D-Link DES-3252P - Web Smart Switch Install Manual

Preface.................................................................................................................................... 5 Device Description .................................................................................................................. 8 Viewing the Device..........................................................................................................................8 Ports Description .............................................................................................................................9 Cable Specifications......................................................................................................................11 LED Definitions..............................................................................................................................11 Cable, Port, and Pinout Information ..............................................................................................13 Physical Dimensions .....................................................................................................................15 Mounting Device ................................................................................................................... 16 Preparing for Installation................................................................................................................16 Installing the Device ......................................................................................................................18 Connecting the Device ..................................................................................................................21 Initial Configuration ............................................................................................................... 22 Getting Started...................................................................................................................... 38 Starting the D-Link Embedded Web Interface ...............................................................................39 Understanding the D-Link Embedded Web Interface ....................................................................41 Using Screen and Table Options...................................................................................................44 Resetting the Device .....................................................................................................................46 Logging Off from the Device..........................................................................................................47 Managing Device Information ............................................................................................... 48 Defining the System Description ...................................................................................................49 Configuring System Time ..............................................................................................................50 Configuring Daylight Saving Time .................................................................................................51 Configuring SNTP..........................................................................................................................55 Defining SNTP Global Settings .....................................................................................................57 Defining SNTP Authentication .......................................................................................................59 Defining SNTP Servers .................................................................................................................61 Defining SNTP Interface Settings..................................................................................................64 Resetting the Device .....................................................................................................................66 Configuring Ports .................................................................................................................. 67 Viewing Port Properties .................................................................................................................70

Defining LAG Membership ............................................................................................................73 Configuring LACP..........................................................................................................................74 Configuring VLANs ............................................................................................................... 76 Defining VLAN Properties..............................................................................................................77 Defining VLAN Membership ..........................................................................................................80 Defining VLAN Interface Settings..................................................................................................81 Configuring GARP.........................................................................................................................83 Defining the Forwarding Database ....................................................................................... 87 Defining Static Forwarding Database Entries................................................................................88 Defining Dynamic Forwarding Database Entries...........................................................................90 Configuring Spanning Tree ................................................................................................... 92 Defining Classic Spanning Tree ....................................................................................................93 Defining STP on Interfaces............................................................................................................95 Defining Rapid Spanning Tree ......................................................................................................98 Defining Multiple Spanning Tree .................................................................................................100 Configuring Device Security................................................................................................ 106 Configuring Management Security ..............................................................................................107 Configuring Network Security ......................................................................................................131 Configuring Network Security ......................................................................................................134 Configuring IP Information .................................................................................................. 157 Defining IP Addresses.................................................................................................................158 Defining Default Gateways..........................................................................................................161 Configuring DHCP.......................................................................................................................162 Configuring ARP..........................................................................................................................164 Configuring Domain Name Servers.............................................................................................166 Defining DNS Host Mapping........................................................................................................168 Configuring Multicast Forwarding ....................................................................................... 170 Defining IGMP Snooping .............................................................................................................171 Defining Multicast Bridging Groups .............................................................................................173 Managing Power over Ethernet Devices............................................................................. 176 Defining PoE System Information................................................................................................177 Displaying and Editing PoE System Information .........................................................................178 Managing System Files....................................................................................................... 180 Downloading System Files ..........................................................................................................181

Activating Image Files .................................................................................................................185 Copying Files...............................................................................................................................186 Managing System Files ...............................................................................................................187 Configuring Quality of Service ............................................................................................ 188 Defining General QoS Settings ...................................................................................................189 Configuring QoS Mapping ...........................................................................................................194 Configuring Basic Mode ..............................................................................................................196 Configuring Advanced QoS Settings ...........................................................................................198 Configuring SNMP .............................................................................................................. 209 SNMP v1 and v2c........................................................................................................................209 SNMP v3 .....................................................................................................................................209 Configuring SNMP Security.........................................................................................................210 Configuring SNMP Notifications ..................................................................................................223 Managing System Logs ...................................................................................................... 231 Enabling System Logs.................................................................................................................232 Viewing the Device Memory Logs ...............................................................................................234 Viewing the FLASH Logs.............................................................................................................235 Defining Servers Log Parameters ...............................................................................................236 Managing Device Diagnostics............................................................................................. 238 Configuring Port Mirroring ...........................................................................................................239 Viewing Integrated Cable Tests...................................................................................................241 Viewing Optical Transceivers ......................................................................................................242 Viewing the CPU Utilization.........................................................................................................243 Viewing Statistics................................................................................................................ 244 Viewing Interface Statistics..........................................................................................................244 Managing RMON Statistics .........................................................................................................247 Appendix A Device Specifications & Features.................................................................... 260 Appendix B Troubleshooting............................................................................................... 267 Appendix C Technical Support ........................................................................................... 270 Contacting D-Link Technical Support............................................................................................................270 Warranty........................................................................................................................................................297 Product Registration......................................................................................................................................300

figures, monitors, and troubleshoots network devices from a remote web browser. The D-Link Embedded Web Interface web pages are easy-to-use and easy-to-navigate. In addition, The D-Link Embedded Web Interface pro- vides real time graphs and RMON statistics to help system administrators monitor network performance. This preface provides an overview to the D-Link Embedded Interface User Guide, and includes the following sec- tions: • DES-3252P User Guide Overview • Intended Audience

Page 6 DES-3252P User Guide Overview This user guide is divided into the following sections to provide concise information for installing, configuring, and managing the device: • Using the Installation Guide • Using the Embedded Web Interface User Guide Using the Installation Guide This section provides an overview of the D-Link DES-3252P Installation Guide, which includes the following sec- tions: • Section 1. Device Description — Provides a system description including the hardware components. • Section 2. Mounting Device — Provides step-by-step instructions for installing the device. • Section 3. Initial Configuration — Provides step-by-step instructions for the initial device configuration. Using the Embedded Web Interface User Guide This section provides an overview to the D-Link Web System Interface User Guide. The D-Link Web System Inter- face User Guide provides the following sections: • Section 4. Getting Started — Provides information about using the EWS, including The D-Link Embedded Web Interface, management, and information buttons, as well as information about adding, modifying, and deleting device information. • Section 5. Managing Device Information —Provides information about opening the device zoom view, defining general system information, and enabling Jumbo frames. • Section 6. Configuring Ports — Provides information about configuring ports. • Section 7. Aggregating Ports — Provides information about configuring Link Aggregated Groups and LACP. • Section 8. Configuring VLANs — Provides information about configuring and managing VLANs, including information about GARP and GVRP, and defining VLAN groups. • Section 9. Defining the Forwarding Database — Provides information about configuring and managing both static and dynamic MAC addresses. • Section 10. Configuring Spanning Tree — Provides information about configuring Spanning Tree Protocol and the Rapid Spanning Tree Protocol. • Section 11. Configuring Device Security — Provides information about configuring device security for management security, traffic control, and network security. • Section 12. Configuring IP Information — Provides information about defining device IP addresses, ARP, and Domain Name Servers. • Section 13. Configuring Multicast Forwarding — Provides information about Multicast Forwarding. • Section 14. Managing Power over Ethernet Devices — Provides information about managing PoE. • Section 15. Managing System Files — Provides information about downloading, uploading, and copying system files. • Section 16. Configuring Quality of Service — Provides information about configuring Quality of Ser- vice on the device. • Section 17. Configuring SNMP — Provides information about defining SNMP v1,v2c, and v3 management, including SNMP filters and notifications. • Section 18. Managing System Logs — Provides information about enabling and defining system logs. • Section 19. Managing Device Diagnostics — Provides information about configuring port mirroring, testing copper and fiber cables, and viewing device health information.

tistics, device history events, and port and LAG utilization statistics. • Appendix A Device Specifications & Features — Provides device Specifications & Features • Appendix B Troubleshooting — Provides basic troubleshooting for installing the device. • Appendix C Technical Support — Provides details for contacting D-Link technical support Intended Audience This guide is intended for network administrators familiar with IT concepts and terminology.

Page 8 Section 1. Device Description This section contains a description of the D-Link DES-3252P and contains the following topics: • Viewing the Device • Ports Description • Cable Specifications • LED Definitions • Cable, Port, and Pinout Information • Physical Dimensions Viewing the Device The device described in this section is a Fast Ethernet Managed Switch. Device management is performed using an Embedded Web Server (EWS) or through a Command Line Interface (CLI). The device configuration is performed via RS-232 interface. This section contains descriptions for the following: • Front Panel • Back Panel Note All Stacking references are relevant only for future releases Front Panel DES-3252P is a high-performance Fast Ethernet switch that provides 48-Ports 10/100BASE-TX PoE Switch with 4 10/100/1000BASE-T ports and 2 combo SFP uplinks. The following figure illustrates the DES-3252P front panel. Figure 1: DES-3252P Front Panel The device front panel is configured as follows: • 48 10/100Base-TX ports — RJ-45 TX auto-sensing switching ports. The RJ-45 ports are designated as ports Ports 1-48. • 2 SFP 100Base-FX/1000Base-X Fiber ports — Two SFP ports or 2 Copper 100Base-T/1000Base-T ports are designated as ports 49 and 50, which are also Combo ports.

• LED Indicators — Port activity Light Emitting Diodes (LED) for each port and system LEDs that are dis- played separately. Back Panel The following figure illustrates the DES-3252P back panel. Figure 2: DES-3252P Back Panel The DES-3252P device back panel is configured as follows: • RS-232 Console Port — The RS-232 Console port is an asynchronous serial console port supporting the RS-232 electrical specification. • Power Connector — AC power supply interface. • RPS Connector — Redundant Power Supply connector. Ports Description This section describes the device ports and includes the following topics: • 10/100Base-TX Fast Ethernet Ports • Combo Copper/SFP Ports (100Base-FX/1000Base-X Fiber Ports) • RS-232 Console Port 10/100Base-TX Fast Ethernet Ports The device contains 10/100 Base-TX Fast Ethernet ports. The ports are an RJ-45 ports which support half- and full-duplex mode 10/100Mbps. Combo Copper/SFP Ports (100Base-FX/1000Base-X Fiber Ports) By offering a standard, hot swappable electrical interface, one gigabit ethernet port can support a wide range of physical media, from copper to long-wave single-mode optical fiber, at lengths of hundreds of kilometers is its flexibility. Where multiple different optical technologies are in use, an administrator can purchase GBICs as needed, not in advance, and they can be the specific type needed for each link. This lowers the cost of the base system and gives the administrator far more flexibility. Small Form Factor Pluggable (SFP) Optical Transceivers are integrated duplex data GBIC links for bi-directional communication over multimode optical fiber, designed for high-speed Fiber Channel data links. The SFP ports (combo ports) are designated as 1000Base-X or 100Base-FX and can be also designated as 2 Copper 100Base- T/1000Base-T ports which are RJ-45 TX auto-sensing switching ports. The SFP (GBIC) port can be removed and inserted as required. The following figure illustrates the GBIC insertion.

RS-232 Console Port The RS-232 port is an asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to a console managing the device. This interface configuration is as follows: • Eight data bits. • One stop bit. • No parity. • Baud rate is 9600 (default). The range is from 9600 to 115200 bps. • Console speeds of 57600 and 115200.

LED Definitions The device front panels contain Light Emitting Diodes (LED) that indicate the device status.The different LED types are as follows: • Port LEDs — Indicates the port status. • System LEDs — Indicates the device status. Port LEDs 10/100Base-TX Fast Ethernet RJ-45 Port LEDs A push button is located next to the system LEDs. The Push button has two modes: • Not pressed (default) — The LEDs indicate Link’s activity and speed • Pressed — The LEDs indicate each port PoE mode for 20 seconds and then set back to default mode. The following figure illustrates the port LEDs. Figure 4: DES-3252P Port LEDs Table 1: DES- 3252P Cable Specifications Cable Type Description 10/100Base-TX UTP CAT-3/4/5 (100 meters maximum) 1000Base-T UTP Cat. 5e (100 meters maximum) UTP Cat. 5 (100 meters maximum) EIA/TIA-568B 150-ohm STP (100 meters maximum) 1000Base-LX Single-mode fiber module (10km) 1000Base-SX Multi-mode fiber module (550m) 1000Base-LH Single-mode fiber module (40km) 1000Base-ZX Single-mode fiber module (80km) 100Base-FX Multi-mode fiber module (2Km) Mini-GBIC SFP Transceiver for 1000Base-LX Single-mode fiber module (10km) SFP Transceiver for 1000Base-SX Multi-mode fiber module (550m) SFP Transceiver for 1000Base-LH Single-mode fiber module (40km) SFP Transceiver for 1000Base-ZX Single-mode fiber module (80km) SFP Transceiver for 100Base-FX Single-mode fiber module (2km)

in the following table: The SFP ports have two LEDs, one for Link/activity and one for FX link. The LED indications are described in the following table: The stacking Gigabit ports have one LED for Link /activity indications. The LED indications are described in the following table: Table 2: DES - 3252P Fast Ethernet RJ-45 Port LED Indications Port Description LED Indication Description Link/Activity LED Green Indicates a 100M link is established on the port. Flashing green Indicates that there is data transmission on the port. Amber Indicates a 10M link is established on the port. Flashing Amber Indicates that there is data transmission on the port. Off Indicates that there is no link established on the port. PoE Status LED Green Indicates that power (48V) is being provided to the device connected to the port. Amber Indicates that power cannot be provided to the device connected to the port / Error occurrences. Alternating Amber/ Green Indicates that the power exceeds maximum system’s power of 375W / Error occurrences Off Indicates that no device is connected to the port. Table 3: DES - 3252P Copper /SFP Port LED Indications Port Description LED Indication Description Link/Activity LED Green Indicates that a 1000Mbps link is established on the port. Flashing green Indicates that there is data transmission on the port. Amber Indicates that a 100Mbps link is established on the port. Flashing amber Indicates that there is data transmission on the port. Off Indicates that there is no link established on the port. Table 4: DES - 3252P Stacking Gigabit Port LED Indications Port Description LED Indication Description Link/Activity LED Green Indicates a 1Gbps link is established on the port. Flashing Green Indicates that there is data transmission on the port. Amber Indicates a 10Mbps/100Mbps link is established on the port. Flashing Amber Indicates that there is data transmission on the port. Off Indicates that there is no link established on the port.

