Allied-telesis AT-S62 Manuel d'utilisateur

Management SoftwareAT-S62◆Web Browser InterfaceUser’s GuideAT-8516F/SC, AT-8524M, AT-8524POE, AT-8550GB and AT-8550SP LAYER 2+ FAST ETHERNET SWITCHESV

List of Figures10Chapter 7Static Port Trunks ...

Chapter 10: File Downloads and UploadsSection II: Advanced Operations 1007. In the TFTP Local Filename field, enter a name for the file. This is the n

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 101Uploading a FileThis procedure explains how to upload a file from the swit

Chapter 10: File Downloads and UploadsSection II: Advanced Operations 102NoteThe top portion of the tab returns the switch to its factory default sett

103Chapter 11Event Log and Syslog ServersThis chapter describes the event log and syslog servers. Sections in the chapter include:❑ Managing the Event

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 104Managing the Event LogThe event log contains event messages that are genera

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 105The Event Log tab is shown in Figure 29.Figure 29 Event Log Tab4. For Sta

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 106Displaying theEvent LogTo view the event log, do the following:1. From the

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 107all modules. You can display more than one module at a time by holding dow

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 1085. Once you have set the log filters, click View.PTRUNK Port trunkingQOS Qu

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 109Figure 30 shows an example of the event log in the Full display mode. The

AT-S62 Web Browser Interface User’s Guide11Chapter 16IGMP Snooping ...

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 110Modifying theEvent Log FullActionThis procedure explains how to control wha

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 111Saving the EventLogYou can save the current events in the log as a file in

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 112Managing Syslog Server DefinitionsYou can configure the switch to send its

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 113Creating a SyslogServer DefinitionTo create a syslog server definition, pe

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 114❑ Extended - sends the same as Normal, plus the date, time, and switch’s IP

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 115For example, the setting of DEFAULT assigns all port mirroring events a co

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 116❑ LOCAL3❑ LOCAL4❑ LOCAL5❑ LOCAL6❑ LOCAL7Each setting represents a predefine

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 1177. To permanently save the change, click the Save Config menu selection.Mo

Chapter 11: Event Log and Syslog ServersSection II: Advanced Operations 118Viewing a SyslogServer DefinitionTo view the parameter settings of a syslog

119Chapter 12ClassifiersA classifier defines a traffic flow. You use classifiers with access control lists to filter ingress traffic on a port. You ca

List of Figures12Figure 96: MSTP Spanning Tree Tab ...

Chapter 12: ClassifiersSection II: Advanced Operations 120Creating a ClassifierTo create a new classifier, perform the following procedure:5. From the

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 121assigned to a switch port, while an inactive ACL or QoS policy is currentl

Chapter 12: ClassifiersSection II: Advanced Operations 122Some of the variables and settings display additional selections. For example, selecting IP

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 123VLAN IDDefines a traffic flow of tagged packets by its VLAN ID number. The

Chapter 12: ClassifiersSection II: Advanced Operations 124format. If you use the latter, precede the number with “0x”. To set this parameter, the IP P

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 125UDP Source PortDefines a traffic flow by source UDP port. To set this para

Chapter 12: ClassifiersSection II: Advanced Operations 126Modifying a ClassifierThis procedure explains how to modify a classifier. If the classifier

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 127Deleting a ClassifierThis procedure explains how to delete a classifier. I

Chapter 12: ClassifiersSection II: Advanced Operations 128Displaying the ClassifiersTo display the classifiers on a switch, perform the following proc

129Chapter 13Access Control ListsAn access control list (ACL) is used to filter ingress traffic on a port. Traffic is defined by the classifiers assig

13PrefaceThis guide contains instructions on how to configure an AT-8500 Series Layer 2+ Fast Ethernet Switch using the web browser interface in the A

Chapter 13: Access Control ListsSection II: Advanced Operations 130Creating an Access Control ListThis procedure explains how to create an ACL. It is

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 131DescriptionA description of the ACL.ActionThe action of the ACL. An action

Chapter 13: Access Control ListsSection II: Advanced Operations 132selections. To view the classifiers on a switch, refer to Displaying the Classifier

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 133Modifying an Access Control ListTo modify an ACL, perform the following pr

Chapter 13: Access Control ListsSection II: Advanced Operations 134DescriptionUse this field to enter a description for the ACL. A description can be

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 135Deleting an Access Control ListTo delete an ACL, perform the following pro

Chapter 13: Access Control ListsSection II: Advanced Operations 136Displaying the Access Control ListsTo display the current ACLs on the switch, perfo

