Page 1
◆
User’s Guide
Management
®
Software
AT-S41
FOR THE AT-8350GB FAST ETHERNET SWITCH
VERSION 1.0
PN 613-50308-00 Rev A
Page 2
Copyright 2002 Allied Telesyn, Inc.
960 Stewart Drive Suite B, Sunnyvale, CA 94085 USA
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc.
Microsoft is a registered trademark of Microsoft Corporation, Netscape Navigator is a registered trademark of Netscape
Communications Corporation. All other product names, company names, logos or other designations mentioned herein are
trademarks or registered trademarks of their respective owners.
Allied Telesyn, Inc. reserves the right to make changes in specifications and other information contained in this document without
prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesyn, Inc. be liable
for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or
related to this manual or the information contained herein, even if Allied Telesyn, Inc. has been advised of, known, or should have
known, the possibility of such damages.
Page 3
Table of Contents
List of Figures ........................................................................................................................................................................................................ 8
Preface ....................................................................................................................................................................................................................10
How This Guide is Organized ...........................................................................................................................................................................10
Document Conventions ....................................................................................................................................................................................11
Where to Find Web-based Guides .................................................................................................................................................................12
Contacting Allied Telesyn Technical Support ............................................................................................................................................13
Online Support ............................................................................................................................................................................................. 13
Telephone Support..................................................................................................................................................................................... 13
For Sales or Corporate Information ...............................................................................................................................................................14
Management Software Updates ....................................................................................................................................................................15
Section I
Overview
Chapter 1
Management Software Overview ..............................................................................................................................................................17
Local Management Session ..............................................................................................................................................................................19
Telnet Management Session ............................................................................................................................................................................20
Web Browser Management Session ..............................................................................................................................................................21
SNMP Management Session ............................................................................................................................................................................22
Chapter 2
Stacking ..................................................................................................................................................................................................................23
Stacking Overview ...............................................................................................................................................................................................24
Stacking and the Management Software ....................................................................................................................................................25
..........................................................................................................................................................16
Section II
Local and Telnet Management
Chapter 3
Starting a Local or Telnet Management Session ................................................................................................................................27
Local Management Session ..............................................................................................................................................................................28
Starting a Local Management Session................................................................................................................................................. 29
Quitting from a Local Session ................................................................................................................................................................. 31
.................................................................................................. 26
3
Page 4
Telnet Management Session ............................................................................................................................................................................32
Starting a Telnet Management Session .............................................................................................................................................. 32
Quitting from a Telnet Management Session ................................................................................................................................... 32
Chapter 4
Basic Switch Parameters ................................................................................................................................................................................33
When Does an AT-8350GB Switch Need an IP Address? .......................................................................................................................34
AT-8350GB Switch....................................................................................................................................................................................... 34
How Do You Assign an IP Address? ...................................................................................................................................................... 34
Configuring an IP Address ................................................................................................................................................................................35
Configuring System Administration Information .....................................................................................................................................37
Configuring the User Interface Security Features ....................................................................................................................................39
Activating DHCP ...................................................................................................................................................................................................42
Configuring SNMP Community Strings and Trap IP Addresses ..........................................................................................................43
Rebooting a Switch .............................................................................................................................................................................................45
Activating the Management Software’s Default Values ........................................................................................................................46
Viewing the AT-S41 Switch Information ......................................................................................................................................................48
Pinging a Network Device ................................................................................................................................................................................49
Bootstrap Configuration ....................................................................................................................................................................................51
Chapter 5
Port Parameters ..................................................................................................................................................................................................53
Configuring Port Parameters ...........................................................................................................................................................................54
Configuring Gigabit Port Type ........................................................................................................................................................................57
Chapter 6
Port Security .........................................................................................................................................................................................................59
Port Security Overview .......................................................................................................................................................................................60
Configuring Port Security ..................................................................................................................................................................................62
Setting a Threshold .............................................................................................................................................................................................64
Setting Intrusion Detection ..............................................................................................................................................................................65
Chapter 7
Port Trunking .......................................................................................................................................................................................................66
Port Trunking Overview .....................................................................................................................................................................................67
Creating a Port Trunk ..........................................................................................................................................................................................70
Deleting a Port Trunk ..........................................................................................................................................................................................72
Setting Port Trunk Status ..................................................................................................................................................................................73
Chapter 8
Port Monitoring ..................................................................................................................................................................................................74
Port Monitoring Overview ................................................................................................................................................................................75
Enabling Port Monitoring .................................................................................................................................................................................76
Modifying Port Monitoring ...............................................................................................................................................................................78
Disabling Port Monitoring ................................................................................................................................................................................79
Chapter 9
Spanning Tree Protocol ..................................................................................................................................................................................80
STP Overview .........................................................................................................................................................................................................81
Selecting a Root Bridge ............................................................................................................................................................................. 81
Finding and Resolving Redundant Paths ........................................................................................................................................... 82
Handling Topology Changes .................................................................................................................................................................. 82
Communicating Between Bridges ........................................................................................................................................................ 83
Configuring a Bridge’s STP Settings ..............................................................................................................................................................84
Configuring STP Port Settings .........................................................................................................................................................................86
4
Page 5
Chapter 10
Virtual LANs ..........................................................................................................................................................................................................88
VLAN Overview .....................................................................................................................................................................................................89
VLAN Modes .................................................................................................................................................................................................. 90
VLAN Modifiers .....................................................................................................................................................................................................91
VLAN Name.................................................................................................................................................................................................... 91
VLAN Identifier ............................................................................................................................................................................................. 91
Untagged and Tagged Ports................................................................................................................................................................... 91
General Rules to Creating a VLAN ......................................................................................................................................................... 94
Creating a VLAN ....................................................................................................................................................................................................95
Phase 1 ............................................................................................................................................................................................................ 95
Phase 2 ............................................................................................................................................................................................................ 97
Viewing or Modifying a VLAN .......................................................................................................................................................................100
Phase 1 ......................................................................................................................................................................................................... 100
Phase 2 ......................................................................................................................................................................................................... 102
Deleting a VLAN ................................................................................................................................................................................................. 104
Setting GVRP Status ......................................................................................................................................................................................... 105
Resetting the VLAN Parameters to Default .............................................................................................................................................. 106
Chapter 11
MAC Address Table ........................................................................................................................................................................................ 107
MAC Address Overview .................................................................................................................................................................................. 108
Displaying MAC Addresses ............................................................................................................................................................................ 110
Viewing MAC Addresses by Port ................................................................................................................................................................. 112
Viewing the MAC Addresses by MAC ........................................................................................................................................................ 113
Viewing the MAC Addresses of a VLAN ..................................................................................................................................................... 114
Adding Static MAC Addresses ...................................................................................................................................................................... 115
Deleting Static MAC Addresses .................................................................................................................................................................... 116
Changing the Aging Time .............................................................................................................................................................................. 117
Chapter 12
Quality of Service ............................................................................................................................................................................................ 118
Quality of Service Overview .......................................................................................................................................................................... 119
Configuring QoS ................................................................................................................................................................................................ 120
Chapter 13
IGMP Snooping ................................................................................................................................................................................................ 122
IGMP Snooping Overview .............................................................................................................................................................................. 123
Activating IGMP Snooping ............................................................................................................................................................................ 124
Viewing Group Members ............................................................................................................................................................................... 126
Chapter 14
Broadcast Storm Control ............................................................................................................................................................................. 128
Broadcast Storm Control Overview ............................................................................................................................................................ 129
Activating Broadcast Storm Control .......................................................................................................................................................... 130
Chapter 15
Port Statistics .................................................................................................................................................................................................... 131
Displaying Port Statistics ................................................................................................................................................................................ 132
Chapter 16
Configuration File .......................................................................................................................................................................................... 134
Uploading a Configuration File Using XModem .................................................................................................................................... 135
Downloading a Configuration File Using XModem ............................................................................................................................. 139
Uploading/Downloading a Configuration File Using TFTP ............................................................................................................... 142
5
Page 6
Chapter 17
Management Software Updates ............................................................................................................................................................. 145
Obtaining Software Updates ........................................................................................................................................................................ 146
Downloading New Management Software Using XModem ............................................................................................................. 147
Downloading a New Management Software Image Using TFTP .................................................................................................... 150
Section III
Web Browser Management
Chapter 18
Starting a Web Browser Management Session ................................................................................................................................153
Starting a Web Browser Management Session ...................................................................................................................................... 154
Browser Tools............................................................................................................................................................................................. 155
Quitting from a Web Browser Management Session .................................................................................................................. 155
Chapter 19
Basic Switch Parameters ............................................................................................................................................................................. 156
Configuring an IP Address ............................................................................................................................................................................. 157
Configuring System Administration Information .................................................................................................................................. 159
Setting the User Interface Configuration ................................................................................................................................................. 161
Activating DHCP ................................................................................................................................................................................................ 163
Configuring SNMP Community Strings and Trap IP Addresses ....................................................................................................... 164
Resetting the Management Software Default Values .......................................................................................................................... 166
Rebooting a Switch .......................................................................................................................................................................................... 167
Viewing the AT-S41 Switch Information ................................................................................................................................................... 168
Ping Execution ................................................................................................................................................................................................... 169
Bootstrap Configuration ................................................................................................................................................................................. 171
Chapter 20
Port Parameters ............................................................................................................................................................................................... 173
Configuring Port Parameters ........................................................................................................................................................................ 174
Configuring Gigabit Port Type ..................................................................................................................................................................... 177
Displaying Port Status ..................................................................................................................................................................................... 178
Displaying Port Statistics ................................................................................................................................................................................ 181
........................................................................................................152
Chapter 21
Port Security ...................................................................................................................................................................................................... 183
Configuring Port Security ............................................................................................................................................................................... 184
Displaying Port Security Settings ................................................................................................................................................................ 186
Chapter 22
Port Trunks ........................................................................................................................................................................................................ 187
Creating or Deleting a Port Trunk ............................................................................................................................................................... 188
Chapter 23
Port Monitoring ............................................................................................................................................................................................... 190
Configuring Port Monitoring ........................................................................................................................................................................ 191
Chapter 24
Spanning Tree Protocol ............................................................................................................................................................................... 192
Configuring a Bridge’s STP Settings ........................................................................................................................................................... 193
Configuring STP Port Settings ...................................................................................................................................................................... 195
6
Page 7
Chapter 25
Virtual LANs ....................................................................................................................................................................................................... 197
Creating a VLAN ................................................................................................................................................................................................. 198
Phase 1 ......................................................................................................................................................................................................... 199
Phase 2 ......................................................................................................................................................................................................... 201
Viewing or Modifying a VLAN .......................................................................................................................................................................203
Phase 1 ......................................................................................................................................................................................................... 203
Phase 2 ......................................................................................................................................................................................................... 206
Deleting a VLAN ................................................................................................................................................................................................. 208
