Allied-telesis AT-S39 Manuel d'utilisateur

Management SoftwareAT-S39◆User’s GuideAT-8012M, AT-8012M-QS, AT-8016F/xx (MT, SC and ST), AT-8024, AT-8024GB, AT-8024M, AT-8026FC, AT-8026T, and AT-8

List of Figures10Chapter 7 Port Trunking ...

Section II: Local and Telnet Management100RSTP port cost also features an Auto-Detect feature. This features allows RSTP to automatically set the port

AT-S39 User’s Guide101Forwarding Delay and Topology ChangesIf there is a change in the network topology due to a failure, removal, or addition of any

Section II: Local and Telnet Management102The root bridge will periodically transmit a BPDU to determine whether there have been any changes to the ne

AT-S39 User’s Guide103If a port is operating in half-duplex mode and is not connected to any further bridges participating in STP or RSTP, then the po

Section II: Local and Telnet Management104Mixed STP andRSTP NetworksRSTP IEEE 802.1w is fully compliant with STP IEEE 802.1d. Your network can consist

AT-S39 User’s Guide105Enabling or Disabling STP or RSTPThe AT-S39 software supports STP and RSTP. Only one spanning tree protocol can be active on the

Section II: Local and Telnet Management106b. Type Y for yes to change the currently active spanning tree protocol, or N to cancel this procedure.The f

AT-S39 User’s Guide107Configuring STPThis section contains the following procedures:❑ Configuring STP Bridge Settings on page 107❑ Configuring STP Por

Section II: Local and Telnet Management1082. Adjust the bridge STP settings as needed. The parameters are described below.1 - Bridge PriorityThe prior

AT-S39 User’s Guide1096 - Config STP Port SettingsConfigures the STP port parameters. For instructions, refer to Configuring STP Port Settings on page

11Chapter 16 Broadcast Storm Control ...

Section II: Local and Telnet Management110The STP Port Configuration menu is shown in Figure 30.Figure 30 Config STP Port Settings Menu5. Adjust the

AT-S39 User’s Guide1113 - Port CostThe spanning tree algorithm uses the cost parameter to decide which port provides the lowest cost path to the root

Section II: Local and Telnet Management112Configuring RSTPThis section contains the following procedures:❑ Configuring RSTP Bridge Settings on page 11

AT-S39 User’s Guide1132. Adjust the parameters as needed. The parameters are defined below.1 - Force VersionThis selection determines whether the brid

Section II: Local and Telnet Management1146 - Bridge IdentifierThe MAC address of the bridge. The bridge identifier is used as a tie breaker in the se

AT-S39 User’s Guide115ConfiguringRSTP PortSettingsTo adjust RSTP port parameters, perform the following procedure:1. From the Spanning Tree Menu, type

Section II: Local and Telnet Management116The Configure RSTP Port Settings menu is shown in Figure 33.Figure 33 Configure RSTP Port Settings Menu6. A

AT-S39 User’s Guide117M - MCHECKThis option instructs the bridge to send out RSTP BPDU packets for several seconds from the selected port. The purpose

118 Chapter 10Virtual LANs OverviewThis chapter contains overviews of tagged and port-based VLANs and the Basic VLAN Mode. It also explains how to sel

AT-S39 User’s Guide119VLAN OverviewA VLAN is a group of ports on an Ethernet switch that form a logical Ethernet segment. The ports of a VLAN form an

List of Figures12Figure 82: Port Status Window ...

Section II: Local and Telnet Management120But with VLANS, you can change LAN segment assignments through the switch’s AT-S62 management software. VLAN

AT-S39 User’s Guide121User-Configured VLAN Mode OverviewThe user-configured VLANs mode lets you create your own VLANs. You can create two types of VLA

Section II: Local and Telnet Management122If a VLAN consists only of ports located on one physical switch in your network, you would assign it a VID u

AT-S39 User’s Guide123Some switches and switch management programs require that you assign the PVID value for each port manually. However, the AT-S39

Section II: Local and Telnet Management124In network configurations with many individual VLANs that span switches, ports are often ineffectively used

AT-S39 User’s Guide125Each VLAN has been assigned a unique VID. You assign this number when you create a VLAN.The ports have been assigned PVID values

Section II: Local and Telnet Management126Port-based Example 2Figure 35 illustrates more port-based VLANs. In this example, two VLANs span more than o

AT-S39 User’s Guide127The table below lists the port assignments for the Sales, Engineering, and Production VLANs on the switches:❑ Sales VLAN - This

Section II: Local and Telnet Management128Tagged VLANOverviewThe second type of user-configured VLAN supported by the AT-8000 Series switch is the tag

AT-S39 User’s Guide129❑ Port VLAN IdentifierNoteFor explanations of VLAN name and VLAN identifier, refer back to VLAN Name and VLAN Identifier on page

13PrefaceThis guide contains instructions on how to configure an AT-8000 Series Fast Ethernet Switch using the AT-S39 management software. The AT-8000

Section II: Local and Telnet Management130❑ The AT-8000 Series switch can support up to 32 tagged and port-based VLANS.Tagged VLAN ExampleFigure 36 il

AT-S39 User’s Guide131The port assignments for the VLANs are as follows:This example is similar to the Port-based Example 2 on page 126. Tagged ports

Section II: Local and Telnet Management132Basic VLAN Mode OverviewThe Fast Ethernet switches support a special VLAN configuration referred to as Basic

AT-S39 User’s Guide133Setting the VLAN ModeThe procedure in this section explain how to set the switch for either the user configured (Tagged) VLAN mo

134 Chapter 11Creating Port-based and Tagged VLANsThis chapter contains procedures for creating, modifying, and deleting user-configured VLANs from a

