Allied Telesis at-8700xl User Manual
AT-8700XL SERIES SWITCH
USER GUIDE
Software Release 2.6.1
AT-8700XL Series Switch User Guide for Software Release 2.6.1
Document Number C613-02030-00 REV B.
Copyright © 2003 Allied Telesyn International Corp.
19800 North Creek Parkway, Suite 200, Bothell, WA 98011, USA.
All rights reserved. No part of this publication may be reproduced without prior written
permission from Allied Telesyn.
Allied Telesyn International Corp. reserves the right to make changes in specifications
and other information contained in this document without prior written notice. The
information provided herein is subject to change without notice. In no event shall Allied
Telesyn be liable for any incidental, special, indirect, or consequential damages
whatsoever, including but not limited to lost profits, arising out of or related to this
manual or the information contained herein, even if Allied Telesyn has been advised of,
known, or should have known, the possibility of such damages.
All trademarks are the property of their respective owner.
Contents
CHAPTER 1 Introduction
Why Read this User Guide? ............................................................................... 5
Where To Find More Information ...................................................................... 6
Technical support .............................................................................................. 7
Features of the AT-8700XL Series Switch ........................................................... 7
Warning about FLASH memory ......................................................................... 9
CHAPTER 2
CHAPTER 3
CHAPTER 4
Getting Started with the Command Line Interface (CLI)
This Chapter ................................................................................................... 11
Connecting a Terminal or PC ........................................................................... 12
Terminal Communication Parameters .............................................................. 12
Logging In ...................................................................................................... 13
Assigning an IP Address .................................................................................. 13
Assigning an IP Address .................................................................................. 14
Setting Routes ................................................................................................ 15
Changing a Password ..................................................................................... 16
Choosing a Password ...................................................................................... 16
Using the Commands ..................................................................................... 17
Getting Command Line Help .......................................................................... 18
Setting System Parameters .............................................................................. 18
Getting Started with the Graphical User Interface (GUI)
This Chapter ................................................................................................... 21
What is the GUI? ............................................................................................ 22
Accessing the Switch via the GUI .................................................................... 22
Using the GUI: Navigation and Features .......................................................... 32
Upgrading the GUI ......................................................................................... 38
Troubleshooting .............................................................................................. 39
Operating the switch
This Chapter ................................................................................................... 45
User Accounts and Privileges ........................................................................... 45
Normal Mode and Security Mode ................................................................... 47
Remote Management ..................................................................................... 49
Storing Files in FLASH Memory ........................................................................ 49
Using Scripts ................................................................................................... 50
Loading and Uploading Files ........................................................................... 52
Upgrading Switch Software ............................................................................ 56
Using the Built-in Editor .................................................................................. 60
4 AT-8700XL Series Switch User Guide
SNMP and MIBs .............................................................................................. 61
For More About Operations and Facilities ........................................................ 62
CHAPTER 5
CHAPTER 6
Switching
Switch Ports .................................................................................................... 63
Virtual Local Area Networks (VLANs) ............................................................... 65
Generic VLAN Registration Protocol (GVRP) ..................................................... 68
Quality of Service ............................................................................................ 68
Spanning Tree Protocol (STP) ........................................................................... 68
IP Switching .................................................................................................... 69
Routing Information Protocol (RIP) .................................................................. 70
Example output from the SHOW IP RIP command. .......................................... 70
IGMP Snooping .............................................................................................. 70
Triggers ........................................................................................................... 71
Maintenance and Troubleshooting
This Chapter ................................................................................................... 73
How the Switch Starts Up ............................................................................... 74
How to Avoid Problems .................................................................................. 75
What to Do if You Clear FLASH Memory Completely ....................................... 77
What to Do if Passwords are Lost .................................................................... 78
Getting the Most Out of Technical Support ..................................................... 78
Resetting Switch Defaults ............................................................................... 79
Checking Connections Using PING .................................................................. 79
Troubleshooting IP Configurations .................................................................. 80
Troubleshooting DHCP IP Addresses ................................................................ 81
Using Trace Route for IP Traffic ........................................................................ 81
Software Release 2.6.1
C613-02030-00 REV B
Chapter 1
Introduction
Welcome to the AT-8700XL Series Advanced Fast Ethernet Switch, combining
wire speed Layer 2 and Layer 3 switching with Quality of Service (QoS)
features such as traffic classifiers and bandwidth limiting.
This guide introduces the AT-8700XL Series Switch and will guide you through
the most common uses and applications of your new switch. Getting started
will not take long—many applications are set up in just a few minutes. If you
have any questions about the switch, contact your authorised distributor or
reseller.
