background image

Management 
Software

AT-S39

User’s Guide

AT-8012M, AT-8012M-QS, AT-8016F/xx (MT, SC and 
ST), AT-8024, AT-8024GB, AT-8024M, AT-8026FC, 
AT-8026T, and  AT-8088/xx (MT and SC) 
FAST ETHERNET SWITCHES

VERSION 3.3.0

®

PN 613-50245-00 Rev J

Содержание AT-S39

Страница 1: ...nt Software AT S39 User s Guide AT 8012M AT 8012M QS AT 8016F xx MT SC and ST AT 8024 AT 8024GB AT 8024M AT 8026FC AT 8026T and AT 8088 xx MT and SC FAST ETHERNET SWITCHES VERSION 3 3 0 PN 613 50245 0...

Страница 2: ...in are trademarks or registered trademarks of their respective owners Allied Telesyn Inc reserves the right to make changes in specifications and other information contained in this document without p...

Страница 3: ...ter 1 Overview 20 Local Management Session 22 Telnet Management Session 23 Web Browser Management Session 24 SNMP Management Session 25 Management Access Levels 26 Section II Local and Telnet Manageme...

Страница 4: ...Console Startup Mode 56 Chapter 4 Enhanced Stacking 57 Enhanced Stacking Overview 58 Guidelines 58 Setting a Switch s Enhanced Stacking Status 61 Selecting a Switch in an Enhanced Stack 63 Returning t...

Страница 5: ...139 Example of Creating a Tagged VLAN 140 Modifying a VLAN 141 Displaying VLAN Information 144 Deleting a VLAN 145 Deleting All VLANs 147 Displaying PVIDs and Priorities 148 Enabling or Disabling Ingr...

Страница 6: ...uring the Authentication Client Software 196 Chapter 18 802 1x Port Based Access Control 202 802 1x Port based Access Control Overview 203 Authentication Process 204 Port Roles 205 General Steps 205 P...

Страница 7: ...Selecting a Switch in an Enhanced Stack 263 Returning to the Master Switch 264 Chapter 24 Port Parameters 265 Configuring Port Parameters 266 Displaying Port Status and Statistics 271 Chapter 25 Port...

Страница 8: ...st Frames 325 Chapter 34 TACACS and RADIUS Protocols 326 Configuring TACACS and RADIUS 327 Appendix A AT S39 Default Settings 331 Management Interface Default Settings 331 Switch Administration Defaul...

Страница 9: ...uration Menu 47 Figure 7 Passwords Menu 51 Figure 8 Diagnostics Menu 53 Chapter 4 Enhanced Stacking 57 Figure 9 Enhanced Stacking Example 60 Figure 10 Enhanced Stacking Menu 61 Figure 11 Stacking Serv...

Страница 10: ...AN Example 1 124 Figure 35 Port based VLAN Example 2 126 Figure 36 Example of a Tagged VLAN 130 Chapter 11 Creating Port based and Tagged VLANs 134 Figure 37 VLAN Menu 135 Figure 38 Configure VLANs Me...

Страница 11: ...apter 20 File Downloads and Uploads 220 Figure 63 Downloads Uploads Menu 224 Figure 64 Local Management Window 226 Figure 65 Send File Window 227 Figure 66 XModem File Send Window 227 Figure 67 Local...

Страница 12: ...ning Tree Tab Monitoring 295 Figure 93 Rapid Spanning Tree Window Monitoring 296 Chapter 29 Virtual LANs 297 Figure 94 VLAN Menu 298 Figure 95 Add VLAN Menu 299 Figure 96 VLAN Monitoring Window 304 Ch...

Страница 13: ...ure an AT 8000 Series Fast Ethernet Switch using the AT S39 management software The AT 8000 Series consists of the following Fast Ethernet switches AT 8012M AT 8012M QS AT 8016F xx MT SC and ST AT 802...

Страница 14: ...Telnet management session A local management session is established by connecting a terminal or PC to the RS 232 Terminal Port on the front panel of the switch A Telnet management session is establish...

Страница 15: ...conventions Note Notes provide additional information Warning Warnings inform you that performing or omitting a specific action may result in bodily injury Caution Cautions inform you that performing...

Страница 16: ...he installation and user guides for all Allied Telesyn products are available in Portable Document Format PDF from on our web site at www alliedtelesyn com You can view the documents on line or downlo...

Страница 17: ...ical Support via email or telephone refer to the Support Services section of the Allied Telesyn web site http www alliedtelesyn com Returning Products Products for return or repair must first be assig...

Страница 18: ...rnet sites Allied Telesyn web site http www alliedtelesyn com Allied Telesyn FTP server ftp ftp alliedtelesyn com To download new software from the Allied Telesyn FTP server using your workstation s c...

Страница 19: ...provides a brief overview of the AT S39 management software It explains some of the functions that you can perform with the management software and reviews different methods for accessing the AT S39 s...

Страница 20: ...bnet mask Activate and configure a spanning tree protocol Activate enhanced stacking functions Configure Class of Service COS Enable and configure IGMP snooping Enable and configure broadcast storm co...

Страница 21: ...s a menu interface and a command line interface that make it very easy to use and a special interface for managing a switch with a web browser There are four different ways to access the management so...

Страница 22: ...the switch You can configure all of a switch s operating parameters from a local management session Note For instructions on starting a local management session refer to Starting a Local Management Se...

Страница 23: ...net that has been assigned an Internet Protocol IP address Only one switch in a subnet needs to have an IP address Once you have established a Telnet management session with the switch that has an IP...

Страница 24: ...ng this type of management session refer to Starting a Web Browser Management Session on page 242 In order to start a web browser management session there must be at least one enhanced stacking switch...

Страница 25: ...93 Interface Group MIB RFC 1573 Ethernet MIB RFC 1643 Remote Network MIB RFC 1757 Allied Telesyn managed switch MIB You must download the Allied Telesyn managed switch MIB atistackinfo mib and atiswit...

Страница 26: ...s When you log in as an Operator you can only view the operating parameters you cannot change any values You log in as a manager or an operator by entering the appropriate password when you start an A...

Страница 27: ...ter 5 Port Parameters on page 65 Chapter 6 Port Security on page 76 Chapter 7 Port Trunking on page 82 Chapter 8 Port Mirroring on page 92 Chapter 9 STP and RSTP on page 96 Chapter 10 Virtual LANs Ove...

Страница 28: ...Section II Local and Telnet Management 28 Chapter 18 802 1x Port Based Access Control on page 202 Chapter 19 Ethernet Statistics on page 215 Chapter 20 File Downloads and Uploads on page 220...

Страница 29: ...This chapter contains the procedure for starting a local or Telnet management session on an AT 8000 Series switch The sections in the chapter are Local Management Session on page 30 Telnet Management...

Страница 30: ...anagement session You can start a local management session at any time on any AT 8000 Series switch in your network A local management session does not interfere with the flow of Ethernet traffic thro...

Страница 31: ...e management cable is included with the switch Figure 1 Connecting a Terminal or PC to the RS232 Terminal Port 2 Connect the other end of the cable to an RS 232 port on a terminal or PC with a termina...

Страница 32: ...Note The port settings are for a DEC VT100 or ANSI terminal or an equivalent terminal emulator program Note During boot up the switch displays the following prompt Press CTRL B to go to Boot prompt Th...

Страница 33: ...t session on the master switch of an enhanced stack enables you to manage all the switches in the same enhanced stack from the same management session This can save you the time and trouble of having...

Страница 34: ...nd type Q for Quit You should always exit from a management session when you are finished managing a switch This can prevent unauthorized individuals from making changes to a switch s configuration sh...

Страница 35: ...you have management access to all enhanced stacking switches including the AT 8000 Series switch that reside in the same enhanced stack Note For background information on enhanced stacking refer to E...

Страница 36: ...nt session on a switch at a time Additionally you cannot run both a Telnet management session and a local management session on the same switch at the same time Quitting from a Telnet Management Sessi...

Страница 37: ...only to temporary memory by the switch and will be lost the next time you reset or power cycle the unit To permanently save a change you must select the S Save Configuration Changes option You should...

Страница 38: ...r include When Does a Switch Need an IP Address on page 39 Configuring an IP Address and Switch Name on page 41 Activating the BOOTP and DHCP Client Software on page 44 Configuring SNMP Community Stri...

