D-Link Unified Access System DWS-3000 Series Technical Information

Configuration GuideProduct Model : DWS-3000 Series Unified Wired & Wireless Access SystemRelease 3.0February 2011©Copyright 2011. All rights res

10 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 44. RIP Interface Configuration ...

100 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 51. ACL Interface ConfigurationFigure 52. MAC ACL Summary

Web Examples 10115 Access Control Lists (ACLs)Figure 53. MAC ACL Rule SummaryIP ACL Web PagesThe following figures show the pages available to view

102 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 55. IP ACL Configuration Page - Create a Rule and Assign an IDFigur

Web Examples 10315 Access Control Lists (ACLs)Figure 57. Attach IP ACL to an Interface

104 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 58. IP ACL SummaryFigure 59. IP ACL Rule Summary

10516802.1X Network Access ControlPort-based network access control allows the operation of a system’s port(s) to be controlled to ensure that access

106 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guidesimpler. At the start of service for a user, the RADIUS client that is con

Guest VLAN 10716 802.1X Network Access ControlGuest VLANThe Guest VLAN feature allows a switch to provide a distinguished service to unauthenticate

108 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideConfiguring the Guest VLAN by Using the Web InterfaceTo enable the Guest V

Configuring Dynamic VLAN Assignment 10916 802.1X Network Access ControlConfiguring Dynamic VLAN AssignmentThe software also supports VLAN assignmen

11 List of FiguresFigure 88. CoS Interface Configuration Page... 144Figure 89. CoS Interface Queu

110 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Web Example 11117Captive PortalThe Captive Portal (CP) feature allows you to block wired and wireless clients from accessing the network until user ve

112 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideC. Click Submit. NOTE: To customize the page that captive portal users see

CLI Example 11317 Captive PortalC. In the Interface List column, CTRL + Click to select interface Slot 0 Port 1 through Slot 0 Port 10.D. Click Add

114 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideTo access the CP WEB Customization page, click the language link above the

Customizing the Captive Portal Web Page 11517 Captive PortalFigure 62. CP Web Page Customization—Authentication PageFigure 63. CP Web Page Customiz

116 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 64. CP Web Page Customization—Logout PageFigure 65. CP Web Page Cus

Captive Port Rate Limiting 11717 Captive PortalCaptive Port Rate LimitingThis feature is also supported only by the DWL-8600AP. It is not supported

118 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideDescription: Maximum number of octets the user is allowed to receive. Afte

Overview 11918Port SecurityThis section describes the Port Security feature.OverviewPort Security:• Allows for limiting the number of MAC addresses on

12 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

120 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideCLI ExamplesThe following are examples of the commands used in the Port Se

Web Examples 12118 Port SecurityWeb ExamplesThe following Web pages are used in the Port Security feature.Figure 66. Port Security AdministrationFi

122 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 68. Port Security Statically Configured MAC AddressesTo view Port S

Web Examples 12318 Port SecurityFigure 70. Port Security Violation Status

124 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Client Name in Local MAC Authentication List 12519RADIUSMaking use of a single database of accessible information – as in an Authentication Server – c

126 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideThe client name is assigned at the time of creating client entry in the lo

RADIUS Configuration Examples 12719 RADIUSNOTE: RADIUS failthrough mode is not available for Captive Portal client authenti-cation and RADIUS-based

128 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guidesecret1secret1radius server host auth 11.11.11.11radius server key auth 11

RADIUS Configuration Examples 12919 RADIUSFigure 73. Configuring the RADIUS Server

13 List of TablesList of TablesTable 1. Quick Start up Software Version Information . . . . . . . . . . . . . . . . . . . . 22Table 2. Quick Start

130 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 74. Create an Authentication ListFigure 75. Configure the Authentic

RADIUS Configuration Examples 13119 RADIUSFigure 76. Set the User LoginConfiguring RADIUS Fail-through on a Managed APThis example configures a sec

132 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideEnabling Failthrough Mode at the Global LevelEnabling Failthrough Mode for

TACACS+ Configuration Example 13320TACACS+TACACS+ (Terminal Access Controller Access Control System) provides access control for networked devices via

