Allied-telesis AT-S62 Manual de usuario Pagina 1

Management SoftwareAT-S62◆Menus Interface User’s GuideAT-8516F/SC, AT-8524M, AT-8524POE, AT-8550GB and AT-8550SP LAYER 2+ FAST ETHERNET SWITCHESVERSIO

Table of Contents10Creating an MSTI ...

Chapter 6: Port ParametersSection I: Basic Operations 100If you set option 4 - Negotiation to Manual, which disables Auto-Negotiation on a port, the a

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 101NotePorts 49R and 50R on an AT-8550GB Series switch must be set to Auto-Negotiation

Chapter 6: Port ParametersSection I: Basic Operations 102Figure 23 Head of Line BlockingThe HOL Limit parameter can help prevent this problem from oc

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 103The default setting for flow control on a switch port is disabled.Selecting this opt

Chapter 6: Port ParametersSection I: Basic Operations 104When a switch port needs to stop a half-duplex end node from transmitting data, it forces a c

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 105operating at the same speed and duplex mode. If the port’s speed and duplex mode hav

Chapter 6: Port ParametersSection I: Basic Operations 106Setting the Rate LimitThis feature allows you to set the maximum number of ingress packets th

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 107The Rate Limiting menu is shown in Figure 26.Figure 26 Rate Limiting Menu5. Type 4

108Chapter 7MAC Address TableThe chapter contains the procedures for viewing the static and dynamic MAC address table.This chapter contains the follow

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 109MAC Address OverviewThe AT-8500 Series switch contains a MAC address table with a st

AT-S62 Menus Interface User’s Guide11Chapter 27Multiple VLAN Modes ...

Chapter 7: MAC Address TableSection I: Basic Operations 110prevents the MAC address table from becoming filled with addresses of nodes that are no lon

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 111Displaying MAC AddressesThe management software has two menu selections for displayi

Chapter 7: MAC Address TableSection I: Basic Operations 1123. Select the desired option. The options are explained below:1 - Display AllThis selection

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 113An example of a multicast MAC address table is shown in Figure 30.Figure 30 Display

Chapter 7: MAC Address TableSection I: Basic Operations 1145 - Display Specified MACDisplays the port number on which a MAC address was assigned or le

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 115Adding Static Unicast and Multicast MAC AddressesThis section contains the procedure

Chapter 7: MAC Address TableSection I: Basic Operations 116to the port where the multicast application is located will result in the failure of the mu

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 117Deleting Unicast and Multicast MAC AddressesTo delete a dynamic or static unicast or

Chapter 7: MAC Address TableSection I: Basic Operations 118Deleting All Dynamic MAC AddressesTo delete all dynamic unicast and multicast MAC address f

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 119Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC

Table of Contents12Section VIIManagement Security ...

120Chapter 8Static and LACP Port TrunksThis chapter contains the procedures for creating, modifying, and deleting static and LACP port trunks. Section

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 121Port Trunk OverviewA port trunk is an economical way for you to increase the bandwid

Chapter 8: Port TrunkingSection I: Basic Operations 122say that an Allied Telesyn layer 2 managed switch cannot form a static trunk with a device from

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 123❑ The switch can support up to six static trunks when LACP is disable and three stat

Chapter 8: Port TrunkingSection I: Basic Operations 124An aggregate trunk can consist of any number of ports on a switch, but only a maximum of eight

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 125Figure 33 Example of Multiple Aggregators for Multiple Aggregate TrunksHere is how

Chapter 8: Port TrunkingSection I: Basic Operations 126If the aggregate trunks go to different devices, you can create one aggregator and let the AT-8

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 127LACP System PriorityIt is possible for two devices interconnected by an aggregate tr

Chapter 8: Port TrunkingSection I: Basic Operations 128LACP Port Priority ParameterThe switch uses this parameter to determine which ports are to be a

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 129Load Distribution MethodsThe load distribution method determines the manner in which

AT-S62 Menus Interface User’s Guide13Chapter 34Secure Shell (SSH) Protocol ...

Chapter 8: Port TrunkingSection I: Basic Operations 130❑ Only those ports that are members of an aggregator transmit LACPDU packets.❑ The load distrib

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 131❑ Source IP Address / Destination IP Address (Layer 3)The load distribution methods

Chapter 8: Port TrunkingSection I: Basic Operations 132The binary values would be:9 = 10013 = 0011Applying the XOR rules above on the last three bits

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 133Managing Static Port TrunksThe following procedures explain how to create, modify, a

Chapter 8: Port TrunkingSection I: Basic Operations 134The Port Trunking and LACP menu is shown in Figure 35.Figure 35 Port Trunking and LACP Menu3.

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 135The Create Trunk menu is shown in Figure 37.Figure 37 Create Trunk Menu5. Type 1 to

Chapter 8: Port TrunkingSection I: Basic Operations 13610. After making changes, type R until you return to the Main Menu. Then type S to select Save

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 137The following prompt is displayed:Enter Trunk ID: [1 to 6] ->5. Enter the ID numb

Chapter 8: Port TrunkingSection I: Basic Operations 1388. To change the ports of a trunk, type 4 to select Trunk Ports and, when prompted, enter the n

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 139Managing LACP TrunksThe following procedures explain how to create and manage LACP t

Table of Contents14Spanning Tree Switch Settings ...

Chapter 8: Port TrunkingSection I: Basic Operations 140The LACP (IEEE 8023ad) Configuration menu is shown in Figure 39.Figure 39 LACP (IEEE 8023ad) C

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 141Enter Priority [0x1 - 0xFFFF]: [0x1 to 0xffff] -> 0x5. Enter the new value is hex

Chapter 8: Port TrunkingSection I: Basic Operations 142The Create LACP (IEEE 8023ad) Aggregator menu is shown in Figure 39 on page 140.Figure 40 Crea

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 1434 - Port RangeSpecifies the aggregator ports. An aggregator can contain any number o

Chapter 8: Port TrunkingSection I: Basic Operations 144To modify an aggregator, perform the following procedure:1. From the Main Menu, type 1 to selec

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 1452 - AdminkeySpecifies a unique adminkey value for the aggregator. The value is enter

Chapter 8: Port TrunkingSection I: Basic Operations 146To delete an aggregator, perform the following procedure:1. From the Main Menu, type 1 to selec

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 147The LACP (IEEE 8023ad) Configuration menu is shown in Figure 39 on page 140.4. Type

Chapter 8: Port TrunkingSection I: Basic Operations 148Displaying LACPPort orAggregator StatusTo display LACP port or aggregator status, perform the f

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 149Figure 44 is an example of the LACP (IEEE 802.3ad) Aggregator Status menu. The infor

15List of FiguresChapter 1Overview ...

150Chapter 9Port MirroringThis chapter contains the procedures for creating and deleting a port mirror. Sections in the chapter include:❑ Port Mirrori

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 151Port Mirroring OverviewThe port mirroring feature allows you to unobtrusively monito

Chapter 9: Port MirroringSection I: Basic Operations 152Creating a Port MirrorTo create a port mirror, perform the following procedure:1. From the Mai

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 1535. Type 2 to select Mirror-To Port and, when prompted, enter the number of the port

Chapter 9: Port MirroringSection I: Basic Operations 154Deleting a Port MirrorTo delete a port mirror, perform the following procedure:1. From the Mai

155Chapter 10Ethernet StatisticsThis chapter contains the procedures for displaying data traffic statistics. The chapter contains the following sectio

Chapter 10: Ethernet StatisticsSection I: Basic Operations 156Displaying Port StatisticsTo display Ethernet port statistics, perform the following pro

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 157Multicast Frames ReceivedNumber of multicast frames received on the port.Multicast F

Chapter 10: Ethernet StatisticsSection I: Basic Operations 158Clearing Port CountersTo return the statistics counters of a port to zero, perform the f

159Section IIAdvanced OperationsThe chapters in this section explain some of the more advanced features of an AT-8500 Series switch. The chapters incl

List of Figures16Figure 24: Flow Control Menu ...

160Chapter 11File SystemThis chapter describes the AT-S62 file system, and how you can use the file system to copy, rename, and delete system files. T

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 161File System OverviewThe AT-S62 management software has a file system of 2 megaby

Chapter 11: File SystemSection II: Advanced Operations 162File NamingConventionsThe file system is a flat file system which means directories are not

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 163Working with Boot Configuration FilesA boot configuration file contains the comm

Chapter 11: File SystemSection II: Advanced Operations 164Phase 1: Creating a Configuration FileBefore you begin to configure the switch with the para

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 165CautionOption 9 - Format Flash Drive should be used with care. It deletes all fi

Chapter 11: File SystemSection II: Advanced Operations 166Phase 2: Configuring the Switch’s Parameter SettingsNow that you have created a configuratio

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 167To select the active boot configuration file for the switch, perform the followi

Chapter 11: File SystemSection II: Advanced Operations 168To view the contents of a configuration file, perform the following procedure:1. From the Fi

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 169For instructions on how to upload a configuration file from a switch to your man

AT-S62 Menus Interface User’s Guide17Figure 62: Configure Log Outputs Menu ...

Chapter 11: File SystemSection II: Advanced Operations 170Copying, Renaming, and Deleting System FilesUse this procedure to copy, rename, and delete s

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 1715. To rename a system file, do the following:a. From the File Operations menu, t

Chapter 11: File SystemSection II: Advanced Operations 172Displaying System FilesUse this procedure to display a list of the system files currently st

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 173The List Files menu is displayed. An example of the menu is shown in Figure 50.F

174Chapter 12File Downloads and UploadsThis chapter contains procedures for downloading a new AT-S62 image file onto the switch. This chapter also con

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 175Downloading a New AT-S62 Image File onto a SwitchThe procedures in this section

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 176to its default configuration values, refer to Returning the AT-S62 Software t

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 177Downloading anAT-S62 Imagefrom a LocalManagementSessionReview the Guidelines on

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 1786. To download the AT-S62 image file using Xmodem, go to Step 7. To download

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 179The following prompt is displayed:You are going to invoke the Xmodem download ut

List of Figures18Chapter 18IGMP Snooping ...

