Management Software AT-S82 User’s Guide For the AT-GS950/8 Layer 2 Gigabit Ethernet WebSmart Switch Version 1.0.0 613-000375 Rev.
Copyright © 2006 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesis, Inc.
Contents Preface .............................................................................................................................................................. 7 Where to Find Web-based Guides ..................................................................................................................... 8 Contacting Allied Telesis .................................................................................................................................... 9 Online Support ......
Contents Guidelines for Creating a VLAN ................................................................................................................. 42 Working with VLANs ......................................................................................................................................... 43 Creating a VLAN......................................................................................................................................... 43 Displaying all VLANs .................
Figures Figure 1. Login Dialog Box ..................................................................................................................................................12 Figure 2. Main Page ............................................................................................................................................................13 Figure 3. Save Configuration Page ..................................................................................................................
Figures 6
Preface This guide contains instructions on how to use the AT-S82 management software to manage the AT-GS950/8 Smart Switch switch.
Preface Where to Find Web-based Guides The installation and user guides for all Allied Telesis products are available in portable document format (PDF) on our web site at www.alliedtelesis.com. You can view the documents online or download them onto a local workstation or server.
AT-S84 Management Software User’s Guide Contacting Allied Telesis This section provides Allied Telesis contact information for technical support as well as sales and corporate information. Online Support You can request technical support online by accessing the Allied Telesis Knowledge Base: http://kb.alliedtelesis.com. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
Preface 10
Chapter 1 Getting Started This chapter provides information and instructions on how to access the AT-S82 management software by starting a web browser management session.
Chapter 1: Getting Started Starting a Management Session You establish a local management session with the AT-GS950/8 switch by connecting an Ethernet cable to one of the eight ports on the front panel of the switch. To start a management session, perform the following procedure: 1. Start a web browser. 2. In the URL field of the web browser, enter the default IP address of the switch: 192.168.1.1 The AT-S82 management software displays the login dialog box shown in Figure 1. Figure 1. Login Dialog Box 3.
AT-S83 Management Software User’s Guide The main page, which by default displays the Basic Switch Information page, is shown in Figure 2. Figure 2.
Chapter 1: Getting Started Saving Changes The management software applies the changes you make when you click the Apply button on any web page. However, the management software does not automatically save the changes you make to the configuration file. You can save your changes to the configuration file each time that you change a parameter, or save the changes after you are done with all your changes and before you exit the web browser.
AT-S83 Management Software User’s Guide Quitting a Management Session To quit a management session, close the web browser.
Chapter 1: Getting Started 16
Chapter 2 Basic Switch Parameters This chapter contains the following sections: “Configuring the IP Address, Subnet Mask, Gateway Address, and BOOTP or DHCP” on page 18 “Disabling or Enabling Ping Blocking” on page 20 “Enabling or Disabling 802.
Chapter 2: Basic Switch Parameters Configuring the IP Address, Subnet Mask, Gateway Address, and BOOTP or DHCP This procedure explains how to assign an IP address, subnet mask, and gateway address to the switch. To set the switch’s IP configuration, perform the following procedure: 1. From the main menu, select Basic Switch Information. The Basic Switch Information page is shown in Figure 4. Figure 4. Basic Switch Information Page 2.
AT-S82 Management Software User’s Guide BOOTP - Enables BOOTP so that the switch gets its IP address from a BOOTP server. When you choose this selection, the IP Address, Subnet Mask, and Default Gateway fields are not available. DHCP - Enables DHCP so that the switch gets its IP address from a DHCP server. When you choose this selection, the IP Address, Subnet Mask, and Default Gateway fields are not available. 3. Click Apply to implement your changes. 4.
Chapter 2: Basic Switch Parameters Disabling or Enabling Ping Blocking You can allow the switch to respond to ping requests by setting the Ping Blocking parameter. The default setting is enabled, which means that the switch does not respond to ping requests. To disable or enable ping blocking, perform the following procedure: 1. From the main menu, select Basic Switch Information. The Basic Switch Information page is shown in Figure 4 on page 18. 2.
AT-S82 Management Software User’s Guide Enabling or Disabling 802.1X Forwarding Control This procedure describes how to enable or disable 802.1x forwarding control. The default setting is disabled. When you disable this feature, 802.1x packets are not forwarded. If this feature is enabled, these packets are forwarded to their destination which might be a switch running an authentication protocol. To disable or enable 802.1X forwarding control, perform the following procedure: 1.
