Allied-telesis AT-GS950/16 Bedienungsanleitung

613-001489 Rev AAT-GS950/16Gigabit Ethernet Smart SwitchAT-GS950/16 Web Users Guide AT-S108 Version V1.1.0 [1.00.043]

Figures10Figure 51. LACP Group Status Page...

Chapter 6: GVRP100Time SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page,

AT-GS950/16 Web Interface User Guide101equation:GARPLeaveAllTimer > (GARPLeaveTimer + 10)NoteTo ensure compatibility between network devices, you

Chapter 6: GVRP102

103Chapter 7Voice VLANThis chapter contains a description of the AT-GS950/16 switch’s Voice VLAN feature and the procedures to create, modify, and del

Chapter 7: Voice VLAN104OverviewThe AT-GS950/16 Voice VLAN feature is specifically designed to maintain high quality, uninterrupted voice traffic thro

AT-GS950/16 Web Interface User Guide105When you are configuring the voice VLAN parameters, you must enter the complete MAC address of at least one of

Chapter 7: Voice VLAN106One or more ports in your voice VLAN must be configured as Static tagged or untagged members. Static VLAN members are permanen

AT-GS950/16 Web Interface User Guide107General GuidelinesHere is a summary of the rules to observe when you create a voice VLAN: One voice VLAN can

Chapter 7: Voice VLAN108ConfigurationPrior to configuring your voice VLAN, you must first configure a tagged VLAN. This VLAN will be used as a basis f

AT-GS950/16 Web Interface User Guide1094. From the Voice VLAN field at the top of the page, select one of the following choices from the pull-down me

AT-GS950/16 Web Interface User Guide11Figure 111. Firmware Upgrade via TFTP Page...

Chapter 7: Voice VLAN110NoteThe voice VLAN Auto-Detection feature can only be enabled on “Not Member” ports of the voice VLAN. Member ports cannot hav

AT-GS950/16 Web Interface User Guide111OUI SettingYou can create and delete Voice VLAN OUI Settings by following the procedures in these sections: 

Chapter 7: Voice VLAN112Modify OUISettingTo modify or delete an OUI, it must be first be deleted and then re-entered by following the procedure in “Cr

113Chapter 8STP and RSTPThis chapter provides background information about the Spanning Tree Protocol (STP) and the Rapid Spanning Tree Protocol (RSTP

Chapter 8: STP and RSTP114OverviewThe performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topo

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide115Bridge Priorityand the RootBridgeThe first task that bridges perform when

Chapter 8: STP and RSTP116Path Costs and Port CostsAfter the root bridge has been selected, the bridges determine if the network contains redundant pa

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide117.ForwardingDelay andTopologyChangesIf there is a change in the network to

Chapter 8: STP and RSTP118The forwarding delay value is adjustable in the AT-S108 Version V1.1.0 Management software. The appropriate value for this p

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide119Figure 36. Point-to-Point PortsA port operates as an edge port when it is

Figures12

Chapter 8: STP and RSTP120with the STP of the other switches. The switches monitors the traffic on each port for BPDU packets. Ports that receive RSTP

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide121You can avoid this problem by connecting the switches using tagged instea

Chapter 8: STP and RSTP122Basic STP and RSTP ConfigurationTo configure the basic STP and RSTP settings, perform the following procedure:1. From the ma

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide123The RSTP Configuration page allows you to configure basic STP (STP-Compat

Chapter 8: STP and RSTP124 The following parameters refer to the designated root bridge. You cannot change these fields.Designated Root - This parame

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide125Configure RSTP Port SettingsThis section contains the following topics:

Chapter 8: STP and RSTP126sent or received on a the port except for BPDU data. A port with a higher path cost to the root bridge than another on the s

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide127STP Status - Indicates if spanning tree protocol (either RSTP or STP-Comp

Chapter 8: STP and RSTP128Figure 42. AT-GS950/16 RSTP Advanced Port Configuration PageThis page displays the following information about the ports:Por

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide129Role - Indicates one of the following port roles:Disabled - The Disabled

13List of TablesTable 1. Bridge Priority Value Increments ... 115Ta

Chapter 8: STP and RSTP130Spanning Tree TopologyTo view the current spanning tree topology, perform the following procedure:1. From the main menu on t

131Chapter 9 Multiple Spanning Tree ProtocolThis chapter provides the procedures for configuring Multiple Spanning Tree Protocol (MSTP). You can find

Chapter 9: Multiple Spanning Tree Protocol132Multiple Spanning Tree ConfigurationHead2 Head3To configure the MSTP settings, perform the following proc

AT-GS950/16 Web Interface User Guide133Global MSTP Status - Set this field to Enable or Disable the MSTP feature on the switch. The Global MSTP Statu

Chapter 9: Multiple Spanning Tree Protocol134bridge spends in the listening and learning states. Its range is 4 - 30 seconds.Maximum Hop Count - The M

AT-GS950/16 Web Interface User Guide135VLAN MappingYou can create, modify and delete MSTP settings with the procedures in the following sections: ”O

Chapter 9: Multiple Spanning Tree Protocol136Modify MSTInstanceIf you wish to modify a MST Instance, you must first delete the instance and then redef

AT-GS950/16 Web Interface User Guide137Port ConfigurationTo configure the MSTP parameters for each of the ports, perform the following procedure:1. F

Chapter 9: Multiple Spanning Tree Protocol138network topology.ForcedFalse - The port is not connected to a network device in the network topology.Auto

AT-GS950/16 Web Interface User Guide139True - The port cannot process receive/transmit TCN BPDUs.False - The port can process receive/transmit TCN BP

List of Tables14

Chapter 9: Multiple Spanning Tree Protocol140Port SettingsTo configure the MSTP port settings, perform the following procedure:1. From the main menu o

AT-GS950/16 Web Interface User Guide1416. If you choose to change the MSTP port settings for other ports, repeat steps 4 and 5.7. From the main menu

Chapter 9: Multiple Spanning Tree Protocol142Topology InformationTo configure the MSTP port settings, perform the following procedure:1. From the main

