DCS-Switching Lab Guide v1.8

Copyright 2012-2013 D-Link Corporation. All Rights Reserved.
D-Link, D-Link logo, D-Link sub brand logos,

D-Link Certification Logos and D-Link product trademarks are trademarks or registered trademarks of D-Link
Corporation and its subsidiaries. All other trademarks are trademarks of their respective manufacturers and owners.
DISCLAIMER OF WARRANTIES
ALL OF THE INFORMATION, INSTRUCTIONS, AND RECOMMENDATIONS IN THIS DOCUMENT
ARE OFFERED ON A STRICTLY "AS IS" BASIS. THIS MATERIAL IS OFFERED WITHOUT ANY
WARRANTY, EXPRESSED OR IMPLIED. NEITHER D-LINK NOR D-LINK ACADEMY SHALL BE
HELD RESPONSIBLE FOR ANY DIRECT, INDIRECT, INCIDENTAL OR CONSEQUENTIAL
DAMAGES, THAT MAY RESULT FROM ANYTHING THAT IS VIEWED IN THIS DOCUMENT, OR
ANYTHING YOU DO AS A RESULT THEREOF. IT IS UP TO THE READER TO DETERMINE THE
SUITABILITY OF ANY DIRECTIONS OR INFORMATION VIEWED HERE. THIS LEARNING
PRODUCT MAY CONTAIN EARLY RELEASE CONTENT, AND WHILE D-LINK BELIEVES IT TO BE
CORRECT, IT FALLS SUBJECT TO THE DISCLAIMER ABOVE.
D-Link Academy
Table of Contents
Table of Contents
Lab 1: Network Essentials ............................................................................................ 7

Lab Objective ............................................................................................................ 7
Task 1: Understanding the OSI model ........................................................................ 8
Task 2: Understanding the TCP/IP protocol suite ...................................................... 8
Task 3: Understanding IP addresses and subnets ........................................................ 9
Answers for Lab 1: .................................................................................................. 11
Task 1: Understanding the OSI model .................................................................. 11
Task 2: Understanding the TCP/IP protocol suite ................................................. 11
Task 3: Understanding IP addresses and subnets ................................................... 11
Lab 2: D-Link Switch Operation ................................................................................ 13
Lab Objective .......................................................................................................... 13
Lab Topology .......................................................................................................... 14
Command List ........................................................................................................ 14
Lab Details ............................................................................................................. 16
Task 1: Connecting to the Switch using CLI ............................................................. 16
Task 2: To enable/disable ports (to prevent looping) ................................................. 18
Task 3: Configuring the Switch ................................................................................ 18
Task 4: Password Recovery Procedure ..................................................................... 20
Task 5: Connecting to the Switch using the Web Manager ........................................ 20
Lab Verification....................................................................................................... 20
Copyright 2012-2013 D-Link Corporation
DCS-Switching
Table of Contents
D-Link Academy
Lab 3: VLAN .............................................................................................................. 21

Lab Objective .......................................................................................................... 21
Lab Topology .......................................................................................................... 22
Command List ........................................................................................................ 22
Lab Details .............................................................................................................. 23
Task 1: Creating static VLANs ................................................................................. 24
Task 2: Configuring tagged and untagged ports......................................................... 24
Task 3: Configuring GVRP ...................................................................................... 25
Lab Verification ....................................................................................................... 26
Lab 4: Spanning Tree Protocol.................................................................................... 27
Lab Objective .......................................................................................................... 27
Lab Topology .......................................................................................................... 28
Command List ........................................................................................................ 28
Lab Details .............................................................................................................. 29
Task 1: To enable/disable ports ................................................................................ 29
Task 2: Configuring STP .......................................................................................... 30
Task 3: Configuring the Primary Root Bridge and Secondary Root Bridge ................. 32
Task 4: Monitoring STP convergence ....................................................................... 32
Lab 5: Stacking ........................................................................................................... 35
Lab Objective .......................................................................................................... 35
Lab Topology .......................................................................................................... 36
Command List ........................................................................................................ 36
DCS-Switching
D-Link Academy
Table of Contents
Lab Details ............................................................................................................. 37

Task 1: To enable/disable ports (to prevent looping in case STP is not enabled)......... 38
Task 2: Configuring physical stacking ...................................................................... 38
Task 3: Configuring logical stacking (SIM) ............................................................... 41
Lab 6: Routing Basics ................................................................................................. 45
Lab Objective .......................................................................................................... 45
Lab Topology .......................................................................................................... 46
Command List ........................................................................................................ 46
Lab Details ............................................................................................................. 47
Task 1: To enable/disable ports (to prevent looping in case STP is not enabled)......... 48
Task 2: Configuring VLANs .................................................................................... 48
Task 3: Configuring Static Route.............................................................................. 49
Task 4: Configuring RIP .......................................................................................... 50
Task 5: Configuring Route Preference ...................................................................... 51
Lab 7: D-Link Switching Features .............................................................................. 53
Lab Objective .......................................................................................................... 53
Lab Topology .......................................................................................................... 54
Command List ........................................................................................................ 54
Lab Details ............................................................................................................. 57
Task 1: To enable/disable ports (To prevent looping in case STP is not enabled) ........ 57
Task 2: Configuring DHCP Server on SWRx1 and SWRx2 ...................................... 57
DCS-Switching
Table of Contents
D-Link Academy
Task 3: Configuring ACL ......................................................................................... 60

Task 4: Configuring LLDP ...................................................................................... 61
Task 5: System Maintenance .................................................................................... 62
DCS-Switching
D-Link Academy
Lab 1
Lab 1: Network Essentials

Chapter 1
Network Essentials
[Chapter 1: Network Essentials]

Version 1.0
Lab Objective
In this lab, you will apply/test your understanding of the fundamentals of networking and
the TCP/IP protocol suite learnt. After completing this lab, you should have a better
understanding of networking and the use of IP addressing and subnetting.
DCS-Switching
Lab 1
D-Link Academy
Task 1: Understanding the OSI model

Please fill in the blanks.
1. The
provides end-to-end data transfer by delivering data from an
application to its remote peer.
2. The
is the interface to the actual network hardware.
3. The
provides addressing and routing functions.
4. The
is provided by the program that uses TCP/IP for
communication. An application is a user process cooperating with another process,

usually on a different host.
Task 2: Understanding the TCP/IP protocol suite

1. Which port number indicates a WWW service recognized worldwide?
a. 80
b. 21
c. 25
d. 53
2. Of the following Layer 4 protocols, which one is used for a Telnet connection?
a. UDP
b. TCP
c. ICMP
d. DNS
DCS-Switching
D-Link Academy
Lab 1
3. What is the purpose of assigning an IP address to a switch?

a. Providing local hosts with a default gateway address
b. Allowing remote management of the switch
c. Allowing the switch to respond to ARP requests between two hosts
d. Ensuring that hosts on the same LAN can communicate with each other
4. For the following transport layer protocols, which one is most suitable for the transport
of VoIP data?
a. HTTP
b. UDP
c. RIP
d. OSPF
5. Which of the following are found in a TCP header, but not in a UDP header? (Choose
three.)
a. Sequence number
b. Acknowledgment number
c. Source port
d. Destination port
e. Window size
f. Checksum
Task 3: Understanding IP addresses and subnets

1. What is the subnet address for the IP address 172.19.20.23/28?
a. 172.19.20.0
b. 172.19.20.15
c. 172.19.20.16
d. 172.19.20.20
e. 172.19.20.32
DCS-Switching
Lab 1
D-Link Academy
2. Of the following IP addresses, which one is a private address?

