All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc.
Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of
Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are
trademarks or registered trademarks of their respective owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior
written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc. be liable for any
incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this
manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility of
such damages.
How This Guide is Organized........................................................................................................................... 20
Where to Go First ............................................................................................................................................. 23
Starting a Management Session ...................................................................................................................... 24
Online Support ........................................................................................................................................... 27
Email and Telephone Support.................................................................................................................... 27
Configuring the Switch’s Name, Location, and Contact ................................................................................... 32
Changing the Manager and Operator Passwords ............................................................................................ 35
Changing the Manager or Operator Password .......................................................................................... 35
Resetting the Manager Password .............................................................................................................. 37
Setting the System Time .................................................................................................................................. 38
Setting the System Time Manually............................................................................................................. 39
Setting the System Time from an SNTP or NTP Server ............................................................................ 40
Rebooting the Switch........................................................................................................................................ 43
Configuring the Console Startup Mode ............................................................................................................ 45
Configuring the Console Timer......................................................................................................................... 46
Configuring the Telnet Server........................................................................................................................... 47
Setting the Baud Rate of the Serial Terminal Port............................................................................................ 48
Pinging a Remote System ................................................................................................................................ 49
Returning the AT-S63 Management Software to the Factory Default Values .................................................. 50
Displaying Hardware and Software Information ............................................................................................... 52
Displaying System Hardware Information ........................................................................................................ 55
Displaying Uplink Port Information ................................................................................................................... 57
Chapter 2: Port Parameters .......................................................................................................................... 61
Displaying Port Status ...................................................................................................................................... 62
Configuring Port Parameters ............................................................................................................................ 65
Configuring Head of Line Blocking ................................................................................................................... 69
Configuring Flow Control and Back Pressure................................................................................................... 71
Configuring Port Filtering.................................................................................................................................. 73
Setting Up Rate Limiting................................................................................................................................... 75
Resetting a Port................................................................................................................................................ 77
Forcing Port Renegotiation............................................................................................................................... 78
Resetting the Port Configuration to the Default Settings .................................................................................. 79
3
Contents
Displaying Port Statistics .................................................................................................................................. 80
Clearing Port Statistics...................................................................................................................................... 83
Setting a Switch’s Enhanced Stacking Status .................................................................................................. 86
Selecting a Switch in an Enhanced Stack......................................................................................................... 88
Returning to the Master Switch ......................................................................................................................... 91
Displaying the Enhanced Stacking Status ........................................................................................................ 92
Chapter 4: SNMPv1 and SNMPv2c ............................................................................................................... 93
Enabling or Disabling SNMP Management....................................................................................................... 94
Setting the Authentication Failure Trap............................................................................................................. 95
Creating an SNMP Community String .............................................................................................................. 96
Modifying a Community String .......................................................................................................................... 99
Deleting a Community String .......................................................................................................................... 103
Displaying the SNMP Community Strings....................................................................................................... 104
Chapter 5: MAC Address Table .................................................................................................................. 105
Displaying the MAC Address Tables .............................................................................................................. 106
Adding Static Unicast and Multicast MAC Addresses.....................................................................................110
Deleting Unicast and Multicast MAC Addresses............................................................................................. 112
Deleting All Dynamic MAC Addresses ............................................................................................................ 113
Changing the Aging Time ...............................................................................................................................114
Chapter 6: Static Port Trunks .....................................................................................................................115
Creating a Static Port Trunk............................................................................................................................ 116
Modifying a Static Port Trunk .......................................................................................................................... 120
Deleting a Static Port Trunk ............................................................................................................................ 123
Chapter 7: LACP Port Trunks ..................................................................................................................... 125
Enabling or Disabling LACP............................................................................................................................ 126
Setting the LACP System Priority ...................................................................................................................128
Creating an Aggregator................................................................................................................................... 129
Modifying an Aggregator................................................................................................................................. 132
Deleting an Aggregator ................................................................................................................................... 134
Displaying LACP Port and Aggregator Status ................................................................................................ 135
Chapter 8: Port Mirroring ............................................................................................................................ 137
Creating a Port Mirror .....................................................................................................................................138
Disabling a Port Mirror .................................................................................................................................... 140
Modifying a Port Mirror....................................................................................................................................141
Displaying the Port Mirror ...............................................................................................................................142
Chapter 9: File System ................................................................................................................................145
Working with Boot Configuration Files ............................................................................................................146
Creating a Boot Configuration File ...........................................................................................................146
Setting the Active Boot Configuration File ................................................................................................ 149
Viewing a Boot Configuration File ............................................................................................................ 151
Editing a Boot Configuration File .............................................................................................................. 152
Copying a System File .................................................................................................................................... 154
Renaming a System File................................................................................................................................. 156
Deleting a System File .................................................................................................................................... 158
Displaying System Files .................................................................................................................................. 159
4
AT-S63 Management Software Menus User’s Guide
Listing All Files ......................................................................................................................................... 159
Listing Files on the Compact Flash Card ................................................................................................. 161
Working with Flash Memory ........................................................................................................................... 162
Displaying Information about the Flash Memory...................................................................................... 162
Formatting the Flash Memory .................................................................................................................. 163
Working with the Compact Flash Card ........................................................................................................... 164
Downloading a System File ............................................................................................................................ 182
Downloading a System File from a Local Management Session ............................................................. 184
Downloading a System File from a Remote Management Session ......................................................... 187
Uploading a System File................................................................................................................................. 190
Uploading a System File from a Local Management Session.................................................................. 191
Uploading a System File from a Remote Management Session.............................................................. 194
Chapter 11: Event Logs and the Syslog Client ......................................................................................... 197
Working with the Event Logs .......................................................................................................................... 198
Enabling or Disabling the Event Logs ...................................................................................................... 198
Displaying an Event Log .......................................................................................................................... 199
Modifying the Event Log Full Action......................................................................................................... 205
Clearing an Event Log.............................................................................................................................. 206
Saving an Event Log to a File .................................................................................................................. 206
Creating a Classifier ....................................................................................................................................... 220
Modifying a Classifier ..................................................................................................................................... 224
Deleting a Classifier........................................................................................................................................ 226
Deleting All Classifiers.................................................................................................................................... 227
Chapter 13: Access Control Lists .............................................................................................................. 231
Creating an ACL ............................................................................................................................................. 232
Modifying an ACL ...............................................................................................................
............................ 235
Deleting an ACL ............................................................................................................................................. 237
Deleting All ACLs............................................................................................................................................ 239
Chapter 14: Class of Service ...................................................................................................................... 243
Displaying Port CoS Priorities ......................................................................................................................... 250
Chapter 15: Quality of Service .................................................................................................................... 251
Creating a Flow Group ............................................................................................................................. 252
Modifying a Flow Group............................................................................................................................ 255
Deleting a Flow Group.............................................................................................................................. 256
Creating a Traffic Class ............................................................................................................................261
Modifying a Traffic Class .......................................................................................................................... 265
Deleting a Traffic Class ............................................................................................................................ 267
Creating a Policy ......................................................................................................................................271
Modifying a Policy..................................................................................................................................... 274
Deleting a Policy....................................................................................................................................... 275
Enabling or Disabling IGMP Snooping............................................................................................................ 300
Displaying a List of Host Nodes ......................................................................................................................301
Displaying a List of Multicast Routers .............................................................................................................303
Enabling or Disabling MLD Snooping ............................................................................................................. 309
Displaying a List of Host Nodes ......................................................................................................................310
Displaying a List of Multicast Routers .............................................................................................................312
Configuring the CIST Priority .......................................................................................................................... 445
Displaying the CIST Priority ............................................................................................................................ 447
Creating, Deleting, and Modifying MSTI IDs ................................................................................................... 449
Creating an MSTI ID................................................................................................................................. 449
Deleting an MSTI ID ................................................................................................................................. 450
Modifying an MSTI ID ...............................................................................................................................450
Adding, Removing, and Modifying VLAN Associations to MSTI IDs............................................................... 452
Adding or Removing a VLAN from an MSTI ID ........................................................................................ 452
Associating a VLAN to an MSTI ID...........................................................................................................453
Removing a VLAN from an MSTI ID.........................................................................................................454
Associating VLANs to an MSTI ID and Deleting All Associated VLANs................................................... 455
Clearing VLAN to MSTI Associations ....................................................................................................... 456
Configuring MSTP Port Settings ..................................................................................................................... 457
Configuring Generic MSTP Port Settings ................................................................................................. 457
Configuring MSTI-specific Port Parameters ............................................................................................. 460
Displaying the MSTP Port Configuration ........................................................................................................ 463
Displaying the MSTP Port State .....................................................................................................................465
Resetting MSTP to the Defaults......................................................................................................................468
Deleting a Port-based or Tagged VLAN .........................................................................................................487
Deleting All VLANs.......................................................................................................................................... 490
Selecting a VLAN Mode .................................................................................................................................. 516
Displaying VLAN Information .......................................................................................................................... 518
Creating a Protected Ports VLAN ................................................................................................................... 522
Modifying a Protected Ports VLAN ................................................................................................................. 525
Displaying a Protected Ports VLAN ................................................................................................................ 528
Deleting a Protected Ports VLAN.................................................................................................................... 530
8
AT-S63 Management Software Menus User’s Guide
Chapter 28: MAC Address-based VLANs .................................................................................................. 533
Creating a MAC Address-based VLAN .......................................................................................................... 534
Adding and Deleting MAC Addresses ............................................................................................................ 536
Adding and Deleting Egress Ports.................................................................................................................. 538
Deleting a MAC Address-based VLAN........................................................................................................... 540
Displaying MAC Address-based VLANs......................................................................................................... 542
Section VII: Internet Protocol Routing ................................................................. 545
Chapter 29: Internet Protocol Version 4 Routing Interfaces ................................................................... 547
Creating a New Routing Interface .................................................................................................................. 548
Modifying a Routing Interface......................................................................................................................... 551
Deleting a Routing Interface ........................................................................................................................... 554
Displaying the IP Address of the Local Interface............................................................................................ 555
Setting the Default Route or Default Gateway................................................................................................ 556
Setting the Local Interface.............................................................................................................................. 557
Setting the ARP Cache Timeout..................................................................................................................... 558
Section VIII: Port Security ..................................................................................... 559
Chapter 30: MAC Address-based Port Security ....................................................................................... 561
Configuring MAC Address Port Security ........................................................................................................ 562
Displaying Port Security Levels ...................................................................................................................... 566
Chapter 31: 802.1x Port-based Network Access Control ........................................................................ 569
Setting Port Roles........................................................................................................................................... 570
Enabling or Disabling 802.1x Port-based Network Access Control................................................................ 572
Configuring Authenticator Port Parameters.................................................................................................... 573
Configuring Supplicant Port Parameters ........................................................................................................ 579
Displaying the Port Access Parameters ......................................................................................................... 582
Chapter 32: Web Server .............................................................................................................................. 589
Configuring the Web Server ........................................................................................................................... 590
General Steps for Configuring the Web Server for Encryption....................................................................... 593
General Steps for a Self-signed Certificate.............................................................................................. 593
General Steps for a Public or Private CA Certificate................................................................................ 593
Creating an Encryption Key............................................................................................................................ 596
Deleting an Encryption Key ............................................................................................................................ 600
Modifying an Encryption Key .......................................................................................................................... 601
Exporting an Encryption Key .......................................................................................................................... 602
Importing an Encryption Key .......................................................................................................................... 605
Displaying the Encryption Keys ...................................................................................................................... 608
Chapter 34: PKI Certificates and SSL ........................................................................................................ 611
Creating a Self-signed Certificate................................................................................................................... 612
Adding a Certificate to the Database.............................................................................................................. 616
Modifying a Certificate .................................................................................................................................... 619
Deleting a Certificate ...................................................................................................................................... 622
Viewing a Certificate....................................................................................................................................... 624
Generating an Enrollment Request ................................................................................................................ 627
9
Contents
Installing CA Certificates onto a Switch ..........................................................................................................630
Viewing and Configuring the Maximum Number of Certificates......................................................................631
Displaying SSH Information ............................................................................................................................637
Chapter 36: TACACS+ and RADIUS Protocols .........................................................................................639
Enabling or Disabling Server-based Management Authentication.................................................................. 640
Configuring the TACACS+ Client.................................................................................................................... 642
Displaying the TACACS+ Settings..................................................................................................................644
Configuring the RADIUS Client ....................................................................................................................... 645
