For use with the AT-GS950/8POE
Gigabit Ethernet WebSmart Switch
Version 1.0.0
613-000985 Rev. A
Copyright 2008 Allied Telesis, Inc.
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc.
Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated. All other product names, company names, logos or
other designations mentioned herein are trademarks or registered trademarks of their respective owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior
written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc.be liable for any
incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this
manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility of
such damages.
Where to Find Web-based Guides .......................................................................................................................................11
Online Support ..............................................................................................................................................................12
Email and Telephone Support .......................................................................................................................................12
Sales or Corporate Information .....................................................................................................................................12
Chapter 1: Starting a Web Browser Management Session ............................................................................................13
Establishing a Remote Connection to the Web Browser Interface .......................................................................................14
Web Browser Tools ..............................................................................................................................................................18
Quitting a Web Browser Management Session ....................................................................................................................19
Configuring an IP Address, Subnet Mask and Gateway Address ........................................................................................22
Setting Up the IP Access List ...............................................................................................................................................24
Creating an IP Access List ............................................................................................................................................24
Deleting an IP Address..................................................................................................................................................26
Enabling and Disabling the DHCP Client..............................................................................................................................27
Configuring System Management Information .....................................................................................................................29
Configuring System Administration Information....................................................................................................................31
Adding System Administration Information....................................................................................................................31
Modifying Administration Information ............................................................................................................................32
Setting the User Interface Configuration.......................................................................................
Viewing System Information .................................................................................................................................................36
Rebooting a Switch...............................................................................................................................................................39
Pinging a Remote System ....................................................................................................................................................41
Returning the AT-S101 Management Software to the Factory Default Values ....................................................................44
Displaying Ports and Assigning Ports to a VLAN .................................................................................................................50
Creating a Tagged VLAN .....................................................................................................................................................51
Modifying a Tagged VLAN....................................................................................................................................................53
Deleting a Tagged VLAN......................................................................................................................................................55
Creating a Port-Based VLAN................................................................................................................................................56
Modifying a Port-Based VLAN..............................................................................................................................................57
Deleting a Port-Based VLAN ................................................................................................................................................59
Chapter 4: Quality of Service (QoS) .................................................................................................................................61
Mapping CoS Priorities to Egress Queues ...........................................................................................................................65
Configuring CoS ...................................................................................................................................................................67
3
Contents
Chapter 5: Port Configuration ..........................................................................................................................................71
Displaying and Configuring Ports Using the Port Configuration Page ..................................................................................73
Chapter 6: Port Trunking ...................................................................................................................................................77
Port Trunking Overview ........................................................................................................................................................78
Static Port Trunk Overview............................................................................................................................................78
Creating a Port Trunk............................................................................................................................................................80
Modifying a Port Trunk..........................................................................................................................................................82
Disabling a Port Trunk ..........................................................................................................................................................84
Chapter 7: LACP Port Trunks ...........................................................................................................................................85
LACP System Priority ...........................................................................................................................................................90
LACP Port Priority Value.......................................................................................................................................................90
Displaying LACP Group Status.............................................................................................................................................94
Selecting Port Priority ...........................................................................................................................................................96
Community String Attributes ...............................................................................................................................................101
Community String Name..............................................................................................................................................101
Open or Closed Access Status....................................................................................................................................101
Default SNMP Community Strings......................................................................................................................................103
Creating an SNMP Community...........................................................................................................................................104
Modifying an SNMP Community.........................................................................................................................................105
Deleting an SNMP Community ...........................................................................................................................................106
Creating a Host Table.........................................................................................................................................................107
Modifying a Host Table Entry..............................................................................................................................................108
Deleting a Host Table Entry................................................................................................................................................109
Enabling or Disabling Traps................................................................................................................................................110
Chapter 10: Bandwidth Control ......................................................................................................................................119
Setting Bandwidth Control ..................................................................................................................................................121
Chapter 11: Port Mirroring ..............................................................................................................................................123
Configuring Port Mirroring...................................................................................................................................................125
Disabling Port Mirroring ......................................................................................................................................................126
Chapter 12: Static Multicast MAC Address ...................................................................................................................127
Bridge Priority and the Root Bridge ....................................................................................................................................135
Path Costs and Port Costs ..........................................................................................................................................136
4
AT-S101 Management Software User’s Guide
Port Priority..................................................................................................................................................................136
