PN D617/10032 Rev 1
Copyright.2004 Allied Telesyn, Inc.
19800 North Creek Parkway, Suite 200,Bothell WA 98011,USA
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn,
Inc.All product names,compan
of their respective owners.Allied Telesyn,Inc. reserves the right to make changes in specifications and other information
contained in this document without prior written notice.The information provided herein is subject to change
without notice. In no event shall
whatsoever, including but not limited to lost profits,arising out of or related to this manual or the information contained
herein, even if Allied Telesyn, Inc. has been advised of, known,or should have known, the possibility of such damages.
y names, logos or other designations mentioned herein are trademarks or registered trademarks
Allied Telesyn Inc. be liable for any incidental,special, indirect, or consequential damages
Electrical Safety and Emission Statement
Standards:This product meets the following standards.
CE Marking Warning: This is a Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate
measures.
Important: Appendix B contains translated safety statements for installing this equipment.When you see the go to Appendix A for the translated safety statement in your language.
ichtig:
W
Sprache nach.
Vigtigt: Tillæg B indeholder oversatte sikkerhedsadvarsler, der vedrører installation af dette udstyr. Når De ser symbolet,skal De slå op i tillæg A og finde de oversatte
sikkerhedsadvarsler i Deres eget sprog.
Belangrijk: Appendix B bevat vertaalde veiligheidsopmerkingen voor het installeren van deze apparatuur.Wanneer u de ziet, raadpleeg Appendix A voor vertaalde v
eiligheidsinstructies in uw taal.
Important: L'annexe B contient les instructions de sécurité relatives à l'installation de cet équipement.Lorsque vous voyez le symbole , reportez-vous à l'annexe A pour consulter la
traduction de ces instructions dans votre langue.
Tärkeää: Liite B sisältää tämän laitteen asentamiseen liittyvät käännetyt turvaohjeet. Kun näet -symbolin, katso käännettyä turvaohjetta liitteestä A.
Importante: l’Appendice B contiene avvisi di sicurezza tradotti per l’installazione di questa apparecchiatura. Il simbolo,indica di consultare l’Appendice A per l’avviso di sicurezza nella
propria lingua.
Viktig:Tillegg B inneholder oversatt sikkerhetsinformasjon for installering av dette utstyret. Når du ser ,åpner du til Tillegg A for å finne den oversatte sikkerhetsinformasjonen på
ønsket språk.
Importante: O Anexo B contém advertências de segurança traduzidas para instalar este equipamento. Quando vir o símbolo ,leia a advertência de segurança traduzida no seu idioma
no Anexo A.
Importante: El Apéndice B contiene mensajes de seguridad traducidos para la instalación de este equipo. Cuando vea el símbolo , vaya al Apéndice A para ver el mensaje de seguridad
traducido a su idioma.
Anhang B enthält übersetzte Sicherheitshinw
eise für die Installation dieses Geräts.Wenn Sie sehen,schlagen Sie in Anhang A den übersetzten Sicherheitshinweis in Ihrer
Obs! Bilaga B innehåller översatta säkerhetsmeddelanden avseende installationen av denna utrustning. När du ser, skall du gå till Bilaga A för att läsa det översatta säkerhetsmeddelandet
på ditt språk.
This guide uses several conventions that you should become familiar with before you begin to install the product:
Note
A note provides additional information.
cWarning
A warning indicates that performing or omitting a specific action may result in bodily injury.
mCa
[ ] In a command line, square brackets indicate an optional entry. For example: [copy filename] means that optionally you can type copy
Bold fontIndicates a button, a toolbar icon, menu,or menu item. For example: Open the File menu and choose Cancel. Used for emphasis.May
TypewriterIndicates commands and responses to prompts that must be typed exactly as printed in the manual.
Font
Italics Indicates a window name or a field.Also can indicate a variables or parameter that is replaced with an appropriate word or string.
Menu Name > Indicates the menu structure.
Menu Option Port menu option that is located under the Device menu.
ution
A caution indicates that performing or omitting a specific action may result in equipment damage or loss of data.
followed by the name of the file. Do not type the brackets.
also indicate system messages or prompts appearing on your screen.For example:You have mail.Bold font is also used to represent
filenames, program names and commands. For example: use the copy command.
For example: type
filename means that you should type the actual filename instead of the word shown in italic.
Device > Port > Port Properties means the Port Properties menu option under the
The Allied Telesyn web site at www.alliedtelesyn.com under the support section contains the most recent documentation for all of our products.All webbased documents relating to this product and other Allied Telesyn products can be downloaded from the web site.
Contacting Allied Telesyn Technical Support
You can contact Allied Telesyn technical support through the company’s web site www.alliedtelesyn.com under the support section or by telephone or fax.
EUROPEAN SUPPOR
T NUMBERS
Telephone support is available Monday through Friday between 0900 and 1730 local time (excluding national holidays).
