Management Software AT-S63 Web Browser Interface User’s Guide AT-9400 Series Layer 2+ Gigabit Ethernet Switches Version 1.1.
Copyright © 2005 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc. Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesyn, Inc.
Contents Preface ............................................................................................................................................................ 17 Where to Find Web-based Guides ................................................................................................................... 18 Contacting Allied Telesyn ................................................................................................................................. 19 Online Support ..........
Contents Chapter 6: Port Parameters .......................................................................................................................... 77 Configuring Port Parameters ............................................................................................................................ 78 Displaying Port Status....................................................................................................................................... 85 Displaying Port Statistics .....
AT-S63 Management Software Menus Interface User’s Guide Managing Flow Groups .................................................................................................................................. 170 Configuring Flow Groups ......................................................................................................................... 170 Modifying a Flow Group ...........................................................................................................................
Contents Modifying Target Address Table Entry .....................................................................................................256 Configuring the SNMPv3 Target Parameters Table........................................................................................259 Creating a Target Parameters Table Entry...............................................................................................259 Deleting a Target Parameters Table Entry ..........................................
AT-S63 Management Software Menus Interface User’s Guide Displaying VLANs........................................................................................................................................... 337 Specifying a Management VLAN.................................................................................................................... 339 Chapter 22: Protected Ports VLANs ..........................................................................................................
Contents Configuring TACACS+ ....................................................................................................................................425 Displaying the TACACS+ Settings..................................................................................................................427 Configuring RADIUS .......................................................................................................................................429 Displaying the RADIUS Settings ........
AT-S63 Management Software Menus Interface User’s Guide 9
Figures Figure 1. Entering a Switch’s IP Address in the URL Field...................................................................................................32 Figure 2. AT-S63 Login Page ...............................................................................................................................................33 Figure 3. Home page ......................................................................................................................................................
Figures Figure 51. Modify Classifier Page .......................................................................................................................................149 Figure 52. CoS Tab (Monitoring) ........................................................................................................................................152 Figure 53. Classifier Tab (Monitoring).........................................................................................................................
AT-S63 Management Software Menus Interface User’s Guide Figure 111. SNMPv3 Target Parameters Table Tab (Configuration) .................................................................................259 Figure 112. Add New SNMPv3 Target Parameters Page ..................................................................................................260 Figure 113. Modify SNMPv3 Target Parameter Page ........................................................................................................
Figures Figure 171. Authenticator Port Parameters Page ...............................................................................................................390 Figure 172. Supplicant Port Parameters Page ...................................................................................................................391 Figure 173. 802.1x Port Access Tab (Monitoring) ..............................................................................................................395 Figure 174.
Figures 14
Tables Table 1. AT-S63 Software Modules ...................................................................................................................................132 Table 2. Event Severity Levels ..........................................................................................................................................134 Table 3. Default Syslog Facilities ................................................................................................................................
Tables 16
Preface This guide contains instructions on how to configure and maintain an AT-LX3800U Multi-Service Transport System using the AT-S65 management software and contains the following sections: “Where to Find Web-based Guides” on page 18 “Contacting Allied Telesyn” on page 19 17
Preface Where to Find Web-based Guides The installation and user guides for all Allied Telesyn products are available in portable document format (PDF) on our web site at www.alliedtelesyn.com. You can view the documents online or download them onto a local workstation or server.
AT-LX3800U Multi-Service Transport System Installation and Maintenance Guide Contacting Allied Telesyn This section provides Allied Telesyn contact information for technical support as well as sales and corporate information. Online Support You can request technical support online by accessing the Allied Telesyn Knowledge Base: http://kb.alliedtelesyn.com. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
Preface 20
Chapter 1 Overview This chapter describes the AT-S63 software functions, the methods you can use to access the software, and the management access levels.
Chapter 1: Overview Management Overview The AT-S63 management software allows you to monitor and adjust the operating parameters of an AT-9400 Series switch and includes the following features: Basic operations such as configuring port and switch parameters, enhanced stacking, SNMPv1 and v2c, trunking, and mirroring Advanced operations including file uploads and downloads, event logging, traffic classifiers, access control lists, denial of service defense, Quality of Service (QoS), Class of Service
AT-S63 Management Software Web Browser Interface User’s Guide The following sections in this chapter briefly describe each type of connection.
Chapter 1: Overview Local Connection You establish a local connection with an AT-9400 Series switch when you use the RJ-45 to RS-232 management cable included with the switch to connect a terminal or a PC with a terminal emulator program to the terminal port on the switch. The terminal port is located on the front panel of the AT-9400 Series switch. This type of connection is referred to as “local” because you must be physically close to the switch, such as in the wiring closet where the switch is located.
AT-S63 Management Software Web Browser Interface User’s Guide Remote Connection You can use any management station on your network that has the Telnet application to manage an AT-9400 Series switch. This is referred to as a remote connection. To establish a remote connection to a switch, there must be at least one enhanced stacking switch in the subnet to which you assigned an IP address. Only one switch in a subnet needs to have an IP address.
Chapter 1: Overview and compile the files with your SNMP application. For instructions, refer to your third-party application’s documentation. Note Third-party network management applications such as HP OpenView cannot use the enhanced stacking feature of the AT-S63 management software. Therefore, you must assign an IP address to each switch that you want to manage with one of these applications.
AT-S63 Management Software Web Browser Interface User’s Guide Management Access Levels There are two levels of management access in the AT-S63 management software: manager and operator. When you log in as a manager, you can view and configure all of a switch’s operating parameters. When you log in as an operator, you can only view the operating parameters; you cannot change any values.
Chapter 1: Overview Online Help The AT-S63 management software web browser interface provides online help for all tabs and pages in the software. To access the online help, select the Help option from either the Configuration or Monitoring menu. To exit the help, select the Exit Help option.
Section I Basic Operations The chapters in this section provide information and procedures for basic switch setup using the AT-S63 management software.
Section I: Basic Operations
Chapter 2 Starting a Web Browser Management Session This chapter contains the procedure for starting, using, and quitting a web browser management session on an AT-9400 Series switch.
Chapter 2: Starting a Web Browser Management Session Establishing a Remote Connection to Use the Web Browser Interface To establish a remote connection and use the web browser interface to manage an AT-9400 Series switch, there must be at least one switch in the subnet that has been assigned an IP address and whose stacking status has been changed to master switch.
AT-S63 Management Software Web Browser Interface User’s Guide The AT-S63 management software displays the login page, as shown in Figure 2. Figure 2. AT-S63 Login Page 3. Enter a user name and password. For manager access, enter “manager” as the user name. The default password is “friend.” For operator access, enter “operator” as the user name. The default password is “operator.” Login names and passwords are casesensitive.
Chapter 2: Starting a Web Browser Management Session The home page is shown in Figure 3. Figure 3. Home page The main menu is on the left side of the home page. It consists of the following selections: Enhanced Stacking Configuration Monitoring Logout Note The Enhanced Stacking selection is included in the menu only if the switch you accessed is a master switch. A web browser management session remains active even if you link to other sites.
AT-S63 Management Software Web Browser Interface User’s Guide individuals from making changes to a switch’s configuration if you leave your management station unattended. Also, as long as you are logged in, no one else can access the switch through another local or remote connection.
Chapter 2: Starting a Web Browser Management Session Web Browser Tools You can use the web browser tools to move around the management pages. Selecting Back on your browser’s toolbar returns you to the previous display. You can also use the browser’s bookmark feature to save the link to the switch.
AT-S63 Management Software Web Browser Interface User’s Guide Saving Your Parameter Changes When you make a change to a switch parameter, the change is, in most cases, immediately activated as soon as you click the Apply button on the page. However, a change to a switch parameter is initially saved only to temporary memory. It is lost the next time you reset or power cycle the unit. To permanently save a change, you must click the Save Config option on the Configuration menu.
Chapter 2: Starting a Web Browser Management Session Quitting a Web Browser Management Session To exit a web browser management session, select the Logout option from the main menu.
Chapter 3 Basic Switch Parameters This chapter contains the following sections: Section I: Basic Operations “Configuring an IP Address and Switch Name” on page 40 “Activating the BOOTP and DHCP Client Software” on page 43 “Displaying System Information” on page 44 “Configuring the Manager and Operator Passwords” on page 46 “Rebooting a Switch” on page 48 “Pinging a Remote System” on page 49 “Returning the AT-S63 Management Software to the Factory Default Values” on page 51 39
Chapter 3: Basic Switch Parameters Configuring an IP Address and Switch Name Note For guidelines about when to assign an IP address, subnet address, and gateway address to an AT-9400 Series switch, refer to “When Does a Switch Need an IP Address?” in Chapter 3, “Basic Switch Parameters,” in the AT-S63 Management Software Menus Interface User’s Guide. To set basic switch parameters for an AT-9400 Series switch, perform the following procedure: 1. From the home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide Note This procedure describes the parameters in the Administration section of the tab. The Passwords section is described in “Configuring the Manager and Operator Passwords” on page 46. The BOOTP/DHCP parameters are described in “Activating the BOOTP and DHCP Client Software” on page 43. The MAC Address Aging Time parameter is described in “Changing the Aging Time” on page 405.
Chapter 3: Basic Switch Parameters Note Another option for the IP Address, Subnet Mask, and Default Gateway parameters is to use DHCP or BOOTP to automatically assign them. See “Activating the BOOTP and DHCP Client Software” on page 43, and information in Chapter 3, “Basic Switch Parameters” in the AT-S63 Management Software Menus Interface User’s Guide. IP Address This parameter specifies the IP address of the switch.
AT-S63 Management Software Web Browser Interface User’s Guide Activating the BOOTP and DHCP Client Software For background information on BOOTP and DHCP, refer to Chapter 3, “Basic Switch Parameters,” in the AT-S63 Management Software Menus Interface User’s Guide. To activate or deactivate the BOOTP and DHCP client software on the switch from a web browser management session, perform the following procedure: 1. From the home page, select Configuration.
Chapter 3: Basic Switch Parameters Displaying System Information To view basic information about the switch, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6. Figure 6. General Tab (Monitoring) The General section displays the following information: System Name The name of the switch. Administrator The name of the network administrator responsible for managing the switch.
AT-S63 Management Software Web Browser Interface User’s Guide Comments The location of the switch, (for example, 4th Floor - rm 402B). BOOTP/DHCP The status of the BOOTP and DHCP client software. If enabled, the switch is obtaining its IP information from a BOOTP or DHCP server on the network. MAC Address Aging Time The time interval an inactive dynamic MAC address can remain in the MAC address table before it is deleted. IP Address The switch’s IP address. Subnet Mask The switch’s subnet mask.
Chapter 3: Basic Switch Parameters Configuring the Manager and Operator Passwords There are two levels of management access on an AT-9400 Series switch: manager and operator. When you log in as a manager, you can view and configure all of a switch’s operating parameters. When you log in as an operator, you can only view the operating parameters; you cannot change any values. You log in as a manager or an operator by entering the appropriate username and password when you start an AT-S63 management session.
AT-S63 Management Software Web Browser Interface User’s Guide Operator Password Confirm Operator Password Use these parameters to change the operator’s login password for the switch. The password can be from 0 to 16 characters in length. The same password is used for both local and remote management sessions. To create a new password, enter the new password into both fields. The default password for operator is “operator.” The password is case sensitive.
Chapter 3: Basic Switch Parameters Rebooting a Switch Note Any parameters changes that have not been saved are discarded when a system is reset. To save parameter changes, refer to “Saving Your Parameter Changes” on page 36. To reboot a switch, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. Click Reset at the bottom of the tab. A confirmation prompt is displayed. 3.
AT-S63 Management Software Web Browser Interface User’s Guide Pinging a Remote System You can instruct the switch to ping a node on your network. This procedure is useful in determining whether a valid link exists between the switch and another device. To ping a network device, perform the following procedure: 1. From the home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2.
Chapter 3: Basic Switch Parameters The Ping Client tab is shown in Figure 8. Figure 8. Ping Client Tab (Monitoring) 4. Enter the IP address of the end node you want the switch to ping. 5. Click OK. The results of the ping are displayed in a popup window. 6. To stop the ping, click OK.
AT-S63 Management Software Web Browser Interface User’s Guide Returning the AT-S63 Management Software to the Factory Default Values The procedure in this section returns all AT-S63 management software parameters to their default values. Please note the following before you perform this procedure: Returning all parameter settings to their default values also deletes any port-based or tagged VLANs you created on the switch. This procedure does not delete files from the AT-S63 file system.
Chapter 3: Basic Switch Parameters The Utilities page is displayed with the System Utilities tab selected by default, as shown in Figure 9. Figure 9. System Utilities Tab (Configuration) 3. Click the Reboot Switch After Resetting to Defaults checkbox. 4. Click Apply. The web browser displays the following prompt: This page may no longer be available while the switch reboots. Do you want to continue? 5. Click OK to continue, or Cancel to cancel the procedure.
Chapter 4 SNMPv1 and SNMPv2c This chapter explains how to activate SNMP management on the switch and how to create, modify, and delete SNMPv1 and SNMPv2c community strings.
Chapter 4: SNMPv1 and SNMPv2c Enabling or Disabling SNMP Management To enable or disable SNMP management on the switch, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 10. Figure 10.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMP tab is shown in Figure 11. Figure 11. SNMP Tab (Configuration) 4. Click the Enable SNMP Access checkbox to enable or disable SNMP management. A check in the box indicates that the feature is enabled, meaning that the switch can be managed from an SNMP management station. No check indicates that the feature is disabled. The default is disabled. 5.
Chapter 4: SNMPv1 and SNMPv2c Creating a New SNMPv1 and SNMPv2c Community To create a new SNMPv1 and SNMPv2c community, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 10 on page 54. 3.
AT-S63 Management Software Web Browser Interface User’s Guide The Add New SNMPv1 & SNMPv2c Community page is shown in Figure 13. Figure 13. Add New SNMPv1 & SNMPv2c Community Page 6. Configure the following parameters: Community Name Enter an SNMP community name that consists of up to 15 alphanumeric characters. Status Click Enable to enable the SNMP community. Click Disable to disable the SNMP community. Access Mode Click Read Only to allow read access to the SNMP community.
Chapter 4: SNMPv1 and SNMPv2c Manager IP Address 1 through Manager IP Address 8 Enter an IP Address of a switch that is permitted SNMP manager access to the current switch. You can enter up to eight Manager IP Addresses. Trap Receiver IP Address 1 through Trap Receiver IP Address 8 Use the above selections to specify the IP addresses of up to eight trap receivers on your network that can receive traps from the switch. 7. Click Apply. 8.
AT-S63 Management Software Web Browser Interface User’s Guide Modifying an SNMPv1 and SNMPv2c Community To modify an SNMPv1 and SNMPv2c community, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt.
Chapter 4: SNMPv1 and SNMPv2c Figure 14. Modify SNMPv1 & SNMPv2c Community Page 6. Modify the following parameters: Community Name This field is not configurable from this page. It is the name of the SNMP community. Status Click Enable to enable the SNMP community. Click Disable to disable the SNMP community. Access Mode Click Read Only to allow read access to the SNMP community. Click Read-Write to allow read-write access to the SNMP community.
AT-S63 Management Software Web Browser Interface User’s Guide access to the current switch. You can enter up to 8 Manager IP Addresses. Trap Receiver IP Address 1 through Trap Receiver IP Address 8 Use the above selections to specify the IP addresses of up to 8 trap receivers on your network that can receive traps from the switch. 7. Click Apply. 8. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 4: SNMPv1 and SNMPv2c Deleting an SNMPv1 and SNMPv2c Community To delete an existing SNMPv1 and SNMPv2c community, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 10 on page 54. 3.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the SNMPv1 and SNMPv2c Communities To display the SNMPv1 and SNMPv2c communities, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Mgmt. Protocols option. The Mgmt.
Chapter 4: SNMPv1 and SNMPv2c The SNMP tab is shown in Figure 16. Figure 16. SNMP Tab (Monitoring) 4. In the SNMPv1 & SNMPv2c section, click View.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv1 & SNMPv2c Communities tab is shown in Figure 17. Figure 17. SNMPv1 & SNMPv2c Communities Tab (Monitoring) The SNMPv1 & SNMPv2c Communities tab displays a table that contains the following columns of information: Community Name The SNMP community name. Access Mode The access mode for access to that community. The possible settings are Read Only and Read/Write.
Chapter 4: SNMPv1 and SNMPv2c Disabled - The community is disabled.
