dcs-switching lab guide v1.8
TRANSCRIPT
-
8/16/2019 DCS-Switching Lab Guide v1.8
1/64
-
8/16/2019 DCS-Switching Lab Guide v1.8
2/64
Copyright © 2012-2013 D-Link Corporation. All Rights Reserved. D-Link, D-Link logo, D-Link sub brand logos,
D-Link Certification Logos and D-Link product trademarks are trademarks or registered trademarks of D-Link
Corporation and its subsidiaries. All other trademarks are trademarks of their respective manufacturers and owners.
DISCLAIMER OF WARRANTIES
ALL OF THE INFORMATION, INSTRUCTIONS, AND RECOMMENDATIONS IN THIS DOCUMENTARE OFFERED ON A STRICTLY "AS IS" BASIS. THIS MATERIAL IS OFFERED WITHOUT ANYWARRANTY, EXPRESSED OR IMPLIED. NEITHER D-LINK NOR D-LINK ACADEMY SHALL BEHELD RESPONSIBLE FOR ANY DIRECT, INDIRECT, INCIDENTAL OR CONSEQUENTIALDAMAGES, THAT MAY RESULT FROM ANYTHING THAT IS VIEWED IN THIS DOCUMENT, ORANYTHING YOU DO AS A RESULT THEREOF. IT IS UP TO THE READER TO DETERMINE THESUITABILITY OF ANY DIRECTIONS OR INFORMATION VIEWED HERE. THIS LEARNINGPRODUCT MAY CONTAIN EARLY RELEASE CONTENT, AND WHILE D-LINK BELIEVES IT TO BECORRECT, IT FALLS SUBJECT TO THE DISCLAIMER ABOVE.
-
8/16/2019 DCS-Switching Lab Guide v1.8
3/64
D-Link Academy Table of Contents
Copyright ©2012-2013 D-Link Corporation DCS-Switching 3
Table of Contents
Lab 1: Network Essentials ............................................................................................7
Lab Objective ............................................................................................................ 7
Task 1: Understanding the OSI model ........................................................................ 8
Task 2: Understanding the TCP/IP protocol suite ...................................................... 8
Task 3: Understanding IP addresses and subnets ........................................................ 9
Answers for Lab 1: .................................................................................................. 11
Task 1: Understanding the OSI model .................................................................. 11
Task 2: Understanding the TCP/IP protocol suite ................................................. 11
Task 3: Understanding IP addresses and subnets ................................................... 11
Lab 2: D-Link Switch Operation ................................................................................13
Lab Objective .......................................................................................................... 13
Lab Topology .......................................................................................................... 14
Command List ........................................................................................................ 14
Lab Details ............................................................................................................. 16
Task 1: Connecting to the Switch using CLI ............................................................. 16
Task 2: To enable/disable ports (to prevent looping) ................................................. 18
Task 3: Configuring the Switch ................................................................................ 18
Task 4: Password Recovery Procedure ..................................................................... 20
Task 5: Connecting to the Switch using the Web Manager ........................................ 20
Lab Verification ....................................................................................................... 20
-
8/16/2019 DCS-Switching Lab Guide v1.8
4/64
Table of Contents D-Link Academy
4
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab 3: VLAN ..............................................................................................................21
Lab Objective .......................................................................................................... 21
Lab Topology .......................................................................................................... 22
Command List ........................................................................................................ 22
Lab Details .............................................................................................................. 23
Task 1: Creating static VLANs ................................................................................. 24
Task 2: Configuring tagged and untagged ports ......................................................... 24
Task 3: Configuring GVRP ...................................................................................... 25
Lab Verification ....................................................................................................... 26
Lab 4: Spanning Tree Protocol ....................................................................................27
Lab Objective .......................................................................................................... 27
Lab Topology .......................................................................................................... 28
Command List ........................................................................................................ 28
Lab Details .............................................................................................................. 29
Task 1: To enable/disable ports ................................................................................ 29
Task 2: Configuring STP .......................................................................................... 30
Task 3: Configuring the Primary Root Bridge and Secondary Root Bridge ................. 32
Task 4: Monitoring STP convergence ....................................................................... 32
Lab Verification ....................................................................................................... 33
Lab 5: Stacking ...........................................................................................................35
Lab Objective .......................................................................................................... 35
Lab Topology .......................................................................................................... 36
Command List ........................................................................................................ 36
-
8/16/2019 DCS-Switching Lab Guide v1.8
5/64
D-Link Academy Table of Contents
Copyright ©2012-2013 D-Link Corporation DCS-Switching 5
Lab Details ............................................................................................................. 37
Task 1: To enable/disable ports (to prevent looping in case STP is not enabled) ......... 38
Task 2: Configuring physical stacking ...................................................................... 38
Task 3: Configuring logical stacking (SIM) ............................................................... 41
Lab Verification ....................................................................................................... 44
Lab 6: Routing Basics .................................................................................................45
Lab Objective .......................................................................................................... 45
Lab Topology .......................................................................................................... 46
Command List ........................................................................................................ 46
Lab Details ............................................................................................................. 47
Task 1: To enable/disable ports (to prevent looping in case STP is not enabled) ......... 48
Task 2: Configuring VLANs .................................................................................... 48
Task 3: Configuring Static Route .............................................................................. 49
Task 4: Configuring RIP .......................................................................................... 50
Task 5: Configuring Route Preference ...................................................................... 51
Lab Verification ....................................................................................................... 52
Lab 7: D-Link Switching Features ..............................................................................53
Lab Objective .......................................................................................................... 53
Lab Topology .......................................................................................................... 54
Command List ........................................................................................................ 54
Lab Details ............................................................................................................. 57
Task 1: To enable/disable ports (To prevent looping in case STP is not enabled) ........ 57
Task 2: Configuring DHCP Server on SWRx1 and SWRx2 ...................................... 57
-
8/16/2019 DCS-Switching Lab Guide v1.8
6/64
Table of Contents D-Link Academy
6
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 3: Configuring ACL ......................................................................................... 60
Task 4: Configuring LLDP ...................................................................................... 61
Task 5: System Maintenance .................................................................................... 62
Lab Verification ....................................................................................................... 64
-
8/16/2019 DCS-Switching Lab Guide v1.8
7/64
D-Link Academy Lab 1
Copyright ©2012-2013 D-Link Corporation DCS-Switching 7
Lab 1: Network Essentials
Network Essentials
Chapter 1
[Chapter 1: Network Essentials]Version 1.0
Lab Objective
In this lab, you will apply/test your understanding of the fundamentals of networking and
the TCP/IP protocol suite learnt. After completing this lab, you should have a better
understanding of networking and the use of IP addressing and subnetting.
-
8/16/2019 DCS-Switching Lab Guide v1.8
8/64
Lab 1 D-Link Academy
8
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 1: Understanding the OSI model
Please fill in the blanks.
1. The provides end-to-end data transfer by delivering data from an
application to its remote peer.
2. The is the interface to the actual network hardware.
3. The provides addressing and routing functions.
4. The is provided by the program that uses TCP/IP for
communication. An application is a user process cooperating with another process,
usually on a different host.