a. 12.0.0.1
b. 168.172.19.39
c. 172.20.14.36
d. 172.33.194.30
3. Which of the following two statements describe the IP address 10.16.3.65/23? (Choose
two.)
a. The subnet address is 10.16.3.0 255.255.254.0.
b. The broadcast address of the subnet is 10.16.3.255 255.255.254.0.
c. The lowest host address in the subnet is 10.16.2.1 255.255.254.0.
d. The last valid host address in the subnet is 10.16.2.254 255.255.254.0.
4. A small company has a Class C network address and needs to create five subnets, each
accommodating 25 hosts. Which subnet mask needs to be configured?
a. 255.255.240.0
b. 255.255.255.128
c. 255.255.255.192
d. 255.255.255.224
e. 255.255.255.240
f. 255.255.255.248
5. From which IP address class can 15 bits be borrowed to create subnets?

a. Class A
b. Class B
c. Class C
d. Class D
e. Class E
10
DCS-Switching
D-Link Academy
Lab 1
Answers for Lab 1:

Task 1: Understanding the OSI model
1. transport layer
2. physical layer
3. network layer
4. application layer
Task 2: Understanding the TCP/IP protocol suite

1. Answer: a
Explanation:
Port 1 to 1023 are well-known ports, where port 80 is for WWW, port 21 is for FTP, port
25 is for SMTP, and port 53 is for DNS.
2. Answer: b
Explanation:
Telnet requires a reliable connection, so TCP is used as the Transport layer protocol.
3. Answer: b
Explanation:
A switch does not require an IP address for it to be functional, however, the IP address
is needed for managing the switch.
4. Answer: b
Explanation:
VoIP traffic does not tolerate latency, and UDP is most suitable for such transmission.
5. Answer: a, b, e
Explanation:
TCP needs to provide a reliable transmission, thus its header includes Sequence number,
Acknowledgement number, and Window Size.
Task 3: Understanding IP addresses and subnets
1. Answer: c
Explanation:
172.19.20.23/28 means 4 bits are borrowed for this Class B IP address. Thus,
172.19.20.16 is the subnet address.
DCS-Switching
11
Lab 1
D-Link Academy
2. Answer: c
Explanation:
Private address for Class A: 10.0.0.0 10.255.255.255, Class B: 172.16.0.0
172.31.255.255, and Class C: 192.168.0.0 192.168.255.255.
3. Answer: b, c
Explanation:
10.16.3.65/23 means 15 bits are borrowed for this Class A IP address. The subnet
address is 10.16.2.0, hosts are from 10.16.2.1 to 10.16.3.254, and the broadcast
address is 10.16.3.255.
4. Answer: d
Explanation:
To have 5 subnets, it means 3 bits need to be borrowed from the host bits. The default
subnet mask for Class C is 255.255.255.0, thus after borrowing 3 bits, the new subnet
mask will be 255.255.255.224.
5. Answer: a
Explanation:
Only Class A can be borrowed with 15 bits as it has 24 host bits. Class B has 16 host bits,
so if borrowed 15 bits, there will be no host left after subtracting the 2 reserved ip
addresses (network and broadcast). Class C only has 8 host bits, so it is not possible to
borrow 15 bits. Class D and E are reserved addresses.
12
DCS-Switching
D-Link Academy
Lab 2
Lab 2: D-Link Switch Operation

Chapter 2
D-Link Switch Operation
[Chapter 2: D-Link Switch Operation]

Version 1.0
Lab Objective
In this lab, you will learn to access and configure the Switch for basic Switch operations.
After completing this lab, you will be able to connect to the Switch using a serial cable
through a terminal emulation program, and learn the basic maintenance commands for the
Switch.
DCS-Switching
13
Lab 2
D-Link Academy
Lab Topology
Note:
SWRx1 and SWRx2 are DGS-3627 or DGS-3620-28TC.
SWx3, SWx4, SWx5, and SWx6 are DES-3528 or DGS-3120-24TC.
Command List
Command
Description
To open Help.
clear
To clear the screen.
14
DCS-Switching
D-Link Academy
Lab 2
Command
config command_prompt
[<string16>|username|default]
config ipif System ipaddress
<ipaddress/prefix>
Description
To change the command prompt.
To change the System IP address of the Switch.
config ports <portlist> state disable To disable a particular port on the Switch.
config ports <portlist> state enable To enable a particular port on the Switch.
create account admin <username>
To create an administrator-level account for the

Switch.
delete account <username>
To delete a user account.
disable password encryption
To disable password encryption.
disable ssh
enable password encryption
enable ssh
enable telnet <tcp_port_number
<value 1-65535>
login
logout
reboot {force_agree}
reset {[config |
system]}{force_agree}
To disable secure login to remote devices through the

network.
To enable password encryption.
To log in securely to remote devices through the
network.
To enable Telnet with a specified port number.
To initiate the login procedure.
To terminate the current users session on the Switchs
console.
To restart the Switch.
To reset the Switch to the factory default settings.
To reset the password of the specified user. If a
reset password {<username>}
username is not specified, the passwords of all users

will be reset.
save {[config<config_id
To enter the current Switch configuration into
1-2>|log|all]}
non-volatile RAM.
show account
To display all user accounts created on the Switch.
show command_history
To display the command history.
show device_status
show greeting_message
To display the current status of the power and fans on

the system.
To view the currently configured greeting message on
the Switch.
show ports
To display the current configuration of a range of ports
show serial port
To display the current serial port settings.
show session
To display a list of all the users that are logged in at the

time the command is issued.
show switch
To display the following information about the Switch.
show utilization cpu
To show CPU utilization.
show utilization dram
To show DRAM memory utilization.
DCS-Switching
15
Lab 2
D-Link Academy
Command
Description
show utilization flash
To show flash memory utilization.
telnet <ipaddr> {tcp_port<value
To log into a remote system with the Telnet protocol
1-65535}
on the Switch.
Lab Details
Switchs IP
Switch Name
Address
Enabled Ports
Connected PC
(if any)
PCs IP Address
SWRx1
10.90.90.x1/24
1, 24
PCx1
10.90.90.x01/24
SWRx2
10.90.90.x2/24
1, 24
PCx2
10.90.90.x02/24
SWx3
10.90.90.x3/24
1, 3
PCx3
10.90.90.x03/24
SWx4
10.90.90.x4/24
1, 3
PCx4
10.90.90.x04/24
SWx5
10.90.90.x5/24
PCx5
10.90.90.x05/24
SWx6
10.90.90.x6/24
PCx6
10.90.90.x06/24
Note:
x = POD Number
Examples:
SWRx1 in Pod 1 = SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2 = SWR21; IP Address is 10.90.90.21/24
Account
Username
Password
admin
admin1
admin1
user
user1
user1
Task 1: Connecting to the Switch using CLI

1. From your Switch, connect the serial cable to your PCs COM port.
2. From your PC, run a terminal emulator program. In our examples, Tera Term is being
used. Alternatively, Hyperterminal and Putty are other options.
3. Note: The Switchs serial ports default settings are as follows:
115200 baud
no parity
8 data bits
16
DCS-Switching
D-Link Academy
Lab 2
1 stop bit
4. If the serial port is properly connected to a computer, the Switchs banner will be visible.
Upon seeing the banner, press ENTER for the UserName and Password prompts. There
is no initial username or password.
5. Type ? and press ENTER to display the list of available commands.
6. Press ESC to quit from the command lists, press n for the next page or press ENTER for
the next command.
7. To display the switch information, type show switch, and fill in the following details:
What is the Device Type?
________________________________________________
What is the MAC address?
________________________________________________
What is the IP Address?
________________________________________________
What is the Firmware Version?
________________________________________________
What is the Serial Number?
________________________________________________
8. Type show greeting_message to view the currently configured greeting message on
the Switch.
9. Type show serial_port to display the serial port settings on the Switch.
10. Type show ports to display the current configuration of a range of ports.
11. Type show utilization flash to display the total and used FLASH memory.
12. Type show command_history to display the command history.
13. Press the UP arrow key and DOWN arrow key to display the previously typed
commands.
14. Type clear to clear the screen.
15. Type save to save changes in the Switchs configuration to non-volatile RAM.
DCS-Switching
17
Lab 2
D-Link Academy
Task 2: To enable/disable ports (to prevent looping)