Chapter 5 Enhanced Stacking This chapter contains the following procedures for setting up enhanced stacking: “Setting a Switch’s Enhanced Stacking Status” on page 68 “Selecting a Switch in an Enhanced Stack” on page 71 “Returning to the Master Switch” on page 74 “Displaying the Enhanced Stacking Status” on page 75 Note For background information on enhanced stacking, refer to Chapter 5, “Enhanced Stacking,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 5: Enhanced Stacking Setting a Switch’s Enhanced Stacking Status The enhanced stacking status of the switch can be master, slave, or unavailable. Each status is described below: Master - A master switch of a stack can be used to manage other enhanced stacking switches in a subnet. After you have established a local or remote management session with the master switch, you can access and manage the other enhanced stacking switches in the subnet. A master switch must have a unique IP address.
AT-S63 Management Software Web Browser Interface User’s Guide The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 18. Figure 18. Server-based Authentication Tab (Configuration) 3. Select the Enhanced Stacking tab. The Enhanced Stacking tab is shown in Figure 19. Figure 19. Enhanced Stacking Tab (Configuration) 4. Click the desired enhanced stacking status for the switch. The default is Slave. 5. Click Apply.
Chapter 5: Enhanced Stacking The new enhanced stacking status is immediately activated on the switch. 6. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide Selecting a Switch in an Enhanced Stack Before you perform any procedure on a switch in an enhanced stack, check to be sure that you are performing it on the correct switch. If you assigned system names to your switches, identifying your switches is easy. The AT-S63 management software displays the name of the switch being managed at the top of every management menu.
Chapter 5: Enhanced Stacking switches in the Stacking Switches page. An example is shown in Figure 20. Figure 20. Stacking Switches Page Note The master switch on which you started the management session is not included in the list, nor are any switches with an enhanced stacking status of Unavailable. You can sort the switches in the list by switch name or MAC address by clicking on the column headers. By default, the list is sorted by MAC address. To refresh the list, click Refresh.
AT-S63 Management Software Web Browser Interface User’s Guide 3. Click Connect. 4. Enter a user name and password for the switch when prompted. The home page of the selected switch is displayed. You can now manage the switch.
Chapter 5: Enhanced Stacking Returning to the Master Switch When you are finished managing a slave switch and want to manage another switch in the stack, return to the Home page of the switch and select Disconnect from the menu. This returns you to the Enhanced Stacking page in Figure 20 on page 72. When you see that page, you are again addressing the master switch from which you started the management session.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the Enhanced Stacking Status To display the enhanced stacking status of the switch, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Mgmt. Protocols option. The Mgmt.
Chapter 5: Enhanced Stacking The Enhanced Stacking tab is shown Figure 22. Figure 22. Enhanced Stacking Tab (Monitoring) The information in the tab states the current enhanced stacking status of the switch as master, slave, or unavailable.
Chapter 6 Port Parameters This chapter explains how to view and change the parameter settings for the individual ports on a switch. Examples of the parameters that you can adjust include port speed and duplex mode.
Chapter 6: Port Parameters Configuring Port Parameters To configure the parameter settings of a port on the switch, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 1 option. The Layer 1 page is displayed with the Port Settings tab selected by default, as shown in Figure 23. Figure 23. Port Settings Tab (Configuration) 3.
AT-S63 Management Software Web Browser Interface User’s Guide The Port Configuration page is shown Figure 24. Figure 24. Port Configuration Page 5. Configure the following parameters as necessary. Name Use this selection to assign a name to a port, from 1 to 15 alphanumeric characters. Spaces are allowed, but you should not use special characters, such as asterisks or exclamation points. (You cannot assign a name when you are configuring more than one port.
Chapter 6: Port Parameters Enabled - The port receives and forwards packets. This is the default setting. Disabled - The port does not receive or forward packets. Speed and Duplex You use this selection to configure a port for autonegotiation or to manually set a port’s speed and duplex mode. If you select Auto-Negotiate for autonegotiation, which is the default setting, the switch sets both speed and duplex mode for the port automatically.
AT-S63 Management Software Web Browser Interface User’s Guide Note When a transceiver is inserted into an uplink slot in an AT-9424 switch and a link is established, that slot becomes a primary uplink port and the corresponding backup port, 23R or 24R, automatically transitions to redundant uplink status. The speed and duplex mode of the redundant port automatically transitions to Auto-Negotiate to match the speed of the primary uplink port and you cannot configure the MDI/MDIX crossover parameter.
Chapter 6: Port Parameters Egress Broadcast Filter Use this parameter to allow or disallow egress the port to send broadcast packets. The possible settings are: Enabled - The port does not send any broadcast packets. Disabled - The port sends broadcast packets. This is the default setting. For further information about filters, refer to Chapter 6, “Port Parameters,” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide end node to stop transmitting for a specified period of time. The possible settings are: Auto - The port uses flow control if it detects that the end node is using it. Disabled - No flow control on the port. This is the default. Enabled - Flow control is activated. For further information about flow control, refer to Chapter 6, “Port Parameters,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 6: Port Parameters Broadcast Rate Limiting Use this parameter to enable or disable ingress broadcast packet limits. The possible settings are: Enabled - Broadcast packet ingress rate limiting is enabled. Disabled - Broadcast packet ingress rate limiting is disabled. This is the default. Broadcast Rate Use this parameter to set the broadcast rate limit in packets per second. The range is 0 to 262143. The default is 262143.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying Port Status To display the status of a switch port, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 1 option. The Layer 1 page is displayed with the Port Settings tab selected by default, as shown in Figure 25. Figure 25.
Chapter 6: Port Parameters The Port Status page is shown in Figure 26. Figure 26. Port Status Page The Port Status page displays the following information: Name The name of the port. Status The status of the port, enabled or disabled. VLAN ID The VLAN identifier (VID) of the VLAN in which the port is an untagged member. Link Status The status of the link between the port and the end node connected to the port, up or down. Speed and Duplex The speed and duplex mode.
AT-S63 Management Software Web Browser Interface User’s Guide Ingress Unknown Unicast Filter Status of the filter on ingress unknown unicast packets. Ingress Unknown Multicast Filter Status of the filter on ingress unknown multicast packets. Flow Control Status of flow control, enabled or disabled. Flow Control/Back Pressure Limit The flow control/back pressure limit. Broadcast Rate Limiting The status of rate limiting on broadcast packets.
Chapter 6: Port Parameters Multicast Rate Limiting The status of multicast rate limiting, enabled or disabled. Multicast Rate The rate on multicast packets.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying Port Statistics To display the statistics of a switch port, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 1 option.
Chapter 6: Port Parameters Bytes Sent Number of bytes transmitted from the port. Frames Received Number of frames received on the port. Frames Sent Number of frames transmitted from the port. Broadcast Frames Received Number of broadcast frames received on the port. Broadcast Frames Sent Number of broadcast frames transmitted from the port. Multicast Frames Received Number of multicast frames received on the port. Multicast Frames Sent Number of multicast frames transmitted from the port.
AT-S63 Management Software Web Browser Interface User’s Guide TXCollisions Number of transmit collisions. 5. To clear all the counters for the selected port, click Clear. To clear the counters for all ports on the switch, click Clear All.
Chapter 6: Port Parameters Resetting a Port to the Default Settings To reset a port to the default settings, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 1 option. The Layer 1 page is displayed with the Port Settings tab selected by default, as shown in Figure 23 on page 78. 3.
Chapter 7 Port Trunking This chapter contains the procedure for creating, modifying, or deleting a port trunk. The sections in this chapter are: “Creating a Port Trunk” on page 94 “Modifying a Port Trunk” on page 97 “Deleting a Port Trunk” on page 99 “Displaying the Port Trunks” on page 100 Note For background information on port trunking, refer to Chapter 7, “Static and LACP Port Trunks,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 7: Port Trunking Creating a Port Trunk Caution Do not connect the cables of a port trunk to the ports on the switch until after you have configured the ports on both the switch and the end node. Connecting the cables prior to configuring the ports can create loops in your network topology. Loops can result in broadcast storms, which can adversely effect the operation of your network. If you are deleting a port trunk, disconnect the cables from the ports before you delete the trunk.
AT-S63 Management Software Web Browser Interface User’s Guide The Port Trunking tab is shown in Figure 28 and displays any existing trunks in a table. Figure 28. Port Trunking Tab (Configuration) 4. Click Add. The Add New Trunk page is shown in Figure 29. Figure 29. Add New Trunk Page 5. Configure the following parameters as necessary. Trunk Name The name for the port trunk. The name can be up to 16 alphanumeric characters.
Chapter 7: Port Trunking exclamation points, are allowed. Each trunk must be given a unique name. Trunk Method Select a load distribution method. The possible settings are: SA - Source MAC address (Layer 2) DA - Destination MAC address (Layer 2) SA/DA - Source MAC address /destination MAC address (Layer 2) SI - Source IP address (Layer 3) DI - Destination IP address (Layer 3) SI/DI - Source IP address /destination IP address (Layer 3) 6. Click the ports that are to make up the port trunk.
AT-S63 Management Software Web Browser Interface User’s Guide Modifying a Port Trunk This section contains the procedure for modifying a port trunk on the switch. You can change the name of a trunk and the ports that constitute the trunk. You cannot change the load distribute method.
Chapter 7: Port Trunking 4. Click the button next to the port trunk you want to modify and click Modify. The Modify Trunk page is shown in Figure 30. Figure 30. Modify Trunk Page Note You cannot change the Trunk ID number or the load distribution method of a port trunk. 5. Configure the following parameter as necessary. Trunk Name The name can be up to 16 alphanumeric characters. No spaces or special characters, such as asterisks and exclamation points, are allowed. Each trunk must have a unique name. 6.
AT-S63 Management Software Web Browser Interface User’s Guide Deleting a Port Trunk Caution Disconnect the cables from the port trunk on the switch before performing the following procedure. Deleting a port trunk without first disconnecting the cables can create loops in your network topology. Data loops can result in broadcast storms and poor network performance. To delete a port trunk from the switch, perform the following procedure: 1. From the home page, select Configuration.
Chapter 7: Port Trunking Displaying the Port Trunks To display the port trunks, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 1 option. The Layer 1 page is displayed with the Port Settings tab selected by default, as shown in Figure 25 on page 85. 3. Select the Port Trunking tab.
AT-S63 Management Software Web Browser Interface User’s Guide DA - Destination MAC address (Layer 2) SA/DA - Source MAC address /destination MAC address (Layer 2) SI - Source IP address (Layer 3) DI - Destination IP address (Layer 3) SI/DI - Source IP address /destination IP address (Layer 3) Ports The ports of the trunk.
Chapter 7: Port Trunking 102 Section I: Basic Operations
Chapter 8 Port Mirroring This chapter contains the procedures for creating or deleting a port mirror. The sections in the chapter include: “Creating a Port Mirror” on page 104 “Modifying a Port Mirror” on page 107 “Disabling a Port Mirror” on page 108 “Deleting a Port Mirror” on page 109 “Displaying the Port Mirror” on page 110 Note For background information on port mirroring, refer to Chapter 8, “Port Mirroring,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 8: Port Mirroring Creating a Port Mirror To create a port mirror, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 1 option. The Layer 1 page opens with the Port Settings tab displayed by default, as shown in Figure 23 on page 78. 3. Select the Port Mirroring tab.
AT-S63 Management Software Web Browser Interface User’s Guide The Modify Mirror page is shown in Figure 33. Figure 33. Modify Mirror Page 5. Click the ports of the port mirror. Clicking a port toggles it through the possible settings, which are as follows: The destination (mirror) port. There can be only one destination port. A source port. The port’s ingress traffic is mirrored to the destination port. A source port. The port’s egress traffic is mirrored to the destination port. A source port.
Chapter 8: Port Mirroring Figure 34 shows an example of the Modify Mirror page configured for a port mirror. The egress traffic on ports 11 and 12 is being mirrored to the destination port 5. Figure 34. Example of a Modify Mirror Page 6. After selecting the destination and source ports, click the Enable Mirror check box. 7. Click Apply. The port mirror is now active on the switch. You can connect a data analyzer to the destination port to monitor the traffic on the source ports. 8.
AT-S63 Management Software Web Browser Interface User’s Guide Modifying a Port Mirror To modify a port mirror, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 1 option. The Layer 1 page opens with the Port Settings tab displayed by default, as shown in Figure 18 on page 74. 3. Select the Port Mirroring tab.
Chapter 8: Port Mirroring Disabling a Port Mirror To disable a port mirror, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 1 option. The Layer 1 page opens with the Port Settings tab displayed by default, as shown in Figure 18 on page 74. 3. Select the Port Mirroring tab.
AT-S63 Management Software Web Browser Interface User’s Guide Deleting a Port Mirror To delete a port mirror, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 1 option. The Layer 1 page opens with the Port Settings tab displayed by default, as shown in Figure 18 on page 74. 3. Select the Port Mirroring tab.
Chapter 8: Port Mirroring Displaying the Port Mirror To display the port mirror, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 1 option. The Layer 1 page is displayed with the Port Settings tab selected by default, as shown in Figure 25 on page 85. 3. Select the Port Mirroring tab.
AT-S63 Management Software Web Browser Interface User’s Guide Egress Port(s) The source ports whose egress traffic is mirrored to the destination port. Status The status of the mirroring feature. The possible settings are: Enabled - Traffic is being copied to the destination port. Disabled - No traffic is being mirrored.
Chapter 8: Port Mirroring 112 Section I: Basic Features
Section II Advanced Operations The chapters in this section provide information and procedures for advanced switch setup using the AT-S63 management software.
Section II: Advanced Operations
Chapter 9 File System This chapter contains procedures for working with the file system and contains the following sections: Section II: Advanced Operations “Listing the Files in Flash Memory” on page 116 “Listing Files on the Compact Flash Card” on page 118 115
Chapter 9: File System Listing the Files in Flash Memory To display a list of the system files stored in flash memory as well as on a compact flash card (if the switch supports this and a compact flash card is inserted in the slot), perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Utilities option.
AT-S63 Management Software Web Browser Interface User’s Guide Device The device type, either “flash” for flash memory or “cflash” for compact flash card. Size Size of the file, in bytes. Modified The time the file was created or last modified, in the following date and time format: month/day/year hours:minutes:seconds. Attributes The file type, one of the following: Normal Read Only Hidden System Volume Directory Archive Invalid 4.
Chapter 9: File System Listing Files on the Compact Flash Card To view the files on the compact flash card, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Utilities option. The Utilities page is displayed with the System Utilities tab displayed by default, as shown in Figure 9 on page 52. 3. Select the File System tab.
AT-S63 Management Software Web Browser Interface User’s Guide The system displays files on the compact flash card, as shown in Figure 39. Figure 39. List Files Menu for a Compact Flash Card The columns in the List Files table are described below. This information is for viewing purposes only. File Name Name of the system file. Device The device type, either “flash” for flash memory or “cflash” for compact flash card. Size Size of the file, in bytes.
Chapter 9: File System Directory Archive Invalid 5. In the Current Files section, click a file and click View. The Viewing File page for that file is displayed. An example is shown in Figure 37 on page 117.
Chapter 10 File Downloads and Uploads This chapter contains the procedure for downloading a new AT-S63 image file onto the switch. This chapter also contains procedures for uploading and downloading system files, such as a boot configuration file, from the file system in the switch.
Chapter 10: File Downloads and Uploads Downloading a File This procedure explains how to download a file from a TFTP server on your network to the switch using the web browser interface. You can download any of the following files: AT-S63 image file Boot configuration file Public key CA certificate Note The public key and CA certificate are supported only on the version of AT-S63 management software that features SSL, PKI, and SSH security.
AT-S63 Management Software Web Browser Interface User’s Guide The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Utilities option. The Utilities page is displayed with the System Utilities tab displayed by default, as shown in Figure 9 on page 52. Note You use the top portion of the System Utilities tab to return the switch to its factory default settings.
Chapter 10: File Downloads and Uploads switch automatically resets. Your web browser management session ends. To continue managing the switch, you must reestablish the management session.
AT-S63 Management Software Web Browser Interface User’s Guide Uploading a File This procedure explains how to upload a file from the switch’s file system to a TFTP server on your network using the web browser interface.
Chapter 10: File Downloads and Uploads 3. In the TFTP File Uploads and Downloads section, in the TFTP Server IP Address field, enter the IP address of the network node that contains the TFTP server software. 4. For the TFTP Operation parameter, click Upload. 5. In the TFTP Remote Filename field, enter a name for the file. This is the name that the file is stored as on the TFTP server. 6.
