value of the warning temperature setting. The range is from -100 to 200 degrees Celsius. Tick the Default check box to return to the default value. Low Threshold Enter the low threshold value of the warning temperature setting. The range is from -100 to 200 degrees Celsius. Tick the Default check box to return to the default value. Click the Apply button to accept the changes made. Port Configuration Port Settings This window is used to display and configure the Switch’s port settings. To view the following window, click System > Port Configuration > Port Settings, as shown below: Figure 3-4 Port Settings Window The fields that can be configured are described below: Parameter Description From Port - To Port Select the appropriate port range used for the configuration here. State Select to enable or disable the physical port state here. MDIX Select the Medium Dependent Interface Crossover (MDIX) option here. Options to choose from are: • Auto - Select this option for auto-sensing of the optimal type of cabling. • Normal - Select this option for normal cabling. If this option is selected, the port is in the MDIX mode and can be connected to a PC NIC using a straight- through cable or a port (in the MDI mode) on another Switch through a crossover cable.

15 Parameter Description • Cross - Select this option for crossover cabling. If this option is selected, the port is in the MDI mode and can be connected to a port (in the MDIX mode) on another Switch through a straight cable. Note: This option is only available on the 10/100/1000 Mbps RJ45 ports. Flow Control Select to turn flow control On or Off here. Ports configured for full-duplex use 802.3x flow control and Auto ports use an automatic selection of the two. Duplex Select the duplex mode used here. Options to choose from are Auto, Half, and Full. Speed Select the port speed option here. This option will manually force the connection speed on the selected port to connect at the specified speed only. The Master setting will allow the port to advertise capabilities related to duplex, speed, and physical layer type. The master setting will also determine the master and slave relationship between the two connected physical layers. This relationship is necessary for establishing the timing control between the two physical layers. The timing control is set on a master physical layer by a local source. The Slave setting uses loop timing, where the timing comes from a data stream received from the master. If one connection is set for master, the other side of the connection must be set for slave. Any other configuration will result in a ‘link down’ status for both ports. Options to choose from are: • Auto - Specifies that for copper ports, auto-negotiation will start to negotiate the speed and flow control with its link partner. For fiber ports, auto- negotiation will start to negotiate the clock and flow control with its link partner. • 10M - Specifies to force the port speed to 10 Mbps. • 100M - Specifies to force the port speed to 100 Mbps. • 1000M - Specifies to force the port speed to 1 Gbps. • 1000M Master - Specifies to force the port speed to 1 Gbps and operates as the master, to facilitate the timing of transmit and receive operations. • 1000M Slave - Specifies to force the port speed to 1 Gbps and operates as the slave, to facilitate the timing of transmit and receive operations. • 10G - Specifies to force the port speed to 10 Gbps. Capability Advertised When the Speed is set to Auto, these capabilities are advertised during auto- negotiation. Description Select the checkbox and enter the description for the corresponding port here. This can be up to 64 characters long. Click the Apply button to accept the changes made.

16 Port Status This window is used to view the Switch’s physical port status and settings. To view the following window, click System > Port Configuration > Port Status, as shown below: Figure 3-5 Port Status Window Port Auto Negotiation This window is used to view detailed port auto-negotiation information. To view the following window, click System > Port Configuration > Port Auto Negotiation, as shown below: Figure 3-6 Port Auto Negotiation Window

17 Error Disable Settings This window is used to display and configure the recovery from the Error Disable causes and to configure the recovery interval. To view the following window, click System > Port Configuration > Error Disable Settings, as shown below: Figure 3-7 Error Disable Settings Window The fields that can be configured for Error Disable Trap Settings are described below: Parameter Description Asserted Specifies to enable or disable notifications for entering into the error-disabled state. Cleared Specifies to enable or disable notifications for exiting from the error-disabled state. Notification Rate Enter the notification rate value here. This sets the number of traps per minute. The packets that exceed the rate will be dropped. The range is from 0 to 1000. The default value (0) indicates that an SNMP trap will be generated for every change of the error disabled state. Click the Apply button to accept the changes made. The fields that can be configured for Error Disable Recovery Settings are described below: Parameter Description ErrDisable Cause Select the error disabled cause here. Options to choose from are Port Security, Storm Control, Dynamic ARP Inspection, DHCP Snooping, and Loopback Detect. State Select to enable or disable the error disabled recovery feature here. Interval Enter the time, in seconds, to recover the port from the error state caused by the specified module. The range is from 5 to 86400. Click the Apply button to accept the changes made.

18 Jumbo Frame This window is used to display and configure the jumbo frame size and settings. The Switch supports jumbo frames. Jumbo frames are Ethernet frames with more than 1,518 bytes of payload. The Switch supports jumbo frames with a maximum frame size of up to 12,288 bytes. To view the following window, click System > Port Configuration > Jumbo Frame, as shown below: Figure 3-8 Jumbo Frame Window The fields that can be configured are described below: Parameter Description From Port - To Port Select the appropriate port range used for the configuration here. Maximum Receive Frame Size Enter the maximum receive frame size value here. This value must be between 64 and 12288 bytes. By default, this value is 1536 bytes. Click the Apply button to accept the changes made.

19 Interface Description This window is used to display the status, administrative status, and description of each port on the Switch. To view the following window, click System > Interface Description, as shown below: Figure 3-9 Interface Description Window Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. PoE The DGS-1250-28XMP and DGS-1250-52XMP switches support Power over Ethernet (PoE) as defined by the IEEE 802.3af and 802.3at. All PoE-supported ports can supply up to 30 Watts of power. The Switch ports can supply about 48 VDC power to Powered Devices (PDs) over Category 5 or Category 3 UTP Ethernet cables. The Switch follows the standard Power Sourcing Equipment (PSE) pin-out Alternative A, whereby power is sent out over pins 1, 2, 3, and 6. The Switches work with all D-Link 802.3af capable devices. The Switch includes the following PoE features: • Auto-discovery recognizes the connection of a PD and automatically sends power to it. • The auto-disable feature occurs under two conditions: o If the total power consumption exceeds the system power limit o If the per-port power consumption exceeds the per port power limit • Active circuit protection automatically disables the port if there is a short. Other ports will remain active. Based on IEEE 802.3af/at, power is received and supplied according to the following classifications: Class Maximum power used by the PD Maximum power supplied by the Switch 0 12.95 Watts 15.4 Watts 1 3.84 Watts 4 Watts 2 6.49 Watts 7 Watts 3 12.95 Watts 15.4 Watts 4 25.5 Watts 30 Watts

20 PoE System This window is used to configure the PoE system and display the detailed power information and PoE chip parameters for PoE modules. To view the following window, click System > PoE > PoE System, as shown below: Figure 3-10 PoE System Window The fields that can be configured for PoE System are described below: Parameter Description Usage Threshold Enter the usage threshold to generate a log and send the corresponding standard notification. The range is from 1 to 99 percent. Policy Preempt Select this option to enable or disable the disconnection of the Powered Device (PD) that is power-provisioned with a lower priority in order to release the power to the new connected PD with higher priority under power shortage conditions. Trap State Select this option to enable or disable the sending of PoE trap notifications. Click the Apply button to accept the changes made. Click the Show Detail button to see the PoE system Parameters table at the bottom of the window. After clicking the Show Detail button, the following window will appear. Figure 3-11 PoE System (Show Detail) Window

21 PoE Status This window is used to configure the description and display the PoE status of each port. To view the following window, click System > PoE > PoE Status, as shown below: Figure 3-12 PoE Status Window The fields that can be configured for PoE Status are described below: Parameter Description From Port - To Port Select the appropriate port range used for the configuration here. Description Enter the text that describes the PD connected to a PoE interface. The maximum length is 32 characters. Click the Apply button to accept the changes made. Click the Delete Description button to remove the description from the entry. PoE Configuration This window is used to display and configure the PoE configuration settings. NOTE: If the Switch failed to supply power to the IEEE 802.3at PD, • Check if the PD connected to the port supports the IEEE 802.3at standard • Manually configure the PoE power limit value to 30 Watts for the corresponding port

22 To view the following window, click System > PoE > PoE Configuration, as shown below: Figure 3-13 PoE Configuration Window The fields that can be configured for PoE Configuration are described below: Parameter Description From Port - To Port Select the appropriate port range used for the configuration here. Priority Select the priority for provisioning power to the port. Options to choose from are Critical, High and Low. Legacy Support Select this option to enable or disable the support of legacy PD. Mode Select the power management mode for the PoE ports. Options to choose from are Auto and Never. Max Wattage When selecting Auto in the Mode drop-down list, this option appears. Tick the check box and enter the maximum wattage of power that can be provisioned to the auto-detected PD. If the value is not entered, the class of the PD automatically determines the maximum wattage that can be provisioned. The valid range for maximum wattage is between 1000 mW and 30000 mW. Time Range When selecting Auto in the Mode drop-down list, this option appears. Tick the check box and enter the name of the time range to determine the activation period. Click the Apply button to accept the changes made. Click the Delete Time Range button remove the time range association for the entry.

23 PoE Statistics This window is used to display and clear the PoE statistics on the Switch ports. To view the following window, click System > PoE > PoE Statistics, as shown below: Figure 3-14 PoE Statistics Window Click the Clear All button to clear PoE statistics for all ports. Click the Clear button to clear the PoE statistics for the corresponding port. PoE Measurement This window is used to display the PoE measurement information on the Switch ports. To view the following window, click System > PoE > PoE Measurement, as shown below: Figure 3-15 PoE Measurement Window

24 PoE LLDP Classification This window is used to display the PoE Link Layer Discovery Protocol (LLDP) classification. To view the following window, click System > PoE > PoE LLDP Classification, as shown below: Figure 3-16 PoE LLDP Classification Window System Log System Log Settings This window is used to display and configure the system log settings. To view the following window, click System > System Log > System Log Settings, as shown below: Figure 3-17 System Log Settings Window The fields that can be configured for Log State are described below: Parameter Description Log State Select the enable or disable the global system log state here. Click the Apply button to accept the changes made.

25 The fields that can be configured for Buffer Log Settings are described below: Parameter Description Buffer Log State Select to globally enable or disable the buffer log state here. Options to choose from are Enable, Disabled, and Default. When selecting the Default option, the global buffer log state will follow the default behavior. Severity Select the severity value of the type of information that will be logged. Options to choose from are 0 (Emergencies), 1 (Alerts), 2 (Critical), 3 (Errors), 4 (Warnings), 5 (Notifications), 6 (Informational), and 7 (Debugging). Discriminator Name Enter the discriminator name used here. This name can be up to 15 characters long. This specifies the name of the discriminator profile that will be used to filter buffer log messages based on the filtering criteria specified within that profile. Write Delay Enter the log write delay value here. This value must be between 0 and 65535 seconds. By default, this value is 300 seconds. Tick the Infinite option, to disable the write delay feature. Click the Apply button to accept the changes made. System Log Discriminator Settings This window is used to display and configure the system log discriminator settings. To view the following window, click System > System Log > System Log Discriminator Settings, as shown below: Figure 3-18 System Log Discriminator Settings Window The fields that can be configured are described below: Parameter Description Discriminator Name Enter the name of the discriminator profile here. This name can be up to 15 characters long. Action Select the facility behavior option and the type of facility that will be associated with the selected behavior here. Behavior options to choose from are Drops and Includes. Severity Select the severity behavior option and the value of the type of information that will be logged. Behavior options to choose from are Drops and Includes. Severity value options to choose from are 0 (Emergencies), 1 (Alerts), 2 (Critical), 3 (Errors), 4 (Warnings), 5 (Notifications), 6 (Informational), and 7 (Debugging). Click the Apply button to accept the changes made.