Displaying RADIUS Status and Settings.........................................................................................................648
Chapter 37: Management Access Control List .......................................................................................... 651
Enabling or Disabling the Management ACL .................................................................................................. 652
Creating an ACE ............................................................................................................................................. 654
Modifying an ACE ........................................................................................................................................... 656
Deleting an ACE ............................................................................................................................................. 658
Displaying the ACEs ....................................................................................................................................... 659
Index .............................................................................................................................................................. 661
10
Figures
Figure 1: System Administration Menu.................................................................................................................................32
Figure 2: System Configuration Menu ..................................................................................................................................33
Figure 3: Authentication Configuration Menu .......................................................................................................................35
Figure 5: Configure System Time Menu...............................................................................................................................39
Figure 6: System Utilities Menu............................................................................................................................................43
Figure 7: Console (Serial/Telnet) Configuration Menu .........................................................................................................45
Figure 8: System Information Menu......................................................................................................................................52
Figure 9: System Hardware Information Menu.....................................................................................................................55
Figure 10: Uplink Information Menu......................................................................................................................................57
Figure 11: GBIC/SFP Information Menu (Page 1)................................................................................................................58
Figure 12: GBIC/SFP Information Menu (Page 2)................................................................................................................59
Figure 13: Port Configuration Menu......................................................................................................................................62
Figure 14: Port Status Menu.................................................................................................................................................62
Figure 15: Port Configuration (Port) Menu............................................................................................................................65
Figure 16: Head of Line Blocking .........................................................................................................................................69
Figure 17: Flow Control Menu ..............................................................................................................................................72
Figure 20: Port Statistics Menu.............................................................................................................................................80
Figure 21: Display Port Statistics Menu................................................................................................................................81
Figure 22: Enhanced Stacking Menu ...................................................................................................................................86
Figure 24: Stacking Services Menu With List of Switches....................................................................................................89
Figure 25: Enhanced Stacking Menu ...................................................................................................................................92
Figure 27: Configure SNMPv1 & SNMPv2c Community Menu ............................................................................................96
Figure 28: Modify SNMP Community Menu .........................................................................................................................99
Figure 29: Display SNMP Community Menu ......................................................................................................................104
Figure 30: MAC Address Tables Menu...............................................................................................................................106
Figure 31: Display Unicast MAC Addresses Menu.............................................................................................................106
Figure 32: Display All Menu - Unicast MAC Addresses......................................................................................................107
Figure 33: Display All Menu - Multicast MAC Addresses ...................................................................................................108
Figure 34: MAC Addresses Configuration Menu ................................................................................................................110
Figure 35: Port Trunking and LACP Menu..........................................................................................................................116
Figure 36: Static Port Trunking Menu.................................................................................................................................117
Figure 41: Modify LACP (IEEE 8023ad) Aggregator Menu ................................................................................................132
Figure 42: LACP (IEEE 802.3ad Port Status Menu............................................................................................................135
Figure 43: LACP (IEEE 802.3ad) Aggregator Status Menu................................................................................................136
Figure 44: Port Mirroring Menu #1......................................................................................................................................138
Figure 45: Port Mirroring Menu #2......................................................................................................................................138
Figure 46: Port Mirroring Menu...........................................................................................................................................142
Figure 47: File Operations Menu ........................................................................................................................................147
Figure 48: View File Menu with Sample Boot Configuration File........................................................................................152
Figure 49: List Files Menu for Flash Memory and a Compact Flash Card .........................................................................160
Figure 50: List Files Menu for a Compact Flash Card ........................................................................................................161
.........................126
11
Figures
Figure 51: Display Flash Information Menu ........................................................................................................................162
Figure 52: Display Compact Flash Information Menu.........................................................................................................164
Figure 53: Set/Change Compact Flash Directory Menu .....................................................................................................166
Figure 54: Downloads and Uploads Menu..........................................................................................................................170
Figure 63: Event Log Menu ................................................................................................................................................198
Figure 64: Event Log Example in Normal Mode .................................................................................................................203
Figure 65: Event Log Example in Full Mode.......................................................................................................................204
Figure 69: Configure Log Outputs Menu with a Syslog Output Definition...........................................................................215
Figure 70: Syslog Output Configuration Menu for Selected Output ID ...............................................................................217
Figure 71: Security and Services Menu ..............................................................................................................................220
Figure 73: Create Classifier Menu (Page 1) .......................................................................................................................221
Figure 74: Create Classifier Menu (Page 2) .......................................................................................................................222
Figure 75: Show Classifiers Menu ......................................................................................................................................228
Figure 76: Display Classifier Details Menu (Page 1) ..........................................................................................................229
Figure 77: Display Classifier Details Menu (Page 2) ..........................................................................................................230
Figure 78: Access Control Lists (ACL) Menu......................................................................................................................232
Figure 80: Modify ACL Menu ..............................................................................................................................................235
Figure 81: Destroy ACL Menu ............................................................................................................................................237
Figure 82: Show ACLs Menu..............................................................................................................................................240
Figure 84: Class of Service (CoS) Menu ............................................................................................................................244
Figure 85: Configure Port COS Priorities Menu..................................................................................................................245
Figure 86: Map CoS Priority to Egress Queue Menu..........................................................................................................247
Figure 87: Configure Egress Scheduling Menu ..................................................................................................................248
Figure 88: Show Port CoS Priorities Menu .........................................................................................................................250
Figure 89: Quality of Service (QoS) menu..........................................................................................................................252
Figure 90: Flow Group Configuration Menu........................................................................................................................253
Figure 91: Create Flow Group Menu ..................................................................................................................................253
Figure 92: Modify Flow Group Menu...................................................................................................................................256
Figure 93: Destroy Flow Group Menu.................................................................................................................................257
Figure 94: Show Flow Groups Menu ..................................................................................................................................258
Figure 95: Display Flow Group Detail Menu .......................................................................................................................259
Figure 96: Traffic Class Configuration Menu ......................................................................................................................261
Figure 97: Create Traffic Class Menu.................................................................................................................................262
Figure 98: Modify Traffic Class Menu .................................................................................................................................266
Figure 99: Destroy Traffic Class Menu ...............................................................................................................................267
Figure 100: Show Traffic Classes Menu.............................................................................................................................268
Figure 101: Display Traffic Class Details Menu ..................................................................................................................269
Figure 105: Show Policies Menu ........................................................................................................................................276
Figure 106: Display Policy Details Menu ............................................................................................................................277
Figure 107: Denial of Service (DoS) Menu .........................................................................................................................280
Figure 108: LAN IP Subnet Menu.......................................................................................................................................280
Figure 109: SYN Flood Configuration Menu .......................................................................................................................282
Figure 110: Power Over Ethernet Configuration Menu.......................................................................................................284
12
AT-S63 Management Software Menus User’s Guide
Figure 111: PoE Global Configuration Menu......................................................................................................................284
Figure 112: PoE Port Configuration Menu..........................................................................................................................286
Figure 113: PoE Status Menu ............................................................................................................................................288
Figure 114: PoE Global Status Menu .................................................................................................................................289
Figure 115: PoE Summary Ports Status Menu...................................................................................................................290
Figure 116: PoE Summary Ports Status Menu...................................................................................................................291
Figure 120: View IGMP Multicast Hosts List Menu.............................................................................................................301
Figure 121: View IGMP Multicast Routers List Menu .........................................................................................................303
Figure 122: MLD Snooping Configuration Menu ................................................................................................................306
Figure 123: View MLD Multicast Hosts List Menu ..............................................................................................................310
Figure 124: View MLD Multicast Routers List Menu...........................................................................................................312
Figure 127: Configure SNMPv3 User Table Menu .............................................................................................................322
Figure 128: Modify SNMPv3 User Table Menu ..................................................................................................................326
Figure 129: Configure SNMPv3 View Table Menu .............................................................................................................332
Figure 151: Display SNMPv3 Community Table Menu ......................................................................................................415
Figure 152: Spanning Tree Configuration Menu.................................................................................................................420
Figure 153: STP Menu .......................................................................................................................................................423
Figure 154: STP Port Parameters Menu ............................................................................................................................426
Figure 155: Configure STP Port Settings Menu .................................................................................................................426
Figure 156: Display STP Port Configuration Menu.............................................................................................................428
Figure 158: RSTP Port Parameters Menu..........................................................................................................................433
Figure 159: Configure RSTP Port Settings Menu...............................................................................................................434
Figure 160: Display RSTP Port Configuration Menu ..........................................................................................................436
Figure 161: Display RSTP Port State Menu .......................................................................................................................437
Figure 162: MSTP Configuration Menu ..............................................................................................................................441
Figure 163: CIST Menu ......................................................................................................................................................445
Figure 165: VLAN-MSTI Association Menu........................................................................................................................453
Figure 166: MSTP Port Parameters Menu .........................................................................................................................458
Figure 167: Configure MSTP Port Settings Menu ..............................................................................................................458
Figure 168: Configure Per Spanning Tree Port Settings Menu ..........................................................................................461
Figure 169: Display MSTP Port Configuration Menu..........................................................................................................463
Figure 170: Display MSTP Port State Menu.......................................................................................................................466
Figure 176: Show VLANs Menu..........................................................................................................................................485
Figure 179: Show PVIDs Menu...........................................................................................................................................492
Figure 180: GARP-GVRP Menu .........................................................................................................................................496
Figure 181: GVRP Port Parameters Menu .........................................................................................................................498
Figure 182: Configure GVRP Port Settings Menu ..............................................................................................................499
Figure 183: Display GVRP Port Configuration Menu..........................................................................................................501
Figure 184: Other GVRP Parameters Menu.......................................................................................................................502
Figure 185: GVRP Counters Menu (page 1).......................................................................................................................503
Figure 186: GVRP Counters Menu (page 2).......................................................................................................................504
Figure 187: GVRP Database Menu ....................................................................................................................................507
Figure 188: GIP Connected Ports Ring Menu ....................................................................................................................509
Figure 189: GVRP State Machine Menu (page 1) ..............................................................................................................511
Figure 190: Display GVRP State Machine Menu (page 2) .................................................................................................512
Figure 191: VLAN Configuration Menu (Multiple VLAN Mode)...........................................................................................518
Figure 192: Show VLANs Menu, Multiple VLANS ..............................................................................................................519
Figure 195: Show VLANs Menu..........................................................................................................................................528
Figure 196: Show VLANs Menu..........................................................................................................................................529
Figure 199: MAC Based VLANs Menu ...............................................................................................................................536
Figure 202: Show VLANs Menu with MAC Address-based VLANs....................................................................................542
Figure 203: Detail Information Display................................................................................................................................543
Figure 204: Configure Interface Menu ................................................................................................................................548
Figure 206: Modify Interface Menu .....................................................................................................................................552
Figure 207: Port Security Menu ..........................................................................................................................................562
Figure 208: Configure Port Security Menu #1.....................................................................................................................562
Figure 209: Configure Port Security Menu #2.....................................................................................................................564
Figure 210: Display Port Security Menu .............................................................................................................................566
Figure 211: Port Access Control (802.1X) Menu ................................................................................................................570
Figure 212: Configure Port Access Role Menu...................................................................................................................571
Figure 214: Configure Authenticator Port Access Parameters Menu .................................................................................574
Figure 215: Configure Supplicant Menu .............................................................................................................................579
Figure 216: Configure Supplicant Port Access Parameters Menu......................................................................................580
Figure 217: Display Port Access Status Menu....................................................................................................................582
Figure 219: Web Server Configuration Menu .....................................................................................................................590
Figure 220: Web Server Configuration Menu Configured for HTTPS.................................................................................591
Figure 221: Keys/Certificate Configuration Menu ...............................................................................................................596
Figure 224: Export Key to File Menu ..................................................................................................................................603
Figure 225: Import Key from File Menu ..............................................................................................................................606
Figure 227: Public Key Infrastructure (PKI) Configuration Menu ........................................................................................613
Figure 228: X509 Certificate Management Menu ...............................................................................................................613
Figure 229: Create Self-Signed Certificate Menu ...............................................................................................................614
Figure 230: Add Certificate Menu .......................................................................................................................................616
Figure 236: Secure Shell (SSH) Menu ...............................................................................................................................634
Figure 237: Show Server Information Menu.......................................................................................................................637
Figure 238: Authentication Configuration Menu .................................................................................................................640
Figure 239: TACACS+ Client Configuration Menu .............................................................................................................642
Figure 240: TACACS+ Client Configuration Menu .............................................................................................................644
Figure 242: RADIUS Server Configuration.........................................................................................................................646
Figure 243: Show Status Menu ..........................................................................................................................................648
Figure 244: Management ACL Configuration Menu ...........................................................................................................652
Table 4: Numerical Code and Facility Level Mappings ......................................................................................................213
Table 5: Bridge Priority Value Increments .........................................................................................................................424
Table 6: Port Priority Value Increments .............................................................................................................................427
Table 7: STP Auto-Detect Port Costs ................................................................................................................................427
Table 8: STP Auto-Detect Port Trunk Costs ......................................................................................................................427
Table 9: RSTP Auto-Detect Port Costs .............................................................................................................................434
Table 10: RSTP Auto-Detect Port Trunk Costs .................................................................................................................435
Table 11: Auto External Path Costs ..................................................................................................................................459
Table 12: Auto External Path Trunk Costs ........................................................................................................................459
Table 13: RSTP Auto-Detect Port Costs ...........................................................................................................................461
Table 14: RSTP Auto-Detect Port Trunk Costs .................................................................................................................462
Table 16: GVRP State Machine Parameters .....................................................................................................................512
17
Tables
18
Preface
This guide contains instructions on how to configure the AT-9400 Layer 2+
and Basic Layer 3 Gigabit Ethernet Switches from the menus of the
AT-S63 Management Software.
