Allied Telesis AT-GS950/8 manual

613-000375 Rev. B Management Software AT-S82 User’s Guide For the AT-GS950/8 Layer 2 Gigab it Ethernet WebSmart Switch Version 1.1.0[...]

Copyright © 2007 Allied T elesis, Inc. All rights reserved. No part of this publication may be repr oduced withou t prior written permissi on from Allied Telesis, Inc. Allied Telesis is a trademark of Allied Telesis, Inc. Microsof t and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navi gator is a registered tradem[...]

3 Preface ........ ................ ............. ................ ................ ............. ................. ................ ......................... ................. . 7 Where to Find Web-based Gu ides ................ ................ ................ ................ ................ ................ . .................... 8 Contacting[...]

Contents 4 Tagged Port Members ............... ................ ................ ................ ................ ................ ............. ............. 45 Untagged Port Members ............... ................ ... .......... ................ ................ ................ ............. . ............ 45 Incoming and Outgoing Tagged and U[...]

5 Figure 1. Login Dialog Box ............... .............. .............. .............. .............. .............. .............. . .......... ............... ........... .......... 12 Figure 2. Main Page .................... .............. .............. ........... .............. .............. .............. ...... ........... .............[...]

Figures 6[...]

7 Pr eface This guide contains instructions on ho w to use the AT-S82 management software to manage the AT-GS950/8 Sma rt Switch switch. This preface contains the f ollowing sections:  “Where to Find W eb-based Guides” on p age 8  “Contacting Allie d T e lesis” on page 9[...]

Preface 8 Where to Find Web-based Guides The installation and user guides for all Allied Telesis products a re available in portable document format ( PDF) on our web site at www.alliedtelesis.com . You can view the documents online or download them onto a local workstation or server.[...]

AT-S82 Management Software Use r’s Guide 9 Contacting Allied Telesis This section provides Allied Telesis contact information for technica l support as well as sales and corporate information. Online Support You can request technical support onli ne by accessing the Allied Telesis Knowledge Base from the following website: www.alliedtel esis.com/[...]

Preface 10[...]

11 Chapter 1 Getting S tarted This chapter provides information and instructions on h ow to access the AT-S82 management software by starting a web browser management session. This chapter contains the following section s:  “S tarting a Ma nagement Session” on page 12  “Saving Changes” on page 14  “Quitting a Management Session?[...]

Chapter 1: Get ting Started 12 Starting a Management Session You establish a local management se ssi on with the AT-GS950/8 switch by connecting an Ethernet cable to one of the eight ports on the front panel of the switch. To start a management session, perform t he following procedure: 1. Start a web browser. 2. In the URL field of the web browser[...]

AT-S82 Management Software Use r’s Guide 13 The main p age, which by default disp lays the Basic Switch Inform ation page, is shown in Figure 2. Figure 2. Main Page[...]

Chapter 1: Get ting Started 14 Saving Changes The management software applies the changes you make when you click the Apply button on any web page. However, the manag ement software does not automatically save th e changes you make to the co nfiguration file. You can save your changes to the configuration file each time that you change a parameter,[...]

AT-S82 Management Software Use r’s Guide 15 Quitting a Management Session To quit a management session, clo se the web browser.[...]

Chapter 1: Get ting Started 16[...]

17 Chapter 2 Basic Switch Parameters This chapter contains the following sections:  “Configuring the IP Address, Subn et Mask, Gatewa y Address, and BOOTP or DHCP” on page 18  “Disabling or Enabling Ping Blocking” on p age 20  “Enabling or Disabling 802.1X Forwarding Cont rol” on page 21  “Changing the Administrator ’s P[...]

Chapter 2: Basic Switch Parameters 18 Configuring the IP Address, Su bnet Mask, Gateway Address, and BOOTP or DHCP Caution Allied Telesis strongly recommend s that you recor d the MAC address of this switch, as shown on the Basic Switch In formation Page (Figure 4) before you configure o r enable the BOOTP or DHCP options of the Get IP From paramet[...]

AT-S82 Management Software Use r’s Guide 19 a. In the IP Address field, enter the IP address. The default is 192.168.1.1. b. In the Subnet Mask field, type the subnet mask for the switch. The default is 255.255.255.0. c. In the Default Gateway field, type the I P address of the default gateway. There is no default gateway assigned. BOOTP - Enable[...]

Chapter 2: Basic Switch Parameters 20 Disabling or Enabling Ping Blocking You can allow the switch to respond to ping requests by sett ing the Ping Blocking parameter. The default setting is enabled, which means th at the switch does not respond to ping requests. To disable or enable ping blocking, perform the following procedure: 1. From the main [...]

AT-S82 Management Software Use r’s Guide 21 Enabling or Disabling 802. 1X Forwarding Control This procedure describes how to en able or disable 802.1x forwarding control. The default setting is disabl ed. When you disab le this feature, 802.1x packets are not forwarded. If th is featu re is enabled, these packets are forwarded to their destinatio[...]

Chapter 2: Basic Switch Parameters 22 Changing the Administrator’s Password To reset the administrator’s password, perform th e following procedure: 1. From the main menu, select Administrator Password . The Administrator Password p age is shown in Figure 5. Figure 5. Administrator Password Page 2. In the Old Password field, typ e the old passw[...]

AT-S82 Management Software Use r’s Guide 23 Rebooting the Switch This procedure reboots the switch and reloads the AT-S82 management software from flash memory. You might reboot the device if you believe it is experiencing a problem. Rebooting the de vice does not change any of the device’s parameter setting s. Caution The switch does not forwa[...]

Chapter 2: Basic Switch Parameters 24 Resetting the Switch and Retaining the IP Address There are two options for rese tting the switch: resetting all the parameters except the IP address, or resetting the switch to return all the parameters to their default values. The procedure for resetting the switch to th e default values is described in “Re[...]

AT-S82 Management Software Use r’s Guide 25 Returning the AT-S82 Management Software to the Factory Default Values This procedure returns all AT-S82 mana gement software paramet ers to their default values, including the IP address, which is reset to 192.168.1.1. To reset all the parameters except the IP address, follow the procedure in “Resett[...]

Chapter 2: Basic Switch Parameters 26 Downloading New Firmware To download new firmware onto the switch, perform the following procedure: 1. From the main menu, select Download Firmware . The Download Firmware page is sho wn in Figure 9. Figure 9. Download Firmware Page 2. In the Server IP Ad dress field, type the IP ad dress of the server where th[...]

Section I: Using the Me nus Interface 27 Chapter 3 Port Configuration This chapter contains the following section:  “Configuring Port Parameters” on pag e 28[...]

Chapter 3: Port Confi guration 28 Configuring Port Parameters This procedure explains how to configure the followin g port parameters:  St a t e  S peed and duplex mode  Flow control  Medium type (only for port s 7 and 8) To configure the ports, perform the following procedure: 1. From the main menu, select Port Configuration . The Port[...]

AT-S82 Management Software Use r’s Guide 29 Note Auto Speed/Duplex is disabled when you manually configure a port’s Speed/Duplex. In this situation, you must use a crossover Ethernet cable to connect that p ort to another network device. 2. To set the parameters for a port, choose the port using the From and To lists. You can select one port (F[...]

Chapter 3: Port Confi guration 30  10M/Half - 10Mbps, half duplex  10M/Full - 10Mbps, full duplex  100M/Half - 100Mbps, half duplex  100M/Full - 100Mbps, full duplex  1000M/Full - 1000Mbps, full duple x  1000M_M/Full - 1000Mbps, full duplex for port opera ting as a Master port at 1000Mbps in Force mode. This a llows the port to se[...]

Section I: Using the Me nus Interface 31 Chapter 4 T runking This chapter contains the following sections:  “T runking Overview” on page 32  “Configuring the T runking Algorithm” on page 34  “Setting up the T runk” on page 35[...]

Chapter 4: Tru nking 32 Trunking Overview A port trunk is an economical wa y for you to increase the bandwid th between the Ethernet switch and another ne tworking device, such as a network server, router, workstation, or another Ethernet switch. A port trunk is a group of ports that have been grouped together to function as one logical path. A por[...]

AT-S82 Management Software Use r’s Guide 33 distribution methods:  MAC-SA - source MAC address  MAC-DA - destination MAC address  DAxorSA - destination MAC address/source MAC address[...]

Chapter 4: Tru nking 34 Configuring the Trunking Algorithm To configure the trunk load method, perform the following procedure: 1. From the main menu, select Trunking Algorithm . The T runking Algorithm page is sh own in Figure 12. Figure 12. Trunking Algorithm Page 2. Choose one of the load methods from the list: MAC-SA By the source MAC address. [...]

AT-S82 Management Software Use r’s Guide 35 Setting up the Trunk To set up the trunk, perform the fo llowing procedure: 1. From the main menu, select Port Trunking . The Port T runking page is shown in Figure 13. Figure 13. Port Trunking Page The current trunks, if any , are shown in the Current T runking Group Entries area. 2. Click Add . The Po[...]

Chapter 4: Tru nking 36 3. For the Group ID , choose a trunk group ID from th e list. IDs from 1 through 4 are available. Note that when you choose a group ID that ports are automatically selected on t he Port Map. You cannot designate any other ports for the trunk 4. For the State , choose the state of the t runk, either enabled or disabled. Note [...]

Section I: Using the Me nus Interface 37 Chapter 5 Port Mirr oring This chapter contains the following sections:  “Port Mirroring Overview” on page 38  “Configuring Port Mirroring” on pa ge 39[...]

Chapter 5: Po rt Mirroring 38 Port Mirroring Overview The port mirroring feature allows you to unobtru sively monitor the ingress and egress traffic on a port on the swit ch by having the traffic copied to another switch port. By connecting a netwo rk analyzer to the port where the traffic is being copied to , you can monitor the traffic on the oth[...]

AT-S82 Management Software Use r’s Guide 39 Configuring Port Mirroring To configure the trunk load method, perform the following procedure: 1. From the main menu, select Port Mirroring . The Port Mirroring p age is shown in Figure 15. Figure 15. Port Mirroring Page 2. From the Target Port list, select the target port. This is the port where you w[...]

Chapter 5: Po rt Mirroring 40[...]

Section I: Using the Me nus Interface 41 Chapter 6 VLANs This chapter contains the following sections:  “VLAN Features” on p age 42  “VLAN Overview” on page 44  “Working with VLANs” on p age 47  “Protected Ports VLAN” on p age 50[...]

Chapter 6: VL ANs 42 VLAN Features A Virtual Local Area Network (VLAN) is a logical grouping of devices on different physical LAN segments tha t allows users to communicate as if they were physically connected to a single LAN, in dependent of the physical configuration of the network. With VLANs, you can segment your n etwork and group end-nodes wi[...]

AT-S82 Management Software Use r’s Guide 43 VLANs can be used to control the flow of data in your network, since the traffic generated by an end-node in a VLAN is restricted to the o ther end- nodes in the same VLAN. In addition, VLANs can preven t data from flowing to unauthorized end-nodes[...]

Chapter 6: VL ANs 44 VLAN Overview This VLAN overview contains the following sections:  “VLAN Name,” next  “VLAN Identifier” on p age 44  “VLAN Port Members” on page 44  “Incoming and Outgoing T agged and Unt agged Frames” on p age 45  “Guidelines for Creating a VLAN” on p age 46 VLAN Name To create a port-based V[...]

AT-S82 Management Software Use r’s Guide 45 Tagged Port Members A port is a tagged member of a specific VLAN when it is a member of more than one VLAN. If a port is a tagged member of o ne VLAN, then the same port is also an untagged me mber of another VLAN. Untagged Port Members A port is an untagged member of a VLAN if the PVID is equal to the [...]

Chapter 6: VL ANs 46 member of the VLAN). These frames are untagged after transmission from the switch. Guidelines for Creating a VLAN The following are guidelines fo r creating a VLAN.  Each VLAN must be assigned a uniqu e VID. If a particular VLAN spans multiples switches, each part of the VLAN on the dif ferent switches should be assigned the[...]

AT-S82 Management Software Use r’s Guide 47 Working with VLANs This section contains the following procedures for working with VLANs:  “Creating a VLAN,” next  “Displaying all VLANs” on pag e 48  “Modifying a VLAN” on page 49 Creating a VLAN To create a VLAN, perform the following procedure: 1. From the main menu, select Stat[...]

