D-Link DES-3010F / DES-3010G / DES-3018 / DES-3026
Managed 8/16/24-Port 10/100Mbps Fast Ethernet Switch with Optional Slots

Manual

DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual _________________________________________________________________________________
Information in this document is subject to change without notice. 2005 D-Link Computer Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own. June 2005 P/N 651ES3026015
DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual

Table of Contents

Preface...... 7

Intended Readers......8

Typographical Conventions...... 8
Notes, Notices, and Cautions.....8 Safety Instructions......9
Safety Cautions...... 9 General Precautions for Rack-Mountable Products.... 10 Protecting Against Electrostatic Discharge.... 11

Introduction..... 12

Switch Description.....12

Features...... 12

Ethernet Technology.....14
Fast Ethernet..... 14 Gigabit Ethernet Technology..... 14 Switching Technology..... 14 Front-Panel Components and LED Indicators.... 15 Rear Panel Description...... 16 Side Panel Description..... 16

Installation..... 17

Package Contents...... 17 Before You Connect to the Network.... 17 Installing the Switch without the Rack..... 18 Installing the Switch in a Rack..... 18 Mounting the Switch in a Standard 19" Rack..... 18 Power On..... 18 The Optional Modules..... 19
Connecting the Switch.... 21
Switch to End Node...... 21 Switch to Hub or Switch..... 22 The DES-3010F/G, DES-3018 or DES-3026 as a Network Backbone.... 23
Introduction to Switch Management... 24
Management Options.....24
Web-based Management Interface..... 24 SNMP-Based Management..... 24 Command Line Console Interface through the Serial Port.... 24 Connecting the Console Port (RS-232 DCE).... 24 First Time Connecting to the Switch..... 26 Password Protection...... 28
SNMP Settings...... 28 Traps...... 29 MIBs...... 29 IP Address Assignment...... 30 Connecting Devices to the Switch..... 31
Introduction to Web-based Switch Configuration... 32

Introduction......32

Logging on to the Web Manager...... 32 Web-based User Interface..... 33 Areas of the User Interface..... 33 Web Pages...... 35

Administration..... 36

Device Information.....36 IP Address......38
Setting the Switch's IP Address using the Console Interface.... 39
Port Configurations.....40 Port Description......42 User Accounts.....43
Admin and User Privileges..... 44
Port Mirroring.....45 System Log Servers.....46 SNTP Settings.....48
Time Setting..... 48 Time Zone and DST..... 49
TFTP Services.....51 Ping Test......51

SNMP Manager.... 52

SNMP Settings...... 52 SNMP User Table...... 53 SNMP View Table...... 55 SNMP Group Table...... 56 SNMP Community Table..... 58 SNMP Host Table...... 59 SNMP Engine ID...... 60
D-Link Single IP Management.....61
Single IP Management (SIM) Overview..... 61
SIM Using the Web Interface.....62 Forwarding & Filtering......63
Unicast Forwarding...... 63 Multicast Forwarding...... 64

L2 Features.... 65

DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual VLANs......65
Understanding IEEE 802.1p Priority..... 82 VLAN Description...... 65 Notes about VLANs on the Switch..... 65 IEEE 802.1Q VLANs...... 65 802.1Q VLAN Tags..... 66 Tagging and Untagging..... 67 Ingress Filtering..... 68 Default VLANs..... 68 VLAN Segmentation..... 68 VLAN and Trunk Groups..... 69 Static VLAN Entry..... 70

Link Aggregation.....72

Understanding Port Trunk Groups..... 72

IGMP Snooping......74

Static Router Ports...... 76

Spanning Tree.....77

802.1w Rapid Spanning Tree...... 77 Port Transition States...... 77 Edge Port..... 77 P2P Port...... 78 802.1d and 802.1w Compatibility..... 78 STP Bridge Global Settings..... 78 STP Port Settings...... 80

QoS..... 82

QoS.....82
The Advantages of QoS..... 82 Understanding QoS..... 83 Bandwidth Control...... 85 802.1p Default Priority...... 86 802.1p User Priority...... 87 QoS Scheduling Mechanism..... 87 QoS Output Scheduling..... 88

NOTE: The passwords used to access the Switch are case-sensitive; therefore, "S" is not the same as "s."
When you first connect to the Switch, you will be presented with the first login screen (shown below). NOTE: Press Ctrl+R to refresh the screen. This command can be used at any time to force the console program in the Switch to refresh the console screen.
Figure 4- 2. Initial screen, first time connecting to the Switch Press Enter in both the Username and Password fields. You will be given access to the command prompt DES-3018:4#, as shown below: There is no initial username or password. Leave the Username and Password fields blank.
Figure 4- 3. Command Prompt NOTE: The first user automatically gets Administrator level privileges. It is recommended to create at least one Admin-level user account for the Switch.

