Allied-telesis AT-GS950/16 Bedienungsanleitung

613-001857 Rev AAT-GS950/16Gigabit Ethernet SwitchAT-GS950/16 Web Interface User Guide AT-S114 Version 1.1.0 [1.00.021]

Contents10

Chapter 6: Static Port Trunking100OverviewA port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and another

AT-GS950/16 Web Interface User Guide101Network equipment vendors tend to employ different techniques to implement static trunks. Consequently, a stati

Chapter 6: Static Port Trunking102 A port can belong to only one static trunk at a time. The ports of a static trunk can be configured to be members

AT-GS950/16 Web Interface User Guide103Create a Port TrunkThis procedure explains how to create a static port trunk.CautionDo not connect the cables o

Chapter 6: Static Port Trunking1044. Click the check boxes of the ports that will make up the port trunk. A check in a box indicates the port is a mem

AT-GS950/16 Web Interface User Guide105Modify a Port TrunkThis procedure explains how to change the status of a port trunk and add or remove ports fro

Chapter 6: Static Port Trunking1069. Configure the port trunk on the other switch with the same parameters.10. Connect the Ethernet cables between tru

AT-GS950/16 Web Interface User Guide107Disable a Port TrunkThis procedure explains how to disable a port trunk. CautionBefore you disable or modify a

Chapter 6: Static Port Trunking108

AT-GS950/16 Web Interface User Guide109Chapter 7LACP Port TrunksThis chapter contains overview information about LACP port trunks and the procedures f

11Figure 1. Entering a Switch’s IP Address in the URL Field...

Chapter 7: LACP Port Trunks110OverviewLACP (Link Aggregation Control Protocol) port trunks perform the same function as static trunks. They increase t

AT-GS950/16 Web Interface User Guide111System PriorityIt is possible for two devices interconnected by an aggregate trunk to encounter a conflict when

Chapter 7: LACP Port Trunks112Port Priority ValueThe switch uses a port’s LACP priority to determine which ports are active and which are in the stand

AT-GS950/16 Web Interface User Guide113General GuidelinesThe following guidelines apply when creating aggregators: LACP must be activated on both the

Chapter 7: LACP Port Trunks114 Prior to creating an aggregate trunk between an Allied Telesis device and another vendor’s device, refer to the vendor

AT-GS950/16 Web Interface User Guide115Group StatusTo display the LACP Group Status, perform the following procedure:1. Select the Bridge folder.The B

Chapter 7: LACP Port Trunks116ConfigurationExampleThe following procedure provides an example for an LACP group configuration:1. Use the procedure giv

AT-GS950/16 Web Interface User Guide117Figure 39. LACP Group Status Page with Three Cables ConnectedYou can now see that each port has been grouped un

Chapter 7: LACP Port Trunks118Port Priority ConfigurationTo select a priority for an LACP port, perform the following procedure:1. Select the Bridge f

119Chapter 8Port MirroringThis chapter describes the Port Mirroring feature and the procedure for setting up port mirroring. Port mirroring allows you

Figures12Figure 51. IGMP Snooping Router Port Page...

Chapter 8: Port Mirroring120OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic received and transmitted on one or more

AT-GS950/16 Web Interface User Guide121Port Mirroring ConfigurationTo configure Port Mirroring, perform the following procedure:1. Select the Bridge f

Chapter 8: Port Mirroring1226. Click Apply on the right-hand side of the page.The Port Mirroring configuration is implemented immediately on the AT-GS

AT-GS950/16 Web Interface User Guide123Disable Port MirroringTo disable Port Mirroring, perform the following procedure:1. Select the Bridge folder.Th

Chapter 8: Port Mirroring124

125Chapter 9Loopback ProtectionThis chapter explains how to configure the Loopback Protection feature for specific ports on the AT-GS950/16 switch. If

Chapter 9: Loopback Protection126ConfigurationTo configure the Loopback Detection feature, perform the following procedure:1. From the main menu on th

AT-GS950/16 Web Interface User Guide1274. Under the Loopback Detection Global Settings, configure the following parameters:Interval: This parameter se

Chapter 9: Loopback Protection128StatusThe status of the Loopback Detection is given in the Loop Status column of the table at the bottom of the Loopb

129Chapter 10MAC Address TableThis chapter provides a description of the static unicast and multicast MAC address features and the procedures for conf

AT-GS950/16 Web Interface User Guide13Figure 111. Voice VLAN OUI Settings Page ...

Chapter 10: MAC Address Table130OverviewThe AT-GS950/16 switch has a MAC address table with a storage capacity of up to 8,000 entries. The table store

AT-GS950/16 Web Interface User Guide131If a multicast address and its associated ports of the switch are predefined within the network design and they

Chapter 10: MAC Address Table132Static Unicast MAC Address ConfigurationThis procedure explains how to set the static unicast feature for each port on

AT-GS950/16 Web Interface User Guide133NoteAn error message is generated when you enter a VLAN ID or VLAN Index which has not been defined, or when yo

Chapter 10: MAC Address Table134Modify Static Unicast AddressTo modify the port assignment of a unicast MAC address in the MAC address table, perform

AT-GS950/16 Web Interface User Guide135Delete Static Unicast AddressTo delete a unicast MAC address from the MAC address table, perform the following

Chapter 10: MAC Address Table136Static Multicast Address ConfigurationThis procedure explains how to set the static multicast feature for each port on

AT-GS950/16 Web Interface User Guide137NoteAn error message is generated when you enter a VLAN ID or VLAN Index which has not been defined, or when yo

Chapter 10: MAC Address Table1387. From the main menu on the left side of the page, select Save Settings to Flash to permanently save your changes.

AT-GS950/16 Web Interface User Guide139Modify Static Multicast AddressTo modify the port assignment of a multicast MAC address in the MAC address tabl

Figures14

Chapter 10: MAC Address Table140Delete Static Multicast AddressTo delete a multicast MAC address from the MAC address table, perform the following pro

141Chapter 11IGMP SnoopingThis chapter contains a description of the IGMP Snooping feature, as well as procedures for working with IGMP Snooping in th

Chapter 11: IGMP Snooping142OverviewIGMP enables IPv4 routers to create lists of nodes that are members of multicast groups. (A group of end nodes tha

AT-GS950/16 Web Interface User Guide143Without IGMP snooping, a switch floods multicast packets from all of its ports, except the port on which it rec

Chapter 11: IGMP Snooping144IGMP Snooping ConfigurationThis procedure explains how to set IGMP snooping and IGMP Snooping Querier on the switch, and s

AT-GS950/16 Web Interface User Guide1455. To set the Age-Out Timer, type the number of seconds you want the switch to wait before it purges an inactiv

Chapter 11: IGMP Snooping146Figure 50. IGMP Snooping Page with MAC Address14. From the main menu on the left side of the page, select Save Settings to

AT-GS950/16 Web Interface User Guide147IGMP Snooping Router Port ModificationThis procedure explains how to modify the IGMP snooping router port.To mo

Chapter 11: IGMP Snooping1485. In the Static Router Port row, select the check boxes for the ports that you want to include or remove in the Static Ro

149Chapter 12Storm ControlThis chapter contains a description and configuration procedures for the Storm Control (bandwidth) feature. The following to

15List of TablesTable 1. Valid Port Priority Values ...

