Allied-telesis AT-S39 Manual de usuario

Management SoftwareAT-S39◆User’s GuideAT-8012M, AT-8016F/xx (SC or MT), AT-8024, AT-8024GB, AT-8024M, AT-8026FC, AT-8088/xx (SC or MT) FAST ETHERNET

List of Figures10Figure 38: Create VLAN Menu ...

Section II: Local and Telnet Management100RSTP port cost also features an Auto-Detect feature. This features allows RSTP to automatically set the port

AT-S39 User’s Guide101Forwarding Delay and Topology ChangesIf there is a change in the network topology due to a failure, removal, or addition of any

Section II: Local and Telnet Management102The root bridge will periodically transmit a BPDU to determine whether there have been any changes to the ne

AT-S39 User’s Guide103If a port is operating in half-duplex mode and is not connected to any further bridges participating in STP or RSTP, then the po

Section II: Local and Telnet Management104Mixed STP andRSTP NetworksRSTP IEEE 802.1w is fully compliant with STP IEEE 802.1d. Your network can consist

AT-S39 User’s Guide105Enabling or Disabling STP or RSTPTo select and activate a spanning tree protocol, or to disable spanning tree, perform the follo

Section II: Local and Telnet Management106Configuring STPThis section contains the following procedures:❑ Configuring a Bridge’s STP Settings on page

AT-S39 User’s Guide1072. Adjust the bridge STP settings as needed. The parameters are described below.1 - Bridge PriorityThe priority number for the b

Section II: Local and Telnet Management108Configuring aPort’s STPSettingsTo adjust a port’s STP parameters, perform the following procedure:1. From th

AT-S39 User’s Guide109NoteA change to the port priority parameter takes effect immediately. A change to the port cost value requires youto reset the s

11Figure 93: Forwarding Database Tab ...

Section II: Local and Telnet Management110Configuring RSTPThis section contains the following procedures:❑ Configuring a Bridge’s RSTP Settings on pag

AT-S39 User’s Guide1112. Adjust the parameters as needed. The parameters are defined below.1 - Force VersionThis selection determines whether the brid

Section II: Local and Telnet Management1126 - Bridge IdentifierThe MAC address of the bridge. The bridge identifier is used as a tie breaker in the se

AT-S39 User’s Guide113The RSTP Port Configuration menu in Figure 32 is displayed.Figure 32 Configure RSTP Port Settings Menu6. Adjust the settings as

Section II: Local and Telnet Management1143 - Point-to-PointThis parameter defines whether the port is functioning as a point-to-point port. For an ex

115 Chapter 10Virtual LANs OverviewThis chapter contains overviews of AT-S39 management software switch modes and virtual LANs (VLANs). ❑ AT-S39 Manag

Section II: Local and Telnet Management116AT-S39 Management Software Switch ModesUnderstanding AT-S39 management software switch modes is essential in

AT-S39 User’s Guide117Setting the Switch ModeTo configure the switch mode, perform the following procedure:1. From the Main Menu, type 5 to select Sys

Section II: Local and Telnet Management118Setting VLAN StatusIn addition to the Switch Mode parameter discussed in the previous section, switch mode s

AT-S39 User’s Guide119VLAN OverviewA virtual LAN (VLAN) is a logical grouping of devices on different physical LAN segments that allows users to commu

12PrefaceThis guide contains instructions on how to configure an AT-8000 Series Fast Ethernet Switch using the AT-S39 management software. The AT-8000

Section II: Local and Telnet Management120As a software-based solution, VLANs eliminate the restrictions of existing network design and cabling infras

AT-S39 User’s Guide121User-Configured VLANsUser-configured VLANs are, as the name suggests, VLANs that are manually configured by the user. As mention

Section II: Local and Telnet Management122VLAN IdentifierEach VLAN in a network requires a unique number assigned to it. This number is called the VLA

AT-S39 User’s Guide123For example, assume that you were creating a port-based VLAN on a switch and you had assigned the VLAN the VID 5. Consequently,

Section II: Local and Telnet Management124example, a VLAN that spans three switches requires one port on each switch to interconnect the various secti

AT-S39 User’s Guide125The table below lists the port assignments for the Sales, Engineering, and Production VLANs on the switch.Each VLAN has been ass

Section II: Local and Telnet Management126Port-based Example 2Figure 34 illustrates more port-based VLANs. In this example, two VLANs span more than o

AT-S39 User’s Guide127The table below lists the port assignments for the Sales, Engineering, and Production VLANs on the switches:❑ Sales VLAN - This

Section II: Local and Telnet Management128The VLAN information within an Ethernet frame is referred to as a tag or tagged header. A tag, which follows

AT-S39 User’s Guide129Tagged and Untagged PortsYou must specify which ports are members of the VLAN. In the case of a tagged VLAN, VLAN members are us

AT-S39 User’s Guide13A local management session is established by connecting a terminal or PC to the RS-232 Terminal Port on the front panel of the sw

Section II: Local and Telnet Management130Tagged VLAN ExampleFigure 35 illustrates how tagged ports can be used to interconnect IEEE 802.1Q-based prod

AT-S39 User’s Guide131The port assignments for the VLANs are as follows:This example is nearly identical to the Port-based Example 2 on page 126. Tagg

Section II: Local and Telnet Management132Multiple VLAN Mode OverviewThe Multiple VLAN mode simplifies the task of configuring the switch in network e

