trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations
mentioned herein are trademarks or registered trademarks of their respective owners.
Allied Telesyn, Inc. reserves the right to make changes in specifications and other information contained in this document
without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesyn,
Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits,
arising out of or related to this manual or the information contained herein, even if Allied Telesyn, Inc. has been advised of,
known, or should have known, the possibility of such damages.
Online Support ........................................................................................................................................... 14
Email and Telephone Support.................................................................................................................... 14
Ports 15 and 16 on the AT-GS950/16 Switch and Ports 23 and 24 on the AT-GS950/24 Switch.................... 20
Section I: Using the Menus Interface ......................................................................21
Chapter 2: Getting Started with the Menus Interface ................................................................................. 23
Starting a Local Management Session............................................................................................................. 24
Using the Menus Interface................................................................................................................................ 26
Quitting from a Local Management Session..................................................................................................... 27
Configuring the IP Address, Subnet Mask, and Gateway Address .................................................................. 30
Enabling and Disabling the DHCP Client ......................................................................................................... 33
Configuring System Administration Information ............................................................................................... 34
Setting the User Interface Configuration .......................................................................................................... 36
Viewing Switch Information .............................................................................................................................. 39
Rebooting the Switch........................................................................................................................................ 42
Pinging a Remote System ................................................................................................................................ 44
Returning the AT-S79 Management Software to the Factory Default Values .................................................. 47
Chapter 4: Port Configuration ...................................................................................................................... 49
Displaying the Port Parameters........................................................................................................................ 50
Enabling and Disabling a Port .......................................................................................................................... 53
Setting a Port’s Speed and Duplex Mode......................................................................................................... 54
Changing the Flow Control Setting................................................................................................................... 56
Chapter 5: Port Trunking .............................................................................................................................. 57
Port Trunking Overview .................................................................................................................................... 58
Port Trunking Guidelines............................................................................................................................ 58
Creating a Port Trunk ....................................................................................................................................... 59
Modifying a Port Trunk ..................................................................................................................................... 62
Enabling and Disabling a Port Trunk ................................................................................................................ 63
3
Contents
Chapter 6: Port Mirroring .............................................................................................................................. 65
Port Mirroring Overview ....................................................................................................................................66
Configuring Port Mirroring ................................................................................................................................. 67
Disabling Port Mirroring .................................................................................................................................... 69
VLAN Features ................................................................................................................................................. 72
Types of VLANs.......................................................................................................................................... 73
Port VLAN Identifier.................................................................................................................................... 75
Guidelines to Creating a Port-based VLAN ................................................................................................75
Drawbacks of Port-based VLANs ............................................................................................................... 76
Port-based Example 1 ................................................................................................................................77
Port-based Example 2 ................................................................................................................................78
Tagged and Untagged Ports ...................................................................................................................... 81
Port VLAN Identifier.................................................................................................................................... 81
Guidelines to Creating a Tagged VLAN ..................................................................................................... 81
Tagged VLAN Example .............................................................................................................................. 82
Creating a VLAN ...............................................................................................................................................84
Configuring the PVID of Untagged Ports .......................................................................................................... 87
Displaying the VLANs ....................................................................................................................................... 89
Modifying a VLAN ............................................................................................................................................. 91
Deleting a VLAN ............................................................................................................................................... 93
Chapter 8: Quality of Service (QoS) ............................................................................................................. 95
Bridge Priority and the Root Bridge .......................................................................................................... 108
Designated Bridge and Designated Port............................................................................................109
Path Costs and Port Costs.................................................................................................................109
Port Priority ........................................................................................................................................ 110
Hello Time and Bridge Protocol Data Units (BPDUs) ........................................................................ 111
Point-to-Point and Edge Ports............................................................................................................111
Mixed STP and RSTP Networks .............................................................................................................. 113
Rapid Spanning Tree and VLANs ............................................................................................................ 114
Enabling or Disabling RSTP ...........................................................................................................................115
Configuring the RSTP Bridge Settings............................................................................................................ 118
General Steps .......................................................................................................................................... 133
Port-based Network Access Control Guidelines ...................................................................................... 133
Configuring 802.1x Port-based Network Access Control ............................................................................... 136
Downloading a New Management Software Image Using TFTP ................................................................... 152
Section II: Using the Web Browser Interface ....................................................... 155
Chapter 14: Starting a Web Browser Management Session ................................................................... 157
Establishing a Remote Connection to Use the Web Browser Interface ......................................................... 158
Web Browser Tools ........................................................................................................................................ 161
Quitting a Web Browser Management Session.............................................................................................. 162
Configuring an IP Address, Subnet Mask and Gateway Address .................................................................. 164
Enabling and Disabling the DHCP Client ....................................................................................................... 166
Configuring System Administration Information ............................................................................................. 167
Setting the User Interface Configuration ........................................................................................................ 169
Viewing System Information ........................................................................................................................... 172
Rebooting a Switch......................................................................................................................................... 175
Pinging a Remote System .............................................................................................................................. 176
Returning the AT-S79 Management Software to the Factory Default Values ................................................ 178
Chapter 16: Port Configuration .................................................................................................................. 179
Viewing and Configuring Ports Using the Port Configuration Page................................................................ 180
Viewing and Configuring Ports Using the Configuration of Port Page............................................................ 183
Displaying Port Statistics ................................................................................................................................ 186
Chapter 17: Port Trunking .......................................................................................................................... 189
Creating a Port Trunk ..................................................................................................................................... 190
Modifying a Port Trunk ................................................................................................................................... 192
Enabling and Disabling a Port Trunk .............................................................................................................. 193
Chapter 18: Port Mirroring .......................................................................................................................... 195
Configuring Port Mirroring .............................................................................................................................. 196
Disabling Port Mirroring .................................................................................................................................. 197
Creating a VLAN............................................................................................................................................. 200
Configuring the PVID of Untagged Ports ........................................................................................................ 202
Displaying the VLANs..................................................................................................................................... 204
Modifying a VLAN........................................................................................................................................... 205
Deleting a VLAN ............................................................................................................................................. 207
Chapter 20: Quality of Service (QoS) ......................................................................................................... 209
Mapping CoS Priorities to Egress Queues ..................................................................................................... 210
Configuring RSTP Port Settings .....................................................................................................................219
Configuring the Basic RSTP Port Settings ...............................................................................................219
Configuring the Advanced RSTP Port Settings ........................................................................................ 220
Viewing the RSTP Topology ........................................................................................................................... 222
Chapter 22: 802.1x Port-based Network Access Control ......................................................................... 225
Configuring 802.1x Port-based Network Access Control ................................................................................ 226
Index .............................................................................................................................................................. 241
6
Figures
Figure 1. Connecting the Management Cable to the Console Port .....................................................................................24
Figure 3. Main Menu............................................................................................................................................................25
Figure 5. System IP Configuration Menu.............................................................................................................................31
Figure 6. System Administration Configuration Menu .........................................................................................................34
Figure 7. User Interface Configuration Menu.......................................................................................................................36
Figure 8. General Information Menu....................................................................................................................................39
Figure 10. System Reboot Menu.........................................................................................................................................43
Figure 11. Ping Execution Menu .........................................................................................................................................44
Figure 13. Port Configuration Menu.....................................................................................................................................50
Figure 16. Port Mirroring Menu............................................................................................................................................67
Figure 17. Port-based VLAN - Example 1 ...........................................................................................................................77
Figure 18. Port-based VLAN - Example 2 ...........................................................................................................................78
Figure 19. Example of a Tagged VLAN...............................................................................................................................82
Figure 20. VLAN Management Menu ..................................................................................................................................84
Figure 22. Config VLAN Member Menu...............................................................................................................................90
Figure 23. Quality of Service Configuration Menu ...............................................................................................................99
Figure 24. Traffic Class Configuration Menu .....................................................................................................................100
Figure 25. Port Priority Configuration Menu ......................................................................................................................103
Figure 27. Edge Port .........................................................................................................................................................113
Figure 28. Point-to-Point and Edge Port............................................................................................................................113
Figure 31. RSTP Basic Port Configuration Menu ..............................................................................................................121
Figure 32. RSTP Advanced Port Configuration Menu .......................................................................................................124
Figure 33. Topology Information Menu..............................................................................................................................126
Figure 34. Example of the Authenticator Role ...................................................................................................................132
Figure 35. Port-based Authentication Across Multiple Switches .......................................................................................135
Figure 36. Port Based Access Control Configuration Menu ..............................................................................................136
Figure 37. RADIUS Server Configuration Menu ................................................................................................................143
Figure 38. Storm Control Configuration Menu...................................................................................................................149
Figure 39. Software Upgrade Menu (1 of 2) ......................................................................................................................153
Figure 40. Software Upgrade Menu (2 of 2) ......................................................................................................................153
Figure 41. Entering a Switch’s IP Address in the URL Field..............................................................................................158
Figure 43. Home Page for the AT-GS950/24 ....................................................................................................................159
Figure 44. IP Configuration Page ......................................................................................................................................164
Figure 46. User Interface Page .........................................................................................................................................169
Figure 47. Switch Information Page...................................................................................................................................172
Figure 48. System Reboot Configuration Page .................................................................................................................175
Figure 49. Ping Test Configuration Page...........................................................................................................................176
Figure 50. Ping Test Results Page....................................................................................................................................177
7
Figures
Figure 51. Port Configuration Page ...................................................................................................................................180
Figure 52. Configuration of Port Page ...............................................................................................................................183
Figure 55. Port Mirroring Page...........................................................................................................................................196
Figure 69. Broadcast Storm Control Page.........................................................................................................................232
Figure 70. IP Configuration Page.......................................................................................................................................235
Table 2. Default Mappings of IEEE 802.1p Priority Levels to Egress Port Priority Queues ...............................................97
Table 3. RSTP Auto-Detect Port Costs ............................................................................................................................110
Table 4. RSTP Auto-Detect Port Trunk Costs ..................................................................................................................110
Table 5. Port Priority Value Increments ............................................................................................................................111
Table 6. RSTP Point-to-Point Status ................................................................................................................................125
Table 7. RSTP Point-to-Point Status ................................................................................................................................221
This guide contains instructions on how to use the AT-S79 management
software to manage and monitor the AT-GS950/16 and AT-GS950/24
Gigabit Ethernet Smart switches.
The AT-S79 management software has two management interfaces: a
menus interface and a web browser interface. You access the menus
interface through the console port on the switch. You access the web
browser interface from any management workstation on your network that
has a web browser application. For background information on the
management interfaces, refer to Chapter 1, “Overview” on page 15.
Note
The AT-S79 management software does not support remote
management with the Telnet application protocol or an SNMP
program.
Note
The interface illustrations in this book show the interface for the
AT-GS960/16 Gigabit Ethernet Smart Switch. With the exception of
the number of ports displayed, the features also apply to the
AT-GS9500/24 Gigabit Ethernet Smart Switch.