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 18011. Click Browse and specify the location and file to be downloaded onto the

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 181Downloading anAT-S62 Imagefrom a TelnetManagementSessionReview the Guidelines on

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 182After receiving the file, the switch compares the version numbers of the new

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 183Uploading an AT-S62 Image File Switch to SwitchThis procedure explains how to up

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 184The following prompt is displayed:Do you want to show remote switch burning f

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 185Uploading an AT-S62 Configuration File Switch to SwitchThis procedure uploads a

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 186To upload a boot configuration file from the master switch to another switch

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 187The following prompt is displayed:Do you want confirmation before downloading ea

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 188Downloading a System FileThis section contains procedures for downloading fil

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 189These guidelines apply to a TFTP download:❑ Your network must have a node with T

AT-S62 Menus Interface User’s Guide19Figure 147: Display SNMPv3 Access Table Menu ...

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 190The following prompt is displayed:Remote File Name:c. Enter the file name of

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 1918. Enter a name for the file. The file is given this name when stored in the swi

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 19212. Click Browse and specify the location and system file to be downloaded on

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 193Downloading aFile from a TelnetManagementSessionReview Guidelines on page 188 be

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 194After downloading the system file, the switch displays the following message:

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 195Uploading a System FileThe procedures in this section upload a system file from

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 196Uploading a Filefrom a LocalManagementSessionReview Guidelines on page 195 be

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 197d. Enter the name of the file in the switch’s file system you want to upload to

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 19811. From the HyperTerminal main window, select Receive File from the Transfer

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 199Uploading a Filefrom a TelnetManagementSessionReview Guidelines on page 195 befo

Copyright © 2005 Allied Telesyn, Inc. 3200 North First Street, San Jose, CA 95134 USAAll rights reserved. No part of this publication may be reproduce

List of Figures20Chapter 26GARP VLAN Registration Protocol ...

Chapter 12: File Downloads and UploadsSection II: Advanced Operations 200After the switch has uploaded the system file, the following message is displ

201Chapter 13Event Log and Syslog ServersThis chapter describes how to view the event messages in the event log and how to configure the switch to sen

Chapter 13: Event LogSection II: Advanced Operations 202Event Log and Syslog Server OverviewA managed switch is a complex piece of computer equipment

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 203Managing the Event LogThe following porcedures explain how to view the events in

Chapter 13: Event LogSection II: Advanced Operations 204The Event Log menu is shown in Figure 60.Figure 60 Event Log Menu3. Type 1 to toggle Log Stat

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2053- Display OrderControls the order of the events in the log. Choices are Chronol

Chapter 13: Event LogSection II: Advanced Operations 206instruct the switch to display only those events that apply to selected modules. The default i

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2074. Once you have set the log filters, type V to select View Log.PTRUNK Port trun

Chapter 13: Event LogSection II: Advanced Operations 208Figure 61 shows an example of the event log in the Full display mode. The Normal display mode

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 209Modifying theEvent Log FullActionThis procedure explains how to control what the

AT-S62 Menus Interface User’s Guide21Figure 230: Export Key to File Menu ...

Chapter 13: Event LogSection II: Advanced Operations 210Enter new log full action (1-Wrap on Full, 2-Halt on Full) ->6. Type 1 if you want the swit

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 211Managing Syslog Server DefinitionsAs explained at the start of this chapter, the

Chapter 13: Event LogSection II: Advanced Operations 212Creating a SyslogServer DefinitionTo create a syslog server definition, perform the following

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2133 - Message GenerationThis enables and disables the syslog server definition. If

Chapter 13: Event LogSection II: Advanced Operations 214For example, the setting of DEFAULT assigns all port mirroring events a code of 22 and all enc

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 215For example, selecting LOCAL2 as the facility level assigns the numerical code o

Chapter 13: Event LogSection II: Advanced Operations 216The switch immediately begins to send events to the server, if you enabled the definition when

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 217The Syslog Server Configuration menu is shown in Figure 63 on page 212. The menu

Chapter 13: Event LogSection II: Advanced Operations 218Displaying aSyslog ServerDefinitionTo display the details of an existing syslog server definit

219Chapter 14ClassifiersThis chapter explains classifiers and how you can create classifiers to define traffic flows. The sections in this chapter inc

22PrefaceThis guide contains instructions on how to configure an AT-8500 Series Layer 2+ Fast Ethernet Switch using the menu interface in the AT-S62 m

Chapter 14: ClassifiersSection II: Advanced Operations 220Classifier OverviewA classifier defines a traffic flow. A traffic flow consists of packets t

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 221As with an ACL, you specify the traffic flow of interest by creating one or more

Chapter 14: ClassifiersSection II: Advanced Operations 222802.1p Priority Level (Layer 2)A tagged Ethernet frame, as explained in Tagged VLAN Overview

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 223Protocol (Layer 2)Traffic flows can be identified by any of the following Layer

Chapter 14: ClassifiersSection II: Advanced Operations 224Observe these guidelines when using this criterion:❑ The Protocol variable must be left blan

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 225You do not need to enter a source IP mask if you are filtering on the IP address

Chapter 14: ClassifiersSection II: Advanced Operations 226❑ The Protocol variable must be left blank or set to IP.❑ The IP Protocol variable must be l

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 227❑ You cannot create two classifiers that have the same settings. There can be on

Chapter 14: ClassifiersSection II: Advanced Operations 228Creating a ClassifierThis section contains the procedure for creating a classifier. As expla

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 229The Create Classifier menu (page 1) is shown in Figure 68.Figure 68 Create Clas

AT-S62 Menus Interface User’s Guide23Section IV: Spanning Tree ProtocolsThe chapters in this section explain the Spanning Tree, Rapid Spanning Tree, a

Chapter 14: ClassifiersSection II: Advanced Operations 2304. To set a variable, type E to select Edit Parameters.The following prompt is displayed.Ent

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 231Modifying a ClassifierIn order to modify a classifier, you need to know its ID n

Chapter 14: ClassifiersSection II: Advanced Operations 2329. To add the modified classifier to an ACL, refer to Creating an ACL on page 245 or Modifyi

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 233Deleting a ClassifierThis procedure deletes a classifier from the switch. To del

Chapter 14: ClassifiersSection II: Advanced Operations 234Deleting All ClassifiersThis procedure deletes all classifiers from the switch. To delete in

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 235Displaying ClassifiersTo display the classifiers on a switch, do the following:1

Chapter 14: ClassifiersSection II: Advanced Operations 236❑ Number of Active Associations - The number of current assignments of a classifier to only

237Chapter 15Access Control ListsThis chapter explains access control lists (ACL) and how you can use this feature to improve network security and per

Chapter 15: Access Control ListsSection II: Advanced Operations 238Access Control List (ACL) OverviewAn ACL is a filter that controls the ingress pack

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 239Here is an overview of how the process works. 1. When an ingress packet arrives

Preface24Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.CautionCautions inform you that per

Chapter 15: Access Control ListsSection II: Advanced Operations 240❑ It does not matter the order in which you add ACLs to a port. An ingress packet i

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 241To deny traffic from several subnets on the same port, you can create multiple c

Chapter 15: Access Control ListsSection II: Advanced Operations 242You can achieve the same result by assigning each classifier to a different ACL and

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 243In this example, the traffic on ports 14 and 15 is restricted to packets from th

Chapter 15: Access Control ListsSection II: Advanced Operations 244The next example limits the ingress traffic on port 17 to IP packets from the subne

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 245Creating an ACLThis procedure explains how to create an ACL. In order to perform

Chapter 15: Access Control ListsSection II: Advanced Operations 2464. Type 1 to select ACL ID and, when prompted, enter an ID number for the ACL. Ever

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 247Modifying an ACLThis procedure explains how to modify an ACL. In order to perfor

Chapter 15: Access Control ListsSection II: Advanced Operations 2485. To change the description of the ACL, type 2 to select Description and enter a n

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 249Deleting an ACLThis procedure deletes an ACL from the switch. In order to perfor

AT-S62 Menus Interface User’s Guide25Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in P

Chapter 15: Access Control ListsSection II: Advanced Operations 250A deleted ACL is immediately removed from the switch.6. To delete additional ACLs,

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 251Deleting All ACLsThis procedure deletes all ACLs from the switch. To delete all

Chapter 15: Access Control ListsSection II: Advanced Operations 252Displaying ACLsTo display the ACLs on a switch, perform this procedure:1. From the

253Chapter 16Quality of ServiceThis chapter describes Quality of Service (QoS). Sections in the chapter include:❑ Quality of Service Overview on page

Chapter 16: Quality of ServiceSection II: Advanced Operations 254Quality of Service OverviewQuality of Service allows you to prioritize traffic and/or

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 255NoteQoS is only performed on packets which are switched at wirespeed. This inclu

Chapter 16: Quality of ServiceSection II: Advanced Operations 256Classifiers Classifiers are used to identify a particular traffic flow, and range fro

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 257Note that the switch can only perform error checking of parameters and parameter

Chapter 16: Quality of ServiceSection II: Advanced Operations 258BandwidthAllocationBandwidth limiting is configured at the level of traffic classes,

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 259DiffServ domains.❑ The DSCP value of the IP header’s TOS byte (Figure 66 on page

Preface26Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as sales or corporate informa

Chapter 16: Quality of ServiceSection II: Advanced Operations 260A simple example of this process is shown in Figure 82, for limiting the amount of ba

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2612. On switches and routers within the DiffServ domain, classify packets accordin

Chapter 16: Quality of ServiceSection II: Advanced Operations 262Examples Voice ApplicationsVoice applications typically require a small bandwidth but

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 263The parts of the policies are:❑ Classifier - Defines the traffic flow by specify

Chapter 16: Quality of ServiceSection II: Advanced Operations 264Video ApplicationsVideo applications typically require a larger bandwidth than voice

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 265The parts of the policies are:❑ Classifier - Specifies the IP address of the nod

Chapter 16: Quality of ServiceSection II: Advanced Operations 266Critical DatabaseCritical databases typically require a high bandwidth. They also typ

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 267Policy Component HierarchyThe purpose of this example is to illustrate the hiera

Chapter 16: Quality of ServiceSection II: Advanced Operations 268Figure 86 Policy Component Hierarchy ExampleCreate Classifier01 - Classifier ID: ...

