Page 1 D-Link ™ DES-3250TG Standalone Layer 2 Switch User’s Guide...
Page 2 Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
Page 3: Table Of Contents
Gigabit Combo Ports... 8 LED Indicators ... 9 Connecting The Switch... 10 Switch to End Node ... 10 Switch to Hub or Switch ... 10 10BASE-T Device ... 11 100BASE-TX Device ... 11 Switch Management and Operating Concepts ... 12 Local Console Management ...
Page 4 Configuration ... 40 IP Address... 41 Switch Information... 43 Advanced Settings... 44 Port Configuration... 45 Port Mirroring ... 47 Link Aggregation ... 48 IGMP... 50 Spanning Tree... 53 Forwarding Filtering... 58 VLANs ... 60 Port Bandwidth ... 65 SNTP Settings ... 66 Port Security ...
Page 5: Intended Readers
Intended Readers The DES-3250 User’s Guide contains information for setup and management and of the DES-3250TG switch. This guide is intended for network managers familiar with network management concepts and terminology. Notes, Notices, and Cautions NOTE: A NOTE indicates important information that helps you make better use of your device.
Page 6: Safety Instructions
• To help avoid damaging your system, be sure the voltage selection switch (if provided) on the power supply is set to match the power available at your location: –...
Page 7 Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack. D-Link DES-3250TG Standalone Layer 2 Switch CAUTION: Installing systems in a rack without the front and side stabilizers installed could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances.
Page 8: Protecting Against Electrostatic Discharge
3. Handle all sensitive components in a static-safe area. If possible, use antistatic floor pads and workbench pads and an antistatic grounding strap. D-Link DES-3250TG Standalone Layer 2 Switch A qualified electrician must perform all connections to DC power and to NOTE: safety grounds.
Page 9: Introduction
This section describes the functionality features of the DES-3250TG. Features The DES-3250TG Switch was designed for easy installation and high performance in an environment where traffic on the network and the number of users increase continuously. Switch features include: Ports •...
Page 10: Traffic Classification And Prioritization
Fully configurable in-band control for SNMP based software. • Flash memory for software upgrades. This can be done in-band via TFTP or out-of-band via the console. • Built-in SNMP management: SNMP V2-MIB (RFC 1907). Bridge MIB (RFC 1493). D-Link DES-3250TG Standalone Layer 2 Switch...
Page 11: Fast Ethernet Technology
IF MIB (RFC 2233). Entity MIB (RFC 2737). RMON MIB (RFC 1757) – 4 groups. The RMON specification defines the Counters for the Receive function only. However, the DES-3250TG implements counters for both receive and transmit functions. 802.1p MIB (RFC 2674).
Page 12: Unpacking And Setup
One AC power cord • This User’s Guide with Registration Card If any item is found missing or damaged, please contact your local D-Link reseller for replacement. Installation Use the following guidelines when choosing a place to install the Switch: •...
Page 13: Rack Installation
Figure 2-1. Installing rubber feet for desktop installation Rack Installation The DES-3250TG can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, attach the mounting brackets on the switch’s side panels (one on each side) and secure them with the screws provided.
Page 14: Power On
Power on The DES-3250TG switch can be used with AC power supply 100 - 240 VAC, 50 - 60 Hz. The power switch is located at the rear of the unit adjacent to the AC power connector and the system fan. The switch’s power supply will adjust to the local power source automatically and may be turned on without...
Page 15: Identifying External Components
● Comprehensive LED indicators display the status of the switch and the network (see the LED Indicators section below). ● An RS-232 DCE console port for setting up and managing the switch via a connection to a console terminal or PC using a terminal emulation program.
Page 16: Side Panels
Gigabit Combo Ports In addition to the 48 10/100 Mbps ports, the Switch features two Gigabit Ethernet Combo ports. These two ports are 1000BASE-T copper ports (provided) and Mini-GBIC ports (optional). See the diagram below to view the two Mini-GBIC port modules being plugged into the Switch.
Page 17: Led Indicators
Switch along with an explanation of each indicator. ● Power – This indicator on the front panel should be lit during the Power-On Self Test (POST). It will light green approximately 2 seconds after the switch is powered on to indicate the ready state of the device.
Page 18: Connecting The Switch
Network Interface Card (NIC) and most routers. An end node can be connected to the Switch via a two-pair Category 3, 4, or 5 UTP/STP cable. The end node should be connected to any of the ports (1x - 48x) on the switch.
Page 19: 10Base-T Device
Figure 4-2. Switch connected to a port on a hub or switch using a straight or crossover cable 10BASE-T Device For a 10BASE-T device, the Switch’s LED indicators should display the following: ● Link/Act indicator is ON. 100BASE-TX Device For a 100BASE-TX device, the Switch’s LED indicators should display the following: ●...