Chapter 26
MAC Address Table ........................................................................................................................................................................................ 209
Viewing the MAC Address by Port .............................................................................................................................................................. 210
Viewing the MAC Addresses by MAC ........................................................................................................................................................ 211
Viewing the MAC Addresses of a VLAN ..................................................................................................................................................... 213
Adding Static MAC Addresses ...................................................................................................................................................................... 215
Deleting Static MAC Addresses .................................................................................................................................................................... 216
Chapter 27
Quality of Service ............................................................................................................................................................................................ 217
Configuring QoS ................................................................................................................................................................................................ 218
Chapter 28
IGMP Snooping ................................................................................................................................................................................................ 219
Activating IGMP Snooping ............................................................................................................................................................................ 220
Viewing Group Members ............................................................................................................................................................................... 222
Chapter 29
Broadcast Storm Control ............................................................................................................................................................................. 223
Activating Broadcast Storm Control and Setting a Threshold .......................................................................................................... 224
Chapter 30
Uploading/Downloading Configuration Files .................................................................................................................................. 225
Uploading/Downloading a Configuration File Using TFTP ............................................................................................................... 226
Chapter 31
Management Software Updates ............................................................................................................................................................. 228
Obtaining Software Updates ........................................................................................................................................................................ 229
Downloading a New Management Software Image Using TFTP .................................................................................................... 230
Appendix A
AT-S41 Default Settings .............................................................................................................................................................................. 232
7
Page 8
List of Figures
Figure 1: Connecting a Terminal or PC to the RS232 Terminal Port ................................................................................................. 29
Figure 2: AT-S41 Login Prompt - Local Management Session ............................................................................................................ 30
Figure 3: AT-S41 Main Menu - Local Management Session ................................................................................................................. 30
Figure 4: System IP Configuration Menu .................................................................................................................................................... 35
Figure 5: System Admin. Configuration Menu ......................................................................................................................................... 37
Figure 6: User Interface Configuration Menu ........................................................................................................................................... 39
Figure 7: SNMP Configuration Menu ........................................................................................................................................................... 43
Figure 8: System Reboot Menu ...................................................................................................................................................................... 45
Figure 9: System Reboot Menu ...................................................................................................................................................................... 46
Figure 10: General Information Menu ......................................................................................................................................................... 48
Figure 11: Ping Execution Menu .................................................................................................................................................................... 49
Figure 12: Ping Results ...................................................................................................................................................................................... 50
Figure 13: Bootstrap Configuration Menu ................................................................................................................................................. 51
Figure 14: Port Configuration Menu ............................................................................................................................................................ 54
Figure 15: Select Giga Port Type Menu ....................................................................................................................................................... 57
Figure 16: Port Security Configuration Menu ........................................................................................................................................... 62
Figure 17: Intrusion Detection Status Menu ............................................................................................................................................. 65
Figure 18: Port Trunk Example 1 .................................................................................................................................................................... 68
Figure 19: Port Trunk Example 2 .................................................................................................................................................................... 69
Figure 20: Trunk Configuration Menu ......................................................................................................................................................... 70
Figure 21: Port Monitoring Configuration Menu ..................................................................................................................................... 76
Figure 22: Spanning Tree Configuration Menu ........................................................................................................................................ 84
Figure 23: Spanning Tree Port Configuration Menu .............................................................................................................................. 86
Figure 24: VLAN Management Menu ........................................................................................................................................................... 95
Figure 25: VLAN Creation Menu ..................................................................................................................................................................... 96
Figure 26: VLAN Port Configuration Menu ................................................................................................................................................ 98
Figure 27: Config VLAN Member Menu ................................................................................................................................................... 101
Figure 28: VLAN Port Configuration Menu ............................................................................................................................................. 102
Figure 29: Forwarding Database Menu .................................................................................................................................................... 110
Figure 30: Display MAC Address by MAC Menu ................................................................................................................................... 111
Figure 31: Quality of Service Configuration Menu ............................................................................................................................... 120
Figure 32: IGMP Configuration Menu ....................................................................................................................................................... 124
Figure 33: View Group Members Menu ................................................................................................................................................... 126
Figure 34: Storm Configuration Menu ...................................................................................................................................................... 130
Figure 35: Statistics Menu ............................................................................................................................................................................. 132
Figure 36: Configuration File Upload/Download Menu .................................................................................................................... 135
Figure 37: XModem Configuration File Upload/Download Menu ................................................................................................. 136
8
Page 9
Figure 38: HyperTerminal Menu ................................................................................................................................................................. 136
Figure 39: Receive File Pop-up Window .................................................................................................................................................. 137
Figure 40: Receive Filename Pop-up Window ....................................................................................................................................... 137
Figure 41: XModem File Receive Window ............................................................................................................................................... 138
Figure 42: Configuration File Upload/Download Menu .................................................................................................................... 139
Figure 43: XModem Configuration File Upload/Download Menu ................................................................................................. 140
Figure 44: HyperTerminal Menu ................................................................................................................................................................. 140
Figure 45: Send File Pop-up Window ........................................................................................................................................................ 141
Figure 46: XModem File Send Window .................................................................................................................................................... 141
Figure 47: Configuration File Upload/Download Menu .................................................................................................................... 142
Figure 48: TFTP Configuration File Upload/Download Menu .......................................................................................................... 143
Figure 49: XModem Software Upgrade Menu ....................................................................................................................................... 148
Figure 50: Local Management Menu ........................................................................................................................................................ 148
Figure 51: Send File Pop-up Window ........................................................................................................................................................ 149
Figure 52: XModem File Send Window .................................................................................................................................................... 149
Figure 53: TFTP Software Upgrade Menu ................................................................................................................................................ 151
Figure 54: Entering a Switch’s IP Address in the URL Field ............................................................................................................... 154
Figure 55: Management Software Home Page ..................................................................................................................................... 155
Figure 56: IP Configuration Page ................................................................................................................................................................ 157
Figure 57: Administration Configuration Menu .................................................................................................................................... 159
Figure 58: User Interface Configuration Page ........................................................................................................................................ 161
Figure 59: SNMP Configuration Page ....................................................................................................................................................... 164
Figure 60: System Reboot Configuration ................................................................................................................................................ 166
Figure 61: System Reboot Configuration ................................................................................................................................................ 167
Figure 62: Switch Information Page .......................................................................................................................................................... 168
Figure 63: Ping Test Configuration Page ................................................................................................................................................. 169
Figure 64: Ping Test Result Page ................................................................................................................................................................. 170
Figure 65: Bootstrap Configuration Page ................................................................................................................................................ 171
Figure 66: Port Configuration Page ........................................................................................................................................................... 174
Figure 67: Select Giga Port Type ................................................................................................................................................................. 177
Figure 68: Front Panel Page ......................................................................................................................................................................... 178
Figure 69: Configuration of a Port .............................................................................................................................................................. 179
Figure 70: Statistics .......................................................................................................................................................................................... 181
Figure 71: Port Security Page ....................................................................................................................................................................... 184
Figure 72: Port Security Overview Page ................................................................................................................................................... 186
Figure 73: Trunk Configuration Page ........................................................................................................................................................ 188
Figure 74: Port Monitoring Configuration Page ................................................................................................................................... 191
Figure 75: Spanning Tree Bridge Configuration ................................................................................................................................... 193
Figure 76: Spanning Tree Port Configuration ........................................................................................................................................ 195
Figure 77: Create/Modify VLAN ................................................................................................................................................................... 199
Figure 78: VLAN Port Configuration .......................................................................................................................................................... 201
Figure 79: VLAN Information ....................................................................................................................................................................... 203
Figure 80: Create/Modify VLAN ................................................................................................................................................................... 204
Figure 81: VLAN Port Configuration .......................................................................................................................................................... 206
Figure 82: Sort by Port .................................................................................................................................................................................... 210
Figure 83: Sort by MAC ................................................................................................................................................................................... 211
Figure 84: Sort by VLAN ................................................................................................................................................................................. 213
Figure 85: Static MAC Address Configuration ....................................................................................................................................... 215
Figure 86: Static MAC Address Configuration ....................................................................................................................................... 216
Figure 87: Quality of Service ......................................................................................................................................................................... 218
Figure 88: IGMP Snooping ............................................................................................................................................................................ 220
Figure 89: IGMP Snooping Group Members .......................................................................................................................................... 222
Figure 90: Broadcast Storm Control Page ............................................................................................................................................... 224
Figure 91: Configuration File Upgrade Page .......................................................................................................................................... 226
Figure 92: Image Upgrade Page ................................................................................................................................................................. 230
9
Page 10
Preface
This guide contains instructions on how configure the AT-8350GB Fast
Ethernet switch using the AT-S41 management software.
How This Guide is Organized
This manual is divided into three sections.
Section I: Overview
This section reviews the different ways that you can access the AT-S41
management software and describes the stacking features of the AT8350GB switch.
Section II: Local and Telnet Management
The chapters in this section explain how to manage a switch from a local
management session or a Telnet management session.
A local management session is established by connecting a terminal or
PC to the RS-232 Terminal Port on the front panel of the switch.
A Telnet management session is established using the Telnet application
protocol. This type of management session can be performed from any
workstation on your network that has the application protocol.
Section III: Web Browser Management
The chapters in this section explain how to manage a switch using a Web
browser, such as Microsoft® Internet Explorer or Netscape® Navigator.
10
Page 11
Document Conventions
This document uses the following conventions:
Note
Notes provide additional information.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
AT-S41 User’s Guide
11
Page 12
Where to Find Web-based Guides
The Allied Telesyn Web site at www.alliedtelesyn.com contains PDF files
of the Installation and User Guides for all Allied Telesyn products. The
documents can be viewed online or downloaded onto a local
workstation or server.
AT-S41 User’s Guide
12
Page 13
AT-S41 User’s Guide
Contacting Allied Telesyn Technical Support
You can contact Allied Telesyn technical support online or by telephone.
Online Support You can request technical support online by accessing the Knowledge
Base from our Web site at http://kb.alliedtelesyn.com. You can use the
Knowledge Base to submit questions to our technical support staff and
review answers to previously asked questions.
Telephone
Support
For Technical Support by telephone, contact Allied Telesyn at one of the
following locations:
Americas
United States, Canada, Mexico, Central
America, South America
Tel: 1 (800) 428-4835
Asia
Singapore, Taiwan, Thailand, Malaysia,
Indonesia, Korea, Philippines, China,
India, Hong Kong
Tel: (+65) 3815-612
Australia
Australia, New Zealand
Tel: 1 (800) 000-880
France
France, Belgium, Luxembourg, The
Netherlands, Middle East, Africa
Tel: (+33) 1-60-92-15-25
Germany
Germany, Switzerland, Austria, Eastern
Europe
Tel: (+49) 30-435-900-126
Italy
Italy, Spain, Portugal, Greece, Turkey, Israel
Tel: (+39) 02-41-30-41
Japan
Tel: (+81) 3-3443-5640
United Kingdom
United Kingdom, Denmark, Norway,
Sweden, Finland, Iceland
Tel: (+44) 1-235-442560
13
Page 14
For Sales or Corporate Information
Allied Telesyn, Inc.
19800 North Creek Parkway,
Suite 200
Bothell, WA 98011
Tel:1 (425) 487-8880
Fax:1 (425) 489-9191
AT-S41 User’s Guide
14
Page 15
Management Software Updates
Allied Telesyn periodically updates the management software programs
for our managed products. You can download new versions of our
management software from our Web site at www.alliedtelesyn.com or
from our FTP server at ftp.alliedtelesyn.com. To use the FTP server, enter
‘anonymous’ for the user name when you log in and use your e-mail
address for the password.
AT-S41 User’s Guide
15
Page 16
Section I
Overview
The chapters in this section provide an overview of the AT-S41
management software on the AT-8350GB Fast Ethernet switch. They
review the different methods for accessing the management software
and describe the stacking features of the switch.
16
Page 17
Chapter 1
Management Software Overview
The AT-S41 management software is intended for the AT-8350GB Fast
Ethernet switch. The software allows you to adjust the operating
parameters of the switch. Some of the functions that you can perform
with the software include:
❑ Enable and disable ports
❑ Configure port parameters, such as port speed and duplex mode
❑ Create virtual LANs (VLANs)
❑ Create port trunks and port monitors
❑ Assign an Internet Protocol (IP) address
❑ Activate and configure the Spanning Tree Protocol
❑ Configure port security
The AT-S41 management software comes pre-installed on the switch
with default settings for all of its operating parameters. The default
settings may be adequate for some networks and may not need to be
changed. If this is true for your network, then you can use the switch as
an unmanaged switch by simply connecting the unit to your network, as
explained in the hardware installation guide.
Note
The default settings for the management software can be found in
Appendix A, AT-S41 Default Settings on page 232.
To actively manage a switch by changing or adjusting its operating
parameters, you must access the switch’s AT-S41 management software.
The AT-S41 software has a menu interface that makes it very easy to use.
17
Page 18
AT-S41 User’s Guide
There are four different types of management sessions that you can use
to access the AT-S41 management software on an AT-8350GB Fast
Ethernet switch. They are:
❑ Local Management
❑ Telnet
❑ Web Browser
❑ SNMP
This chapter briefly describes each type of management session.
18
Page 19
Local Management Session
You establish a local management session with an AT-8350GB Fast
Ethernet switch by connecting either a terminal or a PC with a terminal
emulator program to the RS232 terminal port on the front panel of the
master switch, using a null-modem cable. This type of management
session is referred to as “local” because you must be physically close to
the switch, such as in the wiring closet where the switch is located.
Once the session is started, you will see a menu from which you can
make selections to configure and monitor the switch. You can configure
all of the switch’s operating parameters from a local management
session.
Note
For instructions on starting a local management session, refer to
Starting a Local Management Session on page 29.
AT-S41 User’s Guide
19
Page 20
Telnet Management Session
Any management workstation on your network that has the Telnet
application protocol can be used to manage an AT-8350GB Fast Ethernet
switch. In this guide, a Telnet management session is referred to as a
remote management session because you can manage the switch from
any workstation on your network that has the application protocol. You
do not have to be physically near the switch.
Establishing a Telnet management session with an AT-8350GB stack
requires that the master switch of the stack have an IP address. You
cannot manage an AT-8350GB stack remotely using the Telnet
application protocol if the master switch does not have an IP address.
You can assign the master switch an IP address using a local
management session, as described in the previous section.
Once you have established a Telnet management session with an AT8350GB master switch that has an IP address, you have complete
management access to all of the other AT-8350GB switches in the same
stack.
AT-S41 User’s Guide
Note
For further information on stacking, refer to Stacking on page 23.
If you are just beginning to build your network and have not assigned an
IP address to the switch, you might want to start by reading When Does
an AT-8350GB Switch Need an IP Address? on page 34. This section
contains a brief discussion about when it makes sense to assign an IP
address to the AT-8350GB switch.
Note
For instructions on how to start a Telnet management session, refer
to Starting a Telnet Management Session on page 32.
A Telnet management session gives you complete access to all of a
switch’s operating parameters. You can perform the same functions in a
Telnet management session as you can with a local management
session, except initially assigning the switch’s IP address.
20
Page 21
Web Browser Management Session
You can also use a Web browser to manage a switch. This is another type
of remote management, just as a Telnet management session is
considered remote, because any workstation on your network that has a
Web browser can be used to manage an AT-8350GB stack.
Note
For instructions on starting a Web browser management session,
refer to Starting a Web Browser Management Session on page
154.
AT-S41 User’s Guide
21
Page 22
SNMP Management Session
Another way to remotely manage an AT-8350GB switch is with an SNMP
management program, such as HP Openview. A familiarity with
Management Information Base (MIB) objects is necessary to manage a
switch with an SNMP management program, as this management
method requires loading the AT-8350GB Fast Ethernet switch MIBs into
the SNMP management program. For instructions, refer to your SNMP
management documentation.
The AT-S41 software supports the following MIBs:
❑ SNMP MIB-II (RFC 1213)
❑ Bridge MIB (RFC 1493)
❑ 4-Group RMON MIB (RFC 1757)
❑ Allied Telesyn MIB: atiL2.mib
AT-S41 User’s Guide
Note
SNMP management does not utilize the stacking feature of the AT8350GB switch. Consequently, you must assign an IP address to
each switch that you want to manage with an SNMP program.
22
Page 23
Chapter 2
Stacking
This chapter explains the stacking features of the AT-8350GB switch. The
sections in this chapter include:
❑ Stacking Overview on page 24
❑ Stacking and the Management Software on page 25
23
Page 24
Stacking Overview
The stacking feature can make it easier for you to manage the AT8350GB switches in your network. It offers the following benefits:
AT-S41 User’s Guide
❑ You can manage up to three AT-8350GB switches from one local
or remote management session. All of the switches in a stack can
be managed through one management session with the master
switch of the stack. This eliminates the need to initiate a separate
management session for each switch in your network.
❑ The AT-8350GB switch can also be stacked with the AT-8326GB
switch. Mixed switch stacks can consist of up to six switches, with
the AT-8326GB counting as one switch and the AT-8350GB
counting as two switches.
❑ Stacking allows you to build a switch that is customized to the
needs and requirements of your network.
❑ Stacking switches reduces the number of IP addresses you need
to assign to the switches you are managing, since you can use one
IP address for all of the switches in a stack. You assign the IP
address to the master switch of the stack.
