Allied-telesis AT-S63 Bedienungsanleitung

PN 613-50592-00 Rev CManagementSoftwareAT-S63Web Browser Interface User’s GuideAT-9400 Series Layer 2+ Gigabit Ethernet SwitchesVersion 1.2.0

Figures10Figure 36: Port Mirroring Tab (Monitoring)...

Chapter 6: MAC Address Table100 Section I: Basic OperationsFigure 28 shows an example of viewing all unicast MAC addresses.Figure 28. View MAC Address

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 101Changing the Aging TimeThe switch uses the aging time to d

Chapter 6: MAC Address Table102 Section I: Basic Operations

Section I: Basic Operations 103Chapter 7Static Port TrunksThis chapter contains the procedure for creating, modifying, or deleting a static port trunk

Chapter 7: Static Port Trunks104 Section I: Basic OperationsCreating a Static Port TrunkCautionDo not connect the cables of a port trunk to the ports

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 105The Port Trunking tab is shown in Figure 29 and displays a

Chapter 7: Static Port Trunks106 Section I: Basic Operationsexclamation points, are allowed. Each trunk must be given a unique name.Trunk MethodSelect

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 107Modifying a Static Port TrunkThis section contains the pro

Chapter 7: Static Port Trunks108 Section I: Basic Operations3. Select the Port Trunking tab.The Port Trunking tab is shown in Figure 29 on page 105.4.

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 109Deleting a Port TrunkCautionDisconnect the cables from the

AT-S63 Management Software Menus Interface User’s Guide11Chapter 16: Denial of Service Defense ...

Chapter 7: Static Port Trunks110 Section I: Basic OperationsDisplaying the Port TrunksTo display the port trunks, perform the following procedure:1. F

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 111DA - Destination MAC address (Layer 2)SA/DA - Source MAC a

Chapter 7: Static Port Trunks112 Section I: Basic Operations

Section I: Basic Features 113Chapter 8Port MirroringThis chapter contains the procedures for creating or deleting a port mirror. The sections in the c

Chapter 8: Port Mirroring114 Section I: Basic FeaturesCreating a Port MirrorTo create a port mirror, perform the following procedure: 1. From the home

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Features 115The Modify Mirror page is shown in Figure 34.Figure 34. Modi

Chapter 8: Port Mirroring116 Section I: Basic FeaturesFigure 35 shows an example of the Modify Mirror page configured for a port mirror. The egress tr

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Features 117Modifying a Port MirrorTo modify a port mirror, perform the

Chapter 8: Port Mirroring118 Section I: Basic FeaturesDisabling a Port MirrorTo disable a port mirror, perform the following procedure:1. From the hom

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Features 119Deleting a Port MirrorTo delete a port mirror, perform the f

Figures12Figure 130: STP Settings Page ...

Chapter 8: Port Mirroring120 Section I: Basic FeaturesDisplaying the Port MirrorTo display the port mirror, perform the following procedure:1. From th

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Features 121Egress Port(s)The source ports whose egress traffic is mirro

Chapter 8: Port Mirroring122 Section I: Basic Features

Section II: Advanced Operations 123Section IIAdvanced OperationsThe chapters in this section contain the procedures for advanced switch setup using th

124 Section II: Advanced Operations

Section II: Advanced Operations 125Chapter 9File SystemThis chapter contains procedures for working with the file system and contains the following se

Chapter 9: File System126 Section II: Advanced OperationsListing the Files in Flash Memory or on a Compact Flash CardThis procedure displays the files

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 127The FIle System tab for an AT-9400 Series switch with

Chapter 9: File System128 Section II: Advanced OperationsDeviceThe device type, either “flash” for flash memory or “cflash” for compact flash card.Siz

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 129The Viewing File page for a portion of a configuration

AT-S63 Management Software Menus Interface User’s Guide13Chapter 27: Secure Shell (SSH) ...

Chapter 9: File System130 Section II: Advanced OperationsSelecting an Active Boot Configuration FileThis procedure changes the active boot configurati

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1313. Select the File System tab.The File System tab for

Chapter 9: File System132 Section II: Advanced Operations

Section II: Advanced Operations 133Chapter 10File Downloads and UploadsThis chapter contains the procedure for downloading a new AT-S63 image file ont

Chapter 10: File Downloads and Uploads134 Section II: Advanced OperationsDownloading a FileThis procedure explains how to download a file from a TFTP

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 135 Installing a new AT-S63 software image does not chan

Chapter 10: File Downloads and Uploads136 Section II: Advanced OperationsCautionDownloading a configuration file as the switch’s new active boot confi

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1373. In the TFTP File Uploads and Downloads section, use

Chapter 10: File Downloads and Uploads138 Section II: Advanced OperationsNoteIf you downloaded a configuration file using the Config selection, the sw

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 139Uploading a FileThis procedure explains how to upload

Figures14

Chapter 10: File Downloads and Uploads140 Section II: Advanced OperationsNoteThe top portion of the tab is used to return the switch to its factory de

Section II: Advanced Operations 141Chapter 11Event Logs and Syslog ServersThis chapter describes how to view or save the contents of the event logs an

Chapter 11: Event Logs and Syslog Servers142 Section II: Advanced OperationsWorking with the Event LogsThe event logs contain event messages that are

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 143The Event log tab is shown in Figure 40.Figure 40. Eve

Chapter 11: Event Logs and Syslog Servers144 Section II: Advanced Operations6. From the Configuration menu, select the Save Config option to permanent

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 145The Event log tab is shown in Figure 41.Figure 41. Eve

Chapter 11: Event Logs and Syslog Servers146 Section II: Advanced Operations4. To display events of a selected severity, in the Severity Selections li

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1477. To display events of a particular AT-S63 software m

Chapter 11: Event Logs and Syslog Servers148 Section II: Advanced Operations8. Click View.Figure 42 shows an example of an event log in Normal mode. F

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 149The events are displayed in a table. The columns in th

15Table 1: New Features in AT-S63 Version 1.2.0 ...

