Web Smart Des121028p
Web Smart Des121028p
Table of Contents
Table of Contents ............................................................................................................................................. i
About This Guide............................................................................................................................................. 1
Terms/Usage.................................................................................................................................................. 1
Copyright and Trademarks ............................................................................................................................ 1
Product Introduction ....................................................................................................................................... 2
DES-1210-08P ............................................................................................................................................... 3
Front Panel ................................................................................................................................................. 3
Rear Panel.................................................................................................................................................. 3
DES-1210-28 ................................................................................................................................................. 3
Front Panel ................................................................................................................................................. 3
Rear Panel.................................................................................................................................................. 4
DES-1210-28P ............................................................................................................................................... 4
Front Panel ................................................................................................................................................. 4
Rear Panel.................................................................................................................................................. 5
DES-1210-52 ................................................................................................................................................. 5
Front Panel ................................................................................................................................................. 5
Rear Panel.................................................................................................................................................. 6
Hardware Installation ...................................................................................................................................... 7
Step 1: Unpacking.......................................................................................................................................... 7
Step 2: Switch Installation.............................................................................................................................. 7
Desktop or Shelf Installation....................................................................................................................... 7
Rack Installation ......................................................................................................................................... 7
Step 3 – Plugging in the AC Power Cord....................................................................................................... 8
Power Failure ............................................................................................................................................. 9
Getting Started............................................................................................................................................... 10
Management Options................................................................................................................................... 10
Using Web-based Management .................................................................................................................. 10
Supported Web Browsers ........................................................................................................................ 10
Connecting to the Switch.......................................................................................................................... 10
Login Web-based Management ............................................................................................................... 11
Smart Wizard ............................................................................................................................................... 11
Web-based Management............................................................................................................................. 11
SmartConsole Utility..................................................................................................................................... 11
SmartConsole Utility ..................................................................................................................................... 13
SmartConsole Settings ................................................................................................................................ 13
Utility Settings........................................................................................................................................... 13
Log............................................................................................................................................................ 14
Trap .......................................................................................................................................................... 14
File ............................................................................................................................................................ 14
Help .......................................................................................................................................................... 15
Device Configuration.................................................................................................................................... 16
Add(+), Delete(-) and Discover the device ............................................................................................... 18
Device List.................................................................................................................................................... 18
Configuration ................................................................................................................................................. 20
Smart Wizard Configuration......................................................................................................................... 20
Password Settings.................................................................................................................................... 20
SNMP Settings ......................................................................................................................................... 21
System Settings........................................................................................................................................ 22
Web-based Management............................................................................................................................. 23
Tool Bar > Save Menu ................................................................................................................................. 24
Save Configuration ................................................................................................................................... 24
Save Log .................................................................................................................................................. 24
Tool Bar > Tool Menu .................................................................................................................................. 24
Reset ........................................................................................................................................................ 24
Reset System ........................................................................................................................................... 24
Reboot Device .......................................................................................................................................... 25
Configuration Backup & Restore .............................................................................................................. 25
Firmware Backup and Upload .................................................................................................................. 25
Tool Bar > Smart Wizard.............................................................................................................................. 26
Tool Bar > Online Help................................................................................................................................. 26
Function Tree ............................................................................................................................................... 28
Device Information.................................................................................................................................... 28
System > System Settings ....................................................................................................................... 29
System > DHCP Auto Configuration ........................................................................................................ 29
System > Trap Settings (For SmartConsole) ........................................................................................... 29
System > Port Settings............................................................................................................................. 30
System > SNMP Settings > SNMP Global State ..................................................................................... 31
System > SNMP Settings > SNMP User Table........................................................................................ 32
System > SNMP Settings > SNMP Group Table State............................................................................ 32
System > SNMP Settings > SNMP View Table ....................................................................................... 33
System > SNMP Settings > SNMP Community Table ............................................................................. 33
System > SNMP Settings > SNMP Host Table........................................................................................ 34
System > SNMP Settings > SNMP Engine ID ......................................................................................... 34
System > SNMP Settings > SNMP Trap Settings.................................................................................... 34
System > Password Access Control ........................................................................................................ 35
System > System Log Settings ................................................................................................................ 35
Configuration > 802.1Q VLAN.................................................................................................................. 35
Configuration > 802.1Q VLAN (Asymmetric VLAN) ................................................................................. 37
Configuration > 802.1Q Management VLAN............................................................................................ 38
Configuration > Voice VLAN > Voice VLAN Settings............................................................................... 39
Configuration > Voice VLAN > Voice VLAN OUI Setting ......................................................................... 40
Configuration > Auto Surveillance VLAN > Auto Surveillance VLAN Settings......................................... 40
Configuration > Link Aggregation > Port Trunking ................................................................................... 41
Configuration > Link Aggregation > LACP Port Settings.......................................................................... 42
Configuration > IGMP Snooping .............................................................................................................. 43
Configuration > Multicast Filtering Mode (For DES-1210-08P only) ........................................................ 44
Configuration > Multicast Filtering Mode (For DES-1210-28/28P/52)...................................................... 45
Configuration > Port Mirroring .................................................................................................................. 45
Configuration > Loopback Detection ........................................................................................................ 45
Configuration > SNTP Settings > Time Settings ...................................................................................... 46
Configuration > SNTP Settings > TimeZone Settings.............................................................................. 47
Configuration > Spanning Tree > STP Global Settings............................................................................ 48
Configuration > Spanning Tree > STP Port Settings ............................................................................... 49
QoS > Storm Control ................................................................................................................................ 50
QoS > Bandwidth Control......................................................................................................................... 50
QoS > 802.1p/DSCP Priority Settings...................................................................................................... 51
ii
iii
L2 Features .............................................................................................................................................. 75
VLAN ........................................................................................................................................................ 75
QoS (Quality of Service)........................................................................................................................... 76
Security..................................................................................................................................................... 76
Green........................................................................................................................................................ 76
Management............................................................................................................................................. 76
Appendix C – Rack mount Instructions ...................................................................................................... 77
iv
Terms/Usage
In this guide, the term “Switch” (first letter capitalized) refers to the Smart Switch, and “switch” (first letter
lower case) refers to other Ethernet switches. Some technologies refer to terms “switch”, “bridge” and
“switching hubs” interchangeably, and both are commonly accepted for Ethernet switches.
1 Product Introduction
Thank you and congratulations on your purchase of D-Link Web Smart Switch Products.
D-Link's next generation Web Smart Ethernet switch series blends plug-and-play simplicity with exceptional
value and reliability for small and medium-sized business (SMB) networking. All models are housed in a new
style rack-mount metal case with easy-to-view front panel diagnostic LEDs, and provides advance features
including two combo 1000BASE-T/SFP and two additional Gigabit uplinks, network security, traffic
segmentation, QoS and versatile management.
Flexible Port Configurations. D-Link Web Smart Switches offer four port configurations, 24/48 Ethernet
ports or 8/24 Ethernet ports with PoE support. All ports of the switch support auto MDI/MDIX feature which
bring inexpensive and easy Ethernet connection to the desktops. Each switch provides 4 Gigabit uplinks
connection to a Gigabit backbone or servers. Two of the Gigabit ports are SFP combo ports which support
both 1000M and 100M fiber connections.
Extensive Layer 2 Features. Implemented as complete Layer 2 devices, these switches include functions
such as IGMP Snooping, Port Mirroring, Spanning Tree, 802.3ad LACP and Loopback Detection to enhance
performance and network resiliency.
Traffic Segmentation and QoS. The switches support 802.1Q VLAN tagging to enhance network security
and performance. The switches also support 802.1p priority queues, enabling users to run bandwidth-
sensitive applications such as multimedia streaming by prioritizing traffic in network. These functions allow
switches to work seamlessly with VLAN and 802.1p traffic in the network. Auto Voice VLAN automatically
places the voice traffic from IP phone to an assigned VLAN with higher priority, separating from normal traffic.
Asymmetric VLAN is implemented in these switches for a more efficient use of shared resources such as
server or gateway devices.
Network Security. D-Link’s innovative Safeguard Engine function protects the switches against traffic
flooding caused by virus attacks. Additional feature like 802.1X port-based authentication provides access
control of the network with external RADIUS servers. ACL is a powerful tool to screen unwanted IP or MAC
traffic. Storm Control keeps the network from being overwhelmed by abnormal traffic. Port Security is
another simple but useful authentication method to maintain the integrity of the network device.
Versatile Management. The new generation of D-Link Web Smart Switches provides growing businesses
simple and easy management of their network. The SmartConsole utility or a multi-language Web-Based
management interface allows administrators to remotely control their network down to the port level. The
intuitive SmartConsole easily allows customers to discover multiple D-Link web smart switches in the same
L2 network segment. With this utility, users do not need to change the IP address of PC and provides easy
initial setting of smart switches. The switches within the same L2 network segment connected to user’s local
PC are displayed on the screen for instant access. It allows extensive switch configuration setting, and basic
configuration of discovered devices such as a password change or firmware upgrade.
