Menus user’s guide for stand-alone at-9400 switches version 2.2.0 for at-9400 layer 2+ switches version 3.2.0 for at-9400 basic layer 3 switches (668 pages)
Management software for at-8012m, at-8012m-qs, at-8016f/xx (mt, sc and st), at-8024, at-8024gb, at-8024m, at-8026fc, at-8026t, and at-8088/xx (mt and sc) fast ethernet switches version 3.3.0 (343 pages)
At-s94 management software cli user's guide for at-8000s series switches (403 pages)
Summary of Contents for Allied Telesis AT-S79
Page 1
Management Software AT-S79 User’s Guide For use with the AT-GS950/16 and AT-GS950/24 Gigabit Ethernet Smart Switches Version 2.0.0 613-000207 Rev. C...
Page 2
Copyright 2008 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc. Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Incorporated. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners.
Viewing Switch Information ..........................45 Rebooting the Switch............................48 Pinging a Remote System ..........................50 Returning the AT-S79 Management Software to the Factory Default Values ..........53 Displaying Statistics............................55 Displaying Port Statistics..........................55 Chapter 4: Port Configuration ........................59 Displaying the Port Parameters........................
Page 4
Contents Creating a Port Trunk............................70 Modifying a Port Trunk ............................73 Enabling and Disabling a Port Trunk ........................ 74 Chapter 6: IGMP Snooping ........................... 75 IGMP Snooping Overview..........................76 Configuring IGMP Snooping ..........................78 Enabling or Disabling IGMP Snooping ....................... 78 Setting the Age-out Timer...........................
Page 5
AT-S79 Management Software User’s Guide Trap Receivers............................125 Default SNMP Community Strings ......................... 127 Creating an SNMP Community ........................128 Adding an SNMP Community ........................128 Deleting an SNMP Community ........................ 130 Modifying an SNMP Community ......................131 Creating an SNMP Host ..........................133 Adding an SNMP Host ..........................
Page 6
Viewing System Information ...........................238 Rebooting a Switch ............................241 Pinging a Remote System ..........................243 Returning the AT-S79 Management Software to the Factory Default Values..........245 Chapter 22: Port Configuration ........................247 Viewing and Configuring Ports Using the Port Configuration Page ..............248 Chapter 23: Port Trunking ...........................251 Creating a Port Trunk............................252...
Page 7
AT-S79 Management Software User’s Guide Chapter 27: Destination MAC Address Filter .................... 271 Setting a Destination MAC Filter ........................272 Removing a MAC Address ..........................274 Chapter 28: Bandwidth Control ........................275 Configuring Bandwidth Control........................276 Chapter 29: Virtual LANs ..........................279 Assigning Ports to a VLAN ..........................
Page 9
Figures Figure 1. Connecting the Management Cable to the Console Port ..................28 Figure 2. Login Menu................................29 Figure 3. Main Menu................................29 Figure 4. Basic Switch Configuration Menu.........................34 Figure 5. System IP Configuration Menu..........................35 Figure 6. System Administration Configuration Menu ......................38 Figure 7. User Interface Configuration Menu........................41 Figure 8.
Page 10
Figure 53. Software Upgrade Menu (2 of 2) ........................215 Figure 54. Entering a Switch’s IP Address in the URL Field....................220 Figure 55. AT-S79 Login Dialog Box ..........................221 Figure 56. Switch Information Page for the AT-GS950/24 Switch ..................221 Figure 57. AT-S79 Management Software Front Panel.....................222 Figure 58.
Page 11
Table 3. RSTP Auto-Detect Port Costs ..........................158 Table 4. RSTP Auto-Detect Port Trunk Costs ........................158 Table 5. Port Priority Value Increments ..........................159 Table 6. RSTP Point-to-Point Status ..........................173 Table 7. RSTP Point-to-Point Status ..........................312 Table 8. Traffic Comparison Options ..........................327 Table 9. AT-S79 Default Settings .............................341...
Preface This guide contains instructions on how to use the AT-S79 management software to manage and monitor the AT-GS950/16 and AT-GS950/24 Gigabit Ethernet Smart switches. The AT-S79 management software has two management interfaces: a menus interface and a web browser interface. You access the menus interface through the console port on the switch.
Preface Where to Find Web-based Guides The installation and user guides for all Allied Telesis products are available in portable document format (PDF) on our web site at www.alliedtelesis.com. You can view the documents online or download them onto a local workstation or server. For information about installing the AT-GS950/16 and AT-GS950/24 switches, see AT-GS950/16, AT-GS950/24 Gigabit Ethernet Smart Switches Installation Guide (P/N 613-000190).
AT-S79 Management Software User’s Guide Document Conventions This document uses the following conventions: Note Notes provide additional information. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data. Warning Warnings inform you that performing or omitting a specific action...
Preface Contacting Allied Telesis This section provides Allied Telesis contact information for technical support as well as sales and corporate information. Online Support You can request technical support online by accessing the Allied Telesis Knowledge Base: www.alliedtelesis.com/support. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
Chapter 1 Overview This chapter provides an overview of the AT-S79 management software for the AT-GS950/16 and AT-GS950/24 switches. The chapter describes the different methods for accessing the software and the management access levels. This chapter contains the following sections: “Management Overview”...
Chapter 1: Overview Management Overview The AT-S79 management software allows you to view and adjust the operating parameters of the AT-GS950/16 and AT-GS950/24 Smart Switches. Here are a few examples of the functions that you can perform with the management software: Enable and disable ports Configure a port’s speed and duplex mode...
AT-S79 Management Software User’s Guide Local Management Connection To establish a local management connection with an AT-GS950/16 or AT-GS950/24 Smart Switch, you connect a terminal or a PC with a terminal emulator program to the terminal port on the front of the switch using the management cable included with the unit.
Chapter 1: Overview Remote Management Connection The AT-S79 management software has a web browser interface that you can use to manage an AT-GS950/16 or AT-GS950/24 Smart Switch from any management station on your network that has a web browser application. This is referred to as a remote connection.
AT-S79 Management Software User’s Guide Remote SNMP Management You can also remotely configure the switch using a Simple Network Management (SNMP) application such as AT-View. This management method requires an understanding of Management Information Base (MIB) objects. Note You must assign an IP address to the switch for remote SNMP management.
Chapter 1: Overview Management Access Level The AT-S79 management software has one level of management access: manager. When you log in as a manager, you can view and configure all of a switch’s operating parameters. You log in as a manager by entering the appropriate username and password when you start an AT-S79 management session.
AT-S79 Management Software User’s Guide Ports 15 and 16 on the AT-GS950/16 Switch and Ports 23 and 24 on the AT-GS950/24 Switch This section applies to the twisted pair and optional SFP ports 15 and 16 on the AT-GS950/16 switch and ports 23 and 24 on the AT-GS950/24 switch.
Section I Using the Menus Interface The chapters in this section explain how to manage the switch using the menus interface of the AT-S79 management software. The chapters include: Chapter 2, “Getting Started with the Menus Interface” on page 27 Chapter 3, “Basic Switch Parameters”...
Getting Started with the Menus Interface This chapter provides information and instructions on how to access the menu interface of the AT-S79 Management Software by starting a local management session. This chapter contains the following sections: “Starting a Local Management Session” on page 28 “Using the Menus Interface”...
Chapter 2: Getting Started with the Menus Interface Starting a Local Management Session You establish a local management session with the switch by connecting a terminal or personal computer with a terminal emulation program to the the RS-232 console port on the front panel of the switch. Note You do not need to assign an IP address to the switch to manage the unit from a local management session.
AT-S79 Management Software User’s Guide The Login Menu is shown in Figure 2. ======================================================= AT-GS950/24 Management System Version AT-S79 V2.0.0 Local - Console Allied Telesis International Corp. Copyright 2008 ======================================================= Login Menu Login: Figure 2. Login Menu 4. Enter the manager login name and press Return. The default name is “manager.”...
Chapter 2: Getting Started with the Menus Interface Using the Menus Interface If you are using a DEC VT00 or ANSI (the default) terminal configuration, refer to Table 1 for instructions on how to move through the menus and select menu options. Table 1.
AT-S79 Management Software User’s Guide Quitting from a Local Management Session To quit a local management session, return to the Main Menu and type Q for Quit. When you are finished managing the switch, make sure you exit from a management session. Quitting from a local session prevents unauthorized changes to the switch’s configuration if you leave your...
Page 32
Chapter 2: Getting Started with the Menus Interface Section I: Using the Menus Interface...
“Viewing Switch Information” on page 45 “Rebooting the Switch” on page 48 “Pinging a Remote System” on page 50 “Returning the AT-S79 Management Software to the Factory Default Values” on page 53 “Displaying Statistics” on page 55 Section I: Using the Menus Interface...
Chapter 3: Basic Switch Parameters Configuring the IP Address, Subnet Mask, and Gateway Address This procedure explains how to manually assign an IP address, subnet mask, and gateway address to the switch. Before performing the procedure, note the following: An IP address and subnet mask are not required for normal network operations of the switch.
AT-S79 Management Software User’s Guide 2. From the Basic Switch Configuration Menu, type I to select System IP Configuration. The System IP Configuration Menu is shown in Figure 5. Basic Switch Configuration -> System IP Configuration Menu MAC Address: 00:06:5H:B2:65:84 IP Address: 0.0.0.0...
Page 36
Chapter 3: Basic Switch Parameters 4. To set the switch’s subnet mask, do the following: a. Type M to select Set Subnet Mask. The following prompt is displayed: Enter new subnet mask> b. Type the subnet mask for the switch and press Enter. 5.
AT-S79 Management Software User’s Guide Enabling and Disabling the DHCP Client This procedure explains how to activate and deactivate the DHCP client on the switch. When the client is activated, the switch obtains its IP configuration, such as its IP address and subnet mask, from a DHCP server on your network.
Chapter 3: Basic Switch Parameters Configuring System Administration Information This section explains how to assign a name to the switch, as well as specify the location of the switch and the name of the switch’s administrator. Entering this information is optional. To set a switch’s administration information, perform the following procedure: 1.
Page 39
AT-S79 Management Software User’s Guide b. Type a name for the switch (for example, Sales). The name is optional and can contain up to 50 characters. Note Allied Telesis recommends that you assign names to the switches. Names can help you identify the switches when you manage them and can also help you avoid performing a configuration procedure on the wrong switch.
Change the console timer, used to automatically end inactive local management sessions. Change the AT-S79 management login user name and password. Enable and disable the web server, used to manage the switch from a remote management station with a web browser.
AT-S79 Management Software User’s Guide The User Interface Configuration Menu is shown in Figure 7. Basic Switch Configuration -> User Interface Configuration Menu Console UI Idle Timeout: 5 Min. Password Protection: Enabled SNMP Agent: Enabled Web Server: Enabled Administrator List: No.