AT-S39 User’s Guide133Configuring Multiple VLANs on cascaded switches can also affect Enhanced Stacking as the Master switch may not be able to detect

Section II: Local and Telnet Management134For information on Management VLANs, go to Uplink VLANs - Multiple VLANs Mode Management on page 159.Client_

AT-S39 User’s Guide135Non-802.1QCompliantMultiple VLANsNon-802.1Q Multiple VLAN configuration is appropriate when the device connected to the uplink p

Section II: Local and Telnet Management136For information on Management VLANs, go to Uplink VLANs - Multiple VLANs Mode Management on page 159.Client_

137 Chapter 11Configuring User-Created VLANsThis chapter contains procedures for creating, modifying, and deleting user-configured VLANs from a local

Section II: Local and Telnet Management138Creating a New Port-based or Tagged VLANTo create a new port-based or tagged VLAN, perform the following pro

AT-S39 User’s Guide1392. From the VLAN Menu, type 5 to select Configure VLANs. The Configure VLANs menu in Figure 37 is displayed.Figure 37 Configure

Section II: Local and Telnet Management14Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.War

Section II: Local and Telnet Management140If the VLAN will be unique in your network, then the name should be unique as well. If the VLAN will be part

AT-S39 User’s Guide141However, the more ports you mirror, the less likely the mirroring port will be able to handle all the traffic. For example, if y

Section II: Local and Telnet Management142Creating a Port-based VLAN ExampleThe following procedure creates the Sales VLAN illustrated in Figure 33 on

AT-S39 User’s Guide143Creating a Tagged VLAN ExampleThe following procedure creates the Engineering VLAN in the top switch illustrated in Figure 35 on

Section II: Local and Telnet Management144Modifying a VLANNoteTo modify a VLAN, you must know the VLAN VID. To view VLAN VIDs, refer to the procedure

AT-S39 User’s Guide145When changing a VLAN’s name, observe the following guidelines:❑ A VLAN’s new name cannot be the same as the name of another VLAN

Section II: Local and Telnet Management146❑ To remove all untagged ports from a VLAN, enter a 0 (zero) for this value.❑ You cannot remove untagged por

AT-S39 User’s Guide147Displaying VLAN InformationTo view the name, VID number, and member ports of all the VLANs on a switch, perform the following pr

Section II: Local and Telnet Management148Deleting a VLANNoteTo perform this procedure, you must know the VID of the VLAN that you want to delete. To

AT-S39 User’s Guide1496. Type D to delete the VLAN or R to cancel the procedure.The following confirmation prompt is displayed:Are you sure you want t

AT-S39 User’s Guide15Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document

Section II: Local and Telnet Management150Deleting All VLANsThis section contains the procedure for deleting all VLANs, except the Default_VLAN, on a

AT-S39 User’s Guide151Displaying PVIDs and PrioritiesThe following procedure displays a window that lists the PVIDs for all the ports on the switch. T

Section II: Local and Telnet Management152Enabling or Disabling Ingress FilteringThere are certain rules that a switch follows as it receives and forw

AT-S39 User’s Guide153There is one other thing that should be mentioned about ingress filtering and tagged packets, and that is the priority tag. Each

Section II: Local and Telnet Management154Designating a Management VLANTo remotely manage an AT-8300 Series Switch, there must exist a communications

AT-S39 User’s Guide155Now let’s assume that you have decided to create a VLAN called NMS with a VID of 24 for the sole purpose of remote network manag

156 Chapter 12Multiple VLAN ConfigurationThis chapter contains explains how to select a multiple VLAN mode. For an overview on multiple VLANs mode, re

AT-S39 User’s Guide157Preserving User-Configured VLAN DefinitionsWhen the VLAN mode is set to either of the Multiple VLAN mode, user-configured VLAN d

Section II: Local and Telnet Management158Activating or Deactivating the Multiple VLAN ModeThe following procedure explains how to enable or disable m

AT-S39 User’s Guide159Uplink VLANs - Multiple VLANs Mode ManagementAn overview of management VLANs is provided in the previous chapter (Designating a

Section II: Local and Telnet Management16Contacting Allied TelesynTo contact Technical Support by phone, find your country or region in the table belo

Section II: Local and Telnet Management160Displaying VLAN InformationTo view the name, VID number, and member ports of all the VLANs on a switch, perf

161Chapter 13MAC Address TableThe chapter contains the procedures for viewing the static and dynamic MAC address table. This chapter contains the foll

Section II: Local and Telnet Management162MAC Address OverviewEvery hardware device that you connect to your network has a unique MAC address associat

AT-S39 User’s Guide163The type of MAC address described above is referred to as a dynamic MAC address. Dynamic MAC addresses are addresses that the sw

Section II: Local and Telnet Management164Displaying MAC AddressesThe management software has two menu selections for displaying the MAC addresses of

AT-S39 User’s Guide165The management software displays the MAC addresses. Figure 45 is an example of the Show All MAC Addresses window, which displays

Section II: Local and Telnet Management166The port numbering scheme is from right to left. As an example, assume that ports 1 through 4 on the switch

AT-S39 User’s Guide167Viewing MAC Addresses by PortThis section contains the procedure for viewing the dynamic MAC addresses that have been learned on

Section II: Local and Telnet Management168Identifying a Port Number by MAC AddressIn some situations, you might want to know which port a particular M