Users can also access the Switch via Telnet. Basic tasks such as changing the Switch IP address, resetting
the settings to factory defaults, setting the administrator password, rebooting the Switch, or upgrading the
Switch firmware can be performed using the Command Line Interface (CLI).
In addition, users can utilize the SNMP MIB (Management Information Base) to poll switches for information
about the status, or send out traps of abnormal events. SNMP support allows users to integrate the switches
with other third-party devices for management in an SNMP-enabled environment. D-Link Web Smart
Switches also come with the D-View plug-in module that works with D-View 6, SNMP Management Software
which provides easy-to-use graphic interface and facilitates the operation efficiency.
DES-1210-08P
8-Port 10/100Mpbs PoE Web Smart Switch
Front Panel
Power LED : The Power LED lights up when the Switch is connected to a power source.
Power Max LED: The Power Max lights up when the system power resource remain ≦7W, in the meantime,
system will not provide power to the additional PoE PD inserted.
Fan OK/Fail LED: The FAN LED shows the status of the fans, the green light (OK) indicates that all fans
work fine and the red light (Fail) indicate that on or multiple fans are working abnormally.
PoE LED (1-8): The PoE LED lights up with solid green indicates power device is connected to
corresponding port. Solid amber indicates a PoE error has occurred at this port. And light off indicates this
port is not providing the power or no PD found.
Port Speed LED (1-8): The Port Speed LED lights up with solid green indicate the corresponding port is
running on 100M. Light off indicated that port is running on 10M.
Port Link/Act LED (1-8): The Link/Act LED lights up with solid green indicate a network link through the
corresponding port. Blinking indicates that the Switch is either sending or receiving data to the port.
Reset: By pressing the Reset button the Switch will change back to the default configuration and all changes
will be lost.
Rear Panel
DC Power Jack: The power jack is where to connect the DC power cord of power adapter.
Power Switch: Use to turn on/off the Switch.
DES-1210-28
24-Port 10/100Mpbs with 4-Port 10/100/1000Mbps Copper and 2 Combo SFP Web Smart Switch
Front Panel
Power LED : The Power LED lights up when the Switch is connected to a power source.
Port Link/Act/Speed LED (1-24): The Link/Act/Speed LED flashes which indicates a network link through
the corresponding port. Blinking indicates that the Switch is either sending or receiving data to the port.
When a port has amber light indicates that port is running on 10M. When it has a green light it is running on
100M.
Port Link/Act/Speed LED (25F, 26F, 25T, 26T, 27, 28): The Link/Act/Speed LED flashes which indicates a
network link through the corresponding port. Blinking indicates that the Switch is either sending or receiving
data to the port. When a port has amber light indicates that port is running on 10M or 100M. When it has a
green light it is running on 1000M.
Reset: By pressing the Reset button the Switch will change back to the default configuration and all changes
will be lost.
Rear Panel
DES-1210-28P
24-Port 10/100Mpbs PoE with 4-Port 10/100/1000Mbps Copper and 2 Combo SFP Web Smart Switch
Front Panel
Power LED : The Power LED lights up when the Switch is connected to a power source.
Power Max LED: The Power Max lights up when the system power resource remain ≦7W, in the meantime,
system will not provide power to the additional PoE PD inserted.
Fan OK/Fail LED: The FAN LED shows the status of the fans, the green light (OK) indicates that all fans
work fine and the red light (Fail) indicate that on or multiple fans are working abnormally.
Mode Select Button/LED: The Mode Select Button controls the mode of Port LED, and the current setting is
indicated by the Mode LED under the button.
Port LED (1-24):
Link/Act/Speed Mode: When selecting the Link/Act/Speed Mode, the Port LED flashes which
indicate a network link through the corresponding port. Blinking indicates that the Switch is either
sending or receiving data to the port. When a port has amber light indicates that port is running on
10M. When it has a green light it is running on 100M.
PoE Mode: When selecting the PoE Mode, the port LED lights up with solid green indicates power
device is connected to corresponding port. Solid amber indicates a PoE error has occurred at this
port. And light off indicates this port is not providing the power or no PD found.
Port LED (25F, 26F, 25T, 26T, 27, 28): The Port LED flashes which indicates a network link through the
corresponding port. Blinking indicates that the Switch is either sending or receiving data to the port. When a
port has amber light indicates that port is running on 10M or 100M. When it has a green light it is running on
1000M.
Reset: By pressing the Reset button the Switch will change back to the default configuration and all changes
will be lost.
Rear Panel
DES-1210-52
48-Port 10/100Mpbs Web Smart Switch with 4-Port 10/100/1000Mbps and 2 Combo SFPs
Front Panel
Power LED : The Power LED lights up when the Switch is connected to a power source.
Port Link/Act/Speed LED (1-48): The Link/Act/Speed LED flashes which indicates a network link through
the corresponding port. Blinking indicates that the Switch is either sending or receiving data to the port.
When a port has amber light indicates that port is running on 10M. When it has a green light it is running on
100M.
Port Link/Act/Speed LED (49F, 50F, 49T, 50T, 51, 52): The Link/Act/Speed LED flashes which indicates a
network link through the corresponding port. Blinking indicates that the Switch is either sending or receiving
data to the port. When a port has amber light indicates that port is running on 10M or 100M. When it has a
green light it is running on 1000M.
Reset: Press the reset button to reset the Switch back to the default settings. All previous changes will be
lost.
cannot be used.
Rear Panel
2 Hardware Installation
This chapter provides unpacking and installation information for the D-Link Web-Smart Switch.
Step 1: Unpacking
Open the shipping carton and carefully unpack its contents. Please consult the packing list located in the
User Manual to make sure all items are present and undamaged. If any item is missing or damaged, please
contact your local D-Link reseller for replacement.
One D-Link Web-Smart Switch
One AC power cord
Four rubber feet
Screws and two mounting brackets
One Multi-lingual Getting Started Guide
One CD with User Manual, SmartConsole Utility program, and D-View Module
If any item is found missing or damaged, please contact the local reseller for replacement.
Rack Installation
The switch can be mounted in an EIA standard size 19-inch rack, which can be placed in a wiring closet with
other equipment. To install, attach the mounting brackets to the switch’s side panels (one on each side) and
secure them with the screws provided (please note that these brackets are not designed for palm size
switches).
Then, use the screws provided with the equipment rack to mount the switch in the rack.
A) Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the operating ambient
temperature of the rack environment may be greater than room ambient. Therefore, consideration should be
given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma)
specified by the manufacturer.
B) Reduced Air Flow - Installation of the equipment in a rack should be such that the amount of air flow
required for safe operation of the equipment is not compromised.
C) Mechanical Loading - Mounting of the equipment in the rack should be such that a hazardous condition is
not achieved due to uneven mechanical loading.
D) Circuit Overloading - Consideration should be given to the connection of the equipment to the supply
circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring.
Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.
Power Failure
As a precaution, the switch should be unplugged in case of power failure. When power is resumed, plug the
switch back in.
3 Getting Started
This chapter introduces the management interface of D-Link Web-Smart Switch.
Management Options
The D-Link Web Smart Switch can be managed through any port on the device by using the Web-based
Management or through any PC using the SmartConsole Utility.
Each switch must be assigned its own IP Address, which is used for communication with Web-Based
Management or a SNMP network manager. The PC should have an IP address in the same range as the
switch. Each switch can allow up to four users to access to the Web-Based Management concurrently.
However, if you want to manage multiple D-Link Web Smart Switches, the SmartConsole Utility is a more
convenient choice. By using the SmartConsole Utility, you do not need to change the IP address of your PC
and it is easier to initialize multiple Smart Switches.
Please refer to the following installation instructions for the Web-based Management and the SmartConsole
Utility.
Connect the Ethernet cable to any of the ports on the front panel of the switch and to the Ethernet port on the
PC.
10
The web configuration can also be accessed through the SmartConsole Utility. Open the SmartConsole
Utility and double-click the switch as it appears in the Monitor List. This will automatically load the web
configuration in your web browser.
When the following logon dialog box appears, enter the password and choose the language of the Web-
based Management interface then click OK.
The switch supports 9 languages including English, Traditional Chinese, Simplified Chinese, German,
Spanish, French, Italian, Japanese and Russian. By default, the password is admin and the language is
English.
Smart Wizard
After a successful login, the Smart Wizard will guide you through essential settings of the D-Link Web Smart
Switch. Please refer to Smart Wizard Configuration section for details.