Page 20: Switch Management And Operating Concepts
A network administrator can manage, control, and monitor the switch from the console program. The DES-3250TG contains a CPU, memory for data storage, flash memory for configuration data, operational programs, and SNMP agent firmware. These components allow the switch to be actively managed and monitored from either the console port or the network itself (out-of-band, or in-band).
Page 21: Switch Ip Address
Setting an IP Address The IP address for the switch must be set before it can be managed with the web-based manager. The switch IP address may be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the switch must be known.
Page 22: Snmp
• Modifying the configuration of network devices. The DES-3250TG has a software program called an ‘agent’ that processes SNMP requests, but the user program that makes the requests and collects the responses runs on a management station (a designated computer on the network). The SNMP agent and the user program both use the UDP/IP protocol to exchange packets.
Page 23: Mibs
Blocking state. The trap is not sent if a new root trap is sent for the same transition. • New Root – This trap is sent by the switch whenever a new root port is elected within an STP group.
Page 24: Packet Forwarding
If the Aging Time is too short however, many entries may be aged out too soon. This will result in a high percentage of received packets whose destination addresses cannot be found in the forwarding table, in which case the switch will broadcast the packet to all ports, negating many of the benefits of having a switch.
Page 25: Link Aggregation
Link aggregation is used to combine a number of ports together to make a single high-bandwidth data pipeline. The participating parts are called members of a link aggregation group, with one port D-Link DES-3250TG Standalone Layer 2 Switch 802.1w RSTP...
Page 26: Vlans
Thus, when configuring the ports in a link aggregation group, you only need to configure the master port. The DES-3250TG supports link aggregation groups, which may include from two to eight switch ports each, except for a Gigabit link aggregation group which consists of the two (optional) Gigabit Ethernet ports of the front panel.
Page 27 Notes About VLANs on the DES-3250TG 1. The DES-3250TG supports IEEE 802.1Q VLANs. The port untagging function can be used to remove the 802.1Q tag from packet headers to maintain compatibility with devices that are tag- unaware (that is, network devices that do not support IEEE 802.1Q VLANs or tagging).
Page 28 D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 3. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
Page 29 Tag-aware switches must keep a table to relate PVIDs within the switch to VIDs on the network. The switch will compare the VID of a packet to be transmitted to the VID of the port that is to transmit the packet.
Page 30 If the packet is not tagged with VLAN information, the ingress port will tag the packet with its own PVID as a VID (if the port is a tagging port). The switch then determines if the destination port is a member of the same VLAN (has the same VID) as the ingress port.
Page 31: Ip Addresses
The IP address discussed above is one part and a second number called the Subnet mask is the other part. To make this a bit more confusing, the subnet mask has the same numerical form as an IP address. D-Link DES-3250TG Standalone Layer 2 Switch 0.0.0.0 255.255.255.255 Table 5- 2.
Page 32 Additional bits can be added to the default subnet mask for a given Class to further subnet a network. When a bitwise logical AND operation is performed between the subnet mask and the IP address, the result defines the Subnet Address. D-Link DES-3250TG Standalone Layer 2 Switch 10.42.73.210 Class A IP address 255.0.0.0 Class A Subnet Mask 10.0.0.0...
Page 33 11111111.11100000.00000000.00000000 – and you can see that there are 11 “1”s or 11 bits used to mask the network address from the node address. Written in CIDR notation this becomes: 10.32.0.0/11 # of Bits D-Link DES-3250TG Standalone Layer 2 Switch 10.42.73.210 Class A IP address 255.224.0.0 Subnet Mask 10.32.0.0...
Page 34: Internet Protocols
This is a brief introduction to the suite of Internet Protocols frequently referred to as TCP/IP. It is intended to give the reader a reasonable understanding of the available facilities and some familiarity with terminology. It is not intended to be a complete description. D-Link DES-3250TG Standalone Layer 2 Switch 255.255.128.0 255.255.192.0 1022 255.255.224.0...
Page 35 D-Link DES-3250TG Standalone Layer 2 Switch Protocol Layering The Internet Protocol (IP) divides the tasks necessary to route and forward packets across networks by using a layered approach. Each layer has clearly defined tasks, protocol, and interfaces for communicating with adjacent layers, but the exact way these tasks are accomplished is left to individual software designers.
Page 36 D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 7. The Protocol Stack Between two protocol stacks, members of the same layer are known as peers and communicate by well- known (open and published) protocols. Within a protocol stack, adjacent layers communicate by an internal interface.
Page 37 D-Link DES-3250TG Standalone Layer 2 Switch Layer 3 Commonly referred to as the routing layer, this layer provides logical partitioning of networks (subnetting), scalability, security, and Quality of Service (QoS). The backbone of the Internet is built using Layer 3 functions. IP is the premier Layer 3 protocol.