AT-GS950/16 Web Interface User Guide143Regional Root Priority - The priority of the regional root port.Regional Path Cost - The path cost from the re

Chapter 9: Multiple Spanning Tree Protocol144

145Chapter 10Static Port TrunkingThis chapter contains a description of port trunking and the procedures for creating, modifying, and deleting a stati

Chapter 10: Static Port Trunking146OverviewA port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and another

AT-GS950/16 Web Interface User Guide147Network equipment vendors tend to employ different techniques to implement static trunks. Consequently, a stat

Chapter 10: Static Port Trunking148more than one VLAN. The ports of a static trunk can be either untagged or untagged members of the same VLAN. The s

AT-GS950/16 Web Interface User Guide149Create a Port TrunkThis procedure explains how to create a static port trunk.CautionDo not connect the cables

15PrefaceThis guide contains instructions on how to use the AT-S108 Version V1.1.0 Management software to manage and monitor the AT-GS950/16 Gigabit E

Chapter 10: Static Port Trunking150A check in a box indicates the port is a member of the trunk. No check means the port is not a member. A port trunk

AT-GS950/16 Web Interface User Guide151Modify a Port TrunkThis procedure explains how to change the status of a port trunk and add or remove ports fr

Chapter 10: Static Port Trunking1529. Configure the port trunk on the other switch with the same parameters.10. Connect the Ethernet cables between tr

AT-GS950/16 Web Interface User Guide153Disable a Port TrunkThis procedure explains how to disable a port trunk. CautionBefore you disable or modify a

Chapter 10: Static Port Trunking154

AT-GS950/16 Web Interface User Guide155Chapter 11LACP Port TrunksThis chapter contains overview information about LACP port trunks and the procedures

Chapter 11: LACP Port Trunks156OverviewLACP (Link Aggregation Control Protocol) port trunks perform the same function as static trunks. They increase

AT-GS950/16 Web Interface User Guide157System PriorityIt is possible for two devices interconnected by an aggregate trunk to encounter a conflict whe

Chapter 11: LACP Port Trunks158Two conditions must be met for a port in an aggregate trunk to function in the standby mode. First, the number of ports

AT-GS950/16 Web Interface User Guide159General GuidelinesThe following guidelines apply when creating aggregators: LACP must be activated on both th

Preface16Where to Find Web-based Product InformationThe product guides are available for all Allied Telesis products in portable document format (PDF)

Chapter 11: LACP Port Trunks160the maximum number for the AT-GS950/16 switch, you should assign the other vendor’s device a higher system LACP priorit

AT-GS950/16 Web Interface User Guide161Group StatusTo display the LACP Group Status, perform the following procedure:1. Select the Bridge folder.The

Chapter 11: LACP Port Trunks162The System Priority is a preassigned value that you cannot alter. This value applies to the switch. See “System Priorit

AT-GS950/16 Web Interface User Guide163Figure 53. LACP Group Status Page with Three Cables ConnectedYou can now see that each port has been grouped u

Chapter 11: LACP Port Trunks164Port Priority ConfigurationTo select a priority for an LACP port, perform the following procedure:1. Select the Bridge

165Chapter 12Quality of Service (CoS)This chapter contains the following topics: “Overview” on page 166 “Associate Ports to CoS Priorities” on page

Chapter 12: Quality of Service (CoS)166OverviewWhen a port on an Ethernet switch becomes oversubscribed, its egress queues contain more packets than t

AT-GS950/16 Web Interface User Guide167Egress Queue vsPacket PriorityMappingEach switch port has four egress queues, labeled Q0, Q1, Q2, and Q3. Q0 i

Chapter 12: Quality of Service (CoS)168The procedure for changing the default mappings is found in “Associate Ports to CoS Priorities” on page 173. No

AT-GS950/16 Web Interface User Guide169never be transmitted from the switch because the algorithm might never have time to process the packets waitin

AT-GS950/16 Web Interface User Guide17Contacting Allied Telesis This section provides Allied Telesis contact information for technical support as wel

Chapter 12: Quality of Service (CoS)170Weighted Round Robin Priority SchedulingThe weighted round robin (WRR) scheduling method functions as its name

AT-GS950/16 Web Interface User Guide171Mapping CoS Priorities to Egress QueuesBefore mapping the CoS priorities and the egress queues, you must disab

Chapter 12: Quality of Service (CoS)1724. For each Traffic Class whose queue you want to change, click on the Queue (0, 1, 2, or 3) radio button that

AT-GS950/16 Web Interface User Guide173Associate Ports to CoS PrioritiesThe Port Priority values is assigned to an untagged frame at ingress for inte

Chapter 12: Quality of Service (CoS)174Associate DSCP Classes to Egress QueuesIf you choose to use the DSCP tags in your Access Control policy configu

AT-GS950/16 Web Interface User Guide175Queue Scheduling AlgorithmTo change the scheduling algorithm for the egress queues, perform the following proc

Chapter 12: Quality of Service (CoS)176

177Chapter 13Access Control ConfigurationAccess Control configuration allows you to control different aspects of the Ethernet traffic as it enters the

Chapter 13: Access Control Configuration178ClassifierThe Create Classifier page allows you to specify packet settings for filtering Ethernet traffic.

AT-GS950/16 Web Interface User Guide1793. Enter a number in the Classifier Index field.The Classifier Index must be a unique number within the range

Preface18

Chapter 13: Access Control Configuration1805. Click ADD.The classifier entry is displayed in the table at the bottom of the page. If you do not see yo

AT-GS950/16 Web Interface User Guide1813. From the Create Classifier page, identify which classifier that want to modify and click the modify link in

Chapter 13: Access Control Configuration1823. From the Create Classifier page, identify which classifier table entry that want to delete and click the

AT-GS950/16 Web Interface User Guide183Profile ActionThe Create Profile Action page defines the priority parameters for policing on DSCP (layer 3) an

Chapter 13: Access Control Configuration1843. Enter a number in the Profile Action Index field.The Index must be a unique number ranging from 1 to 72.