Web-based Management
By clicking the Exit button in Smart Wizard, you will enter the Web-based Management interface. Please
refer to Chapter 5 Configuration for detailed instructions.
SmartConsole Utility
The SmartConsole Utility included in the installation CD is a program for discovering D-Link Smart Switches
within the same L2 network segment connected to your PC. This tool is only for computers running Windows
2000, Windows XP, or Windows Vista x64/86 operating systems. There are two options for the installation of
the SmartConsole Utility; one is through the autorun program on the installation CD and the other is manual
installation.
NOTE: Please be sure to uninstall any existing
SmartConsole Utility from your PC before
installing the latest SmartConsole Utility.
11
Option 1: Follow these steps to install the SmartConsole Utility via the autorun program on the installation
CD.
1. Insert the Utility CD into your CD-Rom/DVD-Rom Drive.
2. The autorun program will appear automatically.
3. Click on the ”Install SmartConsole Utility” button and an installation wizard will guide you through the
process.
4. After successfully installing the SmartConsole Utility, you can open the utility by clicking Start >
Programs > D-Link SmartConsole Utility.
5. Connect the Smart Switch to the same L2 network segment of your PC and use the SmartConsole
Utility to discover the Smart Switches.
For detailed explanations of SmartConsole’s functions, please refer to Chapter 4 SmartConsole Utility
12
4 SmartConsole Utility
The D-Link SmartConsole Utility allows the administrator to quickly discover all D-Link smart switches which
are in the same domain of the PC, collect traps and log messages, and quick access to basic configurations
of the switch.
The SmartConsole Utility consists of three parts, Device Configurations at the top, Device List as the main
body, and SmartConsole Settings at the left.
Device Configuration
SmartConsole
Settings
Device List
SmartConsole Settings
The SmartConsole Settings at the left has five icons, Utility Settings, Log, Trap, File, and Help.
Utility Settings
Click this icon to launch the Utility Settings window. Refresh time refreshes the devices which were selected
as monitored device in the Device List. Choices include 15 secs, 30 secs, 1mins, 2mins, and 5 mins for
selecting the monitoring time intervals. Utility Group Interval establishes the intervals (in seconds) that the
Switch will be discovered in the SmartConsole Device List.
13
Log
Click this icon to launch the Log window. Click View Log to show the events of the SmartConsole Utility and
the device. Date/Time indicates when the message was received, IP denotes where it comes from and
Status shows the content of this log message. Click Clear Log to clear all log entries. Click OK to exit.
Trap
Click this icon to launch the Trap window. Click View Trap to show the events of the SmartConsole Utility
and the device. Date/Time indicates when the trap message was received, IP denotes where it comes from
and Status shows the content of this trap message. Click Clear Trap to clear all entries. Click OK to exit
The trap icon in the SmartConsole Settings will change while receiving new trap messages. Please see
below for detailed description.
Icon Description
No new traps
File
By clicking on this icon you will see below options:
14
Monitor Save: Records the setting of the Device List as default for the next time the SmartConsole Utility is
used.
Monitor Save As: Records the setting of the Device List in an appointed filename and file path.
Monitor Load: Manually load a Device List setting file.
Help
Click this icon to launch the SmartConsole Info window.
15
Device Configuration
The Device Configuration in the SmartConsole Utility has five icons:
Device Settings
DHCP Refresh
Web Access
Device Settings
Select a switch from the Device List. Click on this icon to launch the Device Settings window. Here you can
configure the Product Name, IP Address, Gateway, Subnet Mask, System Name, Location, Trap Host IP,
Switch Group Interval, and DHCP Client Setting of the Switch.
To apply the configuration, insert the correct device password in the Confirm Password box and then click
OK
16
DHCP Refresh:
If a DHCP-client enabled switch in the Device List shows the default IP is still used, it means the device did
not receive an IP address from the DHCP server successfully. Select that switch and click the DHCP refresh
icon. Enter the correct Device Password and then click OK. The device will renew the IP address from the
DHCP server.
17
Web Access
Select a switch from the Device List. Click this icon to launch your internet browser (eg. The Internet
Explorer). Here you can configure the Switch through the Web-based Management utility. You may also get
into the Web-based Management by double-clicking the device in the device list.
Device List
This list displays all discovered Web-Smart devices on the network.
18
Monitor: Check the Monitor box and the SmartConsole will collect the trap and log data from the device. The
in the monitor means the device was discovered by SmartConsole. Click the icon to have the device keep
updating the information such as system log or trap to the SmartConsole Utility. The icon will become .
When the device was detected as not reachable, the icon will change to . Please check if the power or
the cable of this device is disconnected.
IP Address: Displays the current IP addresses of devices.
MAC Address: Displays the device MAC Addresses.
Protocol version: Displays the software version of the Utility.
Product Name: Displays the device product name.
System Name: Displays the appointed device system name.
DHCP: Specify if the device gets the IP address from a DHCP server.
Location: Displays where the appointed device location.
Trap IP: Displays the IP address of host where the Trap information will be sent to.
Subnet Mask: Displays the Subnet Mask setting of the device.
Gateway: Displays the Gateway setting of the device.
Device Group Interval: Displays the intervals (in seconds) that the Switch will be discovered in the
SmartConsole Device List
Firmware version: Displays the current Firmware version of this device.
LLDP: Displays the LLDP (Link Layer Discovery Protocol) status of the device. (Only for PoE model)
SNMP: Displays the SNMP status of the device.
19
5 Configuration
The features and functions of the D-Link Web Smart Switch can be configured for optimum use through the
Web-based Management Utility.
Password Settings
Password setting allows you to change the login password of the device. Type the desired new password in
the Switch Password box and again in the Confirm Switch Password, then click the Apply button to make
it effective.
20
SNMP Settings
The SNMP Settings feature allows you to quickly enable or disable the SNMP function and configure the
SNMP community name. For the complete SNMP feature, please navigate to Setup Menu > System >
SNMP Settings in the Web Interface. By default, the SNMP Setting is Disabled. Click Enabled, enter
Community names, and then click Apply to activate SNMP Setting.
Read_Only Community: Allows authorized management stations to retrieve MIB objects values. The
default Community name is public.
Read_Write Community Allows authorized management stations to retrieve and modify MIB object values.
The default Community name is private.
21
System Settings
You can manually change the system IP Address, Subnet Mask, and Gateway address by selecting Static
and clicking Apply. You can further configure and read more about the above settings in the “Setup Menu >
System > System Settings”. The default setting of System IP address is Static. Select DHCP to have the
switch obtain an IP address from a DHCP server in the network.
If you want to change the IP settings, click OK and start a new web browser.
22
Web-based Management
After clicking the Exit button in Smart Wizard you will see the screen below:
Tool Bar
Above is the Web-based Management screen. The three main areas are the Tool Bar on top, the Function
Tree, and the Main Configuration Screen.
The Tool Bar provides a quick and convenient way for essential utility functions like firmware and
configuration management.
By choosing different functions in the Function Tree, you can change all the settings in the Main
Configuration Screen. The main configuration screen will show the current status of your Switch by clicking
the model name on top of the function tree.
At the upper right corner of the screen the username and current IP address will be displayed.
Under the username is the Logout button. Click this to end this session.
Finally, by clicking on the D-Link logo at the upper-left corner of the screen you will be redirected to the local
D-Link website.
23
Save Log
Save the log entries to your local drive and a pop-up message will prompt you for the file path. You can view
or edit the log file by using text editor (e.g. Notepad).
Reset System
Provide another safe reset option for the Switch. All configuration settings in non-volatile RAM will be reset to
factory default and then the Switch will reboot.
24
Reboot Device
Provide a safe way to reboot the system. Click Reboot to restart the switch.
HTTP: Backup or restore the configuration file to or from your local drive.
Click Backup to save the current settings to your disk.
Click Browse to browse your inventories for a saved backup settings file.
Click Restore after selecting the backup settings file you want to restore.
TFTP: TFTP (Trivial File Transfer Protocol) is a file transfer protocol that allows you to transfer files to a
remote TFTP server. Specify TFTP Server IP Address and File Name for the configuration file you want to
save to / restore from.
Click Backup to save the current settings to the TFTP server.
Click Restore after selecting the backup settings file you want to restore.
25
HTTP: Backup or upgrade the firmware to or from your local drive of PC.
Click Backup to save the firmware to your disk.
Click Browse to browse your inventories for a saved firmware file.
Click Upgrade after selecting the firmware file you want to restore.
TFTP: Backup or upgrade the firmware to or from a remote TFTP server. Specify TFTP Server IP Address
and File Name for the configuration file you want to save to / restore from.
Click Backup to save the firmware to the TFTP server.
Click Upgrade after selecting the firmware file you want to restore.