Chapter 11 Event Log This chapter describes the event log that allows you to view information about network activity. Sections in the chapter include: “Working with the Event Log” on page 128 “Working with Log Outputs” on page 138 For more information about the event log and log outputs, refer to Chapter 12, “Event Log,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 11: Event Log Working with the Event Log This section includes the following topics: Enabling or Disabling the Event Log “Enabling or Disabling the Event Log,” next “Displaying Events” on page 130 “Disabling the Event Log” on page 136 “Clearing the Event Log” on page 136 “Saving the Event Log to a File” on page 136 To enable or disable the event log, perform the following procedure: 1. From the home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide The Event log tab is shown in Figure 40. Figure 40. Event Log Tab (Configuration) 3. In the Log Settings section, for the Status, click Enabled to enable the event log, or Disabled to disable the event log. The event log is enabled by default. 4. Click Apply to activate the settings on the switch. 5. Select the General tab. 6. From the Configuration menu, select the Save Config option to permanently save your changes.
Chapter 11: Event Log Displaying Events Each time that you want to view the event log, you must choose how and what you want displayed. The event log settings are not saved. To specify the type of events you want to display in the event log, perform the following procedure: 1. From the home page, select Monitoring. The System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44.
AT-S63 Management Software Web Browser Interface User’s Guide 3. In the Display Filter Settings section, for Log Location, click one of the following: Temporary (Memory) Displays the events stored in temporary memory. This selection stores approximately 4,000 events. If the switch has been running for some time without a reset or power cycle, select Temporary. This is the default. Permanent (NVS) Displays events stored in nonvolatile memory, which stores no more than 2,000 events.
Chapter 11: Event Log Normal Displays the time, module, severity, and description for each event. This is the default. An example of Normal mode is shown in Figure 42 on page 134. Full Displays the same information as Normal, plus the file name, line number, and event ID. An example of Full mode is shown in Figure 43 on page 135. 7. To display events of a particular AT-S63 software module, from the Module Selections list, select one or more of the modules listed in Table 1.
AT-S63 Management Software Web Browser Interface User’s Guide Table 1. AT-S63 Software Modules (Continued) Name Description PTRUNK Port trunking QOS Quality of Service RADIUS RADIUS authentication protocol RRP RRP Snooping SNMP Simple Network Management Protocol SSH Secure Shell protocol SSL Secure Sockets Layer protocol STP Spanning Tree, Rapid Spanning Tree, and Multiple Spanning Tree protocols SYSTEM Hardware status; Manager and Operator log in and log off events.
Chapter 11: Event Log Figure 42 shows an example of an event log in Normal mode. Figure 42. Event Log Example Displayed in Normal Mode The events are displayed in a table. The columns in the table shown in normal display mode are described below: S (Severity) The event’s severity. The severity codes and their corresponding severity level and description are shown in Table 2. Table 2. Event Severity Levels Severity Code Severity Level E Error Switch operation is severely impaired.
AT-S63 Management Software Web Browser Interface User’s Guide within the AT-S63 management software that generated the event. The second part is a description of the event. When you display the events in full mode, more information is included. Figure 43 shows the same portion of the event log in Figure 42 on page 134 but displayed in full mode. Figure 43.
Chapter 11: Event Log Disabling the Event Log To activate or deactivate the event log, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. Select the Event Log tab. The Event log tab is shown in Figure 40 on page 129. 3. In the Log Settings section, for the Status, click Disabled. 4. Click Apply to activate the settings on the switch. 5. Select the General tab. 6.
AT-S63 Management Software Web Browser Interface User’s Guide The Event log tab is shown in Figure 40 on page 129. 3. In the Filter Settings and Actions section, select the type of events you want to save to the file. 4. In the Save Filename field, enter a name for the file with a .log file name extension. 5. Click Save. The log file is saved on the switch as an ASCII file. 6. To upload the file to your management station for viewing or sending with an email, refer to “Uploading a File” on page 125.
Chapter 11: Event Log Working with Log Outputs Instead of checking the log files on each individual switch, you can create an output definition that defines the events that are sent to a syslog server. From this central point, you can monitor all the AT-9400 Series switches in your network. This is called a log output file. For more information about log output files, refer to Chapter 12, “Event Log,” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide 4. Configure the following parameters as necessary: Output ID An ID number for the log output. Output Status Specifies whether or not the output is sent to the syslog server. The options are: Enabled - Sends the output to the syslog server. Message generation is automatically enabled when you specify the IP address for the syslog server. Disabled - The output is not sent to the syslog server even if an IP address is defined.
Chapter 11: Event Log Facility Level The numerical code to be added to the entries sent to the syslog server to group the entries according to the module or switch that produced them. The facility levels are described in Table 3. Table 3. Default Syslog Facilities Facility Mapped Event Log Modules and Events Default This facility number applies the functional groupings defined in the RFC 3164 standard. local 1 through local 7 An identifier to assign to specific switches or groups of switches.
AT-S63 Management Software Web Browser Interface User’s Guide The View Log Output page is shown in Figure 45. Figure 45. View Event Log Output Page This page displays the following information: Output ID An ID number for the log output. Output Status Whether or not the output is sent to the syslog server, either enabled or disabled. Message Format The format of the messages sent to the syslog server. Severity Selections The severity of events sent to the syslog server.
Chapter 11: Event Log Modifying a Log Output Definition To modify a log output definition, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. Select the Event Log tab. The Event log tab is shown in Figure 40 on page 129. 3. In the Configure Log Outputs section, Select the log output file that you want to modify and click Modify.
AT-S63 Management Software Web Browser Interface User’s Guide Output Status Specifies whether or not the output is sent to the syslog server. The options are: Enabled - Sends the output to the syslog server. Message generation is automatically enabled when you specify the IP address for the syslog server. Disabled - The output is not sent to the syslog server even if an IP address is defined. Message Format Specifies the format of the messages sent to the syslog server.
Chapter 11: Event Log The facility levels are described in Table 3 on page 140. Module Selections Specifies the AT-S63 management software module(s) whose events you want to send to the syslog server. To select more than one, use +click. For a list of modules, refer to Table 1 on page 132. 5. Click Apply to apply the changes or Close to close the page without making changes. 6. From the Configuration menu, select the Save Config option to permanently save your changes.
Chapter 12 Classifiers You use classifiers to define traffic flows. This chapter contains the following sections: “Configuring a Classifier” on page 146 “Modifying a Classifier” on page 149 “Deleting a Classifier” on page 151 “Displaying the Classifiers” on page 152 Note For background information about classifiers, refer to Chapter 13, “Classifiers,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 12: Classifiers Configuring a Classifier To configure a classifier, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 48. Figure 48. Port Security Tab (Configuration) 3. Select the Classifier tab.
AT-S63 Management Software Web Browser Interface User’s Guide The Classifier tab is shown in Figure 49. Figure 49. Classifier Tab (Configuration) 4. Click Create. The Create Classifier page is shown in Figure 50. Figure 50. Create Classifier Page 5. Configure the following parameters as desired: ID The ID number of the classifier, a number between 1 and 9999. The default is the lowest available number. Destination MAC The destination MAC address for this traffic flow.
Chapter 12: Classifiers Ethernet Format Specifies the type of Ethernet frame that needs to be classified. Select one of the following from the list: Any Untagged Tagged 802.2 Untagged 802.2 Tagged Priority Specifies the priority value in the IEEE 802.1p tag control field that traffic belonging to this traffic class is assigned. The range is 0 to 7 with 0 (zero) as the lowest priority. Protocol Specifies the protocol used to identify the traffic flow.
AT-S63 Management Software Web Browser Interface User’s Guide Modifying a Classifier To modify a classifier, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 48 on page 146. 3. Select the Classifier tab.
Chapter 12: Classifiers Destination MAC The destination MAC address for this traffic flow. Ethernet Format Specifies the type of Ethernet frame that needs to be classified. Select one of the following from the list: Any Untagged Tagged 802.2 Untagged 802.2 Tagged Priority Specifies the priority value in the IEEE 802.1p tag control field that traffic belonging to this traffic class is assigned. The range is 0 to 7 with 0 (zero) as the lowest priority.
AT-S63 Management Software Web Browser Interface User’s Guide Deleting a Classifier To delete a classifier, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 48 on page 146. 3. Select the Classifier tab.
Chapter 12: Classifiers Displaying the Classifiers To display the classifiers, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. Note You can access the Classifiers tab either through the Network Security menu option or through the Services menu option. This procedure uses the path through the Services menu option. 2. From the Monitoring menu, select Services.
AT-S63 Management Software Web Browser Interface User’s Guide The Classifiers tab is shown in Figure 53. Figure 53. Classifier Tab (Monitoring) The Classifier tab displays a table of the currently configured classifiers that contains the following columns of information: ID The ID of the classifier. Description A description of the classifier. No. of References The number of times the classifier has been referred to by an ACL or a flow group. No.
Chapter 12: Classifiers The View Classifier page opens, as shown in Figure 54. Figure 54. View Classifier Page The View Classifier page displays the following information: ID The classifier ID. Destination MAC The destination MAC address for this traffic flow. Ethernet Format The type of Ethernet frames that will be classified. Priority The priority value in the IEEE 802.1p tag control field that traffic belonging to this traffic class is assigned. Protocol The protocol used to identify the traffic flow.
Chapter 13 Access Control Lists An access control list (ACL) is a tool for managing network traffic. This chapter contains the following sections: “Configuring an Access Control List” on page 156 “Modifying an Access Control List” on page 158 “Displaying the Access Control Lists” on page 160 Note For background information about access control lists, refer to Chapter 14, “Access Control Lists,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 13: Access Control Lists Configuring an Access Control List To configure an access control list, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 48 on page 146. 3. Select the ACL tab.
AT-S63 Management Software Web Browser Interface User’s Guide The Create ACLs page is displayed, as shown in Figure 56. Figure 56. Create ACLs Page 5. Configure the following parameters: ID Specifies the ID number for the ACL. Every ACL on the switch must have a unique ID number. The range is 0 to 255 and the default is the lowest unused number. Classifier List The classifiers assigned to this ACL. You must create the classifiers before you assign them to an ACL.
Chapter 13: Access Control Lists Modifying an Access Control List To modify an access control list, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 48 on page 146. 3. Select the ACL tab.
AT-S63 Management Software Web Browser Interface User’s Guide Action Specifies whether the ACL discards (0) or accepts (1) the ingress packets. The default is to discard the packets. Description Specifies a description for the ACL. A description can be up to 15 alphanumeric characters, including spaces. Port List Specifies the ports where the ACL is assigned. Select the ports from the list using click to select more than one. 6. Click Apply. 7.
Chapter 13: Access Control Lists Displaying the Access Control Lists To display the current ACLs, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select Network Security. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 58. Figure 58. Port Security Tab (Monitoring) 3.
AT-S63 Management Software Web Browser Interface User’s Guide The ACL tab is shown in Figure 59. Figure 59. ACL Tab (Monitoring) The ACL tab displays a table of the currently configured ACLs that contains the following columns of information: ID The ID number for the ACL. Description A description of the ACL. Action Shows whether the ACL discards (0) or accepts (1) the packets. Active Whether or not the ACL is active on the ports. Classifier List The classifiers assigned to this ACL.
Chapter 13: Access Control Lists The View ACLs page opens, as shown in Figure 60. Figure 60. View ACLs Page The View ACLs page displays the following information: ID The ID number for the ACL. Description A description of the ACL. Classifier List The classifiers assigned to this ACL. Port List The ports where the ACL is assigned. Action Shows whether the ACL discards (0) or accepts (1) the packets. 5. Click Close.
Chapter 14 Denial of Service Defense This chapter contains instructions on how to configure the Denial of Service defense feature on the switch. The sections include: “Configuring Denial of Service Defense” on page 164 “Displaying the DoS Settings” on page 167 Note For background information on denial of service defense, refer to Chapter 15, “Denial of Service Defense,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 14: Denial of Service Defense Configuring Denial of Service Defense To configure the ports on the switch for Denial of Service attack defense, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page is displayed with the 802.
AT-S63 Management Software Web Browser Interface User’s Guide b. In the DoS Subnet Mask field, enter the LAN’s mask. enter the mask. A binary “1” indicates the switch should filter on the corresponding bit of the IP address, while a “0” indicates that it should not. As an example, assume that the devices connected to a switch are using the IP address range 149.11.11.1 to 149.11.11.50. The mask would be 0.0.0.63. c.
Chapter 14: Denial of Service Defense Status Click Enable or Disable to enable or disable DoS on the selected ports. Action The action a port takes when an intruder packet is received. Although five possible selections are shown in the Action list box, they all do the same thing: block the packet, record the event, and drop the packet. This option applies only to the IP Options defense. Mirror Port This option applies to the Land, Tear Drop, Ping of Death, and IP Options.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the DoS Settings To display the DoS settings, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select Network Security. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 58 on page 160. 3. Select the DoS tab.
Chapter 14: Denial of Service Defense The DoS Monitor for Port page opens, as shown in Figure 64. Figure 64. DoS Monitor for Ports Page The page displays a table that contains the following columns of information: Port The port number. Status Whether DoS is enabled or disabled on the port. Type The type of DoS prevention. Action The action a port takes when an intruder packet is received.
Chapter 15 Quality of Service This chapter contains instructions on how to configure Quality of Service (QoS). This chapter contains the following procedures: “Managing Flow Groups” on page 170 “Managing Traffic Classes” on page 176 “Managing Policies” on page 184 Note For background information on QoS, refer to Chapter 16, “Quality of Service,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 15: Quality of Service Managing Flow Groups Flow groups are groups of classifiers that group together similar traffic flows. This section contains the following procedures: Configuring Flow Groups “Configuring Flow Groups,” next “Modifying a Flow Group” on page 172 “Deleting a Flow Group” on page 173 “Displaying Flow Groups” on page 173 To configure a flow group, perform the following procedure: 1. From the home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide The Flow Group tab is shown in Figure 66. Figure 66. Flow Group Tab (Configuration) 4. Click Create. The Create Flow Group page opens, as shown in Figure 67. Figure 67. Create Flow Group Page 5. Configure the following parameters as necessary: ID Specifies the ID number for this flow group. The range is 0 to 1023. DSCP Specifies a replacement value to write into the DSCP (TOS) field of the packets. The range is 0 to 63.
Chapter 15: Quality of Service Remark Priority Replaces the user priority value in the packets with the new value specified in the Priority parameter. Description Specifies the flow group description. A description can be up to 15 alphanumeric characters, including spaces. Priority (802.1p) Specifies a new user priority value for the packets. The range is 0 to 7. Classifier List The classifiers to be assigned to the policy. The specified classifiers must already exist.
AT-S63 Management Software Web Browser Interface User’s Guide 4. Configure the following parameters as necessary: ID Specifies the ID number for this flow group. The range is 0 to 1023. DSCP Specifies a replacement value to write into the DSCP (TOS) field of the packets. The range is 0 to 63. Remark Priority Replaces the user priority value in the packets with the new value specified in the Priority parameter. Description Specifies the flow group description.
Chapter 15: Quality of Service Note You can access the Classifiers tab either through the Network Security menu option or through the Services menu option. This procedure uses the path through the Services menu option. 2. From the Monitoring menu, select the Services option. The Services menu is displayed with the CoS tab selected by default, as shown in Figure 52 on page 152. 3. Select the Flow Group tab. The Flow Group tab is shown in Figure 69. Figure 69.
AT-S63 Management Software Web Browser Interface User’s Guide 4. To display detailed information about a flow group, select the flow group and click View. The View Flow Group page is shown in Figure 70. Figure 70. View Flow Group Page The View Flow Group page displays the following information: ID The ID number for this flow group. Description The flow group description. DSCP The replacement value to write into the DSCP (TOS) field of the packets. Priority The new user priority value for the packets.
Chapter 15: Quality of Service Managing Traffic Classes Traffic classes consist of a set of QoS parameters and a group of QoS flow groups. This section contains the following procedures: Configuring Traffic Classes “Configuring Traffic Classes,” next “Modifying a Traffic Class” on page 178 “Deleting a Traffic Class” on page 180 “Displaying the Traffic Classes” on page 180 To configure a traffic class, perform the following procedure: 1. From the home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide The Create Traffic Class page is shown in Figure 72. Figure 72. Create Traffic Class Page 5. Configure the following parameters: ID Specifies the ID number for this traffic class. The range is 0 to 1023. Exceed Action Specifies the action to be taken if the traffic of the traffic class exceeds the maximum bandwidth specified by the Max Bandwidth parameter. The possible options are drop and remark.