Note
You can set the IP address manually or activate the DHCP services on
a master switch and have the master switch obtain its IP information
from a DHCP server on your network. Initially assigning an IP address
or activating the DHCP services can only be performed through a
local management session.
Note
When you change the configuration of your stack by adding or
removing a switch from the stack, the master switch will
automatically reset all parameters - except for the IP address, user
name, and password - to their factory default settings. This means
that any configurations or virtual LANs you have established on the
master switch will be removed when you change the stacking
configuration.
24
Page 25
Stacking and the Management Software
If you are using the stacking feature of the AT-8350GB switch, the first
thing that you should do before you perform any of the procedures in
this guide is check to be sure that you are configuring the correct AT8350GB switch in the stack. The Stack ID of the switch being managed is
displayed at the top of most of the management menus.
When you start a management session on the master switch, you are by
default addressing that particular switch. The management tasks that
you perform effect only the master switch unless you select another
switch in the stack using the management software.
Most of the menus and pages of the management software contain a
Select Stack ID option that allows you to configure the parameters on
another switch in your switch stack. The method of implementing the
switch parameters varies for each feature of the management software.
Each chapter of this manual contains instructions on how to apply the
featured switch settings to another switch in your stack.
AT-S41 User’s Guide
25
Page 26
Section II
Local and Telnet Management
The chapters in this section explain how to manage an AT-8350GB Fast
Ethernet switch from a local or Telnet management session. The
chapters include:
❑ Chapter 3: Starting a Local or Telnet Management Session on
page 27
❑ Chapter 4: Basic Switch Parameters on page 33
❑ Chapter 5: Port Parameters on page 53
❑ Chapter 6: Port Security on page 59
❑ Chapter 7: Port Trunking on page 66
❑ Chapter 8: Port Monitoring on page 74
❑ Chapter 9: Spanning Tree Protocol on page 80
❑ Chapter 10: Virtual LANs on page 88
❑ Chapter 11: MAC Address Table on page 107
❑ Chapter 12: Quality of Service on page 118
❑ Chapter 13: IGMP Snooping on page 122
❑ Chapter 14: Broadcast Storm Control on page 128
❑ Chapter 15: Port Statistics on page 131
❑ Chapter 16: Management Software Updates on page 145
26
Page 27
Chapter 3
Starting a Local or Telnet Management Session
This chapter contains the procedures for starting local and Telnet
management sessions on an AT-8350GB Fast Ethernet switch. The
sections in this chapter are:
❑ Local Management Session on page 28
❑ Telnet Management Session on page 32
27
Page 28
Local Management Session
There is an RS232 terminal port on the back panel of the AT-8350GB
switch. Use this port to establish a local management session with the
switch’s AT-S41 management software.
A local management session is so named because you must be close to
the switch, usually within a few meters, to start this type of management
session. This typically means that you must be in the wiring closet where
the switch is located.
A switch does not need an IP address for you to manage it with a local
management session. You can start a local management session at any
time on any AT-8350GB switch in your network. Additionally, running a
local management session does not interfere with the flow of Ethernet
traffic through the unit.
When you start a local management session on an AT-8350GB stack, you
can manage just that stack. To start a local management session on
another AT-8350GB stack, you need to establish a separate local
management session on that stack.
AT-S41 User’s Guide
To start a local management session on an AT-8350GB stack, you
connect the management cable to the RS232 port on the master switch
of the stack. Once the management session has been established, you
will have management access to all the switches in the stack.
Note
For more information on stacking, refer to Stacking on page 23.
28
Page 29
AT-S41 User’s Guide
STACK OUT
RS232
Starting a Local
Management
Session
To start a local management session, perform the following procedure:
1. Connect one end of the null modem management cable included
with the switch to the RS232 Terminal Port on the master switch of
the stack.)
Figure 1 Connecting a Terminal or PC to the RS232 Terminal Port
2. Connect the other end of the cable to an RS232 port on a terminal or
a PC with a terminal emulation program.
3. Configure the terminal or terminal emulation program as follows:
❑ Emulation mode: VT100
❑ Baud rate: 9600
❑ Data bits: 8
❑ Parity: None
❑ Stop bits: 1
❑ Flow control: None
❑ Key mode: Terminal keys
29
Page 30
AT-S41 User’s Guide
Note
These are the default settings for the RS232 terminal port. They are
for a DEC VT100 or ANSI terminal, or an equivalent terminal
emulation program.
When the terminal session starts, it displays the management software’s
login prompt, as shown below.
AT-8350GB Management System Version 1.00F
Local - Console
Allied Telesyn International Corp.
Copyright, 2001
==================================================
Login Menu
Login: manager
Password: _
Figure 2 AT-S41 Login Prompt - Local Management Session
4. Enter the login name and password. The default login name and
default password are both “manager.”
The switch then displays the management software’s Main Menu, as
shown below.
AT-8350GB Local Management System
Main Menu
[G]eneral Information
[B]asic Switch Configuration...
[A]dvanced Switch Configuration...
Switch [T]ools...
[S]tatistics
[Q]uit
Command>
Enter the character in square brackets to select option
Figure 3 AT-S41 Main Menu - Local Management Session
To select a menu item, type the corresponding letter.
Type Q to return to the previous menu.
30
Page 31
AT-S41 User’s Guide
Quitting from a
Local Session
To quit a local session, return to the Main Menu and type Q for Quit.
You should always exit from a management session when you are
finished managing a switch. This can prevent unauthorized individuals
from making changes to a switch’s configuration should you leave your
management station unattended.
Note
You cannot operate both a local management session and a Telnet
management session on the same stack simultaneously. Failure to
properly exit from a local or Telnet management session may block
future management sessions.
31
Page 32
Telnet Management Session
You can use the Telnet application protocol from a workstation on your
network to manage an AT-8350GB stack. This type of management is
referred to as remote management because you do not have to be
physically close to the stack to start the session, such as with a local
management session. Any workstation on your network that has the
Telnet application protocol can be used to manage a stack.
In terms of functionality, there are no differences between managing a
stack locally through the RS232 terminal port and remotely with the
Telnet application protocol. You see the same menu selections and have
the same management capabilities, except that you cannot perform IP
address assignment configurations in a Telnet session.
An AT-8350GB stack must have an IP address for you to manage it
remotely using the Telnet application protocol. You can assign an IP
address during a local management session. For instructions on how to
start a local management session, refer to the previous section of this
chapter.
AT-S41 User’s Guide
Starting a Telnet
Management
Session
Quitting from a
Note
For background information on stacking, refer to Stacking on page
23.
To start a Telnet management session, specify the IP address of the AT8350GB stack in the Telnet application protocol. Enter “manager” for
both the default login name and default password.
The Main Menu of a Telnet management session is the same menu that
you see in a local management session, as shown in Figure 3 on page 30.
The menus also function the same way. To make a selection, type its
corresponding letter. To return to a previous menu, type Q.
Note
You can run only one Telnet management session on a switch at a
time. Additionally, you cannot run both a Telnet management
session and a local management session on the same switch at the
same time.
To quit a Telnet session, return to the main menu and type Q for Quit.
Telnet
Management
Session
32
Page 33
Chapter 4
Basic Switch Parameters
This chapter contains a variety of information and procedures. It
contains information about when to assign an IP address to a switch,
resetting the switch, using the switch’s default settings, and more.
Sections in the chapter include:
❑ When Does an AT-8350GB Switch Need an IP Address? on
page 34
❑ Configuring an IP Address on page 35
❑ Configuring System Administration Information on page 37
❑ Configuring the User Interface Security Features on page 39
❑ Activating DHCP on page 42
❑ Configuring SNMP Community Strings and Trap IP Addresses
on page 43
❑ Rebooting a Switch on page 45
❑ Activating the Management Software’s Default Values on
page 46
❑ Viewing the AT-S41 Switch Information on page 48
❑ Pinging a Network Device on page 49
❑ Bootstrap Configuration on page 51
33
Page 34
When Does an AT-8350GB Switch Need an IP Address?
One of your first tasks as you begin to build your network will be to
determine which of the switches in your network should be assigned
unique IP addresses.
AT-S41 User’s Guide
AT-8350GB
Switch
Every AT-8350GB stack in your network that you want to manage
remotely using the Telnet application protocol, a Web browser, or an
SNMP management program must have a unique IP address. You cannot
remotely manage an AT-8350GB stack if it does not have an IP address.
You use the address to identify the stack when you start a remote
management session.
If you assign a stack an IP address, you must also assign it a subnet mask.
The stack uses the subnet mask to determine which portion of an IP
address represents the network address and which portion represents
the end node address.
You must also assign the stack a gateway address if there is a router
between the stack and the remote management workstation. This
gateway address is the IP address of the router through which the stack
and management station will communicate.
You do not need to assign an IP address, subnet mask, or gateway
address if you do not intend to manage an AT-8350GB stack remotely.
The stack will function without these values and you can still configure
all stack parameters through a local management session.
How Do You
Assign an IP
Address?
Note
For further information on stacking, refer to the chapter on
Stacking on page 23.
Once you have decided which AT-8350GB stacks on your network need
an IP address, you have to access the management software on the
stacks and assign the addresses.
One method is to assign the IP configuration information manually. The
procedure for this is explained in the next procedure, Configuring an IP
Address on page 35. Initially assigning an IP address to a stack can only
be done through a local management session.
A second method is to activate DHCP on the stack and have the stack
automatically download its IP configuration information from a DHCP
server on your network. This procedure is explained in Activating DHCP
on page 42.
34
Page 35
Configuring an IP Address
The procedure in this section explains how to manually assign an IP
address, subnet mask, and gateway address to an AT-8350GB stack from
a local or Telnet management session. If the stack is to obtain its IP
configuration from a DHCP server on your network, go to the procedure
Activating DHCP on page 42.
To manually set a stack’s IP address, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type I to select System IP
Configuration.
The System IP Configuration Menu is displayed in Figure 4.
AT-8350GB Local Management System
Basic Switch Configuration -> System IP
Configuration Menu
AT-S41 User’s Guide
MAC Address: 00:40:33:FF:01:3B
IP Address: 149.35.19.3
Subnet Mask: 255.255.0.0
Default Gateway: 0.0.0.0
DHCP Mode: Disabled
---------------------- <COMMAND> ----------
----------------
Set [I]P Address
Set Subnet [M]ask
Set Default [G]ateway
Figure 4 System IP Configuration Menu
3. Change the parameters as desired. To change a parameter, type the
bracketed letter in the corresponding command and, when
prompted, enter the new information.
The commands for changing the parameters in the System IP
Configuration Menu are described below:
[I]P Address
This command specifies the IP address of the stack. You must
specify an IP address if you intend to remotely manage the switch
using a Web browser, a Telnet utility, or an SNMP management
program.
35
Page 36
AT-S41 User’s Guide
Subnet [M]ask
This command specifies a subnet mask for the stack.
Default [G]ateway Address
This command specifies the default router’s IP address. This
address is required if you intend to remotely manage the stack
from a management station that is separated from the stack by a
router.
Enable/Disable [D]HCP Mode
This command allows you to enable and disable DHCP mode. To
learn more about DHCP mode, see Activating DHCP on page 42.
36
Page 37
Configuring System Administration Information
The procedure in this section explains how to assign a name to the stack,
along with other optional information, such as the name of the
administrator responsible for maintaining the stack and the location of
the stack.
To set the administration information, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, select A for System
Administration Configuration.
The System Admin. Configuration Menu is displayed in Figure 4.
AT-8350GB Local Management System
Basic Switch Configuration -> System Admin.
Configuration Menu
AT-S41 User’s Guide
Description: AT-8350GB
Object ID: 1.3.6.1.4.1.207.1.4.52
Name:
Location:
Contact:
---------------------------<COMMAND> ------
---------------
Set System [N]ame
Set System [L]ocation
Set System [C]ontact Information
Figure 5 System Admin. Configuration Menu
3. Change the parameters as desired. To change a parameter, type the
bracketed letter in the corresponding command and, when
prompted, enter the new information.
The commands for changing the parameters in the System
Administration Configuration Menu are described below:
Set System [N]ame
This command specifies a name for the stack (for example, Sales).
This parameter is optional and may contain up to 50 characters.
Note
It is advised that you assign each stack a name. The names can help
you identify the various stacks when you manage them and can
help you avoid performing configuration procedures on the wrong
stack.
37
Page 38
AT-S41 User’s Guide
Set System [L]ocation
This command specifies the location of the stack, such as the
building number and wiring closet number. This parameter is
optional and may contain up to 50 characters.
Set System [C]ontact Information
This command allows you to specify the name of the network
administrator responsible for managing the stack. This parameter
is optional and may contain up to 50 characters.
38
Page 39
Configuring the User Interface Security Features
The procedure in this section explains how to set the AT-S41 user
interface security features, including idle timeouts. It also explains how
to enable and disable the different management session options and
how to change the login user name and password.
To configure a stack’s user interface security features, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, select U for User Interface
Configuration.
The User Interface Configuration Menu is displayed in Figure 4.
AT-8350GB Local Management System
Basic Switch Configuration->User Interface Configuration
Menu
AT-S41 User’s Guide
Console UI Idle Timeout: 5 Min.
Telnet UI Idle Timeout: 5 Min.
Telnet Server: Enabled
SNMP Agent: Enabled
Web Server: Enabled
User Name: manager
------------------------ <COMMAND> -----------------------
Set [C]onsole UI Time Out Enable/Disable
Te[l]net Server
Figure 6 User Interface Configuration Menu
3. Change the parameters as desired. To change a parameter, type the
bracketed letter in the corresponding command and, when
prompted, enter the new information.
The commands for changing the parameters in the User Interface
Configuration Menu are described below:
Set [C]onsole UI Timeout
This command causes the management software to automatically
end a management session if it does not detect any activity from
the local management station after the specified period of time.
This security feature can prevent unauthorized individuals from
using your management station should you step away from your
39
Page 40
AT-S41 User’s Guide
system while configuring a stack. The default for the console
timeout value is 5 minutes.You can set the timeout for between 0
and 60 minutes.