Chapter 12: Storm Control150OverviewThe features available in the AT-S114 Management Software allow you to limit Ethernet traffic within your switch b

AT-GS950/16 Web Interface User Guide151Ingress RateLimitingThe Ingress Rate Limiting feature restricts the traffic to a pre-configured data rate that

Chapter 12: Storm Control152ConfigurationThis procedure explains how to set DLF, broadcast, multicast, and threshold levels for each port on the AT-GS

AT-GS950/16 Web Interface User Guide1536. To enable or disable ingress and egress Broadcast packets, select Enable or Disable from the Broadcast pull-

Chapter 12: Storm Control154Ingress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Ingress Rate Limiting on each port

AT-GS950/16 Web Interface User Guide1555. To enable or disable the ingress rate filter, select Enable or Disable from the Status pull-down menu next t

Chapter 12: Storm Control156Egress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Egress Rate Limiting on each port o

157Chapter 13Virtual LANsThis chapter contains a description of Virtual Local Area Networks (VLANs) and the procedures for creating, modifying, and de

Chapter 13: Virtual LANs158VLAN OverviewA virtual LAN (VLAN) is a group of ports on an Ethernet switch that form a logical Ethernet segment via the AT

AT-GS950/16 Web Interface User Guide159With VLANS, you can reconfigure the LAN segment assignment of an end node connected to the AT-GS950/16 switch’s

List of Tables16

Chapter 13: Virtual LANs160VLAN IndexYou must assign a unique number to each VLAN in a network. This number is called the Port-Based VLAN Index. This

AT-GS950/16 Web Interface User Guide161A tagged VLAN consists of the following: “VLAN Index” “VLAN Name” “Tagged and Untagged Ports” “Port VLAN Id

Chapter 13: Virtual LANs162does not match one of the Group IDs assigned to the port, the packet is discarded.Port VLAN Identifier (PVID)When an untagg

AT-GS950/16 Web Interface User Guide163Forwarding PortsForwarding ports of a private port VLAN can only forward traffic to, and receive traffic from,

Chapter 13: Virtual LANs164Assign Ports to a VLAN ModeThe procedure described in this section allows you to assign ports to tagged or a port-based VLA

AT-GS950/16 Web Interface User Guide165NoteBefore you assign a port as a member of a port-based VLAN, you must create the port-based VLAN by following

Chapter 13: Virtual LANs166Tagged VLAN ConfigurationOn a port, the tag information within a frame is examined when it is received to determine if the

AT-GS950/16 Web Interface User Guide1674. Assign a VLAN ID by entering a VLAN ID in the VLAN ID field.The range for this field is 2 to 4,093. You can

Chapter 13: Virtual LANs168Modify a TaggedVLANTo modify the name or port assignments of a tagged VLAN, perform the following procedure:1. From the mai

AT-GS950/16 Web Interface User Guide169Figure 59. AT-GS950/16 Modify VLAN Page5. You cannot modify the VLAN ID on this web page. If you want to delete

17PrefaceThis guide contains instructions on how to use the AT-S114 Management Software to manage and monitor the AT-GS950/16 Gigabit Ethernet Switch.

Chapter 13: Virtual LANs170NoteThe Management VLAN is always Enabled on the DefaultVLAN and cannot be disabled.8. To change the port selections, click

AT-GS950/16 Web Interface User Guide171Tagged VLAN Port SettingsTo configure a VLAN port that is a member of a Tagged VLAN, perform the following proc

Chapter 13: Virtual LANs172to the port to enter the switch. Tagged frames are discarded at ingress.6. For the Ingress Filtering parameter, select one

AT-GS950/16 Web Interface User Guide173Port-Based VLAN ConfigurationA port-based VLAN is a group of ports on the switch that form a logical Ethernet s

Chapter 13: Virtual LANs1745. Assign a name to a VLAN by entering a name in the VLAN Name field.You can enter a value of up to 32 characters. For more

AT-GS950/16 Web Interface User Guide175Figure 63. Modify Port-Based VLAN Page5. Modify name or port assignments as needed. You cannot modify the Index

Chapter 13: Virtual LANs176Select MAC Address Forwarding Table ModeAfter you have configured the VLANs on the switch, you can select one of two modes

AT-GS950/16 Web Interface User Guide177View Dynamic Forwarding TableYou can view the MAC addresses the switch has stored in the forwarding table. You

Chapter 13: Virtual LANs178MAC Address - MAC address learned by the switch or assigned to the port.Type - Dynamic or Static:Dynamic - MAC address the

AT-GS950/16 Web Interface User Guide179Private VLAN ConfigurationYou can create, modify, and delete private VLANs by following the procedures in the f

Preface18Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.CautionCautions inform you that per

Chapter 13: Virtual LANs1804. Use the State radio buttons to select the Private VLAN state:Enabled - Will activate Private VLAN. The other parameters

AT-GS950/16 Web Interface User Guide1817. From the main menu on the left side of the page, select Save Settings to Flash to permanently save your chan

Chapter 13: Virtual LANs182View Current VLAN DatabaseYou can view the currently configured 802.1Q Tagged and Port-Based VLANs on the switch.To view th

AT-GS950/16 Web Interface User Guide183Port-Based VLAN table:VLAN Index - VLAN ID numbers.VLAN Name - VLAN names.VLAN Member - VLAN (untagged) member

Chapter 13: Virtual LANs184

185Chapter 14GVRPThis chapter contains the following sections: “Overview and Guidelines” on page 186 “General Configuration” on page 187 “Port Sett

Chapter 14: GVRP186Overview and GuidelinesThe GARP VLAN Registration Protocol (GVRP) allows network devices to share VLAN information and to use the i

AT-GS950/16 Web Interface User Guide187General ConfigurationPerform the following procedure to enable or disable GVRP:1. From the main menu on the lef

Chapter 14: GVRP188Port SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page

AT-GS950/16 Web Interface User Guide189Ignore - This parameter indicates that the setting in the All row does not apply to the Restricted VLAN Registr

AT-GS950/16 Web Interface User Guide19Allied Telesis Contact InformationIf you need assistance with this product, you may contact Allied Telesis techn

Chapter 14: GVRP190Time SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page

AT-GS950/16 Web Interface User Guide191LeaveTime - This parameter is the GARP Leave Timer. Its range is 30 - 2147483630 milli-seconds. This timer must

Chapter 14: GVRP192

193Chapter 15Quality of Service and Class of ServiceThis chapter provides descriptions of both the Quality of Service (QoS) and Class of Service (CoS)

Chapter 15: Quality of Service and Class of Service194OverviewWhen a port on an Ethernet switch becomes oversubscribed, its egress queues contain more

AT-GS950/16 Web Interface User Guide195Egress Queue vsPacket PriorityMappingEach port has four egress queues, labeled Low, Medium, High, Highest. Low

Chapter 15: Quality of Service and Class of Service196The procedure for changing the default mappings is found in “Associate Ports to CoS Priorities”

AT-GS950/16 Web Interface User Guide197instance, as long as there are packets in the Highest queue, it does not handle any packets in the High queue.

