Allied Telesis at-9000/24 layer 2 gigabit ethernet switch manual

613-000368 Rev. C Management Software AT-S84 User’s Guide For the AT-9000/24 Layer 2 Gigabit Ethernet Switch Version 1.1.1[...]

Copyright © 2007 Allied T elesis, Inc. All rights reserved. No part of this publication may be repr oduced withou t prior written permissi on from Allied Telesis, Inc. Allied Telesis is a trademark of Allied Telesis, Inc. Microsof t and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navi gator is a registered tradem[...]

3 Preface ........ ................ ............. ................ ................ ............. ................. ................ ............ ................. ............ 13 Where to Find Web-based Gu ides ................ ................ ................ ................ ................ ................ . ............... ... 14 Contacting [...]

Contents 4 Enabling or Disabling Trap Receivers ....... .......... .......... ............. ................ ................ ................ ... ............. 65 Modifying a Trap Receiver ...... ................ ................ ................ ................. ................ ............... ....... ............. 66 Deleting a Trap Receiver .[...]

AT-S84 Management Software User’s Gui de 5 Modifying a VLAN .................. ................. ................ ................ ................ ................ ............ ................. .... 119 Changing the VLAN Name ..... ................ ................ ................ ................ ................. ................ ... .......[...]

Contents 6 Uploading or Downloading a Confi guration File ...... ................ ................ ................ ................ ............ ........ .... 193 Uploading the Configuration File ............ ................... ................. ................ ................ ............... ....... ........ 193 Downloading a Configuration Fil[...]

AT-S84 Management Software User’s Gui de 7 Deleting a VLAN .. ................ ................ ................ ................ ................ ................ ............. . ............................. 258 Deleting All VLANs .... ................ ................ ................ ................. ................ ............. ..........[...]

Contents 8 Port Configuration Default Settings .................. ................ ................. ................ ................ ......... .... ................ . 315 Quality of Service ... ................ ................. ................ ............. ................ ................ ............ ........... ............ ........ 316 IGM[...]

9 Figure 1. Connecting the Manageme nt Cable to the Cons ole Port ....... .............. ............ ........... ........... .......... ....... ............. 26 Figure 2. Login Menu ............. .............. .............. .............. .............. .............. .............. ......... ..... .............. .............. .............. ..[...]

Figures 10 Figure 51. Software Upgrade Menu (1 of 2) ................ .............. ................. .............. .............. .......... .................. .............. . 191 Figure 52. Software Upgrade Menu (2 of 2) ................ .............. ................. .............. .............. .......... .................. ..............[...]

11 Table 1. Menus Interface Operations .................. ... .............. .............. ........... .............. .............. .. ...... .............. .............. ..... 28 Table 2. Default Mappings of IEEE 802.1p Priority Level s to Egress Port Priority Queues ......... .............. ............... ....... 127 Table 3. RSTP Auto- Detec[...]

Tables 12[...]

13 Pr eface This guide contains instructions on ho w to use the AT-S84 management software to manage and monitor th e AT-9000/24 Gigabit Ethernet switch. The AT-S84 management software has three managemen t interfaces: menus, web browser, and CLI. You a ccess the menus and CLI interfaces through the console port on the switch or through Telnet, and[...]

Preface 14 Where to Find Web-based Guides The installation and user guides for all Allied Telesis products a re available in portable document format ( PDF) on our web site at www.alliedtelesis.com . You can view the documents online or d ownload them onto a local workstation or server.[...]

AT-S84 Management Software Use r’s Guide 15 Contacting Allied Telesis This section provides Allied Telesis contact information for technica l support as well as sales and corporate information. Online Support You can request technical support onli ne by accessing the Allied Telesis Knowledge Base: http://kb.alliedtelesis.com . You can use the Kno[...]

Preface 16[...]

17 Chapter 1 Overview This chapter provides an overview of the AT-S84 managemen t software for the AT-9000/24 Gigabit Ethernet switch . This chapter describes the different methods for accessing the software and the management access levels. This chapter contain s the following sections:  “Management Overview” on p age 18  “Local Connec[...]

Chapter 1: Ove rview 18 Management Overview The AT-S84 management software allows you to view and adjust the operating parameters of the AT -9000/24 Gigabit Ethernet switch. Her e are a few examples of the functions that you can perform with the management software:  Enable and disa ble ports  Configure a port’ s speed and duplex mode  C[...]

AT-S81 Management Software Use r’s Guide 19 Local Connection To establish a local connection with a sw itch, you connect a terminal or a PC with a terminal emulator program to the terminal port on the fron t of the switch using the management ca ble included with the unit. This type of connection is referred to as “local” becau se you must be[...]

Chapter 1: Ove rview 20 Remote Connection You can use any management station on your net work that has the Telnet application, an SNMP manager, or as web browser to manage an AT-9000/24 Gigabit Ethernet switch. Th ese are referred to as remote connections. In order for you to manage a switch using a remote co nnection, the switch must have an IP ad[...]

AT-S81 Management Software Use r’s Guide 21 Management Access Level The AT-S84 management software has one level of management access: manager. When you log in as a manager , you can view and configure all of a switch’s operating parameters. You log in as a manag er by entering the appropriate username and password when you start an AT-S84 mana[...]

Chapter 1: Ove rview 22[...]

Section I: Using the Me nus Interface 23 Section I Using the Menus Interface The chapters in this section e xplain how to manage the switch usin g the menus interface of the AT-S84 management software. T he chapters include:  Chapter 2, “Getting S tarted with the Menus Interface” on page 25  Chapter 3, “Basic Switch Parameters” on p a[...]

24 Section I: Using the Menus Interf ace[...]

Section I: Using the Me nus Interface 25 Chapter 2 Getting S tarted with the Menus Interface This chapter provides information and instructions on h ow to access the menus interface of the AT-S84 management software b y starting a local management session. This chapter cont ains the following sections:  “S tarting a Local Manag ement Session?[...]

Chapter 2: Gett ing Started with the Menu s Interface 26 Section I: Using the Menus Interf ace Starting a Local Management Session You establish a local management session with the AT-9000/24 Gigabit Ethernet switch by connecting a term inal o r personal computer with a terminal emulation program to the RS-232 console port on the front panel of the[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 27 The Login Menu is shown in Figure 2. Figure 2. Login Menu 4. Enter the manager login name and press Return. The d efault name is “manager”. Y ou are prompted for a password. 5. Enter the manager password. The default pa ssword is “friend”. Note To change th[...]

Chapter 2: Gett ing Started with the Menu s Interface 28 Section I: Using the Menus Interf ace Using the Menus Interface If you are using a DEC VT00 or ANSI (the default) terminal configuratio n, refer to Table 1 for instructions on how to move through the menus and select menu options. When you enter a letter to select a field in which yo u can en[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 29 Quitting from a Loca l Management Session To quit a local management session, ret urn to the Main Menu and type Q for Quit. When you are finished managi ng th e switch, make sure to exit from a management session. Quitti ng from a loca l session prevents unauthoriz[...]

Chapter 2: Gett ing Started with the Menu s Interface 30 Section I: Using the Menus Interf ace[...]

Section I: Using the Me nus Interface 31 Chapter 3 Basic Switch Parameters This chapter contains the following sections:  “Configuring the IP Address, Subn et Mask, and Gateway Address” on page 32  “Enabling and Disabling the DHCP Client” on p age 35  “Configuring System Administ ration Information” on p age 36  “Setting t[...]

Chapter 3: Basic Switch Parameters 32 Section I: Using the Menus Interf ace Configuring the IP Address, Su bnet Mask, and Gateway Address This procedure explains how to manually assign an IP address, subne t mask, and gateway address to the swit ch. Before performing the procedure, note the following:  An IP address and subnet mask are not requi[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 33 2. From the Basic Switch Configu ration Menu, type I to select System IP Configuration . The System IP Configuration Menu is shown in Figure 5. Figure 5. System IP Configur ation Menu The top portion of the menu displays the current IP address, subnet mask, and gat[...]

Chapter 3: Basic Switch Parameters 34 Section I: Using the Menus Interf ace b. Type the subnet mask for the switch and pre ss Enter. 5. To set the switch’s gateway address, do the following: a. Type G to select Set Default Gateway . The following prompt is displayed: Enter new g ateway IP address> b. Type the gateway IP address for the switch [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 35 Enabling and Disabling the DHCP Client This procedure explains how to activa te and deactivate the DHCP clie nt on the switch. When the client is activate d, the switch obtains its IP configuration, such as it s IP address and subnet mask, from a DHCP server on you[...]

Chapter 3: Basic Switch Parameters 36 Section I: Using the Menus Interf ace Configuring System Administration Information This section explains how to assig n a name to the switch, as well as specify the location of the switch and the name of the switch ’s administrator. Entering this informat ion is optional. To set a switch’s administration i[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 37 Enter syste m name> b. Type a name for the switch (for example, Sales). The name is optional and can cont ain up to 50 characters. Note Allied Telesis recommends that you assign names to the switches. Names can help you identify the switches when you manage them[...]

Chapter 3: Basic Switch Parameters 38 Section I: Using the Menus Interf ace Setting the Us er Inte rface Configuration This procedure explains how to adjust the use r interface and security features on the switch. With th is procedure you c an change various settings that control user access to the switch. To set the switch’s user interface c onf[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 39 The SNMP option is described in “Enabling or Disablin g the SNMP Agent” on page 62. The RADIUS Server Configuration option is described Chapter 13 , “RADIUS Authentication Protocol” on p age 179. 3. To configure the console UI idle time o ut parameter, do t[...]

Chapter 3: Basic Switch Parameters 40 Section I: Using the Menus Interf ace The Telnet UI idle time out parameter specifie s the length of time a remote Telnet management session can be inact ive before the management software automatically en ds it. This feature prevents unauthorized individuals from confi gurin g the switch if you leave your mana[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 41 c. Type the new password and press Enter. The password can be from 0 to 12 characters. Allie d Telesis recommends not using special characters, such as sp aces and exclamation points. Th e password is case sensitive. Not ente ring a new password deletes the current[...]

Chapter 3: Basic Switch Parameters 42 Section I: Using the Menus Interf ace Disabling or Enabling the Web Server The AT-S84 management software is sh ipped with web server software. The software is available so that you can remotely manage t he switch with a web browser from any management station on your network. (The instructions for managing a s[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 43 Disabling or Enabling the Telnet Server This procedure describes how to enabl e or disable the Telnet server on the switch. The default setting for the Telnet server is enabled, To disable or enable the Telnet server, perform the follo wing procedure: 1. From the M[...]

Chapter 3: Basic Switch Parameters 44 Section I: Using the Menus Interf ace Configuring SNTP The AT-S84 software is shipped with the client version of the Simple Network Time Protocol (SNTP). You can co nfigure AT-S84 to obtain the current time and date from an SNT P or Network Time Protocol (NTP) server located on your network or on the internet. [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 45 The following prompt is displayed: Enter new IP address> b. Type the IP address for the SNTP server you want to use. 4. To set the SNTP interval: a. Type I to select Set SNTP Interval . The following prompt is displayed: Enter Interv al Time> b. Type a number[...]