Set [T]elnet UI Timeout
This command causes the management software to automatically
end a Telnet management session if it does not detect any activity
from the remote management station after the specified period
of time. This security feature can prevent unauthorized
individuals from using your management station should you step
away from your system while configuring a stack. The default for
the Telnet timeout value is 5 minutes. You can set the timeout for
between 0 and 60 minutes.
Change Administrator User [N]ame
This command changes the login name for the stack. The user
name can be from 0 to 12 characters in length and can consist of
alphanumeric characters (a to z, A to Z, and 0 to 9). The same user
name is used for both local and remote management sessions.
The default user name is “manager.” The user name is casesensitive.
Change Administrator [P]assword
This command changes the management login password for the
stack. The password can be from 0 to 12 characters in length and
can consist of alphanumeric characters (a to z, A to Z, and 0 to 9).
The same password is used for both local and remote
management sessions. The default password is “manager.” The
password is case-sensitive.
Caution
Do not include spaces or special characters, such as asterisks (*) or
exclamation points (!) in a user name or password. This is particularly
important if you will be managing the switch from a Web browser,
since most Web browsers cannot handle special characters in user
names or passwords.
Enable/Disable Te[l]net Server
This command allows you to disable the Telnet management
feature on the stack, and so prevent individuals from managing
the stack remotely using a Telnet session.
Enable/Disable [S]NMP Agent
This command allows you to disable the SNMP management
feature on the stack, and so prevent individuals from managing
the stack remotely using an SNMP agent.
40
Page 41
AT-S41 User’s Guide
Enable/Disable [W]eb Server
This command allows you to disable the Web browser
management feature on the stack, and so prevent individuals
from managing the stack remotely using a Web browser.
41
Page 42
Activating DHCP
AT-S41 User’s Guide
This application protocol was developed to simplify network
management. It is used to automatically assign IP configuration
information such as an IP address, subnet mask, and, in some instances,
a default gateway address to the devices on your network.
An AT-8350GB stack supports this protocol and can obtain its IP
configuration information from a DHCP server on your network. If you
activate this feature, the stack will seek its IP address, subnet mask, and
default gateway from a DHCP server residing on your network.
Most DHCP services allow you to specify whether the IP address
assignment from the server is to be static or dynamic. If you choose
static, the server will always assign the same IP address to the stack
when the stack is reset or powered on. If you choose dynamic, the server
will assign an unused IP address from its list of potential IP addresses
each time the stack is reset or powered on.
Note
The DHCP option is disabled by default on the switch.
To activate or deactivate the DHCP protocols on the switch, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type I to select System IP
Configuration.
3. Type D to select DHCP.
The following prompt is displayed:
Enable or Disable DHCP mode (E/D)> _
4. Type E to enable DHCP services on the switch or D to disable the
services and press Return. DHCP is disabled by default on the stack.
5. Reboot the stack using either the management software or by
powering on the stack.
42
Page 43
AT-S41 User’s Guide
Configuring SNMP Community Strings and Trap IP Addresses
To configure the SNMP community strings for the stack and to assign up
to four IP addresses of management stations to receive traps from the
stack, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type N to select SNMP
Configuration.
The SNMP Configuration Menu is displayed in Figure 7.
AT-8350GB Local Management System
Basic Switch Configuration -> SNMP Configuration Menu
SNMP Read Community: public
SNMP Write Community: private
Trap Authentication: Enabled
SNMP Trap Receivers:
No. Status IP Address Community
---- -------- ---------------- ------------------1 Deleted <empty> <empty>
2 Deleted <empty> <empty>
3 Deleted <empty> <empty>
4 Deleted <empty> <empty>
-------------------------------- <COMMAND> ---------------
Set SNMP [R]ead Community [A]dd SNMP Trap Receiver
Set SNMP [W]rite Community [D]elete SNMP Trap Receiver
[M]odify SNMP Trap Receiver [E]nable/Disable Authentication Trap
Enable/Disable SNMP [T]rap Receiver [Q]uit to previous menu
Command> _
Figure 7 SNMP Configuration Menu
3. Adjust the parameters as desired. To change a parameter, type the
bracketed letter in the corresponding command and, when
prompted, enter the new information.
The commands are described below:
Set SNMP [R]ead Community
This command specifies the SNMP community name. The
maximum length for a read community name is 20 characters.
Set SNMP [W]rite Community
This command specifies the SNMP write community. The
parameter can be set to private or public.
[M]odify SNMP Trap Receiver
This command specifies trap receiver information. This allows you
to modify the IP address and community name of a trap receiver.
43
Page 44
AT-S41 User’s Guide
Enable/Disable SNMP [T]rap Receiver
This command specifies the status of a trap receiver. This
parameter can be set to E for enable or D to disable.
[A]dd SNMP Trap Receiver
This command allows you to add an SNMP trap receiver. The
range is set of 1 to 4.
[D]elete SNMP Trap Receiver
This command deletes a specified SNMP trap receiver.
[E]nable/Disable Authentication Trap
This command specifies a community’s trap authentication. This
parameter can be set to E for enable or D to disable.
Changes to the SNMP parameters are immediately activated on
the stack.
44
Page 45
Rebooting a Switch
To reboot a switch, perform the following procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Configuration Menu, type R to select System
AT-8350GB Local Management System
Main Menu -> System Reboot Menu
Reboot Status: Stop
Reboot Type: Normal
------------------------- <COMMAND> ---------------------
Set Reboot [O]ption
Start [R]eboot Process
[Q]uit to previous menu
AT-S41 User’s Guide
Reboot.
The System Reboot Menu is displayed in Figure 8.
Command>
Enter the character in square brackets to select option
Figure 8 System Reboot Menu
3. Examine the Reboot Type field on the menu. If it does not state
Normal, perform Steps 4 - 7.
4. From the System Reboot Menu, type O to select Set Reboot Option.
The following prompt is displayed:
Select reboot option (F/I/N)
5. Type N for Normal.
6. Type R to Start Reboot Process.
The following prompt is displayed:
Are you sure you want to reboot the system (Y/N) ->
7. Type Y for yes or N for no.
The stack immediately reloads its operating system. This process
will take a few minutes.
Caution
The stack will not forward traffic during the brief period required to
reload its operating software. Some data traffic may be lost.
45
Page 46
Activating the Management Software’s Default Values
The procedure in this section returns all management parameters in a
stack to their default values. This procedure also deletes any VLANs that
you have created in the stack.
Note
The management software default values can be found in
Appendix A, AT-S41 Default Settings on page 232.
To return the management software to its default settings, perform the
following procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Configuration Menu, type R to select System
Reboot.
The System Reboot Menu is displayed in Figure 9.
AT-S41 User’s Guide
AT-8350GB Local Management System
Main Menu -> System Reboot Menu
Reboot Status: Stop
Reboot Type: Normal
------------------------ <COMMAND> ---------------------
Set Reboot [O]ption
Start [R]eboot Process
[Q]uit to previous menu
Command>
Enter the character in square brackets to select option
Figure 9 System Reboot Menu
3. From the System Reboot Menu, type O to select Set Reboot Option.
The following prompt is displayed:
Select reboot option (F/I/N)
4. If you want all parameter settings including the IP address and subnet
mask return to the default settings, type F. If you want all parameter
settings excluding the IP address and subnet mask return to the
default settings, type I.
5. Type R to Start Reboot Process.
The following prompt is displayed:
46
Page 47
AT-S41 User’s Guide
Are you sure you want to reboot the system (Y/N) ->
6. Type Y for yes or N for no.
If you type Y for yes, the stack settings are reset to the factory
default values and the stack reboots.
Caution
The stack will not forward traffic during the brief period required to
reload its operating software. Some data traffic may be lost.
47
Page 48
Viewing the AT-S41 Switch Information
The procedure in this section explains how to display general
information about the stack, including:
❑ Administration information
❑ Bootcode version number
❑ Hardware information
❑ System information, including MAC address
To display the stack information, perform the following procedure:
1. From the Main Menu, type G to select General Information.
The General Information Menu is displayed in Figure 10.
AT-8350GB Local Management System
Main Menu -> General Information
AT-S41 User’s Guide
System up for: 01hr(s), 38min(s), 58sec(s)
Boot Code Version/Date: 1.00B / Dec 22 2001 16:23:12
Runtime Code Version/Date: 1.00F / Jan 15 2002 19:40:11
Hardware Information
Version: 1.00 DRAM Size: 16MB
Fixed Baud Rate: 9600bps Flash Size: 4MB
Administration Information
Switch Name:
Switch Location:
Switch Contact:
System Address Information
MAC Address: 00:40:33:FF:01:3B
IP Address: 149.35.19.192
Subnet Mask: 255.255.0.0
Gateway: 0.0.0.0
Automatic Network Features
DHCP Mode: Disabled
Press any key to continue...
Figure 10 General Information Menu
There are no configuration options on this page; it is for informational
purposes only.
48
Page 49
Pinging a Network Device
This procedure explains how to instruct the stack to ping a network
device. This procedure is useful in determining if there is a valid link
between the stack and an end node.
To instruct the stack to ping a network device, perform the following
procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Configuration Menu, type P to select Ping
Execution.
The Ping Execution Menu is displayed in Figure 11.
AT-8350GB Local Management System
Main Menu -> Ping Execution
Target IP Address: 0.0.0.0
Number of Requests: 10
Timeout Value (sec): 3
=============== Result ===============
AT-S41 User’s Guide
-------------------------------- <COMMAND> ----------------
Set Target [I]P Address [E]xecute Ping
Set [N]umber of Requests [S]top Ping
Set [T]imeout Value [Q]uit to previous menu
Command> _
Enter the character in square brackets to select option...
Figure 11 Ping Execution Menu
3. Adjust the parameters as desired. To change a value, type its
corresponding bracketed letter and, when prompted, enter the new
value. The parameters are described below.
Set Target [I]P Address
This command specifies the IP address of the end node you want
the stack to ping.
Set [N]umber of Requests
Number of ping attempts the switch should make before it stops
pinging if it does not receive a response. The default number of
ping requests is 10.
49
Page 50
AT-S41 User’s Guide
Set [T]imeout Value
The length of time for which the switch will continue to send
pings if it does not receive a response. The default timeout setting
is 3 seconds.
4. Select one of the two ping test options by typing the corresponding
bracketed letter: Execute Ping or Stop Ping.
[E]xecute Ping
Starts the ping process and displays ping test results. Also allows
you to clean out the ping test configuration cache by typing C for
Clean Ping Data. When you clean out the ping data, you will
remove the ping test results from view.
[S]top Ping
Ends the ping process and displays ping test results gathered
before the pinging was stopped.
An example of the Ping Execution Menu with ping test results is
displayed in Figure 12.
AT-8350GB Local Management System
Main Menu -> Ping Execution
Target IP Address: 124.11.23.24
Number of Requests: 10
Timeout Value (sec): 3
=============== Result ===============
No. 1 60 ms
No. 2 100 ms
No. 3 100 ms
No. 4 100 ms
-------------------------------- <COMMAND> ----------------
Set Target [I]P Address [E]xecute Ping
Set [N]umber of Requests [S]top Ping
Set [T]imeout Value [Q]uit to previous menu
Command> _
Figure 12 Ping Results
The “No.” designation indicates the number of the ping attempt.
For example, No. 1 represents the first ping attempt.
The milliseconds value represent the time taken for the ping
attempt. For example, the first ping test was completed in 60
milliseconds.
50
Page 51
Bootstrap Configuration
The bootstrap feature allows you to download new software and
configuration settings when you power on or reset the stack.
To configure the bootstrap settings on the stack, perform the following
procedure:
1. From the Main Menu, type T to select Switch Tools.
2. From the Switch Tools Configuration Menu, type B to select Bootstrap
Configuration.
The Bootstrap Configuration Menu is displayed in Figure 13.
AT-8350GB Local Management System
Switch Tools Configuration -> BootStrap Configuration
Menu
Boot Load Mode : Local
Boot Mode : TFTP
File Type : IMAGE
AT-S41 User’s Guide
------------------------ <COMMAND> ---------------------
Set [B]oot Load Mode
Set Boot [M]ode
Set [F]ile Type
[Q]uit to previous menu
Command>
Figure 13 Bootstrap Configuration Menu
3. Adjust the parameters as desired. To change a parameter, type the
bracketed letter in the corresponding command and, when
prompted, enter the new information. The commands are described
below:
Set [B]oot Load Mode
Allows the user to determine how the stack should boot up. There
are two boot load options: local and remote.
Local
If you choose the local boot load mode, the stack boots
using the management software that is saved in the
stack’s memory. This is the default boot load mode. If you
are going to use the local boot load mode, you do not
need to configure any of the other parameters on the
Bootstrap Configuration Menu.
51
Page 52
AT-S41 User’s Guide
Remote
If you choose the remote boot load mode, the stack
downloads software from a TFTP server and boots using
the newly downloaded management software.
Set Boot [M]ode
If you are using the remote boot load mode, you need to specify
how the stack should download the new management software.
There are two boot mode options: DHCP and TFTP.
DHCP
If you choose the DHCP boot mode, the stack will use
DHCP to determine the stack IP address, the TFTP server
address, and the image or configuration file name. The
stack will use this information to download the
management software from the TFTP server.
TFTP
If you choose the TFTP boot mode, the stack will use the IP
address that you assigned to the stack on the System IP
Configuration Menu as well as the TFTP server address and
the image or configuration file name that you entered in
the TFTP section of the Software Upgrade Menu.
Set [F]ile Type
If you selected the remote boot load mode, you can choose what
kind of files the switch will download while it is booting up. There
are three file type options:
Image
An image file is the management software for the stack.
Configuration
A configuration file is a file that contains all of the existing
configurations and settings for a stack. You can upload the
configuration file and modify the stack settings and then
download the configuration file back to the stack or onto
multiple stacks that you want to have the same
configurations. The stack(s) will then update their
configuration(s) based on the settings in the configuration
file.
Image and Configuration
This option allows you to download both the
management software and the configuration file.
52
Page 53
Chapter 5
Port Parameters
This chapter contains procedures for viewing and changing the
parameter settings for the individual ports on a stack.