Austria, Belgium, Finland, France, Germany, Ireland, Italy, Luxembourg, The Netherlands, Norway, Sweden, Switzerland
and the United Kingdom
Products for return or repair must first be assigned a Return Materials Authorization (RMA) number. RMA policy varies from country to country. Please check
the applicable RMA policy at www.alliedtelesyn.com. For Europe, you can also contact our European Customer Service centre by e-mail at
rma_europe@alliedtelesyn.com.
FTP Server
If you need management software for an Allied Telesyn managed device, you can download the software by connecting directly to our FTP server at
ftp.alliedtelesyn.com.At login, enter “anonymous” as the user name and your e-mail address as the password.
European & Latin America Headquarters
Allied Telesis International SA
The growing importance of LANs and the increasing complexity of desktop computing applications are fueling the need for high performance networks.
A number of high-speed LAN technologies are proposed to provide greater bandwidth and improve client/server response times. Among them, Fast Ethernet,or
100T, provides a non-disruptive, smooth evolution from 10T technology.
100Mbps Fast Ethernet is a standard specified by the IEEE 802.3 LAN committee. It is an extension of the 10Mbps Ethernet standard with the ability to transmit
and receive data at 100Mbps,while maintaining the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) Ethernet protocol.
Gigabit Ethernet Technology
Gigabit Ethernet is an extension of IEEE 802.3 Ethernet utilizing the same packet structure, format, and support for CSMA/CD protocol, full duplex,flow control,
and management objects, but with a tenfold increase in theoretical throughput over 100Mbps Fast Ethernet and a one hundred-fold increase over 10Mbps
Ethernet. Since it is compatible with all 10Mbps and 100Mbps Ethernet environments, Gigabit Ethernet provides a straightforward upgrade without wasting a
company's existing investment in hardware, software, and trained personnel.
The increased speed and extra bandwidth offered by Gigabit Ethernet are essential to coping with the network bottlenecks that frequently develop as computers
and their busses get faster and more users use applications that generate more traffic.Upgrading key components, such as your backbone and servers to Gigabit
Ethernet can greatly improve network response times as well as significantly speed up the traffic between your subnetworks.
Gigabit Ethernet enables fast optical fibre connections to support video conferencing, complex imaging, and similar data-intensive applications. Likewise, since data
transfers occur 10 times faster than Fast Ethernet, servers outfitted with Gigabit Ethernet NIC's are able to perform 10 times the number of operations in the
same amount of time.
In addition, the phenomenal bandwidth delivered by Gigabit Ethernet is the most cost-effective method to take advantage of today and tomorrow's rapidly
improving switching and routing internetworking technologies.
Switching Technology
Another key development pushing the limits of Ethernet technology is in the field of switching technology. A switch bridges Ethernet packets at the MAC address
level of the Ethernet protocol transmitting among connected Ethernet or Fast Ethernet LAN segments.
Switching is a cost-eff
ork loading by making it possible for a local area network to be divided into different segments, which are not competing with each other for network
netw
transmission capacity, and therefore decreasing the load on each segment.
The Switch acts as a high-speed selectiv
another) is automatically forwarded by the Switch,without interfering with any other segments (ports).This allows the total network capacity to be multiplied,
while still maintaining the same network cabling and adapter cards.
or Fast Ethernet or Gigabit Ethernet netw
F
can be used to split parts of the network into different collision domains, for example, making it possible to expand your Fast Ethernet network beyond the 205meter network diameter limit for 100TX networks.Switches supporting both traditional 10Mbps Ethernet and 100Mbps Fast Ethernet are also ideal for bridging
een existing 10Mbps netw
betw
Switching LAN technolog
have also been used to segment local area networks, but the cost of a router and the setup and maintenance required make routers relatively impractical.Today's
switches are an ideal solution to most kinds of local area network congestion problems.
ectiv
e way of increasing the total network capacity available to users on a local area network. A switch increases capacity and decreases
Traffic that needs to go from one segment to another (from one port to
y of eliminating problems of chaining hubs beyond the "two-repeater limit." A switch
orks and ne
y is a mark
e bridge betw
orks,
w 100Mbps netw
ovement over the previous generation of network bridges, which were characterized by higher latencies. Routers
The AT-9724TS has 24 1000T Gigabit ports that may be used in uplinking various network devices to the Switch, including PCs, hubs and other switches to
provide a gigabit Ethernet uplink in full-duplex mode.
In addition, the AT-9724TS is equipped with 4 SFP (Small Form Factor Portable) combo ports, which are to be used with fibre-optical transceiver cabling in order
to uplink various other networking devices for a gigabit link that may span great distances.These 4 SFP ports support full-duplex transmissions, have autonegotiation and can be used with AT-MG8LX10 (1000LX),AT-MG8SX (1000SX) and AT-MG8ZX (1000ZX) transceivers.These four ports are referred to as
“combo” ports which means that both the SFP ports and the 1000T ports are numbered the same (21–24) and cannot be used simultaneously.Attempting to use
the ports simultaneously will cause a link down status for the 1000T ports. SFP ports will always have priority over these 1000T ports.
