D-Link Offices for Registration and Warranty Service
The product's Registration Card, provided at the back of this manual, must be sent to a D-Link office. To obtain an RMA number for warranty service as to a hardware product, or to obtain warranty service as to a software product, contact the D-Link office nearest you. An address/telephone/fax/e-mail/Web site list of D-Link offices is provided in the back of this manual.

Trademarks

Copyright 2000 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective proprietors.

Copyright Statement

No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United States Copyright Act of 1976.

FCC Warning

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this users guide, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

CE Mark Warning

This is a Class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures.

Warnung!

Dies ist in Produkt der Klasse A. Im Wohnbereich kann dieses Produkt Funkstoerungen verursachen. In diesem Fall kann vom Benutzer verlangt werden, angemessene Massnahmen zu ergreifen.

Precaucin!

Este es un producto de Clase A. En un entorno domstico, puede causar interferencias de radio, en cuyo case, puede requerirse al usuario para que adopte las medidas adecuadas.

Update Firmware and Configuration Files.....76 System Utilities......77
Ping Test...... 78 Save Settings to TFTP Server...... 79 Save Switch History to TFTP Server..... 80
SNMP Manager Configuration.....81 SWITCH M ONITORING...... 82 Network Monitoring......82
Traffic Statistics...... 83 Browse Address Table...... 89 Browse IGMP Status...... 90 Browse GVRP Status...... 91 Browse GMRP Status..... 91 Switch History...... 92
RESETTING THE SWITCH...... 93 Restart System......93 Factory Reset.......94 Logout.......95 WEB-BASED NETWORK MANAGEMENT.....96 INTRODUCTION...... 96
GETTING STARTED...... 96 M ANAGEMENT....... 96 Configure Switch......97
IP Settings...... 98 Port Settings....... 99 Port Mirroring....... 100 Switch Settings...... 101 Filtering and Forwarding Table..... 103 Spanning Tree...... 110 IGMP Filtering...... 113 VLANs & MAC-based Broadcast Domains.... 115 Trunk...... 123
Configure Management...... 123
Traps and Community Strings..... 124 User Accounts....... 125 Console Port Settings...... 127

Monitor....... 128

Switch Overview...... 128 Port Statistics...... 129 Browse Address Table...... 134 Browse IGMP Status...... 138 Browse GVRP Status...... 139 Browse GMRP Status...... 140 Switch History...... 141
Reset and Update..... 141
Reboot Switch....... 142 Reset to Factory Default...... 143 Update Firmware...... 144 Change Configuration File...... 145 Save Settings to TFTP Server..... 146 Upload Log File...... 147
Save Changes...... 148 Help....... 148 TECHNICAL SPECIFICATIONS...... 149 RJ-45 PIN SPECIFICATION...... 152 SAMPLE CONFIGURATION FILE..... 154
Commands:....... 154 Notes about the Configuration File:..... 154
RUNTIME SWITCHING SOFTWARE DEFAULT SETTINGS.... 156 INDEX...... 158
24-port NWay Ethernet Switch Users Guide

A BOUT T HIS G UIDE

This Users Guide tells you how to install your DES-3225G Series Switch, how to connect it to your Ethernet network, and how to set its configuration using either the built-in console interface or Web-based management.
For simplicity, this documentation uses the terms Switch (first letter upper case) to refer to the DES-3225G Series 24port NWay Ethernet Switch, and switch (first letter lower case) to refer to all Ethernet switches, including the DES3225G.

Overview of this Users Guide
Chapter 1, Introduction. Describes the Switch and its features. Chapter 2, Unpacking and Setup. Helps you get started with the basic installation of the Switch. Chapter 3, Identifying External Components. Describes the front panel, rear panel, optional plug-in modules, and LED indicators of the Switch. Chapter 4, Connecting the Switch. Tells how you can connect the DES-3225G to your Ethernet network. Chapter 5, Switch Management Concepts. Talks about Local Console Management via the RS-232 DCE console port and other aspects about how to manage the Switch. Chapter 6, Using the Console Interface. Tells how to use the built-in console interface to change, set, and monitor Switch performance and security. Chapter 7, Web-Based Network Management. Tells how to manage the Switch through an Internet browser. Appendix A, Technical Specifications. Lists the technical specifications of the DES-3225G. Appendix B, RJ-45 Pin Specifications. Shows the details and pin assignments for the RJ-45 receptacle/connector. Appendix C, Sample Configuration File. Appendix D, Runtime Switch Software Default Settings.

INTRODUCTION

This section describes the features of the Switch, as well as giving some background information about Ethernet/Fast Ethernet, Gigabit Ethernet, and switching technology.

Fast Ethernet Technology

The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks. A number of high-speed LAN technologies are proposed to provide greater bandwidth and improve client/server response times. Among them, Fast Ethernet, or 100BASE-TX, provides a non-disruptive, smooth evolution from the current 10BASE-T technology. The dominating market position virtually guarantee cost effective and high performance Fast Ethernet solutions in the years to come. 100Mbps Fast Ethernet is a standard specified by the IEEE 802.3 LAN committee. It is an extension of the 10Mbps Ethernet standard with the ability to transmit and receive data at 100Mbps, while maintaining the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Ethernet protocol.
Gigabit Ethernet Technology
Gigabit Ethernet is an extension of IEEE 802.3 Ethernet utilizing the same packet structure, format, and support for CSMA/CD protocol, full duplex, flow control, and management objects, but with a tenfold increase in theoretical throughput over 100Mbps Fast Ethernet and a one hundred-fold increase over 10Mbps Ethernet. Since it is compatible with all 10Mbps and 100Mbps Ethernet environments, Gigabit Ethernet provides a straightforward upgrade without wasting a companys existing investment in hardware, software, and trained personnel. The increased speed and extra bandwidth offered by Gigabit Ethernet is essential to coping with the network bottlenecks that frequently develop as computers and their busses get faster and more users use applications that generate more traffic. Upgrading key components, such as your backbone and servers to Gigabit Ethernet can greatly improve network response times as well as significantly speed up the traffic between your subnets. Gigabit Ethernet enables fast optical fiber connections to support video conferencing, complex imaging, and similar dataintensive applications. Likewise, since data transfers occur 10 times faster than Fast Ethernet, servers outfitted with Gigabit Ethernet NICs are able to perform 10 times the number of operations in the same amount of time. In addition, the phenomenal bandwidth delivered by Gigabit Ethernet is the most cost-effective method to take advantage of today and tomorrows rapidly improving switching and routing internetworking technologies. And with expected advances in the coming years in silicon technology and digital signal processing that will enable Gigabit Ethernet to eventually operate over unshielded twisted-pair (UTP) cabling, outfitting your network with a powerful 1000Mbps-capable backbone/server connection creates a flexible foundation for the next generation of network technology products.

Logging Onto The Switch Console By Registered Users
To log in once you have created a registered user, 1. Type in your Username and press <Enter>. 2. Type in your Password and press <Enter>. 3. The main menu screen will be displayed based on your Administrator or Normal User access level or privilege.
Create/Modify User Accounts
To add or change your user password: Choose Users Accounts Management from the main menu. The following User Accounts Management menu appears:
Figure 6-5. User Accounts Management menu 1. Choose Create/Modify User Accounts. The following screen appears:
Figure 6-6. Add/Modify User Accounts screen
32 Using the Console Interface
2. Type in your Username and press <Enter>. 3. If you are a new user, type in the Old Password and press <Enter>. 4. Type in the New Password you have chosen, and press <Enter>. Type in the same new password in the following field to verify that you have not mistyped it. 5. Determine whether the new user should have Normal User or Administrator privileges. 6. Choose the APPLY command to let the password change take effect. This method can also be used by an Administrator-level user to change another users password.
View/Delete User Accounts
Access to the console, whether using the console port or via Telnet, is controlled using a user name and password. Up to three of these user names can be defined. The console interface will not let you delete the current logged-in user, however, in order to prevent accidentally deleting all of the users with Administrator privilege. Only users with the Administrator privilege can delete users. To view your user password: Choose View/Delete User Accounts from the User Accounts Management menu. The following screen appears:
Figure 6-7. View/Delete User Accounts screen To delete your user password: 1. Toggle the Delete field of the user you wish to remove to Yes. 2. Press APPLY to let the user deletion take effect.

