Allied-telesis AT-S100 Manuel d'utilisateur

613-001138 Rev. AManagementSoftwareAT-S100User’s GuideFor use with the AT-9000/28 and AT-9000/28SP Managed Layer 2 GE ecoSwitchesVersion 1.0.3

Tables10

Chapter 3: Privileged Executive Mode Commands100 Section I: Command ModesSHOW MAC ADDRESS-TABLE STATICSyntaxshow mac address-table static | (begin|exc

AT-S100 Management Software User’s GuideSection I: Command Modes 101See Figure 7 for an example display.Figure 7. SHOW MAC ADDRESS-TABLE STATICThe fie

Chapter 3: Privileged Executive Mode Commands102 Section I: Command ModesSHOW MAC ADDRESS-TABLE VLANSyntaxshow mac address-table vlan <1-4094>Pa

AT-S100 Management Software User’s GuideSection I: Command Modes 103Figure 8. SHOW MAC ADDRESS-TABLE VLAN CommandThe fields in Figure 8 are defined in

Chapter 3: Privileged Executive Mode Commands104 Section I: Command ModesSHOW RUNNING-CONFIG INTERFACESyntaxshow running-config interface INTERFACEPar

AT-S100 Management Software User’s GuideSection I: Command Modes 105To display the status of the current running configuration of a switch for VLAN 2:

Chapter 3: Privileged Executive Mode Commands106 Section I: Command ModesSHOW SPANNING-TREESyntaxshow spanning-tree interface INTERFACEParametersIFNAM

AT-S100 Management Software User’s GuideSection I: Command Modes 107Figure 11. SHOW SPANNING-TREE Command, page 1See Figure 12 for page 2 of the displ

Chapter 3: Privileged Executive Mode Commands108 Section I: Command ModesRelated CommandsSee Chapter 10, “Spanning Tree Protocol (STP) Commands” on pa

AT-S100 Management Software User’s GuideSection I: Command Modes 109SHOW STATIC-CHANNEL-GROUPSyntaxshow static-channel-groupParameters noneDescription

11PrefaceThe AT-S100 Management Software is the operating system for the AT-9000/28 and AT-9000/28SP Managed Layer 2 GE ecoSwitches. This guide descri

Chapter 3: Privileged Executive Mode Commands110 Section I: Command ModesSHOW USER-PRIORITYSyntaxshow user-priority interface INTERFACEParametersIFNAM

AT-S100 Management Software User’s GuideSection I: Command Modes 111SYSTEM FACTORY-RESETSyntax system factory-resetParametersnoneDescriptionUse the SY

Chapter 3: Privileged Executive Mode Commands112 Section I: Command ModesSYSTEM REBOOTSyntax system rebootParametersnoneDescriptionUse the SYSTEM REBO

AT-S100 Management Software User’s GuideSection I: Command Modes 113UPLOAD TFTPSyntax upload tftp A.B.C.D WORDParametersA.B.C.D Indicates an IP addres

Chapter 3: Privileged Executive Mode Commands114 Section I: Command ModesThe switch displays the following which indicates a successful upload operati

Section I: Command Modes 115Chapter 4Configuration Terminal Mode CommandsThe commands in this chapter are accessed through the Configuration Terminal

Chapter 4: Configuration Terminal Mode Commands116 Section I: Command Modes “SHOW RUNNING-CONFIG COMMUNITY-LIST” on page 158 “SHOW RUNNING-CONFIG IN

AT-S100 Management Software User’s GuideSection I: Command Modes 117 CLOCK SUMMER-TIME RECURRINGSyntaxclock summer-time ZONENAME recurring START-WEEK

Chapter 4: Configuration Terminal Mode Commands118 Section I: Command ModesEND-MONTH Specifies the month that summer time ends. Use the first three le

AT-S100 Management Software User’s GuideSection I: Command Modes 119 CLOCK TIMEZONESyntaxclock timezone <timezone> minus|plus <0-12>no clo

Preface12Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.CautionCautions inform you that per

Chapter 4: Configuration Terminal Mode Commands120 Section I: Command ModesTo return the time zone to UTC with no offsets, use the following commands:

AT-S100 Management Software User’s GuideSection I: Command Modes 121 CRYPTO KEY GENERATE USERKEYSyntaxcrypto key generate userkey USERNAME rsa <768

Chapter 4: Configuration Terminal Mode Commands122 Section I: Command ModesTo generate an RSA user key for a user named “lapo,” use the following comm

AT-S100 Management Software User’s GuideSection I: Command Modes 123 DOT1X SYSTEM-AUTH-CTRLSyntaxdot1x system-auth-ctrlParameterssystem-auth-ctrl Enab

Chapter 4: Configuration Terminal Mode Commands124 Section I: Command ModesENABLE PASSWORDSyntaxenable password (8) LINEParameters8 Specifies a hidden

AT-S100 Management Software User’s GuideSection I: Command Modes 125 ENABLE SECRETSyntaxenable secret (8) LINEParameters8 Specifies a hidden password

Chapter 4: Configuration Terminal Mode Commands126 Section I: Command ModesEXITSyntaxexitParametersnoneDescriptionUse the EXIT command to quit the Con

