Allied-telesis AT-GS950/24 Manual de usuario

613-001490 Rev AAT-GS950/24Gigabit Ethernet Smart SwitchAT-GS950/24 Web Users Guide AT-S109 Version 1.1.0 [1.00.043]

Figures10Figure 51. LACP Group Status Page...

Chapter 6: GVRP100Time SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page,

AT-GS950/24 Web Interface User Guide101equation:GARPLeaveAllTimer > (GARPLeaveTimer + 10)NoteTo ensure compatibility between network devices, you

Chapter 6: GVRP102

103Chapter 7Voice VLANThis chapter contains a description of the AT-GS950/24 switch’s Voice VLAN feature and the procedures to create, modify, and del

Chapter 7: Voice VLAN104OverviewThe AT-GS950/24 Voice VLAN feature is specifically designed to maintain high quality, uninterrupted voice traffic thro

AT-GS950/24 Web Interface User Guide105When you are configuring the voice VLAN parameters, you must enter the complete MAC address of at least one of

Chapter 7: Voice VLAN106One or more ports in your voice VLAN must be configured as Static tagged or untagged members. Static VLAN members are permanen

AT-GS950/24 Web Interface User Guide107General GuidelinesHere is a summary of the rules to observe when you create a voice VLAN: One voice VLAN can

Chapter 7: Voice VLAN108ConfigurationPrior to configuring your voice VLAN, you must first configure a tagged VLAN. This VLAN will be used as a basis f

AT-GS950/24 Web Interface User Guide1094. From the Voice VLAN field at the top of the page, select one of the following choices from the pull-down me

AT-GS950/24 Web Interface User Guide11Figure 111. Firmware Upgrade via TFTP Page...

Chapter 7: Voice VLAN110NoteThe voice VLAN Auto-Detection feature can only be enabled on “Not Member” ports of the voice VLAN. Member ports cannot hav

AT-GS950/24 Web Interface User Guide111OUI SettingYou can create and delete Voice VLAN OUI Settings by following the procedures in these sections: 

Chapter 7: Voice VLAN112Modify OUISettingTo modify or delete an OUI, it must be first be deleted and then re-entered by following the procedure in “Cr

113Chapter 8STP and RSTPThis chapter provides background information about the Spanning Tree Protocol (STP) and the Rapid Spanning Tree Protocol (RSTP

Chapter 8: STP and RSTP114OverviewThe performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topo

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide115Bridge Priorityand the RootBridgeThe first task that bridges perform when

Chapter 8: STP and RSTP116Path Costs and Port CostsAfter the root bridge has been selected, the bridges determine if the network contains redundant pa

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide117.ForwardingDelay andTopologyChangesIf there is a change in the network to

Chapter 8: STP and RSTP118The forwarding delay value is adjustable in the AT-S109 Version 1.1.0 Management software. The appropriate value for this p

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide119Figure 36. Point-to-Point PortsA port operates as an edge port when it is

Figures12

Chapter 8: STP and RSTP120If you decide to activate spanning tree on the switch, Allied Telesis recommends RSTP instead of STP even when all of other

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide121Figure 38. STP and VLAN Fragmentation with Untagged PortsYou can avoid th

Chapter 8: STP and RSTP122Figure 39. STP and VLAN Compatibility with Tagged PortsNoteFor information about tagged and untagged ports, refer to Chapter

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide123Basic STP and RSTP ConfigurationTo configure the basic STP and RSTP setti

Chapter 8: STP and RSTP124The RSTP Configuration page allows you to configure basic STP (STP-Compatible) or RSTP protocols as well as to view current

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide125 The following parameters refer to the designated root bridge. You canno

Chapter 8: STP and RSTP126Configure RSTP Port SettingsThis section contains the following topics: “Configure the Basic RSTP Port Settings” “Configur

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide127sent or received on a the port except for BPDU data. A port with a higher

Chapter 8: STP and RSTP128STP Status - Indicates if spanning tree protocol (either RSTP or STP-Compatible) is active or not on the port. Select one of

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide129Figure 42. AT-GS950/24 RSTP Advanced Port Configuration PageThis page dis

13List of TablesTable 1. Bridge Priority Value Increments ... 115Ta

Chapter 8: STP and RSTP130Disabled - The Disabled Port role is assigned if the port is not operational or is excluded from the active topology by mana

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide131Spanning Tree TopologyTo view the current spanning tree topology, perform

Chapter 8: STP and RSTP132

133Chapter 9 Multiple Spanning Tree ProtocolThis chapter provides the procedures for configuring Multiple Spanning Tree Protocol (MSTP). You can find

Chapter 9: Multiple Spanning Tree Protocol134Multiple Spanning Tree ConfigurationHead2 Head3To configure the MSTP settings, perform the following proc

AT-GS950/24 Web Interface User Guide135Global MSTP Status - Set this field to Enable or Disable the MSTP feature on the switch. The Global MSTP Statu

Chapter 9: Multiple Spanning Tree Protocol136bridge spends in the listening and learning states. Its range is 4 - 30 seconds.Maximum Hop Count - The M

AT-GS950/24 Web Interface User Guide137VLAN MappingYou can create, modify and delete MSTP settings with the procedures in the following sections: ”O

Chapter 9: Multiple Spanning Tree Protocol138Modify MSTInstanceIf you wish to modify a MST Instance, you must first delete the instance and then redef

AT-GS950/24 Web Interface User Guide139Port ConfigurationTo configure the MSTP parameters for each of the ports, perform the following procedure:1. F

List of Tables14

Chapter 9: Multiple Spanning Tree Protocol140network topology.ForcedFalse - The port is not connected to a network device in the network topology.Auto

AT-GS950/24 Web Interface User Guide141True - The port cannot process receive/transmit TCN BPDUs.False - The port can process receive/transmit TCN BP

Chapter 9: Multiple Spanning Tree Protocol142Port SettingsTo configure the MSTP port settings, perform the following procedure:1. From the main menu o

AT-GS950/24 Web Interface User Guide1436. If you choose to change the MSTP port settings for other ports, repeat steps 4 and 5.7. From the main menu