Chapter 3: Basic Switch Parameters 46 Section I: Using the Menus Interf ace b. Scroll through the list of time z ones until you find one that matches your time zone. c. Type S to choose Set Time Zone . The following message is prompt is displayed: Select time zone> d. Type the number that corresponds to the time zo ne you want. If you selected a[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 47 Viewing Switch Information To view general information about the switch, perform the following procedure: 1. From the Main Menu, type G to select Ge neral Information . The General Information menu is shown in Figure 10. Figure 10. General Information Menu The Gene[...]

Chapter 3: Basic Switch Parameters 48 Section I: Using the Menus Interf ace Hardware Information Section Ve r s i o n The hardware version number . Fixed Baud Rate The baud rate of the console port. Y ou cannot change t his parameter . DRAM Size The size of the DRAM, in megabytes. Flash Size The size of the flash memory , in megabytes. Administrati[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 49 Automatic Network Features Section DHCP Mode The status of the DHCP client on the switch. For info rmation about setting this parameter , refer to “Enabling and Disabling the DHCP Client” on page 35. 2. Press any key to return to the previous menu .[...]

Chapter 3: Basic Switch Parameters 50 Section I: Using the Menus Interf ace Rebooting the Switch This procedure reboots the switch and reloads th e AT-S84 management software from flash memory. You might reboot the de vice if you believe it is experiencing a problem. Rebooting the device does not change any of the device’s parameter settings. Cau[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 51 The System Reboot Menu is sh own in Figure 12. Figure 12. System Rebo ot Menu 3. From the System Reboot menu, type O to select Set Reboot Option . The following prompt is displayed: Select rebo ot option (F/I/N)> 4. Type N to select Normal . This reboot type doe[...]

Chapter 3: Basic Switch Parameters 52 Section I: Using the Menus Interf ace Pinging a Remote System This procedure instructs the switch to ping a node on your network. This procedure is useful in determining whether an active link e xists between the switch and another network device. Not e the following before performing the procedure:  The swi[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 53 3. Type I to select Set Target IP Address . The following prompt is displayed: Enter new targe t IP address> 4. Type the IP address of the node you want the switch to ping and p ress Enter. 5. Type N to select Set Number of Requests . The following prompt is dis[...]

Chapter 3: Basic Switch Parameters 54 Section I: Using the Menus Interf ace Figure 14 shows an example of the result s of a ping. Figure 14. Ping Results 11. To stop the ping, type S to se lect Stop Ping . AT-9000/24 Local Manage ment System Switch Too ls Config uration -> Ping Execut ion Target IP Address: 149.35.8.3 3 Number of Requests: 4 Tim[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 55 Viewing the System Log The system log displays system-level events in the switch, such as logging in to the management software. To view the system log, perf orm the following procedure: 1. From the Main Menu, type T to select Switch T ools . The Switch T ools Conf[...]

Chapter 3: Basic Switch Parameters 56 Section I: Using the Menus Interf ace L Severity level of the event. The severity levels are: (I)nformation - Useful information that you can ignore during normal operation. (W)arning - An issue that may require a manager ’s attentio n. (E)rror - Switch operation is severely impaired. Ty p e The type provides[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 57 Returning the AT-S84 Management Software to the Factory Default Values This procedure returns all AT-S84 mana gement software parameters to their default values and deletes all tagge d and VLANs on the switch. The AT-S84 management software default valu es are list[...]

Chapter 3: Basic Switch Parameters 58 Section I: Using the Menus Interf ace 5. Type R to select Start Reboot Process . The following prompt is displayed: Are you su re you wa nt to reboo t the syste m (Y/N)> 6. Type Y to start the reboot p rocess. The switch returns its o perating parameters to the defau lt values and begins to reload the A T-S8[...]

Section I: Using the Me nus Interface 59 Chapter 4 SNMP This chapter contains the following sections:  “SNMP Overview” on page 60  “Enabling or Disabling the SNMP Agent” on p age 62  “Enabling Authentication T raps” on page 63  “Changing the Default SNMP Community Names” on p age 64  “Working with T rap Receivers”[...]

Chapter 4: SNMP 60 Section I: Using the Menus Interf ace SNMP Overview The Simple Network Management Program (SNMP) is another way for you to manage the switch. This type of ma nagement involves viewing and changing the management infor mati on base (MIB) objects on the device using an SNMP application program . The AT- S84 management software supp[...]

AT-S84 Management Software Use r’s Guide Section I: Using the Menus Interface 61 device. You can enable it again later, or even delete it. When a community string is enabled, then it is available for use. Trap Receivers A trap is a signal sent to one or mo re management workstations by the switch to indicate the occurrence of a particular operati[...]

Chapter 4: SNMP 62 Section I: Using the Menus Interf ace Enabling or Disabling the SNMP Agent To disable or enable the SNMP agent, perform the fo llowing procedure: 1. From the Main Menu, type B t o select Basic Switch Configuration . The Basic Switch Configuration Menu is shown in Figure 4 on page 32. 2. From the Basic Switch Configuration Menu, t[...]

AT-S84 Management Software Use r’s Guide Section I: Using the Menus Interface 63 Enabling Authentication Traps To enable SNMP authentication traps, pe rform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration . The Basic Switch Configuration Menu is sho wn in Figure 4 on page 3 2. 2. From the Basic Switch C[...]

Chapter 4: SNMP 64 Section I: Using the Menus Interf ace Changing the Default SNMP Community Names To change the names of the default SNMP communities, perform the following procedure: 1. From the Main Menu, type B t o select Basic Switch Configuration . The Basic Switch Configuration Menu is shown in Figure 4 on page 32. 2. From the Basic Switch C[...]

AT-S84 Management Software Use r’s Guide Section I: Using the Menus Interface 65 Working with Trap Receivers This section contains procedures fo r working with SNMP trap receivers and includes the following topics:  “Adding a T rap Receiver ,” next  “Enabling or Disabling T rap Receivers” on p age 65  “Modifying a T rap Receive[...]

Chapter 4: SNMP 66 Section I: Using the Menus Interf ace The Basic Switch Configuration Menu is shown in Figure 4 on page 32. 2. From the Basic Switch Configuration menu, type N to select SNMP Configuration . The SNMP Configuration menu is shown in Figure 16 on page 63. 3. Type T to select Enable/Disable SNMP Tra p Receiver . The following prompt i[...]

AT-S84 Management Software Use r’s Guide Section I: Using the Menus Interface 67 Modify SNMP trap rec eivers->Ent er entry nu mber> Note The trap receiver must be one whose status is not “deleted.” 4. Enter the number for the tr ap you want to modify. The following prompt is displayed: Modify trap receiver entry numb er (I/C/B)> The [...]

Chapter 4: SNMP 68 Section I: Using the Menus Interf ace[...]

Section I: Using the Me nus Interface 69 Chapter 5 Port Configuration This chapter contains the procedur es for viewing and adjusting the parameter settings for th e ports on the switch. This chap ter contains the following sections:  “Displaying the Port Parameters” o n page 70  “Enabling or Disabling a Port” on p age 72  “Setti[...]

Chapter 5: Port Confi guration 70 Section I: Using the Menus Interf ace Displaying the Port Parameters To display the parameter settings for the ports on the switch, perform the following procedure: 1. From the Main Menu, type B t o select Basic Switch Configurat ion . The Basic Switch Configuration Menu is shown in Figure 4 on page 32. 2. From the[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 71 The Port Configuration Menu disp lays the following columns of information about the st atus of the first 12 ports on the switch : Port The port number . T runk The trunk group number . This column contains the number of the port trunk if the port is a membe r of a[...]

Chapter 5: Port Confi guration 72 Section I: Using the Menus Interf ace Enabling or Disabling a Port This procedure enables or disab les a port. You may want to disable a port and prevent packets from being forwarded if a problem occurs with the node or cable connected to the port. After the problem has been fixed, you can enable the port to resume[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 73 Setting a Port’s Speed and Duplex Mode To change a port’s speed or du plex mode, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration . The Basic Switch Configuration Menu is shown in Figure 4 on page 32 2. From th[...]

Chapter 5: Port Confi guration 74 Section I: Using the Menus Interf ace with a fixed duplex mode of full-duplex to a switch port, disable Auto-Negotiation on the port and set the port’s speed and duplex mode manually.[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 75 Changing the Flow Control Setting A switch port uses flow control to co ntrol the flow of ingress packets from its end node. Flow control ap plies to ports operating in fu ll-duplex mode. A switch port uses flow control to cont rol the flow of ingress packets f rom[...]

Chapter 5: Port Confi guration 76 Section I: Using the Menus Interf ace Changing the Back Pressure Setting Back pressure performs much the same function as flow control. Both are used by a port to control th e flow of ingress packets. Flow control applies to ports operating in full-d uplex; back pressure applies to ports operating in half-duplex mo[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 77 Displaying Port Statistics To display statistics about a port , perform the following procedure: 1. From the Main Menu, select Statistics . The S tatistics menu is shown in Figure 18. Figure 18. Statistics Menu The statistics fo r port 1 are displayed in a t able t[...]

Chapter 5: Port Confi guration 78 Section I: Using the Menus Interf ace Good Broadcast Number of valid broadcast packets receive d on the port. Good Multicast Number of valid multica st packet s received on the port. CRC/Align Errors Number of p ackets with a cyclic redundancy check (CRC) error but with the proper length (64-1518 bytes) received on[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 79 The following prompt is displayed: Select port numb er> b. Type the number of the port whose statistics you want to view. 3. Type N for Next or P for Previous to move between ports. 4. To view the statistics for a particula r port since the switch was last reset[...]

Chapter 5: Port Confi guration 80 Section I: Using the Menus Interf ace[...]

Section I: Using the Me nus Interface 81 Chapter 6 Port T runking This chapter provides information and p r ocedures for creating a port trunk and contains the following sections:  “Port T runking Overview” on page 82  “LACP T runks” on page 84  “Setting Up a Port T runk” on page 88  “Setting Up an LACP T runk” on page 9[...]

Chapter 6: Port Trun king 82 Section I: Using the Menus Interf ace Port Trunking Overview Port trunking is an economical way for yo u to increase the bandwidth between two Ethernet switches. A port trunk is 2 to 8 ports that have been grouped together to function a s one logical path. A port trunk increases the bandwidth between switches and is use[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 83 compatible. Also note that a static tr unk does not provide for redundancy or link backup. If a port in a static trunk loses its link, the trunk’s total bandwid th is diminished. Though the traffic carried by the lost link is shifted to one of the remaining ports[...]

Chapter 6: Port Trun king 84 Section I: Using the Menus Interf ace LACP Trunks An LACP (Link Aggregation Control Protocol) trunk is another type of port trunk. It performs the same function as a static tru nk. It increases the bandwidth between two network de vices by distributing the traffic load over multiple physical links. The advantage of an L[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 85 When a trunk is created, its default st atus is Disabled. This means that the trunk does not pass netwo rk traffic or send/receive LACP data units (LACPDU) until the trunk status is changed accordin gly. When a trunk is set to Active stat us, the trunk ports are al[...]