26
27
Function Tree
All configuration options on the switch are accessed through the Setup menu on the left side of the screen.
Click on the setup item that you want to configure. The following sections provide more detailed description
of each feature and function.
Device Information
The Device Information provides an overview of the switch, includes essential information such as firmware
& hardware information, and IP address.
28
IP Information: There are two ways for the switch to obtain an IP address: Static and DHCP (Dynamic Host
Configuration Protocol).
When using static mode, the IP Address, Subnet Mask and Gateway can be manually configured. When
using DHCP mode, the Switch will first look for a DHCP server to provide it with an IP address (including
network mask and default gateway) before using the default or previously entered settings. By default the IP
setting is static mode with IP address is 10.90.90.90 and subnet mask is 255.0.0.0.
System Information: By entering a System Name and System Location, the device can more easily be
recognized through the SmartConsole Utility and from other Web-Smart devices on the LAN.
Login Timeout: The Login Timeout controls the idle time-out period for security purposes, when there is no
action for a specific time span in the Web-based Management. If the current session times out (expires), the
user is required a re-login before using the Web-based Management again. Selective range is from 3 to 30
minutes, and the default setting is 5 minutes.
Group Interval: The D-Link Web Smart Switch will routinely send report packets to the SmartConsole Utility
in order to maintain the information integrity. The user can adjust the Group Interval to optimal frequency.
Selective range is from 120 to 1225 seconds, and 0 means disabling the reporting function.
29
You can select which event message(s) to be sent to the managing station
System Event: The system level messages, which contains:
Device Bootup - System boot-up information.
Illegal Login - Events of incorrect password logins, recording the IP of the originating PC.
Fiber Port Link Up/Link Down: Fiber port connection information.
Twisted pair Port Link Up/Link Down: Copper port connection information.
RSTP Port State Change: Events of a RSTP port state changes.
Firmware Upgrade State: Information of firmware upgrade - success or failure.
PoE Power On/Off: Status of power per port (Only for DES-1210-08P and 28P)
PoE Power Error: The four trap events are: power over loading, short circuit, thermal shutdown and power
deny (Only for DES-1210-08P and 28P).
NOTE: The total PoE power budget is 72 watts for
DES-1210-08P and 193 watts for DES-1210-28P.
The remaining 7watts is reserved for the last PoE
device to be connected to the switch. The Power
Deny trap message is sent out when the switch
hits the total power budget and when a new
Power Device (PD) requests to connect to the
switch at the same time.
Over Max Power Budget: When the system supplies power to PDs and hits the max PoE power budget of
193watts, the system will send out this trap message. (Only for DES-1210-08P and 28P)
30
Speed: Gigabit Fiber connections can operate in 1000M Full Force Mode, Auto Mode or Disabled. Copper
connections can operate in Forced Mode settings (1000M Full, 100M Full, 100M Half, 10M Full, 10M Half),
Auto, or Disabled. 100M Fiber connections support 100M Full Force Mode, 100M Half Force Mode, or
Disabled. The default setting for all ports is Auto.
NOTE: Be sure to adjust port speed settings
appropriately after changing connected cable
media types.
MDI/MDIX:
A medium dependent interface (MDI) port is an Ethernet port connection typically used on the Network
Interface Card (NIC) or Integrated NIC port on a PC. Switches and hubs usually use Medium dependent
interface crossover (MDIX) interface. When connecting the Switch to end stations, user have to use
straight through Ethernet cables to make sure the Tx/Rx pairs match up properly. When connecting the
Switch to other networking devices, a crossover cable must be used.
This switch provides configurable MDI/MDIX function for users. The switches can set as an MDI port in order
to connect to other hubs or switches without an Ethernet crossover cable.
Auto MDI/MDIX is designed on the switch to detect if the connection is backwards and automatically
chooses MDI or MDIX to properly match the connection. The default setting is “Auto” MDI/MDIX.
Flow Control: You can enable this function to mitigate the traffic congestion. Ports configured for full-duplex
use 802.3x flow control, half-duplex ports use backpressure flow control. The default setting is Disabled.
Managed devices that support SNMP include software (referred to as an agent), which runs locally on the
device. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage
the device. These objects are defined in a Management Information Base (MIB), which provides a standard
presentation of the information controlled by the on-board SNMP agent. SNMP defines both the format of the
MIB specifications and the protocol used to access this information over the network.
The default SNMP global state is disabled. Select Enable and click Apply to enable the SNMP function.
31
Figure 52 – System > SNMP Settings > SNMP Global State Settings
Click Apply to create a new SNMP user account, and click Delete to remove any existing data.
32
AuthPriv – Both authorization and encryption are required for packets sent between the Switch and
SNMP manger.
Notify View Name: Specify a SNMP group name for users that can receive SNMP trap messages generated
by the Switch's SNMP agent.
33
Click Apply to create a new SNMP community, Delete to remove an existing community.
Click Apply to create a new SNMP host, Delete to remove an existing host.
34
35
You may change the name accordingly to the desired groups, such as R&D, Marketing, email, etc.
36
Asymmetric VLAN is especially effective when used in a small network where a L3 routing device is absent,
or if the resource to be shared is not capable of supporting tagged VLAN (for example, a printer).
The example below is a typical application of Asymmetric VLAN. Servers and firewall are located in shared
VLAN (default VLAN), and PCs 1, 2 and 3 are located in different VLAN. Because VLANs remain separate,
PCs 1, 2, and 3 cannot communicate with each other; but all of them need to access the servers or the
Internet behind the firewall.
Firewall, V1~V4
PC 1 (Port 5, V2)
PC 2 (Port 6, V3)
PC 3 (Port 7, V4) Servers, V1~V4
Figure 67 – Configuration > 802.1Q VLAN > Asymmetric VLAN - Enabling Asymmetric VLAN
The group of shared ports needs to be included for all the VLANs. Ports 15-18, 20 already belong to
VLAN 1, therefore no changes are needed.
VLAN 2 is configured to include ports 15-18, 20 (shared VLAN ports) and the set of ports to be
separated from the other VLANs (for example, port 5). VLAN 3 and 4 are then configured to include
37
shared ports and the set of ports to be separated from the other VLANs (for example, port 6 and 7
respectively). Therefore we have three VLANs that share some common ports, but their original
membership ports are still separated from each other (for example, port 5, 6, and 7).
Figure 68 – Configuration > 802.1Q VLAN > Asymmetric VLAN – Create VLANs
The purpose of assigning PVID is to make sure the untagged packets will be transmitted correctly.
Figure 69 – Configuration > 802.1Q VLAN > Asymmetric VLAN – Assign PVID
After configuration, the user will be able to share the network resources set on the shared group of ports
(nominated as PVID 1), with both smaller subsets of VLANs (nominated PVID 2, 3 and 4). However, VLAN 2,
3 and 4 groups are incapable of sharing information with each other directly. Click Example to see the
example to configure asymmetric VLAN in larger networks.
38
Voice VLAN State: Select to enable or disable Voice VLAN. The default is Disabled. After you enabled
Voice VLAN, you can configure the Voice VLAN Global Settings.
VLAN ID: The ID of VLAN that you want to assign voice traffic to. You must first create a VLAN from the
802.1Q VLAN page before you can assign a dedicated Voice VLAN. The member port you configured in
802.1Q VLAN setting page will be the static member port of voice VLAN. To dynamically add ports into the
voice VLAN, please enable the Auto Detection function
Priority: The 802.1p priority levels of the traffic in the Voice VLAN.
Aging Time: Enter a period of time in hours to remove a port from voice VLAN if the port is an automatic
VLAN member. When the last voice device stops sending traffic and the MAC address of this voice device is
aged out, the voice VLAN aging timer will be started. The port will be removed from the voice VLAN after
expiration of voice VLAN aging timer. Selectable range is from 1 to 120 hours and default is 1 hour.
From Port / To Port: A consecutive group of ports may be configured starting with the selected port.
Auto Detection: Switch will add ports to the voice VLAN automatically if it detects the device OUI matches
the Telephony OUI configured in Voice VLAN OUI Setting page. Use the drop-down menu to enable or
disable the OUI auto detection function. The default is Disabled
Click Apply to implement changes made and Refresh to refresh the voice vlan table.
Note: Voice VLAN has higher priority than any
other features even QoS. Therefore the voice
traffic will be operated according to Voice VLAN
setting and not impacted by QoS feature.
39
VoIP traffic.
