You are on page 1of 64

Copyright 2012-2013 D-Link Corporation. All Rights Reserved.

D-Link, D-Link logo, D-Link sub brand logos,


D-Link Certification Logos and D-Link product trademarks are trademarks or registered trademarks of D-Link
Corporation and its subsidiaries. All other trademarks are trademarks of their respective manufacturers and owners.
DISCLAIMER OF WARRANTIES
ALL OF THE INFORMATION, INSTRUCTIONS, AND RECOMMENDATIONS IN THIS DOCUMENT
ARE OFFERED ON A STRICTLY "AS IS" BASIS. THIS MATERIAL IS OFFERED WITHOUT ANY
WARRANTY, EXPRESSED OR IMPLIED. NEITHER D-LINK NOR D-LINK ACADEMY SHALL BE
HELD RESPONSIBLE FOR ANY DIRECT, INDIRECT, INCIDENTAL OR CONSEQUENTIAL
DAMAGES, THAT MAY RESULT FROM ANYTHING THAT IS VIEWED IN THIS DOCUMENT, OR
ANYTHING YOU DO AS A RESULT THEREOF. IT IS UP TO THE READER TO DETERMINE THE
SUITABILITY OF ANY DIRECTIONS OR INFORMATION VIEWED HERE. THIS LEARNING
PRODUCT MAY CONTAIN EARLY RELEASE CONTENT, AND WHILE D-LINK BELIEVES IT TO BE
CORRECT, IT FALLS SUBJECT TO THE DISCLAIMER ABOVE.

D-Link Academy

Table of Contents

Table of Contents

Lab 1: Network Essentials ............................................................................................ 7


Lab Objective ............................................................................................................ 7
Task 1: Understanding the OSI model ........................................................................ 8
Task 2: Understanding the TCP/IP protocol suite ...................................................... 8
Task 3: Understanding IP addresses and subnets ........................................................ 9
Answers for Lab 1: .................................................................................................. 11
Task 1: Understanding the OSI model .................................................................. 11
Task 2: Understanding the TCP/IP protocol suite ................................................. 11
Task 3: Understanding IP addresses and subnets ................................................... 11
Lab 2: D-Link Switch Operation ................................................................................ 13
Lab Objective .......................................................................................................... 13
Lab Topology .......................................................................................................... 14
Command List ........................................................................................................ 14
Lab Details ............................................................................................................. 16
Task 1: Connecting to the Switch using CLI ............................................................. 16
Task 2: To enable/disable ports (to prevent looping) ................................................. 18
Task 3: Configuring the Switch ................................................................................ 18
Task 4: Password Recovery Procedure ..................................................................... 20
Task 5: Connecting to the Switch using the Web Manager ........................................ 20
Lab Verification....................................................................................................... 20

Copyright 2012-2013 D-Link Corporation

DCS-Switching

Table of Contents

D-Link Academy

Lab 3: VLAN .............................................................................................................. 21


Lab Objective .......................................................................................................... 21
Lab Topology .......................................................................................................... 22
Command List ........................................................................................................ 22
Lab Details .............................................................................................................. 23
Task 1: Creating static VLANs ................................................................................. 24
Task 2: Configuring tagged and untagged ports......................................................... 24
Task 3: Configuring GVRP ...................................................................................... 25
Lab Verification ....................................................................................................... 26
Lab 4: Spanning Tree Protocol.................................................................................... 27
Lab Objective .......................................................................................................... 27
Lab Topology .......................................................................................................... 28
Command List ........................................................................................................ 28
Lab Details .............................................................................................................. 29
Task 1: To enable/disable ports ................................................................................ 29
Task 2: Configuring STP .......................................................................................... 30
Task 3: Configuring the Primary Root Bridge and Secondary Root Bridge ................. 32
Task 4: Monitoring STP convergence ....................................................................... 32
Lab Verification ....................................................................................................... 33
Lab 5: Stacking ........................................................................................................... 35
Lab Objective .......................................................................................................... 35
Lab Topology .......................................................................................................... 36
Command List ........................................................................................................ 36

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Table of Contents

Lab Details ............................................................................................................. 37


Task 1: To enable/disable ports (to prevent looping in case STP is not enabled)......... 38
Task 2: Configuring physical stacking ...................................................................... 38
Task 3: Configuring logical stacking (SIM) ............................................................... 41
Lab Verification....................................................................................................... 44
Lab 6: Routing Basics ................................................................................................. 45
Lab Objective .......................................................................................................... 45
Lab Topology .......................................................................................................... 46
Command List ........................................................................................................ 46
Lab Details ............................................................................................................. 47
Task 1: To enable/disable ports (to prevent looping in case STP is not enabled)......... 48
Task 2: Configuring VLANs .................................................................................... 48
Task 3: Configuring Static Route.............................................................................. 49
Task 4: Configuring RIP .......................................................................................... 50
Task 5: Configuring Route Preference ...................................................................... 51
Lab Verification....................................................................................................... 52
Lab 7: D-Link Switching Features .............................................................................. 53
Lab Objective .......................................................................................................... 53
Lab Topology .......................................................................................................... 54
Command List ........................................................................................................ 54
Lab Details ............................................................................................................. 57
Task 1: To enable/disable ports (To prevent looping in case STP is not enabled) ........ 57
Task 2: Configuring DHCP Server on SWRx1 and SWRx2 ...................................... 57

Copyright 2012-2013 D-Link Corporation

DCS-Switching

Table of Contents

D-Link Academy

Task 3: Configuring ACL ......................................................................................... 60


Task 4: Configuring LLDP ...................................................................................... 61
Task 5: System Maintenance .................................................................................... 62
Lab Verification ....................................................................................................... 64

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 1

Lab 1: Network Essentials


Chapter 1
Network Essentials

[Chapter 1: Network Essentials]


Version 1.0

Lab Objective
In this lab, you will apply/test your understanding of the fundamentals of networking and
the TCP/IP protocol suite learnt. After completing this lab, you should have a better
understanding of networking and the use of IP addressing and subnetting.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

Lab 1

D-Link Academy

Task 1: Understanding the OSI model


Please fill in the blanks.
1. The

provides end-to-end data transfer by delivering data from an

application to its remote peer.

2. The

is the interface to the actual network hardware.

3. The

provides addressing and routing functions.

4. The

is provided by the program that uses TCP/IP for

communication. An application is a user process cooperating with another process,


usually on a different host.

Task 2: Understanding the TCP/IP protocol suite


1. Which port number indicates a WWW service recognized worldwide?
a. 80
b. 21
c. 25
d. 53

2. Of the following Layer 4 protocols, which one is used for a Telnet connection?
a. UDP
b. TCP
c. ICMP
d. DNS

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 1

3. What is the purpose of assigning an IP address to a switch?


a. Providing local hosts with a default gateway address
b. Allowing remote management of the switch
c. Allowing the switch to respond to ARP requests between two hosts
d. Ensuring that hosts on the same LAN can communicate with each other
4. For the following transport layer protocols, which one is most suitable for the transport
of VoIP data?
a. HTTP
b. UDP
c. RIP
d. OSPF
5. Which of the following are found in a TCP header, but not in a UDP header? (Choose
three.)
a. Sequence number
b. Acknowledgment number
c. Source port
d. Destination port
e. Window size
f. Checksum

Task 3: Understanding IP addresses and subnets


1. What is the subnet address for the IP address 172.19.20.23/28?
a. 172.19.20.0
b. 172.19.20.15
c. 172.19.20.16
d. 172.19.20.20
e. 172.19.20.32
Copyright 2012-2013 D-Link Corporation

DCS-Switching

Lab 1

D-Link Academy

2. Of the following IP addresses, which one is a private address?


a. 12.0.0.1
b. 168.172.19.39
c. 172.20.14.36
d. 172.33.194.30

3. Which of the following two statements describe the IP address 10.16.3.65/23? (Choose
two.)
a. The subnet address is 10.16.3.0 255.255.254.0.
b. The broadcast address of the subnet is 10.16.3.255 255.255.254.0.
c. The lowest host address in the subnet is 10.16.2.1 255.255.254.0.
d. The last valid host address in the subnet is 10.16.2.254 255.255.254.0.