AT-S100 Management Software User’s GuideSection I: Command Modes 127 HELPSyntaxhelpParametersnoneDescriptionUse this command to display information ab

Chapter 4: Configuration Terminal Mode Commands128 Section I: Command ModesHOSTNAME Syntaxhostname NAMEParametersNAME Specifies the name of the switch

AT-S100 Management Software User’s GuideSection I: Command Modes 129 INTERFACESyntaxinterface IFNAMEParametersIFNAME Specifies the name of an interfac

AT-100 Management Software User’s Guide13Where to Find Web-based GuidesThe installation and user guides for all Allied Telesis products are available

Chapter 4: Configuration Terminal Mode Commands130 Section I: Command Modesswitch(config)#interface vlan1switch(config-if)#Related Commands“SHOW MAC A

AT-S100 Management Software User’s GuideSection I: Command Modes 131 IP IGMP SNOOPING Syntaxip igmp snoopingno ip igmp snoopingDescriptionUse the IP I

Chapter 4: Configuration Terminal Mode Commands132 Section I: Command ModesIP ROUTE Syntaxip route (GATEWAYIP|INTERFACE) no ip route (GATEWAYIP|INTERF

AT-S100 Management Software User’s GuideSection I: Command Modes 133 IP SSH RSA KEYPAIR-NAMESyntaxip ssh rsa keypair-name WORDno ip ssh rsa keypair-na

Chapter 4: Configuration Terminal Mode Commands134 Section I: Command ModesIP SSH VERSION Syntaxip ssh version 1|2no ip ssh version 1|2Parametersversi

AT-S100 Management Software User’s GuideSection I: Command Modes 135 LINE CONSOLESyntaxline console 0ParametersnoneDescriptionThe LINE CONSOLE command

Chapter 4: Configuration Terminal Mode Commands136 Section I: Command ModesLINE VTYSyntaxline vty FIRST <0-871> LAST <0-871>no line vty FI

AT-S100 Management Software User’s GuideSection I: Command Modes 137 To disable Telnet and web server sessions, enter the following commands:switch#co

Chapter 4: Configuration Terminal Mode Commands138 Section I: Command ModesMAC ADDRESS-TABLE AGEING-TIMESyntaxmac address-table ageing-time <10-100

AT-S100 Management Software User’s GuideSection I: Command Modes 139 MAC ADDRESS-TABLE STATIC DISCARDSyntaxmac address-table static MAC discard interf

Preface14Contacting Allied TelesisThis section provides Allied Telesis contact information for technical support as well as sales and corporate inform

Chapter 4: Configuration Terminal Mode Commands140 Section I: Command ModesRelated Commands“MAC ADDRESS-TABLE STATIC FORWARD” on page 141“MAC ADDRESS-

AT-S100 Management Software User’s GuideSection I: Command Modes 141 MAC ADDRESS-TABLE STATIC FORWARDSyntaxmac address-table static MAC forward interf

Chapter 4: Configuration Terminal Mode Commands142 Section I: Command ModesRelated Commands“MAC ADDRESS-TABLE AGEING-TIME” on page 138“MAC ADDRESS-TAB

AT-S100 Management Software User’s GuideSection I: Command Modes 143 MLS QOS Syntaxmls qos <0-10> <0-7>|<0-10> <0-7>|<0-10&

Chapter 4: Configuration Terminal Mode Commands144 Section I: Command Modes<0-7> Specifies the priority for queue 6, where 0 indicates strict pr

AT-S100 Management Software User’s GuideSection I: Command Modes 145 NTP AUTHENTICATESyntaxntp authenticate no ntp authenticate ParametersnoneDescript

Chapter 4: Configuration Terminal Mode Commands146 Section I: Command ModesNTP AUTHENTICATION-KEYSyntaxntp authentication-key KEYNUMBER <1-42949672

AT-S100 Management Software User’s GuideSection I: Command Modes 147 Related Commands“NTP AUTHENTICATE” on page 145“NTP TRUSTED-KEY” on page 150

Chapter 4: Configuration Terminal Mode Commands148 Section I: Command ModesNTP SERVERSyntaxntp server WORD prefer|version <1-4>|key <1-429496

AT-S100 Management Software User’s GuideSection I: Command Modes 149 switch(config)#ntp server 198.11.1.9Translating “198.11.1.9”... [OK]Related Comma

15Chapter 1Getting Started with the Command Line InterfaceThis chapter describes the command modes of the AT-S100 command line interface (CLI) and how

Chapter 4: Configuration Terminal Mode Commands150 Section I: Command ModesNTP TRUSTED-KEYSyntaxntp trusted-key <1-4294967295>no ntp trusted-key

AT-S100 Management Software User’s GuideSection I: Command Modes 151 SHOW LISTSyntaxshow listParametersnoneDescriptionUse the SHOW LIST command to dis

Chapter 4: Configuration Terminal Mode Commands152 Section I: Command ModesFigure 14. SHOW LIST CommandRelated Commands“SHOW RUNNING-CONFIG” on page 1

AT-S100 Management Software User’s GuideSection I: Command Modes 153 SHOW RUNNING-CONFIGSyntaxshow running-configParametersnoneDescriptionUse the SHOW

Chapter 4: Configuration Terminal Mode Commands154 Section I: Command ModesThis command displays a variety of switch parameters. An example of page 1