1. All ports will be enabled by default. To disable all the ports on the switch, type config
ports all state disable.
2. Type show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the Switch, type config ports <portlist> state enable, where
<portlist> represents the port number. Your switchs enabled ports can be obtained from
the Lab Details section. For example, if you belong to SWRx1, your enabled ports are
port 1 and 24. The command is config ports 1,24 state enable.
Task 3: Configuring the Switch

1. To change the name of the Switch, type config command_prompt <string16>,
where <string16> represents the devices name. Your Switch Name can be obtained
from the Lab Details section. For example, if you belong to Pod1, your Switch Name will
be SWR11, SWR12, SW13, SW14, SW15, and SW16.
2. To change the IP address of the Switch, type config ipif System ipaddress
<ipaddress/prefix>. For example, if you belong to Pod1, SWRx1 in Pod 1 = SWR11,
and the IP Address is 10.90.90.11/24. Your Switch IP address can be obtained from the
Lab Details section.
3. Type show switch to verify that the Switchs IP address has been updated.
4. To increase the security of your Switch, it is better to create an account with a password
for logging in.
Type create account admin admin1. When prompted for a password, type admin1.
5. Create a second account by typing create account user user1. When prompted for a
password, type user1.
6. Type show account to display the accounts that have been created.
7. Type delete account user1 to delete a previously created account.
8. Type show account and you will see that user1 does not exist anymore.
9. Using the ping command to test the availability of your neighbors. Example: To reach
SW12, type ping 10.90.90.12 times 5. (All switches in the same pod should be
reachable because they are all in the same subnet of 10.90.90.0/24.)
18
DCS-Switching
D-Link Academy
Lab 2
10. Type show switch and press the Enter to verify that Telnet is enabled. Default for
Telnet is enabled with TCP Port 23. If Telnet is not enabled, type the command enable
telnet 23.
11. Using the telnet command, try to access to your neighbors Switch. For example, to
access SW12, type telnet 10.90.90.12. When prompted for UserName and Password,
use admin1 for both entries.
You are now remotely connecting to a different switch. Notice the change in the
command_prompt.
12. Type show session to display a list of all the users that are logged in to the Switch.
13. Type logout to end the Telnet session.
14. SSH is a more secure way to connect to a remote device. To allow SSH on your own
switch, check that SSH is enabled by using the show switch command. By default, it is
disabled.
15. Type enable ssh to change it to secure mode. Type show switch to ensure that SSH
has been enabled. Note that for DGS-3627 and DES-3528 when SSH is enabled, Telnet
is disabled.
16. To demonstrate the use of SSH, ensure you PCs IP address is in the same network as the
Switch. The PCs IP address can be obtained from the Lab Details section.
17. Run Tera Term or other terminal emulation softwares from your PC, enter the IP address
of the Switch that you want to connect to, and choose SSH.
18. When prompted for Username and Password, use admin1 for both entries.
19. Type logout to end the session.
20. To revert back to allow Telnet access on your Switch, enter disable ssh, followed by
enable telnet. This step is required ONLY for DGS-3627 and DES-3528.
DCS-Switching
19
Lab 2
D-Link Academy
21. Type show switch to verify that Telnet has been enabled.
22. Type save to save changes in the Switchs configuration to non-volatile RAM.
Task 4: Password Recovery Procedure

1. To recover password, you have to reboot the Switch and press Shift+6 repeatedly to
enter the Password Recovery Mode.
2. At the Password Recovery Mode, type reset password admin1 to reset the password
for the account admin1.
3. Type reboot.
4. Type config account admin1 to configure a new password. (Note: Use admin1 as the
password.)
Task 5: Connecting to the Switch using the Web Manager

1. Type show switch to verify that the Web is enabled. By default, it is enabled. If it is not,
type enable web.
2. From your browser, type the IP address of your Switch.
3. Enter admin1 for both the Username and Password.
4. You are now successfully connected to the Switch using the Web Manager.
Lab Verification
At the end of this lab, you have learned:
How to connect to the Switch using CLI and Web.
How to change the Switchs name and IP address.
How to create accounts on the Switch.
Various commands to verify the Switchs configuration.
20
DCS-Switching
D-Link Academy
Lab 3
Lab 3: VLAN
Chapter 3
VLAN
[Chapter 3: VLAN]
Version 1.0
Lab Objective
In this lab, you will learn to create and configure VLANs on the switch. After completing this
lab, you will have acquired the skills to create both static and dynamic (GVRP) VLANs.
DCS-Switching
21
Lab 3
D-Link Academy
Lab Topology
Note:
Command List
Command
Description
config gvrp [<portlist> | all] {state

[enable | disable] | ingress_checking
[enable | disable] | acceptable_frame
[tagged_only | admit_all] | pvid
This command is used to configure GVRP on the

switch. (DGS-3627)
<vlanid 1-4094>}
22
DCS-Switching
D-Link Academy
Lab 3
Command
Description
config port_vlan [<portlist> | all]
This command is used to configure the Group VLAN
{ gvrp_state [enable | disable] |
Registration Protocol on the Switch. Ingress checking,
ingress_checking [enable | disable] the sending and receiving of GVRP information, and
| acceptable_frame[tagged_only |
the Port VLAN ID (PVID) can be configured.
admit_all]pvid<vlanid 1-4094>}
(DGS-3620-28TC, DES-3528)
config vlan <vlan_name 32> {[add

[ tagged | untagged | forbidden] |
This command is used to add additional ports to a
delete] <portlist> | advertisement
previously configured VLAN.
[enable | disable]}
create vlan <vlan_name 32> {tag
<vlanid 2-4094> | type 1q_vlan |
This command is used to create a VLAN on the switch.
advertisement}
delete vlan <vlan_name 32>
This command is used to delete a previously

configured VLAN on the switch.
disable gvrp
This command is used to disable GVRP on the switch.
enable gvrp
This command is used to enable GVRP on the switch.
show gvrp {<portlist>}

show port_vlan {<portlist>}
show vlan {[<vlan_name 32> |
This command is used to display the GVRP status for a

port list on the switch. (DGS-3627)
This command displays the GVRP status for a port list
on the Switch (DGS-3620-28TC, DES-3528)
This command is used to display the current VLAN
vlanid <vidlist>] | ports <portlist>} configuration on the switch.
Lab Details
Switch Name
Switchs IP
Address
Enabled Ports
Connected PC
(if any)
PCs IP Address
SWRx1
10.90.90.x1/24
1, 24
PCx1
10.90.90.x01/24
SWRx2
10.90.90.x2/24
1, 24
PCx2
10.90.90.x02/24
SWx3
10.90.90.x3/24
1, 3
PCx3
10.90.90.x03/24
SWx4
10.90.90.x4/24
1, 3
PCx4
10.90.90.x04/24
SWx5
10.90.90.x5/24
PCx5
10.90.90.x05/24
SWx6
10.90.90.x6/24
PCx6
10.90.90.x06/24
Note: x=POD number
Examples:
SWRx1 in Pod 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in Pod 2=SWR21; IP Address is 10.90.90.21/24
DCS-Switching
23
Lab 3
D-Link Academy
Task 1: Creating static VLANs