AT-S39 User’s Guide169Viewing the MAC Addresses of a VLANThe procedure in this section can be useful if you created VLANs on the switch and want to vi

AT-S39 User’s Guide17Management Software UpdatesNew releases of management software for our managed products are available from our web site at www.al

Section II: Local and Telnet Management170Deleting All Dynamic MAC AddressesThe management software allows you to purge the MAC address table of all d

AT-S39 User’s Guide171Adding Static and Multicast MAC AddressesThis section contains the procedure for adding static and multicast addresses to the sw

Section II: Local and Telnet Management172Deleting MAC AddressesThe following procedure explains how to delete a static, dynamic, or multicast MAC add

AT-S39 User’s Guide173Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table. When

174Chapter 14Class of ServiceThis chapter contains the procedures for configuring the Class of Service (CoS) feature of the AT-S39 software. Sections

AT-S39 User’s Guide175Class of Service OverviewThe AT-8000 Series switch supports CoS as specified in the IEEE 802.1p and 802.1Q standards. CoS can be

Section II: Local and Telnet Management176Configuring CoSTo configure CoS for a port, perform the following procedure:1. From the Main Menu, type 2 to

177Chapter 15IGMP SnoopingThis chapter explains how to activate and configure the Internet Group Management Protocol (IGMP) snooping feature on the sw

Section II: Local and Telnet Management178IGMP Snooping OverviewIGMP snooping is best explained by first defining IGMP. This protocol enables routers

AT-S39 User’s Guide179Without IGMP snooping, a switch would have to flood multicast packets out all of its ports, except the port on which it received

18Section IOverviewThis section provides a brief overview of the AT-S39 management software. It explains some of the functions that you can perform wi

Section II: Local and Telnet Management180Activating IGMP SnoopingTo activate or deactivate IGMP snooping on the switch and to configure IGMP snooping

AT-S39 User’s Guide181multicast group by sending a leave request or when the host node stops sending reports. The switch responds by immediately ceasi

Section II: Local and Telnet Management1825 - Multicast Router Port(s)Specifies the port on the switch to which the multicast router is detected. You

AT-S39 User’s Guide183Displaying a List of Host NodesYou can use the AT-S39 software to display a list of the multicast groups on a switch, as well as

Section II: Local and Telnet Management184Displaying a List of Multicast RoutersA multicast router is a router that is receiving multicast packets fro

185Chapter 16Broadcast Storm ControlThis chapter contains the procedures for configuring the Broadcast Storm Control feature of the AT-S39 management

Section II: Local and Telnet Management186Broadcast Storm Control OverviewMost frames on an Ethernet network are unicast frames. A unicast frame is a

AT-S39 User’s Guide187It is important to note that the maximum number applies to the egress port of a broadcast frame, not the ingress port. That is,

Section II: Local and Telnet Management188Configuring the Interval TimerTo set the interval timer for the Broadcast Storm Control feature, perform the

AT-S39 User’s Guide1895. Once you have set the desired timer intervals, type S to select Save Configuration Changes.Your changes are immediately activ

19Chapter 1OverviewThe AT-S39 management software is intended for the AT-8000 Series Fast Ethernet Switches. The software is used to monitor and adjus

Section II: Local and Telnet Management190Configuring the Maximum Broadcast Frame CountTo specify the maximum number of broadcast frames a port on the

191Chapter 17TACACS+ and RADIUS ProtocolsThis chapter contains the procedure for configuring the two authentication protocols TACACS+ and RADIUS. Sect

Section II: Local and Telnet Management192TACACS+ and RADIUS OverviewThe AT-S39 software has two standard management login accounts: Manager and Opera

AT-S39 User’s Guide193The final function of the TACACS+ protocol is accounting, which is used to keep track of user activity on network devices. The A

Section II: Local and Telnet Management194By default, authentication protocol is disabled on an AT-8000 Series switch. Once you activate it, you will

AT-S39 User’s Guide195Configuring an Authentication MethodTo enable or disable the server-based authentication feature on the switch and to configure

Section II: Local and Telnet Management196Once you have activated the authentication feature on the switch and designated which authentication protoco

AT-S39 User’s Guide197Enter per-server secret [max 40 characters] ->Use this prompt to enter the encryption secret for the TACACS+ server whose IP

Section II: Local and Telnet Management198The following menu is displayed: Figure 52 RADIUS Client Configurationb. Configure the parameters as needed

AT-S39 User’s Guide1993 - RADIUS Server 1 Configuration4 - RADIUS Server 1 Configuration5 - RADIUS Server 1 ConfigurationUse these parameters to speci

Copyright  2003 Allied Telesyn, Inc. 960 Stewart Drive Suite B, Sunnyvale, CA 94085 USAAll rights reserved. No part of this publication may be reprod

Section I: Overview20The AT-S39 management software comes pre-installed on the switch with default settings for all operating parameters. If the defau

200Chapter 18802.1x Port-Based Network Access ControlThis chapter contains an overview and procedures for 802.1x Port-based Network Access Control fea

AT-S39 User’s Guide201Port Access Control OverviewThe AT-S39 software’s IEEE 802.1X-based Port Access Control feature is a client-server-based access

Section II: Local and Telnet Management202For information on RADIUS, refer TACACS+ and RADIUS Protocols on page 191, NotePort access control can only

AT-S39 User’s Guide203Enabling and Disabling Port Access ControlTo globally enable or disable Port Access Control, perform the following procedure:Not