AT-GS950/16 Web Interface User Guide1852. From the Access Control Config folder, select Profile Action.An example of the Create Profile Action page w

Chapter 13: Access Control Configuration1864. Click on the OK button.The profile action entry is deleted from the profile action table.5. From the mai

AT-GS950/16 Web Interface User Guide187In-Profile ActionThe Create In-Profile Action page allows you to specify a Profile Action’s Permit or Deny pri

Chapter 13: Access Control Configuration1884. Enter a number in the Profile Action ID field ranging from 0 to 72. This field is mandatory.NoteThis fie

AT-GS950/16 Web Interface User Guide189Modify In-ProfileActionTo modify a In-Profile action entry, perform the following procedure:NoteYou must first

19Chapter 1Starting a Web Browser SessionThis chapter contains the procedures for starting, using, and quitting a web browser management session on th

Chapter 13: Access Control Configuration190Delete In-ProfileActionTo delete a In-Profile action entry, perform the following procedure:1. From the mai

AT-GS950/16 Web Interface User Guide191Out-Profile ActionThe Create Out-Profile Action page allows you to specify a Profile Action’s Permit or Deny p

Chapter 13: Access Control Configuration1924. Enter a number in the Profile Action ID field ranging from 0 to 72. This field is mandatory.NoteThis fie

AT-GS950/16 Web Interface User Guide193Modify Out-Profile ActionTo modify a Out-Profile action entry, perform the following procedure:NoteBefore you

Chapter 13: Access Control Configuration194Delete Out-Profile ActionTo delete a Out-Profile action entry, perform the following procedure:1. From the

AT-GS950/16 Web Interface User Guide195Port ListThe Create Port List page allows you to specify a list of ports that will be used as part of the poli

Chapter 13: Access Control Configuration1965. Click Add.The Out-Profile Action entry is added to the status table. If the Page field located below the

AT-GS950/16 Web Interface User Guide197Figure 73. Modify Port List Page4. Change the parameters as required.NoteSee “Create Port List” on page 195 fo

Chapter 13: Access Control Configuration198PolicyThe Create Policy page allows you to specify the filtering criteria for one policy. Before creating a

AT-GS950/16 Web Interface User Guide1993. Enter a number in the Policy Index field.The Policy Index is a unique number within the range of 1 - 65535

Copyright © 2011 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Chapter 1: Starting a Web Browser Session20Establishing a Remote Connection to the Web Browser InterfaceThe AT-GS950/16 switch is shipped with a pre-a

Chapter 13: Access Control Configuration200Figure 75. Example of Policy Entry6. From the main menu on the left side of the page, select Save Configura

AT-GS950/16 Web Interface User Guide201Figure 76. Modify Policy Page4. Change the parameters as required.NoteSee “Create Policy” on page 198 for the

Chapter 13: Access Control Configuration2022. From the Access Control Config folder, select Policy.An example of the Create Policy page with a Policy

AT-GS950/16 Web Interface User Guide203Policy SequenceThe Policy Sequence page displays the order that policies are applied to each port. You can ord

Chapter 13: Access Control Configuration204

205Chapter 14Storm ControlThis chapter contains a description and configuration procedures for the Storm Control (bandwidth) feature. The following to

Chapter 14: Storm Control206OverviewThe features available in the AT-S108 Version V1.1.0 Management software allow you to limit Ethernet traffic withi

AT-GS950/16 Web Interface User Guide207Ingress RateLimitingThe Ingress Rate Limiting feature restricts the traffic to a pre-configured data rate that

Chapter 14: Storm Control208ConfigurationThis procedure explains how to set DLF, broadcast, multicast, and threshold levels for each port on the AT-GS

AT-GS950/16 Web Interface User Guide209NoteFor more information, see the Broadcast setting definition in“Overview” on page 206.7. Click Apply.8. To e

AT-GS950/16 Web Interface User Guide213. Enter the AT-S108 Version V1.1.0 management login user name and password. The default user name is “manager”

Chapter 14: Storm Control210Ingress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Ingress Rate Limiting on each port

AT-GS950/16 Web Interface User Guide2117. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save you

Chapter 14: Storm Control212Egress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Egress Rate Limiting on each port o

213Chapter 15MAC Address TableThis chapter contains a description of the static multicast MAC address feature and the procedure for configuring it. Th

Chapter 15: MAC Address Table214OverviewThe AT-GS950/16 switch has a MAC address table with a storage capacity of up to 8,000 entries. The table store

AT-GS950/16 Web Interface User Guide215allows the multicast stream to be forwarded immediately to those predefined ports entered in the MAC table wit

Chapter 15: MAC Address Table216Static Unicast MAC Address ConfigurationThis procedure explains how to set the static multicast feature for each port

AT-GS950/16 Web Interface User Guide2174. In the Group MAC Address field, enter a unicast MAC address.5. Assign the MAC address a Port Member (or mem

Chapter 15: MAC Address Table218Modify Static Unicast AddressTo modify the port assignment of a unicast MAC address in the MAC address table, perform

AT-GS950/16 Web Interface User Guide219Delete Static Unicast AddressTo delete a unicast MAC address from the MAC address table, perform the following

Chapter 1: Starting a Web Browser Session22 Voice VLAN Security LLDP Statistics Chart Tools Save Configuration5. To see the front panel of the s

Chapter 15: MAC Address Table220Static Multicast Address ConfigurationThis procedure explains how to set the static multicast feature for each port on

AT-GS950/16 Web Interface User Guide221NoteAn error message is generated when you enter a VLAN ID or VLAN Index which is not been defined or when you

Chapter 15: MAC Address Table222Modify Static Multicast AddressTo modify the port assignment of a multicast MAC address in the MAC address table, perf

AT-GS950/16 Web Interface User Guide223Delete Static Multicast AddressTo delete a multicast MAC address from the MAC address table, perform the follo

Chapter 15: MAC Address Table224

225Chapter 16DHCP SnoopingThis chapter contains a description of the AT-GS950/16 switch’s DHCP Snooping feature and the procedures for creating, modif

Chapter 16: DHCP Snooping226OverviewThe DHCP Snooping feature provides security by inspecting ingress packets for the correct IP and MAC address infor