Chapter 11: Event Logs and Syslog Servers150 Section II: Advanced OperationsIn addition to the information displayed in Normal mode, the Full mode als

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 151The System page is displayed with the General tab sele

Chapter 11: Event Logs and Syslog Servers152 Section II: Advanced OperationsWorking with Log OutputsInstead of checking the log files on each individu

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1534. Configure the following parameters as necessary:Out

Chapter 11: Event Logs and Syslog Servers154 Section II: Advanced OperationsFacility LevelThe numerical code to be added to the entries sent to the sy

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 155The View Log Output page is shown in Figure 45. Figure

Chapter 11: Event Logs and Syslog Servers156 Section II: Advanced OperationsModifying a LogOutput DefinitionTo modify a log output definition, perform

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 157Output StatusSpecifies whether or not the output is se

Chapter 11: Event Logs and Syslog Servers158 Section II: Advanced OperationsModule SelectionsSpecifies the AT-S63 management software module(s) whose

Section II: Advanced Operations 159Chapter 12ClassifiersA classifier defines a traffic flow. You use classifiers with access control lists to filter i

Tables16

Chapter 12: Classifiers160 Section II: Advanced OperationsConfiguring a ClassifierThis procedure explains how to create an ACL. It is a good idea befo

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 161The Classifier tab is shown in Figure 48.Figure 48. Cl

Chapter 12: Classifiers162 Section II: Advanced OperationsThe Create Classifier page is shown in Figure 49.Figure 49. Create Classifier PageSome of th

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1635. Configure the following parameters as desired:IDSpe

Chapter 12: Classifiers164 Section II: Advanced OperationsTOS/DSCPDefines a traffic flow by its Type of Service or DSCP value. To set this parameter,

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 165the corresponding bit of the IP address, while a “0” i

Chapter 12: Classifiers166 Section II: Advanced OperationsModifying a ClassifierThis procedure explains how to modify a classifier. If the classifier

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1675. Modify the parameters as necessary: For description

Chapter 12: Classifiers168 Section II: Advanced OperationsDeleting a ClassifierTo delete a classifier, perform the following procedure:NoteYou cannot

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 169Displaying the ClassifiersTo display the classifiers,

17PrefaceThis guide contains instructions on how to configure and maintain an AT-9400 Series Layer 2+ Gigabit Ethernet switch using the web browser in

Chapter 12: Classifiers170 Section II: Advanced OperationsDescriptionA description of the classifier.No. of ReferencesThe number of active and inactiv

Section II: Advanced Operations 171Chapter 13Access Control ListsAn access control list (ACL) is a tool for managing network traffic. This chapter con

Chapter 13: Access Control Lists172 Section II: Advanced OperationsConfiguring an Access Control ListThis procedure explains how to create an ACL. Bef

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1734. Click Create.The Create ACLs page is displayed, as

Chapter 13: Access Control Lists174 Section II: Advanced Operations6. Click Apply.The new ACL is immediately activated on the specified ports. If you

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 175Modifying an Access Control ListTo modify an access co

Chapter 13: Access Control Lists176 Section II: Advanced OperationsActionUse this menu to specify the action of the ACL. Deny, which is the default, d

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 177Deleting an Access Control ListTo delete an access con

Chapter 13: Access Control Lists178 Section II: Advanced OperationsDisplaying the Access Control ListsTo display the current ACLs, perform the followi

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 179case the packets are accepted by the port, because a P

Preface18How This Guide is OrganizedThis guide is organized into the following sections Section I: Basic OperationsThe chapters in this section expla

Chapter 13: Access Control Lists180 Section II: Advanced Operations

Section II: Advanced Operations 181Chapter 14Class of ServiceThis chapter contains instructions on how to configure Class of Service (CoS). This chapt

Chapter 14: Class of Service182 Section II: Advanced OperationsConfiguring CoSThis procedure sets the Class of Service priority level for ingress unta

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 183The CoS Setting for Port page is shown in Figure 60.Fi

Chapter 14: Class of Service184 Section II: Advanced OperationsMapping CoS Priorities to Egress QueuesThis procedure explains how to change the defaul

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 185NoteThe Configure Egress Weights section in the tab is

Chapter 14: Class of Service186 Section II: Advanced OperationsConfiguring Egress SchedulingThis procedure explains how to select and configure a sche

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 187Leaving the default value of 1 for each queue results

Chapter 14: Class of Service188 Section II: Advanced OperationsDisplaying the CoS SettingsTo display the CoS settings, perform the following procedure

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 189The CoS Setting for Port page is shown in Figure 63.Fi

AT-S63 Management Software Web Browser Interface User’s Guide19Document ConventionsThis document uses the following conventions:NoteNotes provide addi

Chapter 14: Class of Service190 Section II: Advanced OperationsDisplaying the QoS ScheduleTo display the QoS schedule, perform the following procedure

Section II: Advanced Operations 191Chapter 15Quality of ServiceThis chapter contains instructions on how to configure Quality of Service (QoS). This c

Chapter 15: Quality of Service192 Section II: Advanced OperationsManaging Flow GroupsFlow groups are groups of classifiers that group together similar

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1934. Click Create.The Create Flow Group page opens, as s

Chapter 15: Quality of Service194 Section II: Advanced OperationsModifying a FlowGroupTo modify a flow group, perform the following procedure:1. From

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 195Classifier ListThe classifiers to be assigned to the p

Chapter 15: Quality of Service196 Section II: Advanced OperationsThe Flow Group tab is shown in Figure 68.Figure 68. Flow Group Tab (Monitoring)The Fl

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 197The View Flow Group page is shown in Figure 69.Figure

Chapter 15: Quality of Service198 Section II: Advanced OperationsManaging Traffic ClassesTraffic classes consist of a set of QoS parameters and a grou

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 1994. Click Create.The Create Traffic Class page is shown

Copyright © 2005 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Preface20Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in portable document format (PDF

Chapter 15: Quality of Service200 Section II: Advanced OperationsExceed Remark ValueSpecifies the DSCP replacement value for traffic that exceeds the

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 201The Modify Traffic Class page is shown in Figure 72.Fi

Chapter 15: Quality of Service202 Section II: Advanced OperationsMax BandwidthSpecifies the maximum bandwidth available for the traffic class. The ran

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 2033. Select the Traffic Class tab.The Traffic Class tab

Chapter 15: Quality of Service204 Section II: Advanced OperationsThe View Traffic Class page is shown in Figure 74.Figure 74. View Traffic Class PageT

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 205Flow Group ListThe flow groups assigned to this traffi

Chapter 15: Quality of Service206 Section II: Advanced OperationsManaging PoliciesQoS policies consist of a collection of user-defined traffic classes

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 207The Policies tab displays the existing policies in a t

Chapter 15: Quality of Service208 Section II: Advanced OperationsNone - Disables this function. All - All packets are remarked. DSCP ValueSpecifies a

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 209The Modify Policy page is shown in Figure 77.Figure 77

AT-S63 Management Software Web Browser Interface User’s Guide21Contacting Allied TelesynThis section provides Allied Telesyn contact information for t

Chapter 15: Quality of Service210 Section II: Advanced OperationsEgress PortSpecifies the egress port to which the policy is to be assigned. A port ca

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 211The Policies tab is shown in Figure 78.Figure 78. Poli

Chapter 15: Quality of Service212 Section II: Advanced OperationsThe View Policy page is shown in Figure 79.Figure 79. View Policy PageThe View Policy

Section II: Advanced Operations 213Chapter 16Denial of Service DefenseThis chapter contains instructions on how to configure the Denial of Service def

Chapter 16: Denial of Service Defense214 Section II: Advanced OperationsConfiguring Denial of Service DefenseTo configure the ports on the switch for

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 215b. In the DoS Subnet Mask field, enter the LAN’s mask.