26 Click the Delete button to delete the specified entry. System Log Server Settings This window is used to display and configure the system log server settings. To view the following window, click System > System Log > System Log Server Settings, as shown below: Figure 3-19 System Log Server Settings Window The fields that can be configured are described below: Parameter Description Host IPv4 Address Enter the system log server IPv4 address here. Host IPv6 Address Enter the system log server IPv6 address here. UDP Port Enter the system log server UDP port number here. This value must be either 514 or between 1024 and 65535. By default, this value is 514. Severity Select the severity value of the type of information that will be logged. Options to choose from are 0 (Emergencies), 1 (Alerts), 2 (Critical), 3 (Errors), 4 (Warnings), 5 (Notifications), 6 (Informational), and 7 (Debugging). Facility Select the facility number that will be logged here. The range is from 0 to 23. Each facility number is associated with a specific facility. See the table below: Facility Number Facility Name Facility Description 0 kern Kernel messages 1 user User-level messages 2 mail Mail system 3 daemon System daemons 4 auth1 Security/authorization messages 5 syslog Messages generated internally by the SYSLOG 6 lpr Line printer sub-system 7 news Network news sub-system 8 uucp UUCP sub-system 9 clock1 Clock daemon 10 auth2 Security/authorization messages 11 ftp FTP daemon 12 ntp NTP subsystem 13 logaudit Log audit

27 Parameter Description 14 logalert Log alert 15 clock2 Clock daemon 16 local0 Local use 0 (local0) 17 local1 Local use 1 (local1) 18 local2 Local use 2 (local2) 19 local3 Local use 3 (local3) 20 local4 Local use 4 (local4) 21 local5 Local use 5 (local5) 22 local6 Local use 6 (local6) 23 local7 Local use 7 (local7) Discriminator Name Enter the name of the discriminator that will be used to filter messages sent to the log server here. This name can be up to 15 characters long. Click the Apply button to accept the changes made. Click the Delete button to delete the specified entry. System Log This window is used to view and clear the system log. To view the following window, click System > System Log > System Log, as shown below: Figure 3-20 System Log Window Click the Clear Log button to clear the system log entries displayed in the table. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

28 System Attack Log This window is used to view and clear the system attack log. To view the following window, click System > System Log > System Attack Log, as shown below: Figure 3-21 System Attack Log Window Click the Clear Attack Log button to clear the system attack log entries displayed in the table. Time and SNTP Clock Settings This window is used to display and configure the time settings for the Switch. To view the following window, click System > Time and SNTP > Clock Settings, as shown below: Figure 3-22 Clock Settings Window The fields that can be configured are described below: Parameter Description Time Enter the current time in hours (HH), minutes (MM), and seconds (SS) here. For example, 18:30:30. Date Enter the current day (DD), month (MM), and year (YYYY) here. For example, 30/04/2015. Click the Apply button to accept the changes made.

29 Time Zone Settings This window is used to display and configure time zones and Daylight Savings Time settings for SNTP. To view the following window, click System > Time and SNTP > Time Zone Settings, as shown below: Figure 3-23 Time Zone Settings Window The fields that can be configured are described below: Parameter Description Summer Time State Select the summer time setting. Options to choose from are Disabled, Recurring Setting, and Date Setting. • Disabled - Select to disable the summer time setting. • Recurring Setting - Select to configure the summer time that should start and end on the specified weekday of the specified month. • Date Setting - Select to configure the summer time that should start and end on the specified date of the specified month. Time Zone Select to specify your local time zone offset from Coordinated Universal Time (UTC).

30 The fields that can be configured in Recurring Settings are described below: Parameter Description From: Week of the Month Select week of the month that summer time will start. From: Day of the Week Select the day of the week that summer time will start. From: Month Select the month that summer time will start. From: Time Select the time of the day that summer time will start. To: Week of the Month Select week of the month that summer time will end. To: Day of the Week Select the day of the week that summer time will end. To: Month Select the month that summer time will end. To: Time Select the time of the day that summer time will end. Offset Enter the number of minutes to add during summer time. The default value is 60. The range of this offset is 30, 60, 90, and 120. The fields that can be configured in Date Settings are described below: Parameter Description From: Date of the Month Select date of the month that summer time will start. From: Month Select the month that summer time will start. From: Year Enter the year that the summer time will start. From: Time Select the time of the day that summer time will start. To: Date of the Month Select date of the month that summer time will end. To: Month Select the month that summer time will end. To: Year Enter the year that the summer time will end. To: Time Select the time of the day that summer time will end. Offset Enter the number of minutes to add during summer time. The default value is 60. The range of this offset is 30, 60, 90, and 120. Click the Apply button to accept the changes made.

31 SNTP Settings The Simple Network Time Protocol (SNTP) is a protocol for synchronizing computer clocks through the Internet. It provides comprehensive mechanisms to access national time and frequency dissemination services, coordinate the SNTP subnet of servers and clients, and adjust the system clock on each participant. This window is used to display and configure the SNTP settings for the Switch. To view the following window, click System > Time and SNTP > SNTP Settings, as shown below: Figure 3-24 SNTP Settings Window The fields that can be configured in SNTP Global Settings are described below: Parameter Description SNTP State Select this option to enable or disable SNTP. Poll Interval Enter the synchronizing interval in seconds. The value is from 30 to 99999 seconds. The default interval is 720 seconds. Click the Apply button to accept the changes made. The fields that can be configured in SNTP Server Settings are described below: Parameter Description IPv4 Address Enter the IPv4 address of the SNTP server that provides the SNTP reference. IPv6 Address Enter the IPv6 address of the SNTP server that provides the SNTP reference. Click the Add button to add the SNTP server. Click the Delete button to remove the specified entry.

32 Time Range This window is used to display and configure the time profile settings. To view the following window, click System > Time Range, as shown below: Figure 3-25 Time Range Window The fields that can be configured are described below: Parameter Description Range Name Enter the time profile range name here. This name can be up to 32 characters long. From Week ~ To Week Select the starting and ending days of the week that will be used for this time profile. Tick the Daily option to use this time profile for every day of the week. Tick the End Week Day option to use this time profile from the starting day of the week until the end of the week. From Time ~ To Time Select the starting and ending time of the day that will be used for this time profile. The first drop-down menu selects the hour and the second drop-down menu selects the minute. Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Click the Delete Periodic button to delete the periodic entry. Click the Delete button to delete the specified entry.

33 4. Management User Accounts Settings SNMP RMON Telnet/Web Session Timeout DHCP DHCP Auto Configuration DNS File System D-Link Discovery Protocol User Accounts Settings On this page, user accounts can be created and updated. Active user account sessions can also be viewed on this page. To view the following window, click Management > User Accounts Settings, as shown below: After selecting the User Management Settings tab, the following page will appear. Figure 4-1 User Accounts Settings Window The fields that can be configured are described below: Parameter Description User Name Enter the user account name here. This name can be up to 32 characters long. Password Type Select the password type for this user account here. Options to choose from are None and Plain Text. Password After selecting Plain Text as the password type, enter the password for this user account here. Click the Apply button to accept the changes made. Click the Delete button to delete the specified user account entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

34 After selecting the Session Table tab, the following page will appear. Figure 4-2 Session Table Window On this page, a list of active user account session will be displayed. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. SNMP Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices. Use SNMP to configure system features, monitor performance, and detect potential problems with the Switch, switch group, or network. Managed devices that support SNMP include software (referred to as an agent) which runs locally on the device. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device. These objects are defined in a Management Information Base (MIB), which provides a standard presentation of the information controlled by the on-board SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network. The Switch supports the SNMP versions 1, 2c, and 3. The three versions of SNMP vary in the level of security provided between the management station and the network device. In SNMPv1 and SNMPv2c, user authentication is accomplished using ‘community strings’, which function like passwords. The remote user SNMP application and the Switch SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped). The default community strings for the Switch used for SNMPv1 and SNMPv2c management access are: • public - Allows authorized management stations to retrieve MIB objects. • private - Allows authorized management stations to retrieve and modify MIB objects. The SNMPv3 protocol uses a more sophisticated authentication process that is separated into two parts. The first part maintains a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user in that list can do as an SNMP manager. The SNMPv3 protocol also provides an additional layer of security that can be used to encrypt SNMP messages. The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMPv1 while assigning a higher level of security to another group, granting read/write privileges using SNMPv3. Using SNMPv3, users or groups can be allowed or be prevented from performing specific SNMP management functions. These are defined using the Object Identifier (OID) associated with a specific MIB.

35 MIBs A Management Information Base (MIB) stores management and counter information. The Switch uses the standard MIB-II Management Information Base module, and so values for MIB objects can be retrieved using any SNMP-based network management software. In addition to the standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base. Specifying the MIB Object Identifier may also retrieve the proprietary MIB. MIB values can be either read-only or read-write. The Switch incorporates a flexible SNMP management system that can be customized to suit the needs of the networks and the preferences of the network administrator. The three versions of SNMP vary in the level of security provided between the management station and the network device. SNMP settings are configured using the menus located in the SNMP folder of the Web UI. Traps Traps are messages that alert network personnel of events that occur on the Switch. The events can be as serious as a reboot (someone accidentally turned the Switch off/unplugged the Switch), or less serious like a port status change. The Switch generates traps and sends them to the trap recipient (or network manager). Typical traps include trap messages for Authentication Failure, Topology Change, and Broadcast/Multicast Storm. SNMP Global Settings This window is used to display and configure the global SNMP and trap settings. To view the following window, click Management > SNMP > SNMP Global Settings, as shown below: Figure 4-3 SNMP Global Settings Window The fields that can be configured in SNMP Global Settings are described below: Parameter Description SNMP Global State Select this option to enable or disable the SNMP feature. SNMP Response Broadcast Request Select this option to enable or disable the server to response to broadcast SNMP GetRequest packets. SNMP UDP Port Enter the SNMP UDP port number. The fields that can be configured in Trap Settings are described below: Parameter Description Trap Global State Select this option to enable or disable the sending of all or specific SNMP notifications.