Chapter 6: Port Trun king 86 Section I: Using the Menus Interf ace Two conditions must be met in order for a po rt that is a member of an aggregate trunk to function in the stand by mode. First, the number of ports in the trunk must exceed the highe st allowed number of active ports and, second, the port must be receiving LACPDU pa ckets from the o[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 87 device can support in a trunk. If the nu mber is less than eight, the maximum number for the A T-9000/24 Gigabit Ethernet switch, you should probably assign a higher syste m LACP priority to the other vendor ’s switch. If it is more than eight, assign the higher [...]

Chapter 6: Port Trun king 88 Section I: Using the Menus Interf ace Setting Up a Port Trunk This section contains the following procedures for working with port trunks:  “Creating a Port T runk,” next  “Modifying a Port T runk” on page 90  “Enabling or Disabling a Port T runk” on p age 91 Creating a Port Trunk This procedure exp[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 89 The T runk Configuration Menu is shown in Figure 22. Figure 22. Trunk Configuration Me nu 3. To add a trunk member, type A to select Add T runk Member . The following prompt is displayed: Enter trunk group nu mber> 4. Select a trunk group number from 1 to 4 and [...]

Chapter 6: Port Trun king 90 Section I: Using the Menus Interf ace 8. Type M to select Manual Trunk for a basic trunk without LACP handling. The A and P options apply to LACP trunks. See “Setting Up an LACP T runk” on page 92 for more information. The trunk is now operational on the switch. 9. Configure the port trunk on the other switch and co[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 91 Y ou can specify the ports individually , separated by commas (for example, 1,2,5), as a range of port s separated by a hyphen (for example, 2-4), or both (for example, 1,3, 6-8). 6. Modify the port trunk on the ot her switch a nd reconnect the cables. Enabling or [...]

Chapter 6: Port Trun king 92 Section I: Using the Menus Interf ace Setting Up an LACP Trunk This section contains the following proced ures to work with LACP trunks:  “Creating an LACP T runk,” next  “Configuring the LACP Port Priority” on page 93  “V erifying the LACP Group Settings” on p age 94  “Disabling an LACP T runk[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 93 Configuring the LACP Port Priority The switch uses the port priority to determine which ports are to be active and which are to be in standby mode in situa tions where the number of ports in the aggregate trun k exceeds the highest allowed number of active ports. T[...]

Chapter 6: Port Trun king 94 Section I: Using the Menus Interf ace Enter port no> 5. Type the number of the port whose priority you want to set. The following prompt is displayed: Enter port prio rity> 6. Enter a number for the priority o f the port. The range is 1 to 255, and the default is 1. Verifying the LACP Group Settings To view the LA[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 95 The LACP Group S tatu s Menu is displayed, as shown in Figure 24. Figure 24. LACP Group Status Menu The LACP Group S tatus Men u displays the following information about the LACP group: System Priority The system priority as defined by IEE 802.3ad. Y ou cannot chan[...]

Chapter 6: Port Trun king 96 Section I: Using the Menus Interf ace 2. From the Advanced Switch Configu ration Menu, type T to select Trunk Configuration . The T runk Configuration Menu is shown in Figure 22 on p age 89. 3. From the Trunk Configuration Menu, type S to select Set Trunk Status . The following prompt is displayed: Enter trunk group num[...]

Section I: Using the Me nus Interface 97 Chapter 7 Port Mirr oring This chapter contains the procedure for setting up port mirroring. Port mirroring allows you to unobtrusively monitor the ingress and egress tra ffic on a port by having th e traffic copied to a nother port. This chapter contain s the following sections:  “Port Mirroring Overvi[...]

Chapter 7: Po rt Mirroring 98 Section I: Using the Menus Interf ace Port Mirroring Overview The port mirroring feature allows you to unobtru sively monitor the ingress and egress traffic on a port on the swit ch by having the traffic copied to another switch port. By connecting a netwo rk analyzer to the port where the traffic is being copied to , [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 99 Configuring Port Mirroring To set up port mirroring, perform the following procedure : 1. From the Main Menu, type A to select Advan ced Switch Configuration . The Advanced Switch Configura tion Menu is shown in Figure 21 on page 88. 2. From the Advanced Switch Con[...]

Chapter 7: Po rt Mirroring 100 Section I: Using the Men us Interface 7. Type E to select Enable/Disable Port Mirroring . The following prompt is displayed: Enable or Disable monitoring (E/D)> 8. Type E to enable port mirroring. Y ou can now connect your data analyzer to the mirroring port.[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 101 Enabling or Disabling Port Mirroring To enable or disable port mirroring, perform the following procedure: 1. From the Main Menu, type A to select Advan ced Switch Configuration . The Advanced Switch Configura tion Menu is shown in Figure 21 on page 88. 2. From th[...]

Chapter 7: Po rt Mirroring 102 Section I: Using the Men us Interface[...]

Section I: Using the Me nus Interface 103 Chapter 8 V irtual LANs and GVRP This chapter contains the procedures for creating, modifying, and deleting and tagged Virtual Local Are a Networks (VLANs). This chapter contain s the following sections:  “VLAN Features” on p age 104  “VLAN Overview” on page 106  “Working with VLANS” on[...]

Chapter 8: Virtual LANs and GVRP 104 Section I: Using the Men us Interface VLAN Features A Virtual Local Area Network (VLAN) is a logical grouping of devices on different physical LAN segments tha t allows users to communicate as if they were physically connected to a single LAN, in dependent of the physical configuration of the network. With VLANs[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 105 VLANs can be used to control the flow of data in your network, since the traffic generated by an end-node in a VLAN is restricted to the other en d- nodes in the same VLAN. In addition, VLANs can preven t data from flowing to unauthorized end-nodes[...]

Chapter 8: Virtual LANs and GVRP 106 Section I: Using the Men us Interface VLAN Overview This VLAN overview contains the following sections:  “VLAN Name,” next  “VLAN Identifier” on p age 106  “VLAN Port Members” on page 106  “Port VLAN Identifier” on page 1 06  “Incoming and Outgoing T agged and Unt agged Frames”[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 107 Note The switch is preconfigu red with the Default_VLAN only. All ports on the switch are initially members o f the Default_VLAN. If a port is assigned to be a new member of a VLAN, its me mbership can be defined as either tagged or u ntagged. Tagged Port Members [...]

Chapter 8: Virtual LANs and GVRP 108 Section I: Using the Men us Interface Outgoing Frames Frames being transmitted from the switch retain their VLAN tag information in the frame header if the frame’s tag does not match the PVID of the port (a tagged member of that VLAN). The se frames are tagged after transmission from the switch. The VLAN tag i[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 109 Untagged VLAN Figure 26 illustrates how VLANs with untagged port members can be interconnected. In this example, the Sales VLAN spans two AT-9000/24 Gigabit Ethernet switches, while the Production and Engineering VLANs are limited to just one swit ch. Figure 26. U[...]

Chapter 8: Virtual LANs and GVRP 110 Section I: Using the Men us Interface The table below lists the port numbers for the Sales, Engineering, and Production VLANs on the switches. In this example, all ports are untagged members of their respective VLANS. Note the following concerning the example:  Sales VLAN - This VLAN sp ans both switches. It [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 111 Tagged VLAN Example Figure 27 illustrates how tagged and untagged ports can be used to interconnect IEEE 802.1Q-based products. Figure 27. Tagged VL AN 793 AT -9000/24 24 Port Gigabit Ethernet Switch 1 3 57 91 1 1 31 5 17 19 21R 23R 2 4 6 8 10 12 14 16 18 20 22R 2[...]

Chapter 8: Virtual LANs and GVRP 112 Section I: Using the Men us Interface The port assignments for the VLANs ar e as follows: Ports 1, 2, 5, and 7 on the top switch and ports 2, 4, an d 13 on the bottom switch are assigned a PVID of 2 and are untagg ed members of VLAN 2. These ports are connected to workstations from Sales. Ports 9, 11, 13, 21, an[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 113 Working with VLANS This section contains t he following procedures:  “Creating a VLAN,” next  “Configuring the Port PVID” on p age 1 16  “Displaying the VLANs” on p age 1 17  “Modifying a VLAN” on page 1 19  “Deleting a VLAN” on [...]

Chapter 8: Virtual LANs and GVRP 114 Section I: Using the Men us Interface The VLAN Management Menu, which displays a ny existing VLANs, is shown in Figure 28. Figure 28. VLAN Management Men u 3. From the VLAN Management Menu, type C to select Cr eate VLAN . AT-9000/24 Lo cal Managem ent System Advanced Sw itch Con figuration - > VLAN Mana gemen[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 115 The VLAN Creation Menu is shown in Figure 29. Figure 29. VLAN Creation Menu 4. To specify the VLAN ID, do the following: a. Type I to select Set VLAN ID/Index . The following prompt is displayed: Set VLAN ID->Ent er VLAN ID> Note A VLAN must have a VID. b. E[...]

Chapter 8: Virtual LANs and GVRP 116 Section I: Using the Men us Interface a. Type S to select Select Port Numb er . The following prompt is displayed: Enter port numb er > b. Enter the ports of the VL AN. You can specify the ports indivi dually separated by commas, for example, 2,7,15, as a range of ports separat ed by a hyphen, for example, 2-[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 117 The VLAN Port Configuratio n Menu is shown in Figure 28 on p age 1 14 4. Type V to select Set Port VID . The following prompt is displayed: Set PVID->E nter port number 5. Type the number of the port whose PVID value you want to configure and press Enter. You c[...]

Chapter 8: Virtual LANs and GVRP 118 Section I: Using the Men us Interface 3. To view the ports of a VLAN, type O to select Config VLAN Me mber . The following prompt is displayed: Enter VLAN ID > 4. Enter the VID of the VLAN you want to view and p ress Enter. The Config VLAN Member Menu is shown in Figure 30 . Figure 30. Config VLAN Member Menu[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 119 Modifying a VLAN The topics in this section include: Before performing this procedure, note the followin g:  Y ou cannot change the VID of a VLAN.  Y ou cannot add an untagged port to a VLAN with t his procedure. That function requires changing a port’s VI[...]

Chapter 8: Virtual LANs and GVRP 120 Section I: Using the Men us Interface Configuration . The Advanced Switch Configuration Menu is shown in F igure 21 on page 88. 2. From the Advanced Switch Configu ration Menu, type V to select VLAN Management . The VLAN Management Menu is shown in Figure 28 on p age 1 14. 3. To add a tagged port, type A for Add[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 121 Note The VLAN is immediately deleted with no confir mation prompt. Note You cannot delete the Default VLAN which has a VID of 1. The VLAN Management Menu is upd ated to show that the VLAN is deleted. The untag ged port members of a deleted VLAN are automatically r[...]