Task 2: Understanding the TCP/IP protocol suite
1. Which port number indicates a WWW service recognized worldwide?
a. 80
b. 21
c. 25
d. 53
2. Of the following Layer 4 protocols, which one is used for a Telnet connection?
a. UDP
b. TCP
c. ICMP
d. DNS
-
8/16/2019 DCS-Switching Lab Guide v1.8
9/64
D-Link Academy Lab 1
Copyright ©2012-2013 D-Link Corporation DCS-Switching 9
3. What is the purpose of assigning an IP address to a switch?
a. Providing local hosts with a default gateway address
b. Allowing remote management of the switch
c. Allowing the switch to respond to ARP requests between two hosts
d. Ensuring that hosts on the same LAN can communicate with each other
4. For the following transport layer protocols, which one is most suitable for the transport
of VoIP data?
a. HTTP
b. UDP
c. RIP
d. OSPF
5. Which of the following are found in a TCP header, but not in a UDP header? (Choose
three.)
a. Sequence number
b. Acknowledgment number
c. Source port
d. Destination port
e. Window size
f. Checksum
Task 3: Understanding IP addresses and subnets
1. What is the subnet address for the IP address 172.19.20.23/28?
a. 172.19.20.0
b. 172.19.20.15
c. 172.19.20.16
d. 172.19.20.20
e. 172.19.20.32
-
8/16/2019 DCS-Switching Lab Guide v1.8
10/64
Lab 1 D-Link Academy
10
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
2. Of the following IP addresses, which one is a private address?
a. 12.0.0.1
b. 168.172.19.39
c. 172.20.14.36
d. 172.33.194.30
3. Which of the following two statements describe the IP address 10.16.3.65/23? (Choose
two.)
a. The subnet address is 10.16.3.0 255.255.254.0.
b. The broadcast address of the subnet is 10.16.3.255 255.255.254.0.
c. The lowest host address in the subnet is 10.16.2.1 255.255.254.0.
d. The last valid host address in the subnet is 10.16.2.254 255.255.254.0.
4. A small company has a Class C network address and needs to create five subnets, each
accommodating 25 hosts. Which subnet mask needs to be configured?
a. 255.255.240.0
b. 255.255.255.128
c. 255.255.255.192
d. 255.255.255.224
e. 255.255.255.240
f. 255.255.255.248
5. From which IP address class can 15 bits be borrowed to create subnets?
a. Class A
b. Class B
c. Class C
d. Class D
e. Class E
-
8/16/2019 DCS-Switching Lab Guide v1.8
11/64
D-Link Academy Lab 1
Copyright ©2012-2013 D-Link Corporation DCS-Switching 11
Answers for Lab 1:
Task 1: Understanding the OSI model
1. transport layer
2. physical layer
3. network layer
4. application layer
Task 2: Understanding the TCP/IP protocol suite
1. Answer: a
Explanation:
Port 1 to 1023 are well-known ports, where port 80 is for WWW, port 21 is for FTP, port
25 is for SMTP, and port 53 is for DNS.
2. Answer: b
Explanation:
Telnet requires a reliable connection, so TCP is used as the Transport layer protocol.
3. Answer: b
Explanation:
A switch does not require an IP address for it to be functional, however, the IP address
is needed for managing the switch.
4. Answer: b
Explanation:
VoIP traffic does not tolerate latency, and UDP is most suitable for such transmission.
5. Answer: a, b, e
Explanation:TCP needs to provide a reliable transmission, thus its header includes Sequence number,
Acknowledgement number, and Window Size.
Task 3: Understanding IP addresses and subnets
1. Answer: c
Explanation:
172.19.20.23/28 means 4 bits are borrowed for this Class B IP address. Thus,
172.19.20.16 is the subnet address.
-
8/16/2019 DCS-Switching Lab Guide v1.8
12/64
Lab 1 D-Link Academy
12
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
2. Answer: c
Explanation:
Private address for Class A: 10.0.0.0 – 10.255.255.255, Class B: 172.16.0.0 –
172.31.255.255, and Class C: 192.168.0.0 – 192.168.255.255.
3. Answer: b, cExplanation:
10.16.3.65/23 means 15 bits are borrowed for this Class A IP address. The subnet
address is 10.16.2.0, hosts are from 10.16.2.1 to 10.16.3.254, and the broadcast
address is 10.16.3.255.
4. Answer: d
Explanation:
To have 5 subnets, it means 3 bits need to be borrowed from the host bits. The default
subnet mask for Class C is 255.255.255.0, thus after borrowing 3 bits, the new subnet
mask will be 255.255.255.224.
5. Answer: a
Explanation:
Only Class A can be borrowed with 15 bits as it has 24 host bits. Class B has 16 host bits,
so if borrowed 15 bits, there will be no host left after subtracting the 2 reserved ip
addresses (network and broadcast). Class C only has 8 host bits, so it is not possible to
borrow 15 bits. Class D and E are reserved addresses.
-
8/16/2019 DCS-Switching Lab Guide v1.8
13/64
D-Link Academy Lab 2
Copyright ©2012-2013 D-Link Corporation DCS-Switching 13
Lab 2: D-Link Switch Operation
Chapter 2
D-Link Switch Operation
[Chapter 2: D-Link Switch Operation]Version 1.0
Lab Objective
In this lab, you will learn to access and configure the Switch for basic Switch operations.
After completing this lab, you will be able to connect to the Switch using a serial cable
through a terminal emulation program, and learn the basic maintenance commands for the
Switch.
-
8/16/2019 DCS-Switching Lab Guide v1.8
14/64
Lab 2 D-Link Academy
14
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.
Command List
Command Description
? To open Help.
clear To clear the screen.
-
8/16/2019 DCS-Switching Lab Guide v1.8
15/64
D-Link Academy Lab 2
Copyright ©2012-2013 D-Link Corporation DCS-Switching 15
Command Description
config command_prompt
[|username|default] To change the command prompt.
config ipif System ipaddress
To change the System IP address of the Switch.
config ports state disable To disable a particular port on the Switch.
config ports state enable To enable a particular port on the Switch.
create account admin To create an administrator-level account for the
Switch.
delete account To delete a user account.
disable password encryption To disable password encryption.
disable sshTo disable secure login to remote devices through the
network.
enable password encryption To enable password encryption.
enable ssh To log in securely to remote devices through thenetwork.
enable telnet
-
8/16/2019 DCS-Switching Lab Guide v1.8
16/64
Lab 2 D-Link Academy
16
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Command Description
show utilization flash To show flash memory utilization.
telnet {tcp_port
-
8/16/2019 DCS-Switching Lab Guide v1.8
17/64
D-Link Academy Lab 2
Copyright ©2012-2013 D-Link Corporation DCS-Switching 17
1 stop bit
4. If the serial port is properly connected to a computer, the Switch’s banner will be visible.
Upon seeing the banner, press ENTER for the UserName and Password prompts. There
is no initial username or password.
5. Type ? and press ENTER to display the list of available commands.
6. Press ESC to quit from the command lists, press n for the next page or press ENTER for
the next command.
7. To display the switch information, type show switch, and fill in the following details:
What is the Device Type?
________________________________________________
What is the MAC address?
________________________________________________
What is the IP Address?
________________________________________________
What is the Firmware Version?
________________________________________________
What is the Serial Number?
________________________________________________
8. Type show greeting_message to view the currently configured greeting message on
the Switch.
9. Type show serial_port to display the serial port settings on the Switch.
10. Type show ports to display the current configuration of a range of ports.
11. Type show utilization flash to display the total and used FLASH memory.
12. Type show command_history to display the command history.
13. Press the UP arrow key and DOWN arrow key to display the previously typed
commands.
14. Type clear to clear the screen.
15. Type save to save changes in the Switch’s configuration to non-volatile RAM.
-
8/16/2019 DCS-Switching Lab Guide v1.8
18/64
Lab 2 D-Link Academy
18
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 2: To enable/disable ports (to prevent looping)
1. All ports will be enabled by default. To disable all the ports on the switch, type config
ports all state disable.
2. Type show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the Switch, type config ports state enable, where
represents the port number. Your switch’s enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
port 1 and 24. The command is config ports 1,24 state enable.