36 Parameter Description SNMP Authentication Trap Tick this option to control the sending of SNMP authentication failure notifications. An authenticationFailuretrap trap is generated when the device receives an SNMP message that is not properly authenticated. The authentication method depends on the version of SNMP being used. For SNMPv1 or SNMPv2c, authentication failure occurs if packets are formed with an incorrect community string. Port Link Up Tick this option to control the sending of port link up notifications. A linkUp trap is generated when the device recognizes that one of the communication links has come up. Port Link Down Tick this option to control the sending of port link down notifications. A linkDown trap is generated when the device recognizes that a one of the communication links is down. Coldstart Tick this option to control the sending of SNMP coldStart notifications. Warmstart Tick this option to control the sending of SNMP warmStart notifications. Click the Apply button to accept the changes made. SNMP Linkchange Trap Settings This window is used to display and configure the SNMP link change trap settings. To view the following window, click Management > SNMP > SNMP Linkchange Trap Settings, as shown below: Figure 4-4 SNMP Linkchange Trap Settings Window The fields that can be configured are described below: Parameter Description From Port - To Port Select the appropriate port range used for the configuration here. Trap Sending Select this option to enable or disable the sending of the SNMP notification traps that are generated by the system. Trap State Select this option to enable or disable the SNMP linkChange trap. Click the Apply button to accept the changes made.

37 SNMP View Table Settings This window is used to assign views to community strings that define which MIB objects can be accessed by a remote SNMP manager. The SNMP sub-tree OID created with this table maps SNMP users to the views created in the SNMP User Table Settings window. To view the following window, click Management > SNMP > SNMP View Table Settings, as shown below: Figure 4-5 SNMP View Table Settings Window The fields that can be configured are described below: Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view being created. Subtree OID Type the Object Identifier (OID) sub-tree for the view. The OID identifies an object tree (MIB tree) that will be included or excluded from access by an SNMP manager. View Type Select the view type here. Options to choose from are Included and Excluded. • Included - Select to include this object in the list of objects that an SNMP manager can access. • Excluded - Select to exclude this object from the list of objects that an SNMP manager can access. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry. SNMP Community Table Settings This window is used to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the Switch. One or more of the following characteristics can be associated with the community string: • An access list containing IP addresses of SNMP managers that are permitted to use the community string to gain access to the Switch’s SNMP agent. • Any MIB view that defines the subset of MIB objects that will be accessible to the SNMP community. • Read-write or read-only level permissions for the MIB objects accessible to the SNMP community.

38 To view the following window, click Management > SNMP > SNMP Community Table Settings, as shown below: Figure 4-6 SNMP Community Table Settings Window The fields that can be configured are described below: Parameter Description Key Type The only supported key type is Plain Text. Community Name Enter an alphanumeric string of up to 32 characters that is used to identify members of an SNMP community. This string is used like a password to give remote SNMP managers access to MIB objects in the Switch’s SNMP agent. View Name Enter an alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch. The view name must exist in the SNMP View Table. Access Right Select the access right here. Options to choose from are Read Only and Read Write. • Read Only - SNMP community members using the community string created can only read the contents of the MIBs on the Switch. • Read Write - SNMP community members using the community string created can read from, and write to the contents of the MIBs on the Switch. IP Access-List Name Enter the name of the standard access list to restrict the users that can use this community string to access to the SNMP agent. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry.

39 SNMP Group Table Settings An SNMP group created with this table maps SNMP users to the views created in the SNMP View Table Settings window. To view the following window, click Management > SNMP > SNMP Group Table Settings, as shown below: Figure 4-7 SNMP Group Table Settings Window The fields that can be configured are described below: Parameter Description Group Name Enter the SNMP group name here. This name can be up to 32 characters long. Spaces are not allowed. Read View Name Enter the read view name that users of the group can access. User-based Security Model Select the security model here. Options to choose from are SNMPv1, SNMPv2c, and SNMPv3. • SNMPv1 - Select to allow the group to use the SNMPv1 security model. • SNMPv2c - Select to allow the group to use the SNMPv2c security model. • SNMPv3 - Select to allow the group to use the SNMPv3 security model. Write View Name Enter the write view name that the users of the group can access. Security Level When selecting SNMPv3 in the User-based Security Model drop-down list, this option is available. • NoAuthNoPriv - Specify that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager. • AuthNoPriv - Specify that authorization will be required, but there will be no encryption of packets sent between the Switch and a remote SNMP manager. • AuthPriv - Specify that authorization will be required, and that packets sent between the Switch and a remote SNMP manger will be encrypted. Notify View Name Enter the notify view name that users of the group can access. The notify view describes the object that can be reported its status via trap packets to the group user. IP Access-List Name Enter the standard IP access control list (ACL) to associate with the group. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry.

40 SNMP Engine ID Local Settings The Engine ID is a unique identifier used for SNMPv3 implementations on the Switch. To view the following window, click Management > SNMP > SNMP Engine ID Local Settings, as shown below: Figure 4-8 SNMP Engine ID Local Settings Window The fields that can be configured are described below: Parameter Description Engine ID Enter the SNMP engine ID string here. This string can be up to 24 characters long. Click the Default button to revert the engine ID to the default. Click the Apply button to accept the changes made. SNMP User Table Settings This window is used to display and configure the SNMP users that are currently configured on the Switch. To view the following window, click Management > SNMP > SNMP User Table Settings, as shown below: Figure 4-9 SNMP User Table Settings Window The fields that can be configured are described below: Parameter Description User Name Enter SNMP user name here. This name can be up to 32 characters long. This is used to identify the SNMP user.

41 Parameter Description Group Name Enter the SNMP group name to which the user belongs. This name can be up to 32 characters long. Spaces are not allowed. SNMP Version Select the SNMP version. Options to choose from are v1, v2c, and v3. SNMP V3 Encryption When selecting v3 in the SNMP Version drop-down list, this option is available. Options to choose from are None, Password, and Key. Auth-Protocol by Password When selecting v3 in the SNMP Version drop-down list, and selecting Password in the SNMP V3 Encryption drop-down list, this option is available. Select the authentication level. Options to choose from are the following: • MD5 - Select to use the HMAC-MD5-96 authentication level. This field will require the user to enter a password or key. • SHA - Specify that the HMAC-SHA authentication protocol will be used. This field will require the user to enter a password or key. Password Enter the Auth-Protocol password here. For MD5 this password must be between 8 and 16 characters long. For SHA this password must be between 8 and 20 characters long. Priv-Protocol by Password When selecting v3 in the SNMP Version drop-down list, and selecting Password in the SNMP V3 Encryption drop-down list, this option is available. Select the private protocol. Options to choose from are the following: • None - Specify that no authorization protocol is in use. • DES56 - Specify that DES 56-bit encryption is in use, based on the CBC- DES (DES-56) standard. This field will require the user to enter a password or a key. Password Enter the Priv-Protocol password here. For none, this field will be disabled. For DES56 the password must be between 8 and 16 characters long. Auth-Protocol by Key When selecting v3 in the SNMP Version drop-down list, and selecting Key in the SNMP V3 Encryption drop-down list, this option is available. Select the authentication level. Options to choose from are the following: • MD5 - Select to use the HMAC-MD5-96 authentication level. This field will require the user to enter a password or a key. • SHA - Specify that the HMAC-SHA authentication protocol will be used. This field will require the user to enter a password or a key. Key Enter the Auth-Protocol key here. For MD5 this key must be 32 characters long. For SHA this key must be 40 characters long. Priv-Protocol by Key When selecting v3 in the SNMP Version drop-down list, and selecting Key in the SNMP V3 Encryption drop-down list, this option is available. Select the private protocol. Options to choose from are the following: • None - Specify that no authorization protocol is in use. • DES56 - Specify that DES 56-bit encryption is in use, based on the CBC- DES (DES-56) standard. This field will require the user to enter a password or a key. Key Enter the Priv-Protocol key here. For none, this field will be disabled. For DES56 the key must be 32 characters long. IP Access-List Name Enter the standard IP access control list (ACL) to associate with the user. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry.

42 SNMP Host Table Settings This window is used to display and configure the recipient of the SNMP notification. To view the following window, click Management > SNMP > SNMP Host Table Settings, as shown below: Figure 4-10 SNMP Host Table Settings Window The fields that can be configured are described below: Parameter Description Host IPv4 Address Enter the IPv4 address of the SNMP notification host. Host IPv6 Address Enter the IPv6 address of the SNMP notification host. User-based Security Model Select the security model here. Options to choose from are SNMPv1, SNMPv2c, and SNMPv3. • SNMPv1 - Select to allow the group user to use the SNMPv1 security model. • SNMPv2c - Select to allow the group user to use the SNMPv2c security model. • SNMPv3 - Select to allow the group user to use the SNMPv3 security model. Security Level When selecting SNMPv3 in the User-based Security Model drop-down list, this option is available. • NoAuthNoPriv - Specify that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager. • AuthNoPriv - Specify that authorization will be required, but there will be no encryption of packets sent between the Switch and a remote SNMP manager. • AuthPriv - Specify that authorization will be required, and that packets sent between the Switch and a remote SNMP manger will be encrypted. UDP Port Enter the UDP port number. The default trap UDP port number is 162. The range of UDP port numbers is from 1 to 65535. Some port numbers may conflict with other protocols. Community String / SNMPv3 User Name Enter the community string or SNMPv3 user name to be sent with the notification packet. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry.

43 RMON RMON Global Settings This window is used to enable or disable remote monitoring (RMON) for the rising and falling alarm trap feature for the SNMP function on the Switch. To view the following window, click Management > RMON > RMON Global Settings, as shown below: Figure 4-11 RMON Global Settings Window The fields that can be configured are described below: Parameter Description RMON Rising Alarm Trap Select this option to enable or disable the RMON Rising Alarm Trap Feature. RMON Falling Alarm Trap Select this option to enable or disable the RMON Falling Alarm Trap Feature. Click the Apply button to accept the changes made. RMON Statistics Settings This window is used to display and configure the RMON statistics on the specified port. To view the following window, click Management > RMON > RMON Statistics Settings, as shown below: Figure 4-12 RMON Statistics Settings Window The fields that can be configured are described below: Parameter Description Port Select to choose the port. Index Enter the RMON table index. The value is from 1 to 65535. Owner Enter the owner string. The string can be up to 127 characters. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry. Click the Show Detail button to see the detail information of the specific port. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

44 After clicking the Show Detail button, the following window will appear. Figure 4-13 RMON Statistics Settings (Show Detail) Window Click the Back button to return to the previous window. RMON History Settings This window is used to display and configure RMON MIB history statistics gathered on the specified port. To view the following window, click Management > RMON > RMON History Settings, as shown below: Figure 4-14 RMON History Settings Window The fields that can be configured are described below: Parameter Description Port Select the port that will be used here. Index Enter the history group table index. The value is from 1 to 65535. Bucket Number Enter the number of buckets specified for the RMON collection history group of statistics. The range is from 1 to 65535. The default value is 50. Interval Enter the time in seconds in each polling cycle. The range is from 1 to 3600. Owner Enter the owner string. The string can be up to 127 characters. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry. Click the Show Detail button to see the detail information of the specific port. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

45 After clicking the Show Detail button, the following window will appear. Figure 4-15 RMON History Settings (Show Detail) Window Click the Back button to return to the previous window. RMON Alarm Settings This window is used to display and configure alarm entries to monitor an interface. To view the following window, click Management > RMON > RMON Alarm Settings, as shown below: Figure 4-16 RMON Alarm Settings Window The fields that can be configured are described below: Parameter Description Index Enter the alarm index. The range is from 1 to 65535. Interval Enter the interval in seconds for the sampling of the variable and checking against the threshold. The valid range is from 1 to 2147483648 seconds. Variable Enter the object identifier of the variable to be sampled. Type Select the monitoring type. Options to choose from are Absolute and Delta. Rising Threshold Enter the rising threshold value between 0 and 2147483647. Falling Threshold Enter the falling threshold value between 0 and 2147483647. Rising Event Number Enter the index of the event entry that is used to notify the rising threshold crossing event. The valid range is from 1 to 65535. If not specified, no action is taken while crossing the ringing threshold. Falling Event Number Enter the index of the event entry that is used to notify the falling threshold crossing event. The valid range is from 1 to 65535. If not specified, no action is taken while crossing the falling threshold. Owner Enter the owner string up to 127 characters. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry.