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 269Managing Flow GroupsThis section contains the following procedures:❑ Creating a

27Chapter 1OverviewThis chapter reviews the functions of the AT-S62 management software, the types of sessions you can use to access the software, and

Chapter 16: Quality of ServiceSection II: Advanced Operations 270The Flow Group Configuration menu is shown in Figure 88.Figure 88 Flow Group Configu

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2712 - DescriptionSpecifies a description for the flow group. The description can b

Chapter 16: Quality of ServiceSection II: Advanced Operations 272The Flow Group Configuration menu is shown in Figure 88 on page 270.4. Type 2 to sele

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2734. Type 3 to select Destroy Flow Group.The following prompt is displayed:Availab

Chapter 16: Quality of ServiceSection II: Advanced Operations 274The Show Flow Groups menu is shown in Figure 90.Figure 90 Show Flow Groups Menu5. To

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 275Managing Traffic ClassesThis section contains the following procedures:❑ Creatin

Chapter 16: Quality of ServiceSection II: Advanced Operations 276The Create Traffic Class menu is shown in Figure 92.Figure 92 Create Traffic Class M

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2775 - DSCP valueSpecifies a replacement value to write into the DSCP (TOS) field o

Chapter 16: Quality of ServiceSection II: Advanced Operations 278If the amount of traffic flow matches the maximum bandwidth, no traffic is dropped be

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2797. To create another traffic class, repeat this procedure starting with step 3.

Chapter 1: Overview28Management OverviewThe AT-S62 management software allows you to monitor and adjust the operating parameters of an AT-8500 Series

Chapter 16: Quality of ServiceSection II: Advanced Operations 2809. After making changes, type R until you return to the Main Menu. Then type S to sel

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 281The Traffic Class Configuration menu is shown in Figure 91 on page 275.4. Type 4

Chapter 16: Quality of ServiceSection II: Advanced Operations 282Managing PoliciesThis section contains the following procedure:❑ Creating a Policy on

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 283The Create Policy menu is shown in Figure 95.Figure 95 Create Policy Menu5. Con

Chapter 16: Quality of ServiceSection II: Advanced Operations 2845 - Traffic Class ListSpecifies the traffic classes to be assigned to the policy. The

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2854. From the Policy Configuration menu, type 2 to select Modify Policy.The follow

Chapter 16: Quality of ServiceSection II: Advanced Operations 286Available Policy(ies): 0-4Enter Policy ID : [0 to 255] -> 05. Enter the ID number

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 2875. To display the specifics of a policy, type D to select Detail Policy Display.

288Chapter 17Class of ServiceThis chapter contains the procedures for configuring Class of Service (CoS). Sections in the chapter include:❑ Class of S

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 289Class of Service OverviewWhen a port on an Ethernet switch becomes oversubscribe

AT-S62 Menus Interface User’s Guide29Port or remotely using the Telnet or SSH protocol. You use the web browser interface to manage the device with a

Chapter 17: Class of ServiceSection II: Advanced Operations 290Table 7 lists the mappings between the eight CoS priority levels and the four egress qu

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 291The procedure for changing the default mappings is found in Mapping CoS Prioriti

Chapter 17: Class of ServiceSection II: Advanced Operations 292❑ Strict priority❑ Weighted round robin priorityNoteScheduling is set at the switch lev

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 293In this example, the port transmits a maximum number of 15 packets from Q3 befor

Chapter 17: Class of ServiceSection II: Advanced Operations 294Configuring CoSAs explained in Class of Service Overview on page 289, a tagged packet r

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 295NoteOptions 7, 8, and 9 are not available in all versions of the AT-S62 manageme

Chapter 17: Class of ServiceSection II: Advanced Operations 296The Configure Port COS Priorities menu is shown in Figure 99.Figure 99 Configure Port

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 297Mapping CoS Priorities to Egress QueuesThis procedure explains how to change the

Chapter 17: Class of ServiceSection II: Advanced Operations 298Configuring Egress SchedulingThis procedure explains how to select and configure a sche

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 299Displaying Port CoS PrioritiesThe following procedure displays a menu that lists

3Table of ContentsList of Figures ...

Chapter 1: Overview30Local Management SessionTo establish a local management session with an AT-8500 Series switch, you connect a terminal or a PC wit

300Chapter 18IGMP SnoopingThis chapter explains how to activate and configure the Internet Group Management Protocol (IGMP) snooping feature on the sw

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 301IGMP Snooping OverviewIGMP enables routers to create lists of nodes that are mem

Chapter 18: IGMP SnoopingSection II: Advanced Operations 302network security by restricting the flow of multicast packets only to those switch ports c

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 303Activating IGMP SnoopingTo activate or deactivate IGMP snooping on the switch an

Chapter 18: IGMP SnoopingSection II: Advanced Operations 304The options in the menu are defined below:1 - IGMP Snooping StatusEnables and disables IGM

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 305When selecting a value for this parameter, it is important to note that the valu

Chapter 18: IGMP SnoopingSection II: Advanced Operations 306Displaying a List of Host NodesTo view a list of the multicast groups and host nodes on a

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 307Port/TrunkID - The port on the switch where a host node of the multicast group i

Chapter 18: IGMP SnoopingSection II: Advanced Operations 308Displaying a List of Multicast RoutersA multicast router is a router that is receiving mul

309Chapter 19Denial of Service DefenseThis chapter contains procedures on how to configure the switch to protect your network against Denial of Servic

AT-S62 Menus Interface User’s Guide31Telnet Management SessionYou can use any management workstation on your network that has the Telnet application p

Chapter 19: Denial of Service DefenseSection II: Advanced Operations 310Denial of Service Defense OverviewThe AT-S62 management software can help prot

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 311SMURF Attack This DoS attack is instigated by an attacker sending a ICMP Echo (P

Chapter 19: Denial of Service DefenseSection II: Advanced Operations 312NoteThis defense mechanism should only be used if there is a port on the switc

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 313The defense mechanism for this type of attack has all ingress IP traffic receive

Chapter 19: Denial of Service DefenseSection II: Advanced Operations 314Also note that an attacker can circumvent the defense by sending a stream of I

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 315Enabling or Disabling Denial of Service PreventionTo configure DoS defense, perf

Chapter 19: Denial of Service DefenseSection II: Advanced Operations 316The LAN IP Subnet menu is shown in Figure 108.Figure 108 LAN IP Subnet Menub.

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 317A menu is displayed containing either one or two options, depending on the DoS d

318Chapter 20Power Over EthernetThis chapter contains the procedures for configuring Power over Ethernet (PoE) for the AT-8524POE switch. Sections in

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 319Power Over Ethernet OverviewThe twisted pair ports on the AT-8524POE switch offe

Chapter 1: Overview32Web Browser Management SessionYou can also use a web browser from a management workstation on your network to manage a switch. Th

Chapter 20: Power Over EthernetSection II: Advanced Operations 320PoEImplementationon theAT-8524POESwitchA standard Ethernet twisted pair cable contai

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 321connected to it is PoE-compliant or not and, if it is, how much power is require

Chapter 20: Power Over EthernetSection II: Advanced Operations 322Power allocation is dynamic. Ports supplying power to powered devices may cease powe

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 323Setting the PoE ThresholdThe PoE threshold is a percentage of the total maximum

Chapter 20: Power Over EthernetSection II: Advanced Operations 324The PoE Global Configuration menu is shown in Figure 111.Figure 111 PoE Global Conf

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 325Configuring PoE Port SettingsThis procedure enables and disables PoE on a port.

Chapter 20: Power Over EthernetSection II: Advanced Operations 3266. To change the port’s priority, type 2 to select Power Priority and, when prompted

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 327Displaying PoE Status and SettingsUse this procedure to display PoE status and s

Chapter 20: Power Over EthernetSection II: Advanced Operations 3281 - PoE Global Status MenuThis selection displays the following window:Figure 114 P

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 329Max Shutdown VoltageThe maximum threshold voltage at which the switch shuts down

AT-S62 Menus Interface User’s Guide33SNMP Management SessionAnother way to remotely manage the switch is with an SNMP management program. AT-S62 softw

Chapter 20: Power Over EthernetSection II: Advanced Operations 330Power StatusWhether power is being supplied to the device. ON means that the port is

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 331Power StatusWhether power is being supplied to the device. ON means that the por

Chapter 20: Power Over EthernetSection II: Advanced Operations 3324 - PoE Device InformationThis selection displays the hardware and firmware version

333Chapter 21Networking StackThe AT-S62 management software allows you to perform a few basic functions on the switch’s TCP/IP stack. The functions in

Chapter 21: Networking StackSection II: Advanced Operations 334Managing the Address Resolution Protocol TableThe switch has an Address Resolution Prot

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 335NoteThe switch does not use the ARP table to move packets through its switching

Chapter 21: Networking StackSection II: Advanced Operations 336The Display ARP Table menu is shown in Figure 119.Figure 119 Display ARP Table MenuThe

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 337Deleting an ARPEntryTo delete an entry from the ARP table, perform the following

Chapter 21: Networking StackSection II: Advanced Operations 338NoteNo confirmation prompt is displayed. All entries in the ARP table are immediately d

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 339Displaying the Routing TableThe routing table is used by the switch when the IP

Chapter 1: Overview34Management Access LevelsThere are two levels of management access in the AT-S62 management software: Manager and Operator. Manage

Chapter 21: Networking StackSection II: Advanced Operations 340DestinationThe IP address of a destination network, subnetwork, or end node.MaskA filte

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 341Displaying the TCP Connections TableThe TCP connections table lists the active T

Chapter 21: Networking StackSection II: Advanced Operations 342This table is for viewing purposes only. The columns in the table are defined here.Tota

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 343The example in Figure 121 on page 341 shows that the Telnet and web browser serv

Chapter 21: Networking StackSection II: Advanced Operations 344Deleting a TCP ConnectionThis procedure explains how you can use the TCP connections ta

AT-S62 Menus Interface User’s GuideSection II: Advanced Operations 345Displaying the TCP Global Information TableThe TCP Global Information table disp

Chapter 21: Networking StackSection II: Advanced Operations 346Max connectionsThe maximum number of TCP connections allowed.Active OpensThe number of

347Section IIISNMPv3 OperationsThis section contains the following chapter:❑ Chapter 22: SNMPv3 Configuration on page 348

348Chapter 22SNMPv3 ConfigurationThis chapter provides a description of the AT-S62 implementation of the SNMPv3 protocol. In addition, it provides pro

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 349SNMPv3 OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c prot

35Section IBasic OperationsThe chapters in this section cover a variety of basic switch features and functions. The chapters include:❑ Chapter 2: Star