Chapter 15: Quality of Service Max Bandwidth Specifies the maximum bandwidth available for the traffic class. The range is 0 to 1016 Mbps. If you set this parameter to 0 (zero), all traffic that matches that traffic class is dropped. Priority Specifies the priority value in the IEEE 802.1p tag control field that traffic belonging to this traffic class is assigned. The range is 0 to 7 with 0 (zero) as the lowest priority. Flow Group List The flow groups assigned to this traffic class.
AT-S63 Management Software Web Browser Interface User’s Guide The Modify Traffic Class page is shown in Figure 73. Figure 73. Modify Traffic Class Page 5. Configure the following parameters as necessary: ID Specifies the ID number for this traffic class. The range is 0 to 1023. Exceed Action Specifies the action to be taken if the traffic of the traffic class exceeds the maximum bandwidth specified by the Max Bandwidth parameter. The possible options are drop and remark.
Chapter 15: Quality of Service Max Bandwidth Specifies the maximum bandwidth available for the traffic class. The range is 0 to 1016 Mbps. If you set this parameter to 0 (zero), all traffic that matches that traffic class is dropped. Priority Specifies the priority value in the IEEE 802.1p tag control field that traffic belonging to this traffic class is assigned. The range is 0 to 7 with 0 (zero) as the lowest priority. Flow Group List The flow groups assigned to this traffic class.
AT-S63 Management Software Web Browser Interface User’s Guide 3. Select the Traffic Class tab. The Traffic Class tab is shown in Figure 74. Figure 74. Traffic Class Tab (Monitoring) The Traffic Class tab displays the currently configured flow groups in a table that contains the following columns of information: ID The ID of the traffic class. Description A description of the traffic class. Active Whether or not this traffic class is active on the switch.
Chapter 15: Quality of Service The View Traffic Class page is shown in Figure 75. Figure 75. View Traffic Class Page The View Traffic Class page displays the following information: ID The ID of the traffic class. Exceed Action The action to be taken if the traffic of the traffic class exceeds the maximum bandwidth specified by the Max Bandwidth parameter. DSCP Value The replacement value to write into the DSCP (TOS) field of the packets. Burst Size The size of a token bucket for the traffic class.
AT-S63 Management Software Web Browser Interface User’s Guide Flow Group List The flow groups assigned to this traffic class. 5. Click Close.
Chapter 15: Quality of Service Managing Policies QoS policies consist of a collection of user-defined traffic classes. This section contains the following procedures: Configuring a Policy “Configuring a Policy,” next “Modifying a Policy” on page 186 “Deleting a Policy” on page 188 “Displaying Policies” on page 188 To configure a policy, perform the following procedure: 1. From the home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide The Policies tab displays the existing policies in a table that contains the following columns of information: ID The ID of the policy. Description A description of the policy. Active Whether or not this policy is active on the switch. Traffic Class List The traffic classes assigned to the policy. Ingress Port List The ingress ports to which the policy is assigned. 4. Click Create. The Create Policy page opens, as shown in Figure 77. Figure 77.
Chapter 15: Quality of Service None - Disables this function. All - All packets are remarked. DSCP Value Specifies a replacement value to write into the DSCP (TOS) field of the packets. The range is 0 to 63. Traffic Class List Specifies the traffic classes to be assigned to the policy. The traffic classes must already exist. Select the classes from the list. To select more than one, use click. Ingress Port List Specifies the ingress ports to which the policy is to be assigned.
AT-S63 Management Software Web Browser Interface User’s Guide The Modify Policy page is shown in Figure 78. Figure 78. Modify Policy Page 5. Modify the following parameters as necessary: ID Specifies the ID number for this policy. The range is 0 to 255. Description Specifies the policy description. A description can be up to 15 alphanumeric characters, including spaces. Remark DSCP Specifies the conditions under which the ingress DSCP value is overwritten.
Chapter 15: Quality of Service Egress Port Specifies the egress port to which the policy is to be assigned. A port can be an egress port of only one policy at a time. Redirect Port Specifies the port to which the classified traffic from the ingress ports is redirected. 6. Click Apply. 7. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide The Policies tab is shown in Figure 79. Figure 79. Policies Tab (Monitoring) The Policies tab displays the existing policies in a table that contains the following columns of information: ID The ID of the policy. Description A description of the policy. Active Whether or not this policy is active on the switch. Traffic Class List The traffic classes assigned to the policy. Ingress Port List The ingress ports to which the policy is assigned. 4.
Chapter 15: Quality of Service The View Policy page is shown in Figure 80. Figure 80. View Policy Page The View Policy page contains the following information: ID The ID of the policy. Description A description of the policy. Remark DSCP The conditions under which the ingress DSCP value is overwritten. DSCP Value A replacement value to write into the DSCP (TOS) field of the packets. Traffic Class List The traffic classes to be assigned to the policy.
Chapter 16 Class of Service This chapter contains instructions on how to configure Class of Service (CoS).
Chapter 16: Class of Service Configuring CoS This procedure explains how to change the egress queue used to handle untagged ingress packets on a port. This procedure also overrides the priority levels in tagged ingress packets. To configure CoS, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Services option.
AT-S63 Management Software Web Browser Interface User’s Guide The CoS Setting for Port page is shown in Figure 82. Figure 82. CoS Setting for Port Page 4. Use the Priority list to select a value from Level 1 to Level 7 that corresponds to the egress queue where you want all untagged ingress packets on the port to be stored. For example, if you select Level 4, all untagged packets received on the port are stored in egress queue Q2 of the egress port. The default is Level 0, which corresponds to Q0.
Chapter 16: Class of Service Note The tagged information in a packet is not changed as the packet traverses the switch. A tagged packet exits the switch with the same priority level that it had when it entered. The default for this parameter is No, meaning that the priority level of tagged packets is determined by the priority level specified in the packet itself. 6. Click Apply. Configuration changes are immediately activated on the switch. 7.
AT-S63 Management Software Web Browser Interface User’s Guide Mapping CoS Priorities to Egress Queues This procedure explains how to change the default mappings of CoS priorities to egress priority queues, as shown in Table 4 on page 193. This is set at the switch level. You cannot set this on a per-port basis. To change the mappings, perform the following procedure: 1. From the home page, select Configuration.
Chapter 16: Class of Service The Queuing & Scheduling tab is shown in Figure 83. Figure 83. Queuing & Scheduling Tab (Configuration) Note The Configure Egress Weights section in the tab is explained in the next procedure, “Configuring Egress Scheduling” on page 198. 4. In the Configure CoS Queues to Egress Queues section of the tab, click the list for a CoS priority whose queue assignment you want to change and select the new queue.
AT-S63 Management Software Web Browser Interface User’s Guide 7. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 16: Class of Service Configuring Egress Scheduling This procedure explains how to select and configure a scheduling method for QoS. Scheduling determines the order in which the ports handle packets in their egress queues. For an explanation of the two scheduling methods, refer to “Scheduling” in Chapter 13, “Quality of Service,” in the AT-S63 Management Software Menus Interface User’s Guide. Scheduling is set at the switch level. You cannot set this at the port level.
AT-S63 Management Software Web Browser Interface User’s Guide Table 5. Example of Weighted Round Robin Priority (Continued) Port Egress Queue Maximum Number of Packets Q1 5 Q0 1 Leaving the default value of 1 for each queue results in all egress queues being given the same priority. 6. Click Apply. 7. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 16: Class of Service Displaying the CoS Settings To display the CoS settings, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select Services. The Services page is displayed with the CoS tab selected by default, as shown in Figure 84. Figure 84. CoS Tab (Monitoring) 3. Click the port where you want to view the settings.
AT-S63 Management Software Web Browser Interface User’s Guide The CoS Setting for Port page is shown in Figure 85. Figure 85. CoS Setting for Port Page The CoS Setting for Port page displays a table that contains the following columns of information: Port The port number. VLAN ID The VLAN of which the port is a member. Default Priority The default priority level for this port. Override Priority Whether or not the default priority should be overridden. 5. Click Close.
Chapter 16: Class of Service Displaying the QoS Schedule To display the QoS schedule, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Services option. The Services page is displayed with the CoS tab selected by default, as shown in Figure 52 on page 152. 3. Select the Queuing and Scheduling tab.
Chapter 17 IGMP Snooping This chapter describes how to configure the IGMP snooping feature on the switch. The sections in the chapter include: “Configuring IGMP Snooping” on page 204 “Displaying a List of Host Nodes” on page 207 “Displaying a List of Multicast Routers” on page 210 Note For background information, refer to Chapter 18, “IGMP Snooping,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 17: IGMP Snooping Configuring IGMP Snooping To configure IGMP snooping, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Multicast option. The Multicast page is displayed with the IGMP tab selected by default, as shown in Figure 87. Figure 87. IGMP Tab (Configuration) 3. Configure the following parameters as necessary.
AT-S63 Management Software Web Browser Interface User’s Guide reports and times out. The switch forwards the leave request to the router and simultaneously ceases transmission of any further multicast packets out the port where the host node is connected. The Intermediate (Multi-Host) setting is appropriate if there is more than one host node connected to a switch port, such as when a port is connected to an Ethernet hub to which multiple host nodes are connected.
Chapter 17: IGMP Snooping 5. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying a List of Host Nodes You can use the AT-S63 management software to display a list of the multicast groups on a switch, as well as the host nodes. You can also view the multicast routers. A multicast router is a router that is receiving multicast packets from a multicast application and transmitting the packets to host nodes. To view host nodes, perform the following procedure: 1. From the Home page, select Monitoring.
Chapter 17: IGMP Snooping Multicast Router Ports Mode How the router ports are determined. The possible settings are: Auto-Detect - The switch determines the ports automatically. Port number - The selected router ports. Host/Router Timeout Interval The time period in seconds after which the switch determines that a host node has become inactive. Maximum Multicast Groups The maximum number of multicast groups the switch learns. 3.
AT-S63 Management Software Web Browser Interface User’s Guide Status Indicates IGMP group status of the port. The possible settings are: Active - The port is active in the IGMP group. Left Group - The port is not active in the IGMP group.
Chapter 17: IGMP Snooping Displaying a List of Multicast Routers To view multicast routers, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the IGMP tab. The IGMP tab is shown in Figure 88 on page 207. 3. To view the multicast routers, click View Multicast Router List and then click View. The View Multicast Routers List is shown in Figure 90. Figure 90.
AT-S63 Management Software Web Browser Interface User’s Guide page opens, as shown in Figure 91. Figure 91.
Chapter 17: IGMP Snooping 212 Section II: Advanced Operations
Section III SNMPv3 The chapter in this section provides information and procedures for SNMPv3.
Section III: SNMPv3
Chapter 18 SNMPv3 This chapter provides the following procedures for configuring SNMPv3 parameters using a web browser management session: “Configuring the SNMPv3 Protocol” on page 216 “Enabling or Disabling SNMP Management” on page 217 “Configuring the SNMPv3 User Table” on page 220 “Configuring the SNMPv3 View Table” on page 228 “Configuring the SNMPv3 Access Table” on page 234 “Configuring the SNMPv3 SecurityToGroup Table” on page 241 “Configuring the SNMPv3 Notify Table” on
Chapter 18: SNMPv3 Configuring the SNMPv3 Protocol To configure the SNMPv3 protocol, you need to first enable SNMP access on the switch. Then you configure the SNMPv3 tables.
AT-S63 Management Software Web Browser Interface User’s Guide Enabling or Disabling SNMP Management In order to allow an SNMP manager or host to access the switch you need to enable SNMP access. In addition, to allow the switch to send a trap when it receives a login attempt from an unauthenticated user, you need to enable authentication failure traps. This section provides a procedure to accomplish both of these tasks.
Chapter 18: SNMPv3 The SNMP tab is shown in Figure 92. Figure 92. SNMP Tab (Configuration) 4. Click the Enable SNMP Access checkbox to enable or disable SNMP management. A check in the box indicates that the feature is enabled, meaning that the switch can be managed from an SNMP management station. No check indicates that the feature is disabled. The default is disabled. Use this parameter to enable the switch to be remotely managed with an SNMP application program.
AT-S63 Management Software Web Browser Interface User’s Guide 7. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 18: SNMPv3 Configuring the SNMPv3 User Table You can create, delete, and modify an SNMPv3 User Table entry. See the following procedures: “Creating a User Table Entry” on page 220 “Deleting a User Table Entry” on page 223 “Modifying a User Table Entry” on page 224 For reference information about the SNMPv3 User Table, see Chapter 18, “SNMPv3” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 User Table tab is shown in Figure 93. Figure 93. SNMPv3 User Table Tab (Configuration) 4. Click Add. The Add New SNMPv3 User page is shown in Figure 94. Figure 94. Add New SNMPv3 User Page 5.
Chapter 18: SNMPv3 6. In the Authentication Protocol field, enter an authentication protocol. This is an optional parameter. Select one of the following: MD5 This value represents the MD5 authentication protocol. With this selection, users (SNMP entities) are authenticated with the MD5 authentication protocol after a message is received. This algorithm generates the message digest. The user is authenticated when the authentication protocol checks the message digest.
AT-S63 Management Software Web Browser Interface User’s Guide privacy protocol for this User Table entry. With this selection, messages transmitted between the host and the switch are encrypted with the DES protocol. None Select this value if you do not want a privacy protocol for this User Table entry. With this selection, messages transmitted between the host and the switch are not encrypted. 10. In the Privacy Password field, enter a privacy password of up to 32 alphanumeric characters. 11.
Chapter 18: SNMPv3 The SNMP tab is shown in Figure 92 on page 218. 3. In the SNMPv3 section, click the button next to Configure User Table and then click Configure. The SNMPv3 User Table tab is shown in Figure 93 on page 221. 4. Click the button next to the User Table entry that you want to delete and then click Remove. A warning message is displayed. 5. Click OK. 6. From the Configuration menu, select the Save Config option to permanently save your changes.
AT-S63 Management Software Web Browser Interface User’s Guide The Modify SNMPv3 User page is shown in Figure 95. Figure 95. Modify SNMPv3 User Page 5. In the Authentication Protocol field, enter an authentication protocol. This is an optional parameter. Select one of the following: MD5 This value represents the MD5 authentication protocol. With this selection, users (SNMP entities) are authenticated with the MD5 authentication protocol after a message is received.
Chapter 18: SNMPv3 Note You may want to assign NONE to a super user. 6. In the Authentication Password field, enter an authentication password of up to 32 alphanumeric characters. 7. In the Confirm Authentication Password field, re-enter the authentication password. Note If you have the nonencrypted version of the AT-S60 software, then the Privacy Protocol field is read-only. Note You can only configure the Privacy Protocol if you have configured the Authentication Protocol with the MD5 or SHA values. 8.
AT-S63 Management Software Web Browser Interface User’s Guide entry with a NonVolatile storage type, the Save Config option is displayed on the Configuration menu. Allied Telesyn recommends this storage type. Note The Row Status parameter is a read-only field in the web browser interface. The Active value indicates the SNMPv3 User Table entry takes effect immediately. 12. Click Apply to update the SNMPv3 User Table. 13.
Chapter 18: SNMPv3 Configuring the SNMPv3 View Table You can create, delete, and modify an SNMPv3 View Table entry. See the following procedures: “Creating a View Table Entry” on page 228 “Deleting a View Table Entry” on page 231 “Modifying a View Table Entry” on page 231 For reference information about the SNMPv3 View Table, see Chapter 20, “SNMPv3” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 View Table tab is shown in Figure 96. Figure 96. SNMPv3 View Table Tab (Configuration) 4. Click Add. The Add New SNMPv3 View page is shown in Figure 97. Figure 97. Add New SNMPv3 View Page 5. In the View Name field, enter a descriptive name for this view. Assign a name that reflects the subtree OID, for example, “internet.” Enter a unique name of up to 32 alphanumeric characters.
Chapter 18: SNMPv3 Note The “defaultViewAll” value is the default entry for the SNMPv1 and SNMPv2c configuration. You cannot use the default value for an SNMPv3 View Table entry. 6. In the Subtree OID field, enter a subtree that this view will or will not be permitted to display. You can enter either a numeric value in hex format or the equivalent text name. For example, the OID hex format for TCP/IP is: 1.3.6.1.2.1.6 The text format is for TCP/IP is: tcp 7.
AT-S63 Management Software Web Browser Interface User’s Guide NonVolatile Select this storage type if you want the ability to save an entry in the View Table. After making changes to a View Table entry with a NonVolatile storage type, the Save Config option is displayed on the Configuration menu. Allied Telesyn recommends this storage type. Note The Row Status parameter is a read-only field in the web browser interface. The Active value indicates the SNMPv3 View Table entry takes effect immediately. 10.