Your AT-8700XL Series Switch is supplied with default settings which allow
you to operate the switch immediately, without any configuration. Even if this
is all you want to do, you should still gain access to the switch configuration, if
only to change the manager password to prevent unauthorised access.
To take advantage of the advanced routing features, you will need to enter
detailed configuration. The switch has both a Command Line Interface (CLI)
and a Graphical User Interface (GUI) for configuration and management.
Before you can use the GUI, you will need to login to the switch and use its CLI
to allocate an IP address to at least one interface.
Why Read this User Guide?
Before you use your switch in a live network, please read this guide. The guide
tells you how to access and use the Command Line Interface (CLI) to configure
the switch software, and how to access and use the switch’s Graphical User
Interface (GUI). It then introduces a number of common switch functions and
how to configure them using the CLI. For information on configuration using
the GUI, see the context-sensitive online GUI help. For more detailed
descriptions of all commands, display outputs, and background information,
see the AT-8700XL Series Software Reference.
This user guide is organised into the following chapters:
■ Chapter 1, Introduction gives an overview of the switch features and of the
documentation supplied with your switch.
■ Chapter 2, Getting Started with the Command Line Interface (CLI) describes
how to gain access to the command line interface.
6 AT-8700XL Series Switch User Guide
■ Chapter 3, Getting Started with the Graphical User Interface (GUI) describes
how to access and use the graphical user interface.
■ Chapter 4, Operating the switch introduces general operation, management
and support features, including loading and installing support files and
new releases.
■ Chapter 5, Switching describes how to configure Layer 2 and IP switching
features, including switch ports and VLANs.
■ Chapter 6, Maintenance and Troubleshooting describes some of the commands
you can use to monitor the switch and diagnose faults.
Where To Find More Information
Before installing the switch and any expansion options, read the important
safety information in the Safety and Statutory Information booklet.
Follow the Quick Install Guides’ step-by-step instructions for physically
installing the switch and any expansion options.
The AT-8700XL Series Hardware Reference gives detailed information about the
equipment hardware.
The context-sensitive online GUI help gives descriptions of each page and
element of the GUI.
Once you are familiar with the basic operations of the switch, use the AT-
8700XL Series Software Reference for full descriptions of routing features and
command syntax.
The AT-8700XL Series Switch Documentation Set
The documentation set for the AT-8700XL Series Switch includes:
■ AT-8700XL Series Safety and Statutory Information
■ AT-8700XL Series Quick Install Guide
■ AT-8700XL Series Documentation and Tools CD-ROM, which includes the
following PDF documents:
• AT-8700XL Series Safety and Statutory Information
• AT-8700XL Series Quick Install Guide
•This User Guide
• AT-8700XL Series Hardware Reference
• AT-8700XL Series Software Reference
• Uplink Module Quick Install Guide
• Uplink Module Hardware Reference
Software Release 2.6.1
C613-02030-00 REV B
Introduction 7
The CD-ROM also includes:
• AT-TFTP Server for Windows, for downloading software releases,
scripts and other files to or from an AT-8700XL switch.
• Adobe Acrobat Reader for Windows for viewing and printing the
online documentation in PDF format. Get instant access to information
with full-text searching of PDF documents by keyword or phrase.
•Microsoft Internet Explorer.
• A demonstration version of F-Secure’s Secure Shell client for Windows.
• Information about other Allied Telesyn routing and switching
products.
Technical support
For online support for your AT-8700XL Series Switch, see our on-line support
page at http://www.alliedtelesyn.co.nz/support/at8700xl
This site contains the latest switch software releases, patches, GUI resource files
and documentation. Download software upgrades from the Allied Telesyn web
site to your server, and the use the LOAD command to copy them to the
switch’s FLASH memory. Use the SET INSTALL command to enable the new
software (see “Upgrading Switch Software” on page 56 for detailed instructions).
.
If you require further assistance, contact your authorised distributor or reseller.
Features of the AT-8700XL Series Switch
Software support for AT-8700XL Series Switches provides wirespeed Layer 2
and Layer 3 switching, including support for Virtual LANs.
Switching Features
The main Layer 2 features of the switch are:
■ High performance, wire-speed Layer 2 switching (“Switching” on page 63).
■ Packet Forwarding at wire speed.
■ Store and Forward switching mode.
■ Autonegotiation of link speed and duplex mode for 10/100 Mbps speed on
all 100BASE TX ports (“Autonegotiation of Port Speed and Duplex Mode” on
page 64).
■ Automatic, configurable MAC address learning and ageing, supporting up
to 255 static MAC addresses per switch.