Page 13 System LEDs The DES-3252P system LEDs are located on the front panel’s left side. The following figure illustrates the DES- 3252P system LEDs. Figure 5: DES-3252P System LEDs The LED indications are described in the following table: Cable, Port, and Pinout Information This section describes the devices physical interfaces and provides information about cable connections. Stations are connected to the device ports through the physical interface ports on the front panel. For each station, the appropriate mode (Half/Full Duplex, Auto Negotiation) is set. The default is Auto Negotiation. Table 5: System LEDs LED Description LED Indication Description MS (Stack support). Red Indicates a master device (future release). Green Indicates a slave device (future release). Off Indicates the device is not a stack member, and is currently is stand-alone mode. PoE Green Indicates a PoE mode. Off Indicates an Ethernet mode. RPS Red Indicates that the device is being powered from a Redundant Power Supply. Green Indicates that a Redundant Power Supply is connected to the device. Off Indicates that a Redundant Power Supply is not connected to the device. FAN Red Indicates that there is a faulty fan. Green Indicates that all fans are functioning correctly. Power Green Indicates that the device is powered up. Off Indicates that the device is off. Fault Flashing Red Indicates that the device is currently running POST. Red Indicates that the device detected a POST running error.

Page 14 Pin Connections for the 10/100/1000 Ethernet Interface The switching port can connect to stations wired in standard RJ-45 Ethernet station mode using straight cables. Transmission devices connected to each other use crossed cables. The following figure illustrates the pin allocation. Figure 6: RJ-45 Pin Allocation The following table describes the pin allocation Table 6: RJ-45 Pin Connections for 10/100/1000 Base-TX Pin Use 1 TxRx 1+ 2 TxRx 1- 3 TxRx 2+ 4 TxRx 2- 5 TxRx 3+ 6 TxRx 3- 7 TxRx 4+ 8 TxRx 4-

The RS-232 port is an asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to a console managing the device. The following figure illustrates the pin allocation. Figure 7: Console Port Pin Allocation The following table describes the pin allocation Table 7: Pin Allocation for the Console Port Physical Dimensions The device has the following physical dimensions: • Width: 440 mm (17.32 inch) • Depth: 310mm (12.20 inch) • Height: 44 mm (1.732 inch) Pin Signal 1 Data Carrier Detect 2 Received Data 3 Transmitted Data 4 Data Terminal Ready 5 Signal Ground 6 Data Set Ready 7 Request to Send 8 Clear to Send 9 Ring Indicator

Page 16 Section 2. Mounting Device This section contains information for installing the device, and includes the following sections: • Preparing for Installation • Installing the Device • Connecting the Device • Rack Installation Preparing for Installation This section provides an explanation for preparing the installation site, and includes the following topics: • Installation Precautions • Site Requirements • Unpacking Installation Precautions Warnings • The surface on which the switch is placed should be adequately secured to prevent it from becoming unstable and/or falling over. • Ensure the power source circuits are properly grounded. • Observe and follow service markings. Do not service any product except as explained in your system documentation. Opening or removing covers marked with a triangular symbol with a lighting bolt may cause electrical shock. These components are to be serviced by trained service technicians only. • Ensure the power cable, extension cable, and/or plug is not damaged. • Ensure the product is not exposed to water. • Ensure the device is not exposed to radiators and/or heat sources. • Do not push foreign objects into the device, as it may cause a fire or electric shock. • Use the device only with approved equipment. • Allow the product to cool before removing covers or touching internal equipment. • Ensure the switch does not overload the power circuits, wiring, and over-current protection. To deter- mine the possibility of overloading the supply circuits, add together the ampere ratings of all devices installed on the same circuit as the device being installed. Compare this total with the rating limit for the circuit. The maximum ampere ratings are usually printed on the switch, near their AC power con- nectors. Cautions • Ensure the air flow around the front, sides, and back of the switch is not restricted. • Ensure the cooling vents are not blocked. • Do not install the switch in an environment where the operating ambient temperature might exceed 40ºC (104ºF).

Page 17 Site Requirements Before installing the unit, verify that the location selected for installation meets the following site requirements. • General — Ensure that the power supply is correctly installed. • Power — Ensure that the unit is installed within 1.5 m (5 feet) of a grounded, easily accessible outlet 100-250 VAC, 50-60 Hz. • Clearance — Ensure that there is adequate frontal clearance for operator access. Allow clearance for cabling, power connections and ventilation. • Cabling — Ensure that the cabling is routed to avoid sources of electrical noise such as radio transmitters, broadcast amplifiers, power lines and fluorescent lighting fixtures. • Ambient Requirements — Ensure that the ambient unit operating temperature range is 0 to 40ºC (32 to 104ºF) at a relative humidity of up to 95%, non-condensing. Verify that water or moisture cannot enter the device casing. Unpacking This section contains information for unpacking the device, and includes the following topics: • Package Contents • Unpacking Essentials Package Contents While unpacking the device, ensure that the following items are included: • The device • Four rubber feet with adhesive backing • Rack kit • An AC power cable • Console RS-232 cable with DB-9 connector • Documentation CD Unpacking Essentials Note Before unpacking the device, inspect the package and report any evidence of damage immediately. To unpack the device perform the following: 1. It is recommended to put on an ESD wrist strap and attach the ESD clip to a metal surface to act as ground. An ESD strap is not supplied with the device. 2. Place the container on a clean flat surface and cut all straps securing the container. 3. Open the container. 4. Carefully remove the device from the container and place it on a secure and clean surface. 5. Remove all the packaging material. 6. Inspect the product for damage. Report any damage immediately. If any item is found missing or damaged, please contact your local D-Link reseller for replacement.

Page 18 Installing the Device The device can be installed on a flat surface or mounted in a rack. This section includes the following topics: • Desktop or Shelf Installation • Rack Installation Desktop or Shelf Installation When installing the switch on a desktop or shelf, the rubber feet included with the device should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Ensure the surface is be able to support the weight of the device and the device cables. To install the device on a surface, perform the following: 1. Attach the rubber feet on the bottom of the device. The following figure illustrates the rubber feet installation on the device. Figure 8: Installing Rubber Feet 2. Set device down on a flat surface, while leaving 2 inches on each side and 5 inches at the back. 3. Ensure that the device has proper ventilation by allowing adequate space for ventilation between the device and the objects around the device.

Page 19 Rack Installation The device can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, the device the mounting brackets must first be attached on the devices’s sides. Notes • Disconnect all cables from the unit before mounting the device in a rack or cabinet. • When mounting multiple devices into a rack, mount the devices from the bottom up. To install the device in a rack, perform the following: 1. Place the supplied rack-mounting bracket on one side of the device ensuring the mounting holes on the device line up to the mounting holes on the rack mounting bracket. The following figure illustrates where to mount the brackets. Figure 9: Attaching the Mounting Brackets 2. Insert the supplied screws into the rack mounting holes and tighten with a screwdriver. 3. Repeat the process for the rack-mounting bracket on the other side of the device. 4. Insert the unit into the 19-inch rack ensuring the rack-mounting holes on the device line up to the mounting hole on the rack. The following figure illustrates lining up and mounting the device in the rack.

Page 20 Figure 10: Mounting Device in a Rack 5. Secure the unit to the rack with the rack screws (not provided). Fasten the lower pair of screws before the upper pair of screws. This ensures that the weight of the unit is evenly distributed during installation. Ensure that the ventilation holes are not obstructed. Note To maximize switch performance, clean the fan regularly. Optional Redundant Power Supply The switch supports an optional Redundant Power Supply (RPS), that can supply power to the switch in the event of failure of the internal power supply. The DES-3252P supports only the DPS-600 device. Caution The optional RPS is not hot swappable. Do not attempt to replace it while the system is in operation.

Page 21 Connecting the Device This section describes how to connect the device, and includes the following sections: • Connecting the Switch to a Terminal • AC Power Connection Connecting the Switch to a Terminal The device is connected to a terminal through an console port on the front panel, which enables a connection to a terminal desktop system running terminal emulation software for monitoring and configuring the device. The terminal must be a VT100 compatible terminal or a desktop or portable system with a serial port and running VT100 terminal emulation software. To connect a terminal to the device Console port, perform the following: 1. Connect a cable to the terminal running VT100 terminal emulation software. 2. Ensure that the terminal emulation software is set as follows: a) Select the appropriate port to connect to the device. b) Set the data rate to 9600 baud. c) Set the data format to 8 data bits, 1 stop bit, and no parity. d) Set flow control to none. e) Under Properties, select VT100 for Emulation mode. f) Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that the setting is for Terminal keys (not Windows keys). Note When using HyperTerminal with Microsoft Windows 2000, ensure that you have Windows 2000 Service Pack 2 or later installed. With Windows 2000 Service Pack 2, the arrow keys function properly in HyperTerminal’s VT100 emulation. Go to www.microsoft.com for information on Windows 2000 service packs. 3. Connect the cable to the console port on the device front panel. AC Power Connection To connect the power supply perform the following: 1. Using a 5-foot (1.5 m) standard power cable with safety ground connected, connect the power cable to the AC main socket located on the back panel. 2. Connect the power cable to a grounded AC outlet. 3. Confirm that the device is connected and operating by checking that the Power Supply LED on the front panel is green.

This section describes the initial device configuration and includes the following topics: • General Configuration Information • Booting the Switch • Configuration Overview • Advanced Configuration • Software Download and Reboot • Startup Menu Functions After completing all external connections, connect a terminal to the device to monitor the boot and other proce- dures. The order of installation and configuration procedures is illustrated in the following figure. For the initial con- figuration, the standard device configuration is performed. Other functions can be performed, but doing so suspends the installation process and causes a system reboot. Performing other functions is described later in this section. General Configuration Information Your device has predefined features and setup configuration. Note It is highly recommended to clear the browser's cache temporary files and cookies prior to upgrade of the product with the new installed software version (e.g., in Internet Explore select Tools->Internet option, select Delete files, check the Delete all offline content and hit OK). Auto-Negotiation Auto-negotiation allows a device to advertise modes of operation and share information with another device that shares a point-to-point link segment. This automatically configures both devices to take maximum advantage of their abilities. Auto-negotiation is performed completely within the physical layers during link initiation, without any additional overhead to either the MAC or higher protocol layers. Auto-negotiation allows the ports to do the following: • Advertise their abilities • Acknowledge receipt and understanding of the common modes of operation that both devices share • Reject the use of operational modes that are not shared by both devices • Configure each port for the highest-level operational mode that both ports can support If connecting a port of the switch to the Network Interface Card (NIC) of a terminal that does not support auto- negotiation or is not set to auto-negotiation, both the device port and the NIC must be manually set with the Web browser interface or CLI commands to the same speed and duplex mode. Note If the station on the other side of the link attempts to auto-negotiate with a port that is manually configured to full duplex, the auto-negotiation results in the station attempting to operate in half duplex. The resulting mismatch may lead to significant frame loss. This is inherent in the auto-negotiation standard.

