วันพุธที่ 12 พฤษภาคม พ.ศ. 2553

DGS-3024

>>> DGS-3024 Confige VLAN and Trunk

>> First Time Connecting to The Switch

The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch.
**NOTE: The passwords used to access the Switch are case-sensitive; therefore, "S" is not the same as "s."

When you first connect to the Switch, you will be presented with the first login screen (shown below).
**NOTE: Press Ctrl+R to refresh the screen. This command can be used at any time to force the console program in the Switch to refresh the console screen.

Press Enter in both the Username and Password fields. You will be given access to the command prompt DGS-3024:4# shown below:
There is no initial username or password. Leave the Username and Password fields blank.

-------------------------------------------------
>>> Link Aggregation (Port Trunking)

Port trunk groups are used to combine a number of ports together to make a single high-bandwidth data pipeline.
**NOTE: Static Type Link Aggregation is usually referred as “Port Trunking.” In this section, the terms “Link Aggregation” and “Port Trunking” will be used synonymously.

The DGS-3024 supports up to four port trunk groups with 2 to 8 ports in each group. A potential bit rate of 8000 Mbps can be achieved.
The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent.

**NOTE: If any ports within the trunk group become disconnected, packets intended for the disconnected port will be load shared among the other uplinked ports of the port trunking group.
Port trunking allows several ports to be grouped together and to act as a single link. This gives a bandwidth that is a multiple of a single link's bandwidth.

Port trunking is most commonly used to link a bandwidth intensive network device or devices, such as a server, to the backbone of a network.

The Switch allows the creation of up to four port trunking groups, each group consisting of 2 to 8 links (ports). The aggregated links must be contiguous (they must have sequential port numbers) except the two (optional) Gigabit ports, which can only belong to a single port trunking group. All of the ports in the group must be members of the same VLAN, and their STP status, static multicast, traffic control, traffic segmentation and 802.1p default priority configurations must be identical. Port locking, port mirroring and 802.1x must not be enabled on the trunk group. Further, the aggregated links must all be of the same speed and should be configured as full duplex.

The Master Port of the group is to be configured by the user, and all configuration options, including the VLAN configuration that can be applied to the Master Port, are applied to the entire port trunking group.

Load sharing is automatically applied to the ports in the trunking group, and a link failure within the group causes the network traffic to be directed to the remaining links in the group.

The Spanning Tree Protocol will treat a port trunking group as a single link, on the Switch level. On the port level, the STP will use the port parameters of the Master Port in the calculation of port cost and in determining the state of the port trunking group. If two redundant port trunking groups are configured on the Switch, STP will block one entire group, in the same way STP will block a single port that has a redundant link.

To configure port trunking, click on the Link Aggregation hyperlink in the Configuration folder to bring up the following window

To configure port trunk groups, click the Add button to add a new trunk group and use the Port Trunking Configuration window to set up trunk groups. To modify a port trunk group, click the Modify button corresponding to the entry you wish to alter. To delete a port trunk group, click the corresponding under the Delete heading in the Current Trunking Group Entries table.

- The user-changeable parameters are as follows:
[ Parameter ] [ Description ]
Group ID [1-4]: Select an ID number for the group, between 1 and 4.
State: Trunk groups can be toggled between Enabled and Disabled. This is used to turn a port trunking group on or off. This is useful for diagnostics, to quickly isolate a bandwidth intensive network device or to have an absolute backup aggregation group that is not under automatic control.
Type: The types of port trunking supported by the DGS-3024 are Static and LACP.
Master Port: Choose the Master Port for the trunk group using the pull-down menu.
Port Map: Choose the members of a trunked group. Up to eight ports per group can be assigned to a group.
Active Port: Shows the port that is currently forwarding packets.

After setting the previous parameters, click Apply to allow your changes to be implemented. Successfully created trunk groups will be show in the Current Trunking Group Entries table.

-------------------------------------------------
>>> VLAN Configuration

Default VLANs
The Switch initially configures one VLAN, VID = 1, called "default." The factory default setting assigns all ports on the Switch to the "default."
Packets cannot cross VLANs. If a member of one VLAN wants to connect to another VLAN, the link must be through an external router.
NOTE: If no VLANs are configured on the Switch, then all packets will be forwarded to any destination port. Packets with unknown source addresses will be flooded to all ports. Broadcast and multicast packets will also be flooded to all ports.
An example is presented below:

[VLAN Name] [ VID] [ Switch Ports ]
System (default) 1 5, 6, 7, 8, 21, 22, 23, 24
Engineering 2 9, 10, 11, 12
Marketing 3 13, 14, 15, 16
Finance 4 17, 18, 19, 20
Sales 5 1, 2, 3, 4


- VLAN and Trunk Groups
The members of a trunk group have the same VLAN setting. Any VLAN setting on the members of a trunk group will apply to the other member ports.
**NOTE: In order to use VLAN segmentation in conjunction with port trunk groups, first set the port trunk group(s), and then configure VLAN settings. To change the port trunk grouping with VLANs already in place, users will not need to reconfigure the VLAN settings after changing the port trunk group settings. VLAN settings will automatically change in conjunction with the change of the port trunk group settings.