4. A small company has a Class C network address and needs to create five subnets, each
accommodating 25 hosts. Which subnet mask needs to be configured?
a. 255.255.240.0
b. 255.255.255.128
c. 255.255.255.192
d. 255.255.255.224
e. 255.255.255.240
f. 255.255.255.248

5. From which IP address class can 15 bits be borrowed to create subnets?


a. Class A
b. Class B
c. Class C
d. Class D
e. Class E

10

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 1

Answers for Lab 1:


Task 1: Understanding the OSI model
1. transport layer

2. physical layer

3. network layer

4. application layer

Task 2: Understanding the TCP/IP protocol suite


1. Answer: a
Explanation:
Port 1 to 1023 are well-known ports, where port 80 is for WWW, port 21 is for FTP, port
25 is for SMTP, and port 53 is for DNS.
2. Answer: b
Explanation:
Telnet requires a reliable connection, so TCP is used as the Transport layer protocol.
3. Answer: b
Explanation:
A switch does not require an IP address for it to be functional, however, the IP address
is needed for managing the switch.
4. Answer: b
Explanation:
VoIP traffic does not tolerate latency, and UDP is most suitable for such transmission.
5. Answer: a, b, e
Explanation:
TCP needs to provide a reliable transmission, thus its header includes Sequence number,
Acknowledgement number, and Window Size.
Task 3: Understanding IP addresses and subnets
1. Answer: c
Explanation:
172.19.20.23/28 means 4 bits are borrowed for this Class B IP address. Thus,
172.19.20.16 is the subnet address.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

11

Lab 1

D-Link Academy

2. Answer: c
Explanation:
Private address for Class A: 10.0.0.0 10.255.255.255, Class B: 172.16.0.0
172.31.255.255, and Class C: 192.168.0.0 192.168.255.255.
3. Answer: b, c
Explanation:
10.16.3.65/23 means 15 bits are borrowed for this Class A IP address. The subnet
address is 10.16.2.0, hosts are from 10.16.2.1 to 10.16.3.254, and the broadcast
address is 10.16.3.255.
4. Answer: d
Explanation:
To have 5 subnets, it means 3 bits need to be borrowed from the host bits. The default
subnet mask for Class C is 255.255.255.0, thus after borrowing 3 bits, the new subnet
mask will be 255.255.255.224.
5. Answer: a
Explanation:
Only Class A can be borrowed with 15 bits as it has 24 host bits. Class B has 16 host bits,
so if borrowed 15 bits, there will be no host left after subtracting the 2 reserved ip
addresses (network and broadcast). Class C only has 8 host bits, so it is not possible to
borrow 15 bits. Class D and E are reserved addresses.

12

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 2

Lab 2: D-Link Switch Operation


Chapter 2
D-Link Switch Operation

[Chapter 2: D-Link Switch Operation]


Version 1.0

Lab Objective
In this lab, you will learn to access and configure the Switch for basic Switch operations.
After completing this lab, you will be able to connect to the Switch using a serial cable
through a terminal emulation program, and learn the basic maintenance commands for the
Switch.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

13

Lab 2

D-Link Academy

Lab Topology

Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.

Command List
Command

Description

To open Help.

clear

To clear the screen.

14

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 2

Command
config command_prompt
[<string16>|username|default]
config ipif System ipaddress
<ipaddress/prefix>

Description
To change the command prompt.
To change the System IP address of the Switch.

config ports <portlist> state disable To disable a particular port on the Switch.
config ports <portlist> state enable To enable a particular port on the Switch.
create account admin <username>

To create an administrator-level account for the


Switch.

delete account <username>

To delete a user account.

disable password encryption

To disable password encryption.

disable ssh
enable password encryption
enable ssh
enable telnet <tcp_port_number
<value 1-65535>
login
logout
reboot {force_agree}
reset {[config |
system]}{force_agree}

To disable secure login to remote devices through the


network.
To enable password encryption.
To log in securely to remote devices through the
network.
To enable Telnet with a specified port number.
To initiate the login procedure.
To terminate the current users session on the Switchs
console.
To restart the Switch.
To reset the Switch to the factory default settings.
To reset the password of the specified user. If a

reset password {<username>}

username is not specified, the passwords of all users


will be reset.

save {[config<config_id

To enter the current Switch configuration into

1-2>|log|all]}

non-volatile RAM.

show account

To display all user accounts created on the Switch.

show command_history

To display the command history.

show device_status
show greeting_message

To display the current status of the power and fans on


the system.
To view the currently configured greeting message on
the Switch.

show ports

To display the current configuration of a range of ports

show serial port

To display the current serial port settings.

show session

To display a list of all the users that are logged in at the


time the command is issued.

show switch

To display the following information about the Switch.

show utilization cpu

To show CPU utilization.

show utilization dram

To show DRAM memory utilization.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

15

Lab 2

D-Link Academy
Command

Description

show utilization flash

To show flash memory utilization.

telnet <ipaddr> {tcp_port<value

To log into a remote system with the Telnet protocol

1-65535}

on the Switch.

Lab Details
Switchs IP

Switch Name

Address

Enabled Ports

Connected PC
(if any)

PCs IP Address

SWRx1

10.90.90.x1/24

1, 24

PCx1

10.90.90.x01/24

SWRx2

10.90.90.x2/24

1, 24

PCx2

10.90.90.x02/24

SWx3

10.90.90.x3/24

1, 3

PCx3

10.90.90.x03/24

SWx4

10.90.90.x4/24

1, 3

PCx4

10.90.90.x04/24

SWx5

10.90.90.x5/24

PCx5

10.90.90.x05/24

SWx6

10.90.90.x6/24

PCx6

10.90.90.x06/24

Note:
x = POD Number
Examples:
SWRx1 in Pod 1 = SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2 = SWR21; IP Address is 10.90.90.21/24

Account

Username

Password

admin

admin1

admin1

user

user1

user1

Task 1: Connecting to the Switch using CLI


1. From your Switch, connect the serial cable to your PCs COM port.
2. From your PC, run a terminal emulator program. In our examples, Tera Term is being
used. Alternatively, Hyperterminal and Putty are other options.
3. Note: The Switchs serial ports default settings are as follows:
115200 baud
no parity
8 data bits

16

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 2

1 stop bit
4. If the serial port is properly connected to a computer, the Switchs banner will be visible.
Upon seeing the banner, press ENTER for the UserName and Password prompts. There
is no initial username or password.
5. Type ? and press ENTER to display the list of available commands.
6. Press ESC to quit from the command lists, press n for the next page or press ENTER for
the next command.
7. To display the switch information, type show switch, and fill in the following details:
What is the Device Type?
________________________________________________
What is the MAC address?
________________________________________________
What is the IP Address?
________________________________________________
What is the Firmware Version?
________________________________________________
What is the Serial Number?
________________________________________________
8. Type show greeting_message to view the currently configured greeting message on
the Switch.
9. Type show serial_port to display the serial port settings on the Switch.
10. Type show ports to display the current configuration of a range of ports.
11. Type show utilization flash to display the total and used FLASH memory.
12. Type show command_history to display the command history.
13. Press the UP arrow key and DOWN arrow key to display the previously typed
commands.
14. Type clear to clear the screen.
15. Type save to save changes in the Switchs configuration to non-volatile RAM.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

17

Lab 2

D-Link Academy

Task 2: To enable/disable ports (to prevent looping)


1. All ports will be enabled by default. To disable all the ports on the switch, type config
ports all state disable.
2. Type show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the Switch, type config ports <portlist> state enable, where
<portlist> represents the port number. Your switchs enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
port 1 and 24. The command is config ports 1,24 state enable.