Task 3: Configuring the Switch
1. To change the name of the Switch, type config command_prompt ,
where represents the device’s name. Your Switch Name can be obtained
from the Lab Details section. For example, if you belong to Pod1, your Switch Name will
be SWR11, SWR12, SW13, SW14, SW15, and SW16.
2. To change the IP address of the Switch, type config ipif System ipaddress
. For example, if you belong to Pod1, SWRx1 in Pod 1 = SWR11,
and the IP Address is 10.90.90.11/24. Your Switch IP address can be obtained from the
Lab Details section.
3. Type show switch to verify that the Switch’s IP address has been updated.
4. To increase the security of your Switch, it is better to create an account with a password
for logging in.
Type create account admin admin1. When prompted for a password, type admin1.
5. Create a second account by typing create account user user1. When prompted for a
password, type user1.
6. Type show account to display the accounts that have been created.
7. Type delete account user1 to delete a previously created account.
8. Type show account and you will see that user1 does not exist anymore.
9. Using the ping command to test the availability of your neighbors. Example: To reach
SW12, type ping 10.90.90.12 times 5. (All switches in the same pod should be
reachable because they are all in the same subnet of 10.90.90.0/24.)
-
8/16/2019 DCS-Switching Lab Guide v1.8
19/64
D-Link Academy Lab 2
Copyright ©2012-2013 D-Link Corporation DCS-Switching 19
10. Type show switch and press the Enter to verify that Telnet is enabled. Default for
Telnet is enabled with TCP Port 23. If Telnet is not enabled, type the command enable
telnet 23.
11. Using the telnet command, try to access to your neighbor’s Switch. For example, to
access SW12, type telnet 10.90.90.12. When prompted for UserName and Password,use admin1 for both entries.
You are now remotely connecting to a different switch. Notice the change in the
command_prompt.
12. Type show session to display a list of all the users that are logged in to the Switch.
13. Type logout to end the Telnet session.
14. SSH is a more secure way to connect to a remote device. To allow SSH on your own
switch, check that SSH is enabled by using the show switch command. By default, it is
disabled.
15. Type enable ssh to change it to secure mode. Type show switch to ensure that SSH
has been enabled. Note that for DGS-3627 and DES-3528 when SSH is enabled, Telnet
is disabled.
16. To demonstrate the use of SSH, ensure you PC’s IP address is in the same network as the
Switch. The PC’s IP address can be obtained from the Lab Details section.
17. Run Tera Term or other terminal emulation softwares from your PC, enter the IP address
of the Switch that you want to connect to, and choose SSH.
18. When prompted for Username and Password, use admin1 for both entries.
19. Type logout to end the session.
20. To revert back to allow Telnet access on your Switch, enter disable ssh, followed by
enable telnet. This step is required ONLY for DGS-3627 and DES-3528.
-
8/16/2019 DCS-Switching Lab Guide v1.8
20/64
Lab 2 D-Link Academy
20
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
21. Type show switch to verify that Telnet has been enabled.
22. Type save to save changes in the Switch’s configuration to non-volatile RAM.
Task 4: Password Recovery Procedure
1. To recover password, you have to reboot the Switch and press Shift+6 repeatedly to
enter the “Password Recovery Mode”.
2. At the “Password Recovery Mode”, type reset password admin1 to reset the password
for the account admin1.
3. Type reboot.
4. Type config account admin1 to configure a new password. (Note: Use admin1 as the
password.)
Task 5: Connecting to the Switch using the Web Manager
1. Type show switch to verify that the Web is enabled. By default, it is enabled. If it is not,
type enable web.
2. From your browser, type the IP address of your Switch.
3. Enter admin1 for both the Username and Password.
4. You are now successfully connected to the Switch using the Web Manager.
Lab Verification
At the end of this lab, you have learned:
• How to connect to the Switch using CLI and Web.
• How to change the Switch’s name and IP address.
• How to create accounts on the Switch.
• Various commands to verify the Switch’s configuration.
-
8/16/2019 DCS-Switching Lab Guide v1.8
21/64
D-Link Academy Lab 3
Copyright ©2012-2013 D-Link Corporation DCS-Switching 21
Lab 3: VLAN
Chapter 3
VLAN
[Chapter 3: VLAN]Version 1.0
Lab Objective
In this lab, you will learn to create and configure VLANs on the switch. After completing this
lab, you will have acquired the skills to create both static and dynamic (GVRP) VLANs.
-
8/16/2019 DCS-Switching Lab Guide v1.8
22/64
Lab 3 D-Link Academy
22
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.
Command List
Command Description
config gvrp [ | all] {state
[enable | disable] | ingress_checking
[enable | disable] | acceptable_frame
[tagged_only | admit_all] | pvid
}
This command is used to configure GVRP on the
switch. (DGS-3627)
-
8/16/2019 DCS-Switching Lab Guide v1.8
23/64
D-Link Academy Lab 3
Copyright ©2012-2013 D-Link Corporation DCS-Switching 23
Command Description
config port_vlan [ | all]
{ gvrp_state [enable | disable] |
ingress_checking [enable | disable]
| acceptable_frame[tagged_only |
admit_all]pvid}
This command is used to configure the Group VLAN
Registration Protocol on the Switch. Ingress checking,
the sending and receiving of GVRP information, and
the Port VLAN ID (PVID) can be configured.
(DGS-3620-28TC, DES-3528)
config vlan {[add
[ tagged | untagged | forbidden] |
delete] | advertisement
[enable | disable]}
This command is used to add additional ports to a
previously configured VLAN.
create vlan {tag
| type 1q_vlan |
advertisement}
This command is used to create a VLAN on the switch.
delete vlan This command is used to delete a previously
configured VLAN on the switch.disable gvrp This command is used to disable GVRP on the switch.
enable gvrp This command is used to enable GVRP on the switch.
show gvrp {}This command is used to display the GVRP status for a
port list on the switch. (DGS-3627)
show port_vlan {}This command displays the GVRP status for a port list
on the Switch (DGS-3620-28TC, DES-3528)
show vlan {[ |
vlanid ] | ports }
This command is used to display the current VLAN
configuration on the switch.
Lab Details
Switch NameSwitch’s IP
AddressEnabled Ports
Connected PC
(if any)PC’s IP Address
SWRx1 10.90.90.x1/24 1, 24 PCx1 10.90.90.x01/24
SWRx2 10.90.90.x2/24 1, 24 PCx2 10.90.90.x02/24
SWx3 10.90.90.x3/24 1, 3 PCx3 10.90.90.x03/24
SWx4 10.90.90.x4/24 1, 3 PCx4 10.90.90.x04/24
SWx5 10.90.90.x5/24 3 PCx5 10.90.90.x05/24
SWx6 10.90.90.x6/24 3 PCx6 10.90.90.x06/24
Note: x=POD number
Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
-
8/16/2019 DCS-Switching Lab Guide v1.8
24/64
Lab 3 D-Link Academy
24
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 1: Creating static VLANs
In this task, only SWx3 will be configured with static VLANs. This is to illustrate the concept
of a static VLAN.
1. On SWx3, type the following commands:
create vlan v10 tag 10
create vlan v20 tag 20
create vlan v30 tag 30
2. On all the switches, type show vlan to verify that none of the above VLANs have been
created on the other switches except for SWx3.
3. On SWx3, type delete vlan v30 to remove the VLAN from its switch. Type show vlan
to verify that the VLAN has been removed successfully.
Task 2: Configuring tagged and untagged ports
Tagged ports are trunk links which allow multiple VLANs to cross one link. Untagged ports
are access links which connect to the edge devices or hosts.
1. Before proceeding to make any changes on the ports, try to ping your neighbors to verify
that all switches are still in the same VLAN. Example: On SWx5, type ping 10.90.90.x3
times 5 to verify that SWx3 is reachable. All switches in the same pod will be reachable
at this stage.