Setting Up The Switch

This section will help prepare the Switch user by describing the Configuration, Update Firmware and Configuration Files, Save Changes, and System Utilities menus and their respective sub-menus.

Configuration

Choose Configuration to access the first item on the DES-3225G main menu. The following menu appears:
Figure 6-8. Configuration menu You will need to change some settings to allow you to be able to manage the Switch from an SNMP-based Network Management System such as SNMP v1 or to be able to access the Switch using the Telnet protocol. See the next chapter for Web-based network management information.

Configure IP Address

The Switch needs to have an IP address assigned to it so that an In-Band network management system or Telnet client can find it on the network. The IP Configuration screen allows you to change the settings for the two different interfaces used on the Switch: the Ethernet interface used for in-band communication, and the SLIP interface used over the console port for out-of-band communication. Choose Configure IP Address to access the first item on the Configuration menu. The following screen appears:

Figure 6-16. Configure Port Mirroring screen To configure a mirror port, select the port from where you want to copy frames in the Source Port field. Then select the port which receives the copies from the source port in the Target Port field. The target port is where you will connect a monitoring/troubleshooting device such as a sniffer or an RMON probe. Note: You cannot mirror a fast port onto a slower port. For example, if you try to mirror the traffic from a 100 Mbps port onto a 10 Mbps port, this can cause throughput problems. The port you are copying frames from should always support an equal or lower speed than the port to which you are sending the copies. Also, the target port cannot be a member of a trunk group.
Configure Spanning Tree Protocol
The Spanning T ree Algorithm Parameters can be used for creating alternative paths in your network. The Protocol Parameters allow you to change the behind the scene parameters of the Spanning Tree Algorithm at the bridge level. The parameters for this section have been fully explained in Chapter 5s Switch Management Concepts, see STA Operation Levels: On the Bridge level, and User-Changeable Parameters. It is recommended that you read these sections, as well as the introductory section in the same chapter entitled Spanning Tree Algorithm before changing any of the parameters.

STP Parameter Settings

To change the Protocol Parameters: 1. Choose Configure Spanning Tree Protocol from the Configuration menu. The following Configure Spanning Tree Protocol menu will be displayed:
Figure 6-17. Configure Spanning Tree Protocol menu 2. Choose STP Parameter Setting to access the following screen:
Figure 6-18. STP Parameters Setting screen
Using the Console Interface 45
The information on the screen is described as follows: Spanning Tree Protocol Enables or disables the Spanning Tree Protocol. Time Since Topology Changes (sec) Read-only object displays the last time changes were made to the network topology. These changes usually occur when backup paths are activated due to primary path failures. Topology Change Count Read-only object displays the number of times (since the current management session with the device was started) changes were made to the network topology. Changes usually occur on the network when backup paths are activated. Designated Root Read-only object displays the MAC (Ethernet) address of the bridge/switch on the network that has been chosen as the STP root. Root Cost Read-only object displays the cost for the path between the switch and the root bridge. If the switch is the root bridge, then the root cost is zero. Root port Read-only object identifies the port (on the bridge) that offers the least path cost from the bridge to the root bridge. In the event of a network loop, data packets will pass through the root port. Max Age (sec) Read-only object indicates the maximum age of STP information learned from the network (on any port) before it is discarded. Forward Delay (sec) Read-only object indicates how fast any port on the bridge can change its spanning state when moving towards the forwarding state. The value determines how long the port stays in each of the listening and learning states, which precede the forwarding state. Hold Time (sec) Read-only object displays the time interval during which no more than two configuration BPDUs shall be transmitted by the bridge. Root Priority Read-only object displays the priority number of the root bridge of the Spanning Tree. The value is used in conjunction with the bridge MAC address to set the bridge ID, which in turn is used when determining the root bridge of a multi-bridged network. The root bridge is responsible for processing data packets when network loops occur. The smaller the number set, the higher the bridge priority is. The higher the bridge priority, the more chance the bridge has of becoming the root bridge. A bridge priority ranges from 0 to 65535, with 0 being the highest priority. Max Age (6-40 sec) Maximum Age is a read-write object that can be set from 6 to 40 seconds. At the end of the Maximum Age, if a BPDU has still not been received from the Root ridge, your Switch will start sending its own BPDU to all other switches for permission to become the Root Bridge. If it turns out that your Switch has the lowest Bridge Identifier, it will become the Root Bridge. Hello Time (1-10 sec) Hello Time is a read-write object that can be set from 1 to 10 seconds. This is the interval between two transmissions of BPDU packets sent by the Root Bridge to tell all other switches that it is indeed the Root Bridge. If you set a Hello Time for your Switch, and it is not the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge. Forward Delay (4-30 sec) The Forward Delay is a read-write object that can be set from 4 to 30 seconds. This is the time any port on the Switch spends in the listening state while moving from the blocking state to the forwarding state. Bridge Priority (0-65535) A Bridge Priority is a read-write object that can be set from 0 to 65535. This is the priority number of the bridge. The value is used in conjunction with the bridge MAC address to set the bridge ID, which in turn is used when determining the root bridge of a multibridged network. The root bridge is responsible for processing data packets when network loops occur. The smaller the number set, the higher the bridge priority is. The higher the bridge priority, the more chance the bridge has of becoming the root bridge. Zero is the highest priority.

Choose Configure Static VLAN Entry to access the third item on the IEEE 802.1Q VLANs Configuration menu. The following 802.1Q Static VLAN Settings screen appears:
Figure 6-42. 802.1Q Static VLAN Settings screen The fields you can set are: VID Enter a VLAN ID from 1 to 4094. This is the VLAN that will be defined on this screen. VLAN Name Description of the VLAN. Tag/Untag Toggle between T for tag and U for untag for each port. Egress/Forbidden Position the cursor over the dash representing the appropriate port number and press <space bar> to select E for Egress, F for Forbidden or leave the dash. An E designates the specified port as a static member of the VLAN. An F defines the port as a non-member and also forbids the port from joining a VLAN dynamically. A dash () means the port is not given VLAN membership for the VID entered above. State Toggle between Active and Inactive. A table on the lower part of the screen displays the settings for each VLAN. The table displays the VLAN number (VID), VLAN Name, and Tag/Untag and Egress (membership) status for all ports. Choose Configure Port GVRP Settings to access the fourth item on the IEEE 802.1Q VLANs Configuration menu. The following GVRP Configuration screen appears:
Figure 6-43. GVRP Configuration screen This screen allows you to enable or disable GARP VLAN Registration Protocol (GVRP), where GARP is the Generic Attribute Registration Protocol, on individual ports. GVRP updates dynamic VLAN registration entries and communicates the new VLAN information across the network. This allows, among other things, for stations to physically move to other switch ports and keep their same VLAN settings, without having to reconfigure VLAN settings on the Switch.

