Allied-telesis AT-S60 Manuel d'utilisateur

AT-S60Management SoftwareAT-S60◆User’s GuideAT-8400 SERIES SWITCHVERSION 2.0.0®PN 613-50400-00 Rev B

Table of Contents10Displaying Port Status ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 99The Display Port Statistics Menu is shown in Figure 29. Figure 29 Di

Chapter 6: Port ParametersSection II: Local and Telnet Management 100Total Bytes ReceivedNumber of bytes received by the port.JabberNumber of occurren

Section II: Local and Telnet Management 101Chapter 7Port SecurityThis chapter describes port security and provides the procedures for setting port sec

Chapter 7: Port SecuritySection II: Local and Telnet Management 102Port Security OverviewThe port security feature can enhance the security of your ne

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 103A dynamic MAC address learned on a port operating in the Limited sec

Chapter 7: Port SecuritySection II: Local and Telnet Management 104SecurityViolations andIntrusionActionsWhen you set a port’s security level, you can

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 105Configuring Port SecurityTo configure port security, do the followin

Chapter 7: Port SecuritySection II: Local and Telnet Management 1063. Type 1 to select Configure Port Security.The following prompt is shown:Enter por

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 107If you selected one of the other security levels, several new menu o

Chapter 7: Port SecuritySection II: Local and Telnet Management 1089. If you selected the Limited security mode for the port, do the following to spec

11Deleting MAC Addresses ...

Section II: Local and Telnet Management 109Chapter 8Port TrunkingThis chapter describes port trunking and contains the procedures for creating, deleti

Chapter 8: Port TrunkingSection II: Local and Telnet Management 110Port Trunking OverviewPort trunking is an economical way for you to increase the ba

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 111The example in Figure 35 illustrates a 10/100 port trunk with 8 data

Chapter 8: Port TrunkingSection II: Local and Telnet Management 112❑ For 10/100 port trunks, such as those on an AT-8411 TX line card, all ports inclu

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 113Before CreatingPort TrunksAs mentioned in the above guidelines for c

Chapter 8: Port TrunkingSection II: Local and Telnet Management 114Creating a Port TrunkThis section contains the procedure for creating a port trunk

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 1153. Type 1 to select Create Trunk.The following prompt is displayed.E

Chapter 8: Port TrunkingSection II: Local and Telnet Management 116Deleting a Port TrunkUse this procedure to delete an existing port trunk, including

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 117Modifying a Port TrunkUse this procedure to modify an existing port

Chapter 8: Port TrunkingSection II: Local and Telnet Management 118The Modify Trunk menu is shown in Figure 37. Notice the two current port trunks, ca

Table of Contents12VLAN and GARP Default Settings ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 119Changing theName of thePort TrunkUse this procedure to change the na

Chapter 8: Port TrunkingSection II: Local and Telnet Management 1202. From the Port Menu, type 4 to select Port Trunking.The Trunk Configuration menu

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 121Deleting Portsfrom a PortTrunkUse this procedure to delete ports fro

Chapter 8: Port TrunkingSection II: Local and Telnet Management 122Replacing Portsin a TrunkUse this procedure to overwrite, or replace, the current p

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 123Clearing Portsin a Port TrunkUse this procedure to clear, or delete,

Section II: Local and Telnet Management 124Chapter 9Port MirroringThis chapter describes port mirroring and provides the procedures for creating and d

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 125Port Mirroring OverviewThe port mirroring feature allows you to moni

Chapter 9: Port MirroringSection II: Local and Telnet Management 126Creating a Port MirrorUse the following procedure to create a port mirror. For inf

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 127NoteYou cannot assign a range of ports on the same line card as sour

Chapter 9: Port MirroringSection II: Local and Telnet Management 128Modifying a Source Port MirrorUse the following procedure to add, delete, set (ove

12List of FiguresFigure 5: Main Menu ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 129The following prompt appears:Enter Source Port(s) [port-list]:6. Ent

Chapter 9: Port MirroringSection II: Local and Telnet Management 130Deleting a Destination Port MirrorTo delete a destination port mirror and its sour

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 131Enabling a Destination Port MirrorUse this procedure if you have pre

Chapter 9: Port MirroringSection II: Local and Telnet Management 132Disabling a Destination Port MirrorUse this procedure to prevent traffic from the

Section II: Local and Telnet Management 133Chapter 10File System ConfigurationThe chapter describes the file system operations you can perform on conf

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 134File System Configuration OverviewThe File System Menus allow you to c

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 135File NamingConventionsThe file subsystem provides a flat file system

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 136Using Wildcards to Specify Groups of FilesYou can use the asterisk cha

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 137Setting, Creating, Editing, and Displaying System Configuration File

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 138The File Menu is shown in Figure 40.Figure 40 File Menu2. Type 1 to s

13Figure 42: Port Mirroring Menu ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 139Creating aSystemConfigurationFileThis procedure allows you to save y

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 140Editing aSystemConfigurationFileYou can edit a system configuration fi

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 141The View Configuration File Menu is shown in Figure 41.Figure 41 Vi

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 142The second page of the View Configuration File Menu is shown in Figure

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 143Copying and Renaming System FilesUse this procedure to copy and rena

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 144Deleting System FilesUse this procedure to delete a system file. You c

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 1452. From the File Menu, type 8 to select Delete file to delete a syst

Chapter 10: File System ConfigurationSection II: Local and Telnet Management 146Displaying System FilesUse this procedure to display a list of current

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 147The Display File(s) Menu is shown in Figure 43.Figure 43 Display Fi

Section II: Local and Telnet Management 148Chapter 11File Downloads and UploadsThis chapter contains procedures for downloading and uploading files to

List of Figures14Figure 97: Display Port Based VLAN Menu ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 149OverviewDownloading and uploading are useful system features that ma

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 150configuration settings, then the system configuration file contains t

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 151The final section, Downloading the AT-S60 Image Switch to Switch on

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 152Obtaining Management Software UpdatesNew releases of management softw

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 153Downloading FilesThis section contains the procedures for downloadin

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 154Downloadingan Image FileUsing Xmodemor TFTPThe following procedures d

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 155NoteMenu options 2 and 4 in the menu are described in Uploading File

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 156Downloading an Image File Using XmodemTo download an image file using

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 1575. Click on the Protocol field and select as the transfer protocol e

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 158The Downloads & Uploads Menu is displayed, as shown in Figure 45

15Figure 152: Configure Supplicant Menu ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 159Downloading an Image File Using TFTPTo download a file using TFTP, p

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 1605. If the new image file differs from the existing one, the following

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 161Downloading aFile UsingXmodem orTFTPThe following procedures describ

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 162The Downloads & Uploads menu is shown in Figure 49.Figure 49 Dow

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 163Downloading a File Using XmodemTo download certificate, certificate

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 164The Send File window is shown in Figure 51. Figure 51 Send File Wind

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 1657. Click Send.The file immediately begins to download onto the switc

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 166Downloading a File Using TFTPTo download a certificate, certificate e

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 167Press any key. The Downloads & Uploads Menu is displayed, as sho

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 168Uploading FilesThis section contains procedures for uploading the fol

List of Figures16Figure 207: GVRP Counters Page ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 169Uploading anImage FileUsing Xmodemor TFTPThe following procedures de

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 1704. Type 2 to upload the AT-S60 software image from the switch.If you

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 171Uploading an Image File Using Xmodem To upload an image file using X

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 1725. Click on the Protocol field and select as the transfer protocol ei

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 173The file immediately begins to upload onto the system. The Xmodem Fi

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 174Uploading an Image File Using TFTPTo upload an image file using TFTP,

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 175Uploading a FileUsing Xmodemor TFTPThe following procedures describe

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 1764. Type 2 to upload the AT-S60 software image from the switch.If you

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 177Uploading a File Using Xmodem To upload a file using Xmodem (this pr

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 1784. In the HyperTerminal main window, select the Transfer menu. Then s

17PrefaceThis guide contains instructions on how to configure an AT-8400 Series Switch using the AT-S60 management software. Within this manual, the A