Chapter 15: Quality of Service and Class of Service198Mapping CoS Priorities to Egress QueuesBefore mapping the CoS priorities and the egress queues,

AT-GS950/16 Web Interface User Guide1994. For each Traffic Class whose queue you want to change, click on the Queue (Low, Medium, High, Highest) radio

Copyright © 2013 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Preface20

Chapter 15: Quality of Service and Class of Service200Associate Ports to CoS PrioritiesThe Port Priority value is assigned to an untagged frame at the

AT-GS950/16 Web Interface User Guide201Associate DSCP Classes to Egress QueuesIf you choose to use the DSCP tags in your Access Control policy configu

Chapter 15: Quality of Service and Class of Service2025. Click Apply under the DSCP Mapping drop-down menu.NoteYou can disable DSCP class mapping by s

AT-GS950/16 Web Interface User Guide203Queue Scheduling AlgorithmTo change the scheduling algorithm for the egress queues, perform the following proce

Chapter 15: Quality of Service and Class of Service204IPv6 Traffic Class MappingYou can create and delete entries for IPv6 traffic class mapping by fo

AT-GS950/16 Web Interface User Guide2054. Use the State radio buttons to select the IPv6 Traffic Class Priority state:Enabled - Will activate IPv6 Tra

Chapter 15: Quality of Service and Class of Service206Delete an IPv6Traffic ClassEntryTo delete an IPv6 traffic class priority entry, perform the foll

207Section IIIAdvanced FeaturesThis section contains the following chapters: Chapter 16, “SNMPv1 and v2c” on page 209 Chapter 17, “SNMPv3” on page 2

208

209Chapter 16SNMPv1 and v2cThis chapter contains a description of SNMPv1 and SNMPv2c and the procedures for configuring with these protocols. This cha

21Section IGetting StartedThis section contains the following chapters: Chapter 1, “Starting a Web Browser Session” on page 23 Chapter 2, “System Co

Chapter 16: SNMPv1 and v2c210SNMPv1 and SNMPv2c OverviewYou can manage a switch by viewing and configuring the management information base (MIB) objec

AT-GS950/16 Web Interface User Guide211Trap Receiver AttributesA trap is a message sent by the agent to one or more managers to indicate the occurrenc

Chapter 16: SNMPv1 and v2c212Activate SNMP InterfaceThe SNMP interface is activated by default. If you want to de-activate it or re-activate it, go to

AT-GS950/16 Web Interface User Guide213SNMPv1 and SNMPv2c User and Group NamesSNMPv1 and SNMPv2c User Name and Group Name definitions is the basis for

Chapter 16: SNMPv1 and v2c214NoteIf you choose to use the default User and Group Names (ReadOnly and ReadWrite) that are already displayed in the tabl

AT-GS950/16 Web Interface User Guide215Modify User andGroup NamesIf you need to modify an entry in the SNMP User/Group page, you must first delete the

Chapter 16: SNMPv1 and v2c216SNMP Community StringsA community string has attributes for controlling who can use the string and what the string will a

AT-GS950/16 Web Interface User Guide217NoteThis name must match one of the User Names displayed on the SNMP User/Group page. See “Create User and Grou

Chapter 16: SNMPv1 and v2c2184. From the main menu on the left side of the page, select Save Settings to Flash to permanently save your changes.

AT-GS950/16 Web Interface User Guide219SNMP TrapsA Host IP address is used to specify a management device that needs to receive SNMP traps sent by the

22

Chapter 16: SNMPv1 and v2c2205. Enter the Host IP Address for the management device that is to receive the SNMP traps in one of the Host IP Address fi

AT-GS950/16 Web Interface User Guide221Delete a TrapHost Table EntryUse the following procedure to delete a Host table entry:1. From the main menu on

Chapter 16: SNMPv1 and v2c222

223Chapter 17SNMPv3This chapter contains a description of SNMPv3 and the procedures for configuring this protocol. This chapter contains the following

Chapter 17: SNMPv3224OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c protocol implementation which is described in Chapter 16 on

AT-GS950/16 Web Interface User Guide225In addition, you have the option of assigning no user authentication. In this case, no authentication is perfor

Chapter 17: SNMPv3226In addition, you can define an MIB view that the user can access or an MIB view that the user cannot access. When you want to per

AT-GS950/16 Web Interface User Guide2275. Finally, the traps can be defined on the Trap Management page based on the Community or User Name. See Figur

Chapter 17: SNMPv3228SNMPv3 User and Group NamesAn SNMPv3 User Name and Group Name definition is the basis for all other SNMPv3 tables. You can create

AT-GS950/16 Web Interface User Guide229SHA - The SHA authentication protocol. Users are authenticated with the SHA authentication protocol after a mes

23Chapter 1Starting a Web Browser SessionThis chapter contains the procedures for starting, using, and quitting a web browser management session on th

Chapter 17: SNMPv3230Deleting SNMPv3User and GroupNamesThis procedure explains how to delete an entry on the SNMP User/Group page.1. From the main men

AT-GS950/16 Web Interface User Guide231SNMPv3 View NamesThe SNMPv3 View names are defined in the SNMP Group Access table and are based on the User and

Chapter 17: SNMPv32323. Enter the Group Name.NoteThis entry must be pre-defined on the SNMP User/Group page. Refer to “Creating SNMPv3 View Names” on

AT-GS950/16 Web Interface User Guide233Figure 87. SNMP Group Access Table Example for SNMPv310. From the main menu on the left side of the page, selec

Chapter 17: SNMPv3234SNMPv3 View Table The SNMPv3 View table specifies the MIB object access criteria for each View Name. If the View Name is not spec

AT-GS950/16 Web Interface User Guide2355. Enter “1” for the OID Mask.6. Enter the View Type. Choose from the following: Included: This selection allow

Chapter 17: SNMPv3236NoteThe views corresponding to the ReadOnly and ReadWrite Group Names are default values and cannot be removed.3. From the main m

AT-GS950/16 Web Interface User Guide237SNMPv3 TrapsThe creation, modification and deletion of traps for SNMPv3 is identical to the procedure for SNMPv

Chapter 17: SNMPv3238SNMP Engine IDAn SNMP agent has an engine ID to uniquely identify the agent in a device. In addition, the engine ID uniquely iden

AT-GS950/16 Web Interface User Guide2392. From the SNMP folder, select Engine ID.The SNMP Engine ID Settings page is displayed. See Figure 90 on page

Chapter 1: Starting a Web Browser Session24Establishing a Remote Connection to the Web Browser InterfaceThe AT-GS950/16 switch is shipped with a pre-a