The following table describes the device port default settings. Note These default settings can be modified once the device is installed. The following is an example for changing the port speed on port g1 using CLI commands: The following is an example for enabling flow control on port g1 using CLI commands: The following is an example for enabling back pressure on port g1 using CLI commands. Booting the Switch To boot the switch, perform the following: 1. Ensure that the device console is connected to a VT100 terminal device or VT100 terminal emulator. 2. Deactivate the AC power receptacle. 3. Connect the device to the AC receptacle. 4. Activate the AC power receptacle. When the power is turned on with the local terminal already connected, the switch goes through Power On Self Test (POST). POST runs every time the device is initialized and checks hardware components to determine if the device is fully operational before completely booting. If a critical problem is detected, the program flow stops. If POST passes successfully, a valid executable image is loaded into RAM. POST messages are displayed on the terminal and indicate test success or failure. Table 8: Device Port Defaults Function Default Settings Port speed and mode 100M Auto-negotiation Copper/Fiber GE 1000M Port forwarding state Enabled Head of line blocking prevention On (Enabled) Flow Control Off Back Pressure Off Console (config)# interface ethernet 1 Console (config-if)# speed 100 Console (config)# interface ethernet 1 Console (config-if)# flowcontrol on Console (config)# interface ethernet 1 Console (config-if)# speed 10 Console (config-if)# back-pressure

lowing screen is an example of the displayed POST. The boot process runs approximately 30 seconds. The auto-boot message that appears at the end of POST (see the last lines) indicates that no problems were encountered during boot. During boot, the Startup menu can be accessed if necessary to run special procedures. To enter the Startup menu, press or within the first two seconds after the auto-boot message is displayed. For information on the Startup menu, see "Startup Menu Functions." If the system boot is not interrupted by pressing or , the system continues operation by decom- pressing and loading the code into RAM. The code starts running from RAM and the list of numbered system ports and their states (up or down) are displayed. ------ Performing the Power-On Self Test (POST) ------ UART Channel Loopback Test........................PASS Testing the System SDRAM..........................PASS Boot1 Checksum Test...............................PASS Boot2 Checksum Test...............................PASS Flash Image Validation Test.......................PASS BOOT Software Version x.x.x.xx Built 07-Jan-200x 10:53:05 Processor: xxxxxx xxxxx xxxx, xx MByte SDRAM. I-Cache 8 KB. D-Cache 8 KB. Cache Enabled. Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom.

for each device. Preparing to decompress... Decompressing SW from image-1 638000 OK Running from RAM... ********************************************************************* *** Running SW Ver. x.x.x.x Date 11-Jan-200x Time 15:43:13 *** ********************************************************************* HW version is Base Mac address is: 00:00:b0:24:11:80 Dram size is: xxM bytes Dram first block size is: 47104K bytes Dram first PTR is: 0x1200000 Flash size is: xM Devices on SMI BUS: ------------------- smi dev id = 16, dev type=0xd0411ab, dev revision=0x1 Device configuration: Prestera based - Back-to-back system Slot 1 - DB-DX240-24G HW Rev. xx.xx Tapi Version: xx.x.x-x Core Version: xx.x.x-x 01-Jan-200x 01:01:22 %INIT-I-InitCompleted: Initialization task is completed Console> 01-Jan-200x 01:01:23 %LINK-I-Up: 1 01-Jan-200x 01:01:23 %LINK-W-Down: 2 01-Jan-200x 01:01:23 %LINK-I-Up: Vlan 1 01-Jan-200x 01:01:23 %LINK-W-Down: 4 . . . 01-Jan-200x 01:01:23 %LINK-W-Down: 46 01-Jan-200x 01:01:23 %LINK-W-Down: 47 01-Jan-200x 01:01:23 %LINK-W-Down: 48

begin configuring the switch. However, before configuring the switch, ensure that the software version installed on the device is the latest version. If it is not the latest version, download and install the latest version. See "Software Download and Reboot." Configuration Overview Before assigning a static IP address to the device, obtain the following information from the network administrator: • A specific IP address allocated by the network administrator for the switch to be configured • Network mask for the network There are two types of configuration: Initial configuration consists of configuration functions with basic security considerations, whereas advanced configuration includes dynamic IP configuration and more advanced security considerations. After making any configuration changes, the new configuration must be saved before rebooting. To save the con- figuration, enter the following CLI command: Initial Configuration Initial configuration, which starts after the device has booted successfully, includes static IP address and subnet mask configuration, and setting user name and privilege level to allow remote management. If the device is to be managed from an SNMP-based management station, SNMP community strings must also be configured. The fol- lowing configurations are completed: • Static IP Address and Subnet Mask • Static Route Configuration • User Name • SNMP Community strings Static IP Address and Subnet Mask IP interfaces can be configured on each port of the device. After entering the configuration command, it is recom- mended to check if a port was configured with the IP address by entering the “show ip interface” command. The commands to configure the device are port specific. To manage the switch from a remote network, a static route must be configured, which is an IP address to where packets are sent when no entries are found in the device tables. The configured IP address must belong to the same subnet as one of the device IP interfaces. To configure a static route, enter the command at the system prompt as shown in the following configuration example where 101.101.101.101 is the specific management station, and 5.1.1.100 is the static route: Console# copy running-config startup-config Console# configure Console(config)# interface vlan 1 Console(config-if)# ip address 100.1.1.1 255.255.255.0 Console(config-if)# exit Console# ip route 192.168.2.0/24 100.1.1.33

192.168.2.0. User Name A user name is used to manage the device remotely, for example through SSH, Telnet, or the Web interface. To gain complete administrative (super-user) control over the device, the highest privilege (15) must be specified. Note Only the administrator (super-user) with the highest privilege level (15) is allowed to manage the device through the Web browser interface. For more information about the privilege level, see the CLI Reference Guide. The configured user name is entered as a login name for remote management sessions. To configure user name and privilege level, enter the command at the system prompt as shown in the configuration example: SNMP Community Strings Simple Network Management Protocol (SNMP) provides a method for managing network devices. Devices sup- porting SNMP run a local software (agent). The SNMP agents maintain a list of variables, used to manage the device. The variables are defined in the Management Information Base (MIB). The MIB presents the variables controlled by the agent. The SNMP agent defines the MIB specification format, as well as the format used to access the information over the network. Access rights to the SNMP agents are controlled by access strings and SNMP community strings. The device is SNMP-compliant and contains an SNMP agent that supports a set of standard and private MIB vari- ables. Developers of management stations require the exact structure of the MIB tree and receive the complete private MIBs information before being able to manage the MIBs. All parameters are manageable from any SNMP management platform, except the SNMP management station IP address and community (community name and access rights). The SNMP management access to the switch is disabled if no community strings exist. Console# show ip interface Proxy ARP is disabled IP Address I/F Type Directed Broadcast 100.1.1.1/24 vlan 1 static disable Console> enable Console# configure Console(config)# username admin password lee privilege 15

The following screen displays the default device configuration: The community-string, community-access, and IP address can be configured through the local terminal during the initial configuration procedure. The SNMP configuration options for the Community String are as follows: • Access rights options: ro (read only), rw (read-and-write) or su (super). • An option to configure IP address or not: If an IP address is not configured, it means that all community mem- bers having the same community name are granted the same access rights. Common practice is to use two community strings for the switch one (public community) with read-only access and the other (private community) with read-write access. The public string allows authorized management sta- tions to retrieve MIB objects, while the private string allows authorized management stations to retrieve and mod- ify MIB objects. During initial configuration, it is recommended to configure the device according to the network administrator requirements, in accordance with using an SNMP-based management station. To configure SNMP station IP address and community string(s) perform the following: 1. At the console prompt, enter the command enable. The prompt is displayed as #. 2. Enter the command configure and press . 3. In the configuration mode, enter the SNMP configuration command with the parameters including community name (private), community access right (read and write) and IP address, as shown in the following example: Console(config)# show snmp Community-String Community-Access IP address ---------------- ---------------- ---------- System Contact: System Location:

ther device configuration from any remote location. Advanced Configuration This section provides information about dynamic allocation of IP addresses and security management based on the Authentication, Authorization, and Accounting (AAA) mechanism, and includes the following topics: • Configuring IP Addresses through DHCP • Configuring IP Addresses through BOOTP • Security Management and Password Configuration When configuring/receiving IP addresses through DHCP and BOOTP, the configuration received from these serv- ers includes the IP address, and may include subnet mask and default gateway. Retrieving an IP Address From a DHCP Server When using the DHCP protocol to retrieve an IP address, the device acts as a DHCP client. To retrieve an IP address from a DHCP server, perform the following steps: 1. Select and connect any port to a DHCP server or to a subnet that has a DHCP server on it, in order to retrieve the IP address. 2. Enter the following commands to use the selected port for receiving the IP address. In the following example, the commands are based on the port type used for configuration. Console# configure Config(config)# snmp-server community private rw 11.1.1.2 type router Config(config)# exit Console(config)# show snmp Community-String Community-Access IP address ---------------- ---------------- ---------- private readWrite 11.1.1.2 Traps are enabled. Authentication-failure trap is enabled. Trap-Rec-Address Trap-Rec-Community Version ---------------- ------------------ ------- System Contact: System Location:

The interface receives the IP address automatically. 1. To verify the IP address, enter the “show ip interface” command at the system prompt as shown in the follow- ing example. Notes: 1. The device configuration does not have to be deleted to retrieve an IP address for the DHCP server. 2. When copying configuration files, avoid using a configuration file that contains an instruction to enable DHCP on an interface that connects to the same DHCP server, or to one with an identical configuration. In this instance, the switch retrieves the new configuration file and boots from it. The device then enables DHCP as instructed in the new configuration file, and the DHCP instructs it to reload the same file again. Receiving an IP Address From a BOOTP Server The standard BOOTP protocol is supported and enables the switch to automatically download its IP host configu- ration from any standard BOOTP server in the network. In this case, the device acts as a BOOTP client. To retrieve an IP address from a BOOTP server: 1. Select and connect any port to a BOOTP server or subnet containing such a server, to retrieve the IP address. 2. At the system prompt, enter the delete startup configuration command to delete the startup configuration from flash. The device reboots with no configuration and in 60 seconds starts sending BOOTP requests. The device receives the IP address automatically. console# configure console(config)# interface ethernet e1 console(config-if)# ip address dhcp hostname console(config-if)# exit console(config)# Console# show ip interface Gateway IP Address Type Activity status -------- ------ ------------- -- 10.7.1.1 Static Active IP address Interfac e Type Directed Broadcast ------------ - -------- - ------- -------- 10.7.1.192/ 24 VLAN 1 Static

BOOTP process before completion and the device does not receive an IP address from the BOOTP server. The following example illustrates the process: To verify the IP address, enter the “show ip interface” command. The device is now configured with an IP address. Security Management and Password Configuration System security is handled through the AAA mechanism that manages user access rights, privileges, and man- agement methods. AAA uses both local and remote user databases. Data encryption is handled through the SSH mechanism. The system is delivered with no default password configured; all passwords are user-defined. If a user-defined password is lost, a password recovery procedure can be invoked from the Startup menu. The procedure is appli- cable for the local terminal only and allows a one-time access to the device from the local terminal with no pass- word entered. Configuring Security Passwords Introduction The security passwords can be configured for the following services: • Console • Telnet • SSH • HTTP • HTTPS Passwords are user-defined. When creating a user name, the default priority is "1," which allows access but not configuration rights. A priority of "15" must be set to enable access and configuration rights to the device. Although user names can be assigned privilege level 15 without a password, it is recommended to always assign a password. If there is no specified password, privileged users can access the Web interface with any password. Console> enable Console# delete startup-config Startup file was deleted Console# reload You haven’t saved your changes. Are you sure you want to continue (y/n)[n]? This command will reset the whole system and disconnect your current session.Do you want to continue (y/n)[n]? ****************************************************** /*the device reboots */

To configure an initial console password, enter the following commands: When initially logging on to a device through a console session, enter george at the password prompt. When changing a device’s mode to enable, enter george at the password prompt. Configuring an Initial Telnet Password To configure an initial Telnet password, enter the following commands: When initially logging onto a device through a Telnet session, enter bob at the password prompt. When changing a device mode to enable, enter bob. Configuring an Initial SSH password To configure an initial SSH password, enter the following commands: When initially logging onto a device through a SSH session, enter ”jones” at the password prompt. When changing a device mode to enable, enter “jones”. Configuring an Initial HTTP Password To configure an initial HTTP password, enter the following commands: Console(config)# aaa authentication login default line Console(config)# aaa authentication enable default line Console(config)# line console Console(config-line)# login authentication default Console(config-line)# enable authentication default Console(config-line)# password george Console(config)# aaa authentication login default line Console(config)# aaa authentication enable default line Console(config)# line telnet Console(config-line)# login authentication default Console(config-line)# enable authentication default Console(config-line)# password bob Console(config)# aaa authentication login default line Console(config)# aaa authentication enable default line Console(config)# line ssh Console(config-line)# login authentication default Console(config-line)# enable authentication default Console(config-line)# password jones Console(config)# ip http authentication local Console(config)# username admin password user1 level 15

