Allied Telesis AT-FS970M/48PS User's Guide

613-001946 Rev. AAT-FS970M SeriesFast Ethernet Switch AT-FS970M/8 AT-FS970M/8PS AT-FS970M/8PS-E AT-FS970M/24C AT-FS970M/24PS AT-FS970M/48 AT-FS

Contents10

Chapter 7: Spanning Tree Protocol on a Port100

101Chapter 8Setting the MAC AddressThe procedures in this chapter describe how to display the MAC address table that resides on the switch, as well as

Chapter 8: Setting the MAC Address102Displaying the Unicast MAC Addresses To display the unicast MAC addresses, do the following:1. Hover the cursor o

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide103The following fields are displayed: MAC Address— Dynamic and static unicast MAC address

Chapter 8: Setting the MAC Address104Displaying the Multicast MAC Addresses To display the multicast MAC addresses, do the following:1. Hover the curs

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide105Assigning a Unicast MAC AddressTo assign a unicast MAC address to the MAC address table,

Chapter 8: Setting the MAC Address106Forward: Specifies the port to forward packets that have the designated source MAC address. Discard: Specifies th

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide107Assigning a Multicast MAC AddressTo assign a multicast MAC address to the MAC address ta

Chapter 8: Setting the MAC Address108Forward: Specifies the port to forward packets that have the designated source MAC address. Discard: Specifies th

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide109Deleting a Unicast MAC AddressTo delete a unicast address or clear all static or dynamic

11FiguresFigure 1: Login Page ...

Chapter 8: Setting the MAC Address110Deleting a Multicast MAC AddressTo delete a multicast address or clear all static or dynamic multicast addresses,

111Chapter 9Link Aggregation Control Protocol (LACP)LACP is used to increase the bandwidth between the switch and other LACP compatible devices by gro

Chapter 9: Link Aggregation Control Protocol (LACP)112OverviewLACP trunks are similar in function to static port trunks, but they are more flexible. T

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide113Displaying LACP TrunksTo display the LACP trunk assignments for all of the switch ports,

Chapter 9: Link Aggregation Control Protocol (LACP)114 Load Balance Method— Load distribution methods of the aggregators. An aggregator can have only

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide115Adding an LACP TrunkTo create an LACP trunk, do the following:1. Hover the cursor over t

Chapter 9: Link Aggregation Control Protocol (LACP)1165. Enter an aggregator ID number in the Aggregator ID field. The number can be from 1-32.6. Sele

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide117Modifying an LACP TrunkTo modify the LACP Trunk settings, see the following procedure:1.

Chapter 9: Link Aggregation Control Protocol (LACP)1185. Select the Load Balance Method. Choose from the following: Src MAC— Source MAC address as th

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide119Deleting an LACP TrunkTo delete an LACP trunk, do the following:1. Hover the cursor over

Figures12Figure 51: VLANs Page ...

Chapter 9: Link Aggregation Control Protocol (LACP)120

121Chapter 10Setting Static Port TrunksStatic port trunks are groups of two to eight ports that act as single virtual links between the switch and oth

Chapter 10: Setting Static Port Trunks122OverviewStatic port trunks are commonly used to improve network performance by increasing the available bandw

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide123Displaying Static Trunk SettingsTo display the static port trunks for all of the switch

Chapter 10: Setting Static Port Trunks124Dst MAC: Destination MAC address is the load distribution method.Src-Dst MAC: Source address and destination

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide125Adding Static Trunks Review the following information before creating a new static port

Chapter 10: Setting Static Port Trunks126Figure 49. Add Static Trunk Page5. Assign an ID number of a new static trunk in the Trunk ID field. The range

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide127Modifying the Static Trunk SettingsReview the following information if you are adding po

Chapter 10: Setting Static Port Trunks1285. Change the Load Balance Method as needed. You can assign different load distribution methods to different

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide129Deleting Static TrunksTo delete a static port trunk, do the following:1. Hover the curso

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide13Figure 111: Traffic Classifiers Page...

Chapter 10: Setting Static Port Trunks130

131Chapter 11Setting Port-based and Tagged VLANsThis chapter provides a brief description of VLANs and explains how to display, create, and modify por

Chapter 11: Setting Port-based and Tagged VLANs132OverviewA VLAN is a group of ports that form a logical Ethernet segment on an Ethernet switch. The p

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide133The VLAN information within an Ethernet frame is referred to as a tag or tagged header.