Страница 39: ...h automatically gives you complete management access to all the other switches in the same enhanced stack This feature has two primary benefits First it reduces the number of IP addresses you have to...

Страница 40: ...tion manually This procedure is explained in Configuring an IP Address and Switch Name on page 41 The second method is for you to activate the BOOTP and DHCP services on the switch and have the switch...

Страница 41: ...ame of the administrator responsible for maintaining the unit and the location of the switch To manually set a switch s IP address perform the following procedure 1 From the Main Menu type 4 to select...

Страница 42: ...ult router s IP address This address is required if you intend to remotely manage the switch from a management station that is separated from the switch by a router The gateway address must be entered...

Страница 43: ...tting a Switch on page 49 A Server based Authentication This selection is used to configure the TACACS and RADIUS clientsoftwareontheswitch Forinformationonthisfeature refer to Chapter 17 TACACS and R...

Страница 44: ...switch Choices are static and dynamic If you choose static the server will always assign the same IP address to the switch when the switch is reset or powered ON This is the preferred configuration Si...

Страница 45: ...CP server The switch continues to query the network for its IP configuration until it receives a response AnystaticIPaddress subnetmask andgatewayaddressassignedto the switch are deleted from the Admi...

Страница 46: ...ing Management Access on page 52 1 From the Main Menu type 5 to select System Config Menu The System Configuration Menu is shown in Figure 4 Figure 4 System Configuration Menu Allied Telesyn Ethernet...

Страница 47: ...t Switch AT 8024GB AT S39 Sales Switch Login Privilege Manager Advanced Configuration Menu 1 IGMP Snooping Configuration 2 Broadcast Timers Setup 3 SNMP Configuration R Return to Previous Menu Enter y...

Страница 48: ...ommunity string can be up to thirteen characters Community strings are case sensitive and can contain spaces and special characters such as an exclamation point 4 Trap Receiver 1 5 Trap Receiver 2 6 T...

Страница 49: ...pe 9 to select Reset Switch The following prompt is displayed Do you want to proceed with the switch reboot Yes No 3 Type Y to reset the switch or N to cancel this procedure If you are running a local...

Страница 50: ...IUS Protocols on page 192 Console Timeout This parameter causes the management software to automatically end a management session if it does not detect any activity from the local or remote management...

Страница 51: ...managing the switch from a web browser Many web browsers cannot handle special characters in passwords To change the Manager or Operator password perform the following procedure 1 From the Main Menu t...

Страница 52: ...any activity from the management station after 2 minutes A new console timer value takes affect the next time you start a local or remote management session 3 To configure web browser access type 4 t...

Страница 53: ...splayed in selections 1 through 7 in this menu is for viewing purposes only For information on option 8 refer to Displaying Uplink Information on page 74 Allied Telesyn Ethernet Switch AT 8024 AT S39...

Страница 54: ...at in most cases you must perform this procedure from the master switch of an enhanced switch To instruct the switch to ping a network device perform the following procedure 1 From the Main Menu type...

Страница 55: ...enu type 5 to select System Config Menu 2 From the System Configuration Menu type 7 to select Reset to Factory Defaults The following prompt is displayed Are you sure you want to reset to Factory Defa...

Страница 56: ...form the following procedure 1 From the Main Menu type 5 to select System Config Menu 2 From the System Configuration Menu type 6 to select Console Startup Mode The following prompt is displayed Enter...

Страница 57: ...his chapter explains the enhanced stacking feature The sections in this chapter include Enhanced Stacking Overview on page 58 Setting a Switch s Enhanced Stacking Status on page 61 Selecting a Switch...

Страница 58: ...in your network A enhanced stack can consist of any Allied Telesyn switches that featureenhancedstacking includingtheAT 8000Seriesswitches the AT 8400 Series switches and the AT 8524M switch An enhanc...

Страница 59: ...ask A master switch must have an IP address and subnet mask The other switches in an enhanced stack referred to as slave switches do not If an enhanced stack will have more than one master switch you...

Страница 60: ...nhanced stacks and each has been assigned a unique IP address To manage the switches of an enhanced stack you could start a local or a remote management session with one of the master switches in the...

Страница 61: ...be remotely managed through enhanced stacking A switch with this designation can be managed locally To be managed remotely a switch with an unavailable stacking status must be assigned a unique IP ad...

Страница 62: ...rvices selection is included in the menu only for master switches 2 To change a switch s stacking status type 1 to select Switch State The following prompt is displayed Enter new setup M S U 3 Type M...

Страница 63: ...switch or another Master switch in the stack you need to select it from the management software To select a switch to manage in an enhanced stack perform the following procedure 1 From the Main Menu t...

Страница 64: ...s displayed Enter the switch number 1 to 24 5 Type the number of the switch in the list you want to manage 6 Enter a user name and password for the switch and press Return The default user name and pa...

Страница 65: ...cedures for viewing and changing the parameter settings for the individual ports on a switch This chapter contains the following procedures Displaying Port Status on page 66 Configuring Port Parameter...

Страница 66: ...Port Access Control S Save Configuration Changes R Return to Previous Menu Enter your selection Allied Telesyn Ethernet Switch AT 8024 AT S39 Login Privilege Manager Port Status Prt Link Neg MDIO Spd...

Страница 67: ...e been set manually MDIO The operating configuration of the port Possible values are Auto MDI MDI X The status Auto indicates that the port is automatically determining the appropriate MDI or MDI X se...

Страница 68: ...rt Receive Flow control only on as packets are being received on the port Both Flow control for both packets entering and leaving the port State The current operating status of the port Possible value...

Страница 69: ...on menu is shown in Figure 14 Figure 14 Port Configuration Menu Note The Port Configuration menu in the figure above is for a 10 100 Mbps twisted pair port The menu for a fiber optic port a GBIC modul...

Страница 70: ...l operation You can also disable an unused port to secure it from unauthorized connections Possible settings are Forwarding The port will forward packets This is the default setting Disabled The port...

Страница 71: ...5 Manual Speed and Duplex Mode Settings You use these two selections to set the port s speed and duplex mode The possible settings for the 2 Speed selection are 0010 10 Mbps 0100 100 Mbps 1000 1000 Mb...

Страница 72: ...lection to set the wiring configuration of the port The configuration can be Auto MDI or MDI X The twisted pair ports on the switch feature auto MDI MDI X They configured themselves automatically as M...

Страница 73: ...a again it stops forcing collisions The default setting for backpressure on a switch port is disabled 5 Once you have set the port parameters type S to select Save Configuration Changes Configuration...

Страница 74: ...8 to select Diagnostics 2 From the Diagnostics menu type 8 to select Uplink Information The GBIC Information menu is shown in Figure 16 Figure 16 Uplink Information Menu 3 Type 1 to select Uplink Inf...

Страница 75: ...oses only Allied Telesyn Ethernet Switch AT 8024GB AT S39 Login Privilege Manager Uplink Information Menu Port Number 25 Type of Serial Transceiver Unknown Extended Serial Transceiver Module Not Defin...

Страница 76: ...include Port Security Overview on page 77 Configuring Port Security on page 79 Configuring the Limited Security Mode on page 80 Note To change a switch s port security level you must use a local manag...

Страница 77: ...y The switch learns and adds addresses to its dynamic MAC address table as it receives frames on the ports Note The Automatic security mode is the default security level for the switch Limited You can...

Страница 78: ...ess table Any node whose MAC address is not in the static MAC address table will not be able to send frames through the switch Lock All Ports This security level causes the switch to immediately stop...

Страница 79: ...owing prompt is displayed Enter new mode A Automatic L Limited S Secured K locKed 4 Select the desired security level You can select only one security level For an explanation of the levels refer to P...

Страница 80: ...ddresses are not included in the count of the maximum MAC addresses a port can learn You can continue to add static MAC addresses even after a port has learned its maximum number of dynamic MAC addres...

Страница 81: ...ss Return The range is 1 to 150 addresses The default is 100 7 Repeat this procedure starting with Step 4 to specify MAC address limits on other ports 8 Type S to select Save Configuration Changes 9 T...

Страница 82: ...Trunking This chapter contains the procedures for creating and deleting port trunks Sections in the chapter include Port Trunking Overview on page 83 Creating a Port Trunk on page 89 Deleting a Port...

