Owner manual

ManualsBrandsAllied Telesis ManualsComputer HardwareAT-S63

461

462

463

464

465

466

467

468

469

470

Table Of Contents

Contents
Figures
Tables
Preface
- How This Guide is Organized
- Product Documentation
- Where to Go First
- Starting a Management Session
- Document Conventions
- Where to Find Web-based Guides
- Contacting Allied Telesis
Section I
Basic Operations
Chapter 1
Overview
- Layer 2+ and Basic Layer 3 Switches
- AT-S63 Management Software
- Management Interfaces for Stand-alone Switches
- Management Interfaces for Stacks
- Management Access Methods
- Manager Access Levels
- Installation and Management Configurations
- IP Configuration
- Redundant Twisted Pair Ports
- History of New Features
Chapter 2
Enhanced Stacking
- Supported Platforms
- Overview
- Master and Slave Switches
- Common VLAN
- Master Switch and the Local Interface
- Slave Switches
- Enhanced Stacking Compatibility
- Enhanced Stacking Guidelines
- General Steps
Chapter 3
SNMPv1 and SNMPv2c
- Supported Platforms
- Overview
- Community String Attributes
- Default SNMP Community Strings
Chapter 4
MAC Address Table
- Overview
Chapter 5
Static Port Trunks
- Supported Platforms
- Overview
- Load Distribution Methods
- Guidelines
Chapter 6
LACP Port Trunks
- Supported Platforms
- Overview
- LACP System Priority
- Adminkey Parameter
- LACP Port Priority Value
- Load Distribution Methods
- Guidelines
Chapter 7
Port Mirror
- Supported Platforms
- Overview
- Guidelines
Section II
Advanced Operations
Chapter 8
File System
- Overview
- Boot Configuration Files
- File Naming Conventions
- Using Wildcards to Specify Groups of Files
Chapter 9
Event Logs and the Syslog Client
- Supported Platforms
- Overview
- Event Messages
- Syslog Client
Chapter 10
Classifiers
- Supported Platforms
- Overview
- Classifier Criteria
- Guidelines
Chapter 11
Access Control Lists
- Supported Platforms
- Overview
- Parts of an ACL
- Guidelines
- Examples
Chapter 12
Class of Service
- Supported Platforms
- Overview
- Scheduling
  - Strict Priority Scheduling
  - Weighted Round Robin Priority Scheduling
Chapter 13
Quality of Service
- Supported Platforms
- Overview
- Classifiers
- Flow Groups
- Traffic Classes
- Policies
- QoS Policy Guidelines
- Packet Processing
- Bandwidth Allocation
- Packet Prioritization
- Replacing Priorities
- VLAN Tag User Priorities
- DSCP Values
- DiffServ Domains
- Examples
Chapter 14
Denial of Service Defenses
- Supported Platforms
- Overview
- SYN Flood Attack
- Smurf Attack
- Land Attack
- Teardrop Attack
- Ping of Death Attack
- IP Options Attack
- Mirroring Traffic
- Denial of Service Defense Guidelines
Chapter 15
Power Over Ethernet
- Supported Platforms
- Overview
- Power Budgeting
- Port Prioritization
- PoE Device Classes
Section III
Snooping Protocols
Chapter 16
IGMP Snooping
- Supported Platforms
- Overview
Chapter 17
MLD Snooping
- Supported Platforms
- Overview
Chapter 18
RRP Snooping
- Supported Platforms
- Overview
- Guidelines
Chapter 19
Ethernet Protection Switching Ring Snooping
- Supported Platforms
- Overview
- Restrictions
- Guidelines
Section IV
SNMPv3
Chapter 20
SNMPv3
- Supported Platforms
- Overview
- SNMPv3 Authentication Protocols
- SNMPv3 Privacy Protocol
- SNMPv3 MIB Views
- SNMPv3 Storage Types
- SNMPv3 Message Notification
- SNMPv3 Tables
- SNMPv3 Configuration Example
Section V
Spanning Tree Protocols
Chapter 21
Spanning Tree and Rapid Spanning Tree Protocols
- Supported Platforms
- Overview
- Bridge Priority and the Root Bridge
  - Path Costs and Port Costs
  - Port Priority
- Forwarding Delay and Topology Changes
  - Hello Time and Bridge Protocol Data Units (BPDU)
  - Point-to-Point and Edge Ports
- Mixed STP and RSTP Networks
- Spanning Tree and VLANs
Chapter 22
Multiple Spanning Tree Protocol
- Supported Platforms
- Overview
- Multiple Spanning Tree Instance (MSTI)
- MSTI Guidelines
- VLAN and MSTI Associations
- Ports in Multiple MSTIs
- Multiple Spanning Tree Regions
- Summary of Guidelines
- Associating VLANs to MSTIs
- Connecting VLANs Across Different Regions
Section VI
Virtual LANs
Chapter 23
Port-based and Tagged VLANs
- Supported Platforms
- Overview
- Port-based VLAN Overview
- Tagged VLAN Overview
Chapter 24
GARP VLAN Registration Protocol
- Supported Platforms
- Overview
- Guidelines
- GVRP and Network Security
- GVRP-inactive Intermediate Switches
- Generic Attribute Registration Protocol (GARP) Overview
Chapter 25
Multiple VLAN Modes
- Supported Platforms
- Overview
- 802.1Q- Compliant Multiple VLAN Mode
- Non-802.1Q Compliant Multiple VLAN Mode
Chapter 26
Protected Ports VLANs
- Supported Platforms
- Overview
- Guidelines
Chapter 27
MAC Address-based VLANs
- Supported Platforms
- Overview
- Egress Ports
- VLANs That Span Switches
- VLAN Hierarchy
- Steps to Creating a MAC Address-based VLAN