- Static VLAN Entry
In the Configuration folder, open the VLANs folder and click the Static VLAN Entry link to open the following window:

The first 802.1Q Static VLANs window lists all previously configured VLANs by VLAN ID and VLAN Name. To delete an existing 802.1Q VLAN, click the corresponding button under the Delete heading.
To create a new 802.1Q VLAN, click the Add button in the first 802.1Q Static VLANs window. A new window will appear, as shown below, to configure the port settings and to assign a unique name and number to the new VLAN. See the table below for a description of the parameters in the new window.

To return to the first 802.1Q Static VLANs window, click the Show All Static VLAN Entries link. To change an existing 802.1Q VLAN entry, click the Modify button of the corresponding entry you wish to modify. A new window will appear to configure the port settings and to assign a unique name and number to the new VLAN. See the table below for a description of the parameters in the new window.

The following fields can then be set in either the Add or Modify 802.1Q Static VLANs windows:

[Parameter] [Description]
VID (VLAN ID): Allows the entry of a VLAN ID in the Add window, or displays the VLAN ID of an existing VLAN in the Modify window. VLANs can be identified by either the VID or the VLAN name.
VLAN Name : Allows the entry of a name for the new VLAN in the Add window, or for editing the VLAN name in the Modify window.
Advertisement : Enabling this function will allow the Switch to send out GVRP packets to outside sources, notifying that they may join the existing VLAN.

-Port Settings - Allows an individual port to be specified as member of a VLAN.
Tag: Specifies the port as either 802.1Q tagging or 802.1Q untagged. Checking the box will desig-nate the port as Tagged.
None: Allows an individual port to be specified as a non-VLAN member.
Egress: Select this to specify the port as a static member of the VLAN. Egress member ports are ports that will be transmitting traffic for the VLAN. These ports can be either tagged or untagged.
Forbidden: Select this to specify the port as not being a member of the VLAN and that the port is forbidden from becoming a member of the VLAN dynamically.

Click Apply to implement changes made.

-------------------------------------------------

>>> 802.1Q Port Settings
In the Configuration menu, open the VLANs folderand click 802.1Q Port Settings.
This GVRP Settings window (shown below), allowsyou to determine whether the Switch will share itsVLAN configuration information with other GARPVLAN Registration Protocol (GVRP) enabled Switches.In addition, Ingress Checking can be used to limit trafficby filtering incoming packets whose PVID does notmatch the PVID of the port. Results can be seen in thetable under the configuration settings, as seen below.

- The following fields can be set:

[Parameter] [Description]
From/To : These two fields allow you to specify the range of ports that will be included in the VLAN that you are creating using the GVRP Settings window.

Ingress Check : This field can be toggled using the space bar between Enabled and Disabled. Enabled enables the port to compare the VID tag of an incoming packet with the PVID number assigned to the port. If the two are different, the port filters (drops) the packet. Disabled disables ingress filtering. Ingress Checking is Disabled by default.

Frame Type : This field denotes the type of frame that will be accepted by the port. The user may choose between Tagged Only, which means only VLAN tagged frames will be accepted, and Admit_All, which means both tagged and untagged frames will be accepted. Admit_All is enabled by default.

PVID : This field in the 802.1Q Port Table shows the current PVID assignment for each port, which may be manually assigned to a VLAN when created in the 802.1Q Port Settings table. The Switch's default is to assign all ports to the default VLAN with a VID of 1.The PVID is used by the port to tag outgoing, untagged packets, and to make filtering decisions about incoming packets. If the port is specified to accept only tagged frames - as tagging, and an untagged packet is forwarded to the port for transmission, the port will add an 802.1Q tag using the PVID to write the VID in the tag. When the packet arrives at its destination, the receiving device will use the PVID to make VLAN forwarding decisions. If a packet is received by the port, and Ingress filtering is Enabled, the port will compare the VID of the incoming packet to its PVID. If the two are unequal, the port will drop the packet. If the two are equal, the port will receive the packet.

GVRP : The Group VLAN Registration Protocol (GVRP) enables the port to dynamically become a member of a VLAN. GVRP is Disabled by default.

Click Apply to implement changes made.

-------------------------------------------------