Chapter 8: Virtual LANs and GVRP 122 Section I: Using the Men us Interface GVRP This section describes GVRP and contains the following topics:  “GVRP Overview ,” next  “Enabling or Disabling GVRP” on p age 123 GVRP Overview The GARP VLAN Registration Protocol (GVRP) allows netwo rk devices to share VLAN information. The main purpose o[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 123  GVRP is only aware of those VLANs that have active nodes, or where at least one end node of a VLAN has e stablished a valid link with a switch. GVRP is not aware of a VLAN if there are no active end nodes or if no end nodes have est ablished a link with the sw[...]

Chapter 8: Virtual LANs and GVRP 124 Section I: Using the Men us Interface[...]

Section I: Using the Me nus Interface 125 Chapter 9 Quality of Service (QoS) This chapter contains the procedures for configuring th e Quality of Service (QoS) parameters of the switch. This chap ter contains the following sections:  “QoS Overview” on page 126  “Mapping CoS Priorities to Egress Queues” on p age 129  “Configuring [...]

Chapter 9: Quality of Service (QoS) 126 Section I: Using the Men us Interface QoS Overview When a port on an Ethernet switch beco mes oversubscribed—its egress queues contain more packets than the po rt can handle in a timely manner—the port may be force d to delay the transmission of some packets, resulting in the d elay of pack ets from reach[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 127 For example, a tagged packe t with a priority tag of 6 is placed in the egress port’s highest priority queue of 3, while a packet with a priority tag of 1 is placed in the lowest priority queue. Note QoS is disabled by default on the switch. You can customize th[...]

Chapter 9: Quality of Service (QoS) 128 Section I: Using the Men us Interface The default setting for Quality of Service is disable d. When the feature is disabled, all tagged packets are store d in the lowest priority queue of a port.[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 129 Mapping CoS Priorities to Egress Queues This procedure explains how to change the de fault mappings of CoS priorities to egress priority queues, sho wn in Table 2 on page 127. This is set at the switch level and applies to all ports. Th is procedure also enables a[...]

Chapter 9: Quality of Service (QoS) 130 Section I: Using the Men us Interface The T raffic Class Configurati on Menu is shown in Figure 33. Figure 33. Traffic Class Configuration Me nu 4. To enable or disable QoS, do the following: a. Type S to select Set Status . The following prompt is displayed: Enable or Dis able QoS (E/D ) > b. Type E to en[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 131 The following prompt is displayed: Enter queue for traf fic class n > c. Enter the new egress queue number for the t raffic class. The range is 0 to 3. 0 is the lowest priority queue and 3 is the highest. You can specify only one egress queue.[...]

Chapter 9: Quality of Service (QoS) 132 Section I: Using the Men us Interface Configuring CoS As explained in “QoS Overview” on page 126, a packet received on a port is placed it into one of four priority queues on the egress por t according to the switch’s mapping of 802.1p priority levels to egress priority queues. The default mappings are [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 133 The Port Priority Configuration Menu is shown in Figure 34. Figure 34. Port Priority Configuration Menu The columns in the menu disp lay the following information: Port Displays the port number . T runk Displays the trunk number if the port is a member of a trunk.[...]

Chapter 9: Quality of Service (QoS) 134 Section I: Using the Men us Interface 4. To change the egress priority queue a ssignment of an 802.1p traffic class, do the following: a. Type R to select Set Priority Queue . The following prompt is displayed: Enter traffic class> b. Enter the traffic class whose egr ess priority queue you want to change.[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 135 b. Enter the trunk number that you want t o configure. You can configure only one trunk at a time. A prompt similar to the following is displayed: Enter queue fo r trunk group n >> c. Enter the queue number for the trunk.[...]

Chapter 9: Quality of Service (QoS) 136 Section I: Using the Men us Interface[...]

Section II: Menus In terface 137 Chapter 10 IGMP Snooping This chapter describes how to co nfigure the OGMP snooping feature on the switch and includes the following sections:  “IGMP Snooping Overview” on p age 138  “Configuring IGMP” on pag e 140  “Viewing t he Multicast Groups” on p age 142[...]

Chapter 10: IGMP Snoopin g 138 Section II: Menus Inte rface IGMP Snooping Overview The Internet Group Management Protocol ( IGMP) enables routers to create lists of nodes that are member s of mu lticast groups. (A multicast group is a group of e nd nodes that want to receive multicast packets from a multicast application.) The router creates a mult[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 139 restricting the flow of multicast packets only to those switch por ts connected to host nodes. Without IGMP snooping a switch would have to flood multicast packets out all of its ports, except the port on which it re ceived the packet. Such flooding of packets can negativ el[...]

Chapter 10: IGMP Snoopin g 140 Section II: Menus Inte rface Configuring IGMP To configure IGMP, perform the following procedure: 1. From the Main Menu, type A t o select Advanced Switch Configuration . The Advanced Switch Configuration Menu is shown in F igure 4 on page 32. 2. From the Advanced Switch Configuration Menu, type I to select IGMP Snoop[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 141 Enter age o ut time> 6. Specify the age-out time in seconds. The range is 280 to 420 secon ds and the default is 280 seconds.[...]

Chapter 10: IGMP Snoopin g 142 Section II: Menus Inte rface Viewing the Multicast Groups To view the IGMP snooping multica st groups, perform the following procedure: 1. From the Main Menu, type A t o select Advanced Switch Configuration . The Advanced Switch Configuration Menu is shown in F igure 4 on page 32. 2. From the Advanced Switch Configura[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 143 Figure 36. MAC Address DIsplayed on IGMP Configuration Me nu The following prompt is displayed: Enter MAC A ddress (x x.xx.xx.xx. xx.xx)> 6. Enter the MAC address as shown on the men u. The View Group Members Menu is shown in Figure 37. Figure 37. View Group Members Menu [...]

Chapter 10: IGMP Snoopin g 144 Section II: Menus Inte rface[...]

Section II: Menus In terface 145 Chapter 11 Rapid Spanning T r ee Pr otocol (RSTP) This chapter describes how to configure the Ra pid Spanning Tree Protocol (RSTP) on the switch and includes t he following sections:  “RSTP Overview” on page 146  “Enabling or Disabling RSTP” on p age 153  “Configuring the RSTP Bridge Settings” o[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 146 Section II: Menus Inte rface RSTP Overview The performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topology. A da ta loop exists when two or more nodes on a network can tran smit data to each other over more than one data path. The pro blem t[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 147 You can designate which switch on your network you want as the root bridge by giving it the lowest bridge p riority number. You might also consider which bridge should function as the backup root bridge in the event you need to take the primary root bridge offline, and assig[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 148 Section II: Menus Inte rface Table 3 lists the RSTP port costs with Auto-Detect. Table 4 lists the RSTP port costs with Auto-Detect when the port is part of a port trunk. You can override Auto-Detect and set th e port cost manually. However, you must assign the same port cost to all ports that are[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 149 Table 5 lists the values. The d efault value is 0. If two paths have the same port cost and the same pr iority, then the ports with the lowest port MAC addresses beco me the root ports of their respective bridges. Hello Time and Bridge Protocol Data Units (BPDUs) The bridges[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 150 Section II: Menus Inte rface There are two possible selections:  Point-to-point port  Edge port The default setting for the RSTP port point -to-point status is automatic. With the automatic setting, the point-to-point status is True of the port is operating in full-duplex mode. If the port i[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 151 Figure 39. Edge Port A port can be both a point-to-point and an edge port at the same t ime. Figure 40 illustrates a port functioni ng as both a point-to-point and edge port. You must manually configur e the edge port status. Figure 40. Point-to-Point and Edge Port Determini[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 152 Section II: Menus Inte rface packets. Rapid Spanning Tree and VLANs The spanning tree implementation in the AT-S84 management software is a single-instance spanning tree. The switch supports just one spanning tree. You cannot define multiple span ning trees. The single spanning tree encompasses al[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 153 Enabling or Disabling RSTP To enable or disable RSTP, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration . The Basic Switch Configuration Menu is sho wn in Figure 4 on page 3 2. 2. From the Basic Switch Configuratio n Menu, ty[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 154 Section II: Menus Inte rface switch’s roo t port and the root bridge including the switch’ s root port cost. Time Since T opology Change The time in seconds since the last topology chan ge took place. When RSTP detects a ch ange to the LAN’ s topology or when the switch is rebooted, this par[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 155 3. Type E to select Enable/Disable Global RSTP . The following prompt is displayed: Enable or D isable Gl obal RSTP ( E/D)> 4. Type E to enable RSTP or D to disable RSTP.[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 156 Section II: Menus Inte rface Configuring the RSTP Bridge Settings To configure the RSTP bridge settings , perform the following procedure: 1. From the Main Menu, type B t o select Basic Switch Configurat ion . The Basic Switch Configuration Menu is shown in Figure 4 on page 32. 2. From the Basic S[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 157 Enter bridge ma ximum age> The bridge maximum age is the length of time aft e r which stored bridge protocol dat a units (BPDUs) are deleted by the bridge. All bridges in a bridged LAN use this aging time to test the a ge of stored configuration messages called bridge p r[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 158 Section II: Menus Inte rface Configuring STP Compatibility Choosing an RSTP protocol version allows you to determine if the switch ports will operate in RSTP-only mode or are STP-compatible. This setting applies to all of the ports; you cannot set this on a per-port ba sis. To configure the STP co[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 159 Configuring RSTP Port Settings This section contains the following topics:  “Configuring the Basic RSTP Port Settings,” next  “Configuring the Advanced RSTP Port Settings” on p age 161 Configuring the Basic RSTP Port Settings To configure the basic RSTP port se[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 160 Section II: Menus Inte rface 4. Type I to select Set Port Priority . The following prompt is displayed: Select port nu mber to be chang ed> Port numbe r is in r ange from 1 to 9, 0 to set all po rts 5. Enter the number of the port you want to change, or type 0 (zero) to apply the settings to al[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 161 Select port number t o be change d> Port number is in range from 1 to 9, 0 to se t all ports This parameter enables o r disables RSTP on a specified port or a group of ports in a trunk. 11. Enter the number of the port you want to change, or type 0 (zero) to apply the set[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 162 Section II: Menus Inte rface The RSTP Advanced Port Configur ation menu is shown in Figu re 43. Figure 44. RSTP Advanced Port Configuration Menu 4. Type E to select Edge Status . The following prompt is displayed: The following prompt is displayed: Select port nu mber to be chang ed> Port numbe[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 163 The following prompt is displayed: Select port number t o be change d> Port number is in range from 1 to 9, 0 to se t all ports 8. Enter the number of the port yo u want to change, or type 0 (zer o) to apply the settings to all ports on the switch. The following prompt is[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 164 Section II: Menus Inte rface Displaying the RSTP Topology To display the RSTP topology, perform the follo wing procedure: 1. From the Main Menu, type B t o select Basic Switch Configurat ion . The Basic Switch Configuration Menu is shown in Figure 4 on page 32. 2. From the Basic Switch Configurati[...]