Chapter 17: SNMPv3240

241Chapter 18Access Control ConfigurationThis chapter contains a description of the AT-GS950/16 switch’s Access Control Configuration feature and the

Chapter 18: Access Control Configuration242OverviewAccess Control configuration allows you to control different aspects of the Ethernet traffic as it

AT-GS950/16 Web Interface User Guide243Policy SettingsThe Policy Settings page lets you create one or multiple IPv4 and/or IPv6 policies for filtering

Chapter 18: Access Control Configuration244Figure 92. IPv4 Policy Settings PageTo create an IPv6 policy, click Add IPv6. The IPv6 Policy Settings page

AT-GS950/16 Web Interface User Guide2454. Enter a number in the Policy Index field.The Policy Index must be a unique number within the range of 1 - 65

Chapter 18: Access Control Configuration246IPv4 Ether Type - Protocol of the ethernet frame protocol ranging from 0000 - FFFF. Applies to IPv4 only.Pr

AT-GS950/16 Web Interface User Guide247Replaced-DSCP - DSCP priority level ranging from 0 - 63. To set this parameter, click the Replaced-DSCP radio b

Chapter 18: Access Control Configuration2483. From the Policy Settings page, identify which policy whose status you want changed and click the Enable

AT-GS950/16 Web Interface User Guide2494. Change the parameters as required. You cannot change the policy index number from this page.NoteSee “Create

AT-GS950/16 Web Interface User Guide25The default user name is “manager” and the default password is “friend.” The login name and password are case-se

Chapter 18: Access Control Configuration250Figure 96. Classifier Detail PageFor a description of the displayed settings, refer to “Create a Policy” on

AT-GS950/16 Web Interface User Guide251Rate Control SettingsThe Rate Control Settings page lets you set the Committed Information Rate (CIR) for bandw

Chapter 18: Access Control Configuration2525. Click Add.The rate control entry is displayed at the bottom of the table. If you do not see your new ent

AT-GS950/16 Web Interface User Guide253Delete a RateControl EntryTo delete a rate control entry, perform the following procedure:1. From the main menu

Chapter 18: Access Control Configuration254Policy DatabaseThe Policy Database page displays the status of the order that policies are applied to each

AT-GS950/16 Web Interface User Guide255Display SpecificPolicyInformationTo display information for a specific policy, perform the following procedure:

Chapter 18: Access Control Configuration256

257Chapter 19RMONThis chapter contains the following sections: “Overview” on page 258 “Enable and Disable RMON” on page 259 “Port Statistics” on pa

Chapter 19: RMON258OverviewThe RMON (Remote MONitoring) MIB is used with SNMP applications to monitor the operations of network devices. The switch su

AT-GS950/16 Web Interface User Guide259Enable and Disable RMONYou can use your SNMP Network Management System (NMS) software and the RMON section of t

Chapter 1: Starting a Web Browser Session26 System Physical Interface Bridge SNMP Access Control RMON Voice VLAN Security DHCP Snooping LLDP

Chapter 19: RMON260Port StatisticsYou can remotely view individual port statistics with RMON by using your SNMP NMS software and the RMON portion of t

AT-GS950/16 Web Interface User Guide261Figure 103. Ethernet Statistics Configuration Example5. If you want to configure RMON statistics for other port

Chapter 19: RMON262HistoriesRMON histories are snapshots of port statistics. They are taken by the switch at predefined intervals and can be used to i

AT-GS950/16 Web Interface User Guide263snapshot of RMON statistics. Different ports can have different numbers of buckets. The range is 1 to 50 bucket

Chapter 19: RMON264EventsAn event specifies the action of the switch when the ingress packet activity on a port crosses a statistical threshold define

AT-GS950/16 Web Interface User Guide265Community: This parameter specifies the community where you want to send the SNMP trap.Owner: This parameter is

Chapter 19: RMON266AlarmsRMON alarms are used to generate alert messages when packet activity on designated ports rises above or falls below specified

AT-GS950/16 Web Interface User Guide2672. From the RMON folder, select Alarm.The RMON Alarm Settings Page is displayed. See Figure 108.Figure 108. RMO

Chapter 19: RMON268monitored statistic becomes less than this threshold level, an alarm event is triggered. The parameter’s range is 1 to 2147483647.R

269Chapter 20Voice VLANThis chapter contains a description of the AT-GS950/16 switch’s Voice VLAN feature and the procedures to create, modify, and de

AT-GS950/16 Web Interface User Guide27Web Browser ToolsYou can use the web browser tools to move around the management pages. Selecting Back on your b

Chapter 20: Voice VLAN270OverviewThe AT-GS950/16 Voice VLAN feature is specifically designed to maintain high-quality, uninterrupted voice traffic thr

AT-GS950/16 Web Interface User Guide271When you are configuring the voice VLAN parameters, you must enter the complete MAC address of at least one of

Chapter 20: Voice VLAN272One or more ports in your voice VLAN must be configured as Static tagged or untagged members. Static VLAN members are permane

AT-GS950/16 Web Interface User Guide273General GuidelinesHere is a summary of the rules to observe when you create a voice VLAN: One voice VLAN can b

Chapter 20: Voice VLAN274ConfigurationPrior to configuring your voice VLAN, you must first configure a tagged VLAN. This VLAN will be used as a basis

AT-GS950/16 Web Interface User Guide2753. From the Voice VLAN field at the top of the page, select one of the following choices by clicking one of the

Chapter 20: Voice VLAN276NoteThe voice VLAN Auto-Detection feature can only be enabled on “Not Member” ports of the voice VLAN. Member ports cannot ha

AT-GS950/16 Web Interface User Guide277OUI SettingYou can create and delete Voice VLAN OUI Settings by following the procedures in these sections:  “

Chapter 20: Voice VLAN278Modify OUISettingTo modify or delete an OUI, it must be first be deleted and then re-entered by following the procedure in “C

279Chapter 21SecurityThis chapter contains information about the Port-based security features and the procedures for setting this feature. This chapte

Chapter 1: Starting a Web Browser Session28Quitting a Web Browser Management SessionTo exit a web browser management session, close the web browser.

Chapter 21: Security280Port Access ControlThis section contains information and configuration procedures for the Port-based Access Control. The follow

AT-GS950/16 Web Interface User Guide281 The Dial-in User (local) authentication method allows you to set up the authentication parameters internally

Chapter 21: Security282TACACS+: This parameter configures port security for TACACS+ authentication. After completing Step 4 through Step 6, you must c

AT-GS950/16 Web Interface User Guide283In User authentication. For configuration information, see “RADIUS Client” on page 286, “TACACS+” on page 289,

Chapter 21: Security284Multiple: The port is set to permit multiple clients on an authenticator port. An authenticator mode forwards packets from all

AT-GS950/16 Web Interface User Guide285Re-authentication Period: Specifies the time interval for reauthentication of clients on an authenticator port.