Chapter 9: Multiple Spanning Tree Protocol144Topology InformationTo configure the MSTP port settings, perform the following procedure:1. From the main

AT-GS950/24 Web Interface User Guide145Regional Root Priority - The priority of the regional root port.Regional Path Cost - The path cost from the re

Chapter 9: Multiple Spanning Tree Protocol146

147Chapter 10Static Port TrunkingThis chapter contains a description of port trunking and the procedures for creating, modifying, and deleting a stati

Chapter 10: Static Port Trunking148OverviewA port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and another

AT-GS950/24 Web Interface User Guide149Network equipment vendors tend to employ different techniques to implement static trunks. Consequently, a stat

15PrefaceThis guide contains instructions on how to use the AT-S109 Version 1.1.0 Management software to manage and monitor the AT-GS950/24 Gigabit E

Chapter 10: Static Port Trunking150more than one VLAN. The ports of a static trunk can be either untagged or untagged members of the same VLAN. The s

AT-GS950/24 Web Interface User Guide151Create a Port TrunkThis procedure explains how to create a static port trunk.CautionDo not connect the cables

Chapter 10: Static Port Trunking152If the switch does not contain a port trunk, all of the ports on the switch are unchecked. If there is a port trunk

AT-GS950/24 Web Interface User Guide153Modify a Port TrunkThis procedure explains how to change the status of a port trunk and add or remove ports fr

Chapter 10: Static Port Trunking1549. Configure the port trunk on the other switch with the same parameters.10. Connect the Ethernet cables between tr

AT-GS950/24 Web Interface User Guide155Disable a Port TrunkThis procedure explains how to disable a port trunk. CautionBefore you disable or modify a

Chapter 10: Static Port Trunking156

AT-GS950/24 Web Interface User Guide157Chapter 11LACP Port TrunksThis chapter contains overview information about LACP port trunks and the procedures

Chapter 11: LACP Port Trunks158OverviewLACP (Link Aggregation Control Protocol) port trunks perform the same function as static trunks. They increase

AT-GS950/24 Web Interface User Guide159System PriorityIt is possible for two devices interconnected by an aggregate trunk to encounter a conflict whe

Preface16Where to Find Web-based Product InformationThe product guides are available for all Allied Telesis products in portable document format (PDF)

Chapter 11: LACP Port Trunks160Two conditions must be met for a port in an aggregate trunk to function in the standby mode. First, the number of ports

AT-GS950/24 Web Interface User Guide161General GuidelinesThe following guidelines apply when creating aggregators: LACP must be activated on both th

Chapter 11: LACP Port Trunks162the maximum number for the AT-GS950/24 switch, you should assign the other vendor’s device a higher system LACP priorit

AT-GS950/24 Web Interface User Guide163Group StatusTo display the LACP Group Status, perform the following procedure:1. Select the Bridge folder.The

Chapter 11: LACP Port Trunks164The System Priority is a preassigned value that you cannot alter. This value applies to the switch. See “System Priorit

AT-GS950/24 Web Interface User Guide165Figure 53. LACP Group Status Page with Three Cables ConnectedYou can now see that each port has been grouped u

Chapter 11: LACP Port Trunks166Port Priority ConfigurationTo select a priority for an LACP port, perform the following procedure:1. Select the Bridge

167Chapter 12Quality of Service (CoS)This chapter contains the following topics: “Overview” on page 168 “Associate Ports to CoS Priorities” on page

Chapter 12: Quality of Service (CoS)168OverviewWhen a port on an Ethernet switch becomes oversubscribed, its egress queues contain more packets than t

AT-GS950/24 Web Interface User Guide169Egress Queue vsPacket PriorityMappingEach switch port has four egress queues, labeled Q0, Q1, Q2, and Q3. Q0 i

AT-GS950/24 Web Interface User Guide17Contacting Allied Telesis This section provides Allied Telesis contact information for technical support as wel

Chapter 12: Quality of Service (CoS)170The procedure for changing the default mappings is found in “Associate Ports to CoS Priorities” on page 175. No

AT-GS950/24 Web Interface User Guide171never be transmitted from the switch because the algorithm might never have time to process the packets waitin

Chapter 12: Quality of Service (CoS)172Weighted Round Robin Priority SchedulingThe weighted round robin (WRR) scheduling method functions as its name

AT-GS950/24 Web Interface User Guide173Mapping CoS Priorities to Egress QueuesBefore mapping the CoS priorities and the egress queues, you must disab

Chapter 12: Quality of Service (CoS)1744. For each Traffic Class whose queue you want to change, click on the Queue (0, 1, 2, or 3) radio button that

AT-GS950/24 Web Interface User Guide175Associate Ports to CoS PrioritiesThe Port Priority values is assigned to an untagged frame at ingress for inte

Chapter 12: Quality of Service (CoS)176Associate DSCP Classes to Egress QueuesIf you choose to use the DSCP tags in your Access Control policy configu

AT-GS950/24 Web Interface User Guide177Queue Scheduling AlgorithmTo change the scheduling algorithm for the egress queues, perform the following proc

Chapter 12: Quality of Service (CoS)178

179Chapter 13Access Control ConfigurationAccess Control configuration allows you to control different aspects of the Ethernet traffic as it enters the

Preface18

Chapter 13: Access Control Configuration180ClassifierThe Create Classifier page allows you to specify packet settings for filtering Ethernet traffic.

AT-GS950/24 Web Interface User Guide1813. Enter a number in the Classifier Index field.The Classifier Index must be a unique number within the range

Chapter 13: Access Control Configuration1825. Click ADD.The classifier entry is displayed in the table at the bottom of the page. If you do not see yo

AT-GS950/24 Web Interface User Guide1833. From the Create Classifier page, identify which classifier that want to modify and click the modify link in

Chapter 13: Access Control Configuration1843. From the Create Classifier page, identify which classifier table entry that want to delete and click the

AT-GS950/24 Web Interface User Guide185Profile ActionThe Create Profile Action page defines the priority parameters for policing on DSCP (layer 3) an

Chapter 13: Access Control Configuration1863. Enter a number in the Profile Action Index field.The Index must be a unique number ranging from 1 to 72.

