Page 1
AT-GS950/16
Gigabit Ethernet Smart Switch
AT-GS950/16 Web Users Guide
AT-S108 Version V1.1.0
613-001489 Rev A
[1.00.043]
Page 2
Copyright © 2011 Allied Telesis, Inc.
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis,
Inc.
Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated. All other product names,
company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective
owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document
without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied
Telesis, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited
to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesis, Inc. has
been advised of, known, or should have known, the possibility of such damages.
Page 3
Contents
List of Figures .................................................................................................................................................. 9
List of Tables ................................................................................................................................................. 13
Preface ............................................................................................................................................................ 15
Where to Find Web-based Product Information......................................................................................... 16
Contacting Allied Telesis............................................................................................................................ 17
Online Support..................................................................................................................................... 17
Email and Telephone Support ............................................................................................................. 17
Warranty .............................................................................................................................................. 17
Returning Products.............................................................................................................................. 17
Sales or Corporate Information ........................................................................................................... 17
Management Software Updates .......................................................................................................... 17
Chapter 1: Starting a Web Browser Session ................................................................................................ 19
Establishing a Remote Connection to the Web Browser Interface ............................................................ 20
Web Browser Tools.................................................................................................................................... 23
Quitting a Web Browser Management Session ......................................................................................... 24
Chapter 2: Basic Switch Configuration ......................................................................................................... 25
Configuration of IP Address, Subnet Mask and Gateway Address ............................................................ 26
IP Access List Configuration ...................................................................................................................... 28
Create an IP Access List ..................................................................................................................... 28
Delete an IP Address List Entry........................................................................................................... 30
System Time .............................................................................................................................................. 31
Manually Setting System Time ............................................................................................................ 31
Setting SNTP....................................................................................................................................... 32
Setting Daylight Savings Parameters .................................................................................................. 33
DHCP and ATI Web Discovery Tool .......................................................................................................... 34
DHCP Client Configuration ........................................................................................................................ 35
DHCP Auto Configuration .......................................................................................................................... 37
System Management Information .............................................................................................................. 38
User Name and Password Configuration................................................................................................... 40
Add New User Name and Password ................................................................................................... 40
Modify User Name and Password ....................................................................................................... 41
Delete User Name and Password ....................................................................................................... 42
User Interface Configuration ...................................................................................................................... 43
SNMP Interface ................................................................................................................................... 43
User Interface Timeout ........................................................................................................................ 44
System Information Display ....................................................................................................................... 45
Switch Reboot ............................................................................................................................................ 47
Password Protection of Factory Reset ................................................................................................ 47
Switch Reboot ..................................................................................................................................... 48
Configure Factory Default Values........................................................................................................ 49
Disabling Factory Default Reset Feature............................................................................................. 51
Enabling Factory Default Reset........................................................................................................... 52
Pinging a Remote System.......................................................................................................................... 54
3
Page 4
Contents
SSL Settings............................................................................................................................................... 56
Configuring SSL ...................................................................................................................................56
System Log Configuration .......................................................................................................................... 58
Chapter 3: Port Configuration ........................................................................................................................ 61
Overview.....................................................................................................................................................62
Display and Configure Ports....................................................................................................................... 63
Chapter 4: Port Mirroring ............................................................................................................................... 69
Overview.....................................................................................................................................................70
Port Mirroring Configuration ....................................................................................................................... 71
Disable Port Mirroring................................................................................................................................. 73
Chapter 5: Virtual LANs ................................................................................................................................. 75
VLAN Overview ..........................................................................................................................................76
Port-based VLAN Overview ................................................................................................................. 77
Tagged VLAN Overview.......................................................................................................................78
Assign Ports to a VLAN Mode .................................................................................................................... 81
Tagged VLAN Configuration....................................................................................................................... 83
Create a Tagged VLAN........................................................................................................................ 83
Modify a Tagged VLAN........................................................................................................................ 84
Delete a Tagged VLAN ........................................................................................................................ 87
Tagged VLAN Port Settings ....................................................................................................................... 89
Port-Based VLAN Configuration.................................................................................................................91
Create a Port-Based VLAN .................................................................................................................. 91
Modify a Port-Based VLAN ..................................................................................................................92
Delete a Port-Based VLAN .................................................................................................................. 92
Chapter 6: GVRP .......................................................................................................................................... 95
Overview and Guidelines............................................................................................................................ 96
General Configuration ................................................................................................................................ 97
Port Settings ............................................................................................................................................... 98
Time Settings............................................................................................................................................ 100
Chapter 7: Voice VLAN ............................................................................................................................... 103
Overview...................................................................................................................................................104
CoS with Voice VLAN ........................................................................................................................104
Organization Unique Identifier (OUI).................................................................................................. 104
Dynamic Auto-Detection vs Static Ports ............................................................................................ 105
General Guidelines................................................................................................................................... 107
Configuration ............................................................................................................................................108
OUI Setting ............................................................................................................................................... 111
Create OUI Setting............................................................................................................................. 111
Modify OUI Setting .............................................................................................................................112
Delete OUI Setting ............................................................................................................................. 112
Chapter 8: STP and RSTP ..........................................................................................................................113
Overview...................................................................................................................................................114
Bridge Priority and the Root Bridge.................................................................................................... 115
Forwarding Delay and Topology Changes......................................................................................... 117
Mixed STP and RSTP Networks ........................................................................................................ 119
Spanning Tree and VLANs ................................................................................................................ 120
Basic STP and RSTP Configuration.........................................................................................................122
Configure RSTP Port Settings .................................................................................................................. 125
Configure the Basic RSTP Port Settings............................................................................................ 125
Configure the Advanced RSTP Port Settings ....................................................................................127
Spanning Tree Topology .......................................................................................................................... 130
4
Page 5
AT-GS950/16 Web Interface User Guide
Chapter 9: Multiple Spanning Tree Protocol ............................................................................................... 131
Multiple Spanning Tree Configuration...................................................................................................... 132
Head2 ................................................................................................................................................ 132
VLAN Mapping ......................................................................................................................................... 135
Open MSTP VLAN Mapping Page .................................................................................................... 135
Create VLAN Mapping to MST Instance ........................................................................................... 135
Modify MST Instance......................................................................................................................... 136
Delete MST Instance ......................................................................................................................... 136
Port Configuration .................................................................................................................................... 137
Port Settings............................................................................................................................................. 140
Topology Information ............................................................................................................................... 142
Chapter 10: Static Port Trunking ................................................................................................................ 145
Overview .................................................................................................................................................. 146
Create a Port Trunk.................................................................................................................................. 149
Modify a Port Trunk.................................................................................................................................. 151
Disable a Port Trunk ................................................................................................................................ 153
Chapter 11: LACP Port Trunks ................................................................................................................... 155
Overview .................................................................................................................................................. 156
System Priority ......................................................................................................................................... 157
Port Priority Value .................................................................................................................................... 157
General Guidelines .................................................................................................................................. 159
Group Status ............................................................................................................................................ 161
Configuration Example ...................................................................................................................... 162
Port Priority Configuration ........................................................................................................................ 164
Chapter 12: Quality of Service (CoS) ......................................................................................................... 165
Overview .................................................................................................................................................. 166
Packet Priority ................................................................................................................................... 166
Egress Queue vs Packet Priority Mapping ........................................................................................ 167
Prioritizing Untagged Packets ........................................................................................................... 168
Scheduling......................................................................................................................................... 168
Mapping CoS Priorities to Egress Queues............................................................................................... 171
Associate Ports to CoS Priorities ............................................................................................................. 173
Associate DSCP Classes to Egress Queues ........................................................................................... 174
Queue Scheduling Algorithm ................................................................................................................... 175
Chapter 13: Access Control Configuration ................................................................................................. 177
Classifier .................................................................................................................................................. 178
Create Classifier ................................................................................................................................ 178
Modify Classifier ................................................................................................................................ 180
Delete Classifier ................................................................................................................................ 181
Profile Action ............................................................................................................................................ 183
Create Profile Action.......................................................................................................................... 183
Modify Profile Action.......................................................................................................................... 184
Delete Profile Action .......................................................................................................................... 185
In-Profile Action........................................................................................................................................ 187
Create In-Profile Action ..................................................................................................................... 187
Modify In-Profile Action...................................................................................................................... 189
Delete In-Profile Action...................................................................................................................... 190
Out-Profile Action ..................................................................................................................................... 191
Create Out-Profile Action................................................................................................................... 191
Modify Out-Profile Action................................................................................................................... 193
Delete Out-Profile Action ................................................................................................................... 194
5
Page 6
Contents
Port List ....................................................................................................................................................195
Create Port List .................................................................................................................................. 195
Modify Port List .................................................................................................................................. 196
Delete Port List...................................................................................................................................197
Policy ........................................................................................................................................................ 198
Create Policy......................................................................................................................................198
Modify Policy ......................................................................................................................................200
Delete Policy ...................................................................................................................................... 201
Policy Sequence....................................................................................................................................... 203
Chapter 14: Storm Control .......................................................................................................................... 205
Overview...................................................................................................................................................206
Ingress Rate Limiting ......................................................................................................................... 207
Egress Rate Limiting .......................................................................................................................... 207
Configuration ............................................................................................................................................208
Ingress Rate Limiting................................................................................................................................ 210
Egress Rate Limiting ................................................................................................................................ 212
Chapter 15: MAC Address Table ................................................................................................................ 213
Overview...................................................................................................................................................214
Static Unicast MAC Address Configuration .............................................................................................. 216
Modify Static Unicast Address..................................................................................................................218
Delete Static Unicast Address ..................................................................................................................219
Static Multicast Address Configuration..................................................................................................... 220
Modify Static Multicast Address................................................................................................................222
Delete Static Multicast Address................................................................................................................223
Chapter 16: DHCP Snooping ......................................................................................................................225
Overview...................................................................................................................................................226
Trusted Ports...................................................................................................................................... 226
Untrusted Ports .................................................................................................................................. 226
Unauthorized DHCP Servers .............................................................................................................226
DHCP with Option 82 ......................................................................................................................... 227
General Guidelines................................................................................................................................... 228
General Configuration .............................................................................................................................. 229
VLAN Setting ............................................................................................................................................ 231
Create VLAN Setting..........................................................................................................................231
Modify VLAN Setting .......................................................................................................................... 232
Delete VLAN Setting .......................................................................................................................... 232
Trusted and Untrusted Port Configuration................................................................................................233
Binding Database .....................................................................................................................................234
Static IP Addresses............................................................................................................................234
Viewing............................................................................................................................................... 235
Chapter 17: IGMP Snooping ....................................................................................................................... 237
Overview...................................................................................................................................................238
IGMP Snooping Configuration..................................................................................................................240
Chapter 18: Security ...................................................................................................................................243
Port Access Control.................................................................................................................................. 244
Overview ............................................................................................................................................ 244
Port Access Control Configuration .....................................................................................................245
RADIUS Client.......................................................................................................................................... 249
Overview ............................................................................................................................................ 249
General Guidelines ............................................................................................................................ 249
Radius Client Configuration ............................................................................................................... 250
6
Page 7
AT-GS950/16 Web Interface User Guide
Dial-in User - Local Authentication........................................................................................................... 252
Overview............................................................................................................................................ 252
Dial-in User Configuration ................................................................................................................. 252
Destination MAC Filter ............................................................................................................................. 255
Overview............................................................................................................................................ 255
Destination MAC Filter Configuration ................................................................................................ 255
Delete Destination MAC Filter ........................................................................................................... 256
Chapter 19: LLDP ....................................................................................................................................... 257
Overview .................................................................................................................................................. 258
Global Configuration ................................................................................................................................ 259
Enable/Disable LLDP ........................................................................................................................ 259
System Information............................................................................................................................ 260
Port States......................................................................................................................................... 261
Neighbors Information.............................................................................................................................. 262
Chapter 20: Simple Network Management Protocol SNMPv1 and v2c ...................................................... 263
SNMPv1 and SNMPv2c Overview ........................................................................................................... 264
