Allied-telesis AT-S39 User Manual

Management SoftwareAT-S39◆User’s GuideAT-8016F, AT-8024, AT-8024M, AT-8024GB, AND AT-8026FC FAST ETHERNET SWITCHESVERSION 3.0®PN 613-50245-00 Rev G

List of Figures10Figure 93: Add Static MAC Address window ...

AT-S39 User’s Guide100Enabling or Disabling STP or RSTPTo select and activate a spanning tree protocol, or to disable spanning tree, perform the follo

Section II: Local and Telnet Management101Configuring STPThis section contains the following procedures:❑ Configuring a Bridge’s STP Settings on page

AT-S39 User’s Guide1022. Adjust the bridge STP settings as needed. The parameters are described below.1 - Bridge PriorityThe priority number for the b

Section II: Local and Telnet Management103Configuring aPort’s STPSettingsTo adjust a port’s STP parameters, perform the following procedure:1. From th

AT-S39 User’s Guide104NoteA port on which STP is disabled is immediately placed in the forwarding state. It should be noted that a port where STP has

Section II: Local and Telnet Management105Configuring RSTPThis section contains the following procedures:❑ Configuring a Bridge’s RSTP Settings on pag

AT-S39 User’s Guide1062. Adjust the parameters as needed. The parameters are defined below.1 - Force VersionThis selection determines whether the brid

Section II: Local and Telnet Management1076 - Bridge IdentifierThe MAC address of the bridge. The bridge identifier is used as a tie breaker in the se

AT-S39 User’s Guide1085. To configure just one port, enter the same port number here as you entered in the previous step. To configure a range of port

Section II: Local and Telnet Management1094 - Edge PortThis parameter defines whether the port is functioning as an edge port. For an explanation of t

11PrefaceThis guide contains instructions on how to configure an AT-8000 Series Fast Ethernet Switch using the AT-S39 management software. The AT-8000

110 Chapter 10Virtual LANsThis chapter contains basic information about virtual LANs (VLANs). It also contains the procedures for creating, modifying,

Section II: Local and Telnet Management111VLAN OverviewA VLAN is a group of ports on an Ethernet switch that form a logical Ethernet segment. The port

AT-S39 User’s Guide112But with VLANS, you can change the LAN segment assignment of an end node connected to the switch through the switch’s AT-S39 man

Section II: Local and Telnet Management113Port-based VLAN OverviewAs explained in the VLAN Overview section earlier in this chapter, a VLAN consists o

AT-S39 User’s Guide114If a VLAN spans multiple switches, then the VID for the VLAN on the different switches must be the same. In this manner, the swi

Section II: Local and Telnet Management115For example, assume that you were creating a port-based VLAN on a switch and you had assigned the VLAN the V

AT-S39 User’s Guide116Drawbacks toPort-basedVLANsThere are several drawbacks to port-based VLANs:❑ It is not easy to share network resources, such as

Section II: Local and Telnet Management117Port-basedExample 1Figure 33 illustrates an example of one AT-8024 Fast Ethernet Switch with three port-base

AT-S39 User’s Guide118In the example, each VLAN has one port connected to the router. The router interconnects the various VLANs and functions as a ga

Section II: Local and Telnet Management119The table below lists the port assignments for the Sales, Engineering, and Production VLANs on the switches:

AT-S39 User’s Guide12A Telnet management session is established using the Telnet application protocol. This type of management session can be performe

AT-S39 User’s Guide120Tagged VLAN OverviewThe second type of VLAN supported by the AT-8000 Series switch is the tagged VLAN. VLAN membership in a tagg

Section II: Local and Telnet Management121The parts of a tagged VLAN are much the same as those for a port-based VLAN. They are:❑ VLAN Name❑ VLAN Iden

AT-S39 User’s Guide122General Rulesto Creating aTagged VLANBelow is a summary of the rules to observe when creating a tagged VLAN.❑ Each tagged VLAN m

Section II: Local and Telnet Management123Tagged VLANExampleFigure 35 illustrates how tagged ports can be used to interconnect IEEE 802.1Q-based produ

AT-S39 User’s Guide124The port assignments for the VLANs are as follows:This example is nearly identical to the Port-based Example 2 on page 118. Tagg

Section II: Local and Telnet Management125Basic VLAN Mode OverviewThe Fast Ethernet Switches support a special VLAN configuration referred to as Basic

AT-S39 User’s Guide126Creating a Port-based or Tagged VLANTo create a new port-based or tagged VLAN, perform the following procedure:1. From the Main

Section II: Local and Telnet Management127The Create a VLAN window in Figure 38 is displayed.Figure 38 Create a VLAN Window4. Type 1 to select VLAN N

AT-S39 User’s Guide1286. If the VLAN will contain tagged ports, type 3 to select Tagged Ports and specify the ports. If this VLAN will not contain any

Section II: Local and Telnet Management129NoteWhen you create a new VLAN, ports designated as untagged ports of the new VLAN are automatically removed

Section II: Local and Telnet Management13Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.War