This preface contains the following sections:
“Where to Find Web-based Guides” on page 12
“Document Conventions” on page 13
“Contacting Allied Telesyn” on page 14
11
Preface
Where to Find Web-based Guides
The installation and user guides for all Allied Telesyn products are
available in portable document format (PDF) on our web site at
www.alliedtelesyn.com. You can view the documents online or
download them onto a local workstation or server.
12
Document Conventions
This document uses the following conventions:
AT-S79 Management Software User’s Guide
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action may
result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
13
Preface
Contacting Allied Telesyn
This section provides Allied Telesyn contact information for technical
support as well as sales and corporate information.
Online SupportYou can request technical support online by accessing the Allied Telesyn
Knowledge Base: http://kb.alliedtelesyn.com. You can use the
Knowledge Base to submit questions to our technical support staff and
review answers to previously asked questions.
Email and
Telephone
Support
Returning
Products
Sales or
Corporate
Information
Management
Software Updates
For Technical Support via email or telephone, refer to the Support &
Services section of the Allied Telesyn web site: www.alliedtelesyn.com.
Products for return or repair must first be assigned a return materials
authorization (RMA) number. A product sent to Allied Telesyn without an
RMA number will be returned to the sender at the sender’s expense.
To obtain an RMA number, contact Allied Telesyn Technical Support
through our web site: www.alliedtelesyn.com.
You can contact Allied Telesyn for sales or corporate information through
our web site: www.alliedtelesyn.com. To find the contact information for
your country, select Contact Us -> Worldwide Contacts.
New releases of management software for our managed products are
available from either of the following Internet sites:
To download new software from the Allied Telesyn FTP server from your
workstation’s command prompt, you must have FTP client software.
Additionally, you must log in to the server. The user name is “anonymous”
and your email address is the password.
Chapter 1
Overview
This chapter provides an overview of the AT-S79 management software
for the AT-GS950/16 and AT-GS950/24 switches. The chapter describes
the different methods for accessing the software and the management
access levels. This chapter contains the following sections:
“Management Overview” on page 16
“Local Management Connection” on page 17
“Remote Management Connection” on page 18
“Management Access Level” on page 19
“Ports 15 and 16 on the AT-GS950/16 Switch and Ports 23 and 24 on
the AT-GS950/24 Switch” on page 20
15
Chapter 1: Overview
Management Overview
The AT-S79 management software allows you to view and adjust the
operating parameters of the AT-GS950/16 and AT-GS950/24 Smart
Switches. Here are a few examples of the functions that you can perform
with the management software:
Enable and disable ports
Configure a port’s speed and duplex mode
Create port trunks
Configure a port mirror
Configure Quality of Service (QoS)
Create port-based and tagged virtual LANs
Configure 802.1x port-based network access control
The AT-S79 management software comes preinstalled on the switch with
default settings for all of the switch’s operating parameters. You do not
have to manage the switch if the default settings are adequate for your
network. Instead, you can use the device as an unmanaged switch by
connecting it to your network, as explained in the hardware installation
guide, and powering on the unit.
Note
The default settings for the management software are listed in
Appendix A, “AT-S79 Software Default Settings” on page 237.
To actively manage the switch and adjust its operating parameters, you
must access the switch’s AT-S79 management software. There are two
ways to manage the switch:
Local management using the menus interface
Remote management using the web browser interface
The chapters in Section I of this guide explain how to manage the switch
from a local management session using the menu interface, while the
chapters in Section II explain how to manage the device from a remote
session using the web browser interface. Both interfaces allow you to
configure all parameters on the switch.
The following sections in this chapter briefly describe each type of
management connection.
16
Local Management Connection
To establish a local management connection with an AT-GS950/16 or
AT-GS950/24 Smart Switch, you connect a terminal or a PC with a
terminal emulator program to the terminal port on the front of the switch
using the management cable included with the unit. This type of
connection is referred to as “local” because you must be physically close
to the switch, such as in the wiring closet where the switch is located.
Note
For instructions on how to start a local management session, refer to
“Starting a Local Management Session” on page 24.
A switch does not need an Internet Protocol (IP) address for you to
manage it locally. You can start a local management session on a switch
at any time. It does not interfere with the forwarding of network packets by
the device.
AT-S79 Management Software User’s Guide
17
Chapter 1: Overview
Remote Management Connection
The AT-S79 management software has a web browser interface that you
can use to manage an AT-GS950/16 or AT-GS950/24 Smart Switch from
any management station on your network that has a web browser
application. This is referred to as a remote connection.
The switch must have an IP address in order for you to manage it remotely
with a web browser. You can assign the switch an IP address manually or
you can activate the DHCP client so that the switch automatically obtains
its IP configuration from a DHCP server on the network. The initial
assignment of an IP address on a switch must be made through a local
connection to the unit.
For instructions on how to start a remote management session, refer to
“Establishing a Remote Connection to Use the Web Browser Interface” on
page 158.
Note
In order to remotely manage a switch using a web browser, the
remote management station must be a member of the switch’s
Default VLAN. The switch processes remote management packets
only when they are received on an untagged port of the Default
VLAN.
Note
The AT-S79 management software does not support remote
management with the Telnet application protocol or an SNMP
application program.
18
Management Access Level
The AT-S79 management software has one level of management access:
manager. When you log in as a manager, you can view and configure all of
a switch’s operating parameters. You log in as a manager by entering the
appropriate username and password when you start an AT-S79
management session. The default username and password are both
“manager”.
AT-S79 Management Software User’s Guide
19
Chapter 1: Overview
Ports 15 and 16 on the AT-GS950/16 Switch and Ports 23 and 24 on the
AT-GS950/24 Switch
This section applies to the twisted pair and optional SFP ports 15 and 16
on the AT-GS950/16 switch and ports 23 and 24 on the AT-GS950/24
switch. Note the following when configuring these ports:
The twisted pair ports are, by default, the active ports.
An optional SFP port becomes active when it establishes a link with an
end node, at which point the corresponding twisted pair port changes
to the redundant state.
A twisted pair port and its corresponding optional SFP port share the
same configuration settings, including port settings and VLAN
assignments. When an SFP port establishes a link with an end node, it
operates with the same settings as its corresponding twisted pair port.
20
Section I
Using the Menus Interface
The chapters in this section explain how to manage the switch using the
menus interface of the AT-S79 management software. The chapters
include:
Chapter 2, “Getting Started with the Menus Interface” on page 23
Chapter 3, “Basic Switch Parameters” on page 29
Chapter 4, “Port Configuration” on page 49
Chapter 5, “Port Trunking” on page 57
Chapter 6, “Port Mirroring” on page 65
Chapter 7, “Virtual LANs” on page 71
Chapter 8, “Quality of Service (QoS)” on page 95
Chapter 9, ”Rapid Spanning Tree Protocol (RSTP)” on page 107
Chapter 11, “RADIUS Authentication Protocol” on page 141
Chapter 12, “Broadcast Storm Control” on page 147
Chapter 13, “Management Software Updates” on page 151
Section I: Using the Menus Interface21
22Section I: Using the Menus Interface
Chapter 2
Getting Started with the Menus
Interface
This chapter provides information and instructions on how to access the
menus interface of the AT-S79 management software by starting a local
management session. This chapter contains the following sections:
“Starting a Local Management Session” on page 24
“Using the Menus Interface” on page 26
“Quitting from a Local Management Session” on page 27
Section I: Using the Menus Interface23
Chapter 2: Getting Started with the Menus Interface
Starting a Local Management Session
You establish a local management session with the switch by connecting
a terminal or personal computer with a terminal emulation program to the
the RS-232 console port on the front panel of the switch.
Note
You do not need to assign an IP address to the switch to manage
the unit from a local management session.
To start a local management session, perform the following procedure:
1. Connect one end of the management cable included with the switch to
the console port on the switch, as shown in Figure 1.
23
24
CONSOLE
Figure 1. Connecting the Management Cable to the Console Port
2. Connect the other end of the cable to the RS-232 port on a terminal or
PC with a terminal emulator program.
3. Configure the terminal or terminal emulator program as follows:
Baud per second: 9600
Data bits: 8
Stop bits: 1
Flow control: None
Note
These settings are for a DEC VT100 or ANSI terminal, or an
equivalent terminal emulation program. They cannot be changed.
24Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
The Login Menu is shown in Figure 2.
AT-GS950/16 Local Management System
Enter the character in square brackets to select option
Login Menu
Login:
Figure 2. Login Menu
4. Enter the manager login name and press Return. The default name is
“manager”.
You are prompted for a password.
5. Enter the manager password. The default password is “manager”.
Note
To change the login name or password, refer to “Setting the User
Interface Configuration” on page 36.
The Main Menu is shown in Figure 3.
AT-GS950/16 Local Management System
Enter the character in square brackets to select option
Chapter 2: Getting Started with the Menus Interface
Using the Menus Interface
If you are using a DEC VT00 or ANSI (the default) terminal configuration,
refer to Table 1 for instructions on how to move through the menus and
select menu options.
When directed to You must
Enter your selectionType the menu option letter.
Table 1. Menus Interface Operations
Enter information (for
example, entering a port
number)
Return to previous menuType Q for Quit to Previous Menu.
When you press Enter to select a field in which you can enter a value, the
“>” symbol is displayed. For example:
Enter new password>
The “>” symbol indicates that you can enter a new value for the parameter
or change the existing value. After you have entered a value, press Enter.
Changes are immediately activated on the AT-GS950 Series switch.
Type the information and press Enter.
26Section I: Using the Menus Interface
Quitting from a Local Management Session
To quit a local management session, return to the Main Menu and type Q
for Quit. When you are finished managing the switch, make sure you exit
from a management session. Quitting from a local session prevents
unauthorized changes to the switch’s configuration if you leave your
workstation unattended.
Note
A local management session automatically times out if there is no
management activity during a pre-defined length of time referred to
as the timeout period. The timeout feature is intended to protect the
parameter settings on the switch from unauthorized changes should
you leave your management station unattended during a
management session. The default timeout value is 10 minutes. To
change the timeout default value, refer to “Setting the User Interface
Configuration” on page 36.
AT-S79 Management Software User’s Guide
Section I: Using the Menus Interface27
Chapter 2: Getting Started with the Menus Interface
28Section I: Using the Menus Interface
Chapter 3
Basic Switch Parameters
This chapter contains the following sections:
“Configuring the IP Address, Subnet Mask, and Gateway Address” on
page 30
“Enabling and Disabling the DHCP Client” on page 33
“Configuring System Administration Information” on page 34
“Setting the User Interface Configuration” on page 36
“Viewing Switch Information” on page 39
“Rebooting the Switch” on page 42
“Pinging a Remote System” on page 44
“Returning the AT-S79 Management Software to the Factory Default
Values” on page 47
Section I: Using the Menus Interface29
Chapter 3: Basic Switch Parameters
Configuring the IP Address, Subnet Mask, and Gateway Address
This procedure explains how to manually assign an IP address, subnet
mask, and gateway address to the switch. Before performing the
procedure, note the following:
An IP address and subnet mask are not required for normal network
operations of the switch. Values for these parameters are only required
if you want to remotely manage the device with a web browser.