AT-GS950/16 Web Interface User Guide227first DHCPOFFER packet from the server that it receives. This packet contains the DHCP server’s IP address and

Chapter 16: DHCP Snooping228General GuidelinesHere is a summary of the rules to observe when you configure DHCP Snooping: A trusted port is connect t

AT-GS950/16 Web Interface User Guide229General ConfigurationThe following procedure describes how to configure the DHCP Snooping feature on the AT-GS

AT-GS950/16 Web Interface User Guide23Web Browser ToolsYou can use the web browser tools to move around the management pages. Selecting Back on your

Chapter 16: DHCP Snooping230through the switch without regard to the IP and MAC Address information in the packet header.6. From the Backup Database f

AT-GS950/16 Web Interface User Guide231VLAN SettingYou can create and delete DHCP Snooping VLAN settings by following the procedures in these section

Chapter 16: DHCP Snooping232Modify VLANSettingTo modify or delete a VLAN ID, it must first be deleted and then re-entered by following the procedure o

AT-GS950/16 Web Interface User Guide233Trusted and Untrusted Port ConfigurationThe following procedure describes how to configure the DHCP Snooping t

Chapter 16: DHCP Snooping234Binding DatabaseThe Binding Database displays learned and statically assigned MAC Address and IP Address information for e

AT-GS950/16 Web Interface User Guide235Type - Because the IP Address being entered is static, you must select Static.Lease Time - Enter the time that

Chapter 16: DHCP Snooping236

237Chapter 17IGMP SnoopingThis chapter contains a description of the IGMP Snooping procedure as well as procedures for working with IGMP Snooping in t

Chapter 17: IGMP Snooping238OverviewIGMP enables IPv4 routers to create lists of nodes that are members of multicast groups. (A group of end nodes tha

AT-GS950/16 Web Interface User Guide239Without IGMP snooping, a switch floods multicast packets from all of its ports, except the port on which it re

Chapter 1: Starting a Web Browser Session24Quitting a Web Browser Management SessionTo exit a web browser management session, close the web browser.

Chapter 17: IGMP Snooping240IGMP Snooping ConfigurationThis procedure explains how to set IGMP snooping on the switch and set the IGMP Snooping (V1) a

AT-GS950/16 Web Interface User Guide2416. The IGMP Snooping Page is updated with active Multicast Group address(s). See Figure 88.NoteThe Multicast G

Chapter 17: IGMP Snooping242

243Chapter 18SecurityThis Chapter contains information about the Port-based security features and the procedures for setting this feature. This chapte

Chapter 18: Security244Port Access ControlThis section contains information and configuration procedures for the Port-based Access Control. This secti

AT-GS950/16 Web Interface User Guide245Port AccessControlConfigurationTo configure port-based access control, perform the following procedure:1. Sele

Chapter 18: Security246Port - This parameter specifies the port being configured for authentication.Authentication Mode - This parameter specifies the

AT-GS950/16 Web Interface User Guide247Supplicant Mode - This parameter specifies if one or more supplicants can be authenticated on a port.Single -

Chapter 18: Security248Maximum Request - Specifies the maximum number of times authenticator ports transmit EAP Request packets to clients before timi

AT-GS950/16 Web Interface User Guide249RADIUS ClientYou can use the RADIUS client with 802.1x port-based access control to authenticate which packets

25Chapter 2Basic Switch ConfigurationThis chapter provides procedures to configuring basic system parameters for the AT-GS950/16 switch and contains i

Chapter 18: Security250 You need to specify the user name and password combinations when configuring the RADIUS server software on the authentication

AT-GS950/16 Web Interface User Guide2517. Click Apply to save your changes.8. From the main menu on the left side of the page, select Save Configurat

Chapter 18: Security252Dial-in User - Local AuthenticationDial-in User feature provides the local authentication server for port security when a remot

AT-GS950/16 Web Interface User Guide253Figure 91. Dial-In User Page3. In the User Name field, type a name for the user.4. In the Password field, type

Chapter 18: Security254Delete a Dial-in UserTo delete a dial-in user, perform the following procedure:1. From the main menu on the left side of the pa

AT-GS950/16 Web Interface User Guide255Destination MAC FilterThis chapter contains an explanation of the Destination MAC Filter feature as well a pro

Chapter 18: Security256Figure 92. Destination MAC Filter Page3. To enter the MAC address that you want filtered, enter the MAC address into the MAC Ad

257Chapter 19LLDPLink Layer Discovery Protocol (LLDP) allows Ethernet network devices such as switches and routers to receive and/or transmit device-r

Chapter 19: LLDP258OverviewThe data sent and received by LLDP are useful for many reasons. The switch can discover other devices directly connected to

AT-GS950/16 Web Interface User Guide259Global ConfigurationPerform the following procedures to configure the Global parameters for LLDP: “Enable/Dis

Chapter 2: Basic Switch Configuration26Configuration of IP Address, Subnet Mask and Gateway AddressThis procedure explains how to change the IP addres

Chapter 19: LLDP2603. From the LLDP parameter, select one of the following radio button choices:Enable - The LLDP feature is active. NoteThe LLDP feat

AT-GS950/16 Web Interface User Guide261For more information, see “System Management Information” on page 38System Description - This parameter descri

Chapter 19: LLDP262Neighbors InformationTo view the information received from the neighboring network devices, perform the following procedure:1. From

263Chapter 20Simple Network Management Protocol SNMPv1 and v2cThis chapter contains a description of SNMPv1 and SMNMPv2c and the procedures for config

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c264SNMPv1 and SNMPv2c OverviewYou can manage a switch by viewing and configuring the mana

AT-GS950/16 Web Interface User Guide265Trap Receiver AttributesA trap is a message sent by the agent to one or more managers to indicate the occurren

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c266Activate SNMP InterfaceThe SNMP interface is activated by default. If you want to de-a

AT-GS950/16 Web Interface User Guide267SNMPv1/v2 User and Group NamesA v1/v2 User Name and Group Name definition is the basis for creating SNMPv1/v2

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c268NoteIf you choose to use the default User and Group Names (ReadOnly and ReadWrite) tha

AT-GS950/16 Web Interface User Guide269SNMPv1/v2 Community StringsA community string has attributes for controlling who can use the string and what t

AT-GS950/16 Web Interface User Guide27System Default Gateway - Displays the default gateway of the switch. To change the default gateway, enter a new

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c2705. Click Add.The new Community Name and User Name are displayed.6. From the main menu

AT-GS950/16 Web Interface User Guide271SNMP TrapsA Host IP address is used to specify a management device that needs to receive SNMP traps sent by th

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c2726. Click Add.The new host is added to the table.7. From the main menu on the left side

273Chapter 21Simple Network Management Protocol SNMPv3This chapter contains a description of SNMPv3 and the procedures for configuring this protocol.