137Chapter 14Quality of ServiceThis chapter contains instructions on how to configure Quality of Service (QoS). This chapter contains the following pr

Chapter 14: Quality of ServiceSection II: Advanced Operations 138Managing Flow GroupsFlow groups are groups of classifiers that group together similar

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 139ActiveThe active status of the flow group. A flow group is deemed active i

Preface14Section III: SNMPv3 OperationsThe chapter in this section explains how to configure the switch for SNMPv3. (The instructions for SNMPv1 and S

Chapter 14: Quality of ServiceSection II: Advanced Operations 140DescriptionSpecifies the flow group description. A description can be up to 15 alphan

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 141The Modify Flow Group page is shown in Figure 42.Figure 42 Modify Flow Gr

Chapter 14: Quality of ServiceSection II: Advanced Operations 142Classifier ListThe classifier to be assigned to the flow group. The specified classif

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 143ActiveThe active status of the flow group. A flow group is deemed active i

Chapter 14: Quality of ServiceSection II: Advanced Operations 144Managing Traffic ClassesTraffic classes consist of a set of QoS parameters and a grou

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 145ActiveWhether or not this traffic class is active on the switch. An active

Chapter 14: Quality of ServiceSection II: Advanced Operations 146traffic exceeding the bandwidth is discarded. If remark is selected, the packets are

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 147Remark PriorityReplaces the user priority value in the packets with the ne

Chapter 14: Quality of ServiceSection II: Advanced Operations 148If you specify a new user priority value here and in Flow Group, the value in Flow Gr

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 149The Modify Traffic Class page is shown in Figure 45.Figure 45 Modify Traf

AT-S62 Web Browser Interface User’s Guide15Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.C

Chapter 14: Quality of ServiceSection II: Advanced Operations 150Displaying theTraffic ClassesTo display the traffic classes, perform the following pr

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 151Managing PoliciesQoS policies consist of a collection of user-defined traf

Chapter 14: Quality of ServiceSection II: Advanced Operations 152ActiveWhether or not this policy is active on the switch. An active policy is assigne

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 153DSCP ValueSpecifies a replacement value to write into the DSCP (TOS) field

Chapter 14: Quality of ServiceSection II: Advanced Operations 154Modifying aPolicyTo modify a policy, perform the following procedure:1. From the Home

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 155❑ To delete just one policy, select the policy from the list and click Del

156Chapter 15Class of ServiceThis chapter contains instructions on how to configure Class of Service (CoS). This chapter contains the following proced

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 157Configuring CoSThis procedure explains how to change the egress queue used

Chapter 15: Class of ServiceSection II: Advanced Operations 158The CoS Setting for Port page is shown in Figure 50.Figure 50 CoS Setting for Port Pag

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 159Mapping CoS Priorities to Egress QueuesThis procedure explains how to chan

Preface16Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document Format (PDF

Chapter 15: Class of ServiceSection II: Advanced Operations 160The Scheduling tab is shown in Figure 51.Figure 51 Queuing and Scheduling TabNoteThe C

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 161Configuring Egress SchedulingThis procedure explains how to select and con

Chapter 15: Class of ServiceSection II: Advanced Operations 162Displaying the CoS SettingsTo display the CoS settings, do the following:1. From the Ho

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 163Displaying QoS Queuing and SchedulingTo display QoS queuing and scheduling

164Chapter 16IGMP SnoopingThis chapter describes how to configure the IGMP snooping feature on the switch.Sections in the chapter include:❑ Configurin

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 165Configuring IGMP SnoopingTo configure IGMP snooping from a web browser man

Chapter 16: IGMP SnoopingSection II: Advanced Operations 166forwards the leave request to the router and simultaneously ceases transmission of any fur

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 167This parameter is useful with networks that contain a large number of mult

Chapter 16: IGMP SnoopingSection II: Advanced Operations 168Displaying a List of Host Nodes and Multicast RoutersYou can use the AT-S62 software to di

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 169Router IPThe IP address of the port on the router.

AT-S62 Web Browser Interface User’s Guide17Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as

170Chapter 17Denial of Service DefenseThis chapter contains instructions on how to configure the Denial of Service defense feature on the switch. The

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 171Configuring Denial of Service Attack DefenseTo configure the ports on the

Chapter 17: Denial of Service DefenseSection II: Advanced Operations 172b. In the DoS Subnet Mask field, enter the LAN’s mask. A binary “1” indicates

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 1738. Adjust the settings as needed. The parameters are described below.Statu

Chapter 17: Denial of Service DefenseSection II: Advanced Operations 174Displaying the DoS SettingsTo display the DoS settings, do the following:1. Fr