134 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 77. DWS-3000 with TACACS+When a user attempts to log into the switc

TACACS+ Configuration Example 13520 TACACS+Configuring TACACS+ by Using the Web InterfaceThe following Web screens show how to perform the configur

136 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 80. Create an Authentication List (TACACS+)Figure 81. Configure the

TACACS+ Configuration Example 13720 TACACS+Figure 82. Set the User Login (TACACS+)

138 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Ingress Port Configuration 13921Class of Service QueuingThe Class of Service (CoS) feature lets you give preferential treatment to certain types of tr

14 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

140 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideCoS Mapping Table for Trusted PortsMapping is from the designated field va

CLI Examples 14121 Class of Service QueuingFigure 83. CoS Mapping and Queue ConfigurationContinuing this example, you configured the egress Port 0/

142 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 84. CoS Configuration Example System DiagramYou will configure the

Web Examples 14321 Class of Service QueuingWeb ExamplesThe following web pages are used for the Class of Service feature.Figure 85. 802.1p Priority

144 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 87. IP DSCP Mapping Configuration PageFigure 88. CoS Interface Conf

Web Examples 14521 Class of Service QueuingFigure 89. CoS Interface Queue Configuration PageFigure 90. CoS Interface Queue Status Page

146 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

14722 Differentiated Services22Differentiated ServicesDifferentiated Services (DiffServ) is one technique for implementing Quality of Service (QoS)

148 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideThe Unified Switch supports the Traffic Conditioning Policy type which is

CLI Example 14922 Differentiated Services2. Create a DiffServ class of type “all” for each of the departments, and name them. Define the match crit

Document Organization 15About This BookThis document provides an understanding of the CLI and Web configuration options for D-Link DWS-3000 features.D

150 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guidequeue attribute. It is presumed that the switch will forward this traffic

Using the Web Interface to Configure Diffserv 15122 Differentiated Services3. View information about the DiffServ policy and class configuration. I

152 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 92. DiffServ ConfigurationFigure 93. DiffServ Class Configuration

Using the Web Interface to Configure Diffserv 15322 Differentiated ServicesFigure 94. DiffServ Class Configuration - Add Match CriteriaFigure 95. S

154 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 96. DiffServ Class ConfigurationFigure 97. DiffServ Class Summary

Using the Web Interface to Configure Diffserv 15522 Differentiated ServicesFigure 98. DiffServ Policy ConfigurationFigure 99. DiffServ Policy Confi

156 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 100. DiffServ Policy Class DefinitionFigure 101. Assign Queue

Using the Web Interface to Configure Diffserv 15722 Differentiated ServicesFigure 102. DiffServ Policy SummaryFigure 103. DiffServ Policy Attribute

158 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 104. DiffServ Service ConfigurationFigure 105. DiffServ Service Sum

Using the Web Interface to Configure Diffserv 15922 Differentiated ServicesConfiguring the Color-Aware Attribute by Using the WebThe following scre

16 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide• Management- DHCP Filtering- Traceroute- Configuration Scripting- Outbound

160 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideC. After the screen refreshes, enter values for the Committed Rate and Com

DiffServ for VoIP Configuration Example 16122 Differentiated ServicesDiffServ for VoIP Configuration ExampleOne of the most valuable uses of DiffSe

162 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideConfiguring DiffServ VoIP Support ExampleEnter Global Config mode. Set que

Overview 16323DHCP FilteringThis section describes the Dynamic Host Configuration Protocol (DHCP) Filtering feature.OverviewDHCP filtering provides se

164 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideCLI ExamplesThe commands shown below show examples of configuring DHCP Fil

Web Examples 16523 DHCP FilteringUse the DHCP Filtering Configuration page to configure the DHCP Filtering admin mode on the switch. Figure 107. DH

166 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 109. DHCP Filter Binding Information

CLI Example 16724TracerouteThis section describes the Traceroute feature.Use Traceroute to discover the routes that packets take when traveling on a h

168 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide(DWS-3024) #traceroute ?<ipaddr> Enter IP address.(DWS-3024) #trace

Overview 16925Configuration ScriptingConfiguration Scripting allows you to generate a text-formatted script file that shows the current configuration