Chapter 18: SNMPv3 The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. Select the SNMP tab. The SNMP tab is shown in Figure 92 on page 218. 3. In the SNMPv3 section, click the button next to Configure View Table and then click Configure at the bottom of the tab. The SNMPv3 View Table tab is shown in Figure 96 on page 229. 4. Click the button next to the SNMPv3 View Table entry that you want to change and then click Modify.
AT-S63 Management Software Web Browser Interface User’s Guide 6. In the View Type field, enter one of the following view types: Included Enter this value to permit the View Name to see the subtree specified above. Excluded Enter this value to not permit the View Name to see the subtree specified above. 7. In the Storage Type field, enter a storage type for this table entry: Volatile Select this storage type if you do not want the ability to save an entry in the Target Parameters Table.
Chapter 18: SNMPv3 Configuring the SNMPv3 Access Table You can create, delete, and modify an SNMPv3 Access Table entry. See the following procedures: “Creating an Access Table” on page 234 “Deleting an Access Table Entry” on page 237 “Modifying an Access Table Entry” on page 238 For information about the SNMPv3 Access Table, see Chapter 20, “SNMPv3” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide 4. To create an SNMPv3 Access Table entry, click Add. The Add New SNMPv3 Access page is shown in Figure 100. Figure 100. Add New SNMPv3 Access Page 5. In the Group Name field, enter a descriptive name of the group. The Group Name can consist of up to 32 alphanumeric characters.
Chapter 18: SNMPv3 This parameter allows the users assigned to this Group Name to view the information specified by the View Table entry. This value does not need to be unique. 7. In the Write View Name field, enter a value that you configured with the View Name parameter in the SNMPv3 View Table. This parameter allows the users assigned to this Security Group to write, or modify, the information in the specified View Table. This value does not need to be unique. 8.
AT-S63 Management Software Web Browser Interface User’s Guide protocol. Select this security level if you want to authenticate SNMP users, but you do not want to encrypt messages using a privacy protocol.You can select this value if you configured the Security Model parameter with the SNMPv3 protocol. Privacy This option represents authentication and the privacy protocol. Select this security level to allow authentication and encryption. This level provides the greatest level of security.
Chapter 18: SNMPv3 2. Select the SNMP tab. The SNMP tab is shown in Figure 92 on page 218. 3. In the SNMPv3 section, click the button next to Configure Access Table and then click Configure at the bottom of the tab. The SNMPv3 Access Table tab is shown in Figure 99 on page 234. 4. Click Next or Previous to display the Access Table entry that you want to delete. 5. Click Remove. A warning message is displayed. Click OK to remove the Access Table entry. 6.
AT-S63 Management Software Web Browser Interface User’s Guide Figure 101. Modify SNMPv3 Access Page Note The Context Prefix field is a read-only field. The Context Prefix field is always set to null. 6. In the Read View Name field, enter a value that you configured with the View Name parameter in the View Table. This parameter allows the users assigned to this Group Name to view the information specified by the View Table entry. This value does not need to be unique. 7.
Chapter 18: SNMPv3 Note The Context Match field is a read only field. The Context Match field is always set to Exact. 9. In the Storage Type field, select one of the following storage types for this table entry: Volatile Select this storage type if you do not want the ability to save an entry in the Access Table. After making changes to an Access Table entry with a Volatile storage type, the Save Config option is not displayed on the Configuration menu.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring the SNMPv3 SecurityToGroup Table You can create, delete, and modify an SNMPv3 SecurityToGroup Table entry.
Chapter 18: SNMPv3 The SNMPv3 SecurityToGroup Table tab is shown in Figure 102. Figure 102. SNMPv3 SecurityToGroup Table Tab (Configuration) 4. To create an SNMPv3 SecurityToGroup Table entry, click Add. The Add New SNMPv3 SecurityToGroup page is shown in Figure 103. Figure 103. Add New SNMPv3 SecurityToGroup Page 5. In the Security Model field, select the SNMP protocol that was configured for this User Name.
AT-S63 Management Software Web Browser Interface User’s Guide v2c Select this value to associate the Group Name with the SNMPv2c protocol. v3 Select this value to associate the Group Name with the SNMPv3 protocol. 6. In the Security Name field, enter the User Name that you want to associate with a group. Enter a User Name that you configured in “Creating a User Table Entry” on page 220. 7. In the Group Name field, enter a Group Name that you configured in the Access Table.
Chapter 18: SNMPv3 10. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.) Deleting a SecurityToGroup Table Entry To delete an entry SNMPv3 SecurityToGroup Table, perform the following procedure: 1. From the home page, select Configuration. The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. Select the SNMP tab.
AT-S63 Management Software Web Browser Interface User’s Guide 4. Click the button next to the SecurityToGroup Table entry that you want to change, and then click Modify. The Modify SNMPv3 SecurityToGroup page is shown in Figure 104. Figure 104. Modify SNMPv3 SecurityToGroup Page 5. In the Group Name field, enter a Group Name that you configured in the SNMPv3 Access Table. See “Creating an Access Table” on page 234.
Chapter 18: SNMPv3 Note The Row Status parameter is a read-only field in the web browser interface. The Active value indicates the SNMPv3 SecurityToGroup Table entry takes effect immediately. 7. Click Apply to update the SNMPv3 SecurityToGroup Table. 8. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring the SNMPv3 Notify Table You can create, delete, and modify an SNMPv3 Notify Table entry. See the following procedures: “Creating a Notify Table Entry” on page 247 “Deleting a Notify Table Entry” on page 249 “Modifying a Notify Table Entry” on page 250 For reference information about the SNMPv3 Notify Table, see Chapter 20, “SNMPv3” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 18: SNMPv3 The SNMPv3 Notify Table tab is shown in Figure 105. Figure 105. SNMPv3 Notify Table Tab (Configuration) 4. Click Add. The Add New SNMPv3 Notify page is shown in Figure 106. Figure 106. Add New SNMPv3 Notify Page 5. In the Notify Name field, enter the name associated with this trap message. Enter a descriptive name of up to 32 alphanumeric characters.
AT-S63 Management Software Web Browser Interface User’s Guide Enter a name of up to 32 alphanumeric characters. 7. In the Notify Type field, enter one of the following message types: Trap Indicates this notify table is used to send traps. With this message type, the switch does not expects a response from the host. Inform Indicates this notify table is used to send inform messages. With this message type, the switch expects a response from the host. 8.
Chapter 18: SNMPv3 The SNMPv3 Notify Table tab is shown in Figure 105 on page 248. 4. Click the button next to the Notify Table entry that you want to delete, and then click Remove. A warning message is displayed. 5. Click OK. 6. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.) Modifying a Notify Table Entry To modify an entry in the SNMPv3 Notify Table, perform the following procedure: 1.
AT-S63 Management Software Web Browser Interface User’s Guide Enter a name of up to 32 alphanumeric characters. 6. In the Notify Type field, enter one of the following message types: Trap Indicates this notify table is used to send traps. With this message type, the switch does not expects a response from the host. Inform Indicates this notify table is used to send inform messages. With this message type, the switch expects a response from the host. 7.
Chapter 18: SNMPv3 Configuring the SNMPv3 Target Address Table You can create, delete, and modify an SNMPv3 Target Address Table entry. See the following procedures: “Creating a Target Address Table Entry” on page 252 “Deleting a Target Address Table Entry” on page 255 “Modifying Target Address Table Entry” on page 256 For reference information about the SNMPv3 Target Address Table, see Chapter 20, “SNMPv3” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 Target Address Table tab is shown in Figure 108. Figure 108. SNMPv3 Target Address Table Tab (Configuration) 4. Click Add. The Add New SNMPv3 Target Address page is shown in Figure 109. Figure 109. Add New SNMPv3 Target Address Page 5. In the Target Address Name field, enter the name of the SNMP manager, or host, that manages the SNMP activity on your switch.
Chapter 18: SNMPv3 You can enter a name of up to 32 alphanumeric characters. 6. In the IP Address field, enter the IP address of the host. Use the following format for an IP address: XXX.XXX.XXX.XXX 7. In the UDP Port Number field, enter a UDP port number. You can enter a UDP port in the range of 0 to 65,535. The default UDP port is 162. 8. In the Timeout field, enter a timeout value in milliseconds. When an Inform message is generated, it requires a response from the switch.
AT-S63 Management Software Web Browser Interface User’s Guide NonVolatile Select this storage type if you want the ability to save an entry in the Target Address Table. After making changes to a Target Address Table entry with a NonVolatile storage type, the Save Config option is displayed on the Configuration menu. Allied Telesyn recommends this storage type. Note The Row Status parameter is a read-only field in the web browser interface.
Chapter 18: SNMPv3 Modifying Target Address Table Entry To modify an entry in the SNMPv3 Target Address Table, perform the following procedure: 1. From the home page, select Configuration. The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. Select the SNMP tab. The SNMP tab is shown in Figure 92 on page 218. 3.
AT-S63 Management Software Web Browser Interface User’s Guide 7. In the UDP Port Number field, enter a UDP port number. You can enter a UDP port in the range of 0 to 65,535. The default UDP port is 162. 8. In the Timeout field, enter a timeout value in milliseconds. When an Inform message is generated, it requires a response from the switch. The timeout value determines how long the switch considers the Inform message an active message. This parameter applies to Inform messages only.
Chapter 18: SNMPv3 13. Click Apply to update the SNMPv3 Target Address Table. 14. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring the SNMPv3 Target Parameters Table You can create, delete, and modify an SNMPv3 Target Parameters Table entry.
Chapter 18: SNMPv3 4. Click Add. The Add New SNMPv3 Target Parameter page is shown in Figure 112. Figure 112. Add New SNMPv3 Target Parameters Page 5. In the Target Parameters Name field, enter a name of the SNMP manager or host. Enter a value of up to 32 alphanumeric characters. Note Enter a value for the Message Processing Model parameter only if you select SNMPv1 or SNMPv2c as the Security Model.
AT-S63 Management Software Web Browser Interface User’s Guide v1 Select this value to associate the Security Name, or User Name, with the SNMPv1 protocol. v2c Select this value to associate the Security Name, or User Name, with the SNMPv2c protocol. v3 Select this value to associate the Security Name, or User Name, with the SNMPv3 protocol. 8. In the Security Name field, enter a User Name that you previously configured with the SNMPv3 User Table. See “Creating a User Table Entry” on page 220. 9.
Chapter 18: SNMPv3 10. In the Storage Type parameter, select one of the following storage types for this table entry: Volatile Select this storage type if you do not want the ability to save an entry in the Target Parameters Table. After making changes to a Target Parameters Table entry with a Volatile storage type, the Save Config option is not displayed on the Configuration menu. NonVolatile Select this storage type if you want the ability to save an entry in the Target Parameters Table.
AT-S63 Management Software Web Browser Interface User’s Guide 5. Click OK. 6. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.) Modifying a Target Parameters Table Entry To modify an entry in the SNMPv3 Target Parameters Table, perform the following procedure: 1. From the home page, select Configuration.
Chapter 18: SNMPv3 Note Enter a value for the Message Processing Model field only if you select SNMPv1 or SNMPv2c as the Security Model. If you select the SNMPv3 protocol as the Security Model, then the switch automatically assigns the Message Processing Model to SNMPv3. 5. In the Message Processing Model field, enter a Security Model that is used to process messages. Select one of the following SNMP protocols: v1 Select this value to process messages with the SNMPv1 protocol.
AT-S63 Management Software Web Browser Interface User’s Guide Select this security level if you do not want to authenticate SNMP entities and you do not want to encrypt messages using a privacy protocol. This security level provides the least security. Note If you have selected SNMPv1 or SNMPv2c as the Security Model, you must select No Authentication/Privacy as the Security Level. Authentication This option represents authentication, but no privacy protocol.
Chapter 18: SNMPv3 Configuring the SNMPv3 Community Table You can create, delete, and modify an SNMPv3 Community Table entry. See the following procedures: “Creating an SNMPv3 Community Table Entry” on page 266 “Deleting an SNMPv3 Community Table Entry” on page 269 “Modifying an SNMPv3 Community Table Entry” on page 269 For reference information about the SNMPv3 Community Table, see Chapter 20, “SNMPv3” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 Community Table tab is shown in Figure 114. Figure 114. SNMPv3 Community Table Tab (Configuration) 4. Click Add. The Add New SNMPv3 Community page is shown in Figure 115. Figure 115. Add New SNMPv3 Community Page 5. In the Community Index field, enter a numerical value for this Community. This parameter is used to index the other parameters in an SNMPv3 Community Table entry. Enter a value of up to 32- alphanumeric characters. 6.
Chapter 18: SNMPv3 The value of the Community Name parameter acts as a password for the SNMPv3 Community Table entry. This parameter is case sensitive. Note Allied Telesyn recommends that you select SNMP Community Names carefully to ensure these names are known only to authorized personnel. 7. In the Security Name field, enter a name of an SNMPv1 and SNMPv2c user. This name must be unique. Enter a value of up to 32 alphanumeric characters.
AT-S63 Management Software Web Browser Interface User’s Guide Note The Row Status parameter is a read-only field in the web browser interface. The Active value indicates the SNMPv3 Community Table entry takes effect immediately. 10. Click Apply. 11. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 18: SNMPv3 The SNMP tab is shown in Figure 92 on page 218. 3. In the SNMPv3 section, click the button next to Configure Community Table, and then click Configure at the bottom of the tab. The SNMPv3 Community Table tab is shown in Figure 114 on page 267. 4. Click the button next to the SNMPv3 Community Table entry that you want to change and then click Modify. The Modify SNMPv3 Community page is shown in Figure 116. Figure 116. Modify SNMPv3 Community Page 5.
AT-S63 Management Software Web Browser Interface User’s Guide Note Do not use a value configured with the User Name parameter in the SNMPv3 User Table. 7. In the Transport Tag field, enter a name of up to 32 alphanumeric characters. The Transport Tag parameter links an SNMPv3 Community Table entry with an SNMPv3 Target Address Table entry. Add the value you configure for the Transport Tag parameter to the Tag List parameter in the Target Address Table as desired.
Chapter 18: SNMPv3 Displaying SNMPv3 Tables This section contains procedures to display the SNMPv3 Tables.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMP tab is shown in Figure 117. Figure 117. SNMP Tab (Monitoring) 4. In the SNMPv3 section, click the button next to View User Table and then click View at the bottom of the tab.
Chapter 18: SNMPv3 The SNMPv3 User Table tab is shown in Figure 118. Figure 118. SNMPv3 User Table Tab (Monitoring) Displaying View Table Entries To display entries in the SNMPv3 View Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP tab. The SNMP tab is shown in Figure 117 on page 273. 3.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 View Table tab is shown in Figure 119. Figure 119. SNMPv3 View Table Tab (Monitoring) Displaying Access Table Entries To display entries in the SNMPv3 Access Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP tab. The SNMP tab is shown in Figure 117 on page 273. 3.
Chapter 18: SNMPv3 The SNMPv3 Access Table tab is shown in Figure 120. Figure 120. SNMPv3 Access Table Tab (Monitoring) Displaying SecurityToGroup Table Entries To display entries in the SNMPv3 SecurityToGroup Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP tab. The SNMP tab is shown in Figure 117 on page 273. 3.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 SecurityToGroup Table tab is shown in Figure 121. Figure 121. SNMPv3 SecurityToGroup Table Tab (Monitoring) Displaying Notify Table Entries To display entries in the SNMPv3 Notify Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP tab.
Chapter 18: SNMPv3 The SNMPv3 Notify Table tab is shown in Figure 122. Figure 122. SNMPv3 Notify Table Tab (Monitoring) Displaying Target Address Table Entries To display entries in the SNMPv3 Target Address Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP Tab. The SNMP tab is shown in Figure 117 on page 273. 3.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 Target Address Table tab is shown in Figure 123. Figure 123. SNMPv3 Target Address Table Tab (Monitoring) Displaying Target Parameters Table Entries To display entries in the SNMPv3 Target Parameters Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP tab.
Chapter 18: SNMPv3 The SNMPv3 Target Parameters Table tab is shown in Figure 124. Figure 124. SNMPv3 Target Parameters Table Tab (Monitoring) Displaying SNMPv3 Community Table Entries To display entries in the SNMPv3 Community Table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the SNMP tab. The SNMP tab is shown in Figure 117 on page 273. 3.