A gateway address is only required if you want to remotely manage
the device from a remote management station that is separated from
the switch by a router.
To configure the switch to automatically obtain its IP configuration from
a DHCP server on your network, go to “Enabling and Disabling the
DHCP Client” on page 33.
To set the switch’s IP configuration, perform the following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4.
AT-GS950/16 Local Management System
Main Menu -> Basic Switch Configuration Menu
System [A]dministration Configuration
System [I]P Configuration
[P]ort Configuration
[U]ser Interface Configuration
Storm [C]ontrol Configuration
[Q]uit to previous menu
Command>
Figure 4. Basic Switch Configuration Menu
30Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
2. From the Basic Switch Configuration Menu, type I to select System IP
Configuration.
The System IP Configuration Menu is shown in Figure 5.
AT-GS950/16 Local Management System
Basic Switch Configuration -> System IP Configuration Menu
MAC Address:00:06:5H:B2:65:84
IP Address:0.0.0.0
Subnet Mask:0.0.0.0
Gateway:0.0.0.0
DHCP Mode:Disabled
----------------------- <COMMAND> ----------------------------Set [I]P Address
Set Subnet [M]ask
Set Default [G]ateway
Enable/Disable [D]HCP Mode
[Q]uit to previous menu
Command>
3. To set the switch’s IP address, do the following:
4. To set the switch’s subnet mask, do the following:
Figure 5. System IP Configuration Menu
The top portion of the menu displays the current IP address, subnet
mask, and gateway address for the switch. The menu also displays the
switch’s MAC address. The MAC address cannot be changed. The
menu also displays the current status of the DHCP client on the switch.
The Enable/Disable DHCP Mode option is described in “Enabling and
Disabling the DHCP Client” on page 33.
a. Type I to select Set IP Address.
The following prompt is displayed:
Enter new IP address>
b. Type the IP address for the switch and press Enter.
a. Type M to select Set Subnet Mask.
The following prompt is displayed:
Enter new subnet mask>
Section I: Using the Menus Interface31
Chapter 3: Basic Switch Parameters
b. Type the subnet mask for the switch and press Enter.
5. To set the switch’s gateway address, do the following:
a. Type G to select Set Default Gateway.
The following prompt is displayed:
Enter new gateway IP address>
b. Type the gateway IP address for the switch and press Enter.
6. Type Q to select Quit to previous menu and save your changes.
32Section I: Using the Menus Interface
Enabling and Disabling the DHCP Client
This procedure explains how to activate and deactivate the DHCP client
on the switch. When the client is activated, the switch obtains its IP
configuration, such as its IP address and subnet mask, from a DHCP
server on your network. Before performing the procedure, note the
following:
An IP address and subnet mask are not required for normal network
operations of the switch. Values for these parameters are only required
if you want to remotely manage the device with a web browser.
A gateway address is only required if you want to remotely manage the
device from a remote management station that is separated from the
switch by a router.
The DHCP client is disabled by default on the switch.
The DHCP client does not support BOOTP servers.
AT-S79 Management Software User’s Guide
To activate or deactivate the DHCP client on the switch, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 30.
2. From the Basic Switch Configuration Menu, type I to select System IP Configuration.
The System IP Configuration Menu is shown in Figure 5 on page 31.
3. Type D to select Enable/Disable DHCP Mode.
The following prompt is displayed:
Enable or Disable DHCP mode (E/D)>
4. Type E to select Enable or D to select Disable.
If you enable the client, it immediately begins to send queries to the
DHCP server. It continues to send queries until it receives a response.
5. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface33
Chapter 3: Basic Switch Parameters
Configuring System Administration Information
This section explains how to assign a name to the switch, as well as
specify the location of the switch and the name of the switch’s
administrator. Entering this information is optional.
To set a switch’s administration information, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
30.
2. From the Basic Switch Configuration Menu, type A to select System Administration Information.
The System Administration Configuration Menu is shown in Figure 6.
AT-GS950/16 Local Management System
Basic Switch Configuration -> System Admin. Configuration Menu
Description:AT-GS950/16
Name:
Location:
Contact:
----------------------- <COMMAND> ----------------------------Set System [N]ame
Set System [L]ocation
Set System [C]ontact Information
[Q]uit to previous menu
Command>
Figure 6. System Administration Configuration Menu
The Description parameter in the top portion of the menu displays the
model name of the switch. This parameter cannot be changed.
3. To set the system’s name, do the following:
a. Type N to select Set System Name.
The following prompt is displayed:
Enter system name>
34Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
b. Type a name for the switch (for example, Sales). The name is
optional and can contain up to 50 characters.
Note
Allied Telesyn recommends that you assign names to the switches.
Names can help you identify the switches when you manage them
and can also help you avoid performing a configuration procedure
on the wrong switch.
4. To enter the system’s location, do the following:
a. Type L to select Set System Location.
The following prompt is displayed:
Enter system location>
b. Type information to describe the location of the switch (for
instance, Third Floor). The location is optional and can contain up
to 50 characters.
5. To enter the administrator’s name, do the following:
a. Type C to select Set System Contact Information.
The following prompt is displayed:
Enter system contact>
b. Type the name of the network administrator responsible for
managing the switch. The contact name is optional and can
contain up to 50 characters.
6. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface35
Chapter 3: Basic Switch Parameters
Setting the User Interface Configuration
This procedure explains how to adjust the user interface and security
features on the switch. With this procedure you can:
Change the console timer, used to automatically end inactive local
management sessions.
Change the AT-S79 management login user name and password.
Enable and disable the web server, used to manage the switch from a
remote management station with a web browser.
To set the switch’s user interface configuration, perform the following
procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
30.
2. From the Basic Switch Configuration Menu, type U to select User Interface Configuration.
The User Interface Configuration Menu is shown in Figure 7.
AT-GS950/16 Local Management System
Basic Switch Configuration -> User Interface Configuration Menu
Console UI Idle Timeout:5 Min.
Web Server:Enabled
User Name:manager
----------------------- <COMMAND> ----------------------------Set [C]onsole UI Time OutEnable/Disable [W]eb Server
Change Administrator User [N]ame[R]ADIUS Server Configuration
Change Administrator [P]assword[Q]uit to previous menu
Command>
Figure 7. User Interface Configuration Menu
The RADIUS Server Configuration option is described Chapter 11,
“RADIUS Authentication Protocol” on page 141.
36Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
3. To configure the console idle time out parameter, do the following:
a. Type C to select Set Console UI Time Out.
The following prompt is displayed:
Enter console idle timeout>
b. Enter a number for the timeout value. The range is 0 to 60 minutes.
The default is 5 minutes. A timeout value to 0 causes the switch to
never timeout a local management session.
The console idle time out parameter specifies the length of time a
local management session can be inactive before the management
software automatically ends it. The purpose of this parameter is to
prevent unauthorized individuals from configuring the switch
should you leave your management workstation unattended.
This parameter applies to a local management session but not to a
remote web management session. A web browser management
session remains active so long as your web browser is open.
Note
If you select 0, you must always remember to properly log off from a
local management session when you are finished to prevent
blocking future management sessions with the switch.
4. To enable or disable the web server, do the following:
a. Type W to select Enable/Disable Web Server.
The following prompt is displayed:
Enable or Disable web server (E/D)>
b. Type E to enable the web server or D to disable it. The default is
enabled. If you disable the web server, you can not manage the
switch from a remote management station using a web browser.
5. To change the AT-S79 management login user name, do the following:
a. Type N to select Change Administrator User Name.
The following prompt is displayed:
Enter current password>
b. Enter the current login password. The management software
prompts you for the password to prevent an unauthorized
individual from changing the login name.
Section I: Using the Menus Interface37
Chapter 3: Basic Switch Parameters
c. Type the new user name and press Enter. The default name is
“manager.” The name can be from 0 to 12 characters. Spaces are
allowed. The login name is case sensitive. Not entering a new
login name deletes the current login name without assigning a new
one.
The new user name appears in the User Field in the top portion of
the menu. You must use the new login user name the next time
you start a local or web browser management session.
6. To change the manager login password, do the following:
a. Type P to select Change Administrator Password.
The following prompt is displayed:
Enter old password>
b. Enter the current manager password and press Enter.
The following prompt is displayed:
Enter new password>
c. Type the new password and press Enter. The password can be
from 0 to 12 characters. Allied Telesyn recommends not using
special characters, such as spaces and exclamation points. The
password is case sensitive. Not entering a new password deletes
the current password without assigning a new one.
The following prompt is displayed:
Retype new password>
d. Retype the new password and press Enter.
You must use the new login password the next time you start a
local or web browser management session.
7. Type Q to select Quit to previous menu and save your changes.
38Section I: Using the Menus Interface
Viewing Switch Information
To view general information about the switch, perform the following
procedure:
1. From the Main Menu, type G to select General Information.
The General Information menu is shown in Figure 8.
AT-GS950/16 Local Management System
Main Menu -> General Information
System up for : 24min(s), 36sec(s)
Runtime Image : Version 1.0
Boot Loader: Version 1.0
Hardware Information
Switch Name: Marketing
Switch Location: Fourth Floor
Switch Contact: Ralph
System Address Information
MAC Address:00:06:5H:B2:65:84
IP Address:149.35.8.237
Subnet Mask:255.255.255.0
Gateway:149.35.8.1
Automatic Network Features
DHCP Mode:Disabled
AT-S79 Management Software User’s Guide
Press any key to continue...
Figure 8. General Information Menu
The General Information Menu displays the following information:
System up for
The number of hours, minutes, and seconds since the last reset or
power cycle.
Runtime Image
The version of the runtime software.
Boot Loader
The version of the boot loader software.
Section I: Using the Menus Interface39
Chapter 3: Basic Switch Parameters
Hardware Information Section
Version
The hardware version number.
Fixed Baud Rate
The baud rate of the console port.
DRAM Size
The size of the DRAM, in megabytes.
Flash Size
The size of the flash memory, in megabytes.
Administration Information Section
Switch Name
The name assigned to the switch. To assign the switch a name, refer
to “Configuring System Administration Information” on page 34.
Switch Location
The location of the switch. To specify the location, refer to “Configuring
System Administration Information” on page 34.
Switch Contact
The contact person responsible for managing the switch. To specify
the name of a contact, refer to “Configuring System Administration
Information” on page 34.
System Address Information Section
MAC Address
The MAC address of the switch. You cannot change this information.
System IP Address
The IP address of the switch. Refer to “Configuring the IP Address,
Subnet Mask, and Gateway Address” on page 30 to manually assign
an IP address or “Enabling and Disabling the DHCP Client” on
page 33 to activate the DHCP client.
Subnet Mask
The subnet mask for the switch. Refer to “Configuring the IP Address,
Subnet Mask, and Gateway Address” on page 30 to manually assign a
subnet mask or “Enabling and Disabling the DHCP Client” on page 33
to activate the DHCP client.
Gateway
Default gateway IP address. Refer to “Configuring the IP Address,
Subnet Mask, and Gateway Address” on page 30 to manually assign a
gateway address or “Enabling and Disabling the DHCP Client” on
page 33 to activate the DHCP client.
40Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
Automatic Network Features Section
DHCP Mode
The status of the DHCP client on the switch. For information about
setting this parameter, refer to “Enabling and Disabling the DHCP
Client” on page 33.
2. Press any key to return to the previous menu.
Section I: Using the Menus Interface41
Chapter 3: Basic Switch Parameters
Rebooting the Switch
This procedure reboots the switch and reloads the AT-S79 management
software from flash memory. You might reboot the device if you believe it
is experiencing a problem. Rebooting the device does not change any of
the device’s parameter settings.
To reboot the switch, perform the following procedure:
1. From the Main Menu type T to select Switch Tools.
Caution
The switch does not forward network traffic during the reboot
process. Some network traffic may be lost.
The Switch Tools Configuration Menu is shown in Figure 9.
AT-GS950/16 Local Management System
Main Menu -> Switch Tools Configuration Menu
Software [U]pgrade...
System [R]eboot
[P]ing Execution
[Q]uit to previous menu
Command>
Figure 9. Switch Tools Configuration Menu
2. From the Switch Tools Configuration Menu, type R to select System Reboot.
42Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
The System Reboot Menu is shown in Figure 10.
AT-GS950/24 Local Management System
Main Menu -> System Reboot Menu
Set Reboot [O]ption
Start [R]eboot Process
[Q]uit to previous menu
Command>
Figure 10. System Reboot Menu
3. From the System Reboot menu, type O to select Set Reboot Option.
The following prompt is displayed:
Select reboot option (F/I/N)>
4. Type N to select Normal.
Note
The F and I options are described in “Returning the AT-S79
Management Software to the Factory Default Values” on page 47.
5. Type R to select Start Reboot Process.
The following prompt is displayed:
Are you sure you want to reboot the system (Y/N)>
6. Type Y to start the reboot process or N to cancel the reboot.
The switch immediately begins to reload the AT-S79 management
software. This process takes approximately one minute to complete.
You can not manage the device during the reboot. After the reboot is
finished, you can log in again if you want to continue to manage the
device.
Section I: Using the Menus Interface43
Chapter 3: Basic Switch Parameters
Pinging a Remote System
This procedure instructs the switch to ping a node on your network. This
procedure is useful in determining whether an active link exists between
the switch and another network device. Note the following before
performing the procedure:
The switch where you are initiating the ping must have an IP address
and subnet mask.
The device you are pinging must be a member of the Default VLAN.
This means that the port on the switch through which the node is
communicating with the switch must be an untagged or tagged
member of the Default VLAN.
To ping a network device, perform the following procedure:
1. From the Main Menu, type T to select Switch Tools.
The Switch Tools Configuration Menu is shown in Figure 9 on page
42.
2. From the Switch Tools Configuration Menu, type P to select Ping Execution.
The Ping Execution Menu is shown in Figure 11.
AT-GS950/16 Local Management System
Switch Tools Configuration -> Ping Execution
Target IP Address:0.0.0.0
Number of Requests:10
Timeout Value (sec):3
================Result=================
----------------------- <COMMAND> ----------------------------Set Target [I]P Address[E]xecute Ping
Set [N]umber of Requests[S]top Ping
Set [T]imeout Value[Q]uit to previous menu
Command>
Figure 11. Ping Execution Menu
44Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
3. Type I to select Set Target IP Address.
The following prompt is displayed:
Enter new target IP address>
4. Type the IP address of the node you want the switch to ping and press
Enter.
5. Type N to select Set Number of Requests.
The following prompt is displayed:
Enter new number of requests>
6. Enter the number of ping requests you want the switch to perform. The
range is 1 to 10. The default is 10.
7. Type T to select Set Timeout Value.
The following prompt is displayed:
Enter new timeout value>
8. Enter the length of time in seconds the switch is to wait for a response
before assuming that a ping has failed. The range is 1 to 5 seconds.
The default is 3 seconds.
9. Type E to select Execute Ping.
The following prompt is displayed:
Execute ping or Clean ping data (E/C)>
10. Type E to execute the ping or C to clear previous ping data before
performing this ping.
Section I: Using the Menus Interface45
Chapter 3: Basic Switch Parameters
AT-GS950/16 Local Management System
Switch Tools Configuration -> Ping Execution
Target IP Address:149.35.8.33
Number of Requests:4
Timeout Value (sec):3
================Result=================
----------------------- <COMMAND> ----------------------------Set Target [I]P Address[E]xecute Ping
Set [N]umber of Requests[S]top Ping
Set [T]imeout Value[Q]uit to previous menu
Command>
Figure 12 shows an example of the results of a ping.
No. 120 ms
No. 220 ms
No. 320 ms
No. 420 ms
Figure 12. Ping Results
11. To stop the ping, type S to select Stop Ping.
12. Type Q to select Quit to previous menu.
46Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
Returning the AT-S79 Management Software to the Factory Default
Values
This procedure returns all AT-S79 management software parameters to
their default values and deletes all tagged and port-based VLANs on the
switch. The AT-S79 management software default values are listed in
Appendix A, ”AT-S79 Software Default Settings” on page 237.
Caution
This procedure causes the switch to reboot. The switch does not
forward network traffic during the reboot process. Some network
traffic may be lost.
To return the AT-S79 management software to the default settings,
perform the following procedure:
1. From the Main Menu, type T to select Switch Tools.
The Switch Tools Configuration Menu is shown in Figure 9 on page 42.
2. From the Switch Tools Menu, type R to select System Reboot to start
the reboot.
The System Reboot menu is shown in Figure 10 on page 43.
3. Type O to select Set Reboot Option.
The following prompt is displayed:
Select reboot option (F/I/N)>
4. Type F or I to select one of the following:
F (Factory Default)
Resets all switch parameters to the factory default settings, including
IP address, subnet mask, and gateway address.
I (Reset to Defaults Except IP Address)
Resets all switch parameters to the factory default settings, but retains
the IP address, subnet mask, and gateway settings. If the DHCP client
is enabled, it remains enabled after this reset.
Note
Option N is described in “Rebooting the Switch” on page 42.
Section I: Using the Menus Interface47
Chapter 3: Basic Switch Parameters
5. Type R to select Start Reboot Process.
The following prompt is displayed:
Are you sure you want to reboot the system (Y/N)>
6. Type Y to start the reboot process.
The switch returns its operating parameters to the default values and
begins to reload the AT-S79 management software. This process
takes approximately one minute to complete. You can not manage the
device during the reboot. After the reboot is finished, you can log in
again if you want to continue to manage the device.
48Section I: Using the Menus Interface
Chapter 4
Port Configuration
This chapter contains the procedures for viewing and adjusting the
parameter settings for the ports on the switch. This chapter contains the
following sections:
“Displaying the Port Parameters” on page 50
“Enabling and Disabling a Port” on page 53
“Setting a Port’s Speed and Duplex Mode” on page 54
“Changing the Flow Control Setting” on page 56
Section I: Using the Menus Interface49
Chapter 4: Port Configuration
Displaying the Port Parameters
To display the parameter settings for the ports on the switch, perform the
following procedure:
1. From the Main Menu, type B to select Basic Switch Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page
30.
2. From the Basic Switch Configuration Menu, type P to select Port Configuration.
The Port Configuration Menu is shown in Figure 13.
AT-GS950/16 Local Management System
Basic Switch Configuration -> Port Configuration Menu
[N]ext Page Set [S]tatusSet [F]low Control
[P]revious PageSet [M]ode[Q]uit to previous menu
Command>
Figure 13. Port Configuration Menu
50Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
The Port Configuration Menu displays the following columns of
information about the status of the ports:
Port
The port number.
Trunk
The trunk group number. This column contains the number of the port
trunk if the port is a member of a trunk. To configure a trunk, refer to
Chapter 5, “Port Trunking” on page 57.
Type
The port type. The type for a 10/100/1000Base-TX port is 1000TX. The
port type for an optional fiber optic SFP module is 1000BaseX.
Link
The status of the link between the port and the end node connected to
the port. The possible values are:
Up - A link exists between the port and the end node.
Down - The port has not established a link with an end node.
Status
The current operating status of the port. The possible values are:
Enabled - The port is able to send and receive Ethernet frames. This is
the default setting for all ports on the switch.
Disabled - The port has been manually disabled.
To change a port’s status, see “Enabling and Disabling a Port” on
page 53.
Mode
The port’s speed and duplex mode setting. The possible values are:
Auto - The port is using Auto-Negotiation to set the operating speed
and duplex mode. This is the default setting for all ports. The actual
operating speed and duplex mode of the port are displayed in
parentheses (for example, “Auto (1000F)” for 1000 Mbps full duplex
mode).
If the speed and duplex mode were set manually on a port, mode will
be one of the following:
10-HDx - 10 Mbps in half-duplex mode
100-HDx - 100 Mbps in half-duplex mode
10-FDx - 10 Mbps in full-duplex mode
100-FDx - 100 Mbps in full-duplex mode
1000-FDx - 1000 Mbps in full-duplex mode
Section I: Using the Menus Interface51
Chapter 4: Port Configuration
1000-HDx - 1000 Mbps in half-duplex mode
To change a port’s speed and duplex mode setting, see “Setting a
Port’s Speed and Duplex Mode” on page 54.
Flow Ctrl
Whether flow control is enabled on the port. Flow control is enabled by
default. To disable flow control, refer to “Changing the Flow Control
Setting” on page 56.
3. Type Q to select Quit to previous menu.
52Section I: Using the Menus Interface
Enabling and Disabling a Port
This procedure enables and disables a port. You may want to disable a
port and prevent packets from being forwarded if a problem occurs with
the node or cable connected to the port. After the problem has been fixed,
you can enable the port to resume normal operation. You can also disable
an unused port to secure it from unauthorized connections. The default
setting for a port is enabled.
To change the port’s status, perform the following procedure:
1. From the Main Menu, type B to select Basic Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 30
2. From the Basic Switch Configuration Menu, type P to select Port Configuration.
The Port Configuration Menu is shown in Figure 13 on page 50.
AT-S79 Management Software User’s Guide
3. Type S to select Set Status.
The following prompt is displayed:
Set Status->Enter port number>
4. Enter the number of the port you want to enable or disable. You can
configure only one port at a time.
The following prompt is displayed:
Enable or Disable port n (E/D)>
5. Type E to enable the port or D to disable it. The default is enabled. A
disabled port immediately stops forwarding all ingress and egress
traffic until you enable it again.
The display is refreshed to show the port’s new status.
6. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface53
Chapter 4: Port Configuration
Setting a Port’s Speed and Duplex Mode
To change a port’s speed or duplex mode, perform the following
procedure:
1. From the Main Menu, type B to select Basic Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 30
2. From the Basic Switch Configuration Menu, type P to select Port Configuration.
The Port Configuration Menu is shown in Figure 13 on page 50.
3. Type M to select Set Mode.
The following prompt is displayed:
Set Mode -> Enter port number >
4. Enter the number of the port whose speed or duplex mode you want to
change. You can configure only one port at a time.