Software Release 2.6.1
C613-02030-00 REV B
■ Switch Filtering.
■ Layer 3 Filtering (Switching chapter in the AT-8700XL Series Software
Reference.
■ Broadcast Storm Protection (“Packet Storm Protection” on page 64).
■ Virtual LANs defined by port membership (“Virtual Local Area Networks
(VLANs)” on page 65).
8 AT-8700XL Series Switch User Guide
■ Spanning Tree Protocol and Rapid Spanning Tree Protocol (“Spanning Tree
Protocol (STP)” on page 68).
■ Classifiers to sort traffic for QoS and hardware filtering
■ Quality of Service
• DSCP configuration enabling management of DiffServ domains
• Priority queuing
• Bandwidth limiting
■ Port trunking to spread traffic over several links (“Port Trunking” on
page 64).
■ Port mirroring (“Port Mirroring” on page 64).
■ IGMP snooping and Multicast VLAN Registration
Management Features
The following features enhance management of the switch:
■ A sophisticated and configurable event logging facility for monitoring and
alarm notification to single or multiple management centres.
■ Triggers for automatic and timed execution of commands in response to
events.
■ Scripting for automated configuration and centralised management of
configurations.
■ Dynamic Host Configuration Protocol (DHCP) for IP and IPv6. DHCP lets
you automatically assign IP addresses and other configuration information
to PCs and other hosts on TCP/IP networks.
■ Support for the Simple Network Management Protocol (SNMP), standard
MIBs and the Allied Telesyn Enterprise MIB, enabling the switch to be
managed by a separate SNMP management station.
■ Telnet client and server.
■ Secure Shell remote management.
■ An HTTP client that allows the direct download of files from a web server
to the switch’s FLASH memory.
For complete descriptions of these software features, see the AT-8700XL Series
Software Reference.
Layer 3 and Other Features
AT-8700XL Series Advanced Fast Ethernet Switches provide efficient and costeffective switching, terminal serving and integrated network management
over LANs. All models can run the same software suite and can provide all of
the following functions simultaneously (depending on the hardware
configuration):
■ TCP/IP routing.
■ IP multicasting support including Internet Group Management Protocol
(IGMP), IGMP snooping, IGMP proxy and Multicast VLAN Registration.
■ Ping Polling for determining device reachability and responding when a
device or link goes up or down.
Software Release 2.6.1
C613-02030-00 REV B
Introduction 9
■ OSPF and IP RIP routing protocols.
■ ARP, Proxy ARP and Inverse ARP address resolution protocols.
■ Sophisticated packet filtering.
■ Terminal serving using Telnet, with local host nicknames.
■ Integration with a Public Key Infrastructure (PKI).
■ Virtual Router Redundancy Protocol (VRRP).
■ Software Secure Sockets Layer (SSL).
■ 802.1x port authentication.
Warning about FLASH memory
Before you start to configure your switch, note that it is possible to enter
commands that can impact severely on your switch’s performance.
DO NOT clear the FLASH memory completely. The software release files are
stored in FLASH, and clearing FLASH memory would leave no software to run
the switch.
While FLASH is compacting, do not restart the switch or use any commands
that affect the FLASH file subsystem. Do not restart the switch, or create, edit,
load, rename or delete any files until a message confirms that FLASH file
compaction is completed. Interrupting flash compaction may result in damage
to files. Damaged files are likely to prevent the switch from operating correctly.
For more information, see “How to Avoid Problems” on page 75 and “What to Do
if You Clear FLASH Memory Completely” on page 77.
Software Release 2.6.1
C613-02030-00 REV B
Chapter 2
Getting Started with the Command Line Interface (CLI)
This Chapter
This chapter describes how to access the switch’s CLI, and provides basic
information about configuring the switch, including how to:
■ Physically connect a terminal or PC to the switch (see “Connecting a
Terminal or PC” on page 12 and the Quick Install Guide).
■ Set the Terminal Communication parameters to match the switch’s settings
(see “Terminal Communication Parameters” on page 12).
■ Log in to the switch as a manager (see “Logging In” on page 13).
■ Configure IP addresses on the switch interfaces over which you will
manage the switch. This is necessary if you will access the switch using the
GUI or Telnet (see “Assigning an IP Address” on page 14).
■ Set routes (see “Setting Routes” on page 15)
■ Change the management password to limit unauthorised access to the
switch configuration (see “Changing a Password” on page 16).
■ Use the command line interface to control the switch software, including
creating aliases for often used character sequences (see “Using the
Commands” on page 17).
■ Set the online help file to gain access to command syntax help (see “Getting
Command Line Help” on page 18).