To configure an initial HTTPS password, enter the following commands: Enter the following commands once when configuring to use a console, a Telnet, or an SSH session in order to use an HTTPS session. In the Web browser enable SSL 2.0 or greater for the content of the page to appear. When initially enabling an http or https session, enter admin for user name and user1 for password. Note HTTP and HTTPS services require level 15 access and connect directly to the configuration level access. Software Download and Reboot Software Download through XModem This section contains instructions for downloading device software (system and boot images) using XModem, which is a data transfer protocol for updating back-up configuration files. To download a boot file using XModem: 1. Enter the command “xmodem:boot”. The switch is ready to receive the file via the XModem protocol and dis- plays text similar to the following: 2. Specify the path of the source file within 20 seconds. If the path is not specified within 20 seconds, the com- mand times out. To download a software image file using XModem: 1. Enter the command “xmodem:image”. The switch is ready to receive the file via the XModem protocol. 2. Specify the path of the source file to begin the transfer process. The following is an example of the informa- tion that appears: Console(config)# ip https authentication local Console(config)# username admin password user1 level 15 Console(config)# crypto certificate generate key_generate Console(config)# ip https server Console# copy xmodem:boot Please download program using XMODEM. console# Console# copy xmodem:image Please download program using XMODEM console#

This section contains instructions for downloading device software (system and boot images) through a TFTP server. The TFTP server must be configured before downloading the software. The switch boots and runs when decompressing the system image from the flash memory area where a copy of the system image is stored. When a new image is downloaded, it is saved in the other area allocated for the addi- tional system image copy. On the next boot, the switch decompresses and runs the currently active system image unless chosen otherwise. To download an image through the TFTP server: 1. Ensure that an IP address is configured on one of the device ports and pings can be sent to a TFTP server. 2. Ensure that the file to be downloaded is saved on the TFTP server (the DOS file). 3. Enter the command show version to verify which software version is currently running on the device. The fol- lowing is an example of the information that appears: Enter the command show bootvar to verify which system image is currently active. The following is an example of the information that appears: 4. Enter the command copy tftp://{tftp address}/{file name}image to copy a new system image to the device. When the new image is downloaded, it is saved in the area allocated for the other copy of system image (image-2, as given in the example). The following is an example of the information that appears: Exclamation symbols indicate that a copying process is in progress. A period indicates that the copying process is timed out. Many periods in a row indicate that the copying process failed. 5. Select the image for the next boot by entering the boot system command. After this command, enter the com- mand “show bootvar” to verify that the copy indicated as a parameter in the boot system command is selected for the next boot. The following is an example of the information that appears: If the image for the next boot is not selected by entering the boot system command, the system boots from the currently active image (image-1,as given in the example). Console# show version SW version x.xx.xx (date xx-xxx-2004 time 13:42:41)Boot version x.xx.x (date x-xxx-2003 time 15:12:20) HW version Console# show bootvar Images currently available on the Flash Image-1 active (selected for next boot)Image-2 not active Console# Console# copy tftp://176.215.31.3/file1 image Accessing file file1 on 176.215.31.3... Loading file1 from 176.215.31.3:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Copy took 00:01:11 [hh:mm:ss] Console# boot system image-2 Console# sh bootvar Images currently available on the Flash Image-1 active Image-2 not active (selected for next boot)

7. Enter “Y” to reboot the switch. Boot Image Download Loading a new boot image from the TFTP server and programming it into the flash updates the boot image. The boot image is loaded when the switch is powered on. To download a boot file through the TFTP server: 1. Ensure that an IP address is configured on one of the device ports and pings can be sent to a TFTP server. 2. Ensure that the file to be downloaded (the .rfb file) is saved on the TFTP server. 3. Enter the command show version to verify which boot version is currently running on the device. The follow- ing is an example of the information that appears: 4. Enter the command copy tftp://{tftp address}/{file name} boot to copy the boot image to the switch. The following is an example of the information that appears: 5. Enter the command reload. The following message is displayed: 6. Enter Y to reboot the switch. Startup Menu Functions Additional configuration functions can be performed from the Startup menu. To display the Startup menu: 1. During the boot process, after the first part of the POST is completed press or within two sec- onds after the following message is displayed: Console# reload This command will reset the whole system and disconnect your current session.Do you want to continue (y/n)[n]? Console# show version SW version x.xx.xx (date xx-xxx-2004 time 13:42:41)Boot version x.xx.xx (date xx-xx- 2004 time 15:12:20)HW version xx.xx.xx (date xx-xxx-2004 time 12:12:20) Console# copy tftp://176.215.31.3/6024_boot-10013.rfb Erasing file ...done.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Copy:393232 bytes copied in 00:00:05 [hh:mm:ss] Console# reload This command will reset the whole system and disconnect your current session. Do you want to continue (y/n)[n]? Autoboot in 2 seconds -press RETURN or Esc.to abort and enter prom.

The following sections describe the Startup menu options. If no selection is made within 25 seconds (default), the switch times out and the device continues to load normally. Only technical support personnel can operate the Diagnostics Mode. For this reason, the Enter Diagnostic Mode option of the Startup menu is not described in this guide. Download Software Use the software download option when a new software version must be downloaded to replace corrupted files, update, or upgrade the system software. To download software from the Startup menu: 1. On the Startup menu, press 1. The following prompt is displayed: 2. When using HyperTerminal, click Transfer on the HyperTerminal menu bar. 3. From the Transfer menu, click Send File. The Send File window is displayed. 4. Enter the file path for the file to be downloaded. 5. Ensure the protocol is defined as Xmodem. 6. Click Send. The software is downloaded. Software downloading takes several minutes. The terminal emulation applica- tion, such as HyperTerminal, may display the progress of the loading process. After software downloads, the device reboots automatically. Erase FLASH File In some cases, the device configuration must be erased. If the configuration is erased, all parameters configured via CLI, Web browser interface, or SNMP must be reconfigured. To erase the device configuration: 1. From the Startup menu, press 2 within 6 seconds to erase flash file. The following message is displayed: 2. Press “Y”. Note Do not press . [1]Download Software [2]Erase Flash File [3]Erase Flash Sectors [4]Password Recovery Procedure [5]Enter Diagnostic Mode [6]Back Enter your choice or press 'ESC' to exit: Downloading code using XMODEM Warning! About to erase a Flash file. Are you sure (Y/N)?y

3. Enter config as the name of the flash file. The configuration is erased and the device reboots. 4. Perform the switch’s initial configuration. Erase FLASH Sectors For troubleshooting purposes, the flash sectors may need to be erased. If the flash is erased, all software files must be downloaded and installed again. To erase the FLASH: 1. From the Startup menu, press “3” within 6 seconds. The following message is displayed: 2. Confirm by pressing . The following message is displayed: 3. Enter the first flash block to be erased and press . The following message is displayed: 4. Enter the last flash block to be erased and press . The following message is displayed: 5. Confirm by pressing . The following message is displayed: Password Recovery If a password is lost, use the Password Recovery option on the Startup menu. The procedure enables the user to enter the device once without a password. To recover a lost password for the local terminal only: 1. From the Startup menu, select “4” and press . The password is deleted. 2. To ensure device security, reconfigure passwords for applicable management methods. Write Flash file name (Up to 8 characters, Enter for none.):config File config (if present) will be erased after system initialization ========Press Enter To Continue ======== Warning! About to erase Flash Memory! FLASH size =16252928.blocks =64 Are you sure (Y/ N) Enter First flash block (1 -63): Enter Last flash block (1 -63): Are you sure (Y/N) Erasing flash blocks 1 -63: Done.

This section provides an introduction to the user interface, and includes the following topics: • Starting the D-Link Embedded Web Interface • Understanding the D-Link Embedded Web Interface • Using Screen and Table Options • Resetting the Device • Logging Off from the Device

Page 39 Starting the D-Link Embedded Web Interface Notes • Disable the popup blocker before beginning device configuration using the EWS. This section contains information on starting the D-Link Embedded Web interface. To access the D-Link user interface: 1. Open an Internet browser. 2. Ensure that pop-up blockers are disabled. If pop-up blockers are enable, edit, add, and device information messages may not open. 3. Enter the device IP address in the address bar and press Enter. The Enter Network Password Page opens: Figure 11: Enter Network Password Page 4. Enter your user name and password. Notes • The device is configured with a user name that is admin and a password that is blank, and can be configured without entering a password. • Passwords are case sensitive. • Disable all pop-ups with a popup blocker. 5. Click . The D-Link Embedded Web Interface Home Page opens:

Page 40 Figure 12: D-Link Embedded Web Interface Home Page

Page 41 Understanding the D-Link Embedded Web Interface The D-Link Embedded Web Interface Home Page contains the following views: • Port LED Indicators — Located at the top of the home page, the port LED indicators provide a visual repre- sentation of the ports on the D-Link front panel. • Tab Area — Located under the LED indicators, the tab area contains a list of the device features and their components. • Device View — Located in the main part of the home page, the device view provides a view of the device, an information or table area, and configuration instructions. Figure 13: D-Link Embedded Web Interface Components The following table lists the user interface components with their corresponding numbers: Table 9: Interface Components View Description 1 Tree View Tree View provides easy navigation through the configurable device features. The main branches expand to display the sub-features. 2 Device View Device View provides information about device ports, current configuration and status, table information, and feature components. Device View also displays other device information and dialog boxes for configuring parameters. 3 Tab Area The Tab Area enables navigation through the different device fea- tures. Click the tabs to view all the components under a specific fea- ture. 1 2 3 4 5

Page 42 This section provides the following additional information: • Device Representation — Provides an explanation of the D-Link user interface buttons, including both man- agement buttons and task icons. • Using the D-Link Embedded Web Interface Management Buttons — Provides instructions for adding, modifying, and deleting configuration parameters. Device Representation The D-Link Embedded Web Interface Home Page contains a graphical panel representation of the device. Figure 14: Device Representation 4 Zoom View Provides a graphic of the device on which D-Link Web Interface runs. 5 D-Link Web Interface Infor- mation Tabs Provide access to online help, and contain information about the EWS. Table 9: Interface Components View Description

Page 43 Using the D-Link Embedded Web Interface Management Buttons Configuration Management buttons and icons provide an easy method of configuring device information, and include the following: Table 10: D-Link Web Interface Configuration Buttons Button Button Name Description Clear Logs Clears system logs. Create Enables creation of configuration entries. Edit Modifies configuration settings. Submit Saves configuration changes to the device. Test Performs cable tests. Query Queries the device table. Table 11: D-Link Web Interface Information Tabs Tab Tab Name Description Help Opens the online help. Logout Opens the Logout page.

Page 44 Using Screen and Table Options D-Link contains screens and tables for configuring devices. This section contains the following topics: • Adding Configuration Information • Modifying Configuration Information • Deleting Configuration Information Adding Configuration Information User-defined information can be added to specific D-Link Web Interface pages, by opening a new Add page. To add information to tables or D-Link Web Interface pages: 1. Open an D-Link Web Interface page. 2. Click System > SNTP > Interface Setting. The Add SNTP Interface page opens. 3. Click . An add page opens, such as the Add SNTP Interface Page: Figure 15: Add SNTP Interface 4. Define the fields. 4. Click . The configuration information is saved, and the device is updated. Modifying Configuration Information 1. Open The D-Link Embedded Web Interface page. 2. Select a table entry. 3. Click . A modification page, such as the IP Interface Settings Page opens:

Page 45 Figure 16: IP Interface Settings Page 5. Modify the fields. 6. Click . The fields are modified, and the information is saved to the device. Deleting Configuration Information 1. Open The D-Link Embedded Web Interface page. 2. Select a table row. 3. Select the Remove checkbox. 4. Click . The information is deleted, and the device is updated.

Page 46 Resetting the Device The Reset page enables resetting the device from a remote location. Note To prevent the current configuration from being lost, save all changes from the running configuration file to the startup configuration file before resetting the device. For instructions, see Copying Files. To reset the device: 1. Click System > General > Reset. The Reset page opens. Figure 17: Reset Page 2. Click . A confirmation message is displayed. Figure 18: Reset Confirmation Message 3. Click . The device is reset, and a prompt for a user name and password is displayed. 4. Enter a user name and password to reconnect to the web Interface.

Page 47 Logging Off from the Device 1. Click . The Logout Page opens. Figure 19: Logout Page 2. Click . The D-Link Embedded Web Interface Home Page closes.