Trap Receiver Attributes .......................................................................................................................... 265
Activate SNMP Interface .......................................................................................................................... 266
SNMPv1/v2 User and Group Names ....................................................................................................... 267
Create SNMP v1/v2 User and Group Names.................................................................................... 267
Modify SNMPv1/v2 User and Group Names ..................................................................................... 268
Delete SNMPv1/v2 User and Group Names ..................................................................................... 268
SNMPv1/v2 Community Strings............................................................................................................... 269
Create SNMPv1/v2 Community Strings ............................................................................................ 269
Modify SNMPv1/v2 Community Strings............................................................................................. 270
Delete SNMPv1/v2 Community Strings............................................................................................. 270
SNMP Traps............................................................................................................................................. 271
Create Trap Host Table Entry............................................................................................................ 271
Modify Trap Host Table Entry............................................................................................................ 272
Delete Trap Host Table Entry ............................................................................................................ 272
Chapter 21: Simple Network Management Protocol SNMPv3 ................................................................... 273
SNMPv3 Overview ................................................................................................................................... 274
SNMPv3 Authentication Protocols..................................................................................................... 274
SNMPv3 Privacy Protocol ................................................................................................................. 275
SNMPv3 MIB Views .......................................................................................................................... 275
SNMPv3 Configuration Process ........................................................................................................ 276
SNMPv3 User and Group Names ............................................................................................................ 278
Create SNMPv3 User and Group Names.......................................................................................... 278
Modify SNMPv3 User and Group Names .......................................................................................... 279
Delete SNMPv3 User and Group Names .......................................................................................... 279
SNMPv3 View Names.............................................................................................................................. 280
Create SNMPv3 View Names ........................................................................................................... 280
Modify SNMPv3 View Names............................................................................................................ 281
Delete SNMPv3 View Names............................................................................................................ 281
View Table ............................................................................................................................................... 283
Create SNMPv3 View Table Entries.................................................................................................. 283
Modify SNMPv3 View Table Entries.................................................................................................. 284
Delete SNMPv3 View Table Entries .................................................................................................. 284
SNMPv3 Traps......................................................................................................................................... 285
7
Page 8
Contents
Chapter 22: RMON .....................................................................................................................................287
Overview...................................................................................................................................................288
Enable and Disable RMON ...................................................................................................................... 289
Port Statistics............................................................................................................................................290
Histories....................................................................................................................................................291
Events.......................................................................................................................................................293
Alarms ...................................................................................................................................................... 295
Chapter 23: Network Statistics .................................................................................................................... 299
Overview...................................................................................................................................................300
Traffic Comparison Statistics.................................................................................................................... 301
Error Group Statistics ...............................................................................................................................304
Historical Status Charts ............................................................................................................................306
Chapter 24: Management Software Updates ..............................................................................................309
Overview................................................................................................................................................... 310
Upgrade Firmware Image via HTTP.........................................................................................................311
Upgrade Firmware Image via TFTP ......................................................................................................... 313
Download or Upload a Configuration File via HTTP.................................................................................315
Configuration File Upload................................................................................................................... 316
Configuration File Download .............................................................................................................. 316
Download or Upload a Configuration File via TFTP .................................................................................318
Configuration File Upload................................................................................................................... 318
Configuration File Download .............................................................................................................. 319
Chapter 25: Loopback Protection ................................................................................................................321
Configuration ............................................................................................................................................322
Status ....................................................................................................................................................... 324
Chapter 26: Cable Diagnostics ................................................................................................................... 325
Appendix A: MSTP Overview ....................................................................................................................... 327
Overview...................................................................................................................................................328
Multiple Spanning Tree Instance (MSTI) .................................................................................................. 330
Resolving VLAN Fragmentation.........................................................................................................330
Multiple VLANS Assigned to an MSTI................................................................................................ 331
General Guidelines................................................................................................................................... 333
VLAN and MSTI Associations .................................................................................................................. 334
Ports in Multiple MSTIs............................................................................................................................. 335
Multiple Spanning Tree Regions .............................................................................................................. 336
MST Region Guidelines .....................................................................................................................338
Common and Internal Spanning Tree (CIST) .................................................................................... 340
MSTP with STP and RSTP ................................................................................................................ 340
Associating VLANs to MSTIs....................................................................................................................341
VLANs Across Different Regions..............................................................................................................343
Summary of Guidelines ............................................................................................................................ 345
Appendix A: AT-GS950/16 Default Parameters ...........................................................................................347
8
Page 9
List of Figures
Figure 1. Entering a Switch’s IP Address in the URL Field................................................................................................ 20
Figure 2. Management Login Dialog Box .......................................................................................................................... 20
Figure 3. AT-GS950/16 Switch Information Page.............................................................................................................. 21
Figure 4. AT-GS950/16 Front Panel Page......................................................................................................................... 22
Figure 5. IP Setup Page .................................................................................................................................................... 26
Figure 6. IP Access List Page ........................................................................................................................................... 28
Figure 7. System Time Page ............................................................................................................................................. 31
Figure 8. DHCP Auto Configuration Settings Page ........................................................................................................... 37
Figure 9. AT-GS950/16 Management Page ...................................................................................................................... 38
Figure 10. Administration Page ......................................................................................................................................... 40
Figure 11. Modify Administration Page.............................................................................................................................. 41
Figure 12. User Interface Page ......................................................................................................................................... 43
Figure 13. AT-GS950/16 Switch Information Page............................................................................................................ 45
Figure 14. Factory Default Reset/Reboot Page................................................................................................................. 49
Figure 15. Factory Default Reset/Reboot Page with Password Entry ............................................................................... 51
Figure 16. Factory Default Reset Disabled Page .............................................................................................................. 52
Figure 17. Factory Default Reset/Reboot Page with Password Entry ............................................................................... 53
Figure 18. Ping Test Configuration Page........................................................................................................................... 54
Figure 19. Ping Test Results Page.................................................................................................................................... 55
Figure 20. SSL Settings Page ........................................................................................................................................... 56
Figure 21. System Log Configuration Page....................................................................................................................... 58
Figure 22. AT-GS950/16 Physical Interface Page............................................................................................................. 63
Figure 23. AT-GS950/16 Mirroring Page........................................................................................................................... 71
Figure 24. AT-GS950/16 VLAN Mode Page...................................................................................................................... 81
Figure 25. AT-GS950/16 Tagged VLAN Page................................................................................................................... 83
Figure 26. Example of AT-GS950/16 Tagged VLAN Page................................................................................................ 85
Figure 27. AT-GS950/16 Modify VLAN Page .................................................................................................................... 85
Figure 28. AT-GS950/16 VLAN Port Setting Page ............................................................................................................ 89
Figure 29. Port-Based VLAN Page.................................................................................................................................... 91
Figure 30. AT-GS950/16 Modify Port-based VLAN........................................................................................................... 92
Figure 31. GVRP Global Configuration Page .................................................................................................................... 97
Figure 32. AT-GS950/16 Port Settings Page..................................................................................................................... 98
Figure 33. AT-GS950/16 GVRP Time Setting Page........................................................................................................ 100
Figure 34. AT-GS950/16 Voice VLAN Setting Page........................................................................................................ 108
Figure 35. Voice VLAN OUI Setting Page. ...................................................................................................................... 111
Figure 36. Point-to-Point Ports ........................................................................................................................................ 119
Figure 37. Edge Port ..........................................................................................................
Figure 38. STP and VLAN Fragmentation with Untagged Ports...................................................................................... 120
Figure 39. STP and VLAN Compatibility with Tagged Ports............................................................................................ 121
Figure 40. Rapid Spanning Tree Configuration Page...................................................................................................... 122
Figure 41. AT-GS950/16 RSTP Basic Port Configuration Page...................................................................................... 125
Figure 42. AT-GS950/16 RSTP Advanced Port Configuration Page............................................................................... 128
Figure 43. AT-GS950/16 Designated Topology Information Page .................................................................................. 130
Figure 44. Multiple Spanning Tree Configuration Page................................................................................................... 132
Figure 45. MSTP VLAN Mapping Page ........................................................................................................................... 135
Figure 46. AT-GS950/16 MSTP Port Configuration Page ............................................................................................... 137
Figure 47. MSTP Port Settings Page............................................................................................................................... 140
Figure 48. AT-GS950/16 Topology Information Page ..................................................................................................... 142
Figure 49. Static Port Trunk Example.............................................................................................................................. 146
Figure 50. Trunking Page ................................................................................................................................................ 149
............................................. 119
9
Page 10
Figures
Figure 51. LACP Group Status Page............................................................................................................................... 161
Figure 52. LACP Group Status Page with No Cables Connected ................................................................................... 162
Figure 53. LACP Group Status Page with Three Cables Connected .............................................................................. 163
Figure 54. AT-GS950/16 Port Priority Page..................................................................................................................... 164
Figure 55. CoS Page ....................................................................................................................................................... 171
Figure 56. AT-GS950/16 Port Priority Page..................................................................................................................... 173
Figure 57. DSCP Class Mapping Page............................................................................................................................ 174
Figure 58. Scheduling Algorithm Page ............................................................................................................................ 175
Figure 59. Create Classifier Page.................................................................................................................................... 178
Figure 60. Example of a Classifier Entry.......................................................................................................................... 180
Figure 61. Modify Classifier Page.................................................................................................................................... 181
Figure 62. Create Profile Action Page ............................................................................................................................. 183
Figure 63. Example of Profile Action Entry ...................................................................................................................... 184
Figure 64. Modify Profile Action Page.............................................................................................................................. 185
Figure 65. Create In-Profile Action Page ......................................................................................................................... 187
Figure 66. Example of In-Profile Action Entry .................................................................................................................. 188
Figure 67. Modify In-Profile Action Page ......................................................................................................................... 189
Figure 68. Create Out-Profile Action Page ...................................................................................................................... 191
Figure 69. Example of Out-Profile Action Entry ...............................................................................................................192
Figure 70. Modify Out-Profile Action Page....................................................................................................................... 193
Figure 71. Create Port List Page ..................................................................................................................................... 195
Figure 72. Example of Port List Entry .............................................................................................................................. 196
Figure 73. Modify Port List Page...................................................................................................................................... 197
Figure 74. Create Policy Page......................................................................................................................................... 198
Figure 75. Example of Policy Entry.................................................................................................................................. 200
Figure 76. Modify Policy Page ......................................................................................................................................... 201
Figure 77. Policy Sequence Page.................................................................................................................................... 203
Figure 78. AT-GS950/16 Storm Control Page ................................................................................................................. 208
Figure 79. AT-GS950/16 Ingress Rate Limiting Page...................................................................................................... 210
Figure 80. AT-GS950/16 Egress Rate Limiting Page ...................................................................................................... 212
Figure 81. AT-GS950/16 Static Unicast Address Table Page ......................................................................................... 216
Figure 82. AT-GS950/16 Static Multicast Address Table Page .......................................................................................220
Figure 83. General Settings Page.................................................................................................................................... 229
Figure 84. DHCP Snooping VLAN Settings Page............................................................................................................ 231
Figure 85. AT-GS950/16 Trusted Interfaces Page .......................................................................................................... 233
Figure 86. AT-GS950/16 Binding Database Page........................................................................................................... 234
Figure 87. IGMP Snooping Page..................................................................................................................................... 240
Figure 88. IGMP Snooping Page with MAC Address ...................................................................................................... 241
Figure 89. Port Access Control Configuration Page ........................................................................................................245
Figure 90. RADIUS Page................................................................................................................................................. 250
Figure 91. Dial-In User Page ........................................................................................................................................... 253
Figure 92. Destination MAC Filter Page .......................................................................................................................... 256
Figure 93. AT-GS950/16 LLDP Global Settings Page..................................................................................................... 259
Figure 94. LLDP Neighbors Information Page................................................................................................................. 262
Figure 95. User/Group Page............................................................................................................................................ 267
Figure 96. Community Table Page .................................................................................................................................. 269
Figure 97. Trap Management Page................................................................................................................................. 271
Figure 98. MIB Tree......................................................................................................................................................... 276
Figure 99. SNMP V3 Table Relationships ....................................................................................................................... 277
Figure 100. SNMP Group Access Table.......................................................................................................................... 280
Figure 101. SNMP View Table......................................................................................................................................... 283
Figure 102. RMON Basic Settings Page.......................................................................................................................... 289
Figure 103. Ethernet Statistics Configuration Page ......................................................................................................... 290
Figure 104. History Control Configuration Page .............................................................................................................. 291
Figure 105. RMON Event Configuration Page................................................................................................................. 293
Figure 106. RMON Alarm Configuration Page................................................................................................................. 296
Figure 107. Traffic Comparison Page.............................................................................................................................. 301
Figure 108. Error Group Chart Page................................................................................................................................ 304
Figure 109. Historical Status Chart Page......................................................................................................................... 306
Figure 110. Firmware Upgrade via HTTP Page...............................................................................................................312
10
Page 11
AT-GS950/16 Web Interface User Guide
Figure 111. Firmware Upgrade via TFTP Page............................................................................................................... 314
Figure 112. Configuration Upload/Download via HTTP Page ......................................................................................... 315
Figure 113. File Download with HTTP............................................................................................................................. 316
Figure 114. Result Page.................................................................................................................................................. 317
Figure 115. Configuration Upload/Download via TFTP Page.......................................................................................... 318
Figure 116. AT-GS950/16 Loopback Detection Page ..................................................................................................... 322
Figure 117. Cable Diagnostics Page ............................................................................................................................... 325
Figure 118. VLAN Fragmentation with STP or RSTP...................................................................................................... 331
Figure 119. MSTP Example of Two Spanning Tree Instances ....................................................................................... 331
Figure 120. Multiple VLANs in a MSTI............................................................................................................................. 332
Figure 121. Multiple Spanning Tree Region .................................................................................................................... 337
Figure 122. CIST and VLAN Guideline - Example 1........................................................................................................ 341
Figure 123. CIST and VLAN Guideline - Example 2........................................................................................................ 342
Figure 124. Spanning Regions - Example 1 .................................................................................................................... 343
Figure 125. Spanning Regions without Blocking ............................................................................................................. 344
11
Page 12
Figures
12
Page 13
List of Tables
Table 1. Bridge Priority Value Increments .................................................................................... 115
Table 2. Valid Port Priority Values ................................................................................................ 117
Table 3. Default Mappings Priority Levels to Priority Queues ...................................................... 167
Table 4. Customized Mappings Priority Levels to Priority Queues ............................................... 167
Table 5. Example of Weighted Round Robin Priority .................................................................... 170
Table 6. Traffic Comparison Options ............................................................................................ 302
Table 7. Historical Status Options ................................................................................................. 307
Table 8. Regional Bridge Priority Value Increments ..................................................................... 338
Table 9. AT-S108 Version V1.1.0 Management Software Default Settings .................................. 347
13
Page 14
List of Tables
14
Page 15
Preface
This guide contains instructions on how to use the AT-S108 Version
V1.1.0 Management software to manage and monitor the AT-GS950/16
Gigabit Ethernet Smart Switch.
