Allied-telesis AT-S88 Manual de usuario

613-000555 Rev. BManagementSoftwareAT-S88User’s GuideFor the AT-FS750/24POE Fast Ethernet Smart SwitchVersion 1.0

Tables2

Chapter 10: IGMP92IGMP Snooping OverviewThe IGMP protocol enables routers to create lists of nodes that are members of multicast groups. (A multicast

AT-S88 Management Software User’s Guide93switch ports connected to host nodes.Without IGMP snooping a switch would have to flood multicast packets out

Chapter 10: IGMP94Enabling or Disabling IGMP SnoopingTo enable or disable IGMP Snooping, perform the following procedure:1. From the main menu, select

95Chapter 11STP and RSTPThis chapter provides background information on the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP). The

Chapter 11: STP and RSTP96STP OverviewThe performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network

AT-S88 Management Software User’s Guide97You can change the bridge priority number in the AT-S88 management software. You can designate which switch o

Chapter 11: STP and RSTP98port on a bridge is typically based on port speed. The faster the port, the lower the port cost. The exceptions to this are:

AT-S88 Management Software User’s Guide99Port PriorityIf two paths have the same port cost, the bridges must select a preferred path. In some instance

Chapter 11: STP and RSTP100software. The appropriate value for this parameter depends on a number of variables; the size of your network is a primary

AT-S88 Management Software User’s Guide101If a bridge port is operating in full-duplex mode, than the port is functioning as a point-to-point port. Fi

3PrefaceThis guide contains instructions on how to use the AT-S88 management software to manage and monitor the AT-FS750/24POEFast Ethernet Smart Swit

Chapter 11: STP and RSTP102Figure 32. Edge PortA port can be both a point-to-point and an edge port at the same time. It operates in full-duplex and h

AT-S88 Management Software User’s Guide103span two AT-FS750/24POE Fast Ethernet Smart Switches. Two links consisting of untagged ports connect the sep

Chapter 11: STP and RSTP104Enabling or Disabling Spanning TreeThe AT-S88 management software supports STP and RSTP. However, only one spanning tree pr

AT-S88 Management Software User’s Guide105Root MAC AddressThe MAC address of the root bridge.Switch MAC AddressThe MAC address of the switch. This val

Chapter 11: STP and RSTP106STP EnabledSTP is enabled.RSTP EnabledRSTP is enabled.3. Do one of the following: Click OK to save the changes. Click Rel

AT-S88 Management Software User’s Guide107Configuring the STP Bridge SettingsThis section contains the procedure for configuring a bridge’s STP settin

Chapter 11: STP and RSTP1085. In the Bridge Priority field, enter a number for the priority number for the bridge. This number is used to determine th

AT-S88 Management Software User’s Guide109Configuring the Spanning Tree Port SettingsTo configure the spanning tree port settings, perform the followi

Chapter 11: STP and RSTP110AutoThe switch automatically detects if the port is functioning as a point-to-point port.YesSets the port to always functio

111Chapter 12SecurityThis chapter provides information on the AT-S88 security features as described in the following sections:  “Port-based Network A

Preface4Where to Find Web-based GuidesThe installation and user guides for all Allied Telesis products are available in portable document format (PDF)

Chapter 12: Security112Port-based Network Access ControlPort-based Network Access Control (IEEE 802.1x) uses the RADIUS protocol to control who can se

AT-S88 Management Software User’s Guide113The Port Access Control page is shown in Figure 36.Figure 36. Port Access Control Page2. In the Reauthentica

Chapter 12: Security1146. In the Quiet Period field, enter a number for the number of seconds that the port remains in the quiet state following a fai

AT-S88 Management Software User’s Guide115Force-authorizedDisables IEEE 802.1X port-based authentication and causes the port to transition to the auth

Chapter 12: Security1169. Click Save.Viewing the PortAccess ControlStatusTo view the port access control status, perform the following procedure:1. Fr

AT-S88 Management Software User’s Guide117To initialize a port, perform the following procedure:1. From the main menu, select Security > Port Acces

Chapter 12: Security118Setting Up a Dial-In UserYou should set up a dial-in user account for each person who needs to access the switch for management

AT-S88 Management Software User’s Guide119The Save Configuration page is shown in Figure 3 on page 13.8. Click Save.Modifying a Dial-in UserTo modify

Chapter 12: Security120The Save Configuration page is shown in Figure 3 on page 13.6. Click Save.