Task 3: Configuring the Switch


1. To change the name of the Switch, type config command_prompt <string16>,
where <string16> represents the devices name. Your Switch Name can be obtained
from the Lab Details section. For example, if you belong to Pod1, your Switch Name will
be SWR11, SWR12, SW13, SW14, SW15, and SW16.
2. To change the IP address of the Switch, type config ipif System ipaddress
<ipaddress/prefix>. For example, if you belong to Pod1, SWRx1 in Pod 1 = SWR11,
and the IP Address is 10.90.90.11/24. Your Switch IP address can be obtained from the
Lab Details section.
3. Type show switch to verify that the Switchs IP address has been updated.
4. To increase the security of your Switch, it is better to create an account with a password
for logging in.
Type create account admin admin1. When prompted for a password, type admin1.
5. Create a second account by typing create account user user1. When prompted for a
password, type user1.
6. Type show account to display the accounts that have been created.
7. Type delete account user1 to delete a previously created account.
8. Type show account and you will see that user1 does not exist anymore.
9. Using the ping command to test the availability of your neighbors. Example: To reach
SW12, type ping 10.90.90.12 times 5. (All switches in the same pod should be
reachable because they are all in the same subnet of 10.90.90.0/24.)

18

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 2

10. Type show switch and press the Enter to verify that Telnet is enabled. Default for
Telnet is enabled with TCP Port 23. If Telnet is not enabled, type the command enable
telnet 23.
11. Using the telnet command, try to access to your neighbors Switch. For example, to
access SW12, type telnet 10.90.90.12. When prompted for UserName and Password,
use admin1 for both entries.
You are now remotely connecting to a different switch. Notice the change in the
command_prompt.
12. Type show session to display a list of all the users that are logged in to the Switch.
13. Type logout to end the Telnet session.
14. SSH is a more secure way to connect to a remote device. To allow SSH on your own
switch, check that SSH is enabled by using the show switch command. By default, it is
disabled.
15. Type enable ssh to change it to secure mode. Type show switch to ensure that SSH
has been enabled. Note that for DGS-3627 and DES-3528 when SSH is enabled, Telnet
is disabled.
16. To demonstrate the use of SSH, ensure you PCs IP address is in the same network as the
Switch. The PCs IP address can be obtained from the Lab Details section.
17. Run Tera Term or other terminal emulation softwares from your PC, enter the IP address
of the Switch that you want to connect to, and choose SSH.

18. When prompted for Username and Password, use admin1 for both entries.
19. Type logout to end the session.
20. To revert back to allow Telnet access on your Switch, enter disable ssh, followed by
enable telnet. This step is required ONLY for DGS-3627 and DES-3528.
Copyright 2012-2013 D-Link Corporation

DCS-Switching

19

Lab 2

D-Link Academy

21. Type show switch to verify that Telnet has been enabled.
22. Type save to save changes in the Switchs configuration to non-volatile RAM.

Task 4: Password Recovery Procedure


1. To recover password, you have to reboot the Switch and press Shift+6 repeatedly to
enter the Password Recovery Mode.
2. At the Password Recovery Mode, type reset password admin1 to reset the password
for the account admin1.
3. Type reboot.
4. Type config account admin1 to configure a new password. (Note: Use admin1 as the
password.)

Task 5: Connecting to the Switch using the Web Manager


1. Type show switch to verify that the Web is enabled. By default, it is enabled. If it is not,
type enable web.
2. From your browser, type the IP address of your Switch.
3. Enter admin1 for both the Username and Password.
4. You are now successfully connected to the Switch using the Web Manager.

Lab Verification
At the end of this lab, you have learned:

How to connect to the Switch using CLI and Web.

How to change the Switchs name and IP address.

How to create accounts on the Switch.

Various commands to verify the Switchs configuration.

20

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 3

Lab 3: VLAN
Chapter 3
VLAN

[Chapter 3: VLAN]
Version 1.0

Lab Objective
In this lab, you will learn to create and configure VLANs on the switch. After completing this
lab, you will have acquired the skills to create both static and dynamic (GVRP) VLANs.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

21

Lab 3

D-Link Academy

Lab Topology

Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.

Command List
Command

Description

config gvrp [<portlist> | all] {state


[enable | disable] | ingress_checking
[enable | disable] | acceptable_frame
[tagged_only | admit_all] | pvid

This command is used to configure GVRP on the


switch. (DGS-3627)

<vlanid 1-4094>}

22

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 3

Command

Description

config port_vlan [<portlist> | all]

This command is used to configure the Group VLAN

{ gvrp_state [enable | disable] |

Registration Protocol on the Switch. Ingress checking,

ingress_checking [enable | disable] the sending and receiving of GVRP information, and
| acceptable_frame[tagged_only |

the Port VLAN ID (PVID) can be configured.

admit_all]pvid<vlanid 1-4094>}

(DGS-3620-28TC, DES-3528)

config vlan <vlan_name 32> {[add


[ tagged | untagged | forbidden] |

This command is used to add additional ports to a

delete] <portlist> | advertisement

previously configured VLAN.

[enable | disable]}
create vlan <vlan_name 32> {tag
<vlanid 2-4094> | type 1q_vlan |

This command is used to create a VLAN on the switch.

advertisement}
delete vlan <vlan_name 32>

This command is used to delete a previously


configured VLAN on the switch.

disable gvrp

This command is used to disable GVRP on the switch.

enable gvrp

This command is used to enable GVRP on the switch.

show gvrp {<portlist>}


show port_vlan {<portlist>}
show vlan {[<vlan_name 32> |

This command is used to display the GVRP status for a


port list on the switch. (DGS-3627)
This command displays the GVRP status for a port list
on the Switch (DGS-3620-28TC, DES-3528)
This command is used to display the current VLAN

vlanid <vidlist>] | ports <portlist>} configuration on the switch.