Forwarding Delay and Topology Changes .........................................................................................................................138
Hello Time and Bridge Protocol Data Units (BPDU)....................................................................................................138
Point-to-Point and Edge Ports.....................................................................................................................................139
Mixed STP and RSTP Networks.........................................................................................................................................142
Spanning Tree and VLANs.................................................................................................................................................143
Basic STP and RSTP Configuration...................................................................................................................................145
Configuring RSTP Port Settings .........................................................................................................................................148
Configuring the Basic RSTP Port Settings ..................................................................................................................148
Configuring the Advanced RSTP Port Settings...........................................................................................................150
Viewing the Spanning Tree Topology.................................................................................................................................154
Chapter 14: 802.1x Port-based Network Access Control .............................................................................................157
General Steps .............................................................................................................................................................161
Port-based Network Access Control Guidelines..........................................................................................................161
Configuring the RADIUS Client...........................................................................................................................................171
Chapter 16: Destination MAC Filter ...............................................................................................................................173
Configuring a Destination MAC Filter .................................................................................................................................175
Deleting a Destination MAC Filter.......................................................................................................................................177
Chapter 17: Power over Ethernet (PoE) .........................................................................................................................179
Power Budgeting .........................................................................................................................................................181
Setting Power over Ethernet...............................................................................................................................................182
Creating an In-profile Action ...............................................................................................................................................201
Creating an Out-Profile Action............................................................................................................................................203
Creating an Access Control Port List..................................................................................................................................205
Creating a Policy ................................................................................................................................................................206
Displaying a Policy Sequence ............................................................................................................................................208
Upgrading a Firmware Image Using HTTP.........................................................................................................................211
Upgrading a Firmware Image Using TFTP .........................................................................................................................213
Downloading or Uploading a Configuration File via HTTP .................................................................................................215
Downloading or Uploading a Configuration File via TFTP..................................................................................................217
Displaying Error Group Statistics........................................................................................................................................225
Displaying Historical Status Charts.....................................................................................................................................227
Index ................................................................................................................................................................................. 235
6
Figures
Figure 1: Entering a Switch’s IP Address in the URL Field...................................................................................................14
Figure 3: Switch Information Page........................................................................................................................................16
Figure 4: Front Panel Page ..................................................................................................................................................17
Figure 5: IP Setup Page .......................................................................................................................................................22
Figure 6: IP Access List Page ..............................................................................................................................................24
Figure 10: User Interface Page ............................................................................................................................................34
Figure 11: Switch Information Page......................................................................................................................................36
Figure 17: Example of Tagged VLAN Page..........................................................................................................................52
Figure 21: CoS Page ............................................................................................................................................................65
Figure 22: Default Port VLAN & CoS Page ..........................................................................................................................67
Figure 26: Example of Multiple Aggregators for Multiple Aggregate Trunks ........................................................................87
Figure 27: Example of an Aggregator with Multiple Trunks..................................................................................................88
Figure 28: LACP Group Status Page ...................................................................................................................................94
Figure 29: LACP Group Status Page with Key 1..................................................................................................................95
Figure 30: Port Priority Page ................................................................................................................................................96
Figure 31: Community Table Page.....................................................................................................................................104
Figure 35: IGMP Snooping Page with MAC Address .........................................................................................................117
Figure 36: IGMP Snooping —Group Members Page .........................................................................................................117
Figure 37: Bandwidth Control Page....................................................................................................................................121
Figure 42: Edge Port ..........................................................................................................................................................140
Figure 43: Point-to-Point and Edge Port.............................................................................................................................141
Figure 45: Rapid Spanning Tree Configuration Page.........................................................................................................145
Figure 46: RSTP Basic Port Configuration Page................................................................................................................148
Figure 47: RSTP Advanced Port Configuration Page.........................................................................................................151
Figure 48: Designated Topology Information Page ............................................................................................................154
Figure 49: Example of the Authenticator Role....................................................................................................................160
Figure 50: Port-based Authentication Across Multiple Switches ........................................................................................163
......................................116
7
Figures
Figure 51: 802.1x Access Control Configuration Page.......................................................................................................165
Figure 53: Destination MAC Filter Page .............................................................................................................................175
Figure 54: Updated Destination MAC Filter Page...............................................................................................................175
Figure 55: Power Over Ethernet Configuration Page .........................................................................................................182
Figure 56: User Priority and VLAN Fields within an Ethernet Frame..................................................................................188
Figure 57: DSCP value in an IP Header .............................................................................................................................189
Figure 62: Create Port List Page ........................................................................................................................................205
Figure 71: Error Group Chart Page.....................................................................................................................................225
Figure 72: Historical Status Chart Page..............................................................................................................................227
8
Preface
The AT-S101 Management Software is the operating system for the
AT-GS950/8POE Gigabit Ethernet WebSmart Switch. This guide explains
how to use the management software to control and monitor the operating
parameters of the AT-GS950/8POE switch.