Chapter 2: Basic Switch Parameters Changing the Administrator’s Password To reset the administrator’s password, perform the following procedure: 1. From the main menu, select Administrator Password. The Administrator Password page is shown in Figure 5. Figure 5. Administrator Password Page 2. In the Old Password field, type the old password. 3. In the New Password field, type the new password. 4. In the Confirm Password field, retype the new password. 5. Click Apply to implement your changes. 6.
AT-S82 Management Software User’s Guide Rebooting the Switch This procedure reboots the switch and reloads the AT-S82 management software from flash memory. You might reboot the device if you believe it is experiencing a problem. Rebooting the device does not change any of the device’s parameter settings. Caution The switch does not forward network traffic during the reboot process. Some network traffic may be lost. To reboot the switch, perform the following procedure: 1.
Chapter 2: Basic Switch Parameters Resetting the Switch and Retaining the IP Address There are two options for resetting the switch: resetting all the parameters except the IP address, or resetting the switch to return all the parameters to their default values. The procedure for resetting the switch to the default values is described in “Returning the AT-S82 Management Software to the Factory Default Values” on page 25. To reset the switch and retain the IP address, perform the following procedure: 1.
AT-S82 Management Software User’s Guide Returning the AT-S82 Management Software to the Factory Default Values This procedure returns all AT-S82 management software parameters to their default values, including the IP address, which is reset to 192.168.1.1. To reset all the parameters except the IP address, follow the procedure in “Resetting the Switch and Retaining the IP Address” on page 24. Caution This procedure causes the switch to reboot.
Chapter 2: Basic Switch Parameters Downloading New Firmware To download new firmware onto the switch, perform the following procedure: 1. From the main menu, select Download Firmware. The Download Firmware page is shown in Figure 9. Figure 9. Download Firmware Page 2. In the Server IP Address field, type the IP address of the server where the firmware file is located. 3. In the File Name field, type the path for the firmware file. 4. Click Start.
Chapter 3 Port Configuration This chapter contains the following section: Section I: Using the Menus Interface “Configuring Port Parameters” on page 28 27
Chapter 3: Port Configuration Configuring Port Parameters This procedure explains how to configure the following port parameters: State Speed and duplex mode Flow control Medium type (only for ports 7 and 8) To configure the ports, perform the following procedure: 1. From the main menu, select Port Configuration. The Port Configuration page is shown in Figure 11. Figure 11. Port Configuration Page The top part of the page allows you to select port(s) and apply configuration parameters.
AT-S82 Management Software User’s Guide Note Auto Speed/Duplex is disabled when you manually configure a port’s Speed/Duplex. In this situation, you must use a crossover Ethernet cable to connect that port to another network device. 2. To set the parameters for a port, choose the port using the From and To lists. You can select one port (From 2 To 2, for example) or a range of ports (From 1 To 5, for example). 3. From the State list, choose one of the following: Enabled The port is enabled.
Chapter 3: Port Configuration 10M/Half - 10Mbps, half duplex 10M/Full - 10Mbps, full duplex 100M/Half - 100Mbps, half duplex 100M/Full - 100Mbps, full duplex 1000M/Full - 1000Mbps, full duplex 1000M_M/Full - 1000Mbps, full duplex for port operating as a Master port at 1000Mbps in Force mode. This allows the port to send detect and negotiate signals. 1000M_S/Full - 1000Mbps, full duplex for port operating as a Slave port at 1000Mbps in Force mode.
Chapter 4 Trunking This chapter contains the following sections: Section I: Using the Menus Interface “Trunking Overview” on page 32 “Configuring the Trunking Algorithm” on page 34 “Setting up the Trunk” on page 35 31
Chapter 4: Trunking Trunking Overview A port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and another networking device, such as a network server, router, workstation, or another Ethernet switch. A port trunk is a group of ports that have been grouped together to function as one logical path.
AT-S82 Management Software User’s Guide distribution methods: MAC-SA - source MAC address MAC-DA - destination MAC address DAxorSA - destination MAC address/source MAC address 33
Chapter 4: Trunking Configuring the Trunking Algorithm To configure the trunk load method, perform the following procedure: 1. From the main menu, select Trunking Algorithm. The Trunking Algorithm page is shown in Figure 12. Figure 12. Trunking Algorithm Page 2. Choose one of the load methods from the list: MAC-SA By the source MAC address. MAC-DA By the destination MAC address. DAxorSA Using either the destination MAC address or source MAC address. 3. Click Apply to implement your changes. 4.