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 1798. Enter a name for storing the uploaded file.This will be the name

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 180Uploading a File Using TFTPTo upload a file using TFTP, perform the f

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 181NoteThe file name must already exist on the switch.NoteIf you receiv

Chapter 11: File Downloads and UploadsSection II: Local and Telnet Management 182Downloading the AT-S60 Image Switch to SwitchThis procedure explains

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 183NoteYou can update only AT-8400 Series switches. You cannot download

Section II: Local and Telnet Management 184Chapter 12STP, RSTP, and MSTPThis chapter provides background information on the Spanning Tree Protocol (ST

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 185STP and RSTP OverviewA physical loop in a network topology can pose

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 186NoteAn AT-8411 TX line card with more than four ports functioning as redunda

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 187Path Costs and Port CostsOnce the Root Bridge has been selected, the

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 188The port costs of the ports on an AT-8400 Series switch can be adjusted thro

Preface18Section III: Security FeaturesThe chapters in this section describe how to configure the authentication and advanced security features. The a

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 189The range for port priority is 0 to 240 in increments of 16. Just as

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 190The forwarding delay value is adjustable on the AT-8400 Series switch throug

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 191There are two possible selections:❑ Point-to-point❑ Edge portIf a br

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 192If a port is operating in half-duplex mode and is not connected to any furth

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 193A port can be both point-to-point and edge at the same time. It woul

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 194The single spanning tree encompasses all ports on the switch. If the ports a

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 195Another approach is to connect your VLANs with tagged ports instead

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 196Enabling or Disabling STP, RSTP, or MSTPThe AT-8400 Series switch can suppor

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 197The following prompt is displayed:Enter new value (S-STP, R-RSTP, M-

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 198Configuring STPThis section contains the following procedures:❑ Configuring

Copyright © 2003 Allied Telesyn, Inc. 960 Stewart Drive Suite B, Sunnyvale, CA 94085 USAAll rights reserved. No part of this publication may be reprod

AT-S60 Management Software User’s Guide19Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.War

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 199The STP Menu is shown in Figure 68.Figure 68 STP Menu3. Adjust the

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 200topology changes. If the bridge transitions too soon, not all links may have

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 201The STP Port Parameters Menu is shown in Figure 69.Figure 69 STP Po

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 202to 240 in increments of 16. The default value is 8 (priority value 128). For

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 203Displaying STPPort SettingsTo display port STP settings, perform the

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 204Configuring RSTPThis section contains the following procedures: ❑ Configurin

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 205The RSTP Menu is shown in Figure 72.Figure 72 RSTP Menu3. Adjust th

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 2063 - Bridge Hello TimeThe time interval between generating and sending config

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 207ConfiguringRSTP PortParametersTo adjust a port’s RSTP parameters, pe

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 2084. Enter the port to configure. For instructions on how to specify port numb

Preface20Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document Format (PDF

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 209C - Check Migration To RSTP on Selected Ports (MCHECK)This parameter

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 210MSTP OverviewAs mentioned in earlier sections in this chapter, STP and RSTP

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 211NoteDue to different vendor implementations of the new IEEE 802.1s s

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 212MultipleSpanning TreeInstance (MSTI)The individual spanning trees in MSTP ar

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 213If the switches were running STP or RSTP, one of the links would be

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 214Figure 76 illustrates the same two AT-8400 Series switches and the same two

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 215A MSTI can contain more than one VLAN. This is illustrated in Figure

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 216This example illustrates Allied Telesyn’s implementation of MSTP. It shows t

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 217A configuration name is a name you assign to a region to help you id

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 218Figure 78 illustrates the concept of regions. It shows one MSTP region consi

AT-S60 Management Software User’s Guide21Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as we

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 219The AT-8400 Series switch determines regional boundaries by examinin

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 220❑ Each MSTI must have a regional root for locating loops in the instance. MS

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 221MSTP with STP and RSTPMSTP is fully compatible with STP and RSTP. If

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 222❑ All of the bridges in a region must have the same configuration name, revi

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 223This is illustrated in Figure 79. Port 8 on a line card in Switch A

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 224A problem can arise if you assign some VLANs to MSTIs while leaving others j

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 225This is illustrated in Figure 81. The example show two switches, eac

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 226Here is an example. Let’s assume that you have two regions that contain the

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 227Configuring MSTPThis section contains the following procedures:❑ Con

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 228The MSTP Menu is shown in Figure 82. Figure 82 MSTP MenuMenu selections 1 t

Preface22Obtaining Management Software UpdatesNew releases of management software for our managed products can be downloaded from either of the follow

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 2293 - Forwarding DelayThe waiting period before a bridge changes to a

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 2308 - Bridge IdentifierThe MAC address of the bridge. The bridge identifier is

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 231Enter new priority [the value will be multiplied by 4096]: [0 to 15]

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 232Regional Root IDIdentifies the regional root for the MSTI by its MAC address

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 2332. Enter the MSTP IDs that you want to delete. The range is 1 to 15.

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 234To add or remove a VLAN from an MSTI ID, do the following:1. From the MSTP M

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 235Enter the MSTI ID <enter 0 for CIST> [0 to 15] ->2. Enter t

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 2363. A prompt similar to the following is displayed:Enter the list of VLANs:4.

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 237The Configure MSTP Port Settings menu is shown in Figure 87.Figure 8

Chapter 12: STP, RSTP, and MSTPSection II: Local and Telnet Management 2385 - Edge PortThis parameter defines whether the port is functioning as an ed

23Section IOverviewThe chapter in Section I provides a brief overview of the AT-S60 management software. It explains the functions that you can perfor

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 239❑ Role - Indicates the MSTP role of the port. Possible roles are: ro

Section II: Local and Telnet Management 240 Chapter 13Virtual LANsThis chapter contains basic information about virtual LANs (VLANs). It also contains

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 241VLAN OverviewA VLAN is a group of ports on an Ethernet switch that f

Chapter 13: Virtual LANsSection II: Local and Telnet Management 242workstations physically, or having to change group memberships by moving cables fro

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 243Port-based VLAN OverviewAs explained in the VLAN Overview section, a

Chapter 13: Virtual LANsSection II: Local and Telnet Management 244If a VLAN consists only of ports located on one physical switch in your network, yo

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 245For example, assume that you were creating a port-based VLAN on a sw

Chapter 13: Virtual LANsSection II: Local and Telnet Management 246❑ The introduction of a router into your network could create security issues from

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 247Port-BasedExamplesWhat follows are two examples of port-based VLANs

Chapter 13: Virtual LANsSection II: Local and Telnet Management 248The table below lists the port assignments for the Sales and Production VLANs on th

Section I: Overview 24Chapter 1AT-S60 OverviewThis chapter describes the AT-S60 software functions, the types of sessions you can use to access the so

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 249Example 2Figure 89 illustrates our second port-based example. The tw

Chapter 13: Virtual LANsSection II: Local and Telnet Management 250The table below lists the port assignments for the Sales and Production VLANs on th

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 251Tagged VLAN OverviewThe second type of VLAN supported by the AT-8400

Chapter 13: Virtual LANsSection II: Local and Telnet Management 252The parts of a tagged VLAN are much the same as those for a port-based VLAN. They a

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 253General Rulesfor Creating aTagged VLANBelow is a summary of the rule

Chapter 13: Virtual LANsSection II: Local and Telnet Management 254Tagged VLANExampleFigure 90 illustrates how tagged ports can be used to interconnec

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 255This example is nearly identical to the port-based VLAN Example 2 ea

Chapter 13: Virtual LANsSection II: Local and Telnet Management 256Basic VLAN Mode OverviewThe Fast Ethernet Switches support a special VLAN configura

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 257Displaying VLANsThis procedure displays all the port-based and tagge

Chapter 13: Virtual LANsSection II: Local and Telnet Management 2583. From the Display VLAN menu, type 3 to select Display VLAN.The Display Port Based

AT-S60 Management Software User’s GuideSection I: Overview 25OverviewThe AT-S60 management software is intended for the AT-8400 Series switch. The sof