Chapter 11: Setting Port-based and Tagged VLANs134Displaying VLANsTo display the VLAN assignments for all of the switch ports, do the following:1. Hov

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide135Adding a VLANTo create a VLAN, do the following:1. Hover the cursor over the Switching t

Chapter 11: Setting Port-based and Tagged VLANs136switch. For example, if you are creating a VLAN called Sales with a VID of 3 that spans three switch

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide137Modifying VLANsTo modify the VLAN settings, see the following procedure:CautionModifying

Chapter 11: Setting Port-based and Tagged VLANs1384. Change the following fields as needed: VLAN Name— Change the name of a VLAN. The name can be fro

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide139Assigning a Native VLANA VLAN can be assigned to a tagged port so that untagged ingress

Figures14

Chapter 11: Setting Port-based and Tagged VLANs1405. Change the following fields as needed: VLAN Interface— Select a VLAN ID from the pull-down menu.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide141Removing an Untagged Port from a VLANBy default, all the ports on the switch belong to t

Chapter 11: Setting Port-based and Tagged VLANs142Deleting VLANsCautionDeleting VLANs that active ports belong to may cause loss of connectivity to th

143Chapter 12Spanning Tree Protocols on the SwitchThis chapter provides a brief description of both the Spanning Tree Protocol (STP) and the Rapid Spa

Chapter 12: Spanning Tree Protocols on the Switch144OverviewBoth STP and RSTP guard against the formation of loops in an Ethernet network topology. A

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide145Displaying and Modifying Spanning Tree Protocol Settings on the SwitchTo display and mod

Chapter 12: Spanning Tree Protocols on the Switch146NoteIf you try to select MSTP from the menu, a message will appear indicating that MSTP can only b

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide147 Hello Time— Enter the hello time in seconds. The hello time is the frequency that the

Chapter 12: Spanning Tree Protocols on the Switch148

149Chapter 13Internet Group Management Protocol (IGMP) SnoopingThis chapter provides a brief description of IGMP Snooping and explains how to set this

15PrefaceThis is the web interface user’s guide for the AT-FS970M Series of Fast Ethernet switches. The instructions in this guide explain how to star

Chapter 13: Internet Group Management Protocol (IGMP) Snooping150OverviewIGMP snooping allows the switch to control the flow of multicast packets from

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide151Displaying and Modifying IGMP Snooping ConfigurationTo display and modify the IGMP Confi

Chapter 13: Internet Group Management Protocol (IGMP) Snooping152Figure 57. IGMP Snooping Page with Configuration Tab3. Change the following settings

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide153Auto: The switch automatically detect ports that are connected to multicast routers. Man

Chapter 13: Internet Group Management Protocol (IGMP) Snooping154Disabling IGMP SnoopingTo disable the IGMP Configuration on the switch, do the follow

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide155Displaying the Routers ListTo display the IGMP Routers List, do the following:1. Hover t

Chapter 13: Internet Group Management Protocol (IGMP) Snooping156Clearing the Routers ListTo clear the group membership on the IGMP Routers List, do t

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide157Displaying the Hosts ListTo display the IGMP Hosts List, do the following:1. Hover the c

Chapter 13: Internet Group Management Protocol (IGMP) Snooping158

159Chapter 14IGMP Snooping QuerierThis chapter provides a brief description of IGMP Snooping Querier and explains how to set this feature on the switc

16Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.CautionCautions inform you that performing

Chapter 14: IGMP Snooping Querier160OverviewMulticast routers are an essential part of IP multicasting. They send out queries to the network nodes to

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide161Figure 60. IGMP Snooping Querier with One QuerierTable 3 lists the switch settings that

Chapter 14: IGMP Snooping Querier162with the second lowest IP address is made the standby querier, again by switch 2. In the case where there are thre

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide163Table 4 lists the switch settings that are illustrated in Figure 61 on page 162.Table 4.

Chapter 14: IGMP Snooping Querier164GuidelinesThe guidelines for IGMP snooping querier are listed here: The network can have only one LAN. The netwo

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide165Displaying IGMP Snooping QuerierTo display an IGMP Snooping Querier list, do the followi

Chapter 14: IGMP Snooping Querier166 Query Interval— Time interval in seconds at which IGMP General Query messages are transmitted.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide167Modifying IGMP Snooping Query IntervalTo modify the value of Query interval, do the foll

Chapter 14: IGMP Snooping Querier168

169Chapter 15Power Over Ethernet (PoE)This chapter provides brief descriptions of PoE and explains how to change the configuration of a port on the Po

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide17Where to Find Web-based GuidesThe installation and user guides for all of the Allied Tele

Chapter 15: Power Over Ethernet (PoE)170OverviewThe AT-FS970M/8PS, AT-FS970M/8PS-E, AT-FS970M/24PS, and AT-FS970M/48PS switches feature Power over Eth

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide171power supplies and can be operated using either one power supply or both power supplies.

Chapter 15: Power Over Ethernet (PoE)172Displaying PoE Port SettingsTo display a list of the PoE port settings, do the following:NoteThe PoE pull-down

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide173Figure 66. PoE Port List PageThe following fields are displayed: Status— Enable or disa

Chapter 15: Power Over Ethernet (PoE)174 Power Status— Indicates if a powered device that is connected to the port is powered on or off. When powered

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide175Modifying PoE Settings GloballyTo modify PoE settings on the switch, do the following:1.