Configure GMRP

Group Multicast Registration Protocol (GMRP) allows multicasts to be sent on a single VLAN without affecting other VLANs or broadcast domains. Group registration entries indicate for each port whether frames to be sent to a group MAC address and on a certain VLAN should be filtered or discarded. Use the GMRP Configuration screen to enable or disable GMRP. Choose Configure GMRP from the bottom of the VLANs & MAC-based Broadcast Domains Configuration screen (the Switch must already be in IEEE 802.1Q VLANs mode) to access the following GMRP Configuration screen:
Figure 6-44. the first GMRP Configuration screen The Switch GMRP field allows you to either enable or disable GMRP on the Switch by toggling between the two choices and then pressing APPLY to let the change take effect. Once GMRP is enabled for the Switch, you then must enable specific ports by selecting Configure Port GMRP Settings from the GMRP Configuration screen below. Press APPLY to let your changes take effect.

STP Parameter & Port Settings
Figure 7-14. STP Parameter & Port Control window To configure Spanning Tree Protocol functions for the Switch or individual ports, enter the desired information in the fields on this window (see the descriptions below for assistance) and then click Apply. The information on the window is described as follows: Spanning Tree Protocol (STP) for all ports is This option offers Disabled or Enabled to implement the Spanning Tree Protocol. Bridge Priority: (0. 65535)/Priority A Bridge Priority can be from 0 to 65535. Zero is equal to the highest Bridge Priority. Hello Time: (1. 10 sec) The Hello Time can be from 1 to 10 seconds. This is the interval between two transmissions of BPDU packets sent by the Root Bridge to tell all other switches that it is indeed the Root Bridge. If you set a Hello Time for your Switch, and it is not the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge. Forward Delay: (4. 30 sec) The Forward Delay can be from 4 to 30 seconds. This is the time any port on the Switch spends in the listening state while moving from the blocking state to the forwarding state. Maximum Age: (6. 40 sec) The Maximum Age can be from 6 to 40 seconds. At the end of the Maximum Age, if a BPDU has still not been received from the Root ridge, your Switch will start sending its own BPDU to all other switches for permission to become the Root Bridge. If it turns out that your Switch has the lowest Bridge Identifier, it will become the Root Bridge.
STP State The Spanning Tree Protocol state for a selected port can either be Enabled or Disabled. Cost The Path Cost is a read-only parameter. The 100Mbps segment has an assigned Path Cost of 19, and each 10Mbps segment has an assigned Path Cost of 100. Priority Port Priority is a read-write object that can be set from 0 to 255. This is the priority number of the port. The lower the port priority, the more chance the bridge has of becoming the root port. Zero is the highest priority.

Traps and Community Strings
Figure 7-26. Traps and Community Strings window To use the functions on this window, enter the appropriate SNMP information in the Community Strings and Trap Receiving Stations sections--you may enter up to four entries in each section. A trap receiving station is a device that constantly runs a network management application to receive and store traps. Then click Apply to put the settings into effect. The Community Strings information is described as follows: SNMP Community String A user-defined SNMP community name. Access Right The permitted access of Read-Only or Read-Write using the SNMP community name. Status Option to set the current community string to Valid or Invalid. The Trap Receiving Stations information is described as follows: IP Address The IP address of the trap receiving station. Status Option to set the trap receiving station to Enabled or Disabled. Community String A user-defined SNMP community name.

User Accounts

Figure 7-27. first User Accounts window Click the pointer icon on the right side to access the main User Accounts window:
Figure 7-28. second Use r Accounts window To add or delete a User Account, fill in the appropriate information in the User Name, Old Password, New Password, and Confirm New Password fields. Then select the desired access, Normal User or Administrator in the Access Level control and click Apply.

Console Port Settings

Figure 7-29. Console Port Settings window This window allows you to select the protocol for communicating through the console port, Console or SLIP, in the Port Setting field. Use SLIP for out-of-band management. You can also choose the refresh rate in the Console Time Out field (2 minutes, 5 minutes, 10 minutes, 15 minutes or Never). If SLIP is being used, you may also set the Baud Rate in the last field. Click Apply and then reboot the Switch for console port settings to take effect. The default serial port settings are: Baud Rate=9600 Data Bits=8 Flow Control=X on/X off Parity=None Stop Bits=1 The information is described as follows: Port Settings The options for the current console port setting are Console or SLIP. Console Time Out Choose Never, 2 minutes, 5 minutes, 10 minutes, or 15 minutes for the desired refresh setting.
Baud Rate Determines the serial port bit rate that will be used the next time the Switch is restarted. Applies only when the serial port is being used for out-of-band (SLIP) management; it does not apply when the port is used for the console port. Available speeds are 2400, 9600, 19,200 and 38,400 bits per second. The default setting in this Switch version is 9600.

Monitor

This third category includes: Switch Overview, Port Statistics (Traffic, Errors, Packet Analysis, and Utilization), Browse Address Table, Browse IGMP Status, Browse GVRP Status, Browse GMRP Status, and Switch History.

CRC Error Counts otherwise valid frames that did not end on a byte (octet) boundary. Oversize Frames Counts packets received that were longer than 1536 octets (excluding framing bits, but including FCS octets) and were otherwise well formed. Fragments The number of packets less than 64 bytes with either bad framing or an invalid CRC. These are normally the result of collisions. Jabber The number of frames with length more than 1536 bytes and with CRC error or misalignment (bad framing).
Late Collision Counts collisions that occur at or after the 64th byte (octet) in the frame. This may indicate that delays on your Ethernet are too long, and you have either exceeded the repeater count or cable length specified in the Ethernet standard. MAC Received Error Counts data errors detectable as 10BASE-TX symbol errors, bit patterns with illegal encodings. This may indicate noise on the line. Dropped Frames The number of frames which are dropped by this port since the last Switch reboot. Undersize Frames The number of frames detected that are less than the minimum permitted frame size of 64 bytes and have a good CRC. Undersize frames usually indicate collision fragments, a normal network occurrence. Total Errors The sum of the CRC Error, Oversize Frames, Fragments, Jabber, Late Collision, MAC Received Error, Dropped Frames, and Undersize Frames counters. Collisions The best estimate of the total number of collisions on this Ethernet segment.

Packet Analysis

Figure 7-33. Port Packet Analysis window The information is described as follows: Update Interval Choose the desired setting: 2 seconds, 5 seconds, 15 seconds, 30 seconds, 60 seconds or Suspend. 64 The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).
65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets). 128255 The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets). 256-511 The total number of packets (including bad packets) received that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets). 512-1023 The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets). 1024-1518 The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets). Rx (good) The number of good frames received. This also includes local and dropped packets. Tx (good) The number of good frames sent from the respective port. Total Rx The number of frames received, good and bad. Tx Bytes The number of good bytes sent from the respective port. Rx Bytes The number of good bytes received. This also includes local and dropped packets. Total Rx The number of bytes received, good and bad. Unicast Rx/Tx The total number of good packets that were received by and directed to a unicast address. Note that this does not include dropped unicast packets Multicast Rx/Tx The total number of good packets that were received by and directed to a multicast address. Note that this number does not include packets directed to the broadcast address Broadcast Rx/Tx The total number of good packets that were received by and directed to a broadcast address. Note that this does not include multicast packets.