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 350With the SNMPv3 protocol, you create users, determine the protocol used for message

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 351SNMPv3 PrivacyProtocolAfter you have configured an authentication protocol, you h

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 352The AT-S62 software supports the MIB tree, starting with the Internet MIBs, as defin

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 353To determine the destination of the message, you configure the IP address of the

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 354First, you create a user in the Configure SNMPv3 User Table. Then you define the MIB

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 355See Figure 126 for an illustration of how the message notification tables are lin

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 356SNMPv3 User TableThe Configure SNMPv3 User Table menu allows you to create an SNMPv3

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 357SNMPv3 SecurityToGroup TableThe Configure SNMPv3 SecurityToGroup Table Menu allow

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 358SNMPv3 Community TableThe Configure SNMPv3 Community Table Menu allows you to config

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 359Configuring the SNMPv3 ProtocolThis section describes how to configure the SNMPv3

36Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedure for starting a local or Telnet management session on an AT

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 360Configuring the SNMPv3 User TableThis section contains a description of the SNMPv3 U

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 361The Configure SNMPv3 Table Menu is shown in Figure 127.Figure 127 Configure SNMP

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 3625. To create a new user table, type 1 to select Create SNMPv3 Table Entry.The follow

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 363NoteIf you have the non encrypted version of the AT-S62 software, then the Privac

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 364NoteThe Row Status parameter is a read-only field in the Telnet and Local interfaces

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 365Modifying the Authentication Protocol and PasswordTo modify the Authentication Pr

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 3666. Enter one of the following:M-MD5This value represents the MD5 authentication prot

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 367Modifying the Privacy Protocol and PasswordTo modify the Privacy Protocol and Pas

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 3687. Enter a privacy password of up to 32-alphanumeric characters.The following prompt

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 369N-NonVolatileSelect this storage type if you want the ability to save an entry in

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 37Local Management SessionTo establish a local management session, you connect a termin

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 370Configuring the SNMPv3 View TableThis section contains a description of the SNMPv3 V

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 371The Configure SNMPv3 View Table Menu is shown in Figure 130.Figure 130 Configure

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 372The following prompt is displayed:Enter Subtree Mask (Hex format):6. Enter a subtree

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 3739. After making changes, type R until you return to the Main Menu. Then type S to

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 374Modifying anSNMPv3 ViewTable EntryThis section describes how to modify parameters in

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 375The Modify SNMPv3 View Table Menu is shown in Figure 131.Figure 131 Modify SNMPv

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 376The View Subtree parameter defines a MIB View and the Subtree Mask further restricts

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 377The following prompt is displayed:Enter View Type [I-Included, E-Excluded]:7. Cho

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 3787. Select one of the following storage types for this table entry:V - VolatileSelect

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 379Configuring the SNMPv3 Access TableThis section contains a description of the SNM

Chapter 2: Starting a Local or Telnet Management SessionSection I: Basic Operations 38Starting a LocalManagementSessionTo start a local management ses

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 380The Configure SNMPv3 Access Table Menu is shown in Figure 132.Figure 132 Configure

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 381NoteThe Context Prefix and the Context Match fields are a read only fields. The C

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 382greatest level of security. You can select this value if you configured the Security

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 383NoteThe Row Status parameter is a read-only field in the Telnet and Local interfa

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 3842-v2cSelect this value to associate the Group Name with the SNMPv2c protocol.3-v3Sel

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 385Modifying anSNMPv3 AccessTable EntryThis section describes how to modify paramete

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 386The Modify SNMPv3 Access Table is shown in Figure 133.Figure 133 Modify SNMPv3 Acce

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 387The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv, A-AuthNoP

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 388Modifying the Write View Name To modify the Write View Name parameter in an SNMPv3 A

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 3897. Enter the Security Level configured for this Group Name. You cannot change the

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 394. When prompted, enter a username and password.To configure the switch settings, ent

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 390Modifying the Notify View NameTo modify the Notify View Name parameter in an SNMPv3

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 3917. Enter the Security Level configured for this Group Name. You cannot change the

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 392Modifying the Storage TypeTo modify the Storage Type parameter in an SNMPv3 Access T

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 3937. Enter the Security Level configured for this Group Name. You cannot change the

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 394Configuring the SNMPv3 SecurityToGroup TableThis section contains a description of t

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 395The Configure SNMPv3 SecurityToGroup Table Menu is shown in Figure 134.Figure 134

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 396The following prompt is displayed:Enter Group Name:6. Enter a Group Name that you co

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 397Deleting anSNMPv3SecurityToGroupTable EntryYou may want to delete an entry from t

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 398The following prompt is displayed:Do you want to delete this table entry? (Y/N): [Ye

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 399The Modify SecurityToGroup Table is displayed as shown Figure 134.Figure 135 Mod

Table of Contents4Chapter 3Enhanced Stacking ...

Chapter 2: Starting a Local or Telnet Management SessionSection I: Basic Operations 40To select a menu item, type the corresponding letter or number.P

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 4003-v3Select this value to associate the User Name with the SNMPv3 protocol. The follo

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 401Select one of the following SNMP protocols:1-v1Select this value if this User Nam

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 402Configuring the SNMPv3 Notify TableThis section contains a description of the SNMPv3

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 403The Configure SNMPv3 Notify Table Menu is shown in Figure 136.Figure 136 Configu

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 404I-InformIndicates this notify table is used to send inform messages. With this messa

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 405NoteTo display a Group Name and its associated parameters from the Configure SNMP

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 406The Modify SNMPv3 Notify Table Menu is displayed as shown in Figure 137.Figure 137

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 407Modifying a Notify TypeTo modify the Notify Type parameter in an SNMPv3 Notify Ta

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 408Modifying a Storage TypeTo modify the Storage Type parameter in an SNMPv3 Notify Tab

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 409Configuring the SNMPv3 Target Address TableThis section contains a description of

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 41Telnet Management SessionYou can use the Telnet application protocol from a workstati

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 410Creating anSNMPv3 TargetAddress TableEntryTo create an entry in the Configure SNMPv3

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 411Use the following format for an IP address:XXX.XXX.XXX.XXXThe following prompt is

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 412This name can consist of up to 32-alphanumeric characters. The value configured here

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 413The Configure SNMPv3 Target Address Table Menu is shown in Figure 140 on page 42

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 414Modifying a Target IP AddressTo modify the target IP address in an SNMPv3 Target Add

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4154. To change the Target IP Address, type 1 to select Set Target IP Address.The fo

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 416This is the name of the SNMP manager, or host, that manages the SNMP activity on you

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4176. Enter a timeout value in milliseconds.When an Inform message is generated, it

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 4186. Enter the number of times the switch will retry, or resend, the Inform message.Th

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 419Modifying the Target Parameters FieldTo modify the Target Parameters field in an

Chapter 2: Starting a Local or Telnet Management SessionSection I: Basic Operations 42NoteYou can run only one Telnet management session on a switch a

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 420Modifying the Storage TypeTo modify the Storage Type parameter in an SNMPv3 Target A

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4217. After making changes, type R until you return to the Main Menu. Then type S to

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 422Configuring the SNMPv3 Target Parameters TableThis section contains a description of

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 423There are three functions you can perform with the Configure SNMPv3 Target Parame

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 4243. To create an SNMPv3 Target Parameters Table, type 1 to select Create SNMPv3 Table

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4257. Select one of the following Security Levels:NoteThe value you configure for th

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 426entry with a NonVolatile storage type, the S - Save Configuration Changes option app

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4275. Enter Y to delete the SNMPv3 Target Address Table entry or N to save it.6. Aft

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 428NoteYou cannot modify an entry in the SNMPv3 Target Parameter Table that contains a

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 429The Modify SNMPv3 Target Parameters Table Menu is shown in Figure 141.Figure 141

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 43Saving Your Parameter ChangesWhen you make a change to a switch parameter, the change

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 430Modifying the Security ModelFor the Security or User Name you have selected, the val

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4312-v2cSelect this value if this User Name is associated with the SNMPv2c protocol.

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 432Select one of the following Security Levels:NoteThe value you configure for the Secu

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 433The Configure SNMPv3 Table Menu is shown in Figure 127 on page 361.2. From the C

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 4342. From the Configure SNMPv3 Table Menu, type 8 to select Configure SNMPv3 Target Ad

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 435Configuring the SNMPv3 Community TableThis section contains a description of the

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 436For each SNMPv3 Community Table entry, you can configure the following parameters:❑

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 437The Configure SNMPv3 Community Table Menu is shown in Figure 142.Figure 142 Conf

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 438The following prompt is displayed:Enter Security Name:6. Enter the name of an SNMPv1

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4399. After making changes, type R until you return to the Main Menu. Then type S to

Section I: Basic Operations 44Chapter 3Enhanced StackingThis chapter explains the enhanced stacking feature. The sections in this chapter include:❑ En

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 440Modifying anSNMPv3CommunityTable EntryFor each entry in the SNMPv3 Community Table,

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 441The Modify SNMPv3 Community Table Menu is shown in Figure 143.Figure 143 Modify

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 442Modifying the Security NameTo modify the Security Name parameter in an SNMPv3 Commun

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 4432. From the Configure SNMPv3 Table Menu, type 9 to select Configure SNMPv3 Commun

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 444The following prompt is displayed:Enter Community Index:5. Enter the Community Index

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 445Displaying SNMPv3 Table MenusThe procedures in this section describe how to displ

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 446The Display SNMPv3 Table Menu is shown in Figure 144.Figure 144 Display SNMPv3 Tabl

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 447Displaying theDisplay SNMPv3View Table MenuThis section describes how to display

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 448Displaying theDisplay SNMPv3Access TableMenuThis section describes how to display th

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 449Displaying theDisplay SNMPv3SecurityToGroupTable MenuThis section describes how t

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 45Enhanced Stacking OverviewThe enhanced stacking feature can make it easier for you to

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 450Displaying theDisplay SNMPv3Notify TableMenuThis section describes how to display th

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 451Displaying theDisplay SNMPv3Target AddressTable MenuThis section describes how to

Chapter 22: SNMPv3 ConfigurationSection III: SNMPv3 Operations 452Displaying theDisplay SNMPv3TargetParameters TableMenuThis section describes how to