Chapter 15: Power Over Ethernet (PoE)176Modifying PoE Settings on a PortTo display a list of the IPv4 interfaces, do the following:1. Hover the cursor

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide177 PoE Device Description— Enter the description of the PoE device that is connected to t

Chapter 15: Power Over Ethernet (PoE)178

179Chapter 16MAC Address-based Port Security This chapter provides a brief description of MAC address-based port security and explains how to set this

18Contacting Allied TelesisIf you need assistance with this product, you may contact Allied Telesis technical support by going to the Support & Se

Chapter 16: MAC Address-based Port Security180OverviewThis feature lets you control access to the ports on the switch based on the source MAC addresse

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide181Guidelines Here are the guidelines to MAC address-based port security: The filtering of

Chapter 16: MAC Address-based Port Security182Displaying MAC Address-based Port Security SettingsTo display the MAC address-based port security settin

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide183Yes: Saves the source MAC addresses as dynamic addresses in the MAC address table. No: S

Chapter 16: MAC Address-based Port Security184Modifying MAC Address-based Port Security SettingsTo the modify the MAC address-based port security sett

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide1854. Change the following settings as needed: Interface— Indicates the port number. You c

Chapter 16: MAC Address-based Port Security186Disabling MAC Address-based Port Security SettingsTo deactivate MAC address-based port security settings

187Chapter 17RADIUS and TACACS+ ClientsThis chapter provides a brief description of both the RADIUS and TACACS+ clients and explains how to configure

Chapter 17: RADIUS and TACACS+ Clients188OverviewThe switch has RADIUS and TACACS+ clients for remote authentication. Here are the features that use r

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide189The following steps illustrate the authentication process that occurs between the switch

19Chapter 1AT-FS970M Series Version 2.3.1.0 Web Browser InterfaceThis chapter describes the types of management sessions using the AT-FS970M Series ma

Chapter 17: RADIUS and TACACS+ Clients190When you delete Server 1, the server with an IP address of 192.168.10.12 remains Server 2; the server with an

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide191Configuring RADIUS for Remote Manager AuthenticationTo configure remote manager authenti

Chapter 17: RADIUS and TACACS+ Clients192authentication request, before querying the next server in the list. The range is 1 to 1,000 seconds. The def

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide193 AAA Accounting— Select a RADIUS accounting setting. Choose from the following:Start-St

Chapter 17: RADIUS and TACACS+ Clients194 Authentication Port— Specify the UDP destination port for RADIUS authentication requests. If you select 0,

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide195Configuring TACACS+ for Remote Manager AuthenticationTo configure remote manager authent

Chapter 17: RADIUS and TACACS+ Clients196Figure 73. Authentication Server Configuration Page with TACACS+ Tab4. Change the following as needed: Timeo

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide197 TACACS+ Authentication Login— Enable or disable TACACS+ to authenticate user login. Ch

Chapter 17: RADIUS and TACACS+ Clients198authentication is attempted using the password specified using the ENABLE PASSWORD command in the CLI. Disabl

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide1992. Enter the following settings: IP Address— Enter the IP address of the TACACS+ server

CopyrightCopyright © 2014, Allied Telesis, Inc.All rights reserved.This product includes software licensed under the BSD License. As such, the followi

Chapter 1: AT-FS970M Series Version 2.3.1.0 Web Browser Interface20Management SessionsThe AT-FS970M Series switches provide two management interfaces:

Chapter 17: RADIUS and TACACS+ Clients200Deleting an Authentication ServerTo delete either an TACACS+ or RADIUS authentication server, do the followin

201Chapter 18802.1x Port-based Network AccessThis chapter provides a brief description of the 802.1x Port-based Authentication feature and explains ho

Chapter 18: 802.1x Port-based Network Access202OverviewThe 802.1x port-based network access control feature lets you control who can send traffic thro

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide203 Authenticator Role:The authenticator role activates port access control on a port. Por

Chapter 18: 802.1x Port-based Network Access204 Multiple host modeThis mode permits multiple supplicants on an authenticator port. An authenticator h

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide205An example of this authenticator operating mode is illustrated in Figure 78. The supplic

Chapter 18: 802.1x Port-based Network Access206Guest VLAN An authenticator port in the unauthorized state typically accepts and transmits only 802.1x

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide207Enabling 802.1x Port-based Authentication on the SwitchTo enable the 802.1x port-based A

Chapter 18: 802.1x Port-based Network Access208Configuring 802.1x Port-based Authentication To set 802.1x port authentication on a port, do the follow

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide209Figure 81. Modify 802.1x Authentication Page Expanded5. Modify the following fields as n

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide21Web Manager AccountsYou must log on to manage the switch. This requires a valid username