Also included at the rear of the Switch are two 10-gigabit stacking ports used to stack up to twelve switches in a ring topology.The AT-9724TS may be used as
the master unit of a switch stack when utilizing these ports and, in total, may provide a stacking solution of up to 288 gigabit ports.
Note:The four SFP combo ports on the Switch, numbered 21–24 cannot be used simultaneously with the corresponding 1000T ports, numbered
21–24. If both ports are in use at the same time (ex. port 21 of the SFP and port 21 of the 1000T), the SFP ports will take priority over the combo
ports and render the 1000T ports inoperable.
1-3 Features
•IEEE 802.3z compliant
•IEEE 802.3x Flow Control in full-duplex compliant
•IEEE 802.3u compliant
•
•
•
•IEEE 802.3ad Link Aggregation Control Protocol support.
•IEEE 802.1x Port-based and MAC-based Access Control
•IEEE 802.1Q VLAN
•IEEE 802.1D Spanning Tree, IEEE 802.1W Rapid Spanning Tree and IEEE 802.1s Multiple Spanning Tree support
•Stacking support in Ring topology
•Access Control List (ACL) support
•IP Multinetting support
•Protocol VLAN support
•
•Access Authentication Control utilizing TACACS,XTACACS,TACACS+ and RADIUS protocols
•Dual Image Firmware
•Simple Network Time Protocol support
•
•
•
•
•Full- and half-duplex for all gigabit ports. Full duplex allows the switch port to simultaneously transmit and receive data. It only works with
•
•
•Supports by-port Egress/Ingress rate control
•Efficient self-learning and address recognition mechanism enables forwarding rate at wire speed
•
•
•Supports a packet buffer of up to 3 Mbits
•Supports Port-based VLAN Groups
•Port Trunking with flexible load distribution and fail-over function
•IGMP Snooping support
•Layer 3 support including DVMRP, OSPF and RIP
IEEE 802.3ab compliant
IEEE 802.3ae compliant (for optional XFP module)
IEEE 802.1p Priority Queues
Single IP Management support
C Notification support
MA
System and P
System Log Support
High performance switching engine performs forwarding and filtering at full wire speed up to 128Gbps.
connections to full-duplex-ca
Suppor
Non-blocking stor
Support port-based enable and disable
Address table: Supports up to 8K MAC addresses per device
ort Utilization support
pable end stations and s
t broadcast storm filtering
orward switching scheme capability to support rate adaptation and protocol conversion
•Secure Sockets Layer (SSL) and Secure Shell (SSH) support
•Port Mirroring support
•MIB support for:
RFC1213 MIB II
RFC1493 Bridge
RFC1757 RMON
RFC1643 Ether-like MIB
RFC2233 Interface MIB
IF MIB
Private MIB
RFC2674 for 802.1p
IEEE 802.1x MIB
•RS-232 DCE console port for Switch management
•Provides parallel LED display for port status such as link/act,speed, etc.
1-4 Ports
Twenty-four (24) 1000T combo ports that may be used in uplinking various network devices to the Switch, including PCs, hubs and other switches to provide a
gigabit Ethernet uplink in full-duplex mode.
Four (4) high-performance SFP ports for a fibre-optic connection to various network connections,for use over great distances.
Two 10-gigabit stacking ports at the rear of the Switch for stacking switches utilizing ring topology.
RS-232 DCE Diagnostic port (console port) for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation
program.
Installing the SFP ports
The Switch is equipped with four SFP (Small Form Factor Portable) ports, which are to be used with fibre-optical transceiver cabling in order to uplink various
other networking devices for a gigabit link that may span great distances.
Figure 1- 1. Inserting the fibre-optic transceivers into the AT-9724TS
1-5 Front Panel Components
, Console, RPS, SIO (stacking), a seven-segment Stack ID LED and for Link/Act for each
Master
,
er
w
o
ont panel of the Switch consists of LED indicators f
The fr
port on the Switch, as well as 24 1000T ports, 4 SFP gigabit Ethernet ports and a RS-232 DCE console port for Switch management.
or P
Figure 1- 2. Front Panel View of the AT-9724TS as shipped
Comprehensive LED indicators display the status of the Switch and the network.
The Switch supports LED indicators for Power, Master,Console, RPS,SIO (stacking indicators), a seven-segment Stack ID LED and Port LEDs.The following
ws the LED indicators for the Switch along with an explanation of each indicator.
sho
Figure 1- 3. LED Indicators
LED Description
PowerThis LED will light green after the Switch is powered on to indicate the ready state of the device.The indicator is dark when the Switch is
MasterThis LED will light solid green when the Switch is configured to be a master switch of a switch stack in a ring topology or when it is in use as a
ConsoleThis LED should blink during the Power-On Self Test (POST).When the POST is finished successfully, the LED goes dark.This indicator will light
RPSThis LED will be lit when the internal power has failed and the RPS has taken over the power supply to the Switch. Otherwise,it will remain
Port LEDs One row of LEDs for each port is located above the ports on the front panel.The first LED is for the top port and the second one is for the
Stacking Ports
(SIO)There are two LEDs in the front of the Switch marked SIO, and they relate to the two 10-gigabit stacking ports at the rear of the Switch.These
Stack IDThese two seven-segment LEDs display the current switch stack order of the Switch while in use. Possible numbers to be displayed range from
powered off.
stand-alone switch.This LED will remain dark if the Switch is not configured to be a master switch in a switch stack.
solid green when the Switch is being logged into via out-of-band/local console management through the RS-232 console port in the front of the
Switch using a straight-through serial cable.