2. On all switches, type show vlan or show vlan ports to verify that all ports are assigned
to VLAN 1 and are untagged (by default).
3. To remove Port 10 from the default VLAN, type config vlan default delete 10. Type
show vlan to verify that Port 10 has been removed from the default VLAN.
4. To add the port back to the VLAN, type config vlan default add untagged 10. Type
show vlan to verify that Port 10 has been added to the default VLAN.
5. On SWx3, type the following commands:
config vlan default delete 3
config vlan v10 add untagged 3
config vlan v10 add tagged 1
config vlan v20 add tagged 1
(The first command will remove Port 3 from the default VLAN. The second command will
configure Port 3 to be untagged for VLAN v10. The third and fourth commands will
configure Port 1 to be tagged for VLAN v10 and v20.)
-
8/16/2019 DCS-Switching Lab Guide v1.8
25/64
D-Link Academy Lab 3
Copyright ©2012-2013 D-Link Corporation DCS-Switching 25
Type show vlan and show vlan ports to verify that Port 3 is untagged and is assigned
to VLAN v10.
6. On SWx5, type ping 10.90.90.x3 times 5. The ping traffic fails because SWx3 and
SWx5 are not assigned to the same VLAN, and routing has not been enabled.
7. On all switches, type ping 10.90.90.x5 times 5. The ping traffic fails because SWx5 is
in a different VLAN.
Task 3: Configuring GVRP
VLANs can be created in a static or dynamic way. GVRP is the dynamic way to configure
VLANs. In this lab, SWx5 and SWx6 are regarded as hosts. Delete all the static VLANs before
proceeding with this Task.
1. On SWRx1, SWRx2, SWx3, and SWx4, type show gvrp to verify that GVRP is disabled
by default.
2. To verify GVRP settings on Ports 1 and 24:
On SWRx1 and SWRx2, type show gvrp 1,24(DGS-3627) or show port_vlan
1,24(DGS-3620-28TC).
On SWx3 and SWx4, type show port_vlan 1.
3. On SWRx1, SWRx2, SWx3, and SWx4, type enable gvrp to enable GVRP on the switch.
4. On SWRx1 and SWRx2, type config gvrp 1,24 state enable to enable GVRP on the
ports, then type show gvrp 1,24 to verify that GVRP has been enabled on the ports
successfully.
Note: For DGS-3620-28TC, use config port_vlan 1, 24 grvp_state enable and show
port_vlan 1, 24.
5. On SWx3 and SWx4, type config port_vlan 1 gvrp_state enable to enable GVRP on
the ports, then type show port_vlan 1 to verify that GVRP has been enabled on the
ports successfully.
6. On SWRx1, type the following commands:
create vlan v10 tag 10 advertisementcreate vlan v20 tag 20 advertisement
config vlan v10 add tagged 1,24
config vlan v20 add tagged 1,24
(The first and second commands will create a VLAN v10 and v20 and enable the VLAN
advertisement. The third and fourth commands will configure Ports 1 and 24 to be
tagged for VLAN v10 and v20.)
-
8/16/2019 DCS-Switching Lab Guide v1.8
26/64
Lab 3 D-Link Academy
26
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Type show vlan and show vlan ports to verify that Ports 1 and 24 are tagged and
assigned to VLAN v10 and v20.
7. On SWRx1, SWRx2, SWx3, and SWx4, type show vlan. On SWRx1, the VLAN Type is
shown as “Static” and the Advertisement is shown as “Enabled”. On SWRx2, SWx3, and
SWx4, the VLAN Type is shown as “Dynamic” and the Advertisement is shown as “Enabled”. This shows that the VLAN has been successfully advertised from SWRx1 to
the other switches.
Lab Verification
At the end of this lab, you have now learned:
• How to create and delete VLANs.
• How to modify ports to be tagged and untagged.
• How to configure VLANs using static and dynamic ways.
-
8/16/2019 DCS-Switching Lab Guide v1.8
27/64
D-Link Academy Lab 4
Copyright ©2012-2013 D-Link Corporation DCS-Switching 27
Lab 4: Spanning Tree Protocol
Spanning Tree Protocol
Chapter 4
[Chapter 4: Spanning Tree Protocol]Version 1.0
Lab Objective
In this lab, you will learn to create and configure the Spanning Tree Protocol (STP). After
completing this lab, you should be able to configure STP and RSTP as well as primary and
secondary root bridges.
-
8/16/2019 DCS-Switching Lab Guide v1.8
28/64
Lab 4 D-Link Academy
28
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.
Command List
Command Description
enable stp This command is used to enable STP globally.
disable stp This command is used to disable STP globally.
-
8/16/2019 DCS-Switching Lab Guide v1.8
29/64
D-Link Academy Lab 4
Copyright ©2012-2013 D-Link Corporation DCS-Switching 29
Command Description
config stp version [mstp | rstp | stp]This command is used to enable the STP version
globally.
config stp priority
instance_id
This command is used to configure the instance
priority.
show stpThis command is used to show the global settings of
the bridge parameters.
show stp instance This command is used to show each instance of the
parameter settings.
show stp ports {}
This command is used to show the port information
including the parameter settings and operational
value.
config stp portsThis command is used to configure the ports
management parameters at the CIST level only.
config stp This command is used to configure the bridgemanagement parameters for CIST (instance_id=0).
Lab Details
Switch NameSwitch’s IP
AddressEnabled Ports
Connected PC
(if any)PC’s IP Address
SWRx1 10.90.90.x1/24 1, 24 PCx1 10.90.90.x01/24
SWRx2 10.90.90.x2/24 1, 24 PCx2 10.90.90.x02/24
SWx3 10.90.90.x3/24 1, 3, 24 PCx3 10.90.90.x03/24
SWx4 10.90.90.x4/24 1, 3, 24 PCx4 10.90.90.x04/24
SWx5 10.90.90.x5/24 3 PCx5 10.90.90.x05/24
SWx6 10.90.90.x6/24 3 PCx6 10.90.90.x06/24
Note: x=POD number
Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
Task 1: To enable/disable ports
1. All ports will be enabled by default. To disable all the ports on the switch, enter config
ports all state disable.
-
8/16/2019 DCS-Switching Lab Guide v1.8
30/64
Lab 4 D-Link Academy
30
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the Switch, enter config ports state enable, where
represents the port number. Your switch’s enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports arePorts 1 and 24. The command is config ports 1,24 state enable.
Task 2: Configuring STP
In this task, STP will be enabled on all switches except SWx5 and SWx6 as they are regarded
as host devices in this lab.
1. Enter show stp to verify the STP’s settings on the switch. (The default setting for STP is
disabled.)
2. On SWRx1, SWRx2, SWx3, and SWx4, enter enable stp. Enter show stp on these four
switches to get the following STP status:
3. The default STP version is RSTP. To set it to STP, enter config stp version stp on
SWRx1, SWRx2, SWx3, and SWx4. You will obtain the following status:
-
8/16/2019 DCS-Switching Lab Guide v1.8
31/64
D-Link Academy Lab 4
Copyright ©2012-2013 D-Link Corporation DCS-Switching 31
4. On SWRx1, SWRx2, SWx3, and SWx4, enter config stp version rstp to revert the STP
status back to RSTP.
5. On SWx3 and SWx4, enter config stp ports 3 edge true to configure Port 3 as the edge
device. This means that SWx5 and SWx6, which are connected to Port 3, will not
participate in STP.
6. On SWx3 and SWx4, enter show stp ports 3 to verify that the status of the Edge port
is set to True.
7. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the MAC
address of the Designated Root Bridge?
_________________________________________________
8. On SWRx1, SWRx2, SWx3, and SWx4, enter show switch. What is the MAC address of
the switch?