Figure 72 – Configuration > Voice VLAN > Voice VLAN OUI Setting
There are some pre-defined OUIs and when the user configures personal OUI, these pre-defined OUIs must
be avoided. Below are the pre-defined voice traffic’s OUI:
OUI Vendor Mnemonic Name
00:E0:BB 3COM 3com
00:03:6B Cisco cisco
00:E0:75 Veritel veritel
00:D0:1E Pingtel pingtel
00:01:E3 Siemens siemens
00:60:B9 NEC/ Philips nec&philips
00:0F:E2 Huawei-3COM huawei&3com
00:09:6E Avaya avaya
Default OUI: Pre-defined OUI values, including brand names of 3COM, Cisco, Veritel, Pingtel, Siemens,
NEC/Philips, Huawei3COM, and Avaya.
User defined OUI: You can manually create a Telephony OUI with a description. The maximum number of
user defined OUIs is 10. It will occupy one ACL rule when selecting user defined OUI by default, and to
configure one user-defined OUI will take extra one ACL rule. System will auto generate an ACL profile
(Profile ID: 51) for all the Voice VLAN rules.
Select the OUI and press Add to the lower table to complete the Auto Voice VLAN setting.
Configuration > Auto Surveillance VLAN > Auto Surveillance VLAN Settings
Similar as Voice VLAN, Auto Surveillance VLAN is a feature that allows you to automatically place the video
traffic from D-Link IP cameras to an assigned VLAN to enhance the IP surveillance service. With a higher
priority and individual VLAN, the quality and the security of surveillance traffic are guaranteed. The Auto
Surveillance VLAN function will check the source MAC address / VLAN ID on the incoming packets. If it
matches specified MAC address / VLAN ID, the packets will pass through switch with desired priority.
40
Auto Surveillance VLAN State: Select to enable or disable Auto Surveillance VLAN. The default is Enabled.
VLAN ID: By default, the VLAN ID 1 was created as Surveillance VLAN and all ports are member ports. You
also can create another Surveillance VLAN by selecting a VLAN ID that you have created a VLAN from the
802.1Q VLAN page. The member port you configured in 802.1Q VLAN setting page will be the static
member port of surveillance VLAN.
Priority: The 802.1p priority levels of the traffic in the surveillance VLAN.
Click Apply to implement changes of Auto Surveillance global settings
Note: By default, the priority of Auto Surveillance
VLAN is highest. It is recommended changing the
priority to high when Auto Voice VLAN is also
enabled to guarantee the quality of VoIP traffic.
Component Type: Surveillance VLAN will automatically detect D-Link Surveillance Devices by default.
There are another five surveillance components that could be configured to be auto-detected by surveillance
VLAN. These five components are Video Management Server (VMS), VMS Client, Video Encoder, Network
Storage and Other IP Surveillance Devices. Usually, VMS and VMS Clients are two necessary components
for an IP surveillance service.
Description: Here to input the description for the component.
MAC Address: You can manually create an MAC address for the surveillance component. The maximum
number of user defined MAC address is 5. System will auto generate an ACL profile (Profile ID: 56) for all the
surveillance VLAN rules.
Click Add to create a new surveillance component and Refresh to refresh the surveillance VLAN summary
table.
41
LACP - LACP (Link Aggregation Control Protocol) is enabled on the device. LACP allows for the
automatic detection of links in a Port Trunking Group.
Disable - Remove all the member in this trunk group.
From Port: The beginning of a consecutive group of ports may be configured starting with the selected port.
To Port: The ending of a consecutive group of ports may be configured starting with the selected port.
Port Priority (0-65535): Displays the LACP priority value for the port. Default is 128.
Activity: There are two different roles of LACP ports:
Active - Active LACP ports are capable of processing and sending LACP control frames. This allows
LACP compliant devices to negotiate the aggregated link so the group may be changed dynamically
as needs require. In order to utilize the ability to change an aggregated port group, that is, to add or
subtract ports from the group, at least one of the participating devices must designate LACP ports as
active. Both devices must support LACP.
42
Passive - LACP ports that are designated as passive cannot initially send LACP control frames. In
order to allow the linked port group to negotiate adjustments and make changes dynamically, one
end of the connection must have "active" LACP ports.
Timeout: Specify the administrative LACP timeout. The possible field values are:
Short (3 Sec) - Defines the LACP timeout as 3 seconds.
Long (90 Sec) - Defines the LACP timeout as 90 seconds. This is the default value.
By default, IGMP is disabled. If enabled, the IGMP Global Settings will need to be entered:
Host Timeout (130-153025 sec): This is the interval after which a learned host port entry will be purged. For
each host port learned, a 'Port Purge Timer' runs for 'Host Port Purge Interval'. This timer will be restarted
whenever a report message from host is received over that port. If no report messages are received for 'Host
Port Purge Interval' time, the learned host entry will be purged from the multicast group. The default value is
260 seconds.
Robustness Variable (2-255 sec): The Robustness Variable allows adjustment for the expected packet loss
on a subnet. If a subnet is expected to be lossy, the Robustness Variable may need to be increased. The
Robustness Variable cannot be set to zero, and it SHOULD NOT be. Default is 2 seconds.
Query Interval (60-600 sec): The Query Interval is the interval between General Queries sent. By adjusting
the Query Interval, the number of IGMP messages can be increased or decreased; larger values will cause
IGMP Queries to be sent less often. Default value is 125 seconds.
Router Timeout (60-600 sec): This is the interval after which a learned router port entry will be purged. For
each router port learned, a 'Router Port Purge Timer' runs for 'Router Port Purge Interval'. This timer will be
restarted whenever a Query control message is received over that port. If no Query control messages are
received for 'Router Port Purge Interval' time, the learned router port entry will be purged. Default is 260
seconds.
Last Member Query Interval (1-25 sec): The Last Member Query Interval is the Max Response Time
inserted into Group-Specific Queries sent in response to Leave Group messages, and is also the amount of
time between Group-Specific Query messages. This value may be adjusted to modify the "leave latency" of
the network. A reduced value results in reduced time to detect the loss of the last member of a group. Default
is 1 second.
Max Response Time (10-25 sec): The Max Response Time specifies the maximum allowed time before
sending a responding report message. Adjusting this setting effects the "leave latency", or the time between
the moment the last host leaves a group and when the multicast server is notified that there are no more
43
members. It also allows adjustments for controlling the frequency of IGMP traffic on a subnet. Default is 10
seconds.
Querier State: D-Link Smart Switch is able to send out the IGMP Queries to check the status of multicast
clients. Default is disabled.
To enable IGMP snooping for a given VLAN, select enable and click on the Apply button. Then press the
Edit button under Router Port Setting, and select the ports to be assigned as router ports for IGMP
snooping for the VLAN, and press Apply for changes to take effect. A router port configured manually is a
Static Router Port, and a Dynamic Router Port is dynamically configured by the Switch when query control
message is received.
To view the Multicast Entry Table for a given VLAN, press the View button.
44
45
Detection port will be unlocked when the Loopback Detection Recover Time times out. The Loopback
Detection function can be implemented on a range of ports at a time. You may enable or disable this function
using the pull-down menu.
Loopback Detection State: Use the drop-down menu to enable or disable loopback detection. The default
is Disabled.
Interval (1-32767): Set a Loop detection Interval between 1 and 32767 seconds. The default is 1 seconds.
Recover Time (0 or 60-1000000): Time allowed (in seconds) for recovery when a Loopback is detected.
The Loop Detection Recover Time can be set at 0 seconds, or 60 to 1000000 seconds. Entering 0 will
disable the Loop Detection Recover Time. The default is 60 seconds.
From Port: The beginning of a consecutive group of ports may be configured starting with the selected port.
To Port: The ending of a consecutive group of ports may be configured starting with the selected port.
State: Use the drop-down menu to toggle between Enabled and Disabled. Default is Disabled.
46
Clock Source: Specify the clock source by which the system time is set. The possible options are:
Local - Indicates that the system time is set locally by the device.
SNTP - Indicates that the system time is retrieved from a SNTP server.
Current Time: Displays the current date and time for the switch.
If choosing SNTP for the clock source, then the following parameters will be available:
SNTP First Server: Specify the IP address of primary SNTP server from which the system time is retrieved.
SNTP Second Server: Specify the IP address of secondary SNTP server from which the system time is
retrieved.
SNTP Poll Interval in Seconds (30-99999): Defines the interval (in seconds) at which the SNTP server is
polled for Unicast information. The Poll Interval default is 30 seconds.
When selecting Local for the clock source, users can select from one of two options:
Manually set current time: Users input the system time manually.
Set time from PC: The system time will be synchronized from the local computer.
Daylight Saving Time State: Use this drop-down menu to enable or disable the DST Settings.
Daylight Saving Time Offset in Minutes: Use this drop-down menu to specify the amount of time that will
constitute your local DST offset - 30, 60, 90, or 120 minutes.
Time Zone Offset from GMT in +/- HH:MM: Use these drop-down menus to specify your local time zone's
offset from Greenwich Mean Time (GMT.)