AT-S82 Management Software User’s Guide Setting up the Trunk To set up the trunk, perform the following procedure: 1. From the main menu, select Port Trunking. The Port Trunking page is shown in Figure 13. Figure 13. Port Trunking Page The current trunks, if any, are shown in the Current Trunking Group Entries area. 2. Click Add. The Port Trunking Configuration page is shown in Figure 14. Figure 14.
Chapter 4: Trunking 3. For the Group ID, choose a trunk group ID from the list. IDs from 1 through 4 are available. Note that when you choose a group ID that ports are automatically selected on the Port Map. You cannot designate any other ports for the trunk 4. For the State, choose the state of the trunk, either enabled or disabled. Note Ignore the Master Port field. The Active Port field displays which ports in the trunk have established an active link.
Chapter 5 VLANs This chapter contains the following sections: Section I: Using the Menus Interface “VLAN Features” on page 38 “VLAN Overview” on page 40 “Working with VLANs” on page 43 “Protected Ports VLAN” on page 46 37
Chapter 5: VLANs VLAN Features A Virtual Local Area Network (VLAN) is a logical grouping of devices on different physical LAN segments that allows users to communicate as if they were physically connected to a single LAN, independent of the physical configuration of the network. With VLANs, you can segment your network and group end-nodes with related functions into their own separate, logical LAN segments. For example, the marketing personnel in your company may be spread throughout a building.
AT-S82 Management Software User’s Guide VLANs can be used to control the flow of data in your network, since the traffic generated by an end-node in a VLAN is restricted to the other endnodes in the same VLAN.
Chapter 5: VLANs VLAN Overview This VLAN overview contains the following sections: “VLAN Name,” next “VLAN Identifier” on page 40 “VLAN Port Members” on page 40 “Incoming and Outgoing Tagged and Untagged Frames” on page 41 “Guidelines for Creating a VLAN” on page 42 VLAN Name To create a port-based VLAN, you must give it a name. The name should reflect the function of the network devices that are be members of the VLAN. Examples include Sales, Production, and Engineering.
AT-S82 Management Software User’s Guide Tagged Port Members A port is a tagged member of a specific VLAN when it is a member of more than one VLAN. If a port is a tagged member of one VLAN, then the same port is also an untagged member of another VLAN. Untagged Port Members A port is an untagged member of a VLAN if the PVID is equal to the VID of that VLAN. A port can be an untagged member of only one VLAN.
Chapter 5: VLANs member of the VLAN). These frames are untagged after transmission from the switch. Guidelines for Creating a VLAN The following are guidelines for creating a VLAN. Each VLAN must be assigned a unique VID. If a particular VLAN spans multiples switches, each part of the VLAN on the different switches should be assigned the same VID. A port can be an untagged member of only one VLAN at a time and can receive both tagged and untagged packets.
AT-S82 Management Software User’s Guide Working with VLANs This section contains the following procedures for working with VLANs: Creating a VLAN “Creating a VLAN,” next “Displaying all VLANs” on page 44 “Modifying a VLAN” on page 45 To create a VLAN, perform the following procedure: 1. From the main menu, select Static VLANs. The 802.1Q Static VLAN page is shown in Figure 15. Figure 15. 802.1Q Static VLAN Page 2. Click Add. A new page opens where you specify the VLAN, as shown in Figure 16.
Chapter 5: VLANs 3. In the VID field, supply a number for the VLAN ID, from 2 to 4094. 4. In the VLAN Name field, enter a unique name for the VLAN. No spaces are allowed. 5. In the Tag row, select the ports that you want to be tagged members of the VLAN. Note If you want a port to be an untagged member of a different VLAN, you must first modify the VLAN (usually the default VLAN) where the port is an untagged member.
AT-S82 Management Software User’s Guide The list of current VLANs is shown in Figure 17. Figure 17. Current VLANs Page Modifying a VLAN To modify the ports in a VLAN, perform the following procedure: 1. From the main menu, select VLAN Configuration. The VLAN Configuration page is shown in Figure 15 on page 43. 2. Click Modify next to the VLAN you want to modify. The VLAN detail page for that VLAN is displayed, as shown in Figure 16 on page 43. 3. Make your changes to the VLAN. 4.