Страница 83: ...f a port trunk of four data links between two AT 8024 switches Figure 20 Port Trunk Example Observe the following guidelines when creating a port trunk An AT 8000 Series switch can support only one po...

Страница 84: ...Specifications The speed duplex mode and flow control settings must be the same for all the ports of a port trunk When you create a port trunk the management software copies the current settings of t...

Страница 85: ...runk links All subsequent packets from the source node are sent out the assigned data link of the trunk The switch assigns source addresses so as to evenly distribute the addresses or at least as much...

Страница 86: ...Base TX Fast Ethernet Switch RS 232 TERMINAL PORT CLASS 1 LASER PRODUCT DO NOT STARE INTO BEAM TX TX RX RX 26 Link Mode Link Mode 100 FULL ACT MODE COL FAULT MASTER PWR AT 8024 10Base T 100Base TX Fas...

Страница 87: ...stribution The result would be that the switch would use only one data link in the trunk to send packets back to Switch 1 because there is only one source a Gigabit Ethernet server connected to Switch...

Страница 88: ...s also valid when sending from many source nodes to one destination node or from many sources to many destinations The table below shows a possible matrix for a port trunk of three data links using th...

Страница 89: ...nk Check to be sure that the settings are correct for the end node to which the trunk will be connected When you create the trunk the AT S62 management software copies the settings of the lowest numbe...

Страница 90: ...od SA DA trunking You use this selection to specify the load distribution method The default is SA DA 5 To change the load distribution method type 2 to toggle the selection through its possible setti...

Страница 91: ...poor network performance To delete a port trunk from the switch perform the following procedure 1 From the Main Menu type 1 to select Port Menu 2 From the Port Menu type 3 to select Port Trunking The...

Страница 92: ...rroring This chapter contains the procedures for creating and deleting a port mirror Sections in the chapter include Port Mirroring Overview on page 93 Creating a Port Mirror on page 94 Deleting a Por...

Страница 93: ...n creating a port mirror You can mirror from one to 23 ports on a switch at a time However the more ports you mirror the less likely the mirroring port will be able to handle all the traffic For examp...

Страница 94: ...ort 5 Type 2 to select Mirroring Source Port The following prompt is displayed Enter Mirroring Ports 0 None 6 Enter the number of the port whose traffic is to be mirrored To mirror the traffic of more...

Страница 95: ...ort Mirroring The Port Mirroring menu is shown in Figure 23 on page 94 3 Type 1 to select Mirror Destination Port The following prompt is displayed Enter mirror port 0 None 0 to 24 4 Enter 0 and press...

Страница 96: ...o adjust the STP and RSTP bridge and port parameters The sections in this chapter include STP and RSTP Overview on page 97 Enabling or Disabling STP or RSTP on page 105 Configuring STP on page 107 Con...

Страница 97: ...p redundant path in case a main link fails Where the two protocols differ is in the time each takes to complete the process commonly referred to as convergence When a change is made to the network top...

Страница 98: ...ries switch You can designate which switch on your network you want as the root bridge by giving it the lowest bridge priority number You might also consider which bridge should function as the backup...

Страница 99: ...primary path and all other redundant paths are placed into blocking state Path cost is determined through an evaluation of port costs Every port on a bridge participating in STP has a cost associated...

Страница 100: ...ath In some instances this can involve the use of the port priority parameter This parameter can be used as a tie breaker when two paths have the same cost In STP the range for port priority is 0 to 2...

Страница 101: ...to changing to the forwarding state The forwarding delay value is adjustable on the AT 8000 Series switch through the management software The appropriate value for this parameter will depend on a numb...

Страница 102: ...is defining the port types on the bridge This relates to the device s connected to the port With port type defined RSTP can reconfigure a network much quicker than STP when a change in network topolo...

Страница 103: ...n full duplex and have no STP or RSTP devices connected to it Figure 26 illustrates a port functioning both as point to point and edge Figure 26 Point to Point and Edge Point Determining whether a bri...

Страница 104: ...ports are divided into different VLANs the spanning tree crosses the VLAN boundaries This point can pose a problem in networks containing multiple VLANs that span different switches and are connected...

Страница 105: ...wing procedure 1 From the Main Menu type 3 to select Spanning Tree Menu The Spanning Tree Menu is shown in Figure 28 Figure 28 Spanning Tree Menu Note To select a new active spanning tree perform step...

Страница 106: ...RSTP parameters before enabling spanning tree The switch resets and changes the active spanning tree protocol Note Your management session with the switch is ended To continue managing the unit you m...

Страница 107: ...ht have a negative effect on your network You should consult the IEEE 802 1d standard before changing any of the STP parameters 1 From the Spanning Tree Menu type 3 to select STP Configuration The STP...

Страница 108: ...iod before a bridge changes to a new state for example becomes the new root bridge after the topology changes If the bridge transitions too soon not all links may have yet adapted to the change result...

Страница 109: ...To change STP port settings go to the next procedure Configuring STP Port Settings To adjust a port s STP parameters perform the following procedure 1 From the Spanning Tree Menu type 3 to select STP...

Страница 110: ...which STP is disabled is immediately placed in the forwarding state It should be noted that a port where STP has been disabled cannot be placed in the blocking state by STP should there be a loop in...

Страница 111: ...er when two or more ports are determined to have equal costs to the root bridge The default value for priority is 128 The range is 0 to 255 5 Port State The current STP status of the port The status c...

Страница 112: ...n your network You should consult the IEEE 802 1w standard before changing any of the RSTP parameters 1 From the Spanning Tree Menu type 4 to select RSTP Configuration The RSTP Menu is shown in Figure...

Страница 113: ...rements refer to Table 4 RSTP Bridge Priority Value Increments on page 98 3 Bridge Hello Time The time interval between generating and sending configuration messages by the bridge This parameter can b...

Страница 114: ...priority on the root bridge This value is for display purposes only and cannot be changed Note Options 7 Root Bridge and 8 Root Priority are displayed only when RSTP is enabled on the switch P RSTP Po...

Страница 115: ...24 4 Enter the number of the port you want to configure To configure a range of ports enter the first port of the range The following prompt is displayed Ending Port to Configure 1 to 24 5 To configur...

Страница 116: ...t setting is Auto detect which sets port cost depending on the speed of the port Default values are 2 000 000 for 10 Mbps ports 200 000 for a 100 Mbps ports and 20 000 for one gigabit ports 3 Point to...

Страница 117: ...ne if there are any RSTP or STP bridges connected to the port If the port receives STP BPDU packets in response the port changes to STP compatible mode Note The MCHECK option is visible and can be set...

Страница 118: ...LAN Mode It also explains how to select a VLAN mode For the procedures for creating tagged and port based VLANs refer to the next chapter Sections in this chapter include VLAN Overview on page 119 Use...

Страница 119: ...n a LAN segment vying for bandwidth the greater the likelihood overall network performance will decrease VLANs improve network performance because VLAN traffic stays within the VLAN The nodes of a VLA...

Страница 120: ...This means that the end nodes of a VLAN do not need to be connected to the same switch and so are not restricted to being in the same physical location VLAN Modes The AT 8000 Series switch supports th...

Страница 121: ...VLAN can have as many or as few ports as needed The VLAN can consist of all the ports on an Ethernet switch or just a few ports Additionally a port based VLAN can span switches and consist of ports f...

Страница 122: ...inked in that VLAN Untagged Ports You must specify which ports on the switch are members of a port based VLAN Ports in a port based VLAN are referred to as untagged ports and the frames received on th...

Страница 123: ...ts in a port based VLAN and is identical to the VLAN s VID A port based VLAN that spans multiple switches requires a port on each switch where the VLAN is located to function as an interconnection bet...

Страница 124: ...ult_VLAN is not shown Figure 34 Port based VLAN Example 1 The table below lists the port assignments for the Sales Engineering and Production VLANs on the switch Link Mode Link Mode 100 FULL ACT MODE...

Страница 125: ...been assigned PVID values A port s PVID is assigned automatically by the management software when you create the VLAN A PVID is the same as the VID to which the port is an untagged member In the exam...