This preface contains the following sections:
“How This Guide is Organized” on page 20
“Product Documentation” on page 22
“Where to Go First” on page 23
“Starting a Management Session” on page 24
“Document Conventions” on page 25
“Where to Find Web-based Guides” on page 26
“Contacting Allied Telesis” on page 27
Caution
The software described in this documentation contains certain
cryptographic functionality and its export is restricted by U.S. law. As
of this writing, it has been submitted for review as a “retail encryption
item” in accordance with the Export Administration Regulations, 15
C.F.R. Part 730-772, promulgated by the U.S. Department of
Commerce, and conditionally may be exported in accordance with
the pertinent terms of License Exception ENC (described in 15
C.F.R. Part 740.17). In no case may it be exported to Cuba, Iran,
Iraq, Libya, North Korea, Sudan, or Syria. If you wish to transfer this
software outside the United States or Canada, please contact your
local Allied Telesis sales representative for current information on
this product’s export status.
19
Preface
How This Guide is Organized
This guide contains the following sections and chapters:
Section I: Basic Operations
Chapter 1, “Basic Switch Parameters” on page 31
Chapter 2, “Port Parameters” on page 61
Chapter 3, “Enhanced Stacking” on page 85
Chapter 4, “SNMPv1 and SNMPv2c” on page 93
Chapter 5, “MAC Address Table” on page 105
Chapter 6, “Static Port Trunks” on page 115
Chapter 7, “LACP Port Trunks” on page 125
Chapter 8, “Port Mirroring” on page 137
Section II: Advanced Operations
Chapter 9, “File System” on page 145
Chapter 10, “File Downloads and Uploads” on page 167
Chapter 11, “Event Logs and the Syslog Client” on page 197
Chapter 12, “Classifiers” on page 219
Chapter 13, “Access Control Lists” on page 231
Chapter 14, “Class of Service” on page 243
Chapter 15, “Quality of Service” on page 251
Chapter 16, “Denial of Service Defenses” on page 279
Chapter 17, “Power Over Ethernet” on page 283
Section III: Snooping Protocols
Chapter 18, “IGMP Snooping” on page 295
Chapter 19, “MLD Snooping” on page 305
Chapter 20, “RRP Snooping” on page 315
20
Section IV: SNMPv3
Chapter 21, “SNMPv3” on page 319
AT-S63 Management Software Menus User’s Guide
Section V: Spanning Tree Protocols
Chapter 22, “Spanning Tree and Rapid Spanning Tree Protocols” on
page 419
Chapter 23, “Multiple Spanning Tree Protocol” on page 439
Section VI: Virtual LANs
Chapter 24, “Port-based and Tagged VLANs” on page 471
Chapter 25, “GARP VLAN Registration Protocol” on page 495
Chapter 26, “Multiple VLAN Modes” on page 515
Chapter 27, “Protected Ports VLANs” on page 521
Chapter 28, “MAC Address-based VLANs” on page 533
Section VII: Internet Protocol Routing
Chapter 29, “Internet Protocol Version 4 Routing Interfaces” on page
547
Section VIII: Port Security
Chapter 30, “MAC Address-based Port Security” on page 561
Chapter 31, “802.1x Port-based Network Access Control” on page 569
Section IX: Management Security
Chapter 32, “Web Server” on page 589
Chapter 33, “Encryption Keys” on page 595
Chapter 34, “PKI Certificates and SSL” on page 611
Chapter 35, “Secure Shell (SSH)” on page 633
Chapter 36, “TACACS+ and RADIUS Protocols” on page 639
Chapter 37, “Management Access Control List” on page 651
21
Preface
Product Documentation
For overview information on the features of the AT-9400 Switch and the
AT-S63 Management Software, refer to:
AT-S63 Management Software Features Guide
(PN 613-001022)
For instructions on starting a local or remote management session on a
stand-alone AT-9400 Switch or a stack, refer to:
Starting an AT-S63 Management Session Guide
(PN 613-001023)
For instructions on installing or managing a stand-alone AT-9400 Switch,
refer to:
AT-S63 Management Software Command Line User’s Guide
(PN 613-001024)
AT-S63 Management Software Web Browser User’s Guide
(PN 613-001026)
For instructions on installing or managing a stack of AT-9400 Basic Layer
3 Switches, refer to:
AT-9400 Stack Installation Guide
(PN 613-000796)
AT-S63 Stack Command Line User’s Guide
(PN 613-001027)
AT-S63 Stack Web Browser User’s Guide
(PN 613-001028)
22
Where to Go First
AT-S63 Management Software Menus User’s Guide
Allied Telesis recommends that you read Chapter 1, Overview, in the
AT-S63 Management Software Features Guide before you begin to
manage the switch for the first time. There you will find a variety of basic
information about the unit and the management software, like the two
levels of manager access levels and the different types of management
sessions.
The AT-S63 Management Software Features Guide is also your resource
for background information on the features of the switch. You can refer
there for the relevant concepts and guidelines when you configure a
feature for the first time.
23
Preface
Starting a Management Session
For instructions on how to start a local or remote management session on
the AT-9400 Switch, refer to the Starting an AT-S63 Management Session Guide.
24
Document Conventions
This document uses the following conventions:
AT-S63 Management Software Menus User’s Guide
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action may
result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
25
Preface
Where to Find Web-based Guides
The installation and user guides for all Allied Telesis products are
available in portable document format (PDF) on our web site at
www.alliedtelesis.com. You can view the documents online or download
them onto a local workstation or server.
26
AT-S63 Management Software Menus User’s Guide
Contacting Allied Telesis
This section provides Allied Telesis contact information for technical
support and for sales and corporate information.
Online SupportYou can request technical support online from the Allied Telesis
Knowledge Base at www.alliedtelesis.com/support/kb.aspx. You can
submit questions to our technical support staff from the Knowledge Base
and review answers to previously asked questions.
Email and
Telephone
Support
Returning
Products
Sales and
Corporate
Information
Management
Software Updates
For Technical Support by email or telephone, refer to the Allied Telesis
web site at www.alliedtelesis.com. Select your country from the list on
the web site and then select the appropriate tab.
Products for return or repair must be assigned Return Materials
Authorization (RMA) numbers. A product sent to Allied Telesis without an
RMA number will be returned to the sender at the sender’s expense.
To obtain an RMA number, contact the Allied Telesis Technical Support
group at www.alliedtelesis.com/support/rma.aspx.
You can contact Allied Telesis for sales or corporate information at our
web site at www.alliedtelesis.com.
New releases of the management software for our managed products are
available from the following Internet sites:
If the FTP server prompts you to log on, enter “anonymous” as the user
name and your email address as the password.
27
Preface
28
Section I
Basic Operations
The chapters in this section provide information and procedures for basic
switch setup using the AT-S63 Management Software. The chapters
include:
Chapter 1, ”Basic Switch Parameters” on page 31
Chapter 2, ”Port Parameters” on page 61
Chapter 3, ”Enhanced Stacking” on page 85
Chapter 4, ”SNMPv1 and SNMPv2c” on page 93
Chapter 5, ”MAC Address Table” on page 105
Chapter 6, ”Static Port Trunks” on page 115
Chapter 7, “LACP Port Trunks” on page 125
Chapter 8, ”Port Mirroring” on page 137
Section I: Basic Operations29
30Section I: Basic Operations
Chapter 1
Basic Switch Parameters
This chapter contains the following procedures:
“Configuring the Switch’s Name, Location, and Contact” on page 32
“Changing the Manager and Operator Passwords” on page 35
“Setting the System Time” on page 38
“Rebooting the Switch” on page 43
“Configuring the Console Startup Mode” on page 45
“Configuring the Console Timer” on page 46
“Configuring the Telnet Server” on page 47
“Setting the Baud Rate of the Serial Terminal Port” on page 48
“Pinging a Remote System” on page 49
“Returning the AT-S63 Management Software to the Factory Default
Values” on page 50
“Displaying Hardware and Software Information” on page 52
“Displaying System Hardware Information” on page 55
“Displaying Uplink Port Information” on page 57
Section I: Basic Operations31
Chapter 1: Basic Switch Parameters
Configuring the Switch’s Name, Location, and Contact
This procedure explains how to assign a name to the switch. The name
appears at the top of the menus. Names can help you identify your
switches when you manage them and help you avoid performing a
configuration procedure on the wrong switch. This procedure also assigns
the name of the administrator responsible for maintaining the unit and the
location of the switch.
To assign a name, location, and contact to a switch, perform the following
procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1.
Allied Telesis AT-9424Ts - AT-S63
User: Manager11:20:02 02-Mar-2005
System Administration
1 - System Information
2 - System Configuration
3 - Console (Serial/Telnet) Configuration
4 - Web Server Configuration
5 - SNMP Configuration
6 - Authentication Configuration
7 - Management ACL
8 - Event Log
9 - System Utilities
R - Return to Previous Menu
Enter your selection?
Marketing
Figure 1. System Administration Menu
2. From the System Administration menu, type 2 to select System
Configuration.
32Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
The System Configuration menu is shown in Figure 2.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2006
System Configuration
1 - Eth0 Interface............. vlan2-0
2 - IP Address ................ 184.35.62.11
3 - Subnet Mask ............... 255.255.255.0
4 - Default Gateway ........... 184.35.62.4
5 - System Name ...............
6 - Location ..................
7 - Administrator .............
8 - ARP Cache Timeout ......... 150 seconds
T - Configure System Time
I - Configure Interface
R - Return to Previous Menu
Enter your selection?
Figure 2. System Configuration Menu
Note
Selections 1 to 4 are described in “Displaying the IP Address of the
Local Interface” on page 555. Selection 8, ARP Cache Timeout, is
described in “Setting the ARP Cache Timeout” on page 558.
Selection T, Configure System Time, is described in “Setting the
System Time” on page 38.
3. Adjust options 5 to 7 as necessary.
5 - System Name
This parameter specifies a name for the switch (for example, Sales
Ethernet switch). The name is displayed at the top of the management
menus and pages. The name can be from 1 to 39 characters. The
name can include spaces and special characters, such as exclamation
points and asterisks. The default is no name. This parameter is
optional.
6 - Location
This parameter specifies the location of the switch, (for example, 4th
Floor - rm 402B). The location can be from 1 to 20 characters. The
location can include spaces and special characters, such as dashes
and asterisks. The default is no location. This parameter is optional.
7 - Administrator
This parameter specifies the name of the network administrator
responsible for managing the switch. The name can be from 1 to 20
characters. It can include spaces and special characters, such as
Section I: Basic Operations33
Chapter 1: Basic Switch Parameters
dashes and asterisks. The default is no name. This parameter is
optional.
4. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
34Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Changing the Manager and Operator Passwords
There are two levels of management access on the AT-9400 Switch:
manager and operator. When you log in as manager, you can view and
configure all of a switch’s operating parameters. When you log in as an
operator, you can only view the operating parameters; you cannot change
any values.
You log in as a manager or an operator when you enter the appropriate
username and password when you start a management session. The
default password for manager access is “friend.” The default password for
operator access is “operator.” Passwords are case sensitive.
This section contains these two procedures:
“Changing the Manager or Operator Password” on page 35
“Resetting the Manager Password” on page 37
The first procedure allows you to change the manager or operator
password. The second procedure allows you to bypass the manager
password in the event you lose or forget it.
Changing the
Manager or
Operator
Password
To change the manager or operator password, perform the following
procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 6 to select Authentication
Configuration.
The Authentication Configuration menu is shown in Figure 3.
3. From the Authentication Configuration menu, type 5 to select
Passwords Configuration.
The Passwords Configuration menu is shown in Figure 4.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Passwords Configuration
1 - Set Manager Password
2 - Set Operator Password
R - Return to Previous Menu
Enter your selection?
Figure 4. Passwords Configuration Menu
4. From the Passwords Configuration menu, type 1 to select Set
Manager Password.
The following prompt is displayed:
Enter Current Manager Password ->
5. Type the current manager password (the default is “friend”) and press
Return.
The following prompt is displayed:
Enter New Manager Password ->
6. When prompted, re-enter the new password.
7. Type 2 to select Set Operator Password.
The following prompt is displayed:
Enter New Operator Password ->
8. Type the current operator password (the default is “friend”) and press
Return.
Note
A password can be from 0 to 16 alphanumeric characters.
Passwords are case sensitive. You should not use spaces or special
characters, such as asterisks (*) or exclamation points (!), in a
password if you are managing the switch from a web browser. Many
web browsers cannot handle special characters in passwords.
36Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
9. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
Resetting the
Manager
Password
This procedure can be used to bypass the login on the switch in the event
you forget the manager password. This procedure must be performed
from a local management session.
Caution
With this procedure, any person with physical access to the switch
can gain access to the unit’s management software without a user
name or password. For this reason, all AT-9400 Switches should be
maintained in a locked wiring closet or other secure location to
prevent unauthorized management access.
Note
This procedure requires rebooting the switch. Some network traffic
may be lost.
To reset the manager password, perform the following procedure:
1. Establish a local management session with the switch.
2. Reboot the switch. Refer to “Rebooting the Switch” on page 43 for
instructions.
3. When the switch displays “Press <Ctrl> B to go to Boot prompt,” type S
or s.
The switch, without acknowledging the key input, continues with the
process of initializing the management software.
4. At the completion of the initialization process, press Return.
You are automatically logged on with manager privileges. The
command line interface is displayed.
5. Change the manager’s password from either the command line
interface or the menus interface. For instructions on how to change the
password from the menus interface, refer to “Changing the Manager or
Operator Password” on page 35.
This completes the procedure for resetting the manager password.
You can continue to manage the switch or quit from the management
session. You must use the new password the next time you log on to
the switch at the start of a management session.
Section I: Basic Operations37
Chapter 1: Basic Switch Parameters
Setting the System Time
This procedure explains how to set the switch’s date and time. Setting the
system time is important if you configured the switch to send traps to your
management stations. Traps from a switch where the time has not been
set do not contain the correct date and time. Therefore, it becomes difficult
for you to determine when the events represented by the traps occurred.
It is also important to set the system time if you intend to use the Secure
Sockets Layer (SSL) certificate feature described in, Chapter 34, ”PKI
Certificates and SSL” on page 611. Certificates must contain the date and
time when they are created.
There are two ways to set the switch’s time. One method is to set it
manually. The AT-9400 Switch has an onboard battery that maintains the
date and time even when the unit is powered off or reset. For instructions,
refer to “Setting the System Time Manually,” next.
The second method uses the Simple Network Time Protocol (SNTP). The
AT-S63 Management Software is shipped with the client version of this
protocol. You can configure the AT-S63 Management Software to obtain
the current date and time from an SNTP or Network Time Protocol (NTP)
server located on your network or the Internet. For instructions, refer to
“Setting the System Time from an SNTP or NTP Server” on page 40.
SNTP is a reduced version of the NTP. However, the SNTP client software
in the AT-S63 Management Software is interoperable with NTP servers.
The local subnet on the switch where the SNTP server is a member must
have a routing interface. The switch uses the IP address of the routing
interface as its source address when communicating with the server. To
configure routing interfaces using the menus interface, refer to Chapter
29, “Internet Protocol Version 4 Routing Interfaces” on page 547 in this
guide.
Note
Prior to version 2.0.0 of the AT-S63 Management Software, the
SNTP server had to be a member of the switch’s management
VLAN. This restriction no longer applies. The SNTP server can be
located on any local subnet of the switch, provided the subnet has a
routing interface.
Note
The default system time on the switch is midnight, January 1, 1970.
38Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Setting the
System Time
Manually
To set the system time manually, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 2 to select System
Configuration.
The System Configuration menu is shown in Figure 2 on page 33.
3. From the System Configuration menu, type T to select Configure
System Time.
The Configure System Time menu is shown in Figure 5.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Configure System Time
1 - System Time ................... 00:00:00 on 01-Jan-1970
2 - SNTP Status ................... Disabled
3 - SNTP Server ................... 0.0.0.0
4 - UTC Offset .................... +0
5 - Daylight Savings Time (DST) ... Enabled
6 - Poll Interval ................. 600 seconds
7 - Last Delta .................... +0 seconds
U - Update System Time
R - Return to Previous Menu
Enter your selection?
Figure 5. Configure System Time Menu
4. From the Configure System Time menu, type 1 to select System Time.
The following prompt is displayed:
Enter new system time [hh:mm:ss] ->
5. Enter a new time for the system in the following format: hours, minutes,
and seconds all separated by colons. The following prompt is
displayed:
Enter new system date [dd-mm-yyyy] ->
6. Enter a new date for the system. Use two numbers to specify the day
and month. Use four numbers to specify the year. Separate the values
with hyphens. For example, December 5, 2004 is specified 05-12-
2004.
The new time and date are immediately activated on the switch.
Section I: Basic Operations39
Chapter 1: Basic Switch Parameters
Setting the
System Time
from an SNTP or
NTP Server
To configure the switch to obtain its date and time from an SNTP or NTP
server on your network or the Internet, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 2 to select System
Configuration.
The System Configuration menu is shown in Figure 2 on page 33.
3. From the System Configuration menu, type 8 to select Configure
System Time.
The Configure System Time menu is shown in Figure 5 on page 39.
4. Type 3 to select SNTP Server and enter the IP address of an SNTP or
NTP server.
Note
If the local interface on the switch is obtaining its IP address and
subnet mask from a DHCP server, you can configure the server to
provide the interface with an IP address of an NTP or SNTP server.
If you configured the server to provide this address, then you do not
need to enter it here, and you can skip ahead to step 5.
The following prompt is displayed:
Enter SNTP server IP address ->
5. Enter an IP address of an SNTP or NTP server.
6. Type 4 to select UTC Offset to specify the difference between the UTC
and local time.
Note
If the switch is using DHCP, it automatically attempts to determine
this value. In this case, you do not need to configure a value for the
UTC Offset parameter.
The following prompt is displayed:
Enter UTC Offset [-12 to 12] -> 0
7. Enter a UTC Offset time.
The default is 0 hours. The range is -12 to +12 hours.
40Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
8. Type 5 to select Daylight Savings Time (DST) to enable or disable the
switch’s ability to adjust its system time to daylight savings time. The
following prompt is displayed:
Adjust for Daylight Savings Time (E - Enabled, D - Disabled) ->
9. Type E to enable daylight savings time and allow the switch to adjust
system time to daylight savings time. This is the default value. Type D
to disable daylight savings time and not allow the switch to adjust
system time to daylight savings time.
Note
The switch does not set DST automatically. If the switch is in a
locale that uses DST, you must remember to enable this in April
when DST begins and disable it in October when DST ends. If the
switch is in a locale that does not use DST, this option should be set
to disabled all the time.
10. Type 6 to select Poll Interval to specify the time interval between
queries to the SNTP server.
The following prompt is displayed:
Enter interval to poll SNTP server [60 to 1200] -> 600
Note
Selection 7, Last Delta, reports the last adjustment that had to be
applied to the system time; the drift in the system clock between two
successive queries to the SNTP server. You cannot change this
value.
11. Enter the number of seconds the switch waits between polling the
SNTP or NTP server. The default is 600 seconds. The range is from 60
to 1200 seconds.
12. Type 2 to select SNTP Status to enable or disable the SNTP client.
The following prompt is displayed:
SNTP Status (E-Enabled, D-Disabled) ->
13. Type E to enable SNTP client software on the switch or D to disable
the NTP client software and press Return. The default is disabled.
After SNTP is enabled, the switch immediately polls the SNTP or NTP
server for the current date and time. (The switch also automatically
polls the server whenever a change is made to any of the parameters
in this menu, so long as SNTP is enabled.)
Section I: Basic Operations41
Chapter 1: Basic Switch Parameters
The Last Delta option in the menu displays the last adjustment that
was applied to system time due to a drift in the system clock between
two successive queries to the SNTP server. This is a read only field.
Option U, Update System Time, allows you to prompt the switch to poll
the SNTP or NTP server for the current time and date. You can use
this selection to update the time and date immediately rather than wait
for the switch’s next polling period. This selection has no effect if you
set the date and time manually.
14. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
42Section I: Basic Operations
Rebooting the Switch
This procedure reboots the switch.
AT-S63 Management Software Menus User’s Guide
Note
Any configuration changes not saved are lost after the switch
reboots. To save your configuration changes, return to the Main
Menu and type S to select Save Configuration Changes.
Caution
The switch does not forward traffic while it initializes its operating
software. The process can take from 20 seconds to several minutes
to complete, depending on the number and complexity of the
commands in its boot configuration file. Some packet traffic may be
lost. You must reestablish your management session after the
switch finishes reloading its software to continue managing the unit.
To reboot the switch, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 9 to select System
Utilities.
The System Utilities menu is shown in Figure 6.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
System Utilities
1 - File Operations
2 - Downloads and Uploads
3 - Ping a Remote System
4 - Reset to Factory Defaults
5 - Reboot the Switch
R - Return to Previous Menu
Enter your selection?
Figure 6. System Utilities Menu
Section I: Basic Operations43
Chapter 1: Basic Switch Parameters
Note
Item 1 - File Operations, is described in Chapter 9, ”File System” on
page 145. Item 2 - Downloads and Uploads is described in Chapter
10, ”File Downloads and Uploads” on page 167. Ping a Remote
System, item 3, is described in “Pinging a Remote System” on
page 49. Reset to Factory Defaults, item 4, is described in
“Returning the AT-S63 Management Software to the Factory Default
Values” on page 50.
3. From the System Utilities menu, type 5 to select Reboot the switch.
The following prompt is displayed:
The switch is about to reboot. Do you want to proceed?
[Yes/No] ->
4. Type Y to reboot the switch or N to cancel the procedure.
44Section I: Basic Operations
Configuring the Console Startup Mode
With this procedure you can control which management interface, menus
or command line, is displayed at the start of your local and remote
management sessions. The default is the command line interface.
To change the console startup mode, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 3 to select Console
(Serial/Telnet) Configuration.
The Console (Serial/Telnet) Configuration menu is shown in Figure 7.
Figure 7. Console (Serial/Telnet) Configuration Menu
3. Type 1 to toggle Console Startup Mode between Menu and CLI. When
the mode is set to Menu, management sessions start with the Main
Menu. When the mode is set to CLI, management sessions start with
the command line interface prompt. The default is CLI.
4. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
A change to the console startup mode takes effect the next time you
start a local management session.
Section I: Basic Operations45
Chapter 1: Basic Switch Parameters
Configuring the Console Timer
The AT-S63 Management Software uses the console timer, also referred
to as the console disconnect interval, to automatically end inactive local
and remote management sessions. The management software
automatically ends a local or remote management session if a
management session is inactive for the length of time specified by the
console timer. For example, if you specify two minutes as the console
timer, the AT-S63 Management Software automatically ends a
management session if it does not detect any activity from the local or
remote management station after two minutes.