■ Enable any special feature licences (see “Enabling Special Feature Licences”
on page 18).
■ Set the name, location and contact details for the switch (see “Setting
System Parameters” on page 18).
12 AT-8700XL Series Switch User Guide
Connecting a Terminal or PC
The first thing to do after physically installing the switch is to start a terminal
or terminal emulation session to access the switch. Then you can use the
command line interface (CLI) to configure the switch. If you wish to configure
the switch using the Graphical User Interface, you must first access the CLI and
assign an IP address to at least one interface.
You can use a PC running terminal emulation software as the manager console
instead of a terminal. Many terminal emulation applications are available for
the PC, but the most readily available is the HyperTerminal application
included in Microsoft® Windows™ 95, Windows™ 98, and Windows™ 2000.
In a normal Windows™ installation HyperTerminal is located in the
Accessories group. In Windows™ 2000, HyperTerminal is located in the Start >
Programs > Accessories > Communications menu.
The key to successfully using terminal emulation software with the switch is to
configure the communications parameters in the terminal emulation software
to match the default settings of the console port on the switch. For instructions
on how to configure HyperTerminal, see the AT-8700XL Series Hardware
Reference.
To start a terminal session, connect to the switch in one of the following ways:
■ Connect a VT100-compatible terminal to the RS-232 Terminal Port (asyn0),
set the communications parameters on the terminal (Table 1 on page 12),
and press [Enter] a few times until the switch’s login prompt appears; OR
■ Connect the COM port of a PC running terminal emulation software such
as Windows Terminal or HyperTerminal to the RS-232 Terminal Port
(asyn0), set the communications parameters on the terminal emulation
software (Table 1 on page 12), and press [Enter] a few times until the
switch’s login prompt appears.
Terminal Communication Parameters
Check that the terminal or modem’s communication settings match the settings
of the asynchronous port. By default, the asynchronous port (also known as the
Console, RS-232, or Config port) on the switch is set to the parameters shown
in Table 1 on page 12:
Table 1: Parameters for terminal communication
Parameter Value
Baud rate 9600
Data bits 8
Parity None
Stop bits 1
Flow control Hardware
Refer to the user manual supplied with the terminal or modem for details of
how to change the communications settings for the terminal or modem.
Software Release 2.6.1
C613-02030-00 REV B
Getting Started with the Command Line Interface (CLI) 13
If a modem is connected, configure the switch to make and/or accept calls via
the modem. To set the CDCONTROL parameter to “CONNECT” and the
FLOW parameter to “HARDWARE”, enter the command:
SET ASYN CDCONTROL=CONNECT FLOW=HARDWARE
If the terminal or modem is used with communications settings other than the
default settings, then configure the asynchronous port to match the terminal or
modem settings using the SET ASYN command.
See the switch’s online help or the Interfaces chapter in the AT-8700XL Series
Software Reference for more information on how to configure the asynchronous
port.
Logging In
When you access the switch from a terminal or PC connected to the RS-232
terminal port (asyn0), or via a Telnet or HTTP connection, you must enter a
login name and password to gain access to the command prompt. When the
switch is supplied, it has a manager account with an initial password friend.
Enter your login name at the login prompt:
login: manager
Enter the password at the password prompt:
password: friend
After you log into the manager account you can enter commands from this
document and from the AT-8700XL Series Software Reference.
Assigning an IP Address
To configure the switch to perform IP routing (for example, to access the
Internet) you need to configure IP. You also need to configure IP if you want to
manage the switch from a Telnet session or with the GUI. For detailed
instructions on accessing the switch with the GUI, see “Accessing the Switch
via the GUI” on page 22.
First enable IP, using the command:
ENABLE IP
Then, add an IP address to each of the switch interfaces that you want to
process IP traffic.
Software Release 2.6.1
C613-02030-00 REV B
For the default VLAN, use the command:
ADD IP INTERFACE=vlan1 IPADDRESS=ipadd MASK=mask
where:
■ ipadd is an unused IP address on your LAN.
■ mask is the subnet mask (for example 255.255.255.0)
14 AT-8700XL Series Switch User Guide
If IP addresses on your LAN are assigned dynamically by DHCP, you can set
the switch to request an IP address from the DHCP server, using the
commands:
ADD IP INTERFACE=vlan1 IPADDRESS=DHCP
ENABLE IP REMOTEASSIGN
You do not need to set the MASK parameter because the subnet mask received
from the DHCP server is used.