AT-GS950/24 Web Interface User Guide1872. From the Access Control Config folder, select Profile Action.An example of the Create Profile Action page w

Chapter 13: Access Control Configuration1884. Click on the OK button.The profile action entry is deleted from the profile action table.5. From the mai

AT-GS950/24 Web Interface User Guide189In-Profile ActionThe Create In-Profile Action page allows you to specify a Profile Action’s Permit or Deny pri

19Chapter 1Starting a Web Browser SessionThis chapter contains the procedures for starting, using, and quitting a web browser management session on th

Chapter 13: Access Control Configuration1904. Enter a number in the Profile Action ID field ranging from 0 to 72. This field is mandatory.NoteThis fie

AT-GS950/24 Web Interface User Guide191Modify In-ProfileActionTo modify a In-Profile action entry, perform the following procedure:NoteYou must first

Chapter 13: Access Control Configuration192Delete In-ProfileActionTo delete a In-Profile action entry, perform the following procedure:1. From the mai

AT-GS950/24 Web Interface User Guide193Out-Profile ActionThe Create Out-Profile Action page allows you to specify a Profile Action’s Permit or Deny p

Chapter 13: Access Control Configuration1944. Enter a number in the Profile Action ID field ranging from 0 to 72. This field is mandatory.NoteThis fie

AT-GS950/24 Web Interface User Guide195Modify Out-Profile ActionTo modify a Out-Profile action entry, perform the following procedure:NoteBefore you

Chapter 13: Access Control Configuration196Delete Out-Profile ActionTo delete a Out-Profile action entry, perform the following procedure:1. From the

AT-GS950/24 Web Interface User Guide197Port ListThe Create Port List page allows you to specify a list of ports that will be used as part of the poli

Chapter 13: Access Control Configuration1985. Click Add.The Out-Profile Action entry is added to the status table. If the Page field located below the

AT-GS950/24 Web Interface User Guide199Figure 73. Modify Port List Page4. Change the parameters as required.NoteSee “Create Port List” on page 197 fo

Copyright © 2011 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Chapter 1: Starting a Web Browser Session20Establishing a Remote Connection to the Web Browser InterfaceThe AT-GS950/24 switch is shipped with a pre-a

Chapter 13: Access Control Configuration200PolicyThe Create Policy page allows you to specify the filtering criteria for one policy. Before creating a

AT-GS950/24 Web Interface User Guide2013. Enter a number in the Policy Index field.The Policy Index is a unique number within the range of 1 - 65535

Chapter 13: Access Control Configuration202Figure 75. Example of Policy Entry6. From the main menu on the left side of the page, select Save Configura

AT-GS950/24 Web Interface User Guide203Figure 76. Modify Policy Page4. Change the parameters as required.NoteSee “Create Policy” on page 200 for the

Chapter 13: Access Control Configuration2042. From the Access Control Config folder, select Policy.An example of the Create Policy page with a Policy

AT-GS950/24 Web Interface User Guide205Policy SequenceThe Policy Sequence page displays the order that policies are applied to each port. You can ord

Chapter 13: Access Control Configuration206

207Chapter 14Storm ControlThis chapter contains a description and configuration procedures for the Storm Control (bandwidth) feature. The following to

Chapter 14: Storm Control208OverviewThe features available in the AT-S109 Version 1.1.0 Management software allow you to limit Ethernet traffic withi

AT-GS950/24 Web Interface User Guide209Ingress RateLimitingThe Ingress Rate Limiting feature restricts the traffic to a pre-configured data rate that

AT-GS950/24 Web Interface User Guide213. Enter the AT-S109 Version 1.1.0 management login user name and password. The default user name is “manager”

Chapter 14: Storm Control210ConfigurationThis procedure explains how to set DLF, broadcast, multicast, and threshold levels for each port on the AT-GS

AT-GS950/24 Web Interface User Guide211NoteFor more information, see the Broadcast setting definition in“Overview” on page 208.7. Click Apply.8. To e

Chapter 14: Storm Control212Ingress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Ingress Rate Limiting on each port

AT-GS950/24 Web Interface User Guide2137. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save you

Chapter 14: Storm Control214Egress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Egress Rate Limiting on each port o

215Chapter 15MAC Address TableThis chapter contains a description of the static multicast MAC address feature and the procedure for configuring it. Th

Chapter 15: MAC Address Table216OverviewThe AT-GS950/24 switch has a MAC address table with a storage capacity of up to 8,000 entries. The table store

AT-GS950/24 Web Interface User Guide217allows the multicast stream to be forwarded immediately to those predefined ports entered in the MAC table wit

Chapter 15: MAC Address Table218Static Unicast MAC Address ConfigurationThis procedure explains how to set the static multicast feature for each port

AT-GS950/24 Web Interface User Guide219NoteAn error message is generated when you enter a VLAN ID or VLAN Index which is not been defined or when you

Chapter 1: Starting a Web Browser Session22 RMON Voice VLAN Security LLDP Statistics Chart Tools Save Configuration5. To see the front panel of

Chapter 15: MAC Address Table220Modify Static Unicast AddressTo modify the port assignment of a unicast MAC address in the MAC address table, perform

AT-GS950/24 Web Interface User Guide221Delete Static Unicast AddressTo delete a unicast MAC address from the MAC address table, perform the following

Chapter 15: MAC Address Table222Static Multicast Address ConfigurationThis procedure explains how to set the static multicast feature for each port on

AT-GS950/24 Web Interface User Guide2234. In the Group MAC Address field, enter a multicast MAC address.The range is from 01:00:5E:00:01:00 to 01:00:

Chapter 15: MAC Address Table224Modify Static Multicast AddressTo modify the port assignment of a multicast MAC address in the MAC address table, perf

AT-GS950/24 Web Interface User Guide225Delete Static Multicast AddressTo delete a multicast MAC address from the MAC address table, perform the follo

Chapter 15: MAC Address Table226

227Chapter 16DHCP SnoopingThis chapter contains a description of the AT-GS950/24 switch’s DHCP Snooping feature and the procedures for creating, modif