Password Protection

The DES-3018 switch does not have a default user name and password. One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged access to the Switch's management software. After your initial login, define new passwords for both default user names to prevent unauthorized access to the Switch, and record the passwords for future reference. To create an administrator-level account for the Switch, do the following:
At the CLI login prompt, enter create account admin followed by the <user name> and press the Enter key. You will be asked to provide a password. Type the <password> used for the administrator account being created and press the Enter key. You will be prompted to enter the same password again to verify it. Type the same password and press the Enter key. Successful creation of the new administrator account will be verified by a Success message.
NOTE: Passwords are case sensitive. User names and passwords can be up to 15 characters in length.
The sample below illustrates a successful creation of a new administrator-level account with the user name "newmanager". DES-3018:4#create account admin newmanager Command: create account admin newmanager Enter a case-sensitive new password:******** Enter the new password again for confirmation:******** Success. DES-3018:4#
NOTICE: CLI configuration commands only modify the running configuration file and are not saved when the Switch is rebooted. To save all your configuration changes in nonvolatile storage, you must use the save command to copy the running configuration file to the startup configuration.

SNMP Settings

Simple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices. SNMP enables network management stations to read and modify the settings of gateways, routers, switches, and other network devices. Use SNMP to configure system features for proper operation, monitor performance and detect potential problems in the Switch, switch group or network. Managed devices that support SNMP include software (referred to as an agent), which runs locally on the device. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device. These objects are defined in a Management Information Base (MIB), which provides a standard presentation of the information controlled by the on-board SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network.

DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual The DES-3018 switch supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device. In SNMP v.1 and v.2c, user authentication is accomplished using 'community strings', which function like passwords. The remote user SNMP application and the Switch SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped). The default community strings for the Switch used for SNMP v.1 and v.2c management access are:
public - Allows authorized management stations to retrieve MIB objects. private - Allows authorized management stations to retrieve and modify MIB objects.
SNMP v.3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The Switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMP v.1 while assigning a higher level of security to another group, granting read/write privileges using SNMP v.3. Using SNMP v.3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB. An additional layer of security is available for SNMP v.3 in that SNMP messages may be encrypted. To read more about how to configure SNMP v.3 settings for the Switch read the section entitled Management.
Traps are messages that alert network personnel of events that occur on the Switch. The events can be as serious as a reboot (someone accidentally turned OFF the Switch), or less serious like a port status change. The Switch generates traps and sends them to the trap recipient (or network manager). Typical traps include trap messages for Authentication Failure, Topology Change and New Root.
Management and counter information are stored by the Switch in the Management Information Base (MIB). The Switch uses the standard MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base. The proprietary MIB may also be retrieved by specifying the MIB Object Identifier. MIB values can be either read-only or read-write.

Traps are messages that alert network personnel of events that occur on the Switch. The events can be as serious as a reboot (someone accidentally turned OFF the Switch), or less serious like a port status change. The Switch generates traps and sends them to the trap recipient (or network manager). Typical traps include trap messages for Authentication Failure, Topology Change and Broadcast\Multicast Storm.
Management and counter information are stored by the Switch in the Management Information Base (MIB). The Switch uses the standard MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base. The proprietary MIB may also be retrieved by specifying the MIB Object Identifier. MIB values can be either read-only or read-write. The DES-3018 incorporates a flexible SNMP management for the switching environment. SNMP management can be customized to suit the needs of the networks and the preferences of the network administrator. Use the SNMP V3 menus to select the SNMP version used for specific tasks.
DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual The DES-3018 supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The administrator can specify the SNMP version used to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device. SNMP settings are configured using the menus located on the SNMP V3 folder of the web manager. Workstations on the network that are allowed SNMP privileged access to the Switch can be restricted with the Management Station IP Address menu.

