D-Link DWS-1008 Manuel utilisateur

DWS-1008 User’s Manual

D-Link Systems, Inc. I

Table of Contents

Product Contents

System Requirements

Introduction

Hardware Overview

Features

Installation Overview

Getting Started

Installation

Conﬁguration

CLI Quickstart Command

Accessing the CLI

Conﬁguration Overview

Conﬁguring for Authenticating Users

Conﬁguring APs for Wireless Users

Conﬁguring a Service Proﬁle

Conﬁguring AAA For Administrative and Local Access

Overview of AAA Access

Types of Administrative Access

First-Time Conﬁguration via the Console

Customizing AAA with Globs and Groups

Conﬁguring and Managing Ports and VLANs

Setting the Port Type

Displaying Port Statistics

Conﬁguring and Managing VLANs

Managing the Layer 2 Forwarding Database

Conﬁguring the Aging Timeout Period

Port and VLAN Conﬁguration Scenario

Conﬁguring and Managing IP Interfaces and Services

MTU Support

Conﬁguring and Managing IP Interfaces

Conﬁguring and Managing IP Routes

Managing the Management Services

Managing SSH

Managing Telnet

Conﬁguring and Managing DNS

Conﬁguring and Managing Aliases

Conﬁguring and Managing Time Parameters

Conﬁguring and Managing NTP

Managing the ARP Table

101

102

105

107

DWS-1008 User’s Manual

D-Link Systems, Inc. II

Logging In to a Remote Device

Tracing a Route

IP Interfaces and Services Conﬁguration Scenario

Conﬁguring SNMP

Enabling SNMP Versions

Setting SNMP Security

Conﬁguring a Notiﬁcation Proﬁle

Conﬁguring a Notiﬁcation Target

Enabling the SNMP Service

Displaying SNMP Information

Conﬁguring DWL-8220AP Access Points

Overview

Service Proﬁles

Radio Proﬁles

Conﬁguring Access Points

Specifying the Country of Operation

Conﬁguring AP Port Parameters

Conﬁguring Security

Conﬁguring a Service Proﬁle

Conﬁguring Radio-Speciﬁc Parameters

Assigning a Radio Proﬁle and Enabling Radios

Disabling or Reenabling Radios

Displaying AP Conﬁguration Information

Conﬁguring User Encryption

Conﬁguring WPA

Conﬁguring RSN

Conﬁguring WEP

Encryption Conﬁguration Scenarios

Conﬁguring RF Auto-Tuning

RF AutoTuning Overview

Changing RF AutoTuning Settings

Displaying RF AutoTuning Settings

Wi-Fi Multimedia

How WMM Works in MSS

Disabling or Reenabling WMM

Displaying WMM Information

Conﬁguring and Managing Spanning Tree Protocol

Enabling the Spanning Tree Protocol

Changing Standard Spanning Tree Parameters

Conﬁguring and Managing STP Fast Convergence Features

Displaying Spanning Tree Information

Spanning Tree Conﬁguration Scenario

109

110

111

115

116

120

121

125

127

128

130

139

143

146

152

156

159

166

168

170

176

178

185

188

190

197

203

205

208

209

211

216

219

223

DWS-1008 User’s Manual

D-Link Systems, Inc. III

Conﬁguring and Managing IGMP Snooping

Disabling or Reenabling IGMP Snooping

Disabling or Reenabling Proxy Reporting

Enabling the Pseudo-Querier

Changing IGMP Timers

Enabling Router Solicitation

Conﬁguring Static Multicast Ports

Displaying Multicast Information

Conﬁguring and Managing Security ACLs

About Security Access Control Lists

Creating and Committing a Security ACL

Mapping Security ACLs

Modifying a Security ACL

Using ACLs to Change CoS

Enabling Prioritization for Legacy Voice over IP

Security ACL Conﬁguration Scenario

Managing Keys and Certiﬁcates

Why Use Keys and Certiﬁcates?