Chapter 16: DHCP Snooping228OverviewThe DHCP Snooping feature provides security by inspecting ingress packets for the correct IP and MAC address infor

AT-GS950/24 Web Interface User Guide229first DHCPOFFER packet from the server that it receives. This packet contains the DHCP server’s IP address and

AT-GS950/24 Web Interface User Guide23Web Browser ToolsYou can use the web browser tools to move around the management pages. Selecting Back on your

Chapter 16: DHCP Snooping230General GuidelinesHere is a summary of the rules to observe when you configure DHCP Snooping: A trusted port is connect t

AT-GS950/24 Web Interface User Guide231General ConfigurationThe following procedure describes how to configure the DHCP Snooping feature on the AT-GS

Chapter 16: DHCP Snooping232through the switch without regard to the IP and MAC Address information in the packet header.6. From the Backup Database f

AT-GS950/24 Web Interface User Guide233VLAN SettingYou can create and delete DHCP Snooping VLAN settings by following the procedures in these section

Chapter 16: DHCP Snooping234Modify VLANSettingTo modify or delete a VLAN ID, it must first be deleted and then re-entered by following the procedure o

AT-GS950/24 Web Interface User Guide235Trusted and Untrusted Port ConfigurationThe following procedure describes how to configure the DHCP Snooping t

Chapter 16: DHCP Snooping236Binding DatabaseThe Binding Database displays learned and statically assigned MAC Address and IP Address information for e

AT-GS950/24 Web Interface User Guide237Type - Because the IP Address being entered is static, you must select Static.Lease Time - Enter the time that

Chapter 16: DHCP Snooping238

239Chapter 17IGMP SnoopingThis chapter contains a description of the IGMP Snooping procedure as well as procedures for working with IGMP Snooping in t

Chapter 1: Starting a Web Browser Session24Quitting a Web Browser Management SessionTo exit a web browser management session, close the web browser.

Chapter 17: IGMP Snooping240OverviewIGMP enables IPv4 routers to create lists of nodes that are members of multicast groups. (A group of end nodes tha

AT-GS950/24 Web Interface User Guide241Without IGMP snooping, a switch floods multicast packets from all of its ports, except the port on which it re

Chapter 17: IGMP Snooping242IGMP Snooping ConfigurationThis procedure explains how to set IGMP snooping on the switch and set the IGMP Snooping (V1) a

AT-GS950/24 Web Interface User Guide2436. The IGMP Snooping Page is updated with active Multicast Group address(s). See Figure 88.NoteThe Multicast G

Chapter 17: IGMP Snooping244

245Chapter 18SecurityThis Chapter contains information about the Port-based security features and the procedures for setting this feature. This chapte

Chapter 18: Security246Port Access ControlThis section contains information and configuration procedures for the Port-based Access Control. This secti

AT-GS950/24 Web Interface User Guide247Port AccessControlConfigurationTo configure port-based access control, perform the following procedure:1. Sele

Chapter 18: Security248Port - This parameter specifies the port being configured for authentication.Authentication Mode - This parameter specifies the

AT-GS950/24 Web Interface User Guide249Supplicant Mode - This parameter specifies if one or more supplicants can be authenticated on a port.Single -

25Chapter 2Basic Switch ConfigurationThis chapter provides procedures to configuring basic system parameters for the AT-GS950/24 switch and contains i

Chapter 18: Security250Maximum Request - Specifies the maximum number of times authenticator ports transmit EAP Request packets to clients before timi

AT-GS950/24 Web Interface User Guide251RADIUS ClientYou can use the RADIUS client with 802.1x port-based access control to authenticate which packets

Chapter 18: Security252 You need to specify the user name and password combinations when configuring the RADIUS server software on the authentication

AT-GS950/24 Web Interface User Guide2537. Click Apply to save your changes.8. From the main menu on the left side of the page, select Save Configurat

Chapter 18: Security254Dial-in User - Local AuthenticationDial-in User feature provides the local authentication server for port security when a remot

AT-GS950/24 Web Interface User Guide255Figure 91. Dial-In User Page3. In the User Name field, type a name for the user.4. In the Password field, type

Chapter 18: Security256Delete a Dial-in UserTo delete a dial-in user, perform the following procedure:1. From the main menu on the left side of the pa

AT-GS950/24 Web Interface User Guide257Destination MAC FilterThis chapter contains an explanation of the Destination MAC Filter feature as well a pro

Chapter 18: Security258Figure 92. Destination MAC Filter Page3. To enter the MAC address that you want filtered, enter the MAC address into the MAC Ad

259Chapter 19LLDPLink Layer Discovery Protocol (LLDP) allows Ethernet network devices such as switches and routers to receive and/or transmit device-r

Chapter 2: Basic Switch Configuration26Configuration of IP Address, Subnet Mask and Gateway AddressThis procedure explains how to change the IP addres

Chapter 19: LLDP260OverviewThe data sent and received by LLDP are useful for many reasons. The switch can discover other devices directly connected to

AT-GS950/24 Web Interface User Guide261Global ConfigurationPerform the following procedures to configure the Global parameters for LLDP: “Enable/Dis

Chapter 19: LLDP2623. From the LLDP parameter, select one of the following radio button choices:Enable - The LLDP feature is active. NoteThe LLDP feat

AT-GS950/24 Web Interface User Guide263For more information, see “System Management Information” on page 38System Description - This parameter descri

Chapter 19: LLDP264Neighbors InformationTo view the information received from the neighboring network devices, perform the following procedure:1. From

265Chapter 20Simple Network Management Protocol SNMPv1 and v2cThis chapter contains a description of SNMPv1 and SMNMPv2c and the procedures for config

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c266SNMPv1 and SNMPv2c OverviewYou can manage a switch by viewing and configuring the mana

AT-GS950/24 Web Interface User Guide267Trap Receiver AttributesA trap is a message sent by the agent to one or more managers to indicate the occurren

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c268Activate SNMP InterfaceThe SNMP interface is activated by default. If you want to de-a

AT-GS950/24 Web Interface User Guide269SNMPv1/v2 User and Group NamesA v1/v2 User Name and Group Name definition is the basis for creating SNMPv1/v2

AT-GS950/24 Web Interface User Guide27System Default Gateway - Displays the default gateway of the switch. To change the default gateway, enter a new

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c270NoteIf you choose to use the default User and Group Names (ReadOnly and ReadWrite) tha

AT-GS950/24 Web Interface User Guide271SNMPv1/v2 Community StringsA community string has attributes for controlling who can use the string and what t

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c2725. Click Add.The new Community Name and User Name are displayed.6. From the main menu

AT-GS950/24 Web Interface User Guide273SNMP TrapsA Host IP address is used to specify a management device that needs to receive SNMP traps sent by th

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c2746. Click Add.The new host is added to the table.7. From the main menu on the left side

275Chapter 21Simple Network Management Protocol SNMPv3This chapter contains a description of SNMPv3 and the procedures for configuring this protocol.