AT-S39 User’s Guide130Example of Creating a Port-based VLANThe following procedure creates the Sales VLAN illustrated in Port-based Example 1 on page

Section II: Local and Telnet Management131Example of Creating a Tagged VLANThe following procedure creates the Engineering VLAN in the top switch illu

AT-S39 User’s Guide132Modifying a VLANNoteYou need to know the VID of the VLAN you want to modify in order to perform this procedure. To view the VLAN

Section II: Local and Telnet Management133function of the nodes that will be a part of the VLAN (for example, Sales or Accounting). The name can conta

AT-S39 User’s Guide134❑ If the VLAN will not contain any untagged ports, leave this field empty.❑ If you want to remove all untagged ports from the VL

Section II: Local and Telnet Management135Displaying VLAN InformationTo view the name, VID number, and member ports of all the VLANs on a switch, perf

AT-S39 User’s Guide136Deleting a VLANNoteYou need to know the VID of the VLAN you want to delete to perform this procedure. To obtain a VLAN’s VID, re

Section II: Local and Telnet Management1376. Type D to delete the VLAN or R to cancel the procedure.The following confirmation prompt is displayed:Are

AT-S39 User’s Guide138Deleting All VLANsThis section contains the procedure for deleting all VLANs, except the Default VLAN, on a switch. To delete se

Section II: Local and Telnet Management139Changing a PVID ValueThe procedure in this section explains how to change a PVID value for a port. As explai

AT-S39 User’s Guide14Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document

AT-S39 User’s Guide140The Configure Port VLANS & Priorities window in Figure 43 is displayed.Figure 43 Port VLANs and Priorities Window5. Type 2

Section II: Local and Telnet Management141Displaying PVIDs and Port PrioritiesThe following procedure displays a window that lists the PVIDs for all t

AT-S39 User’s Guide142Setting a Switch’s VLAN ModeThis section contains the procedure for setting a switch’s VLAN mode. You can configure a switch to

Section II: Local and Telnet Management143Enabling or Disabling All VLANsThis procedure performs exactly the same function as the previous procedure.

AT-S39 User’s Guide1443. Type 1 to select Enable/Disable VLANs.The VLAN Support window in Figure 46 is displayed.Figure 46 VLAN Support WindowThe pro

Section II: Local and Telnet Management145Enabling or Disabling Ingress FilteringThere are certain rules a switch follows as it receives and forwards

AT-S39 User’s Guide146There is one other thing that should be mentioned about ingress filtering and tagged packets, and that is the priority tag. Each

Section II: Local and Telnet Management147Specifying a Management VLANIn order for you to remotely manage an AT-8300 Series Switch, there must exist a

AT-S39 User’s Guide148Now let’s assume that you have decided to create a VLAN called NMS with a VID of 24 for the sole purpose of remote network manag

149Chapter 11MAC Address TableThe chapter contains the procedures for viewing the static and dynamic MAC address table. The sections in this chapter i

Section II: Local and Telnet Management15Contacting Allied TelesynTo contact Technical Support by phone, find your country or region in the table belo

AT-S39 User’s Guide150MAC Address OverviewEvery hardware device that you connect to your network has a unique MAC address associated with it. A MAC ad

Section II: Local and Telnet Management151The type of MAC address described above is referred to as a dynamic MAC address. Dynamic MAC addresses are a

AT-S39 User’s Guide152Displaying MAC AddressesThe management software has two menu selections for displaying the MAC addresses of a switch. One select

Section II: Local and Telnet Management153The management software displays the MAC addresses. Figure 49 is an example of the Show All MAC Addresses wi

AT-S39 User’s Guide154The port numbering scheme is from right to left. As an example, assume that ports 1 through 4 on the switch were members of the

Section II: Local and Telnet Management155Viewing MAC Addresses by PortThis section contains the procedure for viewing the dynamic MAC addresses that

AT-S39 User’s Guide156Identifying a Port Number by MAC AddressIn some situations, you might want to know which port a particular MAC address was learn

Section II: Local and Telnet Management157Viewing the MAC Addresses of a VLANThe procedure in this section can be useful if you created VLANs on the s

AT-S39 User’s Guide158Deleting All Dynamic MAC AddressesThe management software allows you to purge the MAC address table of all dynamic MAC addresses

Section II: Local and Telnet Management159Adding Static and Multicast MAC AddressesThis section contains the procedure for adding static and multicast

AT-S39 User’s Guide16Management Software UpdatesNew releases of management software for our managed products are available from our web site at www.al

AT-S39 User’s Guide160Deleting MAC AddressesThe following procedure explains how to delete a static, dynamic, or multicast MAC address from the MAC ad

Section II: Local and Telnet Management161Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresses from the MAC

162Chapter 12Class of ServiceThis chapter contains the procedures for configuring the Class of Service (CoS) feature of the AT-S39 software. Sections

Section II: Local and Telnet Management163Class of Service OverviewThe AT-8000 Series switch supports CoS as specified in the IEEE 802.1p and 802.1Q s

AT-S39 User’s Guide164Configuring CoSTo configure CoS for a port, perform the following procedure:1. From the Main Menu, type 2 to select VLAN Menu.2.