About Keys and Certiﬁcates

Creating Keys and Certiﬁcates

Displaying Certiﬁcate and Key Information

Key and Certiﬁcate Conﬁguration Scenarios

Conﬁguring AAA for Network Users

About AAA for Network Users

AAA Tools for Network Users

Conﬁguring 802.1X Authentication

Conﬁguring Authentication and Authorization by MAC Address

Conﬁguring Last-Resort Access

Conﬁguring AAA for Users of Third-Party APs

Assigning Authorization Attributes

Overriding or Adding Attributes Locally with a Location Policy

Conﬁguring Accounting for Wireless Network Users

Displaying the AAA Conﬁguration

Avoiding AAA Problems in Conﬁguration Order

Conﬁguring a Mobility Proﬁle

Network User Conﬁguration Scenarios

Conﬁguring Communication with RADIUS

RADIUS Overview

Before You Begin

Conﬁguring RADIUS Servers

Conﬁguring RADIUS Server Groups

RADIUS and Server Group Conﬁguration Scenario

225

226

227

228

232

234

242

245

249

251

253

255

256

259

263

264

270

275

280

285

289

290

294

303

306

309

310

312

313

320

323

326

DWS-1008 User’s Manual

D-Link Systems, Inc. IV

Managing 802.1X

Managing 802.1X on Wired Authentication Ports

Managing 802.1X Encryption Keys

Managing 802.1X Client Reauthentication

Managing Other Timers

Displaying 802.1X Information

Managing Sessions

About the Session Manager

Displaying and Clearing Administrative Sessions

Displaying and Clearing Network Sessions

Rogue Detection and Countermeasures

About Rogues and RF Detection

Summary of Rogue Detection Features

Conﬁguring Rogue Detection Lists

Enabling Countermeasures

Disabling or Reenabling Active Scan

Enabling AP Signatures

Disabling or Reenabling Logging of Rogues

Enabling Rogue and Countermeasures Notiﬁcations

IDS and DoS Alerts

Displaying RF Detection Information

Managing System Files

About System Files

Working with Files

Managing Conﬁguration Files

Backing Up and Restoring the System

Appendix A - Troubleshooting

Fixing Common Setup Problems

Recovering the System Password

Conﬁguring and Managing the System Log

Running Traces

Using Show Commands

Remotely Monitoring Trafﬁc

Capturing System Information for Technical Support

Appendix B - Supported RADIUS Attribites

Supported Standard and Extended Attributes

Appendix C - DHCP Server

How the MSS DHCP Server Works

Conﬁguring the DHCP Server

Displaying DHCP Server Information

Appendix D - Glossary

Appendix E - Technical Speciﬁcations

Appendix F - Warranty

Appendix G - Registration

328

329

332

334

335

338

340

345

348

350

355

356

362

366

368

372

376

378

380

387

391

392

399

400

405

406

407

409

441

444

449

DWS-1008 User’s Manual

D-Link Systems, Inc.

Product Contents

DWS-1008 8-Port Wireless Switch

Power Supply

Serial Cable for Connection to Console

Rack-Mount Brackets (2)

Rubber Feet (4)

Screws (6)

Install Guide

Manual and Reference Guide on CD

System Requirements

An existing 10/100 Ethernet network

DWL-8220AP Access Point(s)

Warning: Installation must be performed by qualiﬁed service personnel only.

Please follow all warning notices and instructions marked on the product or

included in the documentation. The manufacturer is not responsible for any radio

or TV interference caused by unauthorized modiﬁcations to this equipment.

Such modiﬁcations could void the user’s authority to operate the equipment.

The DWS-1008 switch has been designed and tested to be installed in an

operating ambient temperature of 0° C to +40° C (32° F to 104° F). To reduce

the risk of equipment damage, install equipment with consideration to these

ambient conditions.

DWS-1008 User’s Manual

D-Link Systems, Inc.

Introduction

The D-Link® AirPremier® MobileLAN™ DWS-1008 is a wireless LAN switch optimized for

deployment in the Small-Medium Enterprise (SME) environment. The DWS-1008 is designed

to allow easy user installation and operation yet support advanced wireless switch features

such as secure mobility, policy enforcement, and AAA and 802.1x ofﬂoad capabilities.