Section II: Local and Telnet Management204Configuring Port Access Control ParametersTo configure port access control parameters, perform the following

AT-S39 User’s Guide205Figure 56 Configure Port Access Parameters Menu7. Select the parameter that you wish to modify. The parameters are described be

Section II: Local and Telnet Management206❑ Auto: Enables 802.1X port-based authentication and causes the port to begin in the unauthorized state, all

AT-S39 User’s Guide207Viewing Port Access StatusTo view port access status, perform the following procedure:1. From the main menu, type 1 to select th

208Chapter 19Ethernet StatisticsThis chapter contains the procedures for displaying data traffic statistics. Sections in the chapter include:❑ Display

AT-S39 User’s Guide209Displaying Port StatisticsTo display Ethernet port statistics, perform the following procedure:1. From the Main Menu, type 7 to

AT-S39 User’s Guide21Local Management SessionYou can establish a local management session with an AT-8000 Series switch by connecting a terminal or a

Section II: Local and Telnet Management210CRC Error (CRC_ERROR)Number of packets with a cyclic redundancy check (CRC) error but with the proper length

AT-S39 User’s Guide211Displaying Switch StatisticsTo display Ethernet statistics for an entire switch, perform the following procedure:1. From the Mai

Section II: Local and Telnet Management212Received OverflowNumber of times the capacity of the port buffers have been exceeded.Received BroadcastNumbe

213Chapter 20File Downloads and UploadsThere are three files that coexist on an AT-8000 Series switch while the device is operating. They are:❑ AT-S39

Section II: Local and Telnet Management214the same. What you can do is configure one of the AT-8000 Series switches in your network, and then download

AT-S39 User’s Guide215Obtaining Software UpdatesNew releases of the AT-S39 management software are available from the Allied Telesyn web site at www.a

Section II: Local and Telnet Management216Transferring Files from a Local Management SessionThis section contains the procedure for downloading or upl

AT-S39 User’s Guide217The following menu is displayed:Figure 60 Downloads & Uploads MenuNoteOptions 3 and 4 in the menu are described in Uploadin

Section II: Local and Telnet Management2186. To download a file using Xmodem, type X at the prompt displayed in Step 4.The following prompt is display

AT-S39 User’s Guide21910. Click the Browse button and specify the location and file to be downloaded onto the switch.11. Click on the Protocol field a

Section I: Overview22Telnet Management SessionAny management workstation on your network that has the Telnet application protocol can be used to manag

Section II: Local and Telnet Management220Transferring Files from a Telnet SessionThis section contains the procedure for downloading or uploading the

AT-S39 User’s Guide221The following menu is displayed:Figure 64 Downloads & Uploads MenuNoteOptions 3 and 4 in the menu are described in Uploadin

Section II: Local and Telnet Management222NoteIf you are installing a new management image, the switch begins to initialize the software after it is i

AT-S39 User’s Guide223Downloading Files Switch to SwitchThe previous procedure explained how to download an AT-S39 software image or configuration fil

Section II: Local and Telnet Management224The following prompt is displayed:Enter the starting remote switch number -> [1 to 12]4. Enter the number

AT-S39 User’s Guide225Uploading FilesTo upload a management software image or configuration from a switch onto your management station, perform the fo

226Section IIIWeb Browser ManagementThe chapters in this section explain how to manage an AT-8024 or AT-8024GB Fast Ethernet switch using a web browse

227Chapter 21Starting a Web Browser Management SessionThis chapter contains the procedure for starting a management session on an AT-8000 Series switc

228Starting a Web Browser Management SessionThis section explains how to start a web browser management session. There must be at least one AT-8000 Se

AT-S39 User’s Guide229The user names cannot be changed. To change a password, refer to Configuring an IP Address and Switch Name on page 39.The window

AT-S39 User’s Guide23Web Browser Management SessionYou can also use a web browser to manage a switch. This too is referred to as remote management, ju

230Quitting from aWeb BrowserManagementSessionTo exit from a web browser management session, return to the Home page and select Exit from the main men

231Chapter 22Basic Switch ParametersThis chapter contains the following sections:❑ Configuring an IP Address and Switch Name on page 232❑ Activating t

Section III: Web Browser Management232Configuring an IP Address and Switch NameNoteFor guidelines on when to assign an IP address, subnet address, and

AT-S39 User’s Guide233The General tab in Figure 67 is displayed.Figure 67 General Tab Menu - ConfigurationNoteThis procedure describes the parameters

Section III: Web Browser Management2343. Change the parameters as desired. The parameters are described below:System NameThis parameter specifies a na

AT-S39 User’s Guide235CautionYou should not use spaces or special characters, such as asterisks (*) and exclamation points (!), in a password if you w

Section III: Web Browser Management236Activating the BOOTP and DHCP ServicesFor background information on BOOTP and DHCP, refer to the section Activat

AT-S39 User’s Guide237Viewing System InformationTo view basic information about the switch, perform the following procedure:1. From the Home page, sel

Section III: Web Browser Management238This window is for viewing purposes only. You cannot change any of the values from this window. The sections in

AT-S39 User’s Guide239Configuring the SNMP Parameters and Trap IP AddressesTo change the switch’s SNMP community strings or to specify the IP addresse

Section I: Overview24SNMP Management SessionAnother way to remotely manage the switch is with an SNMP management program. A familiarity with Managemen