Chapter 21: Security286RADIUS ClientYou can use the RADIUS client with 802.1x port-based access control to authenticate which packets are forwarded th

AT-GS950/16 Web Interface User Guide287See “Configuration of IPv4 Address, Subnet Mask and Gateway Address” on page 32. You must specify the user nam

Chapter 21: Security2884. Type the port number in the Server Port field that you want to assign to UDP. You may only assign one port number to this pa

AT-GS950/16 Web Interface User Guide289TACACS+You can use the TACACS+ client with 802.1x port-based access control to authenticate which packets are f

29Chapter 2System ConfigurationThis chapter provides procedures to configure basic system parameters for the AT-GS950/16 switch and contains informati

Chapter 21: Security290 The TACACS+ server must communicate with the switch through a port that is an untagged member of the Default VLAN and is conf

AT-GS950/16 Web Interface User Guide291For an IPv6 address, click IPv6, then enter the address using xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx hexadecim

Chapter 21: Security292Dial-in User— Local AuthenticationThe Dial-in User feature provides the local authentication server for port security when a re

AT-GS950/16 Web Interface User Guide293Figure 117. Dial-In User Page3. In the User Name field, type a name for the user.4. In the Password field, type

Chapter 21: Security294Modify a Dial-in UserTo modify the settings for a dial-in user, do the following:1. From the main menu on the left side of the

AT-GS950/16 Web Interface User Guide295Destination MAC FilterThis section contains an explanation of the Destination MAC Filter feature, as well a pro

Chapter 21: Security296Figure 119. Destination MAC Filter Page3. To enter the MAC address that you want filtered, enter the MAC address into the MAC A

AT-GS950/16 Web Interface User Guide2973. Select the Delete button next to the MAC address that you want to delete.The MAC address is removed from the

Chapter 21: Security298

AT-GS950/16 Web Interface User Guide299Chapter 22DHCP SnoopingThis chapter contains a description of the DHCP Snooping feature and the procedures for

3ContentsList of Figures ...

Chapter 2: System Configuration30System Management InformationThis section explains how to assign a name, location, and contact information for the AT

Chapter 22: DHCP Snooping300OverviewThe DHCP Snooping feature provides security by inspecting ingress packets for the correct IP and MAC address infor

AT-GS950/16 Web Interface User Guide301A network device initially sends out a DHCPDISCOVER packet so that a DHCP server will respond. It waits for and

Chapter 22: DHCP Snooping302General GuidelinesHere is a summary of the rules to observe when you configure DHCP Snooping: A trusted port is connected

AT-GS950/16 Web Interface User Guide303General ConfigurationYou can enable DHCP Snooping and configure DHCP Snooping general settings on the switch by

Chapter 22: DHCP Snooping3045. From the main menu on the left side of the page, select Save Settings to Flash to activate or de-activate the DHCP Snoo

AT-GS950/16 Web Interface User Guide305Enable - The AT-S114 Management software inserts the DHCP Option 82 information into the DHCP packets.Disable -

Chapter 22: DHCP Snooping306VLAN SettingYou can create and delete DHCP Snooping VLAN settings by following the procedures in these sections:  "C

AT-GS950/16 Web Interface User Guide307Modifying aVLANTo modify a VLAN ID, you must first delete it (by following the procedure outlined in “Deleting

Chapter 22: DHCP Snooping308Trusted and Untrusted Port ConfigurationThe following procedure describes how to configure the DHCP Snooping trusted inter

AT-GS950/16 Web Interface User Guide309Figure 124. Trusted Interfaces Page Example5. If you choose to configure other switch ports as trusted or untru

AT-GS950/16 Web Interface User Guide31System Name - Specifies a name for the switch, for example, Sales. The name is optional and may contain up to 15

Chapter 22: DHCP Snooping310Binding DatabaseThe Binding Database displays learned and statically assigned MAC Address and IP Address information for e

AT-GS950/16 Web Interface User Guide311MAC Address - Enter the host’s MAC Address.IP Address - Enter the static IP Address assigned to the host using

Chapter 22: DHCP Snooping312VLAN ID - This parameter shows the host’s VLAN ID of which the DHCP client is a member.IP Address - This parameter is the

313Chapter 23LLDPLink Layer Discovery Protocol (LLDP) allows Ethernet network devices, such as switches and routers, to receive and transmit device-re

Chapter 23: LLDP314OverviewThe data sent and received by LLDP are useful for many reasons. The switch can discover other devices directly connected to

AT-GS950/16 Web Interface User Guide315Global ConfigurationThe LLDP Global Settings page has three sections: The top of the page contains the enablin

Chapter 23: LLDP316Enabling orDisabling LLDPTo enable or disable the LLDP feature, perform the following procedure:1. From the main menu on the left s

AT-GS950/16 Web Interface User Guide317DisplayingSystemInformationTo display system information about the switch, do the following:1. From the main me

Chapter 23: LLDP318Neighbors InformationTo view the information received from the neighboring network devices, perform the following procedure:1. From

319Chapter 24Network StatisticsThe sections in this chapter explain how to display traffic, error, and history statistics about the network traffic on

Chapter 2: System Configuration32Configuration of IPv4 Address, Subnet Mask and Gateway AddressThis procedure explains how to change the IP address, s

Chapter 24: Network Statistics320OverviewStatistics provide important information for troubleshooting switch problems at the port level. The AT-S114 M

AT-GS950/16 Web Interface User Guide321Traffic Comparison StatisticsThe Traffic Comparison chart allows you to display a specified traffic statistic o

Chapter 24: Network Statistics322Table 5 Traffic Comparison OptionsOption DefinitionInbound Octet Rate (Bytes/s) Measures the rate of inbound octet b

AT-GS950/16 Web Interface User Guide3234. To select the amount of time before the screen is refreshed, select one of the options below and click Auto

Chapter 24: Network Statistics3245. To select the color of the Traffic Comparison chart, select Color. Choose one of the following colors: Green Blu

AT-GS950/16 Web Interface User Guide325Error Group StatisticsThe Error Group chart displays the discard and error counts for a specified port. To disp

Chapter 24: Network Statistics3264. To select the amount of time before the screen is refreshed, select one of the options below and click Auto Refres

AT-GS950/16 Web Interface User Guide327Historical Status StatisticsThe Historical Status chart allows you to select from 12 statistics to view for a s

Chapter 24: Network Statistics328Table 6 Historical Status OptionsOption DefinitionInbound Octets (Bytes) Measures the number of inbound octet bits i

AT-GS950/16 Web Interface User Guide3294. To select the amount of time before the screen is refreshed, select one of the options below and click Auto

AT-GS950/16 Web Interface User Guide33System Subnet Mask - Displays the current subnet mask of the switch. To change the subnet mask, enter a new subn

Chapter 24: Network Statistics330Figure 133. Historical Statistics Page Example8. From the menu on the left side of the page, select Save Settings to

331Section IVToolsThis section contains the following chapters: Chapter 25, “Software/Configuration Updates” on page 333 Chapter 26, “Cable Diagnost