DST Annual Settings: Using annual mode will enable DST seasonal time adjustment. Annual mode
requires that the DST beginning and ending date be specified concisely is not in the same month. For
example, specify to begin DST on March 8 and end DST on November 1.
From: Month: Enter the month DST will start on, each year.
From: Day: Enter the day of the week DST will start on, each year.
From: Time in HH:MM: Enter the time of day DST will start on, each year.
To: Month: Enter the month DST will end on, each year.
To: Day: Enter the date DST will end on, each year.
To: Time in HH:MM: Enter the time of day that DST will end on, each year.
47
The IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) evolved from the 802.1D STP standard. RSTP was
developed in order to overcome some limitations of STP that impede the function of some recent switching
innovations. The basic function and much of the terminology is the same as STP. Most of the settings
configured for STP are also used for RSTP. This section introduces some new Spanning Tree concepts and
illustrates the main differences between the two protocols.
By default, Rapid Spanning Tree is disabled. If enabled, the Switch will listen for BPDU packets and its
accompanying Hello packet. BPDU packets are sent even if a BPDU packet was not received. Therefore,
each link between bridges is sensitive to the status of the link. Ultimately this difference results in faster
detection of failed links, and thus faster topology adjustment.
After enabling STP, setting the STP Global Setting includes the following options:
STP Version: You can choose RSTP or STP Compatible. The default setting is RSTP.
Bridge Priority: This value between 0 and 61410 specifies the priority for forwarding packets: the lower the
value, the higher the priority. The default is 32768.
TX Hold Count (1-10): Used to set the maximum number of Hello packets transmitted per interval. The
count can be specified from 1 to 10. The default is 6.
Maximum Age (6-40 sec): This value may be set to ensure that old information does not endlessly circulate
through redundant paths in the network, preventing the effective propagation of the new information. Set by
the Root Bridge, this value will aid in determining that the Switch has spanning tree configuration values
consistent with other devices on the bridged LAN. If the value ages out and a BPDU has still not been
received from the Root Bridge, the Switch will start sending its own BPDU to all other switches for permission
to become the Root Bridge. If it turns out that the Switch has the lowest Bridge Identifier, it will become the
Root Bridge. A time interval may be chosen between 6 and 40 seconds. The default value is 20. (Max Age
has to have a value bigger than Hello Time)
Hello Time (1-10 sec): The user may set the time interval between transmissions of configuration messages
by the root device, thus stating that the Switch is still functioning. The default is 2 seconds.
Forward Delay (4-30 sec): This sets the maximum amount of time that the root device will wait before
changing states. The default is 15 seconds.
Root Bridge: Displays the MAC address of the Root Bridge.
Root Maximum Age: Displays the Maximum Age of the Root Bridge.
Root Forward Delay: Displays the Forward Delay of the Root Bridge.
Root port: Displays the root port.
Click Apply for the settings to take effect. Click Refresh to renew the page.
48
An STP Group spanning tree works in the same way as the switch-level spanning tree, but the root bridge
concept is replaced with a root port concept. A root port is a port of the group that is elected based on port
priority and port cost, to be the connection to the network for the group. Redundant links will be blocked, just
as redundant links are blocked on the switch level.
The STP on the switch level blocks redundant links between switches (and similar network devices). The
port level STP will block redundant links within an STP Group.
From Port/To Port: A consecutive group of ports may be configured starting with the selected port.
State: Use the drop-down menu to enable or disable STP by per-port based. It will be selectable after the
global STP is enabled.
External Cost: This defines a metric that indicates the relative cost of forwarding packets
to the specified port list. Port cost can be set automatically or as a metric value. The
default value is 0 (auto).
0 (auto) - Setting 0 for the external cost will automatically set the speed for forwarding packets to the
specified port(s) in the list for optimal efficiency. Default port cost: 100Mbps port = 200000. Gigabit
port = 20000.
Value 1-200000000 - Define a value between 1 and 200000000 to determine the external cost. The
lower the number, the greater the probability the port will be chosen to forward packets.
Migrate: Setting this parameter as Yes will set the ports to send out BPDU packets to other bridges,
requesting information on their STP setting. If the Switch is configured for RSTP, the port will be capable to
migrate from 802.1d STP to 802.1w RSTP. Migration should be set as yes on ports connected to network
stations or segments that are capable of being upgraded to 802.1w RSTP on all or some portion of the
segment.
49
Edge: Selecting the True parameter designates the port as an edge port. Edge ports cannot create loops,
however an edge port can lose edge port status if a topology change creates a potential for a loop. An edge
port normally should not receive BPDU packets. If a BPDU packet is received, it automatically loses edge
port status. Selecting the False parameter indicates that the port does not have edge port status. Selecting
the Auto parameter indicates that the port have edge port status or not have edge port status automatically.
Priority: Specify the priority of each port. Selectable range is from 0 to 240, and the default setting is 128.
The lower the number, the greater the probability the port will be chosen as a root port.
P2P: Choosing the True parameter indicates a point-to-point (P2P) shared link. P2P ports are similar to edge
ports, however they are restricted in that a P2P port must operate in full-duplex.
Like edge ports, P2P ports transition to a forwarding state rapidly thus benefiting from RSTP. A p2p value of
false indicates that the port cannot have p2p status. Auto allows the port to have p2p status whenever
possible and operate as if the p2p status were true. If the port cannot maintain this status, (for example if the
port is forced to half-duplex operation) the p2p status changes to operate as if the p2p value were False. The
default setting for this parameter is Auto.
Restricted Role: Toggle between True and False to set the restricted role state of the packet. If set to True,
the port will never be selected to be the Root port. The default value is False.
Restricted TCN: Toggle between True and False to set the restricted TCN of the packet. Topology Change
Notification (TCN) is a BPDU that a bridge sends out to its root port to signal a topology change. If set to
True, it stops the port from propagating received TCN and to other ports. The default value is False.
Click Apply for the settings to take effect. Click Refresh to renew the page.
Storm Control Type: User can select the different Storm type from Broadcast Only, Multicast & Broadcast,
and Multicast & Broadcast & Unknown Unicast.
Threshold: If storm control is enabled (default is disabled), the threshold can be set here. For DES-1210-
08P, the threshold is from 63 ~ 100,044 Kbit, with setps (N) of 64Kbps. For DES-1210-28/28P/52, the
threshold is from of 64 ~ 1,024,000 Kbit per second, with steps (N) of 64Kbps. N can be from 1 to 16000.
50
Click Apply to set the bandwidth control for the selected ports.
The following figure displays the status of Quality of Service priority levels of each port, higher priority means
the traffic from this port will be first handled by the switch. For packets that are untagged, the switch will
assign the priority depending on your configuration.
51
By selecting the DSCP priority, the web pages will changes as seen below:
Select QoS Mode: D-Link Smart Switch allows the user to prioritize the traffic based on the 802.1p priority in
the VLAN tag or the DSCP (Differentiated Services Code Point) priority in the IP header. Only one
mechanism is selected to prioritize the packets at a time.
Queuing Mechanism: Select Strict Priority to process the packets with the highest priority first. Select WRR
(Weighted Round-Robin) to process packets according to the weight of each priority. When a priority level
has reached its egress weight, the system will process the packets in the next level even if there are
remaining packets. D-Link Smart Switch system’s weight of priority levels are: 8 (Highest), 4 (High), 2
(Medium) and 1 (Low) packet. By default, the queuing mechanism is Strict Priority.
Default Priority: Default is Medium. In 802.1p QoS mode, you can use From Port / To Port to specify the
default priority of each port. In DSCP mode, you can configure the global default priority value by using From
DSCP value / To DSCP value.
52
To define a management station IP setting, click the Add Host button and type in the IP address and Subnet
mask. Click the Apply button to save your settings. You may permit only single or a range of IP addresses
by different IP mask setting, the format can be either 192.168.1.1/255.255.255.0 or 192.168.0.1/24. Please
see the example below for permitting the IP range
IP Address Subnet Mask Permitted IP
192.168.0.1 255.255.255.0 192.168.0.1~192.168.0.255
172.17.5.215 255.0.0.0 172.0.0.1~172.255.255.255
To delete the IP address simply click the Delete button, check the unwanted address, and then click Apply.
53
ARP to the network claiming to be the gateway, so that the whole network operation is turned down as all
packets to the Internet will be directed to the wrong node.
The ARP Spoofing Prevention function can discard the ARP Spoofing Attack in the network by checking the
gratuitous ARP packets and filtering those with illegal IP or MAC addresses. Enter the Router/Gateway IP
Address, MAC Address, Ports and then click Add to create a checking/filtering rule. Click Delete to remove
an existing rule and Delete All to clear all the entries.
A given ports’ (or a range of ports') dynamic MAC address learning can be stopped such that the current
source MAC addresses entered into the MAC address forwarding table cannot be changed once the port is
enabled. Using the drop-down menu, change Admin State to Enabled, and then click Apply to confirm the
setting.
54
By default, 802.1X is disabled. To use EAP for security, select enabled and set the 802.1X Global Settings
for the Radius Server and applicable authentication information.
RADIUS Server IP: The IP address of the external Radius Server. You need to specify an RADIUS server to
enable 802.1X authentication.
Key: Masked password matching the Radius Server Key. The max. length is 32 characters.
Confirm Key: Enter the Key a second time for confirmation.
TxPeriod (1 – 65535 sec): This sets the TxPeriod of time for the authenticator PAE state machine. This
value determines the period of an EAP Request/Identity packet transmitted to the client. Default is 24
seconds.
ReAuthEnabled: This function is to determine whether regular re-authentication will take place on this
port(s). When the 802.1X function is enabled, the switch sends an EAP-request/identity packet to client. The
ReAuthEnabled function is by default disabled.
55
QuietPeriod (0 – 65535 sec): Sets the number of seconds that the switch remains in the quiet state
following a failed authentication exchange with the client. Default is 80 seconds
SuppTimeout (1 – 65535 sec): This value determines timeout conditions in the exchanges between the
Authenticator and the client. Default is 12 seconds.
ServerTimeout (1 – 65535 sec): Sets the amount of time the switch waits for a response from the client
before resending the response to the authentication server. Default is 16 seconds.
MaxReq (1 – 10): This parameter specifies the maximum number of times that the switch retransmits an
EAP request (md-5challnege) to the client before it times out the authentication session. Default is 5 times.
ReAuthPeriod (1 – 4294967295 sec): This command affects the behavior of the switch only if periodic re-
authentication is enabled. Default is 3600.
To establish 802.1X port-specific assignments, select the From Ports / To Ports and select Enable.
802.1X Port Access Control: Three type of Port Access Control State can be "Force Authorized", "Force
UnAuthorized", and "Auto".
Select Force Authorized to disable 802.1X and cause the port to transition to the authorized state without
any authentication exchange required. This means the port transmits and receives normal traffic without
802.1X-based authentication of the client.
If Force Unauthorized is selected, the port will remain in the unauthorized state ignoring all attempts by the
client to authenticate. The Switch cannot provide authentication services to the client through the interface.
If Auto is selected, it will enable 802.1X and cause the port to begin in the unauthorized state, allowing only
EAPOL frames to be sent and received through the port. The authentication process begins when the link
state of the port transitions from down to up, or when an EAPOL-start frame is received. The Switch then
requests the identity of the client and begins relaying authentication messages between the client and the
authentication server.
The default setting is Auto.
To initiate the removal of auto-learning for any of the uplink ports, click On to enable this feature, and then
select the port(s) for auto learning to be disabled.
56
The Static MAC Address Setting table displays the static MAC addresses connected, as well as the VID.
Click Add Mac to add a new MAC address, you also need to select the assigned Port number, enter both the
Mac Address and VID and Click Apply. Click Delete to remove one entry or click Delete all to clear the list.
You can also copy a learned MAC address from Dynamic Forwarding Table (please refer to Security >
MAC Address Table > Dynamic Forwarding Table for details).
By disabling Auto Learning capability and specify the static MAC addresses, the network is protected from
potential threats like hackers because traffic from illegal MAC addresses will not be forwarded by the Switch.
Security > DHCP Server Screening > DHCP Server Screening Port Setting
DHCP Server Screening function allows you to restrict the illegal DHCP server by discarding the DHCP
service from distrusted ports. This page allows you to configure the DHCP Server Screening state for each
port. Select From Port, To Port and State and then click Apply to enable or disable the function. The
default setting is Disable.
57
To view the statistics of individual ports, click one of the linked port numbers for details.
58
Select a port and then click the Test Now button to start the diagnosis.
59
ID: Displays an incremented counter of the System Log entry. The Maximum entries are 500.
Time: Displays the time in days, hours, and minutes the log was entered.
Log Description: Displays a description event recorded.
Severity: Displays a severity level of the event recorded.
Click Refresh to renew the page, and click Clear to clean out all log entries.
The ACL Configuration Wizard will aid with the creation of access profiles and ACL Rules. The ACL Wizard
will create the access rule and profile automatically. The maximum usable profiles are 50 and with 240 Rules
in total for the switch.
From: Specify the origin of accessible packets. The possible values are:
Any - Indicates ACL action will be on packets from any source.
MAC Address - Indicates ACL action will be on packets from this MAC address.
IPv4 Addresses - Indicates ACL action will be on packets from this IPv4 source address.
To: Specify the destination of accessible packets. The possible values are:
Any - Indicates ACL action will be on packets from any source.
MAC Address - Indicates ACL action will be on packets from this MAC address. The field of format
is xx-xx-xx-xx-xx-xx.
IPv4 Addresses - Indicates ACL action will be on packets from this IPv4 source address.
60
Service Type: Specify the type of service. The possible values are:
Any - Indicates ACL action will be on packets from any service type.
Ether type - Specifies an Ethernet type for filtering packets.
ICMP All - Indicates ACL action will be on packets from ICMP packets.
IGMP - IGMP packets can be filtered by IGMP message type.
TCP All - Indicates ACL action will be on packets from TCP Packets.
TCP Source Port - Matches the packet to the TCP Source Port.
TCP Destination Port - Matches the packet to the TCP Destination Port.
UDP All - Indicates ACL action will be on packets from UDP Packets.
UDP Source Port - Matches the packet to the UDP Source Port.
UDP Destination Port - Matches the packet to the UDP Destination Port.
Action: Specify the ACL forwarding action matching the rule criteria. Permit is to forward packets if all other
ACL criteria are met. Deny is to drop packets if all other ACL criteria is met.
Port: Enter a range of ports to be configured.
61
Edit / New Rules: To edit or create an access rule in this profile. To add a new rule, please see Access
Rule List in the next section.
Delete: To delete an access profile.
2) Select the field of interest and related columns will be displayed in lower part of the page. Enter the
filtering mask and click Create when done. A filtering mask is to specify the digit that you want to check. For
example, if you want to check a network of 192.168.1.0/24, then you should enter the IP mask as
255.255.255.0.
3) After the Profile ID has been created, it will go back to the main Access Profile List page, clicking the Edit
/ New Rules button to enter Access Rule List page.
62
Profile Information displays the information to which the rule is being added to, including Profile ID and
other fields specified.
In Rule Detail, you can specify the details of an access rule. Below is all the possible parameters can be set.
63
Figure 106 – ACL > Access Profile List > Access Rule List
64
As seen in the following figure, the PoE port table displays the PoE status including, Port Enable, Time
Range, Priority, Power Limit, Power(W), Voltage(V), Current(mA), Classification and Port Status. You
can select From Port / To Port to control the PoE functions of a port. DES-1210-08P/28P will auto disable
the ports if the power of a ports is over current, while the other ports stay active.
65
System Power Threshold: To configure the maximum power for PoE function. The maximum PoE
threshold of each device is:
Model Maximum Power
DES-1210-08P 72Watts
DES-1210-28P 193Watts
System Setting Disconnect Method: Select a method to shut down the PoE port function, when the total
power requested is higher than the system power budget.
Deny next port - When the power budget is exceeded, the next port attempting to power up is
denied, regardless of the port priority.
Deny low priority port - The port with the lower priority will be shut down to allow the higher priority
port to power up.
66
LLDP State: Select Enable or Disable and then click Apply to turn on/off the LLDP function. By default, the
LLDP state is Enabled.
Message TX Hold Multiplier (2-10): Set the Time-to-Live for the LLDP advertisements transmitted. If the
Time-to-Live of LLDP advertisements expire, the advertised data will be deleted from the neighboring
Switch’s MIB. The default value is 4 hops.
Message TX Interval (5-32768): Set the time interval to transmit the LLDP advertisement. The default value
is 30 seconds.
LLDP Reinit Delay(1-10): Enter a time delay for the LLDP port. This LLDP port will wait for a specific
interval before it re-initializes.
LLDP TX Delay: Configure the minimum time delay interval for any LLDP port which transmits successive
LLDP advertisements due to changes in the LLDP MIB content. The default value is 2 seconds.
To view the settings for a remote port, click Show Normal and the following page displays.
67
68
The user session is automatically terminated if idle for the login timeout period. The default login timeout
period is 5 minutes. To change the login timeout session please refers to chapter 5.
CLI Commands:
There are a number of helpful features included in the CLI. Enter the ? command will display a list of
commands.
DES-1210-28P> ?