Lab Details
Switch Name

Switchs IP
Address

Enabled Ports

Connected PC
(if any)

PCs IP Address

SWRx1

10.90.90.x1/24

1, 24

PCx1

10.90.90.x01/24

SWRx2

10.90.90.x2/24

1, 24

PCx2

10.90.90.x02/24

SWx3

10.90.90.x3/24

1, 3

PCx3

10.90.90.x03/24

SWx4

10.90.90.x4/24

1, 3

PCx4

10.90.90.x04/24

SWx5

10.90.90.x5/24

PCx5

10.90.90.x05/24

SWx6

10.90.90.x6/24

PCx6

10.90.90.x06/24

Note: x=POD number

Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
Copyright 2012-2013 D-Link Corporation

DCS-Switching

23

Lab 3

D-Link Academy

Task 1: Creating static VLANs


In this task, only SWx3 will be configured with static VLANs. This is to illustrate the concept
of a static VLAN.
1. On SWx3, type the following commands:
create vlan v10 tag 10
create vlan v20 tag 20
create vlan v30 tag 30
2. On all the switches, type show vlan to verify that none of the above VLANs have been
created on the other switches except for SWx3.
3. On SWx3, type delete vlan v30 to remove the VLAN from its switch. Type show vlan
to verify that the VLAN has been removed successfully.

Task 2: Configuring tagged and untagged ports


Tagged ports are trunk links which allow multiple VLANs to cross one link. Untagged ports
are access links which connect to the edge devices or hosts.
1. Before proceeding to make any changes on the ports, try to ping your neighbors to verify
that all switches are still in the same VLAN. Example: On SWx5, type ping 10.90.90.x3
times 5 to verify that SWx3 is reachable. All switches in the same pod will be reachable
at this stage.
2. On all switches, type show vlan or show vlan ports to verify that all ports are assigned
to VLAN 1 and are untagged (by default).
3. To remove Port 10 from the default VLAN, type config vlan default delete 10. Type
show vlan to verify that Port 10 has been removed from the default VLAN.
4. To add the port back to the VLAN, type config vlan default add untagged 10. Type
show vlan to verify that Port 10 has been added to the default VLAN.
5. On SWx3, type the following commands:
config vlan default delete 3
config vlan v10 add untagged 3
config vlan v10 add tagged 1
config vlan v20 add tagged 1
(The first command will remove Port 3 from the default VLAN. The second command will
configure Port 3 to be untagged for VLAN v10. The third and fourth commands will
configure Port 1 to be tagged for VLAN v10 and v20.)

24

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 3

Type show vlan and show vlan ports to verify that Port 3 is untagged and is assigned
to VLAN v10.
6. On SWx5, type ping 10.90.90.x3 times 5. The ping traffic fails because SWx3 and
SWx5 are not assigned to the same VLAN, and routing has not been enabled.
7. On all switches, type ping 10.90.90.x5 times 5. The ping traffic fails because SWx5 is
in a different VLAN.

Task 3: Configuring GVRP


VLANs can be created in a static or dynamic way. GVRP is the dynamic way to configure
VLANs. In this lab, SWx5 and SWx6 are regarded as hosts. Delete all the static VLANs before
proceeding with this Task.
1. On SWRx1, SWRx2, SWx3, and SWx4, type show gvrp to verify that GVRP is disabled
by default.
2. To verify GVRP settings on Ports 1 and 24:
On SWRx1 and SWRx2, type show gvrp 1,24(DGS-3627) or show port_vlan
1,24(DGS-3620-28TC).
On SWx3 and SWx4, type show port_vlan 1.
3. On SWRx1, SWRx2, SWx3, and SWx4, type enable gvrp to enable GVRP on the switch.
4. On SWRx1 and SWRx2, type config gvrp 1,24 state enable to enable GVRP on the
ports, then type show gvrp 1,24 to verify that GVRP has been enabled on the ports
successfully.
Note: For DGS-3620-28TC, use config port_vlan 1, 24 grvp_state enable and show
port_vlan 1, 24.
5. On SWx3 and SWx4, type config port_vlan 1 gvrp_state enable to enable GVRP on
the ports, then type show port_vlan 1 to verify that GVRP has been enabled on the
ports successfully.
6. On SWRx1, type the following commands:
create vlan v10 tag 10 advertisement
create vlan v20 tag 20 advertisement
config vlan v10 add tagged 1,24
config vlan v20 add tagged 1,24
(The first and second commands will create a VLAN v10 and v20 and enable the VLAN
advertisement. The third and fourth commands will configure Ports 1 and 24 to be
tagged for VLAN v10 and v20.)

Copyright 2012-2013 D-Link Corporation

DCS-Switching

25

Lab 3

D-Link Academy

Type show vlan and show vlan ports to verify that Ports 1 and 24 are tagged and
assigned to VLAN v10 and v20.
7. On SWRx1, SWRx2, SWx3, and SWx4, type show vlan. On SWRx1, the VLAN Type is
shown as Static and the Advertisement is shown as Enabled. On SWRx2, SWx3, and
SWx4, the VLAN Type is shown as Dynamic and the Advertisement is shown as
Enabled. This shows that the VLAN has been successfully advertised from SWRx1 to
the other switches.

Lab Verification
At the end of this lab, you have now learned:

How to create and delete VLANs.

How to modify ports to be tagged and untagged.

How to configure VLANs using static and dynamic ways.

26

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 4

Lab 4: Spanning Tree Protocol


Chapter 4
Spanning Tree Protocol

[Chapter 4: Spanning Tree Protocol]


Version 1.0

Lab Objective
In this lab, you will learn to create and configure the Spanning Tree Protocol (STP). After
completing this lab, you should be able to configure STP and RSTP as well as primary and
secondary root bridges.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

27

Lab 4

D-Link Academy

Lab Topology

Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.

Command List
Command

Description

enable stp

This command is used to enable STP globally.

disable stp

This command is used to disable STP globally.

28

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 4

Command
config stp version [mstp | rstp | stp]

Description
This command is used to enable the STP version
globally.

config stp priority <value 0-61440> This command is used to configure the instance
instance_id <value 0-15>

priority.
This command is used to show the global settings of

show stp

the bridge parameters.

show stp instance <value 0-15>

This command is used to show each instance of the


parameter settings.
This command is used to show the port information

show stp ports {<portlist>}

including the parameter settings and operational


value.
This command is used to configure the ports

config stp ports

management parameters at the CIST level only.


This command is used to configure the bridge

config stp

management parameters for CIST (instance_id=0).

Lab Details
Switch Name

Switchs IP
Address

Enabled Ports

Connected PC
(if any)

PCs IP Address

SWRx1

10.90.90.x1/24

1, 24

PCx1

10.90.90.x01/24

SWRx2

10.90.90.x2/24

1, 24

PCx2

10.90.90.x02/24

SWx3

10.90.90.x3/24

1, 3, 24

PCx3

10.90.90.x03/24

SWx4

10.90.90.x4/24

1, 3, 24

PCx4

10.90.90.x04/24

SWx5

10.90.90.x5/24

PCx5

10.90.90.x05/24

SWx6

10.90.90.x6/24

PCx6

10.90.90.x06/24

Note: x=POD number

Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24

Task 1: To enable/disable ports


1. All ports will be enabled by default. To disable all the ports on the switch, enter config
ports all state disable.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

29

Lab 4

D-Link Academy

2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the Switch, enter config ports <portlist> state enable, where
<portlist> represents the port number. Your switchs enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 24. The command is config ports 1,24 state enable.