Page 38: Packet Headers
D-Link DES-3250TG Standalone Layer 2 Switch Because these functions are required by a large number of applications, they are grouped into a single protocol, rather than being the part of the specifications for just sending e-mail. TCP is then a library of routines that application software can use when reliable network communications are required.
Page 39 D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 8. TCP Packet Header When packets have been successfully received, TCP sends an acknowledgement. This is simply a packet that has the acknowledgement number field filled in. An acknowledgement number of 1000 indicates that all of the data up to octet 1000 has been received.
Page 40 D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 9. IP Packet Header The flags and fragment offset are used to keep track of packets that must be divided among several smaller packets to cross networks for which they are too large.
Page 41 IP or MAC address. The user’s computer must be able to determine the remote computer’s address before a connection can be made. A designated computer on D-Link DES-3250TG Standalone Layer 2 Switch TCP ports...
Page 42 D-Link DES-3250TG Standalone Layer 2 Switch the network will contain a database of computer names and their corresponding IP and MAC addresses. The user’s computer will send a query to the name database computer, and the database computer will send a response. Both the query and the response are very short. There is no need to divide the query or response between multiple packets, so the complexity of TCP is not required.
Page 43: Web-Based Switch Management
2 bytes per character). Before You Start The DES-3250TG switch supports a wide array of functions and gives great flexibility and increased network performance by eliminating the routing bottleneck between the WAN or Internet and the Intranet. Its function in a network can be thought of as a new generation of router that performs routing functions in hardware, rather than software.
Page 44: Configuring The Switch
To begin managing your Switch simply run the browser you have installed on your computer and point it to the IP address you have defined for the device. The URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the switch.
Page 45: Save Changes
You can logon again and are now ready to continue configuring the Switch. Save Changes The DES-3250TG has two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective by clicking the Apply button. When this is done, the settings will be immediately applied to the switching software in RAM, and will immediately take effect.
Page 46: Using Web-Based Management
Setting an IP Address The IP address for the switch must be set before it can be managed with the Web-based manager. The switch IP address may be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the switch must be known.
Page 47 IP interface named System and the z represents the corresponding number of subnets in CIDR notation. Using this method, the switch can be assigned an IP address and subnet mask that can then be used to connect a management station to the switch’s Web-based management agent.
Page 48: Configuration
Presents switch information based on your selection and the entry of configuration data. This section, arranged by topic, describes how to perform common monitoring and configuration tasks on the DES-3250TG switch using the Web-based Manager, you can perform any of the tasks described in the following sections.
Page 49: Ip Address
Enter the appropriate IP address and subnet mask. If you want to access the switch from a different subnet from the one it is installed on, enter the IP address of the gateway. If you will manage the switch from the subnet on which it is installed, you can leave the default address in this field.
Page 50 D-Link DES-3250TG Standalone Layer 2 Switch BOOTP server. If this option is set, the Switch will first look for a BOOTP server information before using the default or previously entered settings. DHCP The switch will send out a DHCP broadcast request when it is powered up.
Page 51: Switch Information
(assigned by the factory and unchangeable). In addition, the Boot PROM Version and Firmware Version numbers are shown. This information is helpful to keep track of PROM and firmware updates and to obtain the switch’s MAC address for entry into another network device’s address table – if necessary. D-Link DES-3250TG Standalone Layer 2 Switch...
Page 52: Advanced Settings
Aging Time <300> IGMP <Disabled> GVRP <Disabled> Telnet D-Link DES-3250TG Standalone Layer 2 Switch Description auto Set the age out timer for the serial port time <10 to 2 minutes, 5 minutes, 10 minutes, 15 minutes, or Never.
Page 53: Port Configuration
Asymetric <Disabled> Syslog Global State <Disabled> Port Configuration Click the Port Configuration link in the Configuration menu: D-Link DES-3250TG Standalone Layer 2 Switch Telnet. Toggle Disabled to Enabled. Status To enable the Web status, toggle Disabled to Enabled. Aggregation The Link Aggregation Algorithm can be <Mac...
Page 54 The Auto setting allows the port to automatically determine the fastest settings the port on the device connected to the DES-3250TG can handle, and then use those settings. The other options for ports 1- 48 are 100M/Full, 100M/Half, 10M/Full, and 10M/Half. For Combo ports 49 and 50, if the optional...
Page 55: Port Mirroring
<Auto> Port Mirroring To configure a port for port mirroring: Click Port Mirroring on the Configuration menu: D-Link DES-3250TG Standalone Layer 2 Switch Description Enter the desired range of ports to be configured in these fields. Toggle the State field to either enable or disable a given port.
Page 56: Link Aggregation
– to the backbone of a network. The switch allows the creation of up to six link aggregation groups, each group consisting of up to eight links (ports). All of the ports in the group must be members of the same VLAN. Further, the aggregated links must all be of the same speed and should be configured as full duplex.