Page 42
Chapter 3: Basic Switch Parameters This parameter applies to a local management session but not to a remote web management session. A web browser management session remains active so long as your web browser is open. Note If you select 0, you must always remember to properly log off from a local management session when you are finished to prevent blocking future management sessions with the switch.
Page 43
AT-S79 Management Software User’s Guide d. Enter a password for the new user. You are prompted to reenter the password. The following prompt is displayed: Retype new password> e. Retype the password for the new user. 7. To delete a user name, do the following: a.
Page 44
Chapter 3: Basic Switch Parameters The following prompt is displayed: Retype new password. Enter the new password a second time. You must use the new login password the next time you start a local or web browser management session. g. To change both the user name and its corresponding password, type B.
AT-S79 Management Software User’s Guide Viewing Switch Information To view general information about the switch, perform the following procedure: 1. From the Main Menu, type G to select General Information. The General Information menu is shown in Figure 8. Main Menu -> General Information System up for: 24min(s), 36sec(s) Runtime Image: Version 2.0...
Page 46
Chapter 3: Basic Switch Parameters Hardware Information Section Version The hardware version number. Fixed Baud Rate The baud rate of the console port. DRAM Size The size of the DRAM, in megabytes. Flash Size The size of the flash memory, in megabytes. Administration Information Section Switch Name The name assigned to the switch.
Page 47
AT-S79 Management Software User’s Guide Gateway Default gateway IP address. Refer to “Configuring the IP Address, Subnet Mask, and Gateway Address” on page 34 to manually assign a gateway address or “Enabling and Disabling the DHCP Client” on page 37 to activate the DHCP client.
Chapter 3: Basic Switch Parameters Rebooting the Switch This procedure reboots the switch and reloads the AT-S79 management software from flash memory. You might reboot the device if you believe it is experiencing a problem. Rebooting the device does not change any of the device’s parameter settings.
Select reboot option (F/I/N)> 4. Type N to select Normal. Note The F and I options are described in “Returning the AT-S79 Management Software to the Factory Default Values” on page 53. 5. Type R to select Start Reboot Process.
Chapter 3: Basic Switch Parameters Pinging a Remote System This procedure instructs the switch to ping a node on your network. This procedure is useful in determining whether an active link exists between the switch and another network device. Note the following before performing the procedure: The switch where you are initiating the ping must have an IP address and subnet mask.
Page 51
AT-S79 Management Software User’s Guide 3. Type I to select Set Target IP Address. The following prompt is displayed: Enter new target IP address> 4. Type the IP address of the node you want the switch to ping and press Enter.
Chapter 3: Basic Switch Parameters Figure 12 shows an example of the results of a ping. Switch Tools Configuration -> Ping Execution Target IP Address: 149.35.8.33 Number of Requests: Timeout Value (sec): ================Result================= No. 1 20 ms No. 2 20 ms No.
This procedure returns all AT-S79 management software parameters to their default values and deletes all tagged and port-based VLANs on the switch. The AT-S79 management software default values are listed in Appendix A, ”AT-S79 Software Default Settings” on page 341.
Page 54
6. Type Y to start the reboot process. The switch returns its operating parameters to the default values and begins to reload the AT-S79 management software. This process takes approximately one minute to complete. You can not manage the device during the reboot. After the reboot is finished, you can log in again if you want to continue to manage the device.
AT-S79 Management Software User’s Guide Displaying Statistics The procedure in this section describe how to display port statistics. Displaying Port To display port statistics, perform the following procedure: Statistics 1. From the Main Menu, type S to select Statistics. The Statistics Menu is shown in Figure 13.
Page 56
Chapter 3: Basic Switch Parameters 4. To display the statistics of the next port, type N for Next. The statistics for the next port in the sequence is displayed. For example, if port 2 statistics were displayed, pressing N displays the statistics for port 3.
Page 57
AT-S79 Management Software User’s Guide Collisions Number of packet collisions on the port. 64-Byte Pkts The number of 64-Byte packets sent or received by the port. The minimum length of an Ethernet packet is 64 bytes. 65-127 Pkts The number of 65-to-127-byte packets sent or received by the port.
Page 58
Chapter 3: Basic Switch Parameters Section I: Using the Menus Interface...
Chapter 4 Port Configuration This chapter contains the procedures for viewing and adjusting the parameter settings for the ports on the switch. This chapter contains the following sections: “Displaying the Port Parameters” on page 60 “Enabling and Disabling a Port” on page 63 “Setting a Port’s Speed and Duplex Mode”...
Chapter 4: Port Configuration Displaying the Port Parameters To display the parameter settings for the ports on the switch, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34. 2.
Page 61
AT-S79 Management Software User’s Guide The Port Configuration Menu displays the following columns of information about the status of the ports: Port The port number. Trunk The trunk group number. This column contains the number of the port trunk if the port is a member of a trunk. To configure a trunk, refer to Chapter 5, “Port Trunking”...
Page 62
Chapter 4: Port Configuration 1000-FDx - 1000 Mbps in full-duplex mode 1000-HDx - 1000 Mbps in half-duplex mode To change a port’s speed and duplex mode setting, see “Setting a Port’s Speed and Duplex Mode” on page 64. Flow Ctrl Whether flow control is enabled on the port.
AT-S79 Management Software User’s Guide Enabling and Disabling a Port This procedure enables and disables a port. You may want to disable a port and prevent packets from being forwarded if a problem occurs with the node or cable connected to the port. After the problem has been fixed, you can enable the port to resume normal operation.
Chapter 4: Port Configuration Setting a Port’s Speed and Duplex Mode To change a port’s speed or duplex mode, perform the following procedure: 1. From the Main Menu, type B to select Basic Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34 2.
Page 65
AT-S79 Management Software User’s Guide Allied Telesis does not recommend manually setting a 10/100/ 1000Base-T twisted-pair port to either 1000 Mbps full duplex or 1000 Mbps half duplex. For 1000 Mbps operation, Allied Telesis recommends setting a port to Auto-Negotiation.
Chapter 4: Port Configuration Changing the Flow Control Setting Flow control applies to ports operating in full-duplex mode. A switch port uses flow control to control the flow of ingress packets from its end node. A port using flow control issues a special frame, referred to as a PAUSE frame, as specified in the IEEE 802.3x standard, to stop the transmission of data from an end node.
Chapter 5 Port Trunking This chapter provides information and procedures for creating a port trunk and contains the following sections: “Port Trunking Overview” on page 68 “Creating a Port Trunk” on page 70 “Modifying a Port Trunk” on page 73 “Enabling and Disabling a Port Trunk”...
Chapter 5: Port Trunking Port Trunking Overview A port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and another networking device, such as a network server, router, workstation, or another Ethernet switch. A port trunk is a group of ports that have been grouped together to function as one logical path.
Page 69
AT-S79 Management Software User’s Guide manufacturer. For this reason static trunks are typically employed only between devices from the same vendor. That is not to say that an Allied Telesis layer 2 managed switch cannot form a static trunk with a device from another manufacturer;...
Chapter 5: Port Trunking Creating a Port Trunk This procedure explains how to create a port trunk. Caution Do not connect the cables to the ports on the switches until you have configured the trunk with the management software. Connecting the cables before configuring the software creates a loop in your network topology, which can result in broadcast storms and poor network performance.
AT-S79 Management Software User’s Guide The Trunk Configuration Menu is shown in Figure 17. Advanced Switch Configuration -> Trunk Configuration Menu Group Status Port Members Trunk ID ------- -------------- --------------------- ---------- Disabled Disabled Disabled Disabled Disabled Disabled Disabled ----------------------- <COMMAND> -----------------------------...
Page 72
Chapter 5: Port Trunking The following prompt is displayed: Enable or Disable trunk group number (E/D)> 8. Type E to enable the trunk. 9. Type Q to select Quit to previous menu and save your changes. The trunk is now operational on the switch. 10.
AT-S79 Management Software User’s Guide Modifying a Port Trunk This procedure adds and removes ports from a port trunk. Caution Before modifying a trunk, disconnect the cables from the ports of the trunk. Adding or removing ports from a trunk without first disconnecting the cables can create loops in your network topology, which can cause poor network performance and broadcast storms.
Chapter 5: Port Trunking Enabling and Disabling a Port Trunk This procedure enables and disables a port trunk. Note the following before performing this procedure: Do not enable a port trunk until after you have configured the trunk on both switches. Do not connect the cables to the ports on the switches until after you have configured and enabled the trunk on both switches.
Chapter 6 IGMP Snooping This chapter explains how to activate and configure the Internet Group Management Protocol (IGMP) snooping feature on the switch. Sections in the chapter include: “IGMP Snooping Overview” on page 76 “Configuring IGMP Snooping” on page 78 Section I: Using the Menus Interface...
Chapter 6: IGMP Snooping IGMP Snooping Overview IGMP enables IPv4 routers to create lists of nodes that are members of multicast groups. (A multicast group is a group of end nodes that want to receive multicast packets from a multicast application.) The router creates a multicast membership list by periodically sending out queries to the local area networks connected to its ports.
Page 77
AT-S79 Management Software User’s Guide Without IGMP snooping a switch would have to flood multicast packets out all of its ports, except the port on which it received the packet. Such flooding of packets can negatively impact network performance. The AT-GS950 switches maintain a list of multicast groups through an...
Chapter 6: IGMP Snooping Configuring IGMP Snooping The procedures in this section describe how to enable or disable IGMP snooping, set the age-out timer, and view group members. See the following procedures: “Enabling or Disabling IGMP Snooping” on page 78 “Setting the Age-out Timer”...
Chapter 6: IGMP Snooping Setting the Age- Use the following procedure to set the age-out timer. out Timer 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 18 on page 78.
Page 81
AT-S79 Management Software User’s Guide The following prompt is displayed: Enter MAC Address (xx:xx:xx:xx:xx:xx)> 4. Enter a Multicast Group MAC address in the format xx:xx:xx:xx:xx. The range of the multicast MAC address is from 01:00:5E:00:01:00 to 01:00:5E:7F:FF:FF. The IGMP Configuration Menu is updated with the information.
Page 82
Chapter 6: IGMP Snooping Section I: Using the Menus Interface...
Chapter 7 Static Multicast Address This chapter explains how to assign static multicast addresses. Sections in the chapter include: “Static Multicast Address Overview” on page 84 “Creating a Static Multicast Address” on page 85 Section I: Using the Menus Interface...
Chapter 7: Static Multicast Address Static Multicast Address Overview There are 4 ways to populate the database of a MAC address table: Static unicast addresses which can only be assigned to one port Static multicast addresses which can be assigned to multiple ports Broadcast addresses which are broadcast to all of the ports on a switch Dynamically learned MAC addresses...