AT-S39 User’s Guide135Creating a New Port-based or Tagged VLANTo create a new port-based or tagged VLAN, perform the following procedure:1. From the M

Section II: Local and Telnet Management1363. From the Configure VLANs menu, type 1 to select Create VLAN.The Create VLAN menu is shown in Figure 39.Fi

AT-S39 User’s Guide137has VLANs using VIDs 2 through 24, the AT-S39 software will still use VID 2 as the default value for the first VLAN you create o

Section II: Local and Telnet Management13812. Press Esc or type R to return to the Configure VLANS menu. To verify that the VLAN was created correctly

AT-S39 User’s Guide139Example of Creating a Port-based VLANThe following procedure creates the Sales VLAN illustrated in Figure 34 on page 124. This V

Preface14How This Guide is OrganizedThis manual is divided into three sections. Section I: OverviewThis section contains just one chapter. It reviews

Section II: Local and Telnet Management140Example of Creating a Tagged VLANThe following procedure creates the Engineering VLAN in the top switch illu

AT-S39 User’s Guide141Modifying a VLANNoteTo modify a VLAN, you need to know its VID. To view VLAN VIDs, refer to the procedure Displaying VLAN Inform

Section II: Local and Telnet Management142When changing a VLAN’s name, observe the following guidelines:❑ A VLAN’s new name cannot be the same as the

AT-S39 User’s Guide143❑ If the VLAN does not contain untagged ports, leave this field empty.❑ To remove all untagged ports from a VLAN, enter a 0 (zer

Section II: Local and Telnet Management144Displaying VLAN InformationTo view the name, VID number, and member ports of all the VLANs on a switch, perf

AT-S39 User’s Guide145Deleting a VLANThis procedure deletes a port-based or tagged VLAN. All untagged ports in a deleted VLAN are returned to the Defa

Section II: Local and Telnet Management1466. Type D to delete the VLAN or R to cancel the procedure.The following confirmation prompt is displayed:Are

AT-S39 User’s Guide147Deleting All VLANsThis section contains the procedure for deleting all port-based and tagged VLANs, except the Default_VLAN, on

Section II: Local and Telnet Management148Displaying PVIDs and PrioritiesThe following procedure displays a window that lists the PVIDs for all the po

AT-S39 User’s Guide149Enabling or Disabling Ingress FilteringThere are certain rules that a switch follows as it receives and forwards an Ethernet fra

AT-S39 User’s Guide15Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.WarningWarnings inform

Section II: Local and Telnet Management150There is one other thing that should be mentioned about ingress filtering and tagged packets, and that is th

AT-S39 User’s Guide151Designating a Management VLANThe management VLAN is the VLAN on which the AT-S39 management software expects to receive remote m

Section II: Local and Telnet Management152Now assume that you decide to create a VLAN called NMS with a VID of 24 for the sole purpose of remote netwo

153 Chapter 12Multiple VLAN ModesThis chapter describes the Multiple VLAN Modes and how to select a mode. This chapter contains the following sections

Section II: Local and Telnet Management154Multiple VLAN Modes OverviewThe Multiple VLAN modes simplify the task of configuring the switch in network e

AT-S39 User’s Guide155When you activate the 802.1Q-compliant VLAN mode, you are asked to specify the uplink port for all the client VLANs. Once you ha

Section II: Local and Telnet Management156NoteRemote management of the switch is possible only through the uplink port.Non-802.1QCompliantMultiple VLA

AT-S39 User’s Guide157Table 9 is an example of this mode. The table lists the VLANs on a switch that supports 26 ports where port 15 was selected as t

Section II: Local and Telnet Management158CautionThe non-802.1Q-Compliant Multiple VLAN mode does not protect the switch from VLAN leakage. If a packe

AT-S39 User’s Guide159Activating or Deactivating a Multiple VLAN ModeThe following procedure explains how to enable or disable a multiple VLANs mode o

Preface16Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document Format (PDF

Section II: Local and Telnet Management160Displaying VLAN InformationTo view the name, VID number, and member ports of all the VLANs on a switch, perf

161Chapter 13MAC Address TableThe chapter contains the procedures for viewing the static and dynamic MAC address table. This chapter contains the foll

Section II: Local and Telnet Management162MAC Address OverviewThe hardware devices that you connect to your network have unique MAC addresses assigned

AT-S39 User’s Guide163The type of MAC address described above is referred to as a dynamic MAC address. Dynamic MAC addresses are addresses that the sw

Section II: Local and Telnet Management164Displaying MAC AddressesThe management software has two menu selections for displaying the MAC addresses of

AT-S39 User’s Guide165The management software displays the MAC addresses. Figure 46 is an example of the Show All MAC Addresses window, which displays

Section II: Local and Telnet Management166The port numbering scheme is from right to left. As an example, assume that ports 1 through 4 on the switch

AT-S39 User’s Guide167Adding Static Unicast and Multicast MAC AddressesThis section contains the procedure for adding static unicast and multicast add

Section II: Local and Telnet Management168Deleting MAC AddressesThe following procedure explains how to delete a static, dynamic, or multicast MAC add

AT-S39 User’s Guide169Deleting All Dynamic MAC AddressesThe management software allows you to purge the MAC address table of all dynamic MAC addresses

AT-S39 User’s Guide17Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as sales or corpo

Section II: Local and Telnet Management170Viewing MAC Addresses by PortThis section contains the procedure for viewing the dynamic MAC addresses that

AT-S39 User’s Guide171Identifying a Port Number by MAC AddressIn some situations, you might want to know which port a particular MAC address was learn

Section II: Local and Telnet Management172Viewing the MAC Addresses of a VLANThe procedure in this section can be useful if you created VLANs on the s

AT-S39 User’s Guide173Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table. When

174Chapter 14Class of ServiceThis chapter contains the procedures for configuring the Class of Service (CoS) feature of the AT-S39 software. Sections

AT-S39 User’s Guide175Class of Service OverviewWhen a port on an Ethernet switch becomes oversubscribed—its egress queues contain more packets than th

Section II: Local and Telnet Management176Table 10 lists the mappings between the eight CoS priority levels and the four egress queues of a switch por

AT-S39 User’s Guide177Configuring CoSTo configure CoS for a port, perform the following procedure:1. From the Main Menu, type 2 to select VLAN Menu.2.