This LED will light solid amber if the Power-On-Self-Test has failed.
dark.
bottom ports.A solid light denotes activity on the port while a blinking light indicates a valid link.These LEDs will remain dark if there is no
link/activity on the port.
LEDs are marked 1 and 2 and will light solid green to denote activity on the port,while a blinking light will indicate a valid link.
1-12 in use.
1-6 Rear Panel Components
The rear panel of the Switch contains an AC power connector, two 10-gigabit stacking ports and a redundant power supply connector.
Rear panel vie
e 1- 4.
Figur
AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into
The
this socket, and the male side of the cord into a power outlet.The Switch automatically adjusts its power setting to any supply voltage in the range from 100 ~
C at 50 ~ 60 Hz.
A
V
240
.When power fails, the optional external RPS will take over all the power
y
er suppl
or pr
w
entilation.
oper v
Figure 1- 5. Side Panels
ear panel also includes an outlet f
The r
immediately and automatically.
nel Components
1-7 Side-P
The right-hand side panel of the Switch contains 2 system fans, while the left hand panel includes a heat vent.
The system fans are used to dissipate heat.The sides of the system also provide heat vents to serve the same purpose. Do not block these openings, and leave at
least 6 inches of space at the r
components might overheat, which could lead to system failure.
Be reminded that without proper heat dissipation and air circulation,system
13
Chapter 2 - Installation
2-1 Package Contents
2-2 Before You Connect to the Network
2-3 Installing the Switch Without the Rack
2-4 Rack Installation
2-5 Power On
2-6 Power Failure
2-7 Redundant Power System
2-1 Package Contents
Open the shipping carton of the Switch and carefully unpack its contents.The carton should contain the following items:
•One AT-9724TS Switch
•One AC power cord
•One Stacking Cable
•One CD which includes the AT-9724TS Manual, and Net.Cover documents
•One Warranty Card
•Mounting kit (two brackets and screws)
•
•RS-232 console cable
•If any item is found missing or damaged, please contact your local Allied Telesyn Reseller for replacement.
Four rubber feet with adhesive backing
2-2 Before You Connect to the Network
The site where you install the Switch may greatly affect its performance. Please follow these guidelines for setting up the Switch.
•Install the Switch on a sturdy, level surface that can support at least 6.6lb.(3kg) of weight.Do not place heavy objects on the Switch.
•The power outlet should be within 1.82 metres (6 feet) of the Switch.
•Visually inspect the power cord and see that it is fully secured to the AC power port.
•Make sure that there is proper heat dissipation from and adequate ventilation around the Switch. Leave at least 10 cm (4 inches) of space at the front
•Install the Switch in a fairly cool and dry place for the acceptable temperature and humidity operating ranges.
•Install the Switch in a site free from strong electromagnetic field generators (such as motors), vibration,dust, and direct exposure to sunlight.
•When installing the Switch on a level surface, attach the rubber feet to the bottom of the device.The rubber feet cushion the Switch, protect the
•Ensure you program the Switch with a valid IP address – see section xxxx.
and rear of the Switch for ventilation.
casing from scratches and prevent it from scratching other surfaces.
2-3 Installing the Switch without a Rack
When installing the Switch on a desktop or shelf, the rubber feet included with the Switch should first be attached. Attach these cushioning feet on the bottom
at each corner of the device. Allow enough ventilation space between the Switch and any other objects in the vicinity.
Figure 2- 1. Prepare Switch for installation on a desktop or shelf
2-4 Installing the Switch in a Rack
The Switch can be mounted in a standard 19" rack. Use the following diagrams to guide you.
Fasten the mounting brackets to the Switch using the screws provided.With the brackets attached securely, you can mount the Switch in a standard rack as
shown in Figure 2-2.
End nodes include PCs outfitted with a 10, 100 or 1000Mbps RJ45 Ethernet Network Interface Card (NIC) and most routers.
An end node can be connected to the Switch via a twisted-pair UTP/STP cable.The end node should be connected to any of the 24 1000T ports of the Switch.
Figure 3- 1. Switch connected to an end node
The Link/Act LEDs for each UTP port will light green or amber when the link is valid.A blinking LED indicates packet activity on that port.
3-2 Switch to Hub or Switch
These connections can be accomplished in a number of ways using a normal cable.
•A 10T hub or switch can be connected to the Switch via a twisted-pair Category 3, 4 or 5 UTP/STP cable.
•A 100TX hub or switch can be connected to the Switch via a twisted-pair Category 5 UTP/STP cable.
•A 1000T switch can be connected to the Switch via a twisted pair Category 5e UTP/STP cable.