AT-S100 Management Software User’s GuideSection I: Command Modes 155 See Figure 16 for page 2 of the SHOW RUNNING-CONFIG command display.Figure 16. SH

Chapter 4: Configuration Terminal Mode Commands156 Section I: Command ModesSee Figure 17 for page 3 of the SHOW RUNNING-CONFIG command display.Figure

AT-S100 Management Software User’s GuideSection I: Command Modes 157 See Figure 18 for page 4 of the SHOW RUNNING-CONFIG command display.Figure 18. SH

Chapter 4: Configuration Terminal Mode Commands158 Section I: Command ModesSHOW RUNNING-CONFIG COMMUNITY-LISTSyntaxshow running-config community-listP

AT-S100 Management Software User’s GuideSection I: Command Modes 159 Related Commands“SHOW RUNNING-CONFIG” on page 153“SNMP-SERVER VIEW” on page 241

Chapter 1: Getting Started with the Command Line Interface16Introducing the Command ModesThis chapter describes the CLI command modes and how to acces

Chapter 4: Configuration Terminal Mode Commands160 Section I: Command ModesSHOW RUNNING-CONFIG INTERFACESyntaxshow running-config interface INTERFACEP

AT-S100 Management Software User’s GuideSection I: Command Modes 161 See Figure 19 for an example display.Figure 20. SHOW RUNNING-CONFIG INTERFACE VLA

Chapter 4: Configuration Terminal Mode Commands162 Section I: Command ModesUSERNAMESyntaxusername WORD privilege <1-15> password LINE <8>P

Section I: Command Modes 163Chapter 5Interface Configuration Mode CommandsThis chapter provides descriptions of the commands in the Interface Configur

Chapter 5: Interface Configuration Mode Commands164 Section I: Command ModesNoteFor information about the port security commands which are also in the

AT-S100 Management Software User’s GuideSection I: Command Modes 165CHANNEL-GROUPSyntaxchannel-group <1-10> mode active|passiveno channel-groupP

Chapter 5: Interface Configuration Mode Commands166 Section I: Command ModesDOT1X PORT-CONTROLSyntaxdot1x port-control auto|force-authorized|force-una

AT-S100 Management Software User’s GuideSection I: Command Modes 167EXITSyntaxexitParametersnoneDescriptionUse the EXIT command to quit the Configurat

Chapter 5: Interface Configuration Mode Commands168 Section I: Command ModesFLOW CONTROL BACKPRESSURESyntaxflow control backpressure on|offParametersb

AT-S100 Management Software User’s GuideSection I: Command Modes 169FLOW CONTROL RECEIVESyntaxflow control receive on|offParametersreceive Controls fl

AT-S100 Management Software User’s Guide17Figure 1. AT-S100 Command Modes See Table 1 for information about the commands used to access the modes and

Chapter 5: Interface Configuration Mode Commands170 Section I: Command ModesFLOW CONTROL SENDSyntaxflow control send on|offParameterssend Controls flo

AT-S100 Management Software User’s GuideSection I: Command Modes 171IP ADDRESSSyntaxip address A.B.C.D/M label LABEL secondaryParametersA.B.C.D/M Spec

Chapter 5: Interface Configuration Mode Commands172 Section I: Command ModesThe following commands set VLAN 2 with the secondary IP address and mask o

AT-S100 Management Software User’s GuideSection I: Command Modes 173IP ADDRESS DHCPSyntaxip address DHCPParametersDHCP Indicates the DHCP client is us

Chapter 5: Interface Configuration Mode Commands174 Section I: Command ModesLACP SYSTEM-PRIORITYSyntaxlacp system-priority <1-65535>no lacp syst

AT-S100 Management Software User’s GuideSection I: Command Modes 175MDIXSyntaxmdix mdi|mdixParametersmdi Specifies the interface is forced to MDI mode

Chapter 5: Interface Configuration Mode Commands176 Section I: Command ModesMIRROR INTERFACE DIRECTIONSyntaxmirror interface ge<1-28> direction

AT-S100 Management Software User’s GuideSection I: Command Modes 177The following commands turn off port mirroring on port 20:switch#configure termina

Chapter 5: Interface Configuration Mode Commands178 Section I: Command ModesMTUSyntaxmtu <64-9216>ParametersnoneDescriptionUse the MTU command t

AT-S100 Management Software User’s GuideSection I: Command Modes 179SHOW RUNNING-CONFIG INTERFACESyntaxshow running-config interface INTERFACEParamete

Chapter 1: Getting Started with the Command Line Interface18In addition, there are commands that allow you to move between the modes. For example, typ

Chapter 5: Interface Configuration Mode Commands180 Section I: Command ModesSee Figure 21 for an example display.Figure 22. SHOW RUNNING-CONFIG INTERF

AT-S100 Management Software User’s GuideSection I: Command Modes 181SHUTDOWNSyntaxshutdownno shutdownParametersnoneDescriptionUse the SHUTDOWN command

Chapter 5: Interface Configuration Mode Commands182 Section I: Command ModesSPEEDSyntaxspeed 10000mfull|1000mfull|100mfull|100mhalf|100fx|10mfull|10mh

AT-S100 Management Software User’s GuideSection I: Command Modes 183NoteTo display the current port speeds, use the SHOW INTERFACE command. See “SHOW

Chapter 5: Interface Configuration Mode Commands184 Section I: Command ModesSTATIC-CHANNEL-GROUPSyntaxstatic-channel-group <1-8>no static-channe

AT-S100 Management Software User’s GuideSection I: Command Modes 185STORM-CONTROLSyntaxstorm-control broadcast|dlf|multicast LEVEL <1-100>no sto

Chapter 5: Interface Configuration Mode Commands186 Section I: Command ModesRelated Commandsnone

AT-S100 Management Software User’s GuideSection I: Command Modes 187SWITCHPORT ACCESS VLANSyntaxswitchport access vlan VLANID <2-4094>no switchp

Chapter 5: Interface Configuration Mode Commands188 Section I: Command ModesSWITCHPORT MODE TRUNKSyntaxswitchport mode trunk ingress-filter enable|dis

AT-S100 Management Software User’s GuideSection I: Command Modes 189Related Commandsnone

AT-S100 Management Software User’s Guide19 downloading new image files displaying Ethernet port statisticsThe prompt changes to “Switch#” to indicat

Chapter 5: Interface Configuration Mode Commands190 Section I: Command ModesSWITCHPORT TRUNK ALLOWED VLANSyntaxswitchport trunk allowed vlan add|remov

AT-S100 Management Software User’s GuideSection I: Command Modes 191switch(config-if)#switchport mode trunkswitch(config-if)#switchport trunk allowed

Chapter 5: Interface Configuration Mode Commands192 Section I: Command ModesTRAFFIC-CLASS-TABLE USER-PRIORITY NUM-TRAFFIC-CLASSESSyntaxtraffic-class-t

AT-S100 Management Software User’s GuideSection I: Command Modes 193USER-PRIORITY Syntaxuser-priority <0-7>ParametersnoneDescriptionUse the USER

Chapter 5: Interface Configuration Mode Commands194 Section I: Command Modes

Section II: Advanced Configuration 195Section IIAdvanced Configuration The chapters in this section provide information about configuring advanced fea

196 Section II: Advanced Configuration

Section II: Advanced Configuration 197Chapter 6802.1x Access Control CommandsThe switch implements the server side of the IEEE 802.1x Port-based and M

Chapter 6: 802.1x Access Control Commands198 Section II: Advanced ConfigurationDOT1X PORT-CONTROLSyntaxdot1x port-control auto|force-authorized|force-

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 199DOT1X SYSTEM-AUTH-CTRLSyntaxdot1x system-auth-ctrlParameterssystem-auth-

Copyright 2009 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Te

Chapter 1: Getting Started with the Command Line Interface20See Table 3 for a sample list of commands that can be accessed from the Configuration Term

Chapter 6: 802.1x Access Control Commands200 Section II: Advanced ConfigurationLOGIN REMOTELOCALSyntax login remotelocalno loginParametersnoneDescript

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 201RADIUS-SERVER HOST Syntaxradius-server host HOSTNAME auth-port=port|ALL

Chapter 6: 802.1x Access Control Commands202 Section II: Advanced ConfigurationRADIUS-SERVER KEYSyntax radius-server key KEY no radius-server key KEY

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 203SHOW DOT1XSyntax show dot1x ParametersnoneDescriptionUse this command to

Chapter 6: 802.1x Access Control Commands204 Section II: Advanced ConfigurationSHOW DOT1X ALL Syntax show dot1x all ParametersnoneDescriptionUse this

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 205Table 7 provides a description of the parameters of the SHOW DOT1X ALL a

Chapter 6: 802.1x Access Control Commands206 Section II: Advanced ConfigurationRelated Commands“SHOW DOT1X INTERFACE” on page 207maxReq Specifies the

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 207SHOW DOT1X INTERFACE Syntax show dot1x interface IFNAMEParametersIFNAME

Chapter 6: 802.1x Access Control Commands208 Section II: Advanced ConfigurationSee Table 7 on page 205 for a description of the command parameters sho

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 209SHOW DOT1X STATISTICS INTERFACESyntax show dot1x statistics interface IF

AT-S100 Management Software User’s Guide21After you have accessed the Interface Configuration mode, the commands you enter apply only to the interface

Chapter 6: 802.1x Access Control Commands210 Section II: Advanced Configuration

Section II: Advanced Configuration 211Chapter 7GVRP CommandsThe GARP VLAN Registration Protocol (GVRP) allows network devices to share VLAN informatio

Chapter 7: GVRP Commands212 Section II: Advanced ConfigurationSET GVRPSyntaxset gvrp enable|disable Parametersenable Enables GVRP on the switch.disabl

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 213SET GVRP APPLICANT Syntaxset gvrp applicant state active|normal ge<1-

Chapter 7: GVRP Commands214 Section II: Advanced ConfigurationSET GVRP DYNAMIC-VLAN-CREATIONSyntaxset gvrp dynamic-vlan-creation ParametersnoneDescrip

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 215SET GVRP REGISTRATIONSyntaxset gvrp registration fixed|forbidden|normal

