To use the console port, you need the following equipment:

● A terminal or a computer with both a serial port and the ability to emulate a terminal.

● A null modem or crossover RS-232 cable with a female DB-9 connector for the console port on the D-Link Switch.

To connect a terminal to the console port:

1.Connect the female connector of the RS-232 cable directly to the console port on the Switch, and tighten the captive retaining screws.

2.Connect the other end of the cable to a terminal or to the serial connector of a computer running terminal emulation software. Set the terminal emulation software as follows:

3.Select the appropriate serial port (COM port 1 or COM port 2).

4.Set the data rate to 9600 baud.

5.Set the data format to 8 data bits, 1 stop bit, and no parity.

6.Set flow control to none.

7.Under Properties, select VT100 for Emulation mode.

8.Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that you select Terminal keys (not Windows keys).

NOTE: When you use HyperTerminal with the Microsoft® Windows® 2000 operating sys-tem, ensure that you have Windows 2000 Service Pack 2 or later installed. Windows 2000 Service Pack 2 allows you to use arrow keys in HyperTerminal’s VT100 emulation. See www.microsoft.com for information on Windows 2000 service packs.

9.After you have correctly set up the terminal, plug the power cable into the power receptacle on the back of the Switch. The boot sequence appears in the terminal.

10.After the boot sequence completes, the console login screen displays.

11.If you have not logged into the command line interface (CLI) program, press the Enter key at the User name and password prompts. There is no default user name and password for the Switch. The administrator must first create user names and passwords. If you have previously set up user accounts, log in and continue to configure the Switch.

12.Enter the commands to complete your desired tasks. Many commands require administrator-level access privileges. Read the next section for more information on setting up user accounts. See the D-Link DES-3028/DES-3028P/DES-3028G/DES-3052/DES-3052P CLI Manual on the documentation CD for a list of all commands and additional information on using the CLI.

13.When you have completed your tasks, exit the session with the logout command or close the emulator program.

14.Make sure the terminal or PC you are using to make this connection is configured to match these settings.

If you are having problems making this connection on a PC, make sure the emulation is set to VT-100. You will be able to set the emulation by clicking on the File menu in you HyperTerminal window, clicking on Properties in the drop-down menu, and then clicking the Settings tab. This is where you will find the Emulation options. If you still do not see anything, try rebooting the D-LinkSwitch by disconnecting its power supply.

Once connected to the console, the screen below will appear on your console screen. This is where the user will enter commands to perform all the available management functions. The D-Link Switch will prompt the user to enter a user name and a password. Upon the initial connection, there is no user name or password and therefore just press enter twice to access the command line interface.

D-Link DES-1105 Desktop Switch Features

● Add More Devices and Computers to the Network
● No Software or Configuration Required
● Delivers up to 200Mbps Throughput per Port in Full-Duplex Mode

GREAT PERFORMANCE AND VALUE

Expand your wired home network with the D-Link 5-Port 10/100Mbps Desktop Switch (DES-1105). This Desktop Switch fits virtually anywhere because of its compact size. Its power connector and ports are conveniently located in the rear to avoid messy cables on the desk. This Desktop Switch can also be mounted on a wall or underneath a desk with the included wall mounting kit.

SMOOTH TRAFFIC MANAGEMENT

The Desktop Switch receives and forwards traffic seamlessly with its non-blocking wire-speed architecture. Every port simultaneously supports up to 200Mbps of bandwidth, totaling 1Gbps of switching capacity. It minimizes bottlenecks, allowing your network to run smoothly even during the heaviest volume of traffic.

EASY TO INSTALL AND USE

This Desktop Switch requires no configuration and installation is simple. Whether you are connecting the Desktop Switch to another switch or a computer, there is never a need for crossover cables with Auto-MDI/MDI-X support. Additionally, the Desktop Switch auto-senses if the network device it is connected to is running at 10Mbps or 100Mbps and adjusts accordingly. Equipped with a comprehensive LED display, you can monitor the status and activity of every port at a glance.

With outstanding performance, quality, and features packed in a compact sized device, the D-Link 5-Port 10/100Mbps Desktop Switch (DES-1105) is a great selection for expanding your home network.

Works with

Xtreme N Gigabit Router(D-Link DIR-655)

Connect any USB device AND give 4 of your favorite devices their own Gigabit Ethernet port – get comprehensive, high-performance wireless coverage to any device, anywhere in your home.