Chapter 21: Simple Network Management Protocol SNMPv3274SNMPv3 OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c protocol implemen

AT-GS950/16 Web Interface User Guide275In addition, you have the option of assigning no user authentication. In this case, no authentication is perfo

Chapter 21: Simple Network Management Protocol SNMPv3276Figure 98. MIB TreeThe AT-S108 Version V1.1.0 Management software supports the MIB tree, start

AT-GS950/16 Web Interface User Guide2774. You must enter information in the Community table based on a pre-defined User Name. NoteThe Community Strin

Chapter 21: Simple Network Management Protocol SNMPv3278SNMPv3 User and Group NamesA v3 User Name and Group Name definition is the basis for all the o

AT-GS950/16 Web Interface User Guide2799. Select one of the following choices for the Priv-Protocol field:DES - The DES encryption scrambles the SNMP

Chapter 2: Basic Switch Configuration28IP Access List ConfigurationWhen the IP Access List feature is enabled, remote access to the AT-S108 Version V1

Chapter 21: Simple Network Management Protocol SNMPv3280SNMPv3 View NamesThe SNMPv3 View names are defined in the SNMP Group Access table and are base

AT-GS950/16 Web Interface User Guide2815. Enter the Write View Name.This name is an optional field. It can be up to 31 characters in length.6. Enter

Chapter 21: Simple Network Management Protocol SNMPv32824. From the main menu on the left side of the page, select Save Configuration to Flash to perm

AT-GS950/16 Web Interface User Guide283View Table The SNMP v3 View table specifies the MIB object access criteria for each View Name. If the View Nam

Chapter 21: Simple Network Management Protocol SNMPv32845. Enter “1” for the OID Mask.6. Enter the View Type. This can be one of two choices:Included

AT-GS950/16 Web Interface User Guide285SNMPv3 TrapsThe creation, modification and deletion of traps for SNMPv3 is identical to the procedure for SNMP

Chapter 21: Simple Network Management Protocol SNMPv3286

287Chapter 22RMONThis chapter contains the following sections: “Overview” on page 288 “Enable and Disable RMON” on page 289 “Port Statistics” on pa

Chapter 22: RMON288OverviewThe RMON (Remote MONitoring) MIB is used with SNMP applications to monitor the operations of network devices. The switch su

AT-GS950/16 Web Interface User Guide289Enable and Disable RMONYou can now use your SNMP Network Management System (NMS) software and the RMON section

AT-GS950/16 Web Interface User Guide29NoteYou can add up to 10 IP address to the IP Access List table.

Chapter 22: RMON290Port StatisticsYou can remotely view individual port statistics with RMON by using your SNMP NMS software and the RMON portion of t

AT-GS950/16 Web Interface User Guide291HistoriesRMON histories are snapshots of port statistics. They are taken by the switch at predefined intervals

Chapter 22: RMON292Interval - This parameter specifies how frequently the switch takes snapshots of the port’s statistics. The range is 1 to 3600 seco

AT-GS950/16 Web Interface User Guide293EventsAn event specifies the action of the switch when the ingress packet activity on a port crosses a statist

Chapter 22: RMON2944. Once you have configured the parameters, click Add.Your entry will appear in the table at the bottom of the page. 5. If you want

AT-GS950/16 Web Interface User Guide295AlarmsRMON alarms are used to generate alert messages when packet activity on designated ports rises above or

Chapter 22: RMON2962. From the RMON folder, select Alarm.The RMON Alarm Configuration Page is displayed. See Figure 106.Figure 106. RMON Alarm Configu

AT-GS950/16 Web Interface User Guide297Rising Event Index - This parameter specifies the event index for the rising threshold. Its range is 1 to 6553

Chapter 22: RMON298

299Chapter 23Network StatisticsThe sections in this chapter explain how to display traffic, error, and history statistics about the network traffic on

3ContentsList of Figures ...

Chapter 2: Basic Switch Configuration305. From the IP Restriction Status field, select one of the following choices from the pull-down menu:Enable - T

Chapter 23: Network Statistics300OverviewStatistics provide important information for troubleshooting switch problems at the port level. The AT-S108 V

AT-GS950/16 Web Interface User Guide301Traffic Comparison StatisticsThe Traffic Comparison statistics chart allows you to display a specified traffic

Chapter 23: Network Statistics3023. To view traffic statistics, click on the arrow next to “Statistics” and select one of the options in Table 6.4. To

AT-GS950/16 Web Interface User Guide3035. To select the color of the traffic comparison graph, select Color. Choose one of the following colors:Green

Chapter 23: Network Statistics304Error Group StatisticsThe Error Group chart displays the discard and error counts for a specified port. To display er

AT-GS950/16 Web Interface User Guide3054. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following

Chapter 23: Network Statistics306Historical Status ChartsThe Historical Status chart allows you to select from 12 statistics to view for a selection o

AT-GS950/16 Web Interface User Guide307Table 7 Historical Status OptionsOption DefinitionInbound Octet Rate (Bytes) Measures the rate of inbound oct

Chapter 23: Network Statistics3084. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following options

309Chapter 24Management Software UpdatesThis chapter explains the methods for upgrading the AT-S108 Version V1.1.0 Management software on the switch a

AT-GS950/16 Web Interface User Guide31System TimeThe procedures in this section describe how to configure the system time by manually entering the ti