AT-S84 Management Software Use r’s Guide Section II: Menus Interface 165 Link Whether the link on the po rt is up or down. Desig. Root The designated root bridge is the switch that is directly connected to the local switch. The MAC address of the desig nated root bridge is displayed. In the network topology , the designated bridge is located betw[...]

Chapter 11: Rapid Spanning Tree Protocol (RSTP) 166 Section II: Menus Inte rface[...]

Section I: Using the Me nus Interface 167 Chapter 12 802.1x Network Access Contr ol This chapter contains information about an d the procedure for conf iguring 802.1x Network Access Contro l. It includes the following sections:  “802.1x Network Access Contro l Overview” on page 168  “Configuring 802.1x Network Access Control” on p age[...]

Chapter 12: 802.1x Network Access Control 168 Section I: Using the Men us Interface 802.1x Network Access Control Overview 802.1x Network Access Control (IEEE 80 2.1x) is used to control who can send traffic through and receive traffic from a switch port. With this feature, the switch will not allow an end node to send or receive traffic through a [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 169 Authentication Process Below is a brief overvie w of the authentication p rocess that occurs between a supplicant, authenticator, and authentication server. For furth er details, refer to the IEEE 802.1x sta ndard.  Either the authenticator (that is, a switch p[...]

Chapter 12: 802.1x Network Access Control 170 Section I: Using the Men us Interface server . Each client that attempt s to access the network is uniquely identified by the switch using the client's MAC add ress.  Force-unauthorized - Places the port in the unauthorized st ate, ignoring all attempt s by the client to authenticate. This port [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 171 As mentioned earlier, the switch itself does not a uthenticate the user names and passwords from the clients. Tha t is the responsibility of the authentication server, which con tains the RADIUS server software. Instead, a switch acts as an intermediary for the au[...]

Chapter 12: 802.1x Network Access Control 172 Section I: Using the Men us Interface Note Connecting multiple supplicants to a switch port set to the Auto setting does not conform to the IEEE 8 02.1x standard. This can introduce security risks and can result in undesirable switch behavior. To avoid this, Allied Telesis recommend s use the Force- aut[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 173  Ports used t o interconnect switches shou ld be set to the port control setting of Force-authorized. This is illu strated in Figure 47. Figure 47. Authentication Across Multiple Switches Switch A Switch B Port 4: 802.1x Port Control Setting: Force-auth orized [...]

Chapter 12: 802.1x Network Access Control 174 Section I: Using the Men us Interface Configuring 802.1x Network Access Control To configure 802.1x n etwork access control, perform the following procedure: 1. From the Main Menu, type A t o select Advanced Switch Configuration . The Advanced Switch Configuration Menu is shown in F igure 21 on page 88.[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 175 3. Type P to select Port No . The following prompt is displayed: Enter port numb er> 4. Enter the number of the port on t he switch you want to configure. You can configure only one port at a time. The Port Based Access Control Configuration Me nu is updated wi[...]

Chapter 12: 802.1x Network Access Control 176 Section I: Using the Men us Interface F (Force-authorized) - Disables IEEE 802.1x authentication and causes the port to transition to the au thorized state without any authentication exchange require d. The port transmits and receives normal traf fic without 802.1x-based authentica tion of the client. T[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 177 The following prompt is displayed: Enter maximum request count > This parameter set s the maximum number of times that the switch retransmits an EAP Request packet to the client before it times out the authentication session. The default value for this p aramet[...]

Chapter 12: 802.1x Network Access Control 178 Section I: Using the Men us Interface 15. If the port control setting is Auto and you want to return the EAPOL machine state on the port to the initialized state, do the following: a. Type I to select Initialize . The following prompt is displayed: Would you i nitialize authentica tor? (Y/N)> b. Typi[...]

Section I: Using the Me nus Interface 179 Chapter 13 RADIUS Authentication Pr otocol This chapter describes how to configur e the RADI US client software on the switch. You can use the RADI US client with 802.1x network access control to control who can forward packets through the switch. Sections in the chapter include:  “RADIUS Overview” o[...]

Chapter 13: RADIUS Authent ication Protocol 180 Section I: Using the Men us Interface RADIUS Overview RADIUS (Remote Authentication Dial In User Services) is a n authentication protocol for enhancing the security of your network. The protocol transfers the task of authent icating network access from a network device to an authentication p rotocol s[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 181 Configuring the RADIUS Server To configure the RADIUS client, pe rform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration . The Basic Switch Configuration Menu is sho wn in Figure 4 on page 3 2. 2. From the Basic Switch Con[...]

Chapter 13: RADIUS Authent ication Protocol 182 Section I: Using the Men us Interface a. Type C to select Shared Secret . The following prompt is displayed: Enter secret st ring for server > b. Enter the encryption key of the RADIUS server. 6. To set the response time, do the following: a. Type R to select Set Response Time . The following promp[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 183 Displaying the RADIUS Server Settings To display the RADIUS client status and settings, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration . The Basic Switch Configuration Menu is sho wn in Figure 4 on page 3 2. 2. [...]

Chapter 13: RADIUS Authent ication Protocol 184 Section I: Using the Men us Interface[...]

Section I: Using the Me nus Interface 185 Chapter 14 Br oadcast S torm Contr ol This chapter describes how to co nfigure the broadcast storm control feature on the switch and includes the following sections:  “Broadcast S torm Control Overview” on p age 186  “Configuring Broadcast S torm Control” on p age 187[...]

Chapter 14: Broadcas t Storm Control 186 Section I: Using the Men us Interface Broadcast Storm Control Overview The broadcast storm control feature limits the n umber of broadcast frames forwarded by the switch. The f eat ure can help improve network performance in situations where broadcast frames are consuming a significant portion of networ k ba[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 187 Configuring Broadcast Storm Control To configure the broadcast storm control feat ure, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration . The Basic Switch Configuration Menu is sho wn in Figure 4 on page 3 2. 2. F[...]

Chapter 14: Broadcas t Storm Control 188 Section I: Using the Men us Interface  L for Low (100 broadca st packet s per second)[...]

Section I: Using the Me nus Interface 189 Chapter 15 W orking W ith System Files The procedures in this chapter explai n how to downlo ad a new version of the AT-S84 management software onto the swit ch, and how to download or upload the configuration file. The sectio ns are:  “Downloading a New Management Sof tware Image Using TFTP” on page[...]

Chapter 15: Working Wi th System Files 190 Section I: Using the Men us Interface Downloading a New Management Software Image Using TFTP Before downloading a new version of the AT-S84 manage ment software onto the switch, note the following:  The current configuration of a swit ch is ret ained when a new A T-S84 software image is inst alled. T o [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 191 The Softwar e Upgrade Menu is shown in Figure 5 1. Figure 51. Software Upgrade Menu (1 of 2) 3. Type T to select TFTP Upgrade . The Softwar e Upgrade Menu (2 of 2) is shown in Figure 5 2. Figure 52. Software Upgrade Menu (2 of 2) AT-9000/24 Local Managem ent Syste[...]

Chapter 15: Working Wi th System Files 192 Section I: Using the Men us Interface 4. Type S to select Set TFTP Server IP Addres s . The following prompt is displayed: Enter IP addr ess of TFTP ser ver: 5. Type the IP address of the TFTP server and p ress Enter. 6. Type F to select Set Image File Na me . The following prompt is displayed: Enter file [...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 193 Uploading or Downloading a Configuration File The procedure in this section al lows you to download a differ ent configuration file onto the switch from a T FTP server, or upload the file to a TFTP server. T o return a switch to its default configuration values, r[...]

Chapter 15: Working Wi th System Files 194 Section I: Using the Men us Interface The Configuration File Upload/Down load menu is shown in Figure 53. Figure 53. Configuration File Upload/Download Menu 3. From the Configuration Fi le Upload/Download menu, type T to select TFTP Configuration File Upload/Download . The TFTP Configur ation File Upload/D[...]

AT-S84 Management Software Use r’s Guide Section I: Using the M enus Inte rface 195 5. Type the IP address of the TFTP server an d press Enter. 6. Type F to select Set Configuration F ile Name . The following prompt is displayed: Enter file name > 7. Enter the file name of the switch con figuration file on the TFTP server and press Enter. Note[...]

Chapter 15: Working Wi th System Files 196 Section I: Using the Men us Interface The TFTP Configur ation File Upload/Download men u is shown in Figure 54 on pa ge 194. 4. Type S to select Set TFTP Server IP Addres s . The following prompt is displayed: Enter IP addr ess of TFTP ser ver: 5. Type the IP address of the TFTP server and p ress Enter. 6.[...]

Section II: Using t he Web Browser Interf ace 197 Section II Using the W eb Br owser Interface The chapters in this section p rovide information and pro cedures for using the web browser interface in th e AT-S84 management softwa re. The chapters include:  Chapter 16, “S tartin g a Web Browse r Management Session” on p age 199  Chapter 17[...]

198 Section II: Using the We b Browser Interface[...]

Section II: Using t he Web Browser Interf ace 199 Chapter 16 S tarting a W eb Br owser Management Session This chapter contains the procedures for starting, using, and quitting a web browser management session on an AT-9000/24 Gigab it Ethenet switch. Sections in the chapter include:  “Establishing a Remote Con nection to Use the W eb Browser [...]

Chapter 16: Starting a Web Browser Management Ses sion 200 Section II: Using the We b Browser Interface Establishing a Remote Connection to Use the Web Browser In terface In order for you to manage a switch using the we b browser interface, the switch must have an IP address and su bnet mask. To manually assign an IP address, refer to “Configurin[...]

AT-S84 Management Software Use r’s Guide Section II: Using the Web Browser Interface 201 The A T-S84 management sof tware displays the login dialog box, shown in Figure 56. Figure 56. AT-S84 Login Dialog Box 3. Enter the A T-S84 management login user name and password. The default user name is “mana ger” and the default password is “friend.[...]

Chapter 16: Starting a Web Browser Management Ses sion 202 Section II: Using the We b Browser Interface The main menu is on the top of the home page. It consists of the following selections:  General Info.  Basic Config.  Advanced Config.  T ools  St a t i s t i c s A web browser management session remains active even if you link to [...]

AT-S84 Management Software Use r’s Guide Section II: Using the Web Browser Interface 203 Web Browser Tools You can use the web browser tools to move aro und the management pages. Selecting Back on your browser’s toolbar returns you to the previous display. You ca n also use the browser’s bookmark feature to save the link to the switch.[...]

Chapter 16: Starting a Web Browser Management Ses sion 204 Section II: Using the We b Browser Interface Quitting a Web Browser Management Session To exit a web browser management session, clo se the web browser.[...]

Section II: Web Browser Interface 205 Chapter 17 Basic Switch Parameters This chapter contains the following sections:  “Configuring an IP Address, Subnet Mask and Gateway Address” on page 206  “Enabling and Disabling the DHCP Client” on p age 208  “Configuring System Administ ration Information” on p age 209  “Setting the[...]