AT-S79 Management Software User’s Guide Creating a Static Multicast Address The procedures in this section describe how to create, delete, and modify static multicast addresses. See the following procedures: “Adding a Static Multicast Address” on page 85 “Deleting a Static Group” on page 86 “Deleting a Static Member Port”...
Chapter 7: Static Multicast Address The following prompt is displayed: Enter MAC address for multicast entry > 4. Type a multicast MAC address. Then press enter. The range of acceptable multicast MAC addresses is from 01:00:5E:00:01:00 to 01:00:5E:7F:FF:FF. The following prompt is displayed: Select group member >...
AT-S79 Management Software User’s Guide You can add more than one group member at a time. You can specify the values individually (for example, 2,5,11), as a range (for example, 4-7), or both (for example., 2,5,11-15). 6. Type Q to select Quit to previous menu and save your changes.
Page 88
Chapter 7: Static Multicast Address Section I: Using the Menus Interface...
Chapter 8 Port Mirroring This chapter contains the procedure for setting up port mirroring. Port mirroring allows you to unobtrusively monitor the ingress and egress traffic on a port by having the traffic copied to another port. This chapter contains the following sections: “Port Mirroring Overview”...
Chapter 8: Port Mirroring Port Mirroring Overview The port mirroring feature allows you to unobtrusively monitor the traffic received and transmitted on one or more ports by copying the traffic to another switch port. You can connect a network analyzer to the port where the traffic is being copied and monitor the traffic on the other ports without impacting network performance or speed.
AT-S79 Management Software User’s Guide Configuring Port Mirroring To set up port mirroring, perform the following procedure: 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 16 on page 70.
Page 92
Chapter 8: Port Mirroring 7. Type E to select Enable/Disable Port Mirroring. The following prompt is displayed: Enable or Disable monitoring (E/D)> 8. Type E to enable port mirroring. You can now connect your data analyzer to the mirroring port. 9.
AT-S79 Management Software User’s Guide Disabling Port Mirroring To disable port mirroring, perform the following procedure: 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 16 on page 70.
Page 94
Chapter 8: Port Mirroring Section I: Using the Menus Interface...
Chapter 9 Dial-in User Configuration This chapter explains how to assign a user name, password, and VLAN to a dial-in user. This chapter contains the following sections: “Dial-in User Configuration Overview” on page 96 “Configuring a Dial-in User” on page 97 Section I: Using the Menus Interface...
Chapter 9: Dial-in User Configuration Dial-in User Configuration Overview The Dial-in User Configuration feature allows you to add, delete, and modify dial-in users to the AT-GS950 switch. In addition, you must assign each dial-in user to a VLAN. See Chapter 10, “Virtual LANs” on page 101 for more information about VLANs and VIDs.
AT-S79 Management Software User’s Guide Configuring a Dial-in User The procedures in this section describe how to create, delete, and modify dial-in users. See the following procedures: “Adding a Dial-in User” on page 97 “Deleting a Dial-in User” on page 98 “Modifying a Dial-in User”...
Chapter 9: Dial-in User Configuration 3. Type A to select Add User. The following prompt is displayed: Enter dial-in user name > 4. Type a name of a dial-in user. Then press Enter. You can enter up to 23 alphanumeric characters. Special characters are permitted.
Page 99
AT-S79 Management Software User’s Guide 4. Type the name of the dial-in user that you want to delete. The dial-in user name is removed from the Dial-in User Configuration Menu. 5. Type Q to select Quit to previous menu and save your changes.
Chapter 9: Dial-in User Configuration Modifying a Dial- This procedure explains how to modify an existing Dial-in User on the switch. For each user, you may change the password and the VLAN in User assignment. However, you cannot change the user name. To modify a Dial-in user, perform the following procedure: 1.
Chapter 10 Virtual LANs This chapter contains the procedures for creating, modifying, and deleting port-based and tagged Virtual Local Area Networks (VLANs). This chapter contains the following sections: “VLAN Overview” on page 102 “Port-based VLAN Overview” on page 104 “Tagged VLAN Overview” on page 105 “Creating a VLAN”...
VLAN remains within the VLAN. With VLANs, you can segment your network through the switch’s AT-S79 management software and so be able to group nodes with related functions into their own separate, logical LAN segments. These VLAN groupings can be based on similar data needs or security requirements.
Page 103
AT-S79 Management Software User’s Guide But with VLANS, you can change the LAN segment assignment of an end node connected to the switch through the switch’s AT-S79 management software. You can change the VLAN memberships through the management software without moving the workstations physically, or changing group memberships by moving cables from one switch port to another.
A port-based VLAN can have as many or as few ports as needed. The VLAN can consist of all the ports on an Ethernet switch, or just a few ports. The parts of a port-based VLAN in the AT-S79 management software are: VLAN name...
AT-S79 Management Software User’s Guide Tagged VLAN Overview The second type of VLAN supported by the AT-S79 management software is the tagged VLAN. VLAN membership in a tagged VLAN is determined by information within the frames that are received by a port and the VLAN configuration of each port.
Chapter 10: Virtual LANs Port VLAN When an untagged packet is received on a port in a tagged VLAN, it is assigned to one of the VLANs of which that port is a member. The Identifier deciding factor in this process is the Port VLAN Identifier (PVID). Both tagged and untagged ports in a tagged VLAN must have a PVID assigned to them.
AT-S79 Management Software User’s Guide Creating a VLAN This section contains the procedure for creating a new port-based or tagged VLAN. This procedure assigns the VLAN a name, a VID number, and the untagged and tagged member ports. After you have performed this procedure, you must configure the untagged ports of the VLAN by adjusting their PVID values to match the virtual LAN’s VID number.
Chapter 10: Virtual LANs 3. Type V to select 802.1Q VLAN. The Tagged-based VLAN configuration Menu is shown in Figure 24. VLAN Management Menu -> Tagged-based VLAN configuration VLAN ID VLAN Name VLAN Type ------- ------------------------------- --------- Default VLAN Permanent Sales Static ----------------------- <COMMAND>...
AT-S79 Management Software User’s Guide The VLAN Creation Menu is shown in Figure 25. VLAN Management -> VLAN Creation Menu VLAN ID: VLAN Name: Port Member ---------------------------------------------------------------------- Tagged: UnTagged: ------------------------- <COMMAND> ---------------------------------- Set VLAN [I]D/[I]ndex [S]elect Port Member Set VLAN [N]ame...
Page 110
Chapter 10: Virtual LANs 10. Type T to indicate a tagged port or U to indicate an untagged port. 11. When the VLAN is complete, type A to select Apply and apply the VLAN settings. The Tagged-based VLAN Configuration Menu is displayed again with information about the VLAN you just created.
AT-S79 Management Software User’s Guide Configuring the PVID of Untagged Ports This procedure adjusts a port’s VID value. The PVID value determines the VLAN in which the port is an untagged member. A port can be an untagged member of only one VLAN at a time. A port is an untagged member of the VLAN whose VID value matches its PVID.
Chapter 10: Virtual LANs The Port-Based VLAN Configuration Menu is shown in Figure 26. VLAN Management -> Port-Based VLAN Configuration Menu Index Group Name Group Member ------- ------------- --------------------------- Sales Marketing 7,9-11 ------------------------- <COMMAND> ---------------------------------- [N]ext Page [A]dd Member Port [C]hange VLAN Group Name [P]revious Page [D]elete Member Port...
AT-S79 Management Software User’s Guide 9. Type the name of the VLAN group. The VLAN name can contain up to 32 characters including spaces. Then press Enter. 10. Type Q to select Quit to previous menu and save your changes.
Chapter 10: Virtual LANs Changing Port To change the of ports that are assigned to a port-based VLAN on the VLAN Management Menu, perform the following procedure. VLAN Type 1. From the Main Menu, type A to select Advanced Switch Configuration.
AT-S79 Management Software User’s Guide Displaying the VLANs To display a list of the port-based and tagged VLANs on the switch, perform the following procedure: 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 16 on page 70.
Chapter 10: Virtual LANs The Config VLAN Member Menu is shown in Figure 27. VLAN Management -> Config VLAN Member VLAN ID: 3 VLAN Name: Marketing Port Tagging ---------------------------------------------------------------------- ----------------------- <COMMAND> ------------------------------------ [N]ext Page [C]hange VLAN Name [A]dd VLAN Member [P]revious page [R]emove VLAN Member [Q]uit to Previous Menu...
AT-S79 Management Software User’s Guide Resetting a VLAN to the Default Value To delete all of the Port-based and Tagged VLANs on the switch and restore the default VLAN with a value of 1, perform the following procedure. 1. From the Main Menu, type A to select Advanced Switch Configuration.
Chapter 10: Virtual LANs Modifying a VLAN This procedure allows you to perform the following functions: Change the name of a VLAN. Add or remove tagged ports from a VLAN. Before performing this procedure, note the following: You cannot change the VID of a VLAN. You cannot add an untagged port to a VLAN with this procedure.
Page 119
AT-S79 Management Software User’s Guide 6. To change the VLAN’s name, do the following: a. Type C to select Change VLAN Name. The following prompt is displayed: Enter new VLAN name> b. Type the new name for the VLAN and press Enter. A VLAN name can be up to 32 characters and can include spaces.
Chapter 10: Virtual LANs Deleting a VLAN There are two separate procedures for deleting a VLAN depending on whether it is a Tagged or Port-based VLAN. See the following sections. Deleting a Port- To delete a port from a Port-based VLAN, perform the following procedure.
AT-S79 Management Software User’s Guide Deleting a Tagged To delete a Tagged VLAN, perform the following procedure: VLAN 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 16 on page 70.
Page 122
Chapter 10: Virtual LANs Section I: Using the Menus Interface...
Chapter 11 Simple Network Management Protocol (SNMP) This chapter explains how to activate SNMP management on the switch and how to create, modify, and delete SNMPv1 and SNMPv2c community strings. This chapter contains the following sections: “SNMP Overview” on page 124 “Creating an SNMP Community”...
You can manage a switch by viewing and changing the management information base (MIB) objects on the device with the Simple Network Management Program (SNMP). The AT-S79 Management Software supports SNMPv1 and SNMPv2c. To manage a switch using an SNMP application program, you must do the following: Activate SNMP management on the switch.
AT-S79 Management Software User’s Guide Community String Attributes A community string has attributes for controlling who can use the string and what the string will allow a network management to do on the switch. The community string attributes are defined below:...
Page 126
Chapter 11: Simple Network Management Protocol (SNMP) Trap receivers are the devices, typically management workstations or servers, that you want to receive the traps sent by the switch. You specify the trap receivers by their IP addresses. You assign the IP addresses to the community strings.
AT-S79 Management Software User’s Guide Default SNMP Community Strings The AT-S79 Management Software provides two default community strings: public and private. The public string has an access mode of Read- Only and the private string has an access mode of Read/Write. If you...