This Preface contains the following sections:
“Document Conventions” on page 10
“Where to Find Web-based Guides” on page 11
“Contacting Allied Telesis” on page 12
9
Preface
Document Conventions
This document uses the following conventions:
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
10
Where to Find Web-based Guides
The installation and user guides for all Allied Telesis products are available
in portable document format (PDF) on our web site at
www.alliedtelesis.com. You can view the documents online or download
them onto a local workstation or server.
For details about the features and functions of the AT-GS950/8POE
switch, see the following installation guides on our web site:
This section provides Allied Telesis contact information for technical
support as well as sales and corporate information.
Online SupportYou can request technical support online by accessing the Allied Telesis
Knowledge Base: www.alliedtelesis.com/support/kb.aspx. You can use
the Knowledge Base to submit questions to our technical support staff and
review answers to previously asked questions.
Email and
Telephone
Support
WarrantyThe AT-GS950/8POE Gigabit Ethernet WebSmart Switch is covered
Returning
Products
Sales or
Corporate
Information
Management
Software Updates
For Technical Support via email or telephone, refer to the Support section
of the Allied Telesis web site: www.alliedtelesis.com.
under a Lifetime Warranty (Two Years Fan & Power Supply). For warranty
information, go to the Allied Telesis web site at www.alliedtelesis.com.
Products for return or repair must first be assigned a return materials
authorization (RMA) number. A product sent to Allied Telesis without an
RMA number will be returned to the sender at the sender’s expense. For
instructions on how to obtain an RMA number, go to the Support section
on our web site at www.alliedtelesis.com/support.rma.aspx.
You can contact Allied Telesis for sales or corporate information through
our web site at www.alliedtelesis.com.
New releases of the management software for our managed products are
available from the following Internet sites:
If the FTP server prompts you to log on, enter “anonymous” as the user
name and your email address as the password.
Chapter 1
Starting a Web Browser Management
Session
This chapter contains the procedures for starting, using, and quitting a web
browser management session on the AT-GS950/8POE switch. This
chapter includes the following sections:
“Establishing a Remote Connection to the Web Browser Interface” on
page 14
“Web Browser Tools” on page 18
“Quitting a Web Browser Management Session” on page 19
13
Chapter 1: Starting a Web Browser Management Session
Establishing a Remote Connection to the Web Browser Interface
The AT-GS950/8POE switch is shipped with a pre-assigned IP address of
192.168.1.1. You must set your local PC on the same subnet as the preassigned IP address for your initial logon.
After your initial login, you may want to assign a new IP address to your
switch. To manually assign an IP address to the switch, refer to
“Configuring an IP Address, Subnet Mask and Gateway Address” on
page 22. To configure the switch to obtain its IP configuration from a
DHCP server, refer to “Enabling and Disabling the DHCP Client” on
page 27.
You must set your local PC to the same subnet as the preassigned IP
address.
Note
Enhanced stacking, a feature of other Allied Telesis Layer 2 and
Layer 2+ managed switches, is not supported by the AT-GS950/
8POE switch.
Switch’s IP Address
To start a web browser management session, perform the following
procedure:
1. Start your web browser.
2. In the URL field of the browser, enter 192.168.1.1 which is the default
IP address of the switch. See Figure 1.
Figure 1. Entering a Switch’s IP Address in the URL Field
14
AT-S101 Management Software User’s Guide
The AT-S101 Management Software displays the login dialog box,
shown in Figure 2.
Figure 2. AT-S101 Login Dialog Box
3. Enter the AT-S101 management login user name and password. The
default user name is “manager” and the default password is “friend.”
Then press OK. The login name and password are case-sensitive.
The Switch Information Page is displayed. See Figure 3 on page 16.
15
Chapter 1: Starting a Web Browser Management Session
To change the user name and password, refer to “Configuring System
Management Information” on page 29.
16
Figure 3. Switch Information Page
The main menu is on the left side of the home page. It consists of the
following folders and web pages:
Switch Info.
Front Panel
System
Physical Interface
Bridge
SNMP
Access Control Config.
Security
Power Over Ethernet
Statistics Chart
AT-S101 Management Software User’s Guide
Tools
Save Configuration
4. To see the front panel of the switch, select Front Panel from the menu
on the left side of the page.
The AT-S101 Management Software displays the front of the switch.
The window contains an image of the front of the switch. Ports that
have a link to an end node are green. Ports without a link are grey. An
example of a front panel is shown in Figure 4.
Figure 4. Front Panel Page
A web browser management session remains active even if you link to
other sites. You can return to the management web pages anytime as long
as you do not quit the browser.
17
Chapter 1: Starting a Web Browser Management Session
Web Browser Tools
You can use the web browser tools to move around the management
pages. Selecting Back on your browser’s toolbar returns you to the
previous display. You can also use the browser’s bookmark feature to
save the link to the switch.
18
Quitting a Web Browser Management Session
To exit a web browser management session, close the web browser.
AT-S101 Management Software User’s Guide
19
Chapter 1: Starting a Web Browser Management Session
20
Chapter 2
Basic Switch Parameters
This chapter provides procedures to perform basic switch activities such
as reassigning the IP address, enabling the DHCP Client, configuring new
usernames and passwords, and rebooting the system.
This chapter contains the following sections:
“Configuring an IP Address, Subnet Mask and Gateway Address” on
page 22
“Setting Up the IP Access List” on page 24
“Enabling and Disabling the DHCP Client” on page 27
“Configuring System Management Information” on page 29
“Configuring System Administration Information” on page 31
“Setting the User Interface Configuration” on page 34
“Viewing System Information” on page 36
“Rebooting a Switch” on page 39
“Pinging a Remote System” on page 41
“Returning the AT-S101 Management Software to the Factory Default
Values” on page 44
Note
To save your changes, select Save Configuration to Flash from
the menu on the left side of the page.
21
Chapter 2: Basic Switch Parameters
Configuring an IP Address, Subnet Mask and Gateway Address
This procedure explains how to change the IP address, subnet mask, and
gateway address to the switch. Before performing the procedure, note the
following:
A gateway address is only required if you want to remotely manage
the device from a management station that is separated from the
switch by a router.
To configure the switch to automatically obtain its IP configuration from
a DHCP server on your network, go to “Enabling and Disabling the
DHCP Client” on page 27.
To change the switch’s IP configuration, perform the following procedure:
1. From the menu on the left side of the page, click the System folder.
The System folder expands.
2. From the System folder, select IP Setup.
The IP Setup Page is shown in Figure 5.
22
Figure 5. IP Setup Page
AT-S101 Management Software User’s Guide
3. Change the IP configuration parameters by entering new information in
the following fields:
System MAC Address
This parameter displays the MAC address of the switch. You cannot
change this parameter.
System IP Address
Displays the current IP address of the switch. To change the IP
address, enter a new IP address.
System Subnet Mask
Displays the current subnet mask of the switch. To change the subnet
mask, enter a new subnet mask.
System Default Gateway
Displays the default gateway of the switch. To change the default
gateway, enter a new gateway.
DHCP Mode
For information about setting this parameter, refer to “Enabling and
Disabling the DHCP Client” on page 27.
4. Click Apply.
Note
Changing the IP address ends your management session. To
resume managing the device, enter the new IP address of the switch
in the web browser’s URL field, as shown in Figure 1 on page 14.
5. After you log on to the switch with the new IP address, select Save
Configuration to Flash to save the new IP address to memory.
Caution
If you do not select Save Configuration to Flash, the IP address
may revert to its default setting when you power cycle the switch.
23
Chapter 2: Basic Switch Parameters
Setting Up the IP Access List
The IP Access List feature, when enabled, restricts remote access to
management software by means of a user-configured list of IP addresses.
It does not restrict the management ping response activity, only web
access to the management software.
Note
By default, the IP Access List feature is disabled.
The procedures in this section describe how to enable or disable the IP
Access List feature and how to add or remove IP addresses from the list.
See the following sections:
“Creating an IP Access List” on page 24
“Deleting an IP Address” on page 26
Creating an IP
Access List
Note
You cannot modify an existing IP address.
To create a list of restricted IP addresses, perform the following
procedure:
1. From the menu on the left side of the page, click the System folder.
The System folder expands.
2. From the System folder, select IP Access List.
The IP Access List Page is shown in Figure 6.
24
Figure 6. IP Access List Page
AT-S101 Management Software User’s Guide
3. To set the IP restriction status, select Disable or Enable in the pulldown menu next to the IP Restriction Status field. Then click Apply.
By default, the IP Restriction Status field is set to Disable.
4. Enter an IP address that you want to prevent from accessing the
switch in the xxx.xxx.xxx.xxxx format next to the IP Address field.
Then click Add.
The IP address is added to the IP Access List Table.
5. From the menu on the left side of the page, select Save Configuration to Flash to save your changes.
25
Chapter 2: Basic Switch Parameters
Deleting an IP
Address
To delete an IP address from the IP Access List, perform the following
procedure:
1. From the menu on the left side of the page, click the System folder.
The System folder expands.
2. From the System folder, select IP Access List.
The IP Access List Page is displayed. See Figure 6 on page 24.
3. Select delete
The IP address is removed from the IP Access List Table.
4. From the menu on the left side of the page, select Save Configuration to Flash to save your changes.
next to the IP address that you want to remove.
26
Enabling and Disabling the DHCP Client
Since the AT-GS950/8POE switch is a web-only switch and does not have
a local console connection, you must be careful when you change the
IP address of the switch by enabling the DHCP client. To look up the IP
address on a DHCP server, you must have the MAC address of the ATGS950/8POE switch. Once the switch obtains a new IP address from the
DHCP server, the switch becomes inaccessible and the MAC address can
no longer be viewed in the AT-S101 software.
Before you enable the DHCP client, record the switch’s MAC address. You
can view the MAC address on the System Information Page when you first
log onto the switch. See “Viewing System Information” on page 36. Or, you
can see the MAC address on the label affixed to the switch.
If the switch power cycles before you save the new configuration, the
software reverts to the default IP address value. Or, if you press the Reset
button before you save the DHCP client on the switch, the software reverts
the default IP address value. In either case, the IP address value is
192.168.1.1.
AT-S101 Management Software User’s Guide
This procedure explains how to activate and deactivate the DHCP client
on the switch. When the client is activated, the switch obtains its IP
configuration, its IP address and subnet mask, from a DHCP server on
your network. Before performing the procedure, note the following:
By default, the DHCP client is disabled on the switch.
The DHCP client does not support BOOTP.
After you enable DHCP, you will end the current management session.
Log on with the new IP address (provided by your system
administrator) using the procedure described in “Establishing a
Remote Connection to the Web Browser Interface” on page 14.
Caution
Record the MAC address of your switch before you begin this
procedure.
To activate or deactivate the DHCP client on the switch, perform the
following procedure:
1. From the menu on the left side of the page, click the System folder.
The System folder expands.
2. From the System folder, select IP Setup.
The IP Setup Page is shown in Figure 5 on page 22.
27
Chapter 2: Basic Switch Parameters
3. From the pull-down menu next to the DHCP Mode field, select Enable
or Disable.
By default, this field is set to Disable.
4. Click Apply.
If you enable the DHCP client, the web server connection to the switch
is lost.
If you disable the DHCP client, note the new System IP Address
value that you assigned to the switch. Record this value for future use.
Caution
Enabling or disabling DHCP ends your management session.
Caution
If you do not select Save Configuration to Flash, the DHCP mode
reverts to its default setting of 192.168.1.1 when you power cycle
the switch.
5. Log on to the switch with the new IP address and immediately save
your configuration by selecting Save Configuration to Flash from the
menu on the left side of the page.
If you enable DHCP and then save your configuration, you save the IP
address on the DHCP server.
If you disable DHCP, enter a new IP address, and then save your
configuration, you have saved the DHCP setting and the new IP
address on the switch.
28
Configuring System Management Information
This section explains how to assign a name to the switch, as well as the
location of the switch and the name of the switch’s administrator. Entering
this information is optional.
To set a switch’s administration information, perform the following
procedure:
1. From the menu on the left side of the page, click the System folder.
The System folder expands.
2. From the System folder, select Management.
The Management Page is shown in Figure 7.
AT-S101 Management Software User’s Guide
Figure 7. Management Page
3. Configure the following parameters as necessary:
System Description
Specifies the model number of the switch. You cannot change this
parameter.
System Object ID
Indicates the unique SNMP MIB object that identifies the AT-GS950/
8POE switch model. You cannot change this parameter.
System Name
Specifies a name for the switch, for example, Sales. The name is
optional and may contain up to 50 characters.
29
Chapter 2: Basic Switch Parameters
Note
Allied Telesis recommends that you assign a name to the switch. A
name can help you identify the switch when you manage it and can
also help you avoid performing a configuration procedure on the
wrong switch.
System Location
Specifies the location of the switch. The location is optional and may
contain up to 50 characters.
System Contact
Specifies the name of the network administrator responsible for
managing the switch. This contact name is optional and may contain
up to 50 characters.
4. Click Apply.
5. From the menu on the left side of the page, select Save Configuration to Flash to save your changes.
30
Loading...
+ 208 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.