Страница 126: ...k Mode Link Mode 100 FULL ACT MODE COL FAULT MASTER PWR AT 8024 10Base T 100Base TX Fast Ethernet Switch RS 232 TERMINAL PORT Link Mode Link Mode 100 FULL ACT MODE COL FAULT MASTER PWR AT 8024 10Base...

Страница 127: ...nd Ports 19 to 24 on the bottom switch as connections to the workstations of the VLAN Since this VLAN spans multiple switches it needs a direct connection between its various parts to provide a commun...

Страница 128: ...802 1Q compliant This is the standard that outlines the requirements and standards for tagging The device must be able to process the tagged information on received frames and add tagged information...

Страница 129: ...matically assigns a PVID to each port when a port is made a member of a VLAN The PVID is always identical to the VLAN s VID Because a tagged port determines VLAN membership by examining the tagged hea...

Страница 130: ...VLAN Link Mode Link Mode 100 FULL ACT MODE COL FAULT MASTER PWR AT 8024 10Base T 100Base TX Fast Ethernet Switch RS 232 TERMINAL PORT Link Mode Link Mode 100 FULL ACT MODE COL FAULT MASTER PWR AT 802...

Страница 131: ...simplify network design These ports are tagged members of the Sales and Engineering VLANs These ports provide a connection between the different parts of the two VLANs In the Port based Example 2 on...

Страница 132: ...assigned to ports and VLAN tags in tagged frames is ignored Tagged frames are analyzed only for priority level Packets are passed through the switch unchanged Tagged and untagged frames exit the swit...

Страница 133: ...s the default Type D to disable VLAN status if you want the switch to ignore all VLAN information and to operate in the Basic VLAN mode Press Return 4 Type 2 to select Ingress Filtering Status The fol...

Страница 134: ...VLAN Mode on page 133 This chapter contains the following sections Creating a New Port based or Tagged VLAN on page 135 Example of Creating a Port based VLAN on page 139 Example of Creating a Tagged V...

Страница 135: ...Ethernet Switch AT 8024 AT S39 Sales Switch Login Privilege Manager VLAN Menu 1 VLANs Status Enabled 2 Ingress Filtering Status Enabled 3 VLANs Mode User Configured 4 Management VLAN 1 Default_VLAN 5...

Страница 136: ...select VLAN ID VID and enter a VID value for the new VLAN The permitted range of the VID value is 2 to 4094 The management software will use the next available VID number on the switch as the default...

Страница 137: ...N will not contain any untagged ports leave this field empty You can specify the ports individually e g 2 3 5 as a range e g 7 9 or both e g 2 5 7 9 8 If you want all received traffic on the ports of...

Страница 138: ...ains the appropriate ports If you need to modify the VLAN go to Modifying a VLAN on page 141 Note Ports designated as untagged ports of the new VLAN are automatically removed from their current untagg...

Страница 139: ...Main Menu type 2 to select VLAN Menu 2 From the VLAN Menu type 5 to select Configure VLANS 3 From the Configure VLANS menu type 1 to select Create VLAN 4 Type 1 to select VLAN Name and enter Sales Pr...

Страница 140: ...2 From the VLAN Menu type 5 to select Configure VLANs 3 From the Configure VLANs menu type 1 to select Create VLAN 4 Type 1 to select VLAN Name and enter Engineering Press Return 5 Type 2 to select V...

Страница 141: ...the VID of the VLAN you want to modify Press Return The Modify a VLAN menu for the selected VLAN is displayed This menu contains all relevant information about the VLAN 6 Change the VLAN s informatio...

Страница 142: ...ports for the VLAN The new list will overwrite the existing ports Consequently to retain a port you must reenter it For example if the VLAN currently contains tagged port 4 and you wanted to add port...

Страница 143: ...e ports of the VLAN to a mirror port on the switch This feature is useful when troubleshooting a VLAN By placing a packet sniffer on the mirroring port you can analyze the VLAN traffic Note In most ca...

Страница 144: ...VLAN Menu 2 From the VLAN Menu type 7 to select Show VLANs An example of the Show VLANs menu is shown Figure 41 Figure 41 Show VLANs Menu User Configured Allied Telesyn Ethernet Switch AT 8024 Show VL...

Страница 145: ...select Configure VLANS 3 From the Configure VLANS menu type 3 to select Delete VLAN The Delete a VLAN menu is shown in Figure 42 Figure 42 Delete a VLAN Menu 4 Type 1 to select VLAN ID VID The follow...

Страница 146: ...lete this VLAN Yes No 7 Type Y to delete the VLAN or N to cancel the procedure Press Return A confirmation message is displayed 8 Press any key 9 Type S to select Save Configuration Changes The VLAN h...

Страница 147: ...ype 2 to select VLAN Menu 2 From the VLAN Menu type 5 to select Configure VLANS 3 From the Configure VLANS menu type 4 to select Clear All VLANs The following confirmation message is displayed This op...

Страница 148: ...Show PVIDs Priorities window is displayed An example of the window is shown in Figure 43 Figure 43 Show PVIDs and Priorities Window The PVID column displays the current PVID value for each switch por...

Страница 149: ...es the tagged header of each tagged frame that enters a port and determines whether the tagged frame and the port that received the frame are members of the same VLAN If they belong to the same VLAN t...

Страница 150: ...will probably want to leave ingress filtering activated on the switch which is the default You can enable or disable ingress filtering on a per switch basis You cannot set this per port To enable or...

Страница 151: ...agement communications path and then specify that path as the new management VLAN Below are several rules to observe when using this feature The management VLAN must exist on the AT 8000 Series switch...

Страница 152: ...tch using the management software Finally you must be sure to connect your management station to a port on a switch that is a tagged or untagged member of the management VLAN Note You cannot specify a...

Страница 153: ...r describes the Multiple VLAN Modes and how to select a mode This chapter contains the following sections Multiple VLAN Modes Overview on page 154 Activating or Deactivating a Multiple VLAN Mode on pa...

Страница 154: ...disconnection of network paths between switches unless the port used to link the switch being configured for multiple VLAN mode is configured as the uplink port Activating a multiple VLAN mode on casc...

Страница 155: ...Multiple VLANs mode the device connected to the uplink port must be 802 1Q compliant It must be able to handle tagged packets Table 8 802 1Q Compliant Multiple VLAN Example VLAN Name VID Untagged Port...

Страница 156: ...referred to as non 802 1Q compliant To be compliant a port cannot be an untagged member of more than one VLAN at a time Since in this mode the uplink port is an untagged member of multiple VLANs this...

Страница 157: ...tiple VLANs Example VLAN Name VID Untagged Port Tagged Port Client_VLAN_1 1 1 15 Client_VLAN_2 2 2 15 Client_VLAN_3 3 3 15 Client_VLAN_4 4 4 15 Client_VLAN_5 5 5 15 Client_VLAN_6 6 6 15 Client_VLAN_7...

Страница 158: ...ed VLANs that were configured before multiple VLAN mode was enabled When the user switches back to user configured VLANs mode the software automatically enables the user configured VLANs with the pre...

Страница 159: ...iple VLANs Q to enable Q 802 1Q Multiple VLANs or U to select user configured VLAN mode where you can create your own port based and tagged VLANs The default setting is the user configured VLAN mode I...

Страница 160: ...indow is displayed An example of the window is shown in Figure 44 Figure 44 Show VLANs Window Multiple VLAN Allied Telesyn Ethernet Switch AT 8024 AT S39 Sales Switch Login Privilege Manager Show VLAN...

Страница 161: ...verview on page 162 Displaying MAC Addresses on page 164 Adding Static Unicast and Multicast MAC Addresses on page 167 Deleting MAC Addresses on page 168 Deleting All Dynamic MAC Addresses on page 169...

Страница 162: ...termines the port where the destination node is connected It then forwards the packet to the appropriate port and on to the end node This increases network bandwidth by limiting each frame to the appr...

Страница 163: ...dress table from becoming filled with addresses of nodes that are no longer active The period of time that the switch waits before purging an inactive dynamic MAC address is called the aging timer Thi...

Страница 164: ...s for all ports type 1 to select Show All MAC Addresses To display only static MAC addresses type 5 to select Show All Static MAC Addresses To display static and dynamic addresses for only the base po...