Chapter 16: Denial of Service Defense216 Section II: Advanced OperationsStatusClick Enable or Disable to enable or disable DoS on the selected ports.A

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 217Displaying the DoS SettingsTo display the DoS settings

Chapter 16: Denial of Service Defense218 Section II: Advanced OperationsThe DoS Monitor for Port page opens, as shown in Figure 83.Figure 83. DoS Moni

Section II: Advanced Operations 219Chapter 17IGMP SnoopingThis chapter describes how to configure the IGMP snooping feature on the switch. The section

Preface22New Features in AT-S63 Version 1.2.0Table 1 lists the new features in version 1.2.0 of the AT-S63 management software and includes pages refe

Chapter 17: IGMP Snooping220 Section II: Advanced OperationsConfiguring IGMP SnoopingTo configure IGMP snooping, perform the following procedure:1. Fr

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 221reports and times out. The switch forwards the leave r

Chapter 17: IGMP Snooping222 Section II: Advanced Operations5. From the Configuration menu, select the Save Config option to permanently save your cha

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 223Displaying a List of Host NodesYou can use the AT-S63

Chapter 17: IGMP Snooping224 Section II: Advanced OperationsMulticast Router Ports ModeHow the router ports are determined. The possible settings are:

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 225StatusIndicates IGMP group status of the port. The pos

Chapter 17: IGMP Snooping226 Section II: Advanced OperationsDisplaying a List of Multicast RoutersTo view multicast routers, perform the following pro

AT-S63 Management Software Web Browser Interface User’s GuideSection II: Advanced Operations 227Figure 88. View (Static) Multicast Routers List Page

Chapter 17: IGMP Snooping228 Section II: Advanced Operations

Section III: SNMPv3 229Section IIISNMPv3The chapter in this section contains the procedures for configuring SNMPv3. The chapter is: Chapter 18, “SNMP

AT-S63 Management Software Web Browser Interface User’s Guide23Quality of Service - PoliciesAdded the following new parameters to QoS policies: ToS,

230 Section III: SNMPv3

Section III: SNMPv3 231Chapter 18SNMPv3This chapter provides the following procedures for configuring SNMPv3 parameters using a web browser management

Chapter 18: SNMPv3232 Section III: SNMPv3Configuring the SNMPv3 ProtocolTo configure the SNMPv3 protocol, you need to first enable SNMP access on the

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 233Enabling or Disabling SNMP ManagementIn order to allow an SNMP man

Chapter 18: SNMPv3234 Section III: SNMPv3The SNMP tab is shown in Figure 89.Figure 89. SNMP Tab (Configuration)4. Click the Enable SNMP Access checkbo

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 2357. From the Configuration menu, select the Save Config option to p

Chapter 18: SNMPv3236 Section III: SNMPv3Configuring the SNMPv3 User TableYou can create, delete, and modify an SNMPv3 User Table entry. See the follo

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 237The SNMPv3 User Table tab is shown in Figure 90.Figure 90. SNMPv3

Chapter 18: SNMPv3238 Section III: SNMPv36. In the Authentication Protocol field, enter an authentication protocol. This is an optional parameter.Sele

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 239privacy protocol for this User Table entry. With this selection, m

Preface24

Chapter 18: SNMPv3240 Section III: SNMPv3The SNMP tab is shown in Figure 89 on page 234.3. In the SNMPv3 section, click the button next to Configure U

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 241The Modify SNMPv3 User page is shown in Figure 92.Figure 92. Modif

Chapter 18: SNMPv3242 Section III: SNMPv3NoteYou may want to assign NONE to a super user.6. In the Authentication Password field, enter an authenticat

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 243entry with a NonVolatile storage type, the Save Config option is d

Chapter 18: SNMPv3244 Section III: SNMPv3Configuring the SNMPv3 View TableYou can create, delete, and modify an SNMPv3 View Table entry. See the follo

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 245The SNMPv3 View Table tab is shown in Figure 93.Figure 93. SNMPv3

Chapter 18: SNMPv3246 Section III: SNMPv3NoteThe “defaultViewAll” value is the default entry for the SNMPv1 and SNMPv2c configuration. You cannot use

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 247NonVolatileSelect this storage type if you want the ability to sav

Chapter 18: SNMPv3248 Section III: SNMPv3The Configuration System page is displayed with the General tab selected by default, as shown in Figure 5 on

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 2496. In the View Type field, enter one of the following view types:I

Section I: Basic Operations 25Section IBasic OperationsThe chapters in this section provide information and procedures for basic switch setup using th

Chapter 18: SNMPv3250 Section III: SNMPv3Configuring the SNMPv3 Access TableYou can create, delete, and modify an SNMPv3 Access Table entry. See the f

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 2514. To create an SNMPv3 Access Table entry, click Add.The Add New S

Chapter 18: SNMPv3252 Section III: SNMPv3This parameter allows the users assigned to this Group Name to view the information specified by the View Tab

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 253protocol. Select this security level if you want to authenticate S

Chapter 18: SNMPv3254 Section III: SNMPv32. Select the SNMP tab.The SNMP tab is shown in Figure 89 on page 234.3. In the SNMPv3 section, click the but

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 255Figure 98. Modify SNMPv3 Access PageNoteThe Context Prefix field i

Chapter 18: SNMPv3256 Section III: SNMPv3NoteThe Context Match field is a read only field. The Context Match field is always set to Exact.9. In the St

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 257Configuring the SNMPv3 SecurityToGroup TableYou can create, delete

Chapter 18: SNMPv3258 Section III: SNMPv3The SNMPv3 SecurityToGroup Table tab is shown in Figure 99.Figure 99. SNMPv3 SecurityToGroup Table Tab (Confi