In this task, only SWx3 will be configured with static VLANs. This is to illustrate the concept
of a static VLAN.
1. On SWx3, type the following commands:
create vlan v10 tag 10
2. On all the switches, type show vlan to verify that none of the above VLANs have been
created on the other switches except for SWx3.
3. On SWx3, type delete vlan v30 to remove the VLAN from its switch. Type show vlan
to verify that the VLAN has been removed successfully.
Task 2: Configuring tagged and untagged ports

Tagged ports are trunk links which allow multiple VLANs to cross one link. Untagged ports
are access links which connect to the edge devices or hosts.
1. Before proceeding to make any changes on the ports, try to ping your neighbors to verify
that all switches are still in the same VLAN. Example: On SWx5, type ping 10.90.90.x3
times 5 to verify that SWx3 is reachable. All switches in the same pod will be reachable
at this stage.
2. On all switches, type show vlan or show vlan ports to verify that all ports are assigned
to VLAN 1 and are untagged (by default).
3. To remove Port 10 from the default VLAN, type config vlan default delete 10. Type
show vlan to verify that Port 10 has been removed from the default VLAN.
4. To add the port back to the VLAN, type config vlan default add untagged 10. Type
show vlan to verify that Port 10 has been added to the default VLAN.
5. On SWx3, type the following commands:
config vlan default delete 3
config vlan v10 add untagged 3
config vlan v10 add tagged 1
(The first command will remove Port 3 from the default VLAN. The second command will
configure Port 3 to be untagged for VLAN v10. The third and fourth commands will
configure Port 1 to be tagged for VLAN v10 and v20.)
24
DCS-Switching
D-Link Academy
Lab 3
Type show vlan and show vlan ports to verify that Port 3 is untagged and is assigned
to VLAN v10.
6. On SWx5, type ping 10.90.90.x3 times 5. The ping traffic fails because SWx3 and
SWx5 are not assigned to the same VLAN, and routing has not been enabled.
7. On all switches, type ping 10.90.90.x5 times 5. The ping traffic fails because SWx5 is
in a different VLAN.
Task 3: Configuring GVRP

VLANs can be created in a static or dynamic way. GVRP is the dynamic way to configure
VLANs. In this lab, SWx5 and SWx6 are regarded as hosts. Delete all the static VLANs before
proceeding with this Task.
1. On SWRx1, SWRx2, SWx3, and SWx4, type show gvrp to verify that GVRP is disabled
by default.
2. To verify GVRP settings on Ports 1 and 24:
On SWRx1 and SWRx2, type show gvrp 1,24(DGS-3627) or show port_vlan
1,24(DGS-3620-28TC).
On SWx3 and SWx4, type show port_vlan 1.
3. On SWRx1, SWRx2, SWx3, and SWx4, type enable gvrp to enable GVRP on the switch.
4. On SWRx1 and SWRx2, type config gvrp 1,24 state enable to enable GVRP on the
ports, then type show gvrp 1,24 to verify that GVRP has been enabled on the ports
successfully.
Note: For DGS-3620-28TC, use config port_vlan 1, 24 grvp_state enable and show
port_vlan 1, 24.
5. On SWx3 and SWx4, type config port_vlan 1 gvrp_state enable to enable GVRP on
the ports, then type show port_vlan 1 to verify that GVRP has been enabled on the
ports successfully.
6. On SWRx1, type the following commands:
create vlan v10 tag 10 advertisement
create vlan v20 tag 20 advertisement
config vlan v10 add tagged 1,24
config vlan v20 add tagged 1,24
(The first and second commands will create a VLAN v10 and v20 and enable the VLAN
advertisement. The third and fourth commands will configure Ports 1 and 24 to be
tagged for VLAN v10 and v20.)
DCS-Switching
25
Lab 3
D-Link Academy
Type show vlan and show vlan ports to verify that Ports 1 and 24 are tagged and
assigned to VLAN v10 and v20.
7. On SWRx1, SWRx2, SWx3, and SWx4, type show vlan. On SWRx1, the VLAN Type is
shown as Static and the Advertisement is shown as Enabled. On SWRx2, SWx3, and
SWx4, the VLAN Type is shown as Dynamic and the Advertisement is shown as
Enabled. This shows that the VLAN has been successfully advertised from SWRx1 to
the other switches.
Lab Verification
At the end of this lab, you have now learned:
How to create and delete VLANs.
How to modify ports to be tagged and untagged.
How to configure VLANs using static and dynamic ways.
26
DCS-Switching
D-Link Academy
Lab 4
Lab 4: Spanning Tree Protocol

Chapter 4
Spanning Tree Protocol
[Chapter 4: Spanning Tree Protocol]

Version 1.0
Lab Objective
In this lab, you will learn to create and configure the Spanning Tree Protocol (STP). After
completing this lab, you should be able to configure STP and RSTP as well as primary and
secondary root bridges.
DCS-Switching
27
Lab 4
D-Link Academy
Lab Topology
Note:
Command List
Command
Description
enable stp
This command is used to enable STP globally.
disable stp
This command is used to disable STP globally.
28
DCS-Switching
D-Link Academy
Lab 4
Command
config stp version [mstp | rstp | stp]
Description
This command is used to enable the STP version
globally.
config stp priority <value 0-61440> This command is used to configure the instance
instance_id <value 0-15>
priority.
This command is used to show the global settings of
show stp
the bridge parameters.
show stp instance <value 0-15>
This command is used to show each instance of the

parameter settings.
This command is used to show the port information
show stp ports {<portlist>}
including the parameter settings and operational

value.
This command is used to configure the ports
config stp ports
management parameters at the CIST level only.

This command is used to configure the bridge
config stp
management parameters for CIST (instance_id=0).
Lab Details
Switch Name
Switchs IP
Address
Enabled Ports
Connected PC
(if any)
PCs IP Address
SWRx1
10.90.90.x1/24
1, 24
PCx1
10.90.90.x01/24
SWRx2
10.90.90.x2/24
1, 24
PCx2
10.90.90.x02/24
SWx3
10.90.90.x3/24
1, 3, 24
PCx3
10.90.90.x03/24
SWx4
10.90.90.x4/24
1, 3, 24
PCx4
10.90.90.x04/24
SWx5
10.90.90.x5/24
PCx5
10.90.90.x05/24
SWx6
10.90.90.x6/24
PCx6
10.90.90.x06/24
Note: x=POD number
Examples:
Task 1: To enable/disable ports

1. All ports will be enabled by default. To disable all the ports on the switch, enter config
DCS-Switching
29
Lab 4
D-Link Academy
2. Enter show ports to verify that all the ports are disabled under the column Port State or
State/MDIX.
3. To enable the ports of the Switch, enter config ports <portlist> state enable, where
Ports 1 and 24. The command is config ports 1,24 state enable.
Task 2: Configuring STP