Section III: Web Browser Management240Trap Receiver 1Trap Receiver 2Trap Receiver 3Trap Receiver 4Use these selections to specify the IP addresses of

AT-S39 User’s Guide241Resetting a SwitchTo reset a switch, perform the following procedure:1. From the Home Page, select Configuration.The Configurati

Section III: Web Browser Management242Pinging a Remote SystemYou can instruct the switch to ping a node on your network. This procedure is useful in d

AT-S39 User’s Guide243Returning the AT-S39 Software to the Factory Default ValuesThe procedure in this section returns all AT-S39 software parameters,

244Chapter 23Enhanced StackingThis chapter contains the following procedures:❑ Setting a Switch’s Enhanced Stacking Status on page 245❑ Selecting a Sw

AT-S39 User’s Guide245Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be master, slave, or unavailable. Each

Section III: Web Browser Management246The Enhanced Stacking tab is shown in Figure 72.Figure 72 Enhanced Stacking Tab4. Click the desired enhanced st

AT-S39 User’s Guide247Selecting a Switch in an Enhanced StackThe first thing that you should do before you perform any procedure on a switch in an enh

Section III: Web Browser Management248NoteThe master switch on which you started the management session is not included in the list, nor are any switc

249Chapter 24Port ParametersThe procedures in this chapter allow you to view and change the parameter settings for the individual ports on a switch. E

AT-S39 User’s Guide25Management Access LevelsThere are two levels of management access on an AT-8000 Series switch: Manager and Operator. When you log

Section III: Web Browser Management250Configuring Port ParametersTo configure the parameter settings for a port on a switch, perform the following pro

AT-S39 User’s Guide251The Settings for Port menu is displayed. An example of the menu is shown in Figure 75.Figure 75 Settings for Port MenuNoteClick

Section III: Web Browser Management252❑ 100Mbps - Half Duplex❑ 100Mbps - Full DuplexBroadcast Storm ControlThe maximum number of broadcast packets the

AT-S39 User’s Guide253Displaying Port Status and StatisticsThe procedure in this section displays the operating status of the ports on a switch and po

Section III: Web Browser Management254If you select port status, the Port Status window in Figure 77 is displayed.Figure 77 Port Status WindowThe inf

AT-S39 User’s Guide255MDIThe operating configuration of the port. Possible values are MDI and MDI-X.SpeedThe operating speed of the port. Possible val

Section III: Web Browser Management256Priority LevelThe priority queue to which untagged packets are directed when received on the port. A value of 1

AT-S39 User’s Guide257Received MulticastNumber of multicast packets received on the port.CRC ErrorNumber of packets with a cyclic redundancy check (CR

258Chapter 25Port SecurityThis chapter explains how to display the current port security level on the switch from a web browser management session. No

AT-S39 User’s Guide259Displaying the Port Security LevelTo display the switch’s port security level, perform the following procedure:1. From the Home

26Section IILocal and Telnet ManagementThe chapters in this section explain how to manage an AT-8000 Series switch from a local or Telnet management s

260Chapter 26Port TrunksThis chapter contains the procedure for creating or deleting a port trunk from a web browser management session.NoteFor backgr

AT-S39 User’s Guide261Creating or Deleting a Port TrunkCautionDo not connect the cables of a port trunk to the ports on the switch until after you hav

Section III: Web Browser Management2624. To create a port trunk, do the following:a. Click the ports that will make up the port trunk. A selected port

263Chapter 27Port MirroringThis chapter contains the procedure for creating or deleting a port mirror.NoteFor background information on port mirroring

Section III: Web Browser Management264Creating or Deleting a Port MirrorTo create or delete a port mirror, perform the following procedure: 1. From th

AT-S39 User’s Guide2655. To disable port mirroring, select “None“ from the Mirroring Port pull-down menu and click Apply.The port mirror is deleted. T

266Chapter 28STP and RSTPThis chapter explains how to configure the STP and RSTP parameters on an AT-8000 Series switch from a web browser management

AT-S39 User’s Guide267Enabling or Disabling STP or RSTPTo enable or disable spanning tree on the bridge, do the following:1. From the Home page, selec

Section III: Web Browser Management268Configuring STPCautionThe bridge provides default STP parameters that are adequate for most networks. Changing t

AT-S39 User’s Guide2692. Adjust the bridge STP settings as needed. The parameters are described below.Bridge IdentifierThe MAC address of the bridge.

AT-S80 User’s Guide27page 200❑ Chapter 19: Ethernet Statistics on page 208❑ Chapter 20: File Downloads and Uploads on page 213

Section III: Web Browser Management270NoteThe aging time for BPDUs is different from the aging time used by the MAC address table.3. After you have ma

AT-S39 User’s Guide271Port PriorityThis parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridg

Section III: Web Browser Management272Configuring RSTPCautionThe bridge provides default RSTP parameters that are adequate for most networks. Changing

AT-S39 User’s Guide2732. Adjust the parameters are desired. The parameters are defined below.Force VersionThis selection determines whether the bridge

Section III: Web Browser Management274Bridge IdentifierThe MAC address of the bridge. The bridge identifier is used as a tie breaker in the selection

AT-S39 User’s Guide275Port CostThe spanning tree algorithm uses the cost parameter to decide which port provides the lowest cost path to the root brid

Section III: Web Browser Management276Displaying STP or RSTP SettingsTo display STP or RSTP parameter settings, perform the following procedure:1. Fro