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 259If only the Protocol is GARP, then the corresponding tagged port in

Chapter 13: Virtual LANsSection II: Local and Telnet Management 260Creating a Port-based or Tagged VLANTo create a new port-based or tagged VLAN, perf

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 2613. From the Configure VLAN menu, type 4 to select Configure Port Bas

Chapter 13: Virtual LANsSection II: Local and Telnet Management 262If the VLAN is unique in your network, then the name should be unique as well. If t

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 263After you have entered the tagged ports of the VLAN, the following p

Chapter 13: Virtual LANsSection II: Local and Telnet Management 264Example of Creating a Port-Based VLANThe following procedure creates the Sales VLAN

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 265Example of Creating a Tagged VLANThe following procedure creates the

Chapter 13: Virtual LANsSection II: Local and Telnet Management 266Modifying a VLANThe section contains the procedure for adding or deleting ports fro

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 267Each menu selection is explained below.1 - Add Ports to VLANTo add p

Chapter 13: Virtual LANsSection II: Local and Telnet Management 268c. If you want to remove one or more tagged ports from the VLAN, enter the ports at

Chapter 1: AT-S60 OverviewSection I: Overview 26The following sections in this chapter briefly describe each type of management session. In addition,

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 2694 - Clear Ports from VLANTo remove all ports from the VLAN, do the f

Chapter 13: Virtual LANsSection II: Local and Telnet Management 270Deleting a VLANTo delete a VLAN, perform the following procedure: 1. From the Confi

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 271Setting a Switch’s VLAN ModeThis section contains the procedure for

Chapter 13: Virtual LANsSection II: Local and Telnet Management 272Specifying a Management VLANThe management VLAN is the VLAN through which an AT-840

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 273Now let’s assume that you decided to create a VLAN called NMS with a

Section II: Local and Telnet Management 274Chapter 14Multiple VLAN ModesThis chapter explains the Multiple VLAN modes and how to select a mode. This c

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 275Multiple VLAN Mode OverviewThe Multiple VLAN modes simplify the task

Chapter 14: Multiple VLAN ModesSection II: Local and Telnet Management 276NoteThe Multiple VLAN modes are supported only in single switch (that is, an

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 277NoteIn 802.1Q Multiple VLAN mode, the device connected to the uplink

Chapter 14: Multiple VLAN ModesSection II: Local and Telnet Management 278CautionThe non-802.1Q-Compliant Multiple VLAN mode does not protect the swit

AT-S60 Management Software User’s GuideSection I: Overview 27Telnet Management SessionAny management workstation on your network that has the Telnet a

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 279Selecting a VLAN ModeThe following procedure explains how to select

Chapter 14: Multiple VLAN ModesSection II: Local and Telnet Management 280The following confirmation is displayed:Setting VLAN mode to Multiple VLAN.

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 281Changing the Uplink PortOnce the switch is operating in a Multiple V

Chapter 14: Multiple VLAN ModesSection II: Local and Telnet Management 282Displaying VLAN InformationTo view the name, VID number, and member ports of

Section II: Local and Telnet Management 283Chapter 15GARP VLAN Registration ProtocolThis chapter describes the GARP VLAN Registration Protocol (GVRP).

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 284GARP VLAN Registration Protocol (GVRP) OverviewThe GARP VLAN Reg

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 285Figure 98 provides an example of how GVRP works.Figure 98 GVRP Exam

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 286it is not a member, it automatically adds the port to the VLAN a

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 287❑ You can convert dynamic GVRP VLANs and dynamic GVRP port assignmen

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 288GenericAttributeRegistrationProtocol (GARP)OverviewThe following

Chapter 1: AT-S60 OverviewSection I: Overview 28Web Browser Management SessionYou can also use a web browser to manage a switch. Using a web browser m

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 289The architecture of GARP is shown in Figure 99. Figure 99 GARP Arch

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 290An instance of GID consists of the set of state machines that de

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 291The Applicant is therefore looking after the interests of all would-

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 292Configuring GVRPUse the following procedure to configure GVRP. T

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 2936. Choose one of the following:E to enable GIP.D to disable GIP.Note

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 294Enabling or Disabling GVRP on a PortThis procedure enables and d

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 2955. Enter a port or a list of ports. For information about how to spe

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 2969. After making changes, type R until you return to the Main Men

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 297Displaying GVRP Parameters and StatisticsTo display GVRP counters, d

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 298GVRP Counters Option 1 - Display GVRP Counters in the Other GARP

3Table of ContentsList of Figures ...

AT-S60 Management Software User’s GuideSection I: Overview 29SNMP Management SessionAnother way to remotely manage the switch is with an SNMP manageme

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 299Figure 107 GVRP Counters Menu (page 2)The GVRP counters in the menu

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 300Transmit Discarded: GARP DisabledNumber of GARP PDUs discarded b

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 301Transmit GARP Messages: JoinEmptyTotal number of GARP JoinEmpty mess

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 302GVRP Database Option 2 - Display GVRP Database in the Other GARP

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 303GIP ConnectedPorts RingOption 3 - Display GIP Connected Ports Ring i

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 304GVRP StateMachineOption 4 - Display GVRP State Machine in the Ot

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 305App Applicant state machine for the GID index on that particular por

Chapter 15: GARP VLAN Registration ProtocolSection II: Local and Telnet Management 306App (Continued) Non-Participant Management state:“Von” Very Anxi

Section II: Local and Telnet Management 307Chapter 16MAC Address TableThis chapter provides an overview of MAC addresses. In addition, it describes th

Chapter 16: MAC Address TableSection II: Local and Telnet Management 308MAC Address OverviewEvery hardware device that you connect to your network has

Chapter 1: AT-S60 OverviewSection I: Overview 30Management Access LevelsThere are two levels of management access on an AT-8400 switch: Manager and Op

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 309The type of MAC address described above is referred to as a dynamic

Chapter 16: MAC Address TableSection II: Local and Telnet Management 310Displaying MAC AddressesThe management software has menu selections for displa

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 3113. Select the desired option. Each option is described below:1 - Dis

Chapter 16: MAC Address TableSection II: Local and Telnet Management 3122 - Display All static MAC AddressesThis option displays only the static MAC a

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 3136 - Display Multicast MAC AddressesThis selection displays the multi

Chapter 16: MAC Address TableSection II: Local and Telnet Management 314Adding Static Unicast and Multicast MAC AddressesThis section contains the pro

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 315The following prompt is displayed:Please enter MAC address ->4. E

Chapter 16: MAC Address TableSection II: Local and Telnet Management 316Deleting MAC AddressesThis section contains the procedure for deleting static

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 317b. Type Y for yes to delete the dynamic MAC addresses or N for no to

Chapter 16: MAC Address TableSection II: Local and Telnet Management 318Changing the Aging TimeThe switch uses the aging time to delete inactive dynam

AT-S60 Management Software User’s GuideSection I: Overview 31Specifying PortsMany of the commands and parameters, in this manual involve specifying th

Section II: Local and Telnet Management 319Chapter 17Class of Service (CoS)This chapter contains the procedures for configuring Class of Service (CoS)

Chapter 17: Class of ServiceSection II: Local and Telnet Management 320Class of Service OverviewWhen a port on an Ethernet switch becomes oversubscrib

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 321Each switch port has two egress queues, low and high. When a tagged

Chapter 17: Class of ServiceSection II: Local and Telnet Management 322Configuring CoSTo configure CoS for a port, perform the following procedure:1.