Chapter 17: Basic Switc h Parameters 206 Section II: Web Browser Interf ace Configuring an IP Address, S ubnet Mask and Gateway Address This procedure explains how to c hange the IP add ress, subnet mask, and gateway address of the switch. Before performing the procedure, note the following:  An IP address and subnet mask are not required for no[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 207 System Subnet Mask Enter the subnet mask for the switch. System Default Gateway Enter the default gateway’ s IP address. DHCP Mode For information about setting this parameter , refer to “Enabling and Disabling the DHCP Client” on pa ge 208. 3. Click Apply . Note[...]

Chapter 17: Basic Switc h Parameters 208 Section II: Web Browser Interf ace Enabling and Disabling the DHCP Client This procedure explains how to activate and deactivate the DHCP client on the switch. When the client is activated, the switch o btains its IP configuration, such as its IP address and subnet mask, from a DHCP server on your network. B[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 209 Configuring System Administration Information This section explains how to assign a name to the switch, as well as the location of the switch and th e name of the switch’s admin istrator. Entering this information is optional. To set a switch’s administration in fo[...]

Chapter 17: Basic Switc h Parameters 210 Section II: Web Browser Interf ace managing the switch. This cont act name is optional and may cont ain up to 50 characters. 3. Click Apply .[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 211 Setting the User Interface Configuration This procedure explains how to adjus t the user interface and security features on the switch. With this procedure yo u can:  Change the console timer , used to automatically end inactive local management sessions.  Change[...]

Chapter 17: Basic Switc h Parameters 212 Section II: Web Browser Interf ace  Server and SNMP settings  User name and password settings Note For information about the SNMP Agent selection, refer to “Enabling or Disabling the SNMP Agent” on page 236. 2. To configure the console UI time out parameters, do the following: a. In the Console UI [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 213 b. Click the New User Name field and enter a new user name or, if you do not want to change the login name, enter the current name. Leaving this field empty deletes the current login name withou t assigning a new one. The name ca n be from 0 to 12 characters. Spaces ar[...]

Chapter 17: Basic Switc h Parameters 214 Section II: Web Browser Interf ace Enabling or Disabling the Web Server To enable or disable the web server, perf orm the following procedure: 1. From the Basic Config menu, select User I nterface > User Interface . The User Interface p age is shown in Figure 60 on p age 21 1. 2. For the Web Server parame[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 215 Enabling or Disabling the Telnet Server To enable or disable the Telnet se rver , perform the following procedu re: 1. From the Basic Config menu, select User Interfac e > User Interface . The User Interface p age is shown in Figure 60 on p age 21 1. 2. For the Teln[...]

Chapter 17: Basic Switc h Parameters 216 Section II: Web Browser Interf ace Configuring SNTP To configure SNTP, perform the following p rocedure: 1. From the Basic Configuration menu , select SNTP Configuration . The SNTP Configuration page opens, as shown in Figure 61 . Figure 61. SNTP Configuration Page 2. In the SNTP Server IP field, type the IP[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 217 Viewing System Information To view general information about the switch, perform the following procedure: 1. From General Info. menu, select Switch Info. The Switch Information p age opens, as shown in Figu re 62. Figure 62. Switch Information Pa ge The Switch Informat[...]

Chapter 17: Basic Switc h Parameters 218 Section II: Web Browser Interf ace DRAM Size The size of the DRAM, in megabytes. Flash Size The size of the flash memory , in megabytes. Console Baud Rate The baud rate of the console port. Y ou cannot change this setting. Administration Informatio n Section: System Name The name assigned to the switch. T o [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 219 Rebooting a Switch This procedure reboots the switch and reloads the AT-S84 management software from flash memory. You might reboot the device if you believe it is experiencing a problem. Rebooting the de vice does not change any of the device’s parameter setting s. [...]

Chapter 17: Basic Switc h Parameters 220 Section II: Web Browser Interf ace Pinging a Remote System This procedure instructs the switch to ping a node on your network. This procedure is useful in determining whether an active link e xists between the switch and another network device. Not e the following before performing the procedure:  The swi[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 221 A sample Ping T est Results page is shown in Fig ure 65. Figure 65. Ping Test Results Page 5. Click Back to Ping Test to return to the Ping Test Configuration page.[...]

Chapter 17: Basic Switc h Parameters 222 Section II: Web Browser Interf ace Viewing the System Log The system log displays system-level events in the switch, such a s logging in to the management software. To view the system log, perform the following procedu re: 1. From the Tools menu, select System Log . The System Log page open s, as shown in Fi[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 223 operation. (W)arning - An issue t hat may require a manager’s attention. (E)rror - Switch operation is severely impaired. T ype The type provides more information ab out the event. The possible types are: 802.1X - An 802.1X event. CFG - Configuration event. CLI - CLI[...]

Chapter 17: Basic Switc h Parameters 224 Section II: Web Browser Interf ace Returning the AT-S84 Management Software to the Factory Default Values This procedure returns all AT-S84 management software parameters to their default values and deletes all ta gged and VLANs on the switch. The AT-S84 management software default va lues are listed in Appe[...]

Section II: Web Browser Interface 225 Chapter 18 Port Configuration The sections in this chapter e xplain the two methods to viewing and changing the parameter settings of the individual ports on the switch. The first method shows how to use the Port Configuration page to vie w and configure multiple ports at one time . The second is typically used[...]

Chapter 18: Port Configu ration 226 Section II: Web Browser Interf ace Viewing and Configuring Multiple Ports This procedure allows you to configur e the ports on th e switch using the Port Configuration page. This page al lows you to view and configure the parameter settings of all the switch ports at one time. To configure the ports, perform the [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 227 Back Pressure Sets back pressure o n all the ports. Y ou cannot set back pressure on an individual port. Choose Disab le or Enable and click Apply . Port Index The port number . Y ou cannot change this p arameter . T runk The trunk group number . A number in this colum[...]

Chapter 18: Port Configu ration 228 Section II: Web Browser Interf ace 100M/Half - 100 Mbps in half-duplex mode 10M/Half - 10 Mbp s in half-duplex mode 1000 Mbps, full- duplex When you choose a setting, note the following:  When a twisted pair port is set to Auto-Negotiation, the d efault setting, the end node should also be using Auto-Ne gotiat[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 229 Viewing and Configuring a Single Port The procedure in this section allows you to view or configure the parameter settings of one port o n the switch. To view and configure the parameter settings for more than one port at a time, refer to “Viewing and Configuring Mul[...]

Chapter 18: Port Configu ration 230 Section II: Web Browser Interf ace parameter . For information, refer to “Vie wing and Configuring Multiple Ports” on p age 226. Admin. S t atus The operating st atus of the port. Y ou can use this parameter to enable or disable a p ort. Y ou may want to disable a port and prevent p ackets from being forwarde[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 231  The only valid setting for an opt ional SFP port is Auto-Negotiation. Flow Ctrl The current flow control setting on the port. The switch uses a special pause p acket to notify the end node to stop transmitting for a specified period of time. The possible values are[...]

Chapter 18: Port Configu ration 232 Section II: Web Browser Interf ace Displaying Port Statistics To display port statistics, perform th e following procedure: 1. From the Main Menu, select Statistics . The S tatistics p age opens, as shown in Figure 69. Figure 69. Statistics Page 2. To view statistics for a port, select a port from the Select Port[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 233 Good Multicast Number of valid multicast packet s received on the port. CRC/Align Errors Number of packet s with a cyclic redundancy check (CRC) error but with the proper length (64-1518 bytes) received on the port. Undersize Pkt s Number of packet s that were less tha[...]

Chapter 18: Port Configu ration 234 Section II: Web Browser Interf ace[...]

Section II: Web Browser Interface 235 Chapter 19 SNMP This chapter contains the following procedures for working with the Simple Network Management Protocol (SNMP):  “Enabling or Disabling the SNMP Agent” on p age 236  “Changing the Default SNMP Community Names” on p age 237  “Working with T rap Receivers” on page 238 Note For [...]

Chapter 19: SNMP 236 Section II: Web Browser Interf ace Enabling or Disabling the SNMP Agent To enable or disable the SNMP agent, p erform the following procedure: 1. From the Basic Config menu, select User I nterface > User Interface . The User Interface p age is shown in Figure 60 on p age 21 1. 2. For the SNMP Agent parameter, c hoose Enable [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 237 Changing the Default SNMP Community Names To configure the SNMP settings, perform the following procedure: 1. From the Basic Config menu, select SNMP Config . The SNMP Configuration p age opens, as shown in Figure 70. Figure 70. SNMP Configuration Page 2. Click the SNM[...]

Chapter 19: SNMP 238 Section II: Web Browser Interf ace Working with Trap Receivers This section contains the following proced ures:  “Adding and Enabling a T rap Receiver ,” next  “Disabling a T rap Receiver” on page 238  “Deleting a T rap Receiver” on page 238 Adding and Enabling a Trap Receiver To add and enable a trap recei[...]

Section II: Web Browser Interface 239 Chapter 20 Port T runking This chapter contains the following pro cedures for working with port trunking:  “Setting Up a Port T runk” on page 240  “Setting Up an LACP T runk” on page 242 Note For background information on trunking, refer to “Port Trunking Overview” on page 82.[...]

Chapter 20: Port Trunki ng 240 Section II: Web Browser Interf ace Setting Up a Port Trunk This section contains the following procedures for working with port trunks:  “Creating a Port T runk,” next  “Enabling or Disabling a Port T runk” on p age 241 Creating a Port Trunk This procedure explains how to create a port trunk. Note Do not[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 241 3. From the list at the end of the port list fo r the trunk you want to enable or disable, choose Manual to enable the tru nk, or Disable to disable it. 4. Click Apply . The trunk is now operational on the switch. 5. Configure the port trunk on the other switch and con[...]

Chapter 20: Port Trunki ng 242 Section II: Web Browser Interf ace Setting Up an LACP Trunk This section contains the following proced ures for working with LACP trunks:  “Creating an LACP T runk,” next  “Configuring the LACP Port Priority” on page 242  “V erifying the LACP Group Settings” on p age 243  “Disabling an LACP T[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 243 The LACP Port Priority p age opens, as shown in Figure 72. Figure 72. LACP Port Priority Page 2. In the priority column, enter a priority numb er for the port(s). 3. Click Apply . Verifying the LACP Group Settings To verify the LACP group settings, perform the f ollowi[...]

Chapter 20: Port Trunki ng 244 Section II: Web Browser Interf ace The LACP Group S tatus p age displays the following information about the LACP group: System Priority The system priority as defined by IEE 802.3ad. Y ou cannot change this. System ID The MAC address of the system. Key The key for this trunk group. The page also co ntains a t able th[...]

Section II: Web Browser Interface 245 Chapter 21 Port Mirr oring This chapter contains the procedure for setting up port mirroring. Port mirroring allows you to unobtrusively monitor the ingress and egress tra ffic on a port by having th e traffic copied to a nother port. This chapter contain s the following sections:  “Configuring Port Mirror[...]