165Chapter 13IGMP SnoopingThis chapter explains how to activate and configure the Internet Group Management Protocol (IGMP) snooping feature on the sw

AT-S39 User’s Guide166IGMP Snooping OverviewIGMP snooping is best explained by first defining IGMP. This protocol enables routers to create lists of n

Section II: Local and Telnet Management167Without IGMP snooping, a switch would have to flood multicast packets out all of its ports, except the port

AT-S39 User’s Guide168Activating IGMP SnoopingTo activate or deactivate IGMP snooping on the switch and to configure IGMP snooping parameters, perform

Section II: Local and Telnet Management169out a switch port when a host node signals its desire to leave a multicast group by sending a leave request

17Section IOverviewThe chapter in this section provides a brief overview of the AT-S39 management software. It explains some of the functions that you

AT-S39 User’s Guide1705 - Multicast Router Port(s)Specifies the port on the switch to which the multicast router is detected. You can let the switch d

Section II: Local and Telnet Management171Displaying a List of Host NodesYou can use the AT-S39 software to display a list of the multicast groups on

AT-S39 User’s Guide172Displaying a List of Multicast RoutersA multicast router is a router that is receiving multicast packets from a multicast applic

173Chapter 14Broadcast Frame ControlThis chapter contains the procedures for configuring the broadcast frame control feature of the AT-S39 management

AT-S39 User’s Guide174Broadcast Frame Control OverviewMost frames on an Ethernet network are unicast frames. A unicast frame is a frame that is sent t

Section II: Local and Telnet Management175It is important to note that the maximum number applies to the egress port of a broadcast frame, not the ing

AT-S39 User’s Guide176Configuring the Interval TimerTo set the interval timer for the broadcast frame control feature, perform the following procedure

Section II: Local and Telnet Management1775. Once you have set the desired timer intervals, type S to select Save Configuration Changes.Your changes a

AT-S39 User’s Guide178Configuring the Maximum Broadcast Frame CountTo specify the maximum number of broadcast frames a port on the switch can receive

179Chapter 15TACACS+ and RADIUS ProtocolsThis chapter contains the procedure for configuring the two authentication protocols TACACS+ and RADIUS. Sect

18Chapter 1OverviewThe AT-S39 management software is intended for the AT-8000 Series Fast Ethernet Switches. The software is used to monitor and adjus

AT-S39 User’s Guide180TACACS+ and RADIUS OverviewThe AT-S39 software has two standard management login accounts: Manager and Operator. The Manager acc

Section II: Local and Telnet Management181If the username and password combination is invalid, the authentication protocol server notifies the switch

AT-S39 User’s Guide182NoteThis manual does not explain how to configure TACACS+ or RADIUS server software. For that you need to refer to the documenta

Section II: Local and Telnet Management183Configuring an Authorization ProtocolTo enable or disable the server-based authentication feature on the swi

AT-S39 User’s Guide184Once you have activated the authentication feature on the switch and designated which authentication protocol you intend to use,

Section II: Local and Telnet Management185Enter per-server secret [max 40 characters] ->Use this prompt to enter the encryption secret for the TACA

AT-S39 User’s Guide186The following window is displayed: Figure 56 RADIUS Client Configurationb. Configure the parameters as needed. The parameters a

Section II: Local and Telnet Management1873 - RADIUS Server 1 Configuration4 - RADIUS Server 1 Configuration5 - RADIUS Server 1 ConfigurationUse these

188Chapter 16Ethernet StatisticsThis chapter contains the procedures for displaying data traffic statistics. Sections in the chapter include:❑ Display

Section II: Local and Telnet Management189Displaying Port StatisticsTo display Ethernet port statistics, perform the following procedure:1. From the M

Section I: Overview19There are four different ways that you can access the management software on an AT-8000 Series switch. The methods are referred t

AT-S39 User’s Guide190CRC Error (CRC_ERROR)Number of packets with a cyclic redundancy check (CRC) error but with the proper length (64-1518 bytes) rec

Section II: Local and Telnet Management191Displaying Switch StatisticsTo display Ethernet statistics for an entire switch, perform the following proce

AT-S39 User’s Guide192Received OverflowNumber of times the capacity of the port buffers have been exceeded.Received BroadcastNumber of broadcast packe

193Chapter 17File Downloads and UploadsThere are three files that coexist on an AT-8000 Series switch while the device is operating. They are:❑ AT-S39

AT-S39 User’s Guide194the same. What you can do is configure one of the AT-8000 Series switches in your network, and then download its configuration f

Section II: Local and Telnet Management195Obtaining Software UpdatesNew releases of the AT-S39 management software are available from the Allied Teles

AT-S39 User’s Guide196Transferring Files from a Local Management SessionThis section contains the procedure for downloading or uploading the following

Section II: Local and Telnet Management197The following menu is displayed:Figure 60 Downloads & Uploads MenuNoteOptions 3 and 4 in the menu are d