46 Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. RMON Event Settings This window is used to display and configure event entries. To view the following window, click Management > RMON > RMON Event Settings, as shown below: Figure 4-17 RMON Event Settings Window The fields that can be configured are described below: Parameter Description Index Enter the index value of the alarm entry here. The range is from 1 to 65535. Description Enter a description for the RMON event entry. The string is up to 127 characters long. Type Select the RMON event entry type. Options to choose from are None, Log, Trap, and Log and Trap. Community Enter the community string. The string can be up to 127 characters. Owner Enter the owner string. The string can be up to 127 characters. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specified entry. Click the View Logs button to see the detail information of the specific port. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the View Logs button, the following window will appear. Figure 4-18 RMON Event Settings (View Logs) Window

47 Click the Back button to return to the previous window. Telnet/Web This window is used to display and configure Telnet and Web settings on the Switch. To view the following window, click Management > Telnet/Web, as shown below: Figure 4-19 Telnet/Web Window The fields that can be configured in Telnet Settings are described below: Parameter Description Telnet State Select to enable or disable the Telnet server feature here. Port Enter the TCP port number used for Telnet management of the Switch. The well- known TCP port for the Telnet protocol is 23. The range is from 1 to 65535. Click the Apply button to accept the changes made. The fields that can be configured in Web Settings are described below: Parameter Description Web State Select this option to enable or disable the configuration through the web. Port Enter the TCP port number used for Web management of the Switch. The well- known TCP port for the Web protocol is 80. The range is from 1 to 65535. Click the Apply button to accept the changes made.

48 Session Timeout This window is used to display and configure the session timeout settings. The outgoing session timeout values are used for Console/Telnet/SSH connections through the CLI of the Switch to the Telnet interface of another switch. To view the following window, click Management > Session Timeout, as shown below: Figure 4-20 Session Timeout Window The fields that can be configured are described below: Parameter Description Web Session Timeout Enter the web session timeout value here. The range is from 60 to 36000 seconds. The default value is 180 seconds. Select the Default option to use the default value. Console Session Timeout Enter the console session timeout value here. The range is from 0 to 1439 minutes. Enter 0 to disable the timeout. The default value is 3 minutes. Select the Default option to use the default value. Telnet Session Timeout Enter the Telnet session timeout value here. The range is from 0 to 1439 minutes. Enter 0 to disable the timeout. The default value is 3 minutes. Select the Default option to use the default value. SSH Session Timeout Enter the SSH session timeout value here. The range is from 0 to 1439 minutes. Enter 0 to disable the timeout. The default value is 3 minutes. Select the Default option to use the default value. Click the Apply button to accept the changes made. DHCP Service DHCP This window is used to display and configure the DHCP service on the Switch. To view the following window, click Management > DHCP > Service DHCP, as shown below: Figure 4-21 Service DHCP Window

49 The fields that can be configured in Service DHCP are described below: Parameter Description Service DHCP State Select this option to enable or disable the DHCP service. Click the Apply button to accept the changes made. The fields that can be configured in Service IPv6 DHCP are described below: Parameter Description Service IPv6 DHCP State Select this option to enable or disable the IPv6 DHCP service. Click the Apply button to accept the changes made. DHCP Class Settings This window is used to display and configure the DHCP class and the DHCP option matching pattern for the DHCP class. To view the following window, click Management > DHCP > DHCP Class Settings, as shown below: Figure 4-22 DHCP Class Settings Window The fields that can be configured are described below: Parameter Description Class Name Enter the DHCP class name with a maximum of 32 characters. Click the Apply button to accept the changes made. Click the Edit button to modify the DHCP option matching pattern for the corresponding DCHP class. Click the Delete button to remove the specified entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

50 After clicking the Edit button, the following window will appear. Figure 4-23 DHCP Class Settings (Edit) Window The fields that can be configured are described below: Parameter Description Option Enter the DHCP option number. The range is from 1 to 254. Hex Enter the hex pattern of the specified DHCP option. Tick the * check box not to match the remaining bits of the option. Bitmask Enter the hex bit mask for masking of the pattern. The masked pattern bits will be matched. If not specified, all bits entered in the Hex field will be checked. Click the Apply button to accept the changes made. Click the Delete button to remove the specified entry. Click the Back button to return to the previous window. DHCP Relay DHCP Relay Global Settings This window is used to display and configure the global DHCP relay settings. To view the following window, click Management > DHCP > DHCP Relay > DHCP Relay Global Settings, as shown below: Figure 4-24 DHCP Relay Global Settings Window The fields that can be configured are described below: Parameter Description DHCP Smart Relay State Select to globally enable or disable the DHCP smart relay state here. Click the Apply button to accept the changes made.

51 DHCP Relay Pool Settings This window is used to display and configure the DHCP relay pool on a DHCP relay agent. To view the following window, click Management > DHCP > DHCP Relay > DHCP Relay Pool Settings, as shown below: Figure 4-25 DHCP Relay Pool Settings Window The fields that can be configured are described below: Parameter Description Pool Name Enter the address pool name with a maximum of 32 characters. Click the Apply button to accept the changes made. Click the Edit button to modify the corresponding information of the specific DHCP pool. Click the Delete button to remove the specified entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. After clicking the Edit button under Source, the following window will appear. Figure 4-26 DHCP Relay Pool Source Settings Window The fields that can be configured are described below: Parameter Description Source IP Address Enter the source subnet of client packets. Subnet Mask Enter the network mask of the source subnet. Click the Apply button to accept the changes made. Click the Delete button to remove the specified entry. Click the Back button to return to the previous window.

52 After clicking the Edit button under Destination, the following window will appear. Figure 4-27 DHCP Relay Pool Destination Settings Window The fields that can be configured are described below: Parameter Description Relay Destination Enter the relay destination DHCP server IP address. Click the Apply button to accept the changes made. Click the Delete button to remove the specified entry. Click the Back button to return to the previous window. After clicking the Edit button under Class, the following window will appear. Figure 4-28 DHCP Relay Pool Class Settings Window The fields that can be configured are described below: Parameter Description Class Name Select the DHCP class name. Click the Apply button to accept the changes made. Click the Edit button to edit more information. Click the Delete button to remove the specified entry. Click the Back button to return to the previous window.

53 After clicking the Edit button, the following window will appear. Figure 4-29 DHCP Relay Pool Class Edit Settings Window The fields that can be configured are described below: Parameter Description Relay Target Enter the DHCP relay target for relaying packets that matches the value pattern of the option defined in the DHCP class. Click the Apply button to accept the changes made. Click the Delete button to remove the specified entry. Click the Back button to return to the previous window. DHCP Relay Information Settings This window is used to display and configure the DHCP relay information. To view the following window, click Management > DHCP > DHCP Relay > DHCP Relay Information Settings, as shown below: Figure 4-30 DHCP Relay Information Settings Window The fields that can be configured are described below: Parameter Description Information Trust All Select this option to enable or disable the DHCP relay agent to trust the IP DHCP relay information for all interfaces. Information Check Select this option to enable or disable the DHCP relay agent to validate and remove the relay agent information option in the received DHCP reply packet. Information Policy Select the Option 82 re-forwarding policy for the DHCP relay agent. Options to choose from are Keep, Drop, and Replace.

54 Parameter Description • Keep - Select to keep the packet that already has the relay option. The packet is left unchanged and directly relayed to the DHCP server. • Drop - Select to discard the packet that already has the relay option. • Replace - Select to replace the packet that already has the relay option. The packet will be replaced with a new option. Information Option Select this option to enable or disable the insertion of relay agent information (Option 82) during the relay of DHCP request packets. Click the Apply button to accept the changes made. Click the Edit button to modify the corresponding interface. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. DHCP Relay Information Option Format Settings This window is used to display and configure the DHCP information format. To view the following window, click Management > DHCP > DHCP Relay > DHCP Relay Information Option Format Settings, as shown below: Figure 4-31 DHCP Relay Information Option Format Settings Window The fields that can be configured in DHCP Relay Information Option Format Global are described below: Parameter Description Information Format Remote ID Select the DHCP information remote ID sub-option. Options to choose from are: • Default - Select to use the Switch's system MAC address as the remote ID. • User Define - Select to use a user-defined remote ID. Enter the user-defined string with the maximum of 32 characters in the text box. • Vendor2 - Select to use vendor 2 as the remote ID. • Vendor3 - Select to use vendor 3 as the remote ID. Information Format Circuit ID Select the DHCP information circuit ID sub-option. Options to choose from are: • Default - Select to use the default circuit ID sub-option. • User Define - Select to use a user-defined circuit ID. Enter the user-defined string with the maximum of 32 characters in the text box.

55 Parameter Description • Vendor1 - Select to use vendor 1 as the circuit ID. • Vendor2 - Select to use vendor 2 as the circuit ID. • Vendor3 - Select to use vendor 3 as the circuit ID. • Vendor4 - Select to use vendor 4 as the circuit ID. • Vendor5 - Select to use vendor 5 as the circuit ID. • Vendor6 - Select to use vendor 6 as the circuit ID. Click the Apply button to accept the changes made. The fields that can be configured in DHCP Relay Information Option Format Global are described below: Parameter Description From Port - To Port Select the range of ports that will be used for this configuration here. Format Specifies that the vendor 3 format will be used. Type Select to use the Remote ID type or Circuit ID type here. Value Enter the vendor-defined string for Option 82 information in the remote/circuit ID sub-option here. This string can be up to 32 characters long. Click the Apply button to accept the changes made. DHCP Local Relay VLAN Settings This window is used to display and configure local relay on a VLAN or a group of VLANs. To view the following window, click Management > DHCP > DHCP Relay > DHCP Local Relay VLAN Settings, as shown below: Figure 4-32 DHCP Local Relay VLAN Settings Window The fields that can be configured are described below: Parameter Description DHCP Local Relay VID List Enter the VLAN ID for DHCP local relay. Tick the All VLANs check box to select all VLANs. State Select this option to enable or disable the DHCP local relay on the specific VLAN(s). Click the Apply button to accept the changes made. NOTE: When the state of the DHCP relay port is disabled, the port will not relay or locally relay received DHCP packets.