Chapter 11: Simple Network Management Protocol (SNMP) Creating an SNMP Community The procedures in this section describe how to create, delete, and modify an SNMP community. See the following procedures: “Adding an SNMP Community” on page 128 “Deleting an SNMP Community” on page 130 “Modifying an SNMP Community”...
AT-S79 Management Software User’s Guide The SNMP Configuration Menu is shown in Figure 29. Basic Switch Configuration -> SNMP Configuration Menu [C]ommunity Configuration [H]ost Configuration [T]rap Receiver Configuration [Q]uit to previous menu Command> Figure 29. SNMP Configuration Menu 3. From the SNMP Configuration Menu, type C to select Community Configuration.
Chapter 11: Simple Network Management Protocol (SNMP) 4. To add a new community, type A to select Add New Community Entry. The following prompt is displayed: Enter entry number> a. Type an available entry number from 1 through 8. The following prompt is displayed: Enter community name>...
AT-S79 Management Software User’s Guide Modifying an Use the following procedure to modify an existing SNMP community. SNMP 1. From the Main Menu, type B to select Basic Switch Configuration. Community The Basic Switch Configuration Menu is shown in Figure 28 on page 128.
Page 132
Chapter 11: Simple Network Management Protocol (SNMP) The following prompt is displayed: Enter community name> b. Enter the new name of the SNMP community. You can enter a name of up to 20 characters in length. Special characters such as *, $, @ are permitted.
AT-S79 Management Software User’s Guide Creating an SNMP Host This procedures in this section adds, removes, and modifies SNMP hosts. Adding an SNMP To add or remove ports from a trunk, perform the following procedure: Host 1. From the Main Menu, type B to select Basic Switch Configuration.
Chapter 11: Simple Network Management Protocol (SNMP) 4. Type A to select Add New Host Entry. The following prompt is displayed: Enter entry number> a. Enter a value between 1 and 10. Then press Enter. The following prompt is displayed: Enter IP address for host>...
AT-S79 Management Software User’s Guide The Host Configuration Menu is updated. 5. Type Q to select Quit to previous menu and save your changes. Modifying an To modify an entry from the Host Community Menu, perform the following procedure: Host Entry 1.
Page 136
Chapter 11: Simple Network Management Protocol (SNMP) The following prompt is displayed: Enter community name> e. Enter the new community name followed by Enter. Select B to change both the IP address and Community. The following prompt is displayed: Enter IP address for host> g.
AT-S79 Management Software User’s Guide Enabling and Disabling SNMP Traps The procedures in this section describe how to enable, disable, and modify traps. See the following procedures: “Enabling an SNMP Trap” on page 137 “Deleting a Trap Receiver” on page 139 “Modifying a Trap Receiver”...
Chapter 11: Simple Network Management Protocol (SNMP) The Trap Receiver Configuration Menu is displayed in Figure 31. SNMP Configuration Menu -> Trap Receiver Configuration Menu Authentication Trap:Enabled Version IP Address Community ---- ------- ------------- -------------- 167.114.71.1 Tech Com 167.114.71.2 Tech Com 167.114.71.3 System Test ------------------------------<COMMAND>-------------------------------...
AT-S79 Management Software User’s Guide d. Enter a previously defined community name followed by Enter. See “Adding an SNMP Community” on page 128. The Trap Receiver Configuration Menu is redrawn with the new trap displayed. 5. Type Q to select Quit to previous menu and save your changes.
Page 140
Chapter 11: Simple Network Management Protocol (SNMP) The Trap Receiver Configuration Menu is displayed in Figure 31 on page 133. 4. Type M to select Modify Trap Receiver Entry. The following prompt is displayed: Enter entry number> a. Enter a trap number between 1 and 10. Then press Enter. The following prompt is displayed: Choose which to be modified (V/I/C/A) >...
AT-S79 Management Software User’s Guide h. Enter a previously defined community name followed by Enter. See “Adding an SNMP Community” on page 128. Type A to change the trap version, IP address, and community name. Then press Enter. The following prompt is displayed: Enter trap version (1/2) >...
Page 142
Chapter 11: Simple Network Management Protocol (SNMP) a. Enter E to enable all configured traps. Or, enter D to disable all configured traps. Note You can only enable or disable all traps. You may not enable or disable traps individually. 5.
Chapter 12 Quality of Service (QoS) This chapter contains the procedures for configuring the Quality of Service (QoS) parameters of the switch. This chapter contains the following sections: “QoS Overview” on page 144 “Mapping CoS Priorities to Egress Queues” on page 147 “Configuring CoS”...
The priorities are 0 to 7, with 0 the lowest priority and 7 the highest. When a tagged packet is received on a port on the switch, it is examined by the AT-S79 software for its priority. The switch software uses the priority to determine which egress priority queue the packet should be stored in on the egress port.
Note QoS is disabled by default on the switch. You can customize these priority-to-queue assignments using the AT-S79 management software. The procedure for changing the default mappings is found in “Mapping CoS Priorities to Egress Queues” on page 147. Note that because all ports must use the same priority-to-egress queue mappings, these mappings are applied at the switch level.
Page 146
Chapter 12: Quality of Service (QoS) One last thing to note is that CoS does not change the priority level in a tagged packet. The packet leaves the switch with the same priority it had when it entered. This is true even if you change the default priority-to- egress queue mappings.
AT-S79 Management Software User’s Guide Mapping CoS Priorities to Egress Queues This procedure explains how to change the default mappings of CoS priorities to egress priority queues, shown in Table 2 on page 145. This is set at the switch level and applies to all ports. This procedure also enables and disables QoS.
Chapter 12: Quality of Service (QoS) The Traffic Class Configuration Menu is shown in Figure 34. AT-GS950/16 Local Management System Quality of Service Configuration -> Traffic Class Configuration Menu QoS Status: Disabled Traffic Class Queue ------------- ----- 3 : Highest 0 : Lowest ----------------------- <COMMAND>...
Page 149
AT-S79 Management Software User’s Guide The following prompt is displayed where n represents the traffic class you selected in the previous step: Enter queue for traffic class > c. Enter the new egress queue number for the traffic class. The range is 0 to 3.
Chapter 12: Quality of Service (QoS) Configuring CoS As explained in “QoS Overview” on page 144, a packet received on a port is placed it into one of four priority queues on the egress port according to the switch’s mapping of 802.1p priority levels to egress priority queues. The default mappings are shown in Table 2 on page 145.
AT-S79 Management Software User’s Guide The Port Priority Configuration Menu is shown in Figure 35. AT-GS950/16 Local Management System Quality of Service Configuration -> Port Priority Configuration Menu QoS Status: Disabled Port Trunk Queue Override ---- ----- ----- -------- Disabled...
Page 152
Chapter 12: Quality of Service (QoS) 4. To configure a port that is not a member of a trunk, type R to select Set Priority Queue. To configure the ports of a port trunk, type T to select Set Trunk Priority Queue. The following prompt is displayed if you are configuring a port: Set Priority Queue->...
Page 153
AT-S79 Management Software User’s Guide Note The tagged information in a frame is not changed as the frame traverses the switch. A tagged frame leaves a switch with the same priority level that it had when it entered. The default for this parameter is disabled, meaning that the priority level of tagged frames is determined by the priority level specified in the frames themselves.
Page 154
Chapter 12: Quality of Service (QoS) Section I: Using the Menus Interface...
Chapter 13 Rapid Spanning Tree Protocol (RSTP) This chapter describes how to configure the Rapid Spanning Tree Protocol (RSTP) on the switch and includes the following sections: “RSTP Overview” on page 156 “Enabling or Disabling RSTP” on page 163 “Configuring the RSTP Bridge Settings” on page 166 “Configuring STP Compatibility”...
Chapter 13: Rapid Spanning Tree Protocol (RSTP) RSTP Overview The performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topology. A data loop exists when two or more nodes on a network can transmit data to each other over more than one data path.
Page 157
AT-S79 Management Software User’s Guide You can designate which switch on your network you want as the root bridge by giving it the lowest bridge priority number. In addition, you may consider which bridge should function as the backup root bridge in the event you need to take the primary root bridge offline.
Chapter 13: Rapid Spanning Tree Protocol (RSTP) Table 3 lists the RSTP port costs with Auto-Detect. Table 3. RSTP Auto-Detect Port Costs Port Speed Port Cost 10 Mbps 2,000,000 100 Mbps 200,000 1000 Mbps 20,000 Table 4 lists the RSTP port costs with Auto-Detect when the port is part of a port trunk.
BPDU is called the hello time. This is a value that you can set in the AT-S79 management software. The interval is measured in seconds and the default is two seconds. Consequently, if an AT-GS950 switch is selected as the root bridge of a spanning tree domain, it transmits a BPDU every two seconds.
Chapter 13: Rapid Spanning Tree Protocol (RSTP) There are two possible selections: Point-to-point port Edge port The default setting for the RSTP port point-to-point status is automatic. With the automatic setting, the point-to-point status is True of the port is operating in full-duplex mode.
AT-S79 Management Software User’s Guide AT-GS950/24 24-Port 10/100/1000Mbps + 2 SFP Combo WebSmart Switch SPEED LINK/ACT SPEED LINK/ACT LINK/ACT POWER Edge Port Figure 37. Edge Port A port can be both a point-to-point and an edge port at the same time.
RSTP or STP BPDU packets. Rapid Spanning The spanning tree implementation in the AT-S79 management software is a single-instance spanning tree. The switch supports just one spanning Tree and VLANs tree. You cannot define multiple spanning trees.
AT-S79 Management Software User’s Guide Enabling or Disabling RSTP To enable or disable RSTP, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34.
Page 164
Chapter 13: Rapid Spanning Tree Protocol (RSTP) Root Path Cost The sum of all the root port costs of all the bridges between the switch’s root port and the root bridge including the switch’s root port cost. Time Since Topology Change The time in seconds since the last topology change took place.
Page 165
AT-S79 Management Software User’s Guide Bridge Forward Delay This is the time interval between generating and sending configuration messages by the bridge. 3. Type E to select Enable/Disable Global RSTP. The following prompt is displayed: Enable or Disable Global RSTP (E/D)>...
Chapter 13: Rapid Spanning Tree Protocol (RSTP) Configuring the RSTP Bridge Settings To configure the RSTP bridge settings, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34. 2.
Page 167
AT-S79 Management Software User’s Guide The following prompt is displayed: Enter bridge maximum age> The bridge maximum age is the length of time after which stored bridge protocol data units (BPDUs) are deleted by the bridge. All bridges in a bridged LAN use this aging time to test the age of stored configuration messages called bridge protocol data units (BPDUs).