AT-S62 Menus Interface User’s GuideSection III: SNMPv3 Operations 453Displaying theDisplay SNMPv3CommunityTable MenuThis section describes how to disp

454Section IVSpanning Tree ProtocolsThe chapters in this section explain the spanning tree protocols. The chapters include:❑ Chapter 23: Spanning Tree

455Chapter 23Spanning Tree and Rapid Spanning Tree ProtocolsThis chapter provides background information on the Spanning Tree Protocol (STP) and Rapid

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 456STP and RSTP OverviewThe performance of a Ethernet network can be severely impaired by

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 457Bridge Priorityand the RootBridgeThe first task that bridges running spannin

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 458Path Costs and Port CostsAfter the root bridge has been selected, the bridges must dete

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 459Table 12 lists the STP port costs with Auto-Detect when a port is part of a

Chapter 3: Enhanced StackingSection I: Basic Operations 46❑ The enhanced stacking feature uses the IP address 172.16.16.16. Do not assign this address

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 460Port PriorityIf two paths have the same cost, the bridges must choose between them to s

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 461To forestall the formation of temporary data loops during topology changes,

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 462Point-to-Point Ports and Edge PortsNoteThis section applies only to RSTP and MSTP.Part

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 463If a port is operating in half-duplex mode and is not connected to any furth

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 464Mixed STP andRSTP NetworkRSTP IEEE 802.1w is compliant with STP IEEE 802.1d. Your netwo

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 465You can avoid this problem by not activating spanning tree or by connecting

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 466Enabling or Disabling a Spanning Tree ProtocolThe AT-S62 software supports STP, RSTP, a

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 4674. If you selected STP as the active spanning tree protocol, go to Configuri

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 468Configuring STPThis section contains the following procedures:❑ Configuring STP Bridge

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 4692. Adjust the bridge STP settings as needed. The parameters are described be

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 473. Change the enhanced stacking status of the master switch to Master.This is explain

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 4703. After making changes, type R until you return to the Main Menu. Then type S to selec

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 471The Configure STP Port Settings menu is shown in Figure 160.Figure 160 Conf

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 472Displaying STPPort SettingsTo display STP port settings, perform the following procedur

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 473Configuring RSTPThis section contains the following procedures:❑ Configuring

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 4742. Adjust the parameters as needed. The parameters are defined below.1 - Force VersionT

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 4756 - Bridge IdentifierThe MAC address of the bridge. The bridge identifier is

Chapter 23: STP and RSTPSection IV: Spanning Tree Protocols 476The Configure RSTP Port Settings menu is shown in Figure 164.Figure 164 Configure RSTP

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 477Displaying PortRSTP StatusThe RSTP Port Parameters menu has two selections f

478Chapter 24Multiple Spanning Tree ProtocolThis chapter provides background information on the Multiple Spanning Tree Protocol (MSTP). The chapter al

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 479MSTP OverviewAs explained in the previous chapter, STP and RSTP are single-i

Chapter 3: Enhanced StackingSection I: Basic Operations 48Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 480MultipleSpanning TreeInstance (MSTI)The individual spanning trees in

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 481If the switches were running STP or RSTP, one of the links would be blocked

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 482Figure 166 illustrates the same two AT-8524M switches and the same t

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 483A MSTI can contain more than one VLAN. This is illustrated in Figure 167 whe

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 484MSTI GuidelinesHere are several guidelines to keep in mind about MST

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 485The second group can be applied independently on a port for each MSTI where

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 486Figure 168 illustrates the concept of regions. It shows one MSTP reg

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 487The AT-8500 Series switch determines regional boundaries by examining the MS

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 488❑ The regional root of a MSTI must be in the same region as the MSTI

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 489MSTP with STPand RSTPMSTP is fully compatible with STP and RSTP. If a port o

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 49The Enhanced Stacking menu is shown in Figure 5.Figure 5 Enhanced Stacking MenuThe m

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 490❑ Each MSTI must have a regional root for locating loops in the inst

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 491Figure 169 CIST and VLAN Guideline - Example 1At first glance, it might app

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 492When port 3 on Switch B receives a BPDU, the switch notes the port s

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 493Figure 171 Spanning Regions - Example 1There are several ways to address th

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 494Configuring MSTP Bridge SettingsThis section contains the procedure

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 4953. Adjust the MSTP settings as needed. Changes are immediately activated on

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 4965 - Max HopsMSTP regions use this parameter to discard BPDUs. The Ma

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 497Configuring the CIST PriorityThis procedure explains how to adjust the bridg

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 4982. To change the CIST priority, type 1.The following prompt is displ

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 499Creating, Deleting, and Modifying MSTIsThe following procedures explain how

AT-S62 Menus Interface User’s Guide5Chapter 8Static and LACP Port Trunks ...

Chapter 3: Enhanced StackingSection I: Basic Operations 50Selecting a Switch in an Enhanced StackBefore you perform a procedure on a switch in an enha

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 500Regional Root IDIdentifies the regional root for the MSTI by its MAC

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5012. Enter the ID number of the MSTI you want to delete. The range is 1 to 15.

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 502Associating VLANs to MSTI IDsWhen you create a new MSTI, you are giv

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 503The VLAN-MSTI Association Menu is shown in Figure 175.Figure 175 VLAN-MSTI

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 504A prompt similar to the following is displayed:Enter the list of VLA

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5053. A prompt similar to the following is displayed:Enter the list of VLANs:4.

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 506Configuring MSTP Port SettingsAs explained in Ports in Multiple MSTI

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5072. Type 1 to select Configure Generic Port Settings.The following prompt is

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 508Table 17 lists the MSTP port costs with the Auto setting when the po

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 509The following prompt is displayed:Start port to configure: [1 to 26] ->

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 513. Type 1 to select Get/Refresh List of Switches.The Master switch polls the subnet f

Chapter 24: Multiple Spanning Tree ProtocolSection IV: Spanning Tree Protocols 510Table 19 lists the MSTP port costs with Auto Update when the port is

AT-S62 Menus Interface User’s GuideSection IV: Spanning Tree Protocols 511Displaying MSTP Port Settings and StatusThe MSTP Port Parameters menu, shown

512Section VVirtual LANsThe chapters in this section explain virtual LANs (VLANs). The chapters include:❑ Chapter 25: Tagged and Port-based Virtual LA

513 Chapter 25Tagged and Port-based Virtual LANsThis chapter contains background information on tagged and port-based virtual LANs (VLANs). It also c

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 514VLAN OverviewA VLAN is a group of ports on an Ethernet switch that form a log

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 515But with VLANS, you can change the LAN segment assignment of an end node connected to th

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 516Port-based VLAN OverviewAs explained in the VLAN Overview on page 514, a VLAN

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 517If a VLAN spans multiple switches, then the VID for the VLAN on the different switches s

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 518For example, if you were creating a port-based VLAN on a switch and you had a

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 519VLANs that span switches, many ports could end up being used ineffectively just to inter

Section I: Basic Operations 52Chapter 4Basic Switch ParametersThis chapter contains a variety of information and procedures. There is a discussion on

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 520Each VLAN has been assigned a unique VID. You assign this number when you cre

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 521Port-basedExample 2Figure 180 illustrates more port-based VLANs. In this example, two VL

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 522The table below lists the port assignments for the Sales, Engineering, and Pr

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 523Tagged VLAN OverviewThe second type of user-configured VLAN is the tagged VLAN. VLAN mem

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 524❑ Tagged and Untagged Ports❑ Port VLAN IdentifierNoteFor an explanation of VL

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 525General Rules forCreating aTagged VLANBelow is a summary of the rules to observe when cr

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 526Tagged VLANExampleFigure 181 illustrates how tagged ports can be used to inte

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 527The port assignments for the VLANs are as follows:This example is nearly identical to th

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 528Creating a Port-based or Tagged VLANTo create a new port-based or tagged VLAN

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 529The Configure VLANs menu is shown in Figure 183.Figure 183 Configure VLANs Menu3. From

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 53When Does a Switch Need an IP Address?One of the tasks to building or expanding a net

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 530If the VLAN will be unique in your network, then the name should be unique as

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 531NoteOption 5, Protected Ports, in the Create VLAN menu is not used to create port-based

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 532Example of Creating a Port-based VLANThe following procedure creates the Sale

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 533Example of Creating a Tagged VLANThe following procedure creates the Engineering VLAN in

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 534Modifying a VLANYou can use this procedure to add or remove ports from a port

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 535The following prompt is displayed:Enter new value -> [1 to 4096] ->5. Enter the VI

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 5363 - Tagged PortsUse this selection to add or remove tagged ports from the VLA

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 537Any untagged ports removed from a VLAN are automatically returned to the Default_VLAN as

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 538Displaying VLANsTo view the name, VID number, and member ports of all the VLA

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 539Deleting a VLANThis procedure deletes port-based and tagged VLANs from the switch. All u

Chapter 4: Basic Switch ParametersSection I: Basic Operations 54How Do YouAssign an IPAddress?After you have decided which, if any, switches on your n

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 540NoteYou cannot delete the Default_VLAN, which has a VID of 1.The Delete VLAN

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 5419. Repeat this procedure starting with Step 4 to delete other VLANs.10. After making cha

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 542Deleting All VLANsThis section contains the procedure for deleting all port-b

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 543Displaying PVIDs and Port PrioritiesThe following procedure displays a menu that lists t

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 544Enabling or Disabling Ingress FilteringThere are rules a switch follows when

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 545Activating or deactivating ingress filtering has no effect on the switch’s handling of p

Chapter 25: Tagged and Port-based Virtual LANsSection V: Virtual LANs 546Specifying a Management VLANThe management VLAN is the VLAN on which an AT-85

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 547Now assume that you decide to create a VLAN called NMS with a VID of 24 for the sole pur

548Chapter 26GARP VLAN Registration ProtocolThis chapter describes the GARP VLAN Registration Protocol (GVRP). It contains the following sections:❑ Ba

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 549Basic Overview of GARP VLAN Registration Protocol (GVRP)The GARP VLAN Registration Proto

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 55Configuring an IP Address and Switch NameThe procedure in this section explains how t

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 550Figure 191 provides an example of how GVRP works.Figure 191 GVRP Example Switch

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 5513. Switch #2 sends a PDU out port 15 containing all of the VIDs of the VLANs on the swit

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 552❑ Resetting a switch erases all dynamic GVRP VLANs and dynamic GVRP port assignm