In-Band and Out-of-Band Connectivity 171Getting StartedConnect a terminal to the switch to begin configuration.In-Band and Out-of-Band ConnectivityAsk

170 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guidelist Lists all configuration script files present on the switch.show Displ

CLI Examples 17125 Configuration ScriptingExample #5: copy nvram: scriptUse this command to upload a configuration script.(DWS-3024) #copy nvram: s

172 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #7: Validate another Configuration Script(DWS-3024) #script valida

Overview 17326Outbound TelnetThis section describes the Outbound Telnet feature.OverviewOutbound Telnet:• Feature establishes an outbound telnet conne

174 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #1: show network(DWS-3024) >telnet 192.168.77.151Trying 192.168

Web Example 17526 Outbound Telnet<0-5> Configure the maximum number of outbound telnet sessions al

176 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Overview 17727Pre-Login BannerThis section describes the Pre-Login Banner feature.OverviewPre-Login Banner:• Allows you to create message screens when

178 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide(DWS-3024) #copy tftp://192.168.77.52/banner.txt nvram:clibannerMode...

Overview 17928Simple Network Time Protocol (SNTP)This section describes the Simple Network Time Protocol (SNTP) feature.OverviewSNTP:• Used for synchr

18 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideGatewayIP address of the default router, if the switch is a node outside th

180 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #3: show sntp server(DWS-3024) #show sntp serverServer IP Address:

Web Interface Examples 18128 Simple Network Time Protocol (SNTP)Example #6: configuring sntp server(DWS-3024)(Config) #sntp server 192.168.10.234 ?

182 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 113. SNTP Server Configuration PageTo configure SNTP server setting

Web Interface Examples 18328 Simple Network Time Protocol (SNTP)Figure 115. Summer Time Configuration Page

184 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Overview 18529SyslogThis section provides information about the Syslog feature.OverviewSyslog:• Allows you to store system messages and/or errors • Ca

186 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideCLI ExamplesThe following are examples of the commands used in the Syslog

CLI Examples 18729 SyslogExample #3: show logging traplogs(DWS-3024) #show logging traplogsNumber of Traps Since Last Reset... 16Trap L

188 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #5: logging port configuration(DWS-3024) #config(DWS-3024) (Config

Web Examples 18929 SyslogWeb ExamplesThe following web pages are used with the Syslog feature.Figure 116. Log - Syslog Configuration PageFigure 117

In-Band and Out-of-Band Connectivity 191 Getting StartedSubnetSubnet mask for the LAN.GatewayIP address of the default router, if the switch is a n

190 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 118. Log - Hosts Configuration Page - Add HostFigure 119. Log - Hos

CLI Example 19130Port DescriptionThe Port Description feature lets you specify an alphanumeric interface identifier that can be used for SNMP network

192 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideConfiguring Port Description with the Web InterfaceUse the following Web s

2 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

20 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideStarting the Switch1. Make sure that the switch console port is connected t

Unified Switch Installation 211 Getting StartedUnified Switch InstallationThis section contains procedures to help you become acquainted quickly wi

22 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideThis command saves the changes to the configuration file. You must be in th

Unified Switch Installation 231 Getting StartedQuick Start up User Account ManagementTable 3. Quick Start up User Account ManagementCommand Details

24 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideQuick Start up IP Address To view the network parameters the operator can a

Unified Switch Installation 251 Getting StartedQuick Start up Uploading from Networking Device to Out-of-Band PC (XMODEM)Quick Start up Downloading

26 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideQuick Start up Downloading from TFTP ServerBefore starting a TFTP server do

Configuring for Web Access 272Using the Web InterfaceThis chapter is a brief introduction to the Web interface — it explains how to access the Web-bas

28 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideStarting the Web InterfaceFollow these steps to start the switch Web interf

Starting the Web Interface 292 Using the Web InterfaceFigure 2. Web Interface Panel-Example Configuring an SNMP V3 User ProfileConfiguring an SNMP

3Table of ContentsList of Figures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9List of Tables . . . . . . .