Section II: Local and Telnet Management 323Chapter 18IGMP SnoopingThis chapter provides a description of the Internet Group Management Protocol (IGMP)

Chapter 18: IGMP SnoopingSection II: Local and Telnet Management 324IGMP Snooping OverviewIGMP enables routers to create lists of nodes that are membe

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 325Without IGMP snooping, a switch would flood multicast packets from a

Chapter 18: IGMP SnoopingSection II: Local and Telnet Management 326Configuring IGMP SnoopingTo configure, enable, or disable IGMP snooping on the swi

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 327Options 1 through 5 are described below:1 - IGMP Snooping StatusEnab

Chapter 18: IGMP SnoopingSection II: Local and Telnet Management 328This parameter is useful with networks that contain a large number of multicast gr

Chapter 1: AT-S60 OverviewSection I: Overview 32Specifying Time and DateThe Simple Network Time Protocol (SNTP) feature places the time and date on th

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 329Displaying a List of Host NodesThis procedure displays a list of the

Chapter 18: IGMP SnoopingSection II: Local and Telnet Management 330Displaying a List of Multicast RoutersA multicast router is a router that is recei

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 331If you entered the multicast router ports manually, the menu contain

332Section IIISecurity FeaturesThe chapters in Section III explain how to configure an AT-8400 switch with security features. The chapters include:❑ C

Section III: Security Features 333Chapter 19Web ServerThe chapter provides an overview of the web server feature. In addition, it describes how to con

Chapter 19: Web ServerSection III: Security Features 334Web Server OverviewBy default, the switch is configured as a non-secure web server. The web se

AT-S60 Management Software User’s GuideSection III: Security Features 335Configuring the Web Server for Security FeaturesThis procedure allows you to

Chapter 19: Web ServerSection III: Security Features 3365. Type 1 to select Status to enable or disable the web server. To configure the web server, y

AT-S60 Management Software User’s GuideSection III: Security Features 337Configuring SSL CertificatesThe high-level configuration procedures included

Chapter 19: Web ServerSection III: Security Features 338WarningUsing this command creates a certificate that is only suitable for secure switch manage

33Section IILocal and Telnet ManagementThe chapters in Section II explain how to manage an AT-8400 switch from a local or Telnet management session. T

AT-S60 Management Software User’s GuideSection III: Security Features 3396. Use TFTP to upload an enrollment request.See Downloading Files on page 153

Section III: Security Features 340Chapter 20EncryptionThis chapter contains a description of encryption and procedures for creating keys for encryptio

AT-S60 Management Software User’s GuideSection III: Security Features 341Encryption OverviewThis chapter describes the data security services availabl

Chapter 20: EncryptionSection III: Security Features 342Data EncryptionData encryption for switches is driven by the need for organizations to keep se

AT-S60 Management Software User’s GuideSection III: Security Features 343by a 64-bit Initialization Vector (IV). This is the DES mode used for the swi

Chapter 20: EncryptionSection III: Security Features 344digital signature. The signature station publishes its public key, and then signs its messages

AT-S60 Management Software User’s GuideSection III: Security Features 345Data AuthenticationData authentication for switches is driven by the need for

Chapter 20: EncryptionSection III: Security Features 346Key Exchange AlgorithmsKey exchange algorithms are used by switches to securely generate and e

AT-S60 Management Software User’s GuideSection III: Security Features 347Configuring Keys for EncryptionUse the following procedures to configure, mod

Chapter 20: EncryptionSection III: Security Features 348The Keys/Certificate Configuration Menu is shown in Figure 121.Figure 121 Keys/Certificate Co

Section II: Local and Telnet Management 34Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedure for starting a loc

AT-S60 Management Software User’s GuideSection III: Security Features 349The Key Management Menu is shown in Figure 122.Figure 122 Key Management Men

Chapter 20: EncryptionSection III: Security Features 350The Create Key Menu is shown in Figure 123.Figure 123 Create Key MenuNoteOnce you have config

AT-S60 Management Software User’s GuideSection III: Security Features 35110. Type 4 to create a key description.The following prompt is displayed:Ente

Chapter 20: EncryptionSection III: Security Features 3527. To delete a key, select 2 - Delete Key from the Key Management menu.The following message i

AT-S60 Management Software User’s GuideSection III: Security Features 353Exporting Keys The following procedure allows you to export a key to a file.

Chapter 20: EncryptionSection III: Security Features 354NoteKey Type is a read-only field. You cannot change this value.7. Type 3 to select Key File F

AT-S60 Management Software User’s GuideSection III: Security Features 355The Import Key From File Menu is shown in Figure 125.Figure 125 Import Key F

Chapter 20: EncryptionSection III: Security Features 356Key Import in Progress. Please wait...DoneAfter you receive this message, the key is added to

Section III: Security Features 357Chapter 21Public Key Infrastructure (PKI)This chapter describes the Public Key Infrastructure (PKI) feature and prov

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 358Public Key Infrastructure OverviewThis chapter describes the Public Key I

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 35Local Management SessionTo establish a local management session using

AT-S60 Management Software User’s GuideSection III: Security Features 359MessageEncryptionOne of the two main services provided by public key encrypti

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 360An X.509 v3 certificate consists of:❑ A serial number, which distinguishe

AT-S60 Management Software User’s GuideSection III: Security Features 361Certification AuthoritiesA Certification Authority is an entity which issues,

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 362Root CA CertificatesA root CA must sign its own certificate. The root CA

AT-S60 Management Software User’s GuideSection III: Security Features 363PKI ImplementationThe following sections discuss Allied Telesyn’s implementat

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 364Configuring CertificatesUse the procedures in this section to create a ce

AT-S60 Management Software User’s GuideSection III: Security Features 365The Public Key Infrastructure (PKI) Certification Menu is shown in Figure 126

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 366The X509 Certificate Management Menu is shown in Figure 127.Figure 127 X

AT-S60 Management Software User’s GuideSection III: Security Features 367The Create Self-Signed Certificate Menu is shown in Figure 128.Figure 128 Cr

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 36810. Type 3 - Format to select the type of encoding format the certificate

Chapter 2: Starting a Local or Telnet Mangement SessionSection II: Local and Telnet Management 36Starting a LocalManagementSessionTo start a local man

AT-S60 Management Software User’s GuideSection III: Security Features 369Country names are generally given in the form of the two-letter ISO 3166 code

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 3705. From the X509 Certificate Management menu, type 2 to select Add Certif

AT-S60 Management Software User’s GuideSection III: Security Features 371NoteTo display the filenames of the certificates, see Displaying System Confi

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 372The Modify Certificate Menu is shown in Figure 130.Figure 130 Modify Cer

AT-S60 Management Software User’s GuideSection III: Security Features 373The following message is displayed:Please wait while certificate is updated..

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 374ViewingCertificatesTo view the details of a certificate, perform the foll

AT-S60 Management Software User’s GuideSection III: Security Features 375The View Certificate Details Menu (page 1) is shown in Figure 131.Figure 131

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 3767. Type N to see the second page of certificate details.The View Certific

AT-S60 Management Software User’s GuideSection III: Security Features 377MD5 Fingerprint - Indicates the MD5 algorithm. This value provides a unique s

Chapter 21: Public Key Infrastructure (PKI)Section III: Security Features 378Generating Enrollment RequestsTo request a certificate from a Certificate

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 37When prompted for the user name and password, enter one of the follow

AT-S60 Management Software User’s GuideSection III: Security Features 379Figure 133 Generate Enrollment Request Menu5. Type 1 - Request Name.The foll

Section III: Security Features 380Chapter 22Secure Sockets Layer (SSL)The chapter contains information about Secure Sockets Layer (SSL) as well as a p

AT-S60 Management Software User’s GuideSection III: Security Features 381Secure Sockets Layer OverviewThis chapter describes the Secure Sockets Layer

Chapter 22: Secure Sockets Layer (SSL)Section III: Security Features 382All application data messages are authenticated by SSL with a message authenti

AT-S60 Management Software User’s GuideSection III: Security Features 383The Alert message is used if the client or server detects an error. Alert mes

Chapter 22: Secure Sockets Layer (SSL)Section III: Security Features 384Configuring SSLThis section describes how to configure SSL. This procedure is

Section III: Security Features 385Chapter 23Secure Shell (SSH)The chapter contains overview information about the Secure Shell (SSH) protocol as well

Chapter 23: Secure Shell (SSH)Section III: Security Features 386SSH OverviewThis chapter describes the Secure Shell (SSH) protocol, including:❑ Suppor

AT-S60 Management Software User’s GuideSection III: Security Features 387❑ RSA public keys with lengths of 512 to 2048 bits are supported. Keys are st