Page 57 Master Port in the calculation of port cost and in determining the state of the link aggregation group. If two redundant link aggregation groups are configured on the switch, STP will block one entire group – in the same way STP will block a single port that has a redundant link.
Page 58: Igmp
Figure 6- 15. Current IGMP Snooping Group Entries window To edit an IGMP Snooping entry on the switch, click the Modify button next to the entry on the Current IGMP Snooping Group Entries window: The following fields can be set:...
Page 59 D-Link DES-3250TG Standalone Layer 2 Switch configured. VLAN Name Allows the entry of the name of the VLAN for which IGMP Snooping is to be configured. Query Interval Allows the entry of a value between 1 and 65535 seconds, with a default of length of time between sending IGMP queries.
Page 60 IGMP reports or implement IGMP snooping, a multicast router connected to the router port of the Layer 2 switch would not be able to receive UDP data streams unless the UDP multicast packets were all forwarded to the router port.
Page 61: Spanning Tree
Member Ports Spanning Tree The Spanning Tree Protocol (STP) operates on two levels: on the switch level, the settings are globally implemented. On the port level, the settings are implemented on a user-defined Group of ports basis. STP Switch Settings...
Page 62 Spanning Tree Protocol <Disabled> Bridge Max Age (6-40 Sec) <20 > D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 19. Switch Spanning Tree Settings window Description This field can be toggled between Enabled and Disabled using the pull- down menu. This will enable or disable the Spanning Tree Protocol (STP), globally, for the switch.
Page 63 Max. Age ≥ 2 x (Hello Time + 1 second) STP Port Settings The Spanning Tree Protocol (STP) operates on two levels: on the switch level, the settings are globally implemented. On the port level, the settings are implemented on a user-defined Group of ports basis.
Page 64 D-Link DES-3250TG Standalone Layer 2 Switch To configure STP, click the Spanning Tree folder on the Configuration menu and then click on the STP Port Settings link: Figure 6- 20. STP Port Settings window...
Page 65 In addition to setting Spanning Tree parameters for use on the switch level, the switch allows for the configuration of a group of ports. This STP Group will use the switch-level parameters entered above, with the addition of Port Priority and Port Cost.
Page 66: Forwarding Filtering
Unicast Forwarding To enter a MAC address into the switch’s forwarding table, click on the Forwarding Filtering folder on the Configuration menu and then click Unicast Forwarding: Figure 6- 21. Setup Static Unicast Forwarding Table window...
Page 67 Filtering folder on the Configuration menu and then click Multicast Forwarding: Figure 6- 22. Static Multicast Forwarding Settings window To add a new multicast MAC address to the switch’s forwarding table, click the Add button: Figure 6- 23. Setup Static Multicast Forwarding Table window...
Page 68: Vlans
To delete an existing 802.1Q VLAN, click the corresponding click-box to the left of the VLAN you want to delete from the switch and then click the Delete button. To create a new 802.1Q VLAN, click the Add button: D-Link DES-3250TG Standalone Layer 2 Switch Select the port number on which the MAC address entered above resides.
Page 69 VLAN Name Advertisement Port Tagged/None None D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 26. (Modify) 802.1Q Static VLAN window Description Allows the entry of a VLAN ID in the Add window, or displays the VLAN ID of an existing VLAN in the Modify window.
Page 70 Egress Forbidden The 802.1Q Port Settings window, shown below, allows you to determine whether the switch will share its VLAN configuration information with other GVRP (GARP VLAN Registration Protocol)-enabled switches. In addition, Ingress can be used to limit traffic by filtering incoming packets whose PVID does not match the PVID of the port.
Page 71 D-Link DES-3250TG Standalone Layer 2 Switch Port VLAN ID(PVID)
Page 72 The following fields can be set: Parameter From and To PVID GVRP <Disabled> Ingress <Disabled> D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 27. 802.1Q Port Settings window Description Enter the desired ports in these two fields. Port VLAN classification...
Page 73: Port Bandwidth
Status between Enabled and Disabled. Click Apply to let your change take effect. Port Bandwidth The Bandwidth Settings window allows you to set and display the Ingress bandwidth and Egress bandwidth of specified ports on the switch. D-Link DES-3250TG Standalone Layer 2 Switch packet. Disabled disables Ingress filtering.
Page 74: Sntp Settings
Enabled in the fourth field, or if you prefer, manually enter a value in the Rate field, and then click Apply. Please note that if no_limit is Enabled, the Switch will not permit you to set the bandwidth rate manually.
Page 75 D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 29. Current Time window To use SNTP, toggle the SNTP State in the Current Time: SNTP Settings section to Enabled and enter the IP address of the relay the SNTP Primary Server and/or the SNTP Secondary Server. Enter an SNTP polling interval in the bottom field.