Page 48 Section 5. Managing Device Information This section contains information for setting general system information, and includes the following sections: • Defining the System Description • Configuring System Time

Defining the System Description Page 49 Defining the System Description The System Description Page contains parameters for configuring general device information, including the sys- tem name, location, and contact, the system MAC Address, System Object ID, System Up Time, System IP and MAC addresses, and both software and hardware versions. To define the general system information: 1. Click System > General > Description. The System Description Page opens: Figure 20: System Description Page The System Description Page contains the following fields: • Model Name — Displays the device model number and name. • System Name — Defines the user-defined device name. The field range is 0-160 characters. • System Location — Defines the location where the system is currently running. The field range is 0-160 characters. • System Contact — Defines the name of the contact person. The field range is 0-160 characters. • System Object ID — Displays the vendor’s authoritative identification of the network management sub- system contained in the entity. • System Up Time — Displays the amount of time since the most recent device reset. The system time is dis- played in the following format: Days, Hours, Minutes, and Seconds. For example, 41 days, 2 hours, 22 min- utes and 15 seconds. • Base MAC Address — Displays the device MAC address. • Hardware Version — Displays the installed device hardware version number. • Software Version — Displays the installed software version number. • Boot Version — Displays the current boot version running on the device.

Configuring System Time Page 50 Configuring System Time This section provides information for configuring system time parameters, including: • Configuring Daylight Saving Time • Configuring SNTP

Configuring Daylight Saving Time Page 51 Configuring Daylight Saving Time The Time Page contains fields for defining system time parameters for both the local hardware clock and the external SNTP clock. If the system time is kept using an external SNTP clock, and the external SNTP clock fails, the system time reverts to the local hardware clock. Daylight Savings Time can be enabled on the device. The following is a list of Daylight Savings Time start and end times in specific countries: • Albania — From the last weekend of March until the last weekend of October. • Australia — From the end of October until the end of March. • Australia - Tasmania — From the beginning of October until the end of March. • Armenia — From the last weekend of March until the last weekend of October. • Austria — From the last weekend of March until the last weekend of October. • Bahamas — From April to October, in conjunction with Daylight Savings Time in the United States. • Belarus — From the last weekend of March until the last weekend of October. • Belgium — From the last weekend of March until the last weekend of October. • Brazil — From the third Sunday in October until the third Saturday in March. During the period of Daylight Saving Time, Brazilian clocks go forward one hour in most of the Brazilian southeast. • Chile — In Easter Island, from March 9 until October 12. In the rest of the country, from the first Sunday in March or after 9th March. • China — China does not use Daylight Saving Time. • Canada — From the first Sunday in April until the last Sunday of October. Daylight Saving Time is usually regulated by provincial and territorial governments. Exceptions may exist in certain municipalities. • Cuba — From the last Sunday of March to the last Sunday of October. • Cyprus — From the last weekend of March until the last weekend of October. • Denmark — From the last weekend of March until the last weekend of October. • Egypt — From the last Friday in April until the last Thursday in September. • Estonia — From the last weekend of March until the last weekend of October. • Finland — From the last weekend of March until the last weekend of October. • France — From the last weekend of March until the last weekend of October. • Germany — From the last weekend of March until the last weekend of October. • Greece — From the last weekend of March until the last weekend of October. • Hungary — From the last weekend of March until the last weekend of October. • India — India does not use Daylight Saving Time. • Iran — From Farvardin 1 until Mehr 1. • Iraq — From April 1 until October 1. • Ireland — From the last weekend of March until the last weekend of October. • Israel — Varies year-to-year. • Italy — From the last weekend of March until the last weekend of October. • Japan — Japan does not use Daylight Saving Time. • Jordan — From the last weekend of March until the last weekend of October. • Latvia — From the last weekend of March until the last weekend of October. • Lebanon — From the last weekend of March until the last weekend of October. • Lithuania — From the last weekend of March until the last weekend of October. • Luxembourg — From the last weekend of March until the last weekend of October. • Macedonia — From the last weekend of March until the last weekend of October.

Configuring Daylight Saving Time Page 52 • Mexico — From the first Sunday in April at 02:00 to the last Sunday in October at 02:00. • Moldova — From the last weekend of March until the last weekend of October. • Montenegro — From the last weekend of March until the last weekend of October. • Netherlands — From the last weekend of March until the last weekend of October. • New Zealand — From the first Sunday in October until the first Sunday on or after March 15. • Norway — From the last weekend of March until the last weekend of October. • Paraguay — From April 6 until September 7. • Poland — From the last weekend of March until the last weekend of October. • Portugal — From the last weekend of March until the last weekend of October. • Romania — From the last weekend of March until the last weekend of October. • Russia — From the last weekend of March until the last weekend of October. • Serbia — From the last weekend of March until the last weekend of October. • Slovak Republic - From the last weekend of March until the last weekend of October. • South Africa — South Africa does not use Daylight Saving Time. • Spain — From the last weekend of March until the last weekend of October. • Sweden — From the last weekend of March until the last weekend of October. • Switzerland — From the last weekend of March until the last weekend of October. • Syria — From March 31 until October 30. • Taiwan — Taiwan does not use Daylight Saving Time. • Turkey — From the last weekend of March until the last weekend of October. • United Kingdom — From the last weekend of March until the last weekend of October. • United States of America — From the first Sunday in April at 02:00 to the last Sunday in October at 02:00. To configure the system time: 1. Click System > General > Time. The Time Page opens.

Configuring Daylight Saving Time Page 53 Figure 21: Time Page The Time Page contains the following sections: • Clock Source — The source used to set the system clock. The possible field values are: – None — Indicates that a clock source is not used. The clock is set locally. – SNTP — Indicates that the system time is set via an SNTP server. • Date — The system date. The field format is Day/Month/Year. For example: 04/May/50 (May 4, 2050). • Local Time — The system time. The field format is HH:MM:SS. For example: 21:15:03. • Time Zone Offset — The difference between Greenwich Mean Time (GMT) and local time. For example, the Time Zone Offset for Paris is GMT +1, while the Time Zone Offset for New York is GMT –5. • Daylight Savings — Enables automatic Daylight Savings Time (DST) on the device based on the device’s location. There are two types of daylight settings, either by a specific date in a particular year or a recurring setting irrespective of the year. For a specific setting in a particular year complete the Daylight Savings area, and for a recurring setting, complete the Recurring area. The possible field values are: – USA — The device switches to DST at 2:00 a.m. on the first Sunday of April, and reverts to standard time at 2:00 a.m. on the last Sunday of October. – European — The device switches to DST at 1:00 am on the last Sunday in March and reverts to standard time at 1:00 am on the last Sunday in October. The European option applies to EU members, and other European countries using the EU standard. – Other — The DST definitions are user-defined based on the device locality. If Other is selected, the From and To fields must be defined. • Time Set Offset (1-1440) — Used for non-USA and European countries to set the amount of time for DST (in minutes). The default time is 60 minutes. • From — Indicates the time that DST begins in countries other than the USA and Europe, in the format Day/ Month/Year in one field and HH:MM in another. For example, if DST begins on October 25, 2007 at 5:00 am, the two fields should be set to 25/Oct/07 and 05:00. The possible field values are: – Date — The date on which DST begins. The possible field range is 1-31.

Configuring Daylight Saving Time Page 54 – Month — The month of the year in which DST begins. The possible field range is Jan-Dec. – Year — The year in which the configured DST begins. – Time — The time at which DST begins. The field format is HH:MM. For example: 05:30. • To — Indicates the time that DST ends in countries other than the USA and Europe, in the format Day/Month/ Year in one field and HH:MM in another. For example, if DST ends on March 23, 2008 at midnight, the two fields should be 23/Mar/08 and 00:00. The possible field values are: – Date — The date on which DST ends. The possible field range is 1-31. – Month — The month of the year in which DST ends. The possible field range is Jan-Dec. – Year— The year in which the configured DST ends. – Time — The time at which DST starts. The field format is HH:MM. For example: 05:30. • Recurring — Enables user-defined DST for countries in which DST is constant from year to year, other than the USA and Europe. • From — The time that DST begins each year. In the example, DST begins locally every first Sunday in April at midnight. The possible field values are: – Day — The day of the week from which DST begins every year. The possible field range is Sunday- Saturday. – Week — The week within the month from which DST begins every year. The possible field range is 1-5. – Month — The month of the year in which DST begins every year. The possible field range is Jan-Dec. – Time — The time at which DST begins every year. The field format is Hour:Minute. For example: 02:10. • To — The time that DST ends each year. In the example, DST ends locally every first Sunday in October at midnight. The possible field values are: – Day — The day of the week at which DST ends every year. The possible field range is Sunday-Saturday. – Week — The week within the month at which DST ends every year. The possible field range is 1-5. – Month — The month of the year in which DST ends every year. The possible field range is Jan-Dec. – Time — The time at which DST ends every year. The field format is HH:MM. For example: 05:30. 2. Define the Date, Local Time and Time Zone Offset fields. 3. To configure the device to automatically switch to DST, select Daylight Savings and select either USA, Euro- pean, or Other. If you select Other, you must define its From and To fields. To configure DST parameters that will recur every year, select Recurring and define its From and To fields. 4. Click . The DST settings are saved, and the device is updated.

Configuring SNTP Page 55 Configuring SNTP The device supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The device operates only as an SNTP client, and cannot provide time services to other systems. The device can poll the following server types for the server time: • Unicast • Anycast • Broadcast Time sources are established by stratums. Stratums define the accuracy of the reference clock. The higher the stratum (where zero is the highest), the more accurate the clock. The device receives time from stratum 1 and above. The following is an example of stratums: • Stratum 0 — A real time clock (such as a GPS system) is used as the time source. • Stratum 1 — A server that is directly linked to a Stratum 0 time source is used. Stratum 1 time servers pro- vide primary network time standards. • Stratum 2 — The time source is distanced from the Stratum 1 server over a network path. For example, a Stratum 2 server receives the time over a network link, via NTP, from a Stratum 1 server. Information received from SNTP servers are evaluated based on the Time level and server type. SNTP time defi- nitions are assessed and determined by the following time levels: • T1 — The time at which the original request was sent by the client. • T2 — The time at which the original request was received by the server. • T3 — The time at which the server sent the client a reply. • T4 — The time at which the client received the server's reply. Polling for Unicast Time Information Polling for Unicast information is used for polling a server for which the IP address is known. T1 - T4 are used to determine the server time. This is the preferred method for synchronizing device time. Polling for Anycast Time Information Polling for Anycast information is used when the server IP address is unknown. The first Anycast server to return a response is used to set the time value. Time levels T3 and T4 are used to determine the server time. Using Any- cast time information for synchronizing device time is preferred to using Broadcast time information. Broadcast Time Information Broadcast information is used when the server IP address is unknown. When a broadcast message is sent from an SNTP server, the SNTP client listens for the response. The SNTP client neither sends time information requests nor receives responses from the Broadcast server. Message Digest 5 (MD5) Authentication safeguards device synchronization paths to SNTP servers. MD5 is an algorithm that produces a 128-bit hash. MD5 is a variation of MD4, and increases MD4 security. MD5 verifies the integrity of the communication, and authenticates the origin of the communication.

Configuring SNTP Page 56 This section contains the following topics: ² Defining SNTP Global Settings ² Defining SNTP Authentication ² Defining SNTP Servers • Defining SNTP Interface Settings

Defining SNTP Global Settings Page 57 Defining SNTP Global Settings The SNTP Properties Page provides information for defining SNTP parameters globally. To define SNTP global parameters: 1. Click System > SNTP > Properties. The SNTP Properties Page opens: Figure 22: SNTP Properties Page The SNTP Properties Page contains the following fields: • Poll Interval — Defines the interval (in seconds) at which the SNTP server is polled for Unicast information. The Poll Interval default is 1024 seconds. • Enable Receive Broadcast Servers Updates — Defines whether or not the device monitors the SNTP serv- ers for Broadcast server time information on the selected interfaces. The possible values are: – Enable — Enables the device to receive Broadcast server updates. – Disable — Disables the device from receiving Broadcast server updates. • Enable Receive Anycast Servers Updates — Defines whether or not the device polls the SNTP server for Anycast server time information. If both the Enable Receive Anycast Servers Update and the Enable Receive Broadcast Servers Update fields are enabled, the system time is set according to the Anycast server time information. The possible values are: – Enable — Enables the device to receive Anycast server updates. – Disable — Disables the device from receiving Anycast server updates. • Enable Receive Unicast Servers Updates — Defines whether or not the device polls the SNTP server for Unicast server time information. If the Enable Receive Broadcast Servers Updates, Enable Receive Anycast Servers Updates, and Enable Receive Unicast Servers Updates fields are all enabled, the system time is set according to the Unicast server time information. The possible values are: – Enable — Enables the device to receive Unicast server updates. – Disable — Disables the device from receiving Unicast server updates. • Enable Poll Unicast Servers — Defines whether or not the device sends SNTP Unicast forwarding informa- tion to the SNTP server. The possible values are: – Enable — Enables the device to receive Poll Unicast server updates. – Disable — Disables the device from receiving Poll Unicast server updates.