Chapter 24: Management Software Updates310OverviewYou can use the Management Software Updates features to upgrade the AT-S108 Version V1.1.0 Managemen

AT-GS950/16 Web Interface User Guide311Upgrade Firmware Image via HTTPThis section describes how to upgrade an firmware image of the AT-S108 Version

Chapter 24: Management Software Updates3122. From the Firmware Upgrade folder, select via HTTP.The Firmware Upgrade via HTTP Page is displayed. See Fi

AT-GS950/16 Web Interface User Guide313Upgrade Firmware Image via TFTPThis section describes how to upgrade an firmware image of the AT-S108 Version

Chapter 24: Management Software Updates314Figure 111. Firmware Upgrade via TFTP PageThe Image/Version Date shows the current version and date of softw

AT-GS950/16 Web Interface User Guide315Download or Upload a Configuration File via HTTPThis section describes how to download or upload a configurati

Chapter 24: Management Software Updates316ConfigurationFile UploadTo upload an AT-S108 Version V1.1.0 configuration file onto the switch, perform the

AT-GS950/16 Web Interface User Guide317NoteIf the IP address contained in the new configuration file is different than the one you currently have in

Chapter 24: Management Software Updates318Download or Upload a Configuration File via TFTPThis section describes how to download or upload a configura

AT-GS950/16 Web Interface User Guide319ConfigurationFile DownloadTo download an AT-S108 Version V1.1.0 configuration file onto the switch, perform th

Chapter 2: Basic Switch Configuration323. Use the pull down menu to set the Clock Mode parameter to Local time.4. In the Local Time Settings section,

Chapter 24: Management Software Updates320

321Chapter 25Loopback ProtectionThis chapter explains how to configure the Loopback Protection feature for specific ports on the AT-GS950/16 switch. I

Chapter 25: Loopback Protection322ConfigurationTo configure the Loopback Detection feature, perform the following procedure:1. From the main menu on t

AT-GS950/16 Web Interface User Guide3234. Under the Loopback Detection Global Settings, configure the following parameters:Interval - This parameter

Chapter 25: Loopback Protection324StatusThe status of the Loopback Detection is given in the Loop Status column of the table at the bottom of the Loop

325Chapter 26Cable DiagnosticsThis chapter provides procedures to run cable diagnostics on the cables connected to the switch ports. If a port is sele

Chapter 26: Cable Diagnostics326Test Results - Displays the diagnostic results for each pair in the cable. One of the following cable status parameter

327Appendix AMSTP OverviewThis appendix provides background information about the Multiple Spanning Tree Protocol (MSTP) and includes the following se

Appendix A: MSTP Overview328OverviewIn the AT-GS950/16, STP and RSTP are referred to as single-instance spanning trees that search for physical loops

AT-GS950/16 Web Interface User Guide329NoteDo not activate MSTP on the AT-GS950/16 switch without first familiarizing yourself with the following con

AT-GS950/16 Web Interface User Guide33Setting DaylightSavingsParametersIf you want to configure the switch for daylight savings time, perform the fol

Appendix A: MSTP Overview330Multiple Spanning Tree Instance (MSTI)The individual spanning trees in MSTP are referred to as Multiple Spanning Tree Inst

AT-GS950/16 Web Interface User Guide331Figure 118. VLAN Fragmentation with STP or RSTPFigure 119 on page 331 illustrates the same two AT-GS950/16 swi

Appendix A: MSTP Overview332Presales VLANs and MSTI 2 contains the Design and Engineering VLANs.Figure 120. Multiple VLANs in a MSTIIn this example, b

AT-GS950/16 Web Interface User Guide333General GuidelinesHere are the guidelines for MSTIs: The AT-GS950/16 switch can support up to 31 spanning tre

Appendix A: MSTP Overview334VLAN and MSTI AssociationsPart of the task to configuring MSTP involves assigning VLANs to spanning tree instances. The ma

AT-GS950/16 Web Interface User Guide335Ports in Multiple MSTIsA port can be a member of more than one MSTI at a time if it is a tagged member of one

Appendix A: MSTP Overview336Multiple Spanning Tree RegionsAnother important concept of MSTP is regions. A MSTP region is defined as a group of bridges

AT-GS950/16 Web Interface User Guide337Figure 121. Multiple Spanning Tree RegionThe AT-GS950/16 switch determines regional boundaries by examining th

Appendix A: MSTP Overview338Each MSTI functions as an independent spanning tree within a region. Consequently, each MSTI must have a root bridge to lo

AT-GS950/16 Web Interface User Guide339 Each MSTI must have a regional root for locating loops in the instance. MSTIs can share the same regional ro

Chapter 2: Basic Switch Configuration34DHCP and ATI Web Discovery ToolThe AT-GS950/16 Gigabit Ethernet Smart switch is managed through a web browser i

Appendix A: MSTP Overview340Common andInternalSpanning Tree(CIST)MSTP has a default spanning tree instance called the Common and Internal Spanning Tre

AT-GS950/16 Web Interface User Guide341Associating VLANs to MSTIsWhen you are using Multiple Spanning Tree, Allied Telesis recommends that you assign

Appendix A: MSTP Overview342Figure 123. CIST and VLAN Guideline - Example 2When port 3 on switch B receives a BPDU, the switch notes the port sending

AT-GS950/16 Web Interface User Guide343VLANs Across Different RegionsSpecial consideration needs to be taken into account when you connect different

Appendix A: MSTP Overview344Another approach is to configure multiple regions in a subnet and group the VLANs that need to span two or more regions in

AT-GS950/16 Web Interface User Guide345Summary of GuidelinesCareful planning is essential for the successful implementation of MSTP. This section rev

Appendix A: MSTP Overview346

347Appendix AAT-GS950/16 Default ParametersTable 9 lists the factory default settings for the AT-S108 Version V1.1.0 Management software on the AT-GS9

Appendix A: AT-GS950/16 Default Parameters348IP address none IPv4 address in xxx.xxx.xxx.xxx hex format; except 127.0.0.1IP address entries 10 entries

