FOR USE WITH THE AT-8324SX FAST ETHERNET
SWITCH PRODUCT
VERSION 1.12
PN 613-50115-00 Rev A
Copyright 2000 Allied Telesyn International, Corp.
960 Stewart Drive Suite B, Sunnyvale, CA 94086 USA
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn International, Corp.
Com is a registered trademark of Allied Telesyn International, Corp.
Centre
Internet Explorer is a trademark of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product
names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners.
Allied Telesyn International, Corp. reserves the right to make changes in specifications and other information contained in this document without prior written notice.
The information provided herein is subject to change without notice. In no event shall Allied Telesyn International, Corp. be liable for any incidental, special, indirect, or
consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied
Telesyn International, Corp. has been advised of, known, or should have known, the possibility of such damages.
Table of Contents
Preface
Supported Platform
Purpose of This Guide
How This Guide is Organized
Where to Find Web-based Guides
Document Conventions
Contacting Allied Telesyn Technical Support
Returning Products
FTP Server
For Sales or Corporate Information
Tell Us What You Think
............................................................................................................................................................ x
.......................................................................................................................................................................................... xii
............................................................................................................................................................... xii
........................................................................................................................................................................................... xii
........................................................................................................................................................ xv
This guide contains instructions on how to use the AT-S29 software to
manage and configure your AT-8324SX Fast Ethernet Switch.
Version 1.12 of the AT-S29 software is supported on the following Fast
Ethernet switch:
❑
AT-8324SX Fast Ethernet Switch
This version supports the following optional modules for the switch:
❑
AT-BMGMT Management Module
❑
AT-BSTACK1 Stacking Module
❑
AT-B15/SX 1000Base-X Gigabit Expansion Module
❑
AT-B15/LX 1000Base-X Gigabit Expansion Module
❑
AT-B17 100Base-FX Expansion Module
vii
Preface
Purpose of This Guide
This guide is intended for network administrators who are responsible
for managing the switches. Network administrators should be familiar
with Ethernet switches, Ethernet and Fast Ethernet technology,
bridging, and the Spanning Tree Protocol (STP).
viii
How This Guide is Organized
This guide contains the following chapters and appendices:
AT-S29 Management Software User’s Guide
Chapter 1,
Switch Management
, explains switch configuration options
and required switch connections.
Chapter 2,
Using the System Configuration Program
, describes how
to configure the switch and its ports using the Telnet program or by
connecting a terminal to the console port on the management module.
Chapter 3,
Web-Based Management
, explains how to configure the
switch and its ports using a Web browser.
Chapter 4,
Advanced Topics
, describes networking concepts such as
spanning tree algorithm and virtual LANs, SNMP, and RMON.
Appendix A,
Troubleshooting
, describes known problems and
recommended solutions.
Appendix B,
Pin Assignments
, briefly describes different wiring
assignments.
ix
Preface
Where to Find Web-based Guides
The Allied Telesyn web site at www.alliedtelesyn.com offers you an easy
way to access the most recent documentation and technical information
for all of our products. All web-based documentation for this product
and other Allied Telesyn products can be downloaded from the web site
in pdf format.
There are several manuals that you will need in order to manage your
Ethernet switch. Some guides are shipped with their respective
products, while other manuals, such as this one, are only available from
the Allied Telesyn web site.
The following manual contains the complete hardware installation
instructions for the switch. You can obtain this manual from the Allied
Telesyn web site.
❑
AT-8324SX Fast Ethernet Switch Installation Guide
,
PN 613-50118-00
The following manual is shipped with the switch and contains an
abbreviated version of the installation instructions:
❑
AT-8324SX Fast Ethernet Switch Quick Install Guide
,
PN 613-50120-00
x
Document Conventions
This guide uses several conventions that you should become familiar
with first before you begin to install the product.
Note
Notes provide additional information.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
AT-S29 Management Software User’s Guide
xi
Preface
Contacting Allied Telesyn Technical Support
There are several ways that you can contact Allied Telesyn technical
support: online, telephone, fax and e-mail.
Online Support
Telephone and
Fax Support
You can request technical support online by filling out the Technical
Support Form at www.alliedtelesyn.com/forms/support.htm.
Americas
United States, Canada, Mexico,
Central America, South America
Tel:1 (800) 428-4835, option 4
Fax: 1 (503) 639-3176
Asia
Singapore, Taiwan, Thailand, Malaysia,
Indonesia, Korea, Philippines, China,
India, Hong Kong
Tel:(+65) 381-5612
Fax: (+65) 383-3830
Australia
Tel:1 (800) 000-880
Fax: (+61) 2-9438-4966
France
France, Belgium, Luxembourg,
The Netherlands, Middle East,
Africa
Tel:(+33) 0-1-60-92-15-25
Fax: (+33) 0-1-69-28-37-49
Germany
Germany, Switzerland, Austria, Eastern
Europe
Tel:(+49) 0130/83-56-66
Fax: (+49) 30-435-900-115
United Kingdom, Denmark, Norway,
Sweden, Finland
Tel:(+0044) 1235-442500
Fax: (+44) 1-235-442680
l
E-mail Support
xii
United States and Canada
TS1@alliedtelesyn.com
Latin America, Mexico, Puerto Rico, Caribbean, and Virgin Islands
latin_america@alliedtelesyn.com
United Kingdom, Sweden, Norway, Denmark, and Finland
support_europe@alliedtelesyn.com
Returning Products
AT-S29 Management Software User’s Guide
Products for return or repair must first be assigned a Return Materials
Authorization (RMA) number. A product sent to Allied Telesyn without a
RMA number will be returned to the sender at the sender’s expense.
To obtain an RMA number, contact Allied Telesyn’s Technical Support at
one of the following locations:
North America
2205 Ringwood Ave
San Jose, CA 95131
Tel:1-800-428-4835, option 4
Fax: 1-503-639-3716
Latin America, the Caribbean,
Virgin Islands
Tel:international code + 425-481-3852
Fax: international code + 425-483-9458
European Customer Support Centre
10/11 Bridgemead Close
Westmead Industrial Estate
Swindon, Wiltshire SN5 7YT
England
Tel:+44-1793-501401
Fax: +44-1793-431099
If you need a driver for an Allied Telesyn device and you know the name
of the driver, you can download the software by connecting directly to
our FTP server at ftp://gateway.centre.com.
At login, enter ‘anonymous’. Enter your e-mail address for the password
as requested by the server at login.
xiv
For Sales or Corporate Information
AT-S29 Management Software User’s Guide
Allied Telesyn International, Corp.
19800 North Creek Parkway, Suite 200
Bothell, WA 98011
Tel:1 (425) 487-8880
Fax: 1 (425) 489-9191
Allied Telesyn International, Corp.
960 Stewart Drive, Suite B
Sunnyvale, CA 94086
Tel:1 (800) 424-4284 (USA and Canada
Fax: 1 (408) 736-0100
)
xv
Preface
Tell Us What You Think
If you have any comments or suggestions on how we might improve this
or other Allied Telesyn documents, please fill out the Send Us Feedback
Form at www.alliedtelesyn.com/forms/feedback.htm.
xvi
Chapter 1
Switch Management
Configuration Options
For advanced management capability, the AT-8324SX switch’s
AT-BMGMT Management Module provides a menu-driven system
configuration program. This program can be accessed by a direct or
modem connection to the serial port on the management module (outof-band), or by a Telnet connection over the network (in-band).
The management module is based on SNMP (Simple Network
Management Protocol). This SNMP agent permits a switch stack to be
managed from any PC in the network using in-band management
software.
The management module also includes an embedded HTTP Web agent.
This Web agent can be accessed using a standard Web browser from any
computer attached to the network.
The system configuration program and the SNMP agent support
management functions such as:
❑
Enable/disable any port
❑
Set the communication mode for any port
❑
Configure SNMP parameters
❑
Select VLANs or multicast filtering
❑
Display system information or statistics
❑
Configure the switch to join a Spanning Tree Domain
❑
Download system firmware
❑
Restart the system
17
Switch Management
Making Connections for System Configuration
The switch includes a menu-driven configuration program. The ASCII
interface to this program can be accessed by making a direct connection
to the serial port on the Network Management Module, or by a Telnet
connection to the switch over the network.
This section describes how to access the menu-driven configuration
program via:
❑
Serial connection: A terminal or workstation connected to the
serial port on the Network Management Module.
❑
Telnet connection: A workstation connected to a remote switch
via a Telnet connection.
It also describes how to access the embedded Web agent over the
network using any standard browser, or with the provided network
management software or other third-party management software.
Serial Connection
In-Band
Connections
Attach a VT100 compatible terminal or a PC running a terminal
emulation program to the serial port on the Network Management
Module. Use the null-modem cable provided with this package, or use a
null modem connection that complies with the wiring assignments
shown in Appendix B, Pin Assignments of this guide.
When attaching to a PC, set terminal emulation type to VT100, specify
the port used by your PC (i.e., COM 1~4), and then set communications
to 8 data bits, 1 stop bit, no parity, and 9600 bps (for initial
configuration). Also be sure to set flow control to "none." (Refer to
Configuring the Serial Port
on page 33 for a complete description of
configuration options.)
Prior to accessing the Network Management Module via a network
connection, you must first configure it with a valid IP address, subnet
mask, and default gateway using an out-of-band connection or the
BootP protocol.
Telnet Connection
After configuring the switch’s IP parameters, you can access the onboard configuration program from anywhere within the attached
network using Telnet.
18
Note
Use the Network Configuration menu to specify the maximum
number of simultaneous Telnet sessions that are supported by the
system.
In-Band Network Connection
The on-board configuration program can be accessed using Telnet from
any computer attached to the network. The switch and stack can also be
managed by any computer using a Web browser (Internet Explorer 4.0
or above, or Netscape Navigator 4.0 or above), or from a network
computer using network management software.
Note
The on-board program only provides access to basic configuration
functions. To access the full range of SNMP management functions,
you must use SNMP-based network management software.
19
Chapter 2
AT-8324SX version 1.12
V1.12 05-10-2000 (c) Copyright by Allied Telesyn
User Name :
Password :
Using the System Configuration
Program
Login Screen
Once a direct connection to the serial port or a Telnet connection is
established, the login screen for the on-board configuration program
appears. If this is your first time to log into the configuration program,
then the default user names are "admin" and "guest," with no password.
The administrator has Read/Write access to all configuration parameters
and statistics, while the guest has Read Only access to the management
program.
You should define a new administrator password, record it and put it in a
safe place. Select Console Login Configuration from the Management
Setup Menu and enter a a new password for the administrator. Note that
passwords can consist of up to 11 alphanumeric characters and are not
case sensitive.
Based on the default configuration, a user is allowed three attempts
to enter the correct password; on the third failed attempt the current
connection is terminated.
Note
21
Using the System Configuration Program
Main Menu
With the system configuration program you can define system
parameters, manage and control the switch, the connected stack and all
its ports, or monitor network conditions. The figure below of the Main
Menu and the following table briefly describe the selections available
from this program.
Note
Options for the currently selected item are displayed in the
highlighted area at the bottom of the interface screen.
Main Menu
=========
System Information Menu ...
Management Setup Menu ...
Device Control Menu ...
Network Monitor Menu ...
Restart System Menu ...
Exit
Use <TAB> or arrow keys to move. <Enter> to select.
22
AT-S29 Management Software User’s Guide
MenuDescription
System Information Menu:
System InformationProvides basic system description, including contact information.
Switch InformationShows hardware/firmware version numbers, power status, and
Serial Port ConfigurationSets communication parameters for the serial port, including
management mode, baud rate, console time-out, and screen data
refresh interval.
SNMP Configuration Activates traps; and configures communities and trap managers.
Console Login
Configuration
Sets the user names and passwords for system access, as well as the
invalid password threshold and lockout time.
TFTP Download Downloads new version of firmware to update your system (in-
band).
Device Control Menu:
Port Configuration Enables any port, enables/disables flow control, and sets
communication mode to auto-negotiation, full duplex or half
duplex.
Port InformationDisplays operational status, including link state, flow control
method, and duplex mode.
Spanning Tree
Configuration
Enables Spanning Tree Algorithm; also sets parameters for hello
time, maximum message age, switch priority, and forward delay; as
well as port priority and path cost.
Spanning Tree
Displays full listing of parameters for Spanning Tree Algorithm.
Information
Mirror Port ConfigurationSpecifies the source and target ports for mirroring.
Displays/configures extended bridge capabilities provided by this
switch, including support for traffic classes, GMRP multicast
filtering, and VLAN extensions.
802.1P ConfigurationConfigures default port priorities and queue assignments.
23
Using the System Configuration Program
MenuDescription
802.1Q VLAN Base
Information
802.1Q VLAN Current
Displays basic VLAN information, such as VLAN version number and
maximum VLANs supported.
Displays VLAN groups and port members.
Table Information
802.1Q VLAN Static Table
Configuration
Configures VLAN groups via static assignments, including setting
port members, or restricting ports from being dynamically added
to a port by the GVRP protocol.
802.1Q VLAN Port
Configuration
Displays/configures port-specific VLAN settings, including PVID,
ingress filtering, and GVRP.
Port GARP Configuration1Configures settings used in multicast filtering.
Port GMRP Configuration1Configures GMRP multicast filtering.
Network Monitor Menu:
Port StatisticsDisplays statistics on network traffic passing through the selected
port.
RMON StatisticsDisplays detailed statistical information for the selected port such
as packet type and frame size counters.
Unicast Address Table Provides full address listing, as well as search and clear functions.
Multicast Address
Registration Table
1
IP Multicast Registration
Table
Static Unicast Address
Table Configuration
Static Multicast Address
Table Configuration
1
Restart System
Exit
1. Not implemented in this firmware release.
-
Displays all the multicast groups active on this switch, including
multicast IP addresses and corresponding VLAN IDs.
Used to manually configure host MAC address in the unicast table.
-
Restarts system with options to use POST, or to retain factory
defaults, IP settings, or user authentication settings.
Exits the configuration program.
24
System Information Menu
System Information Menu
=======================
System Information ...
Switch Information ...
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
System Information
==================
System Description : AT-8324SX version 1.12
System Object ID: 1.3.6.1.4.1.207.1.4.42
System Up Time: 48067 (0 day, 1 hr, 2min, 34 sec)
System Name: Engineering Unit #001
System Contact: MIS Dept.
System Location: Lab #3
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
Use the System Information Menu to display a basic description of the
switch, including contact information, and hardware/ firmware versions.
AT-S29 Management Software User’s Guide
Displaying
System
Information
Use the System Information screen to display descriptive information
about the switch or for quick system identification, as shown in the
following figure and table.
25
Using the System Configuration Program
ParameterDescription
System DescriptionSystem hardware description.
System Object IDMIB II object identifier for switch’s network
management subsystem
(ATI: 207.1.4.42)
System Up TimeLength of time the current management agent
has been running. (Note that the first value is
1/100 seconds.)
System Name
System Contact
System Location
1
1
Name assigned to the switch system.
Contact person for the system.
1
Specifies the area or location where the system
resides.
1. Maximum string length is 99, but the screen only displays 45 characters. You can use the arrow keys to
browse the whole string.
Displaying
Version and
Module
Information
Use the Switch Information screen to display hardware/firmware version
numbers for the main board and agent modules, as well as the power
status and modules plugged into the system.
Screen Information: Unit 1
=================
Main Board
Hardware Version
Firmware Version
Serial Number:00-30-84-9A-3B-80
Port Number
Internal Power Status
Redundant Power Status
Expansion Slot 1:1000Base-SX
Expansion Slot 2:Stacking
Agent Module
Hardware Version
POST ROM Version:1.10
Firmware Version:1.12
SNMP Agent:Master
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
V3.0
:
1.11
:
25
:
Active
:
Inactive
:
:V2.
0 (801 CPU)
26
AT-S29 Management Software User’s Guide
MenuDescription
Main Board:
Hardware VersionHardware version of the main board.
Firmware Version System firmware version in ROM.
Serial NumberMAC address associated with the main
board.
Port NumberNumber of ports in this unit.
Internal Power StatusPower status for the switch.
Redundant Power StatusRedundant power status for the switch.
Expansion Slot 1Shows module type if inserted (100Base-
FX, 1000Base-SX, or 1000Base-LX).
Expansion Slot 2Shows module type if inserted (100Base-
FX, 1000Base-SX, 1000Base-LX, or Stack).
MenuDescription
Agent Module:
Hardware VersionHardware version of the agent module.
POST ROM Version Power-On Self-Test version number.
Firmware Version Firmware version of the agent module.
SNMP AgentShows if this module is Master or
Backup.
27
Using the System Configuration Program
Management Setup Menu
After initially logging onto the system, adjust the communication
parameters for your console to ensure a reliable connection (Console
Configuration menu). Specify the IP addresses for the agent module
(Network Configuration / IP Configuration), and then set the
Administrator and User passwords (Console Login Configuration).
Remember to record them in a safe place. Also set the community string
which controls access to the on-board SNMP agent via in-band
management software (SNMP Configuration). The items provided by the
Management Setup Menu are described in the following sections.
Management Setup
=================
Network Configuration ...
Serial Port Configuration ...
SNMP Configuration ...
Console Login Configuration ...
TFTP Download ...
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
28
AT-S29 Management Software User’s Guide
Network Configuration
=================
IP Configuration ...
IP Connectivity Test (Ping) ...
HTTP Configuration ...
MAX Number of Allowed Telnet Sessions (1 -4) : 2
MAC Address : 00-30-84-9A-3B-80
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
Changing the
Network
Configuration
Use the Network Configuration menu to set the bootup option,
configure the switch’s Internet Protocol (IP) parameters, enable the onboard Web Agent, or enable Telnet access. The screen shown below is
described in the following table.
ParameterDescription
IP ConfigurationScreen used to set the bootup option, or
configure the switch’s IP parameters.
IP Connectivity Test (Ping) Screen used to test IP connectivity to a
specified device.
HTTP ConfigurationScreen used to enable Web Agent.
MAX Number of Allowed
Telnet Sessions
The maximum number of Telnet
sessions allowed to simultaneously
access the agent module.
MAC AddressPhysical address of the agent module.
29
Using the System Configuration Program
IP Configuration
Use the IP Configuration screen to set the bootup option, or configure
the switch’s IP parameters. The screen shown below is described in the
following table.
Network Configuration IP Configuration
=================
Interface Type :Ethernet
IP Address:149.35.19.10
Subnet Mask:255.255.255.0
Gateway IP:149.35.1.1
IP State:USER-CONFIG
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move, other keys to make
changes.
<Space> to toggle.
ParameterDefaultDescription
Ethernet Interface
IP Address10.1.0.1IP address of the stack you are managing when accessing the
agent module over the network. The agent module supports
SNMP over UDP/IP transport protocol. In this environment, all
systems on the Internet, such as network interconnection
devices and any PC accessing the agent module are assigned
an IP address.
Valid IP addresses consist of four numbers, of 0 to 255, and
separated by periods. Anything outside of this format will not
be accepted by the configuration program.
Subnet Mask255.255.0.0Subnet mask of the agent you have selected. This mask
identifies the host address bits used for routing to specific
subnets.
30
ParameterDefaultDescription
Network Configuration IP Connectivity Test (Ping)
=================
IP Address: 149.35.211.109
Test Times: 1000Interval : 1
Success: 1000Failure: 0
[Start]
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
AT-S29 Management Software User’s Guide
Default
0.0.0.0Gateway used to pass trap messages from the switch’s agent
Gateway
IP StateUSER-
CONFIG
to the management station. Note that the gateway must be
defined if the management station is located in a different IP
segment.
Specifies whether IP functionality is enabled via manual
configuration, or set by Boot Protocol (BootP). Options include:
USER-CONFIG - IP functionality is enabled based on the default
or user specified IP Configuration. (This is the default setting.)
BootP Get IP - IP is enabled but will not function until a BootP
reply has been received. BootP requests will be periodically
broadcast by the switch in an effort to learn its IP address.
(BootP values include the IP address, default gateway, subnet
mask, TFTP boot file name, and TFTP server IP.)
IP Connectivity Test (Ping)
Use the IP Connectivity Test to see if another site on the Internet can be
reached. The screen shown below is described in the following table.
ParameterDescription
IP Address IP address of the site you want to ping
Test TimesThe number of ICMP echo requests to send to the specified site
(1~1000)
Interval The interval (in seconds) between pinging the specified site (1~ 10
seconds)
Success/FailureThe number of times the specified site has responded or not to pinging
31
Using the System Configuration Program
HTTP Configuration
Use the HTTP Configuration screen to enable/disable the on-board Web
Agent, and to specify the TCP port that will provide HTTP service. The
screen shown below is described in the following table.
Network Configuration: HTTP Configuration
=================
HTTP Server: ENABLED
HTTP Port Number : 80
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
ParameterDescription
HTTP Server Enables/disables access to the on-board Web
Agent.
HTTP Port NumberSpecifies the TCP port that will provide HTTP
service. (Range is 0~65535. Default is Port 80.
Telnet Port 23 is prohibited.)
32
AT-S29 Management Software User’s Guide
Serial Port Configuration
========================
Management Mode: CONSOLE MODE
Baud rate: 9600
Data bits: 8
Stop bits: 1
Parity: NONE
Time-Out (in minutes): 10
Auto Refresh (in seconds) : 5
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Space> to select.
Configuring the
Serial Port
You can access the on-board configuration program by attaching a
VT100 compatible device to the switch’s serial port. (For more
information on connecting to this port, refer to the section on Making
the Connections Required for System Configuration on page 9.) The
communication parameters for this port are accessed from the Serial
Port Configuration screen seen below and described in the following
table.
ParameterDefaultDescription
Management
Mode
Console ModeIndicates that the console port settings are for direct console
connection.
Baud Rate9600 bpsThe rate at which data is sent between devices. (Options:
2400, 4800, 9600, 19200 bps, and Auto detection).
Databits8 bitsSets the databits of the RS-232 port. (Options: 7, 8)
Stopbits 1 bit Sets the stop bits of the RS-232 port. (Options: 1, 2)
ParitynoneSets the parity of the RS-232 port. (Options: none/odd/even)
Time-Out 10 minutes If no input is received from the attached device after this
interval (in minutes), the current session is automatically
closed. (Range: 0 - 60 minutes; where 0 indicates disabled.)
Auto Refresh 5 sec.Sets the interval before a console session will auto refresh
the console information, including Spanning Tree
Information, Port Configuration, Port Statistics, and RMON
Statistics. (Range: 5 - 255 seconds; where 0 indicates
disabled.)
33
Using the System Configuration Program
Assigning SNMP
Parameters
Use the SNMP Configuration screen to display and modify parameters
for the Simple Network Management Protocol (SNMP). The switch
includes an on-board SNMP agent which monitors the status of its
hardware, as well as the traffic passing through its ports. A computer
attached to the network, called a Network Management Station (NMS),
can be used to access this information. Access rights to the on-board
agent are controlled by community strings. To communicate with the
switch, the NMS must first submit a valid community string for
authentication. The options for configuring community strings and
related trap functions are described in the following figures and table:
SNMP Configuration
=================
Send Authentication Fail Traps: ENABLED
SNMP Communities ...
IP Trap Managers ...
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Space> to scroll
options. <Enter> to select.
NameDescription
Send Authentication Fail
Traps
Issue a trap message to specified IP trap
managers whenever authentication of
an SNMP request fails. (The default is
enabled.)
SNMP Communities Assigns SNMP access based on specified
community strings.
IP Trap Managers Specifies management stations that will
receive authentication failure messages
or other trap messages from the switch.
34
AT-S29 Management Software User’s Guide
SNMP Configuration: SNMP Communities
=================
Community Name AccessStatus
1.public READ ONLYENABLED
2.privateREAD/WRITEENABLED
3.netmanREAD/WRITEENABLED
4.
5.
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move, other keys to make
changes.
<Space> to scroll options.
Configuring Community Names
The following figure and table describe how to configure the
community strings authorized for trap management access. Up to 5
community names may be entered.
ParameterDescription
Community NameA community entry authorized for trap
AccessManagement access is restricted to Read
StatusSets administrative status of entry to
management access.
Default string: public (read/write
Maximum string length: 19 characters
Only or Read/Write.
enabled or disabled.
35
Using the System Configuration Program
Configuring IP Trap Managers
The following figure and table describe how to specify management
stations that will receive authentication failure messages or other trap
messages from the switch. Up to 5 trap managers may be entered.
SNMP Configuration: IP Trap Managers
=====================
IP AddressCommunity Name Status
1.149.35.19.20publicDISABLED
2.
3.
4.
5.
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
<Space> to scroll options.
ParameterDescription
IP AddressIP address of the trap manager.
Community Name A community specified for trap
management access.
Status Sets administrative status of entry to
enabled or disabled.
36
AT-S29 Management Software User’s Guide
Console Login Configuration
=================
Password Threshold:3
Lock-out Time (in minutes):0
User TypeUser NamePassword
-------------------------------------------
1. ADMIN :admin
2. GUESTguest
3.
4.
5.
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. other keys to make
changes.
Console Login
Configuration
Use the Management Setup: Console Login Configuration to restrict
management access based on specified user names and passwords, or
to set the invalid password threshold and timeout. There are two user
types, Administrator and Guest. Only the Administrator has write access
for parameters governing the SNMP agent. You should therefore assign
a user name and password to the Administrator as soon as possible, and
store it in a safe place. (If for some reason your password is lost, or you
cannot gain access to the System Configuration Program, contact your
Allied Telesyn distributor for assistance.) The parameters shown on this
screen are indicated in the following figure and table.
ParameterDefaultDescription
Password3 Sets the password intrusion threshold which limits the number of
failed logon attempts. (Range: 0~65500)
Lock-out Time0 The time (in seconds) the management console will be disabled,
due to an excessive number of failed logon attempts. (Range:
Admin
Guest
1. Passwords can consist of up to 11 alphanumeric characters and are not case sensitive.
1
1
name:
admin
password
: null
name:
guest
password
: null
0~65535)
Administrator has access privilege of Read/Write for all screens.
Guest has access privilege of Read Only for all screens.
37
Using the System Configuration Program
Downloading
System Software
Using TFTP Protocol to Download Over the Network
Use the TFTP Download menu to load software updates into the switch.
The download file should be an AT-8324SX compressed binary file from
Allied Telesyn; otherwise the agent will not accept it. The success of the
download operation depends on the accessibility of the TFTP server and
the quality of the network connection. After downloading the new
software, the agent will automatically restart itself. Parameters shown on
this screen are indicated in the following figure and table.
Use <TAB> or arrow keys to move. Other keys to make
changes.
<Space> to scroll options.<Enter> to select.
ParameterDescription
Download Server IPIP address of a TFTP server.
Agent Software Upgrade
Download
The binary file to download to the agent module.
Filename
Download Mode Downloads to permanent flash ROM.
Process TFTP
Download
Issues request to TFTP server to download the
specified file.
Note
You can also download firmware using the Web agent or via a direct
console connection.
38
AT-S29 Management Software User’s Guide
Configuring the Switch
The Device Control menu is used to set the communication parameters
for individual ports and to fine-tune the performance of your switch.
Configuration menus are also provided for advanced functions, such as
Virtual LANs, port trunking, and port mirroring. Each of the setup screens
provided by the configuration menus is described in the following
sections.
Device Control Menu
===================
Port Configuration ...Extended Bridge Configuration ...
Port Information ...802.1P Configuration ...
Spanning Tree Configuration ...802.1P VLAN Base Information
Spanning Tree Information ...802.1P Current Table Information
Mirror Port Configuration ...802.1P VLAN Static Table Configuration ...
Port Trunking Configuration ...802.1P VLAN Port Configuration ...
IGMP Configuration ...Port GARP Configuration ...
Port GMRP Configuration ...
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
ParameterDescription
Port ConfigurationEnables any port, enables/disables flow control, and sets
communication mode to auto-negotiation, full- or half-duplex.
Port InformationDisplays operational status, including link state, flow control method,
and duplex mode.
Spanning Tree
Configuration
Enables Spanning Tree Algorithm; also sets parameters for hello time,
maximum message age, switch priority, and forward delay; as well as
port priority and path cost.
Spanning Tree
Displays a full listing of parameters for Spanning Tree Algorithm.
Displays/configures extended bridge capabilities provided by this
switch, including support
39
Using the System Configuration Program
ParameterDescription
802.1P ConfigurationConfigures default port priorities and queue assignments.
802.1Q VLAN Base
Information
802.1Q VLAN Current
Displays basic VLAN information, such as VLAN version number and
maximum VLANs supported.
Displays VLAN groups and port members.
Table Information
802.1Q VLAN Static
Table Configuration
Configures VLAN groups via static assignments, including settings port
members, or restricting ports from being dynamically added to a port
by the GVRP protocol.
802.1Q VLAN Port
Configuration
Port GARP
Configuration
1
Port GMRP
Configuration
1. Not implemented in this firmware release.
1
Displays/configures port-specific VLAN settings, including PVID, ingress
filtering, and GVRP.
Configures generic attribute settings used in the spanning tree
protocol, VLAN registration, multicast filtering.
Configures GMRP multicast filtering.
40
AT-S29 Management Software User’s Guide
Port Configuration: Unit 1 Port 1-12
=====================
Admin EnabledAllows you to disable a port due to abnormal behavior (e.g.,
Flow ControlDisabledUsed to enable or disable flow control. Flow control can eliminate
Speed and
Duplex
AutoUsed to set the current port speed, duplex mode, and auto-
excessive collisions), and then re-enable it after the problem has
been resolved. You may also disable a port for security reasons.
frame loss by "blocking" traffic from end stations or segments
connected directly to the switch when its buffers fill. Back
pressure is used for half duplex and IEEE 802.3x for full duplex.
Note that flow control should not be used if a port is connected to
a hub.
negotiation.
Auto-negotiation is not available for 100Base-FX ports.
Note
41
Using the System Configuration Program
Viewing the
Current Port
Configuration
The Port Information screen displays the port type, status, link state, and
flow control in use, as well as the communication speed and duplex
mode. To change any of the port settings, use the configuration menu.
The parameters shown in the following figure and table are for the RJ-45
ports.
Port Information: Unit 1 Port 1-12
==================
OperationalShows if the port is functioning or not.
LinkIndicates if the port has a valid connection to an external device.
FlowControl InUseShows the flow control type in use. Flow control can eliminate
frame loss by "blocking" traffic from end stations connected
directly to the switch. Back pressure is used for half duplex and IEEE
802.3x for full duplex. Note that flow control should not be used if a
port is connected to a hub.
Speed and Duplex InUseDisplays the current port speed, duplex mode, and if auto-
negotiation is used. Note that auto-negotiation is available only for
RJ-45 and Gigabit ports (not 100Base-FX ports.)
42
AT-S29 Management Software User’s Guide
Spanning Tree Configuration: Selection Menu
==============================
STA Bridge Configuration ...
STA Port Configuration ...
<APPLY> <OK> <CANCEL>
Use <TAB> or arrows keys to move. <Enter> to select.
Spanning Tree Configuration: Bridge STA Configuration
=============================
Spanning Tree Protocol: ENABLED
Priority: 32768
Hello Time (in seconds): 2
Max Age (in seconds): 20
Forward Delay (in seconds): 15
<APPLY> <OK> <CANCEL>
Use <TAB> or arrow keys to move, <Space> to scroll
options, other keys to make changes.
Using the
Spanning Tree
Algorithm
The Spanning Tree Algorithm can be used to detect and disable network
loops, and to provide backup links between switches, bridges or routers.
This allows the switch to interact with other bridging devices (that is,
STA compliant switch, bridge or router) in your network to ensure that
only one route exists between any two stations on the network. For a
more detailed description of how to use this algorithm, refer to Chapter
4.
Configuring Bridge STA
The following figure and table describe Bridge STA configuration.
43
Using the System Configuration Program
ParameterDefaultDescription
Spanning Tree
EnabledEnable this parameter to participate in an STA compliant network.
Protocol
Priority32,768Device priority is used in selecting the root device, root port, and
designated port. The device with the highest priority becomes the
STA root device. However, if all devices have the same priority, the
device with the lowest MAC address will then become the root
device.
Enter a value from 0 - 65535.
Remember that the lower the numeric value, the higher the
priority.
Hello Time2Time interval (in seconds) at which the root device transmits a
configuration message.
Minimum value: 1
Maximum value: lower of 10 or [(Max. Message Age / 2) -1]
Max (Message)
Age
20The maximum time (in seconds) a device can wait without
receiving a configuration message before attempting to
reconfigure. All device ports (except for designated ports) should
receive configuration messages at regular intervals. Any port that
ages out STA information (provided in the last configuration
message) becomes the designated port for the attached LAN. If it
is a root port, a new root port is selected from among the device
ports attached to the network.
The minimum value is the higher of 6 or [2 x (Hello Time + 1)].
The maximum value is the lower of 40 or [2 x (Forward Delay - 1)].
Forward Delay15The maximum time (in seconds) the root device will wait before
changing states (i.e., listening to learning to forwarding). This
delay is required because every device must receive information
about topology changes before it starts to forward frames. In
addition, each port needs time to listen for conflicting information
that would make it return to a blocking state; otherwise,
temporary data loops might result.
The maximum value is 30.
The minimum value is the higher of 4 or [(Max. Message Age / 2) +
1].
44
AT-S29 Management Software User’s Guide
Spanning Tree Port Configuration: Unit 1 Port 1-12
==================================
Use <TAB> or arrows keys to move, other keys to make changes
Configuring STA for Ports or Modules
The following figure and table describe STA configuration for ports or
modules. (Note that the Spanning Tree Configuration screen for the
expansion slots also indicates module type.)
ParameterDefaultDescription
TypeShows port type as 10/100TX, 100FX, 1000SX or 1000LX.
Priority128Defines the priority for the use of a port in the STA algorithm. If the
path cost for all ports on a switch are the same, the port with the
highest priority (i.e., lowest value) will be configured as an active link
in the spanning tree. Where more than one port is assigned the
highest priority, the port with lowest numeric identifier will be
enabled. The range is 0 - 255.
(Path) Cost100/19/4This parameter is used by the STA algorithm to determine the best
path between devices. Therefore, lower values should be assigned to
ports attached to faster media, and higher values assigned to ports
with slower media.
The default and recommended range is:
Standard Ethernet: 100 (50~600)
Fast Ethernet: 19 (10~60)
Gigabit Ethernet: 4 (3~10)
The full range is 0 - 65535.
Note: Path cost takes precedence over port priority.
45
Using the System Configuration Program
Viewing the
Current Spanning
Tree
Configuration
The Spanning Tree Information screen displays a summary of the STA
information for the overall bridge or for a specific port or module. To
make any changes to the parameters for the Spanning Tree, use the
Spanning Tree Configuration menu.
Spanning Tree Information: Selection Menu
============================
STA Bridge Information ...
STA Port Information ...
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
Displaying the Current Bridge STA
The parameters shown in the following figure and table describe the
current Bridge STA Information.
Spanning Tree Information: Bridge STA Information
============================
Priority: 65535
Hello Time (in seconds): 2
Max Age (in seconds): 20
Forward Delay (in seconds) : 5
Hold Time (in seconds): 1
Designated Root: 128.0000E8123456
Root Cost: 5
Root Port: 1
Reconfig Counts: 3
Topology Up Time: 0 day, 1 hr, 2min, 34 sec
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
46
AT-S29 Management Software User’s Guide
ParameterDescription
PriorityDevice priority is used in selecting the root
device, root port, and designated port. The
device with the highest priority becomes the STA
root device. However, if all devices have the same
priority, the device with the lowest MAC address
will then become the root device.
Hello TimeThe time interval (in seconds) at which the root
device transmits a configuration message.
Max Age The maximum time (in seconds) a device can wait
without receiving a configuration message
before attempting to reconfigure.
Forward DelayThe maximum time (in seconds) the root device
will wait before changing states (i.e., listening to
learning to forwarding).
Hold TimeThe minimum interval between the transmission
of consecutive Configuration BPDUs.
Designated Root The priority and MAC address of the device in the
spanning tree that this switch has accepted as
the root device.
Root Cost The path cost from the root port on this switch to
the root device.
Root PortThe number of the port on this switch that is
closest to the root. This switch communicates
with the root device through this port. If there is
no root port, then this switch has been accepted
as the root device of the spanning tree network.
Reconfig CountsThe number of times the spanning tree has been
reconfigured.
Topology Up TimeThe time since the spanning tree was last
reconfigured.
47
Using the System Configuration Program
Displaying the Current STA for Ports or Modules
The parameters shown in the following figure and table are for port or
module STA Information (Port 1-12, Port 13-24, Expansion Slot 1 or
Expansion Slot 2).
StatusDisplays the current state of this port within the
spanning tree:
Disabled:
Port has been disabled by the user or has
failed diagnostics
Blocked:
Port receives STA configuration messages,
but does not forward packets.
Listening
: Port will leave blocking state due to
topology change, starts transmitting configuration
messages, but does not yet forward packets.
Learning
: Has transmitted configuration messages for
an interval set by the Forward Delay parameter
without receiving contradictory information. Port
address table is cleared, and the port begins learning
addresses.
Forwarding
: The port forwards packets, and continues
learning addresses.
The rules defining port status are:
A port on a network segment with no other STA
compliant bridging device is always forwarding.
If two ports of a switch are connected to the same
segment and there is no other STA device attached to
this segment, the port with the smaller ID forwards
packets and the other is blocked.
All ports are blocked when the switch is booted, then
some of them change state to listening, to learning,
and then to forwarding.
Designated
Cost
Designated
Bridge (ID)
Designated
Port (ID)
The cost for a packet to travel from this port to the root
in the current spanning tree configuration. The slower
the media, the higher the cost.
The priority and MAC address of the device through
which this port must communicate to reach the root of
the spanning tree.
The priority and port on the designated bridging
device through which this switch must communicate
with the root of the spanning tree.
49
Using the System Configuration Program
Using a Mirror
Port for Analysis
You can mirror traffic from any source port to a target port for real-time
analysis. You cana then attach a logic analyzer or RMON probe to the
target port and study the traffic crossing the source port in a completely
unobtrusive manner. When mirroring port traffic, not that the target
port must be included in the same VLAN as the source port.
You can use the Mirror Port Configuration screen to designate a single
port pair for mirroring as shown below:
Mirror Port Configuration
=========================
Mirror Source Port: Unit 1
: Port 1
Mirror Target Port: Unit 1
: Port 2
Status: DISABLED
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
ParameterDescription
Mirror Source
The port whose traffic will be monitored.
Port
Mirror Target
Port
The port that will “duplicate” or “mirror” all the
traffic happening on the monitored port.
StatusEnables or disables the mirror function.
50
AT-S29 Management Software User’s Guide
Configuring Port
Trunks
Port trunks can be used to increase the bandwidth of a network
connection or to ensure fault recovery. You can configure up to four
trunk connections (combining 2 to 4 ports into a fat pipe) between any
two AT-8324SX switches. However, before making any physical
connections between devices, us the Trunk Configuration menu to
specify the trunk on the devices at both ends. When using a port trunk,
note that:
❑
The ports used in a trunk must all be of the same media type (RJ45, 100 Mbps fiber, 1000 Mbps fiber). The ports that can be
assigned to the same trunk have certain other restrictions as
described later in this section.
❑
Ports can only be assigned to one trunk.
❑
The ports at both ends of a connection must be configured /as
trunk ports.
❑
The ports at both ends of a trunk must be configured in an
identical manner, including speed, duplex mode, and VLAN
assignments.
❑
The communication mode must be configured identically at both
ends of the trunk.
❑
None of the ports in a trunk can be configured as a mirror source
port or a mirror target port.
❑
All the ports in a trunk have to be treated as a whole when moved
from/to added, or deleted from a VLAN.
❑
The Spanning Tree Algorithm will treat all the ports in a trunk as a
whole.
❑
Enable the trunk prior to connecting any cable between the
switches to avoid creating a loop.
❑
Disconnect all trunk port cables or disable the trunk ports before
removing a port trunk to avoid creating a loop.
51
Using the System Configuration Program
You can use the Port Trunking Configuration screen to set up port trunks
as shown below:
Port Trunking Configuration
===========================
12 3 4
Member Port : 1
[Show][More][Add][Delete]
[Enable][Disable]
<OK>
Use <TAB> or arrow keys to move, other keys to make changes.
ParameterDescription
Trunk IDConfigure up to four trunks per switch.
UnitSpecifies a switch unit in the stack (1 to 4).
PortSelect from 2 to 4 ports per trunk.
[Show]Displays trunk settings, where the first trunk listed is specified by “Trunk
ID.”
[More]Scrolls through the list of configured trunks.
[Enable] [Disable]Enables/disables the selected trunk.
[Add] [Delete]Adds/deletes the port specified by Trunk ID / Member Unit / Member Port.
52
AT-S29 Management Software User’s Guide
The RJ-45 ports used for each trunk must all be on the same internal
switch chip. The port groups permitted include:
❑
Group 1: 1, 2, 3, 4 and 13, 14, 15, 16
❑
Group 2: 5, 6, 7, 8 and 17, 18, 19, 20
❑
Group 3: 9, 10, 11, 12 and 21, 22, 23, 24
The 100Base-FX fiber optic ports used for one side of a trunk must all be
on the same module. However, the 1000Base-SX and 1000Base-LX ports
used for one side of a trunk may be on any switch in the stack, or both on
the same switch if used as a standalone switch.
For example, when using Gigabit ports to form a trunk within a stack, the
Gigabit ports will all be at Port 25. In this case, you could specify a trunk
group consisting of:
(Unit1-Port25, Unit2-Port25) and (Unit3-Port25, Unit4-Port25)
Multicasting is used to support real-time applications such as video
conferencing or streaming audio. A multicast server does not have to
establish a separate connection with each client. It merely broadcasts its
services to the network, and any hosts which want to receive the
multicast register with their local multicast switch/router. Although this
approach reduces the network overhead required by a multicast server,
the broadcast traffic must be carefully pruned at every multicast
server/router it passed through to ensure that traffic is only passed on
the hosts which subscribe to this service.
This switch uses IGMP (Internet Group Management Protocol) to query
for any attached hosts who want to receive a specific multicast service.
The switch looks up the IP Multicast Group used for this service and adds
any port which received a similar request to that group. It then
propagates the service request on to any neighboring multicast
switch/router to ensure that it will continue to receive the multicast
service.
53
Using the System Configuration Program
Configuring IGMP
This protocol allows a host to inform its local switch/router that it wants
to receive transmissions addressed to a specific multicast group. You can
use the IGMP Configuration screen to configure multicast filtering
shown below:
IGMP Configuration
==================
IGMP Status:ENABLED
Act as IGMP Querier:DISABLED
IGMP Query Count:5
IGMP Report Delay (Minutes):5
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Space> to scroll
option.
Other keys to make changes.
ParameterDescription
IGMP StatusIf enabled, the switch will monitor network traffic to determine
which hosts want to receive multicast traffic.
ACT as IGMP QuerierIf enabled, the switch can serve as the “querier,” which is
responsible for asking hosts if they want to receive multicast traffic.
(Not available for the current firmware release.)
IGMP Query CountThe maximum number of queries issued for which there has been
no response before the switch takes action to solicit reports.
IGMP Report DelayThe time (in minutes) between receiving an IGMP Report for an IP
multicast address on a port before the switch sends an IGMP Query
out that port and removes the entry from its list.
54
Note
The default values are indicated in the sample screen.
AT-S29 Management Software User’s Guide
Configuring
Bridge MIB
Extensions
The Bridge MIB includes extensions for managed devices that support
Traffic Classes, Multicast Filtering and Virtual LANs. To configure these
extensions, use the Extended Bridge Configuration screen as shown
below:
Extended Bridge Configuration
============================
Bridge Capability : (Read Only)
Extended Multicast Filtering Services: NO
Traffic Classes: YES
Static Entry Individual Port: YES
VLAN Learning: IVL
Configurable PVID Tagging: YES
Local VLAN Capable: NO
Use <TAB> or arrow keys to move. <Space> to scroll
option.
ParameterDescription
Bridge Capability
Extended Multicast
Filtering Services
Enables filtering of individual multicast addresses based on GMRP
(GARP Multicast Registration Protocol). Note that this function is not
available for the current firmware release.
Traffic ClassesProvides mapping of user priorities to multiple traffic classes. (Refer to
802.1p Configuration.)
Static Entry Individual
Port
Enables static filtering for unicast and multicast addresses. (Refer to
the Network Monitor Menu / Static Unicast Address Table
Configuration and Static Multicast Address Table Configuration.)
VLAN LearningThis switch uses Independent VLAN Learning (IVL), whereby each port
maintains its own VLAN filtering database.
Configurable PVID
Tagging
Allows you to override the default PVID setting (Port VLAN ID used in
frame tags) and its egress status (VLAN-Tagged or Untagged) on each
port. (Refer to 802.1Q VLAN Port Configuration.
Local VLAN CapableThis switch does not support multiple local bridges (that is, multiple
Spanning Trees).
55
Using the System Configuration Program
ParameterDescription
Bridge Settings
Traffic Class
GMRP
1
GVRP
1. Not available in this firmware release.
1
1
Configuring
Traffic Classes
Multiple traffic classes are supported by this switch as indicated under
Bridge Capabilities. However, you can disable this function by setting
this parameter to False. Note that this function is not available for the
current firmware release.
GARP Multicast Registration Protocol (GMRP) allows network devices
to register endstations with multicast groups. Note that this function is
not available for the current firmware release.
The Internet Group Management Protocol (IGMP) is currently used by
this switch to provide automatic multicast filtering.
GARP VLAN Registration Protocol (GVRP) defines a way for switches to
exchange VLAN information in order to register necessary VLAN
members on ports across the network. This function should be
enabled to permit VLAN groups that extend beyond the local switch.
IEEE 802.1p defines up to eight separate traffic classes. This switch
supports Quality of Service (QoS) by using two priority queues, with
weighted fair queuing for each port. You can use the 802.1P
Configuration menu to configure the default priority for each port, or to
display the mapping for the traffic classes as described in the following
sections:
802.1P Configuration : Selection Menu
====================================
802.1P Port Priority Configuration ...
802.1P Port Traffic Class Information ...
<OK>
Use <TAB> or arrow keys to move. <Enter> to select.
56
AT-S29 Management Software User’s Guide
Port Priority Configuration
The default priority for all ingress ports is zero. Therefore, any inbound
frames that do not have priority tags will be placed in the low priority
outlet queue. Default priority is only used to determine the output
queue for the current port; no priority tag is actually added to the frame.
You can use the 802.1P Port Priority Configuration menu to adjust
default priority for any port as shown below:
802.1P Port Priority Configuration : Unit 1 Port 1 - 12
=======================================
Use <TAB> or arrows keys to move, other keys to make
changes.
ParameterDescription
PortNumeric identifier for switch port.
Default Ingress
User Priority
Default priority can be set to any value from 0-7,
where 0-3 specifies the low priority queue and 47 specifies the high priority queue.
Number of Egress
Traffic Classes
Indicates that this switch supports two priority
output queues.
57
Using the System Configuration Program
802.1p Port Traffic Class Information
This switch provides two priority levels with weighted fair queuing for
port egress. This means that any frames with a default or user priority
from 0-3 are sent to the low priority queue “0” while those from 4-7 are
sent to the high priority queue “1” as shown in the following screen:
802.1P Port Priority Configuration : Unit 1 Port 1 - 12
=======================================
<OK> <PREV UNIT> <NEXT UNIT> <PREV PAGE> <NEXT PAGE>
Use <TAB> or arrows keys to move, other keys to make
changes.
ParameterDescription
PortNumeric identifier for switch port.
User PriorityShows that user priorities 0-3 specify the low
priority queue and 4-7 specify the high priority
queue.
Use the VLAN Configuration menu to assign any port on the switch to
any of up to 16 LAN groups. In conventional networks with routers,
broadcast traffic is split up into separate domains. Switches do not
inherently support broadcast domains. This can lead to broadcast
storms in large networks that handle a lot of IPX traffic. By using IEEE
802.1Q compliant VLANs and GARP VLAN Registration Protocol, you can
organize any group of network nodes into separate broadcast domains,
confining broadcast traffic to the originating group. This also provides a
more secure and much cleaner network environment.
58
For a more detailed description of how to use VLANs, see Chapter 4. The
VLAN configuration screens are described in the following sections.
AT-S29 Management Software User’s Guide
802.1Q VLAN Base Information
The 802.1Q VLAN Base Information screen displays basic information on
the VLAN type support by this switch.
Use <TAB> or arrows keys to move, other keys to make
changes.
ParameterDescription
VLAN Version
Number
The VLAN version used by this switch as specified
in the IEEE 802.1Q standard.
MAX VLAN IDMaximum VLAN ID recognized by this switch.
MAX Supported
VLANs
Current Number of
VLANs Configured
Maximum number of VLANs that can be
configured on this switch.
The number of VLANs currently configured on
this switch.
802.1Q VLAN Current Table Information
This screen shows the current port members of each VLAN and whether
or not the port supports VLAN tagging. Ports assigned to a large VLAN
group that crosses several switches should use VLAN tagging. However,
if you just want to create a small port-based VLAN for one or two
switches, you can assign ports to the same untagged VLAN. The current
configuration is shown in the following screen.
Use <TAB> or arrows keys to move. <Enter> to select.
Port 1Port 13
<OK>
Port 25
ParameterDescription
Deleted VLAN Entry
Counts
The number of times a VLAN entry has been deleted from this
table.
VIDThe ID for the VLAN currently displayed.
Creation TimeThe value of sysUpTime (System Up Time) when this VLAN was
created.
StatusShows how this VLAN was added to the switch:
Dynamic GVRP: Automatically learned via GVRP.
Permanent: Added as a static entry.
UnitStack unit.
Current Egress PortsShows the ports which have been added to the displayed VLAN
group, where "1" indicates that a port is a member and "O" that it is
not.
Current Untagged PortsIf a port has been added to the displayed VLAN (see Current Egress
Ports), its entry in this field will be "1" if the port is untagged or "O"
if tagged.
[Show]Displays the members for the VLAN indicated by the “Sorted by
VID" field.
[More]Displays any subsequent VLANs if configured.
60
AT-S29 Management Software User’s Guide
802.1Q VLAN Static Table Information
Use this screen to create a new VLAN or modify the settings for an
existing VLAN. You can add/delete port members for a VLAN from any
unit in the stack, or prevent a port from being automatically added to a
VLAN via the GVRP protocol. (Also, note that all ports can only belong to
one untagged VLAN. This is set to VLAN 1 by default, but can be changed
via the 802. 1 Q VLAN Port Configuration screen.)
Use <TAB> or arrows keys to move, other keys to make changes.
<Enter> to select.
ParameterDescription
VIDThe ID for the VLAN currently displayed.
Range: 1-2048
VLAN NameA user-specified symbolic name for this VLAN.
String length: Up to 8 alphanumeric characters.
StatusSets the current editing status for this VLAN as:
Not in Service, Destroy, or Active.
UnitStack unit.
Egress PortsSet the entry for any port in this field to "1" to add it to the displayed VLAN,
or "O” to remove it from the VLAN.
Forbidden Egress
Prevents a port from being automatically added to this VLAN via GVRP.
Ports
[Show]Displays settings for the specified VLAN.
[More]Displays consecutively numbered VLANS.
[New]Sets up the screen for configuring a new VLAN.
61
Using the System Configuration Program
Using the System Configuration Program
For example, the following screen displays settings for VLAN 2, which
includes tagged ports 1-6, and forbidden port 12. (Note that the dashed
lines show that there are no switch units in this system other than Unit
Use <TAB> or arrow keys to move, <Space> to scroll options
ParameterDescription
PVIDThe VLAN ID assigned to untagged frames received on this port. Use the
PVID to assign ports to the same untagged VLAN.
Acceptable Frame
Type1
2
This switch accepts “All" frame types, including VLAN tagged or VLAN
untagged frames. Note that all VLAN untagged frames received on this
port are assigned to the PVID for this port.
1
Ingress Filtering
If set to "True," incoming frames for VLANs which do not include this port
in their member set will be discarded at the inbound port.
GVRP StatusEnables or disables GVRP for this port. When disabled, any GVRP packets
received on this port will be discarded and no GVRP registrations will be
propagated from other ports.
Note that GVRP must be enabled for the switch before this setting can take
effect. (See Device Control Menu / Extended Bridge Configuration.)
GVRP Failed
The total number of failed GVRP registrations, for any reason, on this port.
Registrations
GVRP Last PDU
The Source MAC Address of the last GVRP message received on this port.
Origin
1. This control does not affect VLAN independent BPDU frames, such as GVRP or STP. However, it does affect VLAN dependent BPDU frames,
such as GMRP.
2. Not implemented in this firmware release.
63
Using the System Configuration Program
Monitoring the Switch
The Network Monitor Menu provides access to port statistics, RMON
statistics, IP multicast addresses, and the static (unicast) address table.
Each of the screens provided by these menus is described in the
following sections.
Use <TAB> or arrows keys to move. <Enter> to select.
Network Monitor Menu
====================
<OK>
ParameterDescription
Port StatisticsDisplays statistics on network traffic passing through
the selected port.
RMON StatisticsDisplays detailed statistical information for the selected
port such as packet type and frame size counters.
Unicast Address
Table
Multicast Address
Registration Table
IP Multicast
Registration Table
Static Unicast
Address Table
Provides full listing of all unicast addresses stored in the
switch, as well as sort, search and clear functions.
Displays the ports that belong to each GMRP Muticast
1
group.
Displays the ports that belong to each IP Muticast
group.
Allows you to display or configure static unicast
addresses.
Configuration
Static Multicast
Address Table
Configuration
1. Not implemented in this firmware release.
1
Allows you to display or configure static GMRP
multicast addresses.
64
AT-S29 Management Software User’s Guide
Displaying Port
Statistics
EtherLike Counter:
Alignment Errors:0Late Collisions:0
FCS Errors:0Excessive Collisions:0
Single Collision Frames:0Internal MAC Transmit Errors :O
Multiple Collision Frames:OCarrier Sense Errors :0
SQE Test Errors:0Frames Too Long:0
Deferred Transmissions:0Internal MAC Receive Errors :0
Use the Port Statistics menu to display key statistics for each port. Overall
statistics on the traffic passing through each port are displayed. This
information can be used to identify potential problems with the switch
(such as a faulty port or unusually heavy loading).
Select the required stack unit, and port or module. The statistics
displayed are indicated in the following figure and table.
Use <TAB> or arrow keys to move. <Enter> to select.
ParameterDescription
Alignment ErrorsFor 10 Mbps ports, this counter records alignment errors (mis-
synchronized data packets). For 100Base-TX ports, this counter
records the sum of alignment errors and code errors (frames received
with rxerror signal).
FCS ErrorsThe number of frames received that are an integral number of octets
in length but do not pass the FCS check.
1
Single Collision Frames
The number of successfully transmitted frames for which
transmission is inhibited by exactly one collision.
Multiple Collision
Frames
SQE Test Errors
1
1
A count of successfully transmitted frames for which transmission is
inhibited by more that one collision.
A count of times that the SQE TEST ERROR message is generated by
the PLS sublayer.
Deferred Transmissions1A count of frames for which the first transmission attempt on a
particular interface is delayed because the medium was busy.
65
Using the System Configuration Program
ParameterDescription
Late CollisionsThe number of times that a collision is detected later than 512 bit-
times into the transmission of a packet.
Excessive Collisions
1
The number of frames for which transmission failed due to excessive
collisions.
Internal Mac Transmit
1
Errors
Carder Sense Errors
1
The number of frames for which transmission failed due to an
internal MAC sublayer transmit error.
The number of times that the carrier sense condition was lost or
never asserted when attempting to transmit a frame.
Frames Too LongThe number of frames received that exceed the maximum permitted
frame size.
Internal Mac Receive
1
Errors
1. The reported values will always be zero because these statistics are not supported by the internal chip set.
Displaying
RMON Statistics
The number of frames for which reception failed due to an internal
MAC sublayer receive error.
Use the RMON Statistics screen to display key statistics for each port or
media module from RMON group 1. (RMON groups 2, 3 and 9 can only
be accessed using SNMP management software.) The following screen
displays overall statistics on traffic passing through each port. RMON
statistics provides access to a broad range of statistics, including a total
count of different frame types passing through each port. Values
displayed have been accumulated since the last system reboot.
Use <TAB> or arrow keys to move. <Enter> to select.
AT-S29 Management Software User’s Guide
ParameterDescription
Drop EventsThe total number of events in which packets were dropped by the probe
due to lack of resources.
Received BytesTotal number of bytes of data received on the network. This statistic can be
used as a reasonable indication of Ethernet utilization.
Received FramesThe total number of frames (bad, broadcast and multicast) received.
Broadcast FramesThe total number of good frames received that were directed to the
broadcast address. Note that this does not include multicast packets.
Multicast FramesThe total number of good frames received that were directed to this
multicast address.
CRC/Alignment
Errors
For 1OMbs ports, the counter records CRC/alignment errors (FCS or
alignment errors). For 10OMbs ports, the counter records the sum of CRC/
alignment errors and code errors (frame received with rxerror signal).
Undersize FramesThe total number of frames received that were less than 64 octets long
(excluding framing bits, but including FCS octets) and were otherwise well
formed.
Oversize FramesThe total number of frames received that were longer than 1518 octets
(excluding framing bits, but including FCS octets) and were otherwise well
formed.
FragmentsThe total number of frames received that were less than 64 octets in length
(excluding framing bits, but including FCS octets) and had either an FCS or
alignment error.
JabbersThe total number of frames received that were longer than 1518 octets
(excluding framing bits, but including FCS octets), and had either an FCS or
alignment error.
CollisionsThe best estimate of the total number of collisions on this Ethernet
segment.
64 Byte FramesThe total number of frames (including bad packets) received and
transmitted that were 64 octets in length (excluding framing bits but
including FCS octets),
65-127 Byte
Frames
128-255 Byte
Frames
1024-1518 Byte
Frames
The total number of frames (including bad packets) received and
transmitted that were between 65 and 127 octets in length inclusive
(excluding framing bits but including FCS octets).
The total number of packets (including bad packets) received and
transmitted that were between 128 and 255 octets in length inclusive
(excluding framing bits but including FCS octets).
The total number of packets (including bad packets) received and
transmitted that were between 1024 and 1518 octets in length inclusive
(excluding framing bits but including FCS octets).
67
Using the System Configuration Program
Displaying the
Unicast Address
Table
The Address Table contains the MAC addresses and VLAN identifier
associated with each port (that is, the source port associated with the
address and VLAN), sorted by MAC address or VLAN ID. You can search
for a specific address, clear the entire address table, or information
associated with a specific address, or set the aging time for deleting
inactive entries. The information displayed in the Address Table is
indicated in the following figure and table.
Dynamic CountsNumber of dynamically learned addresses.
Static CountsNumber of statically configured addresses.
MACThe MAC address of a node.
VIDThe VLAN(s) associated with this address or port.
UnitSwitch unit in the stack (1~4).
PortThe port whose address table includes this MAC address.
68
AT-S29 Management Software User’s Guide
ParameterDescription
StatusIndicates address status as:
D
: dynamically learned, or
P
: fixed permanent.y by SNMP network management software.
[Show]Displays the address table based on specified VLAN ID, and sorted by
primary key MAC or VID.
[Clear]Clears the specified MAC address.
[Clear All]Clears all MAC addresses from the table.
69
Using the System Configuration Program
Displaying the IP
Multicast
Registration
Use the IP Multicast Registration Table to display all the multicast groups
active on this switch, including multicast IP addresses and the
corresponding VLAN ID.
Table
IP Multicast Registration Table
==============================
VID Multicast IP UnitDynamic Port Lists (Learned by IGMP Only)
Sorted by : VID + MACVID : 1MAC : 00-00-00-00-00-00
VID : 1Unit : 1Port : 1
MAC : 00-00-00-00-00-00Status : Permanent
[Show) [More] [Set]
Use <TAB> or arrow keys to move, other keys to make changes.
Use the Static Unicast Address Table Configuration screen to manually
configure host MAC addresses in the unicast table. You can use this
screen to associate a MAC address with a specific VLAN ID and switch
port as shown below.
Static Unicast Address Table Configuration
===========================================
<OK>
<Space> to scroll options.
ParameterDescription
VIDThe VLAN group this port is assigned to.
MAC AddressThe MAC address of a host device attached to this
switch.
UnitThe switch unit the host device is attached to.
PortThe port the host device is attached to.
StatusThe status for an entry can be set to:
Permanent
: This entry is currently in use and will
remain so after the next reset of the switch.
DeleteOnReset
: This entry is currently in use and
will remain so until the next reset.
Invalid
DeleteOnTimeOut
: Removes the corresponding entry.
: This entry is currently in use
and will remain so until it is aged out.
Other
: This entry is currently in use but the
conditions under which it will remain so differ from
the preceding values.
71
Using the System Configuration Program
ParameterDescription
[Show]Displays the static address table sorted on VID as the
primary key and MAC address as secondary key.
[More]Scrolls through entries in the static address table.
[Set]Adds the specified entry to the static address table,
such as shown in the following example:
VID : 1MAC : 00-30-84-18-34-22
Unit : 1Port : 1
Status : Permanent
72
Resetting the System
System Restart Menu
====================
Restart Option :
POST: YES
Reload Factory Defaults: YES
Keep IP Setting: YES
Keep User Authentication : YES
[Restart]
<APPLY><OK><CANCEL>
Use <TAB> or arrow keys to move. <Enter> to select.
Use the Restart command under the Main Menu to reset the
management agent. The reset screen includes an option to return all
configuration parameters to their factory defaults.
AT-S29 Management Software User’s Guide
ParameterDescription
POSTRuns the Power-On Self-Test
Reload Factory
Defaults
Keep IP SettingRetains the settings defined in the IP
Keep User
Authentication
Reloads the factory defaults
Configuration menu.
Retains the user names and passwords defined in
the Console Login Configuration menu.
73
Using the System Configuration Program
Logging Off the System
Use the Exit command under the Main Menu to exit the configuration
program and terminate communications with the switch for the current
session.
74
Chapter 3
Web-based Management
Web-based Configuration and Monitoring
The Network Management Module provides an embedded HTTP Web
agent in addition to the menu-driven system configuration program.
This agent can be accessed by any computer on the network using a
standard Web browser (Internet Explorer 4.0 or above, or Netscape
Navigator 4.0 or above).
Note
If you experience a screen refresh problem with Internet Explorer 5.0,
you can use the Back and Forward buttons in the Tool bar to manually
refresh the window, or you can use IE 4.0 or Navigator 4.0.
Using the Web browser management interface you can configure a
switch stack, view statistics, and monitor network activity. The Web
interface also provides access to a range of SNMP management
functions with its MIB and RMON browser utilities.
Prior to accessing the Network Management Module from a Web
browser, be sure you have first performed the following tasks:
1. Configure the switch with a valid IP address, subnet mask, and default
gateway using an out-of-band serial connection or BootP protocol.
2. Set user names and passwords using an out-of-band serial
connection. Access to the Web Agent is controlled by the same
Administrator user names and passwords as the on-board
configuration program.
Note
If the PC is directly connected to the AT-8324SX switch, you must turn
off the network proxy in the Web browser. For instructions on how to
turn off the network proxy, refer to your Web browser
documentation.
75
Web-based Management
Navigating the Web Browser Interface
To access the Web-browser interface you must first enter a user name
and password. The default user names are "admin" and "guest," with no
password. The administrator has Read/Write access to all configuration
parameters and statistics, and the guest has Read Only access to the
management program.
Home Page
When your Web browser connects with the Network Management
Module’s Web agent, the home page is displayed. The home page
displays the Main Menu on the left-hand side of the screen and the
System Information on the right-hand side. The Main Menu links are
used to navigate to other menus and display configuration parameters
and statistical data.
76
If this is your first time to log into the configuration program, you should
define a new administrator password, record it and put it in a safe place.
From the Main Menu, select Security Configuration and enter a new
password for the administrator. Note that passwords can consist of up to
14 alphanumeric characters and are not case sensitive.
Note
Based on the default configuration, a user is allowed three attempts
to enter the correct password; on the third failed attempt the current
connection is terminated.
AT-S29 Management Software User’s Guide
Configurable parameters have a dialog box or drop-down list. Once a
configuration change has been made on a page, be sure to click on the
“Apply” button at the bottom of the page to confirm the new setting.
Alternatively, you can click on “Revert” to clear any changes prior to
pressing “Apply.”
Panel Display
Main Menu
The Web Agent displays an image of the switch’s ports and expansion
modules, showing port activity, speed, or duplex mode, depending on
the specified mode. Note that clicking on the image of a port or module
will display statistics for the selected item.
Using the on-board Web agent, you can define system parameters,
manage and control the switch, the connected stack and all its ports, or
monitor network conditions. The following table briefly describes the
selections available from this program.
MenuDescription
SystemProvides basic system description, including contact
information.
SwitchShows hardware/firmware version numbers, power
status, and expansion modules in use.
IPIncludes boot state, IP address, and Telnet session
count.
SNMPConfigures communities and trap managers; and
activates traps.
SecuritySets passwords for system access.
UpgradeDownloads new version of firmware to update your
system.
Address TableProvides full listing of unicast addresses, sorted by
address or VLAN.
STAEnables Spanning Tree Algorithm; also sets
parameters for switch priority, hello time, maximum
message age, and forward delay; as well as port
priority and path cost.
77
Web-based Management
MenuDescription
Bridge
Extension
Displays/configures extended bridge capabilities
provided by this switch, including support for traffic
classes, GMRP multicast filtering, and VLAN
extensions.
PriorityConfigures default port priorities and queue
assignments.
VLANConfigures VLAN group members, automatic
registration with GVRP, and other port-specific VLAN
settings.
IGMPConfigures IGMP multicast filtering.
PortEnables any port, sets communication mode to auto-
negotiation, full duplex or half duplex, and enables/
disables flow control.
MirrorSets the source and target ports for mirroring.
TrunkSpecifies ports to group into aggregate trunks.
StatisticsDisplays statistics on network traffic passing through
the selected port.
78
System Information
System Name
CentreCOM AT-8324SX
IP Address
Object ID
Location
Contact
System Up Time
1.0.1.0.1
1.3.6.1.4.207.1.4.42
Leslie extension 613
Development
41 d 2 h 11 min 48 s
Use the System Information screen to display descriptive information
about the switch, or for quick system identification as shown in the
following figure and table.
AT-S29 Management Software User’s Guide
MenuDescription
System Name
IP Address
1
2
Name assigned to the switch system
IP address of the agent you are managing. The
agent module supports SNMP over UDP/IP
transport protocol. In this environment, all
systems on the Internet, such as network
interconnection devices and any PC accessing
the agent module are assigned an IP address.
Valid IP addresses consist of four numbers, of 0 to
255, and separated by periods. Anything outside
of this format will not be accepted by the
configuration program.
Object IDMIB II object identifier for switch’s network
management subsystem (AT-8324SX:
1.3.6.1.4.207.1.4.42).
Location
1
Specifies the area or location where the system
resides.
Contact
1
Contact person for the system.
System UptimeLength of time the current management agent
has been running. (Note that the first value is
1/100 seconds.)
1. Maximum string length is 45 characters.
2. The default value is 0.0.0.0.
79
Web-based Management
Switch Information
Main Board
Use the Switch Information screen to display hardware/firmware version
numbers for the main board and agent modules, as well as the power
status and modules plugged into the system.
Serial Number
Number of Ports
Hardware Version
Firmware Version
Internal Power Status
Redundant Power Status
00-30-84-9A-3B-80
24
V3.0
V1.11
Active
Inactive
ParameterDescription
Serial NumberSerial number of the main board.
Number of PortsNumber of ports in this unit.
Hardware VersionHardware version of the main board.
Firmware versionSystem ROM version.
Internal Power StatusPower status for the switch.
Redundant Power StatusRedundant power status for the switch.
Management
Expansion Slot
80
Hardware Version:
POST ROM Version:
Firmware Version:
RoleMaster
V2.0
V1.10
V1.12
ParameterDescription
Hardware VersionHardware version of the Agent Module
POST ROM VersionVersion number of the Agent Module’s
Power-on Self-test.
Firmware VersionAgent Module’s firmware version
RoleShows if this module is Master or Slave.
Expansion Slot
Expansion Slot 1:
1-Port 1000Base-SX-SC
Expansion Slot 2:
4GB Stack Module
AT-S29 Management Software User’s Guide
ParameterDescription
Expansion Slot 1Shows module type if inserted (100Base-FX,
1000Base-SX, or 1000Base-LX).
Expansion Slot 2Shows module type if inserted (100Base-FX,
1000Base-SX, 1000Base-LX or Stack).
81
Web-based Management
IP Configuration
Use the IP Configuration screen to set the bootup option, configure the
IP addresses for the agent module, or set the number or concurrent
Telnet sessions allowed. The screen shown below is described in the
following table.
IP State:
IP Address:
Subnet Mask:
Gateway IP Address:
MAC Address:
Number of Telnet sessions (1-4):
User-Configured
10.1.0.1
255.255.255.0
10.1.0.254
00-30-84-E8-93-AE
4
ParameterDefaultDescription
IP StateUSER-CONFIGSpecifies whether IP functionality is enabled via manual
configuration, or set by Boot Protocol (BootP). Options include:
❑
USER-CONFIG - IP functionality is enabled based on the
default or user specified IP Configuration. (This is the
default setting.).
❑
BootP Get IP - IP is enabled but will not function until a
BootP reply has been received. BootP requests will be
periodically broadcast by the switch in an effort to learn
its IP address. (BootP values include the IP address, default
gateway, subnet mask, TFTP boot file name, and TFTP
server IP.)
IP Address10.1.0.1IP address of the agent you are managing. The Agent Module
supports SNMP over UDP/IP transport protocol. In this
environment, all systems on the Internet, such as network
interconnection devices and any PC accessing the Agent
Module are assigned an IP address. Valid IP addresses consist of
four numbers, of 0 to 255, and separated by periods. Anything
outside of this format will not be accepted by the configuration
program.
Subnet
Mask
255.255.255.0Subnet mask of the agent you have selected. This mask
identifies the host address bits used for routing to specific
subnets.
Gateway IP
Address
0.0.0.0Gateway used to pass trap messages from the switch’s agent to
the management station. Note that the gateway must be
defined if the management station is located in a different IP
segment.
82
ParameterDefaultDescription
Community String:
Access Mode:
Read-Only
SNMP Community Capability: 5
Current:
New:
public RO
private RW
<<Add
Remove
netman RW
AT-S29 Management Software User’s Guide
MAC
-Physical address of the Agent Module
Address
Number of
4Sets the number of concurrent Telnet sessions allowed to
Telnet
Sessions
SNMP Configuration
Use the SNMP Configuration screen to display and modify parameters
for the Simple Network Management Protocol (SNMP). The switch
includes an on-board SNMP agent which monitors the status of its
hardware, as well as the traffic passing through its ports. A computer
attached to the network, called a Network Management Station (NMS),
can be used to access this information. Access rights to the on-board
agent are controlled by community strings. To communicate with the
switch, the NMS must first submit a valid community string for
authentication. The options for configuring community strings and
related trap functions are described in the sections.
SNMP
Community
The following figure and table describe how to configure the
community strings authorized for trap management access. Up to 5
community names may be entered.
access the Agent Module.
ParameterDescription
Community StringA community entry authorized for trap
management access. (The maximum string
length is 19 characters).
Access ModeManagement access is restricted to Read Only or
Read/Write.
Add/RemoveAdd/remove strings from the active list
83
Web-based Management
The default community strings are listed here.
PurposeCommunity StringPrivileges
General access publicRead Only
Trap Managers
Network
privateRead/Write
administrators
Network
netmanRead/Write
management
The following figure and table describe how to specify management
stations that will receive authentication failure messages or other trap
messages from the switch. Up to 5 trap managers may be entered.
Current:
(none)
Enable Authentication Trap Generation:
<<Add
Remove
New:
Trap Manager IP address:
Trap Manager Community String:
ParameterDescription
Trap Manager IP AddressIP address of the trap manager.
Trap ManagerA community specified in the SNMP
Communities table.
Add/RemoveAdd/remove strings from the active list.
Enable Authentication
Traps
Issue a trap message to specified IP trap
managers whenever authentication of an
SNMP request fails. (The default is
enabled.)
84
Security Configuration
Use the Security Configuration screen to restrict management access
based on specified user names and passwords. The Administrator has
write access for parameters governing the SNMP agent. You should
therefore assign a user name and password to the Administrator as soon
as possible, and store it in a safe place. (If for some reason your password
is lost, or you can not gain access to the system’s configuration program,
contact Allied Telesyn for assistance.) The parameters shown on this
screen are indicated in the following figure and table.
Change Password
Old Password
New Password
Confirm Password
This password is for the system Administrator access, with access
privilege of Read/Write for all screens. Passwords can consist of up to 11
alphanumeric characters and are not case sensitive. (Default name:
admin; default password: null)
AT-S29 Management Software User’s Guide
85
Web-based Management
Firmware Upgrade Options
You can upgrade system firmware via a Web browser, a TFTP server, or a
direct connection to the console port.
Web Upload
Management
Use the Web Upload Management menu to load software updates into
the switch. The upload file should be an AT-8324SX compressed binary
file from Allied Telesyn; otherwise the agent will not accept it. The
success of the upload operation depends on the quality of the network
connection. After downloading the new software, the agent will
automatically restart itself. Parameters shown on this screen are
indicated in the following figure and table.
Upload Mode
File Name
Start Web Upload
Permanent
Browse
ParameterDescription
Upload ModeUploads to permanent flash ROM.
File NameThe AT-8324SX compressed binary file to upload.
Use the browse button to locate the file on your
local network.
86
Start Web Upload Uploads the specified file.
AT-S29 Management Software User’s Guide
Server IP Address
0.0.0.0
Download Mode
File Name
Permanent
Start TFTP Upload
TFTP Download
Management
Use the TFTP Download Management menu to load software updates
into the switch. The download file should be an AT-8324SX compressed
binary file from Allied Telesyn; otherwise the agent will not accept it. The
success of the download operation depends on the accessibility of the
TFTP server and the quality of the network connection. After
downloading the new software, the agent will automatically restart
itself. Parameters shown on this screen are indicated in the following
figure and table.
ParameterDescription
Server IP AddressIP address of a TFTP server.
Download ModeThe system downloads to permanent flash
ROM.
File NameThe AT-8324SX compressed binary file to
download.
Start TFTP
Download
Issues a request to TFTP server to download the
specified file.
87
Web-based Management
Address Table Configuration
The Address Table contains the unicast MAC addresses and VLAN
identifier associated with each port (that is, the source port associated
with the address and VLAN). You can also clear the entire address table,
or information associated with a specific port, address, or VLAN
identifier; or set the aging time for deleting inactive entries. The
information displayed in the Address Table is indicated in the following
figure and table.
Aging Time (10-415):
Dynamic Address Counts:
Static Address Counts:
Address Table Sort Key:
000024-B32883, VLAN 1, Unit 1, Port 7, Dynamic
0000E2-12F9F8, VLAN 1, Unit 1, Port 7, Dynamic
0000E2-16C582, VLAN 1, Unit 1, Port 7, Dynamic
0000E2-20C3D5, VLAN 1, Unit 1, Port 7, Dynamic
0000E2-2174D0, VLAN 1, Unit 1, Port 7, Dyna mic
0000E2-000678, VLAN 1, Unit 1, Port 7, Dynamic
0000E8-008907, VLAN 1, Unit 1, Port 7, Dynamic
0000E8-B235D5, VLAN 1, Unit 1, Port 7, Dynamic
0000E8-1012D5, VLAN 1, Unit 1, Port 7, Dyna mic
0000E8-B21002, VLAN 1, Unit 1, Port 7, Dynamic
0000E8-24C346, VLAN 1, Unit 1, Port 7, Dynamic
Address
300
115
0
seconds
<<Add
Remove
Clear Table
MAC
Address
VLAN
(1-2048)
Unit
Port
1
1
ParameterDescription
Aging Time Time-out period in seconds for aging out dynamically learned
forwarding information. The range is 10 - 415 seconds; and the
default is 300 seconds.
Dynamic Address CountThe number of dynamically learned addresses.
Static Address CountThe number of statistically configured addresses
Address Table Sort KeyThe system displays the MAC address of each node, the switch unit
and the port whose address table includes this MAC address, the
associated VLAN(s), and the address status (i.e., dynamic or static)
Address TableAll entries, sorted by address or VLAN ID.
New Static AddressUse these fields to add or remove a static entry to the address
table. Indicate the address, stack unit, port and VLAN group when
adding a new entry.
Add/RemoveAdds/removes selected address.
Clear TableRemoves all addresses from the address table.
88
STA (Spanning Tree Algorithm)
The Spanning Tree Algorithm can be used to detect and disable network
loops, and to provide backup links between switches, bridges or routers.
This allows the switch to interact with other bridging devices (that is,
STA compliant switch, bridge or router) in your network to ensure that
only one route exists between any two stations on the network. For a
more detailed description of how to use this algorithm, refer to Chapter
4.
AT-S29 Management Software User’s Guide
Spanning Tree
Information
The Spanning Tree Information screen displays a summary of the STA
information for the overall bridge or for a specific port or module. To
make any changes to the parameters for the Spanning Tree, use the
Spanning Tree Configuration menu. Also note that this screen cannot be
accessed unless you have already enabled the Spanning Tree Algorithm
via the Spanning Tree Configuration menu.
Spanning Tree
The parameters shown in the following figure and table describe the
current bridge STA Information.
Spanning Tree State
Bridge ID
Max Age
Hello Time2 SecondsConfiguration Changes 22
Forward Delay
Enabled
32768.003084119A3B
20 Seconds
Designated Root
Root Port7
Root Path Cost
Last Topology Change15 Seconds1 d 2 h 3 min 4 s
0.003084FFFF33
19
ParameterDescription
Spanning Tree
State
Shows if switch is enabled to participate in an
STA compliant network.
Bridge IDA unique identifier for this bridge, consisting of
bridge priority plus MAC address (where the
address is normally taken from Port 1).
Max AgeThe maximum time (in seconds) a device can
wait without receiving a configuration message
before attempting to reconfigure.
Hello TimeThe time interval (in seconds) at which the root
device transmits a configuration message.
89
Web-based Management
ParameterDescription
Forward Delay The maximum time (in seconds) the root device
will wait before changing states (i.e., listening to
learning to forwarding).
RootThe priority and MAC address of the device in
the spanning tree that this switch has accepted
as the root device.
Root PortThe number of the port on this switch that is
closest to the root. This switch communicates
with the root device through this port. If there is
no root port, then this switch has been
accepted as the root device of the spanning
tree network.
Root Path CostThe path cost from the root port on this switch
to the root device.
Configuration
Changes
Last Topology
Change
The number of times the spanning tree has
been reconfigured.
The time since the spanning tree was last
reconfigured.
STA Port Configuration
The parameters shown in the following figure and table are for port or
module STA Information (Port 1-12, Port 13-24, Expansion Slot 1 or
Expansion Slot 2).
Port Status
PortDesignated Cost Designated Bridge
1
Disabled
2
Disabled
Disabled
3
Disabled
4
Disabled
5
Forward Transitions
0
0
0
0
0
32768.0030849A3B80
19
19
32768.0030849A3B80
19
32768.0030849A3B80
19
32768.0030849A3B80
32768.0030849A3B80
19
Designated Po rt
128.1
128.2
128.3
128.4
128.5
90
ParameterDescription
Port StatusDisplays the current state of this port within the
spanning tree:
❑
Disabled:
Port has been disabled by the user or has failed
diagnostics.
❑
Blocked:
Port receives STA configuration messages, but does not
forward packets.
❑
Listening:
Port will leave blocking state due to topology change,
starts transmitting configuration messages, but does not yet forward
packets.
❑
Learning:
Has transmitted configuration messages for an interval set
by the Forward Delay parameter without receiving contradictory
information. Port address table is cleared, and the port begins
learning addresses.
Forwarding: The port forwards packets, and continues learning addresses.
The rules defining port status are:
❑
A port on a network segment with no other STA compliant bridging
device is always forwarding.
❑
If two ports of a switch are connected to the same segment and there
is no other STA device attached to this segment, the port with the
smaller ID forwards packets and the other is blocked.
❑
All ports are blocked when the switch is booted, then some of them
change state to listening, to learning, and then to forwarding.
AT-S29 Management Software User’s Guide
Forward
The number of times the port has changed status to forwarding state.
Transitions
Designated CostThe cost for a packet to travel from this port to the root in the current
spanning tree configuration. The slower the media, the higher the cost.
Designated BridgeThe priority and MAC address of the device through which this port must
communicate to reach the root of the spanning tree.
Designated PortThe port on the designated bridging device through which this switch
must communicate with the root of the spanning tree.
91
Web-based Management
Spanning Tree
Configuration
The following figures and tables describe Bridge STA configuration.
Switch
Usage:
Priority:
Disabled
32768
ParameterDefaultDescription
UsageEnabledEnable this parameter to participate in an STA
compliant network.
Priority32,768Device priority is used in selecting the root
device, root port, and designated port. The
device with the highest priority becomes the
STA root device. However, if all devices have
the same priority, the device with the lowest
MAC address will then become the root
device.
Enter a value from 0 - 65535.
Remember that the lower the numeric value,
the higher the priority.
When the Switch Becomes Root
Hello Time:
Maximum Age:
Forward Delay:
2
20
15
seconds
seconds
seconds
92
AT-S29 Management Software User’s Guide
ParameterDefaultDescription
Hello Time2The time interval (in seconds) at which the
root device transmits a configuration
message.
The minimum value is 1.
The maximum value is the lower of 10 or
[(Max. Message Age / 2) -1].
Max
(Message)
Age
Forward
Delay
20The maximum time (in seconds) a device
can wait without receiving a configuration
message before attempting to reconfigure.
All device ports (except for designated
ports) should receive configuration
messages at regular intervals. Any port that
ages out STA information (provided in the
last configuration message) becomes the
designated port for the attached LAN. If it is
a root port, a new root port is selected from
among the device ports attached to the
network.
The minimum value is the higher of 6 or [2 x
(Hello Time + 1)].
The maximum value is the lower of 40 or [2 x
(Forward Delay - 1)].
15The maximum time (in seconds) the root
device will wait before changing states (i.e.,
listening to learning to forwarding). This
delay is required because every device must
receive information about topology
changes before it starts to forward frames. In
addition, each port needs time to listen for
conflicting information that would make it
return to a blocking state; otherwise,
temporary data loops might result.
The maximum value is 30. The minimum
value is the higher of 4 or [(Max. Message
Age / 2) + 1].
93
Web-based Management
STA Port
Configuration
The following figure and table describe STA configuration for ports or
modules. (Note that the Spanning Tree Configuration screen for the
expansion slots also indicates module type.)
Priority
Port
1
2
3
4
5
128
128
128
128
128
Path Cost
19
19
19
19
19
ParameterDefaultDescription
Priority128Defines the priority for the use of a port in
the STA algorithm. If the path cost for all
ports on a switch are the same, the port
with the highest priority (i.e., lowest value)
will be configured as an active link in the
spanning tree. Where more than one port is
assigned the highest priority, the port with
lowest numeric identifier will be enabled.
The range is 0 - 255.
(Path) Cost100/19/4 This parameter is used by the STA
algorithm to determine the best path
between devices. Therefore, lower values
should be assigned to
ports attached to faster media, and higher
values assigned to ports with slower media.
The default and recommended range is:
❑
Standard Ethernet: 100 (50~600)
❑
Fast Ethernet: 19 (10~60)
❑
Gigabit Ethernet: 4 (3~10)
❑
The full range is 0 - 65535.
Note: Path cost takes precedence over port
priority.
94
Configuring Bridge MIB Extensions
Extended Multicast Filtering Service
Static Entry Individ u al Port
Traffic Classes
VLAN Learning
Configurable PVID Ta g ging
Local VLAN Capable
No
No
Yes
Yes
Yes
IVL
The Bridge MIB includes extensions for managed devices that support
Traffic Classes, Multicast Filtering and Virtual LANs. To configure these
extensions, use the Extended Bridge Configuration screen as shown
below.
Bridge Capability
ParameterDescription
AT-S29 Management Software User’s Guide
Extended
Multicast Filtering
Services
Enables filtering of individual multicast addresses
based on GMRP (GARP Multicast Registration
Protocol). Note that this function is not available
for the current firmware release.
Traffic ClassesProvides mapping of user priorities to multiple
traffic classes. (Refer to the Priority menu.)
Static Entry
Individual Port
Enables static filtering for unicast and multicast
addresses. (Refer to the Address Table.)
(IVL), whereby each port maintains its own VLAN
filtering database.
Configurable PVID
Tagging
Allows you to override the default PVID setting
(Port VLAN ID used in frame tags) and its egress
status (VLAN-Tagged or Untagged) on each port.
(Refer to VLAN/VLAN Port Configuration.).
Local VLAN
Capable
This switch does not support multiple local
bridges (that is, multiple Spanning Trees).
95
Web-based Management
Bridge Settings
Traffic Classes
GMRP
GVRP
Enable
Enable
Enable
ParameterDescription
Traffic Class
1
Multiple traffic classes are supported by this
switch as indicated under Bridge Capabilities.
However, you can disable this function by setting
this parameter to False.
GMRP
1
GARP Multicast Registration Protocol (GMRP)
allows network devices to register endstations
with multicast groups.
The Internet Group Management Protocol (IGMP)
is currently used by this switch to provide
automatic multicast filtering.
1
GVRP
GARP VLAN Registration Protocol (GVRP) defines
a way for switches to exchange VLAN information
in order to register necessary VLAN members on
ports across the network.
1. Not implemented in this firmware release.
96
Priority
Port
Default Ingress User
Number of Egress
PriorityTraffic Classes
1
2
3
4
5
0
0
0
0
0
2
2
2
2
2
AT-S29 Management Software User’s Guide
IEEE 802.1p defines up to eight separate traffic classes. This switch
supports Quality of Service (QoS) by using two priority queues, with
weighted fair queuing for each port. You can use the Priority menu to
configure the default priority for each port, or to display the mapping for
the traffic classes as described in the following sections.
Port Priority
Configuration
The default priority for all ingress ports is zero. Therefore, any inbound
frames that do not have priority tags will be placed in the low priority
output queue. Default priority is only used to determine the output
queue for the current port; no priority tag is actually added to the frame.
You can use the Port Priority Configuration screen to adjust the default
priority for any port as shown below:
ParameterDescription
PortNumeric identifier for switch port.
Default Ingress
User Priority
Default priority can be set to any value from 0-7,
where 0-3 specifies the low priority queue and 47 specifies the high priority queue.
Number of Egress
Traffic Classes
Indicates that this switch supports two priority
output queues.
97
Web-based Management
Port Traffic Class
Information
This switch provides two priority levels with weighted fair queuing for
port egress. This means that any frames with a default or user priority
from 0-3 are sent to the low priority queue “0” while those from 4-7 are
sent to the high priority queue “1” as shown in the following screen:
Port Priority 0 Priority 1 Priority 2 Priority 3 Priority 4 Priority 5 Priority 6 Priority 7 Class Range
0
1
0
2
0
3
0
4
0
5
0
0
0
0
0
0
0
0
0
0
01 1 11
01 1 11
01 1 11
01 1 11
01 1 11
0-1
0-1
0-1
0-1
0-1
ParameterDescription
PortNumeric identifier for switch port.
User PriorityShows that user priorities 0-3 specify the low
priority queue and 4-7 specify the high priority
queue.
98
Configuring Virtual LANs
VLAN Version Number
Maximum Number of Support VLANs
Maximum VLAN ID
Current Number of 802.1Q VLANs Configure d
1
16
2048
1
Use the VLAN Configuration menu to assign any port on the switch to
any of up to 16 LAN groups. In conventional networks with routers,
broadcast traffic is split up into separate domains. Switches do not
inherently support broadcast domains. This can lead to broadcast
storms in large networks that handle a lot of IPX traffic. By using IEEE
802.1Q compliant VLANs and GARP VLAN Registration Protocol, you can
organize any group of network nodes into separate broadcast domains,
confining broadcast traffic to the originating group. This also provides a
more secure and much cleaner network environment.
For a more detailed description of how to use VLANs, see Chapter 4. The
VLAN configuration screens are described in the following sections.
AT-S29 Management Software User’s Guide
VLAN Basic
Information
The VLAN Basic Information screen displays basic information on the
VLAN type support by this switch.
ParameterDescription
VLAN Version
Number
The VLAN version used by this switch as specified
in the IEEE 802.1Q standard.
MAX VLAN IDMaximum VLAN ID recognized by this switch.
MAX Supported
VLANs
Current Number of
VLANs Configured
Maximum number of VLANs that can be
configured on this switch.
The number of VLANs currently configured on
this switch.
99
Web-based Management
VLAN Current
Table
This screen shows the current port members of each VLAN and whether
or not the port supports VLAN tagging. Ports assigned to a large VLAN
group that crosses several switches should use VLAN tagging. However,
if you just want to create a small port-based VLAN for one or two
switches, you can assign ports to the same untagged VLAN. The current
configuration is shown in the following screen.
VLAN Entry Delete Count: 0
VLAN ID:1
Up Time at Creation
Status
0 d 0 h 0 min 0 s
Dynamic GVRP
ParameterDescription
VLAN Entry Delete
Count
The number of times a VLAN entry has been
deleted from this table.
VLAN IDThe ID for the VLAN currently displayed.
Up Time at
Creation
The value of sysUpTime (System Up Time) when
this VLAN was created.
StatusShows how this VLAN was added to the switch:
Dynamic GVRP: Automatically learned via GVRP.
Permanent: Added as a static entry.
Egress Ports
Unit 1, Port 1
Unit 1, Port 2
Unit 1, Port 3
Unit 1, Port 4
Unit 1, Port 5
Unit 1, Port 6
Unit 1, Port 7
Unit 1, Port 8
Untagged Ports
Unit 1, Port 1
Unit 1, Port 2
Unit 1, Port 3
Unit 1, Port 4
Unit 1, Port 5
Unit 1, Port 6
Unit 1, Port 7
Unit 1, Port 8
ParameterDescription
100
Egress PortsShows the ports which have been added to the
displayed VLAN group.
Untagged PortsShows the untagged VLAN port members.
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.