Страница 165: ...nt multicast groups The abbreviation PMAP is derived from port mapping Each 0 is a hexadecimal value for the binary value 0000 Each binary 0 represents a port on the switch A binary 0 means that the p...

Страница 166: ...ddresses CPU This feature is not supported MIR Indicates whether the traffic on the port is being mirrored Yes means the traffic is being mirrored while No indicates that it is not EMP Indicates wheth...

Страница 167: ...to select Add Static MAC Address The following prompt is displayed Please enter a MAC address 3 Enter the static unicast or multicast MAC address in the following format XXXXXX XXXXXX Once you have s...

Страница 168: ...enu type 6 to select MAC Address Tables 2 From the MAC Address Tables menu type 3 to select Delete MAC Address The following prompt is displayed Please enter a MAC address 3 Enter the MAC address to b...

Страница 169: ...om the MAC address table perform the following procedure 1 From the Main Menu type 6 to select MAC Address Tables 2 From the MAC Address Tables menu type 4 to select Delete All Dynamic MAC Addresses A...

Страница 170: ...Address Table 2 From the MAC Address Tables menu type 6 to select View MAC Addresses by Port Menu The following prompt is displayed Please enter port number 1 to 26 3 Enter the number of the port who...

Страница 171: ...address and let the management software automatically locate the port on the switch where the device is connected 1 From the Main Menu type 6 to select MAC Address Tables 2 From the MAC Address Tables...

Страница 172: ...of the VLAN whose MAC addresses you want to view To obtain a VLAN s VID refer to Displaying VLAN Information on page 144 To view the MAC addresses of a VLAN on the switch perform the following proced...

Страница 173: ...o longer active The default setting for the aging time is 300 seconds 5 minutes To adjust the aging time perform the following procedure 1 From the Main Menu type 5 to select System Config Menu 2 From...

Страница 174: ...s of Service This chapter contains the procedures for configuring the Class of Service CoS feature of the AT S39 software Sections in the chapter include Class of Service Overview on page 175 Configur...

Страница 175: ...ther packets This is referred to as prioritizing traffic CoS applies primarily to tagged packets If you read Tagged VLAN Overview on page 128 then you know that a tagged packet contains information wi...

Страница 176: ...e egress port Consequently you need to configure this feature on the ingress port For example when you configure a switch port so that all ingress tagged frames are handled by the egress priority queu...

Страница 177: ...ueue enter a value from 0 to 3 It does not matter which value you enter so long as it s from 0 to 3 If you want all frames received on the port to go to the high priority egress queue enter a value fr...

Страница 178: ...parameter is No meaning that the priority level of tagged frames is determined by the priority level specified in the frame itself 7 Type C to select Configure Port VLANS Priorities 8 Type S to select...

Страница 179: ...ure the Internet Group Management Protocol IGMP snooping feature on the switch Sections in the chapter include IGMP Snooping Overview on page 180 Activating IGMP Snooping on page 182 Displaying a List...

Страница 180: ...etwork performance by restricting multicast packets only to router ports where host nodes are located The AT S39 management software supports IGMP Version 1 and Version 2 One of the differences betwee...

Страница 181: ...ely impact switch and network performance The AT 8000 Series switch supports both IGMP Version 1 and Version 2 The switch maintains its multicast groups through an adjustable time out value which cont...

Страница 182: ...Topology Defines whether there is only one host node per switch port or multiple host nodes per port Possible settings are Single Host Port Edge and Multi Host Port Intermediate TheSingle Host Portset...

Страница 183: ...te selection 3 Host Router Timeout Interval Specifies the time period in seconds after which the switch determines that a host node has become inactive An inactive host node is a node that has not sen...

Страница 184: ...tically by selecting Auto Detect or you can specify the port yourself by entering a port number To select Auto Detect enter 0 zero for this parameter You can specify more than one port Your changes ar...

Страница 185: ...enu type 6 to select View Multicast Host List The View Multicast Host List is shown in Figure 49 Figure 49 View Multicast Hosts List Window The information in this window is for viewing purposes only...

Страница 186: ...tion menu type 1 to select IGMP Snooping Configuration The IGMP Snooping Configuration menu is shown in Figure 48 4 From the IGMP Snooping Configuration menu type 7 to select View Multicast Routers Li...

Страница 187: ...dures for configuring the broadcast storm control feature of the AT S39 management software Sections in the chapter include Broadcast Storm Control Overview on page 188 Configuring the Interval Timer...

Страница 188: ...can use the AT S39 management software to limit the number of broadcast frames forwarded by the switch and so restrict their number To accomplish this you specify the maximum number of broadcast frame...

Страница 189: ...s it can transmit Here s an example Let s assume you set the timer interval for 10 and 100 Mbps ports to 100 milliseconds and the maximum broadcast frame limit for a particular 100 Mbps port on the sw...

Страница 190: ...nts of 10 milliseconds The interval timer for 1000 Mbps ports is in microseconds and has a range of 100 to 120000 microseconds The value should be entered in increments of 100 microseconds A value for...

Страница 191: ...is displayed Enter Max Broadcasts 0 No limit 0 to 1023 5 Specify the maximum number of broadcast frames the port can transmit during the timer interval Press Return For example assume that you are sp...

Страница 192: ...cols This chapter contains the procedure for configuring the two authentication protocols TACACS and RADIUS Sections in the chapter include TACACS and RADIUS Overview on page 193 Configuring the Authe...

Страница 193: ...nts Manager and Operator The Manager account lets you change a switch s parameter settings while the Operator account only lets you view the settings Each account has its own password The Manager acco...

Страница 194: ...combinations Assigning each combination an authorization level This will differ depending on the server software you are using TACACS controls this through thesixteen 0to15 different levels of the Pri...

Страница 195: ...ch You assign an authorization level to each username and password combination that you create on the server software The access level will be either Manager or Operator The final function of the TACA...

Страница 196: ...enabled the switch uses the manager accounts on the TACACS or RADIUS server If you want to disable the manager account feature toggle the menu option until it displays Disabled which is the default se...

Страница 197: ...he servers use the same encryption secret you can answer No to this prompt and enter the encryption secret using the TAC Global Secret parameter However if you are specifying only one TACACS server or...

Страница 198: ...ded the switch queries the next TACACS server in the list If there aren t any more servers the switch defaults to the standard Manager and Operator accounts The default is 30 seconds The range is 1 to...

Страница 199: ...This parameter specifies the maximum amount of time the switch will wait for a response from a RADIUS server before assuming that the server cannot respond If the timeout expires and the server hasn...

Страница 200: ...guring the settings in the RADIUS Client Configuration menu type R to return to the Authentication Menu Note Steps d and e do not apply to the 802 1x port based access control feature d If you are con...

Страница 201: ...ts feature leave this option disabled The following prompt is displayed Server Based User Authentication E Enabled D Disabled e Type E to enable the manager account feature on the switch or D to disab...

Страница 202: ...Port based Access Control Overview on page 203 Enabling and Disabling Port Access Control on page 209 Configuring Port Access Control Parameters on page 211 Viewing Port Access Status on page 214 Not...

Страница 203: ...cess the network This port security method uses the RADIUS authentication protocol The AT S39 software comes with RADIUS client software If you have already read Chapter 17 TACACS and RADIUS Protocols...

Страница 204: ...s a packet on the port with a source MAC address not in the MAC address table An authenticator starts the exchange by sending an EAP Request Identity packet A supplicant starts the exchange with an EA...

Страница 205: ...entered a username and password and the authentication server has validated them Determining whether a port should be set to the authenticator role is straightforward If you want the user of the end n...

Страница 206: ...6 4 You must configure the port access control settings on the switch This involves the following Specifying the port roles Configuring 802 1x port parameters Enabling 802 1x port access control The i...

Страница 207: ...d The address is not timed out even if the end node becomes inactive Note End users of port based access control should be instructed to always log off when they are finished with a work session This...

Страница 208: ...the none role as illustrated in Figure 56 Figure 56 Port based Authentication Across Multiple Switches RADIUS Authentication Server Port 21 in None Role Switch A Switch B Port 2 in Authenticator Ports...

Страница 209: ...rm the following procedure Note You must use a local management session to configure port based access control You cannot configure this feature through a Telnet management session or enhanced stackin...