Section II: Local and Telnet Management178NoteThe tagged information in a frame is not changed as the frame traverses the switch. A tagged frame leave

179Chapter 15IGMP SnoopingThis chapter explains how to activate and configure the Internet Group Management Protocol (IGMP) snooping feature on the sw

Preface18Management Software UpdatesYou can download new releases of management software for our managed products from either of the following Interne

Section II: Local and Telnet Management180IGMP Snooping OverviewIGMP enables routers to create lists of nodes that are members of multicast groups. (A

AT-S39 User’s Guide181Without IGMP snooping, a switch would have to flood multicast packets out all of its ports, except the port on which it received

Section II: Local and Telnet Management182Activating IGMP SnoopingTo activate or deactivate IGMP snooping on the switch and to configure IGMP snooping

AT-S39 User’s Guide183stops sending reports. The switch responds by immediately ceasing the transmission of further multicast packets out the port whe

Section II: Local and Telnet Management1845 - Multicast Router Port(s)Specifies the port on the switch to which the multicast router is detected. You

AT-S39 User’s Guide185Displaying a List of Host NodesYou can use the AT-S39 software to display a list of the multicast groups on a switch, as well as

Section II: Local and Telnet Management186Displaying a List of Multicast RoutersA multicast router is a router that is receiving multicast packets fro

187Chapter 16Broadcast Storm ControlThis chapter contains the procedures for configuring the broadcast storm control feature of the AT-S39 management

Section II: Local and Telnet Management188Broadcast Storm Control OverviewMost frames on an Ethernet network are usually unicast frames. A unicast fra

AT-S39 User’s Guide189It is important to note that the maximum number applies to the egress port of a broadcast frame, not the ingress port. That is,

19Section IOverviewThe chapter in this section provides a brief overview of the AT-S39 management software. It explains some of the functions that you

Section II: Local and Telnet Management190Configuring the Interval TimerTo set the interval timer for the Broadcast Storm Control feature, perform the

AT-S39 User’s Guide191Configuring the Maximum Broadcast Frame CountTo specify the maximum number of broadcast frames a port on the switch can transmit

192Chapter 17TACACS+ and RADIUS ProtocolsThis chapter contains the procedure for configuring the two authentication protocols TACACS+ and RADIUS. Sect

AT-S39 User’s Guide193TACACS+ and RADIUS OverviewTACACS+ and RADIUS are authentication protocols used to enhance the security of your network. (TACACS

Section II: Local and Telnet Management194NoteThe switch communicates with the authentication server via the switch’s management VLAN. Consequently, t

AT-S39 User’s Guide195Functions of anAuthenticationProtocolThere are three basic functions an authentication protocol provides: ❑ Authentication❑ Auth

Section II: Local and Telnet Management196Configuring the Authentication Client SoftwareTo configure the TACACS+ and RADIUS client software settings,

AT-S39 User’s Guide1975. To configure TACACS+, do the following:a. Type 3 to select TACACS+ Configuration.The following menu is displayed: Figure 53

Section II: Local and Telnet Management1984 - TAC Server OrderYou use this selection to indicate the order in which you want the switch to query the T

AT-S39 User’s Guide1996. To configure the RADIUS protocol, from the Authentication Menu in Figure 52 on page 196 do the following:a. Type 4 to select

Copyright © 2004 Allied Telesyn, Inc. 960 Stewart Drive Suite B, Sunnyvale, CA 94085 USAAll rights reserved. No part of this publication may be reprod

20Chapter 1OverviewThe AT-S39 management software is intended for the AT-8000 Series Fast Ethernet Switches. The software is used to monitor and adjus

Section II: Local and Telnet Management2003 - RADIUS Server 1 Configuration4 - RADIUS Server 1 Configuration5 - RADIUS Server 1 ConfigurationUse these

AT-S39 User’s Guide201RADIUS client software for the 802.1x port-based access control feature, but not for the manager accounts feature, leave this op

202Chapter 18802.1x Port-Based Access ControlThis chapter contains an overview and procedures for the 802.1x port-based access control feature. Sectio

AT-S39 User’s Guide203802.1x Port-based Access Control OverviewThe AT-S39 management software has several different methods for protecting your networ

Section II: Local and Telnet Management204❑ Authentication server - The authentication server is the network device that has the RADIUS server softwar

AT-S39 User’s Guide205Port Roles Part of the task to implementing this feature is specifying the roles of the ports on the switch. A port can have one

Section II: Local and Telnet Management206NoteThis feature is not supported with the TACACS+ authentication protocol.2. You need to install 802.1x cli

AT-S39 User’s Guide207NoteConnecting multiple supplicants to a port set to the authenticator role does not conform to the IEEE 802.1x standard, can in

Section II: Local and Telnet Management208❑ Ports used to interconnect switches should be set to the none role, as illustrated in Figure 56.Figure 56

AT-S39 User’s Guide209Enabling and Disabling Port Access ControlThis procedure explains how to enable and disable port-based access control on the swi

AT-S39 User’s Guide21NoteThe default settings for the management software can be found in Appendix A, AT-S39 Default Settings on page 331.To actively

Section II: Local and Telnet Management210NoteOption 2 - Authentication Method cannot be changed. 802.1x port-based access control is supported only w

AT-S39 User’s Guide211Configuring Port Access Control ParametersNoteYou must use a local management session to configure port-based access control. Yo

Section II: Local and Telnet Management212Figure 59 Configure Port Access Parameters Menu7. Select the parameter that you wish to modify. The paramet

AT-S39 User’s Guide213❑ Force-unauthorized: Causes the port to remain in the unauthorized state, ignoring all attempts by the client to authenticate.