The D-Link MobileLAN solution is powered by Trapeze Networks and executes Trapeze

Networks’ Mobility System Software (MSS), which maintains the intelligence of the MobileLAN

system. In addition to managing users’ identities as they roam, the DWS-1008 conﬁgures

and controls all aspects of the complementing DWL-8220AP Wireless Switch Dualband

Access Points.

AAA Authentication Ofﬂoading Capability

The MobileLAN DWS-1008 supports Administration, Authorization, and Authentication (AAA)

policies to ensure maximum security. Rather than checking the identity of a connecting user

from the switch’s local database, user authentication policies can be sent back to an AAA

server for complete veriﬁcation. This ofﬂoading capability ensures that the WLAN will not

overload when clients are simultaneously connecting to the network.

User-Based Authentication Services

This wireless switch delivers Identity-based Networking, which provides user-based services

such as virtual private group membership, personal ﬁrewall ﬁlters, time-of-day/day-of-week

access, encryption type, authentication, usage tracking, location tracking, and associated

network statistics.

Easy Deployment

The DWS-1008 includes eight 10/100 Mbps ports with integrated PoE to enable network

connectivity to any connected DWL-8220AP. It is designed for distributed deployments in

the wiring closet or small or medium ofﬁces. It can support up to six directly connected

DWL-8220APs and up to six more DWL-8220APs connected indirectly.

Maximum Performance With Load Balancing Capabilities

The DWS-1008 performs Layer 2 forwarding and also comes with extensive Layer 3-4 and

identity-tracking capabilities. It integrates seamlessly with wired infrastructures and offers

redundant load-sharing links, 802.1q trunking, spanning tree and per-VLAN spanning tree

(PVST+). It also supports IGMP snooping, which is vital to supporting IP multicast streams.

Introduction

DWS-1008 User’s Manual

D-Link Systems, Inc.

Hardware Overview

Hardware Overview (Front Panel)

Console Port:

The serial console port provides a direct management connection to a DWS-1008 switch’s

command-line interface (CLI). The port has a DB-9 female connector and supports the

EIA-232D signaling standard.

Ethernet Ports (1-6):

The 10/100 Ethernet ports on the DWS-1008 switch provide automatic MDI/MDX, which

automatically crosses over the send and receive signals if required. Ports 1-6 support PoE.

Uplink Ports (7 & 8):

Ports 7 and 8 on the DWS-1008 switch are uplink ports only and do not support PoE.

LEDS:

Link (1-8):

Solid green 100Mbps link is operational.

Solid amber 10Mbps link is operational.

Blinking green Trafﬁc is active on the 100Mbps link.

Blinking amber Trafﬁc is active on the 10Mbps link.

AP (1-6):

Solid green For an DWL-8220AP’s active link, with PoE enabled, all the following

are true:

• Access point has booted.

• Access point has received a valid conﬁguration from the switch.

• Management link with an access point is operational.

Alternating green Access point is booting with an image received from the switch.

and amber If the LED remains in this state indeﬁnitely, the boot or conﬁguration

attempt has failed.

Solid amber PoE is on but no access point is connected to the link.

Blinking amber Access point is not connected or is unresponsive, or there is a PoE

problem.

Unlit Port is not conﬁgured as an AP access port, or PoE is off.

DWS-1008 User’s Manual

D-Link Systems, Inc.

Features

Power Features

Power supplies - The DWS-1008 switch contains one 100-120 VAC auto-sensing AC

power supply.

Management Features

• Serial and network command-line interface (CLI) access—You can access the CLI

through a direct serial connection or through the network using Secure Shell (SSH) or

Telnet.

• Web View manager - Web View is a Web-based application for conﬁguring and

managing a single DWS-1008 switch through a Web browser. Web View creates a

secure connection by using Hypertext Transfer Protocol over Secure Sockets Layer

(HTTPS).

IP Services

• IP interfaces - You can conﬁgure an IP interface for each VLAN.

• IP ping and traceroute - You can test IP connectivity between the switch and other

devices.