AT-S39 User’s Guide277The example in Figure 88 is for RSTP. The information in this window is for viewing purposes only. Figure 88 Rapid Spanning Tre

278Chapter 29Virtual LANsThis chapter explains how to create, modify, and user-configured (port-based and tagged) and multiple VLANs in a web browser

AT-S39 User’s Guide279Creating A New Port-Based or Tagged VLANTo create a new port-basedor tagged VLAN, perform the procedure below:1. From the Home p

28Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedure for starting a local or Telnet management session on an AT

Section III: Web Browser Management2804. Click Add. The Add VLAN menu in Figure 90 is displayed.Figure 90 Add VLAN Menu5. Select the Name field and e

AT-S39 User’s Guide281example, if you are creating a VLAN called Sales that will span three switches, you must assign the same VID value to each Sales

Section III: Web Browser Management282Modifying a Port-Based or Tagged VLANTo modify a VLAN, perform the following procedure:1. From the Home page, se

AT-S39 User’s Guide283Deleting a Port-Based or Tagged VLANTo delete a VLAN from the switch, perform the following procedure:1. From the Home page, sel

Section III: Web Browser Management284Displaying VLANsTo display all the existing VLANs on a switch, perform the following procedure:1. From the Home

AT-S39 User’s Guide285Selecting a Multiple VLANs ModeTo select a multiple VLAN mode, perform the procedure below:NoteIn 802.1Q Multiple VLANs mode, an

Section III: Web Browser Management2864. Under VLAN Mode, select the non-802.1Q compliant Multiple VLANs or 802.1Q Multiple VLANs.5. In the Uplink VLA

AT-S39 User’s Guide287Setting the Switch’s ModeThis section contains the procedure for setting a switch’s mode. You can configure a switch to Tagged m

Section III: Web Browser Management288Enabling or Disabling VLANsThis procedure performs exactly the same function as the previous procedure. It sets

289Chapter 30MAC Address TableThis chapter contains instructions on how to view the dynamic and static addresses in the MAC address table of the switc

AT-S39 User’s Guide29Local Management SessionOn the front panel of the switch is a port labelled RS232 Terminal Port. You use this port to establish a

Section III: Web Browser Management290Viewing the MAC Address TableTo view the MAC address table, perform the following procedure:1. From the Home pag

AT-S39 User’s Guide291View All Static AddressesThis option displays only the static MAC addresses. Static MAC addresses are addresses that you entered

Section III: Web Browser Management292MIRIndicates whether the traffic on the port is being mirrored. Yes means the traffic is being mirrored while No

AT-S39 User’s Guide293Adding Static and Multicast MAC AddressesThis section contains the procedure for assigning static or multicast address to ports

Section III: Web Browser Management294Deleting MAC AddressesTo delete a static, dynamic, or multicast MAC address from the switch, perform the followi

AT-S39 User’s Guide295Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table. When

296Chapter 31Class of ServiceThis chapter contains instructions on how to configure CoS. This chapter contains the following procedure:❑ Configuring C

AT-S39 User’s Guide297Configuring CoSTo configure CoS, perform the following procedure:1. From the Home page, select Configuration.2. From the Configu

298Chapter 32IGMP SnoopingThis chapter describes how to configure the IGMP snooping feature on the switch.NoteFor background information on this featu

AT-S39 User’s Guide299Configuring IGMP SnoopingTo configure IGMP snooping from a web browser management session, perform the following procedure:1. Fr

3Table of ContentsList of Figures ...

Section II: Local or Telnet Management30Starting a LocalManagementSessionTo start a local management session, perform the following procedure:1. Conne

Section III: Web Browser Management300Snoop TopologyDefines whether there is only one host node per switch port or multiple host nodes per port. Possi

AT-S39 User’s Guide301This parameter is useful with networks that contain a large number of multicast groups. You can use the parameter to prevent the

Section III: Web Browser Management302Displaying a List of Host Nodes and Multicast RoutersYou can use the AT-S39 software to display a list of the mu

AT-S39 User’s Guide303Viewing a list of host nodes displays a window containing the following information. The information in the window is for viewin

304Chapter 33Broadcast Storm ControlThis chapter contains instructions on how to configure the Broadcast Storm Control feature on the switch.NoteFor b

AT-S39 User’s Guide305Configuring the Interval TimerThe interval timer defines the time period used in counting the number of broadcast packets transm

Section III: Web Browser Management306Setting the Maximum Number of Broadcast FramesTo set the maximum number of broadcast frames you want the ports o

307Chapter 34TACACS+ and RADIUS ProtocolsThis chapter contains instructions on how to configure the authentication protocols. This chapter contains th

Section III: Web Browser Management308Configuring TACACS+ and RADIUSTo configure the authentication protocols, perform the following procedure:1. From

AT-S39 User’s Guide309NoteIf you activated the authentication feature, go to Step 6 to configure TACACS+ or Step 7 to configure RADIUS. 7. To configur

AT-S39 User’s Guide31NoteThe switch has an auto-detect feature on the serial port that auomatically determines the speed of the local terminal. Activa

Section III: Web Browser Management310IP Address and Encryption SecretUse these fields to specify the IP addresses and encryption secrets of up to thr

AT-S39 User’s Guide311queries the next TACACS+ server in the list. If there aren’t any more servers, than the switch will default to the standard Mana

312Appendix AAT-S39 Default SettingsThis appendix lists the AT-S39 factory default settings.Settings DefaultIP Address 0.0.0.0Subnet Mask 255.255.0.0

AT-S39 User’s Guide313SNMP Trap Receiver Addr4Server-Based AuthenticationServer Authentication DisabledDefault Authentication Method TACACS PlusSpanni

AT-S39 Default Settings314TACACS MenuTACACS Timeout 30 secondsServer IP 1 0.0.0.0Server IP 2 0.0.0.0Server IP 3 0.0.0.0Server Key 1 0Server Key 2 0Ser

AT-S39 User’s Guide315Management AccessTelnet EnabledWeb EnabledSNMP DisabledPort Access ControlPort Role AuthenticatorPort Control AutoQuiet Period 6

316Index802.1x port-based network access controlconfiguring parameters, 204defined, 201enabling and disabling, 203overview, 200port access status, 207

AT-S39 User’s Guide317Eenhanced stackingchanging switches, 63, 247defined, 33, 37, 58guidelines, 58setting switch status, 61, 245FFast Mode, 109flow c

318port access statusviewing, 207port controlauto, 206force-authorized, 205force-unauthorized, 205port control, 205port costdefined, 99setting, 109, 1

AT-S39 User’s Guide319subnet mask, 40, 235suppTimeout, 206switch modeconfiguring, 117switch statistics, 211system name, 40, 234TTACACS+configuring, 19

Section II: Local or Telnet Management32The Main Menu is displayed. Figure 2 Main MenuTo select a menu item, type the corresponding letter or number.

AT-S39 User’s Guide33EnhancedStackingWhen you start a local management session on a switch that has been designated as the Master switch of an enhance

Section II: Local or Telnet Management34Telnet Management SessionYou can use the Telnet application protocol from a workstation on your network to man

AT-S39 User’s Guide35NoteYou can run only one Telnet management session on a switch at a time. Additionally, you cannot run both a Telnet management s

36Chapter 3Basic Switch ParametersThis chapter contains a variety of information and procedures. There is a discussion on when to assign an IP address

AT-S39 User’s Guide37When Does a Switch Need an IP Address?One of the tasks to building or expanding a network is deciding which of the managed switch

Section II: Local and Telnet Management38How Do YouAssign an IPAddress?Once you have decided which, if any, switches on your network need an IP addres

AT-S39 User’s Guide39Configuring an IP Address and Switch NameThe procedure in this section explains how to manually assign an IP address, subnet mask

Table of Contents4Chapter 3Basic Switch Parameters ...

Section II: Local and Telnet Management402. Change the parameters as desired. The parameters in the IP Parameters menu are described below:1 - IP Addr

AT-S39 User’s Guide419 - Reset SwitchThis selection resets the switch.A - Server-based AuthenticationThis selection is used to configure the TACACS+ a

Section II: Local and Telnet Management42Activating the BOOTP and DHCP ServicesThe BOOTP and DHCP application protocols were developed to simplify net

AT-S39 User’s Guide43NoteIf you activated BOOTP/DHCP, the switch immediately begins to query the network for a BOOTP or DHCP server. The switch contin

Section II: Local and Telnet Management44Configuring SNMP Community Strings and Trap IP AddressesTo configure the SNMP community strings for the switc

AT-S39 User’s Guide452. From the System Configuration Menu, type A to select Advanced Configuration.The Advanced Configuration menu in Figure 5 is dis

Section II: Local and Telnet Management464. Adjust the parameters as desired. To change a value, type its corresponding number and, when prompted, ent

AT-S39 User’s Guide47Resetting a SwitchTo reset a switch, perform the following procedure:1. From the Main Menu, type 4 to select Administrator Menu.2

Section II: Local and Telnet Management48Configuring the AT-S39 Software Security FeaturesThe AT-S39 software has several security features that can h

AT-S39 User’s Guide49You log in as a Manager or an Operator by entering the appropriate password when you start an AT-S39 management session. The defa

5Enabling or Disabling STP or RSTP ...

Section II: Local and Telnet Management50CautionYou should not use spaces or special characters, such as asterisks (*) and exclamation points (!), in

AT-S39 User’s Guide51ConfiguringManagementAccessTo configure the console timer, web access, SNMP access, and TFTP server security features of the AT-S

Section II: Local and Telnet Management52Viewing the AT-S39 Version Number and Switch MAC AddressThe procedure in this section displays the following

AT-S39 User’s Guide53Pinging a Remote SystemYou can instruct the switch to ping a remote device on your network. This procedure is useful in determini

Section II: Local and Telnet Management54Returning the AT-S39 Software to the Factory Default ValuesThe procedure in this section returns all AT-S39 s

AT-S39 User’s Guide55Configuring the Console Startup ModeYou can configure the AT-S39 software to display either the Main Menu or the command line int

Section II: Local and Telnet Management56Configuring BALUN Cable DetectionYou can configure the AT-S39 software to detect loopback cables for all 10/1

57Chapter 4Enhanced StackingThis chapter explains the enhanced stacking feature. The sections in this chapter include:❑ Enhanced Stacking Overview on

Section II: Local and Telnet Management 58Enhanced Stacking OverviewThe enhanced stacking feature can make it easier for you to manage the AT-8000 Ser

AT-S39 User’s Guide592. You must assign the master switch an IP address and subnet mask.A master switch must have an IP address and subnet mask. The o

Table of Contents6Chapter 14Class of Service ...