Defining SNTP Global Settings Page 58 2. Define the Poll Interval, Enable Receive Broadcast Servers Update, Enable Receive Anycast Servers Update, Enable Receive Unicast Servers Update, and Enable Poll Unicast Servers fields and select at least one of the Enable fields. 3. Click . The SNTP global settings are defined, and the device is updated.

Defining SNTP Authentication Page 59 Defining SNTP Authentication The SNTP Authentication Page provides parameters for defining the means by which the SNTP server is authen- ticated. To define SNTP authentication: 1. Click System > SNTP > Authentication. The SNTP Authentication Page opens: Figure 23: SNTP Authentication Page The SNTP Authentication Page contains the following fields: • Enable SNTP Authentication — Indicates if authenticating an SNTP session between the device and an SNTP server is enabled on the device. The possible field values are: – Checked — Authenticates SNTP sessions between the device and the SNTP server. – Unchecked — Disables authenticating SNTP sessions between the device and the SNTP server. • Encryption Key ID — Indicates if the encryption key identification is used to authenticate the SNTP server and device. The field value is up to 4294967295. • Authentication Key — Indicates the key used for authentication. • Trusted Key — Indicates the encryption key used (Unicast/Anycast) or elected (Broadcast) to authenticate the SNTP server. • Remove — Removes Encryption Key IDs. The possible field values are: – Checked — Removes the selected Encryption Key ID(s). – Unchecked — Maintains the Encryption Key ID(s). This is the default value. 2. Select Enable in the Enable SNTP Authentication field. 3. Click . SNTP Authentication is defined, and the device is updated.

Defining SNTP Authentication Page 60 To define SNTP authentication parameters: 1. Click . The Add SNTP Authentication page opens: Figure 24: Add SNTP Authentication 2. Define the Encryption Key ID, Authentication Key, and Trusted Key fields. 3. Click . The SNTP Authentication Key is added, and the device is updated.

Defining SNTP Servers Page 61 Defining SNTP Servers The SNTP Servers Page contains information for defining SNTP servers, as well as adding new SNTP servers. In addition, the SNTP Servers Page enables the device to request and accept SNTP traffic from a server. To define an SNTP server: 1. Click System > SNTP > Servers. The SNTP Servers Page opens: Figure 25: SNTP Servers Page The SNTP Servers Page contains the following fields: • SNTP Server — Displays user-defined SNTP server IP addresses. Up to two SNTP servers can be defined. • Poll Interval — Indicates whether or not the device polls the selected SNTP server for system time informa- tion. • Encryption Key ID — Displays the encryption key identification used to communicate between the SNTP server and device. The field range is 1-4294967295. • Preference — Indicates the SNTP server providing SNTP system time information. The possible field values are: – Primary — Indicates the primary server provides SNTP information. – Secondary — Indicates the backup server provides SNTP information. • Status — Displays the SNTP server operating status. • Last Response — Displays the last time a response was received from the SNTP server. • Offset — Indicates the time difference between the device local clock and the acquired time from the SNTP server. • Delay — Indicates the amount of time it takes for a device request to reach the SNTP server. • Remove — Removes SNTP servers from the SNTP server list. The possible field values are: – Checked — Removes the SNTP server. – Unchecked — Maintains the SNTP server. This is the default value.

Defining SNTP Servers Page 62 Note 0 is displayed in the Encryption Key ID field - the range for Servers created with authentication is 1- 4294967295 2. Click . The Add SNTP Server Page opens:

Defining SNTP Servers Page 63 Figure 26: Add SNTP Server Page 3. Define the SNTP Server, Enable Poll Interval, and Encryption Key ID fields. 4. Click . The SNTP Server is added, and the device is updated.

Defining SNTP Interface Settings Page 64 Defining SNTP Interface Settings The SNTP Interface Settings Page contains fields for setting SNTP on different interfaces. To define SNTP inter- face settings: 1. Click System > SNTP > Interface Settings. The SNTP Interface Settings Page opens: Figure 27: SNTP Interface Settings Page The SNTP Interface Settings Page contains the following fields: • Interface — Indicates the interface on which SNTP can be enabled. The possible field values are: – Port — Indicates the specific port number on which SNTP is enabled. – LAG — Indicates the specific LAG number on which SNTP is enabled. – VLAN — Indicates the specific VLAN number on which SNTP is enabled. • Receive Servers Updates — Enables the server to receive or not receive updates. • Remove — Removes SNTP interfaces. – Checked — Removes the selected SNTP interface. 2. Unchecked — Maintains the selected SNTP interfaces.Click . The Add SNTP Interface Page opens.

Defining SNTP Interface Settings Page 65 Figure 28: Add SNTP Interface Page 3. Define the Interface and Receive Server Updates fields. 4. Click . The SNTP interface is added, and the device is updated. –

Resetting the Device Page 66 Resetting the Device The Reset page enables resetting the device from a remote location. To prevent the current configuration from being lost, save all changes from the running configuration file to the startup configuration file before resetting the device. For instructions, see Copying Files. .To reset the device: 1. Click System > General > Reset. The Reset page opens. Figure 29: Reset Page 2. Click . A confirmation message is displayed.

The Interface Configuration Page contains fields for defining port parameters. To define port parameters: 1. Click Basic Setup > Interface > Interface Configuration. The Interface Configuration Page opens. Figure 30: Interface Configuration Page The Interface Configuration Page is divided into the following sections: • Interface Configuration ports table • Interface Configuration LAG table The Interface Configuration Ports Table contains the following fields: • Interface — Displays the port number. • Port Status — Indicates whether the port is currently operational or non-operational. The possible field val- ues are: – Up — Indicates the port is currently operating. – Down — Indicates the port is currently not operating. • Port Speed — Displays the configured rate for the port. The port type determines what speed setting options are available. Port speeds can only be configured when auto negotiation is disabled. The possible field values are: – 10 — Indicates the port is currently operating at 10 Mbps. – 100 — Indicates the port is currently operating at 100 Mbps. – 1000 — Indicates the port is currently operating at 1000 Mbps. • Duplex Mode — Displays the port duplex mode. This field is configurable only when auto negotiation is dis- abled, and the port speed is set to 10M or 100M. This field cannot be configured on LAGs. The possible field values are: – Full — The interface supports transmission between the device and its link partner in both directions simultaneously.

time. • Auto Negotiation — Displays the auto negotiation status on the port. Auto negotiation is a protocol between two link partners that enables a port to advertise its transmission rate, duplex mode, and flow control abilities to its partner. • Advertisement — Defines the auto negotiation setting the port advertises. The possible field values are: – Max Capability — Indicates that all port speeds and duplex mode settings are accepted. – 10 Half — Indicates that the port advertises for a 10 Mbps speed port and half duplex mode setting. – 10 Full — Indicates that the port advertises for a 10 Mbps speed port and full duplex mode setting. – 100 Half — Indicates that the port advertises for a 100 Mbps speed port and half duplex mode setting. – 100 Full — Indicates that the port advertises for a 100 Mbps speed port and full duplex mode setting. – 1000 Full — Indicates that the port advertises for a 1000 Mbps speed port and full duplex mode setting. – 1000 Half — Indicates that the port advertises for a 1000 Mbps speed port and half duplex mode setting. • Back Pressure — Displays the back pressure mode on the Port. Back pressure mode is used with half duplex mode to disable ports from receiving messages. • Flow Control — Displays the flow control status on the port. Operates when the port is in full duplex mode. • MDI/MDIX — Displays the MDI/MDIX status on the port. Hubs and switches are deliberately wired opposite the way end stations are wired, so that when a hub or switch is connected to an end station, a straight through Ethernet cable can be used, and the pairs are matched up properly. When two hubs or switches are con- nected to each other, or two end stations are connected to each other, a crossover cable is used to ensure that the correct pairs are connected. The possible field values are: – Auto — Use to automatically detect the cable type. – MDI (Media Dependent Interface) — Use for end stations. – MDIX (Media Dependent Interface with Crossover) — Use for hubs and switches. • LAG — Indicates whether the port is part of a Link Aggregation Group (LAG). The Interface Configuration LAG Table contains the following fields: • LAG — Indicates whether the LAG is part of a Link Aggregation Group (LAG). • Description — Provides a user-defined port description. • LAG Type — Indicates the type of LAG defined by the first port assigned to the LAG. For example, 100-Cop- per, or 100-Fiber. • LAG Status — Indicates whether the LAG is up or down. • LAG Speed — Displays the configured aggregated rate for the LAG. The possible field values are: – 10 — Indicates the port is currently operating at 10 Mbps. – 100 — Indicates the port is currently operating at 100 Mbps. – 1000 — Indicates the port is currently operating at 1000 Mbps. • Auto Negotiation — Displays the auto negotiation status of the LAG. Auto negotiation is a protocol between two link partners that enables a port to advertise its transmission rate, duplex mode, and flow control abilities to its partner. • Flow Control — Displays the flow control status of the LAG. • PVE — Enables a port to be a Private VLAN Edge (PVE) port. When a port is defined as PVE, it bypasses the Forwarding Database (FDB), and forwards all Unicast, Multicast and Broadcast traffic to an uplink (except MAC-to-me packets). Uplinks can be a port or LAG. Traffic from the uplink is distributed to all interfaces. 2. Click . The Port or LAG Interface Settings Page opens:

the Reactivate Suspended Port or Reactivate Suspended LAG fields. Select Reactivate Suspended Port or Reac- tivate Suspended LAG fields to return a suspended port or LAG to active status. Figure 31: Port Configuration Settings Page 3. Modify the Admin Speed, Admin Duplex, and Admin Advertisement fields. 4. Click . The parameters are saved, and the device is updated.

Page 70 Viewing Port Properties The Interface Properties Page contains fields for defining port parameters. To view port properties: 1. Click Basic Setup > Interface > Interface Properties. The Interface Properties Page opens: Figure 32: Interface Properties Page The Interface Properties Page is contains the following fields: • Interface — Displays the port number. • Port Type — Displays the port type. The possible field values are: – Copper — Indicates the port has a copper port connection. – Fiber — Indicates the port has a fiber optic port connection. Description — Provides a user-defined port description.To edit the port properties: 1. Click Basic Setup > Interface > Interface Properties. The Interface Configuration Page opens. 2. Click . The Port Properties Page opens:

Page 71 Figure 33: Port Properties Page 3. Define the Port and Description fields. 4. Click . The interface properties are modified, and the device is updated. •

Link Aggregation optimizes port usage by linking a group of ports together to form a single LAG. Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy. The device supports both static LAGs and Link Aggregation Control Protocol (LACP) LAGs. LACP LAGs negotiate aggregating port links with other LACP ports located on a different device. If the other device ports are also LACP ports, the devices establish a LAG between them. Ensure the following: • All ports within a LAG must be the same media type. • A VLAN is not configured on the port. • The port is not assigned to a different LAG. • Auto-negotiation mode is not configured on the port. • The port is in full-duplex mode. • All ports in the LAG have the same ingress filtering and tagged modes. • All ports in the LAG have the same back pressure and flow control modes. • All ports in the LAG have the same priority. • All ports in the LAG have the same transceiver type. • The device supports up to eight LAGs, and eight ports in each LAG. • Ports can be configured as LACP ports only if the ports are not part of a previously configured LAG. • Ports added to a LAG lose their individual port configuration. When ports are removed from the LAG, the orig- inal port configuration is applied to the ports. This section contains the following topics: • Configuring LACP • Defining LAG Membership

Page 73 Defining LAG Membership The LAG Membership Page contains fields for configuring parameters for configured LAGs. The device supports up to eight ports per LAG, and eight LAGs per system. To define LAG parameters: 1. Click Advanced Setup > Interface > LAG Membership. The opens. Figure 34: LAG Membership Page The LAG Membership Page contains the following fields: • LAG No. — Displays the LAG number. • Name — Displays the user-defined LAG name on which LACP is enabled. • Link State — Displays the link operational status. • Members — Displays the ports configured to the LAG. In addition to the fields appearing on the LAG Membership Page, the LAG Membership Settings Page contains the following fields: • LACP — Indicates if LACP is enabled on LAG. The possible field values are: – Checked — Enables LACP on the LAG. – Unchecked — Disables LACP on the LAG. This is the default value. • Port List — Displays the ports to which timeout and priority values are assigned. 2. Click . The LAG membership settings are saved, and the device is updated.