This chapter contains the following procedures:
❑ Configuring Port Parameters on page 54
❑ Configuring Gigabit Port Type on page 57
53
Page 54
AT-S41 User’s Guide
Configuring Port Parameters
To configure the parameter settings for a port on the stack, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type P to select Port
Configuration.
The Port Configuration Menu is displayed in Figure 14.
AT-8350GB Local Management System
Basic Switch Configuration -> Port Configuration Menu
Stack ID: 1
Port Trunk Type Link Status Mode Flow Ctrl
---- ----- -------- ---- ---------- --------------- -------- 1 --- 10/100TX Down Enabled Auto Enabled
2 --- 10/100TX Down Enabled Auto Enabled
3 --- 10/100TX Down Enabled Auto Enabled
4 --- 10/100TX Down Enabled Auto Enabled
5 --- 10/100TX Down Enabled Auto Enabled
6 --- 10/100TX Down Enabled Auto Enabled
7 --- 10/100TX Down Enabled Auto Enabled
8 --- 10/100TX Down Enabled Auto Enabled
9 --- 10/100TX Down Enabled Auto Enabled
10 --- 10/100TX Down Enabled Auto Enabled
11 --- 10/100TX Down Enabled Auto Enabled
12 --- 10/100TX Down Enabled Auto Enabled
-------------------------------- <COMMAND> -------------------------[N]ext Page Set [S]tatus Set [F]low control
[P]revious Page Set [M]ode Select Stack [I]D
[Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 14 Port Configuration Menu
Note
By default, the management software initially displays the ports on
the master switch. To view the ports on another switch in a stack,
use the Select Stack ID command.
The columns on the Port Configuration Menu are described
below.
Port
The port number.
Trunk
The trunk group number. A number in this column indicates that
the port is a member of a trunk.
54
Page 55
AT-S41 User’s Guide
Type
The port types. Ports 1-48 are 10/100Base-TX and can operate at
10/100 Mbps. Ports 49-50 are 1000Base-TX and can operate at
10/100/1000 Mbps.
Link
The status of the link between the port and the end node
connected to the port. Possible values are:
Up - indicates that a valid link exists between the port and the end
node.
Down - indicates that the port and the end node have not
established a valid link.
Status
The current operating status of the port.
You might want to disable a port and prevent packets from being
forwarded if a problem occurs with the node or cable connected
to the port. Once the problem has been fixed, you can enable the
port to resume normal operation. You can also disable an unused
port to secure it from unauthorized connections. Possible values
are:
Enabled - The port is able to send and receive Ethernet frames.
This is the default setting for all of the ports on the switch.
Disabled - The port has been manually disabled.
Mode
The current operating settings of the port. Possible values are:
Auto - Indicates that the port is using Auto-Negotiation to set
operating speed and duplex mode. This is the default setting for
all of the ports.
10-HDx - 10 Mbps in half-duplex mode
100-HDx - 100 Mbps in half-duplex mode
10-FDx - 10 Mbps in full-duplex mode
100-FDX - 100 Mbps in full-duplex mode
1000-FDx - 1000 Mbps in full-duplex mode
1000-HDx - 1000 Mbps in half-duplex mode
The 1000 Mbps settings can only be applied on Ports 49-50.
Flow Ctrl
The current flow control setting on the port. A stack uses a special
pause packet to stop the end node from sending frames. The
pause packet notifies the end node to stop transmitting for a
specified period of time.
55
Page 56
AT-S41 User’s Guide
Possible values are:
Enabled - The port is allowed to use flow control. This is the
default setting for all of the ports on the stack.
Disabled - The port is not configured to use flow control.
Port status, mode, and flow control can be configured from the
Port Configuration Menu.
3. To configure port status, type S to select the Set Status option.
The following prompt is displayed:
Set Status-> Enter port number>
Port number is in range of 1 to 50, 0 to set all
ports.(Except giga port)
Enter a port number. Press Enter and type E for Enable or D for
Disable. The new port status is activated immediately and
displayed in the Port Configuration Menu.
4. To configure port mode, type M to select the Set Mode option.
The following prompt is displayed:
Set Mode-> Enter port number>
Port number is in range of 1 to 50, 0 to set all
ports.(Except giga port)
Enter a port number.
The following prompt is displayed:
Enter new mode for port 3 (a/h/H/f/F)>
a:Auto; h:10-HDx; H:100-HDx; f:10-FDx; F:100-FDx
(case sensitive)
Enter the new operating mode for the port and press Enter. The
new port mode is activated immediately and displayed in the Port
Configuration Menu.
5. To configure flow control, type F to select the Set Flow Control option.
The following prompt is displayed:
Set flow control-> Enter port number>
Port number is in range of 1 to 50, 0 to set all
ports.(Except giga port)
Enter a port number. Press Enter and type E for Enable or D for
Disable. The new flow control setting is activated immediately
and displayed in the Port Configuration Menu.
56
Page 57
Configuring Gigabit Port Type
Ports 49 and 50 can operate as either GBIC ports or as 10/100/1000 Mbps
twisted pair ports. The default port type setting is twisted pair. In order
to change the use of these ports from one type to another, the port type
must be changed in the AT-S41 management software.
To configure the gigabit port type, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type G for Select Giga
Port Type.
The Select Giga Port Type Menu is displayed in Figure 15.
AT-8350GB Local Management System
Basic Switch Configuration -> Select Giga Port Type Menu
Stack ID: 1
Giga Port NO. Port Type
------------- --------------49 TP
50 TP
AT-S41 User’s Guide
-------------------------------- <COMMAND> ------
[S]et giga port type
Select Stack [I]D
[Q]uit to previous menu
Command>
Enter the character in square brackets to select option
Figure 15 Select Giga Port Type Menu
3. Type I to choose Select Stack ID and enter the ID number of the switch
in the stack whose gigabit port type you want to change. (You can
skip this step if you are changing the gigabit port type on the master
switch, which is selected by default.)
4. From the Select Giga Port Type Menu, type S to select Set giga port
type.
The following prompt is displayed:
Enter giga port number >
Port number is in range of 49 to 50
5. Enter the number of the gigabit port whose type you want to change.
The following prompt is displayed:
Set giga port type for port 49 (G/T)>
G for GBIC; T for TP
57
Page 58
AT-S41 User’s Guide
6. Enter your selection. Type G to make the port a GBIC port or T to make
the port a twisted pair port.
The port type change is displayed immediately in the Select Giga
Port Type Menu.
Note
When a gigabit port has been set to operate as a GBIC port instead
of a twisted pair port, the port mode setting cannot be changed in
the Port Configuration Menu. The GBIC port is in a forced 1000 Mbps
full-duplex mode.
58
Page 59
Chapter 6
Port Security
This chapter contains the procedures for setting port security. The
sections in this chapter include:
❑ Port Security Overview on page 60
❑ Configuring Port Security on page 62
❑ Setting a Threshold on page 64
59
Page 60
Port Security Overview
The port security feature can enhance the security of your network. You
can use the feature to control the number of MAC addresses learned on
the ports, and so control the number of network devices that can
forward frames through the stack.
An AT-8350GB stack has three levels of port security: Normal (default),
Limited, and Secure. You can set the security level on a per port basis.
The security levels are briefly described below.
Normal
This is the default port security setting and indicates that port security is
disabled on the port. The switch learns and adds addresses to its
dynamic MAC address table as it receives frames on the port.
Limited
You use this security level to specify the maximum number of dynamic
MAC addresses a port can learn. Once a port has learned its maximum
limit of MAC addresses, it will discard any frames that it receives with a
source MAC address not already learned and stored in the MAC address
table. When a port is set to Limited security, any MAC addresses it
learned prior to being set to Limited security are retained in the MAC
address table and included in the threshold count. The threshold levels
apply only to dynamic MAC addresses. You can continue to add static
MAC addresses to a port operating under Limited security.
AT-S41 User’s Guide
This security level can prevent unauthorized individuals from
connecting to your network and gaining access to network resources.
For example, if an AT-8350GB port is connected to an Ethernet hub with
four workstations attached, you can configure the switch port to learn
only four MAC addresses. Once those addresses are learned, any one
else attempting to connect to the network through the Ethernet hub
would be denied access.
The MAC aging time for the port remains active under this security level.
Inactive dynamic MAC addresses learned on the port are aged out from
the MAC address table.
Secure
This security level causes the port to immediately stop learning new
dynamic MAC addresses. The port forwards frames based on the
dynamic MAC addresses that it has already learned and any static MAC
addresses that the network administrator enters.
60
Page 61
AT-S41 User’s Guide
The MAC aging time is disabled under this security level. The dynamic
MAC addresses learned on a port and added to the MAC address table
remain in the table and are never purged, even when the end nodes are
inactive.
61
Page 62
AT-S41 User’s Guide
Configuring Port Security
To set a port’s security level, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
2. From the Advanced Switch Configuration Menu, type P to select Port
Security Configuration.
The Port Security Configuration Menu is displayed in Figure 16.
AT-8350GB Local Management System
Advanced Switch Configuration -> Port Security Configuration Menu
Stack ID: 1
Port Secure Level Threshold Intrusion Detection Status
---- -------------- ------------ ------------------------------ 1 Normal ----- ---- 2 Normal ----- ---- 3 Normal ----- ---- 4 Normal ----- ---- 5 Normal ----- ---- 6 Normal ----- ---- 7 Normal ----- ---- 8 Normal ----- ---- 9 Normal ----- ---- 10 Normal ----- ---- 11 Normal ----- ---- 12 Normal ----- -----
---------------------------- <COMMAND> ----------------------------- [N]ext Page [S]et Secure Level Set [T]hreshold
[P]revious Page Select Stack [I]D Set Intrusion[D]etection
[Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 16 Port Security Configuration Menu
3. Type I to choose Select Stack ID and enter the Stack ID number of the
switch in the stack on which you want to configure port security. The
master switch is selected by default.
4. Type S to select Set Secure Level.
5. At the prompt, enter the port number whose security you want to set.
Press Enter.
The following prompt is displayed:
Limited or Secure port N <L/S/N>>
L for Limited; S for Secure; N for Normal
62
Page 63
AT-S41 User’s Guide
6. Select the desired security level.
❑ To disable security on the port, type N to select Normal mode. This
is the default security setting. A port operating in Normal mode
does not have any restrictions on the number of MAC addresses it
can learn. The port continues to learn addresses until it reaches
the 254 address maximum of MAC address table.
❑ To specify a maximum number of dynamic MAC addresses each
port can learn, type L to select Limited mode. To specify the limits,
refer to the next procedure.
❑ To stop the port from learning new dynamic MAC addresses and
have it forward frames based only on static MAC addresses and on
those dynamic addresses that it has already learned, type S to
select Secure mode.
Note
Only one security level can be active on a port at a time.
A change to the security level is immediately activated on the port
and the new setting is displayed in the Port Security Configuration
Menu.
63
Page 64
Setting a Threshold
The Limited security mode lets you set a maximum number of dynamic
MAC addresses a port on a switch can learn. Once the maximum number
of MAC addresses have been learned by a port, frames with new source
MAC addresses are discarded and are not forwarded by the port.
Static MAC addresses are not included in the count of the maximum
MAC addresses a port can learn. You can continue to add static MAC
addresses even after a port has learned its maximum number of dynamic
MAC addresses.
To configure Limited security mode for a port, perform the following
procedure:
1. Perform the procedure Configuring Port Security on page 62 to
2. Type T to select Set Threshold.
AT-S41 User’s Guide
configure the port with Limited security.
The following prompt is displayed:
Set threshold->Enter port number >
Port number is in range of 1 to 50
3. Enter the number of the port you want to configure. Press Return.
The following prompt is displayed:
Set threshold->Enter port number >
Threshold is in range of 1 to 170
4. Enter the number of dynamic MAC addresses you want the port to be
able to learn. This will be the new threshold for the port and will be
displayed immediately in the Port Security Configuration Menu.
Note
Threshold is not supported in Normal and Secure modes.
64
Page 65
Setting Intrusion Detection
The Limited and Secure security modes let you determine how the
switch responds when it receives MAC addresses in excess of its
threshold.
1. Perform the procedure Configuring Port Security on page 62.
2. Type D to select Set Intrusion Detection.
The following prompt is displayed:
Set intrusion detection status->Enter port number >
Port number is in range of 1 to 50
3. Enter the number of the port to configure. Press Enter.
The Intrusion Detection Status Menu is displayed in Figure 17
AT-8350GB Local Management System
Advanced Switch Configuration -> Intrusion Detection Status Menu
Item Description
------ ------------------------------------1 No action
2 Disable the port only
3 Notify with trap only
4 Notify with trap and disable the port
AT-S41 User’s Guide
Set intrusion detection status->Enter item number >
Select item number for intrusion detection status
Figure 17 Intrusion Detection Status Menu
4. Type the number associated with the desired setting for Intrusion
Detection Status. The following parameters are available:
1 - No action
2 - Disable the port only
3 - Notify with trap only
4 - Notify with trap and disable the port
A change to detection status is immediately activated on the port.
65
Page 66
Chapter 7
Port Trunking
This chapter contains the procedures for configuring port trunks.
Sections in the chapter include:
❑ Port Trunking Overview on page 67
❑ Creating a Port Trunk on page 70
❑ Deleting a Port Trunk on page 72
❑ Setting Port Trunk Status on page 73
66
Page 67
Port Trunking Overview
Port trunking is an economical way for you to increase the bandwidth
between two Ethernet switches.
A port trunk can consist of up to four 10/100 Mbps ports or two
10/100/1000 Mbps ports that have been grouped together to function
as one logical path. A port trunk increases the bandwidth between
switches and can be useful in situations where a single physical data link
between switches is insufficient to handle the traffic load.
The port trunk always sends packets from a particular source to a
particular destination over the same link within the trunk. A single link is
designated for flooding broadcasts and packets of unknown destination.
Observe the following guidelines when creating a port trunk:
❑ An AT-8350GB master switch in a stack can support up to seven
port trunks at a time. An AT-8350GB slave switch in a stack can
support up to six port trunks at a time.
AT-S41 User’s Guide
❑ A port trunk can consist of up to four 10/100 Mbps ports or two
10/100/1000 Mbps ports.