AT-S63 Management Software Web Browser Interface User’s Guide The SNMPv3 Community Table tab is shown in Figure 125. Figure 125.
Chapter 18: SNMPv3 282 Section III: SNMPv3
Section IV Spanning Tree Protocols The chapters in this section provide information and procedures for the spanning tree protocols.
Section IV: Spanning Tree Protocols
Chapter 19 STP and RSTP This chapter explains how to configure the STP and RSTP parameters on an AT-9400 Series switch. The sections in the chapter include: “Enabling or Disabling a Spanning Tree Protocol” on page 286 “Configuring STP” on page 288 “Configuring RSTP” on page 296 Note For background information on spanning tree, refer to Chapter 21, “STP and RSTP,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 19: STP and RSTP Enabling or Disabling a Spanning Tree Protocol To enable or disable spanning tree on the switch, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 126. Figure 126. MAC Address Tab (Configuration) 3.
AT-S63 Management Software Web Browser Interface User’s Guide The Spanning Tree tab is shown in Figure 127. Figure 127. Spanning Tree Tab (Configuration) 4. To enable or disable spanning tree, click the Enable Spanning Tree check box. A check indicates that the feature is enabled while no check indicates that the feature is disabled. The default is disabled. 5. To select a spanning tree version, for the Active Protocol Version parameter click STP, RSTP, or MSTP. The default is RSTP.
Chapter 19: STP and RSTP Configuring STP Caution The bridge provides default STP parameters that are adequate for most networks. Changing them without prior experience and an understanding of how STP works might have a negative effect on your network. You should consult the IEEE 802.1d standard before changing any of the STP parameters. To configure STP, perform the following procedure: 1. From the Home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide The Configure STP Parameters tab is shown in Figure 128. Figure 128. Configure STP Parameters Tab (Configuration) Note The Defaults button returns all STP settings to the default settings. 5. Configure the following parameters as necessary. Bridge Priority The priority number for the bridge. This number is used in determining the root bridge for RSTP. The bridge with the lowest priority number is selected as the root bridge.
Chapter 19: STP and RSTP 4096, with 0 being the highest priority. For a list of the increments, refer to Table 6. Table 6. Bridge Priority Value Increments Bridge Priority Increment Bridge Priority Increment 0 0 8 32768 1 4096 9 36864 2 8192 10 40960 3 12288 11 45056 4 16384 12 49152 5 20480 13 53248 6 24576 14 57344 7 28672 15 61440 Bridge Hello Time The time interval between generating and sending configuration messages by the bridge.
AT-S63 Management Software Web Browser Interface User’s Guide Note The aging time for BPDUs is different from the aging time used by the MAC address table. Bridge Identifier The MAC address of the bridge. The bridge identifier is used as a tie breaker in the selection of the root bridge when two or more bridges have the same bridge priority value. This value cannot be changed. 6. After you have made the desired changes, click Apply. 7.
Chapter 19: STP and RSTP Table 7. Port Priority Value Increments (Continued) Increment Bridge Priority Increment Bridge Priority 6 96 14 224 7 112 15 240 Port Cost The spanning tree algorithm uses the cost parameter to decide which port provides the lowest cost path to the root bridge for that LAN. The range is 0 to 65,535. The default setting is Auto-detect, which sets port cost depending on the speed of the port.
AT-S63 Management Software Web Browser Interface User’s Guide The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 130. Figure 130. MAC Address Tab (Monitoring) 3. Select the Spanning Tree tab. The Spanning Tree tabs is shown in Figure 131. Figure 131.
Chapter 19: STP and RSTP 4. Click View. The Monitor STP Parameters tab is shown in Figure 132. Figure 132. Monitor STP Parameters Tab (Monitoring) 5. To view port settings, click a port in the switch and click Status or Settings. The STP Settings page is shown in Figure 133. Figure 133. STP Settings Page The STP Settings page displays a table that contains the following columns of information: Port Port number.
AT-S63 Management Software Web Browser Interface User’s Guide State Current state of the port. The possible states are Enabled or Disabled. Cost Port cost of the port. The default is Auto-Update. Priority The number used as a tie-breaker when two or more ports have equal costs to the root bridge. 6. Click OK to close the page. Resetting STP to the Default Settings To reset STP to the factory default settings, perform the following procedure: 1. From the Home page, select Configuration.
Chapter 19: STP and RSTP Configuring RSTP Caution The bridge provides default RSTP parameters that are adequate for most networks. Changing them without prior experience and an understanding of how RSTP works might have a negative effect on your network. You should consult the IEEE 802.1w standard before changing any of the RSTP parameters. To configure RSTP, perform the following procedure: 1. From the Home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide The Configure RSTP Bridge Parameters tab is shown in Figure 134. Figure 134. Configure RSTP Parameters Tab (Configuration) 5. Configure the following parameters as necessary. Force Version This selection determines whether the bridge operates with RSTP or in an STP-compatible mode. If you select RSTP, the bridge operates all ports in RSTP, except for those ports that receive STP BPDU packets.
Chapter 19: STP and RSTP Bridge Hello Time The time interval between generating and sending configuration messages by the bridge. This parameter can be from 1 to 10 seconds. The default is 2 seconds. Bridge Forwarding The waiting period before a bridge changes to a new state, for example, becomes the new root bridge after the topology changes. If the bridge transitions too soon, not all links may have yet adapted to the change, possibly resulting in a network loop. The range is 4 to 30 seconds.
AT-S63 Management Software Web Browser Interface User’s Guide The RSTP Settings - Port(s) page is shown in Figure 135. Figure 135. RSTP Settings - Port(s) Page 8. Configure the following parameters as necessary. Port Priority This parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridge. The range is 0 to 240 in increments of 16. The default value is 8 (priority value 128). For a list of the increments, refer to Table 7 on page 291.
Chapter 19: STP and RSTP 10. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.) Note All changes to a port’s RSTP settings, with the exception of port cost, are activated immediately. A change to the port cost value requires you to reset the switch. A new port cost value is not implemented until the unit is reset.
AT-S63 Management Software Web Browser Interface User’s Guide The Spanning Tree tabs is shown in Figure 131 on page 293. This tab displays information on whether spanning tree is enable or disabled and which protocol version, STP or RSTP, is active. 5. Click View. The Monitor RSTP Parameters tab is shown in Figure 136. Figure 136. Monitor RSTP Parameters Tab (Monitoring) 6. To view port settings, click a port in the switch and click Status or Settings. The RSTP Settings page is shown in Figure 137.
Chapter 19: STP and RSTP The RSTP Settings page displays a table that contains the following columns of information: Port The port number. Edge-Port Whether or not the port is operating as an edge port. The possible settings are Yes and No. Point-to-Point Whether or not the port is functioning as a point-to-point port. The possible settings are Yes, No, and Auto Detect. Cost Port cost of the port. The default is Auto Update.
Chapter 20 MSTP This chapter explains how to configure MSTP parameters on an AT-9400 Series switch using a web browser management session.
Chapter 20: MSTP Enabling MSTP The AT-9400 Series switch can support the three spanning tree protocols STP, RSTP, and MSTP. However, only one spanning tree protocol can be active on the switch at a time. So before you can enable a spanning tree protocol, you must first select it as the active spanning tree protocol. After you select it, you can then enable or disable it.
AT-S63 Management Software Web Browser Interface User’s Guide Note If you do not want to change the active spanning tree protocol and just want to enable or disable it, go to Step 5. 4. To change the active spanning tree protocol on the switch, click STP, RSTP, or MSTP in the Active Protocol Version section of the tab. The default is RSTP. Note Only one spanning tree protocol can be active on the switch at a time. 5.
Chapter 20: MSTP Configuring MSTP This section contains the following procedures: “Configuring MSTP Parameters,” next “Configuring the CIST Priority” on page 309 “Creating, Deleting, or Modifying MSTI IDs” on page 310 “Adding, Removing, or Modifying VLAN Associations to MSTIs” on page 314 “Configuring MSTP Port Parameters” on page 317 Note MSTP must be selected as the active spanning tree protocol on the switch before you can configure it.
AT-S63 Management Software Web Browser Interface User’s Guide Figure 139. Configure MSTP Parameters Tab (Configuration) Note This procedure explains the Configure MSTP Parameters section of the page. The CIST/MSTI Table is explained in “Adding, Removing, or Modifying VLAN Associations to MSTIs” on page 314. The graphic image of the switch is described in “Configuring MSTP Port Parameters” on page 317. Configure the following parameters as necessary.
Chapter 20: MSTP Force Version This selection determines whether the bridge operates with MSTP or in an STP-compatible mode. If you select MSTP, the bridge operates all ports in MSTP, except those ports that receive STP or RSTP BPDU packets. If you select Force STP Compatible, the bridge uses its MSTP parameter settings, but sends only STP BPDU packets from the ports. The default is MSTP. Bridge Hello Time The time interval between generating and sending configuration messages by the bridge.
AT-S63 Management Software Web Browser Interface User’s Guide Revision Level The revision level of an MSTP region. This is an arbitrary number that you assign to a region. The revision level must be the same on all bridges in a region. Different regions can have the same revision level without conflict. The range is 0 (zero) to 255. 5. Click Apply. 6. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 20: MSTP Creating, Deleting, or Modifying MSTI IDs To create, delete, or modify MSTI IDs, perform one of the following procedures. Creating an MSTI ID To create an MSTI ID, perform the following procedure: 1. From the home page, select Configuration. The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option.
AT-S63 Management Software Web Browser Interface User’s Guide 7. In the Priority field, enter an MSTI Priority value. This parameter is used in selecting a regional root for the MSTI. The range is 0 (zero) to 61,440 in increments of 4,096, with 0 being the highest priority. This parameter is used in selecting a regional root for the MSTI. For a list of the increments, refer to Table 5, “Bridge Priority Value Increments” on page 166. The default is 0. 8. Click Apply. 9.
Chapter 20: MSTP The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 23 on page 91. 3. Select the Spanning Tree tab. The Spanning Tree tab is shown in Figure 51 on page 162. 4. Click Configure. The expanded MSTP Spanning Tree tab is shown in Figure 139 on page 307. 5.
AT-S63 Management Software Web Browser Interface User’s Guide 10. Repeat this procedure to modify more MSTI IDs.
Chapter 20: MSTP Adding, Removing, or Modifying VLAN Associations to MSTIs This section explains how to add or remove VLANs associated to MSTI IDs. Adding a VLAN Association To add a VLAN association, perform the following procedure: 1. From the home page, select Configuration. The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option.
AT-S63 Management Software Web Browser Interface User’s Guide 3. Select the Spanning Tree tab. The Spanning Tree tab is shown in Figure 51 on page 162. 4. Click Configure. The expanded MSTP Spanning Tree tab is shown in Figure 139 on page 307. 5. In the CIST/MSTI Table section of the tab, the VLAN Associations field, remove the VIDs of the VLANS that you no longer want to be associated with this MSTI. You can specify more than one VID at a time (for example, 2,4,7). 6. Click Apply. 7.
Chapter 20: MSTP 7. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring MSTP Port Parameters To configure MSTP port parameters, perform the following procedure: 1. From the home page, select Configuration. The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 23 on page 91. 3.
Chapter 20: MSTP determined to have equal costs to the regional root bridge. The range is 0 to 240 in increments of 16. The default value is 8 (priority value is 128). For a list of the increments, refer to Table 6, “Port Priority Value Increments” on page 167. Port Internal Path Cost The port cost of the port if the port is connected to a bridge which is part of the same MSTP region. The range is 0 to 200,000,000. The default setting is Auto-detect, which sets port cost depending on the speed of the port.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the MSTP Port Configuration To display the MSTP port configuration, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3.
Chapter 20: MSTP The MSTP Parameters tab is shown in Figure 143. Figure 143. Monitor MSTP Parameters Tab (Monitoring) 5. Click a port in the switch and click Settings. You can select more than one port. The MSTP Settings - Port (s) page is shown in Figure 144. Figure 144.
AT-S63 Management Software Web Browser Interface User’s Guide The MSTP Settings page displays a table that contains the following columns of information: Port The port number. Edge-Port Whether or not the port is functioning as an edge port. The possible settings are Yes and No. Point-to-Point Whether or not the port is functioning as a point-to-point port. The possible settings are Yes, No, and Auto-Detect.
Chapter 20: MSTP Displaying the MSTP Port Status To display MSTP port status, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Monitoring Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 25 on page 95. 3. Select the Spanning Tree tab.
AT-S63 Management Software Web Browser Interface User’s Guide Disabled - The port has not established a link with its end node. Role The MSTP role of the port. The possible roles are: Root - The port that is connected to the root switch, directly or through other switches, with the least path cost. Alternate - The port offers an alternate path in the direction of the root switch. Backup - The port on a designated switch that provides a backup for the path provided by the designated port.
Chapter 20: MSTP Resetting MSTP to the Default Settings To reset MSTP to the factory default settings, perform the following procedure: 1. From the home page, select Configuration. The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 23 on page 91. 3. Select the Spanning Tree tab.
Section V Virtual LANs The chapters in this section provide information and procedures for basic switch setup using the AT-S63 management software.
Section V: VLANs
Chapter 21 Virtual LANs This chapter explains how to create, modify, and delete port-based and tagged VLANs. This chapter also explains how to select a multiple VLAN mode.
Chapter 21: Virtual LANs Creating a New Port-Based or Tagged VLAN To create a new port-based or tagged VLAN, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 126 on page 286. 3. Select the VLAN tab.
AT-S63 Management Software Web Browser Interface User’s Guide The VLAN Mode and Uplink Port options are explained in “Selecting a VLAN Mode” on page 335. The Mgmt. VLAN ID option is explained in “Specifying a Management VLAN” on page 339. The tab displays an existing VLANs on the switch. 4. To add a new VLAN, click Add. The Add New VLAN page is shown in Figure 147. Figure 147. Add New VLAN Page 5. Configure the following parameters as necessary. VID Enter a VID value for the new VLAN.
Chapter 21: Virtual LANs default value when you create the first VLAN on the new switch, even though that VID number is already being used by another VLAN on the network. To prevent inadvertently using the same VID for two different VLANs, you should keep a list of all your network VLANs and their VID values. Name Specify a name for the new VLAN. The name can be from one to fifteen alphanumeric characters in length.
AT-S63 Management Software Web Browser Interface User’s Guide Note Any untagged ports that you assign to the new VLAN are automatically removed from their current untagged VLAN assignment. The new user-configured VLAN is now ready for network operations. 8. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
Chapter 21: Virtual LANs Modifying a VLAN This procedure explains how to add or remove ports from a VLAN. When modifying a VLAN, note the following: You cannot change the VID of a VLAN. You cannot change the name of a VLAN from a web browser management session, but you can from a local or Telnet session. You cannot modify VLANs when the switch is operating in one of the multiple VLAN modes. To modify a VLAN, perform the following procedure: 1. From the home page, select Configuration.
AT-S63 Management Software Web Browser Interface User’s Guide Note Untagged ports that are added to a VLAN are automatically removed from their current untagged VLAN assignment. Untagged ports that are removed from a VLAN are returned to the Default_VLAN. Removing an untagged port from the Default_VLAN without assigning it to another VLAN leaves the port as an untagged member of no VLAN. The modified VLAN is now ready for network operations. 8.
Chapter 21: Virtual LANs Deleting a VLAN To delete a port-based or tagged VLAN from the switch, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 23 on page 91. 3. Select the VLAN tab.
AT-S63 Management Software Web Browser Interface User’s Guide Selecting a VLAN Mode The AT-S63 management software features three VLAN modes: Port-based and tagged VLAN Mode (default mode) IEEE 802.1Q-compliant Multiple VLAN Mode Non-IEEE 802.1Q compliant Multiple VLAN Mode For background information on port-based and tagged VLANs, refer to Chapter 23, “Port-based and Tagged VLANs,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 21: Virtual LANs 5. If you select one of the multiple VLAN modes, specify an uplink port in the Uplink Port field. This port functions as the uplink port for the VLANs. The default is port 1. 6. Click Apply. The new mode is automatically activated on the switch. 7. From the Configuration menu, select the Save Config option to permanently save your changes. (This option is not displayed if there are no changes to save.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying VLANs To display the current VLANs on a switch, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. 3. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 4. Select the VLAN tab.
Chapter 21: Virtual LANs Multiple - The non-IEEE 802.1Q-compliant multiple VLAN mode. Management VLAN ID VLAN ID of the management VLAN. The lower part of the tab displays a table that contains the following columns of information: VLAN ID The VID number assigned to the VLAN. (Client) Name The name of the VLAN. If the switch is operating in one of the multiple VLAN modes, the names of the VLANs start with “Client,” with the exception of the VLAN containing the uplink port, which starts with “Uplink.