SNMP User Table

The SNMP User Table displays all of the SNMP User's currently configured on the Switch. In the SNMP Manager folder, located in the Administration folder, click on the SNMP User Table link. This will open the SNMP User Table, as shown below.
Figure 6- 15. SNMP User Table To delete an existing SNMP User Table entry, click the wish to delete. below the Delete heading corresponding to the entry you
To display the detailed entry for a given user, click on the hyperlinked User Name. This will open the SNMP User Table Display page, as shown below.
Figure 6- 16. SNMP User Table Display The following parameters are displayed: Parameter User Name Group Name SNMP Version Description An alphanumeric string of up to 32 characters. This is used to identify the SNMP users. This name is used to specify the SNMP group created can request SNMP messages. V1 - Indicates that SNMP version 1 is in use. V2 - Indicates that SNMP version 2 is in use. V3 - Indicates that SNMP version 3 is in use.

Auth-Protocol

None - Indicates that no authorization protocol is in use. MD5 - Indicates that the HMAC-MD5-96 authentication level will be used. SHA - Indicates that the HMAC-SHA authentication protocol will be used.

Priv-Protocol

None - Indicates that no authorization protocol is in use. DES - Indicates that DES 56-bit encryption is in use based on the CBC-DES (DES56) standard.
To return to the SNMP User Table, click the Show All SNMP User Table Entries link. To add a new entry to the SNMP User Table Configuration, click on the Add button on the SNMP User Table page. This will open the SNMP User Table Configuration page, as shown below.
Figure 6- 17. SNMP User Table Configuration window The following parameters can set: Parameter User Name Group Name SNMP Encryption Description Enter an alphanumeric string of up to 32 characters. This is used to identify the SNMP user. This name is used to specify the SNMP group created can request SNMP messages. Click the encrypted check box to enable encryption for the SNMP protocol. This feature is for users utilizing the SNMP V3 version. The user may configure the encryption in the following two fields. MD5 - Specifies that the HMAC-MD5-96 authentication level will be used. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked. This field will require the user to enter a password. SHA - Specifies that the HMAC-SHA authentication protocol will be used. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked. This field will require the user to enter a password. Priv-Protocol None - Specifies that no authorization protocol is in use. DES - Specifies that DES 56-bit encryption is in use, based on the CBC-DES (DES56) standard. This field is only operable when V3 is selected in the SNMP Version field and the Encryption field has been checked. This field will require the user to enter a password between 8 and 16 alphanumeric characters. To implement changes made, click Apply. To return to the SNMP User Table, click the Show All SNMP User Table Entries link. 54

Figure 7- 1. IEEE 802.1Q Packet Forwarding

802.1Q VLAN Tags

The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet's EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag. The tag is contained in the following two octets and consists of 3 bits of user priority, 1 bit of Canonical Format Identifier (CFI - used for encapsulating Token Ring packets so they can be carried across Ethernet backbones), and 12 bits of VLAN ID (VID). The 3 bits of user priority are used by 802.1p. The VID is the VLAN identifier and is used by the 802.1Q standard. Because the VID is 12 bits long, 4094 unique VLANs can be identified.
DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual The tag is inserted into the packet header making the entire packet longer by 4 octets. All of the information originally contained in the packet is retained.
Figure 7- 2. IEEE 802.1Q Tag The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated.
Figure 7- 3. Adding an IEEE 802.1Q Tag

Tagging and Untagging

Every port on an 802.1Q compliant switch can be configured as tagging or untagging. Ports with tagging enabled will put the VID number, priority and other VLAN information into the header of all packets that flow into and out of it. If a packet has previously been tagged, the port will not alter the packet, thus keeping the VLAN information intact. The VLAN information in the tag can then be used by other 802.1Q compliant devices on the network to make packet-forwarding decisions. Ports with untagging enabled will strip the 802.1Q tag from all packets that flow into and out of those ports. If the packet doesn't have an 802.1Q VLAN tag, the port will not alter the packet. Thus, all packets received by and forwarded by an untagging port will have no 802.1Q VLAN information. (Remember that the PVID is only used internally within the Switch). Untagging is used to send packets from an 802.1Q-compliant network device to a non-compliant network device.

DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual The Spanning Tree Protocol will treat a link aggregation group as a single link, on the switch level. On the port level, the STP will use the port parameters of the Master Port in the calculation of port cost and in determining the state of the link aggregation group. If two redundant link aggregation groups are configured on the Switch, STP will block one entire group, in the same way STP will block a single port that has a redundant link. To configure port trunking, click L2 Features > Trunking > Link Aggregation to bring up the Port Trunking Group table:
Figure 7- 8. Port Trunking Group window To configure port trunk groups, click the Add button to add a new trunk group and use the Port Trunking Configuration menu (see example below) to set up trunk groups. To modify a port trunk group, click the hyperlinked group number corresponding to the entry you wish to alter. To delete a port trunk group, click the corresponding heading in the Current Trunking Group Entries table. under the Delete
Figure 7- 9. Link Aggregation Group Configuration window Add