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 259v2cSelect this value to associate the Group Name with the SNMPv2c

26 Section I: Basic Operations

Chapter 18: SNMPv3260 Section III: SNMPv310. From the Configuration menu, select the Save Config option to permanently save your changes. (This option

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 2614. Click the button next to the SecurityToGroup Table entry that y

Chapter 18: SNMPv3262 Section III: SNMPv3NoteThe Row Status parameter is a read-only field in the web browser interface. The Active value indicates th

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 263Configuring the SNMPv3 Notify TableYou can create, delete, and mod

Chapter 18: SNMPv3264 Section III: SNMPv3The SNMPv3 Notify Table tab is shown in Figure 102.Figure 102. SNMPv3 Notify Table Tab (Configuration)4. Clic

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 265Enter a name of up to 32 alphanumeric characters.7. In the Notify

Chapter 18: SNMPv3266 Section III: SNMPv3The SNMPv3 Notify Table tab is shown in Figure 102 on page 264.4. Click the button next to the Notify Table e

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 267Enter a name of up to 32 alphanumeric characters.6. In the Notify

Chapter 18: SNMPv3268 Section III: SNMPv3Configuring the SNMPv3 Target Address TableYou can create, delete, and modify an SNMPv3 Target Address Table

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 269The SNMPv3 Target Address Table tab is shown in Figure 105.Figure

Section I: Basic Operations 27Chapter 1Starting a Web Browser Management SessionThis chapter contains the procedure for starting, using, and quitting

Chapter 18: SNMPv3270 Section III: SNMPv3You can enter a name of up to 32 alphanumeric characters.6. In the IP Address field, enter the IP address of

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 271NonVolatileSelect this storage type if you want the ability to sav

Chapter 18: SNMPv3272 Section III: SNMPv3Modifying TargetAddress TableEntryTo modify an entry in the SNMPv3 Target Address Table, perform the followin

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 2737. In the UDP Port Number field, enter a UDP port number.You can e

Chapter 18: SNMPv3274 Section III: SNMPv313. Click Apply to update the SNMPv3 Target Address Table.14. From the Configuration menu, select the Save Co

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 275Configuring the SNMPv3 Target Parameters TableYou can create, dele

Chapter 18: SNMPv3276 Section III: SNMPv34. Click Add.The Add New SNMPv3 Target Parameter page is shown in Figure 109.Figure 109. Add New SNMPv3 Targe

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 277v1Select this value to associate the Security Name, or User Name,

Chapter 18: SNMPv3278 Section III: SNMPv310. In the Storage Type parameter, select one of the following storage types for this table entry:VolatileSel

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 2795. Click OK.6. From the Configuration menu, select the Save Config

Chapter 1: Starting a Web Browser Management Session28 Section I: Basic OperationsEstablishing a Remote Connection to Use the Web Browser InterfaceTo

Chapter 18: SNMPv3280 Section III: SNMPv3NoteEnter a value for the Message Processing Model field only if you select SNMPv1 or SNMPv2c as the Security

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 281Select this security level if you do not want to authenticate SNMP

Chapter 18: SNMPv3282 Section III: SNMPv3Configuring the SNMPv3 Community TableYou can create, delete, and modify an SNMPv3 Community Table entry. See

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 283The SNMPv3 Community Table tab is shown in Figure 111.Figure 111.

Chapter 18: SNMPv3284 Section III: SNMPv3The value of the Community Name parameter acts as a password for the SNMPv3 Community Table entry. This param

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 285NoteThe Row Status parameter is a read-only field in the web brows

Chapter 18: SNMPv3286 Section III: SNMPv3The SNMP tab is shown in Figure 89 on page 234.3. In the SNMPv3 section, click the button next to Configure C

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 287NoteDo not use a value configured with the User Name parameter in

Chapter 18: SNMPv3288 Section III: SNMPv3Displaying SNMPv3 TablesThis section contains procedures to display the SNMPv3 Tables. The following procedur

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 289The SNMP tab is shown in Figure 114.Figure 114. SNMP Tab (Monitori

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 29The AT-S63 management software displays the login page, sho

Chapter 18: SNMPv3290 Section III: SNMPv3The SNMPv3 User Table tab is shown in Figure 115.Figure 115. SNMPv3 User Table Tab (Monitoring)Displaying Vie

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 291The SNMPv3 View Table tab is shown in Figure 116.Figure 116. SNMPv

Chapter 18: SNMPv3292 Section III: SNMPv3The SNMPv3 Access Table tab is shown in Figure 117.Figure 117. SNMPv3 Access Table Tab (Monitoring)Displaying

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 293The SNMPv3 SecurityToGroup Table tab is shown in Figure 118.Figure

Chapter 18: SNMPv3294 Section III: SNMPv3The SNMPv3 Notify Table tab is shown in Figure 119.Figure 119. SNMPv3 Notify Table Tab (Monitoring)Displaying

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 295The SNMPv3 Target Address Table tab is shown in Figure 120.Figure

Chapter 18: SNMPv3296 Section III: SNMPv3The SNMPv3 Target Parameters Table tab is shown in Figure 121.Figure 121. SNMPv3 Target Parameters Table Tab

AT-S63 Management Software Web Browser Interface User’s GuideSection III: SNMPv3 297The SNMPv3 Community Table tab is shown in Figure 122.Figure 122.

Chapter 18: SNMPv3298 Section III: SNMPv3

Section IV: Spanning Tree Protocols 299Section IVSpanning Tree ProtocolsThe chapters in this section contain the procedures for configuring the spanni

3Preface ...

Chapter 1: Starting a Web Browser Management Session30 Section I: Basic OperationsThe main menu is on the left side of the home page. It consists of t

300 Section IV: Spanning Tree Protocols

Section IV: Spanning Tree Protocols 301Chapter 19Spanning Tree and Rapid Spanning Tree ProtocolsThis chapter explains how to configure the STP and RST

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols302 Section IV: Spanning Tree ProtocolsEnabling or Disabling a Spanning Tree ProtocolTo ena

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 303The Spanning Tree tab is shown in Figure 124.Figur

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols304 Section IV: Spanning Tree ProtocolsConfiguring STPCautionThe bridge provides default ST

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 305The Configure STP Parameters tab is shown in Figur

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols306 Section IV: Spanning Tree Protocols4096, with 0 being the highest priority. For a list

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 307NoteThe aging time for BPDUs is different from the

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols308 Section IV: Spanning Tree ProtocolsPort CostThe spanning tree algorithm uses the cost p

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 309The Layer 2 page is displayed with the MAC Address