Chapter 23: Secure Shell (SSH)Section III: Security Features 388You can download client software from the Internet. Two popular SSH clients are PuTTY

Chapter 2: Starting a Local or Telnet Mangement SessionSection II: Local and Telnet Management 38Please note the following:❑ The Command Line Interfac

AT-S60 Management Software User’s GuideSection III: Security Features 389SSH Overall Configuration Configuring the SSH server requires you to perform

Chapter 23: Secure Shell (SSH)Section III: Security Features 390Configuring SSHThis section describes how to configure the switch as an SSH server. Fo

AT-S60 Management Software User’s GuideSection III: Security Features 391The Secure Shell (SSH) Menu is shown in Figure 135.Figure 135 Secure Shell (

Chapter 23: Secure Shell (SSH)Section III: Security Features 392This timer determines how often the server key is regenerated. Naturally, a server key

AT-S60 Management Software User’s GuideSection III: Security Features 393Displaying SSH InformationTo display SSH server information, perform the foll

Chapter 23: Secure Shell (SSH)Section III: Security Features 394❑ Server Port: Indicates the well-known port for SSH. The default is port 22.❑ Host Ke

Section III: Security Features 395Chapter 24TACACS+ and RADIUS ProtocolsThis chapter explains how you can use the two authentication protocols TACACS+

Chapter 24: TACACS+ and RADIUS ProtocolsSection III: Security Features 396TACACS+ and RADIUS OverviewThe AT-S60 software has two standard management l

AT-S60 Management Software User’s GuideSection III: Security Features 397Authorization defines what a user can do once logged in to a switch. You assi

Chapter 24: TACACS+ and RADIUS ProtocolsSection III: Security Features 398NoteThis manual does not explain how to configure TACACS+ or RADIUS server s

Table of Contents4Starting a Telnet Management Session ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 39Telnet Management SessionYou can use the Telnet application protocol

AT-S60 Management Software User’s GuideSection III: Security Features 399Enabling TACACS+ or RADIUSTo enable or disable the server-based authenticatio

Chapter 24: TACACS+ and RADIUS ProtocolsSection III: Security Features 400Configuring TACACS+To configure TACACS+, perform the following procedure:1.

AT-S60 Management Software User’s GuideSection III: Security Features 401However, if you are specifying only one TACACS+ server or if the servers have

Chapter 24: TACACS+ and RADIUS ProtocolsSection III: Security Features 402Configuring RADIUSTo configure RADIUS, perform the following procedure:1. Fr

AT-S60 Management Software User’s GuideSection III: Security Features 403the list. If there aren’t any more servers in the list, then the switch defau

Section III: Security Features 404Chapter 25802.1x Port-Based Network Access ControlThis chapter contains an overview and procedures for 802.1x Port-b

AT-S60 Management Software User’s GuideSection III: Security Features 405Port-Based Access Network Control OverviewThe AT-S60 software’s IEEE 802.1X-b

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 406802.1x Port-Based Network Access Control The IEEE 802.1x standard provid

AT-S60 Management Software User’s GuideSection III: Security Features 407the authentication server for verification, then the authentication server in

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 408Port Authentication ControlA physical port under 802.1x control has asso

Chapter 2: Starting a Local or Telnet Mangement SessionSection II: Local and Telnet Management 40Starting a TelnetManagementSessionTo start a Telnet m

AT-S60 Management Software User’s GuideSection III: Security Features 409The Authenticator PAE can be configured to request that the Supplicant PAE re

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 410Authentication Server The authentication server verifies the supplicant’

AT-S60 Management Software User’s GuideSection III: Security Features 411Enabling and Disabling Port Access ControlTo globally enable or disable Port

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 4124. Type E to enable port access control, or D to disable port access con

AT-S60 Management Software User’s GuideSection III: Security Features 413Configuring the Port Access Role Use this procedure to configure a port with

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 414The Configure Port Access Role Menu is shown in Figure 145.Figure 145 C

AT-S60 Management Software User’s GuideSection III: Security Features 415Configuring Authenticator ParametersAfter you have enabled port access contro

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 4163. From the Port Access Control menu, type 4 to select Configure Authent

AT-S60 Management Software User’s GuideSection III: Security Features 417The authenticator port access parameters are listed as menu items with defaul

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 418❑ Force-unauthorized: Causes the port to remain in the unauthorized stat

Section II: Local and Telnet Management 41Chapter 3Basic Switch ParametersThis chapter contains a variety of information about basic switch parameters

AT-S60 Management Software User’s GuideSection III: Security Features 419Configure Supplicant ParametersAfter you have enabled port access control and

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 420The Configure Supplicant Menu is shown in Figure 148.Figure 148 Configu

AT-S60 Management Software User’s GuideSection III: Security Features 4216. Select the parameter that you want to modify. They are described below:1 -

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 422Displaying Port Access StatusThere are three ways to display port access

AT-S60 Management Software User’s GuideSection III: Security Features 423The Display Port Access Status menu is shown in Figure 150.Figure 150 Displa

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 424When you configure a port with a Supplicant role, the Status field can h

AT-S60 Management Software User’s GuideSection III: Security Features 425The Display Authenticator Port Access Parameters Menu is shown in Figure 151.

Chapter 25: 802.1x Port-Based Access ControlSection III: Security Features 426The Display Supplicant Port Access Parameters Menu is shown in Figure 15

427Section IVWeb Browser ManagementThe chapters in Section IV explain how to manage an AT-8400 switch using a web browser. The chapters include:❑ Chap

Section IV: Web Browser Management 428Chapter 26Starting a Web Browser Management SessionThis chapter contains the procedure for starting a management

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 42Assigning an IP Address to a SwitchWhen building or expanding your network,

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 429Starting a Web Browser Management SessionThis section explains how to sta

Chapter 26: Starting a Web Browser Management SessionSection IV: Web Browser Management 4302. Enter the IP address of the switch in the URL field of t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 431The main menu is on the left side of the Home page. It consists of the fo

Section IV: Web Browser Management 432Chapter 27Basic Switch ParametersThis chapter provides the following procedures for configuring basic switch par

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 433Configuring an IP Address and Switch NameThis procedure describes the par

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 434The Configuration System page is displayed with the General tab selected by d

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4352. Change the following parameters as desired:System NameThis parameter s

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 436Manager PasswordManager Confirm PasswordThese parameters are used to change t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4373. After you have set the parameters, click Apply.Your changes are activa

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 438Setting the System TimeTo set system time manually on the switch, perform the

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 43How Do YouAssign an IPAddress?Once you have decided which, if any, sw

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4395. In the Additional Time Parameters section you can specify the UTC offs

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 440Setting Up SNTPWhen you set up SNTP, the switch polls an SNTP or NTP server f

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 441Activating the BOOTP and DHCP ServicesFor background information on BOOTP

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 442Displaying System InformationTo view system information you access the Monito

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 443The sections in the tab are defined below.GeneralThis section displays th

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 444❑ Switch Mode - Defines the switch’s current VLAN mode. If this parameter dis

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 445Configuring the SNMP Parameters and Trap IP AddressesThis procedure allow

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 4463. Adjust the following parameters as desired:Enable SNMP AccessUse this para

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 447The Add New SNMP Community page is shown in Figure 159.Figure 159 Add Ne

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 448Access ModeClick Read Only to allow read access to the SNMP community. To all

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 44Configuring an IP Address and Switch NameThe procedure in this section expl

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 449Figure 160 Modify SNMP Community Page4. Modify the following parameters:

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 450Allow Any StationClick this option to allow any SNMP manager to access the sw

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 451The SNMP tab is shown in Figure 161Figure 161 Monitoring Page, SNMP Tab

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 452Resetting a SwitchTo reset a switch, perform the following procedure: 1. From

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 453Pinging a Remote SystemYou can instruct the switch to ping a node on your

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 454Returning the AT-S60 Software to the Factory Default ValuesThe procedure in t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4553. Click the Reset Switch After Setting Defaults checkbox.4. Click Apply.