AT-S39 User’s Guide198Once the filename has been specified, the download begins. Downloading a configuration file takes only a few moments. Downloadin

Section II: Local and Telnet Management199The Send File window in Figure 62 is displayed. Figure 62 Send File Window10. Click the Browse button and s

Copyright  2002 Allied Telesyn, Inc. 960 Stewart Drive Suite B, Sunnyvale, CA 94085 USAAll rights reserved. No part of this publication may be reprod

AT-S39 User’s Guide20Local Management SessionYou establish a local management session with an AT-8000 Series switch by connecting a terminal or a PC w

AT-S39 User’s Guide200If you are installing a new management image, the switch begins to initialize the software after it is installed, a process that

Section II: Local and Telnet Management201Downloading Files Switch to SwitchThe previous procedure explained how to download an AT-S39 software image

AT-S39 User’s Guide202The following prompt is displayed:Enter the starting remote switch number -> [1 to 12]4. Enter the number of the switch whose

Section II: Local and Telnet Management203Uploading FilesTo upload a management software image or configuration from a switch onto your management sta

AT-S39 User’s Guide2046. To upload a file using Xmodem, type X at the prompt displayed in Step 4.The following prompt is displayed:You are going to in

Section II: Local and Telnet Management205Downloading and Uploading Files using TFTP from a Management WorkstationYou can upload and download files on

AT-S39 User’s Guide206ExampleThe following example downloads a new management software image onto a switch with an IP address of 149.35.1.1.tftp -i 14

207Section IIIWeb Browser ManagementThe chapters in this section explain how to manage an AT-8024 or AT-8024GB Fast Ethernet switch using a web browse

208Chapter 18Starting a Web Browser Management SessionThis chapter contains the procedure for starting a management session on an AT-8000 Series switc

209Starting a Web Browser Management SessionThis section explains how to start a web browser management session. There must be at least one AT-8000 Se

Section I: Overview21Telnet Management SessionAny management workstation on your network that has the Telnet application protocol can be used to manag

AT-S39 User’s Guide210The user names cannot be changed. To change a password, refer to Configuring an IP Address and Switch Name on page 37.The window

211NoteA web browser management session remains active even if you link to other sites. You can return to the management web pages anytime as long as

212Chapter 19Basic Switch ParametersThis chapter contains the following sections:❑ Configuring an IP Address and Switch Name on page 213❑ Activating t

Section III: Web Browser Management213Configuring an IP Address and Switch NameNoteFor guidelines on when to assign an IP address, subnet address, and

AT-S39 User’s Guide214The General tab in Figure 66 is displayed.Figure 66 General Tab Window - ConfigurationNoteThis procedure describes the paramete

Section III: Web Browser Management2153. Change the parameters as desired. The parameters are described below:System NameThis parameter specifies a na

AT-S39 User’s Guide216CautionYou should not use spaces or special characters, such as asterisks (*) and exclamation points (!), in a password if you w

Section III: Web Browser Management217Activating the BOOTP and DHCP ServicesFor background information on BOOTP and DHCP, refer to the section Activat

AT-S39 User’s Guide218Viewing System InformationTo view basic information about the switch, perform the following procedure:1. From the Home page, sel

Section III: Web Browser Management219This window is for viewing purposes only. You cannot change any of the values from this window. The sections in

AT-S39 User’s Guide22Web Browser Management SessionYou can also use a web browser to manage a switch. This too is referred to as remote management, ju

AT-S39 User’s Guide220Configuring the SNMP Parameters and Trap IP AddressesTo change the switch’s SNMP community strings or to specify the IP addresse

Section III: Web Browser Management221Trap Receiver 1Trap Receiver 2Trap Receiver 3Trap Receiver 4Use these selections to specify the IP addresses of

AT-S39 User’s Guide222Resetting a SwitchTo reset a switch, perform the following procedure:1. From the Home Page, select Configuration.The Configurati

Section III: Web Browser Management223Pinging a Remote SystemYou can instruct the switch to ping a node on your network. This procedure is useful in d

AT-S39 User’s Guide224Returning the AT-S39 Software to the Factory Default ValuesThe procedure in this section returns all AT-S39 software parameters,

225Chapter 20Enhanced StackingThis chapter contains the following procedures:❑ Setting a Switch’s Enhanced Stacking Status on page 226❑ Selecting a Sw

AT-S39 User’s Guide226Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be master, slave, or unavailable. Each

Section III: Web Browser Management227The Enhanced Stacking tab is shown in Figure 71.Figure 71 Enhanced Stacking Tab4. Click the desired enhanced st

AT-S39 User’s Guide228Selecting a Switch in an Enhanced StackThe first thing that you should do before you perform any procedure on a switch in an enh

Section III: Web Browser Management229NoteThe master switch on which you started the management session is not included in the list, nor are any switc

Section I: Overview23SNMP Management SessionAnother way to remotely manage the switch is with an SNMP management program. A familiarity with Managemen

230Chapter 21Port ParametersThe procedures in this chapter allow you to view and change the parameter settings for the individual ports on a switch. E