Chapter 13: Rapid Spanning Tree Protocol (RSTP) Configuring STP Compatibility Choosing an RSTP protocol version allows you to determine if the switch ports will operate in RSTP-only mode or are STP-compatible. This setting applies to all of the ports; you cannot set this on a per-port basis. To configure the STP compatibility, perform the following procedure: 1.
AT-S79 Management Software User’s Guide Configuring RSTP Port Settings This section contains the following topics: “Configuring the Basic RSTP Port Settings,” next “Configuring the Advanced RSTP Port Settings” on page 171 Configuring the To configure the basic RSTP port settings, perform the following...
Page 170
Chapter 13: Rapid Spanning Tree Protocol (RSTP) 4. Type I to select Set Port Priority. The following prompt is displayed: Select port number to be changed> Port number is in range from 1 to 9, 0 to set all ports 5.
AT-S79 Management Software User’s Guide Select port number to be changed> Port number is in range from 1 to 9, 0 to set all ports This parameter enables or disables RSTP on a specified port or a group of ports in a trunk.
Chapter 13: Rapid Spanning Tree Protocol (RSTP) The RSTP Advanced Port Configuration menu is shown in Figure 41. AT-GS950/16 Local Management System Rapid Spanning Tree Configuration -> RSTP Advanced Port Configuration Port Trunk Link State Role Admin/OperEdge Admin/OperPtoP Migrat ---- ----- ---- ---------- --------- ---------------------------------- Down Forwarding Disabled...
AT-S79 Management Software User’s Guide The following prompt is displayed: Select port number to be changed> Port number is in range from 1 to 9, 0 to set all ports 8. Enter the number of the port you want to change, or type 0 (zero) to apply the settings to all ports on the switch.
Chapter 13: Rapid Spanning Tree Protocol (RSTP) Displaying the RSTP Topology To display the RSTP topology, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34. 2.
Page 175
AT-S79 Management Software User’s Guide The Topology Information Menu displays the following information about the ports: Trunk The trunk of which the port is a member. Link Whether the link on the port is up or down. Desig. Root The designated root bridge is the switch that is directly connected to the local switch.
Page 176
Chapter 13: Rapid Spanning Tree Protocol (RSTP) Section I: Using the Menus Interface...
Chapter 14 Bandwidth Control This chapter explains how to activate and configure the Internet Group Management Protocol (IGMP) snooping feature on the switch. Sections in the chapter include: “Bandwidth Control Overview” on page 178 “Configuring Bandwidth Control” on page 179 Section I: Using the Menus Interface...
Chapter 14: Bandwidth Control Bandwidth Control Overview If the performance of your network is affected by heavy traffic, you can use bandwidth control to set the rate of various types of packets that a port receives. You can control ingress packet types, including broadcast, multicast, and DLF packets or a combination of all three types, and limit their rates.
AT-S79 Management Software User’s Guide Configuring Bandwidth Control The procedures in this section describe how to set bandwidth control options on the switch and on the ports. See the following sections: “Assigning Broadcast or Multicast Packets” on page 179 “Setting the Ingress Limit Rate” on page 180 “Setting Ingress Status”...
Chapter 14: Bandwidth Control 3. From the Advanced Switch Configuration Menu, type M to select Set Ingress Mode. The following prompt is displayed: Set Bandwidth Control-> Enter port number> 4. Type a port number. Then press Enter. The following prompt is displayed for port 12: Enter Ingress Mode for port 12 (B/M) >...
AT-S79 Management Software User’s Guide 3. Type I to select Set Ingress. The following prompt is displayed: Set Bandwidth Control-> Enter port number> 4. Type a port number. Then press Enter. The following prompt is displayed if you select port 12: Enable or Disable Ingress Bandwidth Control for port 12 (E/D)>...
Page 182
Chapter 14: Bandwidth Control Section I: Using the Menus Interface...
Chapter 15 IP Access List This chapter explains how to activate and configure the IP Access List feature on the switch. This chapter contains the following sections: “IP Access List Overview” on page 184 “Configuring IP Access List” on page 185 Section I: Using the Menus Interface...
Chapter 15: IP Access List IP Access List Overview The IP Access List feature, when enabled, restricts remote access to management by means of a user-configured list of IP addresses. It does not restrict the management ping response activity, only web access to the management software.
AT-S79 Management Software User’s Guide Configuring IP Access List The procedures in this section describe how to enable or disable the IP Access List feature and how to add or remove IP addresses from the list. See the following sections: “Enabling or Disabling IP Access List”...
Chapter 15: IP Access List 3. To enable the IP Access List feature, type S to select Set IP Restriction Status. The following prompt is displayed: Enable or Disable IP Restriction (E/D) > 4. Type E to enable the IP Restriction feature or D to disable the IP Restriction feature.
Chapter 16 Destination MAC Filtering This chapter explains how to activate Destination MAC Filtering on the switch. This chapter contains the following sections: “Destination MAC Filtering Overview” on page 188 “Configuring Destination MAC Filtering” on page 189 Section I: Using the Menus Interface...
Chapter 16: Destination MAC Filtering Destination MAC Filtering Overview Destination MAC Filtering is a security feature that applies to the AT- GS950 switches. It prevents AT-GS950/16 and AT-GS950/24 switches from receiving packets from a particular device which is specified by its MAC address.
AT-S79 Management Software User’s Guide Configuring Destination MAC Filtering The procedures in this section describe how to add or remove MAC addresses from the Destination MAC filtering addresses. See the following procedures: “Setting Destination MAC Filtering” on page 189 “Removing Destination MAC Filtering Addresses” on page 190...
Chapter 16: Destination MAC Filtering 4. Enter a MAC address in the following format: xx:xx:xx:xx:xx:xx The MAC address is displayed in the Destination MAC Filter menu. 5. Type Q to select Quit to previous menu and save your changes. Removing To remove a destination MAC filtering address on the switch, perform the following procedure: Destination MAC...
Chapter 17 802.1x Port-based Network Access Control This chapter contains information about and the procedure for configuring the 802.1x Port-based Network Access Control feature. This chapter includes the following sections: “802.1x Port-based Network Access Control Overview” on page 192 “Guest VLANs” on page 198 “Configuring 802.1x Port-based Network Access Control”...
Chapter 17: 802.1x Port-based Network Access Control 802.1x Port-based Network Access Control Overview 802.1x Port-based Network Access Control (IEEE 802.1x) is used to control who can send traffic through and receive traffic from a switch port. With this feature, the switch will not allow an end node to send or receive traffic through a port until the user of the node logs on by entering a username and password.
AT-S79 Management Software User’s Guide Authentication Below is a brief overview of the authentication process that occurs between a supplicant, authenticator, and authentication server. For further Process details, refer to the IEEE 802.1x standard. Either the authenticator (that is, a switch port) or the supplicant can initiate an authentication prompt exchange.
Chapter 17: 802.1x Port-based Network Access Control server. Each client that attempts to access the network is uniquely identified by the switch using the client's MAC address. Force-unauthorized - Places the port in the unauthorized state, ignoring all attempts by the client to authenticate. This port control setting blocks all users from accessing the network through the port and is similar to disabling a port and can be used to secure a port from use.
House Aegis client software have been verified as fully compatible with the AT-S79 management software. 3. You must configure and activate the RADIUS client software in the AT-S79 management software. The default setting for the authentication protocol is disabled. You will need to provide the following information: The IP address of a RADIUS servers.
Page 196
Chapter 17: 802.1x Port-based Network Access Control Note Connecting multiple supplicants to a switch port set to the Auto setting does not conform to the IEEE 802.1x standard. This can introduce security risks and can result in undesirable switch behavior. To avoid this, Allied Telesis recommends use the Force- authorized setting of the Port Control feature on ports that are connected to more than one end node, such as a port connected to another switch or to a hub.
AT-S79 Management Software User’s Guide Ports used to interconnect switches should be set to the port control setting of Force-authorized. This is illustrated in Figure 48. Switch A Port 22: Port 6: 802.1x Port Control 802.1x Port Control Setting: Force-authorized...
Chapter 17: 802.1x Port-based Network Access Control Guest VLANs An authenticator port in the unauthorized state typically accepts and transmits only 802.1x packets while waiting to authenticate a supplicant. However, you can configure an authenticator port to be a member of a Guest VLAN when no supplicant is logged on.
AT-S79 Management Software User’s Guide Configuring 802.1x Port-based Network Access Control To configure 802.1x port-based network access control, perform the following procedure: 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 16 on page 70.
Page 200
Chapter 17: 802.1x Port-based Network Access Control 3. Type P to select Port No. The following prompt is displayed: Enter port number> 4. Enter the number of the port on the switch you want to configure. You can configure only one port at a time. The Port Based Access Control Configuration Menu is updated with the current settings of the selected port.
Page 201
AT-S79 Management Software User’s Guide request. The default value is 30 seconds. The range is 1 to 65,535 seconds. Maximum Request. Sets the maximum number of times that the switch retransmits an EAP Request packet to the client before it times out the authentication session.
Page 202
Chapter 17: 802.1x Port-based Network Access Control The Port Based Access Control Configuration Menu is updated with the status of the multi-host feature. 8. To select between port-base or MAC address based authentication, type M to select Auth Mode. The following prompt is displayed: Select the Port based or MAC based auth mode (P/M) >...
AT-S79 Management Software User’s Guide Configuring MAC Based Access Control To configure a MAC Based Access Control, perform the following procedure. 1. From the Main Menu, type A to select Advanced Switch Configuration. The Advanced Switch Configuration Menu is shown in Figure 16 on page 70.
Chapter 17: 802.1x Port-based Network Access Control The MAC Based Access Control Configuration Menu is shown in Figure 50. Advanced Switch Configuration -> MAC Based Access Control Configuration Menu Port No: 1 Port Control: Forced Authorized Authentication Method: Local Transmit Period: 30 sec Max Request: 2 Quiet Period: 60 sec Re-auth Period : 3600 sec Re-auth Status: Disabled...
Page 205
AT-S79 Management Software User’s Guide Port Control Sets the 802.1x port control setting. The possible settings are: A (Auto) - Enables 802.1x port-based authentication and causes the port to begin in the unauthorized state, allowing only EAPOL frames to be sent and received through the port. The authentication process begins when the link state of the port changes or the port receives an EAPOL-Start packet from a supplicant.
Page 206
Chapter 17: 802.1x Port-based Network Access Control 8. To permit a guest VLAN ID, type G. The following prompt is displayed: Enter guest VLAN ID > a. Type a VLAN ID and then press Enter. The MAC Based Access Control Configuration Menu is updated with the new guest VLAN ID.
Chapter 18 RADIUS Authentication Protocol This chapter describes how to configure the RADIUS client software on the switch. You can use the RADIUS client with 802.1x port-based network access control to control who can forward packets through the switch. Sections in the chapter include: “RADIUS Overview”...