IGMP Snooping

Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch. In order to use IGMP Snooping it must first be enabled for the entire Switch (see Advanced Settings). You may then finetune the settings for each VLAN using the IGMP Snooping link in the L2 Features folder. When enabled for IGMP snooping, the Switch can open or close a port to a specific Multicast group member based on IGMP messages sent from the device to the IGMP host or vice versa. The Switch monitors IGMP messages and discontinues forwarding multicast packets when there are no longer hosts requesting that they continue. Use the IGMP Snooping Group Entry Table to view IGMP Snooping status. To modify settings, click the Modify button for the VLAN Name entry you want to change. Use the IGMP Snooping Settings window to view IGMP Snooping settings. To modify the settings, click the Modify button of the VLAN ID to change.
Figure 7- 10. Current IGMP Snooping Group Entries Clicking the Modify button will open the IGMP Snooping Settings menu, shown below:
Figure 7- 11. IGMP Snooping Settings-Edit window The following parameters may be viewed or modified:

Click Apply to let your changes take effect. 87

QoS Output Scheduling

QoS can be customized by changing the output scheduling used for the hardware classes of service in the Switch. As with any changes to QoS implementation, careful consideration should be given to how network traffic in lower priority classes of service is affected. Changes in scheduling may result in unacceptable levels of packet loss or significant transmission delay. If you choose to customize this setting, it is important to monitor network performance, especially during peak demand, as bottlenecks can quickly develop if the QoS settings are not suitable. In the QoS folder, click QoS Output Scheduling, to view the screen shown below.
Figure 8- 6. QoS Output Scheduling Configuration window You may assign the following values to the QoS classes to set the scheduling. Parameter Max. Packets Description Specifies the maximum number of packets the above specified hardware priority class of service will be allowed to transmit before allowing the next lowest priority queue to transmit its packets. A value between 1 and 55 can be specified.

Section 9

Security
Traffic Control Port Lock Entries Port Security 802.1X Trusted Host Traffic Segmentation The following section will aid the user in configuring security functions for the Switch. The Switch includes various functions for security, including Traffic Control, Port Security, 802.1X, Trusted Host and Traffic Segmentation all discussed in detail in the following section.

Traffic Control

Use the Traffic Control menu to enable or disable storm control and adjust the threshold for multicast and broadcast storms, as well as DLF (Destination Look Up Failure). Traffic control settings are applied to individual Switch modules. To view the following window, click Security > Traffic Control:
Figure 9- 1. Traffic Control Settings and Traffic Control Table window 89
DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual To configure Traffic Control, first select a group of ports by using the Group pull down menu. Finally, enable or disable the Broadcast Storm, Multicast Storm and Destination Unknown using their corresponding pull-down menus. The purpose of this window is to limit too many broadcast, multicast or unknown unicast packets folding the network. Each port has a counter that tracks the amount of broadcast traffic received per second, and this counter is cleared once every second. If the broadcast, multicast or unknown unicast storm control is enabled, the port will discard all broadcast, multicast or unknown unicast packets received when the counter exceeds or equals the Threshold specified. The Threshold value is the upper threshold at which the specified traffic control is switched on. This is the amount of Broadcast, Multicast or DLF traffic, in Kbps (kilo bits per second), received by the Switch that will trigger the storm traffic control measures. The Threshold value can be set from 64-1024000 kbps per second. The default setting is 64. The settings of each port may be viewed in the Traffic Control Table in the same window. Click Apply to implement changes made.