Task 2: Configuring STP


In this task, STP will be enabled on all switches except SWx5 and SWx6 as they are regarded
as host devices in this lab.
1. Enter show stp to verify the STPs settings on the switch. (The default setting for STP is
disabled.)
2. On SWRx1, SWRx2, SWx3, and SWx4, enter enable stp. Enter show stp on these four
switches to get the following STP status:

3. The default STP version is RSTP. To set it to STP, enter config stp version stp on
SWRx1, SWRx2, SWx3, and SWx4. You will obtain the following status:

30

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 4

4. On SWRx1, SWRx2, SWx3, and SWx4, enter config stp version rstp to revert the STP
status back to RSTP.
5. On SWx3 and SWx4, enter config stp ports 3 edge true to configure Port 3 as the edge
device. This means that SWx5 and SWx6, which are connected to Port 3, will not
participate in STP.
6. On SWx3 and SWx4, enter show stp ports 3 to verify that the status of the Edge port
is set to True.
7. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the MAC
address of the Designated Root Bridge?
_________________________________________________
8. On SWRx1, SWRx2, SWx3, and SWx4, enter show switch. What is the MAC address of
the switch?
_________________________________________________
9. Compare the MAC address of the switch and the MAC address of the Designated Root
Bridge. Are they the same? Yes/No
10. If yes, it means that the switch is the Designated Root Bridge. If no, it means that the
switch is not the Designated Root Bridge.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

31

Lab 4

D-Link Academy

Task 3: Configuring the Primary Root Bridge and Secondary


Root Bridge
In this task, SWRx1 will be configured as the primary root bridge, and SWRx2 will be
configured as the secondary root bridge.
1. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the Instance
Priority of the switch?
_________________________________________________
2. On SWRx1, enter config stp priority 0 instance_id 0 to configure the switch with
priority 0. The switch with the lowest priority will be selected as the primary root bridge.
3. On SWRx2, enter config stp priority 4096 instance_id 0 to configure the switch with
priority 4096. The switch with the second lowest priority will be selected as the
secondary root bridge.
Note: The priority value must be an incremental of 4096.
4. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the Instance
Priority of the switch?
_________________________________________________
5. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the MAC
address of the Designated Root Bridge?
_________________________________________________
6. Compare SWRx1s MAC address with the MAC address of the Designated Root Bridge.
They should be the same, because SWRx1 has the lowest priority and thus will be
selected as the Designated Root Bridge.
7. On SWRx1 and SWRx2, enter show stp ports 1,24. On SWx3 and SWx4, enter show
stp ports 1,3,24. Using the Lab Topology, label the Designated ports, Root ports, and
Alternate ports (if any).

Task 4: Monitoring STP convergence


In this task, SWx4 will be used to demonstrate the convergence of STP by making use of the
redundant link.
1. On SWx4, enter show stp ports 1,3,24 to verify that Port 1 is the Root port.

32

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 4

2. On SWx4, enter config ports 1 state disable to disable Port 1. (This is for testing STP
convergence.)
3. On SWx4, enter show stp ports 1,3,24 to verify that Port 1 is disabled and not the Root
port (Port 24 is now selected as the Root port).
4. On SWx4, enter config ports 1 state enable to enable Port 1, and enter show stp
ports 1,3,24 to verify that Port 1 is selected as the Root port and Port 24 as the
Alternate port.

Lab Verification
At the end of this lab, you have now learned:

How to enable STP and RSTP.

How to configure the primary and secondary root bridges.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

33

D-Link Academy

Lab 5

Lab 5: Stacking
Chapter 5
Switch Stacking

[Chapter 5: Switch Stacking]


Version 1.0

Lab Objective
In this lab, you will learn to configure stacking. After completing this lab, you should be able
to configure two types of stacks: physical and virtual.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

35

Lab 5

D-Link Academy

Lab Topology
(DGS-3627)

Port 28 (DGS-3620-28TC)

Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.

Command List
Command
config box_id current_box_id <value
1-12 > new_box_id [auto | <value 112>]
config box_priority current_box_id

Description
This command is used to configure the Box ID. Users
can use this command to reassign Box IDs.
This command is used to configure the box priority of

<value 1-12> priority <value 1-63> the switch.

36

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 5

Command

Description

config sim [[commander


{group_name <groupname 64>} | This command is used to configure parameters of
candidate] | dp_interval <sec 30-90> switches of the SIM.
| hold_time <sec 100-255>]}
config sim [add <candidate_id
1-100> {<password>} | delete
<member_id 1-32>]

This command is used to add candidates and delete


members from the SIM group by ID number.

config stacking force_master_role

This command is used to configure the stacking-force

state [enable | disable]

master role.

config stacking_mode [disable |


enable]

This command is used to configure the stacking mode.

disable sim

This command disables SIM on the switch.

enable sim

This command enables SIM on the switch.

show sim {[candidates {<candidate_id


1-100>} | members {<member_id This command is used to view the current information
1-32>} | group {commander_mac

regarding the SIM group on the switch.

<macaddr>} | neighbor]}
This command is used to display information about

show stack_device

the devices in the stack.

show stack_information

This command is used to display the stack


information.
This command is used to display the current stacking

show stacking_mode

mode.

Lab Details
Switch Name

Switchs IP
Address

Enabled Ports

Connected PC
(if any)

PCs IP Address

SWRx1

10.90.90.x1/24

1, 26/28

PCx1

10.90.90.x01/24

SWRx2

10.90.90.x2/24

1, 27

PCx2

10.90.90.x02/24

SWx3

10.90.90.x3/24

1, 3

PCx3

10.90.90.x03/24

SWx4

10.90.90.x4/24

1, 3

PCx4

10.90.90.x04/24

SWx5

10.90.90.x5/24

PCx5

10.90.90.x05/24

SWx6

10.90.90.x6/24

PCx6

10.90.90.x06/24

Note: x=POD number


Examples:
SWRx1 in POD 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in POD 2=SWR21; IP Address is 10.90.90.21/24
Copyright 2012-2013 D-Link Corporation

DCS-Switching

37

Lab 5

D-Link Academy

Task 1: To enable/disable ports (to prevent looping in case


STP is not enabled)
1. All ports will be enabled by default. To disable all the ports on the switch, enter config
ports all state disable.
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the switch, enter config ports <portlist> state enable, where
<portlist> represents the port number. Your switchs enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 26 or 28. The command is config ports 1,26/28 state enable.

Task 2: Configuring physical stacking


In this task, only SWRx1 and SWRx2 will be used for stacking. The stacking cable is
connected to Port 26 of SWRx1 or Port 28 for DGS-3620-28TC and Port 27 of SWRx2.
1. To enable both ports for stacking, on SWRx1, enter config ports 26 or 28 state enable
and on SWRx2, enter config ports 27 state enable.
2. On SWRx1 and SWRx2, enter config stacking_mode enable. Please note that this
command can only be used on the same series of switches. After entering the command,
enter y when asked to reboot.

38

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 5

3. When the switches have rebooted, on SWRx1, enter show stack _device and show
stack_information to verify the stacking settings.

Note: A maximum of 12 switches can be stacked.


4. When trying to access SWRx2, the message Please login through Master Box will
appear.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

39

Lab 5

D-Link Academy

5. Based on the above scenario, SWRx1 is the Master Box. If a different switch should be
selected as the Master Box, use the command config box_priority current_box_id
<value 1-12> priority <value 1-63>.
Example: enter config box_priority current_box_id 2 priority 1 to change the
Master Box to SWRx2, then save the configuration and reboot the switch.

In the above figure, the Master Box is SWRx1 and has the serial number P1JH195000010.

40

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 5

In the above figure, the new Master Box has the serial number P1JH95000008. The
switchs command prompt remains the same because they are stacked.
Note: After completing this task, the stacking cable needs to be physically disabled to
terminate stacking and change the SWRx2 System IP address back to 10.90.90.x2 in
order to proceed with Task 3.