Page 76: Port Security
The port can be locked by changing the Admin State pull-down menu to Enabled, and clicking Apply. This is a security feature that prevents unauthorized computers (with source MAC addresses unknown to the switch prior to locking the port (or ports) from connecting to the switch’s locked ports and gaining access to the network.
Page 77 D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 31. Port Security Settings window The following fields can be set: Parameter Description From & To Use this to specify a consecutively numbered group of ports on the switch for configuration.
Page 78: Qos (Quality Of Service)
<Delete On Reset> QOS (Quality of Service) The DES-3250TG switch supports 802.1p priority queuing. The switch has four priority queues. These priority queues are numbered from 0 — the lowest priority queue — to 3 — the highest priority queue.
Page 79 Remember that the DES-3250TG has four priority queues (and thus four Classes of Service) for each port on the switch. Traffic Control This window allows you to manage traffic control on the switch. Click Traffic control in the QoS folder on the Configuration menu:...
Page 80 Threshold <128> 802.1p Default Priority The switch allows the assignment of a default 802.1p priority to each port on the switch. Click 802.1p default_priority in the QoS folder on the Configuration menu: D-Link DES-3250TG Standalone Layer 2 Switch threshold set above.
Page 81 D-Link DES-3250TG Standalone Layer 2 Switch...
Page 82 0 − the lowest priority − to 7 − the highest priority. 802.1p User Priority The DES-3250TG allows the assignment of a Class of Traffic to each of the 802.1p priorities. Click 802.1p user_priority in the QoS folder on the Configuration menu: Figure 6- 34.
Page 83 D-Link DES-3250TG Standalone Layer 2 Switch (QOS Output) Scheduling Click QoS on the Configuration menu, and then click scheduling: Figure 6- 35. QoS Output Scheduling window The Max. Packets(O-255) field specifies the number of packets that a queue will transmit before surrendering the transmit buffer to the next lower priority queue in a round-robin fashion.
Page 84 D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 36. Traffic Segmentation Setting window Enter a source port number in the first field and the range of the ports that you want to segment in the second field. For example, if you enter “5” in the first field and “5-8” in the second field, packets from...
Page 85: Lacp
LACP The DES-3250TG supports Link Aggregation Control Protocol. LACP allows you to bundle several physical ports together to form one logical port. After the LACP negotiation, these candidates for trunking ports can be trunked as a logical port. If any one of the connected port pairs does not have LACP capability, these two ports will stand as regular ports until the LACP negotiation is successfully completed.
Page 86: Lacp Port
D-Link DES-3250TG Standalone Layer 2 Switch LACP Port Figure 6- 39. Link Aggregation Settings window...
Page 87: Access Profile Table
MAC source address or the IP destination address. The second part is entering the criteria the switch will use to determine what to do with the frame. The entire process is described below in two parts.
Page 88 Source MAC/IP Mask Destination MAC/IP Mask 802.1p D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 42. Access Profile (IP) Configuration window Description Type in a unique identifier number for this profile set. This value can be set from 1 to 255.
Page 89 D-Link DES-3250TG Standalone Layer 2 Switch each packet header and use this as the, or part of the criterion for forwarding. Dscp Selecting this option instructs the switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding.
Page 90 To create a new rule set for the access profile click the Add button. A new window is displayed. To remove a previously created rule, select it and click the Delete button. D-Link DES-3250TG Standalone Layer 2 Switch form (hex 0x0-0xffff).
Page 91: System Log Servers
Replace Dscp System Log Servers Click Add to add an entry to the table in the window above. D-Link DES-3250TG Standalone Layer 2 Switch Description This is the identifier number for this profile set. Type in a unique identifier number for this access.
Page 92: Pae Access Entity
Enter the desired system log server information and then click Apply to let your changes take effect. PAE Access Entity The DES-3250TG implements the server-side of the IEEE 802.1x Port-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the switch that a user or network device must meet before allowing that port to forward or receive frames.
Page 93 Figure 6- 48. Second 802.1X Authenticator Settings window Configure the following 802.1x port settings: Parameter Port AdmDir D-Link DES-3250TG Standalone Layer 2 Switch Description Port being configured for 802.1x settings. From the pull-down menu, select whether a controlled Port that is...
Page 94 Existing 802.1x port settings are displayed and can be configured using the window below. Click Port Capability Settings on the PAE Access Entity folder on the Configuration menu to open the 802.1X Capability Settings window: D-Link DES-3250TG Standalone Layer 2 Switch unauthorized will exert control over communication in both receiving and transmitting directions, or just the receiving direction.
Page 95 D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 49. 802.1X Capability Settings window...
Page 96 To set up the switch’s 802.1x port-based authentication, select which ports are to be configured in the From and To fields. Next, enable the ports by selecting Authenticator from the drop-down menu under Capability. Click Apply to let your change take effect.