DES-3010F/G / DES-3018 / DES-3026 Fast Ethernet Switch Manual Parameter From [ ] To [ ] AdmCtrlDir Description Enter the port or ports to be set. Sets the administrative-controlled direction to either in or both. If in is selected, control is only exerted over incoming traffic through the port you selected in the first field. If both is selected, control is exerted over both incoming and outgoing traffic through the controlled port selected in the first field. PortControl This allows you to control the port authorization state. Select forceAuthorized to disable 802.1X and cause the port to transition to the authorized state without any authentication exchange required. This means the port transmits and receives normal traffic without 802.1X-based authentication of the client. If forceUnauthorized is selected, the port will remain in the unauthorized state, ignoring all attempts by the client to authenticate. The Switch cannot provide authentication services to the client through the interface. If Auto is selected, it will enable 802.1X and cause the port to begin in the unauthorized state, allowing only EAPOL frames to be sent and received through the port. The authentication process begins when the link state of the port transitions from down to up, or when an EAPOL-start frame is received. The Switch then requests the identity of the client and begins relaying authentication messages between the client and the authentication server. The default setting is Auto. TxPeriod This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transmitted to the client. The default setting is 30 seconds. This allows you to set the number of seconds that the Switch remains in the quiet state following a failed authentication exchange with the client. The default setting is 60 seconds. This value determines timeout conditions in the exchanges between the Authenticator and the client. The default setting is 30 seconds. This value determines timeout conditions in the exchanges between the Authenticator and the authentication server. The default setting is 30 seconds. The maximum number of times that the Switch will retransmit an EAP Request to the client before it times out of the authentication sessions. The default setting is 2. A constant that defines a nonzero number of seconds between periodic reauthentication of the client. The default setting is 3600 seconds. Determines whether regular reauthentication will take place on this port. The default setting is Disabled.

QuietPeriod

SuppTimeout ServerTimeout MaxReq ReAuthPeriod ReAuth
Click Apply to implement your configuration changes. To view configurations for the 802.1X Authenticator Settings on a port-by-port basis, see the 802.1X Authenticator Settings table.

Local Users

Requests Challenges Accepts AccessRejects

RoundTripTime

The time interval (in hundredths of a second) between the most recent AccessReply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server. The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout or retransmission. The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or known types are not included as malformed access responses. The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributes received from this server. The number of RADIUS packets of unknown type which were received from this server on the authentication port The number of RADIUS packets of which were received from this server on the authentication port and dropped for some other reason.
AccessRetrans PendingRequests

AccessResponses

BadAuthenticators UnknownTypes PacketsDropped

RADIUS Accounting

This window shows managed objects used for managing RADIUS accounting clients, and the current statistics associated with them. It has one row for each RADIUS authentication server that the client shares a secret with. To view the RADIUS Accounting, click Monitoring > Port Access Control > RADIUS Accounting.
Figure 10- 21. RADIUS Accounting window The user may also select the desired time interval to update the statistics, between 1s and 60s, where s stands for seconds. The default value is one second. To clear the current statistics shown, click the Clear button in the top left hand corner. The following fields can be viewed: Parameter Server IP Addr UDP Port Timeouts Description The IP address assigned to each RADIUS Accounting server that the client shares a secret with. The UDP port the client is using to send requests to this server. The number of accounting timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout. The number of RADIUS Accounting-Request packets sent. This does not include retransmissions. The number of RADIUS packets received on the accounting port from this server. The time interval between the most recent Accounting-Response and the AccountingRequest that matched it from this RADIUS accounting server. The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an AccountingResponse, a timeout or a retransmission. The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. The number of RADIUS Accounting-Response packets, which contained invalid authenticators, received from this server. The number of RADIUS packets of unknown type which were received from this server on the accounting port. The number of RADIUS packets, which were received from this server on the accounting port and dropped for some other reason.

Requests Responses RoundTripTime AccessRetrans PendingRequests

MalformedResponses

Authenticator Diagnostics
This table contains the diagnostic information regarding the operation of the Authenticator associated with each port. An entry appears in this table for each port that supports the Authenticator function. To view the Authenticator Diagnostics, click Monitoring > Port Access Control > Authenticator Diagnostics.
Figure 10- 22. Authenticator Diagnostics window The user may select the desired time interval to update the statistics, between 1s and 60s, where s stands for seconds. The default value is one second. The following fields can be viewed: Parameter Port EntersConnecting EapLogOffsConnecting Description The identification number assigned to the Port by the System in which the Port resides. Counts the number of times that the state machine transitions to the CONNECTING state from any other state. Counts the number of times that the state machine transitions from CONNECTING to DISCONNECTED as a result of receiving an EAPOL-Logoff message. Counts the number of times that the state machine transitions from CONNECTING to AUTHENTICATING, as a result of an EAP-Response/Identity message being received from the Supplicant. Counts the number of times that the state machine transitions from AUTHENTICATING to AUTHENTICATED, as a result of the Backend Authentication state machine indicating successful authentication of the Supplicant (authSuccess = TRUE). Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout (authTimeout = TRUE). Counts the number of times that the state machine transitions from AUTHENTICATING to HELD, as a result of the Backend Authentication state machine indicating authentication failure (authFail = TRUE). Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of a reauthentication request (reAuthenticate = TRUE). Counts the number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of an EAPOL-Start message 131