This security feature prevents unauthorized individuals from using your
management station when you step away from your system while you are
configuring a switch. The default for the console timeout value is 10
minutes.
To adjust the console timer, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 3 to select Console
(Serial/Telnet) Configuration.
The Console (Serial/Telnet) Configuration menu is shown in Figure 7
on page 45.
3. From the Console (Serial/Telnet) Configuration menu, type 2 to select
Console Disconnect Interval
The following prompt is displayed:
Enter your new value -> [1 to 60]->
4. Enter a new console timer value. The range is 1 to 60 minutes. The
default is 10 minutes.
A change to the console timer is immediately activated on the switch.
5. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
46Section I: Basic Operations
Configuring the Telnet Server
This procedure describes how to enable and disable the Telnet server on
the switch. You might disable the server to prevent individuals from
managing the switch with a Telnet application or if you intend to use the
Secure Shell (SSH) protocol.
This procedure also explains how to toggle the Telnet server on the switch
so that is adds a NULL character after each CR. Some Telnet clients
require the character in order to correctly display the information from the
Telnet server.
To enable or disable the Telnet server or to set the Telnet NULL character
parameter, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
AT-S63 Management Software Menus User’s Guide
2. From the System Administration menu, type 3 to select Console
(Serial/Telnet) Configuration.
The Console (Serial/Telnet) Configuration menu is shown in Figure 7
on page 45.
3. To enable or disable the Telnet server, from the Console (Serial/
Telnet) Configuration menu type 4 to toggle Telnet Server between
Enabled and Disabled. The default is enabled.
Note
Disable Telnet access if you are using the SSH (Secure Shell)
feature. (The SSH feature is not available in all versions of the
AT-S63 Management Software.)
4. To configure the Telnet NULL character parameter, type 5 to toggle
Telnet insert NULL between On and Off. When Off, the default setting,
the Telnet server does not send a NULL character after each CR.
When On, the server does send the character.
A change to the status of the Telnet server or the Telnet NULL
character parameter is immediately implemented on the switch.
5. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
Section I: Basic Operations47
Chapter 1: Basic Switch Parameters
Setting the Baud Rate of the Serial Terminal Port
The default baud rate of the RJ-45 type serial terminal port on the switch is
9600 bps.
To change the baud rate, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 3 to select Console
(Serial/Telnet) Configuration.
The Console (Serial/Telnet) Configuration menu is shown in Figure 7
on page 45.
3. From the Console (Serial/Telnet) Configuration menu, type 3 to select
Console Baud Rate.
The following prompt is displayed:
Supported baud rates are:
1200, 2400, 4800, 9600, 19200, 38400, 57600, or 115200
Enter new baud rate value --> [1200 to 115200]
4. Type the desired baud rate value and press Return. The default setting
is 9600 bps.
The following message is displayed:
Baud rate changed to [baud rate you typed] bps.
Please change your terminal baud rate correspondingly.
Press <Enter> to continue.
Note
If you are running a local management session, be sure to change
your terminal’s baud rate.
5. Press Return.
48Section I: Basic Operations
Pinging a Remote System
This procedure instructs the switch to ping a remote device on your
network. This can be useful in determining whether a valid link exists
between the switch and another network device.
The local subnet on the switch where the device is a member must have a
routing interface. The switch uses the IP address of the routing interface
as its source address when sending the ping.
Note
Prior to version 2.0.0 of the AT-S63 Management Software, the
switch could ping a device only if the device was a member of the
switch’s management VLAN. This restriction no longer applies. The
switch can ping a device from any local subnet, provided the subnet
has a routing interface.
To instruct the switch to ping a network device, perform the following
procedure:
AT-S63 Management Software Menus User’s Guide
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 9 to select System
Utilities.
The System Utilities menu is shown in Figure 6 on page 43.
3. For the System Utilities menu, type 3 to select Ping a Remote System.
The following prompt is displayed:
Please enter an IP address ->
4. Enter the IP address of the end node you want the switch to ping.
The results of the ping command are displayed on the screen.
5. To stop the ping, press any key.
Section I: Basic Operations49
Chapter 1: Basic Switch Parameters
Returning the AT-S63 Management Software to the Factory Default
Values
The procedure in this section returns all AT-S63 Management Software
parameters to the default values. Please note the following before you
perform this procedure:
Returning all parameter settings to their default values also deletes all
routing interfaces as well as all port-based and tagged VLANs on the
switch.
This procedure does not delete files from the AT-S63 file system. To
delete files, refer to Chapter 9, ”File System” on page 145.
This procedure does not delete any encryption keys stored in the key
database. To delete encryption keys, refer to “Deleting an Encryption
Key” on page 600.
Returning a switch to its default values does not alter the contents of
the active boot configuration file. To reset the file back to the default
settings, you must reestablish your management session after the
switch reboots and then select Save Configuration changes.
Otherwise the switch reverts back to the previous configuration the
next time you reset the switch.
Note
The AT-S63 Management Software default values are listed in the
AT-S63 Management Software Features Guide.
To return the AT-S63 Management Software to the default settings,
perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 9 to select System
Utilities.
The System Utilities menu is shown in Figure 6 on page 43.
3. From the System Utilities menu, type 4 to select Reset to Factory
Defaults.
The following prompt is displayed:
This operation requires a switch reboot? [Yes/No] ->
4. Type Y for yes or N to cancel the procedure.
50Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
If you respond with yes, the following prompt is displayed:
Do you want to reset the serial port baud rate to 9600
bps? [Yes/No] ->
5. To return the baud rate of the terminal port on the switch to 9600 bps,
type Y for yes. To retain its current speed setting, type N for no.
All of the operating parameters on the switch are automatically
returned to their default settings as the unit reboots.
Caution
The switch does not forward traffic while it initializes its operating
software, a process that takes from 20 seconds to several minutes
to complete, depending on the number and complexity of commands
in the boot configuration file. Some packet traffic may be lost. You
must reestablish your management session if you want to continue
managing the switch.
To overwrite the settings in the active boot configuration file and return
the file to the switch’s default settings, perform steps 6 and 7.
6. Reestablish your management session.
7. From the Main Menu, type S to select Save Configuration Changes.
Section I: Basic Operations51
Chapter 1: Basic Switch Parameters
Displaying Hardware and Software Information
To display information about the switch hardware and software, perform
the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 1 to select System
Information.
The System Information menu is shown in Figure 8.
Allied Telesis AT-9424T/SP - AT-S63
Marketing
User: Manager11:20:02 27-Jun-2006
System Information
MAC Address ..... 00:30:84:00:00:00IP Address ...... 149.35.19.155
Model Name ...... AT-9424T/SPSubnet Mask ..... 255.255.0.0
Serial Number ... S05525A023600001Gateway ......... 0.0.0.0
System Up Time .. 30D:12H:56M:14S
Bootloader ...... ATS63_LOADER v1.7.0Build Date ...... Apr 12 2006 19:32:40
Application ..... ATS63 v2.0.0Build Date ...... Jun 26 2006 19:32:40
System Name ..... Marketing
Administrator ... Joe
Location ........ 3rd Floor
H - System Hardware Status
U - Uplink Information
R - Return to Previous Menu
Enter your selection?
Figure 8. System Information Menu
The System Information menu provides the following information:
MAC Address
The MAC address of the switch. You cannot change this parameter.
Model Name
Model name of the AT-9400 Switch. You cannot change this setting.
Serial Number
Serial number of the switch. You cannot change this setting.
IP Address
IP address of the local interface.
52Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Subnet Mask
Subnet mask of the local interface.
Gateway
For AT-9400 Switches that support IPv4 routing, such as the
AT-9424Ts and AT-9448Ts/XP switches, this field displays the IP
address of the next hop of the switch’s default route. The switch uses
the default route when it receives a network packet for routing, but
cannot find a route for it in the routing table. This field will contain
0.0.0.0 if no default route is defined on the switch.
For AT-9400 Switches that do not support IPv4 packet routing, such as
the AT-9424T/GB and AT-9424T/SP switches, this field displays the
default gateway address. This is the IP address of a router interface on
your network. It represents the next hop to reaching a remote network
device, such as a remote management workstation or a syslog server,
when the switch’s local interface and the remote device are on different
subnets. The default value is 0.0.0.0.
Note
For instructions on how to configure the routing interfaces on the
switch, including the local interface, refer to Chapter 29, “Internet
Protocol Version 4 Routing Interfaces” on page 547.
System Up Time
The number of days, hours, minutes, and seconds the switch has been
operational. You cannot change this setting.
Bootloader and Build Date
The version of the bootloader software and the date it was built.
Application and Build Date
The version of the AT-S63 Management Software that the switch is
currently running and the date it was built.
System Name
The name of the switch.
Administrator
The administrator of the switch.
Location
The location of the switch.
Note
To change the system name, administrator, or location, see
“Configuring the Switch’s Name, Location, and Contact” on page 32.
For information about selection H, System Hardware Status, refer to
“Displaying System Hardware Information” on page 55. For
Section I: Basic Operations53
Chapter 1: Basic Switch Parameters
information about selection U, Uplink Information, refer to “Displaying
Uplink Port Information” on page 57.
54Section I: Basic Operations
Displaying System Hardware Information
You can view information about the system hardware, including details
about the fans and temperature settings.
To display the system hardware information, perform the following
procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 1 to select System
Information
The System Information menu is shown in Figure 8 on page 52.
3. From the System Information menu, type H to select System Hardware
Status.
AT-S63 Management Software Menus User’s Guide
Note
Menu selection U, Uplink Information, is described in “Displaying
Uplink Port Information” on page 57.
The information in the System Hardware Status menu varies
depending on the model of the switch. The example in Figure 9 is from
an AT-9424T/GB switch.
Allied Telesis AT-9424T/GB - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
System Hardware Status
System 1.25 V Power ............. 1.28V
System 1.8V Power ............... 1.76V
System 2.5V Power ............... 2.48V
System 3.3V Power ............... 3.2V
System 5V Power ................. 5.0V
System 12V Power ................ 11.68V
System Temperature (Celsius) .... 36 C
System Fan Speed ................ 3970 RPM
Main PSU ........................ On
RPS ............................. Not Connected
U - Update Display
R - Return to Previous Menu
Enter your selection?
Figure 9. System Hardware Information Menu
Section I: Basic Operations55
Chapter 1: Basic Switch Parameters
The System Hardware Information menu provides the following
information:
System 1.25 V Power
System 1.8V Power
System 2.5 V Power
System 3.3 V Power
System 5 V Power
System 12 V Power
The current voltage of the six power supplies in the switch.
System Temperature (Celsius)
The overall system temperature.
System Fan Speed
The system fan speed.
Main PSU
RPS
The status of the main power supply unit (PSU) and the redundant
power supply (RPS).
4. Return to the Main Menu.
56Section I: Basic Operations
Displaying Uplink Port Information
To display the information about the GBIC or SFP transceivers installed in
the uplink ports, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 1 to select System
Information
The System Information menu is shown in Figure 8 on page 52.
3. From the System Information menu, type U to select Uplink
Information.
The Uplink Information menu is shown in Figure 10.
AT-S63 Management Software Menus User’s Guide
Allied Telesis AT-9424T/GB - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Uplink Information
1 - GBIC/SFP 1 ............ Not Present
2 - GBIC/SFP 2 ............ Present
R - Return to Previous Menu
Enter your selection?
Figure 10. Uplink Information Menu
The Uplink Information menu displays the status of the GBIC/SFP
uplink ports, ports 23 and 24. If a GBIC or an SFP transceiver is
installed in one of the slots, the display shows “Present.” “Not Present”
indicates that no GBIC or SFP transceiver is installed in that slot.
Note
The Uplink Information menu only indicates that a GBIC or an SFP is
inserted in the slot. It does not indicate whether or not a fiber optic
cable is connected to the GBIC or SFP.
The number of uplink ports shown in the menu varies, depending on
the model of the AT-9400 Switch.
Section I: Basic Operations57
Chapter 1: Basic Switch Parameters
4. Type the number corresponding to the slot where the transceiver is
identified as “Present” to view detailed information about that
transceiver. The information displayed depends upon the transceiver
vendor and whether the slot contains an SFP or a GBIC transceiver.