Chapter 6: VL ANs 48 3. In the VID field , supply a number for the VLAN ID, from 2 to 4094. 4. In the VLAN Na me field, enter a unique name for the VLAN. No spaces are allowed. 5. In the Tag row, select the ports that you want to be tagged members of the VLAN. Note If you want a port to be an untagge d member of a different VLAN, you must first mod[...]

AT-S82 Management Software Use r’s Guide 49 The list of current VLANs is shown in Figure 18. Figure 18. Current VLANs Page Modifying a VLAN To modify the ports in a VLAN, perform the following procedure: 1. From the main menu, select VLAN Configuration . The VLAN Configuration p age is shown in Figure 16 on pag e 47. 2. Click Modify next to the V[...]

Chapter 6: VL ANs 50 Protected Ports VLAN You use the protected ports VLAN featu re when you want to prevent ports from communicating with one another, but you want them all to have access to common resources. For example, in a hotel or apartment complex, the computer in each room or apartment needs to be isolated from one another, but they all nee[...]

AT-S82 Management Software Use r’s Guide 51 1. From the main menu, select Protected Port . The Protected Port p age is shown in Figure 21. Figure 21. Protected Port Page 2. Determine which port(s) will be the Prima ry port(s). 3. Click the box on the Isolated row for a ll ports that you want to isolate from one another. The box for the Primary po[...]

Chapter 6: VL ANs 52[...]

Section I: Using the Me nus Interface 53 Chapter 7 Class of Service This chapter contains the following sections:  “Class of Serv ice Overview ” on page 54  “Mapping Priorities to Queues” on pa ge 57  “Setting Up the Schedule” on p age 58[...]

Chapter 7: Class of Service 54 Class of Service Overview When the egress queues on a port in an Ethernet switch contains mo re packets than the port can handle in a timely man ner, the port may be forced to delay the transmission of some packets. A port may be forced to delay transmission of packets while it handles o ther traffic and, in some situ[...]

AT-S82 Management Software Use r’s Guide 55 Table 1 lists the mapping s between the eigh t CoS priority levels and the four egress queues of a switch port. For example, if a tagged packet wit h a priority level of 2 entered a port on the switch, the switch would store the packet in Q1 1 on the egress port. Note that priority 0 is mapped to CoS qu[...]

Chapter 7: Class of Service 56 example. In this example, the port transmits a maximum of 25 packets from Q3, then 15 packets from Q2, and so forth. T able 2. Scheduling Example Port Egress Queue Maximum Number of Packet s Q0 1 Q1 5 Q2 15 Q3 25[...]

AT-S82 Management Software Use r’s Guide 57 Mapping Priorities to Queues To map priorities to queues, perform the following procedure: 1. From the main menu, select CoS Priority to Queue . The CoS Priorit y to Queue page is shown in Figure 22. Figure 22. CoS Priority to Queue Page The default queue for each priority is displayed 2. To set the que[...]

Chapter 7: Class of Service 58 Setting Up the Schedule To configure map ports to pr iority queues, perform the follo wing procedure: 1. From the main menu, select CoS Output Scheduling . The CoS Output Scheduling p age is shown in Figure 22. Figure 23. Output Scheduling Page 2. To set the weight for a queue, go to that queue and type a number. 3. C[...]

AT-S82 Management Software Use r’s Guide 59 Assigning Priority to Ports To assign a priority to a specific port, perform the fo llowing procedure: 1. From the main menu, select CoS Port Priority Assignment . The CoS Port Priority Assignmen t page is shown in Figure 24. Figure 24. CoS Port Priority Assignment Page 2. Choose the port you want to se[...]

Chapter 7: Class of Service 60[...]

Section I: Using the Me nus Interface 61 Chapter 8 Spanning T r ee Pr otocol (STP) This chapter contains the following sections:  “S panning T ree Overview” on p age 62  “Configuring S panning T ree” on page 71  “Configuring STP Port Settings” on page 74[...]

Chapter 8: Spann ing Tree Protocol (STP) 62 Spanning Tree Overview The performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topolog y. A data loop exists when two or more nodes on a network can tran smit data to each other over more than one data path. The pro blem that data loops pose is that [...]