The AT-S79 management software comes with RADIUS client software. You can use the client software together with 802.1x port-based network access control. See Chapter 17, “802.1x Port-based Network Access Control”...
AT-S79 Management Software User’s Guide Configuring the RADIUS Client To configure the RADIUS client, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34.
Page 210
Chapter 18: RADIUS Authentication Protocol 7. Enter the port number that you want to assign to UDP. You may only assign one port number to this parameter. The default value is 1812. 8. Type C to select Shared Secret. The following prompt is displayed: Enter secret string for server>...
AT-S79 Management Software User’s Guide Displaying the RADIUS Client Settings To display the RADIUS client status and settings, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page 34.
Page 212
Chapter 18: RADIUS Authentication Protocol Section I: Using the Menus Interface...
AT-S79 management software onto the switch. The procedure is: “Downloading a New Management Software Image Using TFTP” on page 214 Note For information about how to obtain new releases of the AT-S79 management software, refer to “Management Software Updates” on page 16. Note For procedures to download software from the web interface using TFTP or HTTP, see “Upgrading a Firmware Image Using TFTP”...
Both models of the AT-GS950 series use the same AT-S79 management software image. The current configuration of a switch is retained when a new AT-S79 software image is installed. To return a switch to its default configuration values, refer to “Returning the AT-S79 Management Software to the Factory Default Values”...
AT-S79 Management Software User’s Guide The Software Upgrade Menu is shown in Figure 52. Switch Tools Configuration -> Software Upgrade Menu [T]FTP Software Upgrade [Q]uit to previous menu Command> Figure 52. Software Upgrade Menu (1 of 2) 3. Type T to select TFTP Upgrade.
Page 216
6. Type F to select Set Image File Name. The following prompt is displayed: Enter file name> 7. Enter the file name of the AT-S79 image file on the TFTP server and press Enter. 8. Type R to select Set Retry Count.
Section II Using the Web Browser Interface The chapters in this section provide information and procedures for using the web browser interface in the AT-S79 management software. The chapters include: Chapter 20, “Starting a Web Browser Management Session” on page Chapter 21, “Basic Switch Parameters”...
Page 218
Section II: Using the Web Browser Interface...
Chapter 20 Starting a Web Browser Management Session This chapter contains the procedures for starting, using, and quitting a web browser management session on the AT-GS950/16 and AT-GS950/24 switches. This chapter includes the following sections: “Establishing a Remote Connection to Use the Web Browser Interface” on page 220 “Web Browser Tools”...
Chapter 20: Starting a Web Browser Management Session Establishing a Remote Connection to Use the Web Browser Interface In order for you to manage an AT-GS950/16 or AT-GS950/24 switch using the web browser interface, the switch must have an IP address and subnet mask.
Figure 55. Figure 55. AT-S79 Login Dialog Box 3. Enter the AT-S79 management login user name and password. The default user name is “manager” and the default password is “friend.” Then press OK. The login name and password are case-sensitive.
4. To see the front panel of the switch. Click on Front Panel in the bookmarks on the left side of the page. The AT-S79 management software displays the home page. The window contains an image of the front of the switch. Ports that have a link to an end node are green.
AT-S79 Management Software User’s Guide Web Browser Tools You can use the web browser tools to move around the management pages. Selecting Back on your browser’s toolbar returns you to the previous display. You can also use the browser’s bookmark feature to save the link to the switch.
Chapter 20: Starting a Web Browser Management Session Quitting a Web Browser Management Session To exit a web browser management session, close the web browser. Section II: Using the Web Browser Interface...
“Setting the User Interface Configuration” on page 236 “Viewing System Information” on page 238 “Rebooting a Switch” on page 241 “Pinging a Remote System” on page 243 “Returning the AT-S79 Management Software to the Factory Default Values” on page 245 Section II: Using the Web Browser Interface...
Chapter 21: Basic Switch Parameters Configuring an IP Address, Subnet Mask and Gateway Address This procedure explains how to change the IP address, subnet mask, and gateway address to the switch. Before performing the procedure, note the following: An IP address and subnet mask are not required for normal network operations of the switch.
Page 227
AT-S79 Management Software User’s Guide 2. Change the IP configuration parameters by entering new information in the fields: System MAC Address This parameter displays the MAC address of the switch. You cannot change this parameter. System IP Address Enter the IP address for the switch.
Chapter 21: Basic Switch Parameters Setting Up the IP Access List The procedures in this section describe how to enable or disable the IP Access List feature and how to add or remove IP addresses from the list. See the following sections: “Creating an IP Access List”...
AT-S79 Management Software User’s Guide Deleting an IP To delete an IP address from the IP Access List, perform the following procedure: Address To create a list of restricted IP addresses, perform the following procedure: 1. Click on the System folder.
Chapter 21: Basic Switch Parameters Enabling and Disabling the DHCP Client This procedure explains how to activate and deactivate the DHCP client on the switch. When the client is activated, the switch obtains its IP configuration, such as its IP address and subnet mask, from a DHCP server on your network.
AT-S79 Management Software User’s Guide Configuring System Management Information This section explains how to assign a name to the switch, as well as the location of the switch and the name of the switch’s administrator. Entering this information is optional.
Page 232
Chapter 21: Basic Switch Parameters System Contact Specifies the name of the network administrator responsible for managing the switch. This contact name is optional and may contain up to 50 characters. 3. Click Apply. Section II: Using the Web Browser Interface...
AT-S79 Management Software User’s Guide Configuring System Administration Information This section explains how to enable password protection and create users in the web interface. See the following sections: “Adding System Administration Information” on page 233 “Modifying Administration Information” on page 234 “Deleting Administration Information”...
Chapter 21: Basic Switch Parameters 5. To create a user name, enter a user name in the box next to the User Name field. You can enter a value of up to 12 alphanumeric characters. 6. To add a password to the above user name, enter a password of up to 12 alphanumeric characters in the box next to the Password field.
AT-S79 Management Software User’s Guide Deleting To delete a user name, perform the following procedure. Administration 1. Click on the System folder. Information 2. From the System folder, select Administration. The Administration Page is shown in Figure 61 on page 233.
Change the console timer, used to automatically end inactive local management sessions. Change the AT-S79 management login user name and password. Enable and disable the web server, used to manage the switch from a remote management station with a web browser.
Page 237
AT-S79 Management Software User’s Guide The console idle time out parameter specifies the length of time a local management session can be inactive before the management software automatically ends it. The purpose of this parameter is to prevent unauthorized individuals from configuring the switch should you leave your management workstation unattended.
Chapter 21: Basic Switch Parameters Viewing System Information To view general information about the switch, perform the following procedure: 1. Select Switch Info. The Switch Information page is shown in Figure 64. Figure 64. Switch Information Page The Switch Information page displays the following information: System Up Time The number of days, hours, and minutes that the switch has been running since it was last rebooted.
Page 239
AT-S79 Management Software User’s Guide Boot Loader The version number and build date of the bootloader firmware. Hardware Information Section: Reversion The hardware version number. DRAM Size The size of the DRAM, in megabytes. Flash Size The size of the flash memory, in megabytes.
Page 240
Chapter 21: Basic Switch Parameters a gateway address or “Enabling and Disabling the DHCP Client” on page 230 to activate the DHCP client. DHCP Mode The status of the DHCP client on the switch. For information about setting this parameter, refer to “Enabling and Disabling the DHCP Client”...
AT-S79 Management Software User’s Guide Rebooting a Switch This procedure reboots the switch and reloads the AT-S79 management software from flash memory. You may want to reboot the device if you believe it is experiencing a problem. Caution The switch does not forward network traffic during the reboot process.
Page 242
Values” on page 245. 3. For the Reboot Status, select Start to start the reboot. 4. Click Apply. The switch immediately begins to reload the AT-S79 management software. This process takes approximately one minute to complete. You can not manage the device during the reboot. After the reboot is finished, you can log in again if you want to continue to manage the device.
AT-S79 Management Software User’s Guide Pinging a Remote System This procedure instructs the switch to ping a node on your network. This procedure is useful in determining whether an active link exists between the switch and another network device. Note the following before performing the procedure: The switch where you are initiating the ping must have an IP address.
Chapter 21: Basic Switch Parameters Number of Ping Requests Specifies the number of ping requests you want the switch to perform. The default is 10. 3. Click Start. 4. To view the ping results, click Show Ping Results. A sample Ping Test Results page is shown in Figure 67. Figure 67.
This procedure returns all AT-S79 management software parameters to their default values and deletes all tagged and port-based VLANs on the switch. The AT-S79 management software default values are listed in Appendix A, “AT-S79 Software Default Settings” on page 341.
Page 246
Chapter 21: Basic Switch Parameters Section II: Using the Web Browser Interface...
Chapter 22 Port Configuration The sections in this chapter explain how to view and change the parameter settings of the individual ports on the switch. There is also a section for viewing port statistics. The sections are: “Viewing and Configuring Ports Using the Port Configuration Page” on page 248 Section II: Using the Web Browser Interface...
Chapter 22: Port Configuration Viewing and Configuring Ports Using the Port Configuration Page This procedure explains how to configure the ports on the switch using the Port Configuration page. This page allows you to view and configure the parameter settings of all the switch ports at one time. To configure the ports, perform the following procedure: 1.
Page 249
AT-S79 Management Software User’s Guide 2. Adjust the port settings as needed. Not all parameters are adjustable. The parameters are defined here: Port Index The port number. You cannot change this parameter. Trunk The trunk group number. A number in this column indicates that the port has been added to a trunk.
Page 250
Chapter 22: Port Configuration 100M/Half - 100 Mbps in half-duplex mode 100M/Full - 100 Mbps in full-duplex mode 1000M/Half - 1000 Mbps in half-duplex mode 1000M/Full - 1000 Mbps in full-duplex mode When selecting a setting, note the following: When a twisted-pair port is set to Auto-Negotiation, the default setting, the end node should also be set to Auto-Negotiation to prevent a duplex mode mismatch.
Chapter 23 Port Trunking This chapter contains the following procedures for working with port trunking: “Creating a Port Trunk” on page 252 “Modifying a Port Trunk” on page 254 “Enabling and Disabling a Port Trunk” on page 255 Note For background information, refer to “Port Trunking Overview” on page 68.
Chapter 23: Port Trunking Creating a Port Trunk This procedure explains how to create a port trunk. Caution Do not connect the cables of a port trunk to the ports on the switch until after you have configured the ports on both the switch and the end node.
Page 253
AT-S79 Management Software User’s Guide 3. In any one of the unused Trunk ID rows, click the dialog boxes of the ports that will make up the port trunk. A check in a box indicates the port is a member of the trunk. No check means the port is not a member.