set up manually or automatically established by enabling LACP on the relevant links. Aggregate ports can be linked into link-aggregation port-groups. The LACP Parameters Page contains fields for configuring LACP LAGs. To configure LACP for LAGs: 1. Click Advanced Setup > Interface > LACP Parameters. The LACP Parameters Page opens: Figure 35: LACP Parameters Page The LACP Parameters Page contains the following fields: • LACP System Priority — Specifies system priority value. The field range is 1-65535. The field default is 1. • Port — Displays the port number to which timeout and priority values are assigned. • Port-Priority — Displays the LACP priority value for the port. The field range is 1-65535. • LACP Timeout — Displays the administrative LACP timeout. The possible field values are: – Long — Specifies the long timeout value. 2. Short — Specifies the short timeout value.Click . The LACP Parameters Settings Page opens:

3. Edit the Port Priority and LACP Timeout fields. 4. Click . The LACP settings are saved, and the device is updated –

VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups. VLANs use software to reduce the amount of time it takes for network changes, additions, and moves to be implemented. VLANs have no minimum number of ports, and can be created per unit, per device, or through any other logical connection combination, since they are software-based and not defined by physical attributes. VLANs function at Layer 2. Since VLANs isolate traffic within the VLAN, a Layer 3 router working at a protocol level is required to allow traffic flow between VLANs. Layer 3 routers identify segments and coordinate with VLANs. VLANs are Broadcast and Multicast domains. Broadcast and Multicast traffic is transmitted only in the VLAN in which the traffic is generated. VLAN tagging provides a method of transferring VLAN information between VLAN groups. VLAN tagging attaches a 4-byte tag to packet headers. The VLAN tag indicates to which VLAN the packets belong. VLAN tags are attached to the VLAN by either the end station or the network device. VLAN tags also contain VLAN network prior- ity information. Combining VLANs and Generic Attribute Registration Protocol (GARP) allows network managers to define net- work nodes into Broadcast domains. This section contains the following topics: • Defining VLAN Properties • Defining VLAN Membership • Defining VLAN Interface Settings

Page 77 Defining VLAN Properties The VLAN Properties Page provides information and global parameters for configuring and working with VLANs. To define VLAN properties: 1. Click Basic Setup > VLAN > Membership > Properties. The VLAN Properties Page opens. Figure 37: VLAN Properties Page The VLAN Properties Page contains the following fields: • Select VLAN ID or Show All — Users can indicate which VLAN they would like to display. • ID — Displays the VLAN ID. • Name — Displays the user-defined VLAN name. • Type — Displays the VLAN type. The possible field values are: – Dynamic — Indicates the VLAN was dynamically created through GARP. – Static — Indicates the VLAN is user-defined. – Default — Indicates the VLAN is the default VLAN. • Authenticated VLAN — Indicates whether unauthorized users can access a Guest VLAN. The possible field values are: – Enable — Enables unauthorized users to use the Guest VLAN. – Disable — Disables unauthorized users from using the Guest VLAN. • Remove — Removes VLANs. The possible field values are: – Checked — Removes the selected VLAN. – Unchecked — Maintains VLANs. 2. Click . The Add VLAN page opens:

Page 78 Figure 38: Add VLAN Page 3. Define the VLAN ID and VLAN Name fields. 4. Click . The VLAN ID is defined, and the device is updated. To edit the VLAN Settings: 1. Click System > VLAN > Membership > Properties. The Edit VLAN Page opens. 2. Click . The Edit VLAN Page opens:

Page 79 Figure 39: Edit VLAN Page 3. Edit the VLAN Name and Disable Unauthenticated VLAN fields. 4. Click . The VLAN Settings are saved, and the device is updated

Page 80 Defining VLAN Membership The VLAN Membership Page contains a table that maps VLAN parameters to ports. Ports are assigned to VLAN membership by toggling through the Port Control settings. To define VLAN membership: 1. Click Basic Setup > VLAN > Membership > Membership. The VLAN Membership Page opens. Figure 40: VLAN Membership Page The VLAN Membership Page contains the following fields: • VLAN ID — Displays the user-defined VLAN ID. • VLAN Name — Displays the name of the VLAN • VLAN Type— Indicates the VLAN type. The possible field values are: – Dynamic — Indicates the VLAN was dynamically created through GARP. – Static — Indicates the VLAN is user-defined. – Default — Indicates the VLAN is the default VLAN. • Port — Indicates the port membership. • LAG — Indicates the LAG membership. • Untagged (Brown) — Indicates the interface is an untagged VLAN member. Packets forwarded by the inter- face are untagged. • Tagged (Red) — Indicates the interface is a tagged member of a VLAN. All packets forwarded by the inter- face are tagged. The packets contain VLAN information. • Include (Blue) — Includes the port in the VLAN. • Exclude (Gray) — Excludes the interface from the VLAN. However, the interface can be added to the VLAN through GARP. • Forbidden (Purple) — Denies the interface VLAN membership, even if GARP indicates the port is to be added.

Page 81 Defining VLAN Interface Settings The VLAN Interface Settings Page contains fields for managing ports that are part of a VLAN. The Port Default VLAN ID (PVID) is configured on the VLAN Interface Settings Page. All untagged packets arriving at the device are tagged with the port PVID. To define VLAN interfaces: 1. Click Basic Setup > VLAN > Membership > Interface Settings. The VLAN Interface Settings Page opens. Figure 41: VLAN Interface Settings Page The VLAN Interface Settings Page contains the following fields: • Interface — Displays the port number included in the VLAN. • Interface VLAN Mode — Displays the port mode. The possible values are: – Customer — Assigns an interface to a VLAN based on the host source MAC address connected to the interface – General — Indicates the port belongs to VLANs, and each VLAN is user-defined as tagged or untagged (full IEEE802.1q mode). – Access — Indicates a port belongs to a single untagged VLAN. When a port is in Access mode, the packet types which are accepted on the port cannot be designated. Ingress filtering cannot be enabled or disabled on an access port. – Trunk — Indicates the port belongs to VLANs in which all ports are tagged, except for one port that can be untagged. – PVE - Promiscuous — Indicates the port is part of a PV Promiscuous VLAN. – PVE - Isolated — Indicates the port is part of a PV Isolated VLAN. – PVE - Community — Indicates the port is part of a PV Community VLAN. • PVID — Assigns a VLAN ID to untagged packets. The possible values are 1-4094. VLAN 4095 is defined as per standard and industry practice as the Discard VLAN. Packets classified to the Discard VLAN are dropped. • Frame Type — Specifies the packet type accepted on the port. The possible field values are: – Admit Tag Only — Only tagged packets are accepted on the port. – Admit All — Both tagged and untagged packets are accepted on the port. • Ingress Filtering— Indicates whether ingress filtering is enabled on the port. The possible field values are: – Enable — Enables ingress filtering on the device. Ingress filtering discards packets that are defined to VLANs of which the specific port is not a member.

Page 82 – Disable — Disables ingress filtering on the device. • Reserve VLAN — Indicates the VLAN is the Reserved VLAN. VLANS can be selected as the Reserved VLAN is not being used by the system. 2. Select a port. 3. Click . The VLAN Interface Settings Page opens: Figure 42: VLAN Interface Settings Page 4.Define the Interface, Port VLAN Mode, Dynamic, PVID, Frame Type, Ingress Filtering, Current Reserved VLAN and Reserve VLAN for Internal Use fields. 5.Click . The VLAN interface settings are modified, and the device is updated.

includes the following topics: • Defining GARP • Defining GVRP Defining GARP Generic Attribute Registration Protocol (GARP) protocol is a general-purpose protocol that registers any network connectivity or membership-style information. GARP defines a set of devices interested in a given network attribute, such as VLAN or multicast address. When configuring GARP, ensure the following: • The leave time must be greater than or equal to three times the join time. • The leave-all time must be greater than the leave time. • Set the same GARP timer values on all Layer 2-connected devices. If the GARP timers are set differently on the Layer 2-connected devices, the GARP application does not operate successfully. To define GARP on the device: 1. Click Basic Setup > VLAN > GARP > GARP Parameters. The GARP Parameters Page opens: Figure 43: GARP Parameters Page The GARP Parameters Page contains the following fields: • Unit No. — Displays the stacking member for which the GARP parameters are displayed. • Interface — Displays the port or LAG on which GARP is enabled. • Join Timer— Indicates the amount of time, in centiseconds, that PDUs are transmitted. The default value is 20 centiseconds. • Leave Timer— Indicates the amount of time lapse, in centiseconds, that the device waits before leaving its GARP state. Leave time is activated by a Leave All Time message sent/received, and cancelled by the Join

60 centiseconds. • Leave All Timer — Indicates the amount of time lapse, in centiseconds, that all device waits before leaving the GARP state. The leave all time must be greater than the leave time. The default value is 1000 centisec- onds. 2. Click . The GARP Parameters Settings Page opens: Figure 44: GARP Parameters Settings Page 3. Modify the Interface, Join Timer (centiseconds), Leave Timer (centiseconds), and Leave All Timer (centisec- onds) fields. 4. Click . The GARP parameters are defined, and the device is updated.

information among VLAN-aware bridges. GVRP allows VLAN-aware bridges to automatically learn VLANs to bridge ports mapping, without having to individually configure each bridge and register VLAN membership. To define GARP. To define GVRP on the device: 1. Click Basic Setup > VLAN > GARP > GVRP Parameters. The GVRP Parameters Page opens: Figure 45: GVRP Parameters Page The GVRP Parameters Page is divided into port and LAG parameters. The field definitions are the same. The GVRP Parameters Page contains the following fields: • Unit No. — Displays the stacking member for which the GVRP parameters are displayed. • GVRP Global Status — Indicates if GVRP is enabled on the device. The possible field values are: – Enable — Enables GVRP on the selected device. – Disable — Disables GVRP on the selected device. • Interface— DIsplays the port on which GVRP is enabled. • GVRP State— Indicates if GVRP is enabled on the port. The possible field values are: – Enable — Enables GVRP on the selected port. – Disable — Disables GVRP on the selected port. • Dynamic VLAN Creation — Indicates if Dynamic VLAN creation is enabled on the interface. The possible field values are: – Enable — Enables Dynamic VLAN creation on the interface. – Disable — Disables Dynamic VLAN creation on the interface.

field values are: – Enable — Enables GVRP registration on the device. – Disable — Disables GVRP registration on the device. 2. Click . The GVRP Parameters Settings Page opens: Figure 46: GVRP Parameters Settings Page 3. Define the GVRP State, Dynamic VLAN Creation, and GVRP Registration fields. 4. Click . The GVRP Interface parameters are sent, and the device is updated.

Page 87 Section 9. Defining the Forwarding Database Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port. The Dynamic MAC Address Table can be sorted by interface, VLAN, or MAC Address, whereas MAC addresses are dynamically learned as packets from sources that arrive at the device. Static addresses are config- ured manually. An address becomes associated with a port by learning the port from the frame’s source address, but if a frame that is addressed to a destination MAC address is not associated with a port, that frame is flooded to all relevant VLAN ports. To prevent the bridging table from overflowing, a dynamic MAC address, from which no traffic arrives for a set period, is erased. This section contains information for defining both static and dynamic forwarding database entries, and includes the following topics: • Defining Static Forwarding Database Entries • Defining Dynamic Forwarding Database Entries

Defining Static Forwarding Database Entries Page 88 Defining Static Forwarding Database Entries The Forwarding Database Static Addresses Page contains parameters for defining the age interval on the device. To prevent static MAC addresses from being deleted when the device is reset, ensure that the port attached to the MAC address is locked. To configure the static forwarding database: 1. Click Advanced Setup > Forwarding Database > Static Addresses. The Forwarding Database Static Addresses Page opens. Figure 47: Forwarding Database Static Addresses Page The Forwarding Database Static Addresses Page contains the following fields: • VLAN ID — Displays the VLAN ID number to which the entry refers. • MAC Address — Displays the MAC address to which the entry refers. • Interface — Displays the interface to which the entry refers. To prevent static MAC addresses from being deleted when the device is reset, ensure that the port to which the MAC address is assigned is locked. – Port — The specific port number to which the forwarding database parameters refer. – LAG — The specific LAG number to which the forwarding database parameters refer. • Status — Displays how the entry was created. The possible field values are: – Secure — The MAC Address is defined for locked ports. – Permanent — The MAC address is permanent. – Delete on Reset — The MAC address is deleted when the device is reset. – Delete on Timeout — The MAC address is deleted when a timeout occurs. • Remove — Removes the entry. The possible field values are: – Checked — Removes the selected entry. – Unchecked — Maintains the current static forwarding database. To add a new static forwarding database entry: 1. Click Advanced Setup > Forwarding Database > Static Addresses. The Forwarding Database Static Addresses Page opens.

Defining Static Forwarding Database Entries Page 89 2. Click . The Add Forwarding Database Page opens: Figure 48: Add Forwarding Database Page 3. Define the Interface, MAC Address, VLAN ID or VLAN Name, and Status fields. 4. Click . The forwarding database information is modified, and the device is updated.