Page 97 Port MAC Address Auth State BackendState Oper Dir PortStatus D-Link DES-3250TG Standalone Layer 2 Switch Request, Response, Success, Fail, Timeout, Idle, Initialize, and N/A. Operational Directions are both and in. The status of the controlled port can be authorized, unauthorized, or N/A.
Page 98 RADIUS Server The RADIUS feature of the switch allows you to facilitate centralized user administration as well as providing protection against a sniffing, active hacker. The Web Manager offers three windows. Click Radius Server on the PAE Access Entity folder on the Configuration menu to open the Radius Server Authentication Setting window: Figure 6- 52.
Page 99: Management
D-Link DES-3250TG Standalone Layer 2 Switch Management The DES-3250TG allows you to manage the switch via the Management menu. The menu consists of the following folders and screens: Security IP, User Accounts, and SNMPV3. See below for further description. Security IP...
Page 100: Snmpv3
Changes command on the Maintenance menu - if you want these changes to be permanent. SNMPV3 The DES-3250TG supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. The SNMP version used to monitor and control the switch can be specified by the administrator. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 101 User Name Group Name SNMP Version If Encryption (V3 only) is D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 57. SNMP User Table Configuration window Figure 6- 58. SNMP User Table Display window Description Type in the new SNMP V3 user name or community string for V1 or V2.
Page 102 To create a new entry, click the Add button, a separate window will appear. D-Link DES-3250TG Standalone Layer 2 Switch In the Space provided, type an alphanumeric sting of between 8 and...
Page 103 To delete an existing entry, click the selection button in the Delete column on the far right that corresponds to the port you want to remove. To create a new entry, click the Add button, a separate window will appear. D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 60. SNMP View Table Configuration window Description Type an alphanumeric string of up to characters.
Page 104 Read View Name Write View Name Notify View Name Security Model D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 62. SNMP Group Table Configuration window Figure 6- 63. SNMP Group Table Display window Description Type an alphanumeric string of up to characters.
Page 105 Use this table to create an SNMP community string to define the relationship between the SNMP manager and an agent. The community string acts like a password to permit access to the agent on the switch. One or more of the following characteristics can be associated with the community string: •...
Page 106 Configure the following for the new SNMP Community entry: Parameter Community Name View Name Access Right D-Link DES-3250TG Standalone Layer 2 Switch Description Type an alphanumeric string of up to 32 characters that is used to identify members of an SNMP community.
Page 107 The Engine ID is a unique identifier used for SNMP V3 implementations. This is an alphanumeric string used to identify the SNMP engine on the switch. D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 65. SNMP Host Table window Figure 6- 66. SNMP Host Table Configuration window...
Page 108: Monitoring
To change the Engine ID, type the new Engine ID in the space provided and click the Apply button. Monitoring The DES-3250TG provides extensive network monitoring capabilities that can be viewed under the Monitoring menu. The menu consists of the following folders and screens: Port Utilization, Packets, Errors, Size, MAC Address, IGMP Snooping Group, IGMP Snooping Forwarding, VLAN Status, Router Port, and Port Access Control.
Page 109: Packets
The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) Figure 6- 69. Rx Packets Analysis window (line graph for Bytes and Packets) D-Link DES-3250TG Standalone Layer 2 Switch seconds. The default value is one second. Number Select number of times the Switch will be polled between 20 and 200.
Page 110 Record [200] Bytes Packets Show/Hide Clear View Table View Line Chart D-Link DES-3250TG Standalone Layer 2 Switch Description Select the desired setting between 1s 60s, where seconds. The default value is one second. Number Select number of times the Switch will be polled between 20 and 200.
Page 111 Figure 6- 72. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields can be set: Parameter Time Interval [1s ] D-Link DES-3250TG Standalone Layer 2 Switch Description Select the desired setting between 1s 60s, where seconds.
Page 112 View Table View Line Chart Transmitted (TX) Figure 6- 73. Tx Packets Analysis window (line graph for Bytes and Packets) D-Link DES-3250TG Standalone Layer 2 Switch Number Select number of times the Switch will be polled between 20 and 200.
Page 113 Record [200] Bytes Packets Show/Hide Clear View Table View Line Chart D-Link DES-3250TG Standalone Layer 2 Switch Description Select the desired setting between 1s 60s, where seconds. The default value is one second. Number Select number of times the Switch will be polled between 20 and 200.
Page 114: Errors
D-Link DES-3250TG Standalone Layer 2 Switch Errors The Web Manager allows port error statistics compiled by the Switch’s management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) Figure 6- 75. Rx Error Analysis window (line graph) Figure 6- 76.
Page 115 D-Link DES-3250TG Standalone Layer 2 Switch Time Interval [1s ] Select the desired setting between 1s seconds. The default value is one second. Record Number Select number of times the Switch [200] will be polled between 20 and 200. The default value is 20.