•A switch supporting a fibre-optic uplink can be connected to the Switch’s SFP ports via fibre-optic cabling.
Figure 3- 2. Switch connected to a port on a hub or switch using either a straight or crossover cable – any normal cable is fine
Figure 3- 3. Switch connected to switch using fibre-optic cabling
1
357
9
11
13
15
2
4
6 8 10 12 14
16
17
19
21
23
18
202224
21
22
23
24
2 4 6 8 10 12 14 16 18 20 22 24
1
3 5 7 9 11 13 15 17 19 21 23
Power
Master
Console
RPS
1000
Link
Act
1000
Link
Act
1
2
SIO
Stack ID
AT-9724TS
135 7911
13 15
2
4 6 8 10 12 14
16
17
19 21
23
18
202224
21 22
23
24
2 4 6 8 10 12 14 16 18 20 22 24
1 3 5 7 9 11 13 15 17 19 21 23
Power
Master
Console
RPS
1000
Link
Act
1000
Link
Act
1
2
SIO
Stack ID
AT-
9724TS
Optical fibre cable
3-3 Connecting To Network Backbone or Server
The 4 combo SFP ports and the 24 1000T ports are ideal for uplinking to a network backbone, server or server farm.The copper ports operate at a speed of
1000, 100 or 10Mbps in full or half duplex mode.The fibre-optic ports can operate at 1000Mbps in full duplex mode only.
Connections to the Gigabit Ethernet ports are made using fibre-optic cable or Category 5e copper cable, depending on the type of port. A valid connection is
indicated when the Link LED is lit.
3-4 Stacking and the AT-9724TS
The AT-9724TS is equipped with two 10-gigabit stacking ports at the rear of the Switch, as seen in Figure 3-5.These stacking ports may be used to stack the AT9724TS to a master switch to be used in a switch stack.
Figure 3- 5. SIO 1 and SIO 2 Stacking ports at the rear of the AT-9724TS
These tw
These tw
o stacking por
o stacking por
ts, named SIO 1 and SIO 2 can be used with other stacking switches for a scalable stacking solution of up to 288 ports in a ring topology.
e corresponding LEDs at the front of the Switch,labelled SIO 1 and SIO 2 will light solid green whenever the corresponding port is
Note:The Do not connect the stacked Switch group to the network until you have properly configured all Switches for stacking. An improperly
configured Switch stack can cause a broadcast storm.
Stacking Limitations Utilizing a Ring Topology
There is a limit to the number of AT-9724TS Switches that can be stacked in a ring topology. A maximum of 12 switches can be stacked.
Note:All Switches must have the same firmware rev.
This system may be managed out-of-band through the console port on the front panel or in-band using Telnet.The user may also choose the web-based
management, accessible through a web browser.
4-2 Web-based Management Interface
After you have successfully installed the Switch, you can configure the Switch,monitor the LED panel, and display statistics graphically using a web browser, such
as Netscape Navigator (version 6.2 and higher) or Microsoft® Internet Explorer (version 5.0).
4-3 SNMP-Based Management
You can manage the Switch with an SNMP-compatible console program.The Switch supports SNMP version 1.0, version 2.0 and version 3.0.The SNMP agent
decodes the incoming SNMP messages and responds to requests with MIB objects stored in the database.The SNMP agent updates the MIB objects to generate
statistics and counters.
4-4 Command Line Console Interface Through The Serial Port
You can also connect a computer or terminal to the serial console port to access the Switch.The command-line-driven interface provides complete access to all
Switch management features.
t (RS-232 DCE)
4-5 Connecting the Console P
The Switch provides an RS-232 serial port that enables a connection to a computer or terminal for monitoring and configuring the Switch.This port is a female
DB-9 connector
To use the console port, you need the following equipment:
•A terminal or a computer with both a serial port and the ability to emulate a terminal.
•A null modem or crossover RS-232 cable with a female DB-9 connector for the console port on the Switch (supplied with the switch).
, implemented as a data terminal equipment (DTE) connection.
or
To connect a terminal to the console port:
1.Connect the female connector of the RS-232 cable directly to the console port on the Switch, and tighten the captive retaining screws.
2.Connect the other end of the cable to a terminal or to the serial connector of a computer running terminal emulation software. Set the terminal
3.Select the appropriate serial port (COM port 1 or COM port 2).
4.Set the data rate to 115200 baud.
5.Set the data format to 8 data bits, 1 stop bit, and no parity.
6.Set flow control to none.
7.Under Properties, select VT100 for Emulation mode.
8.Select Terminal keys for Function,Arrow,and Ctrl keys.Ensure that you select Terminal keys (not Windows keys).
emulation software as follows:
Note:When y
or later installed.Windows 2000 Service Pack 2 allows you to use arrow keys in HyperTerminal's VT100 emulation. See www.microsoft.com for
information on Windows 2000 service packs.
ou use HyperTerminal with the Microsoft® Windows® 2000 operating system, ensure that you have Windows 2000 Service Pack 2
20
9.After you have correctly set up the terminal, plug the power cable into the power receptacle on the back of the Switch.The boot sequence appears in
10.After the boot sequence completes, the console login screen displays.
