AT-8800 SERIES SWITCHUSER GUIDESoftware Release 2.6.1

10 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AManagement FeaturesThe following features enhance management of the switch

100 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATriggersThe Trigger Facility can be used to automatically run specified c

Chapter 6Layer 3The AT-8800 Series Switch routes IP and IP multicasting traffic at wire speed between VLANs, and supports a number of other Layer 3 pr

102 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AInternet Protocol (IP)The switch performs IP routing at wire speed betwee

Layer 3 103Software Release 2.6.1C613-02039-00 REV ARouting Information Protocol (RIP)Routing protocols such as RIPv1 and RIPv2 can be enabled on a VL

104 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 24: Example output from the SHOW IPX CIRCUIT command.AppleTalkTo c

Layer 3 105Software Release 2.6.1C613-02039-00 REV AFigure 25: Example output from the SHOW APPLE PORT command.Resource Reservation Protocol (RSVP)The

Chapter 7Maintenance and TroubleshootingThis ChapterIf you are familiar with networking and switch operations, you may be able to diagnose and solve s

108 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AHow the Switch Starts UpThe sequence of operations that the switch perfor

Maintenance and Troubleshooting 109Software Release 2.6.1C613-02039-00 REV AWhen you start the switch the FLASH boot release is always loaded first. T

Introduction 11Software Release 2.6.1C613-02039-00 REV A Sophisticated packet filtering. Bridging. Van Jacobson’s header compression, STAC LZS and

110 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ABackup switchIf your network has many switches, you may wish to keep a ba

Maintenance and Troubleshooting 111Software Release 2.6.1C613-02039-00 REV AWhat to Do if You Clear FLASH Memory CompletelyDO NOT clear the FLASH memo

112 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AWhat to Do if the PPP Link Disconnects RegularlyIf the device at the othe

Maintenance and Troubleshooting 113Software Release 2.6.1C613-02039-00 REV A To get debugging output, enter the command:SHOW DEBUG Depending on the

114 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATo set PING defaults, enter the command:SET PING [{[IPADDRESS=]ipadd|[IPX

Maintenance and Troubleshooting 115Software Release 2.6.1C613-02039-00 REV AThe “IP Packet Forwarding” field in the output should be set to “Enabled”.

116 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATroubleshooting IPX ConfigurationsNo Routes are Visible to the Remote Rou

Maintenance and Troubleshooting 117Software Release 2.6.1C613-02039-00 REV A3. Check for file server on Remote Office switchDoes the file server appea

118 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AAny parameters not specified use the defaults configured with a previous

12 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AMost software features that require a special feature licence are bundled

Chapter 2Getting Started with the Command Line Interface (CLI)This ChapterThis chapter describes how to access the switch’s CLI, and provides basic in

14 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AConnecting a Terminal or PCThe first thing to do after physically installi

Getting Started with the Command Line Interface (CLI) 15Software Release 2.6.1C613-02039-00 REV AIf a modem is connected, configure the switch to make

16 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AIf IP addresses on your LAN are assigned dynamically by DHCP, you can set

Getting Started with the Command Line Interface (CLI) 17Software Release 2.6.1C613-02039-00 REV ATo add a static route, enter the command:ADD IP ROUTE

18 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV A Do not use your birth date, street number or telephone number. Do not w

Getting Started with the Command Line Interface (CLI) 19Software Release 2.6.1C613-02039-00 REV AAliasesThe command line interface supports aliases. A

2AT-8800 Series Switch User Guide for Software Release 2.6.1Document Number C613-02039-00 REV A.Copyright © 1999-2003 Allied Telesyn International, Co

20 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AEnabling Special Feature LicencesYou must enable the special feature licen

Getting Started with the Graphical User Interface (GUI) 21Software Release 2.6.1C613-02039-00 REV AChapter 3Getting Started with the Graphical User In

22 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AWhat is the GUI?The GUI (Graphical User Interface) is a web-based device m

Getting Started with the Graphical User Interface (GUI) 23Software Release 2.6.1C613-02039-00 REV ATo enable JavaScript in Netscape 6.2.x:1. From the

24 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AEstablishing a Connection to the SwitchBefore you start, consider how the

Getting Started with the Graphical User Interface (GUI) 25Software Release 2.6.1C613-02039-00 REV AOption 1: Configuring the Switch before Installatio

26 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV A9. At the login prompt, enter the user name and passwordThe default userna

Getting Started with the Graphical User Interface (GUI) 27Software Release 2.6.1C613-02039-00 REV AFigure 5: Configuring the switch from a PC in anoth