The GBIC/SFP Information menu (page 1) is displayed. Figure 11
shows some possible fields for an SFP.
Allied Telesis AT-9424T/GB - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
GBIC/SFP 2 Information
Transceiver Identifier ..................... SFP
Extended Transceiver Identifier ............ Function defined by serial ID
P - Previous Page
U - Update Display
R - Return to Previous Menu
Enter your selection?
Marketing
Figure 12. GBIC/SFP Information Menu (Page 2)
Note
The information displayed in the menus depends upon whether a
GBIC or an SFP transceiver is installed and the transceiver vendor.
Section I: Basic Operations59
Chapter 1: Basic Switch Parameters
60Section I: Basic Operations
Chapter 2
Port Parameters
This chapter contains the procedures for viewing and changing the
parameter settings for the individual ports on a switch, and contains the
following procedures:
“Displaying Port Status” on page 62
“Configuring Port Parameters” on page 65
“Configuring Head of Line Blocking” on page 69
“Configuring Flow Control and Back Pressure” on page 71
“Configuring Port Filtering” on page 73
“Setting Up Rate Limiting” on page 75
“Resetting a Port” on page 77
“Forcing Port Renegotiation” on page 78
“Resetting the Port Configuration to the Default Settings” on page 79
“Displaying Port Statistics” on page 80
“Clearing Port Statistics” on page 83
Section I: Basic Operations61
Chapter 2: Port Parameters
Displaying Port Status
To display the current status of the ports on the switch, perform the
following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13.
User: Manager11:20:02 02-Mar-2005
1 - Port Configuration
2 - Port Status
3 - Port Statistics
4 - Port Trunking and LACP
5 - Port Security
6 - Port Mirroring
Allied Telesis AT-9424T/SP - AT-S63
Marketing
Port Configuration
R - Return to Previous Menu
Enter your selection?
Figure 13. Port Configuration Menu
2. From the Port Configuration menu, type 2 to select Port Status.
An example of the Port Status menu is shown in Figure 14.
P - Previous Page
U - Update Display
R - Return to Previous Menu
Enter your selection?
Figure 14. Port Status Menu
62Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Note
The speed, duplex mode, and flow control settings are blank for a
port that has not established a link to its end node.
The Port Status menu displays a table that contains the following
columns of information:
Port
The port number.
Link
The status of the link between the port and the end node connected to
the port. The possible settings are:
Up - Indicates that a valid link exists between the port and the end
node.
Down - Indicates that the port and the end node have not established a
valid link.
Neg
The status of Auto-Negotiation on the port. Possible values are:
Auto - Indicates that the port is using Auto-Negotiation to set operating
speed and duplex mode.
Manual - Indicates that the operating speed and duplex mode have
been set manually.
MDIO
The operating configuration of the port. Possible values are Auto, MDI,
MDI-X. The status Auto indicates that the port automatically
determines the appropriate MDI or MDI-X setting.
Speed
The operating speed of the port. Possible values are:
10 - 10 Mbps
100 - 100 Mbps
1000 - 1000 Mbps
Duplex
The duplex mode of the port. Possible values are half-duplex and fullduplex.
PVID
The VLAN identifier (VID) of the VLAN where the port is an untagged
member. This column does not include the VIDs of the VLANs where
the port is a tagged member.
Section I: Basic Operations63
Chapter 2: Port Parameters
Port Type
The port type.
64Section I: Basic Operations
Configuring Port Parameters
To configure the basic parameter settings for a port, such as speed and
duplex mode, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port to be configured. You can configure more
than one port at a time. You can specify the ports individually (for
example, 5,7,22), as a range (for example, 18-23), or both (for
example 1,5,14-22).
AT-S63 Management Software Menus User’s Guide
The Port Configuration menu is shown in Figure 15.
Allied Telesis AT-9424T/SP - AT-S63
User: Manager11:20:02 02-Mar-2005
Configuring Port 11
0 - Description ........................ Port_11
1 - Status ............................. Enabled
2 - HOL Blocking Prevention Threshold .. 682 cells
3 - Flow Control
4 - Filtering
5 - Rate Limiting
6 - Negotiation ........................ Auto
X - Reset Port
F - Force Renegotiation
D - Set Port Configuration to Defaults
R - Return to Previous Menu
Enter your selection?
Marketing
Port Configuration
Figure 15. Port Configuration (Port) Menu
Note
If you are configuring multiple ports and the ports have different
settings, the Port Configuration menu displays the settings of the
lowest numbered port. After you have configured the settings of the
port, all its settings are copied to the other selected ports.
Section I: Basic Operations65
Chapter 2: Port Parameters
4. Adjust the following parameters as necessary.
Note
A change to a parameter is immediately activated on the port.
0 - Description
You use this option to assign a description to a port, from 1 to 15
alphanumeric characters. Spaces are allowed, but you should not use
special characters, such as asterisks or exclamation points. (You
cannot set a port description if you are configuring more than one
port.)
1 - Status
You use this option to enable or disable a port. When disabled, a port
does not forward frames to or from the node connected to the port.
You might want to disable a port and prevent packets from being
forwarded if a problem occurs with the node or cable connected to the
port. After the problem has been fixed, you can enable the port again
to resume normal operation.
You might also want to disable a port that is not being used to secure it
from unauthorized connections.
Possible settings for this parameter are:
Enabled - The port receives and forwards packets. This is the default
setting.
Disabled - The port does not receive or forward packets.
Note
Option 2, HOL Blocking Prevention, is described in “Configuring
Head of Line Blocking” on page 69. Option 3, Flow Control, is
described in “Configuring Flow Control and Back Pressure” on
page 71. Option 4, Filtering, is described in “Configuring Port
Filtering” on page 73. Option 5, Rate Limiting, is described in
“Setting Up Rate Limiting” on page 75.
6 - Negotiation
You use this option to configure a port for Auto-Negotiation or to
manually set a port’s speed and duplex mode. The default is Auto for
Auto-Negotiation.
Note
When you set negotiation to Manual, items 7 (Speed), 8 (Duplex),
and 9 (MDI Crossover) are displayed.
66Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
If you select Auto for Auto-Negotiation, which is the default setting, the
switch sets speed, duplex mode, and MDI crossover for the port
automatically. The switch determines the highest possible common
speed between the port and its end node and sets the port to that
speed. This helps to ensure that the port and the end node are
operating at the highest possible common speed.
Note the following items concerning the operation of Auto-Negotiation
on a switch port:
A 10/100/1000Base-T twisted pair port must be set to set to Auto-
Negotiation to operate at 1000 Mbps. You cannot manually
configure a 10/100/1000Base-T twisted pair port to 1000 Mbps.
In order for a switch port to successfully autonegotiate its duplex
mode with an end node, the end node should also be using AutoNegotiation. Otherwise, a duplex mode mismatch can occur. A
switch port using Auto-Negotiation defaults to half-duplex if it
detects that the end node is not using Auto-Negotiation. This can
result in a mismatch if the end node is operating at a fixed duplex
mode of full-duplex.
To avoid this problem when connecting an end node with a fixed
duplex mode of full-duplex to a switch port, disable AutoNegotiation on the port and set the port’s speed and duplex mode
manually.
When a twisted pair port is set to Auto-Negotiation, the MDI/MDI-X
setting for the port is locked at auto-MDI/MDI-X. The switch
automatically determines the correct MDI/MDI-X setting. You
cannot set MDI/MDI-X manually.
When Auto-Negotiation is disabled on a twisted pair port, the auto-
MDI/MDI-X feature on a port is also disabled, and the port defaults
to the MDI-X configuration. Consequently, if you disable AutoNegotiation and set a port’s speed and duplex mode manually, you
might also need to set the port’s MDI/MDI-X setting as well.
An SFP or GBIC module uses Auto-Negotiation to set its speed
and duplex mode. If the SFP or GBIC is paired with a twisted pair
port whose speed and duplex mode were set manually, the speed
reverts to Auto-Negotiation when an SFP or GBIC module
establishes a link with an end node.
7 - Speed
This item is only available when Negotiation is set to Manual. Type 7 to
toggle between the following selections:
10 Mbps
100 Mbps
Section I: Basic Operations67
Chapter 2: Port Parameters
1000 Mbps (Applies only to 1000Base SFP and GBIC modules. This
selection should not be used. An SFP or GBIC module should use
Auto-Negotiation to set its speed and duplex mode.)
8 - Duplex
This item is only available when Negotiation is set to Manual. The
possible settings are full-duplex and half-duplex.
9 - MDI Crossover
This item is only available when Negotiation is set to Manual.
This selection sets the wiring configuration of a twisted pair port. The
configuration can be MDI or MDI-X.
The twisted pair ports on the switch feature auto-MDI/MDI-X. They
configure themselves automatically as MDI or MDI-X when connected
to an end node. This allows you to use a straight-through twisted pair
cable when connecting any network device to a port on the switch.
When a port is using Auto-Negotiation to set its speed and duplex
mode, the only available setting for this item is Auto. The port
automatically sets its MDI/MDI-X setting.
If you disable Auto-Negotiation on a port and set a port’s speed and
duplex mode manually, the auto-MDI/MDI-X feature is also disabled. A
port where Auto-Negotiation has been disabled defaults to MDI-X.
Disabling Auto-Negotiation may require that you manually configure a
port’s MDI/MDI-X setting using this option or that you use a crossover
cable.
The final three parameters on the Port Configuration menu are:
X - Reset Port
This item resets the selected port. For more information, see
“Resetting a Port” on page 77.
F - Force Renegotiation
This item prompts the port to autonegotiate with the end node. For
more information, see “Forcing Port Renegotiation” on page 78.
D - Set Port Configuration to Defaults
This item resets all port settings to the default values. For more
information, see “Resetting the Port Configuration to the Default
Settings” on page 79.
5. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
68Section I: Basic Operations
Configuring Head of Line Blocking
Head of line (HOL) blocking is a problem that occurs when a port on a
switch becomes oversubscribed. An oversubscribed port is receiving more
packets from other switch ports than it can transmit in a timely manner.
An oversubscribed port can prevent other ports from forwarding packets to
each other because ingress packets on a port are buffered in a First In,
First Out (FIFO) manner. If the head of an ingress queue consists of a
packet destined for an oversubscribed port, the ingress queue is not able
to forward any of its other packets to the egress queues of other ports.
A simplified version of the problem is illustrated in Figure 16. It shows four
ports on a switch. Port D is receiving packets from two ports—50% of the
ingress traffic on port A and 100% of the ingress traffic on port B. Not only
is port A unable to forward packets to port D because the latter’s egress
queues are filled with packets from port B, but it is also unable to forward
traffic to port C because its ingress queue has frames destined to port D
that it is unable to forward.
AT-S63 Management Software Menus User’s Guide
Port A
C C C C D D D D
Ingress Queue
Port B
D D D D D D D D
Ingress Queue
The HOL Limit parameter can help prevent this problem from occurring.
This parameter sets a threshold on the utilization of a port’s egress queue.
When the threshold for a port is exceeded, the switch signals other ports to
discard packets to the oversubscribed port.
Port C
50%
Egress Queue
50%
Port D
100%
D D D D D D D D
Engress Queue
Figure 16. Head of Line Blocking
For example, referring to the figure above, when the utilization of the
storage capacity of port D exceeds the threshold, the switch signals the
Section I: Basic Operations69
Chapter 2: Port Parameters
other ports to discard packets destined for port D. Port A drops the D
packets, enabling it to once again forward packets to port C.
The number that you enter for this value represents cells. A cell is 128
bytes. The range is 0 to 8191 cells. The default is 682.
To set up head of line blocking, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port to be configured. You can configure more
than one port at a time. You can specify the ports individually (for
example, 5,7,22), as a range (for example, 18-23), or both (for
example 1,5,14-22).
The Port Configuration menu is shown in Figure 15 on page 65.
4. From the Port Configuration menu, type 2 to select HOL BLocking
Prevention Threshold.
The following prompt is displayed:
Enter HOL Blocking Prevention Threshold (128 byte cells)
: [1 to 8191] -> 682
5. Enter the threshold in cells. A cell equals 128 bytes. The range is 1 to
8191 cells. The default is 682.
6. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
70Section I: Basic Operations
Configuring Flow Control and Back Pressure
A switch port uses flow control to control the flow of ingress packets from
its end node when operating in full-duplex mode.
A port using flow control issues a special frame, referred to as a PAUSE
frame, as specified in the IEEE 802.3x standard, to stop the transmission
of data from an end node. When a port needs to stop an end node from
transmitting data, it issues this frame. The frame instructs the end node to
cease transmission. The port continues to issue PAUSE frames until it is
again ready to receive data from the end node.
The default setting for flow control on a switch port is disabled.
Back pressure performs much the same function as flow control. Both are
used by a port to control the flow of ingress packets. Flow control applies
to ports operating in full-duplex; back pressure applies to ports operating in
half-duplex mode.
AT-S63 Management Software Menus User’s Guide
When a twisted pair port on the switch operating in half-duplex mode
needs to stop an end node from transmitting data, it forces a collision. A
collision on an Ethernet network occurs when two end nodes attempt to
transmit data using the same data link at the same time. A collision causes
the end nodes to stop sending data.
When a switch port needs to stop a half-duplex end node from transmitting
data, it forces a collision on the data link, which stops the end node. After
the switch is ready to receive data again, the switch stops forcing
collisions. This is called back pressure.
The default setting for back pressure on a switch port is disabled.
To set up flow control or back pressure, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port to be configured. You can configure more
than one port at a time. You can specify the ports individually (for
example, 5,7,22), as a range (for example, 18-23), or both (for
example 1,5,14-22).
The Port Configuration menu is shown in Figure 15 on page 65.
Section I: Basic Operations71
Chapter 2: Port Parameters
4. From the Port Configuration menu, type 3 to select Flow Control.
The Flow Control menu is shown in Figure 17.
Allied Telesis AT-9424T/SP - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Flow Control
Configuring Port 11
1 - Flow Control (Full-Duplex) Status .... Disabled
2 - Flow Control Threshold ............... 7935 cells
3 - Back Pressure (Half-Duplex) Status ... Disabled
4 - Back Pressure Threshold .............. 7935 cells
R - Return to Previous Menu
Enter your selection?
Figure 17. Flow Control Menu
5. Type 1 to select FLow Control (Full-Duplex) Status to enable or
disable flow control. The possible settings are:
Disabled -No flow control on the port. This is the default setting.
Enabled - Flow control is activated. This setting is appropriate only
when the end node connected to the port is also using flow control.
Auto - The port uses flow control only if it detects that the end node is
using it.
6. Type 2 to select Flow Control Threshold which specifies the threshold
for flow control. The threshold is specified in cells. A cell equals 128
bytes. The range is 1 to 7935. The default is 7935 cells.
7. Type 3 to select Back Pressure (Half-Duplex) Status which enables or
disables back pressure on a port. Possible settings are:
Disabled - The port does not use back pressure. This is the default
setting.
Enabled - The port uses back pressure.
8. Type 4 to select Back Pressure Threshold. This selection specifies the
threshold for backpressure. The threshold is specified in cells. A cell
equals 128 bytes. The range is 1 to 7935. The default is 7935 cells.
9. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
72Section I: Basic Operations
Configuring Port Filtering
If the performance of your network is affected by heavy traffic, you can use
these parameters to restrict ingress and egress broadcast packets as well
as unknown unicast and multicast packets forwarded by a port. Activating
this feature on a port causes the port to discard all packets of the type you
specified. For example, you might configure a port to discard all ingress
and egress broadcast packet or perhaps just unknown unicast egress
packets. The default setting for each filter is disabled.
To set up filtering, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
AT-S63 Management Software Menus User’s Guide
Enter port-list ->
3. Enter the number of the port to be configured.
The Port Configuration menu is shown in Figure 15 on page 65.
4. From the Port Configuration menu, type 4 to select Filtering.
5. From the Filtering menu, type 1 to toggle Unknown Unicast Ingress
Filtering between Disabled and Enabled.
6. Type 2 to toggle Unknown Unicast Egress Filtering between Disabled
and Enabled.
7. Type 3 to toggle Unknown Multicast Ingress Filtering between
Disabled and Enabled.
8. Type 4 to toggle Unknown Multicast Egress Filtering between Disabled
and Enabled.
9. Type 5 to toggle Broadcast Ingress Filtering between Disabled and
Enabled.
10. Type 6 to toggle Broadcast Egress Filtering between Disabled and
Enabled.
11. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
74Section I: Basic Operations
Setting Up Rate Limiting
The rate limiting feature allows you to set the maximum number of ingress
packets the port accepts each second. Packets exceeding the threshold
are discarded. You can enable rate limiting and set a rate independently
for unknown unicast, multicast, and broadcast packets.
To set rate limiting, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port to be configured.
AT-S63 Management Software Menus User’s Guide
The Port Configuration menu is shown in Figure 15 on page 65.
4. From the Port Configuration menu, type 5 to select Rate Limiting.
The Rate Limiting menu is shown in Figure 19.
Allied Telesis AT-9424T/SP - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Rate Limiting
Configuring Port 11
1 - Unknown Unicast Rate Limiting Status ... Disabled
5. To control unknown unicast packets, do the following:
a. From the Rate Limiting menu, type 1 to toggle Unknown Unicast
Rate Limiting Status between Enabled and Disabled.
Section I: Basic Operations75
Chapter 2: Port Parameters
b. If you enabled the feature, type 2 to select Unknown Unicast Rate.
The following prompt is displayed:
Enter the Rate Limit (packets/second):[0 to 262143]->
c. Enter a number for the rate limit.
6. To control multicast packets, do the following:
a. Type 3 to toggle Multicast Rate Limiting Status between Enabled
and Disabled.
b. If you enabled the feature, type 4 to select Multicast Rate.
The following prompt is displayed:
Enter the Rate Limit (packets/second):[0 to 262143]->
c. Enter a number for the rate limit.
7. To control broadcast packets, do the following:
a. Type 5 to toggle Broadcast Rate Limiting Status between Enabled
and Disabled.
b. If you enabled the feature, type 6 to select Broadcast Rate.
The following prompt is displayed:
Enter the Rate Limit (packets/second):[0 to 262143]->
c. Enter a number for the rate limit.
8. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
76Section I: Basic Operations
Resetting a Port
AT-S63 Management Software Menus User’s Guide
Resetting a port is useful in situations where a port is having problems
establishing a valid connection to its end node. Resetting a port does not
change any of its parameter settings.
To reset a port, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port you want to reset. You can reset more
than one port at a time. You can specify the ports individually (for
example, 5,7,22), as a range (for example, 18-23), or both (for
example 1,5,14-22).
The Port Configuration menu is shown in Figure 15 on page 65.
4. From the Port Configuration menu, type X to select Reset Port.
Section I: Basic Operations77
Chapter 2: Port Parameters
Forcing Port Renegotiation
Port renegotiation prompts a port operating in Auto-Negotiation to
renegotiate its speed and duplex mode with its end node. This option is
useful if you believe that a port and end node are not operating at the
same speed and duplex mode.
To force port renegotiation, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port to renegotiate its speed and duplex
mode. You can reset more than one port at a time. You can specify the
ports individually (for example, 5,7,22), as a range (for example, 18-
23), or both (for example 1,5,14-22).
The Port Configuration menu is shown in Figure 15 on page 65.
4. From the Port Configuration menu, type F to select Force
Renegotiation.
78Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Resetting the Port Configuration to the Default Settings
You can return the parameters settings of a port to the default values.
To reset a port’s settings to the default settings, perform the following
procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 1 to select Port Configuration.
The following prompt is displayed:
Enter port-list ->
3. Enter the number of the port to be reset to its default settings. You can
reset more than one port at a time. You can specify the ports
individually (for example, 5,7,22), as a range (for example, 18-23), or
both (for example 1,5,14-22).
The Port Configuration menu is shown in Figure 15 on page 65.
4. From the Port Configuration menu, type D to select Set Port
Configuration to Defaults.
Section I: Basic Operations79
Chapter 2: Port Parameters
Displaying Port Statistics
To display Ethernet port statistics, perform the following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 3 to select Port Statistics.
The Port Statistics menu is shown in Figure 20.
Allied Telesis AT-9424T/SP - AT-S63
User: Manager11:20:02 02-Mar-2005
1 - Display Port Statistics
2 - Clear Port Statistics
R - Return to Previous Menu
Enter your selection?
Marketing
Port Statistics
Figure 20. Port Statistics Menu
3. From the Port Statistics menu, type 1 to select Display Port Statistics.
The following prompt is displayed:
Enter port-list:
4. Enter the port whose statistics you want to view. You can specify more
than one port at a time.
80Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
The Display Port Statistics menu is shown in Figure 21.
Number of frames transmitted from the port, grouped by size.
CRC Error
Number of frames with a cyclic redundancy check (CRC) error but with
the proper length (64-1518 bytes) received on the port.
Jabber
Number of occurrences of corrupted data or useless signals appearing
on the port.
No. of Rx Errors
Number of receive errors.
No. of Tx Errors
Number of transmit errors.
Undersize Frames
Number of frames that were less than the minimum length specified by
IEEE 802.3 (64 bytes including the CRC) received on the port.
Oversize Frames
Number of frames exceeding the maximum specified by IEEE 802.3
(1518 bytes including the CRC) received on the port.
Fragments
Number of undersized frames, frames with alignment errors, and
frames with frame check sequence (FCS) errors (CRC errors)
received on the port.
Collision
Number of collisions that have occurred on the port.
Dropped Frames
Number of frames successfully received and buffered by the port, but
discarded and not forwarded.
82Section I: Basic Operations
Clearing Port Statistics
To clear the Ethernet port statistics and reset them to “0”, perform the
following procedure:
1. From the Main Menu, type 1 to select Port Configuration.
The Port Configuration menu is shown in Figure 13 on page 62.
2. From the Port Configuration menu, type 3 to select Port Statistics.
The Port Statistics menu is shown in Figure 20 on page 80.
3. Type 2 to select Clear Statistics.
The statistics are reset to “0” and the statistics gathering starts again.
AT-S63 Management Software Menus User’s Guide
Section I: Basic Operations83
Chapter 2: Port Parameters
84Section I: Basic Operations
Chapter 3
Enhanced Stacking
This chapter explains the enhanced stacking feature. The sections in this
chapter include:
“Setting a Switch’s Enhanced Stacking Status” on page 86
“Selecting a Switch in an Enhanced Stack” on page 88
“Returning to the Master Switch” on page 91
“Displaying the Enhanced Stacking Status” on page 92
Section I: Basic Operations85
Chapter 3: Enhanced Stacking
Setting a Switch’s Enhanced Stacking Status
The enhanced stacking status of the switch can be master, slave, or
unavailable. Each status is described below:
Master switch - The master switch is your entry point for managing the
switches of a stack. Starting a local or remote management session on
a master switch gives you management access to all the switches in
the stack.
Slave switch - A slave switch can be remotely managed through a
master switch or independently, such as through a local session.
Unavailable - A switch with an unavailable stacking status is not part of
an enhanced stack must be managed independently, either locally or
remotely.
Note
The default setting for a switch is slave.
Note
You cannot change the stacking status of a switch through
enhanced stacking. You must access the switch directly, either
through a local or remote session, to change its stacking status.
To adjust a switch’s enhanced stacking status, perform the following
procedure:
1. From the Main Menu, type 8 to select Enhanced Stacking. The
Enhanced Stacking menu is shown in Figure 22.
The menu displays the current status of the switch at the end of
selection “1 - Switch State.” For example, the switch’s current status in
the figure above is master.
86Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Note
Item 2, Stacking Services, is only displayed on master switches.
2. To change a switch’s stacking status, type 1 to select Switch State.
The following prompt is displayed.
Enter new setup (M/S/U) ->
3. Type M to change the switch to a master switch, S to make it a slave
switch, or U to make the switch unavailable. Press Return.
A change to the status is immediately activated on the switch.
4. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
Section I: Basic Operations87
Chapter 3: Enhanced Stacking
Selecting a Switch in an Enhanced Stack
In order to manage a switch other than the master switch in an enhanced
stack, you must instruct the master switch to poll the common VLAN for
the other switches and then select the switch. You can manage only one
switch at a time
To select a switch in an enhanced stack, perform the following procedure:
1. From the Main Menu, type 8 to select Enhanced Stacking.
The Enhanced Stacking menu is shown in Figure 22 on page 86.