Section II: Local and Telnet Management214Viewing Port Access StatusNoteYou must use a local management session to view port-based access control para

215Chapter 19Ethernet StatisticsThis chapter contains the procedures for displaying data traffic statistics. Sections in the chapter include:❑ Display

Section II: Local and Telnet Management216Displaying Port StatisticsTo display Ethernet port statistics, perform the following procedure:1. From the M

AT-S39 User’s Guide217CRC Error (CRC_ERROR)Number of packets with a cyclic redundancy check (CRC) error but with the proper length (64-1518 bytes) rec

Section II: Local and Telnet Management218Displaying Switch StatisticsTo display Ethernet statistics for the entire switch, perform the following proc

AT-S39 User’s Guide219Received BroadcastNumber of broadcast packets received on the switch.Received MulticastNumber of multicast packets received on t

Section I: Overview22Local Management SessionYou establish a local management session with an AT-8000 Series switch by connecting a terminal or a PC w

220Chapter 20File Downloads and UploadsThis chapter contains the following sections:❑ File Uploads and Downloads Overview on page 221❑ Downloading Fil

AT-S39 User’s Guide221File Uploads and Downloads OverviewThe firmware on an AT-8000 Series switch consists of the following three parts:❑ AT-S39 manag

Section II: Local and Telnet Management222There are a several methods for downloading and uploading files from a switch. They are:❑ Local management s

AT-S39 User’s Guide223Downloading Files from a Local Management SessionThis section contains the procedure for downloading a new AT-S39 software image

Section II: Local and Telnet Management224❑ The file to be downloaded must be stored on the computer or terminal connected to the RS232 Terminal Port

AT-S39 User’s Guide225NoteOptions 3 and 4 in the menu are described in Uploading Files from a Local Management Session on page 235.4. To download a ne

Section II: Local and Telnet Management2266. To download an AT-S39 image file or configuration using Xmodem, do the following:a. Type X at the prompt

AT-S39 User’s Guide227The Send File window in Figure 65 is displayed. Figure 65 Send File Windowe. Click the Browse button and specify the location a

Section II: Local and Telnet Management228The download begins. If you are downloading a configuration file, the switch automatically resets once the d

AT-S39 User’s Guide229Downloading Files from a Remote Management SessionThis section contains the procedure for downloading a new AT-S39 software imag

AT-S39 User’s Guide23Telnet Management SessionAny management workstation on your network that has the Telnet application protocol can be used to manag

Section II: Local and Telnet Management230To remotely download a new software image or configuration file onto a switch, perform the following procedu

AT-S39 User’s Guide231The download process is complete once the switch finishes the reset process. The new AT-S39 image file or configuration file is

Section II: Local and Telnet Management232Downloading Files Switch to SwitchThis procedure explains how to download an AT-S39 software image from a ma

AT-S39 User’s Guide2334. Type G to select Get/Refresh List of Switches.The master switch polls the enhanced stack for all slave and other master switc

Section II: Local and Telnet Management234The following prompt is displayed:Do you want confirmation before downloading each switch -> [Yes/No]9. A

AT-S39 User’s Guide235Uploading Files from a Local Management SessionThis section contains the procedure for uploading a switch’s AT-S39 software imag

Section II: Local and Telnet Management2363. From the Administration Menu, type D to select Downloads & Uploads. The Downloads and Uploads menu in

AT-S39 User’s Guide237Steps d. through h. illustrate how you would upload a file using the Hilgraeve HyperTerminal program.d. From the HyperTerminal m

Section II: Local and Telnet Management238g. Click Receive. The Receive Filename window is shown in Figure 69.Figure 69 Receive Filename WindowThe ex

AT-S39 User’s Guide239Uploading Files from a Remote Management SessionThis section contains the procedure for uploading a switch file from a remote ma

Section I: Overview24Web Browser Management SessionYou can also use a web browser to manage a switch. This too is referred to as remote management, ju

Section II: Local and Telnet Management2405. Enter a filename for the image file or configuration file. This is the name by which the file will be sto

241Section IIIWeb Browser ManagementThe chapters in this section explain how to manage an AT-8024 or AT-8024GB Fast Ethernet switch using a web browse

242Chapter 21Starting a Web Browser Management SessionThis chapter contains the procedure for starting a management session on an AT-8000 Series switc

AT-S39 User’s Guide243Starting a Web Browser Management SessionThis section explains how to start a web browser management session. There must be at l

244The user names cannot be changed. To change a password, refer to Configuring an IP Address and Switch Name on page 41.The window shown in Figure 71

AT-S39 User’s Guide245Browser Tools You can use the browser tools to move around the AT-S39 menus. Selecting Back on your browser’s toolbar returns yo

246Chapter 22Basic Switch ParametersThis chapter contains the following sections:❑ Configuring an IP Address and Switch Name on page 247❑ Activating t

AT-S39 User’s Guide247Configuring an IP Address and Switch NameNoteFor guidelines on when to assign an IP address, subnet address, and gateway address

Section III: Web Browser Management248The General tab in Figure 72 is displayed.Figure 72 General Tab Menu - ConfigurationThis procedure describes th

AT-S39 User’s Guide2493. Change the parameters as desired. The parameters are described below:System NameThis parameter specifies a name for the switc

AT-S39 User’s Guide25SNMP Management SessionAnother way to remotely manage the switch is with an SNMP management program. A familiarity with Managemen

Section III: Web Browser Management250The default password for Operator access is “operator”. A password can be from 0 to 20 alphanumeric characters.