Страница 210: ...ADIUS authentication protocol It is not supported with TACACS 3 Type 1 to select Port Access Control The following prompt is displayed Port Access Control E Enable D Disable 4 Type E to enable port ac...

Страница 211: ...to configure You can specify more than one port at a time Press Return The following menu is displayed Figure 58 Configure Port Access Parameters 5 Type 0 to select Port Role The following prompt is...

Страница 212: ...n the link state of the port changes The switch requests the identity of the client and begins relaying authentication messages between the client and the authentication server Each client that attemp...

Страница 213: ...5 seconds 4 Reauth Period Enables periodic reauthentication of the client which is disabled by default The default value is 3600 seconds The range is 1 to 65 535 seconds 5 Supplicant Timeout Sets the...

Страница 214: ...nu 2 In the Port menu type 6 to select the Port Access Control menu 3 From the Port Access Control Menu type 5 to select Display Port Access Status The Port Access Status is displayed see Figure 60 Fi...

Страница 215: ...19 Ethernet Statistics This chapter contains the procedures for displaying data traffic statistics Sections in the chapter include Displaying Port Statistics on page 216 Displaying Switch Statistics...

Страница 216: ...Number of bytes received and transmitted on the port Transmit Packets TX_COUNT Number of bytes transmitted out the port Received Packets RX_COUNT Number of bytes received on the port Received Broadca...

Страница 217: ...d by IEEE 802 3 64 bytes including the CRC received on the port Fragmented Packets FRAGMENT Number of undersized packets packets with alignment errors and packets with FCS errors CRC errors received o...

Страница 218: ...s only The statistics are defined below Total Count Number of valid packets received and transmitted by the switch Transmit Packets Number of packets transmitted from the switch Received Packets Numbe...

Страница 219: ...an the minimum length specified by IEEE 802 3 64 bytes including the CRC received on the switch Fragmented Packets Number of undersized packets packets with alignment errors and packets with FCS error...

Страница 220: ...on page 223 Downloading Files from a Remote Management Session on page 229 Downloading Files Switch to Switch on page 232 Uploading Files from a Local Management Session on page 235 Uploading Files f...

Страница 221: ...ftware to download a new version of the management software and bootloader onto a switch so that a switch always has the latest software You can also download a configuration file from a master switch...

Страница 222: ...rough a Telnet management session This method uses TFTP The procedures for this method are in Downloading Files from a Remote Management Session on page 229 and Uploading Files from a Remote Managemen...

Страница 223: ...h s current configuration settings are overwritten by the configuration settings contained in the file This includes the IP address subnet mask enhanced stacking status and BOOTP DHCP status A configu...

Страница 224: ...or alternatively switch to switch as explained in Downloading Files Switch to Switch on page 232 To download a new software image or configuration file onto a switch from a local management session p...

Страница 225: ...on file the switch automatically resets once the download is complete Some network traffic may be lost during the system reset Caution When downloading a switch image file the switch must initialize i...

Страница 226: ...ed Use Hyper Terminal s Transfer Send File option to select Filename Protocol Note Please select 1K Xmodem protocol for faster download c Begin the file transfer of the new management software image o...

Страница 227: ...the switch f Click on the Protocol field and select as the transfer protocol either Xmodem or for a faster download 1K XModem g Click Send The software immediately begins to download onto the switch...

Страница 228: ...mplete Do not reset or power off the unit while it is decompressing the file The completion of the download and initialization process of an AT S39 image file is signalled with this message Please pre...

Страница 229: ...ather you would need to perform the download from a local management session using Xmodem or alternatively switch to switch as explained in Downloading Files Switch to Switch on page 232 If you are do...

Страница 230: ...ing prompt is displayed Remote File Name 5 Enter the filename of the image file or configuration file stored on the TFTP server to be downloaded onto the switch Once the filename has been specified th...

Страница 231: ...download process is complete once the switch finishes the reset process The new AT S39 image file or configuration file is now active on the switch 7 To continue managing the switch you must reestabl...

Страница 232: ...ch information including IP address subnet mask gateway address enhanced stacking status and BOOTP DHCP status Caution Installing a new AT S39 image file or configuration file on a switch involves a s...

Страница 233: ...wnload the configuration file on the master switch to another AT 8000 Series switch type C to select Config Download to Remote Switches To download just the bootloader on the master switch to another...

Страница 234: ...nce the download is complete Some network traffic may be lost during the system reset Caution When downloading a switch image file the switch must initialize it by decompressing it and writing it to f...

Страница 235: ...hat contains the TFTP server software You should start the TFTP server before you begin the upload procedure The switch where you are uploading the file must have an IP address Consequently you cannot...

Страница 236: ...server The following prompt is displayed Remote File Name c Enter the file name that the file is to be stored as on the TFTP server Once the filename has been specified the upload begins Uploading a...

Страница 237: ...ive File from the pull down menu as shown in Figure 67 Figure 67 Local Management Window The Receive File window is shown in Figure 68 Figure 68 Receive File Window e Click the Browse button and speci...

Страница 238: ...ceive The Receive Filename window is shown in Figure 69 Figure 69 Receive Filename Window The extension for an image file should be img and the extension for a configuration file should be cfg The swi...

Страница 239: ...and subnet mask Consequently you cannot use TFTP on a slave switch of an enhanced stack unless the slave switch has an IP address There must be a node on your network that contains the TFTP server so...

Страница 240: ...image file or configuration file This is the name by which the file will be stored on the TFTP server Once the filename has been specified the upload begins File upload takes only a few moments The up...

Страница 241: ...246 Chapter 23 Enhanced Stacking on page 260 Chapter 24 Port Parameters on page 265 Chapter 25 Port Security on page 276 Chapter 26 Port Trunks on page 278 Chapter 27 Port Mirroring on page 281 Chapt...

Страница 242: ...tarting a Web Browser Management Session This chapter contains the procedure for starting a management session on an AT 8000 Series switch using a web browser such as Microsoft Internet Explorer or Ne...

Страница 243: ...your web browser Note If your PC with the web browser is connected directly to the switch to be managed or is on the same side of a firewall as the switch you must configure your browser s network op...

Страница 244: ...e This is the Home page of the management software In the left portion of the Home page is the main menu Enhanced Stacking master switches only Configuration Monitoring Exit or Disconnect for slave sw...

Страница 245: ...menus Selecting Back on your browser s toolbar returns you to the previous display You can also use the browser s bookmark feature on frequently used AT S39 menus and windows Quitting a Web Browser Ma...

Страница 246: ...Name on page 247 Activating the BOOTP and DHCP Client Software on page 251 Viewing System Information on page 252 Configuring the SNMP Parameters and Trap IP Addresses on page 254 Resetting a Switch...

Страница 247: ...to When Does a Switch Need an IP Address on page 39 To set the IP address subnet mask and other basic information for an AT 8000 Series switch perform the following procedure 1 From the Home Page sele...

Страница 248: ...ion of the menu The parameters in the Configuration and Broadcast Storm Control sections are discussed later in this guide The Reset button at the bottom of the tab resets the switch For instructions...

Страница 249: ...es additional information about the Fast Ethernet switch such as its location e g Floor 4 Wiring closet 402B Entering a value for this parameter is optional Comments can be up to 30 alphanumeric chara...

Страница 250: ...n the format xxx xxx xxx xxx The default value is 0 0 0 0 Subnet mask This parameter specifies the subnet mask for the switch You must specify a subnet mask if you assigned an IP address to the switch...

Страница 251: ...ystem menu option is not selected select it and then select the General tab The General Tab menu is displayed as shown in Figure 72 on page 248 3 In the BOOTP DHCP options in the General tab menu clic...

Страница 252: ...To view basic information about the switch perform the following procedure 1 From the Home page select Monitoring 2 From the Monitoring menu select System 3 Select the General tab The General tab wind...

Страница 253: ...ninactive dynamic MAC address can remain in the MAC address table before it is deleted The default is 300 seconds 5 minutes For background information about MAC addresses refer to MAC Address Overview...

Страница 254: ...ecify the IP addresses of management stations to receive traps from the switch perform the following procedure 1 From the Home page select Configuration 2 From the Configuration menu select System 3 S...

Страница 255: ...ver 3 Trap Receiver 4 Use these selections to specify the IP addresses of up to four management workstations on your network to receive traps from the switch 5 To configure SNMP management access of t...