Section III: Web Browser Management231Configuring Port ParametersTo configure the parameter settings for a port on a switch, perform the following pro

AT-S39 User’s Guide232The Settings for Port window is displayed. An example of the window is shown in Figure 74.Figure 74 Settings for Port WindowNot

Section III: Web Browser Management233❑ 100Mbps - Half Duplex❑ 100Mbps - Full DuplexBroadcast Storm ControlThe maximum number of broadcast packets the

AT-S39 User’s Guide234Displaying Port Status and StatisticsThe procedure in this section displays the operating status of the ports on a switch and po

Section III: Web Browser Management235If you select port status, the Port Status window in Figure 76 is displayed.Figure 76 Port Status WindowThe inf

AT-S39 User’s Guide236MDIThe operating configuration of the port. Possible values are MDI and MDI-X.SpeedThe operating speed of the port. Possible val

Section III: Web Browser Management237Priority LevelThe priority queue to which untagged packets are directed when received on the port. A value of 1

AT-S39 User’s Guide238Received MulticastNumber of multicast packets received on the port.CRC ErrorNumber of packets with a cyclic redundancy check (CR

239Chapter 22Port SecurityThis chapter explains how to display the current port security level on the switch from a web browser management session. No

AT-S39 User’s Guide24Management Access LevelsThere are two levels of management access on an AT-8000 Series switch: Manager and Operator. When you log

AT-S39 User’s Guide240Displaying the Port Security LevelTo display the switch’s port security level, perform the following procedure:1. From the Home

241Chapter 23Port TrunksThis chapter contains the procedure for creating or deleting a port trunk from a web browser management session.NoteFor backgr

AT-S39 User’s Guide242Creating or Deleting a Port TrunkCautionDo not connect the cables of a port trunk to the ports on the switch until after you hav

Section III: Web Browser Management2434. To create a port trunk, do the following:a. Click the ports that will make up the port trunk. A selected port

244Chapter 24Port MirroringThis chapter contains the procedure for creating or deleting a port mirror.NoteFor background information on port mirroring

Section III: Web Browser Management245Creating or Deleting a Port MirrorTo create or delete a port mirror, perform the following procedure: 1. From th

AT-S39 User’s Guide2465. To disable port mirroring, select “None“ from the Mirroring Port pull-down menu and click Apply.The port mirror is deleted. T

247Chapter 25STP and RSTPThis chapter explains how to configure the STP and RSTP parameters on an AT-8000 Series switch from a web browser management

AT-S39 User’s Guide248Enabling or Disabling STP or RSTPTo enable or disable spanning tree on the bridge, do the following:1. From the Home page, selec

Section III: Web Browser Management249Configuring STPCautionThe bridge provides default STP parameters that are adequate for most networks. Changing t

25Section IILocal and Telnet ManagementThe chapters in this section explain how to manage an AT-8000 Series switch from a local or Telnet management s

AT-S39 User’s Guide2502. Adjust the bridge STP settings as needed. The parameters are described below.Bridge IdentifierThe MAC address of the bridge.

Section III: Web Browser Management251NoteThe aging time for BPDUs is different from the aging time used by the MAC address table.3. After you have ma

AT-S39 User’s Guide252Port PriorityThis parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridg

Section III: Web Browser Management253Configuring RSTPCautionThe bridge provides default RSTP parameters that are adequate for most networks. Changing

AT-S39 User’s Guide2542. Adjust the parameters are desired. The parameters are defined below.Force VersionThis selection determines whether the bridge

Section III: Web Browser Management255Bridge IdentifierThe MAC address of the bridge. The bridge identifier is used as a tie breaker in the selection

AT-S39 User’s Guide256Port CostThe spanning tree algorithm uses the cost parameter to decide which port provides the lowest cost path to the root brid

Section III: Web Browser Management257Displaying STP or RSTP SettingsTo display STP or RSTP parameter settings, perform the following procedure:1. Fro

AT-S39 User’s Guide258The example in Figure 87 is for RSTP. The information in this window is for viewing purposes only. Figure 87 Rapid Spanning Tre

259Chapter 26Virtual LANsThis chapter explains how to create, modify, and delete VLANs from a web browser management session. This chapter also explai

26Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedure for starting a local or Telnet management session on an AT

AT-S39 User’s Guide260Creating a VLANTo create a new VLAN, perform the following procedure:1. From the Home page, select Configuration. 2. From the Co

Section III: Web Browser Management2614. Click Add.The Add VLAN window in Figure 89 is displayed.Figure 89 Add VLAN Window5. Select the Name field an

AT-S39 User’s Guide262example, if you are creating a VLAN called Sales that will span three switches, you must assign the same VID value to each Sales

Section III: Web Browser Management263Modifying a VLANTo modify a VLAN, perform the following procedure:1. From the Home page, select Configuration.2.

AT-S39 User’s Guide264Deleting VLANsTo delete a VLAN from the switch, perform the following procedure:1. From the Home page, select Configuration. 2.