_________________________________________________
9. Compare the MAC address of the switch and the MAC address of the Designated RootBridge. Are they the same? Yes/No
10. If yes, it means that the switch is the Designated Root Bridge. If no, it means that the
switch is not the Designated Root Bridge.
-
8/16/2019 DCS-Switching Lab Guide v1.8
32/64
Lab 4 D-Link Academy
32
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 3: Configuring the Primary Root Bridge and Secondary
Root Bridge
In this task, SWRx1 will be configured as the primary root bridge, and SWRx2 will beconfigured as the secondary root bridge.
1. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the Instance
Priority of the switch?
_________________________________________________
2. On SWRx1, enter config stp priority 0 instance_id 0 to configure the switch with
priority 0. The switch with the lowest priority will be selected as the primary root bridge.
3. On SWRx2, enter config stp priority 4096 instance_id 0 to configure the switch withpriority 4096. The switch with the second lowest priority will be selected as the
secondary root bridge.
Note: The priority value must be an incremental of 4096.
4. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the Instance
Priority of the switch?
_________________________________________________
5. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the MAC
address of the Designated Root Bridge?
_________________________________________________
6. Compare SWRx1’s MAC address with the MAC address of the Designated Root Bridge.
They should be the same, because SWRx1 has the lowest priority and thus will be
selected as the Designated Root Bridge.
7. On SWRx1 and SWRx2, enter show stp ports 1,24. On SWx3 and SWx4, enter show
stp ports 1,3,24. Using the Lab Topology, label the Designated ports, Root ports, and
Alternate ports (if any).
Task 4: Monitoring STP convergence
In this task, SWx4 will be used to demonstrate the convergence of STP by making use of the
redundant link.
1. On SWx4, enter show stp ports 1,3,24 to verify that Port 1 is the Root port.
-
8/16/2019 DCS-Switching Lab Guide v1.8
33/64
D-Link Academy Lab 4
Copyright ©2012-2013 D-Link Corporation DCS-Switching 33
2. On SWx4, enter config ports 1 state disable to disable Port 1. (This is for testing STP
convergence.)
3. On SWx4, enter show stp ports 1,3,24 to verify that Port 1 is disabled and not the Root
port (Port 24 is now selected as the Root port).
4. On SWx4, enter config ports 1 state enable to enable Port 1, and enter show stp
ports 1,3,24 to verify that Port 1 is selected as the Root port and Port 24 as the
Alternate port.
Lab Verification
At the end of this lab, you have now learned:
• How to enable STP and RSTP.
• How to configure the primary and secondary root bridges.
-
8/16/2019 DCS-Switching Lab Guide v1.8
34/64
-
8/16/2019 DCS-Switching Lab Guide v1.8
35/64
D-Link Academy Lab 5
Copyright ©2012-2013 D-Link Corporation DCS-Switching 35
Lab 5: Stacking
Switch Stacking
Chapter 5
[Chapter 5: Switch Stacking]Version 1.0
Lab Objective
In this lab, you will learn to configure stacking. After completing this lab, you should be able
to configure two types of stacks: physical and virtual.
-
8/16/2019 DCS-Switching Lab Guide v1.8
36/64
Lab 5 D-Link Academy
36
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.
Command List
Command Description
config box_id current_box_id new_box_id [auto | ]
This command is used to configure the Box ID. Users
can use this command to reassign Box IDs.
config box_priority current_box_id
priority
This command is used to configure the box priority of
the switch.
(DGS-3627)
Port 28 (DGS-3620-28TC)
-
8/16/2019 DCS-Switching Lab Guide v1.8
37/64
D-Link Academy Lab 5
Copyright ©2012-2013 D-Link Corporation DCS-Switching 37
Command Description
config sim [[commander
{group_name } |
candidate] | dp_interval
| hold_time ]}
This command is used to configure parameters of
switches of the SIM.
config sim [add {} | delete
]
This command is used to add candidates and delete
members from the SIM group by ID number.
config stacking force_master_role
state [enable | disable]
This command is used to configure the stacking-force
master role.
config stacking_mode [disable |
enable] This command is used to configure the stacking mode.
disable sim This command disables SIM on the switch.
enable sim This command enables SIM on the switch.
show sim {[candidates {} | members {} | group {commander_mac
} | neighbor]}
This command is used to view the current information
regarding the SIM group on the switch.
show stack_device This command is used to display information about
the devices in the stack.
show stack_informationThis command is used to display the stack
information.
show stacking_modeThis command is used to display the current stacking
mode.
Lab Details
Switch NameSwitch’s IP
AddressEnabled Ports
Connected PC
(if any)PC’s IP Address
SWRx1 10.90.90.x1/24 1, 26/28 PCx1 10.90.90.x01/24
SWRx2 10.90.90.x2/24 1, 27 PCx2 10.90.90.x02/24
SWx3 10.90.90.x3/24 1, 3 PCx3 10.90.90.x03/24
SWx4 10.90.90.x4/24 1, 3 PCx4 10.90.90.x04/24
SWx5 10.90.90.x5/24 3 PCx5 10.90.90.x05/24
SWx6 10.90.90.x6/24 3 PCx6 10.90.90.x06/24
Note: x=POD number
Examples:
SWRx1 in POD 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in POD 2=SWR21; IP Address is 10.90.90.21/24
-
8/16/2019 DCS-Switching Lab Guide v1.8
38/64
Lab 5 D-Link Academy
38
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 1: To enable/disable ports (to prevent looping in case
STP is not enabled)
1. All ports will be enabled by default. To disable all the ports on the switch, enter configports all state disable.
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the switch, enter config ports state enable, where
represents the port number. Your switch’s enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 26 or 28. The command is config ports 1,26/28 state enable.
Task 2: Configuring physical stacking
In this task, only SWRx1 and SWRx2 will be used for stacking. The stacking cable is
connected to Port 26 of SWRx1 or Port 28 for DGS-3620-28TC and Port 27 of SWRx2.
1. To enable both ports for stacking, on SWRx1, enter config ports 26 or 28 state enable
and on SWRx2, enter config ports 27 state enable.
2. On SWRx1 and SWRx2, enter config stacking_mode enable. Please note that this
command can only be used on the same series of switches. After entering the command,
enter y when asked to reboot.
-
8/16/2019 DCS-Switching Lab Guide v1.8
39/64
D-Link Academy Lab 5
Copyright ©2012-2013 D-Link Corporation DCS-Switching 39
3. When the switches have rebooted, on SWRx1, enter show stack _device and show
stack_information to verify the stacking settings.
Note: A maximum of 12 switches can be stacked.
4. When trying to access SWRx2, the message “Please login through Master Box…” will
appear.
-
8/16/2019 DCS-Switching Lab Guide v1.8
40/64
Lab 5 D-Link Academy
40
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
5. Based on the above scenario, SWRx1 is the Master Box. If a different switch should be
selected as the Master Box, use the command config box_priority current_box_id
priority .
Example: enter config box_priority current_box_id 2 priority 1 to change the
Master Box to SWRx2, then save the configuration and reboot the switch.
In the above figure, the Master Box is SWRx1 and has the serial number P1JH195000010.
-
8/16/2019 DCS-Switching Lab Guide v1.8
41/64
D-Link Academy Lab 5
Copyright ©2012-2013 D-Link Corporation DCS-Switching 41
In the above figure, the new Master Box has the serial number P1JH95000008. The
switch’s command prompt remains the same because they are stacked.
Note: After completing this task, the stacking cable needs to be physically disabled to
terminate stacking and change the SWRx2 System IP address back to 10.90.90.x2 in
order to proceed with Task 3.
Task 3: Configuring logical stacking (SIM)
In this task, only SWRx1 and SWRx2 will be used for logical stacking, which is also known as
Single IP Management (SIM).