Chapter 7: GVRP Commands216 Section II: Advanced ConfigurationRelated Commands“SET GVRP” on page 212“SET GVRP APPLICANT” on page 213“SET GVRP DYNAMIC-

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 217SET GVRP TIMERSyntaxset gvrp timer join|leave|leaveall <1-65535> g

Chapter 7: GVRP Commands218 Section II: Advanced ConfigurationThe following commands set the leave timer to 0.5 seconds for all GVRP applications on p

Section II: Advanced Configuration 219Chapter 8Port Security CommandsThe Port Security feature is based on assigning and limiting MAC addresses learne

Chapter 1: Getting Started with the Command Line Interface22After you have accessed the VLAN Configuration mode, enter commands that apply to a specif

Chapter 8: Port Security Commands220 Section II: Advanced ConfigurationSWITCHPORT PORT-SECURITY MAC-ADDRESSSyntaxswitchport port-security mac-address

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 221switch(config)#interface ge7switch(config-if)#switchport port-security m

Chapter 8: Port Security Commands222 Section II: Advanced ConfigurationSWITCHPORT PORT-SECURITY MAXIMUMSyntaxswitchport port-security maximum <1-32

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 223SWITCHPORT PORT-SECURITY MODESyntaxswitchport port-security mode limited

Chapter 8: Port Security Commands224 Section II: Advanced ConfigurationExample The following commands set the security mode to “locked” on port 20:swi

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 225SWITCHPORT PORT-SECURITY VIOLATIONSyntaxswitchport port-security violati

Chapter 8: Port Security Commands226 Section II: Advanced ConfigurationExample The following commands set port 4 to shutdown when the AT-S100 software

Section II: Advanced Configuration 227Chapter 9Simple Network Management Protocol (SNMP) CommandsThis chapter provides descriptions of SNMP v1 and v2c

Chapter 9: Simple Network Management Protocol (SNMP) Commands228 Section II: Advanced ConfigurationSNMP-SERVER COMMUNITYSyntaxsnmp-server community ST

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 229Related Commands“SNMP-SERVER GROUP” on page 233“SNMP-SERVER VIEW” on pag

AT-S100 Management Software User’s Guide23Starting the Command Line InterfaceTo start the command line interface, perform the following procedure:1. T

Chapter 9: Simple Network Management Protocol (SNMP) Commands230 Section II: Advanced ConfigurationSNMP-SERVER CONTACTSyntaxsnmp-server contact LINEno

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 231Related Commands“SNMP-SERVER USER” on page 237

Chapter 9: Simple Network Management Protocol (SNMP) Commands232 Section II: Advanced ConfigurationSNMP-SERVER ENABLE Syntaxsnmp-server enable no snmp

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 233SNMP-SERVER GROUP Syntaxsnmp-server group GROUPNAME v1|v2c auth|noauth|p

Chapter 9: Simple Network Management Protocol (SNMP) Commands234 Section II: Advanced ConfigurationExamplesThe following commands create an SNMPv1 gro

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 235SNMP-SERVER HOSTSyntaxsnmp-server host A.B.C.D informs|traps version 1|2

Chapter 9: Simple Network Management Protocol (SNMP) Commands236 Section II: Advanced ConfigurationExamplesThe following commands create an SNMP v2c h

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 237SNMP-SERVER USERSyntaxsnmp-server user USERNAME GROUPNAME remote HOST ud

Chapter 9: Simple Network Management Protocol (SNMP) Commands238 Section II: Advanced ConfigurationCommand ModeConfiguration Terminal modeExamplesThe

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 239SNMP-SERVER USER REMOTESyntaxsnmp-server user remote GROUPNAME remote A.

Chapter 1: Getting Started with the Command Line Interface24Formatting CommandsThe AT-S100 software command line interface follows the same formatting

Chapter 9: Simple Network Management Protocol (SNMP) Commands240 Section II: Advanced ConfigurationCommand ModeConfiguration Terminal modeExampleThe f

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 241SNMP-SERVER VIEWSyntaxsnmp-server view VIEWNAME WORD include|excludeno s

Chapter 9: Simple Network Management Protocol (SNMP) Commands242 Section II: Advanced ConfigurationRelated Commands“SNMP-SERVER GROUP” on page 233

Section II: Advanced Configuration 243Chapter 10Spanning Tree Protocol (STP) CommandsThe commands in this chapter can be used in the Spanning Tree Pro

Chapter 10: Spanning Tree Protocol (STP) Commands244 Section II: Advanced ConfigurationSHOW SPANNING-TREESyntaxshow spanning-tree interface INTERFACE

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 245This command displays a variety of parameters. An example of page 1 of t

Chapter 10: Spanning Tree Protocol (STP) Commands246 Section II: Advanced ConfigurationRelated Commands“SPANNING-TREE MODE” on page 252

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 247SPANNING-TREE ENABLE FORWARDSyntaxspanning-tree stp|rstp enable forwardn

Chapter 10: Spanning Tree Protocol (STP) Commands248 Section II: Advanced ConfigurationExamplesThe following commands enable RSTP on the switch:switch

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 249SPANNING-TREE FORWARD-TIMESyntaxspanning-tree forward-time <4-30>n

AT-S100 Management Software User’s Guide25Command LineSyntaxConventionsThe following table describes the conventions used in the AT-S100 command inter

