dgs-3400 series_a2a3_release notes_for fw_ v2 70 b56 (for ww)

8/9/2019 DGS-3400 Series_A2A3_Release Notes_for FW_ v2 70 B56 (for WW)

1/35

DGS-3400 Series Firmware Release Notes

These release notes include important information about D-Link switch firmware revisions.

Please verify that these release notes are correct for your switch:

- If you are installing a new switch please check the hardware version on the device label!

make sure that your switch meets the system re"uirement of this firmware version.

Please refer to #evision $istory and %ystem #e"uirement for detailed firmware and

hardware matri&

- If the switch is powered on you can check the hardware version by typing the 'show

switch( command or by checking the device information page on the web graphic userinterface.

- If you plan to upgrade to the new firmware release please refer to the )pgrade

Instructions for the correct firmware upgrade procedure.

*or more detailed information regarding our switch products please refer to #elated

Documentation.

+ou can also download the switch firmware D-,iew modules and technical documentation

from http:tsd.dlink.com.tw.

Content:

#evision $istory and %ystem #e"uirement:........................................................................

)pgrade Instructions:.....................................................................................................

)pgrade by using /LI 0serial port1

)pgrade using 2eb-)I 3

4ew *eatures:................................................................................................................5

/hanges in 6I7 8 D-,iew 6odule:..................................................................................93

1

Firmware Version: ,.;.7un =; ;9;

http://tsd.dlink.com.tw/http://tsd.dlink.com.tw/


2/35


/hanges in /ommand Line Interface:..............................................................................;

Problems *i&ed:............................................................................................................9

?nown Issues:..............................................................................................................=

#elated Documentation:................................................................................................=


3/35


Revision History and System Requirement:

Firmware Version Date !odel "ardware Version

#untime: ,.;.7un-9; D@%-=35 A9 A A=

D@%-=35P A9 A

D@%-=3 A9 A A=

D@%-=3uly-;B D@%-=35 A9 A

D@%-=35P A9 A

D@%-=3 A9 A

D@%-=3


4/35


Upgrade Instructions:

D-Link switches support firmware upgrade via T*TP server. +ou can download the firmware

from D-Link web site http:tsd.dlink.com.tw and copy the downloaded firmware to the T*TP

server folder. Please make sure that the T*TP server is accessible from the switch via networks.

#$%rade b& usin% C'( )serial $ort*

/onnect a workstation to the switch console port and run any terminal program that can

emulate a ,T-9;; terminal. The switch serial port default settings are as follows:

7aud rate: 11+00

Data bits: ,

Parity: None

%top bits: 1

The switch will prompt the user to enter hisher username and password. It should be noted

that upon the initial connection there is no username and password by default.

To upgrade the switch firmware e&ecute the following commands:

Command Funtion

download E firmwareFfromT*TP GipaddrH

GpathFfilename 53H imageFid Gint 9-HJ K

Download firmware file from the T*TP

server to the switch.

config firmware imageFid G9-H Edelete

bootFupK

/hange the boot up image file.

show firmwareFinformation Display the information of current boot

image and configuration.

4

Caution: .his /ersion onl& su$$orts diret irmware u$%rade rom /20 Diretu$%rade rom an& /ersion $rior to /20 is not su%%ested and ma& result inunnown issues Down%rade to an& /ersion $rior to /20 is not su$$orted( one o the swith ima%es has the irmware /ersion $rior to /20 then thisima%e an not be seleted as the boot u$ ima%e

http://tsd.dlink.com.tw/http://tsd.dlink.com.tw/


5/35


reboot #eboot the switch.

56am$le:

1. DGS-3426P:5#download firmware from TFTP 0.90.90.9 R20!56."ad imae$id 2

%ommand: download firmware$fromTFTP 10.90.90.91 R20!56."ad ima#e$id 2

%onne&'in# 'o (er)er................... Done.

Download firmware...................... Done. Do no' *ower off+

Plea(e wai', *ro#rammin# fla("......... Done.

2. DGS-3426P:5#&onfi firmware imae$id 2 oo'$*

%ommand: &onfi# firmware ima#e$id 2 oo'$*

S&&e((.