1. On SWRx1 and SWRx2, enter enable sim.
2. On SWRx1, enter config sim commander group_name podx to configure SWRx1 as
the SIM commander. Enter show sim candidates and a single candidate should be
displayed (i.e. SWRx2).
-
8/16/2019 DCS-Switching Lab Guide v1.8
42/64
Lab 5 D-Link Academy
42
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
3. On SWRx1, enter config sim_group add 1. SWRx1 will add SWRx2 to the SIM group.
Note: If you are asked for the password, input the password of SWRx2.
4. On SWRx1, enter show sim candidates. Zero candidates will be displayed as SWRx2
has already joined the SIM group. Enter show sim members and SWRx2 should be
displayed as one of the SIM members.
5. On SWrx1 and SWRx2, enter show sim.
-
8/16/2019 DCS-Switching Lab Guide v1.8
43/64
D-Link Academy Lab 5
Copyright ©2012-2013 D-Link Corporation DCS-Switching 43
6. After completing logical stacking of the switches, use the Web browser to access SWRx1
(IP address 10.90.90.11). Through the Web browser, it is now possible to manage all the
switches that are logically stacked together.
-
8/16/2019 DCS-Switching Lab Guide v1.8
44/64
Lab 5 D-Link Academy
44
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Verification
At the end of this lab, you have now learned how to enable physical and virtual stacking.
-
8/16/2019 DCS-Switching Lab Guide v1.8
45/64
D-Link Academy Lab 6
Copyright ©2012-2013 D-Link Corporation DCS-Switching 45
Lab 6: Routing Basics
Routing
Chapter 6
[Chapter 6: Routing Basics]Version 1.0
Lab Objective
In this lab, you will learn to configure routing using two different methods: static and
dynamic.
-
8/16/2019 DCS-Switching Lab Guide v1.8
46/64
Lab 6 D-Link Academy
46
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528.
Command List
Command Description
create iproute [default |
] [null0 |
{}
{[primary | backup | weight ]}]
This command is used to create an IP route entry to
the switch’s IP routing table.
-
8/16/2019 DCS-Switching Lab Guide v1.8
47/64
D-Link Academy Lab 6
Copyright ©2012-2013 D-Link Corporation DCS-Switching 47
Command Description
delete iproute [default |
] [null0 |
]
This command is used to delete an IP route entry from
the switch’s IP routing table.
show iproute {[
| ]} {[static | rip | ospf |
bgp | hardware]}
This command is used to display the switch’s currentIP routing table.
enable rip This command is used to enable the RIP routing.
config rip [ipif |all]
{authentication [ enable | disable ] | tx_mode [disable |
v1_only | v1_compatible | v2_only]
| rx_mode [v1_only | v2_only |
v1_or_v2 | disable] | state [enable |
disable]}
This command is used to configure RIP on the switch.
show rip {ipif }This command is used to display the RIP configuration
and statistics for the switch.
config route preference [static |
default | rip | ospfIntra | ospfInter |
ospfExt1 | ospfExt2 | ebgp | ibgp]
This command is used to configure route type
preference.
show route preference {[ local |
static | default | rip | ospf | ospfIntra
| ospfInter | ospfExt1 | ospfExt2 |
ebgp | ibgp]
This command is used to display the route preference
of each route type.
Lab Details
Switch NameSwitch’s IP
AddressEnabled Ports
Connected PC
(if any)PC’s IP Address
SWRx1 10.90.90.x1/24 1, 24 PCx1 10.90.90.x01/24
SWRx2 10.90.90.x2/24 1, 24 PCx2 10.90.90.x02/24
SWx3 10.90.90.x3/24 1, 3 PCx3 10.90.90.x03/24
SWx4 10.90.90.x4/24 1, 3 PCx4 10.90.90.x04/24SWx5 10.90.90.x5/24 3 PCx5 10.90.90.x05/24
SWx6 10.90.90.x6/24 3 PCx6 10.90.90.x06/24
Note: x=POD number
Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
-
8/16/2019 DCS-Switching Lab Guide v1.8
48/64
Lab 6 D-Link Academy
48
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 1: To enable/disable ports (to prevent looping in case
STP is not enabled)
1. All ports will be enabled by default. To disable all the ports on the switch, enter configports all state disable.
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the switch, enter config ports state enable, where
represents the port number. Your switch’s enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 24. The command is config ports 1,24 state enable.
Task 2: Configuring VLANs
In this task, different subnets must be configured on the switches to demonstrate routing.
1. On SWRx1, enter the following commands to create VLANs and assign an IP address to
each VLANs:
config ipif System ipaddress 10.90.90.x1/24
create vlan v10 tag 10
config vlan v10 add tagged 1
create ipif v10-if 10.90.x1.11/24 v10
2. On SWRx2, enter the following commands to create VLANs and assign an IP address to
each VLANs:
config ipif System ipaddress 10.90.90.x2/24
create vlan v20 tag 20
config vlan v20 add tagged 1
create ipif v20-if 10.90.x2.11/24 v20
3. On SWRx1 and SWRx2, enter show ipif to verify the IP addresses are applied
successfully.
4. On SWRx1, enter ping 10.90.x2.11 times 5 and note that the ping fails. On SWRx2,
enter ping 10.90.x1.11 times 5 and note that this ping also fails. Both the pings fail
because there are no routes configured to reach a different VLAN.
-
8/16/2019 DCS-Switching Lab Guide v1.8
49/64
D-Link Academy Lab 6
Copyright ©2012-2013 D-Link Corporation DCS-Switching 49
Task 3: Configuring Static Route
In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1 and SWRx2, enter show iproute to view the existing routing table. Write
down the network addresses shown in the routing table:
________________________________________________
________________________________________________
2. On SWRx1, enter create iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
create iproute 10.90.x1.0/24 10.90.90.x1. This is to create a static route to point to
a destination network through a next hop.
3. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Write
down the new network addresses (with the Protocol status as Static) shown in the
routing table:
________________________________________________
________________________________________________
4. On SWRx1, enter ping 10.90.x2.11 times 5 and on SWRx2, enter ping 10.90.x1.11
times 5. Both the pings will be successful because there is a route configured to reach
each VLAN.
-
8/16/2019 DCS-Switching Lab Guide v1.8
50/64
Lab 6 D-Link Academy
50
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 4: Configuring RIP
In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1 and SWRx2, enter show iproute to view the existing routing table. Write
down the network addresses shown in the routing table:
________________________________________________
________________________________________________
2. On SWRx1 and SWRx2, enter enable rip to enable RIP on both switches.
3. On SWRx1, enter the following commands:
config rip ipif System state enableconfig rip ipif System rx_mode v2_only tx_mode v2_only
config rip ipif v10-if state enable
config rip ipif v10-if rx_mode v2_only tx_mode v2_only
(The above commands enable RIP on the interfaces and specifies RIP Version 2 on both
receive and transmit modes.)
4. On SWRx2, enter the following commands:
config rip ipif System state enable
config rip ipif System rx_mode v2_only tx_mode v2_only
config rip ipif v20-if state enable
config rip ipif v20-if rx_mode v2_only tx_mode v2_only
(The above commands enables RIP on the interfaces and specifies RIP Version 2 on both
receive and transmit modes.)
5. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Note that
there are no RIP entries because a static route has a route preference of 60 and RIP has
a route preference of 100. A lower route preference value is preferred. There are two
solutions: delete the static route or change the value of the route preference.
6. On SWRx1, enter delete iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
delete iproute 10.90.x1.0/24 10.90.90.x1. This is to remove the static routes that
were previously configured in Task 3.
7. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Write down
the new network addresses (with the Protocol status as RIP) shown in the routing table:
________________________________________________
________________________________________________
-
8/16/2019 DCS-Switching Lab Guide v1.8
51/64
D-Link Academy Lab 6
Copyright ©2012-2013 D-Link Corporation DCS-Switching 51
8. On SWRx1, enter ping 10.90.x2.11 times 5 and on SWRx2, enter ping 10.90.x1.11
times 5. Both the pings will be successful because there is a route configured to reach
each VLAN.
Task 5: Configuring Route Preference
In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1, enter create iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
create iproute 10.90.x1.0/24 10.90.90.x1. This is to insert the previous static route,
which by default has a lower route preference. After inserting the static route, the route
entries inserted by RIP will be replaced.
2. On SWRx1 and SWRx2, enter config route preference static 200, to change the route
preference of the static route to 200.
3. On SWRx1 and SWRx2, enter show iproute to view the updated routing table.
What type of routes do you see?
________________________________________________
4. Why is a static route not displayed in the routing table?
________________________________________________
-
8/16/2019 DCS-Switching Lab Guide v1.8
52/64
Lab 6 D-Link Academy
52
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Verification
At the end of this lab, you have now learned:
• How to configure static route.
• How to configure dynamic routing through the use of the RIP protocol.
• How to change the value of the route preference.
-
8/16/2019 DCS-Switching Lab Guide v1.8
53/64
D-Link Academy Lab 7
Copyright ©2012-2013 D-Link Corporation DCS-Switching 53
Lab 7: D-Link Switching Features
D-Link Switching Features
Chapter 7
[Chapter 7: D-Link Switching Features]Version 1.0
Lab Objective
In this lab, you will learn to configure DHCP, ACL, LLDP, and System Maintenance. After
completing this lab, you should be able to configure dynamic address allocation, permitting
or denying traffic, learning about your neighbors, and backing up your firmware and
configuration files.
-
8/16/2019 DCS-Switching Lab Guide v1.8
54/64
Lab 7 D-Link Academy
54
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.
Command List
DHCP Command Description
config dhcp pool default_router
{} {}
This command is used to configure the default router
for the DHCP client.
-
8/16/2019 DCS-Switching Lab Guide v1.8
55/64
D-Link Academy Lab 7
Copyright ©2012-2013 D-Link Corporation DCS-Switching 55
DHCP Command Description
config dhcp pool dns_server_address
{} {}
This command is used to configure the IP addresses of
DNS servers for a specific DHCP pool.
config dhcp pool network_addr
This command is used to configure the network
address and corresponding subnet mask for the DHCP
pool.
create dhcp excluded_address
begin_address
end_address
This command is used to configure IP addresses that
will be excluded from the DHCP server’s pool of
addresses.
create dhcp pool This command is used to create a DHCP pool.
disable dhcp_serverThis command disables the DHCP function on the
switch.
enable dhcp_serverThis command enables the DHCP function on the
switch.show dhcp_binding {}
This command is used to show the DHCP binding
information.
show dhcp_serverThis command is used to display the DHCP server
settings.
ACL Command Description
config access_profile This command is used to configure access list entry.
create access_profile This command is used to create access list rules.
show access_profile This command is used to display the current access listtable.
LLDP Command Description
config lldp message_tx_interval
This command is used to change the packet
transmission interval.
config lldp ports [|all]
admin_status [tx_only | rx_only |
tx_and_rx | disable]
This command is used to configure per-port transmit
and receive modes.
config lldp ports [|all]
basic_tlvs [all | {port_description |
system_name | system_description
| system_capabilities}] [enable |
disable]
This command is used to configure an individual port
or group of ports to exclude one or more optional TLV
data types from outbound LLDP advertisements.
-
8/16/2019 DCS-Switching Lab Guide v1.8
56/64
Lab 7 D-Link Academy
56
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
LLDP Command Description
config lldp ports [|all]
dot3_tlvs [all |
{mac_phy_configuration_status |
link_aggregation |
maximum_frame_size}] [enable |
disable]
This command is used to configure an individual port
or group of ports to exclude one or more of IEEE 802.3
organization-specific TLV data types from outbound
LLDP advertisements.
config lldp ports [|all]
mgt_addr [ipv4 | ipv6
] [enable | disable]
This command is used to enable or disable port(s)
specified for advertising the indicated management
address instances.
config lldp ports [|all]
notification [enable | disable]
This command is used to configure each port for
sending notification to configured SNMP trap
receiver(s).
disable lldp This command disables LLDP on the switch.
enable lldp This command enables LLDP on the switch.
show lldpThis command is used to display the switch’s general
LLDP configuration status.
TFTP Command Description
download firmware_fromTFTP
{[ |
|] src_file
{dest_file
{{unit [ | all]}
}
{boot_up}}}
This command is used to download the firmware
image from TFTP server.
upload cfg_toTFTP {[ |
| ] dest_file {src_file {}
} {[include |
exclude | begin]
{ {}} {[include | exclude | begin ] { {}} {[include
| exclude | begin ]
{ {}}}}}}
This command is used to upload a configuration file
from a device to a TFTP server. This command is
required to be supported when the file system is not
supported on the device’s Flash EPROM.
-
8/16/2019 DCS-Switching Lab Guide v1.8
57/64
D-Link Academy Lab 7
Copyright ©2012-2013 D-Link Corporation DCS-Switching 57
Lab Details
Switch NameSwitch’s IP
AddressEnabled Ports
Connected PC
(if any)PC’s IP Address
SWRx1 10.90.90.x1/24 1, 24 PCx1 10.90.90.x01/24SWRx2 10.90.90.x2/24 1, 24 PCx2 10.90.90.x02/24
SWx3 10.90.90.x3/24 1, 3 PCx3 10.90.90.x03/24
SWx4 10.90.90.x4/24 1, 3 PCx4 10.90.90.x04/24
SWx5 10.90.90.x5/24 3 PCx5 10.90.90.x05/24
SWx6 10.90.90.x6/24 3 PCx6 10.90.90.x06/24
Note: x=POD number
Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
Task 1: To enable/disable ports (To prevent looping in case
STP is not enabled)
1. All ports will be enabled by default. To disable all the ports on the switch, enter configports all state disable.
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the switch, enter config ports state enable, where
represents the port number. Your switch’s enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
Ports 1 and 24. The command is config ports 1,24 state enable.
Task 2: Configuring DHCP Server on SWRx1 and SWRx2
In this task, only SWRx1 and SWRx2 will be used as DHCP servers; SWx3, SWx4, SWx5, and
SWx6 will be used as DHCP clients. SWRx1, SWx3, and SWx5 will be in VLAN 10 and using
addresses from the network of 10.90.x1.0/24. SWRx2, SWx4, and SWx6 will be in VLAN 20
and using addresses from the network of 10.90.x2.0/24.