If you use DHCP to assign IP addresses to devices on your LAN, and you want to
manage the switch within this DHCP regime, it is recommended that you set your
DHCP server to always assign the same IP address to the switch. This will enable you
to access the GUI by browsing to that IP address, and will also let you use the switch as
a gateway device for your LAN. If you need the switch's MAC address for this, it can be
displayed using the command SHOW SWITCH.
To change the IP address for an interface, enter the command:
SET IP INTERFACE=interface IPADDRESS=ipadd MASK=ipadd
When you are configuring the switch remotely, if you change the configuration (for
example, the VLAN membership) of the port over which you are configuring, the switch
is likely to break the connection.
For more information about switch ports and Virtual LANs (VLANs), see
Chapter 5, Switching in this document, and the Switching chapter in the
AT-8700XL Series Software Reference. For more information about IP addressing
and switching, see Chapter 5, Switching in this document, and the Internet
Protocol (IP) chapter in the AT-8700XL Series Software Reference.
Assigning an IP Address
To configure the switch to perform IP routing (for example, to access the
Internet) you need to configure IP. You also need to configure IP if you want to
manage the switch from a Telnet session or with the GUI. For detailed
instructions on accessing the switch with the GUI, see “Accessing the Switch via
the GUI” on page 22.
First enable IP, using the command:
ENABLE IP
Then, add an IP address to each of the switch interfaces that you want to
process IP traffic. For example, for Ethernet port 0, use the command:
ADD IP INTERFACE=eth0 IPADDRESS=ipadd MASK=mask
where:
■ ipadd is an unused IP address on your LAN.
■ mask is the subnet mask (for example 255.255.255.0)
Software Release 2.6.1
C613-02030-00 REV B
Getting Started with the Command Line Interface (CLI) 15
If IP addresses on your LAN are assigned dynamically by DHCP, you can set
the switch to request an IP address from the DHCP server, using the
commands (for Ethernet port 0, for example):
ADD IP INTERFACE=eth0 IPADDRESS=DHCP
ENABLE IP REMOTEASSIGN
You do not need to set the MASK parameter because the subnet mask received
from the DHCP server is used.
If you use DHCP to assign IP addresses to devices on your LAN, and you want to
manage the switch within this DHCP regime, it is recommended that you set your
DHCP server to always assign the same IP address to the switch. This will enable you
to access the GUI by browsing to that IP address, and will also let you use the switch as
a gateway device for your LAN. If you need the switch's MAC address for this, it can be
displayed using the command SHOW SWITCH.
To change the IP address for an interface, enter the command:
SET IP INTERFACE=interface IPADDRESS=ipadd MASK=ipadd
Setting Routes
The process of routing packets consists of selectively forwarding data packets
from one network to another. Your switch makes a decision to send a packet to
a particular network on information it learns dynamically from listening to the
selected route protocol and on the static information entered as part of the
configuration process. In addition, you can configure user-defined filters to
restrict the way packets are sent.
Your switch maintains a table of routes which holds information about routes
to destinations. The route table tells the switch how to find a remote network or
host. A route is uniquely identified by IP address, network mask, next hop,
ifIndex, protocol and policy. A list of routes comprises all the different routes to
a destination. The routes may have different metrics, next hops, policy or
protocol. A list of routes is uniquely identified by its IP address and net mask.
The routing table is maintained dynamically by using one or more routing
protocols such as RIP, EGP and OSPF. These act to exchange routing
information with other switches or hosts.
You can also add static routes to the route table to define default routes to
external switches or networks and to define subnets.
To add a static route, enter the command:
Software Release 2.6.1
C613-02030-00 REV B
ADD IP ROUTE=ipadd INTERFACE=interface NEXTHOP=ipadd
[CIRCUIT=miox-circuit] [DLCI=dlci]
[MASK=ipadd][METRIC=1..16] [METRIC1=1..16]
[METRIC2=1..65535][POLICY=0..7] [PREFERENCE=0..65535]
To displays the entire routing table, including both static and dynamic routes,
enter the command:
SHOW IP ROUTE
For more information about setting IP routes, see the Internet Protocol (IP)
chapter in the AT-8700XL Series Software Reference.
Changing a Password
You should change this password to prevent unauthorised access to the switch.
Enter the command:
SET PASSWORD
The switch prompts you for the current password, for the new password, and
for confirmation of the new password. The password can contain any printable
characters, and must be at least a minimum length, by default six characters.
(To change the default minimum length, see the SET USER command in the
Operations chapter, AT-8700XL Series Software Reference.)
Choosing a Password
All users, including managers, should take care in selecting passwords. Tools
exist that enable hackers to guess or test many combinations of login names
and passwords easily. The User Authentication Facility (UAF) provides some
protection against such attacks by allowing the manager to set the number of
consecutive login failures allowed and a lockout period when the limit is
exceeded.