11.If you have not logged into the command line interface (CLI) program, press the Enter key at the User name and password prompts.There is one
12.Enter the commands to complete your desired tasks.Many commands require administrator-level access privileges. Read the next section for more
13.When you have completed your tasks, exit the session with the logout command or close the emulator program.
Make sure the terminal or PC you are using to make this connection is configured to match these settings.
If you are having problems making this connection on a PC, make sure the emulation is set to VT-100.You will be able to set the emulation by clicking on the
menu in you HyperTerminal window, clicking on Properties in the drop-down menu,and then clicking the Settings tab.This is where you will find the
Emulation options. If you still do not see anything, try rebooting the Switch by disconnecting its power supply.
Once connected to the console, the screen below will appear on your console screen.This is where the user will enter commands to perform all the available
management functions.The Switch will prompt the user to enter a user name and a password. Upon the initial connection, there is no user name or password
and therefore just press enter twice to access the command line interface.
the terminal.
default user name and password for the Switch.User names and passwords must first be created by the administrator.If you have previously set up
user accounts, log in and continue to configure the Switch.
information on setting up user accounts. See the AT-9724TS Command Line Interface Reference Manual on the documentation CD for a list of all
commands and additional information on using the CLI.
File
4-6 First Time Connecting to the Switch
The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings.This section tells
how to log onto the Switch.
Note:The passwords used to access the Switch are case-sensitive; therefore,"S" is not the same as "s."
ou first connect to the Switch, you will be presented with the first login screen (shown below).
When y
Note:Press Ctrl+R to refresh the screen.This command can be used at any time to force the console program in the Switch to refresh the
console screen.
The initial username and password are:
Figur
e 4- 1.
een, first time connecting to the Switch
Initial scr
Username:manager
Password:friend
You will be given access to the command prompt AT-9724TS:4# shown below.
Note:The first user automatically gets Administrator level privileges. It is recommended to create at least one Admin-level user account for the
Switch.
4-7 Password Protection
One of the first tasks when settings up the Switch is to create user accounts. If you log in using a predefined administrator-level user name, you have privileged
access to the Switch's management software.
After your initial login, define new passwords for both default user names to prevent unauthorized access to the Switch, and record the passwords for future
reference.
To create an administrator-level account for the Switch, do the following:
At the CLI login prompt, enter create account admin followed by the <
You will be asked to provide a password.Type the <
You will be prompted to enter the same password again to verify it.Type the same password and press the
Successful creation of the new administrator account will be verified by a Success message.
Note:Passwords are case sensitive.User names and passwords can be up to 15 characters in length.
The sample below illustrates a successful creation of a new administrator-level account with the user name "newmanager".
password> used for the administrator account being created and press the Enter key.
user name> and press the Enter key.
Enter key.
AT-9724TS:4#create account admin newmanager
Command: create account admin newmanager
Enter a case-sensitive new password:********
Enter the new password again for confirmation:********
Success.
AT-9724TS:4#
mCaution: CLI configuration commands only modify the running configuration file and are not saved when the Switch is rebooted.To save all your
you must use the save command to copy the running configuration file to the startup configuration.
olatile storage
configuration changes in non
v
4-8 SNMP Settings
Simple Netw
enables network management stations to r
features for proper operation,
Managed devices that suppor
maintained by the SNMP agent and used to manage the device.These objects are defined in a Management Information Base (MIB), which provides a standard
presentation of the information contr
access this information over the network.
ork Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managing and monitoring network devices.SNMP
monitor performance and detect potential problems in the Switch,switch group or network.
t SNMP include softwar
ead and modify the settings of gateways,routers, switches, and other network devices. Use SNMP to configure system
y the on-boar
olled b
,
erred to as an agent), which runs locally on the device.A defined set of variables (managed objects) is
ef
e (r
d SNMP agent.
SNMP defines both the f
ormat of the MIB specifications and the pr
otocol used to
22
The AT-9724TS supports SNMP versions 1, 2c,and 3.You can specify which version of SNMP you want to use to monitor and control the Switch.The three
versions of SNMP vary in the level of security provided between the management station and the network device.
In SNMP v.1 and v.2, user authentication is accomplished using 'community strings',which function like passwords.The remote user SNMP application and the
Switch SNMP must use the same community string. SNMP packets from any station that has not been authenticated are ignored (dropped).
The default community strings for the Switch used for SNMP v.1 and v.2 management access are:
public – Allows authorized management stations to retrieve MIB objects.
private – Allows authorized management stations to retrieve and modify MIB objects.
SNMP v.3 uses a more sophisticated authentication process that is separated into two parts.The first part is to maintain a list of users and their attributes that
are allowed to act as SNMP managers.The second part describes what each user on that list can do as an SNMP manager.
The Switch allows groups of users to be listed and configured with a shared set of privileges.The SNMP version may also be set for a listed group of SNMP
managers.Thus, you may create a group of SNMP managers that are allowed to view read-only information or receive traps using SNMP v.1 while assigning a
higher level of security to another group, granting read/write privileges using SNMP v.3.