In this task, STP will be enabled on all switches except SWx5 and SWx6 as they are regarded
as host devices in this lab.
1. Enter show stp to verify the STPs settings on the switch. (The default setting for STP is
disabled.)
2. On SWRx1, SWRx2, SWx3, and SWx4, enter enable stp. Enter show stp on these four
switches to get the following STP status:
3. The default STP version is RSTP. To set it to STP, enter config stp version stp on
SWRx1, SWRx2, SWx3, and SWx4. You will obtain the following status:
30
DCS-Switching
D-Link Academy
Lab 4
4. On SWRx1, SWRx2, SWx3, and SWx4, enter config stp version rstp to revert the STP
status back to RSTP.
5. On SWx3 and SWx4, enter config stp ports 3 edge true to configure Port 3 as the edge
device. This means that SWx5 and SWx6, which are connected to Port 3, will not
participate in STP.
6. On SWx3 and SWx4, enter show stp ports 3 to verify that the status of the Edge port
is set to True.
7. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the MAC
address of the Designated Root Bridge?
_________________________________________________
8. On SWRx1, SWRx2, SWx3, and SWx4, enter show switch. What is the MAC address of
the switch?
_________________________________________________
9. Compare the MAC address of the switch and the MAC address of the Designated Root
Bridge. Are they the same? Yes/No
10. If yes, it means that the switch is the Designated Root Bridge. If no, it means that the
switch is not the Designated Root Bridge.
DCS-Switching
31
Lab 4
D-Link Academy
Task 3: Configuring the Primary Root Bridge and Secondary

Root Bridge
In this task, SWRx1 will be configured as the primary root bridge, and SWRx2 will be
configured as the secondary root bridge.
1. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the Instance
Priority of the switch?
_________________________________________________
2. On SWRx1, enter config stp priority 0 instance_id 0 to configure the switch with
priority 0. The switch with the lowest priority will be selected as the primary root bridge.
3. On SWRx2, enter config stp priority 4096 instance_id 0 to configure the switch with
priority 4096. The switch with the second lowest priority will be selected as the
secondary root bridge.
Note: The priority value must be an incremental of 4096.
4. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the Instance
Priority of the switch?
_________________________________________________
5. On SWRx1, SWRx2, SWx3, and SWx4, enter show stp instance 0. What is the MAC
address of the Designated Root Bridge?
_________________________________________________
6. Compare SWRx1s MAC address with the MAC address of the Designated Root Bridge.
They should be the same, because SWRx1 has the lowest priority and thus will be
selected as the Designated Root Bridge.
7. On SWRx1 and SWRx2, enter show stp ports 1,24. On SWx3 and SWx4, enter show
stp ports 1,3,24. Using the Lab Topology, label the Designated ports, Root ports, and
Alternate ports (if any).
Task 4: Monitoring STP convergence

In this task, SWx4 will be used to demonstrate the convergence of STP by making use of the
redundant link.
1. On SWx4, enter show stp ports 1,3,24 to verify that Port 1 is the Root port.
32
DCS-Switching
D-Link Academy
Lab 4
2. On SWx4, enter config ports 1 state disable to disable Port 1. (This is for testing STP
convergence.)
3. On SWx4, enter show stp ports 1,3,24 to verify that Port 1 is disabled and not the Root
port (Port 24 is now selected as the Root port).
4. On SWx4, enter config ports 1 state enable to enable Port 1, and enter show stp
ports 1,3,24 to verify that Port 1 is selected as the Root port and Port 24 as the
Alternate port.
Lab Verification
How to enable STP and RSTP.
How to configure the primary and secondary root bridges.
DCS-Switching
33
D-Link Academy
Lab 5
Lab 5: Stacking
Chapter 5
Switch Stacking
[Chapter 5: Switch Stacking]

Version 1.0
Lab Objective
In this lab, you will learn to configure stacking. After completing this lab, you should be able
to configure two types of stacks: physical and virtual.
DCS-Switching
35
Lab 5
D-Link Academy
Lab Topology
(DGS-3627)
Port 28 (DGS-3620-28TC)
Note:
Command List
Command
config box_id current_box_id <value
1-12 > new_box_id [auto | <value 112>]
config box_priority current_box_id
Description
This command is used to configure the Box ID. Users
can use this command to reassign Box IDs.
This command is used to configure the box priority of
<value 1-12> priority <value 1-63> the switch.
36
DCS-Switching
D-Link Academy
Lab 5
Command
Description
config sim [[commander

{group_name <groupname 64>} | This command is used to configure parameters of
candidate] | dp_interval <sec 30-90> switches of the SIM.
| hold_time <sec 100-255>]}
config sim [add <candidate_id
1-100> {<password>} | delete
<member_id 1-32>]
This command is used to add candidates and delete

members from the SIM group by ID number.
config stacking force_master_role
This command is used to configure the stacking-force
state [enable | disable]
master role.
config stacking_mode [disable |

enable]
This command is used to configure the stacking mode.
disable sim
This command disables SIM on the switch.
enable sim
This command enables SIM on the switch.
show sim {[candidates {<candidate_id

1-100>} | members {<member_id This command is used to view the current information
1-32>} | group {commander_mac
regarding the SIM group on the switch.
<macaddr>} | neighbor]}
This command is used to display information about
show stack_device
the devices in the stack.
show stack_information
This command is used to display the stack

information.
This command is used to display the current stacking
show stacking_mode
mode.
Lab Details
Switch Name
Switchs IP
Address
Enabled Ports
Connected PC
(if any)
PCs IP Address
SWRx1
10.90.90.x1/24
1, 26/28
PCx1
10.90.90.x01/24
SWRx2
10.90.90.x2/24
1, 27
PCx2
10.90.90.x02/24
SWx3
10.90.90.x3/24
1, 3
PCx3
10.90.90.x03/24
SWx4
10.90.90.x4/24
1, 3
PCx4
10.90.90.x04/24
SWx5
10.90.90.x5/24
PCx5
10.90.90.x05/24
SWx6
10.90.90.x6/24
PCx6
10.90.90.x06/24
Note: x=POD number

Examples:
SWRx1 in POD 1=SWR11; IP Address is 10.90.90.11/24
SWRX1 in POD 2=SWR21; IP Address is 10.90.90.21/24
DCS-Switching
37
Lab 5
D-Link Academy
Task 1: To enable/disable ports (to prevent looping in case

STP is not enabled)
State/MDIX.
3. To enable the ports of the switch, enter config ports <portlist> state enable, where
Ports 1 and 26 or 28. The command is config ports 1,26/28 state enable.
Task 2: Configuring physical stacking

In this task, only SWRx1 and SWRx2 will be used for stacking. The stacking cable is
connected to Port 26 of SWRx1 or Port 28 for DGS-3620-28TC and Port 27 of SWRx2.
1. To enable both ports for stacking, on SWRx1, enter config ports 26 or 28 state enable
and on SWRx2, enter config ports 27 state enable.
2. On SWRx1 and SWRx2, enter config stacking_mode enable. Please note that this
command can only be used on the same series of switches. After entering the command,
enter y when asked to reboot.
38
DCS-Switching
D-Link Academy
Lab 5
3. When the switches have rebooted, on SWRx1, enter show stack _device and show
stack_information to verify the stacking settings.
Note: A maximum of 12 switches can be stacked.