Section III: Web Browser Management265Displaying VLANsTo display all the existing VLANs on a switch, perform the following procedure:1. From the Home

AT-S39 User’s Guide266Setting the Switch’s VLAN ModeThis section contains the procedure for setting a switch’s VLAN mode. You can configure a switch t

Section III: Web Browser Management267Enabling or Disabling VLANsThis procedure performs exactly the same function as the previous procedure. It sets

AT-S39 User’s Guide268Changing a PVIDThe procedure in this section explains how to change a PVID value for a port. As explained in Port-based VLAN Ove

Section III: Web Browser Management2696. Use the pull-down menu from the Port VLAN ID selection to specify the new PVID value for the port. The pull-d

Section II: Local or Telnet Management27Local Management SessionOn the front panel of the switch is a port labelled RS232 Terminal Port. You use this

270Chapter 27MAC Address TableThis chapter contains instructions on how to view the dynamic and static addresses in the MAC address table of the switc

Section III: Web Browser Management271Viewing the MAC Address TableTo view the MAC address table, perform the following procedure:1. From the Home pag

AT-S39 User’s Guide272View All Static AddressesThis option displays only the static MAC addresses. Static MAC addresses are addresses that you entered

Section III: Web Browser Management273MIRIndicates whether the traffic on the port is being mirrored. Yes means the traffic is being mirrored while No

AT-S39 User’s Guide274Adding Static and Multicast MAC AddressesThis section contains the procedure for assigning static or multicast address to ports

Section III: Web Browser Management275Deleting MAC AddressesTo delete a static, dynamic, or multicast MAC address from the switch, perform the followi

AT-S39 User’s Guide276Changing the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addresses from the MAC address table. When

277Chapter 28Class of ServiceThis chapter contains instructions on how to configure CoS. This chapter contains the following procedure:❑ Configuring C

AT-S39 User’s Guide278Configuring CoSTo configure CoS, perform the following procedure:1. From the Home page, select Configuration.2. From the Configu

279Chapter 29IGMP SnoopingThis chapter describes how to configure the IGMP snooping feature on the switch.NoteFor background information on this featu

AT-S39 User’s Guide28Starting a LocalManagementSessionTo start a local management session, perform the following procedure:1. Connect one end of a str

AT-S39 User’s Guide280Configuring IGMP SnoopingTo configure IGMP snooping from a web browser management session, perform the following procedure:1. Fr

Section III: Web Browser Management281Snoop TopologyDefines whether there is only one host node per switch port or multiple host nodes per port. Possi

AT-S39 User’s Guide282This parameter is useful with networks that contain a large number of multicast groups. You can use the parameter to prevent the

Section III: Web Browser Management283Displaying a List of Host Nodes and Multicast RoutersYou can use the AT-S39 software to display a list of the mu

AT-S39 User’s Guide284Viewing a list of host nodes displays a window containing the following information. The information in the window is for viewin

285Chapter 30Broadcast Frame ControlThis chapter contains instructions on how to configure the broadcast frame control feature on the switch.NoteFor b

AT-S39 User’s Guide286Configuring the Interval TimerThe interval timer defines the time period used in counting the number of broadcast packets transm

Section III: Web Browser Management287Setting the Maximum Number of Broadcast FramesTo set the maximum number of broadcast frames you want the ports o

288Chapter 31TACACS+ and RADIUS ProtocolsThis chapter contains instructions on how to configure the authentication protocols. This chapter contains th

Section III: Web Browser Management289Configuring TACACS+ and RADIUSTo configure the authentication protocols, perform the following procedure:1. From

Section II: Local or Telnet Management29NoteThe switch has an auto-detect feature that automatically determines the speed of the terminal. You use thi

AT-S39 User’s Guide290NoteIf you activated the authentication feature, go to Step 6 to configure TACACS+ or Step 7 to configure RADIUS. 7. To configur

Section III: Web Browser Management291IP Address and Encryption SecretUse these fields to specify the IP addresses and encryption secrets of up to thr

AT-S39 User’s Guide292expires and the server has not responded, the switch queries the next TACACS+ server in the list. If there aren’t any more serve

293Appendix AAT-S39 Default SettingsThis appendix lists the AT-S39 factory default settings.Settings DefaultIP Address 0.0.0.0Subnet Mask 255.255.0.0

AT-S39 User’s Guide294Bridge Max Age Time 20Bridge Hello Time 2Bridge Forwarding Delay 15Port Costs Auto detect2 000 000 - 10 Mbps200 000 - 100 Mbps20

AT-S39 Default Settings295Broadcast Frame Control10/100 Mbps Interval Timer 10 milliseconds1000 Mbps Interval Timer 100 microsecondsMaximum Number of

296IndexAaging timechanging, 161, 276defined, 151AT-S39 default settings, 50, 224, 293AT-S39 software security, 45AT-S39 software updatesdownloading f

297forwarding delay, 96, 102Ggateway address, 38, 216Hhello time, 97, 102, 252host nodesdefined, 166displaying, 171, 283host/router timeout interval,

AT-S39 User’s Guide298deleting, 136, 264displaying, 135, 265modifying, 132, 263priority queues, 163priority, 104, 108, 252, 255PVID. See Port VLAN ide

299port-based, defined, 113tagged, defined, 120VLAN identifier (VID), 113, 127, 133VLAN identifier, 261VLAN. See virtual LANWweb browser management se

3Table of ContentsList of Figures ...