Authenticating any user who tries to access networks is necessary and important. The basic authentication method used to accept qualified users is through a local login, utilizing a Username and Password. Sometimes, passwords get forgotten or destroyed, so network administrators need to reset these passwords. This document will explain how the Password Recovery feature can help network administrators reach this goal.

The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords.

Complete these steps to reset the password:

1.For security reasons, the Password Recovery feature requires the user to physically access the device. Therefore this feature is only applicable when there is a direct connection to the console port of the device. It is necessary for the user needs to attach a terminal or PC with terminal emulation to the console port of the switch.

2.Power on the D-Link DGS Switch. After the runtime image is loaded to 100%, the Switch will allow 2 seconds for the user to press the hotkey [^] (Shift + 6) to enter the “Password Recovery Mode.” Once the Switch enters the “Password Recovery Mode,” all ports on the Switch will be disabled.

3.In the “Password Recovery Mode” only the following commands can be used.

You can connect to the switch through Telnet or a Web browser from a host on the 10.0.0.0/8 network, or you can connect to the switch through the console port (RS-232 DCE). After you connect to the switch, you can provide network information or enable the DHCP client. To connect to the DWS-3026 switch from a host on the 10.0.0.0 network, enter the default IP address of the switch (10.90.90.90) into the address field of a Web browser or a Telnet client.

To connect to the console port and provide network information, use the following steps:

1. Using a null-modem cable, connect a VT100/ANSI terminal or a workstation to the console (serial) port.

If you attached a PC, Apple, or UNIX workstation, start a terminal-emulation program,such as HyperTerminal or TeraTerm.

2. Configure the terminal-emulation program to use the following settings:

- Baud rate: 115,000 bps
- Data bits: 8
- Parity: none
- Stop bit: 1
- Flow control: none

3. Press the return key, and the User: prompt appears.

Enter admin as the user name. There is no default password. Press ENTER at the password prompt if you did not change the default password. After a successful login, the screen shows the (switch-prompt)> prompt.

4. At the (switch-prompt)> prompt, enter enable to enter the Privileged EXEC command mode. There is no default password to enter Privileged EXEC mode. Press ENTER at the password prompt if you did not change the default password.

5. Configure the network information.

- To use a DHCP server to obtain the IP address, subnet mask, and default gateway information, enter network protocol dhcp.
- To use a BootP server to obtain the IP address, subnet mask, and default gateway information, enter network protocol bootp.
- To manually configure the IP address, subnet mask, and default gateway, enter network parms [], for example:

network parms 192.168.2.23 255.255.255.0 192.168.2.1 The default gateway is an optional parameter, so you do not need to enter an address to execute the command.

To view the network information, enter show network.

6. To save these changes so they are retained during a D-Link switch reset, enter the following command:

write

Once the D-Link Unified Switch is connected to the network, you can use the IP address for remote access to the DWS-3026 switch by using a Web browser or through Telnet or SSH.

1. Plan the WLAN network topology.

Decide where to locate each access point to maximize accessibility to the WLAN by wireless clients and to minimize radio frequency (RF) interference by other access points. You should also determine how to integrate the D-Link Unified Switch into your existing network topology.

2. Install and configure the D-Link Unified Switch.

To install and configure the D-Link DWS-3026 switch, you need a serial connection to the switch, or you must connect to the switch from a host in the same subnet as the switch default IP address (10.90.90.90/8). From the initial connection to the switch, you can configure basic network information or enable the DHCP client on the switch to acquire this information automatically.

3.Enable the WLAN switch function and assign an IP address to the WLAN switch interface.

The WLAN features on the switch are enabled by default. The WLAN feature must be enabled in order for the switch to discover and validate D-Link Access Points. If the routing mode is disabled, the Unified Switch function uses the IP address of the network interface. If routing is enabled, the switch uses a loopback or routing interface for the wireless functions. Changing the IP address of the network interface automatically disables and re-enables the wireless function. Enabling routing also disables and reenables the wireless function.

4.Configure the default AP Profile settings that the access point will use after the D-Link DWS-3026 switch validates it.

When the switch successfully validates an access point, it sends the AP Profile to the access point. The AP Profile contains all of the access point configuration information,such as the radio, security, and SSID settings. You can configure all of the AP settings before or after the switch validates an AP.

5.Prepare and deploy D-Link Access Points and enable AP-to-switch discovery.