Chapter 5: VLANs Protected Ports VLAN You use the protected ports VLAN feature when you want to prevent ports from communicating with one another, but you want them all to have access to common resources. For example, in a hotel or apartment complex, the computer in each room or apartment needs to be isolated from one another, but they all need access to the internet or a server. This feature is called traffic segmentation.
AT-S82 Management Software User’s Guide 1. From the main menu, select Protected Port. The Protected Port page is shown in Figure 20. Figure 20. Protected Port Page 2. Determine which port(s) will be the Primary port(s). 3. Click the box on the Isolated row for all ports that you want to isolate from one another. The box for the Primary port(s) should be empty. 4. Click Apply.
Chapter 5: VLANs 48
Chapter 6 Class of Service This chapter contains the following sections: Section I: Using the Menus Interface “Class of Service Overview” on page 50 “Mapping Priorities to Queues” on page 53 “Setting Up the Schedule” on page 54 49
Chapter 6: Class of Service Class of Service Overview When the egress queues on a port in an Ethernet switch contains more packets than the port can handle in a timely manner, the port may be forced to delay the transmission of some packets. A port may be forced to delay transmission of packets while it handles other traffic and, in some situations, some packets destined to be forwarded from the port are discarded. Minor delays are often of no consequence to a network or its performance.
AT-S82 Management Software User’s Guide Table 1 lists the mappings between the eight CoS priority levels and the four egress queues of a switch port. Table 1. Default Mappings of IEEE 802.1p Priority Levels to Priority Queues IEEE 802.1p Priority Level Port Priority Queue 0 Q1 1 Q0 2 Q0 3 Q1 4 Q2 5 Q2 6 Q3 7 Q3 For example, if a tagged packet with a priority level of 2 entered a port on the switch, the switch would store the packet in Q11 on the egress port.
Chapter 6: Class of Service example. Table 2. Scheduling Example Maximum Number of Packets Port Egress Queue Q0 1 Q1 5 Q2 15 Q3 25 In this example, the port transmits a maximum of 25 packets from Q3, then 15 packets from Q2, and so forth.
AT-S82 Management Software User’s Guide Mapping Priorities to Queues To map priorities to queues, perform the following procedure: 1. From the main menu, select CoS Priority to Queue. The CoS Priority to Queue page is shown in Figure 21. Figure 21. CoS Priority to Queue Page The default queue for each priority is displayed 2. To set the queue associated with a priority, select a new queue from the adjacent list. 3. Click Apply to implement your changes. 4.
Chapter 6: Class of Service Setting Up the Schedule To configure map ports to priority queues, perform the following procedure: 1. From the main menu, select CoS Output Scheduling. The CoS Output Scheduling page is shown in Figure 21. Figure 22. Output Scheduling Page 2. To set the weight for a queue, go to that queue and type a number. 3. Click Apply to implement your changes. 4. To save the settings to the configuration file, from the main menu, select Save Configuration.
AT-S82 Management Software User’s Guide Assigning Priority to Ports To assign a priority to a specific port, perform the following procedure: 1. From the main menu, select CoS Port Priority Assignment. The CoS Port Priority Assignment page is shown in Figure 23. Figure 23. CoS Port Priority Assignment Page 2. Choose the port you want to set using the From and To lists. You can select one port (From 2 To 2, for example) or a range of ports (From 1 To 5, for example). 3.
Chapter 6: Class of Service 56
Chapter 7 Spanning Tree Protocol (STP) This chapter contains the following sections: Section I: Using the Menus Interface “Spanning Tree Overview” on page 58 “Configuring Spanning Tree” on page 67 “Configuring STP Port Settings” on page 70 57
Chapter 7: Spanning Tree Protocol (STP) Spanning Tree Overview The performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topology. A data loop exists when two or more nodes on a network can transmit data to each other over more than one data path.
AT-S82 Management Software User’s Guide You can change the bridge priority number in the AT-S82 management software. You can designate which switch on your network you want as the root bridge by giving it the lowest bridge priority number. You might also consider which bridge should function as the backup root bridge in the event you need to take the primary root bridge offline, and assign that bridge the second lowest bridge identifier number.