4. When trying to access SWRx2, the message Please login through Master Box will
appear.
DCS-Switching
39
Lab 5
D-Link Academy
5. Based on the above scenario, SWRx1 is the Master Box. If a different switch should be
selected as the Master Box, use the command config box_priority current_box_id
<value 1-12> priority <value 1-63>.
Example: enter config box_priority current_box_id 2 priority 1 to change the
Master Box to SWRx2, then save the configuration and reboot the switch.
In the above figure, the Master Box is SWRx1 and has the serial number P1JH195000010.
40
DCS-Switching
D-Link Academy
Lab 5
In the above figure, the new Master Box has the serial number P1JH95000008. The
switchs command prompt remains the same because they are stacked.
Note: After completing this task, the stacking cable needs to be physically disabled to
terminate stacking and change the SWRx2 System IP address back to 10.90.90.x2 in
order to proceed with Task 3.
Task 3: Configuring logical stacking (SIM)

In this task, only SWRx1 and SWRx2 will be used for logical stacking, which is also known as
Single IP Management (SIM).
1. On SWRx1 and SWRx2, enter enable sim.
2. On SWRx1, enter config sim commander group_name podx to configure SWRx1 as
the SIM commander. Enter show sim candidates and a single candidate should be
displayed (i.e. SWRx2).
DCS-Switching
41
Lab 5
D-Link Academy
3. On SWRx1, enter config sim_group add 1. SWRx1 will add SWRx2 to the SIM group.
Note: If you are asked for the password, input the password of SWRx2.
4. On SWRx1, enter show sim candidates. Zero candidates will be displayed as SWRx2
has already joined the SIM group. Enter show sim members and SWRx2 should be
displayed as one of the SIM members.
5. On SWrx1 and SWRx2, enter show sim.
42
DCS-Switching
D-Link Academy
Lab 5
6. After completing logical stacking of the switches, use the Web browser to access SWRx1
(IP address 10.90.90.11). Through the Web browser, it is now possible to manage all the
switches that are logically stacked together.
DCS-Switching
43
Lab 5
D-Link Academy
Lab Verification
At the end of this lab, you have now learned how to enable physical and virtual stacking.
44
DCS-Switching
D-Link Academy
Lab 6
Lab 6: Routing Basics

Chapter 6
Routing
[Chapter 6: Routing Basics]

Version 1.0
Lab Objective
In this lab, you will learn to configure routing using two different methods: static and
dynamic.
DCS-Switching
45
Lab 6
D-Link Academy
Lab Topology
Note:
SWx3, SWx4, SWx5, and SWx6 are DES-3528.
Command List
Command
Description
create iproute [default |

<network_address>] [null0 |
<ipaddr> {<metric 1-65535>}
{[primary | backup | weight <value
This command is used to create an IP route entry to

the switchs IP routing table.
1-4>]}]
46
DCS-Switching
D-Link Academy
Lab 6
Command
delete iproute [default |
<network_address>] [null0 |
<ipaddr>]
show iproute {[<network_address>
| <ipaddr>]} {[static | rip | ospf |
bgp | hardware]}
enable rip
Description
This command is used to delete an IP route entry from
the switchs IP routing table.
This command is used to display the switchs current
IP routing table.
This command is used to enable the RIP routing.
config rip [ipif <ipif_name 12>|all]

{authentication [ enable <password
16> | disable ] | tx_mode [disable |
v1_only | v1_compatible | v2_only] This command is used to configure RIP on the switch.
| rx_mode [v1_only | v2_only |
v1_or_v2 | disable] | state [enable |
disable]}
show rip {ipif <ipif_name 12>}
This command is used to display the RIP configuration

and statistics for the switch.
config route preference [static |

default | rip | ospfIntra | ospfInter | This command is used to configure route type
ospfExt1 | ospfExt2 | ebgp | ibgp]
preference.
<value 1-999>
show route preference {[ local |
static | default | rip | ospf | ospfIntra This command is used to display the route preference
| ospfInter | ospfExt1 | ospfExt2 |
of each route type.
ebgp | ibgp]
Lab Details
Switch Name
Switchs IP
Address
Enabled Ports
Connected PC
(if any)
PCs IP Address
SWRx1
10.90.90.x1/24
1, 24
PCx1
10.90.90.x01/24
SWRx2
10.90.90.x2/24
1, 24
PCx2
10.90.90.x02/24
SWx3
10.90.90.x3/24
1, 3
PCx3
10.90.90.x03/24
SWx4
10.90.90.x4/24
1, 3
PCx4
10.90.90.x04/24
SWx5
10.90.90.x5/24
PCx5
10.90.90.x05/24
SWx6
10.90.90.x6/24
PCx6
10.90.90.x06/24
Note: x=POD number

Examples:
DCS-Switching
47
Lab 6
D-Link Academy
Task 1: To enable/disable ports (to prevent looping in case

STP is not enabled)
State/MDIX.
Task 2: Configuring VLANs

In this task, different subnets must be configured on the switches to demonstrate routing.
1. On SWRx1, enter the following commands to create VLANs and assign an IP address to
each VLANs:
config ipif System ipaddress 10.90.90.x1/24
create ipif v10-if 10.90.x1.11/24 v10
2. On SWRx2, enter the following commands to create VLANs and assign an IP address to
each VLANs:
config ipif System ipaddress 10.90.90.x2/24
3. On SWRx1 and SWRx2, enter show ipif to verify the IP addresses are applied
successfully.
4. On SWRx1, enter ping 10.90.x2.11 times 5 and note that the ping fails. On SWRx2,
enter ping 10.90.x1.11 times 5 and note that this ping also fails. Both the pings fail
because there are no routes configured to reach a different VLAN.
48
DCS-Switching
D-Link Academy
Lab 6
Task 3: Configuring Static Route

In this task, only SWRx1 and SWRx2 are configured for routing because they are both Layer
3 switches.
1. On SWRx1 and SWRx2, enter show iproute to view the existing routing table. Write
down the network addresses shown in the routing table:
________________________________________________
________________________________________________
2. On SWRx1, enter create iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
create iproute 10.90.x1.0/24 10.90.90.x1. This is to create a static route to point to
a destination network through a next hop.
3. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Write
down the new network addresses (with the Protocol status as Static) shown in the
routing table:
________________________________________________
________________________________________________
4. On SWRx1, enter ping 10.90.x2.11 times 5 and on SWRx2, enter ping 10.90.x1.11
times 5. Both the pings will be successful because there is a route configured to reach
each VLAN.
DCS-Switching
49
Lab 6
D-Link Academy
Task 4: Configuring RIP

3 switches.
1. On SWRx1 and SWRx2, enter show iproute to view the existing routing table. Write
down the network addresses shown in the routing table:
________________________________________________
________________________________________________
2. On SWRx1 and SWRx2, enter enable rip to enable RIP on both switches.
3. On SWRx1, enter the following commands:
config rip ipif System state enable
config rip ipif System rx_mode v2_only tx_mode v2_only
config rip ipif v10-if state enable
config rip ipif v10-if rx_mode v2_only tx_mode v2_only
(The above commands enable RIP on the interfaces and specifies RIP Version 2 on both
receive and transmit modes.)
config rip ipif System state enable
config rip ipif System rx_mode v2_only tx_mode v2_only
config rip ipif v20-if state enable
config rip ipif v20-if rx_mode v2_only tx_mode v2_only
(The above commands enables RIP on the interfaces and specifies RIP Version 2 on both
receive and transmit modes.)
5. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Note that
there are no RIP entries because a static route has a route preference of 60 and RIP has
a route preference of 100. A lower route preference value is preferred. There are two
solutions: delete the static route or change the value of the route preference.
6. On SWRx1, enter delete iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
delete iproute 10.90.x1.0/24 10.90.90.x1. This is to remove the static routes that
were previously configured in Task 3.
7. On SWRx1 and SWRx2, enter show iproute to view the updated routing table. Write down
the new network addresses (with the Protocol status as RIP) shown in the routing table:
________________________________________________
________________________________________________
50
DCS-Switching
D-Link Academy
Lab 6
8. On SWRx1, enter ping 10.90.x2.11 times 5 and on SWRx2, enter ping 10.90.x1.11
times 5. Both the pings will be successful because there is a route configured to reach
each VLAN.
Task 5: Configuring Route Preference