Task 3: Configuring logical stacking (SIM)


In this task, only SWRx1 and SWRx2 will be used for logical stacking, which is also known as
Single IP Management (SIM).
1. On SWRx1 and SWRx2, enter enable sim.
2. On SWRx1, enter config sim commander group_name podx to configure SWRx1 as
the SIM commander. Enter show sim candidates and a single candidate should be
displayed (i.e. SWRx2).

Copyright 2012-2013 D-Link Corporation

DCS-Switching

41

Lab 5

D-Link Academy

3. On SWRx1, enter config sim_group add 1. SWRx1 will add SWRx2 to the SIM group.
Note: If you are asked for the password, input the password of SWRx2.
4. On SWRx1, enter show sim candidates. Zero candidates will be displayed as SWRx2
has already joined the SIM group. Enter show sim members and SWRx2 should be
displayed as one of the SIM members.

5. On SWrx1 and SWRx2, enter show sim.

42

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 5

6. After completing logical stacking of the switches, use the Web browser to access SWRx1
(IP address 10.90.90.11). Through the Web browser, it is now possible to manage all the
switches that are logically stacked together.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

43

Lab 5

D-Link Academy

Lab Verification
At the end of this lab, you have now learned how to enable physical and virtual stacking.

44

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 6

Lab 6: Routing Basics


Chapter 6
Routing

[Chapter 6: Routing Basics]


Version 1.0

Lab Objective
In this lab, you will learn to configure routing using two different methods: static and
dynamic.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

45

Lab 6

D-Link Academy

Lab Topology

Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528.

Command List
Command

Description

create iproute [default |


<network_address>] [null0 |
<ipaddr> {<metric 1-65535>}
{[primary | backup | weight <value

This command is used to create an IP route entry to


the switchs IP routing table.

1-4>]}]

46

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 6

Command
delete iproute [default |
<network_address>] [null0 |
<ipaddr>]
show iproute {[<network_address>
| <ipaddr>]} {[static | rip | ospf |
bgp | hardware]}
enable rip

Description
This command is used to delete an IP route entry from
the switchs IP routing table.
This command is used to display the switchs current
IP routing table.
This command is used to enable the RIP routing.

config rip [ipif <ipif_name 12>|all]


{authentication [ enable <password
16> | disable ] | tx_mode [disable |
v1_only | v1_compatible | v2_only] This command is used to configure RIP on the switch.
| rx_mode [v1_only | v2_only |
v1_or_v2 | disable] | state [enable |
disable]}
show rip {ipif <ipif_name 12>}

This command is used to display the RIP configuration


and statistics for the switch.

config route preference [static |


default | rip | ospfIntra | ospfInter | This command is used to configure route type
ospfExt1 | ospfExt2 | ebgp | ibgp]

preference.

<value 1-999>
show route preference {[ local |
static | default | rip | ospf | ospfIntra This command is used to display the route preference
| ospfInter | ospfExt1 | ospfExt2 |

of each route type.

ebgp | ibgp]

Lab Details
Switch Name

Switchs IP
Address

Enabled Ports

Connected PC
(if any)

PCs IP Address

SWRx1

10.90.90.x1/24

1, 24

PCx1

10.90.90.x01/24

SWRx2

10.90.90.x2/24

1, 24

PCx2

10.90.90.x02/24

SWx3

10.90.90.x3/24

1, 3

PCx3

10.90.90.x03/24

SWx4

10.90.90.x4/24

1, 3

PCx4

10.90.90.x04/24

SWx5

10.90.90.x5/24

PCx5

10.90.90.x05/24

SWx6

10.90.90.x6/24

PCx6

10.90.90.x06/24

Note: x=POD number


Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
Copyright 2012-2013 D-Link Corporation

DCS-Switching

47

Lab 6

D-Link Academy

Task 1: To enable/disable ports (to prevent looping in case


STP is not enabled)
1. All ports will be enabled by default. To disable all the ports on the switch, enter config
ports all state disable.
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the switch, enter config ports <portlist> state enable, where
<portlist> represents the port number. Your switchs enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 24. The command is config ports 1,24 state enable.

Task 2: Configuring VLANs


In this task, different subnets must be configured on the switches to demonstrate routing.
1. On SWRx1, enter the following commands to create VLANs and assign an IP address to
each VLANs:
config ipif System ipaddress 10.90.90.x1/24
create vlan v10 tag 10
config vlan v10 add tagged 1
create ipif v10-if 10.90.x1.11/24 v10
2. On SWRx2, enter the following commands to create VLANs and assign an IP address to
each VLANs:
config ipif System ipaddress 10.90.90.x2/24
create vlan v20 tag 20
config vlan v20 add tagged 1
create ipif v20-if 10.90.x2.11/24 v20
3. On SWRx1 and SWRx2, enter show ipif to verify the IP addresses are applied
successfully.
4. On SWRx1, enter ping 10.90.x2.11 times 5 and note that the ping fails. On SWRx2,
enter ping 10.90.x1.11 times 5 and note that this ping also fails. Both the pings fail
because there are no routes configured to reach a different VLAN.

48

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 6

Task 3: Configuring Static Route


In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1 and SWRx2, enter show iproute to view the existing routing table. Write
down the network addresses shown in the routing table:
________________________________________________
________________________________________________
2. On SWRx1, enter create iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
create iproute 10.90.x1.0/24 10.90.90.x1. This is to create a static route to point to
a destination network through a next hop.
3. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Write
down the new network addresses (with the Protocol status as Static) shown in the
routing table:
________________________________________________
________________________________________________

4. On SWRx1, enter ping 10.90.x2.11 times 5 and on SWRx2, enter ping 10.90.x1.11
times 5. Both the pings will be successful because there is a route configured to reach
each VLAN.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

49

Lab 6

D-Link Academy

Task 4: Configuring RIP


In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1 and SWRx2, enter show iproute to view the existing routing table. Write
down the network addresses shown in the routing table:
________________________________________________
________________________________________________
2. On SWRx1 and SWRx2, enter enable rip to enable RIP on both switches.
3. On SWRx1, enter the following commands:
config rip ipif System state enable
config rip ipif System rx_mode v2_only tx_mode v2_only
config rip ipif v10-if state enable
config rip ipif v10-if rx_mode v2_only tx_mode v2_only
(The above commands enable RIP on the interfaces and specifies RIP Version 2 on both
receive and transmit modes.)
4. On SWRx2, enter the following commands:
config rip ipif System state enable
config rip ipif System rx_mode v2_only tx_mode v2_only
config rip ipif v20-if state enable
config rip ipif v20-if rx_mode v2_only tx_mode v2_only
(The above commands enables RIP on the interfaces and specifies RIP Version 2 on both
receive and transmit modes.)
5. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Note that
there are no RIP entries because a static route has a route preference of 60 and RIP has
a route preference of 100. A lower route preference value is preferred. There are two
solutions: delete the static route or change the value of the route preference.
6. On SWRx1, enter delete iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
delete iproute 10.90.x1.0/24 10.90.90.x1. This is to remove the static routes that
were previously configured in Task 3.
7. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Write down
the new network addresses (with the Protocol status as RIP) shown in the routing table:
________________________________________________
________________________________________________

50

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 6

8. On SWRx1, enter ping 10.90.x2.11 times 5 and on SWRx2, enter ping 10.90.x1.11
times 5. Both the pings will be successful because there is a route configured to reach
each VLAN.