175Chapter 18Power Over EthernetThis chapter contains the procedures for configuring Power over Ethernet (PoE) for an AT-8524POE switch. Sections in t

Chapter 18: Power Over EthernetSection II: Advanced Operations 176Setting the PoE ThresholdThe PoE threshold is a percentage of the total maximum PoE

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 177The Maximum Available Power field displays the maximum amount of PoE avail

Chapter 18: Power Over EthernetSection II: Advanced Operations 178Configuring PoE Port SettingsThis procedure enables and disables PoE on a port. This

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 179The top portion of the page displays the PoE operating status of the selec

18Section IBasic OperationsThe chapters in this section cover a variety of basic switch features and functions. The chapters include:❑ Chapter 1: Star

Chapter 18: Power Over EthernetSection II: Advanced Operations 1808. To change the maximum amount of power the port can supply to the device, enter a

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 181Displaying PoE Status and SettingsUse this procedure to display PoE status

Chapter 18: Power Over EthernetSection II: Advanced Operations 182Power LimitThe maximum amount of power allowed by the port for the device. The defau

183Section IIISNMPv3 OperationsThis section contains the following chapter:❑ Chapter 19: SNMPv3 Protocol on page 184

184Chapter 19SNMPv3 ProtocolThis chapter provides the following procedures for configuring basic switch parameters using a web browser management sess

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 185Configuring the SNMPv3 ProtocolTo configure the SNMPv3 protocol, you need

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 186Enabling the SNMP ProtocolIn order to allow an NMS (an SNMP manager) to access the switch

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 187NoteIf the check box in the Enable SNMP Access box is empty, the switch ca

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 188Configuring the SNMPv3 User TableYou can create, delete, and modify an SNMPv3 User Table

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 1895. Click the Add button to add a new SNMPv3 User Table entry.The Add New S

19Chapter 1Starting a Web Browser Management SessionThis chapter contains the procedure for starting a web browser management session on an AT-8500 Se

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 1909. In the Confirm Authentication Password field, re-enter the authentication password.Not

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 19114. Click Apply to update the SNMPv3 User Table.15. To save your changes,

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 192The Modify SNMPv3 User Page is shown in Figure 61.Figure 61 Modify SNMPv3 User Page6. In

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 1937. In the Authentication Password field, enter an authentication password

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 194NoteThe Row Status parameter is a read-only field in the Web interface. The Active value

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 195Configuring the SNMPv3 View TableYou can create, delete, and modify an SNM

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 1965. To create a new SNMPv3 View Table entry click Add.The Add New SNMPv3 View Page is show

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 197The View Subtree parameter defines a MIB View and the Subtree Mask further

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 198Deleting a ViewTable EntryTo delete an entry in the SNMPv3 View Table, perform the follow

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 199Modifying a ViewTable EntryTo modify an entry in the SNMPv3 View Table, pe

Copyright © 2005 Allied Telesyn, Inc. 3200 North First Street, San Jose, CA 95134 USAAll rights reserved. No part of this publication may be reproduce

Chapter 1: Starting a Web Browser Management SessionSection I: Basic Operations 20Starting a Web Browser Management SessionIn order for you to establi

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 2007. In the View Type field, enter one of the following view types:IncludedEnter this value

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 201Configuring the SNMPv3 Access TableYou can create, delete, and modify an S

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 2025. To create an SNMPv3 Access Table entry, click Add.The Add New SNMPv3 Access Page is sh

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 203This parameter allows the users assigned to this Group Name to view the in

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 204SNMP users, but you do not want to encrypt messages using a privacy protocol.You can sele

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2054. In the SNMPv3 section of the page, click the circle next to Configure A

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 206Modifying anAccess TableEntryTo modify an entry in the SNMPv3 Access Table, perform the f

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2078. In the Write View Name field, enter a value that you configured with th

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 208Configuring the SNMPv3 SecurityToGroup TableYou can create, delete, and modify an SNMPv3

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2095. To create an SNMPv3 SecurityToGroup Table entry, click Add.The Add New

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 21The AT-S62 software displays the login page, as shown in Figure 2.Figure 2 AT-

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 210There are four default values for this field that are reserved for SNMPv1 and SNMPv2c imp

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2115. Click the circle next to the SecurityToGroup Table entry that you want

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 212❑ defaultV1GroupReadOnly❑ defaultV1GroupReadWrite❑ defaultV2cGroupReadOnly❑ defaultV2cGro

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 213Configuring the SNMPv3 Notify TableYou can create, delete, and modify an S

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 2145. To create an SNMPv3 Notify Table entry, click Add.The Add New SNMPv3 Notify Page is sh