AT-S39 User’s Guide251Activating the BOOTP and DHCP Client SoftwareFor background information on BOOTP and DHCP, refer to the section Activating the B

Section III: Web Browser Management252Viewing System InformationTo view basic information about the switch, perform the following procedure:1. From th

AT-S39 User’s Guide253This window is for viewing purposes only. You cannot change any of the values from this window. The sections in the window are d

Section III: Web Browser Management254Configuring the SNMP Parameters and Trap IP AddressesTo change the switch’s SNMP community strings or to specify

AT-S39 User’s Guide255GET CommunitySET CommunityTrap CommunityUse these parameters to set a switch’s SNMP community strings. A community string can be

Section III: Web Browser Management256Resetting a SwitchCautionThe switch will not forward traffic during the brief period required to reload its oper

AT-S39 User’s Guide257Pinging a Remote SystemYou can instruct the switch to ping a node on your network. This procedure is useful in determining wheth

Section III: Web Browser Management258Returning the AT-S39 Software to the Factory Default ValuesThe procedure in this section returns all AT-S39 soft

AT-S39 User’s Guide2596. Click OK. The parameter settings are reset to their default values and the switch is reset.7. To resume managing the switch,

Section I: Overview26Management Access LevelsThere are two levels of management access on an AT-8000 Series switch: Manager and Operator. When you log

260Chapter 23Enhanced StackingThis chapter contains the following procedures:❑ Setting a Switch’s Enhanced Stacking Status on page 261❑ Selecting a Sw

AT-S39 User’s Guide261Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be master, slave, or unavailable. Each

Section III: Web Browser Management262The Enhanced Stacking tab is shown in Figure 77.Figure 77 Enhanced Stacking Tab4. Click the desired enhanced st

AT-S39 User’s Guide263Selecting a Switch in an Enhanced StackThe first thing to do before you perform any procedure on a switch in an enhanced stack i

Section III: Web Browser Management264NoteThe master switch on which you started the management session is not included in the list, nor are any switc

265Chapter 24Port ParametersThe procedures in this chapter allow you to view and change the parameter settings for the individual ports on a switch. E

Section III: Web Browser Management266Configuring Port ParametersTo configure the parameter settings for a port on a switch, perform the following pro

AT-S39 User’s Guide267The Settings for Port menu is displayed. An example of the menu is shown in Figure 80.Figure 80 Settings for Port MenuNoteThe D

Section III: Web Browser Management268Speed and ModeThe operating speed and duplex mode of the port. Possible settings for this parameter are:❑ Auto-N

AT-S39 User’s Guide269Broadcast Storm Control Overview on page 188. For instructions on how to set this value, refer to Setting the Maximum Number of

27Section IILocal and Telnet ManagementThe chapters in this section explain how to manage an AT-8000 Series switch from a local or Telnet management s

Section III: Web Browser Management270When a twisted pair port on the switch operating in half-duplex mode needs to stop an end node from transmitting

AT-S39 User’s Guide271Displaying Port Status and StatisticsThe procedure in this section displays the operating status of the ports on a switch and po

Section III: Web Browser Management272If you select port status, the Port Status window in Figure 82 is displayed.Figure 82 Port Status WindowThe inf

AT-S39 User’s Guide273SpeedThe operating speed of the port. Possible values are:0010 - 10 Mbps0100 - 100 Mbps1000 - 1000 MbpsDplxThe duplex mode of th

Section III: Web Browser Management274Priority LevelThe priority queue to which untagged packets are directed when received on the port. A value of 1

AT-S39 User’s Guide275RX_BRDCASTNumber of broadcast packets received on the port.TX_COUNTNumber of packets transmitted by the port.UNDERSIZENumber of

276Chapter 25Port SecurityThis chapter explains how to display the current port security level on the switch from a web browser management session. No

AT-S39 User’s Guide277Displaying the Port Security LevelTo display the switch’s port security level, perform the following procedure:1. From the Home

278Chapter 26Port TrunksThis chapter contains the procedure for creating or deleting a port trunk from a web browser management session.NoteFor backgr

AT-S39 User’s Guide279Creating or Deleting a Port TrunkCautionDo not connect the cables of a port trunk to the ports on the switch until after you hav

Section II: Local and Telnet Management28❑ Chapter 18: 802.1x Port-Based Access Control on page 202❑ Chapter 19: Ethernet Statistics on page 215❑ Chap

Section III: Web Browser Management280To create a port trunk, go to step 4. To delete a port trunk, go to step 5.4. To create a port trunk, do the fol

281Chapter 27Port MirroringThis chapter contains the following procedure:❑ Creating or Deleting a Port Mirror on page 282NoteFor background informatio

Section III: Web Browser Management282Creating or Deleting a Port MirrorTo create or delete a port mirror, perform the following procedure: 1. From th

AT-S39 User’s Guide283The port mirror is immediately activated on the switch. You can now connect a data analyzer to the mirror port to monitor the tr

284Chapter 28STP and RSTPThis chapter explains how to configure the STP and RSTP parameters on an AT-8000 Series switch from a web browser management

AT-S39 User’s Guide285Enabling or Disabling STP or RSTPThe AT-S39 software supports STP and RSTP. Only one spanning tree protocol can be active on the

Section III: Web Browser Management2864. To select an active spanning tree protocol, do the following:a. Click STP or RSTP in the Active Protocol Vers

AT-S39 User’s Guide287Configuring STPThis section contains the following procedures:❑ Configuring STP Bridge Settings on page 287❑ Configuring STP Por