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 553GVRP-inactiveIntermediateSwitchesThe presence of a GVRP-inactive switch between GVRP-act

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 554Technical Overview of Generic Attribute Registration Protocol (GARP)The purpose

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 555The architecture of GARP is shown in Figure 192. Figure 192 GARP Architecture The GARP

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 556An instance of GID consists of the set of state machines that define the current

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 557The Applicant is therefore looking after the interests of all would-be Participants. Thi

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 558Configuring GVRPThis section contains the procedure for configuring GVRP. The ti

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 5596. Choose one of the following:E to enable GIP.D to disable GIP.NoteDo not disable GIP i

Chapter 4: Basic Switch ParametersSection I: Basic Operations 562. From the System Administration menu, type 2 to select System Configuration.The Syst

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 560Enabling or Disabling GVRP on a PortThis procedure enables and disables GVRP on

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 5615. Enter a port. You can configure more than one port at a time.The Configure GVRP Port

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 5629. After making changes, type R until you return to the Main Menu. Then type S t

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 563Converting a Dynamic GVRP VLANThis procedure converts a dynamic GVRP VLAN into a static

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 564Displaying GVRP Parameters and StatisticsTo display GVRP counters, database, sta

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 565GVRP Counters Option 1 - Display GVRP Counters in the Other GARP Port Parameters display

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 566Figure 200 GVRP Counters Menu (page 2)The GVRP counters in the menus are define

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 567Receive Discarded: Port Not ListeningNumber of GARP PDUs discarded because the port that

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 568Transmit GARP Messages: JoinInTotal number of GARP JoinIn messages transmitted f

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 569GVRP Database Option 2 - Display GVRP Database in the Other GARP Port Parameters display

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 57activate the BOOTP or DHCP client software and have the switch obtain its IP configur

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 570GIP ConnectedPorts RingOption 3 - Display GIP Connected Ports Ring in the Other

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 571GVRP StateMachineOption 4 - Display GVRP State Machine in the Other GARP Port Parameters

Chapter 26: GARP VLAN Registration ProtocolSection V: Virtual LANs 572App Applicant state machine for the GID index on that particular port. One of:No

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 573App (Continued) Non-Participant Management state:“Von” Very Anxious Observer“Aon” Anxiou

574 Chapter 27Multiple VLAN ModesThis chapter describes the multiple VLAN modes and how to select a mode.This chapter contains the following sections

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 575Multiple VLAN Mode OverviewMultiple VLAN modes simplify the task of configuring the swit

Chapter 27: Multiple VLAN ModesSection V: Virtual LANs 576A user designated port on the switch functions as an uplink port, which can be connected to

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 577This highly segmented configuration is useful in situations where traffic generated by e

Chapter 27: Multiple VLAN ModesSection V: Virtual LANs 578Non-802.1QCompliantMultiple VLANModeUnlike the 802.1Q-compliant VLAN mode, which isolates po

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 579Selecting a VLAN ModeThe following procedure explains how to select a VLAN mode. Availab

Chapter 4: Basic Switch ParametersSection I: Basic Operations 58NoteThere are two other options on this menu. Option “8 - Configure System Time” is de

Chapter 27: Multiple VLAN ModesSection V: Virtual LANs 580Displaying VLAN InformationTo view the VLANs on the switch while the unit is operating in Mu

581 Chapter 28Protected Ports VLANsThis chapter explains protected ports VLANs. It contains the following sections: ❑ Protected Ports VLAN Overview o

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 582Protected Ports VLAN OverviewThe purpose of a protected ports VLAN is to allow multiple po

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 583In contrast, the uplink port in a protected ports VLAN, which is shared by the ports in

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 584Allied Telesyn recommends that you create tables similar to this before you create your ow

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 585Creating a Protected Ports VLANTo create a new protected ports VLAN, perform the followi

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 586NoteA VLAN must be assigned a name.6. Type 2 to select VLAN ID (VID.The following prompt i

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 58712. Type C to select Create VLAN.The following prompt is displayed:Enter Uplink Ports (4

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 588Modifying a Protected Ports VLANPlease note the following before you perform this procedur

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 5893. From the Configure VLANs Menu, type 2 to select Modify VLAN.The Modify VLAN Menu is s

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 59Activating the BOOTP or DHCP Client SoftwareThe BOOTP and DHCP application protocols

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 5902 - VLAN ID (VID)This is the VLAN’s VID value. You cannot change this value. 3 - Tagged Po

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 59111. If there are ports within the VLAN that still need to be assigned to a group, the pr

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 592Displaying a Protected Port VLANTo view the name, VID number, and member ports of all the

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 593Untagged (U) / Tagged (T) - The ports of the VLAN. Tagged ports are designated with a “T

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 594Deleting a Protected Ports VLANAll untagged ports in a deleted protected ports VLAN are au

AT-S62 Menus Interface User’s GuideSection V: Virtual LANs 595The Delete VLAN Menu expands to contain all relevant information about the VLAN, as show

Chapter 28: Protected Ports VLANsSection V: Virtual LANs 5969. Repeat this procedure starting with Step 4 to delete other VLANs.10. After making chang

597Section VIPort SecurityThe chapters in this section explain the port security features of the AT-8524M switch The chapters include:❑ Chapter 29: MA

598Chapter 29MAC Address SecurityThis chapter explains how you can use the dynamic and static MAC addresses learned and assigned to the ports of the s

AT-S62 Menus Interface User’s GuideSection VI: Port Security 599MAC Address Security OverviewThis feature can enhance the security of your network. Yo

Table of Contents6Guidelines ...

Chapter 4: Basic Switch ParametersSection I: Basic Operations 60The following prompt is displayed:DHCP/BOOTP/DISABLE (1-DHCP, 2-BOOTP, 3-DISABLE) :4.

Chapter 29: MAC Address SecuritySection VI: Port Security 600Secured The Secured security level instructs a port to forward frames using only static

AT-S62 Menus Interface User’s GuideSection VI: Port Security 601Intrusion action defines what a port will do when it receives an invalid frame. For a

Chapter 29: MAC Address SecuritySection VI: Port Security 602Configuring MAC Address Port SecurityTo set the port security level, perform the followi

AT-S62 Menus Interface User’s GuideSection VI: Port Security 6035. Press 1 to change the port security on your specified port list. The following prom

Chapter 29: MAC Address SecuritySection VI: Port Security 6048. To set the intrusion action for a port in the limited security mode, do the following

AT-S62 Menus Interface User’s GuideSection VI: Port Security 605Displaying Port Security LevelsTo view the current security levels for the ports on th

Chapter 29: MAC Address SecuritySection VI: Port Security 606Intruder ActionThe column specifies the action taken by a port if it receives an invalid

607Chapter 30802.1x Port-based Access ControlThis chapter explains 802.1x Port-based Access Control and how you can use this feature to restrict acces

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 608802.1x Port-based Access Control OverviewThe AT-S62 management software prov

AT-S62 Menus Interface User’s GuideSection VI: Port Security 609❑ Authenticator - The authenticator is a port on the switch that prohibits network acc

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 61Rebooting a SwitchThis procedure reboots the switch.NoteAny configuration changes not

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 610Port Roles Part of the task to implementing this feature is specifying the r

AT-S62 Menus Interface User’s GuideSection VI: Port Security 611Figure 216 Example of the Authenticator RoleAs mentioned earlier, the switch itself d

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 612Figure 217 Example of the Supplicant RoleNoteThe use of this port role shou

AT-S62 Menus Interface User’s GuideSection VI: Port Security 613The information sent by the switch to the RADIUS server for an event includes:❑ The po

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 6143. You must configure the RADIUS client software in the AT-S62 management so

AT-S62 Menus Interface User’s GuideSection VI: Port Security 615❑ If a switch port set to the supplicant role is connected to a port on another switch

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 616future requests go to servers 1 and 2. If only server 3 responds, then all f

AT-S62 Menus Interface User’s GuideSection VI: Port Security 617Enabling and Disabling Port-based Access ControlThis procedure explains how to enable

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 618Setting Port RolesThis procedure sets port roles. For an explanation of port

AT-S62 Menus Interface User’s GuideSection VI: Port Security 6198. Once you have set port roles, you can go to the next procedure to configure port se

Chapter 4: Basic Switch ParametersSection I: Basic Operations 62Configuring the Manager and Operator PasswordsThere are two levels of management acces

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 620Configuring Authenticator Port ParametersNoteA port must be set to the authe

AT-S62 Menus Interface User’s GuideSection VI: Port Security 621The Configure Authenticator Port Access Parameters menu is shown in Figure 222.Figure

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 622to the client through the interface1 - Quiet PeriodSets the number of second

AT-S62 Menus Interface User’s GuideSection VI: Port Security 623packets from the client. All other ingress packets that the port might receive from th

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 624Configuring Supplicant Port ParametersNoteA port must be set to the supplica

AT-S62 Menus Interface User’s GuideSection VI: Port Security 625The Configure Supplicant Port Access Parameters menu is shown in Figure 222.Figure 224

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 626network. The username can be from 1 to 64 alphanumeric characters (A to Z, a

AT-S62 Menus Interface User’s GuideSection VI: Port Security 627Configuring RADIUS AccountingThe AT-S62 management software supports RADIUS accounting

Chapter 30: 802.1x Port-based Access ControlSection VI: Port Security 6284. Configure the parameters as needed. Changes take affect immediately on th

629Section VIIManagement SecurityThe chapters in this section explain the management security features of the AT-S62 software. The chapters include:❑

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 637. When prompted, re-enter the new password.NoteA password can be from 0 to 16 alphan

630Chapter 31Web ServerThe chapter provides an overview of the web server feature and the procedure for configuring the server. It contains the follow

AT-S62 Menus Interface User’s GuideSection VII: Management Security 631Web Server OverviewThe AT-S62 management software comes with web server softwar

Chapter 31: Web ServerSection VII: Management Security 632❑ TLS (Transmission Layer Security) version 1.0General Steps toConfiguring theWeb Server for

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6336. Once you have received the appropriate certificates from the CA, download th

Chapter 31: Web ServerSection VII: Management Security 634Configuring the Web ServerThis procedure explains how to enable and disable the web server a

AT-S62 Menus Interface User’s GuideSection VII: Management Security 635Menu option 4 is displayed only for HTTPS operation. The option is hidden for H