AT-S63 Management Software Web Browser Interface User’s Guide Specifying a Management VLAN The management VLAN is the VLAN through which an AT-9400 Series switch expects to receive management packets. This VLAN is important if you are managing a switch remotely or using the enhanced stacking feature of the switch. For more details about specifying a management VLAN, see Chapter 23, “Port-based and Tagged VLANs,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 21: Virtual LANs 340 Secton V: Virtual LANs
Chapter 22 Protected Ports VLANs This chapter explains how to create, modify, and delete protected ports VLANs and contains the following sections: “Creating a New Protected Ports VLAN” on page 342 “Modifying a Protected Ports VLAN” on page 347 “Deleting a Protected Ports VLAN” on page 351 “Displaying a Protected Ports VLAN” on page 352 Note For background information on protected ports VLANs, refer to Chapter 26, “Protected Ports VLANs” in the AT-S63 Management Software Menus Interface Use
Chapter 22: Protected Ports VLANs Creating a New Protected Ports VLAN To create a new protected ports VLAN, perform the procedure below: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 126 on page 286. 3. Select the VLAN tab.
AT-S63 Management Software Web Browser Interface User’s Guide The Add New VLAN page is shown in Figure 149. Figure 149. Add New VLAN Page 5. Select the VID field and enter a VID value for the new VLAN. The range of the VID value is 2 to 4096. The default is the next available VID number on the switch. The switch is only aware of the VIDs of the VLANs that exist on the device, and not those that might already be in use in the network.
Chapter 22: Protected Ports VLANs 7. Select Protected as the Type. 8. Select the ports for the protected ports VLAN by clicking the ports in the switch image. (Designating group membership of the ports is performed later in the procedure.) Clicking repeatedly on a port toggles the port through the following possible settings: Untagged port Tagged port Port is not a member of the VLAN 9. Click Apply.
AT-S63 Management Software Web Browser Interface User’s Guide The Add New Protected VLAN page is shown in Figure 150. Figure 150. Add New Protected VLAN Page 10. Use the Uplinks Port menu to select an uplink port for the groups of this protected ports VLAN. The menu lists all of the ports you selected as members of this VLAN. You can select more than one uplink port. To select multiple ports, hold down the Ctrl key when selecting the ports. 11. Click Apply. 12.
Chapter 22: Protected Ports VLANs The switch creates the group and adds it to the VLAN Groups section of the window. 15. Repeat steps 12 and 13 to create the other groups for the VLAN. 16. After you have assigned all of the ports in the VLAN to a group, click the Apply button at the bottom of the window. The management software will not allow you to create the VLAN until all of the ports have been assigned to a group. The new protected ports VLAN is now ready for network operations. 17.
AT-S63 Management Software Web Browser Interface User’s Guide Modifying a Protected Ports VLAN This procedure explains how to change the uplink port of a protected ports VLAN and how to add or remove ports from a VLAN. When modifying a protected ports VLAN, note the following: You cannot change the VID of a protected port VLAN. You cannot change the name of a VLAN from a web browser management session; but you can from a local or Telnet session.
Chapter 22: Protected Ports VLANs The Modify VLAN window for the VLAN is displayed. 6. To add or remove ports from the VLAN, click on the appropriate ports in the switch image. Clicking repeatedly on a port toggles the port through the following possible settings: Untagged port Tagged port Port is not a member of the VLAN 7. After making the necessary changes, click Apply. Note Untagged ports that are added to a VLAN are automatically removed from their current untagged VLAN assignment.
AT-S63 Management Software Web Browser Interface User’s Guide The Modify Protected VLAN page is shown in Figure 151. Figure 151. Modify Protected VLAN Page 8. To change the uplink port, do the following: Note Changing the uplink port will delete all the groups. a. Use the Uplinks Port menu to select a new uplink port for the groups of this protected ports VLAN. The menu lists all of the ports you selected as members of this VLAN. You can select more than one uplink port.
Chapter 22: Protected Ports VLANs d. Recreate the groups. 9. To delete a group, do the following: a. Click the circle next to the group number and click Remove. The ports of the deleted group are now listed in the Available Untagged Ports and Available Untagged Ports lists. b. Assign the ports to another group or use the ports to create a new group. All the ports in a protected ports VLAN must belong to a group. 10.
AT-S63 Management Software Web Browser Interface User’s Guide Deleting a Protected Ports VLAN To delete a protected ports VLAN from the switch, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab selected by default, as shown in Figure 126 on page 286. 3.
Chapter 22: Protected Ports VLANs Displaying a Protected Ports VLAN To display the details of a protected port VLAN, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. 3. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 4. Select the VLAN tab.
AT-S63 Management Software Web Browser Interface User’s Guide Untagged Ports The untagged ports that are members of the VLAN. Uplink Ports The uplink port(s) for this group of ports. Name The VLAN name. Protocol Not use. Tagged Ports The tagged ports that are members of the VLAN. The Protected VLAN Groups section displays the following information: Group Number The number assigned to the group. Port List The ports that are members of this group. 6. Click Clear to close the page.
Chapter 22: Protected Ports VLANs 354 Section V: Virtual LANs
Chapter 23 GARP VLAN Registration Protocol (GVRP) This chapter contains instructions on how to configure GARP VLAN Registration Protocol (GVRP).
Chapter 23: GARP VLAN Registration Protocol (GVRP) Configuring GVRP To configure GVRP, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab shown by default, as shown in Figure 126 on page 286. 3. Select the GVRP tab. The GVRP tab is shown in Figure 153. Figure 153.
AT-S63 Management Software Web Browser Interface User’s Guide Leave Time Use this parameter to specify the leave time. The range is 30 to 80 centiseconds and the default is 60 centiseconds. Join Time Use this parameter to specify the join time. The range is 10 to 60 centiseconds and the default is 20 centiseconds. Enable GIP Click to enable GIP, which is required to propagate VLAN information among the ports of the switch.
Chapter 23: GARP VLAN Registration Protocol (GVRP) Enabling or Disabling GVRP on a Port To enable or disable GVRP on a port, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 23 on page 91. 3. Select the GVRP tab.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the GVRP Configuration To display the GVRP configuration, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3.
Chapter 23: GARP VLAN Registration Protocol (GVRP) GIP The GIP status, Enabled or Disabled. Leave All Time The range is 500 to 300 centiseconds and the default is 1000 centiseconds.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the GVRP Port Configuration To display the GVRP port configuration, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3.
Chapter 23: GARP VLAN Registration Protocol (GVRP) Displaying the GVRP Database To display the GVRP database, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3. Select the GVRP tab.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the GVRP State Machine To display the GVRP state machine, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3.
Chapter 23: GARP VLAN Registration Protocol (GVRP) Table 8. GVRP State Machine Parameters (Continued) Parameter App Meaning Applicant state machine for the GID index on that particular port.
AT-S63 Management Software Web Browser Interface User’s Guide Table 8. GVRP State Machine Parameters (Continued) Parameter Reg Meaning Registrar state machine for the GID index on that particular port. One of: “Mt” Empty “Lv3” Leaving substate 3 (final Leaving substate) “Lv2” Leaving substate 2 “Lv1” Leaving substate 1 “Lv” Leaving substate (initial Leaving substate) “In” In “Fix” Registration Fixed “For” Registration Forbidden The initialized state for the Registrar is Mt.
Chapter 23: GARP VLAN Registration Protocol (GVRP) Displaying the GVRP Counters To display the GVRP counters, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3. Select the GVRP tab.
AT-S63 Management Software Web Browser Interface User’s Guide The GVRP Counters page provides the information shown in Table 9. Table 9. GVRP Counters Parameter Meaning Receive: Total GARP Packets Total number of GARP PDUs received by this GARP application. Transmit: Total GARP Packets Total number of GARP PDUs transmitted by this GARP application. Receive: Invalid GARP Number of invalid GARP PDUs received by this Packets GARP application.
Chapter 23: GARP VLAN Registration Protocol (GVRP) Table 9. GVRP Counters (Continued) Parameter 368 Meaning Receive GARP Messages: JoinEmpty Total number of GARP JoinEmpty messages received for all attributes in the GARP application. Transmit GARP Messages: JoinEmpty Total number of GARP JoinEmpty messages transmitted for all attributes in the GARP application. Receive GARP Messages: JoinIn Total number of GARP JoinIn messages received for all attributes in the GARP application.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the GIP Connected Ports Ring To display the GIP connected ports ring, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 126 on page 286. 3.
Chapter 23: GARP VLAN Registration Protocol (GVRP) ring. If no ports exist in the GIP connected ring, “No ports are connected” is displayed. If the GARP application has no ports, “No ports have been assigned” is displayed.
Section VI Port Security The chapters in this section provide information and procedures for basic switch setup using the AT-S63 management software. The chapters include: Section IV: Port Security Chapter 23, “Port Security” on page 373 Chapter 24, “802.
Section IV: Port Security
Chapter 23 Port Security This chapter explains how to display the MAC address security levels on the ports on the switch. It contains the following sections: “Configuring Port Security” on page 374 “Displaying the Port Security Level” on page 376 Note For background information on port security, refer to Chapter 27, “Port Security,” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 23: Port Security Configuring Port Security To configure security for the ports, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page opens with the Port Security tab selected by default, as shown in Figure 161. Figure 161. Port Security Tab (Configuration) 3.
AT-S63 Management Software Web Browser Interface User’s Guide Figure 162. Security for Ports Page (Configuration) 4. Configure the following parameter as desired: Security Mode The options are: Automatic - Port security is automatically disabled. This is the default. Limited - Specifies a number of MAC addresses the port can learn. Secured - The port forwards frames using only static MAC addresses. Locked - The port immediately stops learning new dynamic MAC addresses. 5. Click Apply. 6.
Chapter 23: Port Security Displaying the Port Security Level To display the MAC address security level of a port, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select Network Security. The Network Security page is displayed with the Port Security tab selected by default, as shown in Figure 163. Figure 163.
AT-S63 Management Software Web Browser Interface User’s Guide The Security for Port(s) page is shown in Figure 164. Figure 164. Security for Port(s) Page The Security for Ports page displays a table that contains the following columns of information: Port The number of the port. Security Mode The active security mode on the port. The possible settings are Automatic, Limited, Secured, and Locked. Intruder Action The column specifies the action taken by the switch if a port receives an invalid packet.
Chapter 23: Port Security 378 Section VI: Port Security
Chapter 24 802.1x Port-based Network Access Control This chapter contains instructions on how to configure the 802.1x Portbased Network Access Control feature on the switch. The chapter contains the following sections: “Setting Port Roles” on page 380 “Enabling or Disabling 802.
Chapter 24: 802.1x Port-based Network Access Control Setting Port Roles To set port roles for port-based network access control, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page opens with the Port Security tab selected by default, as shown in Figure 161 on page 374. 3.
AT-S63 Management Software Web Browser Interface User’s Guide an authenticator while an “S” indicates the port is functioning as a supplicant. A black port has not been assigned a port role and is not participating in port-based access control. This is the default setting for a port. 4. To set a port’s role, click on the port. The selected port turns white. You can select more than one port at a time. 5. Click Port Role. The Port Role Configuration page is shown in Figure 166. Figure 166.
Chapter 24: 802.1x Port-based Network Access Control Enabling or Disabling 802.1x Port-based Network Access Control To enable or disable 802.1x Port-based Network Access Control, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring Authenticator Port Parameters To configure authenticator port parameters, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option.
Chapter 24: 802.1x Port-based Network Access Control 6. Configure the following parameters as necessary: Port Control The possible settings are: Force-authorized - Disables IEEE 802.1X port-based authentication and causes the port to transition to the authorized state without any authentication exchange required. The port transmits and receives normal traffic without 802.1x-based authentication of the client.
AT-S63 Management Software Web Browser Interface User’s Guide Quiet Period Sets the number of seconds that the port remains in the quiet state following a failed authentication exchange with the client. The default value is 60 seconds. The range is 0 to 65,535 seconds. Control Direction Specifies how the port handles ingress and egress broadcast and multicast packets when in the unauthorized state.
Chapter 24: 802.1x Port-based Network Access Control Configuring Supplicant Port Parameters To configure supplicant port parameters, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Network Security option. The Network Security page opens with the Port Security tab selected by default, as shown in Figure 161 on page 374. 3.
AT-S63 Management Software Web Browser Interface User’s Guide 6. Configure the following parameters as needed: Auth Period Specifies the period of time in seconds that the supplicant waits for a reply from the authenticator after sending an EAP-Response frame. The range is 1 to 60 seconds. The default is 30 seconds.
Chapter 24: 802.1x Port-based Network Access Control Displaying the Port-based Network Access Control Parameters You can display information about the port-based network access control status and settings of the ports on the switch. This section contains the following procedures: Displaying the Port Status ”Displaying the Port Status” (next) “Displaying the Port Settings” on page 389 To display the port-based network access control port status, perform the following procedure: 1.
AT-S63 Management Software Web Browser Interface User’s Guide Figure 169. 802.1x Port Access Tab (Monitoring) 4. To see the status of the port, click the port and click Status. You can select more than one port at a time. The Port Access Port Status page is shown in Figure 170. Figure 170. Port Access Port Status Page The Port Access Port Status page displays a table that contains the following columns of information: Port The port number. Port Role The port role: None, Authenticator, or Supplicant.
Chapter 24: 802.1x Port-based Network Access Control 4. To review the port access settings, click OK to close the Port Access Port Status page and return to the 802.1x Port Access tab 5. To see the port settings, click the port and click Settings. You can select more than one port at a time. Note To view the settings of multiple ports, you must select ports that have the same port role (authenticator or supplicant).
AT-S63 Management Software Web Browser Interface User’s Guide ReAuthP The frequency of the periodic reauthentication of the client. SuppTO The switch-to-client retransmission time for the EAP Request packet. MaxReq The maximum number of times that the switch retransmits an EAP Request packet to the client before it times out the authentication session. For supplicant port(s), the Supplicant Port Parameters Page is displayed, as shown in Figure 172. Figure 172.
Chapter 24: 802.1x Port-based Network Access Control User Password The password for the port.
AT-S63 Management Software Web Browser Interface User’s Guide RADIUS Accounting The AT-S63 management software supports RADIUS accounting for ports operating in the Authenticator role. The accounting information sent by the switch to a RADIUS server includes the date and time when clients log on and log off, as well as the number of packets sent and received by a switch port during a client session. For background information on this feature, refer to Chapter 28, “802.
Chapter 24: 802.1x Port-based Network Access Control Type This parameter specifies the type of RADIUS accounting. The default is Network. You cannot change this value. Enable Update This parameter controls whether the switch is to send interim accounting updates to the RADIUS server. A check in the box indicates that updating is enabled. No check in the box means that updating is disabled. Update Interval Specifies the intervals at which the switch sends interim accounting updates to the RADIUS server.
AT-S63 Management Software Web Browser Interface User’s Guide The 802.1x Port Access tab is shown in Figure 173. Figure 173. 802.1x Port Access Tab (Monitoring) The RADIUS Accounting section provides the following information: Accounting The status of RADIUS accounting, either Enabled or Disabled. Trigger Type The action that causes the switch to send accounting information to the RADIUS server.
Chapter 24: 802.1x Port-based Network Access Control Update Interval The intervals, in seconds, at which the switch sends interim accounting updates to the RADIUS server. The graphical image of the switch and the Status and Settings buttons refer to the 802.1x Port-based Network Access Control settings, described in “Displaying the Port-based Network Access Control Parameters” on page 388.
Chapter 25 MAC Address Table This chapter contains instructions on how to add and view the dynamic and static addresses in the MAC address table of the switch.
Chapter 25: MAC Address Table Adding Static Unicast and Multicast MAC Addresses This section contains the procedure for assigning a static unicast or multicast address to a port on the switch. You can assign up to 255 static MAC addresses per port. To add a static address to the MAC address table, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2.
AT-S63 Management Software Web Browser Interface User’s Guide 3. To add a static unicast address, in the View/Add Unicast MAC Addresses section, click Add. To add a static multicast address, in the View/Add Multicast MAC Addresses section, click Add. The Add MAC Address page is shown in Figure 175. Figure 175. Add MAC Address Page 4. Configure the following parameters as necessary. MAC Address The new static unicast or multicast MAC address.