Section III: Web Browser Management2882. Adjust the bridge STP settings as needed. The parameters are described below.Bridge IdentifierThe MAC address

AT-S39 User’s Guide289NoteThe aging time for BPDUs is different from the aging time used by the MAC address table.3. After you have made the desired c

29Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedure for starting a local or Telnet management session on an AT

Section III: Web Browser Management290Path CostThough it says path cost, this is actually the port cost of the port. The spanning tree algorithm uses

AT-S39 User’s Guide291Configuring RSTPThis section contains the following procedures:❑ Configuring RSTP Bridge Settings on page 291❑ Configuring RSTP

Section III: Web Browser Management2922. Adjust the parameters are needed. The parameters are defined below.Force VersionThis selection determines whe

AT-S39 User’s Guide293Bridge IdentifierThe MAC address of the bridge. The bridge identifier is used as a tie breaker in the selection of the root brid

Section III: Web Browser Management2943. Adjust the settings as desired. The parameters are described below.Port PriorityThis parameter is used as a t

AT-S39 User’s Guide295Displaying STP or RSTP SettingsTo display STP or RSTP parameter settings, perform the following procedure:1. From the Home page,

Section III: Web Browser Management296The example in Figure 93 is for RSTP. The information in this window is for viewing purposes only. Figure 93 Ra

297Chapter 29Virtual LANsThis chapter explains how to create, modify, and delete port-based and tagged VLANs from a web browser management session. Th

Section III: Web Browser Management298Creating A New Port-based or Tagged VLANTo create a new port-based or tagged VLAN, perform the procedure below:1

AT-S39 User’s Guide2994. Click Add. The Add VLAN menu is shown in Figure 95.Figure 95 Add VLAN Menu5. Select the Name field and enter a name for the

3Table of ContentsList of Figures ...

Section II: Local or Telnet Management30Local Management SessionOn the front panel of the switch is a port labelled RS232 Terminal Port. You can use t

Section III: Web Browser Management300VLAN should be the same on each switch. For example, if you are creating a VLAN called Sales that will span thre

AT-S39 User’s Guide301NotePorts designated as untagged ports of the new VLAN are automatically removed from their current untagged VLAN assignment. Fo

Section III: Web Browser Management302Modifying a Port-based or Tagged VLANTo modify a port-based or tagged VLAN, perform the following procedure:1. F

AT-S39 User’s Guide303Deleting a Port-based or Tagged VLANTo delete a port-based or tagged VLAN from the switch, perform the following procedure:1. Fr

Section III: Web Browser Management304Displaying VLANsTo display the VLANs on a switch, perform the following procedure:1. From the Home page, select

AT-S39 User’s Guide305Setting the VLAN ModeThe procedures in this section explain how to set the switch for either the user configured (Tagged) VLAN m

Section III: Web Browser Management306Selecting a Multiple VLANs ModeTo select a multiple VLAN mode, perform the procedure below:NoteThe VLAN mode on

307Chapter 30MAC Address TableThis chapter contains instructions on how to view the dynamic and static addresses in the MAC address table of the switc

Section III: Web Browser Management308Viewing the MAC Address TableTo view the MAC address table, perform the following procedure:1. From the Home pag

AT-S39 User’s Guide309View All Static AddressesThis option displays only the static MAC addresses. Static MAC addresses are addresses that you entered

AT-S39 User’s Guide31Starting a LocalManagementSessionTo start a local management session, perform the following procedure:1. Connect one end of the s

Section III: Web Browser Management310CPUIndicates whether the traffic received on the port is sent to the switch’s CPU. Yes indicates that the traffi

AT-S39 User’s Guide311Adding Static Unicast and Multicast MAC AddressesThis section contains the procedure for assigning static unicast and multicast

Section III: Web Browser Management312Deleting MAC AddressesTo delete a static, dynamic, or multicast MAC address from the switch, perform the followi

AT-S39 User’s Guide313Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table. When

314Chapter 31Class of ServiceThis chapter contains instructions on how to configure CoS. This chapter contains the following procedure:❑ Configuring C

AT-S39 User’s Guide315Configuring CoSTo configure CoS, perform the following procedure:1. From the Home page, select Configuration.2. From the Configu

Section III: Web Browser Management316The CoS Settings for Port menu is shown in Figure 100.Figure 100 CoS Setting for Port Menu6. If you want all ta

317Chapter 32IGMP SnoopingThis chapter describes how to configure the IGMP snooping feature on the switch. Sections in the chapter include:❑ Configuri

Section III: Web Browser Management318Configuring IGMP SnoopingTo configure IGMP snooping from a web browser management session, perform the following

AT-S39 User’s Guide319Snoop TopologyDefines whether there is only one host node per switch port or multiple host nodes per port. Possible settings are

Section II: Local or Telnet Management32NoteThe switch has an auto-detect feature on the serial port that automatically determines the speed of the lo

Section III: Web Browser Management320This parameter is useful with networks that contain a large number of multicast groups. You can use the paramete

AT-S39 User’s Guide321Displaying a List of Host Nodes and Multicast RoutersYou can use the AT-S39 software to display a list of the multicast groups o

Section III: Web Browser Management322Viewing a list of host nodes displays a window containing the following information. The information in the wind

323Chapter 33Broadcast Storm ControlThis chapter contains instructions on how to configure the Broadcast Storm Control feature on the switch. Sections

Section III: Web Browser Management324Configuring the Interval TimerThe interval timer defines the time period used in counting the number of broadcas

AT-S39 User’s Guide325Setting the Maximum Number of Broadcast FramesTo set the maximum number of broadcast frames you want the ports on the switch to

326Chapter 34TACACS+ and RADIUS ProtocolsThis chapter contains instructions on how to configure the authentication protocols. This chapter contains th