Chapter 18: 802.1x Port-based Network Access210 Authentication Mode— Select the authentication mode. Choose from the following:Unauthorized: Sets the

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide211times the switch retransmits EAP Request packets to a supplicant before it times out an

Chapter 18: 802.1x Port-based Network Access212automatically sends it as the supplicant’s username and password to the authentication server. This aut

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide213Disabling 802.1x Port-based Authentication on the SwitchTo disable the 802.1x port-based

Chapter 18: 802.1x Port-based Network Access214Disabling 802.1x Port-based Authentication on a PortTo disable 802.1x port authentication on a port, do

215Chapter 19Setting IPv4 and IPv6 AddressesThis chapter provides brief descriptions of management IPv4 and IPv6 addresses and explains how to specify

Chapter 19: Setting IPv4 and IPv6 Addresses216OverviewThe management IP address is an IP address that the switch uses to identify itself to other netw

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide217IP ManagementGuidelinesSee the following list for guidelines about assigning a managemen

Chapter 19: Setting IPv4 and IPv6 Addresses218Displaying IPv4 InterfacesTo display a list of the IPv4 interfaces, do the following:1. Hover the cursor

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide219Adding an IPv4 AddressTo assign an IPv4 address, do the following:1. Hover the cursor ov

Chapter 1: AT-FS970M Series Version 2.3.1.0 Web Browser Interface22

Chapter 19: Setting IPv4 and IPv6 Addresses220Changing an IPv4 AddressTo display a list of the IPv4 interfaces, do the following:1. Hover the cursor o

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide221NoteIf you change the IP address that you use to access the web interface, you lose the

Chapter 19: Setting IPv4 and IPv6 Addresses222Deleting an IPv4 AddressTo delete an IPv4 address, do the following:1. Hover the cursor over the Layer 3

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide223Displaying the IPv6 InterfaceTo display a list of the IPv6 interface, do the following:1

Chapter 19: Setting IPv4 and IPv6 Addresses224The following fields are displayed: Interface Name— VLAN number that the management IPv6 address is ass

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide225Adding an IPv6 AddressThe switch supports only one IPv6 address. As a result, you can ad

Chapter 19: Setting IPv4 and IPv6 Addresses2265. Enter an IPv6 address in the IP Address field in the following format: nnnn:nnnn:nnnn:nnnn:nnnn:nnnn:

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide227Changing IPv6 AddressesTo edit the management IPv6 interface, do the following:1. Hover

Chapter 19: Setting IPv4 and IPv6 Addresses2285. Click Apply.6. Click SAVE to save your changes to the startup configuration file.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide229Deleting IPv6 AddressesTo delete an IPv6 address, do the following:1. Hover the cursor o

23Chapter 2Starting a Management SessionThis chapter describes how to start a management session using the AlliedWare Plus™ web interface as well as h

Chapter 19: Setting IPv4 and IPv6 Addresses230

231Chapter 20Access Control Lists (ACL)This chapter provides a brief description of the Access Control Lists (ACL) feature and explains how to use the

Chapter 20: Access Control Lists (ACL)232OverviewAccess Control Lists (ACLs) act as filters to control the ingress packets on ports. They are commonly

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide233 Source and destination UDP ports VLAN IDsIPv4 Address andMaskThe mask of an IPv4 addr

Chapter 20: Access Control Lists (ACL)234Guidelines Here are the ACL guidelines: An ACL can have a permit, deny, or copy-to-mirror action. The permit

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide235Creating an ACL To create an ACL, do the following:1. Hover the cursor over the ACLs &am

Chapter 20: Access Control Lists (ACL)236Figure 93. Traffic Classification Page4. Enter and select the following fields as needed: Classifier #— Ente

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide237from the menu. The menu for Mirror to Port is displayed, as shown in Figure 94. Figure 9

Chapter 20: Access Control Lists (ACL)238MAC Address and mask: Select MAC, then enter a MAC source address followed by a slash (/) and a mask if you a

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide239Assigning an ACL to PortsBefore assigning ACLs to ports, ACLs must be available on the s

Chapter 2: Starting a Management Session24Non-secure HTTP and Secure HTTPS ModesThe switch has a web server so that you can remotely manage the switch

Chapter 20: Access Control Lists (ACL)240Figure 96. Traffic Classifiers Page from Policies/ACLs Page4. Click a radio button to select an ACL.5. Check

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide241Displaying a List of ACLsTo display a list of ACLs, do the following:1. Hover the cursor

Chapter 20: Access Control Lists (ACL)242

243Chapter 21Setting Static RoutesTo make remote networks communicate, you must add static routes or dynamic routes, or both, to the routing table. St

Chapter 21: Setting Static Routes244Displaying Static RoutesTo display the static routes, do the following:1. Hover the cursor over the Layer 3 tab.Th

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide245Adding a Static RouteTo add a static route, do the following:1. Hover the cursor over th