3. DGS-3426P:5#("ow firmware informa'ion

%ommand: ("ow firmware informa'ion

/D er(ion Sie! *da'e Time From (er

-- --------- ------- ------------------- ------------------ ---------------

1 2.60.!26 2450452 20100204 1:00:26 10.90.90.91R non7mo(

82 2.0.!56 4029512 20100305 02:25:5 10.90.90.91R non7mo(

8 mean( oo' * firmware

R mean( firmware *da'e '"ro#" Serial Por'RS232

T mean( firmware *da'e '"ro#" T;P

? mean( firmware *da'e '"ro#" ?;!

SS@ mean( firmware *da'e '"ro#" SS@

S/> mean( firmware *da'e '"ro#" Sin#le /P >ana#emen'

4. DGS-3426P:5#reoo'

%ommand: reoo'

re 7o (re 7o wan' 'o *ro&eed wi'" '"e (7('em reoo'A7n 7

+


6/35


Plea(e wai', '"e (wi'&" i( reoo'in#...

!oo' Pro&edre 1.00.!13

-------------------------------------------------------------------------------

Power Bn Self Te(' ........................................ 100 C

>% ddre(( : 00-1;-5-4F-F-D0

@? er(ion : 1

Plea(e wai', loadin# 2.0.!56 Rn'ime ima#e ............. 100 C

RT ini' .........................

De)i&e Di(&o)er7 .......................................... 100 C

%onfi#ra'ion ini' ........................................ 100 C

#$%rade usin% 7eb-#(

9. /onnect a workstation installed with Mava %N runtime environment to any switch port of

the device.

. Cpen the web browser from the workstation and enter the IP address of the switch. The

switchOs default IP address is 9;.B;.B;.B;.

=. Nnter administratorOs username and password when prompted. It should be noted that the

username and password are blank by default.

3. To update the switchs firmware or configuration file select 8dministration 9 .F.P

Ser/ies in function tree. %elect Download *irmware in $eration.


7/35


7oot )p Image ID.

. %elect the type 0IPv3 or IPv51 of IP address of the T*TP server and enter the IP address.

. Nnter the firmware file name in File Name.

B. /lick 'Start(

9;. 2ait until the '*ile Transfer( status reaches 100; and the 'Program *irmware< status

shows 'om$leted(.

99. To select the boot up image used for ne&t reboot click 8dministration 9 !ulti$le

(ma%e Ser/ies 9 Coni% Firmware (ma%e in the function tree.

9. Nnter the image ID and choose '7oot( then click '8$$l&(.

9=. To reboot the switch click D@%-=3;; 2eb 6anagement Tool H #eboot %ystem. %elect

'Yes


8/35


,


9/35


New Features:

Firmware

Version

New Features

,.;.7


10/35


topology


11/35


- Link aggregation ports can be set as a target port

9B. s*low enhancement:

- Allow to specify IPv5 server.

- %upport T flow sampling.;.6icrosoft 4L7 04etwork Load 7alancing1 support.

9.Add 'data driven group( in I@6P6LD snooping.

. I%6-,AL4 enhancement:

- %upport Tag )ntagged member ports.

- %upport Tag )ntagged source ports.

- /onfigurable 6ulticast ,LA4 priority.

- Do not limit the number of total multicast addresses per I%6-,LA4 entry

when using 'config igmpFsnooping multicastF,LA4Fgroup(

=. *orward protocol packets even the switch is under

'filterFunregisterFgroup mode( 0Protocol packet: the packets with

destination IP address in the range of reserved multicast addresses:

3.;.;.& such as C%P* hello PI6 hello and D,6#P probe etc.1

3.%upport new CID to clear dynamic *D7 by portby ,LA4.


12/35


- %upport Per ,LA4 authentication

- %upport virtual IP: used to accept authentication re"uests from

unauthenticated hosts. Cnly the re"uests sent to this IP will get

response correctly.

- %upport time control for authenticated client 0e.g. aging timeidle

timeblock time1

- %upport Authentication Database failover: Allows to configure the switch

to check local database or bypass authentication when configured

#ADI)% server fails

- Cbsolete authentiation ,LA4

- %upport compound authentication

32. Japanese Web-based Access Control (JWAC) enhancement

(support JWAC v2.02)

- Show I address and user I! "n #I and lo$

- JWAC not"%cat"on& Show not"%cat"on to user automat"call'

ater pass"n$ the authent"cat"on.