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 31Web Browser ToolsYou can use the web browser tools to move

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols310 Section IV: Spanning Tree Protocols4. Click View.The Monitor STP Parameters tab is show

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 311State Current state of the port. The possible stat

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols312 Section IV: Spanning Tree ProtocolsConfiguring RSTPCautionThe bridge provides default R

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 313The Configure RSTP Bridge Parameters tab is shown

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols314 Section IV: Spanning Tree ProtocolsBridge Hello TimeThe time interval between generatin

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 315The RSTP Settings - Port(s) page is shown in Figur

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols316 Section IV: Spanning Tree Protocols10. From the Configuration menu, select the Save Con

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 3174. Select the Spanning Tree tab.The Spanning Tree

Chapter 19: Spanning Tree and Rapid Spanning Tree Protocols318 Section IV: Spanning Tree ProtocolsThe RSTP Settings page displays a table that contain

Section IV: Spanning Tree Protocols 319Chapter 20Multiple Spanning Tree ProtocolThis chapter explains how to configure multiple spanning tree protocol

Chapter 1: Starting a Web Browser Management Session32 Section I: Basic OperationsSaving Your Parameter ChangesWhen you make a change to a switch para

Chapter 20: Multiple Spanning Tree Protocol320 Section IV: Spanning Tree ProtocolsEnabling MSTPThe AT-9400 Series switch can support the three spannin

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 321NoteIf you do not want to change the active spanni

Chapter 20: Multiple Spanning Tree Protocol322 Section IV: Spanning Tree ProtocolsConfiguring MSTPThis section contains the following procedures:  “C

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 323Figure 136. Configure MSTP Parameters Tab (Configu

Chapter 20: Multiple Spanning Tree Protocol324 Section IV: Spanning Tree ProtocolsForce VersionThis selection determines whether the bridge operates w

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 325Revision LevelThe revision level of an MSTP region

Chapter 20: Multiple Spanning Tree Protocol326 Section IV: Spanning Tree ProtocolsCreating, Deleting, or Modifying MSTI IDsTo create, delete, or modif

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 3277. In the Priority field, enter an MSTI Priority v

Chapter 20: Multiple Spanning Tree Protocol328 Section IV: Spanning Tree ProtocolsModifying anMSTI IDTo modify an MSTI ID, perform the following proce

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 3299. From the Configuration menu, select the Save Co

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 33Quitting a Web Browser Management SessionTo exit a web brow

Chapter 20: Multiple Spanning Tree Protocol330 Section IV: Spanning Tree ProtocolsAdding, Removing, or Modifying VLAN Associations to MSTIsThis sectio

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 3313. Select the Spanning Tree tab.The Spanning Tree

Chapter 20: Multiple Spanning Tree Protocol332 Section IV: Spanning Tree Protocols7. From the Configuration menu, select the Save Config option to per

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 333Configuring MSTP Port ParametersTo configure MSTP

Chapter 20: Multiple Spanning Tree Protocol334 Section IV: Spanning Tree Protocols7. Configure the following parameters as necessary.The port paramete

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 335Table 9 lists the MSTP port costs with Auto Update

Chapter 20: Multiple Spanning Tree Protocol336 Section IV: Spanning Tree ProtocolsTable 11 lists the MSTP port costs with the Auto setting when the po

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 337Displaying the MSTP Port ConfigurationTo display t

Chapter 20: Multiple Spanning Tree Protocol338 Section IV: Spanning Tree ProtocolsThe MSTP Parameters tab is shown in Figure 140.Figure 140. Monitor M

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 339The MSTP Settings page displays a table that conta

Chapter 1: Starting a Web Browser Management Session34 Section I: Basic OperationsPorts 23R and 24R on the AT-9424T/GB, AT-9424T/SP, and AT-9424Ti/SP

Chapter 20: Multiple Spanning Tree Protocol340 Section IV: Spanning Tree ProtocolsDisplaying the MSTP Port StatusTo display MSTP port status, perform

AT-S63 Management Software Web Browser Interface User’s GuideSection IV: Spanning Tree Protocols 341Disabled - The port has not established a link wit

Chapter 20: Multiple Spanning Tree Protocol342 Section IV: Spanning Tree ProtocolsResetting MSTP to the Default SettingsTo reset MSTP to the factory d

Section V: VLANs 343Section VVirtual LANsThe chapters in this section provide information and procedures for basic switch setup using the AT-S63 manag

344 Section V: VLANs

Secton V: Virtual LANs 345Chapter 21Port-based and Tagged VLANsThis chapter explains how to create, modify, and delete port-based and tagged VLANs. Th

Chapter 21: Port-based and Tagged VLANs346 Secton V: Virtual LANsCreating a New Port-Based or Tagged VLANTo create a new port-based or tagged VLAN, pe

AT-S63 Management Software Web Browser Interface User’s GuideSecton V: Virtual LANs 347The VLAN Mode and Uplink Port options are explained in “Selecti

Chapter 21: Port-based and Tagged VLANs348 Secton V: Virtual LANsdefault value when you create the first VLAN on the new switch, even though that VID

AT-S63 Management Software Web Browser Interface User’s GuideSecton V: Virtual LANs 3497. Click Apply.NoteAny untagged ports that you assign to the ne

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 35Web Browser Interface RestrictionsThe following management

Chapter 21: Port-based and Tagged VLANs350 Secton V: Virtual LANsModifying a VLANThis procedure explains how to add or remove ports from a VLAN. When

AT-S63 Management Software Web Browser Interface User’s GuideSecton V: Virtual LANs 351NoteUntagged ports that are added to a VLAN are automatically r

Chapter 21: Port-based and Tagged VLANs352 Secton V: Virtual LANsDeleting a VLANTo delete a port-based or tagged VLAN from the switch, perform the fol

AT-S63 Management Software Web Browser Interface User’s GuideSecton V: Virtual LANs 353Selecting a VLAN ModeThe AT-S63 management software features th

Chapter 21: Port-based and Tagged VLANs354 Secton V: Virtual LANs5. If you select one of the multiple VLAN modes, specify an uplink port in the Uplink

AT-S63 Management Software Web Browser Interface User’s GuideSecton V: Virtual LANs 355Displaying VLANsTo display the current VLANs on a switch, perfo

Chapter 21: Port-based and Tagged VLANs356 Secton V: Virtual LANsMultiple - The non-IEEE 802.1Q-compliant multiple VLAN mode.Management VLAN IDVLAN ID