- Guidelines
Section VII
Routing
Chapter 28
Internet Protocol Version 4 Packet Routing
- Supported Platforms
- Overview
- Routing Interfaces
- Interface Names
- Static Routes
- Routing Information Protocol (RIP)
- Default Routes
- Equal-cost Multi-path (ECMP) Routing
- Routing Table
- Address Resolution Protocol (ARP) Table
- Internet Control Message Protocol (ICMP)
- Routing Interfaces and Management Features
- Local Interface
- AT-9408LC/SP AT-9424T/GB, and AT-9424T/SP Switches
- Routing Command Example
- Non-routing Command Example
- Upgrading from AT-S63 Version 1.3.0 or Earlier
Chapter 29
BOOTP Relay Agent
- Supported Platforms
- Overview
- Guidelines
Chapter 30
Virtual Router Redundancy Protocol
- Supported Platforms
- Overview
- Master Switch
- Backup Switches
- Interface Monitoring
- Port Monitoring
- VRRP on the Switch
Section VIII
Port Security
Chapter 31
MAC Address-based Port Security
- Supported Platforms
- Overview
- Invalid Frames and Intrusion Actions
- Guidelines
Chapter 32
802.1x Port-based Network Access Control
- Supported Platforms
- Overview
- Authentication Process
- Port Roles
- Authenticator Ports with Single and Multiple Supplicants
  - Single Operating Mode
  - Multiple Operating Mode
- Supplicant and VLAN Associations
- Guest VLAN
- RADIUS Accounting
- General Steps
- Guidelines
Section IX
Management Security
Chapter 33
Web Server
- Supported Platforms
- Overview
  - Supported Protocols
- Configuring the Web Server for HTTP
- Configuring the Web Server for HTTPS
  - General Steps for a Self-signed Certificate
  - General Steps for a Public or Private CA Certificate
Chapter 34
Encryption Keys
- Supported Platforms
- Overview
- Encryption Key Length
- Encryption Key Guidelines
- Technical Overview
Chapter 35
PKI Certificates and SSL
- Supported Platforms
- Overview
- Types of Certificates
- Distinguished Names
- SSL and Enhanced Stacking
- Guidelines
- Technical Overview
Chapter 36
Secure Shell (SSH)
- Supported Platforms
- Overview
- Support for SSH
- SSH Server
- SSH Clients
- SSH and Enhanced Stacking
- SSH Configuration Guidelines
- General Steps to Configuring SSH
Chapter 37
TACACS+ and RADIUS Protocols
- Supported Platforms
- Overview
- Guidelines
Chapter 38
Management Access Control List
- Supported Platforms
- Overview
- Parts of a Management ACE
- Guidelines
- Examples
Appendix A
AT-S63 Management Software Default Settings
- Address Resolution Protocol Cache
- Boot Configuration File
- BOOTP Relay Agent
- Class of Service
- Denial of Service Defenses
- 802.1x Port-Based Network Access Control
- Enhanced Stacking
- Ethernet Protection Switching Ring (EPSR) Snooping
- Event Logs
- GVRP
- IGMP Snooping
- Internet Protocol Version 4 Packet Routing
- MAC Address-based Port Security
- MAC Address Table
- Management Access Control List
- Manager and Operator Account
- Multicast Listener Discovery Snooping
- Public Key Infrastructure
- Port Settings
- RJ-45 Serial Terminal Port
- Router Redundancy Protocol Snooping
- Server-based Authentication (RADIUS and TACACS+)
  - Server-based Authentication
  - RADIUS Client
  - TACACS+ Client
- Simple Network Management Protocol
- Simple Network Time Protocol
- Spanning Tree Protocols (STP, RSTP, and MSTP)
  - Spanning Tree Switch Settings
  - Spanning Tree Protocol
  - Rapid Spanning Tree Protocol
  - Multiple Spanning Tree Protocol
- Secure Shell Server
- Secure Sockets Layer
- System Name, Administrator, and Comments Settings
- Telnet Server
- Virtual Router Redundancy Protocol
- VLANs
- Web Server
Appendix B
SNMPv3 Configuration Examples
- SNMPv3 Configuration Examples
Appendix C
Features and Standards
- 10/100/1000Base-T Twisted Pair Ports
- Denial of Service Defenses
- Ethernet Protection Switching Ring Snooping
- Fiber Optic Ports (AT-9408LC/SP Switch)
- File System
- DHCP and BOOTP Clients
- Internet Protocol Multicasting
- Internet Protocol Version 4 Routing
- MAC Address Table
- Management Access and Security
- Management Access Methods
- Management Interfaces
- Management MIBs
- Port Security
- Port Trunking and Mirroring
- Spanning Tree Protocols
- System Monitoring
- Traffic Control
- Virtual LANs
- Virtual Router Redundancy Protocol
Appendix D
MIB Objects
- Access Control Lists
- Class of Service
- Date, Time, and SNTP Client
- Denial of Service Defenses
- Enhanced Stacking
- GVRP
- MAC Address Table
- Management Access Control List
- Miscellaneous
- Port Mirroring
- Quality of Service
- Port Configuration and Status
- Spanning Tree
- Static Port Trunk
- VLANs
Index
- Numerics
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X

Appendix A: AT-S63 Management Software Default Settings

462

Management Access Control List

The following table lists the default setting for the management access

control list.

Management ACL Setting Default

Status Disabled