Defining Dynamic Forwarding Database Entries Page 90 Defining Dynamic Forwarding Database Entries The Dynamic Addresses Page contains parameters for querying information in the Dynamic MAC Address Table, including the interface type, MAC addresses, VLAN, and table storing. The Dynamic MAC Address table contains information about the aging time before a dynamic MAC address is erased, and includes parameters for querying and viewing the Dynamic MAC Address table. The Dynamic MAC Address table contains address parameters by which packets are directly forwarded to the ports. The Dynamic Address Table can be sorted by interface, VLAN, and MAC Address. To configure the Dynamic MAC Address table: 1. Click Advanced Setup > Forwarding Database > Dynamic Addresses. The Dynamic Addresses Page opens. Figure 49: Dynamic Addresses Page The Dynamic Addresses Page contains the following fields: • Aging Interval — Specifies the amount of time the MAC Address remains in the Dynamic Address Table before it times out. The default value is 300 seconds. • Clear Table — Clears the current Address Table entries. • Query by: — Sorts the addresses table by: – Interface — Displays the interface to for which the dynamic address is defined. – MAC Address — Specifies the MAC address for which the table is queried. – VLAN ID — Specifies the VLAN ID for which the table is queried.

Defining Dynamic Forwarding Database Entries Page 91 2. Address Table Sort Key —Specifies the means by which the Dynamic MAC Address Table is sorted. The address table can be sorted by address, VLAN, or interface.Define the fields. 3. Click . The Dynamic Address Aging field is defined, and the device is updated. To query the Dynamic MAC Address Table: 1. Click Advanced Setup > Forwarding Database > Dynamic Addresses. The Dynamic Addresses Page opens. 2. Select a port, MAC Address, and VLAN ID. 3. Select an Address Table Sort Key. 4. Click . The Dynamic MAC Address Table is queried, and the results are displayed. •

Page 92 Section 10.Configuring Spanning Tree Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP also provides a sin- gle path between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended network can cause bridges to for- ward traffic indefinitely, resulting in increased traffic and reducing network efficiency. The device supports the following STP versions: • Classic STP — Provides a single path between end stations, avoiding and eliminating loops. For more infor- mation on configuring Classic STP, see Defining Classic Spanning Tree. • Rapid STP — Detects and uses network topologies that provide faster convergence of the spanning tree, without creating forwarding loops. For more information on configuring Rapid STP, see Defining Rapid Span- ning Tree. • Multiple STP — Provides various load balancing scenarios. For example, if port A is blocked in one STP instance, the same port can be placed in the Forwarding State in another STP instance. For more information on configuring Multiple STP, see Defining Multiple Spanning Tree. This section contains the following topics: • Defining Classic Spanning Tree • Defining STP on Interfaces • Defining Rapid Spanning Tree • Defining Multiple Spanning Tree

Defining Classic Spanning Tree Page 93 Defining Classic Spanning Tree The STP Properties Page contains parameters for enabling STP on the device. To enable STP on the device: 1. Click Advanced Setup > Spanning Tree > STP > Properties. The STP Properties Page opens: Figure 50: STP Properties Page The STP Properties Page contains the following fields: • Spanning Tree State — Indicates whether STP is enabled on the device. The possible field values are: – Enable — Enables STP on the device. – Disable — Disables STP on the device. • STP Operation Mode — Specifies the STP mode that is enabled on the device. The possible field values are: – Classic STP — Enables Classic STP on the device. This is the default value. – Rapid STP — Enables Rapid STP on the device. – Multiple STP — Enables Multiple STP on the device. • BPDU Handling — Determines how BPDU packets are managed when STP is disabled on the port or device. BPDUs are used to transmit spanning tree information. The possible field values are: – Filtering — Filters BPDU packets when spanning tree is disabled on an interface. This is the default value. – Flooding — Floods BPDU packets when spanning tree is disabled on an interface.

Defining Classic Spanning Tree Page 94 • Path Cost Default Values — Specifies the method used to assign default path cost to STP ports. The possi- ble field values are: – Short — Specifies 1 through 65,535 range for port path cost. This is the default value. – Long — Specifies 1 through 200,000,000 range for port path cost. The default path cost assigned to an interface varies according to the selected method (Hello Time, Max Age, or Forward Delay). • Priority (0-65535) — Specifies the bridge priority value. When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the device with the lowest priority value becomes the Root Bridge. The default value is 32768. The port priority value is provided in increments of 4096. • Hello Time (1-10) — Specifies the device Hello Time. The Hello Time indicates the amount of time in sec- onds a Root Bridge waits between configuration messages. The default is 2 seconds. • Max Age (6-40) — Specifies the device Maximum Age Time. The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages. The default Maximum Age Time is 20 seconds. • Forward Delay (4-30) — Specifies the device Forward Delay Time. The Forward Delay Time is the amount of time in seconds a bridge remains in a listening and learning state before forwarding packets. The default is 15 seconds. • Bridge ID — Identifies the Bridge priority and MAC address. • Root Bridge ID — Identifies the Root Bridge priority and MAC address. • Root Port — Indicates the port number that offers the lowest cost path from this bridge to the Root Bridge. This field is significant when the bridge is not the Root Bridge. The default is zero. • Root Path Cost — The cost of the path from this bridge to the Root Bridge. • Topology Changes Counts — Specifies the total amount of STP state changes that have occurred. • Last Topology Change — Indicates the amount of time that has elapsed since the bridge was initialized or reset, and the last topographic change that occurred. The time is displayed in a day-hour-minute-second for- mat, such as 2 days 5 hours 10 minutes and 4 seconds. 2. Select Enable in the Spanning Tree State field. 3. Select an STP type in the STP Operation Mode field. 4. Define the BPDU Handling and Path Cost Default Values fields. 5. Select either the Hello TIme, Max Age, or Forward Delay field. 6. Click . STP is enabled, and the device is updated.

Defining STP on Interfaces Page 95 Defining STP on Interfaces Network administrators can assign STP settings to specific interfaces using the STP Interface Page. The Global LAGs section displays the STP information for Link Aggregated Groups. To assign STP settings to an interface: 1. Click Advanced Setup > Spanning Tree > STP > Interface Settings. The STP Interface Page opens: Figure 51: STP Interface Page The STP Interface Page contains the following fields: • Port — The interface for which the information is displayed. • STP — Indicates if STP is enabled on the port. The possible field values are: – Enabled — Indicates that STP is enabled on the port. – Disabled — Indicates that STP is disabled on the port. • Fast Link — Indicates if Fast Link is enabled on the port. If Fast Link mode is enabled for a port, the Port State is automatically placed in the Forwarding state when the port link is up. Fast Link optimizes the STP protocol convergence. STP convergence can take 30-60 seconds in large networks. • Port State — Displays the current STP state of a port. If enabled, the port state determines what forwarding action is taken on traffic. Possible port states are: – Disabled — Indicates that STP is currently disabled on the port. The port forwards traffic while learning MAC addresses. – Blocking — Indicates that the port is currently blocked and cannot forward traffic or learn MAC addresses. Blocking is displayed when Classic STP is enabled. • Port Role — Displays the port role assigned by the STP algorithm to provide to STP paths. The possible field values are: – Root — Provides the lowest cost path to forward packets to the root switch. – Designated — The port or LAG through which the designated switch is attached to the LAN. – Alternate — Provides an alternate path to the root switch from the root interface.

Defining STP on Interfaces Page 96 – Backup — Provides a backup path to the designated port path toward the Spanning Tree leaves. Backup ports occur only when two ports are connected in a loop by a point-to-point link, or when a LAN has two or more connections connected to a shared segment. – Disabled — The port is not participating in the Spanning Tree • Speed — Indicates the speed at which the port is operating. • Path Cost — Indicates the port contribution to the root path cost. The path cost is adjusted to a higher or lower value, and is used to forward traffic when a path is re-routed. • Priority — Priority value of the port. The priority value influences the port choice when a bridge has two ports connected in a loop. The priority value is between 0 -240. The priority value is determined in increments of 16. • Designated Bridge ID — Indicates the bridge priority and the MAC Address of the designated bridge. • Designated Port ID — Indicates the selected port D-Link priority and interface. • Designated Cost — Indicates the cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops. • Forward Transitions — Indicates the number of times the port has changed from Forwarding state to Block- ing state. • LAG — Indicates the LAG to which the port belongs. 2. Click . The STP Interface Settings Page opens: Figure 52: STP Interface Settings Page

Defining STP on Interfaces Page 97 3. Select Enable in the STP field. 4. Define the Fast Link, Enable Root Guard, Path Cost, Default Path Cost, and Priority fields. 5. Click . STP is enabled on the interface, and the device is updated.

Defining Rapid Spanning Tree Page 98 Defining Rapid Spanning Tree While Classic STP prevents Layer 2 forwarding loops in a general network topology, convergence can take between 30-60 seconds. This time may delay detecting possible loops and propagating status topology changes. Rapid Spanning Tree Protocol (RSTP) detects and uses network topologies that allow a faster STP convergence without creating forwarding loops. The Global System LAG information displays the same field information as the ports, but represent the LAG RSTP information. To define RSTP on the device: 1. Click Advanced Setup > Spanning Tree > RSTP > RSTP. The RSTP Page opens: Figure 53: RSTP Page The RSTP Page contains the following fields: • Interface — Displays the port or LAG on which Rapid STP is enabled. • State — Indicates if RSTP is enabled on the interface. The possible field values are: – Enabled — Enables RSTP on the device. – Disabled — Disables RSTP on the interface. This is the default value. • Role — Displays the port role assigned by the STP algorithm to provide to STP paths. The possible field val- ues are: – Root — Provides the lowest cost path to forward packets to the root switch. – Designated — The port or LAG through which the designated switch is attached to the LAN. – Alternate — Provides an alternate path to the root switch from the root interface. – Backup — Provides a backup path to the designated port path toward the Spanning Tree leaves. Backup ports occur only when two ports are connected in a loop by a point-to-point link, or when a LAN has two or more connections connected to a shared segment. – Disabled — The port is not participating in the Spanning Tree. • Mode—Displays the current STP mode. The STP mode is selected in the STP Properties Page. The possible field values are: – STP — Classic STP is enabled on the device. – Rapid STP — Rapid STP is enabled on the device.

Defining Rapid Spanning Tree Page 99 – Multiple STP — Multiple STP is enabled on the device. • Fast Link Operational Status — Indicates whether Fast Link is enabled or disabled for the port or LAG. If Fast Link is enabled for a port, the port is automatically placed in the forwarding state. • Point-to-Point Admin Status — Indicates whether a point-to-point link is established, or if the device is per- mitted to establish a point-to-point link. The possible field values are: – Enable — The device is permitted to establish a point-to-point link, or is configured to automatically establish a point-to-point link. To establish communications over a point-to-point link, the originating P2P first sends Link Control Protocol (LCP) packets to configure and test the data link. After a link is established and optional facilities are negotiated as needed by the LCP, the originating P2P sends Network Control Protocol (NCP) packets to select and configure one or more network layer protocols. When each of the chosen network layer protocols has been configured, packets from each network layer protocol can be sent over the link. The link remains configured for communications until explicit LCP or NCP packets close the link, or until some external event occurs. This is the actual switch port link type. It may differ from the administrative state. – Disable — Disables point-to-point link. • Point-to-Point Operational Status — Displays the point-to-point operating state. • Activate Protocol Migration — Indicates whether sending Link Control Protocol (LCP) packets to configure and test the data link is enabled. The possible field values are: – Checked — Protocol Migration is enabled. – Unchecked — Protocol Migration is disabled. 2. Click . The RSTP Settings Page opens: Figure 54: RSTP Settings Page 3. Define the Interface, Point-to-Point Admin Status and Activate Protocol Migration fields. 4. Click . RSTP is defined for the interface, and the device is updated.

Defining Multiple Spanning Tree Page 100 Defining Multiple Spanning Tree Multiple Spanning Tree (MSTP) provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port can be placed in the Forwarding state in another STP instance. The MSTP Properties Page contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops. To define MSTP: 1. Click Advanced Setup > Spanning Tree > MSTP > Properties. The MSTP Properties Page opens: Figure 55: MSTP Properties Page The MSTP Properties Page contains the following fields: • Region Name — User-defined STP region name. • Revision — An unsigned 16-bit number that identifies the revision of the current MSTP configuration. The revision number is required as part of the MSTP configuration. The possible field range is 0-65535. • Max Hops — Specifies the total number of hops that occur in a specific region before the BPDU is discarded. Once the BPDU is discarded, the port information is aged out. The possible field range is 1-40. The field default is 20 hops. • IST Master — Identifies the Spanning Tree Master instance. The IST Master is the specified instance root. 2. Define the Region Name, Revision, and Max Hops fields. 3. Click . The MSTP properties are defined, and the device is updated.