Section II: Local and Telnet Management 60Figure 9 is an example of the enhanced stacking feature.Figure 9 Enhanced Stacking ExampleThe example consi

AT-S39 User’s Guide61Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be master switch, slave switch, or unav

Section II: Local and Telnet Management 62The menu displays the current status of the switch at the end of selection “1 - Switch State.” For example,

AT-S39 User’s Guide63Selecting a Switch in an Enhanced StackThe first thing that you should do before performing any procedure on a switch in an enhan

Section II: Local and Telnet Management 643. Type G to select Get/Refresh List of Switches.The Master switch polls the network for all slave and Maste

65Chapter 5Port ParametersThe chapter contains procedures for viewing and changing the parameter settings for the individual ports on a switch. This c

Section II: Local and Telnet Management66Displaying Port StatusTo display the status of the ports on the switch, perform the following procedure:1. Fr

AT-S39 User’s Guide67The Port Status window is displayed (see Figure 13).Figure 13 Port Status WindowThe information in this window is for viewing pu

Section II: Local and Telnet Management68MDIOThe operating configuration of the port. Possible values are Auto, MDI, MDI-X. The status Auto indicates

AT-S39 User’s Guide69Configuring Port ParametersTo configure the parameter settings for a port on the switch, perform the following procedure: 1. From

7Section IIIWeb Browser Management ...226Chapter

Section II: Local and Telnet Management70NoteThe example Port Configuration menu in the figure above is for a 10/100 Mbps twisted pair port. The menu

AT-S39 User’s Guide71Flow ControlFlow control applies only to ports operating in full-duplex mode. The switch uses a special pause packet to stop the

Section II: Local and Telnet Management72B - Broadcast ControlFor background information on this selection and instructions on how to set the option,

AT-S39 User’s Guide73Displaying Uplink InformationThe AT-S39 management software can display basic manufacturer information about a GBIC module in an

Section II: Local and Telnet Management74The management software displays a menu containing basic information about the GBIC module. Figure 16 is an e

75Chapter 6Port SecurityThis chapter contains the procedures for setting port security. The sections in this chapter include:❑ Port Security Overview

Section II: Local and Telnet Management76Port Security OverviewThe port security feature can enhance the security of your network. You can use the fea

AT-S39 User’s Guide77SecureThis security level instructs the switch to forward frames based solely on static MAC addresses. When this security level i

Section II: Local and Telnet Management78Configuring Port SecurityNotePort security can only be set through a local management session. You cannot set

AT-S39 User’s Guide79page 80.❑ To forward frames based solely on static MAC addresses, type S to select the Secured mode. After activating this securi

Table of Contents8Chapter 30MAC Address Table ...

Section II: Local and Telnet Management80Configuring the Limited Security ModeThe Limited security mode lets you set a maximum number of dynamic MAC a

AT-S39 User’s Guide814. Type 2 to select Configure Limited Mode Parameters.The following prompt is displayed:Enter ports list: 5. Enter the port(s) wh

82Chapter 7Port TrunkingThis chapter contains the procedures for creating and deleting port trunks. Sections in the chapter include:❑ Port Trunking Ov

AT-S39 User’s Guide83Port Trunking OverviewPort trunking is an economical way for you to increase the bandwidth between two Ethernet switches. A port

84❑ When cabling a trunk, the order of the connections should be maintained on both nodes. The lowest numbered port in a trunk on the switch should be

AT-S39 User’s Guide85The switch assigns source addresses so as to evenly distribute the addresses, or at least as much as possible, across all the por

86Now assume that you configured the port trunk on Switch #1 for SA load distribution. The switch might distribute the load as follow:For example, whe

AT-S39 User’s Guide87So now let’s look at the SA/DA method. A switch using the SA/DA method creates a matrix of the source and destination MAC address

88The bottom line is that the SA/DA method is more flexible than the SA method. A general rule to follow is if you are not sure which load distributio

AT-S39 User’s Guide89Creating a Port TrunkThis section contains the procedure for creating a port trunk on the switch. Be sure to review the guideline

9List of FiguresFigure 1: Connecting a Terminal or PC to the RS232 Terminal Port ...

903. Type 1 to select Trunk Ports.The following prompt is displayed.Enter Trunk Port(s) ->4. Enter the ports that will constitute the port trunk an

AT-S39 User’s Guide91Deleting a Port TrunkCautionDisconnect the cables from the port trunk on the switch before performing the following procedure. De

92Chapter 8Port MirroringThis chapter contains the procedures for creating and deleting a port mirror. Sections in the chapter include:❑ Port Mirrorin

AT-S39 User’s Guide93Port Mirroring OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic being received and transmitted

94Creating a Port MirrorTo create a port mirror, perform the following procedure:1. From the Main Menu, type 1 to select Port Menu.2. From the Port Me

AT-S39 User’s Guide95Deleting a Port MirrorTo delete a port mirror, perform the following procedure:1. From the Main Menu, type 1 to select Port Menu.

96Chapter 9STP and RSTPThis chapter provides background information on the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP). The c

AT-S39 User’s Guide97STP and RSTP OverviewA significant danger to Ethernet network performance is the existence of a data loop in a network topology.

Section II: Local and Telnet Management98Bridge Priorityand the RootBridgeThe first task that bridges perform when a spanning tree protocol is activat

AT-S39 User’s Guide99Path Costs and Port CostsOnce the Root Bridge has been selected, the bridges must determine if the network contains redundant pat