332

333Chapter 25Software/Configuration UpdatesThis chapter explains the methods for upgrading the AT-S114 Management Software on the switch and saving co

Chapter 25: Software/Configuration Updates334OverviewYou can use the Management Software Updates features to upgrade the AT-S114 Management Software t

AT-GS950/16 Web Interface User Guide335Upgrade Firmware Image via HTTPThis section describes how to upgrade a firmware image of the AT-S114 Management

Chapter 25: Software/Configuration Updates3362. From the Firmware Upgrade folder, select via HTTP.The Firmware Upgrade via HTTP Page is displayed. See

AT-GS950/16 Web Interface User Guide337Upgrade Firmware Image via TFTPThis section describes how to upgrade a firmware image of the AT-S114 Management

Chapter 25: Software/Configuration Updates338Figure 135. Firmware Upgrade via TFTP PageThe Image Version shows the current version and date of softwar

AT-GS950/16 Web Interface User Guide339Download or Upload a Configuration File via HTTPThis section describes how to download or upload a configuratio

Chapter 2: System Configuration34IPv6 System ConfigurationThis procedure explains how to enable IPv6 and configure IPv6 system settings.To enable IPv6

Chapter 25: Software/Configuration Updates340ConfigurationFile DownloadTo download or save the AT-S114 configuration file from the switch to your PC,

AT-GS950/16 Web Interface User Guide341ConfigurationFile UploadTo upload an AT-S114 configuration file from your PC to the switch, perform the followi

Chapter 25: Software/Configuration Updates3424. If you cannot access the Configuration File Backup/Restore via HTTP page, refresh the page and log bac

AT-GS950/16 Web Interface User Guide343Download or Upload a Configuration File via TFTPThis section describes how to download or upload a configuratio

Chapter 25: Software/Configuration Updates3443. Select the Backup button.A message is displayed indicating that the file has downloaded.ConfigurationF

345Chapter 26Cable DiagnosticsThis chapter provides procedures to run cable diagnostics on the cables connected to the switch ports. If a port is sele

Chapter 26: Cable Diagnostics346Port: This parameter displays the port (cable) selected.Test Results: Displays the diagnostic results for each pair in

347Chapter 27LED ECO ModeThis chapter provides the procedures to enable and disable the LED ECO mode.The LED ECO Mode can be used to conserve addition

Chapter 27: LED ECO Mode348Enable LED ECO ModeTo enable LED ECO Mode, perform the following procedure:1. From the main menu on the left side of the pa

AT-GS950/16 Web Interface User Guide349Disable LED ECO ModeTo disable LED ECO Mode, perform the following procedure:1. From the main menu on the left

AT-GS950/16 Web Interface User Guide355. Change the IPv6 system settings by observing or entering new information in the following fields:IPv6 Unicast

Chapter 27: LED ECO Mode350

351Chapter 28Energy-Efficient EthernetThis chapter provides the procedures to enable and disable the IEEE 802.3az Energy-Efficient Ethernet (EEE) feat

Chapter 28: Energy-Efficient Ethernet352Enable EEETo enable EEE, perform the following procedure:1. From the main menu on the left side of the page, s

AT-GS950/16 Web Interface User Guide353Disable EEETo disable EEE, perform the following procedure:1. From the main menu on the left side of the page,

Chapter 28: Energy-Efficient Ethernet354

355Chapter 29Rebooting the AT-GS950/16This chapter provides the procedures for rebooting the AT-GS950/16 switch by using the Normal reboot function pr

Chapter 29: Rebooting the AT-GS950/16356Switch RebootThe following procedure outlines how to reboot your AT-GS950/16 switch. CautionThis procedure reb

AT-GS950/16 Web Interface User Guide3574. In the Reboot Type field, select Normal from the pull-down menu. When the switch is rebooted with this selec

Chapter 29: Rebooting the AT-GS950/16358Configure Factory Default ValuesThe following procedure returns all AT-S114 Management software parameters to

AT-GS950/16 Web Interface User Guide359address, subnet mask, and gateway settings are managed by the DHCP server.5. Click Apply.The switch begins the

Chapter 2: System Configuration36IPv6 Neighbor ConfigurationYou can configure the switch’s IPv6 neighbors manually if a router is unavailable.The proc

Chapter 29: Rebooting the AT-GS950/16360Password Protection of Factory ResetIf your switch is located in a controlled environment, such as a locked sw

AT-GS950/16 Web Interface User Guide3612. From the Tools folder, select Reboot.The Factory Default Reset/Reboot Page is displayed. See Figure 148 on p

Chapter 29: Rebooting the AT-GS950/16362remain Enabled on both the switch management software and the physical front panel ecoFriendly button.8. Click

AT-GS950/16 Web Interface User Guide363Figure 151. Factory Default Reset/Reboot Page with Password Entry5. Enter the same password that you defined wh

Chapter 29: Rebooting the AT-GS950/16364

365Chapter 30Pinging a Remote SystemThis chapter provides the procedure for pinging a node on your network from the AT-GS950/16 switch. This procedure

Chapter 30: Pinging a Remote System3663. Configure the following parameters:Destination IP Address - The IP address of the node you want to ping:For a

367Appendix AMSTP OverviewThis appendix provides background information about the Multiple Spanning Tree Protocol (MSTP) and includes the following se

Appendix A: MSTP Overview368OverviewIn the AT-GS950/16, STP and RSTP are referred to as single-instance spanning trees that search for physical loops

AT-GS950/16 Web Interface User Guide369NoteThe implementation of MSTP in the management software complies fully with the new IEEE 802.1s standard and

AT-GS950/16 Web Interface User Guide37Figure 9. IPv6 Neighbor Settings Page with Addresses6. From the main menu on the left side of the page, select S

Appendix A: MSTP Overview370Multiple Spanning Tree Instance (MSTI)The individual spanning trees in MSTP are referred to as Multiple Spanning Tree Inst

AT-GS950/16 Web Interface User Guide371Figure 155. MSTP Example of Two Spanning Tree Instances Multiple VLANsAssigned to anMSTIAn MSTI can contain mor

Appendix A: MSTP Overview372Figure 156. Multiple VLANs in an MSTIIn this example, because an MSTI contains more than one VLAN, the links between the V

AT-GS950/16 Web Interface User Guide373General GuidelinesHere are the guidelines for MSTIs: The AT-GS950/16 switch can support up to 31 spanning tree

Appendix A: MSTP Overview374VLAN and MSTI AssociationsPart of the task of configuring MSTP involves assigning VLANs to spanning tree instances. The ma

AT-GS950/16 Web Interface User Guide375Ports in Multiple MSTIsA port can be a member of more than one MSTI at a time if it is a tagged member of one o

Appendix A: MSTP Overview376Multiple Spanning Tree RegionsAnother important concept of MSTP is regions. An MSTP region is defined as a group of bridge

AT-GS950/16 Web Interface User Guide377The AT-GS950/16 switch determines regional boundaries by examining the MSTP BPDUs received on the ports. A port