Chapter 21: Port Mirroring 246 Section II: Web Browser Interf ace Configuring Port Mirroring To set up port mirroring, perform the following procedure: 1. From the Advanced Config menu, se lect Port Mirroring . The Port Mirroring pag e opens, as shown in Figure 74. Figure 74. Port Mirroring Page 2. In the Mirroring Port section, select the port whe[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 247 Disabling Port Mirroring To disable port mirroring, perform the following procedure: 1. From the Advanced Config menu, select Port Mirroring . The Port Mirroring p age is shown in Figure 74 on p age 246. 2. From the Mirroring Status list, select Disable and click Apply[...]

Chapter 21: Port Mirroring 248 Section II: Web Browser Interf ace[...]

Section II: Web Browser Interface 249 Chapter 22 V irtual LANs This chapter contains the procedures for creating, modifying, and deleting and tagged Virtual Local Are a Networks (VLANs) from a web browser management session. This chapter cont ains the following sections:  “Creating a VLAN” on p age 250  “Configuring the PVID of Unt agge[...]

Chapter 22: Virtual LANs 250 Section II: Web Browser Interf ace Creating a VLAN This section contains the procedure fo r creating a new or tagged VLAN. This procedure assigns the VLAN a name, a VID number, a nd the untagged and tagged member ports. After performing this procedure, the PVID values of the untagged ports of the VLAN must be adjusted t[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 251 If the VLAN will be part o f a larger VLAN that sp ans multiple switches, then the name for the VLAN should be the same on each switch where nodes of the VLAN are connecte d. 4. In the Static Tagged row, click the buttons of those ports on the switch that are to be tag[...]

Chapter 22: Virtual LANs 252 Section II: Web Browser Interf ace Configuring the PVID of Untagged Ports This procedure adjusts a port’s VID val ue. The PVID value de termines the VLAN in which the port is an untagged membe r. A port is an untagged member of the VLAN whose VID value matches its PVID. A port can be an untagged member of only one VLA[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 253 The VLAN Port Configuration p age opens, as shown in Figure 76. Figure 76. PVID Page 2. Click the PVID field of the port whose value yo u want to change and enter the new PVID value for the port. The PVID must be equal to the VID of the VLAN where you want the port to [...]

Chapter 22: Virtual LANs 254 Section II: Web Browser Interf ace 4. Repeat steps 2 and 3 to change the PVID values of o ther ports.[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 255 Displaying the VLANs To display the VLANs, perform the follo wing procedure: 1. From the Advanced Config menu, select VLAN Config > VLAN Port Config . The VLAN Information p age is shown in Figure 78 on page 256 and provides the following columns of information: VLA[...]

Chapter 22: Virtual LANs 256 Section II: Web Browser Interf ace Modifying a VLAN This procedure allows you to perform the following functions:  Change the name of a VLAN.  Add or remove tagged ports from a VLAN. Before performing this proced ure, note the following:  Y ou cannot change the VID of an existing VLAN.  Y ou cannot add an un[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 257 The Modify VLAN p age opens, as shown in Figure 79. Figure 79. Modify VLAN Page 3. To change the VLAN’s name, click the VLAN Name field and enter th e new name. The name can cont ain up to 32 char acters including spaces but n ot including special characters such as [...]

Chapter 22: Virtual LANs 258 Section II: Web Browser Interf ace Deleting a VLAN To delete a VLAN, perform the follo wing procedure: 1. From the Advanced Config menu, se lect VLAN Info . The VLAN Information page is shown in Figure 78 on p age 256. 2. In the VLAN Action column, click Del ete next to the VLAN you want to delete. A confirmation prompt[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 259 Deleting All VLANs The following procedure for deletes all VLANs, except the Default_VLAN, on a switch. To delete selected VLANs, refer to “Deleting a VLAN” on page 258. To reset to the default VLAN, perform the following p rocedure: 1. From the Advanced Config men[...]

Chapter 22: Virtual LANs 260 Section II: Web Browser Interf ace Enabling or Disabling GVRP To enable or disable GVRP, perform th e following procedure: 1. From the Advanced Config menu, se lect VLAN Config > VLAN Info . The VLAN Information page is shown in Figure 78 on p age 256. 2. From the GVRP status list, choose either Enable or Disable. 3.[...]

Section II: Web Browser Interface 261 Chapter 23 Quality of Service (QoS) This chapter contains the procedure for configuring Quality of Service (QoS). This chapter includes the following procedures:  “Mapping CoS Priorities to Egress Queues” on p age 262  “Configuring CoS” on pag e 264 Note For background information on QoS, refer to[...]

Chapter 23: Quali ty of Service (QoS) 262 Section II: Web Browser Interf ace Mapping CoS Priorities to Egress Queues This procedure explains how to change the defau lt mappings of CoS priorities to egress priority queues, as sho wn in Table 2 on page 127. This is set at the switch level. You can not set this at the per-port level. This procedure al[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 263 Note The switch does not alter the original priority level in tagged frames. Frames leave the switch with the same priority level they had wh en they entered the switch.[...]

Chapter 23: Quali ty of Service (QoS) 264 Section II: Web Browser Interf ace Configuring CoS As explained in “QoS Overview” on page 126, a packet received on a port is placed it into one of four priority queues on the egress por t according to the switch’s mapping of 802.1p priority levels to egress priority queues. The default mappings are s[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 265 The Port Priority Configuration p age opens, as shown in Figure 81. Figure 81. Port Priority Configuration Page The columns in the menu disp lay the following information: Port Displays the port number . T runk Displays the trunk number if the port is a member of a tru[...]

Chapter 23: Quali ty of Service (QoS) 266 Section II: Web Browser Interf ace 2. To change the egress queue where ingress untagged frames received on a port are to be stored on the egress po rt, refer to Table 2 on page 127. The range is 0 (lowest) to 3 (highest). The default is 0 . For example, if you select 3 for queue 3 for a port, a ll ingress u[...]

Section II: Web Browser Interface 267 Chapter 24 IGMP This chapter contains the following pro cedures for working with the Internet Group Management Protocol (IGMP):  “Configuring IGMP” on pag e 268 Note For background information on IGMP, refer to “IGMP Snooping Overview” on page 138.[...]

Chapter 24: IGMP 268 Section II: Web Browser Interf ace Configuring IGMP To configure the IGMP settings, per form the following procedure: 1. From the Advanced Config menu, se lect IGMP Snooping . The IGMP Snooping pa ge opens, as shown in Figure 82. Figure 82. IGMP Snooping Page 2. To enable or disable IGMP, select Enable or Disable from the IGMP [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 269 Viewing the Multicast Group Members To view the multicast group members, perform the following procedure: 1. From the Advanced Config menu, select IGMP Snooping . The IGMP Snooping page is shown in Figure 82 on p age 268. 2. Click on the MAC address of the multica st g[...]

Chapter 24: IGMP 270 Section II: Web Browser Interf ace[...]

Section II: Web Browser Interface 271 Chapter 25 RSTP This chapter contains the following pro cedures for working with the Remote Spanning Tree Protocol (RSTP):  “Basic RSTP Configuration” on p age 272  “Configuring RSTP Port Settings” on p age 274  “Viewing the RSTP T opology” on page 278 Note For background information on RST[...]

Chapter 25: RSTP 272 Section II: Web Browser Interf ace Basic RSTP Configuration To configure the RSTP settings, p erform the following procedure: 1. From the Basic Config menu, select Rapid Spanning Tree > RSTP Config . The Rapid S panning T ree Configuration p age opens, as shown in Figure 84. Figure 84. Rapid Spanning Tree Conf iguration Page[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 273 Time Since T opology Change The time in seconds since the la st topology change took place. Whe n RSTP detects a change to th e LAN’s topology or when the switch is rebooted, this pa rameter is reset to 0 seconds and begins incrementing until the next topology cha ng[...]

Chapter 25: RSTP 274 Section II: Web Browser Interf ace Configuring RSTP Port Settings This section contains the following topics:  “Configuring the Basic RSTP Port Settings,” next  “Configuring the Advanced RST P Port Settings” on p age 275 Configuring the Basic RSTP Port Settings To configure the basic RSTP port settings, perform th[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 275 2. In the STP Status column for the port you want to con figure, select the STP status from the list, either Enable or Disable. 3. In the Priority column for the port you want to configure, type a numb er for the port priority. Port priority is described in “Port Pri[...]

Chapter 25: RSTP 276 Section II: Web Browser Interf ace The RSTP Advanced Port Configuration p age opens, as shown in Figure 86. Figure 86. RSTP Advanced Port Configuration Page 2. In the Admin/OperEdge column for the port you want to configure, choose True or False to se t whether or not the port will operate as an edge port. 3. In the Admin/Oper [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 277 4. In the Migration column for the port you wa nt to configure, click Restart to reset the port. 5. Click Apply . T o configure all of the ports to the same settings, in the All row , configure one, two, or all of the fo llowing settings: Admin/OperEdge, Admin/OperPtoP[...]

Chapter 25: RSTP 278 Section II: Web Browser Interf ace Viewing the RSTP Topology To view the current RSTP topology, perform the fo llowing procedure: 1. From the Basic Config menu, select Rapid Spanning Tree > RSTP Topology . The Designated T opology Information page ope ns, as shown in Figure 87. Figure 87. Designated Topology Information Page[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 279 Designated Bridge An adjacent bridge to which the root port of the switch is actively connected. Designated Port The root bridge to which the root port of the switch is actively connected.[...]

Chapter 25: RSTP 280 Section II: Web Browser Interf ace[...]

Section II: Web Browser Interface 281 Chapter 26 802.1x Network Access Contr ol This chapter contains the procedure fo r configuring 802.1x network access control:  “Configuring 802.1x Network Access Control” on p age 282 Note For background information, refer to “8 02.1x Network Access Control Overview” on page 168.[...]

Chapter 26: 802.1x Network Access Control 282 Section II: Web Browser Interf ace Configuring 802.1x Network Access Control To configure 802.1x n etwork access control, perform the following procedure: 1. From the Advanced Config menu, se lect 802.1x . The 802.1x Configuration p age opens, as shown in Figure 88. Figure 88. 802.1x Configuration Page [...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 283 3. Configure the following parameters as needed: NAS ID This parameter assigns an 8 02.1x iden tifier to the switch that applies to all port s. The NAS ID can be up to sixteen chara cters. V alid characters are 0 to 9, a to z, and A to Z. S paces are allowed. S pecifyi[...]

Chapter 26: 802.1x Network Access Control 284 Section II: Web Browser Interf ace timeout conditions. The de fault value for this p arameter is 10 seconds. The range is 1 to 60 seconds. Maximum Request Sets the maximum number of times that the switch retransmit s an EAP Request packet to th e client befor e it times out the authentication session. T[...]

Section II: Web Browser Interface 285 Chapter 27 RADIUS Authentication Pr otocol This chapter explains how t o configure the RADIUS client on the switch. You can use the RADIUS client with 802.1x network access control to control who can forward packets through t he switch. The chapter contains the following section:  “Configuring the RADIUS C[...]