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 215NonVolatileSelect this storage type if you want the ability to save an ent

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 216Modifying aNotify TableEntryTo modify an entry in the SNMPv3 Notify Table, perform the fo

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2178. In the Storage Type field, select one of the following storage types fo

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 218Configuring the SNMPv3 Target Address TableYou can create, delete, and modify an SNMPv3 T

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 219The SNMPv3 Target Address Table Page is shown in Figure 74.Figure 74 SNMP

Chapter 1: Starting a Web Browser Management SessionSection I: Basic Operations 22The main menu is on the left side of the Home page and consists of t

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 2206. In the Target Address Name field, enter the name of the SNMP manager, or host, that ma

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 221NonVolatileSelect this storage type if you want the ability to save an ent

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 222Modifying TargetAddress TableEntryTo modify an entry in the SNMPv3 Target Address Table,

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 223You can enter a UDP port in the range of 0 to 65,535. The default UDP port

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 224Configuring the SNMPv3 Target Parameters TableYou can create, delete, and modify an SNMPv

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2255. To create an SNMPv3 Target Parameters Table entry, click Add.The Add Ne

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 2268. In the Security Model field, select one of the following SNMP protocols as the Securit

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 227This level provides the greatest level of security. You can select this va

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 228A warning message is displayed. Click OK to remove the Target Parameters Table entry.6. T

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 229NoteEnter a value for the Message Processing Model field only if you selec

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 23Saving Your Parameter ChangesWhen you make a change to a switch parameter, the

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 230NoteIf you have selected SNMPv1 or SNMPv2c as the Security Model, you must select No Auth

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 231Configuring the SNMPv3 Community TableYou can create, delete, and modify a

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 232Figure 80 SNMPv3 Community Table Page5. To create an SNMPv3 Community Table entry, click

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 2336. In the Community Index field, enter a numerical value for this Communit

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 234making changes to an SNMPv3 Community Table entry with a NonVolatile storage type, the Sa

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 235Modifying anSNMPv3CommunityTable EntryTo modify an entry in the SNMPv3 Com

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 236This name must be unique. Enter a value of up to 32 alphanumeric characters.NoteDo not us

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 237Displaying SNMPv3 TablesThis section contains procedures to display the SN

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 238Displaying UserTable EntriesTo display entries in the SNMPv3 User Table, perform the foll

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 239Displaying ViewTable EntriesTo display entries in the SNMPv3 View Table, p

Chapter 1: Starting a Web Browser Management SessionSection I: Basic Operations 24Quitting a Web Browser Management SessionTo exit a web browser manag

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 240DisplayingAccess TableEntriesTo display entries in the SNMPv3 Access Table, perform the f

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 241DisplayingSecurityToGroupTable EntriesTo display entries in the SNMPv3 Sec

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 242Displaying NotifyTable EntriesTo display entries in the SNMPv3 Notify Table, perform the

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 243Displaying TargetAddress TableEntriesTo display entries in the SNMPv3 Targ

Chapter 19: SNMPv3 ProtocolSection III: SNMPv3 Operations 244Displaying TargetParameters TableEntriesTo display entries in the SNMPv3 Target Parameter

AT-S62 Web Browser Interface User’s GuideSection III: SNMPv3 Operations 245DisplayingSNMPv3CommunityTable EntriesTo display entries in the SNMPv3 Com

246Section IVSpanning Tree ProtocolsThe chapter in this section explain the spanning tree protocols:❑ Chapter 20: STP, RSTP, and MSTP on page 247

247Chapter 20STP, RSTP, and MSTPThis chapter explains how to configure the STP, RSTP and MSTP parameters on an AT-8500 Series switch from a web browse

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 248Enabling or Disabling Spanning TreeTo enable or disable spanning tree on the swi

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 249Configuring STPCautionThe bridge provides default STP parameters that

25Chapter 2Enhanced StackingThis chapter contains the following procedures:❑ Setting a Switch’s Enhanced Stacking Status on page 26❑ Selecting a Switc

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 2502. Adjust the STP bridge settings as needed. The parameters are described below.