AT-S63 Management Software Web Browser Interface User’s GuideSecton V: Virtual LANs 357Specifying a Management VLANThe management VLAN is the VLAN thr

Chapter 21: Port-based and Tagged VLANs358 Secton V: Virtual LANs

Section V: Virtual LANs 359Chapter 22GARP VLAN Registration ProtocolThis chapter contains instructions on how to configure GARP VLAN Registration Prot

Chapter 1: Starting a Web Browser Management Session36 Section I: Basic Operations

Chapter 22: GARP VLAN Registration Protocol360 Section V: Virtual LANsConfiguring GVRPTo configure GVRP, perform the following procedure:1. From the H

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 361Leave TimeUse this parameter to specify the leave time. The ra

Chapter 22: GARP VLAN Registration Protocol362 Section V: Virtual LANsEnabling or Disabling GVRP on a PortTo enable or disable GVRP on a port, perform

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 363Displaying the GVRP ConfigurationTo display the GVRP configura

Chapter 22: GARP VLAN Registration Protocol364 Section V: Virtual LANsGIPThe GIP status, Enabled or Disabled.Leave All TimeThe range is 500 to 300 cen

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 365Displaying the GVRP Port ConfigurationTo display the GVRP port

Chapter 22: GARP VLAN Registration Protocol366 Section V: Virtual LANsDisplaying the GVRP DatabaseTo display the GVRP database, perform the following

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 367Displaying the GVRP State MachineTo display the GVRP state mac

Chapter 22: GARP VLAN Registration Protocol368 Section V: Virtual LANsApp Applicant state machine for the GID index on that particular port. One of:No

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 369Reg Registrar state machine for the GID index on that particul

Section I: Basic Operations 37Chapter 2Basic Switch ParametersThis chapter contains the following sections: “Configuring an IP Address and Switch Nam

Chapter 22: GARP VLAN Registration Protocol370 Section V: Virtual LANsDisplaying the GVRP CountersTo display the GVRP counters, perform the following

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 371The GVRP Counters page provides the information shown in Table

Chapter 22: GARP VLAN Registration Protocol372 Section V: Virtual LANsReceive GARP Messages: JoinEmptyTotal number of GARP JoinEmpty messages received

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 373Displaying the GIP Connected Ports RingTo display the GIP conn

Chapter 22: GARP VLAN Registration Protocol374 Section V: Virtual LANsring. If no ports exist in the GIP connected ring, “No ports are connected” is d

Section V: Virtual LANs 375Chapter 23Protected Ports VLANsThis chapter explains how to create, modify, and delete protected ports VLANs and contains t

Chapter 23: Protected Ports VLANs376 Section V: Virtual LANsCreating a New Protected Ports VLANTo create a new protected ports VLAN, perform the proce

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 377The Add New VLAN page is shown in Figure 154.Figure 154. Add N

Chapter 23: Protected Ports VLANs378 Section V: Virtual LANs7. Select Protected as the Type.8. Select the ports for the protected ports VLAN by clicki

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 379The Add New Protected VLAN page is shown in Figure 155.Figure

Chapter 2: Basic Switch Parameters38 Section I: Basic OperationsConfiguring an IP Address and Switch NameNoteFor guidelines about when to assign an IP

Chapter 23: Protected Ports VLANs380 Section V: Virtual LANsThe switch creates the group and adds it to the VLAN Groups section of the window.15. Repe

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 381Modifying a Protected Ports VLANThis procedure explains how to

Chapter 23: Protected Ports VLANs382 Section V: Virtual LANsClicking repeatedly on a port toggles the port through the following possible settings:7.

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 383The Modify Protected VLAN page is shown in Figure 156.Figure 1

Chapter 23: Protected Ports VLANs384 Section V: Virtual LANsd. Recreate the groups.9. To delete a group, do the following:a. Click the circle next to

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 385Deleting a Protected Ports VLANTo delete a protected ports VLA

Chapter 23: Protected Ports VLANs386 Section V: Virtual LANsDisplaying a Protected Ports VLANTo display the details of a protected port VLAN, perform

AT-S63 Management Software Web Browser Interface User’s GuideSection V: Virtual LANs 387Untagged PortsThe untagged ports that are members of the VLAN.

Chapter 23: Protected Ports VLANs388 Section V: Virtual LANs

Section VI: Port Security 389Section VIPort SecurityThe chapters in this section provide the procedures for configuring port security. The chapters in

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 39NoteThis procedure describes the parameters in the Administ

390 Section VI: Port Security

Section VI: Port Security 391Chapter 24MAC Address-based Port SecurityThis chapter explains how to configure and display the MAC address security leve

Chapter 24: MAC Address-based Port Security392 Section VI: Port SecurityConfiguring Port SecurityTo configure security for the ports, perform the foll

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 3934. From the Security Mode pull-down menu, select the desired

Chapter 24: MAC Address-based Port Security394 Section VI: Port SecurityThresholdSpecifies the maximum number of dynamic MAC addresses you want the po

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 395Displaying the Port Security LevelTo display the MAC address

Chapter 24: MAC Address-based Port Security396 Section VI: Port SecurityThe Security for Port(s) page is shown in Figure 161.Figure 161. Security for

Section VI: Port Security 397Chapter 25802.1x Port-based Network Access ControlThis chapter contains instructions on how to configure the 802.1x Port-

Chapter 25: 802.1x Port-based Network Access Control398 Section VI: Port SecuritySetting Port RolesTo set port roles for port-based network access con

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 399The graphical image of the switch shows which ports have alr

Contents4Chapter 5: Port Parameters ...

Chapter 2: Basic Switch Parameters40 Section I: Basic OperationsNoteThe following three parameters are used to manually assign the switch an IP addres

Chapter 25: 802.1x Port-based Network Access Control400 Section VI: Port SecurityEnabling or Disabling 802.1x Port-based Network Access ControlTo enab

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 401Configuring Authenticator Port ParametersTo configure authen

Chapter 25: 802.1x Port-based Network Access Control402 Section VI: Port SecurityThe Authenticator Parameters page is shown in Figure 164.Figure 164.