The AT-S108 Version V1.1.0 Management software has a web browser
interface that you can access from any management workstation on your
network that has a web browser application.
This preface contains the following sections:
“Where to Find Web-based Product Information” on page 16
“Contacting Allied Telesis” on page 17
15
Page 16
Preface
Where to Find Web-based Product Information
The product guides are available for all Allied Telesis products in portable
document format (PDF) on our web site. Management software updates
are also available. Go to www.alliedtelesis.com/support.
16
Page 17
AT-GS950/16 Web Interface User Guide
Contacting Allied Telesis
This section provides Allied Telesis contact information for technical
support as well as sales and corporate information.
Online Support You can request technical support online by accessing the Allied Telesis
Knowledge Base: www.alliedtelesis.com/supportcenter. You can use
the Knowledge Base to submit questions to our technical support staff and
review answers to previously asked questions.
Email and
Telephone
Support
Warranty For hardware warranty information, refer to the Allied Telesis web site at
Returning
Products
Sales or
Corporate
Information
Management
Software Updates
For Technical Support via email or telephone, refer to the Support &
Services section of the Allied Telesis web site at
www.alliedtelesis.com/support. Select your country from the list
displayed on the website. then select the appropriate menu tab.
www.alliedtelesis.com/support/warranty.
Products for return or repair must first be assigned a return materials
authorization (RMA) number. A product sent to Allied Telesis without an
RMA number will be returned to the sender at the sender’s expense. To
obtain an RMA number, contact the Allied Telesis Technical Support
group at our web site: www.alliedtelesis.com/support/rma Select your
country from the list displayed on the website. Then select the appropriate
menu tab.
You can contact Allied Telesis for sales or corporate information through
our web site: www.alliedtelesis.com/purchase/direct.
To find an office near you, select www.alliedtelesis.com/office.
New releases of management software for our managed products are
available on our Allied Telesis web site at
www.alliedtelesis.com/support/software
17
Page 18
Preface
18
Page 19
Chapter 1
Starting a Web Browser Session
This chapter contains the procedures for starting, using, and quitting a web
browser management session on the AT-GS950/16 switch. This chapter
includes the following sections:
“Establishing a Remote Connection to the Web Browser Interface” on
page 20
“Web Browser Tools” on page 23
“Quitting a Web Browser Management Session” on page 24
19
Page 20
Chapter 1: Starting a Web Browser Session
Switch’s IP Address
Establishing a Remote Connection to the Web Browser Interface
The AT-GS950/16 switch is shipped with a pre-assigned IP address of
192.168.1.1.
After your initial login, Allied Telesis suggests that you assign a new IP
address to your switch. To manually assign an IP address to the switch,
refer to “Configuration of IP Address, Subnet Mask and Gateway Address”
on page 26. To configure the switch to obtain its IP configuration from a
DHCP server, refer to “DHCP Client Configuration” on page 35.
Whether you use the pre-assigned IP address or assign a new one, you
must set your local PC to the same subnet as the switch.
To start a web browser management session, perform the following
procedure:
1. Start your web browser.
2. In the URL field of the browser, enter 192.168.1.1. This is the default
IP address of the switch. See Figure 1.
Figure 1. Entering a Switch’s IP Address in the URL Field
The AT-S108 Version V1.1.0 Management Software displays the login
dialog box. See Figure 2.
20
Figure 2. Management Login Dialog Box
Page 21
AT-GS950/16 Web Interface User Guide
Note
3. Enter the AT-S108 Version V1.1.0 management login user name and
password.
The default user name is “manager” and the default password is
“friend.” The login name and password are case-sensitive.
4. Press OK.
The AT-GS950/16 Switch Information page is displayed. See Figure 3.
To change the user name and password, refer to “User Name and
Password Configuration” on page 40.
Figure 3. AT-GS950/16 Switch Information Page
The main menu appears on the left side and is common for all of the
management pages discussed in this manual. It consists of the following
folders and web pages:
Switch Info.
Front Panel
System
Physical Interface
Bridge
SNMP
Access Control
RMON
21
Page 22
Chapter 1: Starting a Web Browser Session
5. To see the front panel of the switch, select Front Panel from the main
Voice VLAN
Security
LLDP
Statistics Chart
Tools
Save Configuration
menu on the left side of the page.
The AT-S108 Version V1.1.0 Management software displays the front
of the switch. Ports are green that have a link to an end node. Ports
without a link are grey. The AT-GS950/16 switch front panel page is
shown in
Figure 4.
22
Figure 4. AT-GS950/16 Front Panel Page
A web browser management session remains active even if you link to
other sites. You can return to the management web pages anytime as long
as you do not quit your browser session or the management session does
not time out. The default time-out is 10 minutes.
Page 23
Web Browser Tools
You can use the web browser tools to move around the management
pages. Selecting Back on your browser’s toolbar returns you to the
previous display. You can also use the browser’s Bookmark feature to
save the link to the switch.
AT-GS950/16 Web Interface User Guide
23
Page 24
Chapter 1: Starting a Web Browser Session
Quitting a Web Browser Management Session
To exit a web browser management session, close the web browser.
24
Page 25
Chapter 2
Note
Basic Switch Configuration
This chapter provides procedures to configuring basic system parameters
for the AT-GS950/16 switch and contains information for the following
sections:
“Configuration of IP Address, Subnet Mask and Gateway Address” on
page 26
“IP Access List Configuration” on page 28
“System Time” on page 31
“DHCP and ATI Web Discovery Tool” on page 34
“DHCP Client Configuration” on page 35
“DHCP Auto Configuration” on page 37
“System Management Information” on page 38
“User Name and Password Configuration” on page 40
“User Interface Configuration” on page 43
“System Information Display” on page 45
“Switch Reboot” on page 47
“Pinging a Remote System” on page 54
“SSL Settings” on page 56
“System Log Configuration” on page 58
To permanently save your new settings or any changes to the
configuration file, select Save Configuration to Flash from the main
menu on the left side of the page.
25
Page 26
Chapter 2: Basic Switch Configuration
Configuration of IP Address, Subnet Mask and Gateway Address
This procedure explains how to change the IP address, subnet mask, and
gateway address of the switch. Before performing the procedure, note the
following:
A gateway address is only required if you want to remotely
manage the device from a management station that is separated
from the switch by a router.
To configure the switch to automatically obtain its IP configuration
from a DHCP server on your network, go to “DHCP Client
Configuration” on page 35.
To change the switch’s IP configuration, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select IP Setup.
The IP Setup Page is displayed. See Figure 5.
Figure 5. IP Setup Page
3. Change the IP configuration parameters by observing or entering new
information in the following fields:
System MAC Address - This parameter displays the MAC
address of the switch. You cannot change this parameter.
System IP Address - Displays the current IP address of the
switch. To change the IP address, enter a new IP address.
When DHCP is enabled, you cannot change this parameter.
26
System Subnet Mask - Displays the current subnet mask of the
switch. To change the subnet mask, enter a new subnet mask.
When DHCP is enabled, you cannot change this parameter.
Page 27
AT-GS950/16 Web Interface User Guide
Note
Caution
System Default Gateway - Displays the default gateway of the
switch. To change the default gateway, enter a new gateway.
When DHCP is enabled, you cannot change this parameter.
DHCP Mode - For information about setting this parameter, refer to
“DHCP Client Configuration” on page 35.
4. Click Apply.
Changing the IP address ends your management session. To
resume managing the device, enter the new IP address of the switch
in the web browser’s URL field, as shown in Figure 1 on page 20.
5. After you log on to the switch with the new IP address, select Save
Configuration to Flash from the main menu on the left side of the
page to save the new IP address to memory.
If you do not select Save Configuration to Flash, the IP address
will revert to its original setting when you power cycle or reboot the
switch.
27
Page 28
Chapter 2: Basic Switch Configuration
Note
IP Access List Configuration
When the IP Access List feature is enabled, remote access to the
AT-S108 Version V1.1.0 management software is restricted to the IP
addresses entered into the IP Access List.
The procedures in this section describe how to enable or disable the IP
Access List feature and how to add or remove IP addresses from the list.
See the following sections:
“Create an IP Access List” on page 28
“Delete an IP Address List Entry” on page 30
To modify IP address that has already been created, it must first be
deleted and them re-created using the following procedures.
Create an IP
Access List
To create a list of accessible IP addresses, perform the following
procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select IP Access List. The IP Access List
Page is displayed. See Figure 6.
.
Figure 6. IP Access List Page
3. Enter an IP address in the IP Address field using a xxx.xxx.xxx.xxx
format.
4. Click Add.
The IP address is added to the IP Access List table in the Accessible
IP column.
28
Page 29
AT-GS950/16 Web Interface User Guide
Note
You can add up to 10 IP address to the IP Access List table.
29
Page 30
Chapter 2: Basic Switch Configuration
5. From the IP Restriction Status field, select one of the following
choices from the pull-down menu:
Enable - This selection restricts the access to the AT-S108
Version V1.1.0 management software to the IP addresses in the
table listed under Accessible IP.
Disable - This selection allows unrestricted access to the AT-S108
Version V1.1.0 management software.
6. Click Apply.
Access to the management software is now restricted to those IP
addresses listed in the IP Access List table.
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
Delete an IP
Address List
Entry
To delete an IP address from the IP Access List, perform the following
procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select IP Access List.
The IP Access List Page is displayed. See Figure 6 on page 28.
3. Select Delete next to the IP address that you want to remove.
The IP address is removed from the IP Access List table. If you
remove the last IP address from the table, the IP Restriction Status
field is set to Disable.
4. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
30
Page 31
System Time
AT-GS950/16 Web Interface User Guide
The procedures in this section describe how to configure the system time
by manually entering the time or through SNTP and how to configure the
daylight savings time feature. See the following sections:
“Manually Setting System Time” on page 31
“Setting SNTP” on page 32
“Setting Daylight Savings Parameters” on page 33
Manually Setting
System Time
To set the system time manually, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select System Time.
The System Time Page is displayed. See Figure 7.