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 251Bridge Max AgeThe length of time after which stored bridge protocol da

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 252port priority is 0 to 240. As with bridge priority, this range is broken into in

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 253Table 9 lists the STP port costs with Auto-Detect when a port is part

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 254Configuring RSTPCautionThe bridge provides default RSTP parameters that are adeq

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 2552. Adjust the parameters are desired. The parameters are defined below

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 2566 - Bridge IdentifierThe MAC address of the bridge. The bridge identifier is use

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 257Table 11 lists the RSTP port costs with Auto-Detect when the port is p

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 258Configuring MSTPThis section is divided into the following procedures:❑ Configur

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 259The MSTP Spanning Tree tab is shown in Figure 96.Figure 96 MSTP Spann

Chapter 2: Enhanced StackingSection I: Basic Operations 26Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 2605. Adjust the bridge MSTP settings as needed. The parameters are described below

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 261❑ MaxAge must be less than (2 x (ForwardingDelay - 1))Bridge Max HopsM

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 2622. To create or delete an MSTI ID and to associate VLANs to MSTIs, do the follow

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 263The Modify MSTI window is shown in Figure 98.Figure 98 Modify MSTI Wi

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 264ConfiguringMSTP PortParametersTo configure MSTP port parameters, perform the fol

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 265An MSTI-specific parameter can be set on a per MSTI basis. This means

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 266Table 11 lists the MSTP port costs with Auto Update when the port is part of a p

AT-S62 Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 267Table 15 lists the MSTP port costs with the Auto setting when the port

Chapter 20: STP, RSTP, and MSTPSection IV: Spanning Tree Protocols 268Displaying Spanning Tree SettingsTo display the parameter settings for the activ

269Section VVirtual LANsThe chapters in this section explain virtual LANs (VLANs). The chapters include:❑ Chapter 21: Virtual LANs on page 270❑ Chapte

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 27NoteIf the window does not have an Enhanced Stacking tab, you have accessed the

270Chapter 21Virtual LANsThis chapter explains how to create, modify, and delete port-based and tagged VLANs from a web browser management session. Th

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 271Creating a New Port-based or Tagged VLANTo create a new port-based or tagged VLAN,

Chapter 21: Virtual LANsSection V: Virtual LANs 272This tab displays the VLANs on the switch. The columns in the tab are defined below:VLAN IDThe VID

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 2735. Select the VID field and enter a VID value for the new VLAN. The range of the V

Chapter 21: Virtual LANsSection V: Virtual LANs 2748. To select the ports for the VLAN, click the ports in the switch image. Clicking repeatedly on a

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 275Modifying a Port-based or Tagged VLANThis procedure explains how to add or remove

Chapter 21: Virtual LANsSection V: Virtual LANs 276The modified VLAN is now ready for network operations.8. To permanently save the change, select the

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 277Deleting a Port-based or Tagged VLANTo delete a port-based or tagged VLAN from the

Chapter 21: Virtual LANsSection V: Virtual LANs 278Displaying VLANsTo display the current VLANs on a switch, perform the following procedure:1. From t

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 279Selecting a VLAN ModeThe AT-S62 management software features three VLAN modes:❑ Po

Chapter 2: Enhanced StackingSection I: Basic Operations 28Selecting a Switch in an Enhanced StackThe first thing that you should do before you perform

Chapter 21: Virtual LANsSection V: Virtual LANs 280Specifying a Management VLANThe management VLAN is the VLAN through which an AT-8500 Series switch

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 281Now let’s assume that you decide to create a VLAN called NMS with a VID of 24 for

282Chapter 22GARP VLAN Registration ProtocolThis chapter explains how to configure GVRP on the switch. The procedures include:❑ Configuring GVRP on pa

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 283Configuring GVRPTo configure the GVRP parameters, perform the following procedure:

Chapter 22: GARP VLAN Registration ProtocolSection V: Virtual LANs 284Join TimeSets the duration of the Join Period timer. The range is from 10 to 60

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 285Enabling or Disabling GVRP on a PortThis procedure enables and disables GVRP on a

Chapter 22: GARP VLAN Registration ProtocolSection V: Virtual LANs 286Displaying the GVRP SettingsTo view the GVRP settings, perform the following pro

287Chapter 23Protected Ports VLANsThis chapter explains how to create, modify, and delete a protected ports VLAN using a web browser management sessio

Chapter 23: Protected Ports VLANsSection V: Virtual LANs 288Deleting a Protected Ports VLANTo delete a protected ports VLAN from the switch, perform t

AT-S62 Web Browser Interface User’s GuideSection V: Virtual LANs 289Displaying a Protected Ports VLANTo display the details of a protected port VLAN,

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 29NoteThe list does not include the master switch on which you started the manage

290Section VIPort SecurityThe chapters in this section explain the port security features of the AT-8524M switch The chapters include:❑ Chapter 24: MA

291Chapter 24MAC Address SecurityThis chapter explains how to display and configure MAC address security on the ports on a switch. It contains the fol

Chapter 24: MAC Address SecuritySection VI: Port Security 292Configuring MAC Address SecurityMAC address security allows you to control access to a po