30 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide2. Using the User pull-down menu, select Create to create a new user.3. Ent

Starting the Web Interface 312 Using the Web InterfaceSwitching the Date/Time ZoneTo configure the system date and time, from the Administration na

32 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

333Virtual LANsAdding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN s

34 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideVLAN Configuration ExampleThe diagram in this section shows a switch with f

CLI Examples 353 Virtual LANsCLI ExamplesThe following examples show how to create VLANs, assign ports to the VLANs, and assign a VLAN as the defau

36 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide(DWS-3024) (Interface 0/4)#exit(DWS-3024) (Config)#exitExample #4: Assign V

Private Edge VLANs 373 Virtual LANsTo specify the handling of untagged frames on receipt use the LAN> L2 Features > VLAN > Port Configurat

38 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideCLI ExampleExample #1: switchport protected(DWS-3024) #config(DWS-3024) (Co

Voice VLAN 393 Virtual LANsFigure 8. Voice VLAN ConfigurationThe Voice VLAN Configuration page contains the following fields:• Voice VLAN Admin Mod

4 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide4 Storm Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

40 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

CLI Example 414Storm ControlA traffic storm is a condition that occurs when incoming packets flood the LAN, which creates performance degradation in t

42 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide<rate> Enter the storm-control threshold as percent

Web Interface 434 Storm ControlWeb InterfaceThe Storm Control configuration options are available on the Port Configuration Web page under the Admi

44 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

CLI Example 455Trunking (Link Aggregation)This section shows how to use the Trunking feature (also known as Link Aggregation) to configure port-channe

46 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 10 shows the example network.Figure 10. LAG/Port-channel Example Net

CLI Example 475 Trunking (Link Aggregation)(DWS-3024) #show port-channel all Port- LinkLog. Channel Adm. Tra

48 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideWeb Interface Configuration — LAGs/Port-channelsTo perform the same configu

Overview 496IGMP SnoopingThis section describes the Internet Group Management Protocol (IGMP) feature: IGMPv3 and IGMP Snooping. The IGMP Snooping fea

5CLI Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70Example 1. Enabling Routing for the Swi

50 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #2: show mac-address-table igmpsnooping(DWS-3024) #show mac-address

Web Examples 516 IGMP SnoopingWeb ExamplesThe following web pages are used in the IGMP Snooping feature. Click Help for more information on the web

52 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 13. IGMP Snooping - Interface Configuration PageFigure 14. IGMP Snoo

Web Examples 536 IGMP SnoopingFigure 15. IGMP Snooping - VLAN Status PageFigure 16. IGMP Snooping - Multicast Router Statistics Page

54 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 17. IGMP Snooping - Multicast Router Configuration PageFigure 18. IG

Web Examples 556 IGMP SnoopingFigure 19. IGMP Snooping - Multicast Router VLAN Configuration Page

56 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Overview 577Port MirroringThis section describes the Port Mirroring feature, which can serve as a diagnostic tool, debugging tool, or means of fending

58 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #2: Show the Port Mirroring Session(DWS-3024) #show monitor session

Web Examples 597 Port MirroringWeb ExamplesThe following web pages are used with the Port Mirroring feature.Figure 20. Multiple Port MirroringFigur

6 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #8: Show MAC Access Lists . . . . . . . . . . . . . . . . . . . . .

60 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 22. System - Port Utilization Summary

CLI Examples 618Link Layer Discovery ProtocolThe Link Layer Discovery Protocol (LLDP) feature allows individual interfaces on the switch to advertise

62 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide(DWS-3024) #Example #2: Set Interface LLDP ParametersThe following commands

Using the Web Interface to Configure LLDP 638 Link Layer Discovery ProtocolUsing the Web Interface to Configure LLDPThe LLDP menu page contains lin

64 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideUse the LLDP Interface Configuration screen to specify transmit and receive

Using the Web Interface to Configure LLDP 658 Link Layer Discovery ProtocolFigure 25. LLDP Interface SummaryFigure 26. LLDP StatisticsYou can also

66 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Overview 679Denial of Service Attack ProtectionThis section describes the D-Link DWS-3000 switch’s Denial of Service Protection feature.OverviewDenial

68 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFirst Fragment Mode... EnableMin TCP Hdr Size...