Figure 7. System Time Page
31
Page 32
Chapter 2: Basic Switch Configuration
3. Use the pull down menu to set the Clock Mode parameter to
Local time.
4. In the Local Time Settings section, set the Date Setting
(YYYY:MM:DD) to the current date in the YYYY:MM:DD format.
5. In the Local Time Settings section, set the Time Settings
(HH:MM:SS) to the current time in the HH:MM:SS format.
6. Click the Apply button at the bottom of the page.
The time will take effect immediately.
7. Save your new settings or any changes to the configuration file by
selecting Save Configuration to Flash from the main menu on the left
side of the page.
Setting SNTP To configure SNTP, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select System Time.
The System Time Page is displayed. See Figure 7 on page 31.
3. Use the pull down menu to set the Clock Mode parameter to SNTP.
4. Enter the IP address of the SNTP Primary Server. The format is
xxx.xxx.xxx.xxx.
5. Enter the IP address of the SNTP Secondary Server. The format is
xxx.xxx.xxx.xxx.
6. Enter the SNTP Poll Interval. The range is 1 - 60 minutes.
7. Enter the local Time Zone from the pull down menu.
8. Click the Apply button at the bottom of the page.
The switch will immediately start polling the SNTP primary server for
time information.
9. Save your new settings or any changes to the configuration file by
selecting Save Configuration to Flash from the main menu on the left
side of the page.
32
Page 33
AT-GS950/16 Web Interface User Guide
Setting Daylight
Savings
Parameters
If you want to configure the switch for daylight savings time, perform the
following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select System Time.
The System Time Page is displayed. See Figure 7 on page 31.
3. In the Daylight Savings Time Status field, select Enabled.
4. Specify the Month, Day, Hour and Minute when Daylight Savings will
take effect in the From time fields.
5. Specify the Month, Day, Hour and Minute when Daylight Savings will
end in the To time fields.
6. Using the pull down menu, specify the Daylight Savings offset in the
DST Offset field. You can select either 1 hr or 1/2 hr.
7. Save your new settings or any changes to the configuration file by
selecting Save Configuration to Flash from the main menu on the left
side of the page.
33
Page 34
Chapter 2: Basic Switch Configuration
Note
Note
DHCP and ATI Web Discovery Tool
The AT-GS950/16 Gigabit Ethernet Smart switch is managed through a
web browser interface only. The factory default IP address is 192.168.1.1.
The switch does not have a local console connector, which means that
you cannot learn what the switch’s management IP address is on a web
browser without first knowing what the address is. Once the IP address is
known, you can enter it in the browser.
When the DHCP feature is enabled, a DHCP server automatically assigns
an IP address which is not advertised over the network. As a
consequence, you do not know what IP address has been assigned to the
switch.
The new IP address assignment from the DHCP server may take
one to two minutes before the process is completed.
Fortunately, there is an ATI Web Discovery Tool available that resolves
this issue. It detects the MAC address, IP address and other information of
the AT-GS950 series switches that are present on your local area
network.
The ATI Web Discovery Tool is available for download on the
AT-GS950/16 product page at alliedtelesis.com.
34
Page 35
DHCP Client Configuration
Caution
This procedure explains how to activate and deactivate the DHCP client
on the AT-GS950/16 switch. When the client is activated, the switch
obtains its IP configuration including an IP address and subnet mask from
a DHCP server on your network. Before performing the procedure, note
the following:
By default, the DHCP client is disabled on the switch.
The DHCP client supports DHCP Auto Configuration Settings or
BOOTP. See “DHCP Auto Configuration” on page 37 for more
information.
After you enable DHCP, your current management session ends
because a different IP address is assigned to the switch by the
DHCP server. The new IP address can be discovered using the
ATI Discovery Tool. See “DHCP and ATI Web Discovery Tool” on
page 34 for more information.
AT-GS950/16 Web Interface User Guide
To activate or deactivate the DHCP client on the switch, perform the
following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select IP Setup.
The IP Setup Page is shown in Figure 5 on page 26.
3. From the pull-down menu next to the DHCP Mode field, select Enable
or Disable.
4. Click Apply.
When the DHCP client is Enabled, the web server connection to the
switch is lost because a different IP address is assigned to the switch
by the DHCP server.
Enabling DHCP may end your current management session.
5. Use the ATI Web Discovery Tool to find the new IP address assigned
to the switch by the DHCP server. See “DHCP and ATI Web Discovery
Tool” on page 34 for more information.
35
Page 36
Chapter 2: Basic Switch Configuration
Note
The ATI Web Discovery Tool is available for download on the
AT-GS950/16 product page at alliedtelesis.com.
6. Follow the procedure to log on with the new IP address provided by
the DHCP Server as described in “Establishing a Remote Connection
to the Web Browser Interface” on page 20.
7. Save your new settings or any changes to the configuration file by
selecting Save Configuration to Flash from the main menu on the left
side of the page.
If you do not save the new configuration when DHCP is enabled, the
software reverts to the previously saved IP address value when the
switch is power cycled or rebooted. If no IP address has been
previously saved, the IP address value reverts to 192.168.1.1.
If you enable DHCP and then save your configuration, you are saving
the DHCP setting (Enabled). The next time the switch boots up, it will
use the DHCP process to establish the IP address used to manage the
AT-GS950/16 switch.
If you enter a new IP address after disabling DHCP and save your
configuration, the DHCP setting (Disabled) and the new IP address on
the switch is saved. The next time the switch boots up, it will respond
to the IP address that you entered when you re-establish contact with
the AT-S108 Version V1.1.0 Management software.
36
Page 37
DHCP Auto Configuration
Note
Note
If you need to automatically update the switch’s configuration files via a
remote server, the DHCP Auto Configuration feature is available for this
purpose via the DHCP server.
You must enable the DHCP client so that this feature can operate
with the DHCP server. See “DHCP Client Configuration” on page 35
for more information.
To configure this feature on the switch, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select System.
The DHCP Auto Configuration Settings Page is shown in Figure 8.
AT-GS950/16 Web Interface User Guide
Figure 8. DHCP Auto Configuration Settings Page
3. From the Auto Configuration State field, select one of the following
choices from the pull-down menu:
Enable - The DHCP Auto Configuration feature is active.
You must enable the DHCP client so that this feature can operate
with the DHCP server. See “DHCP Client Configuration” on page 35
for more information.
Disable - The DHCP Auto Configuration feature is inactive.
4. Click Apply.
The DHCP Auto Configuration setting that you have selected is now
active.
5. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
37
Page 38
Chapter 2: Basic Switch Configuration
Note
System Management Information
This section explains how to assign a name, location, and contact
information for the AT-GS950/16 switch. This information helps in
identifying each specific AT-GS950/16 switch among other switches in the
same local area network. Entering this information is optional.
Allied Telesis recommends that you assign a name to the switch.
Naming each switch can help you identify the specific switch you
want to manage among others. It can also help to avoid performing
a configuration procedure on the wrong switch.
To set a switch’s administration information, perform the following
procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select Management.
The Management Page is displayed. See Figure 9 for the
AT-GS950/16 Management Page.
Figure 9. AT-GS950/16 Management Page
3. Configure the following parameters as necessary:
System Description - Specifies the Allied Telesis switch model.
You cannot change this parameter.
System Object ID - Indicates the unique SNMP MIB object
identifier that identifies the switch model. You cannot change this
parameter.
38
Page 39
AT-GS950/16 Web Interface User Guide
System Name - Specifies a name for the switch, for example,
Sales. The name is optional and may contain up to 15 characters.
System Location - Specifies the location of the switch. The
location is optional and may contain up to 30 characters.
System Contact - Specifies the name of the network administrator
responsible for managing the switch. This contact name is optional
and may contain up to 30 characters.
4. Click Apply.
5. From the main menu on the left side of the page, click on Switch Info.
The Switch Information page is displayed. See “AT-GS950/16 Switch
Information Page” on page 21 for more information.
6. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
39
Page 40
Chapter 2: Basic Switch Configuration
User Name and Password Configuration
Password protection is always enabled for access to the AT-S108 Version
V1.1.0 Management software. This section explains how to create new
users names and passwords and how to modify or delete existing users
for the web interface. See the following sections:
“Add New User Name and Password” on page 40
“Modify User Name and Password” on page 41
“Delete User Name and Password” on page 42
Add New User
Name and
Password
The default User Name and Password is “manager” and “friend” - both
without the quotes. To configure new User Name and Password
information, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select Administration.
The Administration Page is displayed. See Figure 10.
Figure 10. Administration Page
40
3. To create a user name, enter a user name in the box next to the User
Name field.
You can enter a value of up to 12 alphanumeric characters. The User
Name field is case sensitive.
Page 41
AT-GS950/16 Web Interface User Guide
Note
4. To add a password that corresponds to the user name entered in
step 3, enter a password of up to 12 alphanumeric characters in the
box next to the Password field. The Password field is case sensitive.
5. To confirm the password entry, retype the password in the box next to
the Confirm Password field.
6. Click Add to activate your changes on the switch.
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
Modify User
Name and
Password
To modify the a user name password, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select Administration.
The Administration Page is shown in Figure 10 on page 40.
3. Identify the user name that you want to change and click Modify in the
Action column.
The Modify Administration Page is displayed. See Figure 11.
The default user name cannot be modified or deleted. The default
password can be modified.
Figure 11. Modify Administration Page
4. To change a password, enter a password of up to 12 alphanumeric
characters in the box next to the Password field.
5. To confirm the above password, retype the password in the box next to
the Confirm Password field.
6. Click Apply to activate your changes on the switch.
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
41
Page 42
Chapter 2: Basic Switch Configuration
Note
Delete User Name
and Password
To delete a user name that you have previously added, perform the
following procedure.
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select Administration.
The Administration Page is shown in Figure 10 on page 40.
3. Identify the user name that you want to delete and click Delete.
The user name is removed from the Administration table.
The default user name cannot be modified or deleted. The default
password can be modified.
4. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
42
Page 43
AT-GS950/16 Web Interface User Guide
Note
User Interface Configuration
This procedure explains how to enable and disable the user interfaces on
the switch. With this procedure you can enable or disable the AT-GS950/
16 SNMP Agent. For more information about SNMP, go to Chapter 20,
“Simple Network Management Protocol SNMPv1 and v2c” on page 263
and Chapter 21, “Simple Network Management Protocol SNMPv3” on
page 273.
The Web Server Status is displayed as Enabled for your
information only. The Web Server cannot be disabled.
SNMP Interface To enable or disable the AT-GS950/16 SNMP interface, perform the
following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select User Interface.
The User Interface Page is displayed. See Figure 12.
Figure 12. User Interface Page
3. Choose Enable or Disable from the pull down list for the SNMP Agent
parameter.
Enabled - When you enable this parameter, the SNMP agent is
active. You can manage the AT-GS950/16 switch with Network
Management Software and the switch’s private MIB.
Disabled - When you enable this parameter, the SNMP agent is
inactive.
43
Page 44
Chapter 2: Basic Switch Configuration
Note
See Chapter 20, “Simple Network Management Protocol SNMPv1
and v2c” on page 263 and Chapter 21, “Simple Network
Management Protocol SNMPv3” on page 273 to configure the
remaining SNMP parameters.
4. Click Apply located under the Web Server Status Enable/Disable
field.
5. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
User Interface
Timeout
To set the Web Idle Timeout, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select User Interface.
The User Interface Page is displayed. See Figure 12 on page 43.
3. Refer to the bottom portion of the web page. Enter the Web Idle
Timeout parameter. The range is from 3 to 60 minutes.
4. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
44
Page 45
System Information Display
The Switch Information page is initially displayed when you first log into
the AT-GS950/16 switch. It provides general information about the switch.
To view this information, perform the following procedure:
1. From the main menu on the left side of the page, select Switch Info.
The Switch Information Page is displayed. See Figure 13.
AT-GS950/16 Web Interface User Guide
Figure 13. AT-GS950/16 Switch Information Page
The Switch Information Page displays the following information:
System Up For - The number of days, hours, and minutes that the
switch has been running since it was last rebooted.
Runtime Image - The version number of the runtime firmware.
Boot Loader - The version number of the bootloader firmware.
Hardware Information Section:
Version - The hardware version number.
DRAM Size - The size of the DRAM, in megabytes.
Flash Size - The size of the flash memory, in megabytes.
45
Page 46
Chapter 2: Basic Switch Configuration
Administration Information Section:
Switch Name - This parameter displays the name assigned to the
switch. To assign the switch a name, refer to “System
Management Information” on page 38.