The following prompt is displayed:
Enter new mode for port n (a/h/H/F/f/t/T)>
5. Enter the letter that corresponds to the desired speed and duplex
mode setting for the port. The port settings are:
a - Auto: The port uses Auto-Negotiation to set its speed and duplex
mode. This is the default setting for all ports.
h - 10 Mbps, half-duplex
f - 10 Mbps, full-duplex
H - 100 Mbps, half-duplex
F - 100 Mbps, full-duplex
t - 1000 Mbps, half-duplex
T - 1000 Mbps, full-duplex
When selecting a setting, note the following:
When a twisted pair port on the switch is set to Auto-Negotiation,
the default setting, the end node should also be using AutoNegotiation to prevent a duplex mode mismatch. A switch port
using Auto-Negotiation defaults to half-duplex if it detects that the
end node is not using Auto-Negotiation. This can result in a
mismatch if the end node is operating at a fixed duplex mode of
54Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
full-duplex. To avoid this problem when connecting an end node
with a fixed duplex mode of full-duplex to a switch port, disable
Auto-Negotiation on the port and set the port’s speed and duplex
mode manually.
Allied Telesyn does not recommend manually setting a 10/100/
1000Base-T twisted pair port to either 1000 Mbps full duplex or
1000 Mbps half duplex. For 1000 Mbps operation, Allied Telesyn
recommends setting a port to Auto-Negotiation.
The only valid setting for an optional SFP port is Auto-Negotiation.
6. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface55
Chapter 4: Port Configuration
Changing the Flow Control Setting
Flow control applies to ports operating in full-duplex mode. A switch port
uses flow control to control the flow of ingress packets from its end node.
A port using flow control issues a special frame, referred to as a PAUSE
frame, as specified in the IEEE 802.3x standard, to stop the transmission
of data from an end node. When a port needs to stop an end node from
transmitting data, it issues this frame. The frame instructs the end node to
cease transmission. The port continues to issue PAUSE frames until it is
ready again to receive data from the end node.
To change the flow control setting on a port, perform the following
procedure:
1. From the Main Menu, type B to select Basic Configuration.
The Basic Switch Configuration Menu is shown in Figure 4 on page 30
2. From the Basic Switch Configuration Menu, type P to select Port Configuration.
The Port Configuration Menu is shown in Figure 13 on page 50.
3. Type S to select Set Status.
The following prompt is displayed:
Set Flow Control -> Enter port number >
4. Enter the port number whose flow control setting you want to change.
You can configure only one port at a time.
The following prompt is displayed:
Enable or Disable flow control for port <n> (E/D)>
5. Type E to enable flow control or D to disable it. The default is enabled.
The display is refreshed to show the port’s new flow control setting.
6. Type Q to select Quit to previous menu and save your changes.
56Section I: Using the Menus Interface
Chapter 5
Port Trunking
This chapter provides information and procedures for creating a port trunk
and contains the following sections:
“Port Trunking Overview” on page 58
“Creating a Port Trunk” on page 59
“Modifying a Port Trunk” on page 62
“Enabling and Disabling a Port Trunk” on page 63
Section I: Using the Menus Interface57
Chapter 5: Port Trunking
Port Trunking Overview
Port trunking is an economical way for you to increase the bandwidth
between two Ethernet switches. A port trunk is 2 to 8 ports that have been
grouped together to function as one logical path. A port trunk increases
the bandwidth between switches and is useful in situations where a single
physical data link between switches is insufficient to handle the traffic
load.
A port trunk always sends packets from a particular source to a particular
destination over the same link within the trunk. A single link is designated
for flooding broadcasts and packets of unknown destination.
Port Trunking
Guidelines
Observe the following guidelines when creating a port trunk:
A port trunk can consist ofup to 8 ports.
The switch can support up to 7 trunks.
A port can belong to only one trunk at a time.
The ports of a trunk must be of the same medium type. For example,
they can be all twisted pair ports or all fiber optic ports.
The speed, duplex mode, and flow control settings must be the same
on all the ports in a trunk.
The ports of a trunk must be members of the same VLAN. A port trunk
cannot consist of ports from different VLANs.
The ports of a trunk do not have to be consecutive.
When you cable a trunk, the order of the connection should be
maintained on both nodes. The lowest numbered port in a trunk on the
switch should be connected to the lowest numbered port of the trunk
on the other device, the next lowest numbered port on the switch
should be connected to the next lowest numbered port on the other
device, and so on.
For example, assume that you are connecting a trunk between two
AT-GS950 switches. On the first AT-GS950 switch you select ports 1
through 4 for a trunk. On the second AT-GS950 switch you select ports
6 through 9. To maintain the order of the port connections, connect
port 1 on the first AT-GS950 switch to port 6 on the second AT-GS950
switch, port 2 to port 7, and so on.
To avoid compatibility problems, Allied Telesyn recommends creating a
port trunk only between AT-GS950 Series switches. A port trunk
between an AT-GS950 Series switch and a device from another
manufacturer might result in undesirable trunk behavior.
58Section I: Using the Menus Interface
Creating a Port Trunk
This procedure explains how to create a port trunk.
To create a port trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14.
AT-S79 Management Software User’s Guide
Caution
Do not connect the cables to the ports on the switches until after you
have configured the trunk with the management software.
Connecting the cables before configuring the software creates a
loop in your network topology, which can result in broadcast storms
and poor network performance.
AT-GS950/16 Local Management System
Main Menu -> Advanced Switch Configuration Menu
[V]LAN Management
[T]runk Configuration
Quality of [S]ervice Configuration
Port [M]irroring Configuration
802.x[X] Port Based Access Control Configuration
[Q]uit to previous menu
Command>
Figure 14. Advanced Switch Configuration Menu
2. From the Advanced Switch Configuration Menu, type T to select Trunk Configuration.
Section I: Using the Menus Interface59
Chapter 5: Port Trunking
AT-GS950/16 Local Management System
Advanced Switch Configuration -> Trunk Configuration Menu
[A]dd Trunk Member[S]et Trunk Status
[R]emove Trunk Member[Q]uit to previous menu
The Trunk Configuration Menu is shown in Figure 15.
Command>
Figure 15. Trunk Configuration Menu
3. From the Trunk Configuration Menu, type A to select Add Trunk Member.
The following prompt is displayed:
Enter trunk group number>
4. Select a trunk group number from 1 to 7 and press Enter.
The following prompt is displayed:
Enter port members (up to 8 ports) for trunk n>
5. Enter the ports you want to include in the trunk and press Enter.
You can specify the ports individually separated by commas (for
example, 1,2,5), as a range of ports separated by a hyphen (for
example, 2-4), or both (for example, 4,6,11-14).
6. Type S to select Set Trunk Status.
The following prompt is displayed:
Enter trunk group number>
7. Type the trunk group number and press Enter.
60Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
The following prompt is displayed:
Enable or Disable trunk group number n (E/D)>
8. Type E to enable the trunk.
9. Type Q to select Quit to previous menu and save your changes.
The trunk is now operational on the switch.
10. Configure the port trunk on the other switch and connect the cables.
Section I: Using the Menus Interface61
Chapter 5: Port Trunking
Modifying a Port Trunk
This procedure adds and removes ports from a port trunk.
Note
You should disconnect the cables from the ports of the trunk on the
switch before modifying it. Adding or removing ports from a trunk
without first disconnecting the cables can create loops in your
network topology, which can cause broadcast storms and poor
network performance.
To add or remove ports from a trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type T to select Trunk Configuration.
The Trunk Configuration Menu is shown in Figure 15 on page 60.
3. To add ports to a port trunk, type A to select Add Trunk Member. To
remove ports, type R to select Remove Trunk Member.
The following prompt is displayed:
Enter trunk group number>
4. Type the number of the trunk group you want to modify and press
Enter.
The following prompt is displayed:
Enter port members (up to 8 ports) for trunk <n>>
5. Enter the ports you want to add or remove from the trunk and press
Enter.
You can specify the ports individually separated by commas (for
example, 1,2,5), as a range of ports separated by a hyphen (for
example, 2-4), or both (for example, 4,6,11-14).
6. Type Q to select Quit to previous menu and save your changes.
7. Modify the port trunk on the other switch and reconnect the cables.
62Section I: Using the Menus Interface
Enabling and Disabling a Port Trunk
This procedure enables and disables a port trunk. Note the following
before performing this procedure:
Do not enable a port trunk until after you have configured the trunk on
both switches.
Do not connect the cables to the ports on the switches until after you
have configured and enabled the trunk on both switches.
Note
If you are disabling a port trunk, be sure to first disconnect all cables
from the ports of the trunk. Leaving the cables connected can create
loops in your network topology because the ports of a disabled port
trunk function as normal network ports, forwarding individual
network traffic.
AT-S79 Management Software User’s Guide
To enable or disable a port trunk, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type T to select Trunk Configuration.
The Trunk Configuration Menu is shown in Figure 15 on page 60.
3. From the Trunk Configuration Menu, type S to select Set Trunk Status.
The following prompt is displayed:
Enter trunk group number>
4. Type the number of the trunk group you want to enable or disable and
press Enter.
The following prompt is displayed:
Enable or Disable trunk group number n (E/D)>
5. Type E to enable the trunk or D to disable it.
6. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface63
Chapter 5: Port Trunking
64Section I: Using the Menus Interface
Chapter 6
Port Mirroring
This chapter contains the procedure for setting up port mirroring. Port
mirroring allows you to unobtrusively monitor the ingress and egress traffic
on a port by having the traffic copied to another port. This chapter contains
the following sections:
“Port Mirroring Overview” on page 66
“Configuring Port Mirroring” on page 67
“Disabling Port Mirroring” on page 69
Section I: Using the Menus Interface65
Chapter 6: Port Mirroring
Port Mirroring Overview
The port mirroring feature allows you to unobtrusively monitor the ingress
and egress traffic on a port on the switch by having the traffic copied to
another switch port. By connecting a network analyzer to the port where
the traffic is being copied to, you can monitor the traffic on the other port
without impacting its performance or speed.
The port whose traffic you want to mirror is called the mirrored port. The
port where the traffic will be copied to is called the mirroring port.
Observe the following guidelines when using this feature:
You can mirror only one port at a time.
The mirrored and mirroring ports must be on the same switch.
This feature copies both the ingress and egress traffic of the mirrored
port.
The mirroring port cannot be used for normal Ethernet switching.
66Section I: Using the Menus Interface
Configuring Port Mirroring
To set up port mirroring, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type M to select Port Mirroring Configuration.
The Port Mirroring Menu is shown in Figure 16.
AT-GS950/16 Local Management System
Advanced Switch Configuration -> Port Mirroring Configuration Menu
[S]et Mirroring Port
Set [M]irrored Port
[E]nable/Disable Port Mirroring
[Q]uit to previous menu
Command>
Figure 16. Port Mirroring Menu
3. Type S to select Set Mirroring Port.
The following prompt is displayed:
Set monitoring port-> Enter port number>
4. Type the number of the port where the network analyzer is connected
and press Enter. You can specify only one port.
5. Type M to select Set Mirrored Port.
The following prompt is displayed:
Set monitored port-> Enter port number>
6. Type the number of the port whose ingress and egress traffic you want
to monitor and press Enter. You can specify only one port.
Section I: Using the Menus Interface67
Chapter 6: Port Mirroring
7. Type E to select Enable/Disable Port Mirroring.
The following prompt is displayed:
Enable or Disable monitoring (E/D)>
8. Type E to enable port mirroring.
You can now connect your data analyzer to the mirroring port.
9. Type Q to select Quit to previous menu and save your changes.
68Section I: Using the Menus Interface
Disabling Port Mirroring
To disable port mirroring, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type M to select Port Mirroring Configuration.
The Port Mirroring Menu is shown in Figure 16 on page 67.
3. Type E to select Enable/Disable Port Mirroring.
The following prompt is displayed:
AT-S79 Management Software User’s Guide
Enable or Disable monitoring (E/D)>
4. Type D to disable port mirroring.
The port that was functioning as the mirroring port can now be used as
a normal networking port.
5. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface69
Chapter 6: Port Mirroring
70Section I: Using the Menus Interface
Chapter 7
Virtual LANs
This chapter contains the procedures for creating, modifying, and deleting
port-based and tagged Virtual Local Area Networks (VLANs). This chapter
contains the following sections:
“VLAN Features” on page 72
“Port-based VLAN Overview” on page 74
“Tagged VLAN Overview” on page 80
“Creating a VLAN” on page 84
“Configuring the PVID of Untagged Ports” on page 87
“Displaying the VLANs” on page 89
“Modifying a VLAN” on page 91
“Deleting a VLAN” on page 93
Section I: Using the Menus Interface71
Chapter 7: Virtual LANs
VLAN Features
A Virtual Local Area Network (VLAN) is a logical grouping of devices on
different physical LAN segments that allows users to communicate as if
they were physically connected to a single LAN, independent of the
physical configuration of the network.
With VLANs, you can segment your network and group end-nodes with
related functions into their own separate, logical LAN segments. For
example, the marketing personnel in you company may be spread
throughout a building. Assigning marketing to a single VLAN allows
marketing personnel to share resources and bandwidth as if they were
connected to the same segment. The resources of other departments can
be visible to the marketing VLAN members, accessible, or accessible only
to specified individuals.
A few benefits of a VLAN architecture are described in the following
sections.
Increased
Performance
Improved
Manageability
Increased
Security
In traditional Layer 2 switched networks, broadcast packets are sent to
each and every individual port. Grouping users into logical networks limits
broadcast traffic to users performing similar functions or users within
individual workgroups. High traffic, the danger of broadcast storms, router
latency, and data collisions are significantly reduced, and the efficiency of
the entire network is improved.
VLANs provide a fundamental improvement in the design, administration,
and management of LANs. Before VLANs, physical changes to a network
were made at the switch in the wiring closet.
For example, if an employee transferred to a new department, changing
that employee’s LAN segment assignment often required a physical wiring
change at the switch.
As a software-base solution, VLANs eliminate the restriction of existing
network design and cabling infrastructure and allow the centralized
configuration of switches located in many different locations. VLAN
memberships are changed quickly and efficiently from the management
console rather than in a wiring closet.
VLANs provide additional security not available in a shared media network
environment. Because a switched network only delivers frames to
intended recipients, and only broadcast frames to other members of the
VLAN, a network administrator can segment users requiring access to
sensitive information into separate VLANs from the rest of the general
user community.
72Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
VLANs can be used to control the flow of data in your network, since the
traffic generated by an end-node in a VLAN is restricted to the other endnodes in the same VLAN. In addition, VLANs can prevent data from
flowing to unauthorized end-nodes.
Types of VLANsThe AT-GS950/16 and AT-GS950/24 switches support the following types
of VLANs:
Port-based VLANs
Tagged VLANs
The VLANs are described in the following sections.
Section I: Using the Menus Interface73
Chapter 7: Virtual LANs
Port-based VLAN Overview
As explained in “VLAN Features” on page 72, a VLAN consists of a group
of ports on one or more Ethernet switches that form an independent traffic
domain. Traffic generated by the end nodes of a VLAN remains within the
VLAN and does not cross over to the end nodes of other VLANs unless
there is an interconnection device, such as a router or Layer 3 switch.
A port-based VLAN is a group of ports on a Gigabit Ethernet switch that
form a logical Ethernet segment. Each port of a port-based VLAN can
belong to only one VLAN at a time.
A port-based VLAN can have as many or as few ports as needed. The
VLAN can consist of all the ports on an Ethernet switch, or just a few ports.
A port-based VLAN also can span switches and consist of ports from
multiple Ethernet switches.
Note
The AT-GS950/16 and AT-GS950/24 switches are preconfigured
with one port-based VLAN, called the Default VLAN. All ports on the
switch are members of this VLAN.
A port-based VLAN consists of the following parts:
VLAN name
VLAN Identifier
Untagged ports
Port VLAN Identifier
VLAN NameTo create a port-based VLAN, you must give it a name. The name should
reflect the function of the network devices that are be members of the
VLAN. Examples include Sales, Production, and Engineering.
VLAN IdentifierEvery VLAN in a network must have a unique number assigned to it. This
number is called the VLAN identifier (VID). This number uniquely identifies
a VLAN in the switch and the network.
If a VLAN consists only of ports located on one physical switch in your
network, you assign it a VID different from all other VLANs in your
network.
If a VLAN spans multiple switches, then the VID for the VLAN on the
different switches should be the same. The switches are then able to
recognize and forward frames belonging to the same VLAN even though
the VLAN spans multiple switches.
74Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
For example, if you had a port-based VLAN titled Marketing that spanned
three AT-GS950 Series switches, you would assign the Marketing VLAN
on each switch the same VID.
You can assign this number manually or allow the AT-S79 management
software to do it automatically. If you allow the management software to do
it automatically, it selects the next available VID. This is acceptable when
you are creating a new, unique VLAN.
If you are creating a VLAN on a switch that will be part of a larger VLAN
that spans several switch, you must assign the number yourself so that the
VLAN has the same VID on all switches.
Untagged PortsYou need to specify which ports on the switch are to be members of a port-
based VLAN. Ports in a port-based VLAN are referred to as untagged
ports and the frames received on the ports as untagged frames. The
names derive from the fact that the frames received on a port will not
contain any information that indicates VLAN membership, and that VLAN
membership will be determined solely by the port’s PVID. (There is
another type of VLAN where VLAN membership is determined by
information within the frames themselves, rather than by a port’s PVID.
This type of VLAN is explained in “Tagged VLAN Overview” on page 80.)
Port VLAN
Identifier
Guidelines to
Creating a Port-
based VLAN
A port on a switch can be an untagged member of only one port-based
VLAN at a time. An untagged port cannot be assigned to two port-based
VLANs simultaneously.
Each port in a port-based VLAN must have a port VLAN identifier (PVID).
The switch associates a frame to a port-based VLAN by the PVID
assigned to the port on which the frame is received, and forwards the
frame only to those ports with the same PVID. Consequently, all ports of a
port-based VLAN must have the same PVID. Additionally, the PVID of the
ports in a VLAN must match the VLAN’s VID.
For example, if you were creating a port-based VLAN on a switch and you
had assigned the VLAN the VID 5, the PVID for each port in the VLAN
would need to be assigned the value 5.
Some switches assign the PVID value automatically when you assign an
untagged port to a VLAN. However, with the AT-S79 management
software you must perform this task manually.
Below are the guidelines to creating a port-based VLAN.
Each port-based VLAN must be assigned a unique VID. If a particular
VLAN spans multiples switches, each part of the VLAN on the different
switches should be assigned the same VID.
A port can be an untagged member of only one port-based VLAN at a
time.
Section I: Using the Menus Interface75
Chapter 7: Virtual LANs
Each port must be assigned a PVID. This value must match the
VLAN’s VID and it must be the same for all the ports in a port-based
VLAN. You must manually configure this value on a port after you
assign the port to a VLAN. For instructions, refer to “Configuring the
PVID of Untagged Ports” on page 87.
A port-based VLAN that spans multiple switches requires a port on
each switch where the VLAN is located to function as an
interconnection between the switches where the various parts of the
VLAN reside.
If there are end nodes in different VLANs that need to communicate
with each other, a router or Layer 3 switch is required to interconnect
the VLANs.
The switch can support up to a total of 256 port-based and tagged
VLANs.
Drawbacks of
Port-based
VLANs
There are several drawbacks to port-based VLANs:
It is not easy to share network resources, such as servers and printers,
across multiple VLANs. A router or Layer 3 switch must be added to
the network to provide a means for interconnecting the port-based
VLANs. The introduction of a router into your network could create
security issues from unauthorized access to your network.
A VLAN that spans several switches requires a port on each switch for
the interconnection of the various parts of the VLAN. For example, a
VLAN that spans three switches would require one port on each switch
to interconnect the various sections of the VLAN. In network
configurations where there are many individual VLANs that span
switches, many ports could end up being used ineffectively just to
interconnect the various VLANs.
76Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
Port-based
Example 1
Sales VLAN
(VID 2)
Figure 17 illustrates an example of one AT-GS950/24 Gigabit Ethernet
Switch with three port-based VLANs. (For purposes of the following
examples, the Default VLAN is not shown.)
Engineering VLAN
(VID 3)
Production VLAN
(VID 4)
791912123171511
345
2
6
8 10 12 1418 20 22 2416
13
AT-GS950/24 Gigabit Ethernet Switch
AT-GS950/24
Switch
WAN
Router
Figure 17. Port-based VLAN - Example 1
The table below lists the port assignments for the Sales, Engineering, and
Production VLANs on the switch.
Sales VLAN (VID 2)Engineering VLAN
(VID 3)
Ports 1, 3 - 5
(PVID 2)
Ports 9, 11 - 13
(PVID 3)
Production VLAN
(VID 4)
Ports 17 - 19, 21
(PVID 4)
Note the following about the example:
Each VLAN has a unique VID, which is assigned when you create the
VLANs.
Each port’s PVID value has been adjusted to equal the VID of its
respective VLAN. In order for a port to be considered an untagged
member of a VLAN, its PVID must equal the VID of the VLAN. This
must be performed manually.
Section I: Using the Menus Interface77
Chapter 7: Virtual LANs
Each VLAN has one port connected to the router. The router
interconnects the various VLANs and functions as a gateway to the
WAN.
Port-based
Example 2
Sales VLAN
(VID 2)
Figure 18 illustrates more port-based VLANs. In this example, Sales and
Engineering VLANs span two AT-GS950/24 Gigabit Ethernet switches,
while Production VLAN is limited to just one switch.
Engineering VLAN
(VID 3)
Production VLAN
(VID 4)
345
791912123171511
2
6
8 10 12 1418 20 22 2416
13
AT-GS950/24 Gigabit Ethernet Switch
Sales VLAN
(VID 2)
WAN
345
791912123171511
2
6
8 10 12 1418 20 22 2416
13
AT-GS950/24 Gigabit Ethernet Switch
Router
Engineering VLAN
(VID 3)
Figure 18. Port-based VLAN - Example 2
78Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
The table below lists the port assignments for the Sales, Engineering, and
Production VLANs on the switches:
AT-GS950/24
Switch (top)
AT-GS950/24
Switch (bottom)
Sales VLAN
(VID 2)
Ports 1 - 6
(PVID 2)
Ports 2 - 4, 6, 8
(PVID 2)
Engineering VLAN
(VID 3)
Ports 9 - 13
(PVID 3)
Ports 16, 18-20, 22
(PVID 3)
Production VLAN
(VID 4)
Ports 17, 19 - 21
(PVID 4)
none
Note the following concerning the example:
Sales VLAN - This VLAN spans both switches. It has a VID value of 2
and consists of six untagged ports on the top switch and five untagged
ports on the bottom switch. The two parts of the VLAN are connected
by a direct link from port 4 on the top switch to port 3 on the bottom
switch. This direct link allows the two parts of the Sales VLAN to
function as one logical LAN segment.
Port 6 on the top switch connects to the router. This port allows the
Sales VLAN to exchange Ethernet frames with the other VLANs and to
access the WAN.
Engineering VLAN - The workstations of this VLAN are connected to
ports 9 to 13 on the top switch and ports 16, 18 to 20, and 22 on the
bottom switch. Because this VLAN spans multiple switches, it needs a
direct connection between its various parts to provide a
communications path. This is provided in the example with a direct
connection from port 10 on the top switch to port 19 on the bottom
switch.
This VLAN uses port 12 on the top switch as a connection to the router
and the WAN.
Production VLAN - This is the final VLAN in the example. It has the
VLAN of 4 and its ports have been assigned the PVID also of 4. This
VLAN does not require a direct connection to the bottom switch
because its nodes are connected only to the top switch. However, it
uses port 20 as a connection to the router.
Section I: Using the Menus Interface79
Chapter 7: Virtual LANs
Tagged VLAN Overview
The second type of VLAN supported by the AT-S79 management software
is the tagged VLAN. VLAN membership in a tagged VLAN is determined
by information within the frames that are received on a port. This differs
from a port-based VLAN, where the PVIDs assigned to the ports
determine VLAN membership.
The VLAN information within an Ethernet frame is referred to as a tag or tagged header. A tag, which follows the source and destination addresses
in a frame, contains the VID of the VLAN to which the frame belongs
(IEEE 802.3ac standard). This number, as explained earlier in “VLAN
Identifier” on page 74, uniquely identifies each VLAN in a network.
When a switch receives a frame with a VLAN tag, referred to as a tagged frame, the switch forwards the frame only to those ports that share the
same VID.
A port that receives and transmits tagged frames is referred to as a tagged port. Any network device connected to a tagged port must be IEEE
802.1Q-compliant. This is the standard that outlines the requirements and
standards for tagging. The device must be able to process the tagged
information on received frames and add tagged information to transmitted
frames.
The benefit of a tagged VLAN is that the tagged ports can belong to more
than one VLAN at one time. This can greatly simplify the task of adding
shared devices to the network. For example, a server can be configured to
accept and return packets from many different VLANs simultaneously.
Tagged VLANs are also useful where multiple VLANs span across
switches. You can use one port per switch to connect all VLANs on the
switch to another switch.
The IEEE 802.1Q standard describes how this tagging information is used
to forward the traffic throughout the switch. The handling of frames tagged
with VIDs coming into a port is straightforward. If the incoming frame’s VID
tag matches one of the VIDs of a VLAN of which the port is a tagged
member, the frame is accepted and forwarded to the appropriate ports. If
the frame’s VID does not match any of the VLANs that the port is a
member of, the frame is discarded.
The parts of a tagged VLAN are much the same as those for a port-based
VLAN. They are:
VLAN Name
VLAN Identifier
Tagged and Untagged Ports
Port VLAN Identifier
80Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
Note
For explanations of VLAN name and VLAN identifier, refer back to
“VLAN Name” on page 74 and “VLAN Identifier” on page 74.
Tagged and
Untagged Ports
Port VLAN
Identifier
Guidelines to
Creating a
Tagged VLAN
You need to specify which ports will be members of the VLAN. In the case
of a tagged VLAN, the ports usually consist of both untagged and tagged
ports. You specify which ports are tagged and which untagged when you
create the VLAN.
An untagged port, whether a member of a port-based VLAN or a tagged
VLAN, can be in only one VLAN at a time. However, a tagged port can be
a member of more than one VLAN. A port can also be an untagged
member of one VLAN and a tagged member of different VLANs
simultaneously.
As explained earlier in the discussion on port-based VLANs, the PVID of a
port determines the VLAN where the port is an untagged member.
Because a tagged port determines VLAN membership by examining the
tagged header within the frames that it receives, you could conclude that
there is no need for a PVID. However, the PVID is used if a tagged port
receives an untagged frame — a frame without any tagged information.
The port forwards the frame based on the port’s PVID. This is only in
cases where an untagged frame arrives on a tagged port. Otherwise, the
PVID of a tagged port is ignored.
Below are the guidelines to creating a tagged VLAN.
Each tagged VLAN must be assigned a unique VID. If a particular
VLAN spans multiple switches, each part of the VLAN on the different
switches must be assigned the same VID.
A tagged port can be a member of multiple VLANs.
An untagged port can be an untagged member of only one VLAN at a
time.
The switch can support up to a total of 256 port-based and tagged
VLANs.
Section I: Using the Menus Interface81
Chapter 7: Virtual LANs
Tagged VLAN
Example
Sales VLAN
(VID 2)
Figure 19 illustrates how tagged ports can be used to interconnect IEEE
802.1Q-based products.
Engineering VLAN
(VID 3)
Production VLAN
(VID 4)
Legacy Server
791912123171511
345
2
6
8 10 12 1418 20 22 2416
13
AT-GS950/24 Gigabit Ethernet Switch
IEEE 802.1Q-compliant
Server
Sales VLAN
(VID 2)
WAN
791912123171511
345
2
6
8 10 12 1418 20 22 2416
13
AT-GS950/24 Gigabit Ethernet Switch
Router
Engineering VLAN
(VID 3)
Figure 19. Example of a Tagged VLAN
82Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
The port assignments for the VLANs are as follows:
AT-GS950/
24 Switch
(top)
AT-GS950/
24 Switch
(bottom)
Sales VLAN (VID 2)
Untagged
Ports
1, 3, 5, 6
(PVID 2)
2, 4, 6, 8
(PVID 2)
Tagged
Ports
2, 109, 11 to 13
916, 18, 20,
This example is nearly identical to the “Port-based Example 2” on page 78,
but tagged ports have been added to simplify network implementation and
management.
One of the tagged ports is port 2 on the top switch. This port has been
made a tagged member of the three VLANs. It is connected to an IEEE
802.1Q-compliant server, meaning the server can handle frames from
multiple VLANs. Now all three VLANs can access the server without going
through a router or other interconnection device.
It is important to note that even though the server is accepting frames from
and transmitting frames to more than one VLAN, data separation and
security remain.
Engineering VLAN
(VID 3)
Untagged
Ports
(PVID 3)
22
(PVID 3)
Tagged
Ports
2, 1017, 19 to 21
9nonenone
Production VLAN
(VID 4)
Untagged
Ports
(PVID 4)
Tagged
Ports
2
Two other tagged ports are used to simplify network design in the
example. They are port 10 on the top switch and port 9 on the lower
switch. These ports have been made tagged members of the Sales and
Engineering VLANs so that they can carry traffic from both VLANs,
simultaneously. These ports provide a common connection that enables
different parts of the same VLAN to communicate with each other while
maintaining data separation between VLANs.
In comparison, the Sales and Engineering VLANs in the “Port-based
Example 2” on page 78 each had to have its own individual network link
between the switches to connect the different parts of the VLANs. But with
tagged ports, you can use one data link to carry data traffic from several
VLANs, while still maintaining data separation and security. The tagged
frames, when received by the switch, are delivered only to those ports that
belong to the VLAN from which the tagged frames originated.
Section I: Using the Menus Interface83
Chapter 7: Virtual LANs
Creating a VLAN
This section contains the procedure for creating a new port-based or
tagged VLAN. This procedure assigns the VLAN a name, a VID number,
and the untagged and tagged member ports.
After you have performed this procedure, you must configure the
untagged ports of the VLAN by adjusting their PVID values to match the
virtual LAN’s VID number. The PVID value of a port must match its virtual
LAN’s VID in order for a port to be considered an untagged member of the
VLAN. This procedure is found in “Configuring the PVID of Untagged
Ports” on page 87.
To create a VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type V to select
VLAN Management.
The VLAN Management Menu is shown in Figure 20.
AT-GS950/16 Local Management System
Advanced Switch Configuration -> VLAN Management Menu
------------------------- <COMMAND> ---------------------------------Set VLAN [I]D/[I]ndexS[e]lect Port Member
Set VLAN [N]ame[A]pply
[Q]uit to Previous Menu
Command>
Figure 21. VLAN Creation Menu
4. Type I to select Set VLAN ID/Index.
The following prompt is displayed:
Set VLAN ID->Enter VLAN ID>
Note
A VLAN must have a VID.
5. Enter a value from 2 to 4094 and press Enter.
6. Type N to select Set VLAN Name.
The following prompt is displayed:
Set VLAN Name -> Enter VLAN Name >
7. Type a name for the VLAN and press Enter. The VLAN name can
contain up to 32 characters including spaces.
8. Type S to select Select Port Number.
Section I: Using the Menus Interface85
Chapter 7: Virtual LANs
The following prompt is displayed:
Enter port number >
9. Enter the untagged and tagged ports of the VLAN.
You can specify the ports individually separated by commas, for
example, 2,7,15, as a range of ports separated by a hyphen, for
example, 2-4, or both, for example, 2-7,15,17.
10. When the VLAN is complete, type A to select Apply and apply the
VLAN settings.
The VLAN Management Menu is displayed again with information
about the VLAN you just created. The VLAN is now active on the
switch.
11. If the VLAN contains untagged ports, perform the next procedure,
“Configuring the PVID of Untagged Ports” on page 87, to change the
PVID of the untagged ports to match the virtual LAN’s VID.
86Section I: Using the Menus Interface
Configuring the PVID of Untagged Ports
This procedure adjusts a port’s VID value. The PVID value determines the
VLAN in which the port is an untagged member. A port can be an
untagged member of only one VLAN at a time. A port is an untagged
member of the VLAN whose VID value matches its PVID.
The ports of a new VLAN are initially designated as tagged ports. Their
PVID values retain their previous settings when they are assigned to a
new VLAN. If you want the ports to function as untagged members of a
new VLAN, you must change their PVID values to match the VID of the
VLAN, as explained in this procedure.
You can also use this procedure to change the VLAN assignment of an
untagged port. With this procedure you can move an untagged port from
one VLAN to another by changing its PVID value.