Using SNMP v
functions.The functions allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB.An additional layer of security is
available for SNMP v.3 in that SNMP messages may be encrypted.To read more about how to configure SNMP v.3 settings for the Switch read the section
entitled Management.
.3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management
Traps
Traps are messages that alert network personnel of events that occur on the Switch.The events can be as serious as a reboot (someone accidentally turned OFF
the Switch), or less serious like a port status change.The Switch generates traps and sends them to the trap recipient (or network manager).Typical traps include
trap messages for Authentication Failure,Topology Change and Broadcast/Multicast Storm.
MIBs
Management and counter inf
Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the
standard MIB-II, the Switch also supports its own proprietary enterprise MIB as an extended Management Information Base.The proprietary MIB may also be
retrieved by specifying the MIB Object Identifier. MIB values can be either read-only or read-write.
ormation are stored by the Switch in the Management Information Base (MIB).The Switch uses the standard MIB-II Management
4-9 IP Address Assignment
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example
BOOTP,TFTP).The Switch's default IP address is 10.0.0.1.You can change the default Switch IP address to meet the specification of your networking address
scheme.
The Switch is also assigned a unique MAC address by the factory.This MAC address cannot be changed, and can be found by entering the command "show
switch" into the command line interface, as shown below.
witch” command
w s
“sho
e 4- 3.
Figur
The Switch's MAC address can also be found from the Web management program on the
Configuration menu.
or the Switch must be set before it can be managed with the Web-based manager.The Switch IP address can be automatically set using BOOTP
ess f
The IP ad
or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
Starting at the command line pr
the IP address to be assigned to the IP interface named System and the y's represent the corresponding subnet mask.
Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z.Where the x's represent the IP address to be assigned to the IP interface
named System and the z represents the corresponding number of subnets in CIDR notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a management station to the
Switch's Telnet or Web-based management agent.
Figure 4- 4.Assigning the Switch an IP Address
In the above example, the Switch was assigned an IP address of 10.53.13.144 with a subnet mask of 255.0.0.0.The system message Success indicates that the
command was executed successfully.The Switch can now be configured and managed via Telnet and the CLI or via the Web-based management.
4-10 Connecting Devices to the Switch
After you assign IP addresses to the Switch,you can connect devices to the Switch.
To connect a device to an SFP transceiver port:
•Use your cabling requirements to select an appropriate SFP transceiver type.
•Insert the SFP transceiver (sold separately) into the SFP transceiver slot.
•Use the appropriate network cabling to connect a device to the connectors on the SFP transceiver.
mCaution: When the SFP transceiver acquires a link, the associated integrated 10/100/1000T port is disabled.
Chapter 5 - Introduction to Web-based Switch Configuration
5-1 Introduction
5-2 Login to Web manager
5-3 Web-Based User Interface
5-4 Basic Setup
5-5 Reboot
5-6 Basic Switch Setup
5-7 Network Management
5-8 Switch Utilities
5-9 Network Monitoring
5-10 IGMP Snooping Status
5-1 Introduction
All software functions of the AT-9724TS can be managed, configured and monitored via the embedded web-based (HTML) interface.The Switch can be managed
from remote stations anywhere on the network through a standard browser such as Netscape Navigator/Communicator or Microsoft Internet Explorer.The
browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol.
Web-based management module and the Console program (and Telnet) are different ways to access the same internal switching software and configure it.
The
Thus, all settings encountered in web-based management are the same as those found in the console program.
5-2 Login to Web Manager
To begin managing your Switch, simply run the browser you have installed on your computer and point it to the IP address you have defined for the device.The
URL in the address bar should read something like: http://123.123.123.123, where the numbers 123 represent the IP address of the Switch.
Note:The Factory default IP address for the Switch is 10.0.0.1.
e 5- 1. Login Button
Figur
This opens the management module's user authentication window,as seen below.
The user interface provides access to various Switch configuration and management screens,allows you to view performance statistics,and permits you to
graphically monitor the system status.
Areas of the User Interface
The figure below shows the user interface.The user interface is divided into 3 distinct areas as described in the table.
Figure 5- 2. Main Web-Manager Screen
Area Function
The folder icons can be opened to display the hyperlinked menu buttons and
ed.
1
2Pr
3Presents switch information based on your selection and the entry of configuration data.
Select the men
olders contained within them. Click the Allied Telesyn logo to go to the Allied Telesyn website.
subf
esents a graphical near real-time image of the front panel of the Switch.This area displays the Switch's ports and expansion
modules, showing port activity, duplex mode, or flow control,depending on the specified mode.Various areas of the graphic can
be selected for performing management functions, including port configuration.
u or windo
w to be displa
y
mCaution: Any changes made to the Switch configuration during the current session must be saved in the Save Changes web menu (explained
below) or use the command line interface (CLI) command save.