Switch Location - This parameter displays the location of the
switch. To assign the location, refer to “System Management
Information” on page 38.
Switch Contact - This parameter displays the contact person
responsible for managing the switch. To assign the name of a
contact, refer to “System Management Information” on page 38.
System MAC Address, IP Address, Subnet Mask, and Gateway
Section:
MAC Address - This parameter displays the MAC address of the
switch.
IP Address - This parameter displays the system IP address.
Refer to “Configuration of IP Address, Subnet Mask and Gateway
Address” on page 26 to manually assign an IP address or “DHCP
Client Configuration” on page 35 to activate the DHCP client.
Subnet Mask - This parameter displays the subnet mask for the
switch. Refer to “Configuration of IP Address, Subnet Mask and
Gateway Address” on page 26 to manually assign a subnet mask
or “DHCP Client Configuration” on page 35 to activate the DHCP
client.
Default Gateway - This parameter displays the default gateway IP
address. Refer to “Configuration of IP Address, Subnet Mask and
Gateway Address” on page 26 to manually assign a gateway
address or “DHCP Client Configuration” on page 35 to activate the
DHCP client.
Automatic Network Features Section:
DHCP Mode - This parameter displays the status of the DHCP
client on the switch. For information about setting this parameter,
refer to “DHCP Client Configuration” on page 35.
46
Page 47
Switch Reboot
Note
Note
AT-GS950/16 Web Interface User Guide
You can reboot the AT-GS950/16 switch by either pressing the front panel
eco-friendly switch between 5 to 9 seconds or by using the Normal reboot
function provided in the AT-S108 Version V1.1.0 management software.
In addition to rebooting the switch, you have the option to reset the
AT-GS950/16 switch configuration parameters to the original factory
default settings. There are two ways to accomplish this:
Press the front panel ecofriendly button for more than 10 seconds
and release it.
Reboot the switch in the AT-S108 Version V1.1.0 management
software and follow the procedures to reset to factory defaults. See
“Switch Reboot” on page 48 and “Configure Factory Default
Values” on page 49 for more information.
Password
Protection of
Factory Reset
Refer to the AT-GS950 Installation guide for more information about
how to use the eco-friendly button to reboot or reset the switch.
The AT-S108 Version V1.1.0 Management software default values
are listed in “AT-GS950/16 Default Parameters” on page 347.
If your switch is located in a controlled environment such as a locked
switching closet or limited access equipment room, it may be desirable to
have the ability to easily reset the switch to factory defaults at any time by
using either the front panel ecofriendly switch or the AT-S108 Version
V1.1.0 management software.
However, if your switch is installed in an uncontrolled environment, you
may want to protect the switch’s configuration from unwanted or accidental
resets. The AT-S108 Version V1.1.0 management software allows you to
disable the factory default reset feature and lock it with your own
password. When this is done, two areas are affected:
The reset and factory default reset features on the front panel
ecofriendly switch are disabled.
The factory default reset feature in the AT-S108 Version V1.1.0
management software is disabled. However, you can still reset the
switch via the management software without affecting the switch’s
configuration.
The factory default reset can be enabled again by using the password that
you initially defined when disabling this function.
47
Page 48
Chapter 2: Basic Switch Configuration
Caution
Caution
Caution
Since you define this password as part of the process of disabling
this function, Allied Telesis has no knowledge of it. You are
responsible for keeping the password in a safe place. If it is lost,
Allied Telesis does not have a way to help you recover it.
See “Disabling Factory Default Reset Feature” on page 51 for information
about how to disable the factory default reset feature.
Switch Reboot The following procedure outlines how to reboot your AT-GS950/16 switch.
This procedure reboots the switch and reloads the AT-S108 Version
V1.1.0 Management software configuration from flash memory.
Insure that your current configuration is saved before rebooting the
switch by selecting Save Configuration to Flash from the main
menu on the left side of the page to permanently save your changes.
All configuration parameters that have not been previously saved
are lost. After the switch is reboots, they are reset to the values
stored in the flash memory.
This procedure causes the switch to reboot. The switch does not
forward network traffic during the reboot process. Some network
traffic may be lost.
1. From the main menu on the left side of the page, select the Tools
folder.
The Tools folder expands.
2. From the Tools folder, select Reboot.
The Factory Default Reset/Reboot Page is displayed. See Figure 14.
48
Page 49
AT-GS950/16 Web Interface User Guide
Note
Note
Caution
Figure 14. Factory Default Reset/Reboot Page
3. Go to the lower part of the page to the Reboot section.
4. In the Reboot Type field, select Normal from the pull-down menu.
When the switch is rebooted with this selection, all configuration
parameters that are saved in flash memory are loaded into the switch’s
active memory.
Configure
Factory Default
Values
Two additional options are available in the Reboot Type field. The
procedures for these options are described in "Configure Factory
Default Values".
5. Click Apply.
The switch immediately begins to reload the AT-S108 Version V1.1.0
Management software and configuration parameters. This process
takes approximately two minutes to complete. You can not manage the
device during the reboot. After the reboot is finished, you can log in
again if you want to continue to manage the switch.
This procedure returns all AT-S108 Version V1.1.0 Management software
parameters to their factory default values and deletes all tagged and portbased VLANs on the switch.
The AT-S108 Version V1.1.0 Management software factory default
values are listed in “AT-GS950/16 Default Parameters” on page 347.
This procedure causes the switch to reboot. The switch does not
forward network traffic during the reboot process. Some network
traffic may be lost.
49
Page 50
Chapter 2: Basic Switch Configuration
Note
Caution
To return the AT-S108 Version V1.1.0 Management software to the
default settings, perform the following procedure:
See “AT-GS950/16 Default Parameters” on page 347 for the specific
factory default values.
1. From the main menu on the left side of the page, select the Tools
folder.
The Tools folder expands.
2. From the Tools folder, select Reboot.
The Reboot Page is displayed. See Figure 14 on page 49.
3. Go to the lower part of the page to the Reboot section.
4. In the Reboot Type field, use the pull-down menu to select one of the
following options:
Normal - This setting reloads all configuration parameters that are
saved in flash memory. See “Switch Reboot” on page 48 for more
information when using this selection.
Factory Default - Resets all switch parameters to the factory
default settings, including the IP address, subnet mask, and
gateway address.
This setting will cause the IP address to be reset to 192.168.1.1.
You will loose connectivity with the switch management software
after the reboot is completed and you can login again with this IP
address.
Factory Default Except IP Address - Resets all switch parameters to
the factory default settings, but retains the current IP address, subnet
mask, and gateway settings saved in flash memory. If the DHCP client
is enabled, it remains enabled after this reset and assignment of the IP
address, subnet mask, and gateway settings are managed by the
DHCP server.
5. Click Apply.
The switch begins the reboot process. You must wait approximately
two minutes for the switch to complete the reboot process before you
can re-establish your management session and network traffic begins
flowing normally again.
50
Page 51
AT-GS950/16 Web Interface User Guide
Caution
Disabling Factory
Default Reset
Feature
The factory default reset feature allows anyone to reset the switch to the
factory default configuration. You may disable this feature. More details
are available concerning “Password Protection of Factory Reset” on
page 47.
To disable the factory default reset feature, perform the following
procedure:
1. From the main menu on the left side of the page, select the Tools
folder.
The Tools folder expands.
2. From the Tools folder, select Reboot.
The Factory Default Reset/Reboot Page is displayed. See Figure 14
on page 49.
3. Go to the Factory Default Reset section on the upper part of the page.
You will find a field called Factory Default Reset. This selection
allows you to reset the switch configuration to the factory default
settings given in “MSTP Overview” on page 327 by using the Reboot
procedures outlined in “Configure Factory Default Values” on page 49.
4. To disable the factory default reset feature, select Disable on the pull-
down menu of the Factory Default Reset field.
The Factory Default Reset/Reboot Page changes to include fields for
entering a password. See Figure 15.
Figure 15. Factory Default Reset/Reboot Page with Password Entry
5. In the New Password field, enter a password of up to 12 characters in
length. It is case-sensitive. There is not a default password for this
field.
Since you define this password as part of the process of disabling
this function, Allied Telesis has no knowledge of it. You are
51
Page 52
Chapter 2: Basic Switch Configuration
responsible for keeping the password in a safe place. If it is lost,
Allied Telesis does not have a way to help you recover it.
6. Re-enter the same password in the Confirm Password field.
7. Click Apply.
The following message is displayed:
By clicking on Accept, the Factory Default Reset function will be
Disabled on both the switch management software and the
physical front panel ecoFriendly button. If you loose this password,
ATI cannot recover it for you.
By Clicking on Cancel, the “Factory Default Reset” function will
remain Enabled on both the switch management software and the
physical front panel ecoFriendly button.
8. Click Accept.on the message.
The Factory Default Reset page changes and displays the Factory
Default Reset feature as Disabled. See Figure 16.
Enabling Factory
Default Reset
52
Figure 16. Factory Default Reset Disabled Page
9. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
If the Factory Default Reset feature is disabled and you choose to
Enable it, perform the following procedure:
1. From the main menu on the left side of the page, select the Tools
folder.
The Tools folder expands.
2. From the Tools folder, select Reboot.
The Factory Default Reset/Reboot Page is displayed. See Figure 16.
3. Go to the Factory Default Reset section on the upper part of the page.
The Factory Default Reset field should be set to Disable.
Page 53
AT-GS950/16 Web Interface User Guide
Note
If the Factory Default Reset field is already set to Enable, you do
not need to continue with this procedure.
4. To enable the factory default reset feature, select Enable on the pulldown menu of the Factory Default Reset field.
The Factory Default Reset/Reboot Page changes to include a
Password field for entering a password. See Figure 17 on page 53.
Figure 17. Factory Default Reset/Reboot Page with Password Entry
5. Enter the same password that you defined when you previously set the
Factory Default Reset field to Disable.
6. Click Apply.
The initial Factory Default Reset/Reboot Page is displayed with the
Factory Default Reset field Enabled. See Figure 14 on page 49.
In the Reboot section, the Reboot Type field now includes the options
presented in its pull down menu for returning the switch configuration
to the factory default values. See “Configure Factory Default Values”
on page 49 for more information.
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
53
Page 54
Chapter 2: Basic Switch Configuration
Note
Pinging a Remote System
This procedure instructs the AT-GS950/16 switch to ping a node on your
network. This procedure is useful in determining whether an active link
exists between the switch and another network device.
The device you are pinging must be a member of the Default VLAN
and within the same local area network as your switch. In other
words, the port on the switch through which the node is
communicating with the switch must be an untagged or tagged
member of the Default VLAN.
To ping a network device, perform the following procedure:
1. From the main menu on the left side of the page, select the Tools
folder.
The Tools folder expands.
2. From the Tools folder, select Ping.
The Ping Test Configuration Page is displayed. See Figure 18.
Figure 18. Ping Test Configuration Page
3. Configure the following parameters:
Destination IP Address - The IP address of the node you want to
ping in the xxx.xxx.xxx.xxx format.
Timeout Value - Specifies the length of time, in seconds, the
switch waits for a response before assuming that a ping has failed.
Number of Ping Requests - Specifies the number of ping
requests you want the switch to perform.
4. Click Start.
54
Page 55
AT-GS950/16 Web Interface User Guide
5. To view the ping results, click Show Ping Results.
A sample Ping Test Results Page is displayed. See Figure 19.
Figure 19. Ping Test Results Page
The following information is displayed:
Destination IP Address - Indicates the IP address of the unit that
receives the ping.
Pass - Indicates the percentage of times the ping passed.
Average Time - Indicates the time, in milliseconds, the ping was
received.
6. Click Back to Ping Test to return to the Ping Test Configuration Page.
55
Page 56
Chapter 2: Basic Switch Configuration
SSL Settings
The AT-GS950/16 switch has a web browser server for remote
management of the unit with a web browser application from management
workstations on your network. By default, the server operates in a
non-secure HTTP mode and can be configured to communicate in a
secure HTTPS mode with SSL protocol.
In many situations, the communication with the switch will be in a
controlled environment and it is acceptable to communicate with the
management software in the HTTP mode.