Страница 256: ...Page select Configuration The Configuration menu is displayed with the System option selected by default 2 If the System menu option is not selected select it and then select the General tab 3 Click...

Страница 257: ...cases you must perform this procedure from the master switch of an enhanced switch To instruct the switch to ping a network device perform the following procedure 1 From the Home Page select Monitorin...

Страница 258: ...S39 Default Settings on page 331 Caution Performing this procedure resets the switch The switch will not forward traffic during the brief period required to reload its operating software Some network...

Страница 259: ...AT S39 User s Guide 259 6 Click OK The parameter settings are reset to their default values and the switch is reset 7 To resume managing the switch you must reestablish your management session...

Страница 260: ...r contains the following procedures Setting a Switch s Enhanced Stacking Status on page 261 Selecting a Switch in an Enhanced Stack on page 263 Note For background information on enhanced stacking ref...

Страница 261: ...an be managed locally To be managed remotely a switch with an unavailable stacking status must be assigned a unique IP address Note The only switch whose stacking status you can change through a web b...

Страница 262: ...nt 262 The Enhanced Stacking tab is shown in Figure 77 Figure 77 Enhanced Stacking Tab 4 Click the desired enhanced stacking status for the switch 5 Click Apply The new enhanced stacking status is imm...

Страница 263: ...master switch To manage a slave switch or another master switch in the same enhanced stack you need to select it from the management software To select a switch to manage in an enhanced stack perform...

Страница 264: ...the dialog circle to the left of the appropriate switch in the list 3 Click Connect The Home page of the selected switch is displayed You can now manage the switch Returning to the Master Switch When...

Страница 265: ...hange the parameter settings for the individual ports on a switch Examples of port parameters that you can adjust include duplex mode and port speed This chapter contains the following procedures Conf...

Страница 266: ...t Configuration 2 From the Configuration page select Layer 1 3 Select the Port Setting tab The Port Setting tab is shown in Figure 79 Figure 79 Port Setting Configuration Tab 4 Click the port in the g...

Страница 267: ...ort all of its settings are copied to the other selected ports 6 Adjust the port parameters as desired The parameters are described below Disable Port You use this selection to enable or disable a por...

Страница 268: ...ing Auto Negotiation Otherwise a duplex mode mismatch can occur A switch port using Auto Negotiation will default to half duplex if it detects that the end node is not using Auto Negotiation This will...

Страница 269: ...amation points MDI MDIX This selection sets the wiring configuration of the port The configuration can be Auto MDI or MDI X The twisted pair ports on the switch feature auto MDI MDI X They configured...

Страница 270: ...e same time A collision causes the end nodes to stop sending data This is called backpressure When a switch port needs to stop a half duplex end node from transmitting data it forces a collision on th...

Страница 271: ...edure 1 From the Home page select Monitoring 2 From the Monitoring page select Layer 1 3 Select the Port Settings tab The tab is shown in Figure 81 Figure 81 Port Monitoring Page This page displays a...

Страница 272: ...cription Link The status of the link between the port and the end node connected to the port Possible values are Up indicates that a valid link exists between the port and the end node Down indicates...

Страница 273: ...re Forwarding and Disabled MAC Limit The maximum number of MAC addresses the port can learn when operating in the Limited security mode This value is only operational when the port is operating in the...

Страница 274: ...ameter For further information on this feature refer to ClassofServiceOverviewon page 175 If you select Statistics the Statistics window in Figure 83 is displayed Figure 83 Port Statistics Window The...

Страница 275: ...802 3 64 bytes including the CRC received on the port FRAGMENT Number of undersized packets packets with alignment errors and packets with FCS errors CRC errors received on the port CRC_ERROR Number...

Страница 276: ...a web browser management session Note For background information on port security refer to Port Security Overview on page 77 Note You must use a local management session to change a switch s port secu...

Страница 277: ...the switch s port security level perform the following procedure 1 From the Home page select Monitoring 2 From the Configuration page select Layer 2 3 From the Layer 2 page select the Port Security ta...

Страница 278: ...nks This chapter contains the procedure for creating or deleting a port trunk from a web browser management session Note For background information and guidelines on port trunking refer to Port Trunki...

Страница 279: ...nk disconnect the cables from the ports before you delete the trunk Deleting the trunk without first disconnecting the data cables can create a loop in your network topology which can result in broadc...

Страница 280: ...an contain 2 3 or 4 ports Once you have selected the ports of the trunk the following appears under Trunk Method b Click the desired load distribution method The default is SA DA c Click Apply d Confi...

Страница 281: ...ter 27 Port Mirroring This chapter contains the following procedure Creating or Deleting a Port Mirror on page 282 Note For background information on port mirroring refer to Port Mirroring Overview on...

Страница 282: ...menu in Figure 86 Figure 86 Port Mirroring Menu To create a port mirror go to step 4 To delete a port mirror go to step 5 4 To create a port mirror do the following a Use the pull down menu from Mirro...

Страница 283: ...a data analyzer to the mirror port to monitor the traffic on the selected ports 5 To disable port mirroring select None from the Mirroring Port pull down menu and click Apply The port mirror is delet...

Страница 284: ...switch from a web browser management session Sections in the chapter include Enabling or Disabling STP or RSTP on page 285 Configuring STP on page 287 Configuring RSTP on page 291 Displaying STP or R...

Страница 285: ...spanning tree is RSTP Note Changing the active spanning tree protocol resets the switch To select and enable a spanning tree protocol or to disable spanning tree perform the following procedure 1 Fro...

Страница 286: ...hanges the active spanning tree protocol b To continue managing the switch you must reestablish your management session To configure STP settings go to Configuring STP on page 287 To configure RSTP se...

Страница 287: ...settings Caution The bridge provides default RSTP parameters that are adequate for most networks Changing them without prior experience and an understanding of how RSTP works might have a negative ef...

Страница 288: ...Bridge Hello Time The time interval between generating and sending configuration messages by the bridge This parameter can be from 1 to 10 seconds The default is 2 seconds Bridge Forwarding Delay The...

Страница 289: ...ttings click on a port in the switch image and click Modify You can select more than one port at a time The Port Spanning Tree Protocol menu is shown in Figure 89 Figure 89 STP Port Configuration Menu...

Страница 290: ...priority is 128 The range is 0 255 Fast Mode When you check this check box the port will skip the Listening and Learning stages of STP This setting is appropriate for ports connected to edge nodes th...

Страница 291: ...ngs Caution The bridge provides default RSTP parameters that are adequate for most networks Changing them without prior experience and an understanding of how RSTP works might have a negative effect o...

Страница 292: ...r a list of the increments refer to Table 4 RSTP Bridge Priority Value Increments on page 98 Bridge Hello Time The time interval between generating and sending configuration messages by the bridge Thi...

Страница 293: ...nabled on the switch Root Priority The priority number of the root bridge This value only appears when RSTP has been enabled on the switch 3 After you have made your changes click Apply Configuring RS...

Страница 294: ...t Default values are 100 for a 10 Mbps port 10 for a 100 Mbps port and 4 for a 1 Gbps port MCHECK This option instructs the bridge to send out RSTP BPDU packets for several seconds from the selected p...

Страница 295: ...u select Layer 2 3 From the Layer 2 page select the Spanning Tree tab The Spanning Tree menu in Figure 93 is displayed This menu displays information on whether spanning tree is enable or disabled and...

Страница 296: ...nt 296 The example in Figure 93 is for RSTP The information in this window is for viewing purposes only Figure 93 Rapid Spanning Tree Window Monitoring 5 To view port settings click a port in the swit...

Страница 297: ...tiple VLAN mode Note For background information on VLANs refer to Chapter 10 Virtual LANs This chapter contains the following sections Creating A New Port based or Tagged VLAN on page 298 Modifying a...

Страница 298: ...agged VLAN To create a new port based or tagged VLAN perform the procedure below 1 From the Home page select Configuration 2 From the Configuration menu select Layer 2 3 From the Layer 2 window select...

Страница 299: ...be unique in your network then the name should be unique as well If the VLAN will be part of a larger VLAN that spans multiple switches then the name for the VLAN should be the same on each switch whe...

Страница 300: ...nt VLANs you should keep a list of all your network VLANs and their VID values Note A VLAN must have a VID 7 If you want all received traffic on the ports of the VLAN to be mirrored to another port on...