Chapter 27: RADIUS Authent ication Protocol 286 Section II: Web Browser Interf ace Configuring the RADIUS Client To configure the RADIUS client, perform the f ollowing procedure: 1. From the Basic Config menu, select User I nterface > RADIUS Config . The RADIUS Configuration p age opens, as shown in Figure 89. Figure 89. RADIUS Configuration Pag[...]

Section II: Web Browser Interface 287 Chapter 28 Br oadcast S torm Contr ol This chapter contains the procedure for configuring the broadcast storm control feature on the switch:  “Configuring Broadcast S torm Control” on p age 288 Note For background information on broad cast storm control, refer to “Broadcast Storm Control Overvie w ” [...]

Chapter 28: Broadcas t Storm Control 288 Section II: Web Browser Interf ace Configuring Broadcast Storm Control To configure the broadcast storm co ntrol feature, perform the follo wing procedure: 1. From the Basic Config menu, select Storm Cont rol . The Broadcast S torm Control p age opens, as shown in Figure 90. Figure 90. Broadcast Storm Contro[...]

Section II: Web Browser Interface 289 Chapter 29 W orking with System Files The procedure in this chapter explains how to downlo ad a new version of the AT-S84 management software onto the swit ch or upload or down load a configuration file. The sections include:  “Downloading a New Management Sof tware Image Using TFTP” on page 290 Note For[...]

Chapter 29: Working wit h System Files 290 Section II: Web Browser Interf ace Downloading a New Management Software Image Using TFTP Before downloading a new version of the AT-S84 manage ment software onto the switch, note the following:  The current configuration of a swit ch is ret ained when a new A T-S84 software image is inst alled. T o ret[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 291 The Image/V ersion Date shows the current version and date of software inst alled on the switch. 2. Change the following parame ters as necessary: Download Server IP The IP address of the TFTP server from which you are downloading the new software . Download File Name [...]

Chapter 29: Working wit h System Files 292 Section II: Web Browser Interf ace Uploading or Downloading a Configuration File The procedure in this section allows you to d ownload a different configuration file onto the switch from a TFTP server, o r upload the file to a TFTP server. T o return a switch to its default con figuration values, refer t o[...]

AT-S84 Management Software Use r’s Guide Section II: Web Browser Interface 293 2. From the Download/Upload Config File list, cho ose Upload to upload a file to the TFTP server, or Download to down load the configuration file from the TFTP server to the switch. 3. Change the following parame ters as necessary: TFTP Server IP The IP address of the [...]

Chapter 29: Working wit h System Files 294 Section II: Web Browser Interf ace[...]

Section II: Using t he Web Browser Interf ace 295 Section III Using the Command Line Interface The chapter in this sectio n provides information for using the comma nd line interface in the AT-S84 management software. Note The menus interface is described in Section I, “Using the Menus Interface” on page 23, and the web browser in terface is de[...]

296 Section II: Using the We b Browser Interface[...]

Section I: Basic Features 297 Chapter 30 Getting S tarted with the Command Line Interface This chapter describes the comma nd modes of the AT-S84 management software command line interface and how t o access them. This chapter includes the following se ctions:  “CLI Command Modes Introduction” on p age 298  “S tarting the Command Line I[...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 298 Section I: Basic Features CLI Command Modes Introduction The command line interface in the AT-S84 management software is accessible from the Main Menu. The commands offer the same functionality as the menus interface. For in structions on how to access the command line interface, see[...]

AT-S84 Management Software Use r’s Guide Section I: Basic Fea tures 299 example, you can enter the SHOW SNMP command fro m the Privileged EXEC command mode, but you cannot enter this command from the VLAN Configuration mode. Command Formatting Conventions The following formatting convent ions are used in this manual:  screen tex t font - This [...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 300 Section I: Basic Features User EXEC Command Mode The User EXEC command mode is the default command mode that is available from the Main Menu. It permit s access to basic commands. To access any of the other modes, y ou must first access the User EXEC mode. The commands in the User EX[...]

AT-S84 Management Software Use r’s Guide Section I: Basic Fea tures 301 Privileged EXEC Command Mode The commands in the Privileged EXEC command mode permit you to perform system level commands such as rebooting the system, copying configuration files, and clearing statisti cs. To access this mode, you must first access the User EXEC command mode[...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 302 Section I: Basic Features CONSOLE S ets the console configuration. DOT1X Se ts the 802.1x Port-based Network Access Control configuration. END Exits from th e Global Configuration Command Mode to the Privileged EXEC Command Mode. EXIT Exit s from the Global Configuration co mmand mod[...]

AT-S84 Management Software Use r’s Guide Section I: Basic Fea tures 303 Interface Configuration Command Mode The Interface Configuration command mod e allows you to configure features that pertain to the ports on the system such as flow control, port mirroring, and duplex mode. To access this mode, you must first access the User EXEC, Privileged [...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 304 Section I: Basic Features Port Mirroring Example To configure port 8 as the mirroring port and port 6 as the mirrored port you need to first access th e Interface Configuration mode, specify the port, and then configure the port mirroring fea ture. Perform the following procedure. 1.[...]

AT-S84 Management Software Use r’s Guide Section I: Basic Fea tures 305 VLAN Configuration Command Mode The VLAN Configur ation command mode allows you to con figure VLAN commands. To access this mode, you mu st first access the User EXEC, Privileged EXEC, and Global Configur ation modes. From the Global Configuration command mode, type: interfac[...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 306 Section I: Basic Features VLAN Example To create a new VLAN with a VLAN ID of 2, access the Interfa ce Configuration mode and specify the VLAN ID. Perform the following procedure. 1. From the User EXEC mode, enter: enable Y ou now have access to the Priv ileged EXEC Configuration mod[...]

AT-S84 Management Software Use r’s Guide Section I: Basic Fea tures 307 Starting the Command Line Interface To start the command line interface, p erform the following procedure: 1. From the Main Menu (see Figure 93), type C to choose Command Line Interface . Figure 93. Main Menu A command line prompt is displayed in Figure 94. The de fault switc[...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 308 Section I: Basic Features Command Formatting The AT-S81 command line interface foll ows same formatting conventions for all of the command modes. There are command line interface fea tures which apply to the general use of the command line and command syntax conventions which apply w[...]

AT-S84 Management Software Use r’s Guide Section I: Basic Fea tures 309 <mac-add> MAC address 00:02:15:af:2e:02 <sec> Second 12 <min> Minute 12 <port> Port instance Ethernet1/2 (stack-1,port-2) <trunk ID> Trunk gr oup ID 4 <vlanID> VLAN instance (including name and VLAN identifier) vlan3 <port list> A lis[...]

Chapter 30: Gettin g Started with the Comma nd Line Interface 310 Section I: Basic Features[...]

311 Appendix A A T-S84 Default Settings This appendix lists the AT-S84 factory default settings. It contains the following sections in alphabetica l order:  “Basic Switch Default Settings” on p age 312  “SNMP Default Settings” on page 314  “Port Configuration Default Settings” on pag e 315  “Quality of Service” on p age [...]

Appendix A: AT-S84 Default Set tings 312 Section I: Basic Features Basic Switch Default Settings This section lists the default settings for basic switch parameters. The following topics are covered:  “System Reboot Default Settings,” next  “User Interface Configuration Default Settings” o n page 312  “Management Interface Defaul[...]

AT-S84 Management Software Use r’s Guide 313 Note Login names and passwords are ca se sensitive. Ping Default Settings The following table lists the pin g default settings. System IP Configuration Default Settings The following table lists the syste m IP configuration default settings. System Administration Configuration Default Settings The foll[...]

Appendix A: AT-S84 Default Set tings 314 Section I: Basic Features SNMP Default Settings The following table describes t he SNMP default settings. Setting Default SNMP S tatus Disabled SNMP Read Community public (Read only) SNMP Write Community private (Read|W rite) T rap Authentication Enabled[...]

AT-S84 Management Software Use r’s Guide 315 Port Configuration Default Settings The following table lists the port configuration default settings. Port Configuration Setting Default S tatus Enabled Mode Auto Flow Ctrl Enabled Back Pressure Disabled[...]

Appendix A: AT-S84 Default Set tings 316 Section I: Basic Features Quality of Service The following table lists the default mappings of IEEE 80 2.1p priority levels to egress port priority queues IEEE 802.1p Priority Level Port Priority Queue 0 or 1 Q0 (lowest) 2 or 3 Q1 4 or 5 Q2 6 or 7 Q3 (highest)[...]

AT-S84 Management Software Use r’s Guide 317 IGMP Snooping Default Settings The following table lists the IGMP Snooping default settings. Setting Default IGMP Snooping S tatu s Disabled IGMP Snooping Age-Out T imer 280 seconds Maximum Multicast Group s 64 Multicast Router Ports Mod e Auto Detect[...]

Appendix A: AT-S84 Default Set tings 318 Section I: Basic Features RSTP Default Settings The following table describes the RSTP default settings. Setting Default Global RSTP S tatus Disabled Hello T ime 2 Sec. Bridge Forwarding 15 Maximum Age 20 Sec. Forward Delay 15 Sec. Hello T ime 2 Sec. Bridge Maximum Age 20 Sec. Bridge Forward Delay 15 Sec.[...]

AT-S84 Management Software Use r’s Guide 319 802.1x Network Access Control Default Settings The following table descri bes the access control default settings per port . Settings Default NAS ID Nas1 Port S tatus Authorized Port Role None Port Control Force Authoriz ed T ransmission Period 30 seconds Supplicant T imeout 30 seconds Server T imeout [...]

Appendix A: AT-S84 Default Set tings 320 Section I: Basic Features RADIUS Server Default Settings The following table lists the defa ult settings for RADIUS accounting. Settings Default Server IP Address 0.0.0.0 Response T ime 10 seconds Maximum Retransmiss ions 3[...]

AT-S84 Management Software Use r’s Guide 321 Broadcast Storm Control Default Settings The following table lists the default settings for broadcast storm control. Settings Default Broadcast S torm S tatus Disabled Threshold Low[...]

Appendix A: AT-S84 Default Set tings 322 Section I: Basic Features[...]

323 Index Numerics 802.1x Port-based Network Access Control authentication process 169 authenticator po rt, described 168 configuring 174, 281 default settings 319 described 168 guidelines 171 supplicant , described 168 A administ rator name, confi guring 38 , 211 AT-S84 management software default settings 311 features 18 resetting to factory defa[...]

Index 324 Link Aggregation Contro l Protocol. See LACP trunk local management session explained 19 quitting 29 starting 26 login name, configurin g 38, 211 login password, configuring 38, 211 M management access de faults 312 management access leve l 21 management inte rface defaults 312 manager password, default setting 312 maximum multicast group[...]

AT-S84 Management Software Use r’s Guide 325 enabling 65 modifying 66 SNTP 44 SNTP, configuring 216 software information 47, 217 static p ort trunk described 82 statistics, displaying 77, 232 STP compatibility, configuring 158 subnet mask configuring 32, 206 default setting 313 supplicant , described 168 switch hardware information 47, 217 reboot[...]

Index 326[...]