However, you may find that your management communications are
subject to outside security risks and web sessions conducted in the nonsecure HTTP mode are vulnerable to security issues because the packets
are sent in clear text. Web browser management sessions that use the
secure HTTPS mode with SSL protocol are protected against snooping
because the packets exchanged between the switch and your
management workstations are encrypted. When operating in this mode,
only the AT-GS950/16 switch and the web browser are able to decipher
the packets sent and received between them.
Configuring SSL To enable or disable the SSL protocol feature, perform the following
procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select SSL Settings.
The SSL Settings Page is displayed. See Figure 20.
Figure 20. SSL Settings Page
3. From the SSL Settings field, select one of the following choices from
the pull-down menu:
Enable - The secure SSL mode is active. You must log in to the
switch’s management using the HTTPS mode on your browser.
56
Disable - The secure SSL mode is inactive. You must log in to the
switch’s management using the HTTP mode on your browser.
Page 57
AT-GS950/16 Web Interface User Guide
4. Click Apply.
The SSL setting that you have selected is now active.
5. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
57
Page 58
Chapter 2: Basic Switch Configuration
System Log Configuration
The System log is designed to monitor the operation the AT-GS950/16
switch by recording the event messages it generates during normal
operation. These events may provide vital information about system
activity that can help in the identification and solutions of system
problems.
To configure the System log, perform the following procedure:
1. From the main menu on the left side of the page, click the System
folder.
The System folder expands.
2. From the System folder, select System Log Configuration.
The System Log Configuration Page is displayed. See Figure 21.
58
Figure 21. System Log Configuration Page
Page 59
AT-GS950/16 Web Interface User Guide
3. From the Syslog Status field, select one of the following choices from
the pull-down menu:
Enable - The System log is active.
Disable - The System log is inactive.
4. From the Time Stamp field, select one of the following choices from the
pull-down menu:
Enable - Each event message recorded in the log will have a time
stamp recorded with it.
Disable - No time stamp will be recorded with the event messages.
5. Enter the Messages Buffer Size.The range is between 1 and 200.
6. Enter the Syslog Server IP Address. The format is xxx.xxx.xxx.xxx. If
the address is left at the default setting of 0.0.0.0, no server is
specified.
7. In the Facility field, enter the Facility local from the pull-down menu.
The choices range from local0 through local7.
8. Select the Logging Level. This parameter specifies what level of
event messages will be logged into the System log. Your choices are
as follows:
0 Emergency - The system is unusable.
1 Alert - Action must be taken immediately.
2 Critical - Critical conditions are displayed.
3 Error - Error conditions are displayed.
4 Warning - Warning conditions are displayed.
5 Notice - Normal but significant conditions are displayed.
6 Informational - Informational messages are displayed
7 Debug - Debug-level messages are displayed.
9. Click Apply.
The System log is now active.
10. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
59
Page 60
Chapter 2: Basic Switch Configuration
60
Page 61
Chapter 3
Note
Port Configuration
This chapter provides a description of the physical characteristics of the
ports and a procedure that explains how to view and change the port
settings. This chapter includes the following sections:
“Overview” on page 62
“Display and Configure Ports” on page 63
To permanently save your new settings or any changes to the
configuration file, select Save Configuration to Flash from the main
menu on the left side of the page.
61
Page 62
Chapter 3: Port Configuration
Overview
This chapter describes how to display and modify the physical
characteristics of an AT-GS950/16 switch. You can display and modify the
settings of all the ports on one web page. The port characteristics that are
displayed are:
Trunk Group Number
Port type
Link Status
Admin Status
Duplex Mode
Jumbo frame
Flow control
EAP Pass
BPDU frame
These characteristics are described in the next section.
62
Page 63
Display and Configure Ports
Note
This procedure explains how to configure the ports on the
AT-GS950/16 switch using the Port Configuration Page. This page allows
you to view and configure the parameter settings of individual or all the
switch ports at one time.
To configure the ports, perform the following procedure:
1. From the main menu on the left side of the page, select Physical
Interface.
A partial view of the AT-GS950/16 Physical Interface Page is displayed
in Figure 22.
AT-GS950/16 Web Interface User Guide
Figure 22. AT-GS950/16 Physical Interface Page
2. Adjust the port settings as needed. Not all parameters are adjustable.
The parameters are defined as follows:
Port - Specifies the port number. The All value indicates ports 1
through 16 on the AT-GS950/16 switch. You cannot change this
parameter.
You can use the All row value in the Port column to set the Admin.
Status, Mode, Jumbo, Flow Ctrl, EAP Pass, and BPDU fields to
the same values for all ports at the same time. In the All row when
you select Ignore, Enable or Disable in one of these columns, it
applies to all of the AT-GS950/16 switch ports.
Trunk - This parameter indicates the trunk group number. A
number in this column indicates that the port has been added to a
trunk. This parameter can not be configured on this page,
However, for information about configuring a trunk, refer to Chapter
10, “Static Port Trunking” on page 145.
Type - Indicates the port type. On the AT-GS950/16, the port type
63
Page 64
Chapter 3: Port Configuration
is 1000TX for 10/100/1000Base-T twisted-pair ports (1 through 14,
15R and 16R) and 100FX or 1000TX for the SFP ports (15 and 16)
for copper or fiber SFP type.
Link Status - This parameter indicates the status of the link
between the port and the end node connected to the port. The
possible values are:
Up -This parameter i Indicates a valid link exists between the
port and the end node.
Down -This parameter i Indicates the port and the end node
have not established a valid link.
Admin. Status -This parameter indicates the operating status of
the port. You can use this parameter to enable or disable a port.
You may want to disable a port and prevent packets from being
forwarded if a problem occurs with the node or cable connected to
the port. You can enable the port to resume normal operation after
the problem has been fixed. You can also disable an unused port
to secure it from unauthorized connections. The possible values
are:
Ignore -This parameter applies to the All row only and i
Indicates that the Admin. Status field must be set individually
for each port.
Enabled - This parameter indicates the port is able to send and
receive Ethernet frames.
Disabled - This parameter indicates the port is not able to send
and receive Ethernet frames.
Jumbo -This parameter i Indicates whether or not jumbo frames
can be accepted by the switch. You may want to activate jumbo
frames when your switch will transmit video and audio files. The
possible values are:
Ignore -This parameter i Indicates that the All setting does not
apply to the Jumbo field. In other words, each port is set
individually.
Enabled -This parameter i Indicates the port is permitted to
accept jumbo frames.
Disabled -This parameter i Indicates the port is not permitted to
accept jumbo frames.
64
Page 65
AT-GS950/16 Web Interface User Guide
Note
When QoS is enabled on a port, the Jumbo frame parameter can not
be enabled. To enable or disable QoS, see “Mapping CoS Priorities
to Egress Queues” and “CoS Page” on page 171
65
Page 66
Chapter 3: Port Configuration
Mode -This parameter i Indicates the speed and duplex mode
settings for the port. You can use this parameter to set the speed
and duplex mode of a port. The possible settings are:
Ignore -This parameter i Indicates that the All setting does not
apply to the Mode field. In other words, each port is set
individually.
Auto -This parameter i Indicates the port is using AutoNegotiation to set the operating speed and duplex mode. The
actual operating speed and duplex mode of the port are
displayed in parentheses (for example, “1000F” for 1000 Mbps
full duplex mode) after a port establishes a link with an end
node.
Auto (1000F) -This parameter i Indicates the port is configured
for 1000Mbps operation in Auto-Negotiation mode.
1000/Full -This parameter i Indicates the port is configured for
1000Mbps operation in full-duplex mode.
100/Full -This parameter i Indicates the port is configured for
100Mbps operation in full-duplex mode.
10/Full -This parameter i Indicates the port is configured for
10Mbps operation in full-duplex mode.
1000/Half -This parameter i Indicates the port is configured for
1000Mbps operation in half-duplex mode.
100/Half -This parameter i Indicates the port is configured for
100Mbps operation in half-duplex mode.
10/Half -This parameter i Indicates the port is configured for
10Mbps operation in half-duplex mode.
When selecting a Mode setting, the following points apply:
When a twisted-pair port is set to Auto-Negotiation, the end node
should also be set to Auto-Negotiation to prevent a duplex mode
mismatch. A switch port using Auto-Negotiation defaults to halfduplex if it detects that the end node is not using Auto-Negotiation.
This can result in a mismatch if the end node is operating at a fixed
duplex mode of full-duplex. To avoid this problem when connecting
an end node with a fixed duplex mode of full-duplex to a switch
port, disable Auto-Negotiation on the port and set the port’s speed
and duplex mode manually.
66
The only valid setting for the SFP ports is Auto-Negotiation.
Flow Control - This parameter reflects the current flow control
setting on the port. The switch uses a special pause packet to
notify the end node to stop transmitting for a specified period of
time. The possible values are:
Page 67
AT-GS950/16 Web Interface User Guide
Ignore - This parameter indicates that the All setting does not
apply to the Flow Control field. In other words, each port is set
individually.
Enabled - This parameter indicates that the port is permitted to
use flow control.
Disabled - This parameter indicates that the port is not
permitted to use flow control.
EAP Pass - This parameter reflects the current Extensible
Authentication Protocol (EAP) setting on the port. The possible
values are:
Ignore - This parameter indicates that the All setting does not
apply to the EAP Pass field. In other words, each port is set
individually.
Enabled - This parameter indicates that the port is able to send
and receive EAP packets.
Disabled - This parameter indicates that the port is disabled and
is not able to send or receive EAP packets.
BPDU - This parameter reflects the current BPDU setting on the
port.The possible values are:
Ignore - This parameter indicates that the All setting does not
apply to the BPDU field. In other words, each port is set
individually.
Enabled - This parameter indicates that the switch will pass
BPDU frames through the switch and broadcast them through all
other ports.
Disabled - This parameter indicates that the switch will not pass
BPDU frames through the switch, With RSTP or STP enabled,
the switch will receive BPDU frames and process them
according to the spanning tree protocol.
3. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
67
Page 68
Chapter 3: Port Configuration
68
Page 69
Chapter 4
Note
Port Mirroring
This chapter describes the Port Mirroring feature and the procedure for
setting up port mirroring. Port mirroring allows you to unobtrusively monitor
the ingress and egress traffic on a port by having the traffic copied to
another port. This chapter contains the following sections:
“Overview” on page 70
“Port Mirroring Configuration” on page 71
“Disable Port Mirroring” on page 73
To permanently save your new settings or any changes to the
configuration file, select Save Configuration to Flash from the main
menu on the left side of the page.
69
Page 70
Chapter 4: Port Mirroring
Overview
The port mirroring feature allows you to unobtrusively monitor the traffic
received and transmitted on one or more ports by copying the traffic to
another switch port. You can connect a data analyzer to the port where the
traffic is copied and monitor the traffic on the other ports without impacting
network performance or speed.
A port mirror has two component ports. The port or ports whose traffic you
want to mirror is called the source port(s). The port where the traffic will be
copied to is called the mirroring port.
Observe the following guidelines when you create a port mirror:
You can select more than one source port at a time. However, the
more ports you mirror, the less likely the mirroring port is able to
handle all the traffic. For example, if you mirror the traffic of six
heavily active ports, the destination port is likely to drop packets,
meaning that it does not provide an accurate mirror of the traffic of
the six source ports.
The source and mirror ports must be located on the same switch.
You can mirror the ingress or egress traffic of the source ports or
both.
While the Mirroring feature is enabled, the mirroring port is
dedicated to monitoring the traffic from the source ports and
cannot used for regular network operations.
70
Page 71
Port Mirroring Configuration
To configure Port Mirroring, perform the following procedure:
1. Select the Bridge folder.
The Bridge folder expands.
2. From the Bridge folder, select Mirroring.
The Mirroring Page is displayed. See Figure 23.
AT-GS950/16 Web Interface User Guide
Figure 23. AT-GS950/16 Mirroring Page
3. Click the pull-down menu on the Status field and select one of the
following choices:
Enable - This parameter activates the Port Mirroring feature and
the rest of the configuration parameters become active on the
page.
Disable - This parameter de-activates the Port Mirroring feature
and the rest of the configuration parameters become inactive on
the page.
4. Click Mirroring Port and from the pull-down menu, select the port.
5. For the source port, select the port(s) whose ingress, egress, or both
ingress and egress traffic you want to monitor.
A check in a box indicates the Ingress or Egress traffic for a port has
been selected.
6. Click Apply on the right-hand side of the page.
The Port Mirroring configuration is implemented immediately on the
AT-GS950/16 switch.