Chapter 10: Spanning Tree Protocol (STP) Commands250 Section II: Advanced ConfigurationSPANNING-TREE HELLO-TIMESyntaxspanning-tree hello-time <1-10

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 251SPANNING-TREE MAX-AGESyntaxspanning-tree max-age <6-40>no spanning

Chapter 10: Spanning Tree Protocol (STP) Commands252 Section II: Advanced ConfigurationSPANNING-TREE MODESyntaxspanning-tree mode stp|rstpno spanning-

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 253SPANNING-TREE PORTFAST BPDU-FILTER DEFAULTSyntaxspanning-tree portfast b

Chapter 10: Spanning Tree Protocol (STP) Commands254 Section II: Advanced ConfigurationSPANNING-TREE PORTFAST BPDU-GUARD DEFAULTSyntaxspanning-tree po

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 255SPANNING-TREE PRIORITYSyntaxspanning-tree priority <0-61440>no spa

Chapter 10: Spanning Tree Protocol (STP) Commands256 Section II: Advanced Configuration

Section II: Advanced Configuration 257Chapter 11Virtual Local Area Networks (VLAN) CommandsThis chapter provides descriptions of VLAN commands that ar

Chapter 11: Virtual Local Area Networks (VLAN) Commands258 Section II: Advanced ConfigurationSHOW VLAN ALLSyntaxshow vlan allParameters noneDescriptio

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 259“SHOW VLAN DYNAMIC” on page 262“SHOW VLAN STATIC” on page 263

Chapter 1: Getting Started with the Command Line Interface26

Chapter 11: Virtual Local Area Networks (VLAN) Commands260 Section II: Advanced ConfigurationSHOW VLAN BRIEFSyntaxshow vlan briefParameters noneDescri

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 261Related Commands“SHOW MAC ADDRESS-TABLE VLAN” on page 102“SHOW VLAN ALL”

Chapter 11: Virtual Local Area Networks (VLAN) Commands262 Section II: Advanced ConfigurationSHOW VLAN DYNAMICSyntaxshow vlan dynamicParameters noneDe

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 263SHOW VLAN STATICSyntaxshow vlan staticParameters noneDescriptionUse the

Chapter 11: Virtual Local Area Networks (VLAN) Commands264 Section II: Advanced ConfigurationRelated Commands“SHOW VLAN ALL” on page 258“SHOW VLAN BRI

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 265SWITCHPORT TRUNK ALLOWED VLANSyntaxswitchport trunk allowed vlan add|rem

Chapter 11: Virtual Local Area Networks (VLAN) Commands266 Section II: Advanced Configurationswitch(config-if)#switchport mode trunkswitch(config-if)#

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 267VLAN Syntaxvlan <2-4094> name NAME state enable|disableParameters&

Chapter 11: Virtual Local Area Networks (VLAN) Commands268 Section II: Advanced ConfigurationVLAN ACCESS-MAPSyntaxvlan access-map NAME <1-65535>

AT-S100 Management Software User’s GuideSection II: Advanced Configuration 269VLAN DATABASESyntaxvlan databaseParametersnone Command ModeConfiguratio

27Chapter 2Configuring the AT-S100 SoftwareThis chapter provides configuration information about the AT-S100 software.The features are divided into th

Chapter 11: Virtual Local Area Networks (VLAN) Commands270 Section II: Advanced Configuration

271IndexNumerics802.1x Port-based Network Access Controldescribed 56displaying status 57DOT1X PORT-CONTROL command 165, 166, 198enabling 56, 123, 199L

Index272FLOW CONTROL RECEIVE command 169FLOW CONTROL SEND command 50, 170GGARPtimer, setting 217gateway addresssetting 29GVRPcreating dynamic VLANs 21

AT-S100 Management Software User’s Guide273removing a static MAC address 34setting 32setting a maximum number 47setting the aging time 33MAC address t

Index274SHOW VLAN DYNAMIC command 262SHOW VLAN STATIC command 263SHUTDOWN command 45, 181SNMPadding traps 61creating communities 60SNMP-SERVER COMMUNI

Chapter 2: Configuring the AT-S100 Software28Setting the SwitchThe procedures in this section describe how to perform basic switch functions such as a

AT-S100 Management Software User’s Guide29For more information about this command, see “IP ADDRESS” on page 171.Setting DHCP The DHCP feature enables

3ContentsPreface ...

Chapter 2: Configuring the AT-S100 Software30Setting the NTP Server AddressSetting an NTP server allows the switch to have an official time. The basic

AT-S100 Management Software User’s Guide31Increasing FrameSize (JumboFrames)The jumbo frame command allows an interface on the switch to accept large

Chapter 2: Configuring the AT-S100 Software32LINE Specifies a password for an administrator or manager. Enter an alphanumeric value between 1 and 8 ch

AT-S100 Management Software User’s Guide33To display the full MAC address table, enter the following command:switch#show mac address-tableFor more inf

Chapter 2: Configuring the AT-S100 Software34switch(config)# mac address-table ageing-time 35For more information about this command, see “MAC ADDRESS

AT-S100 Management Software User’s Guide35Rebooting theSwitchTo reboot the switch, enter the following command:switch# system rebootWhen you enter thi