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 456Downloading a New Software VersionYou can download a new software version to

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4573. In the TFTP BootLoader/Image Download section, fill in the following p

Chapter 27: Basic Switch ParametersSection IV: Web Browser Management 4588. Click OK. The switch reboots and the web management session is terminated.

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 452. Change the parameters as desired. The parameters in the Administra

Section IV: Web Browser Management 459Chapter 28Enhanced StackingThis chapter introduces enhanced stacking, describes how to assign enhanced stacking

Chapter 28: Enhanced StackingSection IV: Web Browser Management 460OverviewUsing a web browser management session, you can view and set the enhanced s

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 461Setting a Switch’s Enhanced Stacking StatusTo adjust a switch’s enhanced

Chapter 28: Enhanced StackingSection IV: Web Browser Management 462Selecting a Switch in an Enhanced StackYou can use the AT-S60 software to access a

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 463The master switch polls the network for all remote switches in the same s

Chapter 28: Enhanced StackingSection IV: Web Browser Management 464The Home page for the remote switch you selected is displayed. An example is shown

Section IV: Web Browser Management 465Chapter 29Port ParametersThe procedures in this chapter allow you to view and change the parameter settings for

Chapter 29: Port ParametersSection IV: Web Browser Management 466Configuring Port ParametersThis procedure describes how to configure one or more port

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 467CautionUse caution when you update the port that is connected to your man

Chapter 29: Port ParametersSection IV: Web Browser Management 468To select a value, click the circle next it. Possible values are:❑ Auto-Negotiate: Se

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 469 - Set Console Baud RateThis selection allows you set the baud rate of the

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 469❑ High - Indicates high priority has been assigned to the port. As a resu

Chapter 29: Port ParametersSection IV: Web Browser Management 470Flow ControlFlow control applies only to ports operating in full-duplex mode. The swi

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 471Displaying Port Status and StatisticsThe procedures in this section displ

Chapter 29: Port ParametersSection IV: Web Browser Management 4723. Click on a port. You can select more than one port at a time when you want to disp

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 473LinkThe status of the link between the port and the end node connected to

Chapter 29: Port ParametersSection IV: Web Browser Management 474STP StateThe current operating status of the port. Possible values are:❑ Forwarding -

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 475You can select only one port when displaying statistics. After you select

Chapter 29: Port ParametersSection IV: Web Browser Management 476Bytes SentNumber of bytes transmitted from the port.Frames SentNumber of frames trans

Section IV: Web Browser Management 477Chapter 30Port SecurityThis chapter explain how to display the port security status using a web browser manageme

Chapter 30: Port SecuritySection IV: Web Browser Management 478Displaying the Port Security LevelTo display the switch’s port security levels, perform

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 47Displaying Line Card InformationThis section describes how to manuall

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4794. Click on the ports to display their security status. After you click o

Chapter 30: Port SecuritySection IV: Web Browser Management 480❑ Lock all ports: The Lock All Ports security level causes the switch to immediately st

Section IV: Web Browser Management 481Chapter 31Port TrunkingThis chapter explains how to configure a port trunk using a web browser management sessio

Chapter 31: Port TrunkingSection IV: Web Browser Management 482Creating or Deleting a Port TrunkThe following procedures allow you to create or delete

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4834. Click Add.The Add New Trunk page is shown in Figure 176.Figure 176 Ad

Chapter 31: Port TrunkingSection IV: Web Browser Management 48410. Configure the ports on the remote switch for port trunking.You can now connect the

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 485Modifying a Port TrunkThis procedure allows you to modify a port trunk us

Chapter 31: Port TrunkingSection IV: Web Browser Management 486The Modify Trunk page is shown in Figure 177.Figure 177 Modify Trunk Page5. Click on t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 487Displaying the Port TrunksThis procedure allows you to view the port trun

Section IV: Web Browser Management 488Chapter 32Port MirroringThis chapter explains how to configure a port mirror using a web browser management sess

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 48The Display Line Card Menu is shown in Figure 6.Figure 6 Display Line Card

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 489Creating or Deleting a Port MirrorUse the following procedures to create,

Chapter 32: Port MirroringSection IV: Web Browser Management 490The Add New Mirror page is displayed as shown in Figure 180.Figure 180 Add New Mirror

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 491Deleting a PortMirrorUse this procedure to delete a port mirror using a w

Chapter 32: Port MirroringSection IV: Web Browser Management 492Modifying a Port MirrorTo change the source mirror port or the destination mirror port

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 4935. Make your changes to the mirror ports. Click once to select S - source

Chapter 32: Port MirroringSection IV: Web Browser Management 494Displaying the Port Mirror ListThis procedure allows you to view the list of port mirr

Section IV: Web Browser Management 495Chapter 33STP, RSTP, and MSTPThis chapter explains how to configure STP, RSTP, and MSTP parameters on an AT-8400

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 496Enabling STP, RSTP, or MSTPThe AT-8400 Series switch can support the three spanni

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 497NoteIf you do not want to change the active spanning tree protocol and ju

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 498Configuring STPTo configure STP, perform the following procedure:CautionThe bridg

5Locked ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 49Displaying LineCard StatisticsTo display the current line card statis

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 499.Figure 184 Expanded STP Spanning Tree Tab3. In the Configure STP Parame

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 500parameter can be from 0 (zero) to 15, with 0 having the highest priority. For a l

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 501The STP Settings page is shown in Figure 185.Figure 185 STP Settings Pag

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 502Configuring RSTPTo configure RSTP, perform the following procedure: CautionThe br

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 503Figure 186 Expanded RSTP Spanning Tree Tab4. In the Configure RSTP Param

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 504bridges have the same priority value, the bridge with the numerically lowest MAC

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 505The RSTP Settings page is shown in Figure 187.Figure 187 RSTP Settings P

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 506Point-to-PointThis parameter defines whether the port is functioning as a point-t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 507Configuring MSTPThis section contains the following procedures: ❑ Configu

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 508Figure 188 Expanded MSTP Spanning Tree Tab

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 50Activating the BootP and DHCP ServicesThe BootP and DHCP application protoc

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 509NoteThis procedure explains the Configure MSTP Parameters section of the

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 510All bridges in a single-instance bridged LAN use this aging time to test the age

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 511Creating,Deleting, orModifying MSTIIDsTo create, delete, or modify MSTI I

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 512Deleting an MSTI IDTo delete an MSTI ID, do the following:1. Display the Spanning

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5134. In the Priority field, enter a new MSTI Priority value. This parameter

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 514Modifying a VLAN AssociationTo modify a VLAN association, do the following:1. Dis

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 515ConfiguringMSTP PortParametersTo configure MSTP port parameters, perform

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 516Edge PortThis parameter defines whether the port is functioning as an edge port.

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 517Displaying STP, RSTP, or MSTP SettingsTo display spanning tree parameter

Chapter 33: STP, RSTP, and MSTPSection IV: Web Browser Management 518Figure 193 shows an example of the Monitor STP Parameters tab. The contents of th

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 51NoteIf you activate BOOTP/DHCP, the switch immediately begins to quer

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 519The STP Settings page is shown in Figure 194.Figure 194 STP Settings Pag

Section IV: Web Browser Management 520Chapter 34Virtual LANsThis chapter explains how to create, modify, and delete VLANs using a web browser manageme

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 521Creating a VLANTo create a new port-based or tagged VLAN, perform the fol

Chapter 34: Virtual LANsSection IV: Web Browser Management 522The Add New VLAN page is shown in Figure 196.Figure 196 Add New VLAN Page5. In the VID

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 523The name can be from one to 18 characters in length. The name should refl

Chapter 34: Virtual LANsSection IV: Web Browser Management 524Modifying a VLANTo modify a port-based or tagged VLAN, perform the following procedure:1

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5256. Modify the VLAN parameters by referring to Step 6 through Step 7 in th

Chapter 34: Virtual LANsSection IV: Web Browser Management 526Deleting a VLANTo delete a port-based or tagged VLAN from the switch, perform the follow