636Chapter 32Encryption KeysThis chapter describes how to improve the security of your switches with encryption keys. Because of the complexity of the

AT-S62 Menus Interface User’s GuideSection VII: Management Security 637Basic OverviewProtecting your managed switches from unauthorized management acc

Chapter 32: Encryption KeysSection VII: Management Security 638SSH encryption requires two key pairs on the switch— a server key pair and a host key p

AT-S62 Menus Interface User’s GuideSection VII: Management Security 639Technical OverviewThe encryption feature provides the following data security s

Chapter 4: Basic Switch ParametersSection I: Basic Operations 644. Type menu to display the Main Menu.5. Follow the procedure in Changing the Manager

Chapter 32: Encryption KeysSection VII: Management Security 640❑ Electronic Code Book (ECB) is the fundamental DES function. Plaintext is divided into

AT-S62 Menus Interface User’s GuideSection VII: Management Security 641Asymmetrical (Public Key) EncryptionAsymmetrical encryption algorithms use two

Chapter 32: Encryption KeysSection VII: Management Security 642Typically a MAC is calculated using a keyed one-way hash algorithm. A keyed one-way has

AT-S62 Menus Interface User’s GuideSection VII: Management Security 643The Diffie-Hellman algorithm, which is used by the AT-S62 management software,

Chapter 32: Encryption KeysSection VII: Management Security 644Creating an Encryption KeyThis section contains the procedure for creating an encryptio

AT-S62 Menus Interface User’s GuideSection VII: Management Security 645The Key Management menu is shown in Figure 228.Figure 228 Key Management MenuT

Chapter 32: Encryption KeysSection VII: Management Security 646The Create Key menu is shown in Figure 229.Figure 229 Create Key Menu5. Type 1 to sele

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6479. Type 4 to create a key description.The following prompt is displayed:Enter n

Chapter 32: Encryption KeysSection VII: Management Security 648Deleting an Encryption KeyThis section contains the procedure for deleting an encryptio

AT-S62 Menus Interface User’s GuideSection VII: Management Security 649Modifying an Encryption KeyThe Key Management menu has a selection for modifyin

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 65Setting the System TimeThis procedure explains how to set the switch’s date and time.

Chapter 32: Encryption KeysSection VII: Management Security 650Exporting an Encryption KeyThe following procedure exports the public key of a key pair

AT-S62 Menus Interface User’s GuideSection VII: Management Security 651NoteKey Type is a read-only field. You cannot change this value.3. Type 3 to to

Chapter 32: Encryption KeysSection VII: Management Security 652Importing an Encryption KeyUse the following procedure to import a public key from the

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6533. Type 3 to select Key File Format to choose the format of the key. Selections

654Chapter 33Public Key Infrastructure CertificatesThis chapter contains the procedures for creating Public Key Infrastructure (PKI) certificates for

AT-S62 Menus Interface User’s GuideSection VII: Management Security 655Basic OverviewThis chapter explains how to implement encryption for your web br

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 656Public CAs issue certificates typically intended for use by the

AT-S62 Menus Interface User’s GuideSection VII: Management Security 657A certificate name does not have to contain all of these parts. You can use as

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 658SSL andEnhancedStackingSecure Sockets Layer (SSL) is supported i

AT-S62 Menus Interface User’s GuideSection VII: Management Security 659Guidelines Here are guidelines to creating certificates:❑ A certificate can hav

Chapter 4: Basic Switch ParametersSection I: Basic Operations 66The Configure System Time menu is shown in Figure 11.Figure 11 Configure System Time

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 660Technical OverviewThe Secure Sockets Layer (SSL) feature is a se

AT-S62 Menus Interface User’s GuideSection VII: Management Security 661All application data messages are authenticated by SSL with a message authentic

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 662The Application data message encapsulates the encrypted applicat

AT-S62 Menus Interface User’s GuideSection VII: Management Security 663Digital Signatures The second main service provided by public key encryption is

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 664❑ The owner’s identity details, such as name, company and addres

AT-S62 Menus Interface User’s GuideSection VII: Management Security 665An organization may own a Certification Authority and issue certificates for us

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 666Out-of-band verification involves both the owner of a certificat

AT-S62 Menus Interface User’s GuideSection VII: Management Security 667Before the switch can use a certificate, it must be retrieved and manually adde

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 668Creating a Self-signed CertificateThis section contains the proc

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6693. From the Keys/Certificate menu, select 3 to select Public Key Infrastructure

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 67NoteIf the switch is obtaining its IP address and subnet mask from a DHCP sever, you

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 670The Certificate Database portion of the window lists the certifi

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6719. Enter the ID number of the encryption key you want to use to create the cert

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 672Adding a Certificate to the DatabaseOnce you have created a cert

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6736. Type 1 to select Certificate Name and enter a name for the certificate.This

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 67410. Type 5 to select Add Certificate to add the certificate to t

AT-S62 Menus Interface User’s GuideSection VII: Management Security 675Modifying a CertificateThe procedure in this section modifies a certificate. (T

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 6763. Type 2 to select State and specify if a certificate is truste

AT-S62 Menus Interface User’s GuideSection VII: Management Security 677Deleting a CertificateThe procedure in this section deletes a certificate from

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 678Viewing a CertificateThis procedure displays information about a

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6793. Type N to see the second page of certificate details.The View Certificate De

Chapter 4: Basic Switch ParametersSection I: Basic Operations 68g. Type 6 - Poll Interval to specify the time interval between queries to the SNTP ser

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 680MD5 Fingerprint - Indicates the MD5 algorithm. This value provid

AT-S62 Menus Interface User’s GuideSection VII: Management Security 681Generating an Enrollment RequestTo request a certificate from a public or priva

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 6825. From the Public Key Infrastructure (PKI) Configuration Menu,

AT-S62 Menus Interface User’s GuideSection VII: Management Security 683PEM - Creates the certificate in the Privacy Enhanced Mail (PEM) format, which

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 684Installing CA Certificates onto a SwitchThis section lists the p

AT-S62 Menus Interface User’s GuideSection VII: Management Security 685Configuring PKIOption 1 - Maximum Number of Certificates in the Public Key Infr

Chapter 33: Public Key Infrastructure CertificatesSection VII: Management Security 686Configuring SSLTo configure the SSL protocol, perform the follow

687Chapter 34Secure Shell (SSH) ProtocolThe chapter contains overview information about the Secure Shell (SSH) protocol and the procedure for configur

Chapter 34: Secure Shell (SSH) ProtocolSection VII: Management Security 688SSH OverviewSecure management is increasingly important in modern networks,

AT-S62 Menus Interface User’s GuideSection VII: Management Security 689❑ Tunnelling of TCP/IP traffic NoteNon-encrypted Secure Shell sessions serve no

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 69Configuring the Console Startup ModeYou can configure the AT-S62 software to initiall

Chapter 34: Secure Shell (SSH) ProtocolSection VII: Management Security 690SSH andEnhancedStackingThe AT-S62 management software allows for encrypted

AT-S62 Menus Interface User’s GuideSection VII: Management Security 691Guidelines Below are the guidelines to observe when configuring SSH:❑ SSH requi

Chapter 34: Secure Shell (SSH) ProtocolSection VII: Management Security 692Configuring the SSH ServerThis section describes how to configure the SSH s

AT-S62 Menus Interface User’s GuideSection VII: Management Security 6933. Select 1 - SSH Server Status to enable or disable the SSH server.4. Choose f

Chapter 34: Secure Shell (SSH) ProtocolSection VII: Management Security 694Displaying SSH InformationTo display SSH server information, perform the fo

AT-S62 Menus Interface User’s GuideSection VII: Management Security 695❑ Host Key ID: Indicates the host key ID defined for SSH.❑ Host Key Bits: Indic

696Chapter 35RADIUS and TACACS+ Authentication ProtocolsThis chapter explains how to create new manager accounts on a switch using the two authenticat

AT-S62 Menus Interface User’s GuideSection VII: Management Security 697TACACS+ and RADIUS OverviewTACACS+ and RADIUS are authentication protocols for

Chapter 35: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 698When a network manager logs in to a switch to manage the de

AT-S62 Menus Interface User’s GuideSection VII: Management Security 699gateway in the Administration Menu so that the switch and server can communicat

AT-S62 Menus Interface User’s Guide7Packet Prioritization ...

Chapter 4: Basic Switch ParametersSection I: Basic Operations 70Configuring the Console TimerThe AT-S62 management software uses the console timer, al

Chapter 35: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 700You can specify up to three TACACS+ or RADIUS servers. Spec

AT-S62 Menus Interface User’s GuideSection VII: Management Security 701Configuring Authentication Protocol SettingsTo configure the RADIUS or TACACS+

Chapter 35: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 7025. To disable the server-based authentication feature on th

AT-S62 Menus Interface User’s GuideSection VII: Management Security 703Use per-server secret [Y/N] ->If you will be specifying more than one TACACS

Chapter 35: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 704a. Type 4 to select RADIUS Configuration.The RADIUS Client

AT-S62 Menus Interface User’s GuideSection VII: Management Security 7053 - RADIUS Server 1 Configuration4 - RADIUS Server 1 Configuration5 - RADIUS Se

Chapter 35: RADIUS and TACACS+ Authentication ProtocolsSection VII: Management Security 706d. From the Authentication Menu, type 1 to select Server-ba

707Chapter 36Management Access Control ListThis chapter explains how to create an access control list (ACL) to restrict Telnet and web browser managem

Chapter 36: Management Access Control ListSection VII: Management Security 708Management Access Control List OverviewThe Management Access Control Lis

AT-S62 Menus Interface User’s GuideSection VII: Management Security 709IP AddressYou can specify the IP address of a specific management workstation o

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 71Enabling or Disabling the Telnet ServerThis procedure explains how to enable or disab

Chapter 36: Management Access Control ListSection VII: Management Security 710❑ The ACEs are performed in the order in which you enter them in the ACL

AT-S62 Menus Interface User’s GuideSection VII: Management Security 711This ACE allows all management workstations in the subnet 149.11.11.0 to remote

Chapter 36: Management Access Control ListSection VII: Management Security 712Creating a Management ACLTo create a Management ACL, perform the followi

AT-S62 Menus Interface User’s GuideSection VII: Management Security 713255.255.255.255. If you are filtering on a subnet, the mask will depend on the