-
8/16/2019 DCS-Switching Lab Guide v1.8
58/64
Lab 7 D-Link Academy
58
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
VLAN v10 v20
DHCP Server SWRx1 SWRx2
DHCP Clients SWx3, SWx5 SWx4, SWx6
DHCP Pool v10-pool v20-pool
DHCP Network Address 10.90.x1.0/24 10.90.x2.0/24
DHCP Excluded Addresses10.90.x1.1/24 to
10.90.x1.20/24
10.90.x2.1/24 to
10.90.x2.20/24
Note: x=POD number
1. On SWRx1, enter the following commands to configure it as a DHCP server:
create vlan v10 tag 10
config vlan v10 add tag 1,24
create ipif v10-if 10.90.x1.11/24 v10
create dhcp pool v10-pool
config dhcp pool default_router v10-pool 10.90.x1.11
config dhcp pool dns_server(_address) v10-pool 10.90.x1.11
config dhcp pool network_addr v10-pool 10.90.x1.0/24
create dhcp excluded_address begin_address 10.90.x1.1 end_address 10.90.x1.20
enable dhcp_server
2. On SWx3, enter the following commands to configure it as a DHCP client:
create vlan v10 tag 10
config vlan v10 add tag 1
config vlan v10 add untagged 3
config ipif System vlan v10config ipif System dhcp
3. On SWx5, enter the following commands to configure it as a DHCP client:
config ipif System dhcp
4. On SWRx2, enter the following commands to configure it as a DHCP server:
create vlan v20 tag 20
config vlan v20 add tag 1,24
create ipif v20-if 10.90.x2.11/24 v20
create dhcp pool v20-pool
config dhcp pool default_router v20-pool 10.90.x2.11
config dhcp pool dns_server(_address) v20-pool 10.90.x2.11
config dhcp pool network_addr v20-pool 10.90.x2.0/24
create dhcp excluded_address begin_address 10.90.x2.1 end_address 10.90.x2.20
enable dhcp_server
-
8/16/2019 DCS-Switching Lab Guide v1.8
59/64
D-Link Academy Lab 7
Copyright ©2012-2013 D-Link Corporation DCS-Switching 59
5. On SWx4, enter the following commands to configure it as a DHCP client:
create vlan v20 tag 20
config vlan v20 add tag 1
config vlan v20 add untagged 3
config ipif System vlan v20
config ipif System dhcp
6. On SWx6, enter the following commands to configure it as a DHCP client:
config ipif System dhcp
7. To verify successful DHCP settings, use the commands show switch and show ipif on
SWx3, SWx4, SWx5, and SWx6.
Note: disable dhcp_server and enable dhcp_server on SWRx1 and SWRx2 if SWx3,
SWx4, SWx5, and SWx6 cannot obtain an IP address.
8. To reach the different subnets, ensure that the RIP configuration from Lab 6 is still
implemented by using the show iproute command.
-
8/16/2019 DCS-Switching Lab Guide v1.8
60/64
Lab 7 D-Link Academy
60
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
Task 3: Configuring ACL
In this task, the ACL will be applied on the middle switch to prevent the lower switch from
accessing the higher switch.
1. Before applying ACL, it is good practice to test availability first. On SWx5, enter ping
10.90.x1.11 times 5 to reach SWRx1. The ping should be successful. Then, enter
telnet 10.90.x1.11 to Telnet to SWRx1. The Telnet should be successful. Enter logout
to end the Telnet session at SWRx1. Now, enter show switch and record the MAC
address and IP address of SWx5:
_________________________________________________
2. On SWx3, enter ping 10.90.x1.11 times 5 to reach SWRx1. Then, enter create
access_profile profile_id 1 profile_name denySWx5 ethernet source_mac FFFFFFFFFFFF
to create an Ethernet ACL. Then, enter config access_profile profile_id 1 add access_id 1
ethernet source_mac port 3 deny to deny traffic from
SWx5 on Port 3.
3. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1, then enter telnet
10.90.x1.11 to Telnet to SWRx1. Both ping and Telnet traffic will fail because of the rule
that is used in Step 2.
4. On SWx3, enter delete access_profile profile_id 1 to remove the ACL created in Step 2.
5. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1. The ping should be
successful because the ACL has been removed.
-
8/16/2019 DCS-Switching Lab Guide v1.8
61/64
D-Link Academy Lab 7
Copyright ©2012-2013 D-Link Corporation DCS-Switching 61
6. On SWx3, enter create access_profile profile_id 1 profile_name denyicmp ip icmp type
source_ip_mask 255.255.255.255 to create an IP ACL. Then, enter config access_profile
profile_id 1 add access_id 1 ip source_ip icmp port 3
deny to specify that only ICMP traffic will be denied on Port 3.
7. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1. The ping should fail. Then,enter telnet 10.90.x1.11 to Telnet to SWRx1. The Telnet connection is successful.
8. On SWx3, enter delete access_profile profile_id 1 to remove the ACL created in Step 6.
9. Using the commands from Steps 1 to 8, create an ACL on SWx4 to filter the traffic from
SWx6 to SWRx2. Remember to make changes to the MAC addresses and IP addresses.
Use show access_profile profile_id 1 to verify the ACL configurations. Remove the
ACL when done with this step.
Task 4: Configuring LLDP
In this task, LLDP will be configured on all the six switches.
1. On SWRx1, enter the following commands:
enable lldp
config lldp ports 1,24 basic_tlvs all enable
config lldp ports 1,24 mgt_addr ipv4 10.90.90.x1 enable
config lldp ports 1,24 admin_status tx_and_rx
config lldp ports 1,24 notification enable
config snmp system_name SWRx1
2. On SWRx2, enter the following commands:
enable lldp
config lldp ports 1,24 basic_tlvs all enable
config lldp ports 1,24 mgt_addr ipv4 10.90.90.x2 enable
config lldp ports 1,24 admin_status tx_and_rx
config lldp ports 1,24 notification enable
config snmp system_name SWRx2
3. On SWx3, enter the following commands:
enable lldp
config lldp ports 1,3 basic_tlvs all enable
config lldp ports 1,3 mgt_addr ipv4 10.90.90.x3 enable
config lldp ports 1,3 admin_status tx_and_rx
config lldp ports 1,3 notification enable
config snmp system_name SWx3
-
8/16/2019 DCS-Switching Lab Guide v1.8
62/64
Lab 7 D-Link Academy
62
DCS-Switching
Copyright ©2012-2013 D-Link Corporation
4. On SWx4, enter the following commands:
enable lldp
config lldp ports 1,3 basic_tlvs all enable
config lldp ports 1,3 mgt_addr ipv4 10.90.90.x4 enable
config lldp ports 1,3 admin_status tx_and_rx
config lldp ports 1,3 notification enable
config snmp system_name SWx4
5. On SWx5, enter the following commands:
enable lldp
config lldp ports 3 basic_tlvs all enable
config lldp ports 3 mgt_addr ipv4 10.90.90.x5 enable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification enable
config snmp system_name SWx5
6. On SWx6, enter the following commands:
enable lldp
config lldp ports 3 basic_tlvs all enable
config lldp ports 3 mgt_addr ipv4 10.90.90.x6 enable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification enable
config snmp system_name SWx6
Note: Refer to the Command List for an explanation of each of the above commands.
7. When configuration has been completed for all switches, use show lldp remote_ports
where refers to the ports used on the switches from Step 1 to 6.
Task 5: System Maintenance
In this task, a TFTP server is required.
1. Set up a TFTP server connected to SWRx1 and configure its IP address to
10.90.90.100/24. On all switches, ping the TFTP server to ensure it is reachable.
Note: To set up a TFTP server, configure the PC’s IP address to 10.90.90.100 with asubnet mask of 255.255.255.0, and execute the program DLinkTftpServer.exe.
2. It is a good practice is to back up each switch’s configuration file to the TFTP server. On
all switches, enter upload cfg_toTFTP 10.90.90.100 dest_file .
The output should look similar to this:
-
8/16/2019 DCS-Switching Lab Guide v1.8
63/64
D-Link Academy Lab 7
Copyright ©2012-2013 D-Link Corporation DCS-Switching 63
3. If new firmware needs to be installed on the switch, enter download firmware_from
TFTP 10.90.90.100 src_file . The output should look similar to this:
-
8/16/2019 DCS-Switching Lab Guide v1.8
64/64
Lab 7 D-Link Academy
Lab Verification
At the end of this lab, you have now learned:
• How to enable DHCP services.
• How to configure ACL to filter traffic.
• How to implement LLDP to learn about your neighbors.
• How to use TFTP services to upload or download firmware and configuration files.