Chapter 21: Simple Network Management Protocol SNMPv3276SNMPv3 OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c protocol implemen

AT-GS950/24 Web Interface User Guide277In addition, you have the option of assigning no user authentication. In this case, no authentication is perfo

Chapter 21: Simple Network Management Protocol SNMPv3278Figure 98. MIB TreeThe AT-S109 Version 1.1.0 Management software supports the MIB tree, start

AT-GS950/24 Web Interface User Guide2794. You must enter information in the Community table based on a pre-defined User Name. NoteThe Community Strin

Chapter 2: Basic Switch Configuration28IP Access List ConfigurationWhen the IP Access List feature is enabled, remote access to the AT-S109 Version 1.

Chapter 21: Simple Network Management Protocol SNMPv3280SNMPv3 User and Group NamesA v3 User Name and Group Name definition is the basis for all the o

AT-GS950/24 Web Interface User Guide2819. Select one of the following choices for the Priv-Protocol field:DES - The DES encryption scrambles the SNMP

Chapter 21: Simple Network Management Protocol SNMPv3282SNMPv3 View NamesThe SNMPv3 View names are defined in the SNMP Group Access table and are base

AT-GS950/24 Web Interface User Guide2835. Enter the Write View Name.This name is an optional field. It can be up to 31 characters in length.6. Enter

Chapter 21: Simple Network Management Protocol SNMPv32844. From the main menu on the left side of the page, select Save Configuration to Flash to perm

AT-GS950/24 Web Interface User Guide285View Table The SNMP v3 View table specifies the MIB object access criteria for each View Name. If the View Nam

Chapter 21: Simple Network Management Protocol SNMPv32865. Enter “1” for the OID Mask.6. Enter the View Type. This can be one of two choices:Included

AT-GS950/24 Web Interface User Guide287SNMPv3 TrapsThe creation, modification and deletion of traps for SNMPv3 is identical to the procedure for SNMP

Chapter 21: Simple Network Management Protocol SNMPv3288

289Chapter 22RMONThis chapter contains the following sections: “Overview” on page 290 “Enable and Disable RMON” on page 291 “Port Statistics” on pa

AT-GS950/24 Web Interface User Guide29NoteYou can add up to 10 IP address to the IP Access List table.

Chapter 22: RMON290OverviewThe RMON (Remote MONitoring) MIB is used with SNMP applications to monitor the operations of network devices. The switch su

AT-GS950/24 Web Interface User Guide291Enable and Disable RMONYou can now use your SNMP Network Management System (NMS) software and the RMON section

Chapter 22: RMON292Port StatisticsYou can remotely view individual port statistics with RMON by using your SNMP NMS software and the RMON portion of t

AT-GS950/24 Web Interface User Guide293HistoriesRMON histories are snapshots of port statistics. They are taken by the switch at predefined intervals

Chapter 22: RMON294Interval - This parameter specifies how frequently the switch takes snapshots of the port’s statistics. The range is 1 to 3600 seco

AT-GS950/24 Web Interface User Guide295EventsAn event specifies the action of the switch when the ingress packet activity on a port crosses a statist

Chapter 22: RMON2964. Once you have configured the parameters, click Add.Your entry will appear in the table at the bottom of the page. 5. If you want

AT-GS950/24 Web Interface User Guide297AlarmsRMON alarms are used to generate alert messages when packet activity on designated ports rises above or

Chapter 22: RMON2982. From the RMON folder, select Alarm.The RMON Alarm Configuration Page is displayed. See Figure 106.Figure 106. RMON Alarm Configu

AT-GS950/24 Web Interface User Guide299Rising Event Index - This parameter specifies the event index for the rising threshold. Its range is 1 to 6553

3ContentsList of Figures ...

Chapter 2: Basic Switch Configuration305. From the IP Restriction Status field, select one of the following choices from the pull-down menu:Enable - T

Chapter 22: RMON300

301Chapter 23Network StatisticsThe sections in this chapter explain how to display traffic, error, and history statistics about the network traffic on

Chapter 23: Network Statistics302OverviewStatistics provide important information for troubleshooting switch problems at the port level. The AT-S109 V

AT-GS950/24 Web Interface User Guide303Traffic Comparison StatisticsThe Traffic Comparison statistics chart allows you to display a specified traffic

Chapter 23: Network Statistics3043. To view traffic statistics, click on the arrow next to “Statistics” and select one of the options in Table 6.4. To

AT-GS950/24 Web Interface User Guide3055. To select the color of the traffic comparison graph, select Color. Choose one of the following colors:Green

Chapter 23: Network Statistics306Error Group StatisticsThe Error Group chart displays the discard and error counts for a specified port. To display er

AT-GS950/24 Web Interface User Guide3074. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following

Chapter 23: Network Statistics308Historical Status ChartsThe Historical Status chart allows you to select from 12 statistics to view for a selection o

AT-GS950/24 Web Interface User Guide309Table 7 Historical Status OptionsOption DefinitionInbound Octet Rate (Bytes) Measures the rate of inbound oct

AT-GS950/24 Web Interface User Guide31System TimeThe procedures in this section describe how to configure the system time by manually entering the ti

Chapter 23: Network Statistics3104. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following options