Chapter 21: Setting Static Routes2468. Click Apply.9. Click SAVE.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide247Deleting a Static RouteTo delete a static route entry, do the following:1. Hover the cur

Chapter 21: Setting Static Routes248Displaying the Routing TableThe routing table includes static routes and dynamic routes. The switch decides which

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide249 Protocol— How this route is established.“Static” indicates that the route was added st

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide25Starting the Initial Web Management SessionThis section explains how to start a managemen

Chapter 21: Setting Static Routes250

251Chapter 22Quality of Service (QoS)This chapter provides a brief description of the QoS feature and explains how to use the feature on the switch.Se

Chapter 22: Quality of Service (QoS)252OverviewQuality of Service (QoS) is a feature that classifies and prioritizes traffic to guarantee a certain le

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide253Filtering Criteria QoS policies identify packets using filtering criteria. The AT-FS970M

Chapter 22: Quality of Service (QoS)254value. The mark CoS action causes a port to change the CoS value of all ingress packets that match the filterin

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide255Creating a QoS PolicyTo create a QoS policy, do the following:1. Hover the cursor over t

Chapter 22: Quality of Service (QoS)256Figure 105. Traffic Classification Page4. Enter and select the following fields as needed: Classifier #— Enter

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide257 Actions— Click a radio button to select an action from the following options:Priority

Chapter 22: Quality of Service (QoS)258Figure 108. Text Box for CoSNoteThe action options of Deny, Permit, and Mirror are for the Access Control List

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide259MAC Address and mask: Enter a MAC source address followed by a slash (/) and a mask if y

Chapter 2: Starting a Management Session263. Open a web browser on the PC and enter the following:http://169.254.1.1The AT-FS970M Login page is displa

Chapter 22: Quality of Service (QoS)260Assigning a QoS Policy to PortsBefore assigning QoS policies to ports, QoS policies must be available on the sw

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide261Figure 110. Traffic Classifier Page4. Click a radio button to select a QoS policy.5. Che

Chapter 22: Quality of Service (QoS)262Displaying a List of QoS PoliciesTo display a list of QoS policies, do the following:1. Hover the cursor over t

263Chapter 23Setting Dynamic Routes Using RIPThe chapter provides a brief description of the RIP feature and explains how to display the RIP settings,

Chapter 23: Setting Dynamic Routes Using RIP264OverviewTo make remote networks communicate, you must add either static routes, dynamic routes, or both

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide265Displaying the RIP ConfigurationTo check how the RIP is configured on the switch, do the

Chapter 23: Setting Dynamic Routes Using RIP266 Authentication Type— Authentication mode for the VLAN interface. Authentication Key— Authentication

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide267Enabling RIP on a VLAN InterfaceTo enable RIP and connect remote networks dynamically, y

Chapter 23: Setting Dynamic Routes Using RIP268Figure 115. RIP Interface Page3. Specify the following fields as needed: IP Interface— Select the VLAN

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide269NoteThere is another way to go to the RIP Interface page to enable RIP on a VLAN interfa

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide27Logging onto the SwitchOnce you start the web interface, the AT-FS970M Login page is disp

Chapter 23: Setting Dynamic Routes Using RIP270Changing the RIP SettingsTo change the RIP settings of the VLAN interface, perform the following:1. Hov

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide271Removing a VLAN Interface from the RIP ConfigurationTo remove a VLAN interface from the

Chapter 23: Setting Dynamic Routes Using RIP272Displaying RIP StatisticsTo display counters for RIP packets on the switch, do the following:1. Hover t

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide273 inRequests— Number of request packets received. inDiscards— Number of packets discard

Chapter 23: Setting Dynamic Routes Using RIP274Reloading RIP StatisticsRIP statistics are constantly counting up so that the data that has been displa

275Chapter 24Managing the ARP TableThe procedures in this chapter describe how to display the ARP table that resides on the switch, how to add static

Chapter 24: Managing the ARP Table276OverviewThe Address Resolution Protocol (ARP) is used to associate an IPv4 address with a MAC address used by net

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide277Displaying the ARP TableTo display the ARP table, do the following:1. Hover the cursor o

Chapter 24: Managing the ARP Table278Adding a Static ARP EntryTo add a static ARP entry, do the following:1. Hover the cursor over the Layer 3 tab.The

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide2796. Click SAVE to save your changes to the startup configuration file.