Port Routing Configuration 6910Port RoutingThe first networks were small enough for the end stations to communicate directly. As networks grew, Layer

7Queue Management Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140CLI Examples . . . . . . . . . . . . . . . . . .

70 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide• Routing Table Object - responsible for maintaining the routing table popu

CLI Examples 7110 Port RoutingNetwork directed broadcast frames are dropped and the maximum transmission unit (MTU) size is 1500 bytes.config inte

72 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideUsing the Web Interface to Configure RoutingUse the following screens to pe

VLAN Routing Configuration 7311VLAN RoutingYou can configure the Unified Switch with some ports supporting VLANs and some supporting routing. You can

74 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 31. VLAN Routing Example Network DiagramExample 1: Create Two VLANsT

CLI Examples 7511 VLAN RoutingNext specify the VLAN ID assigned to untagged frames received on the ports.config interface 0/1 vlan pvid 10 ex

76 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideUsing the Web Interface to Configure VLAN RoutingYou can perform the same c

Using the Web Interface to Configure VLAN Routing 7711 VLAN RoutingUse the LAN> L3 Features > VLAN Routing > Configuration page to enable

78 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideUse the LAN> L3 Features > IP > Interface Configuration page to en

CLI Examples 7912Virtual Router Redundancy ProtocolWhen an end station is statically configured with the address of the router that will handle its ro

8 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide27 Pre-Login Banner . . . . . . . . . . . . . . . . . . . . . . . . . . . .

80 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 37. VRRP Example Network ConfigurationExample 1: Configuring VRRP on

CLI Examples 8112 Virtual Router Redundancy ProtocolSpecify the IP address that the virtual router function will recognize. Note that the virtual I

82 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideUsing the Web Interface to Configure VRRPUse the following screens to perfo

Using the Web Interface to Configure VRRP 8312 Virtual Router Redundancy ProtocolTo enable VRRP for the switch, use the LAN> L3 Features > VR

84 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Overview 8513Proxy Address Resolution Protocol (ARP)This section describes the Proxy Address Resolution Protocol (ARP) feature.Overview• Proxy ARP all

Web Example 86Example #2: ip proxy-arpDWS-3024) (Interface 0/24)#ip proxy-arp ?<cr> Press Enter to execute the command.(DWS-

Overview 8714Routing Information Protocol (RIP)This section describes the Routing Information Protocol (RIP). RIP is an Interior Gateway Protocol (IGP

88 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideFigure 43. RIP ConfigurationRIP Interface ConfigurationUse the Interface Co

RIP Route Redistribution Configuration 8914 Routing Information Protocol (RIP)Figure 45. RIP Route Redistribution Configuration

9 List of FiguresList of FiguresFigure 1. Web Interface Panel-Example ... 28Figure 2. We

90 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide

Overview 9115Access Control Lists (ACLs)This section describes the Access Control Lists (ACLs) feature.OverviewAccess Control Lists (ACLs) are a colle

92 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration Guide• The order of the rules is important: when a packet matches multiple rules

ACL Configuration Process 9315 Access Control Lists (ACLs)ACL Configuration ProcessTo configure ACLs, follow these steps:• Create a MAC ACL by spec

94 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #1: Create ACL 179 and Define an ACL RuleAfter the mask has been ap

MAC ACL CLI Examples 9515 Access Control Lists (ACLs)Example #5: Specify MAC ACL Attributes(DWS-3024) (Config)#mac access-list extended mac1(DWS-30

96 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideExample #6 Configure MAC Access Group(DWS-3024) (Config)#interface 0/5(DWS-

MAC ACL CLI Examples 9715 Access Control Lists (ACLs)Example #7 Set up an ACL with Permit Action(DWS-3024) (Config)#mac access-list extended mac2(D

98 © 2001- 2011 D-Link Corporation. All Rights Reserved.Configuration GuideWeb ExamplesUse the Web pages in this section to configure and view MAC acc

Web Examples 9915 Access Control Lists (ACLs)Figure 49. MAC ACL Rule Configuration Page - Add Destination MAC and MAC MaskFigure 50. MAC ACL Rule C