311Chapter 24Management Software UpdatesThis chapter explains the methods for upgrading the AT-S109 Version 1.1.0 Management software on the switch a

Chapter 24: Management Software Updates312OverviewYou can use the Management Software Updates features to upgrade the AT-S109 Version 1.1.0 Managemen

AT-GS950/24 Web Interface User Guide313Upgrade Firmware Image via HTTPThis section describes how to upgrade an firmware image of the AT-S109 Version

Chapter 24: Management Software Updates3142. From the Firmware Upgrade folder, select via HTTP.The Firmware Upgrade via HTTP Page is displayed. See Fi

AT-GS950/24 Web Interface User Guide315Upgrade Firmware Image via TFTPThis section describes how to upgrade an firmware image of the AT-S109 Version

Chapter 24: Management Software Updates316Figure 111. Firmware Upgrade via TFTP PageThe Image/Version Date shows the current version and date of softw

AT-GS950/24 Web Interface User Guide317Download or Upload a Configuration File via HTTPThis section describes how to download or upload a configurati

Chapter 24: Management Software Updates318ConfigurationFile UploadTo upload an AT-S109 Version 1.1.0 configuration file onto the switch, perform the

AT-GS950/24 Web Interface User Guide319NoteIf the IP address contained in the new configuration file is different than the one you currently have in

Chapter 2: Basic Switch Configuration323. Use the pull down menu to set the Clock Mode parameter to Local time.4. In the Local Time Settings section,

Chapter 24: Management Software Updates320Download or Upload a Configuration File via TFTPThis section describes how to download or upload a configura

AT-GS950/24 Web Interface User Guide321ConfigurationFile DownloadTo download an AT-S109 Version 1.1.0 configuration file onto the switch, perform th

Chapter 24: Management Software Updates322

323Chapter 25Loopback ProtectionThis chapter explains how to configure the Loopback Protection feature for specific ports on the AT-GS950/24 switch. I

Chapter 25: Loopback Protection324ConfigurationTo configure the Loopback Detection feature, perform the following procedure:1. From the main menu on t

AT-GS950/24 Web Interface User Guide3254. Under the Loopback Detection Global Settings, configure the following parameters:Interval - This parameter

Chapter 25: Loopback Protection326StatusThe status of the Loopback Detection is given in the Loop Status column of the table at the bottom of the Loop

327Chapter 26Cable DiagnosticsThis chapter provides procedures to run cable diagnostics on the cables connected to the switch ports. If a port is sele

Chapter 26: Cable Diagnostics328Test Results - Displays the diagnostic results for each pair in the cable. One of the following cable status parameter

329Appendix AMSTP OverviewThis appendix provides background information about the Multiple Spanning Tree Protocol (MSTP) and includes the following se

AT-GS950/24 Web Interface User Guide33Setting DaylightSavingsParametersIf you want to configure the switch for daylight savings time, perform the fol

Appendix A: MSTP Overview330OverviewIn the AT-GS950/24, STP and RSTP are referred to as single-instance spanning trees that search for physical loops

AT-GS950/24 Web Interface User Guide331NoteDo not activate MSTP on the AT-GS950/24 switch without first familiarizing yourself with the following con

Appendix A: MSTP Overview332Multiple Spanning Tree Instance (MSTI)The individual spanning trees in MSTP are referred to as Multiple Spanning Tree Inst

AT-GS950/24 Web Interface User Guide333Figure 119 on page 333 illustrates the same two AT-GS950/24 switches and the same two virtual LANs. But in thi

Appendix A: MSTP Overview334Figure 120. Multiple VLANs in a MSTIIn this example, because an MSTI contains more than one VLAN, the links between the VL

AT-GS950/24 Web Interface User Guide335General GuidelinesHere are the guidelines for MSTIs: The AT-GS950/24 switch can support up to 31 spanning tre

Appendix A: MSTP Overview336VLAN and MSTI AssociationsPart of the task to configuring MSTP involves assigning VLANs to spanning tree instances. The ma

AT-GS950/24 Web Interface User Guide337Ports in Multiple MSTIsA port can be a member of more than one MSTI at a time if it is a tagged member of one

Appendix A: MSTP Overview338Multiple Spanning Tree RegionsAnother important concept of MSTP is regions. A MSTP region is defined as a group of bridges

AT-GS950/24 Web Interface User Guide339Figure 121. Multiple Spanning Tree RegionThe AT-GS950/24 switch determines regional boundaries by examining th

Chapter 2: Basic Switch Configuration34DHCP and ATI Web Discovery ToolThe AT-GS950/24 Gigabit Ethernet Smart switch is managed through a web browser i

Appendix A: MSTP Overview340Each MSTI functions as an independent spanning tree within a region. Consequently, each MSTI must have a root bridge to lo

AT-GS950/24 Web Interface User Guide341 Each MSTI must have a regional root for locating loops in the instance. MSTIs can share the same regional ro

Appendix A: MSTP Overview342Common andInternalSpanning Tree(CIST)MSTP has a default spanning tree instance called the Common and Internal Spanning Tre

AT-GS950/24 Web Interface User Guide343Associating VLANs to MSTIsWhen you are using Multiple Spanning Tree, Allied Telesis recommends that you assign

Appendix A: MSTP Overview344Figure 123. CIST and VLAN Guideline - Example 2When port 3 on switch B receives a BPDU, the switch notes the port sending

AT-GS950/24 Web Interface User Guide345VLANs Across Different RegionsSpecial consideration needs to be taken into account when you connect different

Appendix A: MSTP Overview346Another approach is to configure multiple regions in a subnet and group the VLANs that need to span two or more regions in

AT-GS950/24 Web Interface User Guide347Summary of GuidelinesCareful planning is essential for the successful implementation of MSTP. This section rev

Appendix A: MSTP Overview348

349Appendix AAT-GS950/24 Default ParametersTable 9 lists the factory default settings for the AT-S109 Version 1.1.0 Management software on the AT-GS9

AT-GS950/24 Web Interface User Guide35DHCP Client ConfigurationThis procedure explains how to activate and deactivate the DHCP client on the AT-GS950