• Domain Name Service (DNS) - You can conﬁgure the switch to use DNS servers for

name resolution. You also can conﬁgure a default domain name to append to

hostnames.

• Network Time Protocol (NTP) - The DWS-1008 switch can sets its time and date

by polling an NTP server.

• System log - The DWS-1008 generates log messages to log system events. The log

messages are stored locally and also can be exported to syslog servers.

• Simple Network Management Protocol (SNMP) - A DWS-1008 switch can be

conﬁgured to generate SNMP traps for major system events.

Features

DWS-1008 User’s Manual

D-Link Systems, Inc.

Installation Overview

Caution: The DWS-1008 switch has been designed and tested to be installed in an operating

ambient temperature of 0° C to +40° C (32° F to 104° F). To reduce the risk of equipment

damage, install equipment with consideration to these ambient conditions.

Serial Console Cable

The serial console port has a female DB-9 connector and supports the EIA-232D signaling

standard. You need a standard DB-9-male-to-DB-9-female PC modem cable.

Serial Console Pin Signals

Switch Pin Usage PC Pin Usage

2 Receive 3 Transmit

3 Transmit 2 Receive

5 Ground 5 Ground

10/100 Ethernet Cable Wiring

Connections on the 10/100 ports require CAT5 cable based on the EIA/TIA-586 standard.

The 10/100 Ethernet ports on the DWS-1008 switch provide automatic MDI/MDX, which

automatically crosses over the send and receive signals if required.

The table below lists the pin signals for 10/100 Ethernet straight-through wiring. Pins 4, 5,

7, and 8 are used only when Power over Ethernet (PoE) is enabled on the port. RD means

Receive Data and TD means Transmit Data.

DWS Switch Other Device

Pin Function Pin Function

1 RD+ 1 TD+

2 RD- 2 TD-

3 TD+ 3 RD+

4 PoE+ 4 PoE+

5 PoE+ 5 PoE+

6 TD- 6 RD-

7 PoE- 7 PoE-

8 PoE- 8 PoE-

Note: Mounting a DWL-8220AP access point on a solid surface requires CAT5 cable that

does not have strain relief. For installation on all other surfaces, you can use CAT5 cable

with or without strain relief.

Autres manuels pour DWS-1008

Table des matières

Autres manuels D-Link Changer

D-Link

D-Link DES-1228P - Web Smart Switch Manuel utilisateur

D-Link

D-Link EasySmart DGS-1100-08PLV2 Manuel utilisateur

D-Link

D-Link DXS-3250E - xStack Switch Manuel utilisateur

D-Link

D-Link DES-1009G Manuel utilisateur

D-Link

D-Link DKVM-2K Manuel utilisateur

D-Link

D-Link RG-S8614 Manuel d'installation et d'exploitation

D-Link

D-Link GS-1510-28P Manuel utilisateur

D-Link

D-Link DFE-908x Manuel utilisateur

D-Link

D-Link DES-1024D Manuel utilisateur

D-Link

D-Link DGS-1210-10 Manuel utilisateur

D-Link

D-Link DGS-1010MP Manuel utilisateur

D-Link

D-Link xStack DGS-3610 Series Manuel utilisateur

D-Link

D-Link DUB-2340 Manuel utilisateur

D-Link

D-Link DKVM-4U Manuel utilisateur

D-Link

D-Link SmartPro DGS-1500-20 Manuel utilisateur

D-Link

D-Link DGS-3308TG Manuel utilisateur

D-Link

D-Link DES-1228 - Web Smart Switch Manuel utilisateur

D-Link

D-Link DES-3010PA - Switch Manuel utilisateur

D-Link

D-Link DGS-3100-24 Manuel utilisateur

D-Link

D-Link xStack DGS-3450 Manuel

D-Link

D-Link DGS-F1026P-E Manuel utilisateur

D-Link

D-Link DGS-3700 Series Manuel utilisateur

D-Link

D-Link GO-SW-5E Manuel utilisateur

D-Link

D-Link DKVM-4U Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur

Cabletron Systems

Cabletron Systems GIGAswitch GSR-16 Manuel utilisateur