56 DHCPv6 Relay DHCPv6 Relay Global Settings This window is used to display and configure the DHCPv6 Relay remote ID settings. To view the following window, click Management > DHCP > DHCPv6 Relay > DHCPv6 Relay Global Settings, as shown below: Figure 4-33 DHCPv6 Relay Global Settings Window The fields that can be configured in DHCPv6 Relay Remote ID Settings are described below: Parameter Description IPv6 DHCP Relay Remote ID Format Select the IPv6 DHCP Relay remote ID format that will be used here. Options to choose from are Default, CID with User Define, User Define, and Expert UDF. Standalone Unit Format After selecting the Expert UDF option, select the standalone unit format here. Options to choose from are 0 and 1. IPv6 DHCP Relay Remote ID UDF Select to choose the User Define Field (UDF) for remote ID. Options to choose from are ASCII, and Hex. • ASCII - Select to enter the ASCII string with a maximum of 128 characters in the text box. • HEX - Select to enter the hexadecimal string with a maximum of 256 characters in the text box. IPv6 DHCP Relay Remote ID Policy Select to choose Option 37 forwarding policy for the DHCPv6 relay agent. Options to choose from are Keep, and Drop. • Keep - Select that the DHCPv6 request packet that already has the relay agent Remote-ID option is left unchanged and directly relayed to the DHCPv6 server. • Drop - Select to discard the packet that already has the relay agent Remote- ID Option 37. IPv6 DHCP Relay Remote ID Option Select this option to enable or disable the insertion of the relay agent remote ID Option 37 during the relay of DHCP for IPv6 request packets. Click the Apply button to accept the changes made. The fields that can be configured in DHCPv6 Relay Information Option MAC Format are described below: Parameter Description Case Select the case that will be used here. Options to choose from are: • Lowercase - Specifies that the MAC format will be lowercase.

57 Parameter Description o For example, aa-bb-cc-dd-ee-ff. • Uppercase - Specifies that the MAC format will be uppercase. o For example, AA-BB-CC-DD-EE-FF. Delimiter Select the delimiter that will be used here. Options to choose from are: • Hyphen - Specifies that the MAC address format will contain hyphens. o For example, AA-BB-CC-DD-EE-FF. • Colon - Specifies that the MAC address format will contain colons. o For example, AA:BB:CC:DD:EE:FF. • Dot - Specifies that the MAC address format will contain dots. o For example, AA.BB.CC.DD.EE.FF. • None - Specifies that the MAC address format will contain no delimiters. o For example, AABBCCDDEEFF. Delimiter Number Specifies the delimiter number that will be used in the MAC address format here. Options to choose from are: • 1 - Specifies to use a single delimiter. o For example, AABBCC.DDEEFF. • 2 - Specifies to use two delimiters. o For example, AABB.CCDD.EEFF • 5 - Specifies to use multiple delimiters. o For example, AA.BB.CC.DD.EE.FF Click the Apply button to accept the changes made. DHCPv6 Relay Interface Settings This window is used to display and configure the DHCPv6 relay interface settings. To view the following window, click Management > DHCP > DHCPv6 Relay > DHCPv6 Relay Interface Settings, as shown below: Figure 4-34 DHCPv6 Relay Interface Settings Window The fields that can be configured are described below: Parameter Description Interface VLAN Enter the interface VLAN ID used in the DHCPv6 relay here. The range is from 1 to 4094.

58 Parameter Description Destination IPv6 Address Enter the DHCPv6 relay destination address. Output Interface VLAN Enter the output interface VLAN ID for the relay destination here. The range is from 1 to 4094. Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Click the Delete button to remove the specified entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. DHCPv6 Relay Remote ID Profile Settings This window is used to display and configure the DHCPv6 relay remote ID profile settings. This is used to create a new profile for DHCPv6 relay Option 82. To view the following window, click Management > DHCP > DHCPv6 Relay > DHCPv6 Relay Remote ID Profile Settings, as shown below: Figure 4-35 DHCPv6 Relay Remote ID Profile Settings Window The fields that can be configured are described below: Parameter Description Profile Name Enter the profile name here. This string can be up to 32 characters long. Format String After clicking the Edit button, enter the Option 82 format string here. This string can be up to 251 characters long. The following rules need to be considered: • This string can be a hexadecimal value, an ASCII string, or any combination of hexadecimal values and ASCII characters. An ASCII string needs to be enclosed with quotation marks ("") like "Ethernet". Any ASCII characters outside of the quotation marks will be interpreted as hexadecimal values. • A formatted key string is a string that should be translated before being encapsulated in the packet. A formatted key string can be contained both ASCII strings and hexadecimal values. For example, "%" +"$"+"1~32"+ "keyword"+":": ○ % - Indicates that the string that follows this character is a formatted key string. ○ "$" or "0" - (Optional) Indicates a fill indicator. This option specifies how to fill the formatted key string to meet the length option. This option can be either "$" or "0", and cannot be specified as both at the same time.  "$" - Indicates to fill the leading space (0x20).  "0" - Indicates to fill the leading 0. The fill the leading 0 (0) is the default setting. ○ 1~32 - (Optional) Indicates a length option. This specifies how many characters or bytes the translated key string should occupy. If the actual length of the translated key string is less than the length specified by this option, a fill indicator will be used to fill it. Otherwise, this length

59 Parameter Description option and fill indicator will be ignored and the actual string will be used directly. ○ keyword - Indicates that the keyword will be translated based on the actual value of the system. The following keyword definitions specifies that a command will be refused if an unknown or unsupported keyword is detected:  devtype - The model name of the device. Only an ASCII string is allowed.  sysname - Indicates the System name of the Switch. Only an ASCII string is allowed.  ifdescr - Derived from ifDescr (IF-MIB). Only an ASCII string is allowed.  portmac - Indicates the MAC address of a port. This can be either an ASCII string or a hexadecimal value. When in the format of an ASCII string, the MAC address format can be customized using special CLI commands. When in the format of a hexadecimal value, the MAC address will be encapsulated in order in hexadecimal.  sysmac - Indicates the system MAC address. This can be either an ASCII string or a hexadecimal value. In the ASCII string format, the MAC address format can be customized using special CLI commands. In the hexadecimal format, the MAC address will be encapsulated in order in hexadecimal.  module - Indicates the module ID number. This can be either an ASCII string or a hexadecimal value.  port - Indicates the local port number. This can be either an ASCII string or a hexadecimal value.  svlan - Indicates the outer VLAN ID. This can be either an ASCII string or a hexadecimal value.  cvlan - Indicates the inner VLAN ID. This can be either an ASCII string or a hexadecimal value. ○ : - Indicates the end of the formatted key sting. If a formatted key string is the last parameter of the command, its ending character (":") can be ignored. The space (0x20) between "%" and ":" will be ignored. Other spaces will be encapsulated. • ASCII strings can be any combination of formatted key strings and 0~9, a~z, A~Z, !@#$%^&*()_+|-=\[]{};:'"/?.,<>`, and space characters. "\" is the escape character. The special character after "\" is the character itself, for example, "\%" is "%" itself, not the start indicator of a formatted key string. Spaces not in the formatted key string will also be encapsulated. • Hexadecimal values can be any combination of formatted key strings and 0~9, A~F, a~f, and space characters. The formatted key strings only support keywords that support hexadecimal values. Spaces not in the formatted key string will be ignored. Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specific entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

60 DHCPv6 Relay Format Type Settings This window is used to display and configure the DHCPv6 relay format type settings. This is used to configure DHCPv6 relay Option 37 and Option 18 of the expert UDF string of each port. To view the following window, click Management > DHCP > DHCPv6 Relay > DHCPv6 Relay Format Type Settings, as shown below: Figure 4-36 DHCPv6 Relay Format Type Settings Window The fields that can be configured are described below: Parameter Description From Port - To Port Select the range of ports that will be used for this configuration here. Type Specifies to configure the Expert UDF format type string for DHCPv6 Option 37. Format Type Expert UDF Enter the format type expert UDF string that will be used on the specified port(s) here. Click the Apply button to accept the changes made. DHCPv6 Local Relay VLAN Settings This window is used to display and configure the DHCPv6 local relay VLAN settings. When DHCPv6 local relay is enabled, it will add Option 37 and Option 18 to the request packets from the client. If the check state of Option 37 is enabled, it will check the request packet from the client and drop the packet if it contains the Option 37 DHCPv6 relay function. If disabled, the local relay function will always add Option 37 to request packets, whether the state of Option 37 is enabled or disabled. The DHCPv6 local relay function will directly forward the packet from the server to the client. To view the following window, click Management > DHCP > DHCPv6 Relay > DHCPv6 Local Relay VLAN Settings, as shown below: Figure 4-37 DHCPv6 Local Relay VLAN Settings Window

61 The fields that can be configured are described below: Parameter Description DHCPv6 Local Relay VID List Enter the DHCPv6 local relay VLAN ID(s) here. More than one VLAN ID can be entered here. Select the All VLANs option to apply this setting on all configured VLANs on this Switch. State Select to enable or disable the DHCPv6 local relay feature on the specified VLAN(s) here. Click the Apply button to accept the changes made. DHCP Auto Configuration This window is used to display and configure the DHCP auto-configuration function. To view the following window, click Management > DHCP Auto Configuration, as shown below: Figure 4-38 DHCP Auto Configuration Window The fields that can be configured are described below: Parameter Description Auto Configuration State Select this option to enable or disable the auto-configuration function. Click the Apply button to accept the changes made. DNS The Domain Name System (DNS) is used to map human-readable domain names to the IP addresses used by computers to communicate. A DNS server performs name-to-address translation, and may need to contact several name servers to translate a domain to an address. The address of the machine that supplies domain name service is often supplied by a DHCP or BOOTP server, or can be entered manually and configured into the operating system at startup. DNS Global Settings This window is used to display and configure the global DNS settings. To view the following window, click Management > DNS > DNS Global Settings, as shown below: Figure 4-39 DNS Global Settings Window

62 The fields that can be configured in DNS Global Settings are described below: Parameter Description IP Domain Lookup Select to enable or disable the IP domain lookup state here. IP Name Server Timeout Enter the maximum time to wait for a response from a specified name server. This value is between 1 and 60 seconds. Click the Apply button to accept the changes made. DNS Name Server Settings This window is used to display and configure the IP address of a domain name server. To view the following window, click Management > DNS > DNS Name Server Settings, as shown below: Figure 4-40 DNS Name Server Settings Window The fields that can be configured are described below: Parameter Description Name Server IPv4 Select and enter the IPv4 address of the DNS server. Name Server IPv6 Select and enter the IPv6 address of the DNS server. Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Click the Delete button to remove the specified entry.