AT-S39 User’s Guide327Configuring TACACS+ and RADIUSTo configure the authentication protocols, perform the following procedure:1. From the Home page,

Section III: Web Browser Management3285. To select an authentication protocol, click either TACACS+ or RADIUS in the Authentication Method section of

AT-S39 User’s Guide329expires and the server has not responded, the switch queries the next TACACS+ server in the list. If there aren’t any more serve

AT-S39 User’s Guide33The Main Menu is shown in Figure 2. Figure 2 Main MenuTo select a menu item, type the corresponding letter or number.Pressing th

Section III: Web Browser Management330b. Configure the parameters as needed. They are described below.Global Encryption KeyIf all of the TACACS+ serve

331Appendix AAT-S39 Default SettingsThis appendix lists the AT-S39 factory default settings.Management Interface Default SettingsThe following table l

Appendix A: AT-S39 Default Settings332Switch Administration Default SettingsThe following table describes the switch administration default settings.A

AT-S39 User’s Guide333System Software Default SettingsThe following table lists the system software default settings.Enhanced Stacking Default Setting

Appendix A: AT-S39 Default Settings334Port Configuration Default SettingsThe following table lists the port configuration default settings.Class of Se

AT-S39 User’s Guide335Spanning Tree Switch SettingsThe following table describes the Spanning Tree Protocol default settings for the switch.STP Defaul

Appendix A: AT-S39 Default Settings336VLAN Default SettingsThis section provides VLAN default settings.Port Security Default SettingsThe following tab

AT-S39 User’s Guide337Server-Based Authentication Default SettingsThis section describes the server-based authentication, RADIUS, and TACACS+ client d

Appendix A: AT-S39 Default Settings338

339Index802.1x port-based network access controlauthentication process 204authenticator portdescribed 203configuring parameters, 211default settings 3

Section II: Local or Telnet Management34For information on enhanced stacking and how to manage different switches from the same management session, re

340bridge prioritydefault setting 335bridge priority, 98, 108, 113, 288, 292bridge protocol data unit (BPDU), 108, 113, 288,292broadcast frame control

AT-S39 User’s Guide341load distribution methods, 84local management sessiondefined, 22quitting, 34starting, 30Lock All Ports security level, 78MMAC ad

342port prioritydefault setting 335port role, 212port role, default setting 336port securityconfiguring, 79defined, 77displaying, 277port trunkingcrea

AT-S39 User’s Guide343subnet maskdefault setting 332subnet mask, 42, 250supplicant portdescribed 203suppTimeout, 213switchrebooting 49resetting 49swit

AT-S39 User’s Guide35Telnet Management SessionYou can use the Telnet application protocol from a workstation on your network to manage an AT-8000 Seri

Section II: Local or Telnet Management36NoteYou can run only one Telnet management session on a switch at a time. Additionally, you cannot run both a

AT-S39 User’s Guide37Saving Your Parameter ChangesWhen you make a change to a switch parameter, the change is, in most cases, immediately activated on

38Chapter 3Basic Switch ParametersThis chapter contains a variety of information and procedures. There is a discussion on when to assign an IP address

AT-S39 User’s Guide39When Does a Switch Need an IP Address?One of the tasks to building or expanding a network is deciding which of the managed switch

Table of Contents4Chapter 3Basic Switch Parameters ...

Section II: Local and Telnet Management40How Do YouAssign an IPAddress?Once you have decided which, if any, switches on your network need an IP addres

AT-S39 User’s Guide41Configuring an IP Address and Switch NameThe procedure in this section explains how to manually assign an IP address, subnet mask

Section II: Local and Telnet Management422. Change the parameters as desired. The parameters in the IP Parameters menu are described below:1 - IP Addr

AT-S39 User’s Guide437 - Set PasswordThis parameter is used to change the Manager and Operator’s login passwords. For instructions, refer to Configuri

Section II: Local and Telnet Management44Activating the BOOTP and DHCP Client SoftwareThe BOOTP and DHCP application protocols were developed to simpl

AT-S39 User’s Guide454. Type S to select Save Configuration Changes.NoteIf you activate the BOOTP and DHCP client software, the switch immediately beg

Section II: Local and Telnet Management46Configuring SNMP Community Strings and Trap IP AddressesTo configure the SNMP community strings for the switc

AT-S39 User’s Guide472. From the System Configuration Menu, type A to select Advanced Configuration.The Advanced Configuration menu is shown in Figure

Section II: Local and Telnet Management484. Adjust the parameters as desired. To change a value, type its corresponding number and, when prompted, ent

AT-S39 User’s Guide49Resetting a SwitchThis procedure reboots the switch.NoteAny configuration changes not saved will be lost once the switch reboots.

5Chapter 9STP and RSTP ...

Section II: Local and Telnet Management50Configuring the AT-S39 Management Security FeaturesThe AT-S39 software has several security features that can

AT-S39 User’s Guide51Configuring theManagementPasswordsThere are two levels of management access on an AT-8000 Series switch: Manager and Operator. Wh

Section II: Local and Telnet Management52ConfiguringManagementAccessTo configure the console timer, web access, and SNMP access security features of t

AT-S39 User’s Guide53Viewing the AT-S39 Version Number and Switch MAC AddressThe procedure in this section displays the following switch information:❑

Section II: Local and Telnet Management54Pinging a Remote SystemYou can instruct the switch to ping a remote device on your network. This procedure is

AT-S39 User’s Guide55Returning the AT-S39 Software to the Factory Default ValuesThe procedure in this section returns all AT-S39 software parameters t

Section II: Local and Telnet Management56Configuring the Console Startup ModeYou can configure the AT-S39 software to display either the Main Menu or

57Chapter 4Enhanced StackingThis chapter explains the enhanced stacking feature. The sections in this chapter include:❑ Enhanced Stacking Overview on

Section II: Local and Telnet Management 58Enhanced Stacking OverviewThe enhanced stacking feature can make it easier for you to manage the AT-8000 Ser

AT-S39 User’s Guide59There are three basic steps to implementing this feature on your network:1. You must select a switch in your network to function

Table of Contents6Chapter 14Class of Service ...