Chapter 23: Port Trunking Modifying a Port Trunk This procedure adds and removes ports from a port trunk. Caution Before you modify a port trunk, disconnect the cables from the ports of the trunk. Adding or removing ports from a trunk without first disconnecting the cables can create loops in your network topology, which can cause broadcast storms and poor network performance.
AT-S79 Management Software User’s Guide Enabling and Disabling a Port Trunk This procedure enables and disables a port trunk. Note the following before performing this procedure: Do not enable a port trunk until after you have configured the trunk on both switches.
Page 256
Chapter 23: Port Trunking Section II: Using the Web Browser Interface...
Chapter 24 Port Mirroring This chapter contains the procedure for setting up port mirroring. Port mirroring allows you to unobtrusively monitor the ingress and egress traffic on a port by having the traffic copied to another port. This chapter contains the following sections: “Configuring Port Mirroring”...
Chapter 24: Port Mirroring Configuring Port Mirroring To set up port mirroring, perform the following procedure: 1. From the Bridge folder, select Spanning Tree. 2. From the Spanning Tree folder, select Mirroring. The Mirroring page is shown in Figure 70. Figure 70.
AT-S79 Management Software User’s Guide Disabling Port Mirroring To disable port mirroring, perform the following procedure: 1. From the Bridge folder, select Spanning Tree. 2. From the Spanning Tree folder, select Mirroring. The Mirroring page is shown in Figure 70 on page 258.
Page 260
Chapter 24: Port Mirroring Section II: Using the Web Browser Interface...
Chapter 25 Static Multicast Address Table This chapter contains the following procedures for setting group MAC addresses in the web interface: “Configuring Static Multicast Address Table” on page 262 “Modifying a Static Multicast Address Table” on page 264 “Deleting a Group MAC Address” on page 265 Note For background information, refer to Chapter 7, “Static Multicast Address”...
Chapter 25: Static Multicast Address Table Configuring Static Multicast Address Table This procedure explains how to add group MAC addresses to the Static Multicast Address Table. To configure the Static Multicast Address Table, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. The Spanning Tree folder opens.
Chapter 25: Static Multicast Address Table Modifying a Static Multicast Address Table This procedure explains how to change the group number of the Static Multicast Address Table. To modify the group number in the Static Multicast Address Table, perform the following procedure: 1.
AT-S79 Management Software User’s Guide Deleting a Group MAC Address To delete a Group MAC Address from the Static Multicast Address Table, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. The Spanning Tree folder opens.
Page 266
Chapter 25: Static Multicast Address Table Section II: Using the Web Browser Interface...
Chapter 26 IGMP Snooping This chapter contains the following procedures for working with IGMP Snooping in the web interface. Sections in the chapter include: “Configuring IGMP Snooping” on page 268 Note For background information, refer to “IGMP Snooping Overview” on page 76.
Chapter 26: IGMP Snooping Configuring IGMP Snooping This procedure explains how to set IGMP snooping on the switch and set the IGMP Snooping age-out timer. To configure IGMP snooping, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2.
Page 269
AT-S79 Management Software User’s Guide For an IGMP router port, the Set Age-Out Timer is set to 130 seconds by default. This value cannot be changed. Note The Multicast Group Address field contains MAC addresses of nodes that are members of multicast groups. To set a Multicast Group Address, see “Setting Group Members”...
Page 270
Chapter 26: IGMP Snooping Section II: Using the Web Browser Interface...
Chapter 27 Destination MAC Address Filter This chapter contains the following procedures for setting MAC addresses in the Destination MAC Filter in the web interface: “Setting a Destination MAC Filter” on page 272 “Removing a MAC Address” on page 274 Note For background information, refer to “Destination MAC Filtering Overview”...
Chapter 27: Destination MAC Address Filter Setting a Destination MAC Filter This procedure explains how to set a Destination MAC Filter on the switch. To add a MAC address from a Destination MAC Filter list, perform the following procedure: 1. From the bookmarks on the left side of the page, select Security. 2.
AT-S79 Management Software User’s Guide The Destination MAC Filter table is updated with the new MAC address. See Figure 76 for an example Figure 76. Destination MAC Address with New Entries Section II: Using the Web Browser Interface...
Chapter 27: Destination MAC Address Filter Removing a MAC Address To remove a MAC address from a Destination MAC Filter list, perform the following procedure: 1. From the bookmarks on the left side of the page, select Security. 2. From the Security folder, select Destination MAC Filter. The Destination MAC Filter Page is shown in Figure 75 on page 272 3.
Chapter 28 Bandwidth Control This chapter contains the following procedures for working with Bandwidth Control in the web interface. Sections in the chapter include: “Configuring Bandwidth Control” on page 276 Note For background information, refer to “Bandwidth Control Overview” on page 178. Section II: Using the Web Browser Interface...
Chapter 28: Bandwidth Control Configuring Bandwidth Control This procedure explains how to set Bandwidth Control on a port. To configure Bandwidth Control, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Spanning Tree folder, select Bandwidth Control. The Bandwidth Control page is shown in Figure 77.
Page 277
AT-S79 Management Software User’s Guide 3. To change the status of the packet threshold for all the ports on the switch, select the pull-down menu next to Broad/Multicast Packet Threshold field. Choose Low, Medium, and High. Then press Apply. By default, the packet threshold is set to Low.
Page 278
Chapter 28: Bandwidth Control Section II: Using the Web Browser Interface...
Chapter 29 Virtual LANs This chapter contains the procedures for creating, modifying, and deleting port-based and tagged Virtual Local Area Networks (VLANs) from a web browser management session. This chapter contains the following sections: “Assigning Ports to a VLAN” on page 280 “Creating a Tagged VLAN”...
Chapter 29: Virtual LANs Assigning Ports to a VLAN To assign ports to a tagged or port-based VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3.
AT-S79 Management Software User’s Guide Creating a Tagged VLAN To create a tagged VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3. From the VLAN folder, select Tagged VLAN.
Chapter 29: Virtual LANs For an example of a Tagged VLANs, see Figure 80. Figure 80. Example of Tagged VLAN Page Section II: Using the Web Browser Interface...
AT-S79 Management Software User’s Guide Modifying a Tagged VLAN To modify a tagged VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3. From the VLAN folder, select Tagged VLAN.
Chapter 29: Virtual LANs Deleting a Tagged VLAN To delete a tagged VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3. From the VLAN folder, select Tagged VLAN. An example of the Tagged VLAN page is shown in Figure 80 on page 282.
AT-S79 Management Software User’s Guide Creating a Port-Based VLAN To create a port-based VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3. From the VLAN folder, select Port-Based VLAN.
Chapter 29: Virtual LANs Modifying a Port-Based VLAN To modify a port-based VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3. From the VLAN folder, select Port-Based VLAN. The Port-Based VLAN page is shown in Figure 82 on page 285.
AT-S79 Management Software User’s Guide Deleting a Port-Based VLAN To delete a port-based VLAN, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select VLAN. 3. From the VLAN folder, select Port-Based VLAN.
Page 288
Chapter 29: Virtual LANs Section II: Using the Web Browser Interface...
Chapter 30 Simple Network Management Protocol (SNMP) This chapter contains the following procedures for working with SNMP: “Creating an SNMP Community” on page 290 “Modifying an SNMP Community” on page 291 “Deleting an SNMP Community” on page 292 “Creating a Host Table” on page 293 “Modifying a Host Table Entry”...
Chapter 30: Simple Network Management Protocol (SNMP) Creating an SNMP Community This procedure explains how to create an SNMP community. To create an SNMP community, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2.
AT-S79 Management Software User’s Guide Modifying an SNMP Community Use the following procedure to modify an existing SNMP community in the Community Table. 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select SNMP.
Chapter 30: Simple Network Management Protocol (SNMP) Deleting an SNMP Community Use the following procedure to delete an existing SNMP community in the Community Table. 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select SNMP. 3.
AT-S79 Management Software User’s Guide Creating a Host Table Use the following procedure to create a Host Table. 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select SNMP. 3. From the SNMP folder, select Host Table.
Chapter 30: Simple Network Management Protocol (SNMP) Modifying a Host Table Entry Use the following procedure to modify an entry in the Host Table. 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select SNMP. 3.
AT-S79 Management Software User’s Guide Deleting a Host Table Entry Use the following procedure to delete a Host Table entry. 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select SNMP.
Chapter 30: Simple Network Management Protocol (SNMP) Enabling or Disabling Traps This procedure enables or disables traps for an SNMP community. To enable or disable a trap, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2.
AT-S79 Management Software User’s Guide Modifying Traps Use this procedure to modify traps for an SNMP community. To modify a trap, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2. From the Bridge folder, select SNMP.
Chapter 30: Simple Network Management Protocol (SNMP) Deleting Traps Use this procedure to delete traps for an SNMP community. To delete a trap, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. 2.
Chapter 31 Quality of Service (QoS) This chapter contains the procedure for configuring Quality of Service (QoS). This chapter includes the following procedures: “Mapping CoS Priorities to Egress Queues” on page 300 “Configuring CoS” on page 302 Note For background information, refer to “QoS Overview” on page 144 Section II: Using the Web Browser Interface...
Chapter 31: Quality of Service (QoS) Mapping CoS Priorities to Egress Queues This procedure explains how to change the default mappings of CoS priorities to egress priority queues, as shown in Table 2 on page 145. This is set at the switch level. You cannot set this at the per-port level. This procedure also enables and disables QoS.
Page 301
AT-S79 Management Software User’s Guide 4. To change the egress priority queue assignment of an 802.1p priority class, click the dialog circle of the queue for the corresponding priority. For example, to direct all tagged traffic with a priority of 4 to egress queue 3 on the ports, you would click the dialog circle for queue 3 in the priority 4 row.
Chapter 31: Quality of Service (QoS) Configuring CoS As explained in “QoS Overview” on page 144, a packet received on a port is placed it into one of four priority queues on the egress port according to the switch’s mapping of 802.1p priority levels to egress priority queues. The default mappings are shown in Table 2 on page 145.
AT-S79 Management Software User’s Guide The Default Port VLAN & CoS page is shown in Figure 88. Figure 88. Port Priority Configuration Page The columns in the menu display the following information: Port Displays the port number. Trunk Displays the trunk number if the port is a member of a trunk.
Page 304
Chapter 31: Quality of Service (QoS) priority levels contained within the frames to determine the egress queue. If Yes, the override is activated and the tagged packets are stored in the egress queue specified in the Queue column. 3. To change the egress queue where ingress untagged frames received on a port are to be stored on the egress port, use the pull-down menu in the QoS Priority column and select the desired queue.
Chapter 32 Rapid Spanning Tree Protocol (RSTP) This chapter contains the following procedures for working with the Remote Spanning Tree Protocol (RSTP): “Basic RSTP Configuration” on page 306 “Configuring RSTP Port Settings” on page 309 “Viewing the RSTP Topology” on page 313 Note For background information on RSTP, refer to “RSTP Overview”...