Chapter 36: Management Access Control ListSection VII: Management Security 714Adding, Deleting, and Viewing ACEsYou can add or delete ACEs from the Ma

715Appendix AAT-S62 Default SettingsThis appendix lists the AT-S62 factory default settings. It contains the following sections:❑ Basic Switch Default

Appendix A: AT-S62 Default Settings716❑ VLAN Default Settings on page 739❑ Web Server Default Settings on page 740

AT-S62 Menus Interface User’s Guide717Basic Switch Default SettingsThis section lists the default settings for basic switch parameters. The following

Appendix A: AT-S62 Default Settings718NoteLogin names and passwords are case-sensitive.RS-232 PortDefault SettingsThe following table lists the RS-232

AT-S62 Menus Interface User’s Guide719SwitchAdministrationDefault SettingsThe following table describes the switch administration default settings.Sys

Chapter 4: Basic Switch ParametersSection I: Basic Operations 72Setting the Baud Rate of the RS-232 Terminal PortThe default baud rate of the RS-232 T

Appendix A: AT-S62 Default Settings720Denial of Service Defense Default SettingsThe following table lists the default settings for the Denial of Servi

AT-S62 Menus Interface User’s Guide721Enhanced Stacking Default SettingThe following table lists the enhanced stacking default setting.Enhanced Stacki

Appendix A: AT-S62 Default Settings722Event Log Default SettingsThe following table lists the event log default settings.Event Log Setting DefaultStat

AT-S62 Menus Interface User’s Guide723GVRP Default SettingsThis section provides the default settings for GVRP.GVRP Setting DefaultStatus DisabledGIP

Appendix A: AT-S62 Default Settings724IGMP Snooping Default SettingsThe following table lists the IGMP Snooping default settings.IGMP Snooping Setting

AT-S62 Menus Interface User’s Guide725MAC Address Security Default SettingsThe following table lists the MAC address security default settings.MAC Add

Appendix A: AT-S62 Default Settings726Management Access Control List Default SettingThe following table lists the default setting for the Management A

AT-S62 Menus Interface User’s Guide727PKI Default SettingsThe following table lists the PKI default settings, including the generate enrollment reques

Appendix A: AT-S62 Default Settings728Port Configuration Default SettingsThe following table lists the port configuration default settings.Port Config

AT-S62 Menus Interface User’s Guide729802.1x Port-Based Network Access Control Default SettingsThe following table describes the 802.1x Port Access Co

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 73Pinging a Remote SystemYou can instruct the switch to ping a remote device on your ne

Appendix A: AT-S62 Default Settings730The following table lists the default settings for a supplicant port.Piggyback Mode EnabledSupplicant Port Setti

AT-S62 Menus Interface User’s Guide731Power Over EthernetThe following table describes the Power over Ethernet (PoE) default settings. This feature ap

Appendix A: AT-S62 Default Settings732Class of ServiceThe following table lists the default mappings of IEEE 802.1p priority levels to egress port pri

AT-S62 Menus Interface User’s Guide733Server-Based Authentication Default SettingsThis section describes the server-based authentication, RADIUS, and

Appendix A: AT-S62 Default Settings734SNMP Default SettingsThe following table describes the SNMPv1 and SNMPv2c default settings.SNMP Communities Sett

AT-S62 Menus Interface User’s Guide735STP, RSTP, and MSTP Default SettingsThis section provides the spanning tree, STP RSTP, and MSTP, default setting

Appendix A: AT-S62 Default Settings736MSTP DefaultSettingsThe following table lists the MSTP default settings.Port Priority 128RSTP Setting DefaultMST

AT-S62 Menus Interface User’s Guide737SSH Default SettingsThe following table lists the SSH default settings.SSH Setting DefaultStatus DisabledHost Ke

Appendix A: AT-S62 Default Settings738SSL Default SettingsThe following table lists the SSL default settings.SSL Setting DefaultMaximum Number of Sess

AT-S62 Menus Interface User’s Guide739VLAN Default SettingsThis section provides VLAN default settings.VLAN Setting DefaultDefault VLAN Name Default_V

Chapter 4: Basic Switch ParametersSection I: Basic Operations 74Returning the AT-S62 Software to the Factory Default ValuesThere are two procedures fo

Appendix A: AT-S62 Default Settings740Web Server Default SettingsThe following table lists the web server default settings.Web Server Configuration Se

741Appendix BSNMPv3 Configuration ExamplesThis appendix provides two examples of SNMPv3 configuration using the SNMPv3 Table menus and a worksheet to

Appendix B: SNMPv3 Configuration Examples742SNMPv3 Configuration ExamplesThis appendix provides SNMPv3 configuration examples for the following types

AT-S62 Menus Interface User’s Guide743Configure SNMPv3 SecurityToGroup TableUser Name:systemadmin24Security Model:v3Group Name: ManagersStorage Type:

Appendix B: SNMPv3 Configuration Examples744Configure SNMPv3 View Table Menu View Name: internetView Subtree OID: 1.3.6.1 (or internet)Subtree Mask: V

AT-S62 Menus Interface User’s Guide745SNMPv3 Access Table MenuGroup NameSecurity ModelSecurity LevelRead View NameWrite View NameNotify View NameStora

Appendix B: SNMPv3 Configuration Examples746Storage TypeSNMPv3 Target Parameters TableTarget Parameters NameUser (Security) NameSecurity ModelSecurity

747IndexNumerics802.1x port-based network access controlaccess role, configuring 618authentication process 609authenticator portconfiguring 620describ

Index748associationsdefined 484VLANs to MSTI IDs 502asymmetrical encryption algorithms 641AT-S62 softwaredefault settings 715AT-S62 software updatesdo

AT-S62 Menus Interface User’s Guide749certificate type, configuring 673certificates, guidelines 659certificates, PKIadding to database 672chains 665cr

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 75The following prompt is displayed:This operation requires a switch reboot. Continue?

Index750dynamic GVRP port 549dynamic GVRP VLAN 549Dynamic Host Control Protocol (DHCP)activating 59deactivating 59default setting 719dynamic MAC addre

AT-S62 Menus Interface User’s Guide751guidelines 551GVRP counters 565GVRP state machine, displaying 571intermediate switches 553overview 549parameters

Index752multicast routers, displaying 308overview 301snoop topology 304Internet Protocol (IP) addressassigning 54configuring 56default 719switches 53i

AT-S62 Menus Interface User’s Guide753max age parameterMultiple Spanning Tree Protocol (MSTP) 495max hops parameterMultiple Spanning Tree Protocol (MS

Index754modeactivating 579deactivating 579overview 575Nnegotiation status 95networking stack 333non-802.1Q compliant multiple VLAN mode, described 578

AT-S62 Menus Interface User’s Guide755Rapid Spanning Tree Protocol (RSTP) 475Spanning Tree Protocol (STP) 470port priorities, displaying 299, 543port

Index756RRADIUSdefault settings 733disabling 701enabling 701guidelines 698overview 697settings, displaying 706status, displaying 706RADIUS serverencry

AT-S62 Menus Interface User’s Guide757server key ID parameter 693server port (SSH) parameter 694server timeout, configuring 622server-based authentica

Index758displaying 449modifyinggroup name 398storage type 400SNMPv3 SecurityToGroup Table, described 357SNMPv3 Target Address Table entrycreating 410d

AT-S62 Menus Interface User’s Guide759strict priority scheduling 292subnet mask 57configuring 57default setting 719Subtree Mask 352subtree mask, modif

Chapter 4: Basic Switch ParametersSection I: Basic Operations 76❑ The current speed setting of the RS232 console port on the switch is retained.Cautio

Index760user password, configuring 626User-based Security Model (USM) authentication 349UTC offsetdefault setting 718setting 67Vversions supported (SS

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 77Viewing System Hardware and Software InformationThe procedure in this section display

Chapter 4: Basic Switch ParametersSection I: Basic Operations 78The System Hardware Information menu is shown in Figure 14.Figure 14 System Hardware

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 79Setting the Switch’s Temperature ThresholdThe switch sends an SNMP trap to your manag

Table of Contents8Chapter 20Power Over Ethernet ...

80Chapter 5SNMPv1 and SNMPv2c ConfigurationThis chapter explains how to activate SNMP management on the switch and how to create, modify, and delete S

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 81SNMPv1 and SNMPv2c OverviewThe Simple Network Management Program (SNMP) is another wa

Chapter 5: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 82Community String NameYou must give the community string a name. The name c

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 83Each community string can have up to eight trap IP addresses.It does not matter which

Chapter 5: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 84Enabling or Disabling SNMP ManagementTo enable or disable SNMP management

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 85Setting the Authentication Failure TrapAs mentioned in the SNMP Overview section in t

Chapter 5: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 86Creating an SNMP Community StringTo create a new SNMP community string, pe

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 875. Enter the new SNMP community string. The name can be from one to fifteen alphanume

Chapter 5: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 88Modifying a Community StringTo modify a community string, perform the foll

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 89The menu options are described below:1 - Add Attributes to CommunityIf a community st

AT-S62 Menus Interface User’s Guide9Deleting an SNMPv3 Notify Table Entry ...

Chapter 5: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 903. If you want to remove the IP address of a management workstation from t

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 91Do you want to change Community Status? (Y/N): [Yes/No] ->4. Type Y to change the

Chapter 5: SNMPv1 and SNMPv2 Community StringsSection I: Basic Operations 92Displaying the SNMP Community StringsTo display the attributes of all the

93Chapter 6Port ParametersThe chapter contains the procedures for viewing and adjusting the parameter settings for the individual ports on a switch. T

Chapter 6: Port ParametersSection I: Basic Operations 94Displaying Port StatusTo display the current status and settings of the ports on the switch, p

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 95NoteThe speed, duplex mode, and flow control settings will be blank for ports that ha

Chapter 6: Port ParametersSection I: Basic Operations 96PVIDThe port’s VLAN identifier (PVID). This number corresponds to the VID of the VLAN in which

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 97Configuring Port ParametersTo configure the parameter settings of a port, perform the

Chapter 6: Port ParametersSection I: Basic Operations 98Selections 3, 5, and 6 appear in the menu only when selection 4 - Negotiation is set to Manual

AT-S62 Menus Interface User’s GuideSection I: Basic Operations 992 - Broadcast FilterMost frames on an Ethernet network are usually unicast frames. A