2. From the Enhanced Stacking menu, type 2 to select Stacking
Services.
Note
Item 2, Stacking Services, is only displayed on master switches.
1 - Get/Refresh List of Switches
2 - Sort Switches in New Order
3 - Access Switch
4 - Load Image/Bootloader File
5 - Load Configuration File
R - Return to Previous Menu
Enter your selection?
SwitchSoftwareSwitch
Figure 23. Stacking Services Menu
3. From the Stacking Services menu, type 1 to select Get/Refresh List of
Switches.
88Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
The master switch polls the common subnet for the slave and master
switches that are members of the enhanced stack and displays a list of
the switches in the Stacking Services menu. An example is shown in
Figure 24.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Stacking Services
SwitchSoftwareSwitch
NumMAC AddressNameModeVersionModel
-------------------------------------------------------------------0100:00:00:12:34:30 Local UsersSlaveS63 v2.0.0AT-9424T/SP
0200:30:84:f3:b4:60 EngineeringSlaveS63 v2.0.0AT-9424T/GB
0300:30:84:54:02:60 FinanceSlaveS62 v1.0.0AT-8524M
1 - Get/Refresh List of Switches
2 - Sort Switches in New Order
3 - Access Switch
4 - Load Image/Bootloader File
5 - Load Configuration File
R - Return to Previous Menu
Enter your selection?
Figure 24. Stacking Services Menu With List of Switches
The list does not include the master switch where you started the
management session, nor any switches with an enhanced stacking
status of Unavailable.
By default, the switches are sorted in the menu by MAC address. You
can sort the switches by name by selecting option 2, Sort Switches in
New Order.
Note
Item 4, Load Image/Bootloader, uploads the AT-S63 image from the
master switch to another AT-9400 Switch in the enhanced stack, as
explained in “Uploading the AT-S63 Image File Switch to Switch” on
page 176. Item 5, Load Configuration File, allows you to upload a
configuration file from a master switch to another AT-9400 Switch,
as explained in “Uploading an AT-S63 Configuration File Switch to
Switch” on page 179.
4. To manage a new switch, type 3 to select Access Switch.
Section I: Basic Operations89
Chapter 3: Enhanced Stacking
A prompt similar to the following is displayed:
Enter the switch number -> [1 to 24]
5. Type the number of the switch in the list you want to manage.
6. Enter the appropriate username and password for the switch.
The command line interface of the selected switch is displayed. You
now can manage the switch. Any management tasks you perform
affect only the selected switch.
90Section I: Basic Operations
Returning to the Master Switch
When you are finished managing a slave switch, return to the Main Menu
of the switch and type Q for Quit. This returns you to the Stacking Services
menu on the master switch where you started the management session.
You can either select another switch from the list to manage or, to manage
the master switch, type R twice to return to the master switch’s Main
Menu.
AT-S63 Management Software Menus User’s Guide
Section I: Basic Operations91
Chapter 3: Enhanced Stacking
Displaying the Enhanced Stacking Status
To view the stacking status of a switch in a stack, perform the following
procedure:
1. From the Main Menu, type 8 to select Enhanced Stacking.
The menu shows the enhanced stacking status of the switch you
selected.
92Section I: Basic Operations
Chapter 4
SNMPv1 and SNMPv2c
This chapter explains how to activate SNMP management on the switch
and how to create, modify, and delete SNMPv1 and SNMPv2c community
strings. Sections in the chapter include:
“Enabling or Disabling SNMP Management” on page 94
“Setting the Authentication Failure Trap” on page 95
“Creating an SNMP Community String” on page 96
“Modifying a Community String” on page 99
“Deleting a Community String” on page 103
“Displaying the SNMP Community Strings” on page 104
Section I: Basic Operations93
Chapter 4: SNMPv1 and SNMPv2c
Enabling or Disabling SNMP Management
To enable or disable SNMP management for the switch, perform the
following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 5 to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 26.
3. From the SNMP Configuration menu, type 1 to toggle the SNMP Status
option between its two settings of Enabled and Disabled. When set to
Disabled, the default, you cannot manage the switch using SNMP.
When set to Enabled, you can manage the switch using SNMP.
A change to the SNMP status is immediately activated on the switch.
4. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
94Section I: Basic Operations
Setting the Authentication Failure Trap
As mentioned in the SNMP Overview section in this chapter, a trap is a
message sent by the switch to a management workstation or server to
signal an operating event, such as when the device is reset.
An authentication failure trap is similar to other the traps. It too signals an
operating event on the switch. But this trap is somewhat special because it
relates to SNMP management. A switch that sends this trap could be
indicating an attempt by someone to gain unauthorized management
access using an SNMP application program to the switch. There are two
events that can cause a switch to send this trap:
An SNMP management station attempts to access the switch using an
incorrect or invalid community name.
An SNMP management station tried to access a closed access
community string, to which its IP address is not assigned.
AT-S63 Management Software Menus User’s Guide
Given the importance of this trap to the protection of your switch, the
management software allows you to disable and enable it separately from
the other traps. If you enable it, the switch will send this trap if either of the
above events occur. If you disable it, the switch will not send this trap. The
default is disabled.
If you enable this trap, be sure to add one or more IP addresses of trap
receivers to the community strings so that the switch will know where to
send the trap if it needs to.
To enable or disable the authentication trap, perform the following
procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 5 to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 26 on page 94.
3. From the SNMP Configuration menu, type 2 to toggle Authentication
Failure Trap Status between enabled and disabled. The default is
disabled.
4. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
Section I: Basic Operations95
Chapter 4: SNMPv1 and SNMPv2c
Creating an SNMP Community String
To create a new SNMP community string, perform the following
procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 5 to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 26 on page 94.
3. From the SNMP Configuration menu, type 3 to select Configure
SNMPv1 & SNMPv2c Community.
The Configure SNMPv1 & SNMPv2c Community menu is shown in
Figure 27.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Configure SNMPv1 & SNMPv2c Community
Community Name AccessMode StatusOpenAcc Manager IP Addr Trap Receiver IP
1 - Create SNMP Community
2 - Delete SNMP Community
3 - Modify SNMP Community
U - Update Display
R - Return to Previous Menu
Enter your selection?
Figure 27. Configure SNMPv1 & SNMPv2c Community Menu
The table in the menu lists the current community strings on the switch
and their attributes. The columns in the table are defined here:
Community Name
The name of a community string.
Access Mode
The access mode of a community string. A string with a Read Only
access mode permits the viewing of the MIB objects on the switch. A
string with a Read/Write access mode permits both viewing and
changing the SNMP MIB objects.
96Section I: Basic Operations
AT-S63 Management Software Menus User’s Guide
Status
The operating status of a community string. Enabled means the string
is available for use and Disabled means it is unavailable.
OpenAcc
The access status of a community string. A string with a status of Yes
has an open status and can be used by any management workstation.
A string with a status of No has a closed status and can only be used
by those workstations whose IP addresses are assigned to the string.
Manager IP Addr
The IP addresses of management workstations permitted to use a
string with a closed access status.
Trap Receiver IP
The IP addresses of trap receivers to receive traps from the switch.
4. To create a new community string, type 1 to select Create SNMP
Community.
The following prompt is displayed:
Enter SNMP Community Name:
5. Enter the new SNMP community string. The name can be from one to
fifteen alphanumeric characters. Spaces are allowed.
The following prompt is displayed:
Enter Access Mode [R-Read Only, W-Read/Write]:
6. Specify the access mode for the new SNMP community string. If you
specify Read, the community string will only allow you to view the MIB
objects on the switch. If you specify Read/Write, the community string
will allow you to both view and change the SNMP MIB objects on the
switch.
The following prompt is displayed:
Enter Open Access Status [Y-Yes, N-No]:
7. Specify the open access status. If you enter Yes, any network manager
who knows the community string can use it. If you respond with No,
making it closed access, only those management workstations whose
IP addresses you assign to the community string can use it.
The following prompt is displayed:
Enter SNMP Manager IP Addr:
8. If in Step 7 you responded with No making this a closed community
string, specify the IP address of the management workstation that can
use the string. A community string can have up to eight IP addresses of
Section I: Basic Operations97
Chapter 4: SNMPv1 and SNMPv2c
management workstations. But you can assign only one to it initially
with this procedure. To add additional IP addresses, refer to “Modifying
a Community String” on page 99.
If you assigned the community string an access status of open, leave
this field blank by pressing Return.
The following prompt is displayed:
Enter Trap Receiver IP Addr:
9. If you want the switch to send traps to a management workstation or
server, enter the IP address of the node here. A community string can
have up to eight IP addresses of trap receivers. But you can assign only
one initially with this procedure. To add additional IP addresses, refer
to “Modifying a Community String” on page 99.
If you do not want to add a IP address of a trap receiver to the
community string, leave this field blank by pressing Return.
The AT-S63 Management Software creates the new community string
and adds it to the list in the SNMP Community menu. A new
community string is immediately available for use to manage the
switch.
10. If desired, repeat this procedure starting with Step 4 to create additional
community strings.
11. After making changes, type R until you return to the Main Menu. Then
type S to select Save Configuration Changes.
98Section I: Basic Operations
Modifying a Community String
To modify a community string, perform the following procedure:
1. From the Main Menu, type 5 to select System Administration.
The System Administration menu is shown in Figure 1 on page 32.
2. From the System Administration menu, type 5 to select SNMP
Configuration.
The SNMP Configuration menu is shown in Figure 26 on page 94.
3. From the SNMP Configuration menu, type 3 to select Configure
SNMPv1 &SNMPv2c Community.
The Configure SNMPv1 &SNMPv2c Community menu in shown in
Figure 27 on page 96.
AT-S63 Management Software Menus User’s Guide
4. From the Configure SNMPv1 &SNMPv2c Community menu, type 3 to
select Modify SNMP Community.
The Modify SNMP Community menu is shown in Figure 28.
Allied Telesis AT-9424Ts - AT-S63
Marketing
User: Manager11:20:02 02-Mar-2005
Modify SNMPv1 & SNMPv2c Community
Community NameAccessModeStatusOpenAccManager IP Addr Trap Rec IP
1 - Add Attributes to Community
2 - Delete Attributes from Community
3 - Set Community Access Mode
4 - Set Community Status
5 - Set Community Open Access
U - Update Display
R - Return to Previous Menu
Enter your selection?
Figure 28. Modify SNMP Community Menu
This menu lists the current community strings on the switch and their
attributes. For attribute definitions, refer to “Creating an SNMP
Community String” on page 96.
Section I: Basic Operations99
Chapter 4: SNMPv1 and SNMPv2c
The menu options are described below:
1 - Add Attributes to Community
If a community string has a closed access mode, you can use this
selection to add new IP addresses of management workstations that
can use the string. You can also use this option to add IP addresses of
new trap receivers. To use this option, do the following:
a. From the Modify SNMP Community menu, type 1 to select Add
Attributes to Community. The following prompt is displayed:
Enter SNMP Community Name:
b. Enter the community string you want to modify. Community strings
are case sensitive. This prompt is displayed:
Enter SNMP Manager IP Addr:
c. If you are modifying a community string with a closed access mode
and you want to add an IP address of a management workstation
to it, enter the workstation’s IP address at the prompt. Otherwise,
just press Return. A community string can have a maximum of
eight IP addresses, but you can add only one at a time with this
procedure. This prompt is displayed:
Enter Trap Receiver IP Addr:
d. If you want the switch to send traps to a trap receiver, enter the IP
address of the receiver at this prompt. Otherwise, just press
Return.
The community string is modified and the Modify SNMP
Configuration menu is displayed again.
e. Repeat this procedure to modify other community strings.
f.After making changes, type R until you return to the Main Menu.
Then type S to select Save Configuration Changes.
2 - Delete Attributes from Community
Use this option to delete an IP address of a management workstation
or a trap receiver from a community string. To use this option, do the
following:
a. From the Modify SNMP Community menu, type 2 to select Delete
Attributes from Community. The following prompt is displayed:
Enter SNMP Community Name:
b. Enter the community string you want to modify. Community strings
are case sensitive. This prompt is displayed:
100Section I: Basic Operations
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.