Страница 301: ...f you are creating a new VLAN on a switch that contains only the Default_VLAN the ports that you specify as untagged ports of the new VLAN are automatically removed from the Default_VLAN Tagged ports...

Страница 302: ...to Step 5 to Step 8 in the previous procedure Creating A New Port based or Tagged VLAN on page 298 When modifying a VLAN observe the following guidelines You cannot change the VID of a VLAN You canno...

Страница 303: ...ncel the procedure If you click OK the VLAN is deleted from the switch The untagged ports in the VLAN are returned to the Default_VLAN as untagged ports Note You cannot delete the Default_VLAN To dele...

Страница 304: ...following procedure 1 From the Home page select Monitoring 2 From the Monitoring page select Layer 2 3 From the Layer 2 page select the VLAN tab The management software displays the window shown in Fi...

Страница 305: ...m the Configuration menu choose System 3 Select the General tab 4 In the Switch Mode section of the menu click either Tagged or Basic If you select Tagged which is the default the switch will support...

Страница 306: ...the VLAN Mode section of the menu select one of the following User Defined Supports tagged and port based VLANs and the Basic VLAN mode Multiple VLAN Supports the non 802 1Q compliant Multiple VLANs...

Страница 307: ...s table of the switch This chapter contains the following procedure Viewing the MAC Address Table on page 308 Adding Static Unicast and Multicast MAC Addresses on page 311 Deleting MAC Addresses on pa...

Страница 308: ...he Monitoring main menu selection the Add button is not included This button is used to add static unicast and multicast address to the switch For instructions refer Adding Static Unicast and Multicas...

Страница 309: ...ndow The columns in the window are defined below MAC Address The MAC address of the node connected to the switch Port The port on the switch where the MAC address was learned PMAP The ports on the swi...

Страница 310: ...affic is being mirrored while No indicates that it is not EMP Indicates whether multicast packets are being forwarded by ports in the blocking state This feature is not supported at this time This col...

Страница 311: ...page select the MAC Address tab The MAC Address menu is shown in Figure 97 on page 308 4 Click Add The Add Static MAC Address menu is shown in Figure 98 Figure 98 Add Static MAC Address Menu 5 In the...

Страница 312: ...3 From the Layer 2 page select the MAC Address tab The MAC Address menu is shown in Figure 97 on page 308 4 Display the MAC addresses on the switch by selecting one of the options For instructions re...

Страница 313: ...g time is 300 seconds 5 minutes To adjust the aging time perform the following procedure 1 From the Home page select Configuration 2 From the Configuration page select System 3 From the System page se...

Страница 314: ...ervice This chapter contains instructions on how to configure CoS This chapter contains the following procedure Configuring CoS on page 315 Note For background information on CoS refer to Class of Ser...

Страница 315: ...onfiguration 2 From the Configuration page select Layer 2 3 From the Layer 2 page select the CoS tab The CoS tab is shown in Figure 99 Figure 99 CoS Tab 4 Click the port where you want to configure Co...

Страница 316: ...level you select 7 If you are configuring a tagged port and you want the switch to ignore the priority tag in the tagged frames entering the port click the Override Priority option If you activate thi...

Страница 317: ...the IGMP snooping feature on the switch Sections in the chapter include Configuring IGMP Snooping on page 318 Displaying a List of Host Nodes and Multicast Routers on page 321 Note For background inf...

Страница 318: ...ome page select Configuration 2 From the Configuration menu select System 3 Select the IGMP tab The IGMP tab in Figure 101 is displayed Figure 101 IGMP Menu Configuration 4 Adjust the IGMP parameters...

Страница 319: ...the port This ensures that the remaining active host nodes on the port will continue to receive the multicast packets Only after all of the host nodesconnectedtoaswitchporthavetransmittedleaverequest...

Страница 320: ...ckingontheportsinthegraphicalimage Awhiteportindicates a multicast router port By default the switch automatically detects the presence of multicast routers by watching for queries on its ports Once i...

Страница 321: ...ast application and transmitting the packets to host nodes To view host nodes and multicast routers perform the following procedure 1 From the Home Page select Monitoring 2 From the Monitoring window...

Страница 322: ...the multicast group are connected VLAN ID The VID of the VLAN in which the port is an untagged member Host IP The IP address es of the host node s connected to the port Viewing a list of multicast rou...

Страница 323: ...ure the Broadcast Storm Control feature on the switch Sections in the chapter include Configuring the Interval Timer on page 324 Setting the Maximum Number of Broadcast Frames on page 325 Note For bac...

Страница 324: ...enu option is selected by default along with the General tab when you open the Configuration page If they are not already selected select them now 2 In the Broadcast Storm Control section enter values...

Страница 325: ...torm Control section of the menu enter the maximum number of broadcast packets you want the port to be able to transmit The range is 0 to 1023 broadcast frames Specifying a value of 0 disables Broadca...

Страница 326: ...s instructions on how to configure the authentication protocols This chapter contains the following procedure Configuring TACACS and RADIUS on page 327 Note For background information on the authentic...

Страница 327: ...box applies only to the manager account feature It does not apply to the 802 1x port based access control feature If this option is disabled no check in box which is the default setting the switch use...

Страница 328: ...From the Server based Authentication tab click the check circle next to TACACS Configuration and click Configure The TACACS Configuration menu in Figure 104 is displayed Figure 104 TACACS Configurati...

Страница 329: ...erver s secret in the Global Secret field c After you have finished configuring the parameters click Apply This closes the TACACS Configuration window d In the Server Based Authentication tab click th...

Страница 330: ...1 to 30 seconds IP Address Port and Encryption Key Use these fields to specify the IP address UDP port number and encryption key of each RADIUS server You can specify up to a maximum of three servers...

Страница 331: ...ult Settings The following table lists the management interface default settings Note Login names and passwords are case sensitive Management Interface Setting Default Manager Login Name manager Manag...

Страница 332: ...gs The following table describes the switch administration default settings Administration Setting Default IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Gateway Address 0 0 0 0 System Name None Administrator...

Страница 333: ...ced stacking default setting SNMP Default Settings The following table describes the SNMP default settings System Software Setting Default Console Startup Mode Menu Enhanced Stacking Setting Default S...

Страница 334: ...owing table lists the IGMP Snooping default settings Port Configuration Setting Default Status Enabled Back Pressure Disabled Flow Control None Speed Auto Negotiation Duplex Mode Auto Negotiation MDI...

Страница 335: ...es the RSTP default settings STP Switch Setting Default Spanning Tree Status Disabled Active Protocol Version RSTP STP Setting Default Bridge Priority 32768 Bridge Hello Time 2 Bridge Forwarding 15 Br...

Страница 336: ...e following table describes the 802 1x Port Access Control default settings VLAN Setting Default Default VLAN Name Default_VLAN all ports Management VLAN ID 1 Default_VLAN VLAN Mode User Configured Ba...

Страница 337: ...lowing table lists the TACACS client configuration default settings Server based Authentication Setting Default Server based Authentication Disabled Active Authentication Method TACACS RADIUS Configur...

Страница 338: ...Appendix A AT S39 Default Settings 338...

Страница 339: ...ding from a Telnet session 229 239 AT S39 version number 53 AT S62 software updates downloading 18 obtaining 18 authentication protocols 193 327 authentication server 204 authenticator port role 205 a...

Страница 340: ...ult switch setting 333 defined 33 39 58 guidelines 58 setting switch status 61 261 F Fast Mode 110 290 flow control 71 269 force version default setting 335 force version 113 292 forwarding delay 101...

Страница 341: ...multicast MAC address adding 167 311 deleting 168 312 displaying 164 multicast router ports default setting 334 multicast router displaying 186 321 multiple virtual LAN 802 1Q compliant 154 configura...

Страница 342: ...STP default settings 335 reAuthPeriod 213 resetting a switch 49 256 root bridge 98 RS232 port default settings 31 S Secure level port security 78 security port access control 202 serial number switch...

Страница 343: ...tting 36 starting 35 TFTP downloading and uploading files 223 229 239 txPeriod 213 U unavailable status defined 61 261 user name default 243 user configured VLAN defined 121 V version number AT S39 53...

Отзывы: