Owner manual
Table Of Contents
- Contents
- Figures
- Tables
- Preface
- Section I
- Basic Operations
- Chapter 1
- Overview
- Chapter 2
- Enhanced Stacking
- Chapter 3
- SNMPv1 and SNMPv2c
- Chapter 4
- MAC Address Table
- Chapter 5
- Static Port Trunks
- Chapter 6
- LACP Port Trunks
- Chapter 7
- Port Mirror
- Section II
- Advanced Operations
- Chapter 8
- File System
- Chapter 9
- Event Logs and the Syslog Client
- Chapter 10
- Classifiers
- Chapter 11
- Access Control Lists
- Chapter 12
- Class of Service
- Chapter 13
- Quality of Service
- Chapter 14
- Denial of Service Defenses
- Chapter 15
- Power Over Ethernet
- Section III
- Snooping Protocols
- Chapter 16
- IGMP Snooping
- Chapter 17
- MLD Snooping
- Chapter 18
- RRP Snooping
- Chapter 19
- Ethernet Protection Switching Ring Snooping
- Section IV
- SNMPv3
- Chapter 20
- SNMPv3
- Section V
- Spanning Tree Protocols
- Chapter 21
- Spanning Tree and Rapid Spanning Tree Protocols
- Chapter 22
- Multiple Spanning Tree Protocol
- Section VI
- Virtual LANs
- Chapter 23
- Port-based and Tagged VLANs
- Chapter 24
- GARP VLAN Registration Protocol
- Chapter 25
- Multiple VLAN Modes
- Chapter 26
- Protected Ports VLANs
- Chapter 27
- MAC Address-based VLANs
- Section VII
- Routing
- Chapter 28
- Internet Protocol Version 4 Packet Routing
- Supported Platforms
- Overview
- Routing Interfaces
- Interface Names
- Static Routes
- Routing Information Protocol (RIP)
- Default Routes
- Equal-cost Multi-path (ECMP) Routing
- Routing Table
- Address Resolution Protocol (ARP) Table
- Internet Control Message Protocol (ICMP)
- Routing Interfaces and Management Features
- Local Interface
- AT-9408LC/SP AT-9424T/GB, and AT-9424T/SP Switches
- Routing Command Example
- Non-routing Command Example
- Upgrading from AT-S63 Version 1.3.0 or Earlier
- Chapter 29
- BOOTP Relay Agent
- Chapter 30
- Virtual Router Redundancy Protocol
- Section VIII
- Port Security
- Chapter 31
- MAC Address-based Port Security
- Chapter 32
- 802.1x Port-based Network Access Control
- Section IX
- Management Security
- Chapter 33
- Web Server
- Chapter 34
- Encryption Keys
- Chapter 35
- PKI Certificates and SSL
- Chapter 36
- Secure Shell (SSH)
- Chapter 37
- TACACS+ and RADIUS Protocols
- Chapter 38
- Management Access Control List
- Appendix A
- AT-S63 Management Software Default Settings
- Address Resolution Protocol Cache
- Boot Configuration File
- BOOTP Relay Agent
- Class of Service
- Denial of Service Defenses
- 802.1x Port-Based Network Access Control
- Enhanced Stacking
- Ethernet Protection Switching Ring (EPSR) Snooping
- Event Logs
- GVRP
- IGMP Snooping
- Internet Protocol Version 4 Packet Routing
- MAC Address-based Port Security
- MAC Address Table
- Management Access Control List
- Manager and Operator Account
- Multicast Listener Discovery Snooping
- Public Key Infrastructure
- Port Settings
- RJ-45 Serial Terminal Port
- Router Redundancy Protocol Snooping
- Server-based Authentication (RADIUS and TACACS+)
- Simple Network Management Protocol
- Simple Network Time Protocol
- Spanning Tree Protocols (STP, RSTP, and MSTP)
- Secure Shell Server
- Secure Sockets Layer
- System Name, Administrator, and Comments Settings
- Telnet Server
- Virtual Router Redundancy Protocol
- VLANs
- Web Server
- Appendix B
- SNMPv3 Configuration Examples
- Appendix C
- Features and Standards
- 10/100/1000Base-T Twisted Pair Ports
- Denial of Service Defenses
- Ethernet Protection Switching Ring Snooping
- Fiber Optic Ports (AT-9408LC/SP Switch)
- File System
- DHCP and BOOTP Clients
- Internet Protocol Multicasting
- Internet Protocol Version 4 Routing
- MAC Address Table
- Management Access and Security
- Management Access Methods
- Management Interfaces
- Management MIBs
- Port Security
- Port Trunking and Mirroring
- Spanning Tree Protocols
- System Monitoring
- Traffic Control
- Virtual LANs
- Virtual Router Redundancy Protocol
- Appendix D
- MIB Objects
- Index

AT-S63 Management Software Features Guide
Section III: Snooping Protocols 195
Overview
Ethernet Protection Switching Ring is a feature found on selected Allied
Telesis products, such as the AT-8948 Series Gigabit Layer 3 Switches. It
offers an effective alternative to spanning tree based options when using
ring based topologies to create high speed resilient networks.
EPSR consists of a master node and a number of transit nodes in a ring
configuration. The master node monitors the health of the ring by
transmitting healthcheck messages from a primary port at regular intervals
over a control VLAN, and watching for the messages on a secondary port.
If the healthcheck messages fail to arrive, the master node commences
fault recovery of the ring by activating the secondary port so that
connectivity between the transit nodes is maintained through the master
node. When the integrity of the ring is restored, and the healthcheck
messages can again traverse the entire ring, the master switch returns the
secondary port to the blocking state.
Note
For background information and configuration examples of EPSR,
refer to the AlliedWare OS Software Reference Guide.
EPSR snooping gives the AT-9400 Switch the ability to function as a
transit node of a ring, but with restrictions, as explained in the next section.
The switch can forward healthcheck messages over the control VLAN
from the master node and respond appropriately when notified of a ring
fault by the master node.
The master node generates a variety of messages over the control VLAN
for monitoring the health of the ring and notifying the nodes of changes to
the ring’s status. Two of these messages are the Ring-Down-Flush-FDB
and Ring-Up-Flush-FDB messages. The first message notifies the nodes
of a ring fault condition and the second signals the reestablishment of the
ring.
The AT-9400 Switch and EPSR snooping react to these messages by
flushing the addresses learned on the two ring ports of the control VLAN
from the forwarding database, so that the switch can relearn the
addresses. These are the only two EPSR messages that EPSR snooping
can react to. It should be noted that EPSR snooping cannot generate any
EPSR messages itself.
To configure the AT-9400 Switch as a transit node you need to create the
control and data VLANs of the individual ring domains. As explained in the
EPSR chapter in the AlliedWare OS Software Reference Guide, several
domains can share the same physical network, but they must operate as
logically separate VLAN groups. For information on VLANs, refer to
Chapter 23, “Port-based and Tagged VLANs” on page 253.