❑ The ports on the master switch are divided into seven port trunk
groups. The port members of each port group are shown below:
Port Group 1: ports 1-8
Port Group 2: ports 9-16
Port Group 3: ports 17-24
Port Group 4: ports 25-32
Port Group 5: ports 33-40
Port Group 6: ports 41-48
Port Group 7: ports 49-50
❑ The ports of a port trunk must be within the same port trunk
group.
❑ The ports of a port trunk must reside on the same switch in a stack.
❑ Slave switches in a switch stack only have the first six port trunk
groups. The two 10/100/1000 Mbps ports on AT-8350GB slave
switches cannot belong to a port trunk.
❑ The ports of a port trunk must be of the same type. For example,
they can be all twisted pair ports or all fiber optic ports.
❑ When ports are added to a port trunk group, flow control is
67
Page 68
AT-S41 User’s Guide
automatically disabled and the speed/duplex mode is
automatically set to 100Mbps full-duplex for Ports 1-48 and
1000Mbps full-duplex for Ports 49-50.
❑ If you create a VLAN with ports that are port of a port trunk, the
other port members of the port trunk are automatically added to
the VLAN.
❑ When cabling a trunk, the order of the connections should be
maintained on both nodes. The lowest numbered port in a trunk
on the switch should be connected to the lowest numbered port
of the trunk on the other device, the next lowest numbered port
on the switch should be connected to the next lowest numbered
port on the other device, and so on.
For example, assume that you are connecting a trunk between
two AT-8350GB switches. On the first AT-8350GB switch you
choose ports 12, 13, 14, 15 for the trunk. On the second AT8350GB switch you choose ports 21, 22, 23, and 24. To
maintain the order of the port connections, you would
connect port 12 on the first AT-8350GB switch to port 21 on
the second AT-8350GB, port 13 to port 22, and so on.
The example in Figure 18 shows a port trunk of four data links between
two AT-8350GB switches.
1 1
1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
PWR 2
LNK /ACT
PWR 1
Speed
FDX /COL
LED Mode Diag
1 1
1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
PWR 2
LNK /ACT
PWR 1
Speed
FDX /COL
LED Mode Diag
S
M
S
M
48
49
50
S
M
S
M
48
49
50
Figure 18 Port Trunk Example 1
68
Page 69
AT-S41 User’s Guide
The example in Figure 19 shows a port trunk of four data links between
an AT-8350GB switch and an AT-8326GB switch.
1 1
1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
PWR 2
LNK /ACT
PWR 1
Speed
FDX /COL
LED Mode Diag
S
M
S
M
48
49
50
AT-8326GB
24 + 2G Managed Switch
FAULT
PWR
GIGA
LNK/ACT
STACK ID
FDX/COL
GIGA
LNK/ACT
FDX/COL
RS-232
Figure 19 Port Trunk Example 2
69
Page 70
Creating a Port Trunk
This section contains the procedure for creating a port trunk on a stack.
Be sure to review the guidelines in the Port Trunking Overview on
page 67 before performing this procedure.
Caution
Do not connect the cables to the trunk ports on the stack until after
you have configured the trunk with the management software.
Connecting the cables before configuring the software will create a
loop in your network topology. Data loops can result in broadcast
storms and poor network performance.
To create a port trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
AT-S41 User’s Guide
The Trunk Configuration Menu is displayed in Figure 20.
AT-8350GB Local Management System
Advanced Switch Configuration -> Trunk Configuration Menu
Stack ID: 1
Group Status Port Members Trunk ID
----- -------- ------------------------------- ------- 1 Disabled 1
2 Disabled 2
3 Disabled 3
4 Disabled 4
5 Disabled 5
6 Disabled 6
7 Disabled 7
Note: The trunk port members must be within the same port group.
The port members of each port group are shown below.
Port group 1: port 1-8 , group 3: port 17-24 , group 5: port 33-40
Port group 2: port 9-16 , group 4: port 25-32 , group 6: port 41-48
Port group 7: port 49-50
-------------------------------- <COMMAND> -------------------- [A]dd Trunk Member [S]et Trunk status
[R]emove Trunk Member Select Stack [I]D
[Q]uit to previous menu
Command>_
Enter the character in square brackets to select option
Figure 20 Trunk Configuration Menu
3. Type I to select the Select Stack ID command and specify the switch
in the stack on which you want to create the port trunk.
70
Page 71
AT-S41 User’s Guide
4. From the Trunk Configuration Menu, type A to select Add Trunk
Member.
The following prompt is displayed:
Enter trunk group number->
5. Enter the port trunk group containing the ports you want to use in the
trunk.
The following prompt is displayed:
Enter port members (up to 4 ports) for trunk 1>
6. Enter the ports that will constitute the port trunk.You can specify the
ports individually (e.g., 1,2,3,4) or as a range (e.g., 7-10). Press Enter.
The port trunk members will appear in the Trunk Configuration
Menu.
Note
To select ports on another switch in your switch stack, use the Select
Stack ID option.
7. To set trunk status, type S to select Set Trunk Status.
The following prompt is displayed:
Enter trunk group number->
8. Enter the number of the port trunk group that you want to enable or
disable.
The following prompt is displayed:
Enable or Disable trunk group 1 (E/D)>
9. Type E to enable the port trunk group or type D to disable the port
trunk group.
10. Configure the ports on the remote end node for port trunking. Refer
to the instructions included with the end node for directions on how
to create a port trunk.
11. Connect the cables to the ports of the trunk on the switch.
The port trunk is ready for network operations.
71
Page 72
Deleting a Port Trunk
Caution
Disconnect the cables from the port trunk on the switch before
performing the following procedure. Removing a port trunk
without first disconnecting the cables can create loops in your
network topology. Data loops can result in broadcast storms and
poor network performance.
To delete a port trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
2. From the Advanced Switch Configuration Menu, type T to select
Trunk Configuration.
The Port Trunking menu in Figure 20 on page 70 is displayed.
3. Type I to select the Select Stack ID command and specify the switch
in the stack on which you want to delete the port trunk.
AT-S41 User’s Guide
4. From the Trunk Configuration Menu, type R to select Remove Trunk
Member.
The following prompt is displayed:
Enter trunk group number->
5. Enter the port trunk group for the port(s) you want to remove from
the trunk.
The following prompt is displayed:
Enter port members (up to 4 ports) for trunk 1>
6. Enter the ports of the port trunk that you want to delete.You can
specify the ports individually (e.g., 1,2,3,4) or as a range (e.g., 7-10).
Press Enter.
Note
To remove ports from another switch in your switch stack, use the
Select Stack ID option.
Note
You must remove all port members of a port trunk from their trunk
group in order to fully delete the port trunk. You can also disable the
trunk group, but this will not remove the port members from the
port trunk and may cause data loops in your network.
7. The port trunk members are deleted from the port trunk group. The
Trunk Configuration Menu is updated immediately.
72
Page 73
Setting Port Trunk Status
To enable or disable a port trunk, perform the following procedure:
1. From the Main Menu, type A to select the Advanced Switch
Configuration Menu.
2. From the Advanced Switch Configuration Menu, type T to select the
Trunk Configuration Menu.
3. Type I to select the Select Stack ID command and specify the switch
in the stack where you want to set port trunk status.
4. From the Trunk Configuration Menu, type S to select Set Trunk Status.
The following prompt is displayed:
Enter trunk group number->
Enter the number of the port trunk group that you want to enable
or disable.
The following prompt is displayed:
AT-S41 User’s Guide
Enable or Disable trunk group 1 (E/D)>
5. Type E to enable the port trunk group or type D to disable the port
trunk group.
Note
To enable or disable port trunk groups on another switch in your
switch stack, use the Select Stack ID option.
73
Page 74
Chapter 8
Port Monitoring
This chapter contains the procedures for configuring port monitoring.
Sections in the chapter include:
❑ Port Monitoring Overview on page 75
❑ Enabling Port Monitoring on page 76
❑ Modifying Port Monitoring on page 78
❑ Disabling Port Monitoring on page 79
74
Page 75
Port Monitoring Overview
The port monitoring feature allows you to unobtrusively monitor the
traffic being received and transmitted on a port on the switch by having
the traffic copied to another switch port. You can connect a network
analyzer to the port functioning as the monitoring port to monitor the
traffic without impacting network performance or speed.
Observe the following guidelines when configuring port monitoring:
❑ You can monitor only one port on a switch at a time.
❑ You can monitor only one port in a switch stack at a time.
❑ The port to be monitored and the monitoring port must be
located on the same switch.
AT-S41 User’s Guide
75
Page 76
AT-S41 User’s Guide
Enabling Port Monitoring
To enable port monitoring, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
2. From the Advanced Switch Configuration Menu, type M to select Port
Monitoring Configuration.
The Port Monitoring Configuration Menu is displayed in Figure 21.
AT-8350GB Local Management System
Advanced Switch Configuration -> Port Monitoring Configuration Menu
Stack ID Monitoring Port Stack ID Monitored Port Status
--------- --------------- ----------- -------------- ---------- 1 3 1 8 Enabled
-------------------------------- <COMMAND> ------------------------ [S]et Monitoring Port
Set [M]onitored Port
[E]nable/Disable Port Monitoring
[Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 21 Port Monitoring Configuration Menu
3. Type S to select Set Monitoring Port.
The following prompt is displayed:
Set monitoring port->Enter port number>
4. Enter the number of the port you want to function as the monitoring
port. The default monitoring port is Port 2. You can specify only one
monitor port. Press Enter.
Note
For a switch stack, you will be prompted to enter the Stack ID before
entering the port number.
The port number you have just entered is displayed under the
Monitoring Port heading on the Port Monitoring Configuration
Menu.
76
Page 77
AT-S41 User’s Guide
5. Type M to select Set Monitored Port.
The following prompt is displayed:
Set monitored port->Enter port number>
6. Enter the number of the port whose traffic is to be monitored. The
default monitored port is Port 1. You can specify only one port to be
monitored. Press Enter.
The port number you have just entered is displayed under the
Monitored Port heading on the Port Monitoring Configuration
Menu.
7. Type E to select Enable/Disable Port Monitoring.
The following prompt is displayed.
Enable or Disable monitoring (E/D)>
8. Type E to enable port monitoring. The status will change to Enabled
on the Port Monitoring Configuration Menu.
Port monitoring is now functional.
77
Page 78
Modifying Port Monitoring
To modify the port monitoring configuration, perform the following
procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
2. From the Advanced Switch Configuration Menu, type M to select Port
Monitoring Configuration.
The Port Monitoring Configuration Menu is displayed, as shown in
in Figure 21.
3. To change the monitoring port, type S to select Set Monitoring Port.
The following prompt is displayed:
Set monitoring port->Enter port number>
4. Enter the number of the port you want to function as the monitoring
port. You can specify only one monitor port. Press Enter.
AT-S41 User’s Guide
The port number you have just entered is displayed under the
Monitoring Port heading on the Port Monitoring Configuration
Menu instead of the previous monitoring port’s number.
5. To change the monitored port, type M to select Set Monitored Port.
The following prompt is displayed:
Set monitored port->Enter port number>
6. Enter the number of the port whose traffic is to be monitored. You can
specify only one port to be monitored. Press Enter.
The port number you have just entered is displayed under the
Monitored Port heading on the Port Monitoring Configuration
Menu instead of the previously monitored port’s number.
7. Type E to select Enable/Disable Port Monitoring.
The following prompt is displayed.
Enable or Disable monitoring (E/D)>
8. Type E to enable port monitoring. The status will change to Enabled
on the Port Monitoring Configuration Menu.
Note
If you change either the monitoring port or the monitored port, the
port monitoring function will reset itself to Disabled. You must
Enable port monitoring each time you make a change to the port
monitoring configuration.
78
Page 79
Disabling Port Monitoring
To disable port monitoring, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch
Configuration.
2. From the Advanced Switch Configuration Menu, type M to select Port
Monitoring Configuration.
The Port Mirroring Menu is displayed, as shown in Figure 21 on
page 76.
3. Type E to select Enable/Disable Port Monitoring.
The following prompt is displayed:
Enable or Disable monitoring (E/D)>
4. Type D for Disable.
5. The port monitoring status will change to Disabled on the Port
Monitoring Configuration Menu.
AT-S41 User’s Guide
The port monitoring on the switch is disabled. The port that was
functioning as the monitoring port is now available for normal
network operations.
79
Page 80
Chapter 9
Spanning Tree Protocol
This chapter provides introductory information on the Spanning Tree
Protocol (STP) and explains how to adjust the STP bridge and port
parameters. The sections in this chapter include:
❑ STP Overview on page 81
❑ Configuring a Bridge’s STP Settings on page 84
❑ Configuring STP Port Settings on page 86
Note
For detailed information on the Spanning Tree Protocol, refer to
Section 4 of IEEE Std 802.1D, ISO/IEC 10038: 1993.
80
Page 81
STP Overview
AT-S41 User’s Guide
The AT-8350GB Fast Ethernet switch supports the Spanning Tree
Protocol, as specified in the IEEE 802.1D standard. STP can be an
important part of large networks where loops, either planned or
unplanned, exist in the network topology.
A loop exists when two or more nodes on your network can transmit
data to each other over more than one data link. A network loop can
pose a danger to network performance and operability. Data packets
can become caught in repeating cycles, referred to as broadcast storms,
that needlessly consume network bandwidth and often significantly
reduce network performance.
STP prevents data loops from forming in your network by ensuring that
only one path exists between the end nodes in your network. Where
multiple paths exist, STP places the extra paths in a standby or blocking
mode, leaving only one main active path.
The redundant paths can be activated by STP if the main path goes
down. So not only does STP guard against multiple links between end
nodes, but it can also activate backup redundant paths in case a main
link fails.
Selecting a Root
Bridge
The first task that bridges perform when STP is activated on a network is
the selection of a root bridge. The root bridge is used by the other
bridges to determine if there are redundant paths in the network. The
root bridge also distributes network topology information to the other
network bridges.
A root bridge is selected by a combination of a bridge’s priority number,
also referred to as the bridge identifier, and sometimes its MAC address.