3 switches.
1. On SWRx1, enter create iproute 10.90.x2.0/24 10.90.90.x2. On SWRx2, enter
create iproute 10.90.x1.0/24 10.90.90.x1. This is to insert the previous static route,
which by default has a lower route preference. After inserting the static route, the route
entries inserted by RIP will be replaced.
2. On SWRx1 and SWRx2, enter config route preference static 200, to change the route
preference of the static route to 200.
3. On SWRx1 and SWRx2, enter show iproute to view the updated routing table.
What type of routes do you see?
________________________________________________
4. Why is a static route not displayed in the routing table?
________________________________________________
DCS-Switching
51
Lab 6
D-Link Academy
Lab Verification
How to configure static route.
How to configure dynamic routing through the use of the RIP protocol.
How to change the value of the route preference.
52
DCS-Switching
D-Link Academy
Lab 7
Lab 7: D-Link Switching Features

Chapter 7
D-Link Switching Features
[Chapter 7: D-Link Switching Features]

Version 1.0
Lab Objective
In this lab, you will learn to configure DHCP, ACL, LLDP, and System Maintenance. After
completing this lab, you should be able to configure dynamic address allocation, permitting
or denying traffic, learning about your neighbors, and backing up your firmware and
configuration files.
DCS-Switching
53
Lab 7
D-Link Academy
Lab Topology
Note:
Command List
DHCP Command
config dhcp pool default_router
<pool_name 12> <ipaddr>
{<ipaddr>} {<ipaddr>}
54
DCS-Switching
Description
This command is used to configure the default router
for the DHCP client.
D-Link Academy
Lab 7
DHCP Command
config dhcp pool dns_server_address
<pool_name 12> <ipaddr>
{<ipaddr>} {<ipaddr>}
Description
This command is used to configure the IP addresses of
DNS servers for a specific DHCP pool.
config dhcp pool network_addr
This command is used to configure the network
<pool_name 12>
address and corresponding subnet mask for the DHCP
<network_address>
pool.
create dhcp excluded_address
This command is used to configure IP addresses that
begin_address <ipaddr>
will be excluded from the DHCP servers pool of
end_address <ipaddr>
addresses.
create dhcp pool <pool_name 12> This command is used to create a DHCP pool.
disable dhcp_server
enable dhcp_server
This command disables the DHCP function on the

switch.
This command enables the DHCP function on the
switch.
show dhcp_binding {<pool_name
This command is used to show the DHCP binding
12>}
information.
show dhcp_server
This command is used to display the DHCP server

settings.
ACL Command
Description
config access_profile
This command is used to configure access list entry.
create access_profile
This command is used to create access list rules.
show access_profile
This command is used to display the current access list

table.
LLDP Command
Description
config lldp message_tx_interval
This command is used to change the packet
<sec 5 32768>
transmission interval.
config lldp ports [<portlist>|all]

admin_status [tx_only | rx_only |
tx_and_rx | disable]
This command is used to configure per-port transmit

and receive modes.

basic_tlvs [all | {port_description | This command is used to configure an individual port
system_name | system_description or group of ports to exclude one or more optional TLV
| system_capabilities}] [enable |
data types from outbound LLDP advertisements.
disable]
DCS-Switching
55
Lab 7
D-Link Academy
LLDP Command
Description

dot3_tlvs [all |
This command is used to configure an individual port
{mac_phy_configuration_status |
or group of ports to exclude one or more of IEEE 802.3
link_aggregation |
organization-specific TLV data types from outbound
maximum_frame_size}] [enable |
LLDP advertisements.
disable]
This command is used to enable or disable port(s)
mgt_addr [ipv4 <ipaddr> | ipv6
specified for advertising the indicated management
<ipv6addr>] [enable | disable]
address instances.

notification [enable | disable]
This command is used to configure each port for

sending notification to configured SNMP trap
receiver(s).
disable lldp
This command disables LLDP on the switch.
enable lldp
This command enables LLDP on the switch.

This command is used to display the switchs general
show lldp
LLDP configuration status.
TFTP Command
Description
download firmware_fromTFTP
{[<ipaddr> | <ipv6addr>
|<domain_name 255>] src_file
<path_filename 64> {dest_file
{{unit [<unitid 1-12> | all]}
This command is used to download the firmware

image from TFTP server.
<drive_id>} <pathname 64>

{boot_up}}}
upload cfg_toTFTP {[<ipaddr> |
<ipv6addr> | <domain_name
255>] dest_file <path_filename
64> {src_file {<drive_id>}
<pathname 64>} {[include |
exclude | begin] <filter_string 80>
{<filter_string 80> {<filter_string
80>}} {[include | exclude | begin ]
<filter_string 80> {<filter_string
This command is used to upload a configuration file

from a device to a TFTP server. This command is
required to be supported when the file system is not
supported on the devices Flash EPROM.
80> {<filter_string 80>}} {[include

| exclude | begin ] <filter_string 80>
{<filter_string 80> {<filter_string
80>}}}}}}
56
DCS-Switching
D-Link Academy
Lab 7
Lab Details
Switch Name
Switchs IP
Address
Enabled Ports
Connected PC
(if any)
PCs IP Address
SWRx1
10.90.90.x1/24
1, 24
PCx1
10.90.90.x01/24
SWRx2
10.90.90.x2/24
1, 24
PCx2
10.90.90.x02/24
SWx3
10.90.90.x3/24
1, 3
PCx3
10.90.90.x03/24
SWx4
10.90.90.x4/24
1, 3
PCx4
10.90.90.x04/24
SWx5
10.90.90.x5/24
PCx5
10.90.90.x05/24
SWx6
10.90.90.x6/24
PCx6
10.90.90.x06/24
Note: x=POD number
Examples:
Task 1: To enable/disable ports (To prevent looping in case

STP is not enabled)
State/MDIX.
Task 2: Configuring DHCP Server on SWRx1 and SWRx2

In this task, only SWRx1 and SWRx2 will be used as DHCP servers; SWx3, SWx4, SWx5, and
SWx6 will be used as DHCP clients. SWRx1, SWx3, and SWx5 will be in VLAN 10 and using
addresses from the network of 10.90.x1.0/24. SWRx2, SWx4, and SWx6 will be in VLAN 20
and using addresses from the network of 10.90.x2.0/24.
DCS-Switching
57
Lab 7
D-Link Academy
VLAN
v10
v20
DHCP Server
SWRx1
SWRx2
DHCP Clients
SWx3, SWx5
SWx4, SWx6
DHCP Pool
v10-pool
v20-pool
DHCP Network Address
10.90.x1.0/24
10.90.x2.0/24
10.90.x1.1/24 to
10.90.x2.1/24 to
10.90.x1.20/24
10.90.x2.20/24
DHCP Excluded Addresses

Note: x=POD number
1. On SWRx1, enter the following commands to configure it as a DHCP server:

config vlan v10 add tag 1,24
create dhcp pool v10-pool
config dhcp pool default_router v10-pool 10.90.x1.11
config dhcp pool dns_server(_address) v10-pool 10.90.x1.11
config dhcp pool network_addr v10-pool 10.90.x1.0/24
create dhcp excluded_address begin_address 10.90.x1.1 end_address 10.90.x1.20
enable dhcp_server
2. On SWx3, enter the following commands to configure it as a DHCP client:
config vlan v10 add tag 1
config ipif System vlan v10
config ipif System dhcp
4. On SWRx2, enter the following commands to configure it as a DHCP server:
config vlan v20 add tag 1,24
create dhcp pool v20-pool
config dhcp pool default_router v20-pool 10.90.x2.11
config dhcp pool dns_server(_address) v20-pool 10.90.x2.11
config dhcp pool network_addr v20-pool 10.90.x2.0/24
create dhcp excluded_address begin_address 10.90.x2.1 end_address 10.90.x2.20
enable dhcp_server
58
DCS-Switching
D-Link Academy
Lab 7

config vlan v20 add tag 1
config ipif System vlan v20
7. To verify successful DHCP settings, use the commands show switch and show ipif on
SWx3, SWx4, SWx5, and SWx6.
Note: disable dhcp_server and enable dhcp_server on SWRx1 and SWRx2 if SWx3,
SWx4, SWx5, and SWx6 cannot obtain an IP address.
8. To reach the different subnets, ensure that the RIP configuration from Lab 6 is still
implemented by using the show iproute command.
DCS-Switching
59
Lab 7
D-Link Academy
Task 3: Configuring ACL