AT-S39 User’s Guide30The Main Menu is displayed. Figure 2 Main MenuTo select a menu item, type the corresponding letter or number.Pressing the Esc ke

Section II: Local or Telnet Management31EnhancedStackingWhen you start a local management session on a switch that has been designated as the Master s

AT-S39 User’s Guide32Telnet Management SessionYou can use the Telnet application protocol from a workstation on your network to manage an AT-8000 Seri

Section II: Local or Telnet Management33NoteYou can run only one Telnet management session on a switch at a time. Additionally, you cannot run both a

34Chapter 3Basic Switch ParametersThis chapter contains a variety of information and procedures. There is a discussion on when to assign an IP address

Section II: Local and Telnet Management35When Does a Switch Need an IP Address?One of the tasks to building or expanding a network is deciding which o

AT-S39 User’s Guide36How Do YouAssign an IPAddress?Once you have decided which, if any, switches on your network need an IP address, you have to acces

Section II: Local and Telnet Management37Configuring an IP Address and Switch NameThe procedure in this section explains how to manually assign an IP

AT-S39 User’s Guide382. Change the parameters as desired. The parameters in the IP Parameters window are described below:1 - IP AddressThis parameter

Section II: Local and Telnet Management399 - Reset SwitchThis selection resets the switch.A - Server-based AuthenticationThis selection is used to con

Table of Contents4Chapter 3Basic Switch Parameters ...

AT-S39 User’s Guide40Activating the BOOTP and DHCP ServicesThe BOOTP and DHCP application protocols were developed to simplify network management. The

Section II: Local and Telnet Management41NoteIf you activated BOOTP/DHCP, the switch immediately begins to query the network for a BOOTP or DHCP serve

AT-S39 User’s Guide42Configuring SNMP Community Strings and Trap IP AddressesTo configure the SNMP community strings for the switch and to assign up t

Section II: Local and Telnet Management433. From the Advanced Configuration window, type 3 to select SNMP Configuration. The SNMP Configuration window

AT-S39 User’s Guide44Resetting a SwitchTo reset a switch, perform the following procedure:1. From the Main Menu, type 4 to select Administrator Menu.2

Section II: Local and Telnet Management45Configuring the AT-S39 Software Security FeaturesThe AT-S39 software has several security features that can h

AT-S39 User’s Guide46Configuring theManagementPasswordsThere are two levels of management access on an AT-8000 Series switch: Manager and Operator. Wh

Section II: Local and Telnet Management47ConfiguringManagementAccessTo configure the console timer, web access, SNMP access, and TFTP server security

AT-S39 User’s Guide48Viewing the AT-S39 Version Number and Switch MAC AddressThe procedure in this section displays the following switch information:❑

Section II: Local and Telnet Management49Pinging a Remote SystemYou can instruct the switch to ping a remote device on your network. This procedure is

5Enabling or Disabling STP or RSTP ...

AT-S39 User’s Guide50Returning the AT-S39 Software to the Factory Default ValuesThe procedure in this section returns all AT-S39 software parameters t

Section II: Local and Telnet Management51Configuring the Console Startup ModeYou can configure the AT-S39 software to display either the Main Menu or

52Chapter 4Enhanced StackingThis chapter explains the enhanced stacking feature. The sections in this chapter include:❑ Enhanced Stacking Overview on

Section II: Local and Telnet Management 53Enhanced Stacking OverviewThe enhanced stacking feature can make it easier for you to manage the AT-8000 Ser

AT-S39 User’s Guide542. You must assign the master switch an IP address and subnet mask.A master switch must have an IP address and subnet mask. The o

Section II: Local and Telnet Management 55Example Figure 9 is an example of the enhanced stacking feature.Figure 9 Enhanced Stacking ExampleThe examp

AT-S39 User’s Guide56Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be master switch, slave switch, or unav

Section II: Local and Telnet Management 57The window displays the current status of the switch at the end of selection “1 - Switch State.” For example

AT-S39 User’s Guide58Selecting a Switch in an Enhanced StackThe first thing that you should do before performing any procedure on a switch in an enhan

Section II: Local and Telnet Management 593. Type G to select Get/Refresh List of Switches.The Master switch polls the network for all slave and Maste

Table of Contents6Chapter 14Broadcast Frame Control ...