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 403and the authentication server. Each client that attempts to

Chapter 25: 802.1x Port-based Network Access Control404 Section VI: Port SecurityServer TimeoutSets the timer used by the switch to determine authenti

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 405Configuring Supplicant Port ParametersTo configure supplican

Chapter 25: 802.1x Port-based Network Access Control406 Section VI: Port Security6. Configure the following parameters as needed:Auth PeriodSpecifies

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 407Displaying the Port-based Network Access Control ParametersY

Chapter 25: 802.1x Port-based Network Access Control408 Section VI: Port Security4. To see the status of the port, click the port and click Status. Yo

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 4095. To see the port settings, click the port and click Settin

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 41Activating the BOOTP or DHCP Client SoftwareFor background

Chapter 25: 802.1x Port-based Network Access Control410 Section VI: Port SecuritySuppTOThe switch-to-client retransmission time for the EAP Request pa

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 411RADIUS AccountingThe AT-S63 management software supports RAD

Chapter 25: 802.1x Port-based Network Access Control412 Section VI: Port SecurityTypeThis parameter specifies the type of RADIUS accounting. The defau

AT-S63 Management Software Web Browser Interface User’s GuideSection VI: Port Security 413The 802.1x Port Access tab is shown in Figure 170.Figure 170

Chapter 25: 802.1x Port-based Network Access Control414 Section VI: Port SecurityUpdate IntervalThe intervals, in seconds, at which the switch sends i

Section VII: Management Security 415Section VIIManagement SecurityThe chapters in this section contain the procedure for implementing management secur

416 Section VII: Management Security

Section VII: Management Security 417Chapter 26Encryption Keys, PKI, and SSLThis chapter explains how to view the encryption keys, PKI-based certificat

Chapter 26: Encryption Keys, PKI, and SSL418 Section VII: Management SecurityDisplaying the Encryption KeysTo configure the encryption keys, you must

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 419LengthThe length of the key in bits.DigestThe CRC32 v

Chapter 2: Basic Switch Parameters42 Section I: Basic OperationsDisplaying System InformationTo view basic information about the switch, perform the f

Chapter 26: Encryption Keys, PKI, and SSL420 Section VII: Management SecurityDisplaying the PKI Settings and CertificatesYou can view the current PKI

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 421NameThe certificate name.StateThe state of the certif

Chapter 26: Encryption Keys, PKI, and SSL422 Section VII: Management SecurityNameThe name of the certificate.StateWhether the certificate is Trusted o

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 423Displaying the SSL SettingsTo configure the SSL setti

Chapter 26: Encryption Keys, PKI, and SSL424 Section VII: Management Security

Section VII: Management Security 425Chapter 27Secure Shell (SSH)This chapter explains how to configure the Secure Shell (SSH) protocol and contains th

Chapter 27: Secure Shell (SSH)426 Section VII: Management SecurityConfiguring SSHTo configure SSH, perform the following procedure:1. From the Home pa

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 427NoteYou cannot disable the SSH server when there is a

Chapter 27: Secure Shell (SSH)428 Section VII: Management SecurityDisplaying the SSH SettingsTo view the Secure Shell settings, perform the following

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 429StatusWhether or not the SSH server is enabled or dis

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 43CommentsThe location of the switch, (for example, 4th Floor

Chapter 27: Secure Shell (SSH)430 Section VII: Management Security

Section VII: Management Security 431Chapter 28TACACS+ and RADIUS ProtocolsThis chapter contains instructions on how to configure the authentication pr

Chapter 28: TACACS+ and RADIUS Protocols432 Section VII: Management SecurityEnabling or Disabling TACACS+ or RADIUSTo enable or disable server-based a

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 433NoteThe Enable Server-based Authentication check box

Chapter 28: TACACS+ and RADIUS Protocols434 Section VII: Management SecurityConfiguring TACACS+To configure TACACS+, perform the following procedure:1

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 435cannot respond. If the timeout expires and the server

Chapter 28: TACACS+ and RADIUS Protocols436 Section VII: Management SecurityDisplaying the TACACS+ SettingsTo display the TACACS+ settings on the swit

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 437The TACACS+ client configuration page is shown in Fig

Chapter 28: TACACS+ and RADIUS Protocols438 Section VII: Management SecurityConfiguring RADIUSTo configure RADIUS, perform the following procedure:1.

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 439cannot respond. If the timeout expires and the server

Chapter 2: Basic Switch Parameters44 Section I: Basic OperationsConfiguring the Manager and Operator PasswordsThere are two levels of management acces

Chapter 28: TACACS+ and RADIUS Protocols440 Section VII: Management SecurityDisplaying the RADIUS SettingsTo display the RADIUS settings on the switch

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 441Global Encryption KeyThe global encryption secret. Gl

Chapter 28: TACACS+ and RADIUS Protocols442 Section VII: Management Security

Section VII: Management Security 443Chapter 29Management Access Control ListA management access control list (ACL) allows you to restrict Telnet and w

Chapter 29: Management Access Control List444 Section VII: Management SecurityEnabling or Disabling the Management ACLThis procedure enables and disab

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 445The middle section of the tab lists the existing ACEs

Chapter 29: Management Access Control List446 Section VII: Management SecurityCreating an ACETo add a new ACE to the management ACL, perform the follo

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 447All - Allows both Telnet and web browser management p

Chapter 29: Management Access Control List448 Section VII: Management SecurityDeleting an ACETo delete an ACE from the management ACL, perform the fol

AT-S63 Management Software Web Browser Interface User’s GuideSection VII: Management Security 449Displaying the Management Access Control ListTo displ

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 45Operator PasswordConfirm Operator PasswordUse these paramet

Chapter 29: Management Access Control List450 Section VII: Management SecurityInterfaceThe interface the management station uses when managing the swi

451IndexNumerics802.1x Port-based Network Access Controlaccess role, configuring 398authenticator port, configuring 401configuring 398disabling 400ena

Index452enabling 142saving to a file 150severity codes 149software module list 147Ffactory defaultsresetting switch 52flash memory, displaying files i

AT-S63 Management Software Web Browser Interface User’s Guide453displaying 224multicast host topologyconfiguring 220displaying 223multicast MAC addres

Index454port-based access control. See 802.1x Port-based NetworkAccess Controlport-based VLANcreating 346deleting 352, 385displaying 355, 386modifying

AT-S63 Management Software Web Browser Interface User’s Guide455SNMPv3 User Table entrycreating 236deleting 239displaying 288modifying 240SNMPv3 View

Index456

Chapter 2: Basic Switch Parameters46 Section I: Basic OperationsRebooting a SwitchNoteAny parameters changes that have not been saved are discarded wh

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 47Setting the System Date and TimeThis procedure explains how

Chapter 2: Basic Switch Parameters48 Section I: Basic OperationsThe System Time tab is shown in Figure 7.Figure 7. System Time Tab3. To set the system

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 49Daylight Savings Time (DST)Enables or disables the system’s

AT-S63 Management Software Web Browser Interface User’s Guide5Chapter 13: Access Control Lists ...