63 DNS Host Settings This window is used to display and configure the static mapping entry for the host name and the IP address in the host table. To view the following window, click Management > DNS > DNS Host Settings, as shown below: Figure 4-41 DNS Host Settings Window The fields that can be configured are described below: Parameter Description Host Name Enter the host name of the equipment. IP Address Select and enter the IPv4 address of the equipment. IPv6 Address Select and enter the IPv6 address of the equipment. Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Click the Clear All button to clear the information entered in all the fields on this page. Click the Delete button to remove the specified entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. File System This window is used to view, manage, and configure the Switch file system. To view the following window, click Management > File System, as shown below: Figure 4-42 File System Window

64 The fields that can be configured are described below: Parameter Description Path Enter the path string. Click the Go button to navigate to the path entered. Click the Copy button to copy a specific file to the Switch. Click the Boot File button to configure the bootup image and configuration file settings. Click the c: hyperlink to navigate the C: drive After clicking the c: hyperlink, the following window will appear: Figure 4-43 File System (Drive) Window Click the Go button to navigate to the path entered. Click the Previous button to return to the previous window. Click the Copy button to copy a specific file to the Switch. Click the Boot File button to configure the bootup image and configuration file settings. Click the Delete button to remove a specific file from the file system. NOTE: If the boot configuration file is damaged, the Switch will automatically revert back to the default configuration. NOTE: If the boot image file is damaged, the Switch will automatically use the backup image file in the next boot up. After clicking the Copy button, the following window will appear. Figure 4-44 File System (Copy) Window The fields that can be configured in Copy File are described below: Parameter Description Source Select the source for the copy here. Options to choose from:

65 Parameter Description • startup-config - Specifies to copy the startup configuration as the source. • Image 1 - Specifies to copy firmware "Image 1" as the source. • Image 2 - Specifies to copy firmware "Image 2" as the source. • Configuration 1 - Specifies to copy "Configuration 1" as the source. • Configuration 2 - Specifies to copy "Configuration 2" as the source. Destination Select the destination for the copy here. Options to choose from: • running-config - Specifies to overwrite the running configuration with the source. • startup-config - Specifies to overwrite the start-up configuration with the source. • Image 1 - Specifies to overwrite "Image 1" with the source. • Image 2 - Specifies to overwrite "Image 2" with the source. • Configuration 1 - Specifies to overwrite "Configuration 1" with the source. • Configuration 2 - Specifies to overwrite "Configuration 2" with the source. Replace Specifies to replace the current running configuration with the indicated configuration file. Click the Apply button to initiate the copy. Click the Cancel button the discard the process. After clicking the Boot File button, the following window will appear. Figure 4-45 File System (Boot File) Window The fields that can be configured in Boot File are described below: Parameter Description Boot Image Select the boot image here. Options to choose from are Image 1 and Image 2. Boot Configuration Select the boot configuration here. Options to choose from are Configuration 1 and Configuration 2. Click the Apply button to accept the changes made. Click the Cancel button to discard the changes made.

66 D-Link Discovery Protocol This window is used to display and configure the D-Link Discovery Protocol (DDP) settings. To view the following window, click Management > D-Link Discovery Protocol, as shown below: Figure 4-46 D-Link Discovery Protocol Window The fields that can be configured in D-Link Discovery Protocol are described below: Parameter Description D-Link Discovery Protocol State Select to globally enable or disable the DDP feature here. Report Timer Select the report timer value here. This is used to configure interval between two consecutive DDP report messages. Options to choose from are 30, 60, 90, 120 seconds, or Never. Selecting Never instructs the Switch to stop sending report messages. Click the Apply button to accept the changes made. The fields that can be configured in DDP Port Settings are described below: Parameter Description From Port - To Port Select the range of ports that will be used for this configuration here. State Select to enable or disable the DDP feature on the specified port(s) here. Click the Apply button to accept the changes made.

67 5. Layer 2 Features FDB VLAN STP Loopback Detection Link Aggregation L2 Multicast Control LLDP FDB Static FDB Unicast Static FDB This window is used to display and configure the static unicast forwarding settings on the Switch. To view the following window, click L2 Features > FDB > Static FDB > Unicast Static FDB, as shown below: Figure 5-1 Unicast Static FDB Window The fields that can be configured are described below: Parameter Description Port/Drop Allows the selection of the port number on which the MAC address entered resides. This option could also drop the MAC address from the unicast static FDB. Select the port number when selecting the Port. Port Number After selecting the Port option, select the port number used here. VID Enter the VLAN ID on which the associated unicast MAC address resides. MAC Address Enter the MAC address to which packets will be statically forwarded. This must be a unicast MAC address. Click the Apply button to accept the changes made. Click the Delete All button to delete all the entries found in the display table. Click the Delete button to delete the specified entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

68 MAC Address Table Settings This window is used to display and configure the global MAC address table settings. To view the following window, click L2 Features > FDB > MAC Address Table Settings, as shown below: Figure 5-2 MAC Address Table Settings (Global Settings) Window The fields that can be configured are described below: Parameter Description Aging Time Enter the MAC address table aging time here. This value must be between 10 and 1000000 seconds. Entering 0 will disable MAC address aging. By default, this value is 300 seconds. Click the Apply button to accept the changes made. After selecting the MAC Address Learning tab option, at the top of the page, the following page will be available. Figure 5-3 MAC Address Table Settings (MAC Address Port Learning Settings) Window The fields that can be configured are described below: Parameter Description From Port - To Port Select the range of ports that will be used for this configuration here. Status Select to enable or disable the MAC address learning function on the ports specified here. Click the Apply button to accept the changes made.

69 MAC Address Table This window is used to view the entries listed in the MAC address table. To view the following window, click L2 Features > FDB > MAC Address Table, as shown below: Figure 5-4 MAC Address Table Window The fields that can be configured are described below: Parameter Description Port Select the port that will be used here. VID Enter the VLAN ID that will be used for this configuration here. MAC Address Enter the MAC address that will be used for this configuration here. Click the Clear Dynamic by Port button to clear the dynamic MAC address listed on the corresponding port. Click the Clear Dynamic by VLAN button to clear the dynamic MAC address listed on the corresponding VLAN. Click the Clear Dynamic by MAC button to clear the dynamic MAC address entered. Click the Find button to locate a specific entry based on the information entered. Click the Clear All button to clear all dynamic MAC addresses. Click the Show All button to display all the MAC addresses recorded in the MAC address table. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

70 MAC Notification This window is used to display and configure MAC notification. To view the following window, click L2 Features > FDB > MAC Notification, as shown below: Figure 5-5 MAC Notification (MAC Notification Settings) Window The fields that can be configured are described below: Parameter Description MAC Address Notification Select to enable or disable MAC notification globally on the Switch Interval Enter the time value between notifications. This value must be between 1 and 2147483647 seconds. By default, this value is 1 second. History Size Enter the maximum number of entries listed in the history log used for notification. This value must be between 0 and 500. By default, this value is 1. MAC Notification Trap State Select to enable or disable the MAC notification trap state. From Port - To Port Select the range of ports that will be used for this configuration here. Added Trap Select to enable or disable the added trap for the port(s) selected. Removed Trap Select to enable or disable the removed trap for the port(s) selected. Click the Apply button to accept the changes made for each individual section.

71 After selecting the MAC Notification History tab, at the top of the page, the following page will be available. Figure 5-6 MAC Notification (MAC Notification History) Window On this page, a list of MAC notification messages will be displayed. VLAN VLAN Configuration Wizard This window is used to start the VLAN configuration wizard. Create/Configure VLAN To view the following window, click L2 Features > VLAN > VLAN Configuration Wizard, as shown below: Figure 5-7 VLAN Configuration Wizard (Step 1) Window The fields that can be configured are described below: Parameter Description Create VLAN Select this option to create a new VLAN. • VID - Enter the VLAN ID here. The range is from 1 to 4094. Configure VLAN Select this option to configure an existing VLAN. • VID - Enter the VLAN ID here. The range is from 1 to 4094. Click the Next button to continue to the next step.

72 Create VLAN After selecting the Create VLAN option and clicking the Next button, the following window will appear. Figure 5-8 VLAN Configuration Wizard (Create VLAN) Window The fields that can be configured are described below: Parameter Description VLAN Name Enter the name for the VLAN here. Tagged Select the switch ports that are tagged members of this VLAN here. Untagged Select the switch ports that are untagged members of this VLAN here. Not Member Select the switch ports that are not members of this VLAN here. Native VLAN (PVID) Select the switch ports that support the native VLAN here. Click the View Allowed VLAN button view the allowed VLAN settings. Click the Back button to return to the previous step. Click the Apply button to accept the changes made. After clicking the View Allowed VLAN button, the following window will appear. Figure 5-9 Allowed VLAN Window

73 Configure VLAN After selecting the Configure VLAN option and clicking the Next button, the following window will appear. Figure 5-10 VLAN Configuration Wizard (Configure VLAN) Window The fields that can be configured are described below: Parameter Description VLAN Name Enter the name for the VLAN here. Tagged Select the switch ports that are tagged members of this VLAN here. Untagged Select the switch ports that are untagged members of this VLAN here. Not Member Select the switch ports that are not members of this VLAN here. Native VLAN (PVID) Select the switch ports that support the native VLAN here. Click the View Allowed VLAN button view the allowed VLAN settings. Click the Back button to return to the previous step. Click the Apply button to accept the changes made. After clicking the View Allowed VLAN button, the following window will appear. Figure 5-11 Allowed VLAN Window

74 802.1Q VLAN This window is used to display and configure the VLAN settings on this Switch. To view the following window, click L2 Features > VLAN > 802.1Q VLAN, as shown below: Figure 5-12 802.1Q VLAN Window The fields that can be configured in 802.1Q VLAN are described below: Parameter Description VID List Enter the VLAN ID list that will be created here. Click the Apply button to create a new 802.1Q VLAN. Click the Delete button to remove the 802.1Q VLAN specified. The fields that can be configured in Find VLAN are described below: Parameter Description VID Enter the VLAN ID that will be displayed here. Click the Find button to locate a specific entry based on the information entered. Click the Show All button to locate all the entries. Click the Edit button to modify the VLAN name. Click the Delete button to remove the specific entry. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist.

75 VLAN Interface VLAN Interface Settings This window is used to display and configure the VLAN interface settings. To view the following window, click L2 Features > VLAN > VLAN Interface, as shown below: Figure 5-13 VLAN Interface Window Click the Show Detail button to view more detailed information about the VLAN on the specific interface. Click the Edit button to re-configure the specific entry. After clicking the Show Detail button, the following page will appear. Figure 5-14 VLAN Interface (VLAN Detail) Window On this page, more detailed information about the VLAN of the specific interface is displayed. Click the Back button to return to the previous page.

76 After click the Edit button, the following page will appear. This is a dynamic page that will change when a different VLAN Mode is selected. When Access was selected as the VLAN Mode, the following page will appear. Figure 5-15 VLAN Interface (Access) Window The fields that can be configured are described below: Parameter Description VLAN Mode Select the VLAN mode option here. Options to choose from are Access, Hybrid, and Trunk. Acceptable Frame Select the acceptable frame behavior option here. Options to choose from are Tagged Only, Untagged Only, and Admit All. Ingress Checking Select to enable or disable the ingress checking function. VID Enter the VLAN ID used for this configuration here. This value must be between 1 and 4094. Clone Select this option to enable the clone feature. From Port - To Port Select the range of ports that will be used in the clone feature here. Click the Apply button to accept the changes made. Click the Back button to discard the changes made and return to the previous page. When Hybrid was selected as the VLAN Mode, the following page will appear. Figure 5-16 VLAN Interface (Hybrid) Window The fields that can be configured are described below: Parameter Description VLAN Mode Select the VLAN mode option here. Options to choose from are Access, Hybrid, and Trunk.