Appendix A: MSTP Overview378Each MSTI functions as an independent spanning tree within a region. Consequently, each MSTI must have a root bridge to lo

AT-GS950/16 Web Interface User Guide379 Each MSTI must have a regional root for locating loops in the instance. MSTIs can share the same regional roo

Chapter 2: System Configuration382. From the System folder, select IPv6 Neighbor Settings.The IPv6 System Settings Page is displayed. See Figure 9 on

Appendix A: MSTP Overview380An MSTP region can be considered as a virtual bridge. The implication is that other MSTP regions, and STP and RSTP single-

AT-GS950/16 Web Interface User Guide381Associating VLANs to MSTIsWhen you are using Multiple Spanning Tree, Allied Telesis recommends that you assign

Appendix A: MSTP Overview382Figure 158. CIST and VLAN Guideline - Example 2When port 3 on switch B receives a BPDU, the switch notes the port sending

AT-GS950/16 Web Interface User Guide383VLANs Across Different RegionsSpecial consideration needs to be taken into account when you connect different M

Appendix A: MSTP Overview384Here is an example. Assume that you have two regions that contain the following VLANS:Region 1 VLANsRegion 2 VLANsAccounti

AT-GS950/16 Web Interface User Guide385Summary of GuidelinesCareful planning is essential for the successful implementation of MSTP. This section revi

Appendix A: MSTP Overview386

387Appendix BAT-GS950/16 Default ParametersTable 9 lists the factory default settings for the AT-S114 Management software on the AT-GS950/16 switch. T

Appendix B: AT-GS950/16 Default Parameters388IP address none IPv4 address in xxx.xxx.xxx.xxx hex format; except 127.0.0.1 / IPv6 address in xxxx:xxxx:

AT-GS950/16 Web Interface User Guide389Daylight Savings Time StatusDisabled Enabled/DisabledFrom (Month:Day:HH:MM)January:01:00:00-To (Month:Day:HH:MM

AT-GS950/16 Web Interface User Guide39Figure 12. Example Search with Both Addresses To find all static IPv6 neighbors, type asterisks in the Neighbor

Appendix B: AT-GS950/16 Default Parameters390Physical InterfacePort All, 1 - 16-Trunk--Type 1000TX-Link StatusDown Up/DownAdmin StatusEnabled Enabled/

AT-GS950/16 Web Interface User Guide391Bridge/Spanning Tree/MSTPGlobal MSTP Status Disabled Enabled/DisabledMaximum MST Instances31 1 - 31Bridge Prior

Appendix B: AT-GS950/16 Default Parameters392Port State Disable Enable/Disable/IgnoreBridge/Trunk Config/TrunkingTrunk StatusDisabled Active/Passive/M

AT-GS950/16 Web Interface User Guide393Port Member -All, 1 - 16Bridge/Static Multicast802.1Q VLAN - ID 1 - 4093Port-Based VALN Index- ID 1 - 52Group M

Appendix B: AT-GS950/16 Default Parameters394Ingress Rate LimitingBandwidth64 kbps x rate limit where rate limit (1 - 15625)Ingress Rate LimitingStatu

AT-GS950/16 Web Interface User Guide395Bridge/GVRPGVRP Status Disabled Enabled/DisabledDynamic Vlan Status Enabled Enabled/DisabledRestricted VLAN Reg

Appendix B: AT-GS950/16 Default Parameters396SNMP User/GroupUser Namenone 1 - 32 charactersGroup Namenone 1 - 32 charactersSNMP Version v1 v1/v2c/v3en

AT-GS950/16 Web Interface User Guide397Destination MAC Mask Lengthnone1 - 48VLAN ID none 0 - 4093802.1p Priority none 0 - 7Ether Typenone 0000 - FFFF

Appendix B: AT-GS950/16 Default Parameters398RMONRMON Status Disable Disable/EnableStatistics Index none 1 - 65535Statistics Portnone-Statistics Owner

AT-GS950/16 Web Interface User Guide399Event Ownernone 1 - 32 charactersVoice VLANVoice VLAN Disabled Enabled/DisabledVLAN ID1-Aging Time1 hour 1 - 12

Contents4Bridge Configuration ...

Chapter 2: System Configuration40IP Access List ConfigurationWhen the IP Access List feature is enabled, remote access to the AT-S114 management softw

Appendix B: AT-GS950/16 Default Parameters400Maximum Request 2 2 - 10Re-authentication Period3600 seconds 1 - 65535 secondsServer Timeout 30 seconds 1

AT-GS950/16 Web Interface User Guide401Destination MAC Filter MAC Addressnone Rule: 1. Does not support Multicast MAC address (01:xx:xx:xx:xx:xx)

Appendix B: AT-GS950/16 Default Parameters402Binding Database Portport 1All, 1 - 16Binding Database TypeStaticDynamic/StaticBinding Database Lease Tim

AT-GS950/16 Web Interface User Guide403Historical Status Port1ports 1 - 16Historical Status ColorGreen 12 colorsToolsFirmware Upgrade via HTTP Firmwar

Appendix B: AT-GS950/16 Default Parameters404Reboot selection Normal Normal/Factory Default/Factory Default Except IPPing - Destination IP Address0.0.

AT-GS950/16 Web Interface User Guide413. Enter an IP address one of the IP Address fields: For an IPv4 address, click IPv4, then enter the address usi

Chapter 2: System Configuration42User Name and Password ConfigurationPassword protection is always enabled for access to the AT-S114 Management softwa

AT-GS950/16 Web Interface User Guide436. To add a password that corresponds to the user name entered in Step 5, enter a password of up to 12 alphanume

Chapter 2: System Configuration44Figure 16. Modify Administration Page4. To change a password, enter a password of up to 12 alphanumeric characters in

AT-GS950/16 Web Interface User Guide45User Interface ConfigurationThis procedure explains how to enable and disable the user interfaces on the switch.

Chapter 2: System Configuration46NoteSee Chapter 16, “SNMPv1 and v2c” on page 209 and Chapter 17, “SNMPv3” on page 223 to configure the remaining SNMP

AT-GS950/16 Web Interface User Guide47System TimeThe procedures in this section describe how to configure the system time by manually entering the tim

Chapter 2: System Configuration483. Use the pull-down menu to set the Clock Mode parameter to Local time.4. In the Local Time Settings section, set th

AT-GS950/16 Web Interface User Guide49Setting DaylightSavingsParametersIf you want to configure the switch for daylight savings time, perform the foll

AT-GS950/16 Web Interface User Guide5Chapter 11: IGMP Snooping ...