AT-S82 Management Software Use r’s Guide 63 You can change the bridge priority numbe r in the AT-S82 management software. You can designate which switch on your network you want as the root bridge by giving it the lowe st bridge priority number. You might also consider which bridge should f unc tion as the backup root bridge in the event you need[...]

Chapter 8: Spann ing Tree Protocol (STP) 64 a bridge participating in STP has a cost associate d with it. The cost of a port on a bridge is typically based on port speed. The faster the port, the lower the port cost. The exception to this is the ports on the root bridge, where all ports have a port cost o f 0. Path cost is simply the sum of the por[...]

AT-S82 Management Software Use r’s Guide 65 trunk. You cannot set the port cost manually. Port Priority If two paths have the same port cost, the bridges must select a p referred path. In some instances this can invo lve the use of the port priority parameter. This parameter is used as a tie breake r when two paths have the same cost. The range f[...]

Chapter 8: Spann ing Tree Protocol (STP) 66 change has occurred, especially if it is a large network. If a topology change is made before all bridges have been notified, a temporary data loop could occur, and that could a dversely impact network performance. To forestall the formation of temporary data loops during topology changes, a port d esigna[...]

AT-S82 Management Software Use r’s Guide 67 Point-to-Point and Edge Ports Note This section applies only to RSTP. Part of the task of configu ring RSTP is defining the port types on the bridge. This relates to the device(s) connected to the port. With th e port types defined, RSTP can reconfigu re a network much quicker than STP when a change in [...]

Chapter 8: Spann ing Tree Protocol (STP) 68 Figure 26. Edge Port A port can be both a point-to-point and an edge port at the same time. It operates in full-duplex and has no ST P or RSTP devices co nnected to it. Figure 27 illustrates a port functioning a s both a point-to-point and e dge port. Figure 27. Point-to -Point and Edge Port Determining w[...]

AT-S82 Management Software Use r’s Guide 69 If you decide to activate spanning tr ee on the switch, there is no reason not to activate RSTP on an AT-GS950/8 WebSmart switch eve n when all other switches are running STP. The switch ca n combine its RSTP with the STP of the other switches. The switch monitors the traffic on each port for BPDU packe[...]

Chapter 8: Spann ing Tree Protocol (STP) 70 information on tagged and untagged ports, refer to Chapter 6, “VLANs” on page 41.)[...]

AT-S82 Management Software Use r’s Guide 71 Configuring Spanning Tree To define the spanning tree se ttings at the switch level, pe rform the following procedure: 1. From the main menu, select STP Global Settings . The Switch S panning T ree Settings p age is shown in Figure 29. Figure 29. Switch Spanning Tree Sett ings Page 2. From the STP Vers [...]

Chapter 8: Spann ing Tree Protocol (STP) 72 When you select a value for maximum age, observe the followin g rules: MaxAge must be greater than (2 x (HelloT ime + 1)). MaxAge must be less than (2 x (ForwardingDelay - 1)). Note The aging time for BPDUs is differ ent fro m the aging time used by the MAC address table. 4. In the Bridge Hello Time field[...]

AT-S82 Management Software Use r’s Guide 73 packet s but forwards them to adja cent switches. This is the default setting. Disabled The switch processes the BPDU packet s. Allied T elesis recommends that you choose t his setting. 10. Click Appl y . T o configure the port s, refer to “Configuring STP Port Settings,” next. 11. To save the setti[...]

Chapter 8: Spann ing Tree Protocol (STP) 74 Configuring STP Port Settings To configure the ST P settings, perform the following proced ure: 1. From the main menu, select STP Port Settings . The STP Port Settings page is shown in Figure 30. Figure 30. STP Port Settings Page 2. From the From and To lists, select the port(s) you want to configure, or [...]

AT-S82 Management Software Use r’s Guide 75 This parameter is u sed as a tie breaker wh en two or more port s are determined to have equal co sts to the root bridge. The range is 0 to 240 in increments of 16. The de fault value is 8 (priority value 128). For a list of the increments , refer to T able 8, “Port Priority V alue Increments” on p [...]

Chapter 8: Spann ing Tree Protocol (STP) 76[...]