After you connect an AP to the network and it obtains an IP address (either statically or dynamically by using DHCP), the Unified Switch can automatically discover the AP. However, if your network uses IEEE 802.1X authentication or you require the AP to be authenticated by the D-Link DWS-3026 switch upon discovery, you must log on to the AP and configure security information.

6.Authenticate and validate the APs.

You can optionally configure the Unified Switch so that it only manages APs that it authenticates. You can use the local database or an external RADIUS database for AP authentication. Whether or not you require AP-to-Unified Switch authentication, the switch must be able to validate an AP before it can manage the AP. For the D-Link DWS-3026 switch to validate the AP, you must add the MAC address of each AP to the AP database on the switch or to the database on an external RADIUS server.

CAUTION: The default AP profile does not use a security mechanism for wireless client associations. All wireless clients will be able to connect to an AP and access your network.

Network switches provide easy and open access to resources by simply attaching a client PC. Unfortunately this automatic configuration also allows unauthorized personnel to easily intrude and possibly gain access to sensitive data.

IEEE-802.1X provides a security standard for network access control, especially in Wi-Fi wireless networks.802.1X holds a network port disconnected until authentication is completed. The switch uses Extensible Authentication Protocol over LANs (EAPOL) to exchange authentication protocol client identity (such as a user name) with the client, and forward it to another remote RADIUS authentication server to verify access rights. The EAP packet from the RADIUS server also contains the authentication method to be used. The client can reject the authentication method and request another, depending on the configuration of the client software and the RADIUS server. Depending on the authenticated results, the port is either made available to the user, or the user is denied access to the network.

The RADIUS servers make the network a lot easier to manage for the administrator by gathering and storing the user lists.

By default, 802.1X is disabled. To use EAP for security, select enabled and set the 802.1X Global Settings for the Radius Server and applicable authentication information.

Authentication Port: sets primary port for security monitoring. Default is 1812.

Key: Masked password matching the Radius Server Key.

Confirm Key: Enter the Key a second time for confirmation.

TxPeriod: Sets the number of seconds that the switch waits for a response to an EAP-request/identity frame from the client before retransmitting the request. Default is 24 seconds.

ReAuthEnabled: This enables or disables the periodic ReAuthentication control. When the 802.1X function is enabled, the ReAuthEnabled function is by default also enabled.

QuietPeriod: Sets the number of seconds that the switch remains in the quiet state following a failed authentication exchange with the client. Default is 80 seconds.

SuppTimeout: Sets the switch-to-client retransmission time for the EAP-request frame. Default is 12 seconds.

ServerTimeout: Sets the amount of time the switch waits for a response from the client before resending the response to the authentication server. Default is 16 seconds.

MaxReq: This parameter specifies the maximum number of times that the switch retransmits an EAP Request packet to the client before it times out the authentication session. Default is 5 times.

ReAuthPeriod: This command affects the behavior of the switch only if periodic re-authentication is enabled.Default is 3600.

To establish 802.1X port-specific assignments, select the From Ports / To Ports and select enable.

1.IPv6 Ping Test

The following window is used to Ping an IPv6 address.

To view this window, click Administration > Ping Test > IPv6 Ping Test, as shown below:

This window allows the following parameters to be configured to ping an IPv6 address.

Parameter Description

Target IPv6 Address:Enter an IPv6 address to be pinged.

Interface:The Interface field is used for addresses on the link-local network. It is recommended that the user enter the specific interface for a link-local IPv6 address. For global IPv6 addresses, this field may be omitted.

Repeat Times:Enter the number of times desired to attempt to ping the IPv6 address configured in this window. Users may enter a number of times between 1and 255.

Size:Use this field to set the datagram size of the packet, or in essence, the number of bytes in each ping packet. Users may set a size between 1 and 6000 bytes. The default setting is 100 bytes.

Timeout:Select a timeout period between 1 and 99 seconds for this Ping message to reach its destination. If the packet fails to find the IPv6 address in this specified time, the Ping packet will be dropped.

Source IPv6 Address:Tick the check box and enter the source IPv6 address of the ping packets. If specified, the IPv6 address will be used as the packets’ source IPv6 address that ping6 sends to the remote host.

2.IPv6 Neighbor Settings

IPv6 neighbors are devices on the link-local network that have been detected as being IPv6 devices. These devices can forward packets and keep track of the reachability of routers, as well as if changes occur within link-layer addresses of nodes on the network or if identical unicast addresses are present on the local link. The following two windows are used to view IPv6 neighbors, and add or delete them from the Neighbor cache.