Utilization

Figure 7-34. Port Utilization Graph window The information is described as follows: Last Detected Source Address MAC address of the last device that sent packets over this port.
Figure 7-35. MAC Address Table window The first selection on the Browse Address Table menu in the window on the left is None. This allows you to display a table containing MAC addresses, VLANs, ports, and respective learned statuses. Clicking the Next Page hyperlink at the bottom of the window will allow you to display the complete MAC Address Table. You may also enter a VLAN ID number and MAC address at the top of the table and click Find to locate a specific MAC Address Table entry.
Figure 7-36. MAC Address Table MAC address window The second selection on the Browse Address Table menu in the window on the left is MAC Address. This allows you to display a table containing MAC addresses, VLANs, ports, and respective learned statuses. Clicking the Next Page hyperlink at the bottom of the window will allow you to display the complete MAC Address Table. You may also enter a MAC address at the top of the table and click Find to locate a specific MAC Address Table entry.
Figure 7-37. MAC Address Table Port window The third selection on the Browse Address Table menu in the window on the left is Port. This allows you to display a table containing MAC addresses, VLANs, ports, and respective learned statuses. Clicking the Next Page hyperlink at the bottom of the window will allow you to display the complete MAC Address Table. You may also enter a port number at the top of the table and click Find to locate a specific MAC Address Table entry.
Figure 7-38. MAC Address Table VLAN window The fourth selection on the Browse Address Table menu in the window on the left is VLAN. This allows you to display a table containing MAC addresses, VLANs, ports, and respective learned statuses. Clicking the Next Page hyperlink at the bottom of the window will allow you to display the complete MAC Address Table. You may also enter a VLAN ID number at the top of the table and click Find to locate a specific MAC Address Table entry.
Figure 7-39. Browse IGMP Status window This window allows you to display Multicast Group, MAC Address, Queries (TX), Queries (RX), Reports, and Ports for IGMP Snooping in a table format.
Figure 7-40. GVRP Status window This window offers various pieces of information pertaining to GVRP status.
Figure 7-41. GMRP Status window This window offers various pieces of information pertaining to GMRP status.
Figure 7-42. Switch Trap Logs window The Switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC connected to the console manager. Clicking the Next Page hyperlink at the bottom of the window will allow you to display all the Switch Trap Logs. The information is described as follows: Sequence Order in which each log entry was received. Time The time the log entry was received. Log Text Event information pertaining to each log entry.

Reset and Update

The fourth category includes: Reboot Switch, Reset to Factory Default, Update Firmware, Change Configuration File, Save Settings to TFTP Server, and Upload Log File.

Reboot Switch

Figure 7-43. Reboot the Switch window To perform a reboot of the Switch, which resets the system, click the Reboot Now button.

Reset to Factory Default

Figure 7-44. Reset to Factory Default window A remote reset returns the Switch to the initial parameters set at the factory. Click the Reset to Factory Default to reset the Switch.

Update Firmware

Figure 7-45. Update Firmware window To update firmware, fill in the requested information above and then click the Apply button. The information is described as follows: Software Update Mode is Set to either Network or SLIP. Determines whether the new firmware code should be obtained through the Ethernet network or through the console port. TFTP Server Address The IP address of the TFTP server where the new firmware code is. Firmware Update Determines whether or not the Switch should replace its switching software the next time it is rebooted. File Name The path and the name of the file which holds the new firmware code on the TFTP server.
Change Configuration File
Figure 7-46. Change Configuration File window To change a configuration file, fill the fields in above and then click Apply. The information is described as follows: Software Update Mode is Set to either Network or SLIP. Determines whether the configuration file should be obtained through the Ethernet network or through the console port. TFTP Server Address is The IP address of the TFTP server where the configuration file is. File Download Determines whether or not the Switch should download its configuration file the next time it is booted. File Name The path and configuration name on the TFTP server.
Figure 7-47. Save Settings to TFTP Server window To save settings to a file on your TFTP server, fill the fields in above and then click Upload now. The information is described as follows: TFTP Server Address is The IP address of the TFTP server where the setting file will be saved. File Name The path and file name for the settings file on the TFTP server. Last Upload Status Read-only field displays the most recent upload activity.

Commands:

Code_type This command tells the Switch the type of file you wish to upload to the Switch. Possible Code_types are PROM, RUNTIME, or CONFIG. This should always be the first setting. PROM PROM update file. RUNTIME Switching software update file. CONFIG Image file of switch settings created by the settings backup procedure.
Image_file This command tells the Switch the complete path and filename for the file to be loaded into the Switch. For example, e:\3225\3225prom.tfp. Make sure double-quotes are used as in the example file

below.

Ip_addr This is the IP address that will be assigned to the switch. This command is included for downloading a
configuration settings file to another switch. The IP address defined in this file will override the IP address in the configuration settings file, thus the switch you are downloading to can have a different IP address than the one that created the configuration settings file. An example IP address is 10.12.19.102.
Subnet_mask This is the subnet mask that will be assigned to the switch. An example subnet mask is 255.128.0.0. Default_gateway This is the default gateway IP that will be assigned to the switch. An example default Gateway IP is 10.254.254.253.
# Remark. When placed as the first character on a line, the entire line will be ignored by the switch. This allows items to be labeled, or unused commands to remain in the file so that the syntax will not be forgotten.
Notes about the Configuration File:
This configuration file can only contain 4 settings: Code_type, Default_gateway. Each command can only appear once in the configuration file.

Ip_addr, Subnet_mask and

Sample Configuration File
If both the Firmware Update and Use Config File options are enabled on the Update Firmware and Configuration Files screen, the Firmware Update command will take precedence and only the firmware file will be uploaded to the Switch. The Config image file, which contains all configuration settings and was created by the Switch, is prefixed with the version number of the runtime software to help with file management.
# Sample Config File Code_type=PROM Image_file="e:\3225\3225prom.tfp" # specify IP address Ip_addr = 10.12.19.102 # specify subnet mask Subnet_mask = 255.128.0.0 # specify default gateway Default_gateway = 10.254.254.253

D-Link Central Europe/D-Link Deutschland GmbH
Schwalbacher Strasse 74, D-65760 Eschborn, Germany TEL: 49-6196-77990 FAX: 49-6196-7799300 URL: www.dlink.de BBS: 49-(0) 6192-971199 (analog) BBS: 49-(0) 6192-971198 (ISDN) INFO: 00800-7250-0000 (toll free) HELP: 00800-7250-4000 (toll free) REPAIR: 00800-7250-8000 E-MAIL: info@dlink.de

D-Link India

Plot No.5, Kurla-Bandra Complex Rd., Off Cst Rd., Santacruz (E), Bombay, India TEL: 91-22-652-6696 FAX: 91-22-652-8914 URL: www.dlink-india.com E-MAIL: service@dlink.india.com
D-Link Mediterraneo Srl/D-Link Italia
Via Nino Bonnet n. 6/b, 20154, Milano, Italy TEL: 39-02-2900-0676 FAX: 39-02-2900-1723 URL: www.dlink.it E-MAIL: info@dlink.it

D-Link Japan

10F, 8-8-15 Nishi-Gotanda, Shinagawa-ku, Tokyo 141, Japan TEL: 81-3-5434-9678 FAX: 81-3-5434-9868 URL: www.d-link.co.jp E-MAIL: kida@d-link.co.jp

Netherlands

D-Link Benelux
Fellenoord 1305611 ZB, Eindhoven, the Netherlands TEL: 31-40-2668713 FAX: 31-40-2668666 URL: www.d-link-benelux.nl

Norway

D-Link Norway
Waldemar Thranesgt. 77, 0175 Oslo, Norway TEL: 47-22-991890 FAX: 47-22-207039

Russia

D-Link Russia
Michurinski Prospekt 49, 117607 Moscow, Russia TEL: 7-095-737-3389 & 7-095-737-3492 FAX: 7-095-737-3390 URL: www.dlink.ru E-MAIL: vl@dlink.ru

Singapore

D-Link International
1 International Business Park, #03-12 The Synergy, Singapore 609917 TEL: 65-774-6233 FAX: 65-774-6322 E-MAIL: info@dlink.com.sg URL: www.dlink-intl.com