AT-GS950/16 Web Interface User Guide349From (Month:Day:HH:MM)January:01:00:00-To (Month:Day:HH:MM)January:01:00:00-DST Offset 1 hr-System/SSL Setting

AT-GS950/16 Web Interface User Guide35DHCP Client ConfigurationThis procedure explains how to activate and deactivate the DHCP client on the AT-GS950

Appendix A: AT-GS950/16 Default Parameters350Port All, 1 - 16-Trunk--Type 1000TX-Link StatusDown Up/DownAdmin StatusEnabled Enabled/DisabledMode Auto

AT-GS950/16 Web Interface User Guide351Maximum MST Instances31 1 - 31Bridge Priority32768 0 - 61440Region NameMAC Address of AT-GS950/16 switch-Regio

Appendix A: AT-GS950/16 Default Parameters352Hello Time 2 1 - 9 secondsAutoEdge Status TrueTrue/FalseRestricted Role FalseTrue/FalseRestricted TCN Fa

AT-GS950/16 Web Interface User Guide353PortAll, 1 - 16-Loopback Detection StateDisabled Enabled/DisabledBridge/Static Unicast802.1Q VLAN - ID 1 - 400

Appendix A: AT-GS950/16 Default Parameters354Storm Control Multicast Control StatusDisabled Enabled/DisabledStorm Control ThresholdLow High (2500 pps)

AT-GS950/16 Web Interface User Guide355Private VLAN Source Port1 1 - 16 ports1 - 8 portsPrivate VLAN Forwarding Ports1 - 16 ports1 - 8 ports1 - 16 po

Appendix A: AT-GS950/16 Default Parameters356Notify View NameReadWrite-Security Modelv1 v1/v2c/v3Security LevelNoAuthNoPriv NoAuthNoPriv/AuthNoPriv/Au

AT-GS950/16 Web Interface User Guide357Destination MAC Addressnonexx:xx:xx:xx:xx:xx hex formatDestination MAC Mask Lengthnone1 - 48VLAN ID none 0 - 4

Appendix A: AT-GS950/16 Default Parameters358Out-Profile Action Burst Size16K 16K/32K/64KPort List Index none 1 - 65535Port List none Any combination

AT-GS950/16 Web Interface User Guide359Alarms Rising Thresholdnone1 to 2147483647 secondsAlarms Falling Thresholdnone1 to 2147483647 secondsAlarms Ri

Chapter 2: Basic Switch Configuration36NoteThe ATI Web Discovery Tool is available for download on the AT-GS950/16 product page at alliedtelesis.com.6

Appendix A: AT-GS950/16 Default Parameters360Port Access Control Authentication MethodLocal Local/RadiusDial-In User Namenone 1 - 23 charactersDial-In

AT-GS950/16 Web Interface User Guide361General Setting DHCP Option 82 InsertionDisabledEnabled/DisabledVLAN Settings VLAN IDnone1 - 4000Trusted Inter

Appendix A: AT-GS950/16 Default Parameters362Traffic Comparison Auto Refresh5 seconds 5/10/15/30 secondsTraffic Comparison ColorGreen 12 colorsError G

AT-GS950/16 Web Interface User Guide363Configuration File Upload/Download via TFTPTFTP Server IP0.0.0.0 IPv4 address in xxx.xxx.xxx.xxx hex format; e

Appendix A: AT-GS950/16 Default Parameters364

AT-GS950/16 Web Interface User Guide37DHCP Auto ConfigurationIf you need to automatically update the switch’s configuration files via a remote server

Chapter 2: Basic Switch Configuration38System Management InformationThis section explains how to assign a name, location, and contact information for

AT-GS950/16 Web Interface User Guide39System Name - Specifies a name for the switch, for example, Sales. The name is optional and may contain up to 1

Contents4SSL Settings...

Chapter 2: Basic Switch Configuration40User Name and Password ConfigurationPassword protection is always enabled for access to the AT-S108 Version V1.

AT-GS950/16 Web Interface User Guide414. To add a password that corresponds to the user name entered in step 3, enter a password of up to 12 alphanum

Chapter 2: Basic Switch Configuration42Delete User Nameand PasswordTo delete a user name that you have previously added, perform the following procedu

AT-GS950/16 Web Interface User Guide43User Interface ConfigurationThis procedure explains how to enable and disable the user interfaces on the switch

Chapter 2: Basic Switch Configuration44NoteSee Chapter 20, “Simple Network Management Protocol SNMPv1 and v2c” on page 263 and Chapter 21, “Simple Net

AT-GS950/16 Web Interface User Guide45System Information DisplayThe Switch Information page is initially displayed when you first log into the AT-GS9

Chapter 2: Basic Switch Configuration46Administration Information Section:Switch Name - This parameter displays the name assigned to the switch. To as

AT-GS950/16 Web Interface User Guide47Switch RebootYou can reboot the AT-GS950/16 switch by either pressing the front panel eco-friendly switch betwe

Chapter 2: Basic Switch Configuration48CautionSince you define this password as part of the process of disabling this function, Allied Telesis has no

AT-GS950/16 Web Interface User Guide49Figure 14. Factory Default Reset/Reboot Page3. Go to the lower part of the page to the Reboot section.4. In the

AT-GS950/16 Web Interface User Guide5Chapter 9: Multiple Spanning Tree Protocol ...

Chapter 2: Basic Switch Configuration50To return the AT-S108 Version V1.1.0 Management software to the default settings, perform the following procedu

AT-GS950/16 Web Interface User Guide51Disabling FactoryDefault ResetFeatureThe factory default reset feature allows anyone to reset the switch to the

Chapter 2: Basic Switch Configuration52responsible for keeping the password in a safe place. If it is lost, Allied Telesis does not have a way to help

AT-GS950/16 Web Interface User Guide53NoteIf the Factory Default Reset field is already set to Enable, you do not need to continue with this procedur

Chapter 2: Basic Switch Configuration54Pinging a Remote SystemThis procedure instructs the AT-GS950/16 switch to ping a node on your network. This pro

AT-GS950/16 Web Interface User Guide555. To view the ping results, click Show Ping Results.A sample Ping Test Results Page is displayed. See Figure 1

Chapter 2: Basic Switch Configuration56SSL SettingsThe AT-GS950/16 switch has a web browser server for remote management of the unit with a web browse

AT-GS950/16 Web Interface User Guide574. Click Apply.The SSL setting that you have selected is now active. 5. From the main menu on the left side of

Chapter 2: Basic Switch Configuration58System Log ConfigurationThe System log is designed to monitor the operation the AT-GS950/16 switch by recording

AT-GS950/16 Web Interface User Guide593. From the Syslog Status field, select one of the following choices from the pull-down menu:Enable - The Syste

Contents6Port List ...