You can connect a data analyzer to the mirroring port to monitor the
Ethernet traffic on the source port(s).
71
Page 72
Chapter 4: Port Mirroring
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
72
Page 73
Disable Port Mirroring
To disable Port Mirroring, perform the following procedure:
1. Select the Bridge folder.
The Bridge folder expands.
2. From the Bridge folder, select Mirroring.
The Mirroring page is shown in Figure 23 on page 71.
3. From the Status field, select Disable and click Apply.
Port mirroring is immediately disabled on the switch and the
parameters on the web page become inactive. You can now use the
mirroring port for regular network operations.
4. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
AT-GS950/16 Web Interface User Guide
73
Page 74
Chapter 4: Port Mirroring
74
Page 75
Chapter 5
Note
Note
Virtual LANs
This chapter contains a description of Virtual Local Area Networks
(VLANs) and the procedures for creating, modifying, and deleting both
port-based and tagged VLANs. This chapter contains the following
sections:
“VLAN Overview” on page 76
“Assign Ports to a VLAN Mode” on page 81
“Tagged VLAN Configuration” on page 83
“Port-Based VLAN Configuration” on page 91
“Modify a Port-Based VLAN” on page 92
“Delete a Port-Based VLAN” on page 92
The Voice VLAN feature is not covered in this section. For more
information, see “Voice VLAN” on page 103.
To permanently save your new settings or any changes to the
configuration file, select Save Configuration to Flash from the main
menu on the left side of the page.
75
Page 76
Chapter 5: Virtual LANs
VLAN Overview
A virtual LAN or VLAN is a group of ports on an Ethernet switch that form
a logical Ethernet segment via the AT-S108 Version V1.1.0 Management
software. The ports of a VLAN form an independent traffic domain where
the traffic generated by the nodes of a VLAN remains within the VLAN.
With VLANs, you can segment your local area network using the AT-S108
Version V1.1.0’s Management software and group nodes with related
functions into their own separate, logical, VLAN segments. These VLAN
groupings can be based on similar data needs or security requirements.
For example, you can create separate VLANs for each department in your
company, such as Sales, Accounting and Engineering.
VLANs offer several important benefits:
Improved network performance
Network performance often suffers as networks grow in size and as
data traffic increases. The more nodes on each LAN segment vying for
bandwidth, the greater the likelihood overall network performance
decreases.
VLANs improve network performance because traffic stays within the
separate, logical LAN segment of the VLAN. The nodes of a VLAN
receive traffic only from nodes of the same VLAN. This reduces the
need for nodes to handle traffic that is not destined for them. It also
frees up bandwidth within all the logical workgroups.
In addition, because each VLAN constitutes a separate broadcast
domain, broadcast traffic remains within the VLAN and is not shared
with other ports of the switch that are not members of that VLAN.
Because the broadcast traffic is not shared with ports outside of the
VLAN, those non-member ports experience an overall network
performance improvement.
Increased security
Because data traffic generated by a node in a VLAN is restricted only
to the other nodes of the same VLAN, you can use VLANs to control
the flow of packets in your network and prevent packets from being
shared with unauthorized end nodes.
Simplified network management
VLANs can simplify network management. Before VLANs became a
layer 2 feature, physical changes to the network often had to been
made at the switches in the wiring closets. For example, if an
employee changed departments, changing the employee’s LAN
segment assignment might require a change to the cabling of the
switches.
76
Page 77
AT-GS950/16 Web Interface User Guide
With VLANS, you can reconfigure the LAN segment assignment of an
end node connected to the AT-GS950/16 switch’s management
software. Also, you can change the VLAN memberships without
moving the workstations physically or change group memberships
without moving cables from one port to another.
In addition, a virtual LAN can span more than one switch. This means
that the end nodes of a VLAN do not need to be connected to the
same switch and so are not restricted to being in the same physical
location.
The AT-GS950/16 Gigabit Ethernet Smart Switch supports the following
types of VLANs:
Port-based VLANs
Tagged VLANs
Both types of VLANs are described in the following sections.
Port-based
VLAN Overview
As explained in the “VLAN Overview” on page 76, a VLAN consists of a
group of ports on an Ethernet switch that form an independent traffic
domain. This type of VLAN is independent of the header information
including VLAN tags in a frame. Traffic generated by the end nodes of a
VLAN remains within the VLAN and does not cross over to the end nodes
of other VLANs unless there is an interconnection device, such as a router
or Layer 3 switch.
A port-based VLAN is a group of ports on the switch that form a logical
Ethernet segment. A port-based VLAN can have as many or as few ports
as needed. The VLAN can consist of all the ports on an Ethernet switch, or
just a few ports.
There are two components of a port-based VLAN in the
AT-S108 Version V1.1.0 Management software:
VLAN Name
VLAN Index
VLAN Name
To create a port-based VLAN, you must give it a unique name. This name
can reflect the function of the network devices that are VLAN members,
such as Sales, Production, and Engineering.
VLAN Index
You must assign a unique number to each VLAN in a network. This
number is called the Port-Based VLAN Index. This number uniquely
identifies a VLAN in the AT-GS950/16 switch and across the network.
77
Page 78
Chapter 5: Virtual LANs
Each port of a port-based VLAN can belong to as many VLANs as
needed. Therefore, traffic can be forwarded to the members of the groups
to which the port is assigned. For example, port 1 and port 2 are members
of group 1 and ports 1 and 3 are members of group 2. In this case, traffic
from port 1 is forwarded to ports 2 and 3, traffic from port 2 is forwarded
only to port 1, and traffic from port 3 is forwarded only to port 1.
General Rules for Creating a Port-based VLAN
Here is a summary of general rules to observe when creating a port-based
VLAN:
Assign a unique name to each port-based VLAN.
Assign a unique VLAN Index to each port-based VLAN. If a
particular port-based VLAN spans multiple switches, each part of
the VLAN on the different switches must be assigned the same
VLAN ind ex.
Create up to 52 port-based VLANs.
Tagged VLAN
Overview
The second type of VLAN supported by the AT-S108 Version V1.1.0
Management software is the tagged VLAN. In this type of VLAN,
membership is determined by tag information within the frames that are
received on a port and the VLAN configuration of each port.
The VLAN information within an Ethernet frame is referred to as a tag and
is contained in a tagged header for the frame. A tag, which follows the
source and destination addresses in a frame, contains the VLAN ID of the
VLAN to which the frame belongs (IEEE 802.3ac standard). This number
uniquely identifies each VLAN in a network.
When a switch receives a frame with a VLAN tag, referred to as a tagged
frame, the switch forwards the frame only to those ports whose VLAN ID
equals the VLAN tag.
A port that receives or transmits tagged frames is referred to as a tagged
port. Any network device connected to a tagged port must be IEEE
802.1Q-compliant. This is the standard that outlines the requirements and
standards for VLAN tagging. The device must be able to process the
tagged information on received frames and add tagged information to
transmitted frames.
A tagged VLAN consists of the following:
78
VLAN Index
You must assign a unique number to each tagged VLAN in a network.
This number is called the tagged VLAN ID. This number uniquely identifies
a tagged VLAN in the AT-GS950/16 switch and across the network.
Page 79
AT-GS950/16 Web Interface User Guide
Note
VLAN Name
To create a tagged VLAN, you must give it a unique name. This name can
reflect the function of the network devices that are VLAN members, such
as Sales, Production, and Engineering.
Tagged and Untagged Ports
When you specify that a port is a member of a tagged VLAN, you need to
specify that it is tagged or untagged. By definition, the port is a static
member of a tagged VLAN when it is configured as either a tagged or
untagged port. You can have a combination of tagged and untagged ports
in the same VLAN.
A port can also be dynamically assigned to a tagged VLAN within a
voice VLAN configuration which is a special configuration of a
tagged VLAN. For more information concerning static and dynamic
membership in a tagged VLAN, see the Overview section for “Voice
VLAN” on page 103.
Packet transmission from a tagged port differs from packet transmission
from an untagged port. When a packet is transmitted from a tagged port,
the tagged information within the packet is maintained when it is
transmitted to the next network device. If the packet is transmitted from an
untagged port, the VLAN tag information is removed from the packet
before it is transmitted to the next network device.
The IEEE 802.1Q standard describes how tagging information within a
packet is used to forward or discard traffic throughout the switch. If the
incoming packet has a VLAN tag that matches one of the Group IDs of
which the port is a member, the packet is accepted and forwarded to the
appropriate port(s) within that VLAN. If the incoming packet’s VLAN tag
does not match one of the Group IDs assigned to the port, the packet is
discarded.
Port VLAN Identifier (PVID
When an untagged packet is received on a port in a tagged VLAN, it is
assigned to one of the VLANs of which that port is a member. The
deciding factor in this process is the Port VLAN Identifier (PVID). Both
tagged and untagged ports in a tagged VLAN must have a PVID assigned
to them. The default value of the PVID for each port is 1. The switch
associates a received untagged packet to the VLAN ID that matches the
PVID assigned to the port and the packet is only forwarded to those ports
that are members.
79
Page 80
Chapter 5: Virtual LANs
General Rules for Creating a Tagged VLAN
Here is a summary of the rules to observe when you create a tagged
VLAN:
Assign a unique name to each tagged VLAN.
Each tagged VLAN must be assigned a unique VLAN ID. If a
particular VLAN spans multiple switches, each part of the VLAN on
the different switches must be assigned the same VLAN ID.
A tagged port can be a member of multiple VLANs.
The AT-GS950/16 Gigabit Ethernet Smart Switch can support up
to 255 tagged VLANs per switch.
80
Page 81
Assign Ports to a VLAN Mode
Note
The procedure described in this section allows you to assign ports to
tagged or a port-based VLAN. In addition, it permits you to display the
current VLAN assignment of ports.
However, you can assign ports to a port-based VLAN only after you have
created a port-based VLAN with the procedure described in “Port-Based
VLAN Configuration” on page 91.
By default, all of the ports on the switch are assigned as untagged
members to the default tagged VLAN with a VLAN ID of 1. The default
VLAN is permanent and must have at least one untagged port assigned to
it at any time.
To assign ports to a 802.1Q Tagged VLAN or Port-Based VLAN, perform
the following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
AT-GS950/16 Web Interface User Guide
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select VLAN Mode.
The VLAN Mode Page is displayed. See Figure 24.
Figure 24. AT-GS950/16 VLAN Mode Page
4. To add ports to a 802.1Q Tagged VLAN or Port-Based VLAN, select
the ports accordingly on the VLAN Mode page.
Before you assign a port as a member of a Port-Base VLAN, you
must create the Port-Base VLAN by following the steps defined in
“Port-Based VLAN Configuration” on page 91
5. Click Apply.
81
Page 82
Chapter 5: Virtual LANs
Note
6. If you want to restore the port assignment before saving the
configuration, click Restore.
Once the VLAN assignment has been saved by clicking first on the
Apply button and then saving the configuration, the Restore button
will not be active for those port assignments.
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
82
Page 83
Tagged VLAN Configuration
On a port, the tag information within a frame is examined when it is
received to determine if the frame is qualified as a member of a specific
tagged VLAN. If it is, it is eligible to be switched to other member ports of
the same VLAN. If it is determined that the frame’s tag does not conform to
the tagged VLAN, the frame is discarded.
You can create and delete tagged VLANs by following the procedures in
the following sections:
“Create a Tagged VLAN”
“Modify a Tagged VLAN” on page 84
“Delete a Tagged VLAN” on page 87
AT-GS950/16 Web Interface User Guide
Create a Tagged
VLAN
To create a tagged VLAN, perform the following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select Tagged VLAN.
The AT-GS950/16 Tagged VLAN Page is displayed. See Figure 25.
Figure 25. AT-GS950/16 Tagged VLAN Page
83
Page 84
Chapter 5: Virtual LANs
Note
Note
4. To assign a VLAN ID, type a VLAN ID in the VLAN ID field.
The range for this field is 2 to 4,000. You can create a maximum of 255
tagged VLANs.
5. To assign a name to the VLAN, type a unique name in the VLAN
Name field.
Enter a value of up to 32 characters. For more information about this
field, refer to “VLAN Name” on page 77.
6. Set the Management VLAN to one of the following choices from the
pull-down menu:
Enable - This parameter enables management access on this
VLAN.
- If you enable management on a VLAN other than 1, you can
access management only through a tagged port of that VLAN.