However, the best protection against password discovery is to select a good
password and keep it secret. When choosing a password:
■ Do make it six or more characters in length. The UAF enforces a minimum
password length, which the manager can change. The default is six
characters.
■ Do include both alphabetic (a–z) and numeric (0–9) characters.
■ Do include both uppercase and lowercase characters. The passwords
stored by the switch are case-sensitive, so “bgz4kal” and “Bgz4Kal” are
different.
■ Do avoid words found in a dictionary, unless combined with other random
alphabetic and numeric characters.
■ Do not use the login name, or the word “password” as the password.
■ Do not use your name, your mother’s name, your spouse’s name, your
pet’s name, or the name of your favourite cologne, actor, food or song.
■ Do not use your birth date, street number or telephone number.
■ Do not write down your password anywhere.
Make sure you remember the new password created as you cannot retrieve a
lost password. Recovery of access to the switch is complex.
Once you have logged into the manager account you are able to enter
commands from this guide and from the AT-8700XL Series Software Reference.
Getting Started with the Command Line Interface (CLI) 17
Using the Commands
You control the switch with commands described in this document and in the
AT-8700XL Series Software Reference. While the keywords in commands are not
case sensitive, the values entered for some parameters are (especially
passwords). The switch supports command line editing and recall. Command
line editing functions and keystrokes are shown in Table 2 on page 17.
Table 2: Command line editing functions and keystrokes .
Function VT100 Terminal Dumb terminal
Move cursor within command line ←, → Not available
Delete character to left of cursor [Delete] or [Backspace] [Delete] or [Backspace]
Toggle between insert/overstrike [Ctrl/O] Not available
Clear command line [Ctrl/U] [Ctrl/U]
Recall previous command ↑ or [Ctrl/B] [Ctrl/B]
Recall next command ↓ or [Ctrl/F] [Ctrl/F]
Display command history [Ctrl/C] or
SHOW PORT HISTORY
Clear command history RESET PORT HISTORY RESET PORT HISTORY
Recall matching command [Tab] or [Ctrl/I] [Tab] or [Ctrl/I]
[Ctrl/C]
or SHOW PORT HISTORY
The switch assumes that the width of the terminal screen is 80 characters, and
performs command line wrapping at the 80th column regardless of the setting
of the terminal. To execute a command the cursor does not need to be at the
end of the line. The default editing mode is insert mode. Characters are
inserted at the cursor position and any characters to the right of the cursor are
pushed to the right to make room. In overstrike mode, characters are inserted
at the cursor position and replace any existing characters.
Commands are limited to 1000 characters, excluding the prompt. Path names
of up to 256 characters, including file names, and file names up to 16 characters
long, with extensions of 3 characters, are supported.
Aliases
The command line interface supports aliases. An alias is a short name for an
often-used longer character sequence. When the user presses [Enter] to execute
the command line, the command processor first checks the command line for
aliases and substitutes the replacement text. The command line is then parsed
and processed normally. Alias substitution is not recursive—the command line
is scanned only once for aliases.
Aliases are created and destroyed using the commands:
ADD ALIAS=name STRING=substitution
DELETE ALIAS=name
Software Release 2.6.1
C613-02030-00 REV B
18 AT-8700XL Series Switch User Guide
Getting Command Line Help
Online help is available for all switch commands. A multilingual, languageindependent online help facility provides help information via the command:
HELP [topic]
If a topic is not specified, a list of available topics is displayed. The HELP
command displays information from the system help file stored in FLASH
memory. The help file uses a simple mark-up language to identify topics,
access level (USER or MANAGER) and help text. Both standard ASCII and
Unicode character encodings are supported. Alternate help files can be
uploaded and stored in FLASH, then activated using the command:
SET HELP=helpfile
To display the current help file, enter the command:
SHOW SYSTEM
The help file is easily modified, for example to provide detailed site-specific
support information. The mark-up language specification and preprocessor
program are available from your authorised distributor or reseller.
Also, typing a question mark “?” at the end of a partially completed command
displays a list of the parameters that may follow the current command line,
with the minimum abbreviations in uppercase letters (see Figure 1 on page 18).
The current command line is then re-displayed, ready for further input.
Figure 1: Using the question mark character (“?”) to display help for the current command.
Manager > ADD ?
Options : ACC APPletalk BGP CLASSifier BOOTp BRIDge DECnet FRamerelay GRE IP IPX
ISDN LAPD LOG MIOX NTP OSPF PERM PPP RADius SA SCript SNmp STReam STT TRIGger
TACacs USEr X25C X25T TDM
Manager > ADD ACC ?