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 293The Security for Port(s) window is shown in Figure 106.Figure 106 Security for

Chapter 24: MAC Address SecuritySection VI: Port Security 294LockedInstructs a port to immediately stop learning new dynamic MAC addresses. Frames are

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 295Displaying MAC Address SecurityTo display the MAC address security level of a po

Chapter 24: MAC Address SecuritySection VI: Port Security 296ParticipatingThis column applies only when the intrusion action on a port is set to trap

297Chapter 25802.1x Port-based Access ControlThis chapter contains instructions on how to configure the 802.1x port-based access control feature on th

Chapter 25: 802.1x Port-based Access ControlSection VI: Port Security 298Enabling or Disabling Port-based Access ControlThis procedure explains how to

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 2994. To enable or disable the feature, do the following:a. Click the Enable Port A

3Table of ContentsList of Figures ...

Chapter 2: Enhanced StackingSection I: Basic Operations 30Displaying the Enhanced Stacking StatusTo display the enhanced stacking status of a switch,

Chapter 25: 802.1x Port-based Access ControlSection VI: Port Security 300Setting Port RolesTo set port roles for port-based access control, perform th

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 3019. To configure authenticator port settings, go to Configuring Authenticator Por

Chapter 25: 802.1x Port-based Access ControlSection VI: Port Security 302Configuring Authenticator Port ParametersTo configure authenticator port para

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 303changes or the port receives an EAPOL-Start packet from a supplicant. The switch

Chapter 25: 802.1x Port-based Access ControlSection VI: Port Security 304regardless of the client. If set to Disabled, then the switch port forwards o

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 3055. To permanently save the changes, select the Save Config menu selection.

Chapter 25: 802.1x Port-based Access ControlSection VI: Port Security 306Configuring Supplicant Port ParametersTo configure supplicant port parameters

AT-S62 Web Browser Interface User’s GuideSection VI: Port Security 307Held PeriodSpecifies the amount of time in seconds the supplicant is to refrain

Chapter 25: 802.1x Port-based Access ControlSection VI: Port Security 308Displaying the Port-based Access Control SettingsTo display port-based access

309Section VIIManagement SecurityThe chapters in this section explain the management security features of the AT-S62 software. The chapters include:❑

31Chapter 3Basic Switch ParametersThis chapter contains the following sections:❑ Configuring an IP Address and Switch Name on page 32❑ Activating the

310Chapter 26Encryption Keys, PKI, and SSLThis chapter explains how to view the encryption keys, PKI certificates, and SSL settings. It includes the f

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 311Displaying Encryption KeysTo display the SSL and SSH encryption key pairs

Chapter 26: Encryption Keys, SSL, and PKISection VII: Management Security 312Displaying PKI Settings and CertificatesTo display the self-signed and CA

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 313MTrust (Manually Trusted)The certificate has been manually verified that

Chapter 26: Encryption Keys, SSL, and PKISection VII: Management Security 314SubjectThe Subject distinguished name.IssuerThe certificate issuer’s dist

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 315Displaying the SSL SettingsTo display the SSL settings, perform the follo

316Chapter 27Secure Shell ProtocolThis chapter contains the procedure for configuring the SSH protocol settings. Sections in this chapter include:❑ Co

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 317Configuring the SSH ServerThis section describes how to configure the SSH

Chapter 27: Secure Shell ProtocolSection VII: Management Security 3184. Configure the parameters as needed. The parameters are described below: Status

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 319Displaying SSH InformationTo display SSH information, do the following:1.

Chapter 3: Basic Switch ParametersSection I: Basic Operations 32Configuring an IP Address and Switch NameNoteFor guidelines on when to assign an IP ad

320Chapter 28RADIUS and TACACS+ Authentication ProtocolsThis chapter contains instructions on how to configure the authentication protocols. This chap

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 321Configuring RADIUS and TACACS+To configure the authentication protocols,

Chapter 28: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 3225. Click Apply.NoteTo configure TACACS+, go to Step 6. To c

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 323IP Address and Server SecretUse these fields to specify the IP addresses

Chapter 28: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 324Global Server TimeoutThis parameter specifies the maximum a

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 325Displaying the RADIUS or TACSACS+ SettingsTo display the RADIUS or TACACS

326Chapter 29Management Access Control ListThis chapter explains how to create a Management Access Control List (ACL). You can use the ACL to restrict

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 327Creating a Management ACLTo create a Management ACL, perform the followin

Chapter 29: Management Access Control ListSection VII: Management Security 3284. In the Mgmt. ACL IP Mask field enter a mask that indicates the parts