Page 116 The following fields can be set: Parameter Time Interval [1s ] Record [200] D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 77. Tx Error Analysis window (line graph) Figure 6- 78. Tx Error Analysis window (table) Description Select the desired setting between 1s...
Page 117: Size
View Table View Line Chart Size The Web Manager allows packets received by the Switch, arranged in six groups, to be viewed as either a line graph or a table. Two windows are offered. D-Link DES-3250TG Standalone Layer 2 Switch...
Page 118 Parameter Time Interval [1s ] Record [200] 65-127 128-255 256-511 D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 80. Rx Size Analysis window (table) Description Select the desired setting between 1s 60s, where seconds. The default value is one second.
Page 119: Mac Address
View Line Chart MAC Address This allows the switch’s dynamic MAC address forwarding table to be viewed. When the switch learns an association between a MAC address and a port number, it makes an entry into its forwarding table. These entries are then used to forward packets through the switch.
Page 120 Parameter VLAN ID MAC Address Port Find MAC Address D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 81. MAC Address Table window Description Enter a VLAN ID for the forwarding table to be browsed by. Enter forwarding table to be browsed by.
Page 121: Igmp Snooping Group
Next IGMP Snooping Group This allows the switch’s IGMP Snooping table to be viewed. IGMP Snooping allows the switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the switch. The number of IGMP reports that were snooped is displayed in the Reports field.
Page 122: Vlan Status
This read-only window displays information about the switch’s current VLAN configuration. Router Port This displays which of the switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port in the first two rows of the Router Port window.
Page 123: Port Access Control
TFTP server to the switch. A configuration file can also be loaded into the switch from a TFTP server, switch settings can be saved to the TFTP server, and a history log can be uploaded from the switch to the TFTP server.
Page 124 TFTP Services folder and finally click on the Download Settings from TFTP Server link: Figure 6- 88. Download Settings from TFTP Server window Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server and click Start to initiate the file transfer.
Page 125: Switch History
Click Start to initiate the file transfer. Switch History This allows the Switch History log to be viewed. The switch records all traps, in sequence, that identify events on the switch. The time since the last cold start of the switch is also recorded.
Page 126: Save Changes
IP address until the program is stopped. Save Changes The DES-3250TG has two levels of memory, normal RAM and non-volatile or NV-RAM. To retain any configuration changes permanently, highlight Save Changes on the Maintenance menu. The following screen will appear to verify that your new settings have been saved to NV-RAM.
Page 127: Reset System
D-Link DES-3250TG Standalone Layer 2 Switch Reboot Figure 6- 94. Reboot window Reset Figure 6- 95. Reset window Reset System Figure 6- 96. Reset System window Reset Config Figure 6- 97. Reset Config window...
Page 128: Logout
D-Link DES-3250TG Standalone Layer 2 Switch Logout Figure 6- 98. Logout Web Setup window Click Apply if you want to logout of the Web configuration program and return to the main page.
Page 129: Warranty
ACCIDENT, FIRE, LIGHTNING OR OTHER HAZARD. LIMITATION OF LIABILITY IN NO EVENT WILL D-LINK BE LIABLE FOR ANY DAMAGES, INCLUDING LOSS OF DATA, LOSS OF PROFITS, COST OF COVER OR OTHER INCIDENTAL, CONSEQUENTIAL OR INDIRECT DAMAGES ARISING OUT THE INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE OR...
Page 130: Usa Only
Hardware. Repaired or replacement Hardware will be warranted for the remainder of the original Warranty Period from the date of original retail purchase. If a material defect is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
Page 131 D-Link’s functional specifications for the Software or to refund at D-Link’s sole discretion. Except as otherwise agreed by D-Link in writing, the replacement Software is provided only to the original licensee, and is subject to the terms and conditions of the license granted by D-Link for the Software.
Page 132: Technical Specifications
D-Link DES-3250TG Standalone Layer 2 Switch ECHNICAL General Standards: IEEE 802.3 10BASE-T Ethernet IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3z 1000BASE-SX Gigabit Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1 P/Q VLAN IEEE 802.3x Full-duplex Flow Control ANSI/IEEE 802.3 Nway auto-negotiation...
Page 133 D-Link DES-3250TG Standalone Layer 2 Switch Physical and Environmental Power 30 watts maximum Consumption: DC fans: 2 built-in 40 x 40 x10 mm fans Operating 0 to 40 degrees Celsius Temperature: Storage -40 to 70 degrees Celsius Temperature: Humidity: Operating: 5% to 95% RH non-condensing;...
Page 134: Understanding And Troubleshooting The Spanning Tree Protocol
BPDUs with other switches. This will determine which switch in the network is the best choice for the root switch. If there is only one switch on the network, no BPDU exchange occurs, the forward delay timer expires, and the ports move to the listening state. All STP enabled ports enter the blocking state following switch boot.