Chapter 25: MAC Address Table Deleting Unicast and Multicast MAC Addresses To delete a static or dynamic unicast or multicast MAC address from the switch, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page opens with the MAC Address tab selected by default, as shown in Figure 174 on page 398. 3.
AT-S63 Management Software Web Browser Interface User’s Guide Deleting All Dynamic MAC Addresses To delete all the dynamic MAC addresses, unicast or multicast, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Layer 2 option. The Layer 2 page opens with the MAC Address tab selected by default, as shown in Figure 174 on page 398. 3.
Chapter 25: MAC Address Table Displaying the MAC Address Tables To view the MAC address table, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Layer 2 option. The Layer 2 page is displayed with the MAC Address tab displayed by default, as shown in Figure 176. Figure 176.
AT-S63 Management Software Web Browser Interface User’s Guide View All Displays all dynamic addresses learned on the ports of the switch and all static addresses that have been assigned to the ports. View Static Displays just the static addresses assigned to the ports on the switch. View Dynamic Displays only the dynamic addresses learned on the ports on the switch. View MAC Addresses on Port Displays the dynamic and static MAC addresses of a particular port. You can specify more than one port at a time.
Chapter 25: MAC Address Table Figure 177 shows an example of viewing all unicast MAC addresses. Figure 177. View MAC Addresses Page The View MAC Addresses page displays a table that contains the following columns of information: VLAN ID The ID number of the VLAN where the port is a member. MAC Address The static or dynamic unicast MAC address. Port(s) The port on which the address was learned or assigned. The MAC address with port “CPU” is the address of the switch.
AT-S63 Management Software Web Browser Interface User’s Guide Changing the Aging Time The switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table. When the switch detects that no packets have been sent to or received from a particular MAC address in the table after the period specified by the aging time, the switch deletes the address. This prevents the table from becoming full of addresses of nodes that are no longer active.
Chapter 25: MAC Address Table 406 Section VI: Port Security
Section VII Management Security The chapters in this section provide information and procedures for basic switch setup using the AT-S63 management software.
Section VII: Management Security
Chapter 26 Encryption Keys, PKI, and SSL This chapter explains how to view the encryption keys, PKI-based certificates, and SSL settings and includes the following sections: “Displaying the Encryption Keys” on page 410 “Displaying the PKI Settings and Certificates” on page 412 “Displaying the SSL Settings” on page 415 Note To configure encryption keys, PKI, or SSL, you must use the AT-S63 menus or CLI interface.
Chapter 26: Encryption Keys, PKI, and SSL Displaying the Encryption Keys To configure the encryption keys, you must use the AT-S63 menus or command line interface. For more information about encryption keys, refer to the AT-S63 Management Software Menus Interface User’s Guide. To display the encryption keys, perform the following procedure: 1. From the Home page, select Monitoring. The System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2.
AT-S63 Management Software Web Browser Interface User’s Guide The Keys tab is shown in Figure 179. Figure 179. Keys Tab (Monitoring) The Keys tab displays a table that contains the following columns of information: ID The identification number of the key. Algorithm The algorithm used in creating the encryption. This is always RSA Private. Length The length of the key in bits. Digest The CRC32 value of the MD5 digest of the public key. Description The key’s description.
Chapter 26: Encryption Keys, PKI, and SSL Displaying the PKI Settings and Certificates You can view the current PKI settings and certificates on the switch. To configure the PKI settings and certificates, you must use the AT-S63 menus or command line interface. For more information about PKI, refer to the AT-S63 Management Software Menus Interface User’s Guide. To display the PKI settings and certificates, perform the following procedure: 1. From the Home page, select Monitoring.
AT-S63 Management Software Web Browser Interface User’s Guide Name The certificate name. State The state of the certificate, one of the following: Trusted - The certificate is from a trusted CA. Untrusted - The certificate is from an untrusted CA. MTrust (Manually Trusted) The certificate has been manually verified that it is from a trusted or untrusted authority. Type The certificate type, one of the following: EE - The certificate was issued by a CA. CA - The certificate belongs to a CA.
Chapter 26: Encryption Keys, PKI, and SSL Name The name of the certificate. State Whether the certificate is Trusted or Untrusted. Manually Trusted You verified the certificate is from a trusted or untrusted authority. Type The type of the certificate. The options are EE, SELF, and CA. Source The certificate was created on the switch. Version The version number of the AT-S63 management software. Serial Number The certificate’s serial number. Signature Algorithm The signature algorithm of the certificate.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the SSL Settings To configure the SSL settings, you must use the AT-S63 menus or command line interface. For information, refer to the AT-S63 Management Software Menus Interface User’s Guide and the AT-S63 Management Software Command Line Interface User’s Guide. To display the SSL settings, perform the following procedure: 1. From the Home page, select Monitoring.
Chapter 26: Encryption Keys, PKI, and SSL 416 Section VII: Management Security
Chapter 27 Secure Shell (SSH) This chapter explains how to configure the Secure Shell (SSH) protocol and contains the following sections: “Configuring SSH” on page 418 “Displaying the SSH Settings” on page 420 Note For background information on SSH, refer to Chapter 33, “Secure Shell (SSH),” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 27: Secure Shell (SSH) Configuring SSH To display the MAC address security level of a port, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 10 on page 54. 3.
AT-S63 Management Software Web Browser Interface User’s Guide you configured in the encryption menus using the AT-S63 menus interface. Server Expiry Time Set the time, in hours, for the server key to expire. This timer determines how often the server key is regenerated. A server key is regenerated for security purposes. A server key is only valid for the time period configured in the Server Key Expiry (Expiration) Time timer. Allied Telesyn recommends that you set this field to 1.
Chapter 27: Secure Shell (SSH) Displaying the SSH Settings To view the Secure Shell settings, perform the following procedure: 1. From the Home page, select Monitoring. The System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 21 on page 75. 3. Select the Secure Shell tab.
AT-S63 Management Software Web Browser Interface User’s Guide Status Whether or not the SSH server is enabled or disabled. Server Port The well-known port for SSH. The default is port 22. Host Key ID The host key ID defined for SSH. Server Key ID Server key ID defined for SSH. Server Key Expiry Time Length of time, in hours, until the server key is regenerated. The default is 0 hours which means the server key is not regenerated.
Chapter 27: Secure Shell (SSH) 422 Section VII: Management Security
Chapter 28 TACACS+ and RADIUS This chapter contains instructions on how to configure the authentication protocols.
Chapter 28: TACACS+ and RADIUS Enabling or Disabling TACACS+ or RADIUS To enable or disable the authentication protocols, perform the following procedure: 1. From the Home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Protocols option. The Mgmt. Protocols page is displayed with the Server-based Authentication tab selected by default, as shown in Figure 10 on page 54. 3.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring TACACS+ To configure TACACS+, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40 2. Select the Server-based Authentication tab. The Server-based Authentication tab is shown in Figure 18 on page 69. 3. In lower section of the Server-based Authentication tab, click TACACS+ Configuration and click Configure.
Chapter 28: TACACS+ and RADIUS cannot respond. If the timeout expires and the server has not responded, the switch queries the next TACACS+ server in the list. If there are no more servers, the switch defaults to the standard Manager and Operator accounts. The default is 30 seconds. The range is 1 to 30 seconds. IP Address and Encryption Key Use these fields to specify the IP addresses and encryption secrets of up to three network servers containing TACACS+ server software.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the TACACS+ Settings To display the TACACS+ settings on the switch, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the Mgmt. Protocols option. The Mgmt. Protocols tab is displayed with the Server-based Authentication tab selected by default, as shown in Figure 186. Figure 186.
Chapter 28: TACACS+ and RADIUS The TACACS+ client configuration page is shown in Figure 187. Figure 187. TACACS+ Client Configuration Page The upper portion of the page provides the following information: Global Secret The TACACS+ server encryption secret. Global Server Timeout The maximum amount of time the switch waits for a response from a TACACS+ server before assuming the server cannot respond.
AT-S63 Management Software Web Browser Interface User’s Guide Configuring RADIUS To configure RADIUS, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40 2. Select the Server-based Authentication tab. The Server-based Authentication tab is shown in Figure 18 on page 69. 3. In lower section of the Server-based Authentication tab, click RADIUS Configuration and click Configure.
Chapter 28: TACACS+ and RADIUS cannot respond. If the timeout expires and the server has not responded, the switch queries the next TACACS+ server in the list. If there no more servers, the switch defaults to the standard Manager and Operator accounts. The default is 30 seconds. The range is 1 to 30 seconds. IP Address, Port #, and Encryption Key Use these fields to specify the IP address, UDP port number, and encryption key of each RADIUS server. You can specify up to a maximum of three servers.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the RADIUS Settings To display the RADIUS settings on the switch, perform the following procedure: 1. From the Home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. Select the Mgmt. Protocols option. The Mgmt. Protocols tab is displayed with the Server-based Authentication tab selected by default, as shown in Figure 186 on page 427.
Chapter 28: TACACS+ and RADIUS Global Encryption Key The global encryption secret. Global Server Timeout The maximum amount of time the switch waits for a response from a RADIUS server before assuming the server cannot respond. The lower portion of the page displays a table that contains the following columns of information: Server # The server number, one of three. IP Address IP address of the RADIUS server. Port Port of the RADIUS server. Encryption Key Encryption key for that server.
Chapter 29 Management Access Control Lists A management access control list (ACL) allows you to restrict Telnet and web browser management access to the switch.
Chapter 29: Management Access Control Lists Configuring a Management ACL To configure a management ACL, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Security option. The Mgmt. Security page is displayed with the Mgmt. ACL tab selected by default, as shown in Figure 190. Figure 190. Mgmt. ACL Tab (Configuration) 3.
AT-S63 Management Software Web Browser Interface User’s Guide Telnet and web browser management sessions are TCP, you should specify TCP or ALL. Mgmt. ACL IP Mask A mask that indicates the parts of the IP address the switch should filter on. Interface The interface you want the management station to be able to use when managing the switch. The options are: Telnet - Allows Telnet management packets. Web - Allows web browser management packets. All - Allows both Telnet and web browser management packets. 6.
Chapter 29: Management Access Control Lists Deleting a Managment ACL To modify a managment ACL, perform the following procedure: 1. From the home page, select Configuration. The System page is displayed with the General tab selected by default, as shown in Figure 5 on page 40. 2. From the Configuration menu, select the Mgmt. Security option. The Mgmt. Security page is displayed with the Mgmt. ACL tab selected by default, as shown in Figure 190 on page 434. 3.
AT-S63 Management Software Web Browser Interface User’s Guide Displaying the Managment Access Control Lists To display the currently configured management access control lists, perform the following procedure: 1. From the home page, select Monitoring. The Monitoring System page is displayed with the General tab selected by default, as shown in Figure 6 on page 44. 2. From the Monitoring menu, select the Mgmt. Security option. The Mgmt. Security page is displayed with the Mgmt.
Chapter 29: Management Access Control Lists Interface The interface the management station uses when managing the switch.
Appendix A AT-S63 Default Settings This appendix lists the AT-S63 factory default settings.
Appendix A: AT-S63 Default Settings Basic Switch Default Settings This section lists the default settings for basic switch parameters.
AT-S63 Management Software Web Browser Interface User’s Guide Note Login names and passwords are case sensitive. RJ-45 Serial Terminal Port Default Settings SNTP Default Settings The following table lists the RJ-45 serial terminal port default settings. RJ-45 Serial Terminal Port Setting Default Data Bits 8 Stop Bits 1 Parity None Flow Control None Baud Rate 9600 bps The following table lists the SNTP default settings.
Appendix A: AT-S63 Default Settings Switch Administration Default Settings System Software Default Settings The following table describes the switch administration default settings. Administration Setting Default IP Address 0.0.0.0 Subnet Mask 0.0.0.0 Gateway Address 0.0.0.0 System Name None Administrator None Comments None BOOTP/DHCP Disabled MAC Address Aging Time 300 seconds The following table lists the system software default settings.
AT-S63 Management Software Web Browser Interface User’s Guide Enhanced Stacking Default Setting The following table lists the enhanced stacking default setting.
Appendix A: AT-S63 Default Settings SNMP Default Settings The following table describes the SNMP default settings.
AT-S63 Management Software Web Browser Interface User’s Guide Port Configuration Default Settings The following table lists the port configuration default settings.
Appendix A: AT-S63 Default Settings Event Log Default Settings The following table lists the event log default settings.
AT-S63 Management Software Web Browser Interface User’s Guide Quality of Service The following table lists the default mappings of IEEE 802.1p priority levels to egress port priority queues IEEE 802.
Appendix A: AT-S63 Default Settings IGMP Snooping Default Settings The following table lists the IGMP Snooping default settings.
AT-S63 Management Software Web Browser Interface User’s Guide Denial of Service Prevention Default Settings The following table lists the default settings for the Denial of Service prevention feature. Denial of Service Prevention Setting Default IP Address 0.0.0.0 Subnet Mask 0.0.0.
Appendix A: AT-S63 Default Settings STP, RSTP, and MSTP Default Settings This section provides the spanning tree, STP RSTP, and MSTP, default settings. Spanning Tree Switch Settings The following table describes the Spanning Tree Protocol default settings for the switch. STP Switch Setting STP Default Settings Default Spanning Tree Status Disabled Active Protocol Version RSTP The following table describes the STP default settings.
AT-S63 Management Software Web Browser Interface User’s Guide MSTP Default Settings The following table lists the MSTP default settings..
Appendix A: AT-S63 Default Settings VLAN Default Settings This section provides VLAN default settings.
AT-S63 Management Software Web Browser Interface User’s Guide GVRP Default Settings This section provides the default settings for GVRP.
Appendix A: AT-S63 Default Settings Port Security Default Settings The following table lists the port security default settings.
AT-S63 Management Software Web Browser Interface User’s Guide 802.1x Port-Based Network Access Control Default Settings The following table describes the 802.1x Port-based Network Access Control default settings. 802.1x Port-based Network Access Control Settings Default Port Access Control Disabled Authentication Method RADIUS EAP Port Role None The following table lists the default settings for RADIUS accounting.
Appendix A: AT-S63 Default Settings Web Server Default Settings The following table lists the web server default settings.
AT-S63 Management Software Web Browser Interface User’s Guide SSL Default Settings The following table lists the SSL default settings.
Appendix A: AT-S63 Default Settings PKI Default Settings The following table lists the PKI default settings, including the generate enrollment request settings.
AT-S63 Management Software Web Browser Interface User’s Guide SSH Default Settings The following table lists the SSH default settings.
Appendix A: AT-S63 Default Settings Server-Based Authentication Default Settings This section describes the server-based authentication, RADIUS, and TACACS+ client default settings. Server-Based Authentication Default Settings RADIUS Default Settings The following table describes the server-based authentication default settings.
AT-S63 Management Software Web Browser Interface User’s Guide Management Access Control List Default Setting The following table lists the default setting for the Management Access Control List.
Appendix A: AT-S63 Default Settings 462 Section I: Basic Features
Index Numerics 802.
Index default setting 445 Dynamic Host Control Protocol (DHCP) activating 43 default setting 442 E edge port default setting 450, 451 Multiple Spanning Tree Protocol (MSTP) 318 encryption keys, displaying 410 enhanced stacking changing switches 71 configuring 68 default switch setting 443 setting switch status 68 event log clearing 136 default settings 446 disabling 128, 136 displaying 130 enabling 128 saving to a file 136 severity codes 134 software module list 132 global encryption key configuring 429,
AT-S63 Management Software Web Browser Interface User’s Guide management access levels 27, 46 Management Information Base.
Index modifying 186 poll interval, default setting 441 port configuring parameters, basic 78 disabling 79 enabling 79 link status 86 resetting to defaults 92 statistics, displaying 89 status default setting 445 displaying 85 port control 802.
AT-S63 Management Software Web Browser Interface User’s Guide displaying settings 420 Secure Sockets Layer (SSL) default settings 457 displaying settings 415 server authentication UDP port configuring 430 default setting 460 server key ID parameter 418 server timeout, configuring 385 server-based authentication method, default setting 455, 460 session cache timeout configuring 415 default setting 457 Simple Network Management Protocol.
Index configuring 41 default setting 442 system software default settings 442 system time, default setting 441 T TACACS+ configuring 425 default settings 460 disabling 424 displaying settings 427 enabling 424 server timeout configuring 429 default setting 460 tagged VLAN creating 328 deleting 334, 351 displaying 337, 352 modifying 332 Telnet, default setting for remote management 440 TFTP, default setting for remote management 440 traffic class configuring 176 deleting 180 displaying 180 modifying 178 tx