Chapter 2: Starting a Management Session28Figure 3. Dashboard PageThe following fields are displayed: Up Time— Length of time since the switch was la

Chapter 24: Managing the ARP Table280Deleting ARP EntriesTo delete a static ARP entry, do the following:1. Hover the cursor over the Layer 3 tab.The L

281Chapter 25LLDP and LLDP-MEDThis chapter provides a brief description of the Link Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol

Chapter 25: LLDP and LLDP-MED282OverviewLink Layer Discovery Protocol (LLDP) and Link Layer Discovery Protocol for Media Endpoint Devices (LLDP-MED) a

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide283 Optional LLDP-MED TLVs:You can select LLDP-MED TLVs that are included in an LLDPDU. Th

Chapter 25: LLDP and LLDP-MED284Enabling and Configuring LLDP on the SwitchTo enable LLDP and set the basic LLDP configuration on the switch, do the f

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide285Figure 123. LLDP Configuration Page4. Change the following fields as needed: Status— To

Chapter 25: LLDP and LLDP-MED286 Holdtime Multiplier— Enter a holdtime multiplier value. The transmit interval is multiplied by the holdtime multipli

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide287Disabling LLDP on the SwitchTo disable the LLDP feature on a switch, do the following:1.

Chapter 25: LLDP and LLDP-MED288Configuring LLDP on a Port To assign LLDP to a port, do the following:1. Hover the cursor over the Discovery & Mon

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide289Figure 125. Modify LLDP Port Configuration Page4. Change the settings as needed: Interf

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide29 System Name— Name of the switch. To specify this field, see “Setting the Switch Informa

Chapter 25: LLDP and LLDP-MED290Selecting LLDP TLVs on a PortTo enable LLDP TLV, do the following:1. Hover the cursor over the Discovery & Monitor

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide291Figure 127. LLDP TLV Page5. Click Edit next to the port that you want to modify.The Modi

Chapter 25: LLDP and LLDP-MED292Figure 128. Modify LLDP TLV Page6. Change the settings as needed: Interface— Indicates the port ID. Port Description

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide293 Management Address— Check the checkbox to select the IP address of the local LLDP agen

Chapter 25: LLDP and LLDP-MED294Setting a Location Entry for the LLDP-MED Location TLVYou can define location information about a network device as an

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide295Figure 129. Locations Tab4. From the Locations tab drop-down menu, move the cursor to th

Chapter 25: LLDP and LLDP-MED2965. Click Add.The Add LLDP Civic Location Page is displayed. See Figure 131.Figure 131. LLDP Civic Location Page— Add6.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide297 ID— Enter an LLDP Civic Location ID. The range is 1 to 256. (This range is separate fr

Chapter 25: LLDP and LLDP-MED298 Additional Code— 1234 Seat— cube-411a Primary Road Name— Zanker Road Section— North Branch Road Name— State-Lane

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide299The LLDP Coordinate Location page is displayed. See Figure 133.Figure 133. LLDP Coordina

Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public License (GPL) and will make all r

Chapter 2: Starting a Management Session30What to Configure FirstHere are a few suggestions on what to configure during your initial management sessio

Chapter 25: LLDP and LLDP-MED300 Altitude Type— Choose between meters and floors.  Altitude Resolution— Enter altitude resolution as the number of v

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide301The LLDP ELIN Location page is displayed. See Figure 135.Figure 135. LLDP ELIN Location

Chapter 25: LLDP and LLDP-MED302Assigning LLDP Locations to a PortUse a Civic, Coordinate, or ELIN location ID port location to assign to a port. You

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide303Figure 137. Modify LLDP Port Location Page4. Select values in the fields as needed: Int

Chapter 25: LLDP and LLDP-MED304Selecting LLDP-MED TLVs on a PortTo enable LLDP-MED TLV, do the following:1. Hover the cursor over the Discovery &

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide305Figure 139. Modify LLDP-MED TLV Page5. Change the fields as needed: Interface— Indicate

Chapter 25: LLDP and LLDP-MED306 Inventory-management— Check the checkbox to select the current hardware and the software information to be included

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide307Displaying LLDP Neighbor InformationTo display LLDP Statistical information, do the foll

Chapter 25: LLDP and LLDP-MED308C = Cable DeviceS = Station only Med Device class and Power Source code— Indicates whether or not the MED device Clas

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide309Displaying LLDP StatisticsTo display LLDP Statistics, do the following:1. Hover the curs

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide31 The management IPv4 address can be any IPv4 address assigned on the switch. The switch

Chapter 25: LLDP and LLDP-MED310 New Entries— Number of times the information advertised by neighbors has been inserted into the neighbor table.  De

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide311Displaying Location EntriesTo display the LLDP Civic, Coordinate, and ELIN locations, us

Chapter 25: LLDP and LLDP-MED312 House Number House Number Suffix Landmark Additional Information Name Postal Code Building Unit Floor Room

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide313The following fields are displayed: ID— LLDP Coordinate Location ID. Latitude— Latitud

Chapter 25: LLDP and LLDP-MED314Displaying LLDP and LLDP-MED SettingsTo display the LLDP and LLDP-MED settings, use the following procedures: “Displa

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide315 Notification Interval— Notification interval. This is the minimum interval between LLD