Task 5: Configuring Route Preference


In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1, enter create iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
create iproute 10.90.x1.0/24 10.90.90.x1. This is to insert the previous static route,
which by default has a lower route preference. After inserting the static route, the route
entries inserted by RIP will be replaced.
2. On SWRx1 and SWRx2, enter config route preference static 200, to change the route
preference of the static route to 200.
3. On SWRx1 and SWRx2, enter show iproute to view the updated routing table.
What type of routes do you see?
________________________________________________
4. Why is a static route not displayed in the routing table?
________________________________________________

Copyright 2012-2013 D-Link Corporation

DCS-Switching

51

Lab 6

D-Link Academy

Lab Verification
At the end of this lab, you have now learned:

How to configure static route.

How to configure dynamic routing through the use of the RIP protocol.

How to change the value of the route preference.

52

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 7

Lab 7: D-Link Switching Features


Chapter 7
D-Link Switching Features

[Chapter 7: D-Link Switching Features]


Version 1.0

Lab Objective
In this lab, you will learn to configure DHCP, ACL, LLDP, and System Maintenance. After
completing this lab, you should be able to configure dynamic address allocation, permitting
or denying traffic, learning about your neighbors, and backing up your firmware and
configuration files.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

53

Lab 7

D-Link Academy

Lab Topology

Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.

Command List
DHCP Command
config dhcp pool default_router
<pool_name 12> <ipaddr>
{<ipaddr>} {<ipaddr>}

54

DCS-Switching

Description
This command is used to configure the default router
for the DHCP client.

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 7

DHCP Command
config dhcp pool dns_server_address
<pool_name 12> <ipaddr>
{<ipaddr>} {<ipaddr>}

Description
This command is used to configure the IP addresses of
DNS servers for a specific DHCP pool.

config dhcp pool network_addr

This command is used to configure the network

<pool_name 12>

address and corresponding subnet mask for the DHCP

<network_address>

pool.

create dhcp excluded_address

This command is used to configure IP addresses that

begin_address <ipaddr>

will be excluded from the DHCP servers pool of

end_address <ipaddr>

addresses.

create dhcp pool <pool_name 12> This command is used to create a DHCP pool.
disable dhcp_server
enable dhcp_server

This command disables the DHCP function on the


switch.
This command enables the DHCP function on the
switch.

show dhcp_binding {<pool_name

This command is used to show the DHCP binding

12>}

information.

show dhcp_server

This command is used to display the DHCP server


settings.

ACL Command

Description

config access_profile

This command is used to configure access list entry.

create access_profile

This command is used to create access list rules.

show access_profile

This command is used to display the current access list


table.

LLDP Command

Description

config lldp message_tx_interval

This command is used to change the packet

<sec 5 32768>

transmission interval.

config lldp ports [<portlist>|all]


admin_status [tx_only | rx_only |
tx_and_rx | disable]

This command is used to configure per-port transmit


and receive modes.

config lldp ports [<portlist>|all]


basic_tlvs [all | {port_description | This command is used to configure an individual port
system_name | system_description or group of ports to exclude one or more optional TLV
| system_capabilities}] [enable |

data types from outbound LLDP advertisements.

disable]

Copyright 2012-2013 D-Link Corporation

DCS-Switching

55

Lab 7

D-Link Academy
LLDP Command

Description

config lldp ports [<portlist>|all]


dot3_tlvs [all |

This command is used to configure an individual port

{mac_phy_configuration_status |

or group of ports to exclude one or more of IEEE 802.3

link_aggregation |

organization-specific TLV data types from outbound

maximum_frame_size}] [enable |

LLDP advertisements.

disable]
config lldp ports [<portlist>|all]

This command is used to enable or disable port(s)

mgt_addr [ipv4 <ipaddr> | ipv6

specified for advertising the indicated management

<ipv6addr>] [enable | disable]

address instances.

config lldp ports [<portlist>|all]


notification [enable | disable]

This command is used to configure each port for


sending notification to configured SNMP trap
receiver(s).

disable lldp

This command disables LLDP on the switch.

enable lldp

This command enables LLDP on the switch.


This command is used to display the switchs general

show lldp

LLDP configuration status.

TFTP Command

Description

download firmware_fromTFTP
{[<ipaddr> | <ipv6addr>
|<domain_name 255>] src_file
<path_filename 64> {dest_file
{{unit [<unitid 1-12> | all]}

This command is used to download the firmware


image from TFTP server.

<drive_id>} <pathname 64>


{boot_up}}}
upload cfg_toTFTP {[<ipaddr> |
<ipv6addr> | <domain_name
255>] dest_file <path_filename
64> {src_file {<drive_id>}
<pathname 64>} {[include |
exclude | begin] <filter_string 80>
{<filter_string 80> {<filter_string
80>}} {[include | exclude | begin ]
<filter_string 80> {<filter_string

This command is used to upload a configuration file


from a device to a TFTP server. This command is
required to be supported when the file system is not
supported on the devices Flash EPROM.

80> {<filter_string 80>}} {[include


| exclude | begin ] <filter_string 80>
{<filter_string 80> {<filter_string
80>}}}}}}

56

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 7

Lab Details
Switch Name

Switchs IP
Address

Enabled Ports

Connected PC
(if any)

PCs IP Address

SWRx1

10.90.90.x1/24

1, 24

PCx1

10.90.90.x01/24

SWRx2

10.90.90.x2/24

1, 24

PCx2

10.90.90.x02/24

SWx3

10.90.90.x3/24

1, 3

PCx3

10.90.90.x03/24

SWx4

10.90.90.x4/24

1, 3

PCx4

10.90.90.x04/24

SWx5

10.90.90.x5/24

PCx5

10.90.90.x05/24

SWx6

10.90.90.x6/24

PCx6

10.90.90.x06/24

Note: x=POD number

Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24

Task 1: To enable/disable ports (To prevent looping in case


STP is not enabled)
1. All ports will be enabled by default. To disable all the ports on the switch, enter config
ports all state disable.
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the switch, enter config ports <portlist> state enable, where
<portlist> represents the port number. Your switchs enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 24. The command is config ports 1,24 state enable.

Task 2: Configuring DHCP Server on SWRx1 and SWRx2


In this task, only SWRx1 and SWRx2 will be used as DHCP servers; SWx3, SWx4, SWx5, and
SWx6 will be used as DHCP clients. SWRx1, SWx3, and SWx5 will be in VLAN 10 and using
addresses from the network of 10.90.x1.0/24. SWRx2, SWx4, and SWx6 will be in VLAN 20
and using addresses from the network of 10.90.x2.0/24.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