60Chapter 5Port ParametersThe chapter contains procedures for viewing and changing the parameter settings for the individual ports on a switch. This c

Section II: Local and Telnet Management61Displaying Port StatusTo display the status of the ports on the switch, perform the following procedure:1. Fr

AT-S39 User’s Guide62The Port Status window is displayed. Figure 13 is an example of the window.Figure 13 Port Status WindowThe information in this w

Section II: Local and Telnet Management63MDIOThe operating configuration of the port. Possible values are Auto, MDI, MDI-X. The status Auto indicates

AT-S39 User’s Guide64Configuring Port ParametersTo configure the parameter settings for a port on the switch, perform the following procedure: 1. From

Section II: Local and Telnet Management65NoteThe example Port Configuration window in the figure above is for a 10/100 Mbps twisted pair port. The win

AT-S39 User’s Guide66Flow ControlFlow control applies only to ports operating in full-duplex mode. The switch uses a special pause packet to stop the

Section II: Local and Telnet Management67B - Broadcast ControlFor background information on this selection and instructions on how to set the option,

AT-S39 User’s Guide68Displaying Uplink InformationThe AT-S39 management software can display basic manufacturer information about a GBIC module in an

Section II: Local and Telnet Management69The management software displays a window containing basic information about the GBIC module. Figure 16 is an

7Chapter 22Port Security ...

70Chapter 6Port SecurityThis chapter contains the procedures for setting port security. The sections in this chapter include:❑ Port Security Overview

Section II: Local and Telnet Management71Port Security OverviewThe port security feature can enhance the security of your network. You can use the fea

AT-S39 User’s Guide72SecureThis security level instructs the switch to forward frames based solely on static MAC addresses. When this security level i

Section II: Local and Telnet Management73Configuring Port SecurityNotePort security can only be set through a local management session. You cannot set

AT-S39 User’s Guide74❑ To forward frames based solely on static MAC addresses, type S to select the Secured mode. After activating this security mode,

Section II: Local and Telnet Management75Configuring the Limited Security ModeThe Limited security mode lets you set a maximum number of dynamic MAC a

AT-S39 User’s Guide764. Type 2 to select Configure Limited Mode Parameters.The following prompt is displayed:Enter ports list: 5. Enter the port(s) wh

77Chapter 7Port TrunkingThis chapter contains the procedures for creating and deleting port trunks. Sections in the chapter include:❑ Port Trunking Ov

AT-S39 User’s Guide78Port Trunking OverviewPort trunking is an economical way for you to increase the bandwidth between two Ethernet switches. A port

79❑ When cabling a trunk, the order of the connections should be maintained on both nodes. The lowest numbered port in a trunk on the switch should be

8List of FiguresFigure 1: Connecting a Terminal or PC to the RS232 Terminal Port ...

AT-S39 User’s Guide80The switch assigns source addresses so as to evenly distribute the addresses, or at least as much as possible, across all the por

81Now assume that you configured the port trunk on Switch #1 for SA load distribution. The switch might distribute the load as follow:For example, whe

AT-S39 User’s Guide82So now let’s look at the SA/DA method. A switch using the SA/DA method creates a matrix of the source and destination MAC address

83The bottom line is that the SA/DA method is more flexible than the SA method. A general rule to follow is if you are not sure which load distributio

AT-S39 User’s Guide84Creating a Port TrunkThis section contains the procedure for creating a port trunk on the switch. Be sure to review the guideline

853. Type 1 to select Trunk Ports.The following prompt is displayed.Enter Trunk Port(s) ->4. Enter the ports that will constitute the port trunk an

AT-S39 User’s Guide86Deleting a Port TrunkCautionDisconnect the cables from the port trunk on the switch before performing the following procedure. De

87Chapter 8Port MirroringThis chapter contains the procedures for creating and deleting a port mirror. Sections in the chapter include:❑ Port Mirrorin

AT-S39 User’s Guide88Port Mirroring OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic being received and transmitted

89Creating a Port MirrorTo create a port mirror, perform the following procedure:1. From the Main Menu, type 1 to select Port Menu.2. From the Port Me

9Figure 38: Create a VLAN Window ...

AT-S39 User’s Guide90Deleting a Port MirrorTo delete a port mirror, perform the following procedure:1. From the Main Menu, type 1 to select Port Menu.

91Chapter 9STP and RSTPThis chapter provides background information on the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP). The c

AT-S39 User’s Guide92STP and RSTP OverviewA significant danger to Ethernet network performance is the existence of a data loop in a network topology.

Section II: Local and Telnet Management93Bridge Priorityand the RootBridgeThe first task that bridges perform when a spanning tree protocol is activat

AT-S39 User’s Guide94Path Costs and Port CostsOnce the Root Bridge has been selected, the bridges must determine if the network contains redundant pat

Section II: Local and Telnet Management95RSTP port cost also features an Auto-Detect feature. This features allows RSTP to automatically set the port

AT-S39 User’s Guide96Forwarding Delay and Topology ChangesIf there is a change in the network topology due to a failure, removal, or addition of any a

Section II: Local and Telnet Management97The root bridge will periodically transmit a BPDU to determine whether there have been any changes to the net

AT-S39 User’s Guide98If a port is operating in half-duplex mode and is not connected to any further bridges participating in STP or RSTP, then the por

Section II: Local and Telnet Management99Mixed STP andRSTP NetworksRSTP IEEE 802.1w is fully compliant with STP IEEE 802.1d. Your network can consist