Management Software AT-S63 ◆ Starting a Management Session For Stand-alone AT-9400 Switches and AT-9400Ts Stacks AT-S63 Version 2.2.0 for AT-9400 Layer 2+ Switches AT-S63 Version 4.0.0 for AT-9400 Basic Layer 3 Switches 613-001023 Rev.
Copyright © 2009 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesis, Inc.
Contents Preface .............................................................................................................................................................. 5 Product Documentation ...................................................................................................................................... 6 Where to Go First ...............................................................................................................................................
Contents 4
Preface This guide explains how to start local and remote management sessions on the AT-9400 Layer 2+ and Basic Layer 3 Gigabit Ethernet Switches. This preface contains the following sections: “Product Documentation” on page 6 “Where to Go First” on page 7 “Document Conventions” on page 8 “Contacting Allied Telesis” on page 9 Caution The software described in this documentation contains certain cryptographic functionality and its export is restricted by U.S. law.
Preface Product Documentation For overview information on the features of the AT-9400 Switch and the AT-S63 Management Software, refer to: AT-S63 Management Software Features Guide (PN 613-001022) For instructions on how to start a local or remote management session on a stand-alone AT-9400 Switch or a stack, refer to: Starting an AT-S63 Management Session Guide (PN 613-001023) For instructions on how to install or manage a stand-alone AT-9400 Switch, refer to: AT-9400 Gigabit Ethernet Switch In
Starting a Management Session Guide Where to Go First Allied Telesis recommends that you read Chapter 1, “Overview,” in the AT-S63 Management Software Features Guide before you begin to manage the switch for the first time. There you will find a variety of basic information about the unit and the management software, like the two levels of manager access levels and the different types of management sessions.
Preface Document Conventions This document uses the following conventions: Note Notes provide additional information. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury.
Starting a Management Session Guide Contacting Allied Telesis This section provides Allied Telesis contact information for technical support and for sales and corporate information. Online Support You can request technical support online by accessing the Allied Telesis Knowledge Base: www.alliedtelesis.com/support/kb.aspx. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
Preface 10
Chapter 1 Local Management Sessions Local management sessions are conducted through the Terminal Ports on the front panels of the AT-9400 Switches. Local management sessions must be performed at the location of the switches, hence the word “local.” Because this type of management does not take place over a network, it is commonly referred to as out-of-band management.
Chapter 1: Local Management Sessions Switch Configurations A local management session can be used to manage one switch or several switches, depending on the configuration. Stand-alone switches: Stand-alone switches must be managed directly. A local management session on a stand-alone switch can be used to managed just that switch. To manage another switch, you must start a local management session on the other unit.
Starting a Management Session Guide Starting a Local Management Session To start a local management session, perform the following procedure: 1. Connect one end of the RJ-45 to RS-232 management cable included with the switch to the Terminal Port on the unit’s front panel, as shown in Figure 1. Giga bit E GBIC thern et Sw itch 000 L INK / L/A ACT 24 STAT US FAULT MAST ER POWE R Figure 1.
Chapter 1: Local Management Sessions 5. Enter a user name and password. The switch comes with two standard user accounts: manager and operator. The manager account lets you configure the switch’s settings while the operator account only lets you view them. To log in as the manager, enter “manager” as the user name. The default password for manager access is “friend. “To log in as an operator, enter “operator” as the user name. The default password for operator access is “operator.
Starting a Management Session Guide Note AT-9400Ts Stacks do not support the menus interface. To select a menu item, type the corresponding letter or number. To return to a previous menu, press the Esc key or type the letter R. To return to the command line interface, type C. To enter the AlliedWare Plus™ command line interface, type awplus at the standard command line prompt. Allied Telesis (TM) AT-9424Ts AT-S63 # awplus AlliedWare Plus (TM) AT-9424Ts AT-S63 awplus> Figure 4.
Chapter 1: Local Management Sessions 16
Chapter 2 Remote Management Sessions You can remotely manage the AT-9400 Switch from a management workstation on your network using the following applications: Telnet client Secure Shell (SSH) client Web browser Preparing a Switch for Remote Management The AT-9400 Switch must have an IP address for remote management. Assigning an IP address to the switch involves a number of steps.
Chapter 2: Remote Management Sessions 2. Assign a routing interface to the VLAN to act as the switch’s IP address. 3. In situations where the remote management workstations are not members of the same subnet as the switch, create a default gateway that defines the first hop to reaching the workstations. 4. Designate the interface as the switch’s local interface so that the switch monitors the subnet for the management packets from the remote management workstations.