Options : CALL SCript DOmainname
Manager > ADD ACC CALL ?
Options : DIrection DScript CScript RScript POrt ENcapsulation AUthentication
DOmainname
Setting System Parameters
You can set some general system parameters to ensure the switch’s
compatibility with the public network, and to aid network administration.
Some services, for instance ISDN, use slightly different versions in different
countries. To make sure that the switch uses protocols consistent with the
services it is connected to, set the system territory to the country or region in
which your switch operates. Enter the command:
SET SYSTEM TERRITORY={AUSTRALIA|CHINA|EUROPE|JAPAN|KOREA|
NEWZEALAND|USA}
Software Release 2.6.1
C613-02030-00 REV B
Getting Started with the Command Line Interface (CLI) 19
In Australia only: to use the Micro service, SET SYSTEM LOCATION=australia; to
use the OnRamp service, SET SYSTEM LOCATION=europe.
System name, location and contact parameters can help a remote network
administrator identify the switch. By convention the system name is the full
domain name. Set the name of the switch, for example:
SET SYSTEM NAME=nd1.co.nz
the location of the switch, for example:
SET SYSTEM LOCATION=”Head Office, 3rd floor east”
and a contact name and phone number for the network administrator
responsible for the switch, for example:
SET SYSTEM CONTACT=”Anna Brown 03-456 789”
The name, location, and contact are strings 1 to 80 characters in length of any
printable character. If the string includes spaces enclose the string in double
quotes.
Set the switch’s real time clock to the current local time in 24 hour notation
(hh:mm:ss), for example:
SET TIME=14:50:00
and to the current date (dd-mmm-yy, or dd-mmm-yyyy), for example:
SET DATE=29-JAN-02
or
SET DATE=29-JAN-2003
Software Release 2.6.1
C613-02030-00 REV B
Chapter 3
Getting Started with the Graphical User Interface (GUI)
This Chapter
This chapter describes how to access the switch’s HTTP-based Graphical User
Interface (GUI), and provides basic information about using the GUI,
including:
■ What is the GUI?
• an introduction to the Graphical User Interface
■ Accessing the switch via the GUI:
• browser and PC setup, including interaction with HTTP proxy servers
• establishing a connection to your switch, including an example of
configuring SSL for secure access
• the System Status page, the first GUI page you see
■ Using the GUI: navigation and features:
• an overview of the menus
• using configuration pages, with a description of key elements of GUI
pages
• changing your password
• using the context sensitive online help
• saving your configuration
• combining GUI and CLI configuration
• configuring multiple devices
■ Upgrading the GUI
■ Troubleshooting
• diagnosing and solving connection problems
• using the GUI to troubleshoot the switch’s configuration.
22 AT-8700XL Series Switch User Guide
What is the GUI?
The GUI (Graphical User Interface) is a web-based device management tool,
designed to make it easier to configure and monitor the switch. The GUI
provides an alternative to the CLI (Command Line Interface). Its purpose is to
make complicated tasks simpler and regularly performed tasks quicker.
The GUI relies on an HTTP server that runs on the switch, and a web browser
on the host PC. When you use the GUI to configure the switch, the GUI sends
commands to the switch and the switch sends the results back to your browser,
all via HTTP.
The tasks you may perform using the GUI are not as comprehensive as the
command set available on the CLI, but for some protocols, a few clicks of the
mouse will perform many commands.
The GUI is stored on the switch in the form of an embedded resource file, with
file extension
version encoded in the file name.
rsc. Resource files are model-specific, with the model and
Accessing the Switch via the GUI
To use the GUI to configure the switch, you use a web browser to open a
connection to the switch’s HTTP server. Therefore, you need a PC, a web
browser and the switch. Supported browsers and operating systems, and the
settings you need on your PC and browser, are detailed in the following
section. Switch setup is detailed in “Establishing a Connection to the Switch” on
page 24.
Browser and PC Setup
The GUI requires a web browser installed on a PC. Table 3 shows supported
combinations of operating system and browser. A copy of Internet Explorer can
be found on the switch’s Documentation and Tools CD-ROM.
Table 3: Supported browsers and operating systems
IE 5.0 IE 5.5 IE 6.0 NS 6.2.2 NS 6.2.3
Windows 95
Windows 98 !!!
Windows ME !!!!!
Windows 2000 !!!!!
Windows XP !!!!!
!