AT-S88 Management Software User’s Guide121RADIUSRADIUS is an acronym for Remote Authentication Dial In User Services, an authentication protocol. You

AT-S88 Management Software User’s Guide5Contacting Allied Telesis Online Support You can request technical support online by accessing the Allied Tele

Chapter 12: Security122subnets, be sure to specify a default gateway on the IP Setup page (Figure 2 on page 12) so that the switch and server can comm

AT-S88 Management Software User’s Guide123The RADIUS page is shown in Figure 39.Figure 39. RADIUS Page2. In the Authentication Server IP field, specif

Chapter 12: Security124

125Chapter 13StatisticsThis chapter contains the following sections: “Statistics Overview” on page 126 “Viewing the Traffic Comparison Statistic” on

Chapter 13: Statistics126Statistics OverviewStatistics provide important information for troubleshooting switch problems at the port level. The AT-S88

AT-S88 Management Software User’s Guide127Viewing the Traffic Comparison StatisticTo compare a specific type of traffic between all ports on the switc

Chapter 13: Statistics128Inbound Non-unicast Packet RateThe number of good packets received per unit of time (specified by the Auto Refresh parameter)

AT-S88 Management Software User’s Guide129Inbound Non-unicast PacketsThe total number of good packets received that were directed to the broadcast or

Chapter 13: Statistics130A chart, such as the one in Figure 41, is displayed.Figure 41. Sample Traffic Comparison Chart

AT-S88 Management Software User’s Guide131Viewing the Error GroupsThe error groups chart allows you to view a pre-defined group of errors for the port

Preface6

Chapter 13: Statistics132A chart, such as the one in is shown Figure 43, is displayed..Figure 43. Sample Error Chart

AT-S88 Management Software User’s Guide133Viewing the Historical StatusTo view the statistics from one or more ports over a period of time, perform th

Chapter 13: Statistics134Inbound Unicast PacketsThe total number of good packets received that were not directed to the broadcast or multicast address

AT-S88 Management Software User’s Guide135An example of a historical status chart is shown in Figure 45 Figure 45. Sample Historical Status Chart

Chapter 13: Statistics136

137Chapter 14MAC AddressesThis chapter contains the following sections: “MAC Address Overview” on page 138 “Working with Dynamic MAC Addresses” on p

Chapter 14: MAC Addresses138MAC Address OverviewEach hardware device that you connect to your Ethernet network has a unique MAC address assigned to it

AT-S88 Management Software User’s Guide139Dynamic MAC addresses are not stored indefinitely in the MAC address table. The switch deletes a dynamic MAC

Chapter 14: MAC Addresses140Working with Dynamic MAC AddressesThis section contains the following procedures: “Displaying the Dynamic MAC Addresses,”

AT-S88 Management Software User’s Guide141The page is redisplayed to contain a list similar to the one in Figure 47.Figure 47. Dynamic MAC Addresses A

7Chapter 1Getting StartedThis chapter contains the following sections: “Starting a Management Session” on page 8 “Quitting a Management Session” on

Chapter 14: MAC Addresses142The page is redisplayed to contain a list similar to the one in Figure 49.Figure 49. Dynamic MAC Addresses Associated with

AT-S88 Management Software User’s Guide143The Save Configuration page is shown in Figure 3 on page 13.5. Click Save.

Chapter 14: MAC Addresses144Working with Static MAC AddressesThis section contains the following procedures: “Adding a Static MAC Address” on page 14

AT-S88 Management Software User’s Guide145None - No packet filtering takes place for this MAC address.Destination - Packets are filtered when this MAC

Chapter 14: MAC Addresses1462. Click First, Previous, Next, or Last to move through the list of MAC addresses to highlight the one you want to remove.

147Chapter 15Downloading New Management SoftwareThe procedure in this chapter is: “Downloading New Management Software” on page 148

Chapter 15: Downloading New Management Software148Downloading New Management SoftwareTo download a new version of the AT-S88 management software, perf

149IndexAaging timechanging 142defined 139BBPDU. See bridge protocol data unitbridge forwarding delaySpanning Tree Protocol (STP) 105, 107bridge hello

Index150closed access status 44default 45name 44open access status 44source port 60Spanning Tree Protocol (STP)and VLANs 102bridge forwarding delay 10

Chapter 1: Getting Started8Starting a Management SessionTo start a management session on the switch, perform the following procedure:1. In a web brows

AT-S88 Management Software User’s Guide9NoteBecause the switch initially has no login or password protection, Allied Telesis strongly suggests that yo

Chapter 1: Getting Started10Quitting a Management SessionTo quit a management session, close the web browser.

11Chapter 2Basic Switch ParametersThis chapter contains the following sections: “Configuring the IP Address, Subnet Mask, and Gateway Address” on pag

Copyright © 2007 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Chapter 2: Basic Switch Parameters12Configuring the IP Address, Subnet Mask, and Gateway AddressWarningBe sure to record the switch’s IP address in a

AT-S88 Management Software User’s Guide137. Log into the switch using its new IP address.8. From the main menu, select Save Configuration.The Save Con

Chapter 2: Basic Switch Parameters14Enabling or Disabling DHCPTo enable or disable the DHCP client, perform the following procedure:1. From the main m

AT-S88 Management Software User’s Guide15Configuring System Administration InformationYou can allow multiple users to access and administer the system

Chapter 2: Basic Switch Parameters166. To permanently save these settings in the configuration file, from the main menu, select Save Configuration.The

AT-S88 Management Software User’s Guide17NoteBe careful not to delete all the users. You should have at least one user, with a password, to manage the

Chapter 2: Basic Switch Parameters18Configuring the System Management InformationThis section explains how to assign a name to the switch, as well as

AT-S88 Management Software User’s Guide19 Click Reload to clear the fields and start over.6. To permanently save these settings in the configuration

Chapter 2: Basic Switch Parameters20Setting Up IP Address AccessYou can restrict remote management of the switch by creating an IP access list. The sw

AT-S88 Management Software User’s Guide216. Click Save.Modifying an IPAddress in the IPAccess ListTo modify an IP address in the IP access list, perfo

3Preface ...

Chapter 2: Basic Switch Parameters22Enabling orDisabling IPAccessTo enable or disable IP access for the users, perform the following procedure:1. From

AT-S88 Management Software User’s Guide23Rebooting the SwitchNoteThe reboot process stops network traffic and you lose your connection to the switch.T

Chapter 2: Basic Switch Parameters24Returning the AT-S88 Management Software to the Default ValuesTo restore the management software to the factory de

25Chapter 3Port ConfigurationThis chapter contains the following procedures: “Enabling or Disabling a Port” on page 26 “Setting a Port’s Speed and D

Chapter 3: Port Configuration26Enabling or Disabling a PortTo enable or disable a port, perform the following procedure:1. From the main menu, select

AT-S88 Management Software User’s Guide27Setting a Port’s Speed and Duplex ModeTo set the speed and duplex mode on the port, perform the following pro

Chapter 3: Port Configuration286. To permanently save these settings in the configuration file, from the main menu, select Save Configuration.The Save

AT-S88 Management Software User’s Guide29Enabling or Disabling Flow ControlA switch port uses flow control to control the flow of ingress packets from

Chapter 3: Port Configuration30Configuring Bandwidth ControlIf the performance of your network is affected by heavy traffic, you can use bandwidth con

AT-S88 Management Software User’s Guide31b. In the Control list, select Enable to enable the control, or Disable to disable it.c. In the Mode list, se

Contents4SNMP Overview...

Chapter 3: Port Configuration32

Section I: Basic Features 33Chapter 4Power over EthernetPower over Ethernet (PoE) provides a way to distribute low-voltage power across the network us

Chapter 4: Power over Ethernet34PoE OverviewThe twisted pair ports on the AT-FS750/24POE Fast Ethernet Smart switch feature Power over Ethernet (PoE).

AT-S88 Management Software User’s Guide35strands, leaving four strands in the cable unused. The strands that carry the network traffic are 1, 2, 3, an

Chapter 4: Power over Ethernet36Viewing the PoE StatusTo view information about the system’s PoE operation, perform the following procedure:1. From th

AT-S88 Management Software User’s Guide37Max Shutdown VoltageThe maximum total PoE voltage allowed before the PoE ports are shut down.Power BudgetThe

Chapter 4: Power over Ethernet38Setting the Power Management ModeYou can configure how the AT-FS750/24POE Fast Ethernet Smart Switch allocates power t

AT-S88 Management Software User’s Guide399. In the Power Usage field, enter a number representing the percentage of the total power budget of the swit

Chapter 4: Power over Ethernet40Allocating Power to the PoE PortsTo allocate power to each PoE port, perform the following procedure:1. From the main

AT-S88 Management Software User’s Guide41Diagnosing PoE Port ProblemsIf the powered device on a PoE port appears to be operating abnormally, you can p

AT-S79 Management Software User’s Guide5Hello Time and Bridge Protocol Data Units (BPDUs) ...

Chapter 4: Power over Ethernet42

43Chapter 5SNMPThis chapter contains the following topics: “SNMP Overview” on page 44 “Setting Up the SNMP Community Table” on page 46 “Setting Up

Chapter 5: SNMP44SNMP OverviewThe Simple Network Management Program (SNMP) is another way for you to manage the switch. This type of management involv

AT-S88 Management Software User’s Guide45Trap ReceiversA trap is a signal sent to one or more management workstations by the switch to indicate the oc

Chapter 5: SNMP46Setting Up the SNMP Community TableTo define the SNMP community names and their settings, perform the following procedure:1. From the

AT-S88 Management Software User’s Guide47Setting Up the Host TableWhen you assign a host IP address to a community string, you identify which manageme

Chapter 5: SNMP486. Click Save.

AT-S88 Management Software User’s Guide49Setting Up SNMP Trap ReceiversTo set up the SNMP trap receivers, perform the following procedure:1. From the

Chapter 5: SNMP50

51Chapter 6Port TrunkingThis chapter contains the following sections: “Port Trunking Overview” on page 52 “Creating a Port Trunk” on page 54 “Modif

Contents6

Chapter 6: Port Trunking52Port Trunking OverviewA port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and an

AT-S88 Management Software User’s Guide53Also note that a static trunk does not provide for redundancy or link backup. If a port in a static trunk los

Chapter 6: Port Trunking54Creating a Port TrunkTo create a port trunk, perform the following procedure:1. From the main menu, select Bridge > Trunk

AT-S88 Management Software User’s Guide556. Do one of the following: Click OK to save the trunk. Click Reload to clear the trunk name and port selec

Chapter 6: Port Trunking56Modifying a TrunkTo modify a port trunk, perform the following procedure:1. From the main menu, select Bridge > Trunking.

AT-S88 Management Software User’s Guide57Removing a TrunkTo remove a port trunk, perform the following procedure:1. From the main menu, select Bridge

Chapter 6: Port Trunking58

59Chapter 7Port MirroringThis chapter describes port mirroring and contains the following topics: “Port Mirroring Overview” on page 60 “Configuring

Chapter 7: Port Mirroring60Port Mirroring OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic being received and transm

AT-S88 Management Software User’s Guide61Configuring Port MirroringTo configure port mirroring, perform the following procedure:1. From the main menu,

7Figure 1. Main Page ...