77 Parameter Description Acceptable Frame Select the acceptable frame behavior option here. Options to choose from are Tagged Only, Untagged Only, and Admit All. Ingress Checking Select to enable or disable the ingress checking function. Native VLAN Tick this option to enable the native VLAN function. VID After ticking the Native VLAN option, the following parameter will be available. Enter the VLAN ID used for this configuration here. This value must be between 1 and 4094. Action Select the action that will be taken here. Options to choose from are Add, Remove, Tagged, and Untagged. Add Mode Select whether to add an Untagged or Tagged parameters. Allowed VLAN Range Enter the allowed VLAN range here. Clone Select this option to enable the clone feature. From Port - To Port Select the range of ports that will be used in the clone feature here. Click the Apply button to accept the changes made. Click the Back button to discard the changes made and return to the previous page. When Trunk was selected as the VLAN Mode, the following page will appear. Figure 5-17 VLAN Interface (Trunk) Window The fields that can be configured are described below: Parameter Description VLAN Mode Select the VLAN mode option here. Options to choose from are Access, Hybrid, and Trunk. Acceptable Frame Select the acceptable frame behavior option here. Options to choose from are Tagged Only, Untagged Only, and Admit All. Ingress Checking After selecting Trunk as the VLAN Mode, the following parameter will be available. Select to enable or disable the ingress checking function. Native VLAN Tick this option to enable the native VLAN function. Also, select if this VLAN supports Untagged or Tagged frames. VID After ticking the Native VLAN option, the following parameter will be available. Enter the VLAN ID used for this configuration here. This value must be between 1 and 4094. Action Select the action that will be taken here. Options to choose from are All, Add, Remove, Except, and Replace.

78 Parameter Description Allowed VLAN Range Enter the allowed VLAN range here. Clone Select this option to enable the clone feature. From Port - To Port Select the range of ports that will be used in the clone feature here. Click the Apply button to accept the changes made. Click the Back button to discard the changes made and return to the previous page. Port Summary After selecting the Port Summary tab, the following page will be available. Figure 5-18 VLAN Interface Port Summary Window Asymmetric VLAN This window is used to display and configure the asymmetric VLAN settings. To view the following window, click L2 Features > VLAN > Asymmetric VLAN, as shown below: Figure 5-19 Asymmetric VLAN Window The fields that can be configured are described below: Parameter Description Asymmetric VLAN State Select to enable or disable the asymmetric VLAN feature here. Click the Apply button to accept the changes made.

79 L2VLAN Interface Description This window is used to display and configure the Layer 2 VLAN interface description. To view the following window, click L2 Features > VLAN > L2VLAN Interface Description, as shown below: Figure 5-20 L2VLAN Interface Description Window The fields that can be configured are described below: Parameter Description L2VLAN Interface Enter the ID of the Layer 2 VLAN interface here. Description Enter the description for the Layer 2 VLAN interface here. Click the Apply button to accept the changes made. Click the Find button to generate the display based on the information entered. Click the Show All button to display all the available entries. Click the Delete Description button to remove the description from the specified Layer 2 VLAN. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. Auto Surveillance VLAN Auto Surveillance Properties This window is used to configure the auto-surveillance VLAN global settings and display the ports surveillance VLAN information. The Switch regards a host as an NVR once it connects to the IPC via HTTP, HTTPS, or RTSP. The Switch will learn the NVR on this port and move it into the surveillance VLAN until the triggered aging mechanism age-out or the LAN cable is removed. When the host sends an ARP request to an IPC, the Switch still regards the host as an NVR but only temporarily move it into the surveillance VLAN. The host will automatically be moved out of the surveillance VLAN after about 30 seconds if it is not recognized as an NVR anymore. NOTE: The same PC, or PCs connected to the same LAN port on the Switch, cannot simultaneously manage the Switch and the IP cameras connected to the Switch.

80 To view the following window, click L2 Features > VLAN > Auto Surveillance VLAN > Auto Surveillance Properties, as shown below: Figure 5-21 Auto Surveillance Properties Window The fields that can be configured in Global Settings are described below: Parameter Description Surveillance VLAN State Select to enable or disable the surveillance VLAN feature here. Surveillance VLAN ID Enter the VLAN ID of the surveillance VLAN here. The range is from 2 to 4094. A normal VLAN needs to be created before assigning the VLAN as a surveillance VLAN. Surveillance VLAN CoS Enter the Class of Service (CoS) value for the surveillance VLAN here. The surveillance packets arriving at the surveillance VLAN enabled port are marked with the CoS specified here. The remarking of CoS allows the surveillance VLAN traffic to be distinguished from data traffic in quality of service. The range is from 0 to 7. Aging Time Enter the aging time value here. This is used to configure the aging time for aging out the surveillance VLAN dynamic member ports. The range is from 1 to 65535 minutes. When the last surveillance device connected to the port stops sending traffic and the MAC address of this surveillance device is aged out, the surveillance VLAN aging timer will be started. The port will be removed from the surveillance VLAN after expiration of surveillance VLAN aging timer. If the surveillance traffic resumes during the aging time, the aging timer will be cancelled. ONVIF Discover Port Enter the TCP/UDP port number here. The range is either 554, or from 1025 to 65535. This is used to configure the TCP/UDP port number for RTSP stream snooping. ONVIF-capable IPC and ONVIF-capable NVR utilize WS-Discovery to find other devices. Once IPCs are discovered, the Switch can further discover NVRs by snooping RTSP, HTTP, and HTTPS packets between NVRs and IPCs. These packets cannot be snooped if the TCP/UDP port is not equal to the RTSP port number. Click the Apply button to accept the changes made.

81 The fields that can be configured in Port Settings are described below: Parameter Description From Port - To Port Select the range of ports that will be used for this configuration here. State Select to enable or disable the surveillance VLAN feature on the specified port(s) here. When surveillance VLAN is enabled for a port, the port will automatically be learned as an untagged surveillance VLAN member and the received untagged surveillance packets will be forwarded to the surveillance VLAN. The received packets are determined as surveillance packets if the source MAC addresses of the packets comply with the Organizationally Unique Identifier (OUI) addresses. Click the Apply button to accept the changes made. MAC Settings and Surveillance Device This window is used to display and configure surveillance devices and their MAC settings. To view the following window, click L2 Features > VLAN > Auto Surveillance VLAN > MAC Settings and Surveillance Device, as shown below: Figure 5-22 MAC Settings and Surveillance Device Window The fields that can be configured are described below: Parameter Description Component Type Select the component type here. Option to choose from are: • Video Management server - Specifies the surveillance device type as Video Management Server (VMS). • VMS Client/Remote Viewer - Specifies the surveillance device type as VMS client. • Video Encoder - Specifies the surveillance device type as Video Encoder. • Network Storage - Specifies the surveillance device type as Network Storage. • Other IP Surveillance Device - Specifies the surveillance device type as other IP Surveillance Devices. Description Enter the description for the user-defined OUI here. This string can be up to 32 characters long. MAC Address Enter the OUI MAC address here. If the source MAC addresses of the received packet matches any of the OUI pattern, the received packet is determined as a surveillance packet. Mask Enter the matching bitmask for the OUI MAC address here.

82 Click the Apply button to accept the changes made. Click the Delete button to delete the specified entry. After selecting the Auto Surveillance VLAN Summary tab option, at the top of the page, the following page will be available. Figure 5-23 MAC Settings and Surveillance Device (Auto Surveillance VLAN Summary) Window ONVIF IP-Camera Information This window is used to display ONVIF IP camera information. To view the following window, click L2 Features > VLAN > Auto Surveillance VLAN > ONVIF IP-Camera Information, as shown below: Figure 5-24 ONVIF IP-Camera Information Window Click the IP address hyperlink to connect to the Web Interface of the IP camera. Click the More Detail button to view more detailed ONVIF IP camera information. Click the Edit button to configure the state and description of the IP camera.

83 After click the More Detail button, the following window will appear. Figure 5-25 ONVIF IP-Camera Information (More Detail) Window After click the Edit button, the following window will appear. Figure 5-26 ONVIF IP-Camera Information (Edit) Window The fields that can be configured are described below: Parameter Description IP-Camera State Select to enable or disable the IP camera state here. Description Enter the description for this IP camera here. Click the Back button to discard the changes made and return to the previous window. Click the Apply button to accept the changes made.

84 ONVIF NVR Information This window is used to display ONVIF Network Video Recorder (NVR) information. To view the following window, click L2 Features > VLAN > Auto Surveillance VLAN > ONVIF NVR Information, as shown below: Figure 5-27 ONVIF NVR Information Window Click the IP address hyperlink to connect to the Web Interface of the NVR. Click the IP-Camera List button to view the list of IP cameras that are connected to the NVR. Click the Edit button to configure the description of the NVR. After click the IP-Camera List button, the following window will appear. Figure 5-28 ONVIF NVR Information (IP-Camera List) Window Click the IP address hyperlink to connect to the Web Interface of the IP camera. Click the Back button to return to the previous window. After click the Edit button, the following window will appear. Figure 5-29 ONVIF NVR Information (Edit) Window The additional fields that can be configured are described below: Parameter Description Description Enter the description for this NVR here.

85 Click the Apply button to accept the changes made. Voice VLAN Voice VLAN Global This window is used to display and configure the global voice VLAN settings. This is used to enable the global voice VLAN function and to specify the voice VLAN on the Switch. The Switch has only one voice VLAN. To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN Global, as shown below: Figure 5-30 Voice VLAN Global Window The fields that can be configured are described below: Parameter Description Voice VLAN State Select to globally enable or disable the voice VLAN feature here. Voice VLAN ID Enter the VLAN ID of the voice VLAN here. The VLAN to be specified as the voice VLAN needs to pre-exist before configuration. The range is from 2 to 4094. Voice VLAN CoS Select the CoS of the voice VLAN here. The range is from 0 to 7. The voice packets arriving at the voice VLAN enabled port are marked as the CoS specified here. The remarking of CoS packets allow the voice VLAN traffic to be distinguished from data traffic in Quality of Service. Aging Time Enter the aging time value here. This is used to configure the aging time for aging out the automatically learned voice device and voice VLAN information. When the last voice device connected to the port stops sending traffic and the MAC address of this voice device is aged out from FDB, the voice VLAN aging timer will be started. The port will be removed from the voice VLAN after the expiration of the voice VLAN aging timer. If voice traffic resumes during the aging time, the aging timer will be cancelled. The range is from 1 to 65535 minutes. Click the Apply button to accept the changes made.