Chapter 2: System Configuration50SSL SettingsThe AT-GS950/16 switch has a web browser server for remote management of the unit with a web browser appl

AT-GS950/16 Web Interface User Guide513. From the SSL Settings field, select one of the following choices from the pull-down menu:Enabled - The secure

Chapter 2: System Configuration52DHCP and ATI Web Discovery ToolThe AT-GS950/16 Gigabit Ethernet Smart switch is managed through a web browser interfa

AT-GS950/16 Web Interface User Guide53DHCP Client ConfigurationThis procedures in this section explain how to activate and deactivate the DHCP client

Chapter 2: System Configuration545. Use the ATI Web Discovery Tool to find the new IP address assigned to the switch by the DHCP server. See “DHCP and

AT-GS950/16 Web Interface User Guide55To activate or deactivate the DHCP client on the switch for IPv6, perform the following procedure:1. From the ma

Chapter 2: System Configuration56DHCP Auto ConfigurationIf you need to automatically update the switch’s configuration files via a remote server, the

AT-GS950/16 Web Interface User Guide57System Information DisplayThe Switch Information page is initially displayed when you first log into the AT-GS95

Chapter 2: System Configuration58Hardware Information Section:Version - The hardware version number.DRAM Size - The size of the DRAM, in megabytes.Fla

AT-GS950/16 Web Interface User Guide59IPv6 Default Gateway - This parameter displays the default gateway IPv6 address. Refer to “IPv6 System Configura

Contents6Advanced Features ...

Chapter 2: System Configuration60System Log ConfigurationThe System log is designed to monitor the operation of the AT-GS950/16 switch by recording th

AT-GS950/16 Web Interface User Guide613. From the Syslog Status field, select one of the following choices from the pull-down menu:Enabled - The Syste

Chapter 2: System Configuration62

63Section IIBridge ConfigurationThis section contains the following chapters: Chapter 3, “Port Configuration” on page 65 Chapter 4, “STP and RSTP” o

64

65Chapter 3Port ConfigurationThis chapter provides a description of the physical characteristics of the ports and a procedure that explains how to vie

Chapter 3: Port Configuration66OverviewThis chapter describes how to display and modify the physical characteristics of an AT-GS950/16 switch. You can

AT-GS950/16 Web Interface User Guide67Displaying and Configuring PortsThis procedure explains how to configure the ports on the AT-GS950/16 switch usi

Chapter 3: Port Configuration68is 1000TX for 10/100/1000Base-T twisted-pair ports (1 through 14, 15R and 16R) and 100FX or 1000TX for the SFP ports (1

AT-GS950/16 Web Interface User Guide69NoteWhen QoS is enabled on a port, the Jumbo frame parameter can not be enabled. To enable or disable QoS, see “

AT-GS950/16 Web Interface User Guide7Display Specific Policy Information...

Chapter 3: Port Configuration70 The only valid setting for the SFP ports is Auto-Negotiation.Flow Control - This parameter reflects the current flow

71Chapter 4STP and RSTPThis chapter provides background information about the Spanning Tree Protocol (STP) and the Rapid Spanning Tree Protocol (RSTP)

Chapter 4: STP and RSTP72OverviewThe performance of an Ethernet network can be negatively impacted by the formation of a data loop in the network topo

AT-GS950/16 Web Interface User Guide73Bridge Priorityand the RootBridgeThe first task that bridges perform when a spanning tree protocol is activated

Chapter 4: STP and RSTP74Path Costs and Port CostsAfter the root bridge has been selected, the bridges determine if the network contains redundant pat

AT-GS950/16 Web Interface User Guide75.ForwardingDelay andTopologyChangesIf there is a change in the network topology due to a failure, removal, or ad

Chapter 4: STP and RSTP76The forwarding delay value is adjustable in the AT-S114 Management software. The appropriate value for this parameter depends

AT-GS950/16 Web Interface User Guide77Figure 24. Point-to-Point PortsA port operates as an edge port when it is connected to a network terminal device

Chapter 4: STP and RSTP78Mixed STP andRSTP NetworksRSTP IEEE 802.1w is fully compliant with STP IEEE 802.1d. Your network can consist of bridges runni

AT-GS950/16 Web Interface User Guide79Figure 26. STP and VLAN Fragmentation with Untagged PortsYou can avoid this problem by connecting the switches u

Contents8Trusted and Untrusted Port Configuration...308Bi

Chapter 4: STP and RSTP80Figure 27. STP and VLAN Compatibility with Tagged PortsNoteFor information about tagged and untagged ports, refer to Chapter

AT-GS950/16 Web Interface User Guide81STP and RSTP Global SettingsTo configure the global (non port-specific) STP and RSTP settings, perform the follo

Chapter 4: STP and RSTP82The Spanning Tree Protocol Settings page allows you to configure global STP or RSTP protocols, as well as to view current set

AT-GS950/16 Web Interface User Guide835. Once you have configured the parameters, click Apply. Clicking this button activates STP or RSTP and the abov

Chapter 4: STP and RSTP84STP and RSTP Port SettingsTo configure the STP or RSTP port-specific settings, perform the following procedure:1. From the ma

AT-GS950/16 Web Interface User Guide850 to 200,000,000. A setting of 0 indicates Auto (path cost is based on link negotiation). The path cost is descr

Chapter 4: STP and RSTP86Auto - Automatically determines whether or not the port is connected to a network device in the network topology. By default,

87Chapter 5 Multiple Spanning Tree ProtocolThis chapter provides the procedures for configuring Multiple Spanning Tree Protocol (MSTP). You can find a

Chapter 5: Multiple Spanning Tree Protocol88MSTP Global SettingsTo configure the MSTP global settings, perform the following procedure:1. From the mai

AT-GS950/16 Web Interface User Guide894. In the upper portion of the page, you can set the following parameters:Global STP Status - Use this menu to a

AT-GS950/16 Web Interface User Guide9Multiple Spanning Tree Regions...

Chapter 5: Multiple Spanning Tree Protocol90Max Hop Count - The Maximum Hop Count is a parameter set in a BPDU packet when it originates. It is decrem

AT-GS950/16 Web Interface User Guide91Generic MSTP Port SettingsTo configure the generic MSTP parameters for each of the ports, perform the following

Chapter 5: Multiple Spanning Tree Protocol92Blocking - A blocking state does not allow network traffic to be sent or received on a the port, except fo

AT-GS950/16 Web Interface User Guide93False - This switch can only operate with RSTP and MSTP packets.The net effect of setting all ports on the switc

Chapter 5: Multiple Spanning Tree Protocol94MST SettingsYou can create, modify and delete MST instance settings with the procedures in the following s

AT-GS950/16 Web Interface User Guide95See “Multiple Spanning Tree Regions” on page 376 for more information.Revision Level - The parameter indicates t

Chapter 5: Multiple Spanning Tree Protocol96MST Port SettingsTo configure the MST port settings, perform the following procedure:1. From the main menu

AT-GS950/16 Web Interface User Guide97Role - Indicates whether or not the port is prevented from being a root port. Enabled - The port is prevented fr

Chapter 5: Multiple Spanning Tree Protocol98Instance InformationTo view MST instance information, perform the following:1. From the main menu on the l

99Chapter 6Static Port TrunkingThis chapter contains a description of port trunking and the procedures for creating, modifying, and deleting a static