Geographical Scope of the Limited Product Warranty
This Limited Product Warranty is applicable in all European Countries as listed in the addendum European Countries for D-LINK Limited Product Warranty. The term European Countries in this D-LINK Limited Product Warranty only include the countries as listed in this addendum. The Limited Product Warranty will be honored in any country where D-LINK or its authorized service providers offer warranty service subject to the terms and conditions set forth in this Limited Product Warranty. However, warranty service availability and response times may vary from country to country and may also be subject to registration requirements.
Limitation of Product Warranty
D-LINK warrants that the products described below under normal use are free from material defects in materials and workmanship during the Limited Product Warranty Period set forth below ("Limited Product Warranty Period"), if the product is used and serviced in accordance with the user manual and other documentation provided to the purchaser at the time of purchase (or as amended from time to time). D-LINK does not warrant that the products will operate uninterrupted or error-free or that all deficiencies, errors, defects or non-conformities will be corrected. This warranty shall not apply to problems resulting from: (a) unauthorised alterations or attachments; (b) negligence, abuse or misuse, including failure to operate the product in accordance with specifications or interface requirements; (c) improper handling; (d) failure of goods or services not obtained from D-LINK or not subject to a then-effective D-LINK warranty or maintenance agreement; (e) improper use or storage; or (f) fire, water, acts of God or other catastrophic events. This warranty shall also not apply to any particular product if any D-LINK serial number has been removed or defaced in any way. D-LINK IS NOT RESPONSIBLE FOR DAMAGE THAT OCCURS AS A RESULT OF YOUR FAILURE TO FOLLOW THE INSTRUCTIONS FOR THE D-LINK HARDWARE PRODUCT.
Limited Product Warranty Period
The Limited Product Warranty Period starts on the date of purchase from D-LINK. Your dated sales or delivery receipt, showing the date of purchase of the product, is your proof of the purchase date. You may be required to provide proof of purchase as a condition of receiving warranty service. You are entitled to warranty service according to the terms and conditions of this document if a repair to your D-LINK branded hardware is required within the Limited Product Warranty Period. This Limited Product Warranty extends only to the original end-user purchaser of this D-LINK Hardware Product and is not transferable to anyone who obtains ownership of the D-LINK Hardware Product from the original end-user purchaser.

Registration Card All Countries and Regions Excluding USA
Print, type or use block letters. Your name: Mr./Ms_____________________________________________________________________________ Organization: ________________________________________________ Dept. ____________________________ Your title at organization: ________________________________________________________________________ Telephone: _______________________________________ Fax:________________________________________ Organization's full address: ______________________________________________________________________ ____________________________________________________________________________________________ Country: _____________________________________________________________________________________ Date of purchase (Month/Day/Year): _______________________________________________________________ Product Model Product Serial No. * Product installed in type of computer (e.g., Compaq 486) * Product installed in computer serial No.
(* Applies to adapters only) Product was purchased from: Reseller's name: ______________________________________________________________________________ Telephone: _______________________________________ Fax:________________________________________ Reseller's full address: _________________________________________________________________________ _________________________________________________________________________ _________________________________________________________________________ Answers to the following questions help us to support your product: 1. Where and how will the product primarily be used? Home Office Travel Company Business Home Business Personal Use 2. How many employees work at installation site? 1 employee 2-9 10-49 50-99 100-499 500-or more 3. What network protocol(s) does your organization use ? XNS/IPX TCP/IP DECnet Others_____________________________ 4. What network operating system(s) does your organization use ? D-Link LANsmart Novell NetWare NetWare Lite SCO Unix/Xenix PC NFS 3Com 3+Open Banyan Vines DECnet Pathwork Windows NT Windows NTAS Windows '95 Others__________________________________________ 5. What network management program does your organization use ? D-View HP OpenView/Windows HP OpenView/Unix SunNet Manager Novell NMS NetView 6000 Others________________________________________ 6. What network medium/media does your organization use ? Fiber-optics Thick coax Ethernet Thin coax Ethernet 10BASE-T UTP/STP 100BASE-TX 100BASE-T4 100VGAnyLAN Others_________________ 7. What applications are used on your network? Desktop publishing Spreadsheet Word processing CAD/CAM Database management Accounting Others_____________________ 8. What category best describes your company? Aerospace Engineering Education Finance Hospital Legal Insurance/Real Estate Manufacturing Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication VAR System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Yes No Don't know yet 10.Your comments on this product? __________________________________________________________________________________________ __________________________________________________________________________________________