The bridge with the lowest bridge priority number in the network is
selected as the root bridge. If two or more bridges have the same bridge
priority number, of those bridges the one with the lowest MAC address
is designated as the root bridge.
The bridge priority number is adjustable on the AT-8350GB switch. By
adjusting the value, you can designate which switch on your network
you want as the root bridge by giving it the lowest bridge priority
number. You should probably also consider which bridge should
function as a backup in the event you need to take the primary root
bridge off-line, and assign that bridge the second lowest bridge
identifier number.
81
Page 82
AT-S41 User’s Guide
Finding and
Resolving
Redundant
Paths
Once the root bridge has been selected, the bridges must determine if
the network contains redundant paths and, if one is found, they must
select a preferred path while placing the redundant paths in a backup or
blocking state.
Where there is only one path between a bridge and a root bridge, the
bridge is referred to as the designated bridge and the port through
which the bridge is communicating with the root bridge is referred to as
the designated port.
If redundant paths exist, the bridges that are a part of the paths must
determine which path will be the primary, active path, and which path(s)
will be placed in the standby, blocking mode. This is accomplished by an
evaluation of port costs. The path offering the lowest cost to the root
bridge becomes the primary path and all other redundant paths are
placed into blocking state.
Every port on a bridge participating in STP has a cost associated with it.
The cost of a port on a bridge is typically based on port speed. The faster
the port, the lower the port cost. The exception to this is the ports on the
root bridge, where all ports have a port cost of 0.
Handling
Topology
Changes
The port costs for the ports on the AT-8350GB Fast Ethernet switch are
adjustable through the management software. Below are the default
port cost values.
Table 1 AT-8350GB Port Costs
Port Speed Port Cost
10 Mbps 10
100 Mbps 10
1000 Mbps 4
The cost of a path is cumulative; the final cost of a path is the value of all
ports between a bridge and the root bridge.
If two paths have the same port cost, the preferred path is selected
through port priority. This is a value that you can adjust on a per port
basis on the switch.
If there is a change in the network topology due to a failure, removal, or
addition of any active components, the active topology also changes.
This may trigger a change in the state of some blocked ports. However, a
change in a port state is not activated immediately.
82
Page 83
AT-S41 User’s Guide
It might take time for the root bridge to notify all bridges that a topology
change has occurred, especially if it is a large network. If a topology
change is made before all bridges have been notified, a temporary data
loop could occur, and that could adversely impact network
performance.
To forestall the formation of temporary data loops during topology
changes, a port designated to change from blocking to forwarding
passes through two additional states, listening and learning, before it
begins to forward frames. The amount of time a port spends in these
states is set by the forwarding delay value. This value states the amount
of time that a port spends in the listening and learning states prior to
changing to the forwarding state.
The forwarding delay value is adjustable on the AT-8350GB Fast Ethernet
switch through the management software. The appropriate value for
this parameter will depend on a number of variables, with the size of
your network being a primary factor. For large networks, you should
specify a value large enough to allow the root bridge sufficient time to
propagate a topology change throughout the entire network. For small
networks, you should not specify a value so large that a topology change
is unnecessarily delayed, which could result in the delay or loss of some
data packets.
Communicating
Between
Bridges
The bridges that are part of a spanning tree domain communicate with
each other using a bridge broadcast frame that contains a special
section devoted to carrying STP information. This portion of the frame is
referred to as the Bridge Packet Data Unit (BPDU). When a bridge is
brought online, it will issue a BPDU in order to determine whether a root
bridge has already been selected on the network and, if not, whether it
has the lowest bridge priority number of all the bridges and should
therefore become the root bridge.
The root bridge will periodically transmit a BPDU to determine whether
there have been any changes to the network topology and to inform
other bridges of topology changes. The frequency with which the root
bridge sends out a BPDU is called the Hello Time. This is a value that you
can set on the AT-8350GB Fast Ethernet switches. The interval is
measured in seconds and the default is 2 seconds. Consequently, if an
AT-8350GB switch is selected as the root bridge of a spanning tree
domain, it will transmit a BPDU every 2 seconds.
83
Page 84
Configuring a Bridge’s STP Settings
This section contains the procedure for configuring a bridge’s STP
settings.
Caution
STP on a bridge is disabled by default. If you enable STP, the bridge
provides default STP parameters that are adequate for most
networks. Changing them without prior experience and an
understanding of how STP works might have a negative effect on
your network. You should consult the IEEE 802.1d standard before
changing any of the STP parameters.
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type S to select Spanning
Tree Configuration.
The Spanning Tree Configuration Menu is displayed in Figure 22.
AT-S41 User’s Guide
AT-8350GB Local Management System
Basic Switch Configuration -> Spanning Tree Configuration Menu
STP Status: Disabled
Root Port: N/A
Root Path Cost: N/A
Designated Root: N/A Bridge ID: 8000 004033FF013B
Hello Time: N/A Bridge Hello Time: 2 Sec.
Maximum Age: N/A Bridge Maximum Age: 20 Sec.
Forward Delay: N/A Bridge Forward Delay: 15 Sec.
------------------------ <COMMAND> ---------------------------Enable/Disable [S]TP Set Bridge Maximum [A]ge
Set Bridge Pr[i]ority Set Bridge Forward [D]elay
Set Bridge [H]ello Time Spanning Tree [P]ort Configuration
[Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 22 Spanning Tree Configuration Menu
The Spanning Tree Configuration Menu displays the current STP
operating parameters in two columns labeled Designated Root
and Bridge ID. The Designated Root column displays the STP
parameters from the root bridge. The Bridge ID column displays
the STP parameters of the switch you are currently managing.
3. Adjust the bridge STP settings as needed. To change a parameter,
type its corresponding bracketed letter and, when prompted, enter
the new information. The parameters are described below.
84
Page 85
AT-S41 User’s Guide
Enable/Disable [S]TP
Enables and disables STP on the switch. The default setting is
disabled.
Set Bridge Pr[i]ority
The priority number for the bridge. This number is used in
determining the root bridge for STP. The bridge with the lowest
priority number is selected as the root bridge. If two or more
bridges have the same priority value, the bridge with the
numerically lowest MAC address becomes the root bridge. When
a root bridge goes off-line, the bridge with the next priority
number automatically takes over as the root bridge. This
parameter can be from 0 (zero) to 65535, with 0 being the highest
priority.
The default value for bridge priority on the AT-8350GB is 8000.
The current bridge priority is displayed in the Bridge ID field on
the Spanning Tree Configuration Menu and is followed by the
switch’s MAC address.
Bridge [H]ello Time
The time interval between generating and sending configuration
messages by the bridge. This parameter can be from 1 to 10
seconds. The default is 2 seconds.
Bridge Maximum [A]ge
The length of time after which stored bridge protocol data units
(BPDUs) are deleted by the bridge. All bridges in a bridged LAN
use this aging time to test the age of stored configuration
messages called bridge protocol data units (BPDUs). For example,
if you use the default 20, all bridges delete current configuration
messages after 20 seconds. This parameter can be from 6 to 40
seconds. The default is 20 seconds.
Note
The aging time for BPDUs is different from the aging time used by
the MAC address table.
Bridge Forwarding [D]elay
The waiting period before a bridge changes to a new state, for
example, becomes the new root bridge after the topology
changes. If the bridge transitions too soon, not all links may have
yet adapted to the change, resulting in network loops. The default
is 15 seconds.
Spanning Tree [P]ort Configuration
Allows configuration of Port Priority, Path Cost, Trunk Priority, and
Trunk Path Cost. Refer to the next section for instructions on how
to configure these parameters.
85
Page 86
AT-S41 User’s Guide
Configuring STP Port Settings
To configure the STP port parameters, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
2. From the Basic Switch Configuration Menu, type S to select Spanning
Tree Configuration.
3. From the Spanning Tree Configuration Menu, type P to select
Spanning Tree Port Configuration.
The Spanning Tree Port Configuration Menu is displayed in Figure
23.
AT-8350GB Local Management System
Spanning Tree Configuration->Spanning Tree Port Configuration Menu
Stack ID: 1
Port Trunk Link State Speed Priority Path Cost MAC Address
---- ------- ---- ---------- ----- -------- --------- ----------- 1 --- Down Forwarding 10 128 10 00:01:12:34:45:1A
2 --- Down Forwarding 10 128 10 00:01:12:34:45:1B
3 --- Down Forwarding 10 128 10 00:01:12:34:45:1C
4 --- Down Forwarding 10 128 10 00:01:12:34:45:1D
5 --- Down Forwarding 10 128 10 00:01:12:34:45:1E
6 --- Down Forwarding 10 128 10 00:01:12:34:45:1F
7 --- Down Forwarding 10 128 10 00:01:12:34:45:20
8 --- Down Forwarding 10 128 10 00:01:12:34:45:21
9 --- Down Forwarding 10 128 10 00:01:12:34:45:22
10 --- Down Forwarding 10 128 10 00:01:12:34:45:23
11 --- Down Forwarding 10 128 10 00:01:12:34:45:24
12 --- Down Forwarding 10 128 10 00:01:12:34:45:25
-------------------------------- <COMMAND> ------------------------- [N]ext Page [S]et Port Priority Set [T]runk Priority
[P]revious Page Set Path [C]ost Set T[r]unk Path Cost
Select Stack [I]D [Q]uit to previous menu
Command>
Enter the character in square brackets to select option
Figure 23 Spanning Tree Port Configuration Menu
4. Adjust the parameter settings as desired. To change a parameter,
type its corresponding bracketed letter and, when prompted, enter
the new information. The parameters are described below.
Set Port Pr[i]ority
Sets the parameter used as a tie breaker when two or more ports
are determined to have equal costs to the root bridge. The range
is 0-255. The default value for priority is 128.
Note
Port priority cannot be set on ports that are part of a trunk group.
86
Page 87
AT-S41 User’s Guide
Set Path [C]ost
Sets the cost parameter used in deciding which port provides the
lowest cost path to the root bridge for that LAN. The range is 1 to
65535.
Set [T]runk Priority
Sets the parameter used as a tie breaker when two or more trunk
groups are determined to have equal costs to the root bridge. The
default value for priority is 128. The range is 0-255.
Set Trunk Path [C]ost
Sets the cost parameter to decide which trunk group provides the
lowest cost path to the root bridge for that LAN. The range is 1 to
65535.
The following information is for display purposes only and cannot
be changed from the Spanning Tree Port Configuration Menu.
Port
The port number.
Trunk
The trunk group number. A number in this column indicates that
the port is a member of a port trunk.
Link
The link status between the port and the end node connected to
the port. Possible values are:
Up - indicates that a valid link exists between the port and the end
node.
Down - indicates that the port and the end node have not
established a valid link.
State
This parameter indicates the current STP status of the port.
Possible values are:
❑ Forwarding
❑ Listening
❑ Learning
❑ Blocking
Speed
The operating speed of the port.
MAC Address
The MAC addresses of the ports on the switch.
87
Page 88
Chapter 10
Virtual LANs
This chapter contains basic information about virtual LANs (VLANs). It
also contains the procedures for creating, modifying, and deleting
VLANs from a local or Telnet management session.
This chapter contains the following sections:
❑ VLAN Overview on page 89
❑ VLAN Modifiers on page 91
❑ Creating a VLAN on page 95
❑ Viewing or Modifying a VLAN on page 100
❑ Deleting a VLAN on page 104
❑ Setting GVRP Status on page 105
❑ Resetting the VLAN Parameters to Default on page 106
88
Page 89
VLAN Overview
AT-S41 User’s Guide
A VLAN is a group of ports on an Ethernet switch that forms a logical
Ethernet segment. A VLAN can consist of all the ports on an Ethernet
switch or just a few ports. A VLAN can also span switches and consist of
ports from multiple Ethernet switches and stacks. The ports of a VLAN
form an independent broadcast domain where the traffic generated by
the end nodes of a VLAN remains within the VLAN and does not cross
over to the end nodes of other VLANs unless there is a connection
device, such as a router or Layer 3 switch.
With VLANs, you can segment your network through the switch’s
management software and so be able to group end nodes with related
functions into their own separate, logical LAN segments. These VLAN
groupings can be based on similar data needs or security requirements.
For example, you could create separate VLANs for the different
departments in your company, such as one for Sales and another for
Marketing.
VLANs offer several important benefits:
❑ Improved network performance
Network performance often suffers as networks grow in size and
as data traffic increases. The more end nodes on each LAN
segment vying for bandwidth, the greater the likelihood overall
network performance will decrease.
VLANs improve network performance because VLAN data traffic
stays within the VLAN. The end nodes of a VLAN receive traffic
only from end nodes in the same VLAN. This reduces the need for
end nodes to handle traffic not destined for them. It also frees up
bandwidth within the logical workgroups.
Additionally, since each VLAN constitutes a separate broadcast
domain, broadcast traffic remains within the VLAN. This too can
improve overall network performance.
❑ Increased security
Since data traffic generated by an end node in a VLAN is restricted
only to the other end nodes in the same VLAN, VLANs can be used
to control the flow of data in your network and prevent data from
flowing to unauthorized end nodes.
❑ Simplified network management
VLANs can also simplify network management. Before the advent
of VLANs, physical changes to the network often had to been
made at the switches in the wiring closets. For example, if an
89
Page 90
AT-S41 User’s Guide
employee changed departments, changing the employee’s LAN
segment assignment might require a change to the wiring at the
switches.
But with VLANS, you can change the LAN segment assignment of
an end node connected to the switch through the switch’s AT-S41
management software. VLAN memberships can be changed any
time through the management software without moving the
workstations physically, or having to change group memberships
by moving cables from one switch port to another.
Additionally, a virtual LAN can span more than one switch. This
means that the end nodes of a VLAN do not need to be connected
to the same switch and so are not restricted to being in the same
physical location.
VLAN Modes An AT-8350GB stack complies with the IEEE 802.1Q standard and
supports two types of VLANs:
❑ Port-based VLANs
❑ Tagged VLANs
Note
The differences between port-based and tagged VLANs are
described in more detail in Untagged and Tagged Ports on page
91.