Chapter 2: Configuring the AT-S100 Software36Application Version=1.0.3Application BuildTime=12:47:47Application BuildDate=Nov 21 2008Serial Number=Mod

AT-S100 Management Software User’s Guide37Erasing 88 Sectors ...Writing to flash ...5. If you are downgrading the AT-S100 software to an earlier versi

Chapter 2: Configuring the AT-S100 Software38For more information about this command, see “UPLOAD TFTP” on page 113.Displaying andSavingConfigurationF

AT-S100 Management Software User’s Guide39CopyingConfigurationFilesYou may want to make a copy of a configuration file in order to have a backup copy

Contents4Setting Port Speed and Duplex Mode ...44

Chapter 2: Configuring the AT-S100 Software40Enter the following command to upload a configuration file called “frank2.cfg” from the switch onto a TFT

AT-S100 Management Software User’s Guide41A port-based VLAN is a group of ports on a Gigabit Ethernet Switch that form a logical Ethernet segment. Eac

Chapter 2: Configuring the AT-S100 Software42Adding Tagged Ports to a VLANTo add tagged ports to a VLAN, you must specify a VLAN that you have created

AT-S100 Management Software User’s Guide43Setting the Ports See the following sections: “Displaying Port Ethernet Statistics” on page 43 “Setting Po

Chapter 2: Configuring the AT-S100 Software44switch(config)# interface ge5switch(config-if)# mirror ge7 direction receiveFor more information about th

AT-S100 Management Software User’s Guide45Enabling andDisabling PortsTo enable or disable a port on the switch, use the SHUTDOWN command. The syntax o

Chapter 2: Configuring the AT-S100 Software46To set a port to MDIX, enter the following commands:switch# configure terminalswitch(config)# interface g

AT-S100 Management Software User’s Guide47Locked ModeA port set to the Locked mode security level immediately stops learning new dynamic MAC addresses

Chapter 2: Configuring the AT-S100 Software48To set the maximum number of MAC addresses to 140 on port 8, enter the following commands:switch# configu

AT-S100 Management Software User’s Guide49Setting Port Security Violation The Port Security Violation Feature determines how the AT-S100 software reac

AT-S100 Management Software User’s Guide5EXIT...

Chapter 2: Configuring the AT-S100 Software50To display the static port trunk assigned to port 12, enter the following commands:switch# configure term

AT-S100 Management Software User’s Guide51receive any more traffic, it notifies another port to stop sending traffic until the condition clears. When

Chapter 2: Configuring the AT-S100 Software52switch(config-if)#storm-control broadcast level (0.0-100.0)To prevent multicast storms, enter the followi

AT-S100 Management Software User’s Guide53Configuring ProtocolsThis section describes how to set the protocols that are supported by the AT-S100 Manag

Chapter 2: Configuring the AT-S100 Software54To disable the GVRP feature, enter the following commands:switch# configure terminalswitch(config)# set g

AT-S100 Management Software User’s Guide55The following commands set GVRP registration to fixed on port 12:switch#configure terminalswitch(config)#set

Chapter 2: Configuring the AT-S100 Software56Setting the LinkAccess ControlProtocol (LACP)LACP (Link Aggregation Control Protocol) port trunks perform

AT-S100 Management Software User’s Guide57using an unattended workstation to access your network resources. Only those users designated as valid netwo

Chapter 2: Configuring the AT-S100 Software58For more information about the 802.1x commands, see Chapter 6, “802.1x Access Control Commands” on page 1

AT-S100 Management Software User’s Guide59Setting RADIUS AuthenticationTo set RADIUS authentication with a RADIUS-server host of 192.168.1.30, a share

Contents6RADIUS-SERVER KEY ...

Chapter 2: Configuring the AT-S100 Software60To disable the SNMP protocol, enter the following commands:switch# configure terminalswitch(config)# no s

AT-S100 Management Software User’s Guide61To create an SNMP community called public with an access level of Read only, enter the following commands:sw

Chapter 2: Configuring the AT-S100 Software62Setting the SecureShellSecure management is increasingly important in modern networks, as the ability to

AT-S100 Management Software User’s Guide63blocked to prevent data loops, or activated to maintain communications between the various network segments.

Chapter 2: Configuring the AT-S100 Software64The syntax of this command is:show spanning-treeTo display the current spanning tree settings for the STP

AT-S100 Management Software User’s Guide65The following commands set the spanning-tree priority on the switch to 8,192:switch#configure terminalswitch

Chapter 2: Configuring the AT-S100 Software66occur, the current bridge must be the root bridge. A very low value of this command leads to excessive tr

AT-S100 Management Software User’s Guide67The syntax of this command is:spanning-tree portfast bpdu-guard defaultThe following commands enable the BPD

Chapter 2: Configuring the AT-S100 Software68switch(config)# interface ge18switch(config-if)# user-priority 4For more information about this command,

Section I: Command Modes 69Section ICommand ModesThe chapters in this section provide information and procedures for basic switch setup using the AT-

7FiguresFigure 1: AT-S100 Command Modes ...