Configurations – Contains screens concerning configurations for IP Address,Switch Information,Advanced Settings, Port Configuration, IGMP, Spanning Tree,
Forwarding Filtering,VLANs, Port Bandwidth, SNTP Settings,Port Security, QoS, MAC Notification, LACP,Access Profile Table, System Log Servers, PAE Access
Entity,and Layer 3 IP Networking.
Security Management – Contains screens concerning configurations for Security IP, User Accounts,Access Authentication Control (TACACS),Secure
Sockets Layer (SSL), and Secure Shell (SSH).
SNMP Manager – Contains screens and windows concerning the implementation and upkeep of the SNMP Manager of the Switch.
Monitoring – Contains screens concerning monitoring the Switch, pertaining to Port Utilization, CPU Utilization, Packets, Errors Size,MAC Address, IGMP
Snooping Group,IGMP Snooping Forwarding,VLAN Status, Router Port, Port Access Control and Layer 3 Feature.
Maintenance – Contains screens concerning configurations and information about Switch maintenance, including TFTP Services,CF Services, Dual Image
Information, Switch History, Ping Test, Save Changes, Reboot Services and Logout.
Single IP Management – Contains screens concerning information on Single IP Management, including SIM Settings,Topology and Firmware/Configuration
downloads.
Note:Be sur
e to configure the user name and password in the User Accounts menu before connecting the Switch to the greater network.
The subsections below describe how to change some of the basic settings for the Switch such as changing IP settings and assigning user names and passwords for
management access privileges, as well as how to save the changes and restart the Switch.
Click the
Switch Information link in the Configuration menu.
Figure 6- 1. Switch Information – Basic Settings window
ws the
The
Switch Information windo
Version
into another network device's address table,if necessary.The user may also enter a
defining the Switch, to the user's pr
, and Hardware Version.This information is helpful to keep track of PROM and firmware updates and to obtain the Switch's MAC address for entry
w sho
erence.
ef
Switch's MA
C Addr
ess
(assigned b
y the factor
System Name, System Location and System Contact to aid in
y and unchangeable),
the
Boot PROM, Firmw
e
r
a
28
6-2 IP Address
The IP Address may initially be set using the console interface prior to connecting to it through the Ethernet.If the Switch IP address has not yet been changed,
read the introduction of the AT-9724TS Command Line Interface Reference Manual or return to Chapter 4 of this manual for more information.
To change IP settings using the web manager you must access the IP Address menu located in the Configuration folder.
To configure the Switch's IP address:
Open the Configuration folder and click the IP Address menu link.The web manager will display the Switch's current IP settings in the IP configuration
menu, as seen below.
Figure 6- 2. IP Address Settings window
To manually assign the Switch's IP address,subnet mask, and default gateway address:
1.Select
2.Enter the appropriate
3.If you want to access the Switch from a different subnet from the one it is installed on, enter the IP address of the
4.If no VLANs have been previously configured on the Switch, you can use the default VLAN Name.The default VLAN contains all of the Switch ports
Manual from the Get IP From drop-down menu.
IP Address and Subnet Mask.
manage the Switch from the subnet on which it is installed, you can leave the default address (0.0.0.0) in this field.
as members. If VLANs have been previously configured on the Switch,you will need to enter the
connected to the management station that will access the Switch.The Switch will allow management access from stations with the same VID listed
here.
VLAN ID of the VLAN that contains the port
Default Gateway. If you will
Note:The Switch's factory default IP address is 10.0.0.1 with a subnet mask of 255.0.0.0 and a default gateway of 0.0.0.0.
To use the BOOTP or DHCP protocols to assign the Switch an IP address, subnet mask,and default gateway address:
Get IP From:<Manual> pull-down menu to choose from BOOTP or DHCP.This selects how the Switch will be assigned an IP address on the next
Use the
eboot.
r
The IP Address Settings options are:
ParameterDescription
BOOTP
DHCPThe Switch will send out a DHCP br
ManualAllows the entry of an IP address, Subnet Mask, and a Default Gateway for the Switch.These fields should be of
Subnet Mask A Bitmask that determines the extent of the subnet that the Switch is on.
Default GatewayIP ad
The Switch will send out a BOOTP broadcast request when it is powered up.The BOOTP protocol allows IP
esses, network masks, and default gateways to be assigned by a central BOOTP server. If this option is set,
dr
ad
the Switch will first look for a BOOTP server to provide it with this information before using the default or
previously entered settings.
addresses, network masks, and default gateways to be assigned by a DHCP server. If this option is set,the
Switch will first look f
previously entered settings.
the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal form) between 0 and 255.This
ess should be a unique ad
dr
ad
xxx.xxx.xxx.xxx,
should be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and 255.255.255.0 for a Class C
netw
sent.
intranet, or you do not want the Switch to be accessible outside your local network, you can leave this field
unchanged.
but custom subnet masks are allowed.
ork,
dress that determines where packets with a destination address outside the current subnet should be
This is usuall
or a DHCP ser
wher
dr
y the ad
e each
oadcast r
ess on the netw
dr
xxx is a n
ess of a r
equest when it is po
vide it with this inf
o
er to pr
v
ork assigned f
epresented in decimal) between 0 and 255.The value