Chapter 32: Rapid Spanning Tree Protocol (RSTP) Basic RSTP Configuration To configure the RSTP settings, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. The Spanning Tree folder is displayed. 2. From the Bridge folder, select Spanning Tree. 3.
Page 307
AT-S79 Management Software User’s Guide Protocol Version Set this field to enable to activate RSTP on the switch. This field is greyed out until you set the Global RSTP Status to enable. To activate this field click Apply. This page contains the following items of information in the middle portion of the page.
Page 308
Chapter 32: Rapid Spanning Tree Protocol (RSTP) Bridge ID The MAC address of the bridge. The bridge identifier is use as a tie breaker in the selection of the root bridge when two or more bridges have the same bridge priority. You cannot change this setting. Bridge Priority The priority number for the bridge, in hexadecimal format.
AT-S79 Management Software User’s Guide Configuring RSTP Port Settings This section contains the following topics: “Configuring the Basic RSTP Port Settings,” next “Configuring the Advanced RSTP Port Settings” on page 311 Configuring the To configure the basic RSTP port settings, perform the following...
Chapter 32: Rapid Spanning Tree Protocol (RSTP) The RSTP Basic Port Configuration page is shown in Figure 90. Figure 90. RSTP Basic Port Configuration Page 4. In the STP Status column for the port you want to configure, select the STP status from the list, either Enable or Disable.
AT-S79 Management Software User’s Guide 8. To configure all of the ports to the same settings, in the All row, configure one, two, or all of the following settings: STP Status, Priority, and Path Cost. Then click Apply. Configuring the...
Chapter 32: Rapid Spanning Tree Protocol (RSTP) 4. In the Admin/OperEdge column for the port you want to configure, choose True or False to set whether or not the port will operate as an edge port. 5. In the Admin/OperPtoP column for the port you want to configure, choose a setting based on the information in Table 7.
AT-S79 Management Software User’s Guide Viewing the RSTP Topology To view the current RSTP topology, perform the following procedure: 1. From the bookmarks on the left side of the page, select Bridge. The Spanning Tree folder is displayed. 2. From the Bridge folder, select Spanning Tree.
Page 314
Chapter 32: Rapid Spanning Tree Protocol (RSTP) Designated Root The designated root bridge to which the switch’s root port is actively connected. Designated Cost The sum of all the root port costs on all bridges, including the switch, between the switch and the root bridge. Designated Bridge An adjacent bridge to which the root port of the switch is actively connected.
Chapter 33 802.1x Port-based Network Access Control This chapter contains the procedure for configuring 802.1x port-based network access control: “Configuring 802.1x Port-based Network Access Control” on page 316 Note For background information, refer to “802.1x Port-based Network Access Control Overview” on page 192. Section II: Using the Web Browser Interface...
Chapter 33: 802.1x Port-based Network Access Control Configuring 802.1x Port-based Network Access Control To configure 802.1x port-based network access control, perform the following procedure: 1. From the Security folder, select Port Access Control. The 802.1x Access Control Configuration page is shown in Figure 93. Figure 93.
Page 317
AT-S79 Management Software User’s Guide 3. Configure the following parameters as needed. The parameters are defined here: NAS ID. This parameter assigns an 802.1x identifier to the switch that applies to all ports. The NAS ID can be up to sixteen characters. Valid characters are 0 to 9, a to z, and A to Z.
Page 318
Chapter 33: 802.1x Port-based Network Access Control Re-authentication Period. Specifies the time period between periodic reauthentication of the client. The default value is 3600 seconds. The range is 1 to 65,535 seconds. Re-authentication Status. Specifies if reauthentication should occur according to the reauthentication period.
Chapter 34 Dial-in User This chapter contains the following procedure for setting the Dial-in User feature in the web interface. “Adding a Dial-in User” on page 320 “Modifying a Dial-in User” on page 321 “Deleting a Dial-in User” on page 322 Note For background information, refer to “Dial-in User Configuration Overview”...
Chapter 34: Dial-in User Adding a Dial-in User This procedure explains how to add a Dial-in User on the switch. For each user, you must assign an user name, password, and a VLAN. To configure a Dial-in user, perform the following procedure: 1.
AT-S79 Management Software User’s Guide Modifying a Dial-in User This procedure explains how to modify an existing Dial-in User on the switch. For each user, you may change the password and the VLAN assignment. However, you cannot change the user name.
Chapter 34: Dial-in User Deleting a Dial-in User This procedure explains how to delete an existing Dial-in User on the switch. To delete a Dial-in user, perform the following procedure: 1. From the bookmarks on the left side of the page, select Security. 2.
Chapter 35 RADIUS Authentication Protocol This chapter explains how to configure the RADIUS client on the switch. You can use the RADIUS client with 802.1x port-based network access control to control who can forward packets through the switch. The chapter contains the following section: “Configuring the RADIUS Client”...
Chapter 35: RADIUS Authentication Protocol Configuring the RADIUS Client To configure the RADIUS client, perform the following procedure: 1. From the Security folder, select RADIUS. The RADIUS page is shown in Figure 95. Figure 95. RADIUS Page 2. To enter the RADIUS server’s IP address, enter the address in the Server IP Address field.
Chapter 36 Statistics The sections in this chapter explain how to display traffic, error, and history statistics about the AT-GS950 switch and its ports. This chapter includes the following section: “Displaying Switch Statistics” on page 326 Section II: Using the Web Browser Interface...
Displaying Switch Statistics Statistics provide important information for troubleshooting switch problems at the port level. The AT-S79 management software provides a versatile set of statistics charts that you can customize for your needs, including (depending upon the chart) the ports whose statistics you want to view and the color to use in drawing the statistics in the chart.
AT-S79 Management Software User’s Guide The Traffic Comparison page opens as shown in Figure 96. Figure 96. Traffic Comparison Page 3. To view traffic statistics, click on the arrow next to “Statistics” and select one of the options in Table 8.
Page 328
Chapter 36: Statistics Table 8 Traffic Comparison Options (Continued) Option Definition Outbound Unicast Packet Rate (Pkts/s) Measures the number of outbound unicast packets in packets per second. Outbound Non-unicast Packet Rate Measures the number of outbound non-unicast (Pkts/s) packets (such as broadcast and multicast packets) in packets per second.
Page 329
AT-S79 Management Software User’s Guide Table 8 Traffic Comparison Options (Continued) Option Definition Ethernet Oversize Packet (Pkts/) Measures the number of oversized Ethernet packets. 4. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following options: –...
Chapter 36: Statistics Displaying Error To display error group statistics for a port, perform the following procedure: Group Statistics 1. Select the Statistics Chart folder. 2. From the Statistics Chart folder, select Error Group. The Error Group Chart Page is displayed in Table 97. Figure 97.
Page 331
AT-S79 Management Software User’s Guide 5. To select the color of the traffic comparison graph, select Color. Choose one of the following colors: – Green (This is the default.) – Blue – – Purple – Yellow – Orange – Gray –...
Chapter 36: Statistics Displaying To display historical status charts statistics for a port, perform the following procedure: Historical Status Charts 1. Select the Statistics Chart folder. 2. From the Statistics Chart folder, select Historical Status. The Historical Status Chart page is displayed in Table 98. Figure 98.
Page 333
AT-S79 Management Software User’s Guide 3. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following options: – 5 seconds – 10 seconds – 15 seconds – 30 seconds 4. To select the color of the traffic comparison graph, select Color.
“Upgrading a Firmware Image Using TFTP” on page 336 “Upgrading a Firmware Image Using HTTP” on page 338 Note For information on how to obtain new releases of the AT-S79 management software, refer to “Management Software Updates” on page 16.
Both models of the AT-GS950 Series use the same AT-S79 software image. The current configuration of a switch is retained when a new AT-S79 software image is installed. To return a switch to its default configuration values, refer to “Returning the AT-S79 Management Software to the Factory Default Values”...
The IP address of the TFTP server from which you are downloading the new software. Download File Name The name of the AT-S79 file you are downloading. Retry Count: The number of times the firmware upgrade is retried. The default number of tries is 5.
Before downloading a new version of the AT-S79 management software onto the switch with HTTP, note the following: The current configuration of a switch is retained when a new AT-S79 software image is installed. To return a switch to its default configuration values, refer to “Returning the AT-S79 Management...
Page 339
AT-S79 Management Software User’s Guide 3. Change the following parameters as necessary: Firmware File: Enter the path of the firmware file or click the Browse button and select the filename. 4. Click Apply. The software immediately begins to download onto the switch. This process takes a few minutes.
Page 340
Chapter 37: Management Software Updates Section II: Using the Web Browser Interface...
Appendix A AT-S79 Software Default Settings Table 9 lists the factory default settings for the management software. Table 9. AT-S79 Default Settings Parameter Default Setting IP Configuration IP Address 0.0.0.0 Subnet Mask 0.0.0.0 Default Gateway Address 0.0.0.0 DHCP Client Disabled...
Page 342
Appendix A: AT-S79 Software Default Settings Table 9. AT-S79 Default Settings (Continued) Parameter Default Setting Flow Control (Full-duplex Mode) Enabled Back pressure (Half-duplex Mode) Enabled (not adjustable) Port Trunking Status Disabled IGMP Snooping Status Disabled IGMP Snooping Age-Out Timer 280 seconds...
Page 343
AT-S79 Management Software User’s Guide Table 9. AT-S79 Default Settings (Continued) Parameter Default Setting IP Access List IP Restriction Disabled 802.1x Port-based Network Access Control NAS ID Nas1 Port Control Force Authorized Transmission Period 30 seconds Supplicant Timeout 30 seconds...
Page 345
192 factory default settings 341 guidelines 195 factory defaults, resetting switch 53 supplicant, described 192 flow control, configuring 66 AT-S79 management software gateway address, configuring 34 features 18 resetting to factory defaults 53 upgrading 214 hardware information 45 upgrading with HTTP 338...
Page 346
Index force-authorized 194 root bridge 156 force-unauthorized 194 RSTP. See Rapid Spanning Tree Protocol (RSTP) port cost described 157 port duplex mode, configuring 64 SNMP port mirror creating a community 290 destination port 90 creating a host 133 source port 90 creating a host table 293 port mirroring deleting a host table entry 295...
Page 347
AT-S79 Management Software User’s Guide user name configuring 40 user name, configuring 233 virtual LAN. See VLAN VLAN configuring PVID of untagged ports 111 creating 107 defined 102 deleting 121 displaying 115 modifying 118 overview 102 port-based, defined 104 tagged, defined 105...
Need help?
Do you have a question about the AT-S79 and is the answer not in the manual?
Questions and answers