Chapter 2: Basic Switch Configuration60

61Chapter 3Port ConfigurationThis chapter provides a description of the physical characteristics of the ports and a procedure that explains how to vie

Chapter 3: Port Configuration62OverviewThis chapter describes how to display and modify the physical characteristics of an AT-GS950/16 switch. You can

AT-GS950/16 Web Interface User Guide63Display and Configure PortsThis procedure explains how to configure the ports on the AT-GS950/16 switch using t

Chapter 3: Port Configuration64is 1000TX for 10/100/1000Base-T twisted-pair ports (1 through 14, 15R and 16R) and 100FX or 1000TX for the SFP ports (1

AT-GS950/16 Web Interface User Guide65NoteWhen QoS is enabled on a port, the Jumbo frame parameter can not be enabled. To enable or disable QoS, see

Chapter 3: Port Configuration66Mode -This parameter i Indicates the speed and duplex mode settings for the port. You can use this parameter to set the

AT-GS950/16 Web Interface User Guide67Ignore - This parameter indicates that the All setting does not apply to the Flow Control field. In other words

Chapter 3: Port Configuration68

69Chapter 4Port MirroringThis chapter describes the Port Mirroring feature and the procedure for setting up port mirroring. Port mirroring allows you

AT-GS950/16 Web Interface User Guide7Dial-in User - Local Authentication...

Chapter 4: Port Mirroring70OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic received and transmitted on one or more

AT-GS950/16 Web Interface User Guide71Port Mirroring ConfigurationTo configure Port Mirroring, perform the following procedure:1. Select the Bridge f

Chapter 4: Port Mirroring727. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save your changes.

AT-GS950/16 Web Interface User Guide73Disable Port MirroringTo disable Port Mirroring, perform the following procedure:1. Select the Bridge folder.Th

Chapter 4: Port Mirroring74

75Chapter 5Virtual LANsThis chapter contains a description of Virtual Local Area Networks (VLANs) and the procedures for creating, modifying, and dele

Chapter 5: Virtual LANs76VLAN OverviewA virtual LAN or VLAN is a group of ports on an Ethernet switch that form a logical Ethernet segment via the AT-

AT-GS950/16 Web Interface User Guide77With VLANS, you can reconfigure the LAN segment assignment of an end node connected to the AT-GS950/16 switch’s

Chapter 5: Virtual LANs78Each port of a port-based VLAN can belong to as many VLANs as needed. Therefore, traffic can be forwarded to the members of t

AT-GS950/16 Web Interface User Guide79VLAN NameTo create a tagged VLAN, you must give it a unique name. This name can reflect the function of the net

Contents8Chapter 22: RMON ...

Chapter 5: Virtual LANs80General Rules for Creating a Tagged VLANHere is a summary of the rules to observe when you create a tagged VLAN: Assign a un

AT-GS950/16 Web Interface User Guide81Assign Ports to a VLAN ModeThe procedure described in this section allows you to assign ports to tagged or a po

Chapter 5: Virtual LANs826. If you want to restore the port assignment before saving the configuration, click Restore.NoteOnce the VLAN assignment has

AT-GS950/16 Web Interface User Guide83Tagged VLAN ConfigurationOn a port, the tag information within a frame is examined when it is received to deter

Chapter 5: Virtual LANs844. To assign a VLAN ID, type a VLAN ID in the VLAN ID field.The range for this field is 2 to 4,000. You can create a maximum

AT-GS950/16 Web Interface User Guide852. From the Bridge folder, select VLAN.The VLAN folder expands.3. From the VLAN folder, select Tagged VLAN.An e

Chapter 5: Virtual LANs866. To change the VLAN Name, type a new VLAN Name in the VLAN Name field.For more information about this field, refer to “VLAN

AT-GS950/16 Web Interface User Guide877. To change the Management VLAN assignment, select one of the following choices from the pull-down menu:Enable

Chapter 5: Virtual LANs88NoteYou cannot delete the Default VLAN which has a VID of 1.6. From the main menu on the left side of the page, select Save C

AT-GS950/16 Web Interface User Guide89Tagged VLAN Port SettingsTo configure a VLAN port that is a member of a Tagged VLAN, perform the following proc

9Figure 1. Entering a Switch’s IP Address in the URL Field...

Chapter 5: Virtual LANs90Disable - This disables Ingress Filtering at the selected port.6. Click Apply.The port configuration becomes effective.7. If

AT-GS950/16 Web Interface User Guide91Port-Based VLAN ConfigurationA port-based VLAN is a group of ports on the switch that form a logical Ethernet s

Chapter 5: Virtual LANs927. Click Apply.8. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save you

AT-GS950/16 Web Interface User Guide93The Bridge folder expands.2. From the Bridge folder, select VLAN.The VLAN folder expands.3. From the VLAN folde

Chapter 5: Virtual LANs94

95Chapter 6GVRPThis chapter contains the following sections: “Overview and Guidelines” on page 96 “General Configuration” on page 97 “Port Settings

Chapter 6: GVRP96Overview and GuidelinesThe GARP VLAN Registration Protocol (GVRP) allows network devices to share VLAN information and to use the inf

AT-GS950/16 Web Interface User Guide97General ConfigurationPerform the following procedure to enable or disable GVRP:1. From the main menu on the lef

Chapter 6: GVRP98Port SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page,

AT-GS950/16 Web Interface User Guide99port row selected. Disable - The Restricted VLAN Registration is de-active for the port row selected. 5. Once y