Page 135 The listening state is the first transition for a port from the blocking state. Listening is an opportunity for the switch to receive BPDUs that may tell the switch that the port should not continue to transition to the forwarding state, but should return to the blocking state (that is, a different port is a better choice).
Page 136 Discards packets sent from another port on the switch for forwarding. • Adds addresses to its forwarding database. • Receives BPDUs and directs them to the CPU. • Processes and transmits BPDUs received from the CPU. • Receives and responds to network management messages. D-Link DES-3250TG Standalone Layer 2 Switch...
Page 137 Forwards packets sent from another port on the switch for forwarding. • Incorporates station location information into its address database. • Receives BPDUs and directs them to the system CPU. • Receives and responds to network management messages. D-Link DES-3250TG Standalone Layer 2 Switch...
Page 138 Does not add addresses to its forwarding database. • Receives BPDUs, but does not direct them to the system CPU. • Does not receive BPDUs for transmission from the system CPU. • Receives and responds to network management messages. D-Link DES-3250TG Standalone Layer 2 Switch...
Page 139 D-Link DES-3250TG Standalone Layer 2 Switch Troubleshooting STP Spanning Tree Protocol Failure A failure in the STA generally leads to a bridging loop. A bridging loop in an STP environment comes from a port that should be in the blocking state, but is forwarding packets.
Page 140 D-Link DES-3250TG Standalone Layer 2 Switch In this example, B has been elected as the designated bridge and port 2 on C is in the blocking state. The election of B as the designated bridge is determined by the exchange of BPDUs between B and C. B had a better BPDU than C.
Page 141 Resource Errors The DES-3250TG Layer 2 switch performs its switching and routing functions primarily in hardware, using specialized ASICs. STP is implemented in software and is thus reliant upon the speed of the CPU and other factors to converge. If the CPU is over-utilized, it is possible that BPDUs may not be sent in a timely fashion.
Page 142 Generally, if all the users of a given domain are having trouble connecting to the network at the same time, a data loop can be suspected. The port utilization data in the switch’s console will give unusually high values in this case.
Page 143: Index
MAC-based VLANs ... 19 Management... 2 Management Information Base (MIB)... 15 master port ... 17 Max. Age ... 53, 54 D-Link DES-3250TG Standalone Layer 2 Switch MIB... 15 MIB objects ... 15 MIB-II... 15 MIB-II (RFC 1213)... 2 MIBs ... 15 Network Classes Class A, B, C for Subnet Mask...
Page 144 Le Florilege, No. 2, Allea de la Fresnerie, 78330 Fontenay Le Fleury, France TEL: 33-1-3023-8688 FAX: 33-1-3023-8689 URL: www.dlink-france.fr E-MAIL: info@dlink-france.fr Germany D-Link Central Europe/D-Link Deutschland GmbH Schwalbacher Strasse 74, D-65760 Eschborn, Germany TEL: 49-6196-77990 FAX: 49-6196-7799300 URL: www.dlink.de BBS: 49-(0) 6192-971199 (analog) BBS: 49-(0) 6192-971198 (ISDN)
Page 145 Santacruz (East), Mumbai, 400 098 India TEL: 91-022-652-6696/6578/6623 FAX: 91-022-652-8914/8476 URL: www.dlink-india.com, www.dlink.co.in & tushars@dlink-india.com E-MAIL: service@dlink.india.com Italy D-Link Mediterraneo Srl/D-Link Italia Via Nino Bonnet n. 6/B, 20154, Milano, Italy TEL: 39-02-2900-0676 FAX: 39-02-2900-1723 URL: www.dlink.it E-MAIL: info@dlink.it Japan D-Link Japan...
Page 146 U.K. D-Link Europe Floor, Merit House, Edgware Road, Colindale, London NW9 5AB United Kingdom TEL: 44 (0) 20-8731-5555 FAX: 44 (0) 20-8731-5511 BBS: 44 (0) 181-235-5511 URL: www.dlink.co.uk E-MAIL: info@dlink.co.uk U.S.A. D-Link U.S.A. 53 Discovery Drive, Irvine, CA 92618, USA TEL: 1-949-788-0805 FAX: 1-949-753-7033 BBS: 1-949-455-1779 &...
Page 147 EGISTRATION Register your product on-line at: http://support.dlink.com/register Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
Page 148: Registration Card
Engineering Education Finance Retail/Chainstore/Wholesale Government Transportation/Utilities/Communication System house/company Other________________________________ 9. Would you recommend your D-Link product to a friend? Don't know yet 10.Your comments on this product? __________________________________________________________________________________________ * Product installed in computer serial No. Personal Use 1000 or more...

D-Link DES-3250TG User Manual

Quick Links

Related Manuals for D-Link DES-3250TG

Summary of Contents for D-Link DES-3250TG

Table of Contents