In this task, the ACL will be applied on the middle switch to prevent the lower switch from
accessing the higher switch.
1. Before applying ACL, it is good practice to test availability first. On SWx5, enter ping
10.90.x1.11 times 5 to reach SWRx1. The ping should be successful. Then, enter
telnet 10.90.x1.11 to Telnet to SWRx1. The Telnet should be successful. Enter logout
to end the Telnet session at SWRx1. Now, enter show switch and record the MAC
address and IP address of SWx5:
_________________________________________________
2. On SWx3, enter ping 10.90.x1.11 times 5 to reach SWRx1. Then, enter create
access_profile profile_id 1 profile_name denySWx5 ethernet source_mac FFFFFFFFFFFF
to create an Ethernet ACL. Then, enter config access_profile profile_id 1 add access_id 1
ethernet source_mac <MAC add of SWx5 from Step 1> port 3 deny to deny traffic from
SWx5 on Port 3.
3. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1, then enter telnet
10.90.x1.11 to Telnet to SWRx1. Both ping and Telnet traffic will fail because of the rule
that is used in Step 2.
4. On SWx3, enter delete access_profile profile_id 1 to remove the ACL created in Step 2.
5. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1. The ping should be
successful because the ACL has been removed.
60
DCS-Switching
D-Link Academy
Lab 7
6. On SWx3, enter create access_profile profile_id 1 profile_name denyicmp ip icmp type

source_ip_mask 255.255.255.255 to create an IP ACL. Then, enter config access_profile
profile_id 1 add access_id 1 ip source_ip <IP address of SWx5 from Step 1> icmp port 3
deny to specify that only ICMP traffic will be denied on Port 3.
7. On SWx5, enter ping 10.90.x1.11 times 5 to reach SWRx1. The ping should fail. Then,
enter telnet 10.90.x1.11 to Telnet to SWRx1. The Telnet connection is successful.
8. On SWx3, enter delete access_profile profile_id 1 to remove the ACL created in Step 6.
9. Using the commands from Steps 1 to 8, create an ACL on SWx4 to filter the traffic from
SWx6 to SWRx2. Remember to make changes to the MAC addresses and IP addresses.
Use show access_profile profile_id 1 to verify the ACL configurations. Remove the
ACL when done with this step.
Task 4: Configuring LLDP

In this task, LLDP will be configured on all the six switches.
enable lldp
config lldp ports 1,24 basic_tlvs all enable
config lldp ports 1,24 mgt_addr ipv4 10.90.90.x1 enable
config lldp ports 1,24 admin_status tx_and_rx
config lldp ports 1,24 notification enable
config snmp system_name SWRx1
enable lldp
config snmp system_name SWRx2
3. On SWx3, enter the following commands:
enable lldp
config snmp system_name SWx3
DCS-Switching
61
Lab 7
D-Link Academy

enable lldp
enable lldp
config lldp ports 3 basic_tlvs all enable
config lldp ports 3 mgt_addr ipv4 10.90.90.x5 enable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification enable
enable lldp
config lldp ports 3 basic_tlvs all enable
config lldp ports 3 mgt_addr ipv4 10.90.90.x6 enable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification enable
Note: Refer to the Command List for an explanation of each of the above commands.
7. When configuration has been completed for all switches, use show lldp remote_ports
<portlist> where <portlist> refers to the ports used on the switches from Step 1 to 6.
Task 5: System Maintenance

In this task, a TFTP server is required.
1. Set up a TFTP server connected to SWRx1 and configure its IP address to
10.90.90.100/24. On all switches, ping the TFTP server to ensure it is reachable.
Note: To set up a TFTP server, configure the PCs IP address to 10.90.90.100 with a
subnet mask of 255.255.255.0, and execute the program DLinkTftpServer.exe.
2. It is a good practice is to back up each switchs configuration file to the TFTP server. On
all switches, enter upload cfg_toTFTP 10.90.90.100 dest_file <switchname.cfg>.
The output should look similar to this:
62
DCS-Switching
D-Link Academy
Lab 7
3. If new firmware needs to be installed on the switch, enter download firmware_from

TFTP 10.90.90.100 src_file <firmware.had>. The output should look similar to this:
DCS-Switching
63
Lab 7
D-Link Academy
Lab Verification
How to enable DHCP services.
How to configure ACL to filter traffic.
How to implement LLDP to learn about your neighbors.
How to use TFTP services to upload or download firmware and configuration files.
64
DCS-Switching

DCS-Switching Lab Guide v1.8

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

DCS-Switching Lab Guide v1.8

Transféré par

Droits d'auteur :

Formats disponibles

Copyright 2012-2013 D-Link Corporation. All Rights Reserved.

D-Link, D-Link logo, D-Link sub brand logos,

Lab 1: Network Essentials ............................................................................................ 7

Copyright 2012-2013 D-Link Corporation

Lab 3: VLAN .............................................................................................................. 21

Copyright 2012-2013 D-Link Corporation

Lab Details ............................................................................................................. 37

Copyright 2012-2013 D-Link Corporation

Task 3: Configuring ACL ......................................................................................... 60

Copyright 2012-2013 D-Link Corporation

Lab 1: Network Essentials

[Chapter 1: Network Essentials]

Copyright 2012-2013 D-Link Corporation

Task 1: Understanding the OSI model

provides end-to-end data transfer by delivering data from an

application to its remote peer.

is the interface to the actual network hardware.

provides addressing and routing functions.

is provided by the program that uses TCP/IP for

communication. An application is a user process cooperating with another process,

Task 2: Understanding the TCP/IP protocol suite

Copyright 2012-2013 D-Link Corporation

3. What is the purpose of assigning an IP address to a switch?

Task 3: Understanding IP addresses and subnets

2. Of the following IP addresses, which one is a private address?

5. From which IP address class can 15 bits be borrowed to create subnets?

Copyright 2012-2013 D-Link Corporation

Answers for Lab 1:

Task 2: Understanding the TCP/IP protocol suite

Copyright 2012-2013 D-Link Corporation

Copyright 2012-2013 D-Link Corporation

Lab 2: D-Link Switch Operation

[Chapter 2: D-Link Switch Operation]

Copyright 2012-2013 D-Link Corporation

To clear the screen.

Copyright 2012-2013 D-Link Corporation

To create an administrator-level account for the

delete account <username>

To delete a user account.

disable password encryption

To disable password encryption.

To disable secure login to remote devices through the

reset password {<username>}

username is not specified, the passwords of all users

To enter the current Switch configuration into

To display all user accounts created on the Switch.

To display the command history.

To display the current status of the power and fans on

To display the current configuration of a range of ports

show serial port

To display the current serial port settings.

To display a list of all the users that are logged in at the

To display the following information about the Switch.

show utilization cpu

To show CPU utilization.

show utilization dram

To show DRAM memory utilization.

Copyright 2012-2013 D-Link Corporation

show utilization flash

To show flash memory utilization.

telnet <ipaddr> {tcp_port<value

To log into a remote system with the Telnet protocol

Task 1: Connecting to the Switch using CLI

Copyright 2012-2013 D-Link Corporation