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 527Displaying VLANsTo display all the existing VLANs on a switch, perform th

Chapter 34: Virtual LANsSection IV: Web Browser Management 528TypeThe VLAN type: port-based or tagged.ProtocolThe only option is GVRP.Tagged(T)/Untagg

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 52Setting the System TimeTo set system time on the switch, configure the Simp

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 529Setting the Switch’s VLAN ModeThis section contains the procedure for set

Section IV: Web Browser Management 530Chapter 35GARP VLAN Registration ProtocolThis chapter about web server security contains the following procedure

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 531Configuring GVRPTo configure GVRP, perform the following procedure: 1. Fr

Chapter 35: GARP VLAN Registration ProtocolSection IV: Web Browser Management 5324. Configure the following parameters: Enable GVRPClick in this box t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 533Resetting GVRP to the DefaultsTo reset GVRP to the defaults:1. From the H

Chapter 35: GARP VLAN Registration ProtocolSection IV: Web Browser Management 534Modifying the GVRP Port ConfigurationTo modify the GVRP port configur

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 535Displaying the GVRP SettingsUse this procedure to view the GVRP settings:

Chapter 35: GARP VLAN Registration ProtocolSection IV: Web Browser Management 536The GVRP Port Configuration page is shown in Figure 202.Figure 202 G

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 537The GVRP Counters page is shown in Figure 203.Figure 203 GVRP Counters P

Chapter 35: GARP VLAN Registration ProtocolSection IV: Web Browser Management 538Transmit Discarded: GARPDisabledNumber of GARP packets (PDUs) discard

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 533. From the Configure System menu, type 1 - Configure System Software

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 539Transmit GARP Messages: JoinInTotal number of GARP JoinIn messages transm

Section IV: Web Browser Management 540Chapter 36MAC Address TableThis chapter describes how to view the dynamic and static addresses in the MAC addres

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 541Displaying the MAC Address TableTo view the MAC address table, perform th

Chapter 36: MAC Address TableSection IV: Web Browser Management 542View Static MAC AddressesThis option displays only the static MAC addresses. Static

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 543The MAC addresses are displayed in a table. The columns in the table are:

Chapter 36: MAC Address TableSection IV: Web Browser Management 544Adding Static Unicast and Multicast MAC AddressesThis section contains the procedur

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5455. In the Port Number field, enter the port number that is to be assigned

Chapter 36: MAC Address TableSection IV: Web Browser Management 546Deleting MAC AddressesTo delete a static, dynamic, or multicast MAC address from th

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 547Changing the Aging TimeThe switch uses the aging time to delete inactive

Section IV: Web Browser Management 548Chapter 37IGMP SnoopingThis chapter describes how to configure the IGMP snooping feature on the switch. It conta

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 545. Type 1 - System Time to manually set the time and date for the switch. T

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 549Configuring IGMP SnoopingTo configure IGMP snooping from a web browser ma

Chapter 37: IGMP SnoopingSection IV: Web Browser Management 550Select the Single-Host/Port (Edge) setting when there is only one host node connected t

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 551If the switch does not detect any queries from a multicast router during

Chapter 37: IGMP SnoopingSection IV: Web Browser Management 552Displaying a List of Host Nodes and Multicast RoutersYou can use the AT-S60 software to

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 553The View Multicast Hosts List page is shown in Figure 209.Figure 209 Vie

Chapter 37: IGMP SnoopingSection IV: Web Browser Management 554The View Multicast Routers List page is shown in Figure 210.Figure 210 View Multicast

Section IV: Web Browser Management 555Chapter 38TACACS+ and RADIUS ProtocolsThis chapter contains instructions on how to configure the authentication

Chapter 38: TACACS+ and RADIUS ProtocolsSection IV: Web Browser Management 556Enabling TACACS+ or RADIUSTo configure the authentication protocols, per

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5574. To select an authentication protocol, click either TACACS+ or RADIUS i

Chapter 38: TACACS+ and RADIUS ProtocolsSection IV: Web Browser Management 558Configuring TACACS+To configure TACACS+, perform the following procedure

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 5512. Type 4 - UTC Offset to specify a difference between the UTC and l

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 559Global Server TimeoutThis parameter specifies the maximum amount of time

Chapter 38: TACACS+ and RADIUS ProtocolsSection IV: Web Browser Management 560Configuring RADIUSTo configure RADIUS, perform the following procedure:1

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 561Global Server TimeoutThis parameter specifies the maximum amount of time

Chapter 38: TACACS+ and RADIUS ProtocolsSection IV: Web Browser Management 562Displaying the TACACS+ SettingsTo display the TACACS+ RADIUS settings, p

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 563The TACACS+ Client Configuration page is shown in Figure 216.Figure 216

Chapter 38: TACACS+ and RADIUS ProtocolsSection IV: Web Browser Management 564Displaying the RADIUS SettingsTo display the RADIUS settings, perform th

Section IV: Web Browser Management 565Chapter 39802.1x Port-Based Network Access ControlThis chapter describes how to configure and display port acces

Chapter 39: 802.1x Port-Based Network Access ControlSection IV: Web Browser Management 566Configuring Port AccessTo configure 802.1x port access from

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5674. In the Configure Port Access Parameters section, adjust the following

Chapter 39: 802.1x Port-Based Network Access ControlSection IV: Web Browser Management 568Configuring anAuthenticatorPortTo configure an authenticator

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 56Rebooting a SwitchTo reset a switch while preserving the switch configurati

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5695. Configure the following parameters:Port ControlChoose from the followi

Chapter 39: 802.1x Port-Based Network Access ControlSection IV: Web Browser Management 570Reauth PeriodEnables periodic re-authentication of the clien

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 571The Supplicant Parameters page is displayed, as shown in Figure 221.Figur

Chapter 39: 802.1x Port-Based Network Access ControlSection IV: Web Browser Management 572User Password - Enter a password to access the supplicant po

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 573Displaying 802.1x Port Access InformationTo view host nodes and multicast

Chapter 39: 802.1x Port-Based Network Access ControlSection IV: Web Browser Management 574A port status page is displayed, as shown in Figure 223.Figu

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 575For a description of the parameters displayed on this page, refer to Conf

Section IV: Web Browser Management 576Chapter 40Web Server SecurityThis chapter about web server security contains the following procedures:❑ Displayi

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 577Displaying the Encryption KeysTo display the encryption keys, perform the

Chapter 40: Web Server SecuritySection IV: Web Browser Management 578The following information is displayed: Key IDThe identification number for the k

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 57Configuring the AT-S60 Software Security FeaturesThe AT-S60 software

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 579Displaying the PKI SettingsTo display the PKI settings, perform the follo

Chapter 40: Web Server SecuritySection IV: Web Browser Management 580The PKI tab is shown in Figure 227.Figure 227 Monitoring Security Page, PKI TabT

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 5815. To view detailed information about the certificate, select the certifi

Chapter 40: Web Server SecuritySection IV: Web Browser Management 582Subject - Lists the Subject Distinguished Name.Issuer - Lists the Distinguished N

AT-S60 Management Software User’s GuideSection IV: Web Browser Management 583Displaying the SSL Settings To view the SSL settings, perform the followi

Chapter 40: Web Server SecuritySection IV: Web Browser Management 584The following information is displayed: Maximum Number of SessionsThe maximum num

585Appendix AAT-S60 Default SettingsThis appendix lists the AT-S60 factory default settings. It contains the following sections in alphabetical order:

Appendix A: AT-S60 Default Settings586Basic Switch Default SettingsThis section lists the default settings for basic switch parameters. The following

AT-S60 Management Software User’s Guide587NoteFor the AT-8412/SC FX and AT-8412/MT FX line cards, the default setting for Negotiation is Manual. For a

Appendix A: AT-S60 Default Settings588SwitchAdministrationDefault SettingsThe following table describes the switch administration default settings.Sys

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 58Configuring theManagementPasswordsThere are two levels of management access

AT-S60 Management Software User’s Guide589Enhanced Stacking Default SettingThe following table lists the Enhanced Stacking default setting.Enhanced St