Chapter 25: LLDP and LLDP-MED316Displaying PortLocationsTo display the LLDP port locations, do the following:1. Hover the cursor over the Discovery &a

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide317 System Capabilities— Device’s router and bridge functions, and whether or not these fu

Chapter 25: LLDP and LLDP-MED318DisplayingLLDP-MED TLVTo display LLDP-MED TLV settings, do the following:1. Hover the cursor over the Discovery &

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide319- Model Name- Asset ID

Chapter 2: Starting a Management Session32Starting a Web Management SessionThis section provides how to start a web management session when the switch

Chapter 25: LLDP and LLDP-MED320

321Chapter 26sFlowThis chapter provides a brief description of the sFlow feature and explains how to enable this feature on the switch.See the followi

Chapter 26: sFlow322OverviewThe sFlow agent allows the switch to gather data about the traffic on the ports and to send the data to sFlow collectors o

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide323To configure the agent to forward these port statistics to the collectors, you have to s

Chapter 26: sFlow324Specifying an sFlow CollectorUse this procedure to specify the IP address and the UDP port of an sFlow collector on your network.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide325The sFlow page is displayed with the Collector Tab selected. See Figure 145.Figure 145.

Chapter 26: sFlow326 IP Address— IPv4 address of the sFlow collector on your network. Enter the IPv4 address in the following format:xxx.xxx.xxx.xxxw

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide327Configuring sFlow on a PortTo configure the sFlow feature on a port, do the following:1.

Chapter 26: sFlow328The sFlow Port Modify page is displayed. See Figure 147.Figure 147. sFlow Port Modify Page4. Change the following fields as needed

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide329Enabling sFlow on the SwitchBefore enabling the sFlow feature on the switch, you must co

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide33When the SwitchDoes Not Displaythe Login PageWhen the switch does not display the web int

Chapter 26: sFlow330Displaying the sFlow SettingsTo display the sFlow settings, do the following:1. Hover the cursor over the Discovery & Monitori

Chapter 2: Starting a Management Session34The local management session is started when the AlliedWare Plus™ command line prompt is displayed as shown

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide35Figure 6. Displaying the Status of HTTP ServiceTo check whether HTTPS service is enabled,

Chapter 2: Starting a Management Session36Saving yourChanges in theCLISave your changes to the startup configuration file by entering the following co

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide37Saving Your ChangesThe changes you have made are temporarily stored in the running config

Chapter 2: Starting a Management Session38Ending a Web Management SessionTo end a web management session, select LOGOUT at the top of the web page. Fo

39Chapter 3Basic Switch ParametersThis chapter describes how to set up basic switch operations. See the following sections: “Setting the System Date

Chapter 3: Basic Switch Parameters40Setting the System Date and TimeThis procedure explains how to set the switch’s date and time. Setting the date an

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide41Figure 9. System Settings Tab3. From the System tab, hover over System Settings.4. Move t

Chapter 3: Basic Switch Parameters42Figure 11. System Time Settings Page with Network Time Settings Tab6. To configure the switch to obtain its date a

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide43NoteThe switch does not set daylight saving time (DST) automatically. If the switch is in

Chapter 3: Basic Switch Parameters44Figure 12. Calendar Pagea. Use the arrows at the top of the Calendar to select the month and year.b. Set the time

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide45Configuring a Telnet or SSH ServerThe AT-FS970M web browser interface allows you to confi

Chapter 3: Basic Switch Parameters46NoteBoth the Remote Log and Server IP Address fields are used only to set a remote log server. For information on

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide47Configuring a Remote Log ServerYou can use the AT-FS970M web browser interface to enable

Chapter 3: Basic Switch Parameters48Setting the Switch InformationThis procedure allows you to set information about the switch, such as a switch name

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide49Specify the following fields as necessary: System Name— Enter a name for the switch, for

5ContentsPreface ...

Chapter 3: Basic Switch Parameters50Managing the Configuration FileWithin the web browser interface, you can upload a configuration file onto the swit

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide51 Last Modify— Date the configuration file was last modified. The format is year, month,

Chapter 3: Basic Switch Parameters52Managing Local User AccountsThe switch comes with one local manager account. The account, which has the username “

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide533. Add a new user by doing the following: User Name— Enter a new logon name for the new

Chapter 3: Basic Switch Parameters54Figure 18. User Management Page with Change Password Tab4. Use the pull-down menu next to the User Name field to s

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide55Figure 19. User Management Page with Change Privilege Tab4. Use the pull-down menu next t

Chapter 3: Basic Switch Parameters56Figure 20. User Management Page with Delete User Tab4. Use the pull-down menu to select a user.5. Click Delete Use

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide57Rebooting a SwitchResetting the switch ends your web browser management session. To conti

Chapter 3: Basic Switch Parameters58Upgrading the SoftwareThe latest version of the AlliedWare Plus™ Management Software is available from the Allied

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide594. Enter your email address and password, then click the Sign In button.NoteIf you do not

Contents6Changing the User Privilege...