Section II: Local and Telnet Management 60Figure 9 is an example of the enhanced stacking feature.Figure 9 Enhanced Stacking ExampleThe example consi

AT-S39 User’s Guide61Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be master switch, slave switch, or unav

Section II: Local and Telnet Management 62The menu displays the current status of the switch at the end of selection “1 - Switch State.” For example,

AT-S39 User’s Guide63Selecting a Switch in an Enhanced StackThe first thing you should do before performing a procedure on a switch in an enhanced sta

Section II: Local and Telnet Management 643. Type G to select Get/Refresh List of Switches.The Master switch polls the network for all slave and other

65Chapter 5Port ParametersThe chapter contains procedures for viewing and changing the parameter settings for the individual ports on a switch. This c

Section II: Local and Telnet Management66Displaying Port StatusTo display the status of the ports on the switch, perform the following procedure:1. Fr

AT-S39 User’s Guide67The information in this window is for viewing purposes only. The columns in the window are described below:PrtThe port number.Lin

Section II: Local and Telnet Management68Transmit - Flow control only as packets are being transmitted out the port.Receive - Flow control only on as

AT-S39 User’s Guide69Configuring Port ParametersTo configure the parameter settings for a port on the switch, perform the following procedure: 1. From

7Section IIIWeb Browser Management ... 241Chapte

Section II: Local and Telnet Management70If you are configuring multiple ports and the ports have different settings, the Port Configuration menu disp

AT-S39 User’s Guide71To avoid this problem, when connecting an end node with a fixed duplex mode of full-duplex to a switch port, you should disable A

Section II: Local and Telnet Management726 - Advertise 10FDX7 - Advertise 10HDX8 - Advertise 100FDX9 - Advertise 100HDXThese selections appear in the

AT-S39 User’s Guide73Where they differ is that while flow control applies to ports operating in full-duplex, backpressure applies to ports operating i

Section II: Local and Telnet Management74Displaying Uplink InformationThe AT-S39 management software can display basic manufacturer information about

AT-S39 User’s Guide75The management software displays a menu containing basic information about the GBIC module or fiber optic port. Figure 17 is an e

76Chapter 6Port SecurityThis chapter contains the procedures for setting port security. The sections in this chapter include:❑ Port Security Overview

AT-S39 User’s Guide77Port Security OverviewThis feature can enhance the security of your network. You can use it to control which end nodes can forwar

Section II: Local and Telnet Management78Static MAC addresses are retained by the switch and are not included in the count of maximum addresses that c

AT-S39 User’s Guide79Configuring Port SecurityNotePort security can only be set through a local management session. You cannot set this feature from a

Table of Contents8Displaying VLANs ...

Section II: Local and Telnet Management80Configuring the Limited Security ModeThe Limited security mode lets you set the maximum number of dynamic MAC

AT-S39 User’s Guide815. Enter the port(s) where you want to specify a new MAC address limit. You can specify the ports individually (e.g., 1,4), as a

82Chapter 7Port TrunkingThis chapter contains the procedures for creating and deleting port trunks. Sections in the chapter include:❑ Port Trunking Ov

AT-S39 User’s Guide83Port Trunking OverviewPort trunking is an economical way for you to increase the bandwidth between two Ethernet switches. A port

84❑ When cabling a trunk, the order of the connections should be maintained on both nodes. The lowest numbered port in a trunk on the switch should be

AT-S39 User’s Guide85The AT-S39 management software offers two load distribution methods. They are: ❑ Source Address (SA) Trunking❑ Source Address / D

86Figure 21 Load Distribution MethodNow assume that you configured the port trunk on Switch #1 for SA load distribution. The switch might distribute

AT-S39 User’s Guide87For example, when Workstation B sends a packet to the server, Switch #1 will use Port 14 of the trunk to transmit it to Switch #2

88Even though there is only one source, all the data links in the trunk are used. For instance, if the server needed to send a packet to Workstation C

AT-S39 User’s Guide89Creating a Port TrunkThis section contains the procedure for creating a port trunk on the switch. Be sure to review the guideline

9List of FiguresChapter 1 Overview ...

903. Type 1 to select Trunk Ports.The following prompt is displayed.Enter Trunk Port(s) ->4. Enter the ports that will constitute the port trunk an

AT-S39 User’s Guide91Deleting a Port TrunkCautionDisconnect the cables from the port trunk on the switch before performing the following procedure. De

92Chapter 8Port MirroringThis chapter contains the procedures for creating and deleting a port mirror. Sections in the chapter include:❑ Port Mirrorin

AT-S39 User’s Guide93Port Mirroring OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic being received and transmitted

94Creating a Port MirrorTo create a port mirror, perform the following procedure:1. From the Main Menu, type 1 to select Port Menu.2. From the Port Me

AT-S39 User’s Guide95Deleting a Port MirrorTo delete a port mirror, perform the following procedure:1. From the Main Menu, type 1 to select Port Menu.

96Chapter 9STP and RSTPThis chapter provides background information on the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP). The c

AT-S39 User’s Guide97STP and RSTP OverviewA significant danger to Ethernet network performance is the existence of a data loop in a network topology.

Section II: Local and Telnet Management98Bridge Priorityand the RootBridgeThe first task that bridges perform when a spanning tree protocol is activat

AT-S39 User’s Guide99Path Costs and Port CostsOnce the Root Bridge has been selected, the bridges must determine if the network contains redundant pat