28 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV A8. On the PC, bypass the HTTP proxy server, if necessarySee “HTTP Proxy Se

Getting Started with the Graphical User Interface (GUI) 29Software Release 2.6.1C613-02039-00 REV A4. Browse to the switchFor normal access, point you

ContentsCHAPTER 1 IntroductionIntroducing the AT-8800 Series Switch ... 7Why Read this Use

30 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV A2. Login as a Security OfficerTo login as the user with Security Officer p

Getting Started with the Graphical User Interface (GUI) 31Software Release 2.6.1C613-02039-00 REV A10. Configure an IP interface to run SSL overTo con

32 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AUsing the GUI: Navigation and FeaturesThe GUI consists of a large number o

Getting Started with the Graphical User Interface (GUI) 33Software Release 2.6.1C613-02039-00 REV ATo modify an existing item, select it by clicking o

34 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 9: An example of a popup “modify” pageEditable FieldsGUI pages allo

Getting Started with the Graphical User Interface (GUI) 35Software Release 2.6.1C613-02039-00 REV AApply ButtonAn Apply button applies the configurati

36 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AThe Diagnostics MenuThe GUI’s diagnostics pages enable you to troubleshoot

Getting Started with the Graphical User Interface (GUI) 37Software Release 2.6.1C613-02039-00 REV ASaving Configuration Entered with the GUIConfigurat

38 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AUpgrading the GUIYou can download the latest GUI resource file from the su

Getting Started with the Graphical User Interface (GUI) 39Software Release 2.6.1C613-02039-00 REV AWhen the switch has loaded the file into its RAM, i

4 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AThe Diagnostics Menu ...

40 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ADeleting Temporary FilesBrowsers store local copies of web pages as tempor

Getting Started with the Graphical User Interface (GUI) 41Software Release 2.6.1C613-02039-00 REV AProblem The GUI is behaving inconsistently, or you

42 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AIP Addresses and DHCPProblem The switch is enabled as a DHCP server, but c

Getting Started with the Graphical User Interface (GUI) 43Software Release 2.6.1C613-02039-00 REV ALoading SoftwareProblem You have attempted to load

Chapter 4Operating the switchThis ChapterThis chapter introduces basic operations on the switch, including: “User Accounts and Privileges” on page 4

46 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AIn normal mode, a user with manager privilege can create and delete accoun

Operating the switch 47Software Release 2.6.1C613-02039-00 REV ASee the Operations chapter in the AT-8800 Series Switch Software Reference for: More

48 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AWhen the switch is in security mode, a user with security officer privileg

Operating the switch 49Software Release 2.6.1C613-02039-00 REV ARemote ManagementYou can manage remote switches as easily as you manage the local swit

5Software Release 2.6.1C613-02039-00 REV AThe Forwarding Process ... 82Layer

50 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV Aextensions of 3 characters. For example, the file extralongfilenam.cfg may

Operating the switch 51Software Release 2.6.1C613-02039-00 REV AIn addition to the boot configuration script that the switch automatically runs when i

52 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ALoading and Uploading FilesWhen you want to upgrade your switch to a new s

Operating the switch 53Software Release 2.6.1C613-02039-00 REV AYou may see files on your switch with file name extensions not listed in Table 6 on pa

54 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ASetting LOADER DefaultsYou are likely to repeat the process of downloading

Operating the switch 55Software Release 2.6.1C613-02039-00 REV AUploading Files From the SwitchThe LOADER can upload files from the switch to a networ

56 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AUpgrading Switch SoftwareWhen you first start the switch, it automatically

Operating the switch 57Software Release 2.6.1C613-02039-00 REV Awhen the switch boots correctly, to then set up the preferred install with the new rel

58 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV Aon page 52). To load the release file using your LOADER default settings,

Operating the switch 59Software Release 2.6.1C613-02039-00 REV AExample: Upgrade to a new patch fileUse this procedure to upgrade the software release

60 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AUsing the Built-in EditorThe AT-8800 Series Switch has a built-in full-scr

Operating the switch 61Software Release 2.6.1C613-02039-00 REV ASNMP communities are the main configuration item in the router’s SNMP agent, and are d

62 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ASee other chapters in the AT-8800 Series Switch Software Reference for mor

Chapter 5Layer 2 SwitchingThis section describes the Layer 2 switching features on the AT-8800 Series Switch, and how to configure them.Switch PortsEa

64 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATo enable or disable a switch port, use the commands:ENABLE SWITCH PORT={p

Layer 2 Switching 65Software Release 2.6.1C613-02039-00 REV AConfigured speed/duplex The port speed and duplex mode configured for this port. One of “