South Africa

D-Link South Africa
Witchhazel Avenue, Einstein Park 2, Block B, Highveld Technopark, Centurion, South Africa TEL: 27 (0) 12-665-2165 FAX: 27 (0) 12-665-2186 URL: www.d-link.co.za E-MAIL: attie@d-link.co.za

D-Link Iberia

Gran Via de Carlos III, 843 Edificio Trade, 08028 Barcelona, Spain TEL: 4965751 FAX: 4965701 URL: www.dlinkiberia.es

Sweden

D-Link Sweden
P. O. Box 15036, S-Bromma, Sweden TEL: 46-(0) 8-564-61900 FAX: 46-(0) 8-564-61901 E-MAIL: info@dlink.se URL: www.dlink.se

Taiwan

D-Link Taiwan
2F, No. 119 Pao-Chung Rd, Hsin-Tien, Taipei, Taiwan TEL: 886-2-2910-2626 FAX: 886-2-2910-1515 URL: www.dlinktw.com.tw E-MAIL: dssqa@tsc.dlinktw.com.tw

D-Link Europe

4th Floor, Merit House, Edgware Road, Colindale, London NW9 5AB United Kingdom TEL: 44 (0) 20-8731-5555 FAX: 44 (0) 20-8731-5511 BBS: 44 (0) 181-235-5511 URL: www.dlink.co.uk E-MAIL: info@dlink.co.uk

U.S.A.

D-Link U.S.A.
53 Discovery Drive, Irvine, CA 92618, USA TEL: 1-949-788-0805 FAX: 1-949-753-7033 BBS: 1-949-455-1779 & 1-949-455-9616 INFO: 1-800-326-1688 URL: www.dlink.com E-MAIL: tech@dlink.com & support@dlink.com

Power Failure

As a precaution, in the event of a power failure, unplug the switch. When power is resumed, plug the switch back in.
IDENTIFYING E XTERNAL C OMPONENTS
This chapter describes the front panel, rear panel, optional plug-in modules, and LED indicators of the DES-3225G.

Front Panel

The front panel of the Switch consists of LED indicators, an RS-232 communication port, a slide-in module slot, two uplink ports, and 22 (10/100 Mbps) Ethernet/Fast Ethernet ports.
Figure 3-1. Front panel view of the Switch Comprehensive LED indicators display the status of the switch and the network. A description of these LED indicators follows (see the LED Indicators section below). An RS-232 DCE console port for setting up and managing the switch via a connection to a console terminal or PC using a terminal emulation program. A front-panel slide-in module slot for 10/100 Mbps Ethernet ports can accommodate a 2-port 10/100BASE-TX Fast Ethernet module, a 2-port 100BASE-FX MT-RJ type module, or a 1-port 100BASE-FX SC type module. Two MDI-II Uplink jacks which can be used to connect a straight-through cable to a normal (non-Uplink) port on a switch or hub. Do not use port 1X if the top Uplink port is occupied or Port 2X if the bottom Uplink port is occupied. Twenty-two high-performance, NWay Ethernet ports all of which operate at 10/100 Mbps for connections to end stations, servers and hubs. All ports can auto-negotiate between 10Mbps or 100Mbps, full- or half-duplex, and flow control.

Rear Panel

The rear panel of the switch consists of a slot for an optional Gigabit Ethernet fiber port and an AC power connector. The following displays the rear panel of the switch.
Figure 3-2. Rear panel view of the Switch
Identifying External Components
Figure 3-3. Rear panel view of the Switch fitted with the optional Gigabit Ethernet slide-in module The optional Gigabit Ethernet slide-in module (1000BASE-SX, 1000BASE-LX, or 1000BASE-T) contains one port for connecting to another switch. The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. Supported input voltages range from 100 ~ 240 VAC at 50 ~ 60 Hz.

Side Panels

The right side panel of the Switch contains two system fans (see the top part of the diagram below). The left side panel contains heat vents.
Figure 3-4. Side panel views of the Switch The system fans are used to dissipate heat. The sides of the system also provide heat vents to serve the same purpose. Do not block these openings, and leave at least 6 inches of space at the rear and sides of the switch for proper ventilation. Be reminded that without proper heat dissipation and air circulation, system components might overheat, which could lead to system failure.

C ONNECTING T HE S WITCH

This chapter describes how to connect the DES-3225G to your Fast Ethernet network.

Switch to End Node

End nodes include PCs outfitted with a 10, 100 or 10/100 Mbps RJ-45 Ethernet/Fast Ethernet Network Interface Card (NIC) and most routers. The RJ-45 UTP ports on NICs and most routers are MDI-II. When using a normal straight-through cable, an MDI-II port must connect to an MDI-X port. An end node can be connected to the Switch via a two-pair Category 3, 4, 5 UTP/STP straight cable (be sure to use Category 5 UTP or STP cabling for 100 Mbps Fast Ethernet connections). The end node should be connected to any of the twenty-two ports (1x - 22x) of the DES-3225G or to either of the two 100BASE-TX ports on the front-panel module that came preinstalled on the switch. An end node should not be connected to an Uplink port (unless using a crossover cable), and if the top Uplink port is in use, Port 1X must remain vacant; if the bottom Uplink port is in use, Port 2X cannot be used.
Figure 4-1. Switch connected to an End Node The LED indicators for the port the end node is connected to are lit according to the capabilities of the NIC. If LED indicators are not illuminated after making a proper connection, check the PCs LAN card, the cable, switch conditions, and connections. The following LED indicator states are possible for an end node to switch connection: 1. The 100M LED indicator comes ON for a 100 Mbps and stays OFF for 10 Mbps. 2. The Link/Act LED indicator lights up upon hooking up a PC that is powered on.

Switch to Hub or Switch

These connections can be accomplished in a number of ways. The most important consideration is that when using a normal, straight-through cable, the connection should be made between a normal crossed port (Port 1X, 2X, etc.) and an Uplink (MDI-II) port. If you are using a crossover cable, the connection must be made from Uplink to Uplink, or from a crossed port to another crossed port. A 10BASE-T hub or switch can be connected to the Switch via a two-pair Category 3, 4 or 5 UTP/STP straight cable.

Connecting The Switch

A 100BASE-TX hub or switch can be connected to the Switch via a two-pair Category 5 UTP/STP straight cable. If the other switch or hub contains an unused Uplink port, we suggest connecting the other devices Uplink (MDI-II) port to any of the switchs (MDI-X) ports (1x - 22x, or one of the 100BASE-TX module ports) using a normal straight-through cable, as shown below. If the other device does not have an unused Uplink port, make the connection with a normal straight-through cable from one of the Uplink ports on the switch to any normal crossed port on the hub. Alternatively, if you have a crossover cable you can save the Uplink ports for other connections and make this one from a crossed port to another crossed port.

Figure 4-2. Switch connected to a normal (non-Uplink) port on a hub or switch using a straight or crossover cable

10BASE-T Device

For a 10BASE-T device, the Switchs LED indicators should display the following: 100M LED speed indicator is OFF. Link/Act indicator is ON.

100BASE-TX Device

For a 100BASE-TX device, the Switchs LED indicators should display the following: 100M LED speed indicator is ON. Link/Act is ON.
S WITCH MANAGEMENT C ONCEPTS
This chapter discusses many of the features used to manage the switch, and explains many concepts and important points regarding these features. Configuring the switch to implement these concepts is discussed in detail in the next chapters.