AT-S62 Web Browser Interface User’s GuideSection VII: Management Security 329Adding or Deleting an ACEYou can add or delete ACEs from the management A

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 33NoteThis procedure describes the parameters in the Administration section of th

Chapter 29: Management Access Control ListSection VII: Management Security 330Displaying the Management ACLTo display the ACEs in the Management ACL,

331IndexNumerics802.1x port-based network access controlaccess role, configuring 300configuring 300configuring a supplicant port 306configuring an aut

Index332Cciphers available parameter 319CIST priority 261Class of Service (CoS)configuring 157mapping to egress queues 159scheduling 161classifierscre

AT-S62 Web Browser Interface User’s Guide333MMAC address tableadding addresses 72aging time 37, 76deleting addresses 74, 75displaying 69MACs available

Index334Power over Ethernet (PoE)configuring port settings 178displaying status 181setting threshold 176protected ports VLANsdeleting 288displaying 28

AT-S62 Web Browser Interface User’s Guide335Spanning Tree Protocol (STP)configuring bridge parameters 249configuring port parameters 251disabling 248d

Chapter 3: Basic Switch ParametersSection I: Basic Operations 34CommentsThis parameter specifies the location of the switch, (for example, 4th Floor -

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 356. Click the Save Config menu option to permanently save your changes.

Chapter 3: Basic Switch ParametersSection I: Basic Operations 36Activating the BOOTP or DHCP Client SoftwareFor background information on BOOTP and DH

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 37Displaying System InformationTo view basic information about the switch, perfor

Chapter 3: Basic Switch ParametersSection I: Basic Operations 38Configuring the Manager and Operator PasswordsThere are two levels of management acces

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 39CautionYou should not use spaces or special characters, such as asterisks (*) a

Table of Contents4Pinging a Remote System ...

Chapter 3: Basic Switch ParametersSection I: Basic Operations 40Rebooting a SwitchNoteAny parameters changes that have not been saved will be discarde

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 41Setting the System TimeThis procedure explains how to set the switch’s date and

Chapter 3: Basic Switch ParametersSection I: Basic Operations 42The System Time tab is shown in Figure 8.Figure 8 System Time Tab4. To set the system

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 43NoteThe switch does not set DST automatically. If the switch is in a locale tha

Chapter 3: Basic Switch ParametersSection I: Basic Operations 44Pinging a Remote SystemYou can instruct the switch to ping a node on your network. Thi

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 45Returning the AT-S62 Software to the Factory Default ValuesThe procedure in thi

Chapter 3: Basic Switch ParametersSection I: Basic Operations 46The System Utilities tab is shown in Figure 10.Figure 10 System Utilities TabThe TFTP

47Chapter 4SNMPv1 and SNMPv2c Community StringsThis chapter explains how to activate SNMP management on the switch and how to create, modify, and dele

Chapter 4: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 48Enabling or Disabling SNMP ManagementTo enable or disable SNMP management

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 49A change to SNMP access is immediately activated on the switch.7. To permanentl

AT-S62 Web Browser Interface User’s Guide5Saving the Event Log ...

Chapter 4: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 50Creating a SNMPv1 or SNMPv2c Community StringTo create a new SNMPv1 or SNM

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 51Open AccessDisplays the opened or closed access status of the string:Yes - The

Chapter 4: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 526. In the Community Name field, enter the new community string. The name c

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 53Modifying a Community StringTo modify a community string, perform the following

Chapter 4: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 54NoteYou cannot change the name of a community string.7. Use the Status opt

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 55Deleting a Community StringTo delete a community string, do the following:1. Fr

Chapter 4: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 56Displaying the SNMP Status and Community StringsTo display the SNMPv1 and

57Chapter 5Port ParametersThis chapter explains how to view and change the parameter settings for the individual ports on a switch. Examples of the pa

Chapter 5: Port ParametersSection I: Basic Operations 58Configuring Port ParametersTo configure the parameter settings of a port on the switch, perfor

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 59The Port Configuration page is shown Figure 16.Figure 16 Port Configuration Pa

Table of Contents6Chapter 17Denial of Service Defense ...

Chapter 5: Port ParametersSection I: Basic Operations 60If you are configuring a twisted pair port and you select Auto-Negotiation, which is the defau

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 61HOL BlockingFor a definition of Head of Line Blocking, refer to the AT-S62 Menu

Chapter 5: Port ParametersSection I: Basic Operations 62When you activate this feature on a port, the port will discard all egress broadcast packets.