Starting a Management Session Guide Enhanced Stack All of the requirements for remote management of the switch are met in an enhanced stack. Consequently, you do not have to perform any additional configuration steps to prepare a switch for remote management if it is part of an enhanced stack. For information on enhanced stacking, refer to the AT-S63 Management Software Features Guide. Here are the general steps for configuring the AT-9400 Switch as the master switch of an enhanced stack: 1.
Chapter 2: Remote Management Sessions The following example configures a switch as the master switch of an enhanced stack. It assumes that the common VLAN of the stack will be called Stack and have a VID of 12. This VLAN will consist of ports 18 to 22 on the master switch. The IP address of the switch will be 149.22.88.5 with a subnet mask of 255.255.255.0 and a gateway address of 149.22.88.27: 1. This command sets the enhanced stack mode of the switch to master: set switch stackmode=master 2.
Starting a Management Session Guide 3. This command designates interface VLAN12-0 as the local interface on the switch: set ip local interface=vlan12-0 4. This command saves the changes to the switch’s active boot configuration file: save configuration To remotely manage this enhanced stack, you would start the session by specifying the master switch’s IP address at any remote management workstation in the 149.22.88.
Chapter 2: Remote Management Sessions 4. This command designates interface VLAN2-0 as the local interface on the switch: set ip local interface=vlan2-0 5. This command saves the changes in the stack’s active boot configuration file: save configuration Any management workstation in the 149.124.82.0 subnet in the Technical VLAN or that has access to the subnet through Layer 3 routing devices can now be used to remotely manage the stack.
Starting a Management Session Guide Starting a Remote Telnet or SSH Management Session Note You have to configure the Secure Shell (SSH) server on the switch before you can begin to configure the unit from an SSH client on your network. The initial configuration of the SSH server must be performed from a local management session or a Telnet session. For information on configuring the SSH server, refer to the AT-S63 Management Software Features Guide.
Chapter 2: Remote Management Sessions Starting a Web Browser Management Session The web server on a stand-alone AT-9400 Switch or the master switch of an enhanced stack supports both nonsecure HTTP and secure HTTPS operation. (For instructions on how to configure the web server for HTTPS, refer to the AT-S63 Management Software Features Guide.) The web server on the master switch of a stack of Basic Layer 3 AT-9400 Switches supports just HTTP.
Starting a Management Session Guide The AT-S63 Management Software displays the login page, shown in Figure 6. Figure 6. AT-S63 Login Page 3. Enter a user name and password. The AT-S63 Management Software comes with two standard accounts, manager and operator. The former allows you to change the switch’s parameter settings while the latter only allows you to view the settings. For manager access, enter “manager” as the user name. The default password is “friend.
Chapter 2: Remote Management Sessions The main menu is on the left side of the home page. It consists of the following selections: Enhanced Stacking Configuration Monitoring Logout Note Only a master switch has the Enhanced Stacking selection. A web browser management session remains active even if you link to other sites. You can return to the management web pages anytime as long as you do not quit the browser.
Chapter 3 Saving the Parameter Settings The configuration settings of the switch are stored in a file called the active configuration file. This file resides in the file system of the switch and contains all of the commands needed to restore the current configuration. The switch refers to this file to restore its settings whenever it is reset or power cycled. When you change a parameter setting of a feature, the new setting is immediately implemented by the switch.
Chapter 3: Saving the Parameter Settings Menus Interface To update the switch’s active configuration file from the menus interface, return to the Main Menu and select S - Save Configuration Changes. The menu displays the selection only when there are changes to be saved.
Starting a Management Session Guide Standard Command Line Interface To save your configuration changes in the active configuration file from the standard command line interface, enter this command: save configuration AlliedWare Plus™ Command Line Interface To save your configuration changes from the AlliedWare Plus™ command line interface, enter either of these commands at the Privileged Exec mode: write copy running-config startup-config Web Browser Management Interface To update the active configuratio
Chapter 3: Saving the Parameter Settings 30
Chapter 4 Ending a Management Session You should always log off at the conclusion of every management session of a switch. If you leave your management session unattended without logging off, anyone can use your workstation to make unauthorized changes to the unit’s parameter settings. The switch has a console timer that automatically ends a management session if there is no management activity for the specified length of time. The default is ten minutes.
Chapter 4: Ending a Management Session Web Browser Interface To exit a web browser management session, select the Logout option from any of the menus in the web browser interface.