70 Section I: Command Modes

Section I: Command Modes 71Chapter 3Privileged Executive Mode CommandsThis chapter describes the commands in the Privileged Executive mode which are u

Chapter 3: Privileged Executive Mode Commands72 Section I: Command ModesNoteFor VLAN-specific commands, see Chapter 11, “Virtual Local Area Networks (

AT-S100 Management Software User’s GuideSection I: Command Modes 73CLEAR MAC ADDRESS-TABLE DYNAMICSyntax clear mac address-table dynamic|address HHHH.

Chapter 3: Privileged Executive Mode Commands74 Section I: Command ModesRelated Commands“CLEAR MAC ADDRESS-TABLE MULTICAST” on page 75“CLEAR MAC ADDRE

AT-S100 Management Software User’s GuideSection I: Command Modes 75CLEAR MAC ADDRESS-TABLE MULTICASTSyntax clear mac address-table multicast|address M

Chapter 3: Privileged Executive Mode Commands76 Section I: Command ModesRelated Commands“CLEAR MAC ADDRESS-TABLE DYNAMIC” on page 73“CLEAR MAC ADDRESS

AT-S100 Management Software User’s GuideSection I: Command Modes 77CLEAR MAC ADDRESS-TABLE STATICSyntax clear mac address-table static|address HHHH.HH

Chapter 3: Privileged Executive Mode Commands78 Section I: Command ModesRelated Commands“CLEAR MAC ADDRESS-TABLE DYNAMIC” on page 73“CLEAR MAC ADDRESS

AT-S100 Management Software User’s GuideSection I: Command Modes 79CONFIGURE TERMINALSyntax configure terminalParametersnoneDescriptionUse this comman

Figures8

Chapter 3: Privileged Executive Mode Commands80 Section I: Command ModesTo use the abbreviated form of the CONFIGURE TERMINAL command mode, enter the

AT-S100 Management Software User’s GuideSection I: Command Modes 81COPY Syntax copy running-config startup-configParametersrunning-config Indicates th

Chapter 3: Privileged Executive Mode Commands82 Section I: Command ModesCOPY A.B.C.DSyntax copy A.B.C.D SCRFILENAME DESTFILENAMEParametersA.B.C.D Indi

AT-S100 Management Software User’s GuideSection I: Command Modes 83“COPY DEFAULT.CFG” on page 84“CP” on page 86“DOWNLOAD TFTP” on page 87“UPLOAD TFTP”

Chapter 3: Privileged Executive Mode Commands84 Section I: Command ModesCOPY DEFAULT.CFGSyntax copy default.cfg A.B.C.D FILENAMEParametersdefault.cfg

AT-S100 Management Software User’s GuideSection I: Command Modes 85“COPY A.B.C.D” on page 82“CP” on page 86

Chapter 3: Privileged Executive Mode Commands86 Section I: Command ModesCP Syntax cp source-file new-fileParameterssource-file Indicates the source co

AT-S100 Management Software User’s GuideSection I: Command Modes 87DOWNLOAD TFTPSyntaxdownload tftp A.B.C.D FILENAMEParametersA.B.C.D Indicates the IP

Chapter 3: Privileged Executive Mode Commands88 Section I: Command ModesEXITSyntaxexitParametersnoneDescriptionUse the EXIT command to quit the Config

AT-S100 Management Software User’s GuideSection I: Command Modes 89LOGOUTSyntaxlogoutParametersnoneDescriptionUse the LOGOUT command to quit the Privi

9TablesTable 1: Command Modes ...

Chapter 3: Privileged Executive Mode Commands90 Section I: Command ModesSHOW INTERFACESyntaxshow interface IFNAME ge<1-28>ParametersIFNAME Speci

AT-S100 Management Software User’s GuideSection I: Command Modes 91Related Commands“SHOW MAC ADDRESS-TABLE INTERFACE” on page 98

Chapter 3: Privileged Executive Mode Commands92 Section I: Command ModesSHOW MAC ADDRESS-TABLESyntaxshow mac address-table ParametersnoneDescriptionUs

AT-S100 Management Software User’s GuideSection I: Command Modes 93See Figure 3 for an example display.Figure 3. SHOW MAC ADDRESS-TABLE CommandThe fie

Chapter 3: Privileged Executive Mode Commands94 Section I: Command ModesSHOW MAC ADDRESS-TABLE AGEING-TIMESyntaxshow mac address-table ageing-timePara

AT-S100 Management Software User’s GuideSection I: Command Modes 95Related Commands“SHOW MAC ADDRESS-TABLE” on page 92“SHOW MAC ADDRESS-TABLE DYNAMIC”

Chapter 3: Privileged Executive Mode Commands96 Section I: Command ModesSHOW MAC ADDRESS-TABLE DYNAMICSyntaxshow mac address-table dynamic | begin|exc

AT-S100 Management Software User’s GuideSection I: Command Modes 97See Figure 6 for a sample display.Figure 5. SHOW MAC ADDRESS-TABLE DYNAMIC CommandT

Chapter 3: Privileged Executive Mode Commands98 Section I: Command ModesSHOW MAC ADDRESS-TABLE INTERFACE Syntaxshow mac address-table interface ge<

AT-S100 Management Software User’s GuideSection I: Command Modes 99See Figure 6 for an example display.Figure 6. SHOW MAC ADDRESS-TABLE INTERFACE Comm