Local Console Management

Local console management involves the administration of the DES-3225G Switch via a direct connection to the RS-232 DCE console port. This is an Out-Of-Band connection, meaning that it is on a different circuit than normal network communications, and thus works even when the network is down. The local console management connection involves a terminal or PC running terminal emulation software to operate the switchs built-in console program (see Chapter 6, Using the Console Interface). Using the console program, a network administrator can manage, control and monitor the many functions of the Switch. Hardware components in the Switch allow it to be an active part of a manageable network. These components include a CPU, memory for data storage, other related hardware, and SNMP agent firmware. Activities on the Switch can be monitored with these components, while the Switch can be manipulated to carry out specific tasks.
Diagnostic (console) port (RS-232 DCE)
Out-of-band management requires connecting a terminal, such as a VT-100 or a PC running terminal emulation program (such as HyperTerminal, which is automatically installed with Microsoft Windows) a to the RS-232 DCE console port of the Switch. Switch management using the RS-232 DCE console port is called Local Console Management to differentiate it from management done via management platforms, such as D-View, HP OpenView, etc. The console port is set for the following configuration: Baud rate: Data width: Parity: Stop bits: Flow Control 9,bits none 1 None

User-Changeable STA Parameters
The factory default setting should cover the majority of installations. However, it is advisable to keep the default settings as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: Bridge Priority A Bridge Priority can be from 0 to 65535. 0 is equal to the highest Bridge Priority. Bridge Hello Time The Hello Time can be from 1 to 10 seconds. This is the interval between two transmissions of BPDU packets sent by the Root Bridge to tell all other Switches that it is indeed the Root Bridge. If you set a Hello Time for your Switch, and it is not the Root Bridge, the set Hello Time will be used if and when your Switch becomes the Root Bridge. Note: The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will occur. Bridge Max. Age The Max. Age can be from 6 to 40 seconds. At the end of the Max. Age, if a BPDU has still not been received from the Root Bridge, your Switch will start sending its own BPDU to all other Switches for permission to become the Root Bridge. If it turns out that your Switch has the lowest Bridge Identifier, it will become the Root Bridge. Bridge Forward Delay The Forward Delay can be from 4 to 30 seconds. This is the time any port on the Switch spends in the listening state while moving from the blocking state to the forwarding state.
Observe the following formulas when you set the above parameters: 1. Max. Age 2. Max. Age 2 x (Forward Delay - 1 second) 2 x (Hello Time + 1 second)
Port Priority A Port Priority can be from 0 to 255. The lower the number, the greater the probability the port will be chosen as the Root Port.

Illustration of STA

A simple illustration of three Bridges (or the Switch) connected in a loop is depicted in Figure 5-1. In this example, you can anticipate some major network problems if the STA assistance is not applied. For instance, if Bridge 1 broadcasts a packet to Bridge 2, Bridge 2 will broadcast it to Bridge 3, and Bridge 3 will broadcast it to Bridge 1.and so on. The broadcast packet will be passed indefinitely in a loop, causing a serious network failure. To alleviate network loop problems, STA can be applied as shown in Figure 5-2. In this example, STA breaks the loop by blocking the connection between Bridge 1 and 2. The decision to block a particular connection is based on the STA calculation of the most current Bridge and Port settings. Now, if Bridge 1 broadcasts a packet to Bridge 3, then Bridge 3 will broadcast it to Bridge 2 and the broadcast will end there. STA setup can be somewhat complex. Therefore, you are advised to keep the default factory settings and STA will automatically assign root bridges/ports and block loop connections. However, if you need to customize the STA parameters, refer to Table 5-1.

Configure Console

You can use the Console Options screen to choose whether to use the Switchs RS-232C serial port for console management or for out-of-band TCP/IP communications using SLIP, and to set the bit rate used for SLIP communications. Choose Configure Console to access the last item on the Configuration menu. The following screen appears:
Figure 6-10. Console Options screen The following fields can be set: Settings on Restart: Console Timeout This setting for the restart of the console is 2 mins, 5 mins, 10 mins, 15 mins, or Never. Serial Port Determines whether the serial port should be used for out-of-band (SLIP) management or for console management, starting from the next time the Switch is restarted. In this field, you can toggle between SLIP or Console port type settings. Baud Rate Determines the serial port bit rate that will be used the next time the Switch is restarted. Applies only when the serial port is being used for out-of-band (SLIP) management; it does not apply when the port is used for the console port. Available speeds are 2400, 9600, 19,200 and 38,400 bits per second. The default setting in this Switch version is 9600. The top of the screen displays the current settings for Console Timeout and Serial Port as well as the Baud Rate, Character Size, and Stop Bit for Out of Band and Console settings, respectively.

Configure Switch

The Switch Configuration screen shows various pieces of information about your Switch, and allows you to set the System Name, System Location, and System Contact. These settings can be retrieved from the Switch using SNMP requests, allowing these settings to be used for network management purposes. Choose Configure Switch to access the second item on the Configuration menu. The following screen appears:
Figure 6-11. Switch Configuration screen The fields you can set are: System Name Corresponds to the SNMP MIB II variable system.sysName, and is used to give a name to the Switch for administrative purposes. The Switchs fully qualified domain name is often used, provided a name has been assigned. System Location Corresponds to the SNMP MIB II variable system.sysLocation, and is used to indicate the physical location of the Switch for administrative purposes. System Contact Corresponds to the SNMP MIB II variable sysContact, and is used to give the name and contact information for the person responsible for administering the Switch.

Advanced Settings

The Configure Advanced Switch Features screen allows you to set an expiration time for MAC address entries and enable or disable auto-partitioning on all ports. Select ADVANCED SETTINGS on the Switch Configuration screen to access the Configure Advanced Switch Features screen (see below). Press APPLY once the desired changes have been made.

Figure 6-12. Configure Advanced Switch Features screen The fields you can set are: Port Auto-Partition Capability on All Ports When this function is enabled, if too many consecutive collisions occur on an individual port, the port will be blocked off until a good packet is seen on the wire. If a port is partitioned, the Switch can only transmit data, not receive it. Head Of Line (HOL) Blocking Prevention Enables or disables Head-Of-Line Blocking Prevention. Head-of Line blocking occurs when a packet originating on Port 1, for instance, needs to be forwarded to Ports 2 and 3. If Port 2 is occupied (causing the packet to be held in memory until the port is free), the packet destined for Port 3 will also be delayed, even though the port may be free. Cumulatively, these delays can have a noticeable effect on overall network performance. Enabling HOL Blocking Prevention prevents Head-of-Line blocking from occurring, meaning that the packet destined for Port 3 gets delivered immediately.

Configure Ports

The port configuration screen allows you to change the port state in the case when you would like to partition a port due to excessive collision, or for observation, device repair, or security reasons. Great caution, however, must be observed when partitioning a port; you should make sure that the partitioned port is not being used as the port to control or monitor the condition of other devices.
Figure 6-13. Port Configuration screen Items in the above window are defined as follows: Port Specifies the port (1-22,all) that will be configured. When all is chosen, the settings you configure will be applied to all UTP ports. State Enables or disables the port. This amounts to turning the port on or off. Speed/Duplex Selects the desired Speed and Duplex fort the port. Possible settings include: Auto, 100M/Full, 100M/Half, 10M/Full, or 10M/Half. Choosing Auto enables NWay auto-configuration on the port. Flow Control Toggles flow control On or Off. Flow control can only be used with other IEEE 802.3x-compliant devices and in a full-duplex connection. It is useful during periods of heavy network activity when the Switchs buffers can receive too much traffic and fill up faster than the Switch can forward the information. In such cases, the Switch will intervene and tell the transmitting device to pause to allow the information in the port buffer to be sent. When Auto-Negotiation is enabled in the Speed/Duplex field above, flow control will only be enabled if the connected device can Auto-negotiate flow control. Confirm that Flow Control is in force by checking the Status field. Priority Selects Normal, High or Low. The Switch has two packet queues where incoming packets wait to be processed for forwarding; a high priority and low priority queue. The high priority queue should only be used for data in which latency can have adverse affects on the function of an application, such as video or audio data, where latency can produce distorted sounds and images. Packets in the low priority queue will not be processed unless the High priority queue is empty. Setting the port priority to high will deliver all packets arriving at the port to the high priority queue, a low setting will send them all to the low priority queue. The Normal settings causes the port to examine the packet for an IEEE 802.1p/Q priority tag. If no tag exists, the packet will be sent to the low priority queue. If the priority tag field in the packet header contains a value of 0-3, the packet will be placed in the low priority queue; a value of 4-7 causes the packet to be placed in the high priority queue.