- Adm"n"strator can use *!+ #, to access JWAC lo$"n pa$e

"nstead o us"n$ I

==. /ompound authentication

=3. A#P %poofing Prevention.

=


13/35


or recovers port learing.

67A/ enters stop learning state.

67A/ recovers from stop learning state.

Port G EunitID:Kport4umH enters 67A/ stop learning state.

Port G EunitID:Kport4umH recovers from 67A/ stop learning

state.

39. IP Directed 7roadcast.

3.A#P enhancement:

- %how arpentry by mac address.

- Add CIDs to clear A#P table

3=.Pro&y A#P.

33.#IPv9v.

3


14/35



15/35


enabled the %witch will accept the parameters 0if applicable1 assigned

from #ADI)% server or Local database and treat them as highest

priority.

. 6A/-based Access /ontrol 06A/1 enhancement

-%upports identity-driven Vo%: /an assign ingressegress bandwidth

control and ;.9p default priority to the port according to the attributes

dispatched from #ADI)% server

-/an enable disable '#ADI)% or Locally Assigned Information(: when

enabled the %witch will accept the parameters 0if applicable1 assigned

from #ADI)% server or Local database and treat them as highest

priority.

. >2A/ enhancement

-)pdate server entries increased to 9;;

-%upports identity-driven Vo%: /an assign ingressegress bandwidth

control and ;.9p default priority to the port 0port-based1 or host

0host-based1 according to the attributes dispatched from #ADI)% server

-/ustomiQable page

-/hanged the default time for >2A/ "uarantine server error timeout

from =; seconds to 5; seconds

-Increased the ma&imum concurrent user login to


16/35


%erver for ;.9 authentication

- /an enable disable '#ADI)% Assigned Information(: when enabled

the %witch will accept the parameters 0if applicable1 assigned from

#ADI)% server and treat them as highest priority.

9;. /ompound Authentication

99. Authentication Database *ailover: 7e able to switch to local database for

authentication when #ADI)% server fails

9. #ADI)% Accounting: accounting and billing services for ;.9 /lients

9=. Per-flow 7andwidth /ontrol 0A/L *low 6etering1

-/I# 0/ommitted Information #ate1

-Two-rate Three /olor 6arker 0TrT/61

-%ingle-rate Three /olor 6arker 0%rT/61

93. D$/P %erver

9


17/35


9. ;.9D-;;3

. @ratuitous A#P

=. Three-Level )ser Account

3. A/L enhancement

-)ser-defined packet content and mask

-*low-based 0A/L1 mirroring

-A/L %tatistics 0counters1

-display remaining A/L rules

-replaceFdscp action for Nthernet A/L


18/35


39. ipifFipv5FlinkFlocalFauto can be enabled or disabled! default is disabled

3. Added parameter Sip addressO to the command 'show iproute(

3=. Admin can specify which *irmware image ID the switch will use during

boot-up

33. Added an e&tra y parameter for commands which prompt 0+41

3


19/35


mi&ed-code stack.

,.=


20/35


9


21/35


Changes in MIB !"#iew Modu$e:

The new features of 6I7 file are also included in the corresponding D-,iew module. Please

download the D-,iew module on http:tsd.dlink.com.tw. *or detailed changes of 6I7 content

please refer to the modification history in each 6I7 file.

Firmware

Version

!(? File New Features

,.;.7


22/35


reboot

. %tacking force master role feature

=. %how stack information and show log include

information about stacking topology

N#P%.mib N#P%: support rings

@enmgmt.mib 9. Allow to specify “srcFfile” “dstFfile”

“domainFname” in downloadupload

functions

. %how memoryflash utiliQation

=. /LI /ommand logging

3. %upport new CID to clear dynamic *D7 by

portby ,LA4


23/35


LmgmtD@%=35P.mib

LmgmtD@%=3.mib

LmgmtD@%=3


24/35


4lb.mib 6icrosoft 4L7 support

6%TP.mib 9. %upport ;.9D ;;3 edition

. %upport %TP 9V ;;< 6%TP

=. %TP #oot #estriction

3. %upport the 7PD) address setting on 44I port

when VinV is enabled

Pkt%torm/trl.mib %torm control enhancement:

/hange RcountdownR to R=-=;R

/hange RtimeFintervalR to R< - 5;;R

Auto recovery for shutted-down port

#/P.mib #emote /opy Protocol 0#/P1: allow users to copy

firmware images configurations and log files

between the %witch and #/P %erver

#*/99=.mib 9. %how arpentry by 6A/ address

. 6icrosoft 4L7 support

#*/B


25/35


%upport T flow sampling

. /hange s*low version from ,9 to ,<

%rcIPIf.mib %46P-server 8 syslog source-interface

appointment

%ubnet,LA4.mib %upport subnet-based ,LA4

2A/.mib 2A/ enhancement:

Identity driven policy assignment: /an

assign ingressegress bandwidth control

and ;.9p default priority to the port

according to the attributes dispatched from

#ADI)% server Add log

%upport host-based authentication mode :

assign ingressegress bandwidth control for

all hosts to the port! assign ,LA4 or ;.9p

default priority to the host after successful

authentication in host-based mode0#.


26/35


-able to force ;.9 client to go offline

-supports ;.9 PD) forwarding when

;.9 is disabled

-supports identity-driven Vo%: /an assign

ingressegress bandwidth control and ;.9p

default priority to the port according to the

attributes dispatched from #ADI)% server.

- supports ma&imum of 9 clients per port

9;3 clients per switch and 3;;; clients per

stack

=. /an enable disable '#ADI)% or Locally

Assigned Information(: when enabled the

%witch will accept the parameters 0if

applicable1 assigned from #ADI)% server or

Local database and treat them as highest

priority

#%PA4-6@6T-6I7 #%PA4

#ADI)%-A//C)4TI4@-6I7 #ADI)% Accounting

*ILTN#-6I7 D$/P %erver %creening

A/L6@6T-6I7 9. Per-flow 7andwidth /ontrol 0A/L *low

6etering1

-/I# 0/ommitted Information #ate1

-Two-rate Three /olor 6arker 0TrT/61

-%ingle-rate Three /olor 6arker 0%rT/61

. A/L enhancement

-)ser-defined packet content and mask

-*low-based 0A/L1 mirroring

-A/L %tatistics 0counters1

-display remaining A/L rules

-replaceFdscp action for Nthernet A/L

IP-6/%T-,LA4-#NP-6I7 L 6ulticast ,LA4 #eplication 0%tatic

configuration1: Admin can manually configure the

switch to route multicast traffic across ,LA4s

2


27/35


6%TP-6I7 %TP #oot #estriction 0defined in ;.9V-;;2A/-6I7 >2A/ enhancement

-update server entries increased to 9;;

-customiQed page

-changed the default time for >2A/

-"uarantine server error timeout from =;

seconds to 5; seconds

-increased the ma&imum concurrent user

login to


28/35


advertisement: used for Auto 4egotiation

between ports

D@%-=35-L=6@6T-6I7

D@%-=35P-L=6@6T-6I7

D@%-=3-L=6@6T-6I7

D@%-=3


29/35


Changes in Command %ine Inter&ace:

The section below only shows command line changes that may bring backward compatibility

issues with configuration settings for previous version of firmware.

Any new feature commands that do not have backward compatibility issues are not included in

the below section.

Firmware

Version

Chan%es

,.;.7


30/35


you have upgraded the firmware to ,.; or onward and are using

script to manipulate firmware or config file please do not forget to add

those parameters to the script.

,.5;.75 4one

30


31/35


32/35


93. If the %46P manager sends R%46P get re"uestR about Rif4umber: ;R to

D@%-=3;; the value of response is incorrect. 0DI;;B;9=;;;;9;1

9


33/35


4. Admin cannot use the /LI command 'config doubleFvlan d95B add access

=( to add double ,LA4 access member port. 0DT;;9;;;;;1

5. %%$ Login: 2hen using Cpen%%$


34/35


,9.;;7=< Initial #elease

Y D-Link tracking number is enclosed in 01

34


35/35


*nown Issues:

Firmware

Version

(ssues 7oraround

,.;.7

dgs-3400 series_a2a3_release notes_for fw_ v2 70 b56 (for ww)

Documents