JavaScript must be enabled. To enable JavaScript in Internet Explorer:
1. From the Tools menu, select Internet Options
2. Select the Security tab
3. Click on the Custom Level button
4. Under the Scripting section, ensure that “Active scripting” is enabled.
Software Release 2.6.1
C613-02030-00 REV B
Getting Started with the Graphical User Interface (GUI) 23
To enable JavaScript in Netscape 6.2.x:
1. From the Edit menu, select Preference
2. Select the Advanced menu option.
3. Ensure that the “Enable JavaScript for Navigator” checkbox is checked.
The minimum screen resolution on the PC is 800x600.
HTTP Proxy Servers
An HTTP proxy server provides a security barrier between a private network’s
PCs and the Internet. The PCs send HTTP requests (and other web traffic) to
the server, which then forwards the requests appropriately. Similarly, the server
receives incoming HTTP traffic addressed to a PC on the private network, and
forwards it to the appropriate PC. Proxy servers can be used to block traffic
from undesirable websites, to log traffic flows, and to disallow cookies.
If your browser is configured to use a proxy server, and the switch is on your
side of the proxy server, you will need to set the browser to bypass proxy
entries for the IP address of the appropriate interface on the switch. (See
“Establishing a Connection to the Switch” on page 24 for information about
giving switch interfaces IP addresses.)
To ensure that your network’s security settings are not compromised, see your
network administrator for information about bypassing the proxy server on
your system.
To bypass the proxy server on Internet Explorer, if your browser administration
does not use a script, and the PC and the switch are in the same subnet:
1. From the Tools menu, select Internet Options.
2. Select the Connections tab and click the LAN Settings button.
3. Check the “Bypass proxy server for local addresses” checkbox.
4. If necessary, click the Advanced button and enter a list of local addresses.
To bypass the proxy server on Netscape, if your browser does not use a script:
1. From the Edit menu, select Preferences
2. Click on the Advanced menu option to expand it.
3. Select the Proxies menu option
4. Enter the switch’s IP address in the “No Proxy for” list.
Software Release 2.6.1
C613-02030-00 REV B
Establishing a Connection to the Switch
Before you start, consider how the switch fits into your network. If you are
installing a new switch, consider whether you want to configure it before
deploying it into the LAN, or want to configure it in situ. If you want to access
a switch that has already been configured, consider the relative positions of the
PC and the switch. The flow chart below summarises this process, and the
procedures that follow take you through each possibility in detail.
Figure 2: A summary of the process for establishing a connection via the GUI.
Start here
Determine the IP address
Is the router
already installed and
configured in
the LAN?
Ye s
of an interface on the router
and browse to it.
See “Option 3: Connecting
to an Installed Switch” on
page 28.
No
Do you want
to configure the router
before installing it in
the LAN?
No
Install the router into the LAN,
give it an IP address and
browse to it.
See “Option 2: Installing
the Switch into the LAN”
on page 26.
Connect your PC directly to
the router, give the router an
IP address and browse to it.
Ye s
See “Option 1: Configuring
the Switch before
Installation” on page 25.
Getting Started with the Graphical User Interface (GUI) 25
Option 1: Configuring the Switch before Installation
Use this procedure if:
■ You want to configure the switch before installing it in your LAN.
■ You will be installing the switch at a remote office or a customer site and
want to configure it first.
■ You want a dedicated management PC permanently connected to the
switch.
1. Select a PC to browse to the switch from
You can browse to the switch from any PC that is running a supported
operating system with a supported browser installed. See “Browser and
PC Setup” on page 22 for more information.
You need to know the PC’s subnet.
2. Connect the PC to the switch
Use a straight-through Ethernet cable to connect an Ethernet card on the
PC to any one of the switch ports (see Figure 3).
Figure 3: Connecting a PC directly to the switch.
AT-8724XL
Advanced Fast Ethernet Switch
AT-8700XL
You can browse to the switch through any VLAN, as long as you give that VLAN an IP
address (see below). These instructions assume you will use vlan1. The switch ports all
belong to vlan1 by default.
3. Access the switch’s command line interface
Access the CLI from the PC, as described in “Connecting a Terminal or PC”
on page 12.
4. Enable IP
ENABLE IP
5. Assign the vlan1 interface an IP address in the same subnet as the PC
ADD IP INTERFACE=vlan1 IP=ipaddress MASK=mask
Software Release 2.6.1
C613-02030-00 REV B
6. Save the configuration and set the switch to use it on bootup
CREATE CONFIG=your-name.cfg
SET CONFIG=your-name.cfg
7. On the PC, bypass the HTTP proxy server, if necessary
See “HTTP Proxy Servers” on page 23 for more information.
8. Point your web browser at the LAN interface’s IP address
Loading...