Appendix A: AT-S60 Default Settings590IGMP Snooping Default SettingsThe following table lists the IGMP Snooping default settings.IGMP Snooping Setting

AT-S60 Management Software User’s Guide591PKI Default SettingsThe following table lists the PKI default settings, including the generate enrollment re

Appendix A: AT-S60 Default Settings592Port Configuration Default SettingsThe following table lists the port configuration default settings.Port Config

AT-S60 Management Software User’s Guide593Port Security Default SettingsThe following table lists the port security default settings.Port Security Set

Appendix A: AT-S60 Default Settings594Server-Based Authentication Default SettingsThis section describes the server-based authentication, RADIUS, and

AT-S60 Management Software User’s Guide595SNMP Default SettingsThe following table describes the SNMP default settings.SNMP Communities Setting Defaul

Appendix A: AT-S60 Default Settings596SSH Default SettingsThe following table lists the SSH and the SSH server default settings.SSH Setting DefaultSSH

AT-S60 Management Software User’s Guide597SSL Default SettingsThe following table lists the SSL default settings.SSL Setting DefaultMaximum Number of

Appendix A: AT-S60 Default Settings598STP, RSTP, and MSTP Default SettingsThis section provides the STP switch, STP, RSTP, and MSTP default settings.

Table of Contents6Chapter 12STP, RSTP, and MSTP ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 59ConfiguringManagementAccessThis procedure configures the console time

AT-S60 Management Software User’s Guide599RSTP DefaultSettingsThe following table describes the RSTP default settings.MSTP DefaultSettingsThe followin

Appendix A: AT-S60 Default Settings600Internal Cost Auto UpdatePort Priority 128MSTP Setting Default

AT-S60 Management Software User’s Guide601VLAN and GARP Default SettingsThis section provides VLAN, GARP, and GVRP default settings.VLAN DefaultSettin

Appendix A: AT-S60 Default Settings602Web Server Default SettingsThe following table lists the Web Server default settings.Web Server Configuration Se

AT-S60 Management Software User’s Guide603802.1x Port-Based Network Access Control Default SettingsThe following table describes the 802.1x Port Acces

604Index802.1x port-based network access controlaccess role, configuring 413, 566authentication process diagram 410authentication serverdescribed 406d

AT-S60 Management Software User’s Guide605Boot Protocol (BootP)activating 50, 441defined 50bootloader version number 60BOOTP/DHCP parameter 45, 436, 5

606Ddata authentication, described 345data bits parameter 36data compression parameter 394Data Encryption Standard (DES), described 342data encryption

AT-S60 Management Software User’s Guide607displayingGVRP state machine 304parameters 297, 535statistics 297enabling on a port 294GIP connected ports r

608Kkey exchange algorithms 346key pair ID parameter 379, 591LLimited security level 102, 479line cards, displayinginformation 47statistics 49link par

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 60Displaying the AT-S60 Hardware and Software InformationThe procedures in th

AT-S60 Management Software User’s Guide609MSTI IDcreating 511deleting 512modifying 512MSTI IDsassociating to VLANs 235creating 232deleting 232list 231

610modifying 371validating 361PKI. See Public Key Infrastructure (PKI)point-to-point (port) parameter 208, 237, 599point-to-point portMultiple Spannin

AT-S60 Management Software User’s Guide611port trunkingdefined 110diagram 110guidelines 111port VLAN identifier (PVID), defined 244port-based access c

612configuration overview 389encryption algorithms 386encryption keys 387overview 386serverconfiguring 390described 387displaying information 393users

AT-S60 Management Software User’s Guide613SSL. See Secure Sockets Layer (SSL)starting sessionlocal 35Telnet 39web browser 429static unicast MAC addres

614used parameter 302user name, default 37, 40UTC offset parameter 55, 439, 587Vversions supported (SSH) parameter 393virtual LAN (VLAN)creating 260,

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 61You cannot change the information displayed in selections 1 through 3

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 62You cannot change the information displayed in selections 1 through 6 in th

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 63You cannot change the information displayed in selections 1 through 6

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 64Pinging a Remote SystemYou can instruct the switch to ping a remote device

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 65Returning the AT-S60 Software to the Factory Default ValuesThe proced

Chapter 3:Basic Switch ParametersSection II: Local and Telnet Management 66Switch is about to reboot. Do you want to proceed? [Yes/No] ->7. Type Y

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 67Configuring the Console Startup ModeYou can configure the AT-S60 soft

68Chapter 4SNMP Community StringsThe procedures in this chapter allow you to create and modify SNMP communities that have access to the switch. When y

7Selecting a VLAN Mode ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 69Enabling SNMP CommunitiesTo configure SNMP, you need to enable SNMP o

Chapter 4: SNMP Community StringsSection II: Local and Telnet Management 704. From the Configure System Software Menu, type 8 to select Configure SNMP

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 71Configuring SNMP CommunitiesUse this procedure to configure the SNMP

Chapter 4: SNMP Community StringsSection II: Local and Telnet Management 726. Select 1 - Create SNMP Community to configure SNMP parameters.The follow

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 73The following prompt appears:Enter Trap Receiver IP Addr:11. Enter an

Chapter 4: SNMP Community StringsSection II: Local and Telnet Management 74Deleting a SNMP CommunityUse the following procedure to delete a SNMP commu

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 75Modifying a SNMP CommunityUse this procedure to change the attributes

Chapter 4: SNMP Community StringsSection II: Local and Telnet Management 767. Select 1 - Add Attributes to Community to add SNMP manager and Trap Rece

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 77Do you want to delete Trap Receiver IP Address?14. Enter Y to delete

Chapter 4: SNMP Community StringsSection II: Local and Telnet Management 78Displaying a SNMP CommunityUse the following procedure to display the attri

Table of Contents8Symmetrical Encryption ...

Section II: Local and Telnet Management 79Chapter 5Enhanced StackingThis chapter explains the enhanced stacking feature and provides procedures for us

Chapter 5: Enhanced StackingSection II: Local and Telnet Management 80Enhanced Stacking OverviewThe enhanced stacking feature can make it easier for y

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 81There are three basic steps to implementing this feature on your netw

Chapter 5: Enhanced StackingSection II: Local and Telnet Management 82This is explained in the procedure Setting a Switch’s Enhanced Stacking Status o

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 83Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking stat

Chapter 5: Enhanced StackingSection II: Local and Telnet Management 84ConfiguringEnhancedStackingTo adjust a switch’s enhanced stacking status, perfor

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 85Selecting a Switch in an Enhanced StackBefore performing a procedure

Chapter 5: Enhanced StackingSection II: Local and Telnet Management 863. Type 1 to select Get/Refresh List of Switches.The Master switch polls the net

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 876. Enter a username. The usernames are “manager” to view and change t

Section II: Local and Telnet Management 88Chapter 6Port ParametersThe chapter contains procedures for viewing and changing the parameter settings for

9Chapter 25802.1x Port-Based Network Access Control ...

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 89Displaying Port StatusThis section provides a procedure to display th

Chapter 6: Port ParametersSection II: Local and Telnet Management 90The information in this menu is for viewing purposes only. The columns in the menu

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 91SpeedThe operating speed of the port. Possible values are:0010 - Indi

Chapter 6: Port ParametersSection II: Local and Telnet Management 92Low - Indicates low priority has been assigned to the port. As a result, all tagge

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 93Configuring Port ParametersTo configure the parameter settings for a

Chapter 6: Port ParametersSection II: Local and Telnet Management 944. Adjust the port parameters as desired. You adjust a parameter by typing its num

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 95High Priority - Indicates high priority has been assigned to the port

Chapter 6: Port ParametersSection II: Local and Telnet Management 96Disabled - Indicates that no flow control occurs on the port.Enabled - Indicates t

AT-S60 Management Software User’s GuideSection II: Local and Telnet Management 97The possible settings for 9 - Duplex are:Full - Indicates full-duplex

Chapter 6: Port ParametersSection II: Local and Telnet Management 98Displaying Port StatisticsTo display Ethernet port statistics, perform the followi