Management
Software
AT-S84
User’s Guide
For the AT-9000/24 Layer 2 Gigabit Ethernet Switch
Version 1.1.1
613-000368 Rev. C
Download from Www.Somanuals.com. All Manuals Search And Download.
Contents
Preface ............................................................................................................................................................ 13
Sales or Corporate Information.................................................................................................................. 15
Chapter 1: Overview ...................................................................................................................................... 17
Section I: Using the Menus Interface ......................................................................23
Chapter 2: Getting Started with the Menus Interface ................................................................................. 25
Chapter 3: Basic Switch Parameters ........................................................................................................... 31
Disabling or Enabling the Telnet Server........................................................................................................... 43
Pinging a Remote System................................................................................................................................ 52
Viewing the System Log................................................................................................................................... 55
Chapter 4: SNMP ........................................................................................................................................... 59
Default SNMP Community Strings............................................................................................................. 61
Changing the Default SNMP Community Names............................................................................................. 64
3
Download from Www.Somanuals.com. All Manuals Search And Download.
Contents
Enabling or Disabling Trap Receivers ........................................................................................................65
Modifying a Trap Receiver..........................................................................................................................66
Deleting a Trap Receiver............................................................................................................................67
Chapter 5: Port Configuration .......................................................................................................................69
Displaying the Port Parameters ........................................................................................................................70
Enabling or Disabling a Port .............................................................................................................................72
Setting a Port’s Speed and Duplex Mode.........................................................................................................73
Changing the Flow Control Setting ...................................................................................................................75
Changing the Back Pressure Setting ................................................................................................................76
Displaying Port Statistics ..................................................................................................................................77
Chapter 6: Port Trunking ...............................................................................................................................81
Port Trunking Overview ....................................................................................................................................82
Static Port Trunk Overview.........................................................................................................................82
Port Trunking Guidelines............................................................................................................................83
LACP Trunks.....................................................................................................................................................84
LACP Trunk Status.....................................................................................................................................84
LACP Port Priority Parameter.....................................................................................................................85
LACP Trunk Guidelines..............................................................................................................................86
Setting Up a Port Trunk ....................................................................................................................................88
Creating a Port Trunk .................................................................................................................................88
Modifying a Port Trunk ...............................................................................................................................90
Enabling or Disabling a Port Trunk.............................................................................................................91
Setting Up an LACP Trunk................................................................................................................................92
Creating an LACP Trunk ............................................................................................................................92
Configuring the LACP Port Priority.............................................................................................................93
Verifying the LACP Group Settings ............................................................................................................94
Disabling an LACP Trunk ...........................................................................................................................95
Chapter 7: Port Mirroring ..............................................................................................................................97
Port Mirroring Overview ....................................................................................................................................98
Configuring Port Mirroring.................................................................................................................................99
Enabling or Disabling Port Mirroring ...............................................................................................................101
Chapter 8: Virtual LANs and GVRP ............................................................................................................103
VLAN Features ...............................................................................................................................................104
Increased Performance ............................................................................................................................104
Improved Manageability ...........................................................................................................................104
Increased Security....................................................................................................................................104
VLAN Overview...............................................................................................................................................106
VLAN Name..............................................................................................................................................106
VLAN Identifier .........................................................................................................................................106
Port VLAN Identifier..................................................................................................................................106
VLAN Port Members.................................................................................................................................106
Tagged Port Members .......................................................................................................................107
Untagged Port Members....................................................................................................................107
Incoming and Outgoing Tagged and Untagged Frames ..........................................................................107
Incoming Frames ...............................................................................................................................107
Outgoing Frames ...............................................................................................................................108
Guidelines for Creating a VLAN ...............................................................................................................108
Untagged VLAN........................................................................................................................................109
Tagged VLAN Example............................................................................................................................111
Working with VLANS.......................................................................................................................................113
Creating a VLAN.......................................................................................................................................113
Configuring the Port PVID ........................................................................................................................116
Displaying the VLANs...............................................................................................................................117
4
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Adding or Removing a Tagged Port in a VLAN................................................................................. 119
GVRP Overview....................................................................................................................................... 122
Enabling or Disabling GVRP.................................................................................................................... 123
Chapter 9: Quality of Service (QoS) ........................................................................................................... 125
Mapping CoS Priorities to Egress Queues..................................................................................................... 129
Chapter 10: IGMP Snooping ....................................................................................................................... 137
Configuring IGMP........................................................................................................................................... 140
Viewing the Multicast Groups......................................................................................................................... 142
Chapter 11: Rapid Spanning Tree Protocol (RSTP) ................................................................................. 145
RSTP Overview.............................................................................................................................................. 146
Port Priority........................................................................................................................................ 148
Hello Time and Bridge Protocol Data Units (BPDUs)........................................................................ 149
Point-to-Point and Edge Ports........................................................................................................... 149
Mixed STP and RSTP Networks.............................................................................................................. 151
Rapid Spanning Tree and VLANs............................................................................................................ 152
Enabling or Disabling RSTP........................................................................................................................... 153
Configuring RSTP Port Settings..................................................................................................................... 159
Chapter 12: 802.1x Network Access Control ............................................................................................ 167
Configuring 802.1x Network Access Control.................................................................................................. 174
Chapter 13: RADIUS Authentication Protocol .......................................................................................... 179
RADIUS Overview.......................................................................................................................................... 180
RADIUS Implementation Guidelines........................................................................................................ 180
Configuring the RADIUS Server..................................................................................................................... 181
Chapter 14: Broadcast Storm Control ....................................................................................................... 185
Chapter 15: Working With System Files .................................................................................................... 189
5
Download from Www.Somanuals.com. All Manuals Search And Download.
Contents
Uploading or Downloading a Configuration File..............................................................................................193
Uploading the Configuration File ..............................................................................................................193
Downloading a Configuration File.............................................................................................................195
Section II: Using the Web Browser Interface .......................................................197
Chapter 16: Starting a Web Browser Management Session ....................................................................199
Establishing a Remote Connection to Use the Web Browser Interface..........................................................200
Web Browser Tools.........................................................................................................................................203
Quitting a Web Browser Management Session ..............................................................................................204
Chapter 17: Basic Switch Parameters .......................................................................................................205
Configuring an IP Address, Subnet Mask and Gateway Address...................................................................206
Enabling and Disabling the DHCP Client........................................................................................................208
Configuring System Administration Information..............................................................................................209
Setting the User Interface Configuration.........................................................................................................211
Enabling or Disabling the Web Server ............................................................................................................214
Configuring SNTP...........................................................................................................................................216
Viewing System Information ...........................................................................................................................217
Rebooting a Switch .........................................................................................................................................219
Pinging a Remote System ..............................................................................................................................220
Viewing the System Log .................................................................................................................................222
Returning the AT-S84 Management Software to the Factory Default Values.................................................224
Chapter 18: Port Configuration ...................................................................................................................225
Viewing and Configuring Multiple Ports ..........................................................................................................226
Viewing and Configuring a Single Port ...........................................................................................................229
Displaying Port Statistics ................................................................................................................................232
Chapter 19: SNMP ........................................................................................................................................235
Enabling or Disabling the SNMP Agent ..........................................................................................................236
Changing the Default SNMP Community Names ...........................................................................................237
Working with Trap Receivers ..........................................................................................................................238
Adding and Enabling a Trap Receiver......................................................................................................238
Disabling a Trap Receiver ........................................................................................................................238
Deleting a Trap Receiver..........................................................................................................................238
Chapter 20: Port Trunking ...........................................................................................................................239
Setting Up a Port Trunk ..................................................................................................................................240
Creating a Port Trunk ...............................................................................................................................240
Enabling or Disabling a Port Trunk...........................................................................................................241
Setting Up an LACP Trunk..............................................................................................................................242
Creating an LACP Trunk ..........................................................................................................................242
Configuring the LACP Port Priority...........................................................................................................242
Verifying the LACP Group Settings ..........................................................................................................243
Disabling an LACP Trunk .........................................................................................................................244
Chapter 21: Port Mirroring ..........................................................................................................................245
Configuring Port Mirroring...............................................................................................................................246
Disabling Port Mirroring ..................................................................................................................................247
Chapter 22: Virtual LANs .............................................................................................................................249
Creating a VLAN.............................................................................................................................................250
Configuring the PVID of Untagged Ports ........................................................................................................252
Displaying the VLANs .....................................................................................................................................255
Modifying a VLAN ...........................................................................................................................................256
6
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Deleting a VLAN............................................................................................................................................. 258
Chapter 23: Quality of Service (QoS) ......................................................................................................... 261
Mapping CoS Priorities to Egress Queues..................................................................................................... 262
Chapter 24: IGMP ......................................................................................................................................... 267
Configuring IGMP........................................................................................................................................... 268
Chapter 25: RSTP ........................................................................................................................................ 271
Configuring RSTP Port Settings..................................................................................................................... 274
Chapter 26: 802.1x Network Access Control ............................................................................................ 281
Configuring 802.1x Network Access Control.................................................................................................. 282
Chapter 27: RADIUS Authentication Protocol .......................................................................................... 285
Chapter 28: Broadcast Storm Control ....................................................................................................... 287
Chapter 29: Working with System Files .................................................................................................... 289
Chapter 30: Getting Started with the Command Line Interface .............................................................. 297
Privileged EXEC Command Mode........................................................................................................... 301
Port Mirroring Example...................................................................................................................... 304
Appendix A: AT-S84 Default Settings ........................................................................................................ 311
System IP Configuration Default Settings................................................................................................ 313
7
Download from Www.Somanuals.com. All Manuals Search And Download.
Contents
Port Configuration Default Settings.................................................................................................................315
Quality of Service............................................................................................................................................316
IGMP Snooping Default Settings ....................................................................................................................317
RSTP Default Settings....................................................................................................................................318
802.1x Network Access Control Default Settings ...........................................................................................319
RADIUS Server Default Settings ....................................................................................................................320
Broadcast Storm Control Default Settings ......................................................................................................321
Index ..............................................................................................................................................................323
8
Download from Www.Somanuals.com. All Manuals Search And Download.
Figures
Figure 1. Connecting the Management Cable to the Console Port .....................................................................................26
Figure 2. Login Menu...........................................................................................................................................................27
Figure 3. Main Menu............................................................................................................................................................27
Figure 4. Basic Switch Configuration Menu.........................................................................................................................32
Figure 5. System IP Configuration Menu.............................................................................................................................33
Figure 6. System Admin. Configuration Menu.....................................................................................................................36
Figure 7. User Interface Configuration Menu.......................................................................................................................38
Figure 8. SNTP Configuration Menu....................................................................................................................................44
Figure 9. Time Zone Configuration Menu............................................................................................................................45
Figure 10. General Information Menu..................................................................................................................................47
Figure 11. Switch Tools Configuration Menu.......................................................................................................................50
Figure 12. System Reboot Menu.........................................................................................................................................51
Figure 13. Ping Execution Menu .........................................................................................................................................52
Figure 14. Ping Results .......................................................................................................................................................54
Figure 15. System Log Menu ..............................................................................................................................................55
Figure 16. SNMP Configuration Menu.................................................................................................................................63
Figure 17. Port Configuration Menu.....................................................................................................................................70
Figure 18. Statistics Menu...................................................................................................................................................77
Figure 19. Static Port Trunk Example..................................................................................................................................82
Figure 20. LACP Trunk Example.........................................................................................................................................84
Figure 21. Advanced Switch Configuration Menu................................................................................................................88
Figure 22. Trunk Configuration Menu..................................................................................................................................89
Figure 23. LACP Port Priority Menu ....................................................................................................................................93
Figure 24. LACP Group Status Menu..................................................................................................................................95
Figure 25. Port Mirroring Menu............................................................................................................................................99
Figure 26. Untagged VLAN ...............................................................................................................................................109
Figure 27. Tagged VLAN...................................................................................................................................................111
Figure 28. VLAN Management Menu................................................................................................................................114
Figure 29. VLAN Creation Menu........................................................................................................................................115
Figure 30. Config VLAN Member Menu.............................................................................................................................118
Figure 31. GVRP Example ................................................................................................................................................122
Figure 32. Quality of Service Configuration Menu.............................................................................................................129
Figure 33. Traffic Class Configuration Menu .....................................................................................................................130
Figure 34. Port Priority Configuration Menu ......................................................................................................................133
Figure 35. IGMP Configuration Menu................................................................................................................................140
Figure 36. MAC Address DIsplayed on IGMP Configuration Menu...................................................................................143
Figure 37. View Group Members Menu.............................................................................................................................143
Figure 38. Point-to-Point Ports ..........................................................................................................................................150
Figure 39. Edge Port .........................................................................................................................................................151
Figure 40. Point-to-Point and Edge Port............................................................................................................................151
Figure 41. VLAN Fragmentation........................................................................................................................................152
Figure 42. RSTP Configuration Menu................................................................................................................................153
Figure 43. RSTP Basic Port Configuration Menu ..............................................................................................................159
Figure 44. RSTP Advanced Port Configuration Menu.......................................................................................................162
Figure 45. Topology Information Menu..............................................................................................................................164
Figure 46. Example of the Authenticator Role...................................................................................................................170
Figure 47. Authentication Across Multiple Switches..........................................................................................................173
Figure 48. Port Based Access Control Configuration Menu ..............................................................................................174
Figure 49. RADIUS Server Configuration Menu................................................................................................................181
Figure 50. Storm Control Configuration Menu...................................................................................................................187
9
Download from Www.Somanuals.com. All Manuals Search And Download.
Figures
Figure 51. Software Upgrade Menu (1 of 2) ......................................................................................................................191
Figure 52. Software Upgrade Menu (2 of 2) ......................................................................................................................191
Figure 53. Configuration File Upload/Download Menu ......................................................................................................194
Figure 54. TFTP Configuration File Upload/Download Menu ............................................................................................194
Figure 55. Entering a Switch’s IP Address in the URL Field..............................................................................................200
Figure 56. AT-S84 Login Dialog Box .................................................................................................................................201
Figure 57. Home Page for the AT-9000/24 Gigabit Ethernet Switch .................................................................................201
Figure 58. IP Configuration Page.......................................................................................................................................206
Figure 59. Administration Configuration Page ...................................................................................................................209
Figure 60. User Interface Page..........................................................................................................................................211
Figure 61. SNTP Configuration Page ................................................................................................................................216
Figure 62. Switch Information Page...................................................................................................................................217
Figure 63. System Reboot Configuration Page .................................................................................................................219
Figure 64. Ping Test Configuration Page...........................................................................................................................220
Figure 65. Ping Test Results Page ....................................................................................................................................221
Figure 66. System Log Page .............................................................................................................................................222
Figure 67. Port Configuration Page ...................................................................................................................................226
Figure 68. Configuration of Port Page ...............................................................................................................................229
Figure 69. Statistics Page..................................................................................................................................................232
Figure 70. SNMP Configuration Page................................................................................................................................237
Figure 71. Trunk Configuration Page.................................................................................................................................240
Figure 72. LACP Port Priority Page ...................................................................................................................................243
Figure 73. LACP Group Status Page.................................................................................................................................243
Figure 74. Port Mirroring Page...........................................................................................................................................246
Figure 75. Create VLAN Page...........................................................................................................................................250
Figure 76. PVID Page........................................................................................................................................................253
Figure 77. VLAN Configuration - Members Page ..............................................................................................................255
Figure 78. VLAN Information Page....................................................................................................................................256
Figure 79. Modify VLAN Page ...........................................................................................................................................257
Figure 80. Traffic Class Configuration Page......................................................................................................................262
Figure 81. Port Priority Configuration Page .......................................................................................................................265
Figure 82. IGMP Snooping Page.......................................................................................................................................268
Figure 83. IGMP Snooping - Group Members Page..........................................................................................................269
Figure 84. Rapid Spanning Tree Configuration Page........................................................................................................272
Figure 85. RSTP Basic Port Configuration Page...............................................................................................................274
Figure 86. RSTP Advanced Port Configuration Page........................................................................................................276
Figure 87. Designated Topology Information Page ...........................................................................................................278
Figure 88. 802.1x Configuration Page...............................................................................................................................282
Figure 89. RADIUS Configuration Page ............................................................................................................................286
Figure 90. Broadcast Storm Control Page.........................................................................................................................288
Figure 91. Image Upgrade Page........................................................................................................................................290
Figure 92. Configuration File Upload/Download Page.......................................................................................................292
Figure 93. Main Menu........................................................................................................................................................307
10
Download from Www.Somanuals.com. All Manuals Search And Download.
Tables
Table 1. Menus Interface Operations .................................................................................................................................28
Table 2. Default Mappings of IEEE 802.1p Priority Levels to Egress Port Priority Queues .............................................127
Table 3. RSTP Auto-Detect Port Costs ............................................................................................................................148
Table 4. RSTP Auto-Detect Port Trunk Costs ..................................................................................................................148
Table 5. Port Priority Value Increments ............................................................................................................................149
Table 6. RSTP Point-to-Point Status ................................................................................................................................163
Table 7. RSTP Point-to-Point Status ................................................................................................................................276
Table 8. Command Modes ...............................................................................................................................................299
Table 9. User EXEC Command Mode Commands ..........................................................................................................300
Table 10. Privileged EXEC Command Mode Commands ................................................................................................301
Table 11. Global Configuration Command Mode Commands ..........................................................................................301
Table 12. Interface Configuration Command Mode Commands ......................................................................................303
Table 13. VLAN Configuration Command Mode Commands ...........................................................................................305
Table 14. Command Line Syntax Conventions ................................................................................................................308
11
Download from Www.Somanuals.com. All Manuals Search And Download.
Tables
12
Download from Www.Somanuals.com. All Manuals Search And Download.
Preface
This guide contains instructions on how to use the AT-S84 management
software to manage and monitor the AT-9000/24 Gigabit Ethernet switch.
The AT-S84 management software has three management interfaces:
menus, web browser, and CLI. You access the menus and CLI interfaces
through the console port on the switch or through Telnet, and the web
browser interface from any management workstation on your network that
has a web browser application. For background information on the
management interfaces, refer to Chapter 1, “Overview” on page 17.
This preface contains the following sections:
13
Download from Www.Somanuals.com. All Manuals Search And Download.
Preface
Where to Find Web-based Guides
The installation and user guides for all Allied Telesis products are
available in portable document format (PDF) on our web site at
www.alliedtelesis.com. You can view the documents online or download
them onto a local workstation or server.
14
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Contacting Allied Telesis
This section provides Allied Telesis contact information for technical
support as well as sales and corporate information.
Online Support You can request technical support online by accessing the Allied Telesis
Knowledge Base to submit questions to our technical support staff and
review answers to previously asked questions.
Email and For Technical Support via email or telephone, refer to the Support &
Telephone
Support
Warranty To sign up for a warranty on your product, refer to the Allied Telesis web
site: http://alliedtelesis.com/support/warranty.
Returning Products for return or repair must first be assigned a return materials
authorization (RMA) number. A product sent to Allied Telesis without an
RMA number will be returned to the sender at the sender’s expense.
Products
To obtain an RMA number, contact the Allied Telesis Technical Support
group at our web site: http://alliedtelesis.com/support/rma. Select your
country from the list displayed on the website. Then select the appropriate
menu tab.
Sales or You can contact Allied Telesis for sales or corporate information through
your country, select Contact Us -> Worldwide Contacts.
Corporate
Information
Management New releases of management software for our managed products are
available from either of the following Internet sites:
Software Updates
To download new software from the Allied Telesis FTP server from your
workstation’s command prompt, you must have FTP client software.
Additionally, you must log in to the server. The user name is “anonymous”
and your email address is the password.
15
Download from Www.Somanuals.com. All Manuals Search And Download.
Preface
16
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 1
Overview
This chapter provides an overview of the AT-S84 management software
for the AT-9000/24 Gigabit Ethernet switch. This chapter describes the
different methods for accessing the software and the management access
levels. This chapter contains the following sections:
17
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 1: Overview
Management Overview
The AT-S84 management software allows you to view and adjust the
operating parameters of the AT-9000/24 Gigabit Ethernet switch. Here are
a few examples of the functions that you can perform with the
management software:
ˆ Enable and disable ports
ˆ Configure a port’s speed and duplex mode
ˆ Create port trunks
ˆ Configure a port mirror
ˆ Configure Quality of Service (QoS)
ˆ Create and tagged virtual LANs
ˆ Configure 802.1x network access control
The AT-S84 management software is preinstalled on the switch with
default settings for all of the switch’s operating parameters. You do not
have to manage the switch if the default settings are adequate for your
network. Instead, you can use the device as an unmanaged switch by
connecting it to your network, as explained in the hardware installation
guide, and powering on the unit.
Note
The default settings for the management software are listed in
To actively manage the switch and adjust its operating parameters, you
must connect to an AT-9000/24 Gigabit Ethernet switch and access the
switch’s AT-S84 management software. There are two ways to connect to
the switch:
ˆ Locally
ˆ Remotely
Depending upon the method you choose, specific AT-S84 management
software interfaces are available. When you have a local connection, you
can use the menus (described in Section I of this guide) or the command
line interface (CLI) (described in Section III). With a remote connection
you can use the menus, CLI, and web browser interfaces, or a third-party
network management application. (The web browser interface is
described in Section II).
The following sections in this chapter briefly describe each type of
management session.
18
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S81 Management Software User’s Guide
Local Connection
To establish a local connection with a switch, you connect a terminal or a
PC with a terminal emulator program to the terminal port on the front of the
switch using the management cable included with the unit. This type of
connection is referred to as “local” because you must be physically close
to the switch, such as in the wiring closet where the switch is located.
Note
For instructions on how to start a local management session, refer to
With a local connection, you can manage the switch using the menus or
CLI.
A switch does not need an Internet Protocol (IP) address for you to
manage it locally. You can start a local management session on a switch
at any time. It does not interfere with the forwarding of network packets by
the device.
19
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 1: Overview
Remote Connection
You can use any management station on your network that has the Telnet
application, an SNMP manager, or as web browser to manage an
AT-9000/24 Gigabit Ethernet switch. These are referred to as remote
connections.
In order for you to manage a switch using a remote connection, the switch
must have an IP address and subnet mask. To manually assign an IP
address, refer to “Configuring the IP Address, Subnet Mask, and Gateway
Address” on page 32. To configure the switch to obtain its IP configuration
page 35. The initial assignment of an IP address must be made through a
local management session.
For instructions on how to start a remote management session to use the
web browser interface, refer to “Establishing a Remote Connection to Use
Using an SNMP You can use the Simple Network Management Protocol (SNMP) to run a
network management application such as AT-View to manage the switch
through a remote connection. A familiarity with how to use management
information base (MIB) objects is necessary for this type of management.
Network
Management
Application
The AT-S84 management software supports the following MIBs:
ˆ SNMP MIB-II (RFC 1213)
ˆ Bridge MIB (RFC 1493)
ˆ Remote Network MIB (RFC 1757)
ˆ Allied Telesis managed switch MIB
You must download the Allied Telesis managed switch MIB (atiswitch.mib)
file from the Allied Telesis web site and compile the files with your SNMP
application. For compilation instructions, refer to your third-party
application’s documentation. Refer to Chapter 4, “SNMP” on page 59 for
information about how to configure SNMP on the switch.
20
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S81 Management Software User’s Guide
Management Access Level
The AT-S84 management software has one level of management access:
manager. When you log in as a manager, you can view and configure all of
a switch’s operating parameters. You log in as a manager by entering the
appropriate username and password when you start an AT-S84
management session. The default username is “manager” and the default
password is “friend”.
21
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 1: Overview
22
Download from Www.Somanuals.com. All Manuals Search And Download.
Section I
Using the Menus Interface
The chapters in this section explain how to manage the switch using the
menus interface of the AT-S84 management software. The chapters
include:
Note
The web browser interface is described in Section II, “Using the Web
Browser Interface” on page 197, and the command line interface is
described in Section III, “Using the Command Line Interface” on
Section I: Using the Menus Interface
23
Download from Www.Somanuals.com. All Manuals Search And Download.
24
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 2
Getting Started with the Menus
Interface
This chapter provides information and instructions on how to access the
menus interface of the AT-S84 management software by starting a local
management session. This chapter contains the following sections:
Section I: Using the Menus Interface
25
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 2: Getting Started with the Menus Interface
Starting a Local Management Session
You establish a local management session with the AT-9000/24 Gigabit
Ethernet switch by connecting a terminal or personal computer with a
terminal emulation program to the RS-232 console port on the front panel
of the switch.
Note
You do not need to assign an IP address to the switch to manage
the unit from a local management session.
To start a local management session, perform the following procedure:
1. Connect one end of the management cable included with the switch to
the console port on the AT-9000/24 Gigabit Ethernet switch, as shown
801
Figure 1. Connecting the Management Cable to the Console Port
2. Connect the other end of the cable to the RS-232 port on a terminal or
PC with a terminal emulator program.
3. Configure the terminal or terminal emulator program as follows:
ˆ Baud per second: 9600
ˆ Data bits: 8
ˆ Stop bits: 1
ˆ Flow control: None
Note
These settings are for a DEC VT100 or ANSI terminal, or an
equivalent terminal emulation program. You cannot change this.
26
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The Login Menu is shown in Figure 2.
==============================================================
AT-9000/24 Management System
Local - Console
Allied Telesis International Corp.
Copyright 2007
==============================================================
Login Menu
Login:
Figure 2. Login Menu
4. Enter the manager login name and press Return. The default name is
“manager”.
You are prompted for a password.
5. Enter the manager password. The default password is “friend”.
Note
To change the login name or password, refer to “Setting the User
AT-9000/24 Local Management System
Enter the character in square brackets to select option
Main Menu
[G]eneral Information
[B]asic Switch Configuration
[A]dvanced Switch Configuration
Switch [T]ools
[S]tatistics
[C]ommand Line Interface
[Q]uit
Command>
Figure 3. Main Menu
Section I: Using the Menus Interface
27
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 2: Getting Started with the Menus Interface
Using the Menus Interface
If you are using a DEC VT00 or ANSI (the default) terminal configuration,
select menu options.
Table 1. Menus Interface Operations
When directed to
You must
Make a menu selection
Type the menu option letter enclosed
in brackets, such as typing P to select
[P]ort Configuration.
Enter information (for
example, entering a port
number)
Type the information and press Enter.
Return to previous menu
Type Q for Quit to previous menu.
When you enter a letter to select a field in which you can enter a value, a
message is displayed. For example:
Enter new password>
The “>” symbol indicates that you can enter a new value for the parameter
or change the existing value. After you have entered a value, press Enter.
Changes are immediately activated on the AT-9000/24 Gigabit Ethernet
switch.
Note
The web browser interface is described in Section II, “Using the Web
Browser Interface” on page 197, and the command line interface is
described in Section III, “Using the Command Line Interface” on
28
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Quitting from a Local Management Session
To quit a local management session, return to the Main Menu and type Q
for Quit. When you are finished managing the switch, make sure to exit
from a management session. Quitting from a local session prevents
unauthorized changes to the switch’s configuration if you leave your
workstation unattended.
Note
A local management session automatically times out if there is no
management activity during a pre-defined length of time referred to
as the timeout period. The timeout feature is intended to protect the
parameter settings on the switch from unauthorized changes should
you leave your management station unattended during a
management session. The default timeout value is 10 minutes. To
change the timeout default value, refer to “Setting the User Interface
Section I: Using the Menus Interface
29
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 2: Getting Started with the Menus Interface
30
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Configuring the IP Address, Subnet Mask, and Gateway Address
This procedure explains how to manually assign an IP address, subnet
mask, and gateway address to the switch. Before performing the
procedure, note the following:
ˆ An IP address and subnet mask are not required for normal network
operations of the switch. Values for these parameters are only required
if you want to remotely manage the device with a web browser.
ˆ A gateway address is only required if you want to remotely manage
the device from a remote management station that is separated from
the switch by a router.
ˆ To configure the switch to automatically obtain its IP configuration from
a DHCP server on your network, go to “Enabling and Disabling the
To set the switch’s IP configuration, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
AT-9000/24 Local Management System
Main Menu -> Basic Switch Configuration Menu
System [A]dministration Configuration
System [I]P Configuration
S[N]MP Configuration
[P]ort Configuration
[U]ser Interface Configuration
Rapid [S]panning Tree Configuration
Storm [C]ontrol Configuration
SN[T]P Configuration
[Q]uit to previous menu
Command>
Figure 4. Basic Switch Configuration Menu
32
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
2. From the Basic Switch Configuration Menu, type I to select System IP
Configuration.
The System IP Configuration Menu is shown in Figure 5.
AT-9000/24 Local Management System
Basic Switch Configuration -> System IP Configuration Menu
MAC Address: 00:06:5H:B2:65:84
IP Address: 0.0.0.0
Subnet Mask: 0.0.0.0
Gateway:
DHCP Mode:
0.0.0.0
Disabled
----------------------- <COMMAND> -----------------------------
Set [I]P Address
Set Subnet [M]ask
Set Default [G]ateway
Enable/Disable [D]HCP Mode
[Q]uit to previous menu
Command>
Figure 5. System IP Configuration Menu
The top portion of the menu displays the current IP address, subnet
mask, and gateway address for the switch. The menu also displays the
switch’s MAC address. The MAC address cannot be changed. The
menu also displays the current status of the DHCP client on the switch.
The Enable/Disable DHCP Mode option is described in “Enabling and
3. To set the switch’s IP address, do the following:
a. Type I to select Set IP Address.
The following prompt is displayed:
Enter new IP address>
b. Type the IP address for the switch and press Enter.
4. To set the switch’s subnet mask, do the following:
a. Type M to select Set Subnet Mask.
The following prompt is displayed:
Enter new subnet mask>
Section I: Using the Menus Interface
33
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
b. Type the subnet mask for the switch and press Enter.
5. To set the switch’s gateway address, do the following:
a. Type G to select Set Default Gateway.
The following prompt is displayed:
Enter new gateway IP address>
b. Type the gateway IP address for the switch and press Enter.
34
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enabling and Disabling the DHCP Client
This procedure explains how to activate and deactivate the DHCP client
on the switch. When the client is activated, the switch obtains its IP
configuration, such as its IP address and subnet mask, from a DHCP
server on your network. Before performing the procedure, note the
following:
ˆ An IP address and subnet mask are not required for normal network
operations of the switch. Values for these parameters are only required
if you want to remotely manage the device with a web browser.
ˆ The DHCP client is disabled by default on the switch.
ˆ The DHCP client does not support BOOTP servers.
To activate or deactivate the DHCP client on the switch, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type I to select System IP
Configuration.
3. Type D to select Enable/Disable DHCP Mode.
The following prompt is displayed:
Enable or Disable DHCP mode (E/D)>
4. Type E to select Enable or D to select Disable.
If you enable the client, it immediately begins to send queries to the
DHCP server. It continues to send queries until it receives a response.
Section I: Using the Menus Interface
35
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Configuring System Administration Information
This section explains how to assign a name to the switch, as well as
specify the location of the switch and the name of the switch’s
administrator. Entering this information is optional.
To set a switch’s administration information, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type A to select System
Administration Information.
AT-9000/24 Local Management System
Basic Switch Configuration -> System Admin. Configuration Menu
Description: AT-9000/24
ObjectID:
Name:
1.3.6.1.4.1.207.1.4
Location:
Contact:
----------------------- <COMMAND> -----------------------------
Set System [N]ame
Set System [L]ocation
Set System [C]ontact Information
[Q]uit to previous menu
Command>
Figure 6. System Admin. Configuration Menu
The Description parameter in the top portion of the menu displays the
model name of the switch. The System Object ID parameter is the
numeric ID of the switch. You cannot change these parameters.
3. To set the system’s name, do the following:
a. Type N to select Set System Name.
The following prompt is displayed:
36
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enter system name>
b. Type a name for the switch (for example, Sales). The name is
optional and can contain up to 50 characters.
Note
Allied Telesis recommends that you assign names to the switches.
Names can help you identify the switches when you manage them
and can also help you avoid performing a configuration procedure
on the wrong switch.
4. To enter the system’s location, do the following:
a. Type L to select Set System Location.
The following prompt is displayed:
Enter system location>
b. Type information to describe the location of the switch (for
instance, Third Floor). The location is optional and can contain up
to 50 characters.