To adjust the PVID value of a port, perform the following procedure:
AT-S79 Management Software User’s Guide
1. From the Main Menu, type A to select Advanced Switch
Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type V to select VLAN Management.
The VLAN Management Menu is shown in Figure 20 on page 84.
3. Type S to select Set Port Config.
The VLAN Port Configuration Menu is shown in Figure 20 on page 84
4. Type V to select Set Port VID.
The following prompt is displayed:
Set PVID->Enter port number
5. Type the number of the port whose PVID value you want to configure
and press Enter. You can configure only one port at a time.
The following prompt is displayed:
Enter PVID for port
n
6. Type the new PVID for the port and press Enter. The PVID should
equal the VID of the VLAN where you want the port to be an untagged
member.
Section I: Using the Menus Interface87
Chapter 7: Virtual LANs
Note
If you specify a PVID that does not correspond to any VIDs on the
switch, the management software creates a new VLAN with a VID
that equals the PVID. The VLAN is not assigned any name.
7. Repeat steps 4 through 6 to configure additional ports.
8. Type Q to select Quit to previous menu and save your changes.
88Section I: Using the Menus Interface
Displaying the VLANs
To display a list of the port-based and tagged VLANs on the switch,
perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type V to select VLAN Management.
The VLAN Management Menu is shown in Figure 20 on page 84.
The currently configured VLANs are displayed in a table with the
following columns of information:
VLAN ID
The ID of the VLAN.
AT-S79 Management Software User’s Guide
VLAN Name
The name of the VLAN.
VLAN Type
The type of VLAN, either permanent or static. Only the Default VLAN is
permanent. All other port-based and tagged VLANs are static.
3. To view the ports of a VLAN, type O to select Config VLAN Member.
The following prompt is displayed:
Enter VLAN ID>
4. Enter the VID of the VLAN you want to view and press Enter.
Section I: Using the Menus Interface89
Chapter 7: Virtual LANs
AT-GS950/16 Local Management System
VLAN Management -> Config VLAN Member
[N]ext Page [C]hange VLAN Name[A]dd VLAN Member
[P]revious page[R]emove VLAN Member[Q]uit to Previous Menu
The Config VLAN Member Menu is shown in Figure 22.
Command>
Figure 22. Config VLAN Member Menu
The menu displays the following information:
VLAN ID
The VID number of the VLAN.
VLAN Name
The name of the VLAN.
Port
The ports of the VLAN.
Tagging
Whether a port is a tagged or untagged member of the VLAN. An
untagged port is designated with No and a tagged port with Yes.
The selections in this Config VLAN Member menu are explained in
“Modifying a VLAN” on page 91.
90Section I: Using the Menus Interface
Modifying a VLAN
AT-S79 Management Software User’s Guide
This procedure allows you to perform the following functions:
Change the name of a VLAN.
Add or remove tagged ports from a VLAN.
Before performing this procedure, note the following:
You cannot change the VID of a VLAN.
You cannot add an untagged port to a VLAN with this procedure. That
function requires changing a port’s VID value, as explained in
“Configuring the PVID of Untagged Ports” on page 87
You cannot remove an untagged port from a VLAN with this procedure.
To remove an untagged port from a VLAN, you must assign it as an
untagged member of another VLAN by changing its PVID, as
explained in “Configuring the PVID of Untagged Ports” on page 87.
To change the name of a VLAN or to add or remove tagged ports, perform
the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type V to select VLAN Management.
The VLAN Management Menu is shown in Figure 20 on page 84.
3. Type O to select Config VLAN Member.
The following prompt is displayed:
Enter VLAN ID >
4. Type the number of the VLAN you want to modify and press Enter.
The Config VLAN Member menu is shown in Figure 22 on page 90.
5. To change the VLAN’s name, do the following:
a. Type C to select Change VLAN Name.
The following prompt is displayed:
Enter new VLAN name>
Section I: Using the Menus Interface91
Chapter 7: Virtual LANs
b. Type the new name for the VLAN and press Enter. A VLAN name
can be up to 32 characters and can include spaces.
6. To add a tagged port to the VLAN, do the following:
a. Type A for Add Member and press Enter.
The following prompt is displayed:
Add member->Enter port number >
b. Enter the number of the port and press Enter. You can add more
than one port at a time. You can specify the ports individually (i.e.,
2,5,11), as a range (i.e., 4-7), or both (i.e., 2,5,11-15).
7. To remove a tagged port from the VLAN, do the following:
a. Type R for Remove Member and press Enter.
The following prompt is displayed:
Delete number -> Enter port number >
b. Enter the number of the tagged port you want to remove and press
Enter. You can remove more than one port at a time. You can
specify the ports individually (i.e., 2,5,11), as a range (i.e., 4-7), or
both (i.e., 2,5,11-15).
8. Type Q to select Quit to previous menu and save your changes.
92Section I: Using the Menus Interface
Deleting a VLAN
AT-S79 Management Software User’s Guide
To delete a VLAN, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type V to select VLAN Management.
The VLAN Management Menu is shown in Figure 20 on page 84.
3. Type D to select Delete VLAN.
The following prompt is displayed:
Enter VLAN ID >
4. Type the VLAN ID of the VLAN you want to delete and press Enter.
You can enter only one VID.
Note
The VLAN is immediately deleted with no confirmation prompt.
Note
You cannot delete the Default VLAN which has a VID of 1.
The VLAN Management Menu is updated to show that the VLAN is
deleted. The untagged ports of a deleted VLAN are automatically
returned to the Default VLAN.
5. Type Q to select Quit to previous menu and save your changes.
Section I: Using the Menus Interface93
Chapter 7: Virtual LANs
94Section I: Using the Menus Interface
Chapter 8
Quality of Service (QoS)
This chapter contains the procedures for configuring the Quality of Service
(QoS) parameters of the switch. This chapter contains the following
sections:
“QoS Overview” on page 96
“Mapping CoS Priorities to Egress Queues” on page 99
“Configuring CoS” on page 102
Section I: Using the Menus Interface95
Chapter 8: Quality of Service (QoS)
QoS Overview
When a port on an Ethernet switch becomes oversubscribed—its egress
queues contain more packets than the port can handle in a timely
manner—the port may be forced to delay the transmission of some
packets, resulting in the delay of packets from reaching their destinations.
A port may be forced to delay transmission of packets while it handles
other traffic, and, in some situations, some packets destined to be
forwarded to an oversubscribed port from other switch ports may be
discarded.
Minor delays are often of no consequence to a network or its performance.
But there are applications, referred to as delay or time sensitive
applications, that can be impacted by packet delays. Voice transmission
and video conferencing are two examples. If packets carrying data for
either of these are delayed from reaching their destination, the audio or
video quality may suffer.
This is where QoS can be of value. It allows you to manage the flow of
traffic through a switch by having the switch ports give higher priority to
some packets, such as delay sensitive traffic, over other packets. This is
referred to as prioritizing traffic.
QoS actually consists of several different elements. The element
supported by the AT-GS950/16 and AT-GS950/24 switches is called
Class of Service (CoS). CoS applies primarily to tagged packets. As
explained in “Tagged VLAN Overview” on page 80, a tagged packet
contains information within it that specifies the VLAN to which the packet
belongs.
A tagged packet can also contain a priority level. This priority level is used
by network switches and other networking devices to know how important
(delay sensitive) that packet is in comparison to other packets. Packets of
a high priority are typically handled before packets of a low priority.
CoS, as defined in the IEEE 802.1p standard, has eight levels of priority.
The priorities are 0 to 7, with 0 the lowest priority and 7 the highest.
When a tagged packet is received on a port on the switch, it is examined
by the AT-S79 software for its priority. The switch software uses the
priority to determine which egress priority queue the packet should be
stored in on the egress port.
Each port on the AT-GS950/16 and AT-GS950/24 switches has four
priority queues, 0 (low) to 3 (high). When a tagged packet enters a switch
port, the switch responds by placing the packet into one of the queues
according to the assignments shown in Table 2. A packet in a high priority
egress queue is typically transmitted out a port sooner than a packet in a
low priority queue.
96Section I: Using the Menus Interface
AT-S79 Management Software User’s Guide
Table 2. Default Mappings of IEEE 802.1p Priority Levels
to Egress Port Priority Queues
AT-GS950 Series
IEEE 802.1p Traffic Class
Egress Port Priority
Queue
00
10
20
31
42
52
63
73
For example, a tagged packet with a priority tag of 6 is placed in the
egress port’s highest priority queue of 3, while a packet with a priority tag
of 1 is placed in the lowest priority queue.
Note
QoS is disabled by default on the switch.
You can customize these priority-to-queue assignments using the AT-S79
management software. The procedure for changing the default mappings
is found in “Mapping CoS Priorities to Egress Queues” on page 99. Note
that because all ports must use the same priority-to-egress queue
mappings, these mappings are applied at the switch level. They cannot be
set on a per-port basis.
You can configure a port to completely ignore the priority levels in its
tagged packets and instead use a temporary priority level assigned to the
port. For instance, perhaps you decide that all tagged packets received on
port 4 should be assigned a priority level of 5, regardless of the priority
level in the packets themselves. The procedure for overriding priority
levels is explained in “Configuring CoS” on page 102.
CoS relates primarily to tagged packets rather than untagged packets
because untagged packets do not contain a priority level. By default, all
untagged packets are placed in a port’s Q0 egress queue, the queue with
the lowest priority. But you can override this and instruct a port’s untagged
frames to be stored in a higher priority queue. The procedure for this is
also explained in “Configuring CoS” on page 102.
Section I: Using the Menus Interface97
Chapter 8: Quality of Service (QoS)
One last thing to note is that CoS does not change the priority level in a
tagged packet. The packet leaves the switch with the same priority it had
when it entered. This is true even if you change the default priority-toegress queue mappings.
The default setting for Quality of Service is disabled. When the feature is
disabled, all tagged packets are stored in the lowest priority queue of a
port.
98Section I: Using the Menus Interface
Mapping CoS Priorities to Egress Queues
This procedure explains how to change the default mappings of CoS
priorities to egress priority queues, shown in Table 2 on page 97. This is
set at the switch level and applies to all ports. This procedure also enables
and disables QoS.
To change the mappings, perform the following procedure:
1. From the Main Menu, type A to select Advanced Switch Configuration.
The Advanced Switch Configuration Menu is shown in Figure 14 on
page 59.
2. From the Advanced Switch Configuration Menu, type S to select
Quality of Service Configuration.
The Quality of Service Configuration Menu is shown in Figure 23.
AT-S79 Management Software User’s Guide
AT-GS950/16 Local Management System
Advanced Switch Configuration -> Quality of Service Configuration Menu
[T]raffic Class Configuration
[P]ort Priority Configuration
[Q]uit to previous menu
Command>
Figure 23. Quality of Service Configuration Menu
3. From the Quality of Service Configuration Menu, type T to select Traffic Class Configuration.
Section I: Using the Menus Interface99
Chapter 8: Quality of Service (QoS)
AT-GS950/16 Local Management System
Quality of Service Configuration -> Traffic Class Configuration Menu