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 63Possible values are:Auto - The port will use flow control if it detects that th

Chapter 5: Port ParametersSection I: Basic Operations 64Displaying Port Status and StatisticsThe procedure in this section displays the operating stat

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 65LinkThe status of the link between the port and the end node connected to the p

Chapter 5: Port ParametersSection I: Basic Operations 66If you select Statistics, the Statistics page in Figure 18 is displayed.Figure 18 Port Statis

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 67Frames 1024 - 1518 BytesFrames 1519 - 1522 BytesNumber of frames transmitted fr

68Chapter 6MAC Address TableThis chapter contains instructions on how to view the dynamic and static addresses in the MAC address table of the switch.

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 69Displaying the MAC Address TableTo view the MAC address table, perform the foll

AT-S62 Web Browser Interface User’s Guide7Displaying Notify Table Entries ...

Chapter 6:MAC Address TableSection I: Basic Operations 70The top section displays unicast addresses while the middle section displays multicast addres

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 71Vlan ID - The ID number of the VLAN where the port is a member.Type - The type

Chapter 6:MAC Address TableSection I: Basic Operations 72Adding Static Unicast and Multicast MAC AddressesThis section contains the procedure for assi

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 737. In the VLAN ID field, enter the VLAN ID where the port is a member.8. Click

Chapter 6:MAC Address TableSection I: Basic Operations 74Deleting Unicast and Multicast MAC AddressesTo delete a specific static or dynamic unicast or

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 75Deleting All Dynamic Unicast and Multicast MAC AddressesTo delete all dynamic u

Chapter 6:MAC Address TableSection I: Basic Operations 76Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresse

77Chapter 7Static Port TrunksThis chapter contains the procedure for creating, modifying, or deleting a static port trunk from a web browser managemen

Chapter 7: Static Port TrunksSection I: Basic Operations 78Creating a Static Port TrunkThis section contains the procedure for creating a static port

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 79The Port Trunking tab is shown in Figure 21.Figure 21 Port Trunking TabThis ta

Table of Contents8Chapter 25802.1x Port-based Access Control ...

Chapter 7: Static Port TrunksSection I: Basic Operations 80The Add New Trunk page is shown in Figure 22.Figure 22 Add New Trunk Page5. In the Trunk N

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 81Modifying a Static Port TrunkThis section contains the procedure for modifying

Chapter 7: Static Port TrunksSection I: Basic Operations 82An example of the Modify Trunk page is shown in Figure 23.Figure 23 Modify Trunk PageNoteY

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 83Deleting a Static Port TrunkCautionDisconnect the cables from the port trunk on

Chapter 7: Static Port TrunksSection I: Basic Operations 84Displaying the Static Port TrunksTo display the static port trunks on the switch, do the fo

85Chapter 8Port MirroringThis chapter contains the procedure for creating or deleting a port mirror. Sections in the chapter include:❑ Creating a Port

Chapter 8: Port MirroringSection I: Basic Operations 86Creating a Port MirrorTo create or delete a port mirror, perform the following procedure: 1. Fr

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 87StatusThis column contains the status of the mirroring feature. If enabled, tra

Chapter 8: Port MirroringSection I: Basic Operations 88Figure 26 shows an example of the Modify Mirror page configured for a port mirror. The egress t

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 89Modifying or Disabling a Port MirrorTo modify a port mirror, you perform the sa

9List of FiguresChapter 1Starting a Web Browser Management Session ...

Chapter 8: Port MirroringSection I: Basic Operations 90Deleting a Port MirrorTo delete a port mirror so that you can use the destination port for norm

AT-S62 Web Browser Interface User’s GuideSection I: Basic Operations 91Displaying the Port MirrorTo display the port mirror, do the following:1. From

92Section IIAdvanced OperationsThe chapters in this section explain how to manage an AT-8524M switch from a local or Telnet management session. The ch

93Chapter 9File SystemThis chapter contains instructions on how to display the files stored in the switch’s file system and select a new active boot c

Chapter 9: File SystemSection II: Advanced Operations 94Viewing System Files or Changing the Active Configuration FileThis procedure displays the file

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 95The File System tab is shown in Figure 27.Figure 27 File System TabThe inf

Chapter 9: File SystemSection II: Advanced Operations 96Attributes - This can be any of the following:❑ Normal ❑ Read Only❑ Hidden❑ System❑ Volume❑ Di

97Chapter 10File Downloads and UploadsThis chapter contains the procedure for downloading a new AT-S62 image file onto the switch from a web browser m

Chapter 10: File Downloads and UploadsSection II: Advanced Operations 98Downloading a FileThis procedure explains how to download a file from a TFTP s

AT-S62 Web Browser Interface User’s GuideSection II: Advanced Operations 99of the switch using Xmodem or, alternatively, switch to switch. For instruc