The following window is used to view and configure current IPv6 neighbors of the Switch.
To view this window, click Administration > IPv6 Neighbor > IPv6 Neighbor Settings, as shown below:

Interface Name:Enter the Interface Name of the device for which to search IPv6 neighbors. Click Find to begin the search.

Neighbor IPv6 Address:Enter the IPv6 address of the neighbor of the IPv6 device to be searched. Click Find to begin the search.

State:Users may also search by running state of the IPv6 neighbor. Tick the State check box and choose to search for Static IPv6 neighbors or Dynamic IPv6 neighbors. Click Find to begin the search.

Neighbor IPv6 Address isplays the IPv6 address of the neighbor device.

State:Displays the running state of the corresponding IPv6 neighbor. The user may see six possible entries in this field, which are Incomplete, Stale, Probe, Reachable, Delay, or Static.

Link Layer MAC Address isplays the MAC address of the corresponding IPv6 device.

Port isplays which port learned the IPv6 address of the neighbor device.

Interface:Displays the interface name associated with this IPv6 address.

VID:Displays which VLAN learned the IPv6 address of the neighbor device.

VLANs can be easily organized to reflect department groups (such as R&D, Marketing), usage groups (such as e-mail), or multicast groups (multimedia applications such as video conferencing), and therefore help to simplify network management by allowing users to move devices to a new VLAN without having to change any physical connections.

The IEEE 802.1Q VLAN Configuration page provides powerful VID management functions. The original settings have the VID as 01, named “default”, and all ports as “Untagged”.

Rename: Click to rename the VLAN group.
Delete VID: Click to delete the VLAN group.
Add New VID: Click to create a new VID group, assigning ports from 01 to 28 as Untag, Tag, or Not Member:A port can be untagged in only one VID. To save the VID group, press Apply.You may change the name accordingly to the desired groups, such as the aforementioned R&D, Marketing,email, etc.

Managed D-Link DES-1228 that support SNMP include software (referred to as an agent), which runs locally on the device. A defined set of variables (managed objects) is maintained by the SNMP agent and used to manage the device. These objects are defined in a Management Information Base (MIB), which provides a standard presentation of the information controlled by the on-board SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network. The default SNMP setting is disabled. Click enable, then Apply, to set Community Settings.

Community Setting: In support of SNMP version 1, the Web-Smart Switch accomplishes user authentication by using Community Settings that function as passwords. The remote user SNMP application and the Switch SNMP must use the same community string. SNMP packets from a station that are not authenticated are ignored (dropped).

The default community strings for the Switch used for SNMP v.1 management access are:

Public: The community with read-only privilege allows authorized management stations to retrieve MIB objects.

Private: The community with read/write privilege allows authorized management stations to retrieve and modify MIB objects.

Trap Setting: Traps are messages that alert network personnel of events that occur on the Switch. Such events can be as serious as a reboot (someone accidentally turned the Switch OFF), or less serious events such as a port status change. The Switch can generate traps and send them to the trap recipient (i.e. network administrator).

Setting up a Trap: Select Enable, enter a Trap Name, add the IP of the device to be monitored, and choosethe event(s) to trap. The available trap Events to choose from including:

·System Device Bootup
·Fiber Link Up / Link Down
·Fiber Abnormal Receive Error
·Fiber Abnormal Transmit Error
·Twisted Pair Link Up / Link Down
·Twisted Pair Abnormal Receive Error
·Twisted Pair Abnormal Transmit Error
·Power On/ Power Off & Power Threshold Above/Below (Only for DES-1228P)
·PoE Power Fail (Only for DES-1228P)
·Power Over Current (Only for DES-1228P)
·Power Short Circuit (Only for DES-1228P)

The following D-Link products support the 802.3af protocol:

D-Link Lan Switch:

DES-1210-10P
DES-1008PA
DES-1228P
DES-3028P
DES-3052P
DES-3528P
DES-3828P
DGS-3426P

D-Link Wireless AP:

DWL-3200AP
DWL-2553AP
DWL-2700AP revA3
DWL-2590AP
DWL-2690AP
DWL-3520AP
DWL-2523AP
DWL-7700AP
DWL-8200AP
DWL-8500AP
DWL-8600AP

D-Link Wireless POE Switch:

DWS-3227P
DWS-3024
DWS-4026
DXS-3227P

D-Link POE MIDSPAN:

DWL-P1012
DWL-P50