5. To enter the administrator’s name, do the following:
a. Type C to select Set System Contact Information.
The following prompt is displayed:
Enter system contact>
b. Type the name of the network administrator responsible for
managing the switch. The contact name is optional and can
contain up to 50 characters.
Section I: Using the Menus Interface
37
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Setting the User Interface Configuration
This procedure explains how to adjust the user interface and security
features on the switch. With this procedure you can change various
settings that control user access to the switch.
To set the switch’s user interface configuration, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type U to select User
Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7.
AT-9000/24 Local Management System
Basic Switch Configuration -> User Interface Configuration Menu
Console UI Idle Timeout: 5 Min.
Telnet UI Idle Timeout: 5 min.
Telnet Server:
SNMP Agent:
Web Server:
User Name:
Enabled
Enabled
Enabled
manager
----------------------- <COMMAND> -----------------------------
Set [C]onsole UI Time Out
Set [T]elnet UI Time Out
Enable/Disable Te[l]net Server
Enable/Disable [S]NMP Agent
Change Administrator User [N]ame Enable/Disable [W]eb Server
Change Administrator [P]assword [Q]uit to previous menu
[R]ADIUS Server Configuration
Command>
Figure 7. User Interface Configuration Menu
The web server option is described in “Disabling or Enabling the Web
38
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The SNMP option is described in “Enabling or Disabling the SNMP
The RADIUS Server Configuration option is described Chapter 13,
3. To configure the console UI idle time out parameter, do the following:
a. Type C to select Set Console UI Time Out.
The following prompt is displayed:
Enter console idle timeout>
b. Enter a number for the timeout value. The range is 0 to 60 minutes,
and the default is 5 minutes. A timeout value to 0 causes the switch
to never time out a local management session.
The console UI idle time out parameter specifies the length of time
a local management session can be inactive before the
management software automatically ends it. This feature prevents
unauthorized individuals from configuring the switch if you leave
your management workstation unattended.
This parameter applies to a local management session but not to a
remote SNMP or web management session. An SNMP
management session remains active as long as the network
management application is active. A web browser management
session remains active as long as your web browser is open.
Note
If you select 0, you must always remember to properly log off from a
local management session when you are finished to prevent
blocking future management sessions with the switch.
4. To configure the Telnet UI idle time out parameter, do the following:
a. Type T to select Set Telnet UI Time Out.
The following prompt is displayed:
Enter console idle timeout>
b. Enter a number for the timeout value. The range is 0 to 60 minutes,
and the default is 5 minutes. A timeout value to 0 causes the switch
to never timeout a local management session.
Section I: Using the Menus Interface
39
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
The Telnet UI idle time out parameter specifies the length of time a
remote Telnet management session can be inactive before the
management software automatically ends it. This feature prevents
unauthorized individuals from configuring the switch if you leave
your management workstation unattended.
This parameter applies to a local management session but not to a
remote SNMP or web management session. An SNMP
management session remains active as long as the network
management application is active. A web browser management
session remains active as long as your web browser is open.
5. To change the AT-S84 management login user name, do the
following:
a. Type N to select Change Administrator User Name.
The following prompt is displayed:
Enter current password>
b. Enter the current login password. The management software
prompts you for the password to prevent an unauthorized
individual from changing the login name.
c. Type the new user name and press Enter. The default name is
“manager.” The name can be from 0 to 12 characters. Spaces are
allowed. The login name is case sensitive. Not entering a new
login name deletes the current login name without assigning a new
one.
The new user name appears in the User Field in the top portion of
the menu. You must use the new login user name the next time
you start a local or web browser management session.
6. To change the manager login password, do the following:
a. Type P to select Change Administrator Password.
The following prompt is displayed:
Enter old password>
b. Enter the current manager password and press Enter.
The following prompt is displayed:
Enter new password>
40
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
c. Type the new password and press Enter. The password can be
from 0 to 12 characters. Allied Telesis recommends not using
special characters, such as spaces and exclamation points. The
password is case sensitive. Not entering a new password deletes
the current password without assigning a new one.
The following prompt is displayed:
Retype new password>
d. Retype the new password and press Enter.
You must use the new login password the next time you start a
local or remote 3management session.
Section I: Using the Menus Interface
41
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Disabling or Enabling the Web Server
The AT-S84 management software is shipped with web server software.
The software is available so that you can remotely manage the switch with
a web browser from any management station on your network. (The
instructions for managing a switch with a web browser are described in
The default setting for the web server is enabled,
To disable or enable the web server, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type U to select User
Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7 on page
3. From the User Interface Configuration Menu, type W to select Enable/
Disable Web Server.
The following prompt is displayed:
Enable or Disable Web server (E/D)>
4. Type D to disable the web server or E to enable it.
42
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Disabling or Enabling the Telnet Server
This procedure describes how to enable or disable the Telnet server on
the switch. The default setting for the Telnet server is enabled,
To disable or enable the Telnet server, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type I to select User
Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7 on page
3. From the User Interface Configuration Menu, type L to select Enable/
Disable Telnet Server.
The following prompt is displayed:
Enable or Disable Telnet server (E/D)>
4. Type D to disable the Telnet server or E to enable it.
Section I: Using the Menus Interface
43
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Configuring SNTP
The AT-S84 software is shipped with the client version of the Simple
Network Time Protocol (SNTP). You can configure AT-S84 to obtain the
current time and date from an SNTP or Network Time Protocol (NTP)
server located on your network or on the internet.
SNTP is a reduced version of the NTP. However, the SNTP client software
is interoperable with NTP servers.
To configure SNTP, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type T to select Set SNTP
Server IP.
The SNTP Configuration Menu is shown in Figure 8
AT-9000/24 Local Management System
Basic Switch Configuration -> SNTP Configuration Menu
Time ( HH:MM:SS )
Date ( YYYY/MM/DD) :
:
00:19:58
2006/01/01
SNTP Server IP
SNTP Polling Interval
Time Zone
: Enabled
: Enabled
: GMT (+800:Taipei)
: Disabled
Daylight Saving
----------------------- <COMMAND> -----------------------------
Set SNTP Server I[P]
Set SNTP [I]nterval
S[e]t Daylight Saving
Set Time [Z]one
[Q]uit to previous menu
Command>
Figure 8. SNTP Configuration Menu
3. Configure the SNTP server’s IP address:
a. Type P to select Set SNTP Server IP.
44
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The following prompt is displayed:
Enter new IP address>
b. Type the IP address for the SNTP server you want to use.
4. To set the SNTP interval:
a. Type I to select Set SNTP Interval.
The following prompt is displayed:
Enter Interval Time>
b. Type a number to specify the number of minutes between
occurrences of polling the SNTP server. The range is 1 to 60
minutes and the default is 1 minute.
5. To set the time zone:
a. Type Z to select Set Time Zone.
AT-8000/8POE Local Management System
Switch Tools Configuration -> Time Zone Configuration Menu
Time Zone : (GMT+8:00) Taipei
Daylight Saving : Disabled
Type
----
1
Time Zone
---------
Nation or City
-----------------------------------
Eniwetok,Kwajalein
Midway Islands, Samoa
Hawaii
Alaska
Pacific Time (US & Canada):Tijuana
Arizona
Mountain time (US & Canada)
Central Time (US & Canada)
Mexico City, Tegucigalpa
Saskatchewan
(GMT-12:00)
(GMT-11:00)
(GMT-10:00)
(GMT-09:00)
(GMT-08:00)
(GMT-07:00)
(GMT-07:00)
(GMT-06:00)
(GMT-06:00)
(GMT-06:00)
2
3
4
5
6
7
8
9
10
----------------------------- <COMMAND> ----------------------------------
[N]ext Page
[P]revious Page
[S]et Time Zone
[Q]uit to previous menu
Command>
Figure 9. Time Zone Configuration Menu
Section I: Using the Menus Interface
45
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
b. Scroll through the list of time zones until you find one that matches
your time zone.
c. Type S to choose Set Time Zone.
The following message is prompt is displayed:
Select time zone>
d. Type the number that corresponds to the time zone you want.
If you selected a time zone that observes daylight saving time, the
following prompt is displayed:
Enable or Disable Daylight Saving (E/D)>
e. Type D to disable the daylight saving time or E to enable it.
Note
You must set the time zone in order to display the daylight saving
time option. If the time zone you previously selected is located in
DST area, you can set this anytime.
46
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Viewing Switch Information
To view general information about the switch, perform the following
procedure:
1. From the Main Menu, type G to select General Information.
AT-9000/24 Local Management System
Main Menu -> General Information
System up for : 24min(s), 36sec(s)
Runtime Image : Version 1.0
: Version 1.0
Boot Loader
Hardware Information
Version:
Fixed Baud Rate: 9600bps
Administration Information
Switch Name: Marketing
Switch Location: Fourth Floor
Switch Contact: Ralph
System Address Information
DRAM Size: 16MB
Flash Size: 4 MB
MAC Address:
IP Address:
Subnet Mask:
Gateway:
00:06:5H:B2:65:84
149.35.8.237
255.255.255.0
149.35.8.1
Automatic Network Features
DHCP Mode:
Disabled
Press any key to continue...
Figure 10. General Information Menu
The General Information Menu displays the following information:
System up for
The number of hours, minutes, and seconds since the last reset or
power cycle.
Runtime Image
The version of the runtime software.
Boot Loader
The version of the boot loader software.
Section I: Using the Menus Interface
47
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Hardware Information Section
Version
The hardware version number.
Fixed Baud Rate
The baud rate of the console port. You cannot change this parameter.
DRAM Size
The size of the DRAM, in megabytes.
Flash Size
The size of the flash memory, in megabytes.
Administration Information Section
Switch Name
The name assigned to the switch. To assign the switch a name, refer
Switch Location
Switch Contact
The contact person responsible for managing the switch. To specify
the name of a contact, refer to “Configuring System Administration
System Address Information Section
MAC Address
The MAC address of the switch. You cannot change this information.
System IP Address
The IP address of the switch. Refer to “Configuring the IP Address,
Subnet Mask, and Gateway Address” on page 32 to manually assign
page 35 to activate the DHCP client.
Subnet Mask
The subnet mask for the switch. Refer to “Configuring the IP Address,
Subnet Mask, and Gateway Address” on page 32 to manually assign a
to activate the DHCP client.
Gateway
Default gateway IP address. Refer to “Configuring the IP Address,
Subnet Mask, and Gateway Address” on page 32 to manually assign a
gateway address or “Enabling and Disabling the DHCP Client” on
page 35 to activate the DHCP client.
48
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Automatic Network Features Section
DHCP Mode
The status of the DHCP client on the switch. For information about
setting this parameter, refer to “Enabling and Disabling the DHCP
2. Press any key to return to the previous menu.
Section I: Using the Menus Interface
49
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Rebooting the Switch
This procedure reboots the switch and reloads the AT-S84 management
software from flash memory. You might reboot the device if you believe it
is experiencing a problem. Rebooting the device does not change any of
the device’s parameter settings.
Caution
The switch does not forward network traffic during the reboot
process. Some network traffic may be lost.
To reboot the switch, perform the following procedure:
1. From the Main Menu type T to select Switch Tools.
AT-9000/24 Local Management System
Main Menu -> Switch Tools Configuration Menu
Software [U]pgrade...
[C]onfiguration File Upload/Download...
System [R]eboot
[P]ing Execution
[Q]uit to previous menu
Command>
Figure 11. Switch Tools Configuration Menu
2. From the Switch Tools Configuration Menu, type R to select System
Reboot.
50
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The System Reboot Menu is shown in Figure 12.
AT-9000/24 Local Management System
Main Menu -> System Reboot Menu
Reboot Status:
Reboot Type:
Stop
Normal
---------------------- <COMMAND> ----------------------------
Set Reboot [O]ption
Start [R]eboot Process
[Q]uit to previous menu
Command>
Figure 12. System Reboot Menu
3. From the System Reboot menu, type O to select Set Reboot Option.
The following prompt is displayed:
Select reboot option (F/I/N)>
4. Type N to select Normal.
This reboot type does not change the current configuration.
Note
5. Type R to select Start Reboot Process.
The following prompt is displayed:
Are you sure you want to reboot the system (Y/N)>
6. Type Y to start the reboot process or N to cancel the reboot.
The switch immediately begins to reload the AT-S84 management
software. This process takes approximately one minute to complete.
You can not manage the device during the reboot. After the reboot is
finished, you can log in again if you want to continue to manage the
device.
Section I: Using the Menus Interface
51
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Pinging a Remote System
This procedure instructs the switch to ping a node on your network. This
procedure is useful in determining whether an active link exists between
the switch and another network device. Note the following before
performing the procedure:
ˆ The switch where you are initiating the ping must have an IP address
and subnet mask.
ˆ The device you are pinging must be a member of the Default VLAN.
This means that the port on the switch through which the node is
communicating with the switch must be an untagged or tagged
member of the Default VLAN.
To ping a network device, perform the following procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Configuration Menu, type P to select Ping
Execution.
The Ping Execution Menu is shown in Figure 13.
AT-9000/24 Local Management System
Switch Tools Configuration -> Ping Execution
Target IP Address: 0.0.0.0
Number of Requests: 10
Timeout Value (sec): 3
================Result=================
----------------------- <COMMAND> -----------------------------
Set Target [I]P Address
Set [N]umber of Requests
Set [T]imeout Value
[E]xecute Ping
[S]top Ping
[Q]uit to previous menu
Command>
Figure 13. Ping Execution Menu
52
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
3. Type I to select Set Target IP Address.
The following prompt is displayed:
Enter new target IP address>
4. Type the IP address of the node you want the switch to ping and press
Enter.
5. Type N to select Set Number of Requests.
The following prompt is displayed:
Enter new number of requests>
6. Enter the number of ping requests you want the switch to perform. The
range is 1 to 10. The default is 10.
7. Type T to select Set Timeout Value.
The following prompt is displayed:
Enter new timeout value>
8. Enter the length of time in seconds the switch is to wait for a response
before assuming that a ping has failed. The range is 1 to 5 seconds.
The default is 3 seconds.
9. Type E to select Execute Ping.
The following prompt is displayed:
Execute ping or Clean ping data (E/C)>
10. Type E to execute the ping or C to clear previous ping data before
performing this ping.
Section I: Using the Menus Interface
53
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
Figure 14 shows an example of the results of a ping.
AT-9000/24 Local Management System
Switch Tools Configuration -> Ping Execution
Target IP Address: 149.35.8.33
Number of Requests: 4
Timeout Value (sec): 3
================Result=================
No. 1
No. 2
No. 3
No. 4
20 ms
20 ms
20 ms
20 ms
----------------------- <COMMAND> -----------------------------
Set Target [I]P Address
Set [N]umber of Requests
Set [T]imeout Value
[E]xecute Ping
[S]top Ping
[Q]uit to previous menu
Command>
Figure 14. Ping Results
11. To stop the ping, type S to select Stop Ping.
54
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Viewing the System Log
The system log displays system-level events in the switch, such as logging
in to the management software.
To view the system log, perform the following procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Configuration Menu, type L to select System
Log.
AT-9000/24 Local Management System
Switch Tools Configuration -> System Log Menu
ID Date
Time
L Type
Description
------------------------- --------------------------------------------
1 08/03/2006 08:30:45 I System Switch start
2 08/03/2006 08:30:46 I Console Login from console
3 08/03/2006 08:30:47 I PCFG
4 08/03/2006 08:30:50 I IP
5
Port-3 link-up
DHCP get IP address <192.2.1.23>
----------------------------- <COMMAND> ----------------------------------
[C]lear the Log Entries
[P]revious Page
[N]ext Page
[Q]uit to previous menu
Command>
Figure 15. System Log Menu
The System Log Menu contains a table that displays the following
information:
ID
An identifying number for the event.
Date and Time
The date and time that the event occurred
Section I: Using the Menus Interface
55
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
L
Severity level of the event. The severity levels are:
(I)nformation - Useful information that you can ignore during normal
operation.
(W)arning - An issue that may require a manager’s attention.
(E)rror - Switch operation is severely impaired.
Type
The type provides more information about the event. The possible
types are:
802.1X - An 802.1X event.
CFG - Configuration event.
CLI - CLI login.
Console - A console login by a user.
IP - Change to the IP information.
PCFG - Port configuration.
PoE - PoE configuration or event.
SNTP - SNTP configuration.
STP - Spanning tree.
SwUpg - Software upgrade.
System - General system event.
Telnet - Access via Telnet.
Description
A description of the event.
4. To remove the current log entries, type L to select Clear the Log
Entries.
56
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Returning the AT-S84 Management Software to the Factory Default
Values
This procedure returns all AT-S84 management software parameters to
their default values and deletes all tagged and VLANs on the switch. The
AT-S84 management software default values are listed in Appendix A,
Caution
This procedure causes the switch to reboot. The switch does not
forward network traffic during the reboot process. Some network
traffic may be lost.
To return the AT-S84 management software to the default settings,
perform the following procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Menu, type R to select System Reboot to start
the reboot.
The System Reboot menu is shown in Figure 12 on page 51.
3. Type O to select Set Reboot Option.
The following prompt is displayed:
Select reboot option (F/I/N)>
4. Type F or I to select one of the following:
F (Factory Default)
Resets all switch parameters to the factory default settings, including
IP address, subnet mask, and gateway address.
I (Reset to Defaults Except IP Address)
Resets all switch parameters to the factory default settings, but retains
the IP address, subnet mask, and gateway settings. If the DHCP client
is enabled, it remains enabled after this reset.
Note
Section I: Using the Menus Interface
57
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 3: Basic Switch Parameters
5. Type R to select Start Reboot Process.
The following prompt is displayed:
Are you sure you want to reboot the system (Y/N)>
6. Type Y to start the reboot process.
The switch returns its operating parameters to the default values and
begins to reload the AT-S84 management software. This process
takes approximately one minute to complete. You can not manage the
device during the reboot. After the reboot is finished, you can log in
again if you want to continue to manage the device.
58
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 4: SNMP
SNMP Overview
The Simple Network Management Program (SNMP) is another way for
you to manage the switch. This type of management involves viewing and
changing the management information base (MIB) objects on the device
using an SNMP application program. The AT-S84 management software
supports SNMPv1 and SNMPv2c which is always disabled on the switch.
The procedures in this chapter show you how to create and manage
SNMPv1 and SNMPv2c community strings through which your SNMP
application program at your management workstation can access the
switch’s MIB objects.
To manage a switch using an SNMP application program, you must do the
following:
ˆ Activate SNMP management on the switch. The default setting for
SNMP management is disabled. The procedure for this can be found
ˆ Load the Allied Telesis MIBs for the switch onto your management
workstation containing the SNMP application program. The MIBs are
available from the Allied Telesis web site at www.alliedtelesis.com.
To manage a switch using SNMP, you need to know the IP address of the
switch and at least one of the switch’s community strings. A community
string is a string of alphanumeric characters that gives you access to the
switch.
A community string has several attributes that you can use to control who
can use the string and what the string will allow a network manager to do
on the switch. The community string attributes are defined below:
Community String Name
The SNMP community string is similar to a user ID or password, which
allows access to a network device’s statistics. You must assign a name to
the community string. The name can be from one to eight alphanumeric
characters. Spaces are allowed.
Access Mode
This defines what the community string will allow a network manager to
do. There are two access modes: Read and Read/Write. A community
string with an access mode of Read can only be used to view but not
change the MIB objects on a switch. A community string with a Read/Write
access can be used to both view the MIB objects and change them.
Status
A community string can be enabled, disabled, or deleted. When disabled,
no one can use it to access the switch. You might disable a community
string if you suspect someone is using it for unauthorized access to the
60
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
device. You can enable it again later, or even delete it. When a community
string is enabled, then it is available for use.
Trap Receivers
A trap is a signal sent to one or more management workstations by the
switch to indicate the occurrence of a particular operating event on the
device. There are numerous operating events that can trigger a trap. For
instance, resetting the switch or the failure of a cooling fan are two
examples of occurrences that cause a switch to send a trap to the
management workstations. You can use traps to monitor activities on the
switch.
Trap receivers are the devices, typically management workstations or
servers, that you want to receive the traps sent by the switch. You specify
the trap receivers by their IP addresses. You assign the IP addresses to
the community strings.
Each community string can have up to four trap IP addresses.
It does not matter which community strings you assign your trap receivers.
When the switch sends a trap, it looks at all the community strings and
sends the trap to all trap receivers on all community strings. This is true
even for community strings that have a access mode of only Read.
If you are not interested in receiving traps, then you do not need to enter
any IP addresses of trap receivers.
Default SNMP The AT-S84 management software provides two default community
strings: SNMP Read Community and SNMP Write Community. The read
community string is called “public” and has an access mode of just Read.
The write community string is named “private” and has an access mode of
Community
Strings
write only.
Section I: Using the Menus Interface
61
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 4: SNMP
Enabling or Disabling the SNMP Agent
To disable or enable the SNMP agent, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type U to select User
Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7 on page
3. From the User Interface Configuration Menu, type S to select Enable/
Disable SNMP Agent.
The following prompt is displayed:
Enable or Disable SNMP agent (E/D)>
4. Type D to disable the SNMP agent or E to enable it. The default is
Enabled.
62
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enabling Authentication Traps
To enable SNMP authentication traps, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration menu, type N to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 16.
AT-9000/24 Local Management System
Basic Switch Configuration -> SNMP Configuration Menu
SNMP Read Community: public
SNMP Write Community: private
Trap Authentication: Enabled
SNMP Trap Receivers:
No. Status
--- -----
IP Address
--------------
<empty>
149.35.8.42
<empty>
<empty>
Community
------------------------------------
<empty>
Monitor
<empty>
<empty>
1
2
3
4
Deleted
Enabled
Deleted
Deleted
-----------------------------<COMMAND>--------------------------------------
Set SNMP [R]ead Community
[A]dd SNMP Trap Receiver
set SNMP [W]rite Community
[M]odify SNMP Trap Receiver
Enable/Disable SNMP [T]rap Receiver
[D]elete SNMP Trap Receiver
[E]nable/Disable Authentication Trap
[Q]uit to previous menu
Command>
Figure 16. SNMP Configuration Menu
3. Type E to select Enable/Disable Authentication Trap.
The following prompt is displayed:
Enable or Disable SNMP Authentication Trap (E/D)>
4. Type E to enable SNMP or D to disable SNMP. The default is Enabled.
Section I: Using the Menus Interface
63
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 4: SNMP
Changing the Default SNMP Community Names
To change the names of the default SNMP communities, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration menu, type N to select SNMP
Configuration.
3. Type R to select Set SNMP Read Community.
The following prompt is displayed:
Enter read community name>
4. Type the name of the read community. The default is “public.”
5. Type W to select Set SNMP Write Community.
The following prompt is displayed:
Enter write community name>
6. Type the name of the write community. The default is “private.”
64
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Working with Trap Receivers
This section contains procedures for working with SNMP trap receivers
and includes the following topics:
Adding a Trap You must add a trap receiver before you can enable it.
Receiver
To add a trap receiver, perform the following procedure.
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration menu, type N to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 16 on page 63.
3. Type A to select Add SNMP Trap Receiver.
The following prompt is displayed:
Add SNMP trap receivers->Enter entry number>
4. Enter 1 through 4 for the trap receiver you want to configure.
The following prompt is displayed:
Enter IP address for trap receiver>
5. Enter the IP address of the workstation that you want to receive traps.
The following prompt is displayed:
Enter community name for trap receiver>
6. Enter a name for the workstation that you want to receive traps.
A new trap receiver is automatically enabled.
Enabling or You can disable a trap receiver or enable one that was previously
disabled. To enable or disable a trap receiver, perform the following
procedure:
Disabling Trap
Receivers
1. From the Main Menu, type B to select Basic Switch Configuration.
Section I: Using the Menus Interface
65
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 4: SNMP
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration menu, type N to select SNMP
Configuration.
3. Type T to select Enable/Disable SNMP Trap Receiver.
The following prompt is displayed:
Set SNMP trap receivers status->Enter entry number>
4. Enter the number of the trap receiver you want to enable or disable.
The following prompt is displayed:
Set SNMP trap receivers status->Enter entry number>
5. Enter the number for the trap you want to enable or disable.
The following prompt is displayed:
Enable or Disable SNMP Trap Receiver (E/D)>
Note
The trap receiver must be one whose status is not “deleted.”
6. Type E to enable the trap receiver or D for disable to disable the trap
receiver.
You can also delete a trap receiver, as described in “Deleting a Trap
Modifying a Trap To modify a trap receiver, perform the following procedure.
Receiver
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration menu, type N to select SNMP
Configuration.
3. Type M to select Modify SNMP Trap Receiver.
The following prompt is displayed:
66
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Modify SNMP trap receivers->Enter entry number>
Note
The trap receiver must be one whose status is not “deleted.”
4. Enter the number for the trap you want to modify.
The following prompt is displayed:
Modify trap receiver entry number (I/C/B)>
The options are:
I - Modify the IP address of the trap receiver. To modify only the IP
address, type I and follow the prompts.
C - Modify the community name of the trap receiver. To modify only the
community name, type C and follow the prompts.
B - Modify both the IP address and community name of the trap
receiver. To modify both the IP address and the community name, type
B and follow the prompts.
Deleting a Trap When you delete a trap receiver, all the settings are removed from the
entry in the table. Instead of deleting a trap receiver, you may want to
disable it, as described in “Enabling or Disabling Trap Receivers” on
Receiver
To delete a trap receiver, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration menu, type N to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 16 on page 63.
3. Type D to select Delete SNMP Trap Receiver.
The following prompt is displayed:
Delete SNMP trap receivers->Enter entry number>
4. Type the number of the entry you want to delete.
Section I: Using the Menus Interface
67
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 4: SNMP
68
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 5: Port Configuration
Displaying the Port Parameters
To display the parameter settings for the ports on the switch, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type P to select Port
Configuration.
AT-9000/24 Local Management System
Basic Switch Configuration -> Port Configuration Menu
Back Pressure: Disabled
Port Trunk Type
---- ----- ------
Link Status
---- ------
Mode
Flow Ctrl
---------
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
------------
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
Auto
1
2
---
---
---
---
---
---
---
---
---
---
---
---
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
1000TX
Up
Up
Up
Up
Up
Enabled
Enabled
Enabled
Enabled
Enabled
3
4
5
6
7
8
9
Down Enabled
Up Enabled
Down Enabled
Up
Up
Up
Up
Enabled
Enabled
Enabled
Enabled
10
11
12
----------------------- <COMMAND> ------------------------------------
[N]ext Page
Set [S]tatus
Set [M]ode
Set [F]low Control
Set [B]ack Pressure
[P]revious Page
[Q]uit to previous menu
Command>
Figure 17. Port Configuration Menu
70
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The Port Configuration Menu displays the following columns of
information about the status of the first 12 ports on the switch:
Port
The port number.
Trunk
The trunk group number. This column contains the number of the port
trunk if the port is a member of a trunk. To configure a trunk, refer to
Type
The port type. The type for an RJ-45 copper port is 10/100/1000Base-
T.
Link
The status of the link between the port and the end node connected to
the port. The possible values are:
Up - A link exists between the port and the end node.
Down - The port has not established a link with an end node.
Status
The current operating status of the port. The possible values are:
Enabled - The port is able to send and receive Ethernet frames. This is
the default setting for all ports on the switch.
Disabled - The port has been manually disabled.
Mode
The port’s speed and duplex mode setting. For information about the
modes or to change a port’s speed and duplex mode setting, see
Flow Ctrl
Whether flow control is enabled on the port. Flow control is enabled by
3. To view information for the rest of the ports, type N for Next.
Section I: Using the Menus Interface
71
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 5: Port Configuration
Enabling or Disabling a Port
This procedure enables or disables a port. You may want to disable a port
and prevent packets from being forwarded if a problem occurs with the
node or cable connected to the port. After the problem has been fixed, you
can enable the port to resume normal operation. You can also disable an
unused port to secure it from unauthorized connections. The default
setting for a port is enabled.
To change the port’s status, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 32
2. From the Basic Switch Configuration Menu, type P to select Port
Configuration.
The Port Configuration Menu is shown in Figure 17 on page 70.
3. Type S to select Set Status.
The following prompt is displayed:
Set Status->Enter port number>
4. Enter the number of the port you want to enable or disable. You can
configure only one port at a time.
The following prompt is displayed:
Enable or Disable port n (E/D)>
5. Type E to enable the port or D to disable it. The default is enabled. A
disabled port immediately stops forwarding all ingress and egress
traffic until you enable it again.
The display is refreshed to show the port’s new status.
72
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Setting a Port’s Speed and Duplex Mode
To change a port’s speed or duplex mode, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 32
2. From the Basic Switch Configuration Menu, type P to select Port
Configuration.
3. Type M to select Set Mode.
The following prompt is displayed:
Set Mode -> Enter port number >
4. Enter the number of the port whose speed or duplex mode you want to
change. You can configure only one port at a time.
The following prompt is displayed:
Enter new mode for port n (a/h/H/F/f/T)>
5. Enter the letter that corresponds to the desired speed and duplex
mode setting for the port. The port settings are:
a - Auto: The port uses Auto-Negotiation to set its speed and duplex
mode. This is the default setting for all ports.
h - 10 Mbps, half-duplex
H - 100 Mbps, half-duplex
f - 10 Mbps, full-duplex
F - 100 Mbps, full-duplex
T - 1000 Mbps, full-duplex
When you select a setting, note the following:
ˆ When a twisted pair port on the switch is set to Auto-Negotiation,
the default setting, the end node should also be using Auto-
Negotiation to prevent a duplex mode mismatch. A switch port
using Auto-Negotiation defaults to half-duplex if it detects that the
end node is not using Auto-Negotiation. This can result in a
mismatch if the end node is operating at a fixed duplex mode of
full-duplex. To avoid this problem when connecting an end node
Section I: Using the Menus Interface
73
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 5: Port Configuration
with a fixed duplex mode of full-duplex to a switch port, disable
Auto-Negotiation on the port and set the port’s speed and duplex
mode manually.
74
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Changing the Flow Control Setting
A switch port uses flow control to control the flow of ingress packets from
its end node. Flow control applies to ports operating in full-duplex mode. A
switch port uses flow control to control the flow of ingress packets from its
end node. A port using flow control issues a special frame, referred to as a
PAUSE frame, as specified in the IEEE 802.3x standard, to stop the
transmission of data from an end node. When a port needs to stop an end
node from transmitting data, it issues this frame. The frame instructs the
end node to cease transmission. The port continues to issue PAUSE
frames until it is ready again to receive data from the end node.
The default setting for flow control on a switch port is disabled.
To change the flow control setting on a port, perform the following
procedure:
1. From the Main Menu, type B to select Basic Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 32
2. From the Basic Switch Configuration Menu, type P to select Port
Configuration.
3. Type F to select Flow Control.
The following prompt is displayed:
Set Flow Control -> Enter port number >
4. Enter the port number whose flow control setting you want to change.
You can configure only one port at a time.
The following prompt is displayed:
Enable or Disable flow control for port n (E/D)>
5. Type E to enable flow control or D to disable it. The default is enabled.
The display is refreshed to show the port’s new flow control setting.
Section I: Using the Menus Interface
75
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 5: Port Configuration
Changing the Back Pressure Setting
Back pressure performs much the same function as flow control. Both are
used by a port to control the flow of ingress packets. Flow control applies
to ports operating in full-duplex; back pressure applies to ports operating
in half-duplex mode.
When a twisted pair port on the switch operating in half-duplex mode
needs to stop an end node from transmitting data, it forces a collision. A
collision on an Ethernet network occurs when two end nodes attempt to
transmit data using the same data link at the same time. A collision causes
the end nodes to stop sending data.
When a switch port needs to stop a half-duplex end node from transmitting
data, it forces a collision on the data link, which stops the end node. After
the switch is ready to receive data again, the switch stops forcing
collisions. This is called back pressure.
To apply back pressure to a port, perform the following procedure:
1. From the Main Menu, type B to select Basic Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 32
2. From the Basic Switch Configuration Menu, type P to select Port
Configuration.
The Port Configuration Menu is shown in Figure 17 on page 70.
3. Type B to select Back Pressure.
The following prompt is displayed:
Enable or Disable all link up ports (E/D)>
4. Type E to enable back pressure or D to disable it. The default is
disabled.
76
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Displaying Port Statistics
To display statistics about a port, perform the following procedure:
1. From the Main Menu, select Statistics.
AT-9000/24 Local Management System
Main Menu -> Statistics Menu
Port: 1
Elapsed Time Since System Up: 003.23.27.17
<Avg./s>
<Counter Name
Total RX Bytes
Total RX Pkts
Good Broadcast
Good Multicast
CRC/Align Errors
Undersize Pkts
Oversize Pkts
Fragments
<Total
1074684
275
2
2
0
0
11092
8842
2235
0
0
0
0
0
0
0
Jabbers
Collisions
0
0
0
0
64-Byte Pkts
65-127 Pkts
128-255 Pkts
256-511 Pkts
512-1023 Pkts
1024-1522 Pkts
771
9521
588
212
0
0
2
0
0
0
0
0
----------------------- <COMMAND> ------------------------------------
[S]elect/[N]ext/[P]rev. Port Since [R]eset S[t]op Refresh [Q]uit
Command>
Figure 18. Statistics Menu
The statistics for port 1 are displayed in a table that contains the
following columns of information:
Total
The total count for this statistic.
Avg/s
The average count of that statistic per second.
The table contains the following items of information:
Total RX Bytes
Number of bytes received on the port.
Total RX Pkts
Number of packets received on the port.
Section I: Using the Menus Interface
77
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 5: Port Configuration
Good Broadcast
Number of valid broadcast packets received on the port.
Good Multicast
Number of valid multicast packets received on the port.
CRC/Align Errors
Number of packets with a cyclic redundancy check (CRC) error but
with the proper length (64-1518 bytes) received on the port.
Undersize Pkts
Number of packets that were less than the minimum length specified
by IEEE 902.3 (64 bytes including the CRC) received on the port.
Oversize Pkts
Number of packets that exceeded the maximum length specified by
IEEE 902.3 (1518 bytes including the CRC) received on the port.
Fragments
Number of undersized packets, packets with alignment errors, and
packets with FCS errors (CRC errors) received on the port.
Jabbers
Number of electrical signal errors detected on the port.
Collisions
Number of packet collisions on the port.
64-Byte Pkts
Number of 64-byte packets sent or received by the port. The minimum
length of an Ethernet packet is 64 bytes.
65-127 Pkts
Number of 65- to 127-byte packets sent or received by the port.
128-255 Pkts
Number of 128- to 255-byte packets sent or received by the port.
256-511 Pkts
Number of 256- to 511-byte packets sent or received by the port.
512-1023 Pkts
Number of 512- to 1023-byte packets sent or received by the port.
1024-1522 Pkts
Number of 1024- to 1522-byte packets sent or received by the port.
The maximum length of an Ethernet packet is 1518 bytes.
The statistics are refreshed every 30 seconds,
2. To select a specific port:
a. Type S to select Select.
78
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The following prompt is displayed:
Select port number>
b. Type the number of the port whose statistics you want to view.
3. Type N for Next or P for Previous to move between ports.
4. To view the statistics for a particular port since the switch was last
reset, select the port and then type R for Since Reset.
5. To stop refreshing the statistics, type T for Stop Refresh.
Section I: Using the Menus Interface
79
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 5: Port Configuration
80
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
Port Trunking Overview
Port trunking is an economical way for you to increase the bandwidth
between two Ethernet switches. A port trunk is 2 to 8 ports that have been
grouped together to function as one logical path. A port trunk increases
the bandwidth between switches and is useful in situations where a single
physical data link between switches is insufficient to handle the traffic
load.
A port trunk always sends packets from a particular source to a particular
destination over the same link within the trunk. A single link is designated
for flooding broadcasts and packets of unknown destination.
Static Port Trunk A static port trunk consists of two to eight ports on the switch that function
as a single virtual link between the switch and another device. A static port
Overview
trunk improves performance by distributing the traffic across multiple ports
between the devices and enhances reliability by reducing the reliance on a
single physical link.
A static trunk is easy to configure. You designate the ports on the switch
that are to be in the trunk and the management software on the switch
automatically groups them together.
The example in Figure 19 illustrates a static port trunk of four links
between two AT-9000/24 Gigabit Ethernet switches.
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Figure 19. Static Port Trunk Example
Network equipment vendors tend to employ different techniques to
implement static trunks. Consequently, a static trunk on one device might
not be compatible with the same feature on a device from a different
manufacturer. For this reason static trunks are typically employed only
between devices from the same vendor. That is not to say that an Allied
Telesis layer 2 managed switch cannot form a static trunk with a device
from another manufacturer; but there is the possibility that the
implementations of static trunking on the two devices might not be
82
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
compatible.
Also note that a static trunk does not provide for redundancy or link
backup. If a port in a static trunk loses its link, the trunk’s total bandwidth is
diminished. Though the traffic carried by the lost link is shifted to one of the
remaining ports in the trunk, the bandwidth remains reduced until the lost
link is reestablished or you reconfigure the trunk by adding another port to
it.
Port Trunking Observe the following guidelines when you create a port trunk:
Guidelines
ˆ A port trunk can consist of up to 8 ports, but must have a minimum of 2
ports.
ˆ The switch can support up to 4 trunks at a time.
ˆ A port can belong to only one trunk at a time.
ˆ The speed, duplex mode, and flow control settings must be the same
on all the ports in a trunk.
ˆ The ports of a trunk must be members of the same VLAN. A port trunk
cannot consist of ports from different VLANs.
ˆ The ports of a trunk do not have to be consecutive.
ˆ When you cable a trunk, the order of the connection should be
maintained on both nodes. The lowest numbered port in a trunk on the
switch should be connected to the lowest numbered port of the trunk
on the other device, the next lowest numbered port on the switch
should be connected to the next lowest numbered port on the other
device, and so on.
For example, assume that you are connecting a trunk between two
AT-9000/24 Gigabit Ethernet switches. On the first switch, you select
ports 1 through 4 for a trunk. On the second switch, you select ports 5
through 8. To maintain the order of the port connections, connect port
1 on the first switch to port 5 on the second switch, connect port 2 to
port 6, and so on.
ˆ To avoid compatibility problems, Allied Telesis recommends creating a
port trunk only between AT-9000/24 Gigabit Ethernet switches. A port
trunk between an AT-9000/24 Gigabit Ethernet switch and a device
from another manufacturer might result in undesirable trunk behavior.
Section I: Using the Menus Interface
83
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
LACP Trunks
An LACP (Link Aggregation Control Protocol) trunk is another type of port
trunk. It performs the same function as a static trunk. It increases the
bandwidth between two network devices by distributing the traffic load
over multiple physical links.
The advantage of an LACP trunk over a static port trunk is its flexibility.
While implementations of static trunking tend to be vendor specific, the
AT-S84 implementation of LACP is compliant with the IEEE 802.3ad
standard. This makes it interoperable with equipment from other vendors
that also comply with the standard. Therefore, you can create a trunk
between an Allied Telesis device and networking devices from other
manufacturers.
Another advantage is that ports in an LACP trunk can function in a
standby mode. This adds redundancy and resiliency to the trunk. If a link
in a static trunk goes down, the overall bandwidth of the trunk is reduced
and restoring it requires reestablishing the link or manually modifying the
trunk by adding another port to it. In contrast, an LACP trunk can activate
ports in a standby mode when an active link fails. The automatic activation
of standby ports allows the switch to maintain the maximum possible
bandwidth of the trunk.
For example, assume you create an LACP trunk of ports 11 to 18 on a
switch and the switch is using ports 11 to 16 as the active ports and ports
17 and 18 as reserve. If an active port loses its link, the switch
automatically activates one of the two reserve ports to maintain maximum
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Reserve Ports 17, 18
Active Ports 11-16
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Figure 20. LACP Trunk Example
LACP Trunk The AT-9000/24 Gigabit Ethernet switch can have up to four trunks. A
maximum of eight ports of each trunk can be assigned by the switch
administrator. You can configure each trunk’s status as Active, Passive,
Manual, or Disabled.
Status
84
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
When a trunk is created, its default status is Disabled. This means that the
trunk does not pass network traffic or send/receive LACP data units
(LACPDU) until the trunk status is changed accordingly.
When a trunk is set to Active status, the trunk ports are all available as part
of the active LACP trunk. The trunk ports of an active trunk will all send
and receive LACPDUs. A minimum number of trunk ports determined by
the bandwidth requirements of the network traffic will pass network traffic.
Additional ports within an active trunk will dynamically be added or deleted
by the LACP feature depending on the increase or decrease of the
network traffic.
When a trunk is set to Passive status, the trunk ports are available to be
activated by their link partners. If the trunk receives LACP data unit
packets from an Active link partner, it automatically transitions to an Active
status. The trunk ports will not transmit LACP data units unless the link
partners are in the Active status.
A trunk set to Manual status is effectively a static trunk and has none of the
benefits of the LACP feature. The trunk ports of an active trunk will not
send or receive LACPDUs. The switch administrator must manually add or
delete trunk ports from a trunk.
LACP Port The switch uses this parameter to determine which ports are to be active
and which are to be in the standby mode in situations where the number of
ports in the aggregate trunk exceeds the highest allowed number of active
ports. This parameter can be adjusted on each port and is a number from
Priority
Parameter
1 to 255. The lower the number, the higher the priority. Ports with the
highest priorities are designated as the active ports in an aggregate trunk.
For example, if both 802.3ad-compliant devices support up to four active
ports and there are a total of eight ports in the trunk, the four ports with the
lowest priority settings are designated as the active ports, and the others
are placed in standby mode. If an active link goes down on a active port,
the standby port with the highest priority is automatically activated to take
its place.
The default value of a port’s priority number is equal to 1.
The selection of the active links in an aggregate trunk is dynamic. It
changes as links are added, removed, lost or reestablished. For example,
if an active port loses its link and is replaced by another port in the standby
mode, the reestablishment of the link on the originally active port causes it
to return to the active state by virtue of its having a higher priority, while the
port that replaced it is returned to the standby mode.
In the unusual event that you set this parameter to the same value for
some or all of the ports of an aggregate trunk, the selection of active ports
is based on port numbering. The lower the port number, the higher the
priority.
Section I: Using the Menus Interface
85
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
Two conditions must be met in order for a port that is a member of an
aggregate trunk to function in the standby mode. First, the number of ports
in the trunk must exceed the highest allowed number of active ports and,
second, the port must be receiving LACPDU packets from the other
device. A port functioning in the standby mode does not forward network
traffic, but it does continue to send LACPDU packets. If a port that is part
of a trunk group does not receive LACPDU packets, it functions as a
normal Ethernet port and forwards network packets along with LACPDU
packets.
LACP Trunk Following are the guidelines for creating aggregators:
Guidelines
ˆ LACP must be activated on both the switch and the other device.
ˆ The other device must be 802.3ad-compliant.
ˆ The AT-9000/24 Gigabit Ethernet switch supports up to eight active
ports in a trunk group at a time.
ˆ The switch supports a maximum of four trunks.
ˆ The ports of a trunk group must be of the same medium type: all
twisted pair ports or all fiber optic ports.
ˆ The ports of a trunk can be consecutive (for example ports 5-9) or
nonconsecutive (for example, ports 4, 8, 11, 20).
ˆ A port can belong to only one trunk group at a time.
ˆ The ports of an trunk group must be untagged members of the same
VLAN.
ˆ An LACP trunk does not forward VLAN ID information.
ˆ 10/100Base-TX twisted pair ports must be set to Auto-Negotiation or
100 Mbps, full-duplex mode. LACP trunking is not supported in half-
duplex mode.
ˆ 100Base-FX fiber optic ports must be set to full-duplex mode.
ˆ You can create a trunk group that includes transceivers with
1000Base-X fiber optic ports.
ˆ Only those ports that are members of a trunk group transmit LACPDU
packets.
ˆ A port that is a member of a trunk group functions as part of an
aggregate trunk only if it receives LACPDU packets from the remote
device. If it does not receive LACPDU packets, it functions as a regular
Ethernet port, forwarding network traffic while also continuing to
transmit LACPDU packets.
ˆ The port with the highest priority in a trunk group carries broadcast
packets and packets with an unknown destination. For background
information, refer to “LACP Port Priority Parameter” on page 85.
ˆ Prior to creating a trunk group between an AT-9000/24 Gigabit
Ethernet switch and another vendor’s device, refer to the vendor’s
documentation to determine the maximum number of active ports the
86
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
device can support in a trunk. If the number is less than eight, the
maximum number for the AT-9000/24 Gigabit Ethernet switch, you
should probably assign a higher system LACP priority to the other
vendor’s switch. If it is more than eight, assign the higher priority to the
AT-9000/24 Gigabit Ethernet switch. This can avoid a possible conflict
between the devices if some ports are placed in the standby mode
when the devices create the trunk. For background information, refer
ˆ LACPDU packets are transmitted as untagged packets.
Section I: Using the Menus Interface
87
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
Setting Up a Port Trunk
This section contains the following procedures for working with port trunks:
Creating a Port This procedure explains how to create a port trunk.
Trunk
Caution
Do not connect the cables to the ports on the switches until after you
have configured the trunk with the management software.
Connecting the cables before configuring the software creates a
loop in your network topology, which can result in broadcast storms
and poor network performance.
To create a port trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21.
AT-9000/24 Local Management System
Main Menu -> Advanced Switch Configuration Menu
[V]LAN Management
[T]runk Configuration
[I]GMP Snooping Configuration
Quality of [S]ervice Configuration
Port [M]irroring Configuration
802.x[X] Port Based Access Control Configuration
[Q]uit to previous menu
Command>
Figure 21. Advanced Switch Configuration Menu
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
88
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
AT-9000/24 Local Management System
Advanced Switch Configuration -> Trunk Configuration Menu
Group
Status
Port Members
Trunk ID
------- -------------- --------------------- ----------
1
2
3
4
Disabled
Disabled
Disabled
Disabled
1
2
3
4
----------------------- <COMMAND> -----------------------------
[A]dd Trunk Member
[R]emove Trunk Member
[S]et Trunk Status
LACP [G]roup Status
Set P[o]rt Priority
[Q]uit to previous menu
Command>
Figure 22. Trunk Configuration Menu
3. To add a trunk member, type A to select Add Trunk Member.
The following prompt is displayed:
Enter trunk group number>
4. Select a trunk group number from 1 to 4 and press Enter.
The following prompt is displayed:
Enter port members (from 1 to 24, up to 8 ports) for
trunk n >
5. Enter the ports you want to include in the trunk and press Enter.
You can specify the ports individually separated by commas (for
example, 1,2,5), as a range of ports separated by a hyphen (for
example, 2-4), or both (for example, 1,3, 12-16).
6. To set the trunk status, type S to select Set Trunk Status.
The following prompt is displayed:
Enter trunk group number>
7. Type the trunk group number and press Enter.
The following prompt is displayed:
Set trunk group n status (A/P/M/D)>
Section I: Using the Menus Interface
89
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
8. Type M to select Manual Trunk for a basic trunk without LACP
handling.
The trunk is now operational on the switch.
9. Configure the port trunk on the other switch and connect the cables.
Modifying a Port This procedure adds and removes ports from a port trunk.
Trunk
Note
Disconnect the cables from the ports of the trunk on the switch
before modifying it. Adding or removing ports from a trunk without
first disconnecting the cables can create loops in your network
topology, which can cause broadcast storms and poor network
performance.
To add or remove ports from a trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
3. To add ports to a port trunk, type A to select Add Trunk Member. To
remove ports, type R to select Remove Trunk Member.
The following prompt is displayed:
Enter trunk group number>
4. Type the number of the trunk group you want to modify and press
Enter.
The following prompt is displayed:
Enter port members (up to 8 ports) for trunk n>
5. Enter the ports you want to add or remove from the trunk and press
Enter.
90
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
You can specify the ports individually, separated by commas (for
example, 1,2,5), as a range of ports separated by a hyphen (for
example, 2-4), or both (for example, 1,3, 6-8).
6. Modify the port trunk on the other switch and reconnect the cables.
Enabling or This procedure enables and disables a port trunk. Note the following
before performing this procedure:
Disabling a Port
Trunk
ˆ Do not enable a port trunk until after you have configured the trunk on
both switches.
ˆ Do not connect the cables to the ports on the switches until after you
have configured and enabled the trunk on both switches.
Note
If you are disabling a port trunk, be sure to first disconnect all cables
from the ports of the trunk. Leaving the cables connected can create
loops in your network topology because the ports of a disabled port
trunk function as normal network ports, forwarding individual
network traffic.
To enable or disable a port trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type T to select Trunk
Configuration.
The Trunk Configuration Menu is shown in Figure 22 on page 89.
3. From the Trunk Configuration Menu, type S to select Set Trunk
Status.
The following prompt is displayed:
Enter trunk group number>
4. Type the number of the trunk group you want to enable or disable and
press Enter.
The following prompt is displayed:
Set trunk group n status (A/P/M/D)>
5. Type M to enable a manual trunk, or D to disable the trunk.
Section I: Using the Menus Interface
91
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
Setting Up an LACP Trunk
This section contains the following procedures to work with LACP trunks:
Creating an To create an LACP trunk, perform the following procedure:
LACP Trunk
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
3. To set the trunk status, type S to select Set Trunk Status.
The following prompt is displayed:
Enter trunk group number>
4. Type the trunk group number and press Enter.
The following prompt is displayed:
Set trunk group n status (A/P/M/D)>
5. Choose one of the four following settings:
A - LACP Active: Ports are in an active negotiation state.
P - LACP Passive: Ports are in a passive state where the port
negotiates a bundle by exchanging LACP packets to the peer only if
the far end initiates it.
M - Manual: Ports are in a static trunk state.
D - Disabled: Ports are disabled and do not sent or received LACP
data units or network traffic.
Note
LACP must be enabled at both ends of the link to be operational.
92
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Configuring the The switch uses the port priority to determine which ports are to be active
and which are to be in standby mode in situations where the number of
ports in the aggregate trunk exceeds the highest allowed number of active
ports. The port with the lowest numerical value has the highest priority.
LACP Port
Priority
To configure the LACP port priority, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type T to select Trunk
Configuration.
The Trunk Configuration Menu is shown in Figure 22 on page 89.
3. From the Trunk Configuration Menu, type O to select Set Port Priority
The LACP Port Priority Menu is shown in Figure 23.
AT-9000/24 Local Management System
Trunk Configuration -> LACP Port Priority Menu
Port Priority
------- ----------
1
2
3
4
5
6
7
8
1
1
1
1
1
1
1
1
1
1
9
10
----------------------- <COMMAND> -----------------------------
[S]et Port Priority
[P]revious Page
[N]ext Page
[Q]uit to previous menu
Command>
Figure 23. LACP Port Priority Menu
4. From the LACP Port Priority Menu, type S to select Set Port Priority.
The following prompt is displayed:
Section I: Using the Menus Interface
93
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
Enter port no>
5. Type the number of the port whose priority you want to set.
The following prompt is displayed:
Enter port priority>
6. Enter a number for the priority of the port.
The range is 1 to 255, and the default is 1.
Verifying the To view the LACP group settings, perform the following procedure:
LACP Group
1. From the Main Menu, type A to select Advanced Switch
Settings
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
3. From the Trunk Configuration Menu, type G to select LACP Group
Status.
The following prompt is displayed:
Enter trunk group admin key>
4. Type a number from 1 to 4 to specify the admin key of the trunk you
want to view.
94
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
AT-9000/24 Local Management System
Trunk Configuration -> LACP Group Status Menu
System Priority :
32768
00:00:90:24:00:03
1
System ID
Key
:
:
Aggregator
-----------
Attached Port List
-----------------------------
2
3
4
2
3
4
----------------------- <COMMAND> -----------------------------
[Q]uit to previous menu
Command>
Figure 24. LACP Group Status Menu
The LACP Group Status Menu displays the following information about
the LACP group:
System Priority
The system priority as defined by IEE 802.3ad. You cannot change
this.
System ID
The MAC address of the system.
Key
The key for this trunk group.
The menu also contains a table that displays the following information:
Aggregator
The port that is operating as the aggregator.
Attached Port List
The ports assigned to the aggregator.
Disabling an To disable an LACP trunk, perform the following procedure:
LACP Trunk
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
Section I: Using the Menus Interface
95
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 6: Port Trunking
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
3. From the Trunk Configuration Menu, type S to select Set Trunk
Status.
The following prompt is displayed:
Enter trunk group number>
4. Enter the trunk group number.
The following prompt is displayed:
Set trunk group n status (A/P/M/D)>
5. Type D to select Disabled.
96
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 7
Port Mirroring
This chapter contains the procedure for setting up port mirroring. Port
mirroring allows you to unobtrusively monitor the ingress and egress traffic
on a port by having the traffic copied to another port. This chapter contains
the following sections:
Section I: Using the Menus Interface
97
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 7: Port Mirroring
Port Mirroring Overview
The port mirroring feature allows you to unobtrusively monitor the ingress
and egress traffic on a port on the switch by having the traffic copied to
another switch port. By connecting a network analyzer to the port where
the traffic is being copied to, you can monitor the traffic on the other port
without impacting its performance or speed.
The port whose traffic you want to mirror is called the mirrored port. The
port where the traffic will be copied to is called the mirroring port.
Observe the following guidelines when using this feature:
ˆ You can mirror only one port at a time.
ˆ The mirrored and mirroring ports must be on the same switch.
ˆ This feature copies both the ingress and egress traffic of the mirrored
port.
ˆ The mirroring port cannot be used for normal Ethernet switching.
98
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Configuring Port Mirroring
To set up port mirroring, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type M to select Port
Mirroring Configuration.
The Port Mirroring Configuration Menu is shown in Figure 25.
AT-9000/24 Local Management System
Advanced Switch Configuration -> Port Mirroring Configuration Menu
Mirroring Port
--------------- -------------- ------
Disabled
Mirrored Port
Status
2
1
----------------------- <COMMAND> -----------------------------
[S]et Mirroring Port
Set [M]irrored Port
[E]nable/Disable Port Mirroring
[Q]uit to previous menu
Command>
Figure 25. Port Mirroring Menu
3. Type S to select Set Mirroring Port.
The following prompt is displayed:
Set monitoring port-> Enter port number>
4. Type the number of the port where the network analyzer is connected
and press Enter. You can specify only one port.
5. Type M to select Set Mirrored Port.
The following prompt is displayed:
Set monitored port-> Enter port number>
6. Type the number of the port whose ingress and egress traffic you want
to monitor and press Enter. You can specify only one port.
Section I: Using the Menus Interface
99
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 7: Port Mirroring
7. Type E to select Enable/Disable Port Mirroring.
The following prompt is displayed:
Enable or Disable monitoring (E/D)>
8. Type E to enable port mirroring.
You can now connect your data analyzer to the mirroring port.
100
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enabling or Disabling Port Mirroring
To enable or disable port mirroring, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type M to select Port
Mirroring Configuration.
The Port Mirroring Menu is shown in Figure 25 on page 99.
3. Type E to select Enable/Disable Port Mirroring.
The following prompt is displayed:
Enable or Disable monitoring (E/D)>
4. Type E to disable port mirroring or D to disable port mirroring. Port
mirroring is disabled by default.
When you disable port mirroring, the port that was functioning as the
mirroring port can then be used as a normal networking port.
Section I: Using the Menus Interface
101
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 7: Port Mirroring
102
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8
Virtual LANs and GVRP
This chapter contains the procedures for creating, modifying, and deleting
and tagged Virtual Local Area Networks (VLANs). This chapter contains
the following sections:
Section I: Using the Menus Interface
103
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
VLAN Features
A Virtual Local Area Network (VLAN) is a logical grouping of devices on
different physical LAN segments that allows users to communicate as if
they were physically connected to a single LAN, independent of the
physical configuration of the network.
With VLANs, you can segment your network and group end-nodes with
related functions into their own separate, logical LAN segments. For
example, the marketing personnel in your company may be spread
throughout a building. Assigning marketing to a single VLAN allows
marketing personnel to share resources and bandwidth as if they were
connected to the same segment. The resources of other departments can
be visible to the marketing VLAN members, accessible, or accessible only
to specified individuals.
A few benefits of a VLAN architecture are described in the following
sections.
Increased In traditional Layer 2 switched networks, broadcast packets are sent to
each and every individual port. Grouping users into logical networks limits
Performance
broadcast traffic to users performing similar functions or users within
individual workgroups. High traffic, the danger of broadcast storms, router
latency, and data collisions are significantly reduced, and the efficiency of
the entire network is improved.
Improved VLANs provide a fundamental improvement in the design, administration,
and management of LANs. Before VLANs, physical changes to a network
were made at the switch in the wiring closet.
Manageability
For example, if an employee transferred to a new department, changing
that employee’s LAN segment assignment often required a physical wiring
change at the switch.
As a software-base solution, VLANs eliminate the restriction of existing
network design and cabling infrastructure and allow the centralized
configuration of switches located in many different locations. VLAN
memberships are changed quickly and efficiently from the management
console rather than in a wiring closet.
Increased VLANs provide additional security not available in a shared media network
environment. Because a switched network only delivers frames to
Security
intended recipients, and only broadcast frames to other members of the
VLAN, a network administrator can segment users requiring access to
sensitive information into separate VLANs from the rest of the general
user community.
104
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
VLANs can be used to control the flow of data in your network, since the
traffic generated by an end-node in a VLAN is restricted to the other end-
nodes in the same VLAN. In addition, VLANs can prevent data from
flowing to unauthorized end-nodes
Section I: Using the Menus Interface
105
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
VLAN Overview
This VLAN overview contains the following sections:
VLAN Name To create a port-based VLAN, you must give it a name. The name should
reflect the function of the network devices that are be members of the
VLAN. Examples include Sales, Production, and Engineering.
VLAN Identifier Every VLAN in a network must have a unique number assigned to it. This
number is called the VLAN identifier (VID). This number uniquely identifies
a VLAN in the switch and the network. The factory VID is 1 for all ports.
If a VLAN consists only of ports located on one physical switch in your
network, you assign it a VID different from all other VLANs in your
network.
If a VLAN spans multiple switches, then the VID for the VLAN on the
different switches should be the same. The switches are then able to
recognize and forward frames belonging to the same VLAN even though
the VLAN spans multiple switches.
For example, if you had a VLAN titled Marketing that spanned three
AT-9000/24 Gigabit Ethernet switches, you would assign the Marketing
VLAN on each switch the same VID.
Port VLAN The Port VLAN Identifier (PVID) is the VLAN identifier associated with a
specific port. The PVID provides a VLAN assignment for each untagged
Identifier
frame received by the switch. (See “Incoming and Outgoing Tagged and
Untagged Frames” on page 107.) The switch internally associates the
untagged frame with the VID that is equal to the PVID. The switch then
forwards this frame to one of the other member ports of that VLAN. The
default PVID value is 1.
VLAN Port You need to specify which ports on the switch are to be members of a
VLAN. A port can be specified as a member of one or more VLANs up to
Members
255, the maximum number of VLANs supported by the switch. The factory
default VID is 1. Therefore, each port is initially configured to be a member
of VLAN 1, which is known as the default VLAN.
106
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Note
The switch is preconfigured with the Default_VLAN only. All ports on
the switch are initially members of the Default_VLAN.
If a port is assigned to be a new member of a VLAN, its membership can
be defined as either tagged or untagged.
Tagged Port Members
A port is a tagged member of a VLAN when the PVID does not equal the
VID. In this case, the port must be a member of two or more VLANs. If a
port is a tagged member of one VLAN, then the same port is also an
untagged member of another VLAN where the PVID matches its VID.
Untagged Port Members
A port is an untagged member of a VLAN if the PVID is equal to the VID of
that VLAN. A port can be an untagged member of only one VLAN. An
example of this is the Default_VLAN configuration where all ports are
initially configured to be untagged members of VLAN 1 only. A port can be
an untagged member of one VLAN and be a tagged member of one or
more VLANS at the same time. (See Figure 27 on page 111.)
Incoming and The VLAN information within an Ethernet frame is referred to as a tag or
tagged header. An Ethernet frame can contain VLAN information within its
header. Likewise, a frame that does not contain this VLAN tag information
is referred to as an untagged or standard frame. A tag contains the VID
Outgoing Tagged
and Untagged
Frames
information of the VLAN to which the frame belongs, according to the
IEEE802.1Q VLAN tagging standard.
When a switch receives a frame, it examines the frame header to see if it
contains a VLAN tag (tagged frame) or no tag (untagged frame). After
switching the frame to an outgoing port and before transmitting it, the
switch determines if the tag information should be kept in the header or
should be stripped out and made into an untagged frame.
Incoming Frames
Tagged frames received by the switch are only accepted (not dropped or
discarded) if the tag information contained in the frame is equal to one of
the VIDs of which the port is a member. If the tag information contained in
the frame does not match one of these VIDs, the frames are dropped or
discarded.
Untagged frames received by the switch are always accepted by all ports
on the switch. As described in “Port VLAN Identifier” on page 106, each
untagged frame received by the switch is assigned a VLAN number equal
to the PVID. The switch then forwards this frame to one of the other
member ports of that VLAN.
Section I: Using the Menus Interface
107
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
Outgoing Frames
Frames being transmitted from the switch retain their VLAN tag
information in the frame header if the frame’s tag does not match the PVID
of the port (a tagged member of that VLAN). These frames are tagged
after transmission from the switch.
The VLAN tag information in the header of the frame is stripped from the
frame’s header if the tag matches the PVID of the port (an untagged
member of the VLAN). These frames are untagged after transmission from
the switch.
Guidelines for The following are guidelines for creating a VLAN.
Creating a VLAN
ˆ Each VLAN must be assigned a unique VID. If a particular VLAN
spans multiples switches, each part of the VLAN on the different
switches should be assigned the same VID.
ˆ A port can be an untagged member of only one VLAN at a time.
ˆ Each port must be assigned a PVID (the default is 1). This value must
match one of the VIDs assigned to the port. If you need to change the
PVID value, you must configure it on a port after you assign a port to a
VLAN. For instructions, refer to “Configuring the Port PVID” on
ˆ A VLAN that spans multiple switches requires a port on each switch
where the VLAN is located to function as an interconnection between
the switches where the various parts of the VLAN reside.
This port may be defined as an untagged member of a VLAN where
the port is connected to another switch via another untagged port
member of the VLAN. This means that all traffic on this inter-switch
port contains traffic for that VLAN only. See Figure 26 on page 109.
Another scenario is where the port could be an untagged member of
one VLAN and a tagged member of one or more VLANs. The port
would then be connected to another switch via a port with the same
VLAN membership. This means that the traffic on this inter-switch port
is for any or all of the VLANs of which the port is a member.
ˆ If there are end nodes in different VLANs that need to communicate
with each other, a router or Layer 3 switch is required to interconnect
the VLANs.
ˆ The switch can support up to a total of 255 VLANs.
108
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
interconnected. In this example, the Sales VLAN spans two AT-9000/24
Gigabit Ethernet switches, while the Production and Engineering VLANs
are limited to just one switch.
Sales VLAN
Engineering VLAN
(VID 2)
(VID 3)
PORT ACTIVITY
AT-9000/24
AT-9000/24 Gigabit Ethernet Switch
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
WAN
Router
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
AT-9000/24 Gigabit Ethernet Switch
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Production VLAN
(VID 4)
Sales VLAN
(VID 2)
Figure 26. Untagged VLAN
Section I: Using the Menus Interface
109
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
The table below lists the port numbers for the Sales, Engineering, and
Production VLANs on the switches. In this example, all ports are untagged
members of their respective VLANS.
Sales VLAN
(VID 2)
Engineering VLAN
(VID 3)
Production VLAN
(VID 4)
AT-9000/24Gigabit Ports 1, 3-5, 7, 20
Ports 9, 11, 13, 21, 23
& 24
(PVID 3)
None
Ethernet Switch
(top)
(PVID 2)
AT-9000/24Gigabit Ports 1, 2, 4
None
Ports 10, 12, 18, 20-
24 (PVID 4)
Ethernet Switch
(bottom)
(PVID 2)
Note the following concerning the example:
ˆ Sales VLAN - This VLAN spans both switches. It has a VID value of 2
and consists of four untagged port members on the top switch and
three untagged port members on the bottom switch. The two parts of
the VLAN are connected by a direct link from port 4 on the top switch
to port 1 on the bottom switch. This direct link allows the two parts of
the Sales VLAN to function as one logical LAN segment. Port 20 is
used as a connection to the router, other VLANs, and the WAN.
ˆ Engineering VLAN - This VLAN is on the top switch only and consists
of four untagged port members. The workstations are connected to
ports 3, 5, and 7. Port 24 is used as a connection to the router, other
VLANs, and the WAN.
ˆ Production VLAN - This VLAN has the VLAN of 4 and is on the bottom
switch only. The workstations are connected to ports 3, 6, and 8. Port
21 is used as a connection to the router, other VLANS, and the WAN.
110
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
interconnect IEEE 802.1Q-based products.
Example
Sales VLAN
Engineering VLAN
(VID 2)
(VID 3)
PORT ACTIVITY
AT-9000/24
AT-9000/24 Gigabit Ethernet Switch
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
WAN
Router
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
AT-9000/24 Gigabit Ethernet Switch
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Production VLAN
(VID 4)
Sales VLAN
(VID 2)
Figure 27. Tagged VLAN
Section I: Using the Menus Interface
111
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
The port assignments for the VLANs are as follows:
Engineering VLAN
(VID 3)
Sales VLAN (VID 2)
Untagged
Port
Tagged
Port
Untagged
Port
TaggedPort
Members
Members
Members
Members
AT-8000/8POE
Fast Ethernet
Switch (top)
1, 2, 5, 7, 24
(PVID 2)
None
9, 11, 13, 21, 14, 24
23 (PVID 3)
AT-8000/8POE
Fast Ethernet
Switch (bottom)
2, 4, 13
(PVID 2)
None
10, 12, 18,
22 (PVID 3)
13
Ports 1, 2, 5, and 7 on the top switch and ports 2, 4, and 13 on the bottom
switch are assigned a PVID of 2 and are untagged members of VLAN 2.
These ports are connected to workstations from Sales.
Ports 9, 11, 13, 21, and 23 on the top switch and ports 10, 12, 18, 20, and
22 on the bottom switch are assigned a PVID of 3 and are untagged
members of VLAN 3. These ports are connected to workstations from
Engineering.
Ports 14 and 24 on the top switch are untagged members of VLAN2 and
are tagged members of VLAN 3. Port 13 on the bottom switch is an
untagged member of VLAN 2, and a tagged member of VLAN 3. Traffic
passed between the switches and the router consist of tagged and
untagged packets from both VLANs. These ports provide a common
connection that enables different member ports of the same VLAN to
communicate with each other while maintaining data separation between
VLANs.
112
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Working with VLANS
This section contains the following procedures:
Creating a VLAN This section contains the procedure for creating a new VLAN. This
procedure assigns the VLAN a name, a VID number, and the untagged
and tagged member ports.
After you have performed this procedure, you must configure the untagged
members of the VLAN by adjusting their PVID values to match the virtual
LAN’s VID number. The PVID value of a port must match its virtual LAN’s
VID in order for a port to be considered an untagged member of the VLAN.
This procedure is found in “Configuring the Port PVID” on page 116.
To create a VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select VLAN
Management.
Section I: Using the Menus Interface
113
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
The VLAN Management Menu, which displays any existing VLANs, is
AT-9000/24 Local Management System
Advanced Switch Configuration -> VLAN Management Menu
GVRP Status : Disabled
VLAN ID VLAN Name
------- ---------------------
VLAN Type
----------
Permanent
Static
1
3
Default VLAN
Marketing
----------------------- <COMMAND> ------------------------------------
[N]ext Page [C]reate VLAN
[P]revious Page [D]elete VLAN
[R]eset VLAN to DefaultSet [G]VRP Status
C[o]nfig VLAN Member
[S]et Port Config
[Q]uit to Previous Menu
Command>
Figure 28. VLAN Management Menu
3. From the VLAN Management Menu, type C to select Create VLAN.
114
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
AT-9000/24 Local Management System
VLAN Management -> VLAN Creation Menu
VLAN ID :
VLAN Name:
Port Member
----------------------------------------------------------------------
------------------------- <COMMAND> ----------------------------------
Set VLAN [I]D/[I]ndex
Set VLAN [N]ame
[Q]uit to Previous Menu
S[e]lect Port Member
[A]pply
Command>
Figure 29. VLAN Creation Menu
4. To specify the VLAN ID, do the following:
a. Type I to select Set VLAN ID/Index.
The following prompt is displayed:
Set VLAN ID->Enter VLAN ID>
Note
A VLAN must have a VID.
b. Enter a value from 2 to 4094 and press Enter.
5. To specify the VLAN name, do the following:
a. Type N to select Set VLAN Name.
The following prompt is displayed:
Set VLAN Name -> Enter VLAN Name >
b. Type a name for the VLAN and press Enter. The VLAN name can
contain up to 32 characters including spaces.
6. To add ports to the VLAN, do the following:
Section I: Using the Menus Interface
115
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
a. Type S to select Select Port Number.
The following prompt is displayed:
Enter port number >
b. Enter the ports of the VLAN.
You can specify the ports individually separated by commas, for
example, 2,7,15, as a range of ports separated by a hyphen, for
example, 2-4, or both, for example, 2-7,15,17.
7. When the VLAN is complete, type A to select Apply and apply the
VLAN settings.
The VLAN Management Menu is displayed again with information
about the VLAN you just created. The VLAN is now active on the
switch.
8. If you intend to define a port as an untagged member of a VLAN, you
will need to change the PVID of the port to match the VLAN’s VID.
Configuring the This procedure adjusts a port’s VID value. By default, every port has a
PVID assigned to it. The PVID value determines if a port is a tagged or
Port PVID
untagged member of a VLAN. A port is an untagged member of a VLAN
whose VID value matches its PVID. A port is a tagged member of a VLAN
whose VID does not match the PVID. (The PVID must equal on of the
port’s VIDs.) A port can be a tagged member of a VLAN only if the port is a
member of more than one VLAN at the same time.
When you create a new VLAN, the ports of the new VLAN are initially
designated as tagged members of the new VLAN. The PVIDs of the ports
retain the previous settings after the ports become members of a new
VLAN. If you want the ports to function as untagged members of a new
VLAN, you must change the PVID values to match the VID of the VLAN,
as shown in the following procedure.
To adjust the PVID value of a port, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select
VLAN Management.
3. Type S to select Set Port Config.
116
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The VLAN Port Configuration Menu is shown in Figure 28 on page 114
4. Type V to select Set Port VID.
The following prompt is displayed:
Set PVID->Enter port number
5. Type the number of the port whose PVID value you want to configure
and press Enter. You can configure only one port at a time.
The following prompt is displayed:
Enter PVID for port n
6. Type the new PVID for the port and press Enter. The PVID should
equal the VID of the VLAN where you want the port to be an untagged
member.
Note
If you specify a PVID that does not correspond to any VIDs on the
switch, the management software creates a new VLAN with a VID
that equals the PVID. The VLAN is not assigned any name.
7. Repeat steps 4 through 6 to configure additional ports.
Displaying the To display a list of the VLANs on the switch, perform the following
procedure:
VLANs
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select VLAN
Management.
The VLAN Management Menu is shown in Figure 28 on page 114.
The currently configured VLANs are displayed in a table with the
following columns of information:
VLAN ID
The ID of the VLAN.
VLAN Name
The name of the VLAN.
VLAN Type
The type of VLAN, either permanent or static. Only the Default VLAN is
permanent. All other and tagged VLANs are static.
Section I: Using the Menus Interface
117
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
3. To view the ports of a VLAN, type O to select Config VLAN Member.
The following prompt is displayed:
Enter VLAN ID>
4. Enter the VID of the VLAN you want to view and press Enter.
AT-9000/24 Local Management System
VLAN Management -> Config VLAN Member
VLAN ID : 3 VLAN Name: Marketing
Port Tagging
----------------------------------------------------------------------
4
5
6
7
8
No
No
Yes
No
No
----------------------- <COMMAND> ------------------------------------
[A]dd VLAN Member
[Q]uit to Previous Menu
[N]ext Page
[P]revious page
[C]hange VLAN Name
[R]emove VLAN Member
Command>
Figure 30. Config VLAN Member Menu
The menu displays the following information:
VLAN ID
The VID number of the VLAN.
VLAN Name
The name of the VLAN.
Port
The ports of the VLAN.
Tagging
Whether a port is a tagged or untagged member of the VLAN. An
untagged port is designated with No and a tagged port with Yes.
The selections in this Config VLAN Member menu are explained in
118
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Modifying a The topics in this section include:
VLAN
Before performing this procedure, note the following:
ˆ You cannot change the VID of a VLAN.
ˆ You cannot add an untagged port to a VLAN with this procedure. That
function requires changing a port’s VID value, as explained in
ˆ You cannot remove an untagged port from a VLAN with this procedure.
To remove an untagged port from a VLAN, you must assign it as an
untagged member of another VLAN by changing its PVID, as
Changing the VLAN Name
To change the name of a VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select VLAN
Management.
The VLAN Management Menu is shown in Figure 28 on page 114.
3. Type O to select Config VLAN Member.
The following prompt is displayed:
Enter VLAN ID >
Type the number of the VLAN you want to modify and press Enter.
The Config VLAN Member menu is shown in Figure 30 on page 118.
4. Type C to select Change VLAN Name.
The following prompt is displayed:
Enter new VLAN name>
5. Type the new name for the VLAN and press Enter. A VLAN name can
be up to 32 characters and can include spaces.
Adding or Removing a Tagged Port in a VLAN
To add a tagged port to the VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Section I: Using the Menus Interface
119
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select
VLAN Management.
3. To add a tagged port, type A for Add Member and press Enter.
The following prompt is displayed:
Add member->Enter port number >
4. Enter the number of the port and press Enter. You can add more than
one port at a time. You can specify the ports individually (i.e., 2,5,11),
as a range (i.e., 4-7), or both (i.e., 2,5,11-15).
5. To remove a tagged port, type R for Remove Member and press
Enter.
The following prompt is displayed:
Delete number -> Enter port number >
6. Enter the number of the tagged port you want to remove and press
Enter. You can remove more than one port at a time. You can specify
the ports individually (i.e., 2,5,11), as a range (i.e., 4-7), or both (i.e.,
2,5,11-15).
Deleting a VLAN To delete a VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select
VLAN Management.
3. Type D to select Delete VLAN.
The following prompt is displayed:
Enter VLAN ID >
4. Type the VLAN ID of the VLAN you want to delete and press Enter.
You can enter only one VID.
120
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Note
The VLAN is immediately deleted with no confirmation prompt.
Note
You cannot delete the Default VLAN which has a VID of 1.
The VLAN Management Menu is updated to show that the VLAN is
deleted. The untagged port members of a deleted VLAN are
automatically returned to the Default_VLAN with a PVID of 1.
Resetting to the The following procedure for deletes all VLANs, except the Default_VLAN,
on a switch. To delete selected VLANs, refer to “Deleting a VLAN” on
Default VLAN
To reset to the default VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select VLAN
Management.
The VLAN Management Menu is shown in Figure 28 on page 114.
3. Type R to select Reset VLAN to Default.
The following prompt is displayed:
Are you sure to reset VLAN configuration to factory
default (Y/N)>
4. Type Y for Yes.
The following prompt is displayed:
Reset to factory default completed, press any key to
continue.
5. Press any key.
Section I: Using the Menus Interface
121
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
GVRP
This section describes GVRP and contains the following topics:
GVRP Overview The GARP VLAN Registration Protocol (GVRP) allows network devices to
share VLAN information. The main purpose of GVRP is to allow switches
to automatically discover some of the VLAN information that would
otherwise need to be manually configured in each switch. This is helpful in
networks where VLANs span more than one switch. Without GVRP, you
must manually configure your switches to ensure that the various parts of
a VLAN can communicate across the different switches. GVRP, which is
an application of the Generic Attribute Registration Protocol (GARP), does
this for you automatically.
Figure 31 provides an example of how the GVRP feature works:
Port 1
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
1
1
1
3
1
5
1
7
1
9
2
1
R
2
3
R
2
1
2
2
POWER
1
0
1
2
1
4
1
6
1
8
2
0
2
2
R
2
4
R
2
3
2
4
793
PORT ACTIVITY
AT-9000/24
24 Port Gigabit Ethernet Switch
1000
10/100
Port 3
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
1
1
1
3
1
5
1
7
1
9
2
1
R
2
3
R
2
1
2
2
POWER
1
0
1
2
1
4
1
6
1
8
2
0
2
2
R
2
4
R
2
3
2
4
Port 4
793
PORT ACTIVITY
AT-9000/24
24 Port Gigabit Ethernet Switch
1000
10/100
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
1
1
1
3
1
5
1
7
1
9
2
1
R
2
3
R
2
1
2
2
POWER
1
0
1
2
1
4
1
6
1
8
2
0
2
2
R
2
4
R
2
3
2
4
793
Port 2
Switch #2
Switch #1
Static VLAN
Sales VID=11
Switch #3
Static VLAN
Sales VID=11
Figure 31. GVRP Example
Switches 1 and 3 contain the Sales VLAN, but switch 2 does not.
Consequently, the end nodes of the two parts of the Sales VLANs are
unable to communicate with each other.
Without GVRP, you would need to configure switch 2 by creating a Sales
VLAN on the switch and adding ports 2 and 3 as members of the VLAN. If
you have a large network and a large number of VLANS, this type of
manual configuration can be cumbersome and time consuming. Instead,
let GVRP set up the communications path for you.
Guidelines Following are guidelines to observe when you use GVRP:
ˆ Both ports that constitute a data link between the switch and the other
device must be running GVRP.
ˆ You cannot modify a GVRP VLAN; you can only enable or disable it.
122
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
ˆ GVRP is only aware of those VLANs that have active nodes, or where
at least one end node of a VLAN has established a valid link with a
switch. GVRP is not aware of a VLAN if there are no active end nodes
or if no end nodes have established a link with the switch.
Enabling or GVRP is disabled by default.
Disabling GVRP
To enable or disable GVRP, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type V to select VLAN
Management.
The VLAN Management Menu is shown in Figure 28 on page 114.
3. From the The VLAN Management Menu, type G to select Set GVRP
Status.
The following prompt is displayed:
Enable or Disable GVRP status (E/D)>
4. Type E to enable GVRP or D to disable it.
Section I: Using the Menus Interface
123
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 8: Virtual LANs and GVRP
124
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 9: Quality of Service (QoS)
QoS Overview
When a port on an Ethernet switch becomes oversubscribed—its egress
queues contain more packets than the port can handle in a timely
manner—the port may be forced to delay the transmission of some
packets, resulting in the delay of packets from reaching their destinations.
A port may be forced to delay transmission of packets while it handles
other traffic, and, in some situations, some packets destined to be
forwarded to an oversubscribed port from other switch ports may be
discarded.
Minor delays are often of no consequence to a network or its performance.
But there are applications, referred to as delay or time sensitive
applications, that can be impacted by packet delays. Voice transmission
and video conferencing are two examples. If packets carrying data for
either of these are delayed from reaching their destination, the audio or
video quality may suffer.
This is where QoS can be of value. It allows you to manage the flow of
traffic through a switch by having the switch ports give higher priority to
some packets, such as delay sensitive traffic, over other packets. This is
referred to as prioritizing traffic.
QoS actually consists of several different elements. The element
supported by the AT-9000/24 Gigabit Ethernet Switch is called Class of
Service (CoS). CoS applies primarily to tagged packets. As explained in
tagged packet contains information within it that specifies the VLAN to
which the packet belongs.
A tagged packet can also contain a priority level. This priority level is used
by network switches and other networking devices to know how important
(delay sensitive) that packet is in comparison to other packets. Packets of
a high priority are typically handled before packets of a low priority.
CoS, as defined in the IEEE 802.1p standard, has eight levels of priority.
The priorities are 0 to 7, with 0 the lowest priority and 7 the highest.
When a tagged packet is received on a port on the switch, it is examined
by the AT-S84 software for its priority. The switch software uses the
priority to determine which egress priority queue the packet should be
stored in on the egress port.
Each port on the switch has four priority queues, 0 (low) to 3 (high). When
a tagged packet enters a switch port, the switch responds by placing the
packet into one of the queues according to the assignments shown in
Table 2. A packet in a high priority queue is typically transmitted out a port
sooner than a packet in a low priority queue.
126
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Table 2. Default Mappings of IEEE 802.1p Priority Levels
to Egress Port Priority Queues
Egress Port Priority
Queue
IEEE 802.1p Traffic Class
0
1
2
3
4
5
6
7
0
0
0
1
2
2
3
3
For example, a tagged packet with a priority tag of 6 is placed in the
egress port’s highest priority queue of 3, while a packet with a priority tag
of 1 is placed in the lowest priority queue.
Note
QoS is disabled by default on the switch.
You can customize these priority-to-queue assignments using the AT-S84
management software. The procedure for changing the default mappings
You can configure a port to completely ignore the priority levels in its
tagged packets and instead use a temporary priority level assigned to the
port. For instance, perhaps you decide that all tagged packets received on
port 4 should be assigned a priority level of 5, regardless of the priority
level in the packets themselves. The procedure for overriding priority
CoS relates primarily to tagged packets rather than untagged packets
because untagged packets do not contain a priority level. By default, all
untagged packets are placed in a port’s Q0 egress queue, the queue with
the lowest priority. But you can override this and instruct a port’s untagged
frames to be stored in a higher priority queue. The procedure for this is
also explained in “Configuring CoS” on page 132.
One last thing to note is that CoS does not change the priority level in a
tagged packet. The packet leaves the switch with the same priority it had
when it entered. This is true even if you change the default priority-to-
egress queue mappings.
Section I: Using the Menus Interface
127
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 9: Quality of Service (QoS)
The default setting for Quality of Service is disabled. When the feature is
disabled, all tagged packets are stored in the lowest priority queue of a
port.
128
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Mapping CoS Priorities to Egress Queues
This procedure explains how to change the default mappings of CoS
set at the switch level and applies to all ports. This procedure also enables
and disables QoS.
To change the mappings, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type S to select
Quality of Service Configuration.
The Quality of Service Configuration Menu is shown in Figure 32.
AT-9000/24 Local Management System
Advanced Switch Configuration -> Quality of Service Configuration Menu
[T]raffic Class Configuration
[P]ort Priority Configuration
[Q]uit to previous menu
Command>
Figure 32. Quality of Service Configuration Menu
3. From the Quality of Service Configuration Menu, type T to select
Traffic Class Configuration.
Section I: Using the Menus Interface
129
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 9: Quality of Service (QoS)
The Traffic Class Configuration Menu is shown in Figure 33.
AT-9000/24 Local Management System
Quality of Service Configuration -> Traffic Class Configuration Menu
QoS Status : Disabled
Traffic Class
-------------
Queue
-----
0
1
2
3
4
5
6
7
0
0
0
1
2
2
3
3
3 : Highest
0 : Lowest
----------------------- <COMMAND> ------------------------------------
Set [S]tatus
Set [P]riority Queue
[Q]uit to previous Page
Command>
Figure 33. Traffic Class Configuration Menu
4. To enable or disable QoS, do the following:
a. Type S to select Set Status.
The following prompt is displayed:
Enable or Disable QoS (E/D) >
b. Type E to enable QoS or D to disable it. The default setting is
disabled. When disabled, all tagged packets are stored in the
lowest priority queue of a port.
5. To change the egress priority queue assignment of an 802.1p traffic
class, do the following:
a. Type P to select Set Priority Queue.
The following prompt is displayed:
Enter traffic class>
b. Enter the traffic class whose egress priority queue you want to
change. The range is 0 to 7. You can specify only one traffic class
at a time.
130
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The following prompt is displayed:
Enter queue for traffic class n>
c. Enter the new egress queue number for the traffic class. The range
is 0 to 3. 0 is the lowest priority queue and 3 is the highest. You can
specify only one egress queue.
Section I: Using the Menus Interface
131
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 9: Quality of Service (QoS)
Configuring CoS
As explained in “QoS Overview” on page 126, a packet received on a port
is placed it into one of four priority queues on the egress port according to
the switch’s mapping of 802.1p priority levels to egress priority queues.
The default mappings are shown in Table 2 on page 127.
You can override the mappings at the port level by assigning a different
egress queue to a port. Note that this assignment is made on the ingress
port and before the frame is forwarded to the egress port. Consequently,
you need to configure this feature on the ingress port. For example, you
can configure a switch port so that all ingress frames are stored in egress
queue 3 of the egress port.
Note
The switch does not alter the original priority level in tagged frames.
The frames leave the switch with the same priority level they had
when they entered the switch.
To configure CoS for a port, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type S to select
Quality of Service Configuration.
The Quality of Service Configuration Menu is shown in Figure 32 on
3. From the Quality of Service Configuration Menu, type P to select Port
Priority Configuration.
132
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
AT-9000/24 Local Management System
Quality of Service Configuration -> Port Priority Configuration Menu
Port Trunk Queue Override
---- ----- ----- --------
1
2
3
4
5
6
7
8
9
---
---
---
---
---
---
---
---
---
---
---
---
0
0
0
0
0
0
0
0
0
0
0
0
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
10
11
12
3 : Highest
0 : Lowest
----------------------- <COMMAND> -----------------------------------------
[N]ext Page Set P[r]iority Queue
[P]revious Page Set [O]verride Status
[Q]uit to previous menu
Set [T]runk Priority Queue
Set Trun[k] Override Status
Command>
Figure 34. Port Priority Configuration Menu
The columns in the menu display the following information:
Port
Displays the port number.
Trunk
Displays the trunk number if the port is a member of a trunk.
Queue
Displays the number of the queue where untagged packets received
on the port are stored on the egress queue.
Override
Displays whether the priority level in ingress tagged frames is being
used or not. If No, the override is disabled and the port is using the
priority levels contained within the frames to determine the egress
queue. If Yes, the override is enabled and the tagged packets are
stored in the egress queue specified in the Queue column.
Section I: Using the Menus Interface
133
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 9: Quality of Service (QoS)
4. To change the egress priority queue assignment of an 802.1p traffic
class, do the following:
a. Type R to select Set Priority Queue.
The following prompt is displayed:
Enter traffic class>
b. Enter the traffic class whose egress priority queue you want to
change. The range is 0 to 7. You can specify only one traffic class
at a time.
5. To configure a tagged port or trunk so that the switch ignores the
priority tag in ingress tagged frames, do the following:
a. Type O to select Set Override Status to configure a port or K to
select Set Trunk Override Status to configure a trunk.
The following prompt is displayed is you are configuring a port:
Set Priority Queue->Enter port number>
The following prompt is displayed if you are configuring a trunk:
Enter trunk group number>
b. Enter the port or trunk number that you want to configure. You can
configure only one port or trunk at a time.
A prompt similar to the following is displayed:
Enable or Disable override for port n (E/D)>
c. Type E to enable the override or D to disable it.
Note
The tagged information in a frame is not changed as the frame
traverses the switch. A tagged frame leaves a switch with the same
priority level that it had when it entered.
The default for this parameter is disabled, meaning that the priority
level of tagged frames is determined by the priority level specified
in the frames themselves.
6. To set the priority queue for a trunk, do the following:
a. Type T to select Set Trunk Priority Queue.
The following prompt is displayed:
Enter trunk group number>
134
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
b. Enter the trunk number that you want to configure. You can
configure only one trunk at a time.
A prompt similar to the following is displayed:
Enter queue for trunk group n>>
c. Enter the queue number for the trunk.
Section I: Using the Menus Interface
135
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 9: Quality of Service (QoS)
136
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 10: IGMP Snooping
IGMP Snooping Overview
The Internet Group Management Protocol (IGMP) enables routers to
create lists of nodes that are members of multicast groups. (A multicast
group is a group of end nodes that want to receive multicast packets from
a multicast application.) The router creates a multicast membership list by
periodically sending out queries to the local area networks connected to its
ports.
A node wanting to become a member of a multicast group responds to a
query by sending a report. A report indicates an end node’s desire to
become a member of a multicast group. Nodes that join a multicast group
are referred to as host nodes. After becoming a member of a multicast
group, a host node must continue to periodically issue reports to remain a
member.
After the router has received a report from a host node, it notes the
multicast group that the host node wants to join and the port on the router
where the node is located. Any multicast packets belonging to that
multicast group are then forwarded by the router out the port. If a particular
port on the router has no nodes that want to be members of multicast
groups, the router does not send multicast packets out the port. This
improves network performance by restricting multicast packets only to
router ports where host nodes are located.
There are three versions of IGMP—versions 1, 2, and 3. One of the
differences between the versions is how a host node signals that it no
longer wants to be a member of a multicast group. In version 1 it stops
sending reports. If a router does not receive a report from a host node
after a predefined length of time, referred to as a time-out value, it
assumes that the host node no longer wants to receive multicast frames,
and removes it from the membership list of the multicast group.
In version 2 a host node exits from a multicast group by sending a leave
request. After receiving a leave request from a host node, the router
removes the node from appropriate membership list. The router also stops
sending multicast packets out the port to which the node is connected if it
determines there are no further host nodes on the port.
Version 3 adds the ability of host nodes to join or leave specific sources in
a multicast group through the use of Group-Source report and Group-
Source leave messages.
The IGMP snooping feature on the switch supports IGMP versions 1 and
2. It enables the switch to monitor the flow of queries from a router and
reports and leave messages from host nodes to build its own multicast
membership lists. It uses the lists to forward multicast packets only to
switch ports where there are host nodes that are members of multicast
groups. This improves switch performance and network security by
138
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
restricting the flow of multicast packets only to those switch ports
connected to host nodes.
Without IGMP snooping a switch would have to flood multicast packets out
all of its ports, except the port on which it received the packet. Such
flooding of packets can negatively impact switch and network
performance.
The switch maintains its list of multicast groups through an adjustable
timeout value, which controls how frequently it expects to see reports from
end nodes that want to remain members of multicast groups, and by
processing leave requests.
By default, IGMP snooping is disabled on the switch.
Section II: Menus Interface
139
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 10: IGMP Snooping
Configuring IGMP
To configure IGMP, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 4 on
2. From the Advanced Switch Configuration Menu, type I to select IGMP
Snooping Configuration.
The IGMP Configuration Menu is shown in Figure 35.
AT-9000/24 Local Management System
Advanced Switch Configuration -> IGMP Configuration Menu
IGMP Snooping Status: Disabled
IGMP Snooping Age-Out Timer: 280 seconds
VLAN ID
-------
Multicast group address
------------------------
----------------------- <COMMAND> -----------------------------
[N]ext Page
[E]nable/Disable IGMP Snooping
[S]et Age-Out Timer
[Q]uit to previous menu
[P]revious Page
[V]iew group members
Command>
Figure 35. IGMP Configuration Menu
3. Type E to select Enable/Disable IGMP Snooping.
The following prompt is displayed:
Enable or Disable IGMP snooping (E/D)>
4. Type E to enable IGMP snooping or D to disable IGMP snooping.
5. If you are activating the feature, type S to Set Age-Out Timer.
The following prompt is displayed:
140
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enter age out time>
6. Specify the age-out time in seconds.
The range is 280 to 420 seconds and the default is 280 seconds.
Section II: Menus Interface
141
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 10: IGMP Snooping
Viewing the Multicast Groups
To view the IGMP snooping multicast groups, perform the following
procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 4 on
2. From the Advanced Switch Configuration Menu, type I to select IGMP
Snooping Configuration.
The IGMP Configuration Menu is shown in Figure 35 on page 140.
3. Start your viewing application.
4. Type V to select View group members.
The following prompt is displayed:
Enter VLAN ID>
5. Enter the VLAN ID number.
The menu is updated to show the MAC address of the multicast group,
AT-9000/24 Local Management System
Advanced Switch Configuration -> IGMP Configuration Menu
IGMP Snooping Status:Disabled
IGMP Snooping Age-Out Timer:280 seconds
VLAN ID
-------
1
Multicast group address
------------------------
01:00:5E:7F:FF:FA
----------------------- <COMMAND> -----------------------------
[N]ext Page
[E]nable/Disable IGMP Snooping
[S]et Age-Out Timer
[Q]uit to previous menu
[P]revious Page
[V]iew group members
Command>
142
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Figure 36. MAC Address DIsplayed on IGMP Configuration Menu
The following prompt is displayed:
Enter MAC Address (xx.xx.xx.xx.xx.xx)>
6. Enter the MAC address as shown on the menu.
AT-9000/24 Local Management System
IGMP Configuration Menu -> View Group Members Menu
VLAN ID: 1 Multicast group address: 01:00:5E:75:FF:FA
Group members
-------------------------------------------------------
3, 7
----------------------- <COMMAND> -----------------------------
[Q]uit to previous menu
Command>
Figure 37. View Group Members Menu
Section II: Menus Interface
143
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 10: IGMP Snooping
144
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
RSTP Overview
The performance of a Ethernet network can be negatively impacted by the
formation of a data loop in the network topology. A data loop exists when
two or more nodes on a network can transmit data to each other over
more than one data path. The problem that data loops pose is that data
packets can become caught in repeating cycles, referred to as broadcast
storms, that needlessly consume network bandwidth and can significantly
reduce network performance.
RSTP prevents data loops from forming by ensuring that only one path
exists between the end nodes in your network. Where multiple paths exist,
this protocol places the extra paths in a standby or blocking mode, leaving
only one main active path.
RSTP can also activate a redundant path if the main path goes down. So
not only do these protocols guard against multiple links between segments
and the risk of broadcast storms, but they can also maintain network
connectivity by activating a backup redundant path in case a main link
fails.
When a change is made to the network topology, such as the addition of a
new bridge, a spanning tree protocol must determine whether there are
redundant paths that must be blocked to prevent data loops, or activated
to maintain communications between the various network segments. This
is the process of convergence.
RSTP can complete a convergence in seconds, and so greatly diminishes
the possible impact the process can have on your network.
At this time, only RSTP is available on the switch.
The RSTP implementation complies with the IEEE 802.1w standard. The
following subsections provide a basic overview on how RSTP operates
and define the different parameters that you can adjust.
Bridge Priority The first task that bridges perform when a spanning tree protocol is
activated on a network is the selection of a root bridge. A root bridge
distributes network topology information to the other network bridges and
is used by the other bridges to determine if there are redundant paths in
and the Root
Bridge
the network.
A root bridge is selected by the bridge priority number, and sometimes the
bridge’s MAC address, also referred to as the bridge identifier. The bridge
with the lowest bridge priority number in the network is selected as the
root bridge. If two or more bridges have the same bridge priority number,
of those bridges the one with the lowest MAC address is designated as
the root bridge.
146
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
You can designate which switch on your network you want as the root
bridge by giving it the lowest bridge priority number. You might also
consider which bridge should function as the backup root bridge in the
event you need to take the primary root bridge offline, and assign that
bridge the second lowest bridge identifier number. You can change the
bridge priority number for the switch.
The bridge priority has a range of 0X0000 to 0XF000 and is specified in
multiples of 0x1000.
After the convergence process has completed, there is only one path
between the switch and the root bridge. The active port on the switch
through which the bridge is communicating with the root bridge is called
the root port. Each switch in the spanning tree domain has a root port with
the exception of the root bridge, which has no root port.
Designated Bridge and Designated Port
The switch that is directly connected to the root port of the switch is called
the designated bridge. The port on the designated bridge that is connected
to the switch’s root port is called the designated port.
Path Costs and Port Costs
After the root bridge has been selected, the bridges must determine if the
network contains redundant paths and, if one is found, they must select a
preferred path while placing the redundant paths in a backup or blocking
state.
If redundant paths exist, the bridges that are a part of the paths must
determine which path will be the primary, active path, and which path(s)
will be placed in the standby, blocking mode. This is accomplished by an
determination of path costs. The path offering the lowest cost to the root
bridge becomes the primary path and all other redundant paths are placed
into blocking state.
Path cost is determined through an evaluation of port costs. Every port on
a bridge participating in STP has a cost associated with it. The cost of a
port on a bridge is typically based on port speed. The faster the port, the
lower the port cost. The exception to this is the ports on the root bridge,
where all ports have a port cost of 0.
Path cost is the sum of the port costs between a bridge and the root
bridge.
Port cost also has an Auto-Detect feature. This feature allows spanning
tree to automatically set the port cost according to the speed of the port,
assigning a lower value for higher speeds. Auto-Detect is the default
setting.
Section II: Menus Interface
147
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
Table 3 lists the RSTP port costs with Auto-Detect.
Table 3. RSTP Auto-Detect Port Costs
Port Speed
Port Cost
10 Mbps
2,000,000
200,000
20,000
100 Mbps
1000 Mbps
Table 4 lists the RSTP port costs with Auto-Detect when the port is part of
a port trunk.
Table 4. RSTP Auto-Detect Port Trunk Costs
No. of Ports/
Port Speed
Port Cost
10,000
Trunk
10/100/1000
10/100/1000
10/100/1000
10/100/1000
10/100/1000
10/100/1000
10/100/1000
2
3
4
5
6
7
8
6,666
5,000
4,000
3,333
2,857
2,500
You can override Auto-Detect and set the port cost manually. However,
you must assign the same port cost to all ports that are members of a
trunk.
Port Priority
If two paths have the same port cost, the bridges must select a preferred
path. In some instances this can involve the use of the port priority
parameter. This parameter is used as a tie breaker when two paths have
the same cost.
The range for port priority, in hexadecimal format, is 0 to 240, with 240
being the highest priority. As with bridge priority, this range is broken into
multiples of 16. To select a port priority for a port, you enter the desired
value.
148
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Table 5 lists the values. The default value is 0.
Table 5. Port Priority Value Increments
Port
Priority
Port
Priority
0
128
16
32
48
64
80
96
112
144
160
176
192
208
224
240
If two paths have the same port cost and the same priority, then the ports
with the lowest port MAC addresses become the root ports of their
respective bridges.
Hello Time and Bridge Protocol Data Units (BPDUs)
The bridges that are part of a spanning tree domain communicate with
each other using a bridge broadcast frame that contains a special section
devoted to carrying STP or RSTP information. This portion of the frame is
referred to as the bridge protocol data unit (BPDU). When a bridge is
brought online, it issues a BPDU in order to determine whether a root
bridge has already been selected on the network, and if not, whether it has
the lowest bridge priority number of all the bridges and should therefore
become the root bridge.
The root bridge periodically transmits a BPDU to determine whether there
have been any changes to the network topology and to inform other
bridges of topology changes. The frequency with which the root bridge
sends out a BPDU is called the hello time. This is a value that you can set
in the AT-S84 management software. The interval is measured in seconds
and the default is two seconds. Consequently, if an AT-9000/24 Gigabit
Ethernet switch is selected as the root bridge of a spanning tree domain, it
transmits a BPDU every two seconds.
Point-to-Point and Edge Ports
Part of the task of configuring RSTP is defining the port types on the
bridge. This relates to the device(s) connected to the port. With the port
types defined, RSTP can quickly reconfigure a network when a change in
network topology is detected.
Section II: Menus Interface
149
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
There are two possible selections:
ˆ Point-to-point port
ˆ Edge port
The default setting for the RSTP port point-to-point status is automatic.
With the automatic setting, the point-to-point status is True of the port is
operating in full-duplex mode. If the port is operating in half-duplex mode,
then the point-to-point status is False.
Figure 38 illustrates two AT-9000/24 Gigabit Ethernet switches that have
been connected with one data link. With the link operating in full-duplex,
the ports are point-to-point ports.
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Point-to-Point Ports
(Full-duplex Mode)
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Figure 38. Point-to-Point Ports
If a port is operating in half-duplex mode and is not connected to any
further bridges participating in STP or RSTP, then you need to manually
define the port as an edge port. The default setting for the edge port status
is False. You must manually configure this setting for each port. There is
port on an AT-9000/24 Gigabit Ethernet switch. The port is connected to
an Ethernet hub, which in turn is connected to a series of Ethernet
workstations. This is an edge port because it is connected to a device
operating at half-duplex mode and there are no participating STP or RSTP
devices connected to it.
150
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Edge Port
Hub
Figure 39. Edge Port
A port can be both a point-to-point and an edge port at the same time.
Figure 40 illustrates a port functioning as both a point-to-point and edge
port. You must manually configure the edge port status.
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Point-to-Point and Edge Port
Workstation
(Full-duplex Mode)
Figure 40. Point-to-Point and Edge Port
Determining whether a bridge port is point-to-point, edge, or both, can be a
bit confusing. For that reason, do not change the default values for this
RSTP feature unless you have a good grasp of the concept. In most
cases, the default values work well.
Mixed STP and RSTP IEEE 802.1w is fully compliant with STP IEEE 802.1d. Your network
can consist of bridges running both protocols. STP and RSTP in the same
network can operate together to create a single spanning tree domain.
RSTP Networks
The switch monitors the traffic on each port for BPDU packets. When you
set the switch to RSTP mode, all the ports operate in that mode and reject
STP BPDU packets. When you set the switch to operate in STP-
compatible mode, the ports can receive either RSTP or STP BPDU
Section II: Menus Interface
151
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
packets.
Rapid Spanning The spanning tree implementation in the AT-S84 management software is
a single-instance spanning tree. The switch supports just one spanning
tree. You cannot define multiple spanning trees.
Tree and VLANs
The single spanning tree encompasses all ports on the switch. If the ports
are divided into different VLANs, the spanning tree crosses the VLAN
boundaries. This point can pose a problem in networks containing multiple
VLANs that span different switches and are connected with untagged
ports. In this situation, STP blocks a data link because it detects a data
loop. This can cause fragmentation of your VLANs.
span two AT-9000/24 Gigabit Ethernet switches. Two links consisting of
untagged ports connect the separate parts of each VLAN. If RSTP is
activated on the switches, one of the links is disabled. In the example, the
port on the top switch that links the two parts of the Production VLAN is
changed to the block state. This leaves the two parts of the Production
VLAN unable to communicate with each other.
Sales
VLAN
Production
VLAN
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Blocked Port
Blocked Data Link
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Production
VLAN
Sales
VLAN
Figure 41. VLAN Fragmentation
You can avoid this problem by not activating rapid spanning tree or by
connecting VLANs using tagged port members instead of untagged ports.
(For information on tagged and untagged ports, refer to Chapter 8, “Virtual
152
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enabling or Disabling RSTP
To enable or disable RSTP, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type S to select Rapid
Spanning Tree Configuration.
The Rapid Spanning Tree Configuration Menu is shown in Figure 42.
AT-9000/24 Local Management System
Advanced Switch Configuration -> Rapid Spanning Tree Configuration Menu
Global RSTP Status: Disabled
Root Port:
Root Path Cost: 0
Protocol Version: RSTP
0
Time Since Topology Change: 118 Sec.
Topology Change Count:
1
Designated Root: 8000 00C08F1211BB
Bridge ID:
Bridge Hello Time:
Bridge Maximum Age: 20 Sec.
Bridge Forward Delay: 15 Sec.
8000 010203AABB04
2 Sec.
Hello Time: 2 Sec.
Maximum Age: 20 Sec.
Forward Delay: 15 Sec.
----------------------- <COMMAND> -----------------------------
[E]nable/Disable Global RSTP
Set RSTP Protocol [V]ersion
Set Bridge [P]riority
Set Bridge [H]ello Time
Set Bridge [M]aximum Age
Set Bridge [F]orward Delay
RSTP [B]asic Port Configuration
RSTP [A]dvanced Port Configuration
Topology [I]nformation
[Q]uit to previous menu
Command>
Figure 42. RSTP Configuration Menu
The RSTP menu allows you to configure RSTP as well as to view the
current settings and contains the following items of information in the
middle portion:
Root Port
The active port on the switch that is communicating with the root
bridge. If the switch is the root bridge for the LAN, then there is no root
port and the root port parameter will be 0.
Root Path Cost
The sum of all the root port costs of all the bridges between the
Section II: Menus Interface
153
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
switch’s root port and the root bridge including the switch’s root port
cost.
Time Since Topology Change
The time in seconds since the last topology change took place. When
RSTP detects a change to the LAN’s topology or when the switch is
rebooted, this parameter is reset to 0 seconds and begins
incrementing until the next topology change is detected.
Topology Change Count
An integer that reflects the number of times RSTP has detected a
topology change on the LAN since the switch was initially powered on
or rebooted.
The following parameters refer to the designated root bridge:
Designated Root
This parameter includes two fields: the root bridge priority and the
MAC address of the root bridge. For example, 1000 00C08F1211BB
shows the root bridge priority as 1000, and 00C08F1211BB as the
MAC address.
Hello Time
The hello time. See “Hello Time and Bridge Protocol Data Units
(BPDUs)” on page 149. This parameter affects only the root bridge.
Maximum Age
The maximum amount of time that BPDUs are stored before being
deleted on the root bridge.
Forward Delay
The time interval between generating and sending configuration
messages by the root bridge.
The following parameters refer to the switch.
Bridge ID
The MAC address of the bridge. The bridge identifier is use as a tie
breaker in the selection of the root bridge when two or more bridges
have the same bridge priority. You cannot change this setting.
Bridge Hello Time
This is the time interval between generating and sending configuration
messages by the bridge. This parameter is active only when the switch
is the root bridge.
Bridge Maximum Age
The length of time after which stored bridge protocol data units
(BPDUs) are deleted by the bridge.
Bridge Forward Delay
This is the time interval between generating and sending configuration
messages by the bridge.
154
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
3. Type E to select Enable/Disable Global RSTP.
The following prompt is displayed:
Enable or Disable Global RSTP (E/D)>
4. Type E to enable RSTP or D to disable RSTP.
Section II: Menus Interface
155
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
Configuring the RSTP Bridge Settings
To configure the RSTP bridge settings, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type S to select Rapid
Spanning Tree Configuration.
The Rapid Spanning Tree Configuration Menu is shown in Figure 42
3. Type P to select Set Bridge Priority.
The following prompt is displayed:
Enter bridge priority>
The value is in the range from 0x0000 to 0xF000 and in
increments of 0x1000.
The priority number for the bridge, in hexadecimal format. This number
is used to determine the root bridge for RSTP. The bridge with the
lowest priority number is selected as the root bridge. If two or more
bridges have the same priority value, that is, the lowest of all the other
bridges, then the bridge with the numerically lowest MAC address
becomes the root bridge. When a root bridge goes offline, the bridge
with the lowest priority number automatically takes over as the root
bridge. This parameter can be from 0X0000 to 0XF000, with 0XF000
being the highest priority.
The bridge priority is shown as the first field in the “Designated Root”
and “Bridge ID” parameters.
4. Type H to select Set Bridge Hello Time.
The following prompt is displayed:
Enter bridge hello time>
This is the time interval between generating and sending configuration
messages by the bridge. This parameter can be from 1 to 10 seconds.
The default is 2 seconds.
5. Type a number for the bridge priority.
6. Type M to select Set Bridge Maximum Age.
The following prompt is displayed:
156
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enter bridge maximum age>
The bridge maximum age is the length of time after which stored
bridge protocol data units (BPDUs) are deleted by the bridge. All
bridges in a bridged LAN use this aging time to test the age of stored
configuration messages called bridge protocol data units (BPDUs). For
example, if you use the default value 20, all bridges delete current
configuration messages after 20 seconds. This parameter can be from
6 to 40 seconds.
When you select a value for maximum age, observe the following
rules:
MaxAge must be greater than (2 x (HelloTime + 1)).
MaxAge must be less than (2 x (ForwardingDelay - 1)).
Note
The aging time for BPDUs is different from the aging time used by
the MAC address table.
7. Type a number for the bridge maximum age.
8. Type F to select Set Bridge Forward Delay.
The following prompt is displayed:
Enter bridge forward delay>
The bridge forwarding delay is the waiting period in seconds before a
bridge changes to a new state, for example, becomes the new root
bridge after the topology changes. If the bridge transitions too soon,
not all links may have yet adapted to the change, resulting in network
loops. The range is 4 to 30 seconds. The default is 15 seconds.
9. Type a number for the bridge forward delay, between 4 and 30
seconds.
Section II: Menus Interface
157
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
Configuring STP Compatibility
Choosing an RSTP protocol version allows you to determine if the switch
ports will operate in RSTP-only mode or are STP-compatible. This setting
applies to all of the ports; you cannot set this on a per-port basis.
To configure the STP compatibility, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type S to select Rapid
Spanning Tree Configuration.
The Rapid Spanning Tree Configuration Menu is shown in Figure 42
3. Type V to select Set RSTP Protocol Version.
The following prompt is displayed:
Set RSTP protocol version (S/R)>
4. Type S to make the ports STP-compatible, or R to make the ports
operate only in RSTP mode.
158
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Configuring RSTP Port Settings
This section contains the following topics:
Configuring the To configure the basic RSTP port settings, perform the following
procedure:
Basic RSTP Port
Settings
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type S to select Rapid
Spanning Tree Configuration.
The Rapid Spanning Tree Configuration Menu is shown in Figure 42
3. From the Rapid Spanning Tree Configuration Menu, type B to select
RSTP Basic Port Configuration.
The RSTP Basic Port Configuration menu is shown in Figure 43.
AT-9000/24 Local Management System
Rapid Spanning Tree Configuration -> RSTP Basic Port Configuration
Port Trunk Link State
---- ----- ---- ---------- --------- --------
Role
Priority
Path Cost STP Status
--------- ----------
1
2
3
4
5
6
7
8
9
---
---
---
---
---
---
---
---
---
---
---
---
Up
Down Forwarding Disabled 128
Up Forwarding Root 128
Forwarding Disabled 128
200000
200000
200000
200000
200000
200000
200000
200000
20000
Disabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Enabled
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
Down Forwarding Disabled 128
10
11
12
20000
20000
20000
----------------------------- <COMMAND> ---------------------------------
Set Port Pr[i]ority
Set Path [C]ost
Set Port STP [S]tatus
[Q]uit to previous menu
Command>
Figure 43. RSTP Basic Port Configuration Menu
Section II: Menus Interface
159
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
4. Type I to select Set Port Priority.
The following prompt is displayed:
Select port number to be changed>
Port number is in range from 1 to 9, 0 to set all ports
5. Enter the number of the port you want to change, or type 0 (zero) to
apply the settings to all ports on the switch.
The following prompt is displayed:
Enter priority for port n>
This parameter is used as a tie breaker when two or more ports are
determined to have equal costs to the root bridge. The range is 0 to
240 in increments of 16. The default value is 8 (priority value 128). For
Note
If two or more ports have the same cost and priorities, then the port
with the lowest MAC address becomes the forwarding port.
6. Enter a number for the priority.
7. Type C to select Set Path Cost.
The following prompt is displayed:
Select port number to be changed>
Port number is in range from 1 to 9, 0 to set all ports
8. Enter the number of the port you want to change, or type 0 (zero) to
apply the settings to all ports on the switch.
The following prompt is displayed:
Enter path cost for port n>
The spanning tree algorithm uses the cost parameter to decide which
port provides the lowest cost path to the root bridge for that LAN.The
range is from 0 to 240, with 240 being the highest priority. For a list of
The default setting is based on the Auto-Detect Port Cost feature,
which sets port cost depending on the speed of the port. The default
9. Enter a number for the path cost.
10. Type S to select Set Port STP Status.
160
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Select port number to be changed>
Port number is in range from 1 to 9, 0 to set all ports
This parameter enables or disables RSTP on a specified port or a
group of ports in a trunk.
11. Enter the number of the port you want to change, or type 0 (zero) to
apply the settings to all ports on the switch.
The following prompt is displayed:
Enable or Disable STP for port n (E/D)>
12. Type E to enable or D to disable STP on the port.
Configuring the To configure the advanced RSTP port settings, perform the following
procedure:
Advanced RSTP
Port Settings
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type S to select Rapid
Spanning Tree Configuration.
The Rapid Spanning Tree Configuration Menu is shown in Figure 42
3. From the Rapid Spanning Tree Configuration Menu, type A to select
RSTP Advanced Port Configuration.
Section II: Menus Interface
161
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
The RSTP Advanced Port Configuration menu is shown in Figure 43.
AT-9000/24 Local Management System
Rapid Spanning Tree Configuration -> RSTP Advanced Port Configuration
Port Trunk Link State
---- ----- ---- ---------- ----------------------- -------------- ------
Role
Admin/OperEdge Admin/OperPtoP Migrat
1
2
3
4
5
6
7
8
9
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
--- Down Forwarding Disabled False/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Auto/False
Init.
Init.
Init.
Init.
Init.
Init.
Init.
Init.
Init.
Init.
Init.
Init.
10
11
12
------------------------------- <COMMAND> ---------------------------------
[N]ext Page
[P]revious Page
Set Port [E]dge Status
Set Port P-[t]o-P Status
Restart Port [M]igration
[Q]uit to previous menu
Command>
Figure 44. RSTP Advanced Port Configuration Menu
4. Type E to select Edge Status.
The following prompt is displayed:
The following prompt is displayed:
Select port number to be changed>
Port number is in range from 1 to 9, 0 to set all ports
5. Enter the number of the port you want to change, or type 0 (zero) to
apply the settings to all ports on the switch.
The following prompt is displayed:
Set edge port for port n >(T/F)>
This parameter defines whether the port is functioning as an edge port.
The possible settings are True and False. For an explanation of this
parameter, refer to “Point-to-Point and Edge Ports” on page 149.
6. Enter T for True or F for False to change the Admin/OperEdge status.
7. Type P to select P-to-P Status.
162
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The following prompt is displayed:
Select port number to be changed>
Port number is in range from 1 to 9, 0 to set all ports
8. Enter the number of the port you want to change, or type 0 (zero) to
apply the settings to all ports on the switch.
The following prompt is displayed:
Set point-to-point for port n >(A/T/F)
This parameter defines whether the port is functioning as a point-to-
point port. The possible settings are Auto, True, and False. For an
explanation of this parameter, refer to “Point-to-Point and Edge Ports”
9. Enter A for Auto, T for True, or F for False, according to the operating
status your network requires, following the guidelines in Table 6.
Table 6. RSTP Point-to-Point Status
Admin
Auto
Operation
True
Port Duplex Operation
Full
False
True
Half
True
Full or Half
Full or Half
False
False
10. Type M to select Restart Port Migration.
The following prompt is displayed:
Select port number to be changed>
11. Enter the number of the port you want to change.
The following prompt is displayed:
Restart the protocol migration process for port n? (Y/N)
This parameter resets an RSTP port, allowing it to send RSTP BPDUs.
When an RSTP bridge receives STP BPDUs on an RSTP port, the port
transmits STP BPDUs. The RSTP port continues to transmit STP
BPDUs indefinitely.
12. Enter T for True or F for False.
Section II: Menus Interface
163
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
Displaying the RSTP Topology
To display the RSTP topology, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
2. From the Basic Switch Configuration Menu, type S to select Rapid
Spanning Tree Configuration.
The Rapid Spanning Tree Configuration Menu is shown in Figure 42
3. From the Rapid Spanning Tree Configuration Menu, type I to select
Topology Information.
AT-9000/24 Local Management System
Rapid Spanning Tree Configuration -> Designated Topology Information
PortTrunk Link Desig. Root
--------- ---- ----------------- ----------- ----------------- -----------
Desig. Cost Desig. Bridge
Desig. Port
1
2
3
4
5
6
7
8
9
Up
Down 8000 00c08f1211bb 0
Up 8000 000c46aa7fal 200000
8000 00c08f1211bb 0
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 003084000000 00 03
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
8000 00c08f1211bb 00 00
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
Down 8000 00c08f1211bb 0
10
11
12
----------------------- <COMMAND> -------------------------------------------
[N]ext Page
Command>
[P]revious Page
[Q]uit to previous menu
Figure 45. Topology Information Menu
This menu displays the following information about the ports:
Trunk
The trunk of which the port is a member.
164
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Link
Whether the link on the port is up or down.
Desig. Root
The designated root bridge is the switch that is directly connected to
the local switch. The MAC address of the designated root bridge is
displayed. In the network topology, the designated bridge is located
between the local switch and the root bridge.
Desig. Cost
The sum of all the root port costs on all bridges, including the switch,
between the switch and the root bridge.
Desig. Bridge
An adjacent bridge to which the root port of the switch is actively
connected.
Desig. Port
The port on the designated bridge that is directly connected to the root
port of the local switch.
Section II: Menus Interface
165
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 11: Rapid Spanning Tree Protocol (RSTP)
166
Section II: Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 12: 802.1x Network Access Control
802.1x Network Access Control Overview
802.1x Network Access Control (IEEE 802.1x) is used to control who can
send traffic through and receive traffic from a switch port. With this feature,
the switch will not allow an end node to send or receive traffic through a
port until the user of the node logs on by entering a username and
password.
This feature can prevent an unauthorized individual from connecting a
computer to a switch port or using an unattended workstation to access
your network resources. Only those users to whom you have assigned a
username and password will be able to use the switch to access the
network.
This feature must be used with the RADIUS authentication protocol and
requires that there be a RADIUS server on your network. The RADIUS
server performs the authentication of the username and password
combinations.
Note
RADIUS with Extensible Authentication Protocol (EAP) extensions
is the only supported authentication server for this feature.
Following are several terms to keep in mind when using this feature.
ˆ Supplicant - A supplicant is an end user or end node that wants to
access the network through a switch port. A supplicant is also referred
to as a client.
ˆ Authenticator - The authenticator is a port on the switch that prohibits
network access by a supplicant until the network user has entered a
valid username and password.
ˆ Authentication server - The authentication server is the network device
that has the RADIUS server software. This is the device that does the
actual authenticating of the user names and passwords from the
supplicants.
The AT-9000/24 Gigabit Ethernet switch does not authenticate the
usernames and passwords from the end users. Rather, the switch acts as
an intermediary between a supplicant and the authentication server during
the authentication process.
168
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Authentication Below is a brief overview of the authentication process that occurs
between a supplicant, authenticator, and authentication server. For further
details, refer to the IEEE 802.1x standard.
Process
ˆ Either the authenticator (that is, a switch port) or the supplicant can
initiate an authentication prompt exchange. The switch initiates an
exchange when it detects a change in the status of a port (such as
when the port transitions from no link to valid link), or if it receives a
packet on the port with a source MAC address not in the MAC address
table.
ˆ An authenticator starts the exchange by sending an EAP-Request/
Identity packet. A supplicant starts the exchange with an EAPOL-Start
packet, to which the authenticator responds with a EAP-Request/
Identity packet.
ˆ The supplicant responds with an EAP-Response/Identity packet to the
authentication server via the authenticator.
ˆ The authentication server responds with an EAP-Request packet to
the supplicant via the authenticator.
ˆ The supplicant responds with an EAP-Response/MDS packet
containing a username and password.
ˆ The authentication server sends either an EAP-Success packet or
EAP-Reject packet to the supplicant.
ˆ Upon successful authorization of the supplicant by the authentication
server, the switch adds the supplicant’s MAC address to the MAC
address as an authorized address and begins forwarding network
traffic to and from the port.
ˆ When the supplicant sends an EAPOL-Logoff prompt, the switch
removes the supplicant’s MAC address from the MAC address table,
preventing the supplicant from sending or receiving any further traffic
from the port.
Authenticator All of the ports on the AT-9000/24 Gigabit Ethernet switch are
authenticator ports. An authenticator port can have one of three settings.
These settings are referred to as the port control settings. The settings
are:
Ports
ˆ Auto - Activates 802.1x authentication. An authenticator port with this
setting does not forward network traffic to or from the end node until
the client has entered a username and password that the
authentication server must validate. The port begins in the
unauthorized state, sending and receiving only EAPOL frames. All
other frames, including multicast and broadcast frames, are discarded.
The authentication process begins when the link state of the port
changes or the port receives an EAPOL-Start packet from a supplicant.
The switch requests the identity of the client and begins relaying
authentication prompts between the client and the authentication
Section I: Using the Menus Interface
169
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 12: 802.1x Network Access Control
server. Each client that attempts to access the network is uniquely
identified by the switch using the client's MAC address.
ˆ Force-unauthorized - Places the port in the unauthorized state,
ignoring all attempts by the client to authenticate. This port control
setting blocks all users from accessing the network through the port
and is similar to disabling a port and can be used to secure a port from
use. The port continues to forward EAPOL packets, but discards all
other packets, including multicast and broadcast packets.
ˆ Force-authorized - Disables IEEE 802.1x authentication and causes
the port to transition to the authorized state without any authentication
exchange required. The port transmits and receives normal traffic
without 802.1x-based authentication of the client. This is the default
setting. Use this port control setting for those ports where there are
network devices that are not to be authenticated.
Figure 46 illustrates the concept of the authenticator port control settings.
Port 17
802.1x Port Control:
Setting: Force-unauthorized
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Port 2
802.1x Port Control
Setting: Auto
Port 20
802.1x Port Control:
Setting: Force-authorized
Supplicant with
802.1x Client
Software
RADIUS
Authentication
Server
Figure 46. Example of the Authenticator Role
ˆ Port 2 is set to Auto. The end node connected to the port must use its
802.1x client software and provide a username and password to send
or receive traffic from the switch.
ˆ Port 8 is set to the Force-authorized setting so that the end node
connected to the port does not have to provide a user name or
password to send or receive traffic from the switch. In the example, the
node is the RADIUS authentication server. Since the server cannot
authenticate itself, its port must be set to Force-authorized in order for
it to pass traffic through the port.
ˆ Port 7 is set to Force-unauthorized to prevent anyone for using the
port.
170
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
As mentioned earlier, the switch itself does not authenticate the user
names and passwords from the clients. That is the responsibility of the
authentication server, which contains the RADIUS server software.
Instead, a switch acts as an intermediary for the authentication server by
denying access to the network by the client until the client has provided a
valid username and password, which the authentication server validates.
General Steps Following are the general steps to implementing 802.1x Network Access
Control:
1. You must install RADIUS server software on one or more of your
network servers or management stations. Authentication protocol
server software is not available from Allied Telesis.
2. You need to install 802.1x client software on those workstations that
are to be supplicants.
3. You must configure and activate the RADIUS client software in the
AT-S84 management software. The default setting for the
authentication protocol is disabled. You will need to provide the
following information:
ˆ The IP address of a RADIUS servers.
ˆ The encryption key used by the authentication server.
For instructions, refer to Chapter 13, “RADIUS Authentication Protocol”
4. You must configure the authenticator port settings, as explained in
chapter.
Network Access Following are the guidelines for using this feature:
Control
Guidelines
ˆ Ports set to Auto do not support port trunking or dynamic MAC address
learning.
ˆ The appropriate setting for a port on an AT-8000/8POE Fast Ethernet
Switch connected to an authentication server is Force-authorized, the
default setting. This is because an authentication server cannot
authenticate itself.
ˆ The authentication server must be a member of the Default VLAN by
communicating with the switch through a port that is an untagged
member of the Default VLAN.
ˆ Allied Telesis does not support connecting more than one supplicant to
an authenticator port on the switch. The switch allows only one
supplicant to log on per port.
Section I: Using the Menus Interface
171
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 12: 802.1x Network Access Control
Note
Connecting multiple supplicants to a switch port set to the Auto
setting does not conform to the IEEE 802.1x standard. This can
introduce security risks and can result in undesirable switch
behavior. To avoid this, Allied Telesis recommends use the Force-
authorized setting on those ports that are connected to more than
one end node, such as a port connected to another switch or to a
hub.
ˆ A username and password combination is not tied to the MAC address
of an end node. This allows end users to use the same username and
password when working at different workstations.
ˆ After a supplicant has successfully logged on, the MAC address of the
end node is added to the switch’s MAC address table as an
authenticated address. It remains in the table until the end user logs off
the network. The address is not timed out, even if the end node
becomes inactive.
Note
End users of access control should be instructed to always log off
when they are finished with a work session. This prevents
unauthorized individuals from accessing the network through
unattended network workstations.
ˆ There should be only one port in the authenticator port control setting
of Auto between a client and the authentication server.
172
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
ˆ Ports used to interconnect switches should be set to the port control
setting of Force-authorized. This is illustrated in Figure 47.
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
Switch A
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Port 4:
802.1x Port Control
Setting: Force-authorized
Port 16:
802.1x Port Control
Setting: Force-authorized
RADIUS
Authentication
Server
Port 3:
802.1x Port Control
Setting: Force-authorized
PORT ACTIVITY
AT-9000/24
1000
10/100
24 Port Gigabit Ethernet Switch
LINK
ACT
SFP
Switch B
1
2
3
4
5
6
7
8
9
11 13 15 17 19 21R 23R
2
1
2
2
POWER
10 12 14 16 18 20 22R 24R
2
3
2
4
793
Ports 6 - 20:
802.1x Port Control
Setting: Auto
Supplicants with
802.1x Client Software
Figure 47. Authentication Across Multiple Switches
Section I: Using the Menus Interface
173
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 12: 802.1x Network Access Control
Configuring 802.1x Network Access Control
To configure 802.1x network access control, perform the following
procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 21 on
2. From the Advanced Switch Configuration Menu, type X to select
802.1x Port Based Access Control Configuration.
The Port Based Access Control Configuration Menu is shown in
AT-9000/24 Local Management System
Advanced Switch Configuration -> Port Based Access Control Configuration Menu
NAS ID
Port No
Port Status
Port Control
Transmission Period
Supplicant Timeout
Server Timeout
Maximum Request
Quiet Period
: Nas1
: 1
: Authorized
: Force Authorized
: 30
: 30
: 30
: 2
seconds
seconds
seconds
: 60
seconds
Re-authentication Period : 3600 seconds
Re-authentication Status : Disabled
----------------------- <COMMAND> -----------------------------------------
[N]AS ID
[P]ort No
Port [C]ontrol
[T]ransmission Period
Supp[l]icant Timeout
Server Time[o]ut
[M]aximum Request
Q[u]iet Period
R[e]-auth Period
Re-[a]uth Status
[I]nitialize
[R]e-auth Initialize
[Q]uit to previous Page
Command>
Figure 48. Port Based Access Control Configuration Menu
174
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
3. Type P to select Port No.
The following prompt is displayed:
Enter port number>
4. Enter the number of the port on the switch you want to configure. You
can configure only one port at a time.
The Port Based Access Control Configuration Menu is updated with
the current settings of the selected port.
5. Type N to select NAS ID.
This parameter assigns an 802.1x identifier to the switch that applies
to all ports. The NAS ID can be up to sixteen characters. Valid
characters are 0 to 9, a to z, and A to Z. Spaces are allowed.
Specifying an NAS ID is optional.
The following prompt is displayed:
Enter NAS ID >
6. Type a name for the NAS ID.
Note
Port Status displays the current 802.1 status of the port as either
authorized or unauthorized. This is not an adjustable parameter.
7. To configure the port control type, do the following:
a. Type C to select Port Control.
The following prompt is displayed:
Select authenticator port control (A/U/F) >
The options are:
A (Auto) - Enables 802.1x authentication and causes the port to
begin in the unauthorized state, allowing only EAPOL frames to be
sent and received through the port. The authentication process
begins when the link state of the port changes or the port receives
an EAPOL-Start packet from a supplicant. The switch requests the
identity of the client and begins relaying authentication prompts
between the client and the authentication server.
U (Force-unauthorized) - Causes the port to remain in the
unauthorized state, ignoring all attempts by the client to
authenticate.
Section I: Using the Menus Interface
175
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 12: 802.1x Network Access Control
F (Force-authorized) - Disables IEEE 802.1x authentication and
causes the port to transition to the authorized state without any
authentication exchange required. The port transmits and receives
normal traffic without 802.1x-based authentication of the client.
This is the default setting.
b. Type A, U, or F.
8. To configure the transmission period, do the following:
a. Type T to select Transmission Period.
The following prompt is displayed:
Enter transmission period >
This parameter sets the number of seconds that the switch waits
for a response to an EAP-request/identity frame from the client
before retransmitting the request. The default value is 30 seconds.
The range is 1 to 65,535 seconds.
b. Type a number for the transmission period.
9. To set the supplicant timeout, do the following:
a. Type L to select Supplicant Timeout.
The following prompt is displayed:
Enter supplicant timeout value >
This parameter sets the switch-to-client retransmission time for the
EAP-request frame. The default value for this parameter is 30
seconds. The range is 1 to 600 seconds.
b. Type a number for the supplicant timeout.
10. To set the server timeout, do the following:
a. Type O to select Server Timeout.
The following prompt is displayed:
Enter transmission period >
This parameter sets the timer used by the switch to determine
authentication server timeout conditions. The default value for this
parameter is 10 seconds. The range is 1 to 60 seconds.
b. Type a number for the server timeout.
11. To set the maximum number of requests, do the following:
a. Type M to select Maximum Request.
176
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The following prompt is displayed:
Enter maximum request count >
This parameter sets the maximum number of times that the switch
retransmits an EAP Request packet to the client before it times out
the authentication session. The default value for this parameter is 2
retransmissions. The range is 1 to 10 retransmissions.
b. Type a number for the maximum request count.
12. To configure the quiet period, do the following:
a. Type U to select Quiet Period.
The following prompt is displayed:
Enter quiet period >
This parameter sets the number of seconds that the port remains in
the quiet state following a failed authentication exchange with the
client. The default value is 60 seconds. The range is 0 to 65,535
seconds.
b. Enter a number for the quiet period.
13. To configure the reauthentication period, do the following:
a. Type E to select Re-Auth Period.
The following prompt is displayed:
Enter re-authentication period >
This parameter specifies the time period between periodic
reauthentication of the client. The default value is 3600 seconds.
The range is 1 to 65,535 seconds.
b. Enter a number for the re-authentication period.
14. To enable or disable reauthentication, do the following:
a. Type A to select Re-Auth Status.
The following prompt is displayed:
Enable or Disable re-authentication? (E/D) >
This parameter specifies if reauthentication should occur according
to the reauthentication period. The options are Enabled or
Disabled.
b. Type E to enable reauthentication or D to disable reauthentication.
Section I: Using the Menus Interface
177
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 12: 802.1x Network Access Control
15. If the port control setting is Auto and you want to return the EAPOL
machine state on the port to the initialized state, do the following:
a. Type I to select Initialize.
The following prompt is displayed:
Would you initialize authenticator? (Y/N)>
b. Typing Y returns the EAPOL machine state on the port to the
initialize state. Typing N cancels the step.
16. If the port control setting is Auto and you want the node connected to
the port to reauthenticate with the RADIUS server, do the following:
a. Type R to select Re-auth Initialize.
The following prompt is displayed:
Initialize re-authentication? (Y/N)>
b. Typing Y returns the port to the unauthenticated state and the re-
authentication period to zero. The user must enter a valid
username and password to continue to use the switch port. Typing
N cancels the reauthentication.
178
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 13
RADIUS Authentication Protocol
This chapter describes how to configure the RADIUS client software on the
switch. You can use the RADIUS client with 802.1x network access control
to control who can forward packets through the switch. Sections in the
chapter include:
Section I: Using the Menus Interface
179
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 13: RADIUS Authentication Protocol
RADIUS Overview
RADIUS (Remote Authentication Dial In User Services) is an
authentication protocol for enhancing the security of your network. The
protocol transfers the task of authenticating network access from a
network device to an authentication protocol server.
The AT-S84 management software comes with RADIUS client software.
You can use the client software together with 802.1x network access
control, described in Chapter 12, “802.1x Network Access Control” on
page 167, to control which end users and end nodes can send packets
through the switch.
RADIUS What do you need to use the RADIUS protocol? Following are the main
points.
Implementation
Guidelines
ˆ You must install RADIUS server software on a network server or
management station. Authentication protocol server software is not
available from Allied Telesis.
ˆ The RADIUS server must be communicating with the switch through a
port that is an untagged member of the Default VLAN.
ˆ If the RADIUS server is on a different subnet from switch, be sure to
specify a default gateway in the System IP Configuration Menu, shown
in Figure 5 on page 33, so that the switch and server can communicate
with each other.
ˆ You need to configure the RADIUS server software on the
authentication server by specifying the username and password
combinations. The maximum length of a username or password is 12
alphanumeric characters.
Note
This manual does not explain how to configure RADIUS server
software. Refer to the documentation that came with the software for
instructions.
ˆ You must activate the RADIUS client software on the switch using the
AT-S84 management software and configure the settings. This is
default, authentication protocol is disabled.
Note
For more information on the RADIUS authentication protocol, refer
to the RFC 2865 standard.
180
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Configuring the RADIUS Server
To configure the RADIUS client, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type U to select User
Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7 on page
3. Type R to select RADIUS Server Configuration.
The RADIUS Server Configuration Menu is shown in Figure 49.
AT-9000/24 Local Management System
Basic Switch Configuration -> RADIUS Server Configuration Menu
Server IP Address
Shared Secret
Response Time
: 0.0.0.0
:
: 10 seconds
Maximum Retransmission : 3
----------------------- <COMMAND> -----------------------------
Set Server [I]P
Set Shared Se[c]ret
Set [R]esponse Time
Set [M]ax Retransmission
[Q]uit to previous menu
Command>
Figure 49. RADIUS Server Configuration Menu
4. To set the RADIUS server’s IP address, do the following:
a. Type I to select Set Server IP.
The following prompt is displayed:
Enter IP address for RADIUS server>
b. Type the IP address of the RADIUS server and press Enter.
5. To configure the shared secret, do the following:
Section I: Using the Menus Interface
181
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 13: RADIUS Authentication Protocol
a. Type C to select Shared Secret.
The following prompt is displayed:
Enter secret string for server>
b. Enter the encryption key of the RADIUS server.
6. To set the response time, do the following:
a. Type R to select Set Response Time.
The following prompt is displayed:
Enter response time>
b. Enter the amount of time in seconds the switch should wait for a
response from the RADIUS server. The range is 1 to 120 seconds.
The default is 10 seconds.
7. To configure the maximum retransmissions, do the following:
a. Type M to select Max Retransmission.
The following prompt is displayed:
Enter maximum retransmissions>
b. Enter the number of times the switch should retransmit to the
RADIUS server in the event that the server does not respond. The
range is 1 to 254. The default is 3.
182
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Displaying the RADIUS Server Settings
To display the RADIUS client status and settings, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type U to select User
Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7 on page
3. Type R to select RADIUS Server Configuration.
The RADIUS Server Configuration Menu is shown in Figure 49 on
page 181. The top of the menu shows the current RADIUS server
configuration.
Section I: Using the Menus Interface
183
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 13: RADIUS Authentication Protocol
184
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 14: Broadcast Storm Control
Broadcast Storm Control Overview
The broadcast storm control feature limits the number of broadcast frames
forwarded by the switch. The feature can help improve network
performance in situations where broadcast frames are consuming a
significant portion of network bandwidth, to a degree where the remaining
bandwidth is insufficient for efficiently carrying the unicast and multicast
frames.
This feature can also protect your network from broadcast storms.
Broadcast storms commonly occur when an Ethernet network topology
contains a loop and where the Spanning Tree Protocol is not
implemented. Ethernet frames become caught in repeating cycles that
needlessly consume network bandwidth.
The default setting for this feature is disabled. In the default setting, the
switch forwards all ingress broadcast frames, provided that ports are not
over-subscribed.
When you enable the feature, you are given three threshold levels from
which to choose. The levels prescribe the maximum number of ingress
broadcast frames the switch will accept per second. Broadcast frames that
exceed the limit are discarded. The level are:
ˆ High: 3000 broadcast packets per second
ˆ Medium: 500 broadcast packets per second
ˆ Low: 100 broadcast packets per second
For example, activating the feature and selecting Medium as the threshold
means that the switch accepts up to a maximum of 500 ingress broadcast
packets per second and discards those broadcast packets that exceed the
limit.
186
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Configuring Broadcast Storm Control
To configure the broadcast storm control feature, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type C to select Storm
Control Configuration.
The Storm Control Configuration Menu is shown in Figure 50.
AT-9000/24 Local Management System
Basic Switch Configuration -> Storm Control Configuration Menu
Broadcast Storm Status: Disabled
Threshold : Low
----------------------- <COMMAND> -----------------------------
Set [B]roadcast Status
Set [T]hreshold
[Q]uit to previous menu
Command>
Figure 50. Storm Control Configuration Menu
3. Type B to select Broadcast Storm Status.
The following prompt is displayed:
Enable or Disable broadcast storm control (E/D)>
4. Type E to enable broadcast storm control or D to disable broadcast
storm control.
5. If you are activating the feature, type T to select Threshold.
The following prompt is displayed:
Enter threshold level>
6. Specify the broadcast threshold. Choices are:
ˆ H for High (3000 broadcast packets per second)
ˆ M for Medium (500 broadcast packets per second)
Section I: Using the Menus Interface
187
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 14: Broadcast Storm Control
ˆ L for Low (100 broadcast packets per second)
188
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 15
Working With System Files
The procedures in this chapter explain how to download a new version of
the AT-S84 management software onto the switch, and how to download
or upload the configuration file. The sections are:
Note
For information on how to obtain new releases of the AT-S84
management software, refer to “Management Software Updates” on
Section I: Using the Menus Interface
189
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 15: Working With System Files
Downloading a New Management Software Image Using TFTP
Before downloading a new version of the AT-S84 management software
onto the switch, note the following:
ˆ The current configuration of a switch is retained when a new AT-S84
software image is installed. To return a switch to its default
configuration values, refer to “Returning the AT-S84 Management
different configuration file, refer to “Uploading or Downloading a
ˆ Your network must have a node with TFTP server software.
ˆ You must store the new AT-S84 image file on the TFTP server.
ˆ You should start the TFTP server software before you begin the
download procedure.
ˆ The switch where you are downloading the new image file must have
an IP address and subnet mask. For instructions on how to configure
the IP address on a switch, refer to “Configuring the IP Address,
Caution
Downloading a new version of management software onto the
switch causes the device to reset. Some network traffic may be lost
during the reset process.
The following procedure assumes you have already obtained the new
software from Allied Telesis, stored it on the TFTP server, and specified a
path to the new software in the TFTP configuration.
To download the AT-S84 image software onto the switch, perform the
following procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Menu, type U to select Software Upgrade.
190
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The Software Upgrade Menu is shown in Figure 51.
AT-9000/24 Local Management System
Switch Tools Configuration -> Software Upgrade Menu
[T]FTP Software Upgrade
[Q]uit to previous menu
Command>
Figure 51. Software Upgrade Menu (1 of 2)
3. Type T to select TFTP Upgrade.
The Software Upgrade Menu (2 of 2) is shown in Figure 52.
AT-9000/24 Local Management System
Main Menu -> Software Upgrade Menu
Image Version/Date: 0.0.0/Jul 29 2006 20:57:07
TFTP Server IP:
Image File Name:
Retry Count:
0.0.0.0
5
---------------------- <COMMAND> -------------------------
Set TFTP [S]erver IP Address
Set Image [F]ile Name
[U]pgrade Image and Reboot
Set [R]etry Count
[Q]uit to previous menu
Command>
Figure 52. Software Upgrade Menu (2 of 2)
Section I: Using the Menus Interface
191
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 15: Working With System Files
4. Type S to select Set TFTP Server IP Address.
The following prompt is displayed:
Enter IP address of TFTP server:
5. Type the IP address of the TFTP server and press Enter.
6. Type F to select Set Image File Name.
The following prompt is displayed:
Enter file name>
7. Enter the file name of the AT-S84 image file on the TFTP server and
press Enter.
8. Type R to select Set Retry Count.
The following prompt is displayed:
Enter retry count>
9. Enter the number of times you want the switch to retry in the event a
problem occurs during the download process. The range is 1 to 20,
and the default is 5 times.
10. To begin the download, type U to select Upgrade Image and Reboot.
The following prompt is displayed:
Download file? (Y/N)>
11. Type Y for yes to begin the upgrade or N for no to cancel the
procedure.
If you select yes, the software immediately begins to download the file
onto the switch. After the software download is complete, the switch
initializes the software and reboots. You will lose your local
management connection to the switch during the reboot process.
Note
Do not interrupt the file download and reboot processes.
192
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Uploading or Downloading a Configuration File
The procedure in this section allows you to download a different
configuration file onto the switch from a TFTP server, or upload the file to a
TFTP server. To return a switch to its default configuration values, refer to
Before downloading a configuration file onto the switch, note the following:
ˆ Your network must have a node with TFTP server software.
ˆ You must store the new configuration file on the TFTP server.
ˆ You should start the TFTP server software before you begin the
procedure.
ˆ The switch where you are downloading the configuration file must have
an IP address and subnet mask. For instructions on how to configure
the IP address on a switch, refer to “Configuring the IP Address,
ˆ When you download a new configuration file onto the switch, the new
file overrides the current file and the current file is lost unless you
uploaded it to a TFTP server before you replaced it.
Note
The configuration file contains only those settings that have been
changed since the switch was last reset to the default settings.
Uploading the To upload the switch’s configuration file onto a TFTP server, perform the
following procedure:
Configuration
File
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Menu, type C to select Configuration File
Upload/Download.
Section I: Using the Menus Interface
193
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 15: Working With System Files
The Configuration File Upload/Download menu is shown in Figure 53.
AT-9000/24 Local Management System
Switch Tools Configuration -> Configuration File Upload/Download Menu
[T]FTP Configuration File Upload/Download
[Q]uit to previous menu
Command>
Figure 53. Configuration File Upload/Download Menu
3. From the Configuration File Upload/Download menu, type T to select
TFTP Configuration File Upload/Download.
The TFTP Configuration File Upload/Download menu is shown in
AT-9000/24 Local Management System
Configuration File Upload/Download -> TFTP Configuration File Upload/Download
TFTP Server IP:
Config File Name:
Retry Count:
0.0.0.0
5
--------------------------------- <COMMAND> --------------------------------
Set TFTP [S]erver IP Address
Set Configuration [F]ile Name
[U]pload Configuration File
[D]ownload Configuration File
Set [R]etry Count
[Q]uit to previous menu
Command>
Figure 54. TFTP Configuration File Upload/Download Menu
4. Type S to select Set TFTP Server IP Address.
The following prompt is displayed:
Enter IP address of TFTP server:
194
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
5. Type the IP address of the TFTP server and press Enter.
6. Type F to select Set Configuration File Name.
The following prompt is displayed:
Enter file name>
7. Enter the file name of the switch configuration file on the TFTP server
and press Enter.
Note
There is no default name for the configuration file.
8. Type R to select Set Retry Count.
The following prompt is displayed:
Enter retry count>
9. Enter the number of times you want the switch to retry in the event a
problem occurs during the download process. The range is 1 to 20.
The default is 5 times.
10. To begin the upload, type U to select Upload Configuration File.
The following prompt is displayed:
Upload file? (Y/N)>
11. Type Y for yes to begin the uploading or N for no to cancel the
procedure.
Downloading a To download a configuration file onto the switch from a TFTP server,
perform the following procedure:
Configuration
File
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Menu, type C to select Configuration File
Upload/Download.
The Configuration File Upload/Download menu is shown in Figure 53
3. From the Configuration File Upload/Download menu, type T to select
TFTP Configuration File Upload/Download.
Section I: Using the Menus Interface
195
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 15: Working With System Files
The TFTP Configuration File Upload/Download menu is shown in
4. Type S to select Set TFTP Server IP Address.
The following prompt is displayed:
Enter IP address of TFTP server:
5. Type the IP address of the TFTP server and press Enter.
6. Type F to select Set Configuration File Name.
The following prompt is displayed:
Enter file name>
7. Enter the file name of the switch configuration file on the TFTP server
and press Enter.
Note
There is no default name for the configuration file.
8. Type R to select Set Retry Count.
The following prompt is displayed:
Enter retry count>
9. Enter the number of times you want the switch to retry in the event a
problem occurs during the download process. The range is 1 to 20.
The default is 5 times.
10. To begin the download, type D to select Download Configuration
File.
The following prompt is displayed:
Download file? (Y/N)>
11. Type Y for yes to begin the downloading or N for no to cancel the
procedure.
After the downloading is complete, reset the switch to implement the
new settings.
196
Section I: Using the Menus Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Section II
Using the Web Browser Interface
The chapters in this section provide information and procedures for using
the web browser interface in the AT-S84 management software. The
chapters include:
Note
The menus interface is described in Section I, “Using the Menus
Interface” on page 23, and the command line interface is described
in Section III, “Using the Command Line Interface” on page 295.
Section II: Using the Web Browser Interface
197
Download from Www.Somanuals.com. All Manuals Search And Download.
198
Section II: Using the Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 16
Starting a Web Browser Management
Session
This chapter contains the procedures for starting, using, and quitting a web
browser management session on an AT-9000/24 Gigabit Ethenet switch.
Sections in the chapter include:
Section II: Using the Web Browser Interface
199
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 16: Starting a Web Browser Management Session
Establishing a Remote Connection to Use the Web Browser Interface
In order for you to manage a switch using the web browser interface, the
switch must have an IP address and subnet mask. To manually assign an
IP address, refer to “Configuring the IP Address, Subnet Mask, and
Gateway Address” on page 32. To configure the switch to obtain its IP
configuration from a DHCP server, refer to “Enabling and Disabling the
DHCP Client” on page 35. The initial assignment of an IP address must be
made through a local management session.
Note
Enhanced stacking, a feature of other Allied Telesis Layer 2 and
Layer 2+ managed switches, is not supported by the AT-9000/24
Gigabit Ethenet switch.
Note
The remote management station must be a member of the switch’s
Default VLAN. The switch responds and processes management
packets only if they are received on an untagged port of the Default
VLAN.
To start a web browser management session, perform the following
procedure:
1. Start your web browser.
Note
If your PC with the web browser is connected directly to the switch to
be managed or is on the same side of a firewall as the switch, you
must configure your browser’s network options not to use proxies.
Consult your web browser’s documentation on how to configure the
switch’s web browser to not use proxies.
2. In the URL field of the browser, enter the IP address of the switch to be
managed.
Switch’s IP Address
Figure 55. Entering a Switch’s IP Address in the URL Field
200
Section II: Using the Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The AT-S84 management software displays the login dialog box,
shown in Figure 56.
Figure 56. AT-S84 Login Dialog Box
3. Enter the AT-S84 management login user name and password. The
default user name is “manager” and the default password is “friend.”
The login name and password are case-sensitive.
The AT-S84 management software displays the home page. The
window contains an image of the front of the switch. Ports that have a
link to an end node are green. Ports without a link are grey. An
example of a home page is shown in Figure 57.
Figure 57. Home Page for the AT-9000/24 Gigabit Ethernet Switch
Section II: Using the Web Browser Interface
201
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 16: Starting a Web Browser Management Session
The main menu is on the top of the home page. It consists of the following
selections:
ˆ General Info.
ˆ Basic Config.
ˆ Advanced Config.
ˆ Tools
ˆ Statistics
A web browser management session remains active even if you link to
other sites. You can return to the management web pages anytime as long
as you do not quit the browser.
202
Section II: Using the Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Web Browser Tools
You can use the web browser tools to move around the management
pages. Selecting Back on your browser’s toolbar returns you to the
previous display. You can also use the browser’s bookmark feature to
save the link to the switch.
Section II: Using the Web Browser Interface
203
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Configuring an IP Address, Subnet Mask and Gateway Address
This procedure explains how to change the IP address, subnet mask, and
gateway address of the switch. Before performing the procedure, note the
following:
ˆ An IP address and subnet mask are not required for normal network
operations of the switch. Values for these parameters are only required
if you want to remotely manage the device using the web browser
interface.
ˆ A gateway address is only required if you want to remotely manage
the device from a remote management station that is separated from
the switch by a router.
ˆ To configure the switch to automatically obtain its IP configuration from
a DHCP server on your network, go to “Enabling and Disabling the
ˆ You must use the menus interface to manually assign an IP address to
the switch, as described in “Configuring an IP Address, Subnet Mask
To change the switch’s IP configuration, perform the following procedure:
1. From the Basic Config menu, select IP Config.
Figure 58. IP Configuration Page
2. Change the IP configuration parameters by entering new information
in the fields:
System MAC Address
This parameter displays the MAC address of the switch. You cannot
change this parameter.
System IP Address
Enter the IP address for the switch.
206
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
System Subnet Mask
Enter the subnet mask for the switch.
System Default Gateway
Enter the default gateway’s IP address.
DHCP Mode
For information about setting this parameter, refer to “Enabling and
3. Click Apply.
Note
Changing the IP address ends your management session. To
resume managing the device, enter the new IP address of the switch
in the web browser’s URL field, as shown in Figure 55 on page 200.
Section II: Web Browser Interface
207
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Enabling and Disabling the DHCP Client
This procedure explains how to activate and deactivate the DHCP client
on the switch. When the client is activated, the switch obtains its IP
configuration, such as its IP address and subnet mask, from a DHCP
server on your network. Before performing the procedure, note the
following:
ˆ An IP address and subnet mask are not required for normal network
operations of the switch. Values for these parameters are only required
if you want to remotely manage the device with a web browser.
ˆ A gateway address is only required if you want to remotely manage
the device from a remote management station that is separated from
the switch by a router.
ˆ The DHCP client is disabled by default on the switch.
ˆ The DHCP client does not support BOOTP.
ˆ You must assign an IP address initially through a local management
session using the menus interface.
To activate or deactivate the DHCP client on the switch, perform the
following procedure:
1. From the Basic Config menu, select IP Config.
The IP Configuration page is shown in Figure 58 on page 206.
2. For the DHCP Mode, select Enable or Disable.
3. Click Apply.
When you enable DHCP, the switch immediately begins to send
queries to the DHCP server. It continues to send queries until it
receives a response with its new IP address.
Note
Enabling DHCP ends your web browser management session. To
resume managing the switch, use a local connection and the menus
interface to view the IP address assigned by the DHCP server.
Then, enter that address in a web browser’s URL field.
208
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Configuring System Administration Information
This section explains how to assign a name to the switch, as well as the
location of the switch and the name of the switch’s administrator. Entering
this information is optional.
To set a switch’s administration information, perform the following
procedure:
1. From the Basic Config menu, select Admin. Config.
The Administration Configuration page is shown in Figure 59.
Figure 59. Administration Configuration Page
2. Configure the following parameters as necessary:
System Description
Specifies the model number of the switch. You cannot change this
parameter.
System Name
Specifies a name for the switch, for example, Sales. The name is
optional and may contain up to 50 characters.
Note
Allied Telesis recommends that you assign a name to the switch. A
name can help you identify the switch when you manage it and can
also help you avoid performing a configuration procedure on the
wrong switch.
System Location
Specifies the location of the switch. The location is optional and may
contain up to 50 characters.
System Contact
Specifies the name of the network administrator responsible for
Section II: Web Browser Interface
209
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
managing the switch. This contact name is optional and may contain
up to 50 characters.
3. Click Apply.
210
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Setting the User Interface Configuration
This procedure explains how to adjust the user interface and security
features on the switch. With this procedure you can:
ˆ Change the console timer, used to automatically end inactive local
management sessions.
ˆ Change the AT-S84 management login user name and password.
ˆ Enable and disable the web server, used to manage the switch from a
remote management station with a web browser.
To set the switch’s user interface configuration, perform the following
procedure:
1. From the Basic Config menu, select User Interface > User Interface.
The other selection on this menu, RADIUS, is described in Chapter 27,
The User Interface page is shown in Figure 60.
Figure 60. User Interface Page
The User Interface page has three parts:
ˆ Console and Telnet UI Idle Time Out settings
Section II: Web Browser Interface
211
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
ˆ Server and SNMP settings
ˆ User name and password settings
Note
For information about the SNMP Agent selection, refer to “Enabling
2. To configure the console UI time out parameters, do the following:
a. In the Console UI Time Out field, enter a new value.
The range is 0 to 60 minutes. The default is 5 minutes. A timeout
value of 0 causes the console connection to never times out.
The console idle time out parameter specifies the length of time a
local management session can be inactive before the management
software automatically ends it. The purpose of this parameter is to
prevent unauthorized individuals from configuring the switch
should you leave your management workstation unattended.
This parameter applies to a local management session but not to a
web management session. A web browser management session
remains active so long as your web browser is open.
Note
If you select 0, you must remember to properly log off from a local
management session when you are finished to prevent blocking
future management sessions with the switch.
b. Click Apply.
3. To configure the Telnet UI timeout value, do the following:
a. In the Telnet UI Time Out field, enter a new value.
The Telnet idle time out parameter specifies the length of time that
a remote Telnet management session can be inactive before the
management software automatically ends it.
4. To change the user settings, do the following:
a. Enter the existing name and password in the User Name and
Password fields. The default name and password are both
“manager”. The login name and password are case sensitive.
212
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
b. Click the New User Name field and enter a new user name or, if
you do not want to change the login name, enter the current name.
Leaving this field empty deletes the current login name without
assigning a new one. The name can be from 0 to 12 characters.
Spaces are allowed. The login name is case sensitive.
c. Click the New Password field and enter a new login password or,
if you do not want to change the password, enter the current
password. The password can be from 0 to 12 characters. Allied
Telesis recommends not using special characters, such as spaces
and exclamation points. The password is case sensitive. Leaving
this field empty deletes the current password without assigning a
new one.
d. Click the Verify New Password field and enter the same
password entered in the previous step.
e. Click Apply.
Section II: Web Browser Interface
213
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Enabling or Disabling the Web Server
To enable or disable the web server, perform the following procedure:
1. From the Basic Config menu, select User Interface > User Interface.
The User Interface page is shown in Figure 60 on page 211.
2. For the Web Server parameter, choose Enable or Disable from the
list.
The default is Enable. When you enable this parameter, an individual
can manage the switch remotely using a web browser.
Note
Disabling the web server automatically ends your remote
management session.
3. Click Apply.
214
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Enabling or Disabling the Telnet Server
To enable or disable the Telnet server, perform the following procedure:
1. From the Basic Config menu, select User Interface > User Interface.
The User Interface page is shown in Figure 60 on page 211.
2. For the Telnet Server parameter, choose Enable or Disable from the
list.
The default is Enable. When you enable this parameter, a Telnet
connection to the switch is available.
3. Click Apply.
Section II: Web Browser Interface
215
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Configuring SNTP
To configure SNTP, perform the following procedure:
1. From the Basic Configuration menu, select SNTP Configuration.
The SNTP Configuration page opens, as shown in Figure 61
.
Figure 61. SNTP Configuration Page
2. In the SNTP Server IP field, type the IP address for the SNTP server
you want to use.
3. In the Set SNTP Interval field, type a number to specify the number of
minutes between occurrences of polling the SNTP server. The range
is 1 to 60 minutes and the default is 1 minute.
4. To set the time zone, select one from the Time Zone list.
5. For the Daylight Saving parameter, choose one of the following from
the list:
Disabled - To disable daylight saving time.
Enabled - To disable daylight saving time.
6. Click Apply.
216
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Viewing System Information
To view general information about the switch, perform the following
procedure:
1. From General Info. menu, select Switch Info.
The Switch Information page opens, as shown in Figure 62.
Figure 62. Switch Information Page
The Switch Information page displays the following information:
System Up For
The number of days, hours, and minutes that the switch has been
running since it was last rebooted.
Runtime Image
The version number and build date of the runtime firmware.
Boot Loader
The version number and build date of the bootloader firmware.
Hardware Information Section:
Revision
The hardware version number.
Section II: Web Browser Interface
217
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
DRAM Size
The size of the DRAM, in megabytes.
Flash Size
The size of the flash memory, in megabytes.
Console Baud Rate
The baud rate of the console port. You cannot change this setting.
Administration Information Section:
System Name
The name assigned to the switch. To give the switch a name, refer to
System Location
System Contact
The contact person responsible for managing the switch. To specify
the name of a contact, refer to “Configuring System Administration
System MAC Address, IP Address, Subnet Mask, and Gateway
Section:
MAC Address
The MAC address of the switch. You cannot change this value.
IP Address
The IP address of the switch. Refer to “Configuring an IP Address,
Subnet Mask and Gateway Address” on page 206 to manually assign
page 208 to activate the DHCP client.
Subnet Mask
The subnet mask for the switch. Refer to “Configuring an IP Address,
Subnet Mask and Gateway Address” on page 206 to manually assign
page 208 to activate the DHCP client.
Default Gateway
Default gateway’s IP address. Refer to “Configuring an IP Address,
Subnet Mask and Gateway Address” on page 206 to manually assign
page 208 to activate the DHCP client.
DHCP Mode
The status of the DHCP client on the switch. For information about
setting this parameter, refer to “Enabling and Disabling the DHCP
218
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Rebooting a Switch
This procedure reboots the switch and reloads the AT-S84 management
software from flash memory. You might reboot the device if you believe it
is experiencing a problem. Rebooting the device does not change any of
the device’s parameter settings.
Caution
The switch does not forward network traffic during the reboot
process. Some network traffic may be lost.
To reboot a switch, perform the following procedure:
1. From the Tools menu, select System Reboot.
The System Reboot Configuration page opens, as shown in Figure 63.
Figure 63. System Reboot Configuration Page
2. For the Reboot Type, select Normal Reset. This is the default setting.
Note
The two other Reboot Type options, Reset to Factory Default and
Reset to Factory Default Except IP Address, are described in
3. For the Reboot Status, select Start to start the reboot.
4. Click Apply.
The switch immediately begins to reload the AT-S84 management
software. This process takes approximately one minute to complete.
You can not manage the device during the reboot. After the reboot is
finished, you can log in again if you want to continue to manage the
device.
Section II: Web Browser Interface
219
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Pinging a Remote System
This procedure instructs the switch to ping a node on your network. This
procedure is useful in determining whether an active link exists between
the switch and another network device. Note the following before
performing the procedure:
ˆ The switch where you are initiating the ping must have an IP address.
ˆ The device you are pinging must be a member of the Default VLAN.
This means that the port on the switch through which the node is
communicating with the switch must be an untagged or tagged
member of the Default VLAN.
To ping a network device, perform the following procedure:
1. From the Tools menu, select Ping.
Figure 64. Ping Test Configuration Page
2. Configure the following parameters:
Destination IP Address
The IP address of the node you want to ping.
Timeout Value
Specifies the length of time in seconds the switch waits for a response
before assuming that a ping has failed. The default is 3 seconds.
Number of Ping Requests
Specifies the number of ping requests you want the switch to perform.
The default is 10.
3. Click Start.
4. To view the ping results, click Show Ping Results.
220
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Viewing the System Log
The system log displays system-level events in the switch, such as
logging in to the management software.
To view the system log, perform the following procedure:
1. From the Tools menu, select System Log.
The System Log page opens, as shown in Figure 66.
Figure 66. System Log Page
The System Log page contains a table that displays the following
information:
ID
An indentifying number for the event.
Date Time
The date that the event occurred
Time
The time that the event occurred
L
Severity level of the event. The severity levels are:
(I)nformation - Useful information that you can ignore during normal
222
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
operation.
(W)arning - An issue that may require a manager’s attention.
(E)rror - Switch operation is severely impaired.
Type
The type provides more information about the event. The possible
types are:
802.1X - An 802.1X event.
CFG - Configuration event.
CLI - CLI login.
Console - A console login by a user.
IP - Change to the IP information.
PCFG - Port configuration.
PoE - PoE configuration or event.
SNTP - SNTP configuration.
STP - Spanning tree.
SwUpg - Software upgrade.
System - General system event.
Telnet - Access via Telnet.
Description
A description of the event.
2. To remove the current log entries, click Clear All. To refresh the log,
click Refresh.
Section II: Web Browser Interface
223
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 17: Basic Switch Parameters
Returning the AT-S84 Management Software to the Factory Default
Values
This procedure returns all AT-S84 management software parameters to
their default values and deletes all tagged and VLANs on the switch. The
AT-S84 management software default values are listed in Appendix A,
Caution
This procedure causes the switch to reboot. The switch does not
forward network traffic during the reboot process. Some network
traffic may be lost.
To return the AT-S84 management software to the default settings,
perform the following procedure:
1. From the Tools menu, select System Reboot.
The System Reboot Configuration page is shown in Figure 63 on page
2. For the Reboot Type, select one of the following:
Reset to Factory Default
Resets all switch parameters to the factory default settings, including
IP address, subnet mask, and gateway address.
Reset to Factory Default Except IP Address
Resets all switch parameters to the factory default settings, but retains
the IP address, subnet mask, and gateway settings. If the DHCP client
is enabled, it remains enabled after this reset.
3. For the Reboot Status, select Start to start the reboot.
4. Click Apply.
The switch is rebooted. You must wait for the switch to complete the
reboot process before reestablishing your management session.
224
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 18
Port Configuration
The sections in this chapter explain the two methods to viewing and
changing the parameter settings of the individual ports on the switch. The
first method shows how to use the Port Configuration page to view and
configure multiple ports at one time. The second is typically used to
configure just one port at a time. There is also a section for viewing port
statistics. The sections are:
Section II: Web Browser Interface
225
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 18: Port Configuration
Viewing and Configuring Multiple Ports
This procedure allows you to configure the ports on the switch using the
Port Configuration page. This page allows you to view and configure the
parameter settings of all the switch ports at one time.
To configure the ports, perform the following procedure:
1. From the Basic Config menu, select Port Config.
lists all the ports on the switch and their current settings.
Figure 67. Port Configuration Page
2. Adjust the port settings as needed. Not all parameters are adjustable.
The parameters are:
226
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Back Pressure
Sets back pressure on all the ports. You cannot set back pressure on
an individual port. Choose Disable or Enable and click Apply.
Port Index
The port number. You cannot change this parameter.
Trunk
The trunk group number. A number in this column indicates that the
port has been added to a trunk. For information about configuring a
Type
The port type. The port type is 10/100TX for 10/100Base-T twisted pair
ports and 1000Base-F for the SFP fiber port.
Link Status
The status of the link between the port and the end node connected to
the port. The possible values are:
Up - A valid link exists between the port and the end node.
Down - The port and the end node have not established a valid link.
Admin. Status
The operating status of the port.
You can use this parameter to enable or disable a port. You may want
to disable a port and prevent packets from being forwarded if a
problem occurs with the node or cable connected to the port. After the
problem has been fixed, you can enable the port to resume normal
operation. You can also disable an unused port to secure it from
unauthorized connections. The possible values are:
Enabled - The port is able to send and receive Ethernet frames. This is
the default setting for a port.
Disabled - The port is disabled.
Mode
The speed and duplex mode settings for the port.
You can use this parameter to set the speed and duplex mode of a
port. Possible settings are:
Auto - The port is using Auto-Negotiation to set the operating speed
and duplex mode. This is the default setting for all ports. The actual
operating speed and duplex mode of the port are displayed in
parentheses (for example, “100F”) after a port establishes a link with
an end node.
100M/Full - 100 Mbps in full-duplex mode
10M/Full - 10 Mbps in full-duplex mode
Section II: Web Browser Interface
227
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 18: Port Configuration
100M/Half - 100 Mbps in half-duplex mode
10M/Half - 10 Mbps in half-duplex mode
1000 Mbps, full-duplex
When you choose a setting, note the following:
ˆ When a twisted pair port is set to Auto-Negotiation, the default
setting, the end node should also be using Auto-Negotiation to
prevent a duplex mode mismatch. A switch port using Auto-
Negotiation defaults to half-duplex if it detects that the end node is
not using Auto-Negotiation. This can result in a mismatch if the end
node is operating at a fixed duplex mode of full-duplex. To avoid
this problem when connecting an end node with a fixed duplex
mode of full-duplex to a switch port, disable Auto-Negotiation on
the port and set the port’s speed and duplex mode manually.
ˆ The only valid setting for an optional SFP port is Auto-Negotiation.
Flow Ctrl
The current flow control setting on the port. The switch uses a special
pause packet to notify the end node to stop transmitting for a specified
period of time. The possible values are:
Enabled - The port is allowed to use flow control. This is the default
setting for all ports on the switch.
Disabled - The port does not use flow control.
3. Click Apply to save the configuration.
228
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Viewing and Configuring a Single Port
The procedure in this section allows you to view or configure the
parameter settings of one port on the switch. To view and configure the
parameter settings for more than one port at a time, refer to “Viewing and
To view or configure the parameter settings of a single port, perform the
following procedure:
1. On the home page, in the front panel image, click the port that you
want to configure.
A sample Configuration of Port page is shown in Figure 68.
Figure 68. Configuration of Port Page
2. Adjust the following port settings as needed. Not all parameters are
adjustable.
Port Type
The port type. The port type is 1000TX for 10/100/1000Base-T twisted
pair ports and 1000BaseF for an optional SFP fiber optic port.
Trunk ID
The trunk group number. A number in this column indicates that the
port is a member of a port trunk. For information about configuring a
Operation Status
The status of the link between the port and the end node connected to
the port. You must use the Port Configuration page to configure this
Section II: Web Browser Interface
229
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 18: Port Configuration
parameter. For information, refer to “Viewing and Configuring Multiple
Admin. Status
The operating status of the port.
You can use this parameter to enable or disable a port. You may want
to disable a port and prevent packets from being forwarded if a
problem occurs with the node or cable connected to the port. After the
problem has been fixed, you can enable the port to resume normal
operation. You can also disable an unused port to secure it from
unauthorized connections. The possible values are:
Enabled - The port is able to send and receive Ethernet frames. This is
the default setting for a port.
Disabled - The port is disabled.
Mode
The speed and duplex mode settings for the port.
You can use this parameter to set the speed and duplex mode of a
port. The possible settings are:
Auto - The port is using Auto-Negotiation to set the operating speed
and duplex mode. This is the default setting for all ports. The actual
operating speed and duplex mode of the port are displayed in
parentheses (for example, “1000F” for 1000 Mbps full duplex mode)
after a port establishes a link with an end node.
100M/Full - 100 Mbps in full-duplex mode
10M/Full - 10 Mbps in full-duplex mode
100M/Half - 100 Mbps in half-duplex mode
10M/Half - 10 Mbps in half-duplex mode
When you select a setting, note the following:
ˆ When a twisted pair port is set to Auto-Negotiation, the default
setting, the end node should also be using Auto-Negotiation to
prevent a duplex mode mismatch. A switch port using Auto-
Negotiation defaults to half-duplex if it detects that the end node is
not using Auto-Negotiation. This can result in a mismatch if the end
node is operating at a fixed duplex mode of full-duplex. To avoid
this problem when connecting an end node with a fixed duplex
mode of full-duplex to a switch port, disable Auto-Negotiation on
the port and set the port’s speed and duplex mode manually.
ˆ Allied Telesis does not recommend manually setting a 10/100/
1000Base-T twisted pair port to either 1000 Mbps full duplex or
1000 Mbps half duplex. For 1000 Mbps operation, Allied Telesis
recommends setting the port to Auto-Negotiation.
230
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
ˆ The only valid setting for an optional SFP port is Auto-Negotiation.
Flow Ctrl
The current flow control setting on the port. The switch uses a special
pause packet to notify the end node to stop transmitting for a specified
period of time. The possible values are:
Enabled - The port uses flow control. This is the default setting for all
ports on the switch.
Disabled - The port does not use flow control.
MAC Address
The port’s MAC address. You cannot change this setting.
Note
You cannot configure back pressure on an individual port basis. To
configure back pressure on all ports, refer to “Viewing and
3. Click Apply.
4. To view or configure the parameter settings on another port, click Go
to Port and select the port from the list,
5. Repeat step 2 in this procedure to configure the settings
6. Click Apply.
To return to the front panel page, click Return To Front Panel.
Section II: Web Browser Interface
231
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 18: Port Configuration
Displaying Port Statistics
To display port statistics, perform the following procedure:
1. From the Main Menu, select Statistics.
Figure 69. Statistics Page
2. To view statistics for a port, select a port from the Select Port list and
click Apply.
The statistics are displayed in a table that contains the following items
of information:
Total RX Bytes
Number of bytes received on the port.
Total RX Pkts
Number of packets received on the port.
Good Broadcast
Number of valid broadcast packets received on the port.
232
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Good Multicast
Number of valid multicast packets received on the port.
CRC/Align Errors
Number of packets with a cyclic redundancy check (CRC) error but
with the proper length (64-1518 bytes) received on the port.
Undersize Pkts
Number of packets that were less than the minimum length specified
by IEEE 902.3 (64 bytes including the CRC) received on the port.
Oversize Pkts
Number of packets that exceeded the maximum length specified by
IEEE 902.3 (1518 bytes including the CRC) received on the port.
Fragments
Number of undersized packets, packets with alignment errors, and
packets with FCS errors (CRC errors) received on the port.
Jabbers
Number of electrical signal errors detected on the port.
Collisions
Number of packet collisions on the port.
64-Byte Pkts
Number of 64-byte packets sent or received by the port. The minimum
length of an Ethernet packet is 64 bytes.
65-127 Pkts
Number of 65- to 127-byte packets sent or received by the port.
128-255 Pkts
Number of 128- to 255-byte packets sent or received by the port.
256-511 Pkts
Number of 256- to 511-byte packets sent or received by the port.
512-1023 Pkts
Number of 512- to 1023-byte packets sent or received by the port.
1024-1522 Pkts
Number of 1024- to 1522-byte packets sent or received by the port.
The maximum length of an Ethernet packet is 1518 bytes.
3. To modify how frequently the statistics are updated, from the Request
Time list, select the desired time and click Refresh Now. The default is
every two seconds. (You can click Refresh Now at any time to update
the page.)
Section II: Web Browser Interface
233
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 18: Port Configuration
234
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 19
SNMP
This chapter contains the following procedures for working with the Simple
Network Management Protocol (SNMP):
Note
For background information on SNMP, refer to “SNMP Overview” on
Section II: Web Browser Interface
235
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 19: SNMP
Enabling or Disabling the SNMP Agent
To enable or disable the SNMP agent, perform the following procedure:
1. From the Basic Config menu, select User Interface > User Interface.
The User Interface page is shown in Figure 60 on page 211.
2. For the SNMP Agent parameter, choose Enable or Disable from the
list.
The default is Enable. When you enable this parameter, SNMP access
is allowed.
3. Click Apply.
236
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Changing the Default SNMP Community Names
To configure the SNMP settings, perform the following procedure:
1. From the Basic Config menu, select SNMP Config.
The SNMP Configuration page opens, as shown in Figure 70.
Figure 70. SNMP Configuration Page
2. Click the SNMP Read Community field and type the name of the read
community.
The default is “public.”
3. Click the SNMP Write Community field and type the name of the write
community.
The default is “private.”
4. To set Trap Authentication for that community string, select Enable
or Disable from the list.
5. Click Apply.
Section II: Web Browser Interface
237
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 19: SNMP
Working with Trap Receivers
This section contains the following procedures:
Adding and To add and enable a trap receiver, perform the following procedure:
Enabling a Trap
Receiver
1. From the Basic Config menu, select SNMP Config.
The SNMP Configuration page is shown in Figure 70 on page 237.
2. In the bottom half of the page, enter the IP address for each trap
receiver.
3. Enter the community string to associate with that trap receiver.
4. Select Enable from the list.
5. Click Apply.
Disabling a Trap To disable a trap receiver, perform the following procedure:
Receiver
1. From the Basic Config menu, select SNMP Config.
The SNMP Configuration page is shown in Figure 70 on page 237.
2. To the right of the trap receiver you want to disable, select Disable
from the list.
3. Click Apply.
Deleting a Trap To delete a trap receiver, perform the following procedure:
Receiver
1. From the Basic Config menu, select SNMP Config.
The SNMP Configuration page is shown in Figure 70 on page 237.
2. To the right of the trap receiver you want to disable, select Delete from
the list.
3. Click Apply.
238
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 20
Port Trunking
This chapter contains the following procedures for working with port
trunking:
Note
For background information on trunking, refer to “Port Trunking
Section II: Web Browser Interface
239
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 20: Port Trunking
Setting Up a Port Trunk
This section contains the following procedures for working with port trunks:
Creating a Port This procedure explains how to create a port trunk.
Trunk
Note
Do not connect the cables of a port trunk to the ports on the switch
until after you have configured the ports on both the switch and the
end node. Connecting the cables prior to configuring the ports can
create loops in your network topology. Loops can result in broadcast
storms, which can adversely affect the operation of your network.
To create a port trunk, perform the following procedure:
1. From the Advanced Config menu, select Trunk Config.
Figure 71. Trunk Configuration Page
If the switch does not contain a port trunk, all of the ports on the switch
are unchecked. If there is a port trunk, the ports in the trunk are
checked.
2. In any one of the unused Trunk ID rows, click the check box next to the
ports that will make up the port trunk. A check in a box indicates the
port is a member of the trunk. No check means the port is not a
member. A port trunk can contain up to eight ports.
240
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
3. From the list at the end of the port list for the trunk you want to enable
or disable, choose Manual to enable the trunk, or Disable to disable it.
4. Click Apply.
The trunk is now operational on the switch.
5. Configure the port trunk on the other switch and connect the cables.
Enabling or This procedure enables and disables a port trunk. Note the following
before performing this procedure:
Disabling a Port
Trunk
ˆ Do not enable a port trunk until after you have configured the trunk on
both switches.
ˆ Do not connect the cables to the ports on the switches until after you
have configured and enabled the trunk on both switches.
Note
If you are disabling a port trunk, be sure to first disconnect all cables
from the ports of the trunk. Leaving the cables connected can create
loops in your network topology because the ports of a disabled port
trunk function as normal network ports, forwarding individual
network traffic.
To enable or disable a port trunk, perform the following procedure:
1. From the Advanced Config menu, select Trunk Config.
The Trunk Configuration page is shown in Figure 71.
2. From the list at the end of the port list for the trunk you want to enable
or disable, choose Manual to enable the trunk, or Disable to disable it.
3. Click Apply.
Section II: Web Browser Interface
241
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 20: Port Trunking
Setting Up an LACP Trunk
This section contains the following procedures for working with LACP
trunks:
Note
You must create a trunk group before you can configure it as an
LACP trunk.
For more information about LACP trunks, refer to “LACP Trunks” on
Creating an To create an LACP trunk, perform the following procedure:
LACP Trunk
1. From the Advanced Config menu, select Trunk Config.
The Trunk Configuration page is shown in Figure 71 on page 240.
2. From the list at the end of the port list for the trunk you want to make
into an LACP trunk, choose Active.
3. Click Apply.
Configuring the To configure the LACP port priority, perform the following procedure:
LACP Port
1. From the Advanced Config menu, select Trunk Config and then Port
Priority
Priority Config.
242
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Figure 72. LACP Port Priority Page
2. In the priority column, enter a priority number for the port(s).
3. Click Apply.
Verifying the To verify the LACP group settings, perform the following procedure:
LACP Group
1. From the Advanced Config menu, select Trunk Config and then
Settings
LACP Group Status.
Figure 73. LACP Group Status Page
Section II: Web Browser Interface
243
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 20: Port Trunking
The LACP Group Status page displays the following information about
the LACP group:
System Priority
The system priority as defined by IEE 802.3ad. You cannot change
this.
System ID
The MAC address of the system.
Key
The key for this trunk group.
The page also contains a table that displays the following information:
Aggregator
The port that is operating as the aggregator.
Attached Port List
The ports assigned to the aggregator.
Disabling an To create an LACP trunk, perform the following procedure:
LACP Trunk
1. From the Advanced Config menu, select Trunk Config.
The Trunk Configuration page is shown in Figure 71 on page 240.
2. From the list at the end of the port list for the trunk you want to disable,
choose Passive.
3. Click Apply.
244
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 21
Port Mirroring
This chapter contains the procedure for setting up port mirroring. Port
mirroring allows you to unobtrusively monitor the ingress and egress traffic
on a port by having the traffic copied to another port. This chapter contains
the following sections:
Note
For background information on port mirroring, refer to “Port Mirroring
Section II: Web Browser Interface
245
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 21: Port Mirroring
Configuring Port Mirroring
To set up port mirroring, perform the following procedure:
1. From the Advanced Config menu, select Port Mirroring.
The Port Mirroring page opens, as shown in Figure 74.
Figure 74. Port Mirroring Page
2. In the Mirroring Port section, select the port where the network
analyzer is connected.
3. In the Port Being Mirrored section, select the port whose ingress and
egress traffic you want to monitor. You can select only one port.
4. Click Apply.
5. From the Mirroring Status list, select Enable and click Apply.
Port mirroring is immediately enabled on the switch. You can now
connect a data analyzer to the mirroring port to monitor the traffic on
the other port.
246
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Disabling Port Mirroring
To disable port mirroring, perform the following procedure:
1. From the Advanced Config menu, select Port Mirroring.
The Port Mirroring page is shown in Figure 74 on page 246.
2. From the Mirroring Status list, select Disable and click Apply.
Port mirroring is immediately disabled on the switch. You can now use
the mirroring port for regular network operations.
Section II: Web Browser Interface
247
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 21: Port Mirroring
248
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22
Virtual LANs
This chapter contains the procedures for creating, modifying, and deleting
and tagged Virtual Local Area Networks (VLANs) from a web browser
management session. This chapter contains the following sections:
Note
For background information, refer to “VLAN Overview” on page 106.
Section II: Web Browser Interface
249
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22: Virtual LANs
Creating a VLAN
This section contains the procedure for creating a new or tagged VLAN.
This procedure assigns the VLAN a name, a VID number, and the
untagged and tagged member ports.
After performing this procedure, the PVID values of the untagged ports of
the VLAN must be adjusted to match the virtual LAN’s VID number. In
order for a port to be considered an untagged member of a VLAN, its PVID
value must be changed to match the VID of the virtual LAN. This
procedure is found in “Configuring the PVID of Untagged Ports” on
To configure a VLAN, perform the following procedure:
1. From the Advanced Config menu, select VLAN Config > Create
VLAN.
The Create VLAN page opens, as shown in Figure 75.
Figure 75. Create VLAN Page
2. In the VLAN ID field, enter a VLAN ID for the new VLAN. The range is
2 to 4094.
If this VLAN will be unique in your network, then its VLAN ID (VID)
must also be unique from all other VIDs in the network.
3. In the VLAN Name field, enter a name for the VLAN.
The name can contain up to 32 characters including spaces but not
including special characters such as asterisks (*) or exclamation points
(!).
If the VLAN will be unique in you network, then the name should be
unique as well.
250
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
If the VLAN will be part of a larger VLAN that spans multiple switches,
then the name for the VLAN should be the same on each switch where
nodes of the VLAN are connected.
4. In the Static Tagged row, click the buttons of those ports on the switch
that are to be tagged or untagged members of the new VLAN.
While you might assume that the Static Tagged row is only used to
specify tagged ports of the VLAN, you should use it to specify the
untagged ports of a new VLAN as well.
5. Click Apply to create the new VLAN.
The switch creates the VLAN. However, the page does not change. It
continues to display the VLAN just created.
6. To create another new VLAN, click Clear or repeat this procedure.
7. If the new VLAN contains untagged ports, perform the next procedure,
“Configuring the PVID of Untagged Ports” on page 252, to change the
PVID of the untagged ports to match the virtual LAN’s VID.
Section II: Web Browser Interface
251
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22: Virtual LANs
Configuring the PVID of Untagged Ports
This procedure adjusts a port’s VID value. The PVID value determines the
VLAN in which the port is an untagged member. A port is an untagged
member of the VLAN whose VID value matches its PVID. A port can be an
untagged member of only one VLAN at a time.
The ports of a new VLAN are initially designated as tagged ports. Their
PVID values retain their previous settings when they are assigned to a
new VLAN. If you want the ports to function as untagged members of a
new VLAN, you must change their PVID values to match the VID of the
VLAN, as explained in this procedure.
You can also use this procedure to change the VLAN assignment of an
untagged port. With this procedure you can move an untagged port from
one VLAN to another by changing its PVID value.
To adjust the PVID value of a port, perform the following procedure:
1. From the Advanced Config menu, select VLAN Config > VLAN Port
Config.
252
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The VLAN Port Configuration page opens, as shown in Figure 76.
Figure 76. PVID Page
2. Click the PVID field of the port whose value you want to change and
enter the new PVID value for the port. The PVID must be equal to the
VID of the VLAN where you want the port to be an untagged member.
For example, to make Port 10 an untagged member of a VLAN that
has a VID of 12, you would change its PVID to 12.
Note
If you specify a PVID that does not correspond to any VIDs on the
switch, the management software creates a new VLAN with a VID
that equals the PVID. The VLAN is not assigned any name.
3. Click Apply.
Section II: Web Browser Interface
253
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22: Virtual LANs
4. Repeat steps 2 and 3 to change the PVID values of other ports.
254
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Displaying the VLANs
To display the VLANs, perform the following procedure:
1. From the Advanced Config menu, select VLAN Config > VLAN Port
Config.
provides the following columns of information:
VLAN ID
The VLAN ID number.
Name
The VLAN’s name.
VLAN Type
The VLAN type as either permanent or static. The Default VLAN is
permanent and all other VLANs are static.
2. To view the ports of a VLAN, click the VID of the VLAN.
An example of the VLAN Configuration - Members page opens, as
shown in Figure 77.
Figure 77. VLAN Configuration - Members Page
Untagged ports of the VLAN are indicated with a “U” and tagged ports
with a “T”.
Section II: Web Browser Interface
255
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22: Virtual LANs
Modifying a VLAN
This procedure allows you to perform the following functions:
ˆ Change the name of a VLAN.
ˆ Add or remove tagged ports from a VLAN.
Before performing this procedure, note the following:
ˆ You cannot change the VID of an existing VLAN.
ˆ You cannot add an untagged port to a VLAN using this procedure.
That function requires changing a port’s VID value, as explained in
ˆ You cannot remove an untagged port from a VLAN using this
procedure. To remove an untagged port from a VLAN, you must assign
it as an untagged member of another VLAN by changing its PVID, as
To change the name of a VLAN or to add or remove tagged ports, perform
the following procedure:
1. From the Advanced Config menu, select VLAN Config > VLAN Info.
The VLAN Information page opens, as shown in Figure 78.
Figure 78. VLAN Information Page
Use the Next Page and Previous Page buttons to scroll through the
list of VLANs.
2. In the VLAN Action column, click Modify next to the VLAN you want to
modify.
256
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The Modify VLAN page opens, as shown in Figure 79.
Figure 79. Modify VLAN Page
3. To change the VLAN’s name, click the VLAN Name field and enter the
new name.
The name can contain up to 32 characters including spaces but not
including special characters such as asterisks (*) or exclamation points
(!).
4. To add a new tagged port to the VLAN, click the button in the Static
Tagged row of the port to be added as a tagged port.
5. To remove a tagged port from the VLAN, click the button in the Not
Member row of the port to be removed.
If you make changes to the VLAN that you want to cancel, click
Restore. If you want to clear the current name and all tagged port
assignments from the VLAN prior to assigning it a new name and new
tagged ports, click Clear.
6. After you have made the desired changes, click Apply.
The changes are implemented on the VLAN. The current VLAN
window remains on the screen. You can make additional changes to
the VLAN or you can repeat this procedure to modify other VLANs.
Section II: Web Browser Interface
257
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22: Virtual LANs
Deleting a VLAN
To delete a VLAN, perform the following procedure:
1. From the Advanced Config menu, select VLAN Info.
The VLAN Information page is shown in Figure 78 on page 256.
2. In the VLAN Action column, click Delete next to the VLAN you want to
delete.
A confirmation prompt is displayed.
3. Click OK to delete the VLAN or Cancel to cancel the deletion.
Note
You cannot delete the Default VLAN which has a VID of 1.
The VLAN Information window is updated to show that the VLAN is
deleted. The untagged ports of a deleted VLAN are automatically
returned to the Default VLAN.
258
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Deleting All VLANs
The following procedure for deletes all VLANs, except the Default_VLAN,
on a switch. To delete selected VLANs, refer to “Deleting a VLAN” on
To reset to the default VLAN, perform the following procedure:
1. From the Advanced Config menu, select VLAN Info.
2. Click Reset to Default.
The following prompt is displayed:
Reset VLAN configuration to default?
3. Click OK to continue or click Cancel to stop the changes.
The VLAN Information page is redisplayed with ALL VLANs, except
the default, deleted.
Section II: Web Browser Interface
259
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 22: Virtual LANs
Enabling or Disabling GVRP
To enable or disable GVRP, perform the following procedure:
1. From the Advanced Config menu, select VLAN Config > VLAN Info.
The VLAN Information page is shown in Figure 78 on page 256.
2. From the GVRP status list, choose either Enable or Disable.
3. Click Apply.
260
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 23
Quality of Service (QoS)
This chapter contains the procedure for configuring Quality of Service
(QoS). This chapter includes the following procedures:
Note
For background information on QoS, refer to “QoS Overview” on
Section II: Web Browser Interface
261
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 23: Quality of Service (QoS)
Mapping CoS Priorities to Egress Queues
This procedure explains how to change the default mappings of CoS
priorities to egress priority queues, as shown in Table 2 on page 127. This
is set at the switch level. You cannot set this at the per-port level. This
procedure also enables and disables QoS.
To change the default mappings of CoS priorities to egress priority queues
or to enable or disable QoS, perform the following procedure:
1. From the Advanced Config menu, select QoS Config > Traffic
Class.
Figure 80. Traffic Class Configuration Page
2. To enable or disable QoS, select Enable or Disable from the QoS
Status list. The default is disabled.
3. To change the egress priority queue assignment of an 802.1p priority
class, click the dialog circle of the queue for the corresponding priority.
For example, to direct all tagged traffic with a priority of 4 to egress
queue 3 on the ports, you would click the button for queue 3 in the
priority 4 row.
4. Click Apply.
262
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Note
The switch does not alter the original priority level in tagged frames.
Frames leave the switch with the same priority level they had when
they entered the switch.
Section II: Web Browser Interface
263
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 23: Quality of Service (QoS)
Configuring CoS
As explained in “QoS Overview” on page 126, a packet received on a port
is placed it into one of four priority queues on the egress port according to
the switch’s mapping of 802.1p priority levels to egress priority queues.
The default mappings are shown in Table 2 on page 127.
You can override the mappings at the port level by assigning a new default
egress queue to a port. Note that this assignment is made on the ingress
port and before the frame is forwarded to the egress port. Consequently,
you need to configure this feature on the ingress port. For example, you
can configure a switch port so that all ingress frames are stored in egress
queue 3 of the egress port, regardless of the priority levels that might be in
the frames themselves, as found in tagged frames.
Note
The switch does not alter the original priority level in tagged frames.
Frames leave the switch with the same priority level they had when
they entered the switch.
To configure CoS for a port, perform the following procedure:
1. From the Advanced Config menu, select QoS Config > Port Priority
Config.
264
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The Port Priority Configuration page opens, as shown in Figure 81.
Figure 81. Port Priority Configuration Page
The columns in the menu display the following information:
Port
Displays the port number.
Trunk
Displays the trunk number if the port is a member of a trunk.
Traffic Class
Enter the traffic class’s current egress priority.
Queue
Displays the number of the queue where untagged packets received
on the port are stored on the egress queue.
Override
Displays whether the priority level in ingress tagged frames is being
used or not. If No, the override is deactivated and the port is using the
priority levels contained within the frames to determine the egress
queue. If Yes, the override is activated and the tagged packets are
stored in the egress queue specified in the Queue column.
Section II: Web Browser Interface
265
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 23: Quality of Service (QoS)
2. To change the egress queue where ingress untagged frames received
on a port are to be stored on the egress port, refer to Table 2 on
page 127. The range is 0 (lowest) to 3 (highest). The default is 0. For
example, if you select 3 for queue 3 for a port, all ingress untagged
packets received on the port are stored in egress queue 3 on the
egress port. (If you perform Step 3 and override the priority level in
ingress tagged packets, this also applies to tagged packets as well.)
If the selected port is part of a port trunk, all ports in the trunk are
automatically assigned the same egress queue.
3. To configure a tagged port so that the switch ignores the priority tag in
ingress tagged frames, select Enable from the Override column for the
corresponding port.
The default for this parameter is disabled, meaning that the priority
level of tagged frames is determined by the priority level specified in
the frame itself.
4. Click Apply.
Note
The tagged information in a frame is not changed as the frame
traverses the switch. A tagged frame leaves a switch with the same
priority level that it had when it entered.
266
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 24
IGMP
This chapter contains the following procedures for working with the
Internet Group Management Protocol (IGMP):
Note
For background information on IGMP, refer to “IGMP Snooping
Section II: Web Browser Interface
267
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 24: IGMP
Configuring IGMP
To configure the IGMP settings, perform the following procedure:
1. From the Advanced Config menu, select IGMP Snooping.
The IGMP Snooping page opens, as shown in Figure 82.
Figure 82. IGMP Snooping Page
2. To enable or disable IGMP, select Enable or Disable from the IGMP
Snooping Status list.
3. To set the age-out timer, type a number in the IGMP Snooping Age-
Out Timer field.
The range is 280 to 420 seconds and the default is 280 seconds.
268
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Viewing the Multicast Group Members
To view the multicast group members, perform the following procedure:
1. From the Advanced Config menu, select IGMP Snooping.
The IGMP Snooping page is shown in Figure 82 on page 268.
2. Click on the MAC address of the multicast group you want to view.
The IGMP Snooping - Group Members page opens, as shown in
Figure 83. IGMP Snooping - Group Members Page
Section II: Web Browser Interface
269
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 24: IGMP
270
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 25
RSTP
This chapter contains the following procedures for working with the
Remote Spanning Tree Protocol (RSTP):
Note
For background information on RSTP, refer to “RSTP Overview” on
Section II: Web Browser Interface
271
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 25: RSTP
Basic RSTP Configuration
To configure the RSTP settings, perform the following procedure:
1. From the Basic Config menu, select Rapid Spanning Tree > RSTP
Config.
The Rapid Spanning Tree Configuration page opens, as shown in
Figure 84. Rapid Spanning Tree Configuration Page
The RSTP Configuration page allows you to configure RSTP as well
as to view the current settings and contains the following items of
information in the middle portion:
Root Port
The active port on the switch that is communicating with the root
bridge. If the switch is the root bridge for the LAN, then there is no root
port and the root port parameter will be 0.
Root Path Cost
The sum of all the root port costs of all the bridges between the
switch’s root port and the root bridge including the switch’s root port
cost.
272
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Time Since Topology Change
The time in seconds since the last topology change took place. When
RSTP detects a change to the LAN’s topology or when the switch is
rebooted, this parameter is reset to 0 seconds and begins
incrementing until the next topology change is detected.
Topology Change Count
An integer that reflects the number of times RSTP has detected a
topology change on the LAN since the switch was initially powered on
or rebooted.
The following parameters refer to the designated root bridge:
Designated Root
This parameter includes two fields: the root bridge priority and the
MAC address of the root bridge. For example, 1000 00C08F1211BB
shows the root bridge priority as 1000, and 00C08F1211BB as the
MAC address.
Hello Time
The hello time. See “Hello Time and Bridge Protocol Data Units
(BPDUs)” on page 149. This parameter affects only the root bridge.
Maximum Age
The maximum amount of time that BPDUs are stored before being
deleted on the root bridge.
Forward Delay
The time interval between generating and sending configuration
messages by the root bridge.
The lower section provides information about the bridge:
The following parameters refer to the switch.
Bridge ID
The MAC address of the bridge. The bridge identifier is use as a tie
breaker in the selection of the root bridge when two or more bridges
have the same bridge priority. You cannot change this setting.
Bridge Hello Time
This is the time interval between generating and sending configuration
messages by the bridge. This parameter is active only when the switch
is the root bridge.
Bridge Maximum Age
The length of time after which stored bridge protocol data units
(BPDUs) are deleted by the bridge.
Bridge Forward Delay
This is the time interval between generating and sending configuration
messages by the bridge.
Section II: Web Browser Interface
273
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 25: RSTP
Configuring RSTP Port Settings
This section contains the following topics:
Configuring the To configure the basic RSTP port settings, perform the following
procedure:
Basic RSTP Port
Settings
1. From the Basic Config menu, select Rapid Spanning Tree > RSTP
Basic Port Config.
The RSTP Basic Port Configuration page opens, as shown in
Figure 85. RSTP Basic Port Configuration Page
274
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
2. In the STP Status column for the port you want to configure, select the
STP status from the list, either Enable or Disable.
3. In the Priority column for the port you want to configure, type a number
for the port priority.
Port priority is described in “Port Priority” on page 148.
4. In the Path Cost column for the port you want to configure, type a
number for the Path Cost.
Path cost is described in “Path Costs and Port Costs” on page 147.
5. Click Apply.
6. To configure all of the ports to the same settings, in the All row,
configure one, two, or all of the following settings: STP Status, Priority,
and Path Cost. Click Apply.
Configuring the To configure the advanced RSTP port settings, perform the following
procedure:
Advanced RSTP
Port Settings
1. From the Basic Config menu, select Rapid Spanning Tree > RSTP
Adv. Port Config.
Section II: Web Browser Interface
275
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 25: RSTP
The RSTP Advanced Port Configuration page opens, as shown in
Figure 86. RSTP Advanced Port Configuration Page
2. In the Admin/OperEdge column for the port you want to configure,
choose True or False to set whether or not the port will operate as an
edge port.
3. In the Admin/OperPtoP column for the port you want to configure,
Table 7. RSTP Point-to-Point Status
Admin
Auto
Operation
True
Port Duplex Operation
Full
Half
False
True
True
Full or Half
276
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Table 7. RSTP Point-to-Point Status (Continued)
Admin
False
Operation
False
Port Duplex Operation
Full or Half
4. In the Migration column for the port you want to configure, click
Restart to reset the port.
5. Click Apply.
To configure all of the ports to the same settings, in the All row,
configure one, two, or all of the following settings: Admin/OperEdge,
Admin/OperPtoP, and Migration.
6. Click Apply.
Section II: Web Browser Interface
277
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 25: RSTP
Viewing the RSTP Topology
To view the current RSTP topology, perform the following procedure:
1. From the Basic Config menu, select Rapid Spanning Tree > RSTP
Topology.
The Designated Topology Information page opens, as shown in
Figure 87. Designated Topology Information Page
This page displays the following information about the ports:
Trunk
The trunk of which the port is a member.
Link Status
Whether the link on the port is up or down.
Designated Root
The designated root bridge to which the switch’s root port is actively
connected.
Designated Cost
The sum of all the root port costs on all bridges, including the switch,
between the switch and the root bridge.
278
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Designated Bridge
An adjacent bridge to which the root port of the switch is actively
connected.
Designated Port
The root bridge to which the root port of the switch is actively
connected.
Section II: Web Browser Interface
279
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 25: RSTP
280
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 26
802.1x Network Access Control
This chapter contains the procedure for configuring 802.1x network access
control:
Note
For background information, refer to “802.1x Network Access
Section II: Web Browser Interface
281
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 26: 802.1x Network Access Control
Configuring 802.1x Network Access Control
To configure 802.1x network access control, perform the following
procedure:
1. From the Advanced Config menu, select 802.1x.
The 802.1x Configuration page opens, as shown in Figure 88.
Figure 88. 802.1x Configuration Page
Note
The Initialize and Re-auth Initialize parameters are described in
Steps 5 and 6, respectively.
2. To select a port, do the following:
a. Click Go To Port and select the port you want to configure from
the list. You can configure only one port at a time.
b. Click Apply.
The current settings for the selected port are displayed.
282
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
3. Configure the following parameters as needed:
NAS ID
This parameter assigns an 802.1x identifier to the switch that applies
to all ports. The NAS ID can be up to sixteen characters. Valid
characters are 0 to 9, a to z, and A to Z. Spaces are allowed.
Specifying an NAS ID is optional.
Port Status
Displays the current 802.1 status of the port as either authorized or
unauthorized. You cannot adjust this parameter.
Port Control
Sets the 802.1x port control setting. The possible settings are:
Auto - Enables 802.1x authentication and causes the port to begin in
the unauthorized state, allowing only EAPOL frames to be sent and
received through the port. The authentication process begins when the
link state of the port changes or the port receives an EAPOL-Start
packet from a supplicant. The switch requests the identity of the client
and begins relaying authentication prompts between the client and the
authentication server.
Force-Unauthorized - Places the port in the unauthorized state,
ignoring all attempts by the client to authenticate. The switch cannot
provide authentication services to the client through the interface.
Force-Authorized - Disables IEEE 802.1x authentication and causes
the port to transition to the authorized state without any authentication
exchange required. The port transmits and receives normal traffic
without 802.1x-based authentication of the client. This is the default
setting
Quiet Period
Sets the number of seconds that the port remains in the quiet state
following a failed authentication exchange with the client. The default
value is 60 seconds. The range is 0 to 65,535 seconds.
Transmission Period
Sets the number of seconds that the switch waits for a response to an
EAP-request/identity frame from the client before retransmitting the
request. The default value is 30 seconds. The range is 1 to 65,535
seconds.
Supplicant Timeout
Sets the switch-to-client retransmission time for the EAP-request
frame. The default value for this parameter is 30 seconds. The range is
1 to 600 seconds.
Server Timeout
Sets the timer used by the switch to determine authentication server
Section II: Web Browser Interface
283
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 26: 802.1x Network Access Control
timeout conditions. The default value for this parameter is 10 seconds.
The range is 1 to 60 seconds.
Maximum Request
Sets the maximum number of times that the switch retransmits an EAP
Request packet to the client before it times out the authentication
session. The default value for this parameter is 2 retransmissions. The
range is 1 to 10 retransmissions.
Re-auth Period
Specifies the time period between periodic reauthentication of the
client. The default value is 3600 seconds. The range is 1 to 65,535
seconds.
Re-auth Status
Specifies if reauthentication should occur according to the
reauthentication period. The options are Enabled or Disabled.
4. When you are finished configuring the parameters, click Apply.
5. If the port control setting is Auto and you want to return the EAPOL
machine state on the port to the initialized state, select Yes for the
Initialize parameter and click Apply.
6. If the port control setting is Auto and you want the node connected to
the port to reauthenticate with the RADIUS server, select Yes for the
Re-auth Initialize parameter and click Apply.
284
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 27
RADIUS Authentication Protocol
This chapter explains how to configure the RADIUS client on the switch.
You can use the RADIUS client with 802.1x network access control to
control who can forward packets through the switch. The chapter contains
the following section:
Note
For background information, refer to “802.1x Network Access
Section II: Web Browser Interface
285
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 27: RADIUS Authentication Protocol
Configuring the RADIUS Client
To configure the RADIUS client, perform the following procedure:
1. From the Basic Config menu, select User Interface > RADIUS
Config.
The RADIUS Configuration page opens, as shown in Figure 89.
Figure 89. RADIUS Configuration Page
2. Enter the RADIUS server’s IP address in the Server IP Address field.
3. To specify the server’s encryption key, enter the encryption key in the
Shared Secret field.
4. To change the response time setting, enter a value in the Response
Time field.
The response time is the amount of time in seconds the switch waits
for a response from the RADIUS server. The range is 1 to 120
seconds. The default is 10 seconds.
5. To change the maximum retransmissions setting, enter a new value in
the Maximum Retransmissions field.
This parameter specifies the number of times the switch should
retransmit to the RADIUS in the event the server does not respond.
The range is 1 to 254. The default is 3.
6. Click Apply to save your changes.
286
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 28
Broadcast Storm Control
This chapter contains the procedure for configuring the broadcast storm
control feature on the switch:
Note
For background information on broadcast storm control, refer to
Section II: Web Browser Interface
287
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 28: Broadcast Storm Control
Configuring Broadcast Storm Control
To configure the broadcast storm control feature, perform the following
procedure:
1. From the Basic Config menu, select Storm Control.
The Broadcast Storm Control page opens, as shown in Figure 90.
Figure 90. Broadcast Storm Control Page
2. From the Storm Control Status list, select Enable to activate the
feature or Disable to deactivate it. The default setting is disabled.
3. If you are activating the feature, from the Threshold Value list select
the desired threshold. Possible values are:
ˆ High (3000 broadcast packets per second)
ˆ Medium (500 broadcast packets per second)
ˆ Low (100 broadcast packets per second)
4. Click Apply.
288
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 29
Working with System Files
The procedure in this chapter explains how to download a new version of
the AT-S84 management software onto the switch or upload or download
a configuration file. The sections include:
Note
For information on how to obtain new releases of the AT-S84
management software, refer to “Management Software Updates” on
Section II: Web Browser Interface
289
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 29: Working with System Files
Downloading a New Management Software Image Using TFTP
Before downloading a new version of the AT-S84 management software
onto the switch, note the following:
ˆ The current configuration of a switch is retained when a new AT-S84
software image is installed. To return a switch to its default
configuration values, refer to “Returning the AT-S84 Management
ˆ Your network must have a node with TFTP server software.
ˆ You must store the new AT-S84 image file on the server.
ˆ You should start the TFTP server software before you begin the
procedure.
ˆ The switch where you are downloading the image file must have an IP
address and subnet mask. For instructions on how to configure the IP
address on a switch, refer to “Configuring the IP Address, Subnet
Caution
Downloading a new version of management software onto the
switch causes the device to reset. Some network traffic may be lost
during the reset process.
This procedure assumes that you have already obtained the software and
have stored it on the computer from which you will be performing this
procedure.
To download the AT-S84 image software onto the switch, perform the
following procedure:
1. From the Tools menu, select Image Upgrade.
The Image Upgrade page opens, as shown in Figure 91.
Figure 91. Image Upgrade Page
290
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
The Image/Version Date shows the current version and date of
software installed on the switch.
2. Change the following parameters as necessary:
Download Server IP
The IP address of the TFTP server from which you are downloading
the new software.
Download File Name
The name of the AT-S84 file you are downloading.
Retry Count
The number of times you want the switch to retry in the event a
problem occurs during the download process. The range is 1 to 20.
The default is 5 times.
3. Click Apply.
The software immediately begins to download onto the switch. This
process takes a few minutes. After the software download is complete,
the switch initializes the software and reboots. You will lose your web
browser connection to the switch during the reboot process.
Section II: Web Browser Interface
291
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 29: Working with System Files
Uploading or Downloading a Configuration File
The procedure in this section allows you to download a different
configuration file onto the switch from a TFTP server, or upload the file to a
TFTP server. To return a switch to its default configuration values, refer to
Note
The configuration file contains only those settings that have been
changed since the switch was last reset to the default settings.
Before downloading a configuration file onto the switch, note the following:
ˆ Your network must have a node with TFTP server software.
ˆ You must store the new configuration file on the TFTP server.
ˆ You should start the TFTP server software before you begin the
download procedure.
ˆ The switch where you are downloading the configuration file must
have an IP address and subnet mask. For instructions on how to
configure the IP address on a switch, refer to “Configuring the IP
ˆ When you download a new configuration file onto the switch, the new
file overrides the current file and the current file is lost unless you
uploaded it to a TFTP server before you replaced it.
To download or upload a configuration file, perform the following
procedure:
1. From the Tools menu, select Config. File Upload/Download.
The Configuration File Upload/Download page opens, as shown in
Figure 92. Configuration File Upload/Download Page
292
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
2. From the Download/Upload Config File list, choose Upload to upload a
file to the TFTP server, or Download to download the configuration file
from the TFTP server to the switch.
3. Change the following parameters as necessary:
TFTP Server IP
The IP address of the TFTP server.
Config File Name
The name of the configuration file. There is no default name for the
configuration file.
Retry Count
The number of times you want the switch to retry in the event a
problem occurs during the upload or download process. The range is 1
to 20, and the default is 5 times.
4. Click Apply.
The following message is displayed:
Are you sure you want to Upload/Download the new
configuration file?
5. Click OK to continue, or Cancel to stop the process.
Section II: Web Browser Interface
293
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 29: Working with System Files
294
Section II: Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Section III
Using the Command Line Interface
The chapter in this section provides information for using the command
line interface in the AT-S84 management software.
Note
The menus interface is described in Section I, “Using the Menus
Interface” on page 23, and the web browser interface is described in
Section II: Using the Web Browser Interface
295
Download from Www.Somanuals.com. All Manuals Search And Download.
296
Section II: Using the Web Browser Interface
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30
Getting Started with the Command Line
Interface
This chapter describes the command modes of the AT-S84 management
software command line interface and how to access them. This chapter
includes the following sections:
Section I: Basic Features
297
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
CLI Command Modes Introduction
The command line interface in the AT-S84 management software is
accessible from the Main Menu. The commands offer the same
functionality as the menus interface. For instructions on how to access the
command line interface, see “Starting the Command Line Interface” on
page 307. This chapter describes the CLI command modes and how to
access the command line interface. In addition, it provides command
formatting information.
In the AT-S84 management software, there is a hierarchy of commands
which are called command modes. There are five command modes:
ˆ User EXEC
ˆ Privileged EXEC
ˆ Global Configuration
ˆ Interface Configuration
ˆ VLAN Configuration
When you enter the CLI interface, you access the User EXEC command
mode automatically. This is the first command mode level and it allows
you access to the basic switch commands. Each command mode contains
a subset of commands that are available within that mode only. As a
result, you enter commands according to which command mode you have
accessed. For example, port-specific commands are available from the
Interface Configuration mode.
You must access the first three command modes (User EXEC, Privilege
EXEC, and Global Configuration modes) in the order that they are listed.
You can access both the Interface Configuration and VLAN Configuration
modes from the Global Configuration mode. The AT-S81 prompt changes
to indicate which mode you are accessing.
To access the Privilege EXEC, Global Configuration, Interface, and VLAN
Configuration modes, you must enter a specific command that permits
entry to a new mode. Each time you change modes, the prompt changes
commands used to access the modes and their respective prompts. In
addition, there are commands that allow you to move between the modes
and return to the Main Menu. For example, typing the EXIT command
when you are in the Interface Configuration mode returns you to the
Global Configuration mode. From all the command modes, the LOGOUT
command exits the command line interface and returns you to the Main
Menu.
If you enter a command that is not accessible in a particular command
mode, the software displays a “command not found” message. For
298
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
example, you can enter the SHOW SNMP command from the Privileged
EXEC command mode, but you cannot enter this command from the
VLAN Configuration mode.
Command The following formatting conventions are used in this manual:
Formatting
Conventions
ˆ screen text font- This font illustrates the format of a command and
command examples.
ˆ screen text font - Italicized screen text indicates a variable for you
to enter.
ˆ [ ] - Brackets indicate optional parameters.
ˆ | - Vertical line separates parameter options for you to choose from.
See the following sections for a description of each command mode,
including a list of the commands available from each mode.
Table 8. Command Modes
Command
Prompt
Switch>
Enter and Exit Commands
Mode
User EXEC
mode
ˆ Access this command mode by typing “C” at the Main
Menu. This is the default command mode.
ˆ Enter the LOGOUT or EXIT commands to quit the
command mode and return to the Main Menu.
Privileged
Switch#
ˆ Access this mode from the User EXEC mode with the
EXEC mode
ENABLE command.
ˆ Enter the DISABLE or EXIT commands to return to
the User EXEC mode.
ˆ Enter the LOGOUT command to quit the command
mode and return to the Main Menu.
Global
Switch(config)#
ˆ Enter the CONFIGURE command to enter this mode
Configuration
mode
from the Privileged EXEC mode.
ˆ Enter the END or EXIT commands to return to the
Privileged EXEC mode.
ˆ Enter the LOGOUT command to quit the command
mode and return to the Main Menu.
Section I: Basic Features
299
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
Table 8. Command Modes (Continued)
Command
Mode
Prompt
Enter and Exit Commands
Interface
Switch(config-if)#
ˆ From the Global Configuration mode, type:
Configuration
interface Ethernet1/port
ˆ Enter the END or EXIT commands to return to the
Global Configuration mode.
ˆ Enter the LOGOUT command to quit the command
mode and return to the Main Menu.
VLAN
Switch(config-vlan)#
ˆ From the Global Configuration mode, type:
Configuration
interface vlanid
ˆ Enter the END or EXIT commands to return to the
Global Configuration mode.
ˆ Enter the LOGOUT command to quit the command
mode and return to the Main Menu.
User EXEC The User EXEC command mode is the default command mode that is
available from the Main Menu. It permits access to basic commands. To
Command Mode
access any of the other modes, you must first access the User EXEC
mode. The commands in the User EXEC mode are accessible from any of
the other modes with the exception of the ENABLE command which is
only accessible from the User EXEC mode. The prompt changes to
Switch> to indicate the User EXEC mode.
User EXEC mode and a brief description of each command.
Table 9. User EXEC Command Mode Commands
Command
Definition
ENABLE
Changes mode from the User EXEC mode to the
Privilege EXEC mode.
EXIT
Exits the User EXEC mode and returns you to the Main
Menu.
LOGOUT
Exits the command line interface and returns you to the
Main Menu.
MODE
PING
Displays the available command modes.
Pings a specified IP address to check connectivity to
another system.
300
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Privileged EXEC The commands in the Privileged EXEC command mode permit you to
perform system level commands such as rebooting the system, copying
Command Mode
configuration files, and clearing statistics. To access this mode, you must
first access the User EXEC command mode. The prompt changes to
Switch# to indicate the Privileged EXEC mode.
See Table 10 for a list of commands that can be access from the
Privileged EXEC command mode.
Table 10. Privileged EXEC Command Mode Commands
Command
CLEAR
Description
Clears the interface (port) statistics counter.
CONFIGURE
COPY
Changes the mode to the Global Configuration Mode.
Uploads the configuration file to an image or
configuration file.
DISABLE
EXIT
Exits from the Privileged EXEC command mode to the
User EXEC command mode.
Exits from the Privileged EXEC command mode to the
User EXEC command mode.
LOGOUT
Exits the command line interface and returns to the
Main Menu.
MODE
PING
Displays the available modes.
Pings a specified IP address to check connectivity to
another system.
REBOOT
SHOW
Reboots the system.
Displays running system information.
Global The Global Configuration command mode allows you to configure
advanced system features such as broadcast storm control, SNMP, and
Configuration
Command Mode
STP. To access this mode, you must first access the User EXEC and the
Privileged modes. The prompt changes to Switch(config)# to indicate the
Interface Configuration mode.
Configuration mode.
Table 11. Global Configuration Command Mode Commands
Command
BACK-
Description
Sets the back pressure feature.
PRESSURE
Section I: Basic Features
301
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
Table 11. Global Configuration Command Mode Commands (Continued)
Command
Description
CONSOLE
DOT1X
Sets the console configuration.
Sets the 802.1x Port-based Network Access Control
configuration.
END
EXIT
Exits from the Global Configuration Command Mode
to the Privileged EXEC Command Mode.
Exits from the Global Configuration command mode
to the Privileged EXEC command mode.
HOSTNAME
INTERFACE
Sets the name of the system.
Changes the command mode to the Interface
Configuration command mode (you must also specify
a port).
IP
Set the IP Address and IP related commands for the
system.
LOGOUT
Exits the command line interface and returns to the
Main Menu.
MLS
MODE
NO
Sets the QoS feature.
Displays the available modes.
Negates a command or sets its defaults.
PING
Pings a specified IP address to check connectivity to
another system.
PRIORITY-
QUEUE
Maps a CoS value to a priority value.
RADIUS-
SERVER
Sets a RADIUS Server.
SNMP-
SERVER
Sets the SNMP configuration in the system.
Sets the STP features.
SPANNING-
TRESS
STORM-
CONTROL
Sets the Broadcast Storm Control feature for the
system.
TELNET-
SERVER
Sets the Telnet server.
TRUNK
Add ports to a trunk group.
USERNAME
Sets a system user name and password.
302
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Interface The Interface Configuration command mode allows you to configure
features that pertain to the ports on the system such as flow control, port
Configuration
Command Mode
mirroring, and duplex mode. To access this mode, you must first access
the User EXEC, Privileged EXEC, and Global Configuration modes. From
the Global Configuration mode, type:
interface ethernet1/port
You can specify a port or a range of ports. Separate a list of ports with
commas or a dash. The prompt changes to Switch(config-if)# to indicate
the Interface Configuration mode.
describes how to set the port mirroring in the Interface Configuration
mode.
After you have accessed the Interface Configuration mode, the commands
you enter apply to the ports specified in the Global Configuration mode. To
perform port-specific commands on another group of ports, you must first
exit the Interface Configuration mode and then specify the new ports in the
Global Configuration mode before returning to the Interface Configuration
mode.
For a list of commands that can be accessed from the Interface
Configuration command mode, see Table 12 on page 303.
Table 12. Interface Configuration Command Mode Commands
Commands
Description
Sets priority for a port.
DEFAULT-
PRIORITY
DOT1X
END
Sets the 802.1 protocol configuration.
Exits from the Interface Configuration Command Mode
to the Global Configuration Command Mode.
EXIT
Exits from the Interface Configuration Command Mode
to the Global Configuration Command Mode.
FLOW-CTRL Sets the parameters for the flow control feature.
GETPORT
LOGOUT
Provided information about the ports.
Exits the command line interface and returns to the
Main Menu.
MODE
NO
Displays the available modes.
Negates a command or sets its defaults.
Enables the port override feature.
OVERRIDE
Section I: Basic Features
303
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
Table 12. Interface Configuration Command Mode Commands
Commands
Description
PING
Pings a specified IP address to check connectivity to
another system.
PORT
PVID
Sets port mirroring parameters.
Sets the PVID.
SHUTDOWN Disables a port.
SPANNING-
TREE
Sets the parameters for the STP feature.
SPEED-
DUPLEX
Sets the speed and duplex mode for a port.
Port Mirroring Example
To configure port 8 as the mirroring port and port 6 as the mirrored port
you need to first access the Interface Configuration mode, specify the port,
and then configure the port mirroring feature. Perform the following
procedure.
1. From the User EXEC mode, enter:
enable
You now have access to the Privileged EXEC Configuration mode as
indicated by the Switch(config)# prompt.
2. From the Privileged EXEC Configuration mode, enter:
configure
You now have access to the Global Configuration mode as indicated
by the Switch(config)# prompt.
3. Access port 8 on the Interface Configuration mode:
interface Ethernet1/8
You now have access to the Interface Configuration mode as indicated
by the Switch(config-if)# prompt.
4. Enter the port mirroring command, making port 6 the mirrored port:
Switch# port mirror 6
304
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
VLAN The VLAN Configuration command mode allows you to configure VLAN
commands. To access this mode, you must first access the User EXEC,
Privileged EXEC, and Global Configuration modes. From the Global
Configuration command mode, type:
Configuration
Command Mode
interface vlanid
The prompt changes to Switch(config-vlan)# to indicate the VLAN
Configuration mode. Then enter VLAN commands.
After you have accessed the VLAN Configuration mode, the commands
you enter apply to the VLAN specified in the Interface Configuration mode.
To configure another VLAN, you must first exit the Interface Configuration
mode and then specify the new VLAN ID in the Global Configuration mode
before returning to the Interface Configuration mode.
See Table 13 for list of commands that can be accessed from the VLAN
Configuration command mode.
Table 13. VLAN Configuration Command Mode Commands
Commands
Description
END
Exits from the VLAN Configuration mode to the Global
Configuration mode.
EXIT
Exits from the VLAN Configuration mode to the Global
Configuration mode.
GETVLAN
Displays VLAN ID information.
INTERFACE
Changes mode to the Interface Configuration
command mode.
LOGOUT
Exits the command line interface and returns to the
Main Menu.
MEMBER
MODE
NAME
NO
Sets a static VLAN member.
Displays the available command modes.
Sets the VLAN name.
Negates a command or sets its defaults.
PING
Pings a specified IP address to check connectivity to
another system.
Section I: Basic Features
305
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
VLAN Example
To create a new VLAN with a VLAN ID of 2, access the Interface
Configuration mode and specify the VLAN ID. Perform the following
procedure.
1. From the User EXEC mode, enter:
enable
You now have access to the Privileged EXEC Configuration mode as
indicated by the Switch(config)# prompt.
2. From the Privileged EXEC Configuration mode, enter:
configure
You now have access to the Global Configuration mode as indicated
by the Switch(config)# prompt.
3. Create a VLAN with a VLAN ID of 2:
interface vlan2
You have created a VLAN with an ID of 2. You have access to the
VLAN Configuration mode as indicated by the Switch(config-vlan)#
prompt.
306
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Starting the Command Line Interface
To start the command line interface, perform the following procedure:
Line Interface.
AT-8000/8POE Local Management System
Enter the character in square brackets to select option
Main Menu
[G]eneral Information
[B]asic Switch Configuration
[A]dvanced Switch Configuration
Switch [T]ools
[C]ommand Line Interface
[S]tatistics
[Q]uit
Command>
Figure 93. Main Menu
name is “Switch>” and the arrow prompt indicates the user executive
mode. After you name the switch with the HOSTNAME command, the
new switch name replaces “Switch.” For example, if you rename the
switch “San Jose, the prompt changes to “San Jose>.”
Switch>
Figure 94. Command Line Prompt, User Executive Mode
Section I: Basic Features
307
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
Command Formatting
The AT-S81 command line interface follows same formatting conventions
for all of the command modes. There are command line interface features
which apply to the general use of the command line and command syntax
conventions which apply when entering the commands. See the following
sections.
Command Line The following features are supported in the command line interface:
Interface
Features
ˆ Command history - Use the up and down arrow keys.
ˆ Context-specific help - Press the question mark key, ?, to see a list of
legal parameters or display all of the available commands for a
particular command mode. There are two formatting options:
–
command ? - List the keywords or arguments that are required by
a particular command. A space between a command and a
question mark is required.
–
abbreviated command? - Provides a list of commands that begin
with a particular character string. There is no space between the
command and the question mark.
ˆ Keyword abbreviations - Any keyword can be recognized by typing an
unambiguous prefix, for example, type “sh” and the software responds
with “show”.
ˆ Tab key - Pressing the Tab key fills in the rest of the keyword. For
example, typing “di” and pressing the Tab key enters “disable” on the
command line.
Command Line The following table describes the conventions used in the command
interface.
Syntax
Conventions
Table 14. Command Line Syntax Conventions
Convention
Description
Example
<string>
A string of alphanumeric
characters
Switch-24
<int>
Integer
202
<ip>
IP address
Port instance
Subnet mask
192.168.0.1
Ethernet1/15
255.255.240.0
<interface>
<mask>
308
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Table 14. Command Line Syntax Conventions (Continued)
<mac-add>
<sec>
MAC address
Second
00:02:15:af:2e:02
12
<min>
Minute
12
<port>
Port instance
Trunk group ID
Ethernet1/2 (stack-1,port-2)
<trunk ID>
<vlanID>
4
VLAN instance (including name
and VLAN identifier)
vlan3
<port list>
A list of ports (separate entries
with a comma or dash)
1,2,3,4-6,20-24
5
<traffic class> Traffic class number
Section I: Basic Features
309
Download from Www.Somanuals.com. All Manuals Search And Download.
Chapter 30: Getting Started with the Command Line Interface
310
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
Appendix A: AT-S84 Default Settings
Basic Switch Default Settings
This section lists the default settings for basic switch parameters. The
following topics are covered:
System Reboot
Default Settings
The following table lists the system reboot default settings
Setting
Default
Reboot Status
Reboot Type
Stop
Normal
User Interface The following table lists the user interface default settings.
Configuration
Default Settings
Setting
Default
Console UI Idle Timeout
Telnet UI Idle Timeout
Telnet Server
5 minutes
5 minutes
Enabled
Disabled
Enabled
Manager
SNMP Agent
Web Server
User Name
Management The following table lists the management interface default settings.
Interface Default
Setting
Manager Username
Default
Settings
manager
friend
Manager Password
Console Idle Timeoutl
5 minutes
312
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Note
Login names and passwords are case sensitive.
Ping Default The following table lists the ping default settings.
Settings
Setting
Default
Target IP Address
Number of Requests
Timeout Value (sec.)
0.0.0.0
10
3
System IP The following table lists the system IP configuration default settings.
Configuration
Default Settings
Setting
Default
IP Address
Subnet Mask
Gateway
0.0.0.0
0.0.0.0
0.0.0.0
Disabled
DHCP Mode
System The following table describes the system administration default settings.
Administration
Configuration
Default Settings
Administration Setting
Description
Default
AT-9000/24
Name
None
None
None
Location
Contact
313
Download from Www.Somanuals.com. All Manuals Search And Download.
Appendix A: AT-S84 Default Settings
SNMP Default Settings
The following table describes the SNMP default settings.
Setting Default
SNMP Status
Disabled
SNMP Read Community
SNMP Write Community
Trap Authentication
public (Read only)
private (Read|Write)
Enabled
314
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
Port Configuration Default Settings
The following table lists the port configuration default settings.
Port Configuration Setting Default
Status
Enabled
Auto
Mode
Flow Ctrl
Back Pressure
Enabled
Disabled
315
Download from Www.Somanuals.com. All Manuals Search And Download.
Appendix A: AT-S84 Default Settings
Quality of Service
The following table lists the default mappings of IEEE 802.1p priority
levels to egress port priority queues
IEEE 802.1p Priority Level
Port Priority Queue
0 or 1
Q0 (lowest)
Q1
2 or 3
4 or 5
6 or 7
Q2
Q3 (highest)
316
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
IGMP Snooping Default Settings
The following table lists the IGMP Snooping default settings.
Setting Default
IGMP Snooping Status
Disabled
IGMP Snooping Age-Out Timer
Maximum Multicast Groups
Multicast Router Ports Mode
280 seconds
64
Auto Detect
317
Download from Www.Somanuals.com. All Manuals Search And Download.
Appendix A: AT-S84 Default Settings
RSTP Default Settings
The following table describes the RSTP default settings.
Setting
Global RSTP Status
Default
Disabled
2 Sec.
15
Hello Time
Bridge Forwarding
Maximum Age
20 Sec.
15 Sec.
2 Sec.
20 Sec.
15 Sec.
Forward Delay
Hello Time
Bridge Maximum Age
Bridge Forward Delay
318
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
802.1x Network Access Control Default Settings
The following table describes the access control default settings per port.
Settings Default
NAS ID
Nas1
Port Status
Port Role
Port Control
Authorized
None
Force Authorized
30 seconds
30 seconds
30 seconds
2
Transmission Period
Supplicant Timeout
Server Timeout
Maximum Request
Quiet Period
60 seconds
3600 seconds
Disabled
Re-authentication Period
Re-authentication Status
319
Download from Www.Somanuals.com. All Manuals Search And Download.
Appendix A: AT-S84 Default Settings
RADIUS Server Default Settings
The following table lists the default settings for RADIUS accounting.
Settings Default
Server IP Address
0.0.0.0
Response Time
10 seconds
3
Maximum Retransmissions
320
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
Appendix A: AT-S84 Default Settings
322
Section I: Basic Features
Download from Www.Somanuals.com. All Manuals Search And Download.
Index
Numerics
E
802.1x Port-based Network Access Control
edge port
F
factory defaults
flow control
A
AT-S84 management software
G
GARP VLAN Registration Protocol (GVRP)
gateway address
B
GVRP. See GARP VLAN Registration Protocol (GVRP)
back pressure
H
broadcast storm control
I
IGMP snooping
C
Class of Service (CoS)
configuration file
IP address
console idle timeout
K
L
D
LACP trunk
323
Download from Www.Somanuals.com. All Manuals Search And Download.
Index
Link Aggregation Control Protocol. See LACP trunk
local management session
port VLAN identifier (PVID)
M
Q
Quality of Service (QoS)
R
RADIUS
P
Rapid Spanning Tree Protocol (RSTP)
point-to-point port
remote management session
port
port control
port cost
S
SNMP
port duplex mode
port mirroring
SNMP agent
port speed
SNMP community string
port status
port trunk
SNMP trap receiver
324
Download from Www.Somanuals.com. All Manuals Search And Download.
AT-S84 Management Software User’s Guide
web server
static port trunk
subnet mask
switch
system contact
system location
system name
T
tagged VLAN
U
V
VLAN
W
web browser management session
325
Download from Www.Somanuals.com. All Manuals Search And Download.
Index
326
Download from Www.Somanuals.com. All Manuals Search And Download.
|