86 Voice VLAN Port This window is used to display and configure the voice VLAN interface settings. To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN Port, as shown below: Figure 5-31 Voice VLAN Port Window The fields that can be configured are described below: Parameter Description From Port - To Port Select the range of ports that will be used for this configuration here. State Select to enable or disable the voice VLAN feature on the specified port(s) here. When the voice VLAN is enabled for a port, the received voice packets will be forwarded in the voice VLAN. The received packets are determined as voice packets if the source MAC addresses of packets complies with the OUI addresses. Mode Select the mode here. Options to choose from are: • Auto Untagged - Specifies that voice VLAN untagged membership will be automatically learned. • Auto Tagged - Specifies that voice VLAN tagged membership will be automatically learned. • Manual - Specifies that voice VLAN membership will be manually configured. If auto-learning is enabled, the port will automatically be learned as a voice VLAN member. This membership will automatically be aged out. When the port is working in the auto-tagged mode and the port captures a voice device through the device's OUI, it will join the voice VLAN as a tagged member automatically. When the voice device sends tagged packets, the Switch will change its priority. When the voice device sends untagged packets, it will forward them in the Port VLAN ID (PVID). When the port is working in auto-untagged mode, and the port captures a voice device through the device's OUI, it will join the voice VLAN as an untagged member automatically. When the voice device sends tagged packets, the Switch will change its priority. When the voice device sends untagged packets, it will forward them in the voice VLAN. When the Switch receives LLDP-MED packets, it checks the VLAN ID, tagged flag, and priority flag. The Switch should follow the tagged flag and priority setting. Click the Apply button to accept the changes made.

87 Voice VLAN OUI This window is used to display and configure the voice VLAN OUI settings. Use this window to add a user-defined OUI for the voice VLAN. The OUI for the voice VLAN is used to identify the voice traffic by using the voice VLAN function. If the source MAC address of the received packet matches any of the OUI patterns, the received packet is determined as a voice packet. The user-defined OUI cannot be the same as the default OUI. The default OUI cannot be deleted. To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN OUI, as shown below: Figure 5-32 Voice VLAN OUI Window The fields that can be configured are described below: Parameter Description OUI Address Enter the voice VLAN OUI MAC address here. Mask Enter the matching bitmask for the voice VLAN OUI MAC address here. Description Enter the description for the user-defined OUI MAC address here. This string can be up to 32 characters long. Click the Apply button to accept the changes made. Click the Delete button to delete the specified entry. Voice VLAN Device This window is used to view the voice VLAN device table. To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN Device, as shown below: Figure 5-33 Voice VLAN Device Window

88 Voice VLAN LLDP-MED Device This window is used to view the voice VLAN LLDP-MED device table. To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN LLDP-MED Device, as shown below: Figure 5-34 Voice VLAN LLDP-MED Device Window STP This Switch supports three versions of the Spanning Tree Protocol (STP): IEEE 802.1D-1998 STP, IEEE 802.1D-2004 Rapid STP, and IEEE 802.1Q-2005 MSTP. The IEEE 802.1D-1998 STP standard will be familiar to most networking professionals. However, as IEEE 802.1D-2004 RSTP and IEEE 802.1Q-2005 MSTP have been recently introduced to D-Link managed Ethernet Switches, a brief introduction to the technology is provided below followed by a description of how to set up IEEE 802.1D-1998 STP, IEEE 802.1D-2004 RSTP, and IEEE 802.1Q-2005 MSTP. 802.1Q-2005 MSTP The Multiple Spanning Tree Protocol (MSTP) is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance, which will provide multiple pathways across the network. Therefore, these MSTP configurations will balance the traffic load, preventing wide scale disruptions when a single spanning tree instance fails. This will allow for faster convergences of new topologies for the failed instance. Frames designated for these VLANs will be processed quickly and completely throughout interconnected bridges utilizing any of the three spanning tree protocols (STP, RSTP, or MSTP). A Multiple Spanning Tree Instance (MSTI) ID will classify these instances. MSTP will connect multiple spanning trees with a Common and Internal Spanning Tree (CIST). The CIST will automatically determine each MSTP region, its maximum possible extent and will appear as one virtual bridge that runs a single spanning tree instance. Frames assigned to different VLANs will follow different data routes within administratively established regions on the network, continuing to allow simple and full processing of frames, regardless of administrative errors in defining VLANs and their respective spanning trees. Each Switch utilizing the MSTP on a network will share a single MSTP configuration that will have the following three attributes: • A configuration name defined by an alphanumeric string of up to 32 characters (defined in the MST Configuration Identification window in the Configuration Name field). • A configuration revision number (named here as a Revision Level and found in the MST Configuration Identification window) • A 4094-element table (defined here as a VID List in the MST Configuration Identification window), which will associate each of the possible 4094 VLANs supported by the Switch for a given instance. To utilize the MSTP function on the Switch, three steps need to be taken: • The Switch must be set to the MSTP setting (found in the STP Global Settings window in the STP Mode field). • The correct spanning tree priority for the MSTP instance must be entered (defined here as a Priority in the MSTP Port Information window when configuring MSTI ID settings). • VLANs that will be shared must be added to the MSTP Instance ID (defined here as a VID List in the MST Configuration Identification window when configuring an MSTI ID settings).

89 802.1D-2004 Rapid Spanning Tree The Switch implements three versions of the Spanning Tree Protocol, the Multiple Spanning Tree Protocol (MSTP) as defined by IEEE 802.1Q-2005, the Rapid Spanning Tree Protocol (RSTP) as defined by IEEE 802.1D-2004 and a version compatible with IEEE 802.1D-1998. RSTP can operate with legacy equipment implementing IEEE 802.1D- 1998; however, the advantages of using RSTP will be lost. This section introduces some new Spanning Tree concepts and illustrates the main differences between the two protocols. Port Transition States An essential difference between the three protocols is in the way ports transition to a forwarding state and in the way, this transition relates to the role of the port (forwarding or not forwarding) in the topology. MSTP and RSTP combine the transition states Disabled, Blocking, and Listening used in 802.1D-1998 and creates a single state called Discarding. In either case, ports do not forward packets. In the STP port, transition states Disabled, Blocking or Listening or in the RSTP/MSTP port state Discarding, there is no functional difference, the port is not active in the network topology. Table 7-3 below compares how the three protocols differ regarding the port state transition. All three protocols calculate a stable topology in the same way. Every segment will have a single path to the root bridge. All bridges listen for BPDU packets. However, BPDU packets are sent more frequently, with every Hello packet. BPDU packets are sent even if a BPDU packet was not received. Therefore, each link between bridges is sensitive to the status of the link. Ultimately, this difference results in faster detection of failed links, and therefore faster topology adjustment. A drawback of IEEE 802.1D-1998 is this absence of immediate feedback from adjacent bridges. 802.1Q-2005 MSTP 802.1D-2004 RSTP 802.1D-1998 STP Forwarding Learning Disabled Disabled Disabled No No Discarding Discarding Blocking No No Discarding Discarding Listening No No Learning Learning Learning No Yes Forwarding Forwarding Forwarding Yes Yes RSTP is capable of a more rapid transition to the Forwarding state. RSTP no longer relies on timer configurations and RSTP-compliant bridges are sensitive to feedback from other RSTP-compliant bridge links. Ports do not need to wait for the topology to stabilize before transitioning to a Forwarding state. In order to allow this rapid transition, the protocol introduces two new variables: the Edge Port and the Point-to-Point (P2P) port. Edge Port A port can be configured as an Edge Port if it is directly connected to a segment where a loop cannot be created. An example would be a port connected directly to a single workstation. Ports that are designated as edge ports transition to a forwarding state immediately without going through the Listening and Learning states. An Edge Port loses its status if it receives a BPDU packet, after which it immediately becomes a normal spanning tree port. P2P Port A P2P port is also capable of rapid transition. P2P ports may be used to connect to other bridges. Under RSTP/MSTP, all ports operating in full-duplex mode are considered to be P2P ports unless manually overridden through configuration. 802.1D-1998/802.1D-2004/802.1Q-2005 Compatibility MSTP or RSTP can interoperate with legacy equipment and are capable of automatically adjusting BPDU packets to 802.1D-1998 format when necessary. However, any segment using 802.1D-1998 STP will not benefit from the rapid transition and rapid topology change detection of MSTP or RSTP. The protocol also includes a variable used for migration in the event that legacy equipment on a segment is updated to use RSTP or MSTP.

90 The Spanning Tree Protocol (STP) operates on two levels: • On the Switch level, the settings are globally implemented. • On the port level, the settings are implemented on a user-defined group of ports. STP Global Settings This window is used to display and configure the global STP settings. To view the following window, click L2 Features > STP > STP Global Settings, as shown below: Figure 5-35 STP Global Settings Window The field that can be configured for STP State is described below: Parameter Description STP State Select to enable or disable the global STP state here. Click the Apply button to accept the changes made. The fields that can be configured for STP Traps are described below: Parameter Description STP New Root Trap Select to enable or disable the STP New Root Trap option here. STP Topology Change Trap Select to enable or disable the STP Topology Change Trap option here. Click the Apply button to accept the changes made. The fields that can be configured for STP Mode are described below: Parameter Description STP Mode Select the STP mode used here. Options to choose from are MSTP, RSTP, and STP. Click the Apply button to accept the changes made.

91 The fields that can be configured for STP Priority are described below: Parameter Description Priority Select the STP priority value here. This value is between 0 and 61440. By default, this value is 32768. The lower the value, the higher the priority. Click the Apply button to accept the changes made. The fields that can be configured for STP Configuration are described below: Parameter Description Bridge Max Age Enter the bridge Maximum Age value here. This value must be between 6 and 40 seconds. By default, this value is 20 seconds. The Maximum Age value may be set to ensure that old information does not endlessly circulate through redundant paths in the network, preventing the effective propagation of the new information. Set by the Root Bridge, this value will aid in determining that the Switch has spanning tree configuration values consistent with other devices on the bridged LAN. Bridge Hello Time After selecting RSTP/STP as the Spanning Tree Mode, this parameter will be available. Enter the bridge Hello Time value here. This value must be between 1 and 2 seconds. By default, this value is 2 seconds. This is the interval between two transmissions of BPDU packets sent by the Root Bridge to tell all other switches that it is indeed the Root Bridge. This field will only appear here when STP or RSTP is selected for the STP version. For MSTP, the Hello Time must be set on a port per-port basis. Bridge Forward Time Enter the bridge Forwarding Time value here. This value must be between 4 and 30 seconds. By default, this value is 15 seconds. Every port on the Switch spends this time in the Listening state while moving from the Blocking state to the Forwarding state. TX Hold Count Enter the Transmit Hold Count value here. This value must be between 1 and 10 times. By default, this value is 6 times. This value is used to set the maximum number of Hello packets transmitted per interval. Max Hops Enter the maximum number of hops that are allowed. This value must be between 6 and 40 hops. By default, this value is 20 hops. This value is used to set the number of hops between devices in a spanning tree region before the Bridge Protocol Data Unit (BPDU) packet sent by the Switch will be discarded. Each Switch on the hop count will reduce the hop count by one until the value reaches zero. The Switch will then discard the BDPU packet and the information held for the port will age out. Click the Apply button to accept the changes made.