Configure Slot2 Module

This screen allows you to change the port state of an optional Gigabit Ethernet module in slot 2. This is useful in the case when you would like to partition a port due to excessive collision, or for observation, device repair, or security reasons. Great caution, however, must be observed when disabling a port, since all data passing through the port will be discarded by the Switch. The Configure Slot2 Module screen appears as follows:
Figure 6-15. Slot2-Port Configuration screen State Enables or disables this port. Speed/Duplex If either a 1000BASE-SX or 1000BASE-LX module is used, this field will offer two choices: 1000M/Full or Auto. If a 1000BASE-T module is used, this field will offer the following choices: 1000M/Full, 100M/Full, 100M/Half, and Auto. Please note that DES-3251G/GL version A2 supports 1000M/Full only. Version A3 supports 1000M/Full and Auto.
Flow Control Enables or disables IEEE 802.1x full-duplex (only) flow control on this port. See Flow Control in the Configure Ports section above for a more detailed explanation. Priority Selects Normal, High or Low. See Priority in the Configure Ports section above for a more detailed explanation. Port Lock When locked, automatic learning for all stations connected to this port will stop and entries in the Forwarding Table for all devices residing on this port will age out. The only traffic this port will allow is traffic from machines whose MAC address is manually entered in the Static Forwarding Table. Broadcast Storm Rising Action Selects an action Do Nothing, Blocking, Blocking-Trap for the port when the Broadcast Storm Rising Threshold (below) condition is met. See Broadcast Storm Rising Action in the Configure Ports section of this manual for a more detailed explanation. Broadcast Storm Rising Threshold This setting defines a ceiling for the number of broadcast packets per second on this port. See Broadcast Storm Rising Threshold in the Configure Ports section of this manual for a more detailed explanation. Broadcast Storm Falling Action This setting will be activated when the Broadcast Storm Rising Threshold and then the Broadcast Storm Falling Threshold (below) is met. This setting can be configured to Do Nothing, Forwarding or Forwarding-Trap. See Broadcast Storm Falling Action in the Configure Ports section of this manual for a more detailed explanation. Broadcast Storm Falling Threshold This setting defines the number of broadcast packets per second on this port which will trigger the Broadcast Storm Falling Action (above). See Broadcast Storm Falling Threshold in the Configure Ports section of this manual for a more detailed explanation. Press APPLY to have the changes take effect. STP Port State and Status reflect the current conditions of the port. They are read-only fields and cannot be changed.

STP Port Control

To change the parameters on individual ports: 1. Choose Configure Spanning Tree Protocol from the Configuration menu. 2. Choose STP Port Control from the Configure Spanning Tree Protocol menu. The following screen appears:
Figure 6-19. Spanning Tree Protocol Custom Settings screen Items in the above window are described as follows: STP State Enables or disables the Spanning Tree Protocol on a particular port. Cost This is a read-only object. Both 10Mbps and 100Mbps segments have an assigned Path Cost of 19, based on the STA specifications. Priority Port Priority is a read-write object that can be set from 0 to 255. This is the priority number of the port. The lower the port priority, the more chance the bridge has of becoming the root port. Zero is the highest priority.
Configure Filtering and Forwarding Table
When a packet hits the Switch, it looks in the filtering and forwarding table to decide what to do with the packet; either to filter it off the network, or to forward it through the port on which its destination lies. Dynamic Filtering and Static Filtering are among the two important features of the Custom Filtering Table. They are defined here briefly as follows. Dynamic Filtering is defined when a dynamic entry is created by the Learning Process as a result of observation of network traffic in the Filtering Database. Static Filtering is defined as static entries that may be added and removed from the Filtering Database by the user. They are not automatically removed by any timeout mechanism.
The Configure Filtering and Forwarding Table screen allows you to allows you to stop or start address learning, change the way the Switch treats MAC address table entries, and select an age-out time of the MAC address in the selected address table. This screen also permits you to access three additional configuration screens from the menu at the bottom of the screen. Choose Configure Filtering and Forwarding Table from the Configuration menu to access the following screen:
Figure 6-20. Configure Filtering and Forwarding Table screen The following fields at the top of the screen can be set: Lock Address Table (Stops Auto-Learning) Mostly used for security purposes, when the forwarding table is locked the Switch will no longer learn the MAC addresses for new hosts. If your network configuration doesnt change, locking the forwarding table helps keep intruders off your network since any packet coming from an unknown source address will be dropped by the Switch. Address Table Lookup Mode This setting allows the user to tailor the MAC address look up procedure. Choices are Level 0, Level 1, Level 2, Level 3, Level 4, Level 5, Level, 6, Level 7. The higher the level, the more MAC addresses can be learned by the Switch. However, a side effect is that throughput will be degraded the higher the level you select. Level 1 is the default. MAC Address Aging Enter the desired MAC address age-out time in this field (10 to 1000000 seconds). Please refer to the Packet Forwarding section of the Switch Management Concepts chapter of this manual for more detailed information.

Configure MAC-based Broadcast Domains
To create a MAC-based Broadcast Domain, simply create the Broadcast Domain itself in the Add/Remove MACbased Broadcast Domains screen by selecting Add in the Action field, entering a name in the Domain Name field, and then pressing APPLY). Next, select the Broadcast Domain you have created in the Add/Remove MAC-based Broadcast Domain Members screen. Finally, assign MAC addresses for each Broadcast Domain member you want to add in the Add/Remove MAC-based Broadcast Domain Members screen--select Add in the Action field, enter a MAC Address in the next field, and then press APPLY. Note that once all additions and changes have been completed, you must restart the Switch for the MAC-based Broadcast Domains to be implemented. To access the MAC-based Broadcast Domains Configuration menu, open Configuration, choose Configure VLANs & MAC-based Broadcast Domains, and select Configure MAC-based Broadcast Domains at the bottom of the VLANs & MAC-based Broadcast Domains Configuration menu (the Current Mode must be MAC-based Broadcast Domains). The following menu appears:
Figure 6-29. MAC-based Broadcast Domains Configuration menu Choose Add/Remove MAC-based Broadcast Domain to access the following screen:
Figure 6-30. Add/Remove MAC-based Broadcast Domains screen The fields you can set are: Action Add or Remove a MAC-based Broadcast Domain. Domain Name Enter the name of the MAC-based Broadcast Domain. Press APPLY to create or remove the designated MAC-based Broadcast Domain. Broadcast Domains and Number of Members reflect the current conditions. They are read-only fields and cannot be changed. Choose Add/Remove MAC-based Broadcast Domain Member from the MAC-based Broadcast Domains Configuration menu to access the following screen:
Figure 6-31. the first Add/Remove MAC-based Broadcast Domain Members screen To configure a MAC-based Broadcast Domain member, highlight the desired entry on the screen above and press <Enter>. The following screen appears:
Figure 6-32. the second Add/Remove MAC-based Broadcast Domain Members screen The fields you can set are: Action Select the desired action by toggling between Add and Remove. MAC Address The MAC address of the Broadcast Domain member being added or removed. Please note that the Status field for the MAC address you have entered will read Not Apply if it is the same MAC address entered in the filtering and forwarding table. Current Broadcast Domain, Number of members, MAC Address (in the lower part of the screen), and Status reflect the current conditions. They are read-only fields and cannot be changed.
Configure Port-based VLAN
If you are unsure of your knowledge of port-based VLANs, we highly recommend reviewing the VLANs and Broadcast Domains section of the Switch Management Concepts chapter in this manual before proceeding. To view the VLANs & MAC-based Broadcast Domains Configuration menu for Port-based VLANs: 1. 2. 3. 4. Choose Configure VLANs & MAC-based Broadcast Domains on the Configuration menu. Select Port-Based VLANs under Restart Mode and then press APPLY. Press RESTART on the Change VLAN Mode screen. This will cause the Switch to automatically save changes and then perform a reboot. Repeat the first step. The following screen will appear:

Port Packet Error Statistics
To access the third item on the Traffic Statistics menu, choose Port Packet Error Statistics. The following table appears:
Figure 6-58. Port Packet Error Statistics table Select the desired setting in the Ports field: 1 to 4, 5 to 8, 9 to 12, 13 to 16, 17 to 20, 21-S1P2, or Slot 2 and the desired increment setting in the Polling Interval field: 2 sec, 5 sec, 15 sec, 30 sec, 1 min, or Suspend. Pressing CLEAR COUNTER resets the counters on this screen. The statistic counters displayed are defined as follows: Speed If the link is up, the speed and duplex status will be displayed; if the link is down - will be displayed. CRC Error The number of frames that fail the CRC integrity check. Oversize Frames The number of good frames with length greater than 1536 bytes and therefore are greater than the maximum legal length. Fragments The number of packets less than 64 bytes with either bad framing or an invalid CRC. These are normally the result of collisions. Jabber The number of frames with length more than 1536 bytes and with CRC error or misalignment (bad framing). Late Collision The number of collisions that occur at or after the 64th byte (octet) in the frame. Mac Rx Error The number of frames with received MAC Errors.
Dropped Frames The number of frames which are dropped by this port since the last Switch reboot. Undersize Frames The number of frames detected that are less than the minimum permitted frame size of 64 bytes and have a good CRC. Undersize frames usually indicate collision fragments, a normal network occurrence. Total errors The sum of the CRC Error, Oversize Frames, Fragments, Jabber, Late Collision, Mac Rx Error, Dropped Frames, and Undersize Frames counters. Collisions The number of collision that has occurred.
Port Packet Analysis Statistics
To access the fourth item on the Traffic Statistics menu, choose Port Packet Analysis Statistics. The following table appears:
Figure 6-59. Packet Analysis Statistics table Select the desired setting in the Ports field: 1 to 4, 5 to 8, 9 to 12, 13 to 16, 17 to 20, 21-S1P2, or Slot 2 and the desired increment setting in the Polling Interval field: 2 sec, 5 sec, 15 sec, 30 sec, 1 min, or Suspend. Pressing CLEAR COUNTER resets the counters. The statistic counters displayed are defined as follows: 64, 65-127, 128-255, 256-511, 512-1023, 1024-1518 The number of good frames of various length ranges, both valid and invalid. RX (GOOD) The number of good frames received. This also includes local and dropped packets. TX (GOOD) The number of good frames sent from the respective port. Total RX The number of frames received, good and bad. TX Octets The number of good bytes sent from the respective port. RX Octets The number of good bytes received. This also includes local and dropped packets.

Browse GVRP Status

The Browse GVRP Status function allows you to browse GARP (Generic Attribute Registration Protocol) VLAN Registration Protocol (GVRP).
To display the GVRP Status screen, choose Network Monitoring from the main menu and then choose Browse GVRP Status. The following screen appears:
Figure 6-62. GVRP Status screen This screen contains information pertaining to GVRP status.

Browse GMRP Status

The Browse GMRP Status function allows you to browse Group Multicast Registration Protocol (GMRP).
To display the GMRP Status screen, choose Network Monitoring from the main menu and then choose Browse GMRP Status. The following screen appears:
Figure 6-63. GMRP Status screen This screen displays various pieces of information relating to GMRP status.

Switch History

The Network Monitoring menu allows the user to view the Switch history. This works like a trap and event receiver except it only captures trap/events generated by the Switch itself. For example, the switch history includes when the system is rebooted, when a console session is timed out, when a new link is established, and when configuration is save to flash memory. To display the Switch History screen, choose Network Monitoring from the main menu and then choose Switch History. The following screen appears:
Figure 6-64. Switch History screen The switch history entries are listed sequentially from the last time the Switch was rebooted. Use the following keys to move around the screen above: N Page down, P Page up, B Begin, E End, and C Clear Log. CTRL+R will refresh the screen.

Resetting the Switch

You can use the console interface to reset the Switch, either performing a Restart System (which restarts the Switch and is identical to powering the Switch off and on again), or a Factory Reset (which sets all of the Switchs parameters to what they were when the Switch was purchased).

Restart System

To perform a system reset, choose Restart System from the main menu--a confirmation query will be offered before the system is rebooted.
Figure 6-65. Restart System screen

Factory Reset

Before performing a factory reset, be absolutely certain that this is what you want to do. Once the factory reset is done, all of the Switchs settings stored in NV-RAM (including TCP/IP parameters, SNMP parameters, the enabled/disabled settings of ports, security settings, etc.) will be erased and restored to values present when the switch was purchased. After performing the factory reset, make sure to redefine the IP settings for the Switch in the Configure IP Address menu. Then perform a Restart System on the Switch. After these three procedures are performed, your factory reset is complete. Choose Factory Reset from the main menu. The following screen appears:

4. Configure the Priority Queues setting for packets passing through this port, using IEEE 802.1 tagging. Select Low, High or Normal. If the network is congested, the Switch handles packets with a higher priority before those with lower priority. 5. Configure the Port Lock setting to prevent the port from learning MAC addresses of new hosts. This will help keep intruders off your network since any packet coming from an unknown source will be dropped by the Switch, that is, not added to your MAC Address Forwarding Table. Select Enabled or Disabled. 6. Configure the Broadcast Storm Rising Action setting from three choices: Do Nothing, Blocking, or Blocking-Trap and the Broadcast Storm Rising Action Threshold that will trigger a Broadcast Storm Rising Action. 7. Configure the Broadcast Storm Falling Action setting from three choices: Do Nothing, Forwarding, or Forwarding-Trap and the Broadcast Storm Falling Action Threshold that will trigger a Broadcast Storm Falling Action. 8. The STP Port State read-only field indicates the status of the Spanning Tree Protocol, e.g. Forwarding. 9. Click Apply to let your changes take effect. To see all the ports on the Switch rather than just an individual port, click View All Ports at the bottom of the window.

Port Mirroring

Figure 7-3. Port Mirroring window
The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets passing through the first port. To configure a mirror port, select Enabled from the Port mirroring in pull-down list. In the next field, select the Source Port from where you want to copy frames. In the last field, select the Target Port, which receives the copies from the source port. This is the port where you will connect a monitoring/troubleshooting device such as a sniffer or an RMON probe. Click Apply to let the changes take effect. Note: You cannot mirror a fast port onto a slower port. For example, if you try to mirror the traffic from a 100 Mbps port onto a 10 Mbps port, this can cause throughput problems. The port you are copying frames from should always support an equal or lower speed than the port to which you are sending the copies. Also, the target port for the mirroring cannot be a member of a trunk group. Please note a target port and a source port can not be the same port.