USEREXEC commands :
config account admin password <passwd>
config ipif System { ipaddress <ip-address> <subnet-mask> gateway <gw-
address> | dhcp }
debug info
download { firmware_fromTFTP tftp://ip-address/filename | cfg_fromTFTP
tftp://ip-address/filename }
logout
ping <ip_addr> [times <integer (1-255)>] [timeout <integer (1-99)>]
reboot
reset config
save
show ipif
show switch
upload { firmware_toTFTP tftp://ip-address/filename | cfg_toTFTP
tftp://ip-address/filename }
DES-1210-28P>
Figure 116 – The ? command
Download
The download command is used to download and install new firmware or a Switch configuration file
from a TFTP server.
Syntax
download { firmware_fromTFTP tftp://ip-address/filename | cfg_fromTFTP
tftp://ip-address/filename}
Parameters
Parameter Description
69
firmware_fromTFTP Download and install new firmware on the Switch from a TFTP server.
cfg_fromTFTP Download a switch configuration file from a TFTP server.
tftp://ip-address/ The IP address of the TFTP server.
filename The filename of the firmware or switch configuration file on the TFTP
server. You need to specify the DOS path if the file is not at the root
directory of the TFTP server.
Upload
The upload command is used to upload the firmware file or a Switch configuration file to a TFTP
server.
Syntax
upload { firmware_toTFTP tftp://ip-address/filename | cfg_toTFTP
tftp://ip-address/filename }
Parameters
Parameter Description
firmware_toTFTP Upload the firmware on the Switch from a TFTP server.
cfg_toTFTP Specifies that the Switch’s current settings will be uploaded to the TFTP
server.
tftp://ip-address/ The IP address of the TFTP server.
filename The filename of the firmware or switch configuration file on the TFTP
server. You need to specify the DOS path if the file is not at the root
directory of the TFTP server.
Syntax
config ipif system { ipaddress <ip-address> <subnet-mask> gateway <gw-
address> | dhcp }
Parameter
Parameter Description
ipaddress <ip- The IP address and subnet mask to be created. Users need to specify
address> <subnet- the address and mask information using the traditional format (for
mask> example,10.1.2.3/255.0.0.0).
gateway <gw- The IP address of the router or gateway.
address>
dhcp Allows the selection of the DHCP protocol for the assignment of an IP
address to the Switch’s System IP interface.
Example
DES-1210-28P> config ipif system ipaddress 172.17.5.214 255.255.255.0
gateway 172.17.5.214
% The IP setting mode change to static will cause CLI disconnect.
Figure 117 – The config ipif system command
70
Logout
This command closes the current connection.
Syntax
logout
Example
DES-1210-28P> logout
Ping
This command checks if another IP address is reachable on the network. You can ping the IP
address connected to through the managed VLAN (VLAN 1 by default), as long as there is a physical
path between the switch and the target IP equipment. By default, Switch sends five pings to the
target IP.
Syntax
ping <ipaddr> [times <integer (1-255)>] [timeout <integer (1-99)>]
Parameter
Parameter Description
<ipaddr> The IP address of the target station.
times <integer (1- Specify how many ping requests will be sent to the target IP address.
255)>
timeout <integer Specify the timeout interval waiting the ping reply for target IP address.
(1-99)>
Example
DES-1210-28P> ping 10.90.90.91 times 3 timeout 1
Reply Received From :10.90.90.91, TimeTaken : 20 msecs
Reply Received From :10.90.90.91, TimeTaken : 20 msecs
Reply Received From :10.90.90.91, TimeTaken : 20 msecs
--- 10.90.90.91 Ping Statistics ---
3 Packets Transmitted, 3 Packets Received, 0% Packets Loss
DES-1210-28P>
Figure 119 – The ping command
Reboot
This command reboots the system. All network connections are terminated and the boot code
executes.
Syntax
reboot
Example
DES-1210-28P> reboot
% Device will reboot, please wait a few minutes to re-login.
DES-1210-28P>
71
Reset
All configurations will be reset to the default settings.
Syntax
reset config
Example
DES-1210-28P> reset config
% Device will reboot after reset configuration successfully.
DES-1210-28P>
Figure 121 – The reset config command
Show ipif
The command displays the current IP address of the switch.
Syntax
show ipif
Example
DES-1210-28P> show ipif
IP Setting Mode : Static
IP Address : 172.17.5.214
Subnet Mask : 255.255.255.0
Default Gateway : 172.17.5.254
DES-1210-28P>
Figure 122 – The show ipif command
Show switch
The command displays the status of the switch.
Syntax
show switch
Example
DES-1210-28P> show switch
System name :
System Contact :
System Location :
System up time : 0 days, 6 hrs, 32 min, 17 secs
System Time : 01/01/2009 06:32:19
System hardware version : A1
System firmware version : 1.00.001
System boot version : 1.00.000
System Protocol version : 2.001.004
System serial number : 1MB1733K0000A
MAC Address : 00-18-E7-48-85-50
DES-1210-28P>
Figure 123 – The show switch command
Syntax
config account admin password <passwd>
72
Parameter
Parameter Description
<passwd> The new password of the administrator.
Example
DES-1210-28P> config account admin password admin
DES-1210-28P>
Figure 124 – The config account admin password command
Save
The command saves the configuration changes to the memory.
Syntax
save
Example
DES-1210-28P> save
Building configuration ...
[OK]
DES-1210-28P>
Figure 125 – The save command
Debug info
This command displays the ARP table and MAC FDB of the Switch.
Syntax
debug info
Example
DES-1210-28P> debug info
% ARP table :
% MAC table :
Vlan Mac Address Type Ports
---- ----------- ---- -----
1 00:00:00:00:00:26 Learnt Fa0/4
1 00:00:48:bf:f3:01 Learnt Fa0/4
1 00:03:1b:66:66:5c Learnt Fa0/4
1 00:03:64:00:01:23 Learnt Fa0/4
1 00:0d:60:cb:6e:5d Learnt Fa0/4
1 00:0e:7b:a0:12:97 Learnt Fa0/4
1 00:0f:3d:a8:88:9b Learnt Fa0/4
1 00:0f:ea:f0:0e:1e Learnt Fa0/4
1 00:10:db:73:68:31 Learnt Fa0/4
1 00:11:25:2c:43:c6 Learnt Fa0/4
1 00:11:25:43:38:83 Learnt Fa0/4
Total Mac Addresses displayed: 11
DES-1210-28P>
Figure 126 – The debug info command
73
Switching Technology
Another approach to push beyond the limits of Ethernet technology is the development of switching
technology. A switch bridges Ethernet packets at the MAC address level of the Ethernet protocol transmitting
among connected Ethernet or Fast Ethernet LAN segments.
Switching is a cost-effective way of increasing the total network capacity available to users on a local area
network. A switch increases capacity and decreases network loading by dividing a local area network into
different segments which won’t compete with each other for network transmission capacity.
The switch acts as a high-speed selective bridge between the individual segments. The switch, without
interfering with any other segments, automatically forwards traffic that needs to go from one segment to
another. By doing this the total network capacity is multiplied, while still maintaining the same network
cabling and adapter cards.
74
75
Downloaded from www.Manualslib.com manuals search engine
Appendix B - Technical Specifications D-Link Web Smart Switch User Manual
Security
802.1X port-based access control
Port Security
IP and MAC ACL
Broadcast Storm Control
D-Link Safeguard Engine
Trusted Host
ARP Spoofing Prevention
DHCP Server Screening
SSL
Green
Time-based PoE (DES-1210-08P/28P
only)
Management
Web-based GUI or SmartConsole Utility
D-Link proprietary CLI
SNMP support
DHCP client
DHCP Auto Configuration
LLDP(DES-1210-08/28P only)
LLDP-MED (DES-1210-28P only)
Trap setting for destination IP, system
events, fiber port events, twisted-pair port
events
Port access control
Web-based configuration backup /
restoration
Web-based firmware backup/restore
Firmware upgrade using SmartConsole
Utility & Web-based management
Reset, Reboot
76
Downloaded from www.Manualslib.com manuals search engine
Appendix C – Rack mount Instructions D-Link Web Smart Switch User Manual
A) Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the operating ambient
temperature of the rack environment may be greater than room ambient. Therefore, consideration should be
given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma)
specified by the manufacturer.
B) Reduced Air Flow - Installation of the equipment in a rack should be such that the amount of air flow
required for safe operation of the equipment is not compromised.
C) Mechanical Loading - Mounting of the equipment in the rack should be such that a hazardous condition is
not achieved due to uneven mechanical loading.
D) Circuit Overloading - Consideration should be given to the connection of the equipment to the supply
circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring.
Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.
77
Downloaded from www.Manualslib.com manuals search engine
Downloaded from www.Manualslib.com manuals search engine
Downloaded from www.Manualslib.com manuals search engine