Chapter 2: Basic Switch Parameters50 Section I: Basic OperationsPinging a Remote SystemYou can instruct the switch to ping a node on your network. Thi

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 51The Ping Client tab is shown in Figure 9.Figure 9. Ping Cli

Chapter 2: Basic Switch Parameters52 Section I: Basic OperationsReturning the AT-S63 Management Software to the Factory Default ValuesThe procedure in

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 53NoteThe AT-S63 management software default values are liste

Chapter 2: Basic Switch Parameters54 Section I: Basic Operations5. Click OK to continue, or Cancel to cancel the procedure.If you select OK, the switc

Section I: Basic Operations 55Chapter 3Enhanced StackingThis chapter contains the following procedures for setting up enhanced stacking: “Setting a S

Chapter 3: Enhanced Stacking56 Section I: Basic OperationsSetting a Switch’s Enhanced Stacking StatusThe enhanced stacking status of the switch can be

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 57The System page is displayed with the General tab selected

Chapter 3: Enhanced Stacking58 Section I: Basic OperationsSelecting a Switch in an Enhanced StackBefore you perform any procedure on a switch in an en

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 59Figure 12. Stacking Switches PageNoteThe master switch on w

Contents6Configuring the SNMPv3 SecurityToGroup Table ... 257Cr

Chapter 3: Enhanced Stacking60 Section I: Basic Operations4. Enter a user name and password for the switch when prompted.The home page of the selected

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 61Returning to the Master SwitchWhen you are finished managin

Chapter 3: Enhanced Stacking62 Section I: Basic OperationsDisplaying the Enhanced Stacking StatusTo display the enhanced stacking status of the switch

Section I: Basic Operations 63Chapter 4SNMPv1 and SNMPv2cThis chapter explains how to activate SNMP management on the switch and how to create, modify

Chapter 4: SNMPv1 and SNMPv2c64 Section I: Basic OperationsEnabling or Disabling SNMP ManagementTo enable or disable SNMP management on the switch, pe

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 654. Click the Enable SNMP Access checkbox to enable or disab

Chapter 4: SNMPv1 and SNMPv2c66 Section I: Basic OperationsCreating a New SNMPv1 and SNMPv2c CommunityTo create a new SNMPv1 and SNMPv2c community, pe

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 67The Add New SNMPv1 & SNMPv2c Community page is shown in

Chapter 4: SNMPv1 and SNMPv2c68 Section I: Basic OperationsManager IP Address 1 through Manager IP Address 8Enter an IP Address of a switch that is pe

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 69Modifying an SNMPv1 and SNMPv2c CommunityTo modify an SNMPv

AT-S63 Management Software Web Browser Interface User’s Guide7Displaying the MSTP Port Configuration ...

Chapter 4: SNMPv1 and SNMPv2c70 Section I: Basic OperationsFigure 17. Modify SNMPv1 & SNMPv2c Community Page6. Modify the following parameters:Com

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 71access to the current switch. You can enter up to 8 Manager

Chapter 4: SNMPv1 and SNMPv2c72 Section I: Basic OperationsDeleting an SNMPv1 and SNMPv2c CommunityTo delete an existing SNMPv1 and SNMPv2c community,

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 73Displaying the SNMPv1 and SNMPv2c CommunitiesTo display the

Chapter 4: SNMPv1 and SNMPv2c74 Section I: Basic Operations4. In the SNMPv1 & SNMPv2c section, click View.The SNMPv1 & SNMPv2c Communities tab

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 75StatusThe community status, one of the following settings:E

Chapter 4: SNMPv1 and SNMPv2c76 Section I: Basic Operations

Section I: Basic Operations 77Chapter 5Port ParametersThis chapter explains how to view and change the parameter settings for the individual ports on

Chapter 5: Port Parameters78 Section I: Basic OperationsConfiguring Port ParametersTo configure the parameter settings of a port on the switch, perfor

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 79The Port Configuration page is shown Figure 21.Figure 21. P

Contents8Chapter 27: Secure Shell (SSH) ...

Chapter 5: Port Parameters80 Section I: Basic OperationsEnabled - The port receives and forwards packets. This is the default setting.Disabled - The p

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 81NoteA 10/100/1000Base-T twisted pair port can operate at 10

Chapter 5: Port Parameters82 Section I: Basic OperationsEnabled - The port discards egress unknown unicast packets.Disabled - The port forwards egress

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 83For further information about back pressure, refer to Chapt

Chapter 5: Port Parameters84 Section I: Basic OperationsMulticast Rate LimitingUse this parameter to enable or disable ingress multicast packet limits

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 85Displaying Port StatusTo display the status of a switch por

Chapter 5: Port Parameters86 Section I: Basic OperationsThe Port Status page is shown in Figure 23.Figure 23. Port Status PageThe Port Status page dis

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 87Ingress Unknown Unicast FilterStatus of the filter on ingre

Chapter 5: Port Parameters88 Section I: Basic OperationsMulticast Rate LimitingThe status of multicast rate limiting, enabled or disabled.Multicast Ra

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 89Displaying Port StatisticsTo display the statistics of a sw

9Chapter 1: Starting a Web Browser Management Session ... 27Figure 1: Entering a

Chapter 5: Port Parameters90 Section I: Basic OperationsBytes SentNumber of bytes transmitted from the port.Frames Received Number of frames received

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 91TXCollisionsNumber of transmit collisions.5. To clear all t

Chapter 5: Port Parameters92 Section I: Basic OperationsResetting a Port to the Default SettingsTo reset a port to the default settings, perform the f

Section I: Basic Operations 93Chapter 6MAC Address TableThis chapter contains instructions on how to add and view the dynamic and static addresses in

Chapter 6: MAC Address Table94 Section I: Basic OperationsAdding Static Unicast and Multicast MAC AddressesThis section contains the procedure for ass

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 953. To add a static unicast address, in the View/Add Unicast

Chapter 6: MAC Address Table96 Section I: Basic OperationsDeleting Unicast and Multicast MAC AddressesTo delete a static or dynamic unicast or multica

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 97Deleting All Dynamic MAC AddressesTo delete all the dynamic

Chapter 6: MAC Address Table98 Section I: Basic OperationsDisplaying the MAC Address TablesTo view the MAC address table, perform the following proced

AT-S63 Management Software Web Browser Interface User’s GuideSection I: Basic Operations 99View AllDisplays all dynamic addresses learned on the ports