90
Page 91
AT-S41 User’s Guide
VLAN Modifiers
The parts that make up a VLAN are:
❑ VLAN name
❑ VLAN Identifier
❑ Untagged ports
❑ Tagged ports
❑ Port VLAN Identifier
VLAN Name Every VLAN in your network should be given a name. The name should
reflect the function of the network devices that are be members of the
VLAN. Examples include Sales, Production, and Engineering.
VLAN Identifier Each VLAN in a network must be assigned a number. This number is
called the VLAN identifier (VID). This number will uniquely identify each
VLAN in your network. You assign the VID number when you create the
VLAN.
Untagged and
Tagged Ports
If a VLAN consists of ports located on only one AT-8350GB switch, you
must assign it a VID unique from all other VLANs in your network.
In instances where a VLAN spans multiple AT-8350GB switches, the VID
for the VLAN must be the same on each switch. This enables the
switches to recognize and forward frames belonging to the same VLAN
even though the VLAN spans multiple devices.
For example, if you had a VLAN titled Marketing that spanned three AT8350GB switches, you would assign the Marketing VLAN on each switch
the same VID.
There are two kinds of ports that you can create in IEEE 802.1Qcompliant VLANs: tagged ports and untagged ports. The basic difference
between the two is that an untagged port can be a member of only one
VLAN at a time while a tagged port can be a member of multiple VLANs.
Untagged Ports
A VLAN that consists of only untagged ports is referred to as a portbased VLAN. In order for frames from port-based VLANs to cross a VLAN
boundary, there must be a Layer 3 switch or router providing a
connection between the VLANs.
91
Page 92
AT-S41 User’s Guide
In a VLAN that consists of only untagged ports, port membership is
determined by what is referred to as the port VLAN identifier (PVID). This
is a number that you must assign to a port to make it an untagged
member of a VLAN. The PVID of a port will be the same as the VID of the
VLAN in which the port is to be an untagged member. You can assign
each port only one PVID. Consequently, a port can be an untagged
member of only one VLAN at a time.
Here is an example. Let’s assume that you are creating a new VLAN
called Sales and that you assigned the VLAN a VID of 4. You have
decided that Ports 1 through 4 on a switch will be untagged members of
the new VLAN. Consequently, you would assign Ports 1 to 4 PVIDs of 4,
the same as the VID. Now, when the switch receives a frame on one of
the ports on the Sales VLAN and it needs to broadcast the frame to the
other ports of the VLAN, it will know that the VLAN consists of Ports 1 to
4.
Note
The AT-8350GB stack is pre-configured with one port-based VLAN,
called the Default VLAN. All ports on the stack are members of this
VLAN. The Default VLAN has a VID of 1. Consequently, all the ports in
the VLAN have a PVID value of 1.
The ports are called untagged because the switch assumes that the
frames received on this type of port will not contain any information that
indicates VLAN membership and that VLAN membership will be
determined solely by a port’s PVID. (This contrasts with tagged ports,
explained next, where VLAN membership is determined by information
within the frames themselves.) Frames received on untagged ports and
lacking any VLAN identifying information are referred to as untagged
frames.
When a switch receives a frame on an untagged port, it first examines
the PVID of the port on which the frame was received and then adds the
PVID to the frame itself. It then examines the destination MAC address of
the frame. If the destination address is in the MAC address table and if
the switch port where the destination node is located is part of the same
VLAN as the port that received the frame, the switch sends the frame out
the port to the destination node.
If the destination MAC address is not in the MAC address table, the
switch broadcasts the frame to all the ports that share the same PVID as
the port that received the frame.
92
Page 93
AT-S41 User’s Guide
Tagged Ports
The second type of port that can be a member of a VLAN is called a
tagged port. There are several principal differences between a tagged
port and an untagged port.
As explained earlier, a switch determines the VLAN membership of a
frame received on an untagged port by examining the PVID that you
assigned to the port.
But when a frame is received on a tagged port, the switch examines the
frame itself to determine VLAN membership. The VLAN information
within an Ethernet frame is referred to as a tag or tagged header. A tag,
which follows the source and destination addresses in a frame, contains
the VID of the VLAN to which the frame belongs (IEEE 802.3ac standard).
When a switch receives a frame with a VLAN tag, referred to as a tagged
frame, the switch forwards the frame only to those ports that share the
same VID.
Any network device connected to a tagged port must be IEEE 802.1Qcompliant. This is the standard that outlines the requirements and
standards for tagging. The device must be able to process the tagged
information on received frames and add tagged information to
transmitted frames.
The benefit of tagged ports is that they can belong to more than one
VLAN at one time. This can greatly simplify the task of adding shared
devices to the network. For example, an IEEE 802.1Q-compliant server
can be configured to accept and return packets from many different
VLANs simultaneously.
Tagged VLANs are also useful where multiple VLANs span across
switches. You can use one port per switch for connecting all VLANs on
the switch to another switch.
The IEEE 802.1Q standard deals with how this tagging information is
used to forward the traffic throughout the switch. The handling of
frames tagged with VIDs coming into a port is straightforward. If the
incoming frame’s VID tag matches one of the VIDs of a VLAN that the
port is a tagged member of, the frame will be accepted and forwarded to
the appropriate ports. If the frame’s VID does not match any of the
VLANs that the port is a member of, the frame will be discarded.
So how do you indicate which ports are to be tagged and which are to
be untagged when you create a VLAN? The rule is straightforward. If you
assign a port to only one VLAN, the switch assumes it is to be an
untagged port. If you assign a port to more than one VLAN, the switch
assumes that the port is to be both a tagged and untagged port.
93
Page 94
AT-S41 User’s Guide
A VLAN that contains only tagged frames or that contains a combination
of tagged and untagged ports is referred to as a tagged VLAN. And, as
explained previously, any device that you connect to a tagged port of a
tagged VLAN must be IEEE 802.1Q-compliant.
General Rules
to Creating a
VLAN
Below are general rules to observe when creating a VLAN.
❑ An AT-8350GB switch can support up to256 port-based and
tagged VLANS.
❑ Each VLAN must be assigned a unique VID. However, if a particular
VLAN spans multiples AT-8350GB stacks, each part of the VLAN on
the different stacks must be assigned the same VID.
❑ A port can be an untagged member of only one VLAN at a time.
❑ A port can be a tagged member of multiple VLANs.
❑ You must assign each untagged port a PVID. The PVID of an
untagged port must match the VLAN’s VID. You must assign this
value manually when you create the VLAN.
❑ A port-based VLAN that spans multiple stacks requires a port on
each stack where the VLAN is located to function as a connection
between the various parts of the VLAN reside.
❑ If there are end nodes in different VLANs that need to
communicate with each other, a router or Layer 3 switch is
required to connect the VLANs.
94
Page 95
Creating a VLAN
Phase 1 This phase assigns a VID and a name to your VLAN and also designates
AT-S41 User’s Guide
The procedure for creating a new VLAN is divided into the following
phases:
❑ Phase 1: Assigning a VID and name and specifying the port
members
❑ Phase 2: Converting tagged ports into untagged ports
Performing Phase 1 is required whenever you create a new VLAN. Every
VLAN should have a name, VID, and ports. You will need to perform
Phase 2 if some or all of the ports of a VLAN will be untagged ports or if
you want to creat a port-based VLAN. Ports that you want to function as
untagged ports must be converted by changing their PVIDs, as
explained in Phase 2.
To create a new VLAN, start by performing the procedure in Phase 1.
the VLAN port members.
1. From the Main Menu, type A to select the Advanced Switch
Configuration Menu.
2. From the Advanced Switch Configuration Menu, type V to select
VLAN Management.
The VLAN Management Menu is displayed in Figure 24.
AT-8350GB Local Management System
Advanced Switch Configuration -> VLAN Management Menu
GVRP Status :Disabled
VLAN ID VLAN Name VLAN Type
------- -------------------------------- ---------1 Default VLAN Permanent
--------------------------- <COMMAND> -----------------------------[N]ext Page [C]reate VLAN C[o]nfig VLAN Member
[P]revious Page [D]elete VLAN [S]et Port Config
[R]eset VLAN to Default Set [G]VRP Status [Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 24 VLAN Management Menu
95
Page 96
AT-S41 User’s Guide
3. From the VLAN Management Menu, select C for Create VLAN.
The VLAN Creation Menu is displayed in Figure 25.
AT-8350GB Local Management System
Advanced Switch Configuration -> VLAN Creation Menu
VLAN Index :
VLAN Name :
Device Member
-------- ----------------------------------------------------1
2
3
---------------------------- <COMMAND> -----------------------------
Set VLAN [I]D/[I]ndex [S]elect Port Member
Set VLAN [N]ame [A]pply
[Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 25 VLAN Creation Menu
4. Type I to select Set VLAN ID/Index.
The following prompt is displayed:
Enter VLAN ID ->Enter VLAN ID >
5. Enter a VID for the new VLAN. The VID can be between 2 and 4094.
Press Enter.
If this VLAN will be unique in your network, then its VID must also be
unique from all other VIDs in the network.
If this VLAN will be part of a larger VLAN that spans multiple AT8350GB stacks, than the VID value for the VLAN should be the same
on each stack. For example, if you are creating a VLAN called Sales
that will span three AT-8350GB stacks, you must assign the Sales
VLAN on each stack the same VID value.
6. Type N to select Set VLAN Name.
The following prompt is displayed:
Enter VLAN Name ->Enter VLAN Name >
7. Enter a VLAN name. Press Enter
96
Page 97
AT-S41 User’s Guide
The name should reflect the function of the end nodes that will be a
part of the VLAN (for example, Sales or Accounting). The name can
contain spaces but not special characters, such as asterisks (*) or
exclamation points (!). The name can contain up to 32 characters.
If the VLAN will be unique in your network, then the name should be
unique as well.
If the VLAN will be part of a larger VLAN that spans multiple stacks,
then the name for the VLAN should be the same on each stack where
end nodes of the VLAN are connected.
8. Type S to choose Select Port Member.
The following prompt is displayed:
Enter Stack ID >
9. Enter the stack ID of the switch.
The following prompt is displayed:
Enter port number>
10. Enter the ports, both tagged and untagged, that are to be members
of the new VLAN. Press Return.
You can specify the ports individually (e.g., 2,3,5), as a range (e.g., 7-9),
or both (e.g., 2,5,7-9).
11. Type A to select Apply.
You have now created a new VLAN. You gave it a VID and a name. You
also specified which ports were to be members of the new VLAN.
However, it is important to note that, by default, all of the ports that
you just added to the new VLAN are tagged ports, meaning they are
shared ports. The ports are still members of their current VLANs.
If you want to convert the ports into untagged ports, you must
perform the procedure in Phase 2.
Phase 2 This phase of creating a new VLAN converts the tagged ports that you
added to the new VLAN into untagged ports. This involves changing the
PVIDs of the ports so that they match the VID of the new VLAN. For
example, if you assigned the new VLAN a VID of 4, you must change the
PVIDs of the untagged ports to 4. The following procedure explains how
to accomplish this.
The following procedure assumes that you are continuing directly from
Phase 1.
97
Page 98
AT-S41 User’s Guide
1. From the VLAN Creation Menu, type Q to select Quit to Previous
Menu.
The VLAN Management Menu is displayed again.
2. Type S to select Set Port Config.
The VLAN Port Configuration Menu is displayed in Figure 26.
AT-8350GB Local Management System
VLAN Management -> VLAN Port Configuration Menu
Stack ID: 1
Port PVID
---- --- 1 1
2 1
3 1
4 1
5 1
6 1
7 1
8 1
-------------------------------- <COMMAND> -----------------------
[N]ext page Set Port [V]ID
[P]revious Page Set Stack [I]D
[Q]uit to previous menu
Command> _
Enter the character in square brackets to select option
Figure 26 VLAN Port Configuration Menu
This menu lists the ports on the switch and each port’s current PVID
assignment. For example, in the figure above, Ports 1 to 8 on the
switch all have a PVID of 1, meaning that they are untagged members
of the Default VLAN, which has a VID of 1.
The menu, when initially displayed, lists the PVIDs for the ports on the
master switch of the stack.
3. Type I to choose Select Stack [I]D and enter the number of a switch in
the stack containing a port whose PVID you need to change if the port
is on a slave switch.
The VLAN Port Configuration Menu for the selected switch is
displayed.
4. To set a PVID, type V to select the Set Port VID option.
The following prompt is displayed:
Set PVID->Enter port number>
98
Page 99
AT-S41 User’s Guide
5. Enter the port number whose PVID you want to change.
A prompt similar to the following is displayed:
Enter PVID for port 1>
6. Enter the new PVID for the port.
Once a new PVID has been assigned to a port, the port is an untagged
member of that VLAN and only that VLAN.
If the port is also an tagged member of any VLANs, it remains as a
tagged member of those VLANs.
7. Repeat Steps 3 to 6 to assign new PVIDs to any other ports that are to
be untagged members of the new VLAN.
8. Once you have changed all of the appropriate PVIDs, type Q to select
Quit to Previous Menu.
The VLAN Management Menu in Figure 24 on page 95 is displayed
again.
This completes the procedure for creating a new VLAN.
99
Page 100
Viewing or Modifying a VLAN
There are two phases to modifying a VLAN. You might need to perform
both phases or just one of them, depending on what it is you want to
change in the VLAN. The phases are:
❑ Phase 1: In this phase, you can view a VLAN’s configuration, as well
as change a VLAN’s name and add or remove tagged ports.
❑ Phase 2: In this phase, you can add or remove untagged ports.
Phase 1 This phase explains how to display the Config VLAN Member Menu of a
VLAN. This menu displays a VLAN’s configuration. You can also use the
menu to change a VLAN’s name and add or remove tagged ports.
Note
If you do not want to change a VLAN’s name or add or remove
tagged ports, then skip this procedure and go straight to Phase 2 to
add and remove untagged ports.
AT-S41 User’s Guide
1. From the Main Menu, type A to select the Advanced Switch
Configuration Menu.
2. From the Advanced Switch Configuration Menu, type V to select
VLAN Management.
3. From the VLAN Management Menu, select O for the Config VLAN
Member option.
The following prompt is displayed:
Enter VLAN ID>
4. Enter the VID of the VLAN you want to view or modify.
100
Loading...