Chapter 3: Basic Switch Parameters60NoteUpgrading the system software on the switch ends your current web browser management session. To continue mana

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide61Displaying System InformationTo view basic information about the switch, select the Syste

Chapter 3: Basic Switch Parameters62 IGMP Snooping Querier— Indicates if IGMP Snooping Querier is enabled or disabled on the switch.The Administratio

63Chapter 4Setting Port ParametersThis chapter describes how to display and modify the port settings such as back pressure and flow control. In additi

Chapter 4: Setting Port Parameters64Port Numbers on the SwitchThe ports on the switch are identified in the format shown in Figure 23.Figure 23. Port

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide65Displaying the Port ParametersTo display the settings for all of the switch ports, do the

Chapter 4: Setting Port Parameters66 Type— Transmission speed and medium, copper or fiber optic, of the port. For example, 1000Base-SX indicates that

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide67Changing the Port SettingsYou can change the settings of one port at a time. Use the foll

Chapter 4: Setting Port Parameters68Figure 26. Port Configuration Modify Page5. Specify the following fields as needed: Interface— Indicates the port

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide69cannot select them. To change the Configure Speed and Configure Duplex fields, change the

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide7Port VLAN Identifier ...

Chapter 4: Setting Port Parameters70A cell represents 128 bytes. The range is 1 to 7935 cells. The default value is 7935 cells. Flow Control Status—

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide71Displaying the Storm Control SettingsTo display the storm control settings, do the follow

Chapter 4: Setting Port Parameters72Multicast packets that exceed the threshold are discarded by the port. The range is 0 to 33,554,431 packets. The d

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide73Modifying the Storm Control SettingsTo modify the storm control settings, do the followin

Chapter 4: Setting Port Parameters745. Change the following fields as needed: Broadcast— Enable or disable the broadcast storm control feature. When

75Chapter 5Setting Port StatisticsThis chapter describes how to display and clear port statistics. Within the AlliedWare Plus™ software, you can displ

Chapter 5: Setting Port Statistics76Displaying Port StatisticsYou can display several types of port statistics. See the following sections: “Displayi

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide77The following fields are displayed: Interface— Port ID. 0-64 Byte Frames— Number of fra

Chapter 5: Setting Port Statistics78Figure 30. Port Statistics with the Receive TabThe following fields are displayed: Interface— Port ID. Total Byt

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide79 Undersize Frames— Number of received frames that were less than the minimum length as s

Contents8Adding a RADIUS Server ...

Chapter 5: Setting Port Statistics80 Total Frames— Number of transmitted frames.  Total Error Frames— Number of transmitted frames with errors. Mul

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide81Figure 32. Port Statistics Page with Interface TabThe following fields are displayed: In

Chapter 5: Setting Port Statistics82Clearing Port StatisticsTo clear the statistics for a port, do the following:1. Hover the cursor over the Switchin

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide83Reloading StatisticsPort statistics are constantly counting, and the values are changing

Chapter 5: Setting Port Statistics84

Chapter 6Port MirroringThe port mirror is a management tool that allows you to monitor the traffic on one or more ports on the switch. It works by cop

Chapter 6: Port Mirroring86OverviewTo use the port mirroring feature, you must designate one or more source ports and one destination port. The source

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide87Displaying Port Mirroring SettingsTo display the port mirroring assignments for all of th

Chapter 6: Port Mirroring88Assigning a Destination PortThe destination port is the source port where the packets are copied. You can only assign one d

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide89Specifying Direction TypeTo specify source ports and type of packet direction, do the fol

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide9Assigning a QoS Policy to Ports...

Chapter 6: Port Mirroring906. Click Apply.7. Click SAVE to save your changes to the startup configuration file.

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide91Deleting Port Mirroring SettingsTo delete the existing port mirroring settings, assign th

Chapter 6: Port Mirroring92

93Chapter 7Spanning Tree Protocol on a PortThe Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP) guard against the formation of loo

Chapter 7: Spanning Tree Protocol on a Port94OverviewSTP and RSTP prevent loops from forming by ensuring that only one path is available at a time bet

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide95Displaying Port Spanning Tree Protocol SettingsTo display the Spanning Tree Protocol sett

Chapter 7: Spanning Tree Protocol on a Port96 Version— Spanning Tree Protocol version: STP, RSTP, or MSTP. The default setting is RSTP. Portfast— In

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide97Modifying Port Spanning Tree Protocol SettingsTo modify port settings for Spanning Tree P

Chapter 7: Spanning Tree Protocol on a Port98 Version— Indicates the Spanning Tree Protocol version. The default setting is RSTP. Configured Path Co

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide99 Link Type— Choose from the following settings: AUTO: The switch determines the link typ