66 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AAutonegotiation of Port Speed and Duplex ModeEach of the switch ports can

Layer 2 Switching 67Software Release 2.6.1C613-02039-00 REV AThe SHOW SWITCH PORT command displays the port speed and duplex mode settings.Port Trunki

68 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV Awhich the whole trunk group belongs, unless it is first removed from the t

Layer 2 Switching 69Software Release 2.6.1C613-02039-00 REV APacket Storm ProtectionThe packet storm protection feature allows the user to set limits

Chapter 1IntroductionIntroducing the AT-8800 Series SwitchCongratulations on purchasing an AT-8800 Series Intelligent Workgroup Switch. The AT-8800 Se

70 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV Athe BCLIMIT parameter description for important information about packet r

Layer 2 Switching 71Software Release 2.6.1C613-02039-00 REV ATo send packets that match particular criteria to the mirror port, first create a classif

72 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATable 9: Example output from the SHOW SWITCH PORT INTRUSION command.A swit

Layer 2 Switching 73Software Release 2.6.1C613-02039-00 REV ADevices that are members of the same VLAN only exchange data with each other through the

74 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 13: Format of user priority and VLAN data in an Ethernet frame.Ethe

Layer 2 Switching 75Software Release 2.6.1C613-02039-00 REV AEvery frame admitted by the switch has a VID associated with it. If a frame arrives on a

76 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 14: VLANs with tagged ports.VLAN Membership of Untagged PacketsA V

Layer 2 Switching 77Software Release 2.6.1C613-02039-00 REV AIf the network includes VLANs that do not need to share network resources or span several

78 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATo add tagged ports to a VLAN, use the command:ADD VLAN={vlan-name|1..4094

Layer 2 Switching 79Software Release 2.6.1C613-02039-00 REV ASummary of VLAN tagging rulesWhen designing a VLAN and adding ports to VLANs, the followi

8 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AThis user guide is organised into the following chapters: Chapter 1, Intro

80 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AGeneric VLAN Registration Protocol (GVRP)The GARP application GVRP allows

Layer 2 Switching 81Software Release 2.6.1C613-02039-00 REV AThe default settings for the Ingress Rules are to Admit All Frames, and for Ingress Filte

82 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AIf the frame’s source address is not already in the Forwarding Database fo

Layer 2 Switching 83Software Release 2.6.1C613-02039-00 REV Athe switch floods the frame on all ports in the VLAN except the port on which the frame w

84 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 16: Example output from the SHOW SWITCH FILTER command.For each VLA

Layer 2 Switching 85Software Release 2.6.1C613-02039-00 REV AThe Egress RulesOnce the Forwarding Process has determined which ports and transmission q

86 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATo display the mapping of user priority to QOS egress queues, use the comm

Layer 2 Switching 87Software Release 2.6.1C613-02039-00 REV AA spanning tree running in standard mode can take up to one minute to rebuild after a top

88 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV ATo specify whether the STP will operate in STANDARD mode or RAPID mode, us

Layer 2 Switching 89Software Release 2.6.1C613-02039-00 REV Aby the Root Bridge. The FORWARDDELAY, MAXAGE and HELLOTIME parameters are interrelated. S

Introduction 9Software Release 2.6.1C613-02039-00 REV A AT-8800 Series Switch Documentation and Tools CD-ROMThe AT-8800 Series Switch Documentation S

90 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 18: Example output from the SHOW STP command. STP Information------

Layer 2 Switching 91Software Release 2.6.1C613-02039-00 REV ATable 18: Parameters in the output of the SHOW STP command .Parameter MeaningSTP Name The

92 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AThe various parameters used by the Spanning Tree Algorithm for the specifi

Layer 2 Switching 93Software Release 2.6.1C613-02039-00 REV Aso that a port operating at 10Mbps has a default pathcost of 100, a port operating at 100

94 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 19: Example output from the SHOW STP PORT command.STP Port Informat

Layer 2 Switching 95Software Release 2.6.1C613-02039-00 REV AThe spanning tree algorithm can be recalculated at any time, and all timers and counters

96 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV AFigure 20: Example output from the SHOW STP COUNTER commandSTP Counters---

Layer 2 Switching 97Software Release 2.6.1C613-02039-00 REV AIf necessary, all the STP configuration that users have created on the switch can be remo

98 AT-8800 Series Switch User GuideSoftware Release 2.6.1C613-02039-00 REV Aout all ports. IGMP snooping is independent of the IGMP and Layer 3 config

Layer 2 Switching 99Software Release 2.6.1C613-02039-00 REV AFigure 21: Example output from the SHOW IP IGMP command.IGMP Protocol--------------------