Chapter 7: Spanning Tree Protocol (STP) a bridge participating in STP has a cost associated with it. The cost of a port on a bridge is typically based on port speed. The faster the port, the lower the port cost. The exception to this is the ports on the root bridge, where all ports have a port cost of 0. Path cost is simply the sum of the port costs between a bridge and the root bridge.
AT-S82 Management Software User’s Guide trunk. Table 7. RSTP Auto Port Trunk Costs Port Speed Port Cost 10 Mbps 20,000 100 Mbps 20,000 1000 Mbps 2,000 You cannot set the port cost manually. Port Priority If two paths have the same port cost, the bridges must select a preferred path. In some instances this can involve the use of the port priority parameter. This parameter is used as a tie breaker when two paths have the same cost. The range for port priority is 0 to 240.
Chapter 7: Spanning Tree Protocol (STP) change has occurred, especially if it is a large network. If a topology change is made before all bridges have been notified, a temporary data loop could occur, and that could adversely impact network performance. To forestall the formation of temporary data loops during topology changes, a port designated to change from blocking to forwarding passes through two additional states—listening and learning—before it begins to forward frames.
AT-S82 Management Software User’s Guide Point-to-Point and Edge Ports Note This section applies only to RSTP. Part of the task of configuring RSTP is defining the port types on the bridge. This relates to the device(s) connected to the port. With the port types defined, RSTP can reconfigure a network much quicker than STP when a change in network topology is detected.
Chapter 7: Spanning Tree Protocol (STP) 912 Edge Port 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 Figure 25. Edge Port A port can be both a point-to-point and an edge port at the same time. It operates in full-duplex and has no STP or RSTP devices connected to it. Figure 26 illustrates a port functioning as both a point-to-point and edge port. 912 Point-to-Point and Edge Port Workstation (Full-duplex Mode) Figure 26.
AT-S82 Management Software User’s Guide If you decide to activate spanning tree on the switch, there is no reason not to activate RSTP on an AT-GS950/8 WebSmart switch even when all other switches are running STP. The switch can combine its RSTP with the STP of the other switches. The switch monitors the traffic on each port for BPDU packets. Ports that receive RSTP BPDU packets operates in RSTP mode while ports receiving STP BPDU packets operate in STP mode.
Chapter 7: Spanning Tree Protocol (STP) information on tagged and untagged ports, refer to Chapter 5, “VLANs” on page 37.
AT-S82 Management Software User’s Guide Configuring Spanning Tree To define the spanning tree settings at the switch level, perform the following procedure: 1. From the main menu, select STP Global Settings. The Switch Spanning Tree Settings page is shown in Figure 28. Figure 28. Switch Spanning Tree Settings Page 2. From the STP Version list, select STP or RSTP. 3.
Chapter 7: Spanning Tree Protocol (STP) When you select a value for maximum age, observe the following rules: MaxAge must be greater than (2 x (HelloTime + 1)). MaxAge must be less than (2 x (ForwardingDelay - 1)). Note The aging time for BPDUs is different from the aging time used by the MAC address table. 4. In the Bridge Hello Time field, enter a number for the time interval between generating and sending configuration messages by the bridge. This parameter can be from 1 to 10 seconds.
AT-S82 Management Software User’s Guide packets but forwards them to adjacent switches. This is the default setting. Disabled The switch processes the BPDU packets. Allied Telesis recommends that you choose this setting. 10. Click Apply. To configure the ports, refer to “Configuring STP Port Settings,” next. 11. To save the settings to the configuration file, from the main menu, select Save Configuration. The Save Configuration page is shown in Figure 3 on page 14. 12. Click Apply.
Chapter 7: Spanning Tree Protocol (STP) Configuring STP Port Settings To configure the STP settings, perform the following procedure: 1. From the main menu, select STP Port Settings. The STP Port Settings page is shown in Figure 29. Figure 29. STP Port Settings Page 2. From the From and To lists, select the port(s) you want to configure, or scroll through the list below. 3. From the State list, select one of the following: Enabled Enables the port for spanning tree. This is the default.
AT-S82 Management Software User’s Guide This parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridge. The range is 0 to 240 in increments of 16. The default value is 8 (priority value 128). For a list of the increments, refer to Table 8, “Port Priority Value Increments” on page 61. 6. From the Migration list, select one of the following: No Disallows resetting an RSTP port to handle STP BPDUs. This is the default setting.
Chapter 7: Spanning Tree Protocol (STP) 72