57

Lab 7

D-Link Academy

VLAN

v10

v20

DHCP Server

SWRx1

SWRx2

DHCP Clients

SWx3, SWx5

SWx4, SWx6

DHCP Pool

v10-pool

v20-pool

DHCP Network Address

10.90.x1.0/24

10.90.x2.0/24

10.90.x1.1/24 to

10.90.x2.1/24 to

10.90.x1.20/24

10.90.x2.20/24

DHCP Excluded Addresses


Note: x=POD number

1. On SWRx1, enter the following commands to configure it as a DHCP server:


create vlan v10 tag 10
config vlan v10 add tag 1,24
create ipif v10-if 10.90.x1.11/24 v10
create dhcp pool v10-pool
config dhcp pool default_router v10-pool 10.90.x1.11
config dhcp pool dns_server(_address) v10-pool 10.90.x1.11
config dhcp pool network_addr v10-pool 10.90.x1.0/24
create dhcp excluded_address begin_address 10.90.x1.1 end_address 10.90.x1.20
enable dhcp_server
2. On SWx3, enter the following commands to configure it as a DHCP client:
create vlan v10 tag 10
config vlan v10 add tag 1
config vlan v10 add untagged 3
config ipif System vlan v10
config ipif System dhcp
3. On SWx5, enter the following commands to configure it as a DHCP client:
config ipif System dhcp
4. On SWRx2, enter the following commands to configure it as a DHCP server:
create vlan v20 tag 20
config vlan v20 add tag 1,24
create ipif v20-if 10.90.x2.11/24 v20
create dhcp pool v20-pool
config dhcp pool default_router v20-pool 10.90.x2.11
config dhcp pool dns_server(_address) v20-pool 10.90.x2.11
config dhcp pool network_addr v20-pool 10.90.x2.0/24
create dhcp excluded_address begin_address 10.90.x2.1 end_address 10.90.x2.20
enable dhcp_server

58

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 7

5. On SWx4, enter the following commands to configure it as a DHCP client:


create vlan v20 tag 20
config vlan v20 add tag 1
config vlan v20 add untagged 3
config ipif System vlan v20
config ipif System dhcp
6. On SWx6, enter the following commands to configure it as a DHCP client:
config ipif System dhcp
7. To verify successful DHCP settings, use the commands show switch and show ipif on
SWx3, SWx4, SWx5, and SWx6.
Note: disable dhcp_server and enable dhcp_server on SWRx1 and SWRx2 if SWx3,
SWx4, SWx5, and SWx6 cannot obtain an IP address.

8. To reach the different subnets, ensure that the RIP configuration from Lab 6 is still
implemented by using the show iproute command.

Copyright 2012-2013 D-Link Corporation

DCS-Switching

59

Lab 7

D-Link Academy

Task 3: Configuring ACL


In this task, the ACL will be applied on the middle switch to prevent the lower switch from
accessing the higher switch.
1. Before applying ACL, it is good practice to test availability first. On SWx5, enter ping
10.90.x1.11 times 5 to reach SWRx1. The ping should be successful. Then, enter
telnet 10.90.x1.11 to Telnet to SWRx1. The Telnet should be successful. Enter logout
to end the Telnet session at SWRx1. Now, enter show switch and record the MAC
address and IP address of SWx5:
_________________________________________________
2. On SWx3, enter ping 10.90.x1.11 times 5 to reach SWRx1. Then, enter create
access_profile profile_id 1 profile_name denySWx5 ethernet source_mac FFFFFFFFFFFF
to create an Ethernet ACL. Then, enter config access_profile profile_id 1 add access_id 1
ethernet source_mac <MAC add of SWx5 from Step 1> port 3 deny to deny traffic from
SWx5 on Port 3.
3. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1, then enter telnet
10.90.x1.11 to Telnet to SWRx1. Both ping and Telnet traffic will fail because of the rule
that is used in Step 2.
4. On SWx3, enter delete access_profile profile_id 1 to remove the ACL created in Step 2.
5. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1. The ping should be
successful because the ACL has been removed.

60

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 7

6. On SWx3, enter create access_profile profile_id 1 profile_name denyicmp ip icmp type


source_ip_mask 255.255.255.255 to create an IP ACL. Then, enter config access_profile
profile_id 1 add access_id 1 ip source_ip <IP address of SWx5 from Step 1> icmp port 3
deny to specify that only ICMP traffic will be denied on Port 3.
7. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1. The ping should fail. Then,
enter telnet 10.90.x1.11 to Telnet to SWRx1. The Telnet connection is successful.
8. On SWx3, enter delete access_profile profile_id 1 to remove the ACL created in Step 6.
9. Using the commands from Steps 1 to 8, create an ACL on SWx4 to filter the traffic from
SWx6 to SWRx2. Remember to make changes to the MAC addresses and IP addresses.
Use show access_profile profile_id 1 to verify the ACL configurations. Remove the
ACL when done with this step.

Task 4: Configuring LLDP


In this task, LLDP will be configured on all the six switches.
1. On SWRx1, enter the following commands:
enable lldp
config lldp ports 1,24 basic_tlvs all enable
config lldp ports 1,24 mgt_addr ipv4 10.90.90.x1 enable
config lldp ports 1,24 admin_status tx_and_rx
config lldp ports 1,24 notification enable
config snmp system_name SWRx1
2. On SWRx2, enter the following commands:
enable lldp
config lldp ports 1,24 basic_tlvs all enable
config lldp ports 1,24 mgt_addr ipv4 10.90.90.x2 enable
config lldp ports 1,24 admin_status tx_and_rx
config lldp ports 1,24 notification enable
config snmp system_name SWRx2
3. On SWx3, enter the following commands:
enable lldp
config lldp ports 1,3 basic_tlvs all enable
config lldp ports 1,3 mgt_addr ipv4 10.90.90.x3 enable
config lldp ports 1,3 admin_status tx_and_rx
config lldp ports 1,3 notification enable
config snmp system_name SWx3

Copyright 2012-2013 D-Link Corporation

DCS-Switching

61

Lab 7

D-Link Academy

4. On SWx4, enter the following commands:


enable lldp
config lldp ports 1,3 basic_tlvs all enable
config lldp ports 1,3 mgt_addr ipv4 10.90.90.x4 enable
config lldp ports 1,3 admin_status tx_and_rx
config lldp ports 1,3 notification enable
config snmp system_name SWx4
5. On SWx5, enter the following commands:
enable lldp
config lldp ports 3 basic_tlvs all enable
config lldp ports 3 mgt_addr ipv4 10.90.90.x5 enable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification enable
config snmp system_name SWx5
6. On SWx6, enter the following commands:
enable lldp
config lldp ports 3 basic_tlvs all enable
config lldp ports 3 mgt_addr ipv4 10.90.90.x6 enable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification enable
config snmp system_name SWx6
Note: Refer to the Command List for an explanation of each of the above commands.
7. When configuration has been completed for all switches, use show lldp remote_ports
<portlist> where <portlist> refers to the ports used on the switches from Step 1 to 6.

Task 5: System Maintenance


In this task, a TFTP server is required.
1. Set up a TFTP server connected to SWRx1 and configure its IP address to
10.90.90.100/24. On all switches, ping the TFTP server to ensure it is reachable.
Note: To set up a TFTP server, configure the PCs IP address to 10.90.90.100 with a
subnet mask of 255.255.255.0, and execute the program DLinkTftpServer.exe.
2. It is a good practice is to back up each switchs configuration file to the TFTP server. On
all switches, enter upload cfg_toTFTP 10.90.90.100 dest_file <switchname.cfg>.
The output should look similar to this:

62

DCS-Switching

Copyright 2012-2013 D-Link Corporation

D-Link Academy

Lab 7

3. If new firmware needs to be installed on the switch, enter download firmware_from


TFTP 10.90.90.100 src_file <firmware.had>. The output should look similar to this:

Copyright 2012-2013 D-Link Corporation

DCS-Switching

63

Lab 7

D-Link Academy

Lab Verification
At the end of this lab, you have now learned:

How to enable DHCP services.

How to configure ACL to filter traffic.

How to implement LLDP to learn about your neighbors.

How to use TFTP services to upload or download firmware and configuration files.

64

DCS-Switching

Copyright 2012-2013 D-Link Corporation