Appendix A: AT-GS950/24 Default Parameters350IP address none IPv4 address in xxx.xxx.xxx.xxx hex format; except 127.0.0.1IP address entries 10 entries

AT-GS950/24 Web Interface User Guide351From (Month:Day:HH:MM)January:01:00:00-To (Month:Day:HH:MM)January:01:00:00-DST Offset 1 hr-System/SSL Setting

Appendix A: AT-GS950/24 Default Parameters352Port All, 1 - 24-Trunk--Type 1000TX-Link StatusDown Up/DownAdmin StatusEnabled Enabled/DisabledMode Auto

AT-GS950/24 Web Interface User Guide353Maximum MST Instances31 1 - 31Bridge Priority32768 0 - 61440Region NameMAC Address of AT-GS950/24 switch-Regio

Appendix A: AT-GS950/24 Default Parameters354Hello Time 2 1 - 9 secondsAutoEdge Status TrueTrue/FalseRestricted Role FalseTrue/FalseRestricted TCN Fa

AT-GS950/24 Web Interface User Guide355PortAll, 1 - 24-Loopback Detection StateDisabled Enabled/DisabledBridge/Static Unicast802.1Q VLAN - ID 1 - 400

Appendix A: AT-GS950/24 Default Parameters356Storm Control Multicast Control StatusDisabled Enabled/DisabledStorm Control ThresholdLow High (2500 pps)

AT-GS950/24 Web Interface User Guide357Private VLAN Source Port1 1 -24 ports1 - 8 portsPrivate VLAN Forwarding Ports1 -24 ports1 - 8 ports1 -24 ports

Appendix A: AT-GS950/24 Default Parameters358Notify View NameReadWrite-Security Modelv1 v1/v2c/v3Security LevelNoAuthNoPriv NoAuthNoPriv/AuthNoPriv/Au

AT-GS950/24 Web Interface User Guide359Destination MAC Addressnonexx:xx:xx:xx:xx:xx hex formatDestination MAC Mask Lengthnone1 - 48VLAN ID none 0 - 4

Chapter 2: Basic Switch Configuration36NoteThe ATI Web Discovery Tool is available for download on the AT-GS950/24 product page at alliedtelesis.com.6

Appendix A: AT-GS950/24 Default Parameters360Out-Profile Action Burst Size16K 16K/32K/64KPort List Index none 1 - 65535Port List none Any combination

AT-GS950/24 Web Interface User Guide361Alarms Rising Thresholdnone1 to 2147483647 secondsAlarms Falling Thresholdnone1 to 2147483647 secondsAlarms Ri

Appendix A: AT-GS950/24 Default Parameters362Port Access Control Authentication MethodLocal Local/RadiusDial-In User Namenone 1 - 23 charactersDial-In

AT-GS950/24 Web Interface User Guide363General Setting DHCP Option 82 InsertionDisabledEnabled/DisabledVLAN Settings VLAN IDnone1 - 4000Trusted Inter

Appendix A: AT-GS950/24 Default Parameters364Traffic Comparison Auto Refresh5 seconds 5/10/15/30 secondsTraffic Comparison ColorGreen 12 colorsError G

AT-GS950/24 Web Interface User Guide365Configuration File Upload/Download via TFTPTFTP Server IP0.0.0.0 IPv4 address in xxx.xxx.xxx.xxx hex format; e

Appendix A: AT-GS950/24 Default Parameters366

AT-GS950/24 Web Interface User Guide37DHCP Auto ConfigurationIf you need to automatically update the switch’s configuration files via a remote server

Chapter 2: Basic Switch Configuration38System Management InformationThis section explains how to assign a name, location, and contact information for

AT-GS950/24 Web Interface User Guide39System Name - Specifies a name for the switch, for example, Sales. The name is optional and may contain up to 1

Contents4SSL Settings...

Chapter 2: Basic Switch Configuration40User Name and Password ConfigurationPassword protection is always enabled for access to the AT-S109 Version 1.1

AT-GS950/24 Web Interface User Guide414. To add a password that corresponds to the user name entered in step 3, enter a password of up to 12 alphanum

Chapter 2: Basic Switch Configuration42Delete User Nameand PasswordTo delete a user name that you have previously added, perform the following procedu

AT-GS950/24 Web Interface User Guide43User Interface ConfigurationThis procedure explains how to enable and disable the user interfaces on the switch

Chapter 2: Basic Switch Configuration44NoteSee Chapter 20, “Simple Network Management Protocol SNMPv1 and v2c” on page 265 and Chapter 21, “Simple Net

AT-GS950/24 Web Interface User Guide45System Information DisplayThe Switch Information page is initially displayed when you first log into the AT-GS9

Chapter 2: Basic Switch Configuration46Administration Information Section:Switch Name - This parameter displays the name assigned to the switch. To as

AT-GS950/24 Web Interface User Guide47Switch RebootYou can reboot the AT-GS950/24 switch by either pressing the front panel eco-friendly switch betwe

Chapter 2: Basic Switch Configuration48CautionSince you define this password as part of the process of disabling this function, Allied Telesis has no

AT-GS950/24 Web Interface User Guide49Figure 14. Factory Default Reset/Reboot Page3. Go to the lower part of the page to the Reboot section.4. In the

AT-GS950/24 Web Interface User Guide5Chapter 9: Multiple Spanning Tree Protocol ...

Chapter 2: Basic Switch Configuration50To return the AT-S109 Version 1.1.0 Management software to the default settings, perform the following procedu

AT-GS950/24 Web Interface User Guide51Disabling FactoryDefault ResetFeatureThe factory default reset feature allows anyone to reset the switch to the

Chapter 2: Basic Switch Configuration52responsible for keeping the password in a safe place. If it is lost, Allied Telesis does not have a way to help

AT-GS950/24 Web Interface User Guide53NoteIf the Factory Default Reset field is already set to Enable, you do not need to continue with this procedur

Chapter 2: Basic Switch Configuration54Pinging a Remote SystemThis procedure instructs the AT-GS950/24 switch to ping a node on your network. This pro

AT-GS950/24 Web Interface User Guide555. To view the ping results, click Show Ping Results.A sample Ping Test Results Page is displayed. See Figure 1

Chapter 2: Basic Switch Configuration56SSL SettingsThe AT-GS950/24 switch has a web browser server for remote management of the unit with a web browse

AT-GS950/24 Web Interface User Guide574. Click Apply.The SSL setting that you have selected is now active. 5. From the main menu on the left side of

Chapter 2: Basic Switch Configuration58System Log ConfigurationThe System log is designed to monitor the operation the AT-GS950/24 switch by recording

AT-GS950/24 Web Interface User Guide593. From the Syslog Status field, select one of the following choices from the pull-down menu:Enable - The Syste

Contents6Port List ...