Chapter 7: Port Mirroring62A check mark is placed for each port you select, as for example Figure 20.Figure 20. Ingress Ports Selected3. Select the po

AT-S88 Management Software User’s Guide635. In the Mirror Mode list, select Enable.6. Do one of the following: Click OK to save the port mirror. Cli

Chapter 7: Port Mirroring64Modifying a Port MirrorTo modify a port mirror, perform the following procedure.1. From the main menu, select Bridge > M

65Chapter 8VLANsThis chapter about VLANs contains the following sections: “VLAN Overview” on page 66 “Port-based VLAN Overview” on page 68 “Tagged

Chapter 8: VLANs66VLAN OverviewA VLAN is a group of ports on an Ethernet switch that form a logical Ethernet segment. The ports of a VLAN form an inde

AT-S88 Management Software User’s Guide67management software. You can change the VLAN memberships through the management software without moving the w

Chapter 8: VLANs68Port-based VLAN OverviewAs explained in “VLAN Overview” on page 66, a VLAN consists of a group of ports on an Ethernet switch that f

AT-S88 Management Software User’s Guide69Tagged VLAN OverviewThe second type of VLAN supported by the AT-S88 management software is the tagged VLAN. V

Chapter 8: VLANs70match one of the VLAN IDs assigned to the port, the packet is discarded.Port VLANIdentifierWhen an untagged packet is received on a

AT-S88 Management Software User’s Guide71Creating a Port-Based VLANThis section contains the following procedures: “Creating a Port-Based VLAN”, next

Figures8Figure 51. Firmware Upgrade Page...

Chapter 8: VLANs72A check mark is placed for each port you select, as for example Figure 23.Figure 23. Port-based VLAN Ports Selected5. Or, click Atta

AT-S88 Management Software User’s Guide73selectively click the ones you do not want included.4. Do one of the following: Click OK to save the changes

Chapter 8: VLANs74Creating a Tagged VLANThis section contains the following procedures: “Creating a Tagged VLAN”, next “Modifying a Tagged VLAN” on

AT-S88 Management Software User’s Guide75The page is refreshed to show the ports without any designations and other parameters you need to define to c

Chapter 8: VLANs76Figure 26 shows an example of a tagged VLAN with the ports selected. Figure 26. Tagged VLAN Ports Selected7. To start over, click De

AT-S88 Management Software User’s Guide77 Click twice to assign the port as an untagged member of the VLAN. A “U” is placed on that port Click Detac

Chapter 8: VLANs78Changing a Port’s VLAN ModeThe switch can operate in only one VLAN mode at a time: tagged VLAN mode (802.1Q), or port-based VLAN mod

AT-S88 Management Software User’s Guide797. To permanently save these settings in the configuration file, from the main menu, select Save Configuratio

Chapter 8: VLANs80

81Chapter 9Class of Service (CoS)This chapter contains the following topics: “CoS Overview” on page 82 “Configuring CoS” on page 86 “Mapping CoS Pr

1Table 1. Default Mappings of IEEE 802.1p Priority Levels to Priority Queues ...83Ta

Chapter 9: Class of Service (CoS)82CoS OverviewWhen a port on an Ethernet switch becomes oversubscribed—its egress queues contain more packets than th

AT-S88 Management Software User’s Guide83and the four egress queues of a switch port.For example, if a tagged packet with a priority level of 3 entere

Chapter 9: Class of Service (CoS)84The procedure for changing the default mappings is found in “Mapping CoS Priorities to Egress Queues” on page 88. N

AT-S88 Management Software User’s Guide85With this type of scheduling, a port transmits all packets out of higher priority queues before transmitting

Chapter 9: Class of Service (CoS)86Configuring CoSTo configure CoS, perform the following procedure:1. From the main menu, select Bridge > Default

AT-S88 Management Software User’s Guide878. Click Save.

Chapter 9: Class of Service (CoS)88Mapping CoS Priorities to Egress QueuesThis procedure explains how to change the default mappings of CoS priorities

AT-S88 Management Software User’s Guide89Specifying the Scheduling AlgorithmTo change the scheduling algorithm, perform the following procedure.1. Fro

Chapter 9: Class of Service (CoS)90

91Chapter 10IGMPThis chapter contains the following topics: “IGMP Snooping Overview” on page 92 “Enabling or Disabling IGMP Snooping” on page 94