- You can access management through the tagged port of all VLANs
on which you have enabled management.
- You can still access management through a port that is only an
untagged member of VLAN 1 and not a tagged member of another
VLAN.
Modify a Tagged
VLAN
Disable - This parameter disables Management VLAN on this
VLAN. If you change this parameter from Enable to Disable, the
Management VLAN is still enabled on the DefaultVLAN.
The Management VLAN is always Enabled on the untagged ports of
the DefaultVLAN. It cannot be disabled on the DefaultVLAN.
7. To assign ports to the VLAN, click on the port numbers labeled either
Static Tagged or Static Untagged.
By default, all the ports are assigned to the Not Member category
when a specific VLAN is created. The Not Member ports are part of
the DefaultVLAN (VLAN ID=1).
8. Click Apply.
9. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
To modify the name or port assignments of a tagged VLAN, perform the
following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
84
Page 85
AT-GS950/16 Web Interface User Guide
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select Tagged VLAN.
An example of a tagged VLAN (VLAN2) is shown in the table at the
bottom of Figure 26 on page 85.
Figure 26. Example of AT-GS950/16 Tagged VLAN Page
4. In the VLAN Action column, click Modify in the row of the VLAN that
you want to change.
The Modify VLAN Page is displayed, see Figure 27.
Figure 27. AT-GS950/16 Modify VLAN Page
5. You cannot modify the VLAN ID on this web page. If you want to delete
the VLAN ID, go to “Delete a Tagged VLAN” on page 87 for more
information.
85
Page 86
Chapter 5: Virtual LANs
6. To change the VLAN Name, type a new VLAN Name in the VLAN
Name field.
For more information about this field, refer to “VLAN Name” on
page 77.
86
Page 87
AT-GS950/16 Web Interface User Guide
Caution
Note
7. To change the Management VLAN assignment, select one of the
following choices from the pull-down menu:
Enable - This parameter enables Management VLAN on this
VLAN. The Management VLAN will be disabled on all other
VLANs and only be operational on this VLAN.
If you Enable the Management VLAN on this VLAN and you are
connected to a Tagged Member port, you may loose your
connection to the AT-S108 Version V1.1.0 Management software.
Disable - This parameter disables Management VLAN on this
VLAN. If you change this parameter from Enable to Disable, the
Management VLAN will be enabled on the DefaultVLAN
automatically.
Delete a Tagged
VLAN
The Management VLAN is always Enabled on the DefaultVLAN and
cannot be disabled.
8. To change the port selections, click on the port numbers labeled either
Static Tagged or Static Untagged.
9. Click Apply.
10. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
To delete a tagged VLAN, perform the following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select Tagged VLAN.
An example of the Tagged VLAN Page is shown in Figure 27 on page
85.
4. In the VLAN Action column, click delete
want to delete.
A confirmation prompt is displayed.
5. Click OK to delete the VLAN or Cancel to cancel the deletion.
next to the VLAN that you
87
Page 88
Chapter 5: Virtual LANs
Note
You cannot delete the Default VLAN which has a VID of 1.
6. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
88
Page 89
Tagged VLAN Port Settings
To configure a VLAN port that is a member of a Tagged VLAN, perform
the following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select Port Settings.
The VLAN folder expands.
From the VLAN folder, select Port Settings.
A partial view of the AT-GS950/16 VLAN Port Settings is displayed. See
Figure 28.
AT-GS950/16 Web Interface User Guide
Figure 28. AT-GS950/16 VLAN Port Setting Page
3. For a selected port, set the PVID field to an existing VLAN ID. For an
explanation of the PVID parameter, see the Port VLAN Identifier
section in “VLAN Overview” on page 76.
4. Set the Acceptable Frame Type to one of the following choices from
the pull-down menu:
All - This selection allows all incoming ingress frames presented to
the port to enter the switch.
Tagged - This selection allows only tagged frames presented to
the port to enter the switch. Untagged frames are discarded at
ingress.
Untagged and Priority Tagged - This selection allows only
untagged frames and frames with a priority tag that are presented
to the port to enter the switch. Tagged frames are discarded at
ingress.
5. From the Ingress Filtering parameter, select one of the following
choices from the pull-down menu:
Enable - This enables Ingress Filtering at the selected port.
89
Page 90
Chapter 5: Virtual LANs
Disable - This disables Ingress Filtering at the selected port.
6. Click Apply.
The port configuration becomes effective.
7. If you need to configure other ports of the switch for the VLAN Port
Settings, repeat steps 4 through 7.
8. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
90
Page 91
Port-Based VLAN Configuration
A port-based VLAN is a group of ports on the switch that form a logical
Ethernet segment. This type of VLAN is independent of the header
information including VLAN tags in a frame.
You can create and delete Port-Based VLANs by following the procedures
in the following sections:
“Create a Port-Based VLAN”
“Modify a Port-Based VLAN” on page 92
“Delete a Port-Based VLAN” on page 92
AT-GS950/16 Web Interface User Guide
Create a Port-
Based VLAN
To create a port-based VLAN, perform the following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select Port-Based VLAN.
The Port-Based VLAN Page is displayed. See Figure 29.
Figure 29. Port-Based VLAN Page
4. To assign a VLAN Index, type a VLAN ID in the VLAN Index field.
Choose a value between 1 and 64.
5. To assign a name to a VLAN, type a name in the VLAN Name field.
Enter a value of up to 32 characters. For more information about this
field, refer to “VLAN Name” on page 77.
6. To assign ports to the VLAN, click on the port numbers labeled Group
Member.
91
Page 92
Chapter 5: Virtual LANs
7. Click Apply.
8. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
Modify a Port-
Based VLAN
To modify the name or port assignments of a port-based VLAN, perform
the following procedure:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select Port-Based VLAN.
The Port-Based VLAN Page is shown in Figure 29 on page 91.
4. In the VLAN Action column, click Modify next to the VLAN that you
want to change.
The Modify Port-based VLAN Page is displayed. See Figure 30.
Delete a Port-
Based VLAN
92
Figure 30. AT-GS950/16 Modify Port-based VLAN
5. To change the name of the VLAN, type a new name in the VLAN
Name field.
Enter a value of up to 32 characters. For more information about this
field, refer to “VLAN Name” on page 77.
6. To assign ports to the VLAN, click on the port numbers labeled either
Group Member or Not Member.
7. Click Apply.
8. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
To delete a port-based VLAN, perform the following procedure:
1. From the main menu on the left side of the page, select Bridge.
Page 93
AT-GS950/16 Web Interface User Guide
Note
The Bridge folder expands.
2. From the Bridge folder, select VLAN.
The VLAN folder expands.
3. From the VLAN folder, select Port-Based VLAN.
The Port-Based VLAN Page is shown in Figure 29 on page 91.
4. In the VLAN Action column, click Delete next to the VLAN that you
want to delete.
A confirmation prompt is displayed.
5. Click OK to delete the VLAN or Cancel to cancel the deletion.
You cannot delete the Default VLAN which has a VID of 1.
6. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
93
Page 94
Chapter 5: Virtual LANs
94
Page 95
Chapter 6
GVRP
This chapter contains the following sections:
“Overview and Guidelines” on page 96
“General Configuration” on page 97
“Port Settings” on page 98
“Time Settings” on page 100
95
Page 96
Chapter 6: GVRP
Overview and Guidelines
The GARP VLAN Registration Protocol (GVRP) allows network devices to
share VLAN information and to use the information to modify existing
VLANs or create new VLANs, automatically. This makes it easier to
manage VLANs that span more than one switch. Without GVRP, you have
to manually configure your switches to ensure that the various parts of the
VLANs can communicate with each other across the different switches.
With GVRP, which is an application of the Generic Attribute Registration
Protocol (GARP), this is done for you automatically.
Here are the guidelines for GVRP:
GVRP is supported with STP or RSTP or without spanning tree.
Both ports the constitute a network link between the switch and the
other device must be running GVRP.
You cannot modify or delete dynamic GVRP VLANs.
You cannot remove dynamic GVRP ports from static or dynamic
VLANs.
To be detected by GVRP, a VLAN must have at least one active
node or have at least one port with a valid link to an end node.
GVRP cannot detect a VLAN that does not have any active nodes
or valid port links.
Resetting the switch erases all dynamic GVRP VLANs and
dynamic GVRP port assignments. The dynamic assignments are
relearned by the switch as PDUs arrive on the ports from other
switches.
GVRP has three timers: join timer, leave timer, and leave all timer.
The values for these timers must be identically configured on all
switches running GVRP. Timers with different values on different
switches can result in GVRP compatibility problems.
You can convert dynamic GVRP VLANs and dynamic GVRP port
assignments to static VLANs and static port assignments.
The default port setting on the switch for GVRP is active, meaning
that the ports participate in GVRP. Allied Telesis recommends
disabling GVRP on those ports that are connected to GVRPinactive devices, meaning devices that do not feature GVRP.
96
PDUs are transmitted from only those switch ports where GVRP is
enabled.
Page 97
General Configuration
Perform the following procedure to enable or disable GVRP:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select GVRP.
The GVRP folder expands.
3. From the GVRP folder, select GVRP Global Configuration.
The GVRP Global Configuration Page is displayed. See Figure 31.
AT-GS950/16 Web Interface User Guide
Figure 31. GVRP Global Configuration Page
4. From the GVRP Status field, select one of the following choices from
the pull-down menu:
Enable - The GVRP feature is active.
Disable - The GVRP feature is inactive.
5. Click Apply.
The GVRP setting that you have selected is now active.
6. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
97
Page 98
Chapter 6: GVRP
Port Settings
Perform the following procedure to configure the GVRP port settings:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select GVRP.
The GVRP folder expands.
3. From the GVRP folder, select Port Settings.
A partial view of the AT-GS950/16 Port Settings Page is displayed.
See Figure 32.
Figure 32. AT-GS950/16 Port Settings Page
4. The following fields are listed for each port:
Port - This parameter displays the ports on the switch.
Dynamic Vlan Status - This parameter defines the GVRP status
of the port. From the Dynamic Vlan Status field, select one of the
following choices from the pull-down menu:
Ignore - This parameter indicates that the setting in the All row
does not apply to the Dynamic Vlan Status field. In other
words, each port is set individually.
Enable - The Dynamic Vlan is activated for the port row
selected.
Disable - The Dynamic Vlan is de-active for the port row
selected.
Restricted VLAN Registration - This parameter controls if the
VLAN registration on the port is restricted or not.
Ignore - This parameter indicates that the setting in the All row
does not apply to the Restricted VLAN Registration field. In
other words, each port is set individually.
98
Enable - The Restricted VLAN Registration is active for the
Page 99
AT-GS950/16 Web Interface User Guide
port row selected.
Disable - The Restricted VLAN Registration is de-active for
the port row selected.
5. Once you have configured the parameters, click Apply for the affected
port.
6. If you want to configure GVRP for other ports, repeat steps 4 and 5.
7. From the main menu on the left side of the page, select Save
Configuration to Flash to permanently save your changes.
99
Page 100
Chapter 6: GVRP
Time Settings
Perform the following procedure to configure the GVRP port settings:
1. From the main menu on the left side of the page, select Bridge.
The Bridge folder expands.
2. From the Bridge folder, select GVRP.
The GVRP folder expands.
3. From the GVRP folder, select GVRP Time Setting.
A partial view of the AT-GS950/16 GVRP Time Setting Page is
displayed. See Figure 33.
Figure 33. AT-GS950/16 GVRP Time Setting Page
GARPLeaveTimer must be greater than (GARPJoinTimer x2 + 10).
GARPLeaveAllTimer must be greater than (GARPLeaveTimer + 10).
The acceptable input values are multiples of 10. If you try to enter a
value that is not a multiple of 10, the value will be rounded down.
4. The following fields are listed for each port:
Port - This parameter displays the ports on the switch.
GarpJoinTime - This parameter is the GARP Join Timer. Its range
is 10 - 1073741810 milli-seconds.
GarpLeaveTime - This parameter is the GARP Leave Timer. Its
range is 30 - 2147483630 milli-seconds. This timer must be set in
relation to the GVRP Join Timer according to the following
equation:
GARPLeaveTimer >= (GARPJoinTimer X 2) + 10
GarpLeaveAllTime - This parameter is the GARP Leave Timer.Its
range si 30 - 2147483630 milli-seconds. This timer must be set in
relation to the GVRP Leave Timer according to the following
100
Loading...