Chapter 2: Basic Switch Configuration60

61Chapter 3Port ConfigurationThis chapter provides a description of the physical characteristics of the ports and a procedure that explains how to vie

Chapter 3: Port Configuration62OverviewThis chapter describes how to display and modify the physical characteristics of an AT-GS950/24 switch. You can

AT-GS950/24 Web Interface User Guide63Display and Configure PortsThis procedure explains how to configure the ports on the AT-GS950/24 switch using t

Chapter 3: Port Configuration64is 1000TX for 10/100/1000Base-T twisted-pair ports (1 through 20, 21R through 24R) and 100FX or 1000TX for the SFP port

AT-GS950/24 Web Interface User Guide65NoteWhen QoS is enabled on a port, the Jumbo frame parameter can not be enabled. To enable or disable QoS, see

Chapter 3: Port Configuration66Mode -This parameter i Indicates the speed and duplex mode settings for the port. You can use this parameter to set the

AT-GS950/24 Web Interface User Guide67Ignore - This parameter indicates that the All setting does not apply to the Flow Control field. In other words

Chapter 3: Port Configuration68

69Chapter 4Port MirroringThis chapter describes the Port Mirroring feature and the procedure for setting up port mirroring. Port mirroring allows you

AT-GS950/24 Web Interface User Guide7Dial-in User - Local Authentication...

Chapter 4: Port Mirroring70OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic received and transmitted on one or more

AT-GS950/24 Web Interface User Guide71Port Mirroring ConfigurationTo configure Port Mirroring, perform the following procedure:1. Select the Bridge f

Chapter 4: Port Mirroring727. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save your changes.

AT-GS950/24 Web Interface User Guide73Disable Port MirroringTo disable Port Mirroring, perform the following procedure:1. Select the Bridge folder.Th

Chapter 4: Port Mirroring74

75Chapter 5Virtual LANsThis chapter contains a description of Virtual Local Area Networks (VLANs) and the procedures for creating, modifying, and dele

Chapter 5: Virtual LANs76VLAN OverviewA virtual LAN or VLAN is a group of ports on an Ethernet switch that form a logical Ethernet segment via the AT-

AT-GS950/24 Web Interface User Guide77With VLANS, you can reconfigure the LAN segment assignment of an end node connected to the AT-GS950/24 switch’s

Chapter 5: Virtual LANs78Each port of a port-based VLAN can belong to as many VLANs as needed. Therefore, traffic can be forwarded to the members of t

AT-GS950/24 Web Interface User Guide79VLAN NameTo create a tagged VLAN, you must give it a unique name. This name can reflect the function of the net

Contents8Chapter 22: RMON ...

Chapter 5: Virtual LANs80General Rules for Creating a Tagged VLANHere is a summary of the rules to observe when you create a tagged VLAN: Assign a un

AT-GS950/24 Web Interface User Guide81Assign Ports to a VLAN ModeThe procedure described in this section allows you to assign ports to tagged or a po

Chapter 5: Virtual LANs825. Click Apply.6. If you want to restore the port assignment before saving the configuration, click Restore.NoteOnce the VLAN

AT-GS950/24 Web Interface User Guide83Tagged VLAN ConfigurationOn a port, the tag information within a frame is examined when it is received to deter

Chapter 5: Virtual LANs844. To assign a VLAN ID, type a VLAN ID in the VLAN ID field.The range for this field is 2 to 4,000. You can create a maximum

AT-GS950/24 Web Interface User Guide852. From the Bridge folder, select VLAN.The VLAN folder expands.3. From the VLAN folder, select Tagged VLAN.An e

Chapter 5: Virtual LANs866. To change the VLAN Name, type a new VLAN Name in the VLAN Name field.For more information about this field, refer to “VLAN

AT-GS950/24 Web Interface User Guide877. To change the Management VLAN assignment, select one of the following choices from the pull-down menu:Enable

Chapter 5: Virtual LANs88NoteYou cannot delete the Default VLAN which has a VID of 1.6. From the main menu on the left side of the page, select Save C

AT-GS950/24 Web Interface User Guide89Tagged VLAN Port SettingsTo configure a VLAN port that is a member of a Tagged VLAN, perform the following proc

9Figure 1. Entering a Switch’s IP Address in the URL Field...

Chapter 5: Virtual LANs90Disable - This disables Ingress Filtering at the selected port.6. Click Apply.The port configuration becomes effective.7. If

AT-GS950/24 Web Interface User Guide91Port-Based VLAN ConfigurationA port-based VLAN is a group of ports on the switch that form a logical Ethernet s

Chapter 5: Virtual LANs927. Click Apply.8. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save you

AT-GS950/24 Web Interface User Guide93The Bridge folder expands.2. From the Bridge folder, select VLAN.The VLAN folder expands.3. From the VLAN folde

Chapter 5: Virtual LANs94

95Chapter 6GVRPThis chapter contains the following sections: “Overview and Guidelines” on page 96 “General Configuration” on page 97 “Port Settings

Chapter 6: GVRP96Overview and GuidelinesThe GARP VLAN Registration Protocol (GVRP) allows network devices to share VLAN information and to use the inf

AT-GS950/24 Web Interface User Guide97General ConfigurationPerform the following procedure to enable or disable GVRP:1. From the main menu on the lef

Chapter 6: GVRP98Port SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page,

AT-GS950/24 Web Interface User Guide99port row selected. Disable - The Restricted VLAN Registration is de-active for the port row selected. 5. Once y