Allied-telesis AT-S62 Bedienungsanleitung

613-000124 Rev. BManagement SoftwareAT-S62◆Menus InterfaceUser’s GuideAT-8500 Series Layer 2+ Fast Ethernet SwitchesVersion 1.4.0

Contents10Technical Overview of Generic Attribute Registration Protocol (GARP)...587Configuring

Chapter 5: SNMPv1 and SNMPv2c Configuration100 Section I: Basic Operations3. If you want to remove the IP address of a management workstation from the

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1013. Type E to enable the community string or D to disable it. Thi

Chapter 5: SNMPv1 and SNMPv2c Configuration102 Section I: Basic OperationsDeleting a Community StringTo delete an SNMPv1 or SNMPv2c community string,

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 103Displaying the SNMP Community StringsTo display the attributes o

Chapter 5: SNMPv1 and SNMPv2c Configuration104 Section I: Basic Operations

Section I: Basic Operations 105Chapter 6Port ParametersThe chapter contains the procedures for viewing and adjusting the parameter settings for the in

Chapter 6: Port Parameters106 Section I: Basic OperationsDisplaying Port StatusTo display the current status and settings of the ports on the switch,

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 107NoteThe speed, duplex mode, and flow control settings will be bl

Chapter 6: Port Parameters108 Section I: Basic OperationsPVIDThe port’s VLAN identifier (PVID). This number corresponds to the VID of the VLAN in whic

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 109Configuring Port ParametersTo configure the parameter settings o

AT-S62 Management Software Menus Interface User’s Guide11Section VII: Management Security ...

Chapter 6: Port Parameters110 Section I: Basic OperationsSelections 3, 5, and 6 appear in the menu only when selection 4 - Negotiation is set to Manua

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 111Broadcast frames are different. Broadcast frames are directed to

Chapter 6: Port Parameters112 Section I: Basic Operations4 - NegotiationYou use this selection to activate or deactivate Auto-Negotiation on a twisted

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1136 - DuplexThis selection is used to set the duplex mode of a por

Chapter 6: Port Parameters114 Section I: Basic OperationsThe HOL Limit parameter can help prevent this problem from occurring. This parameter sets a t

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 115Enabled - Flow control is activated. This setting is appropriate

Chapter 6: Port Parameters116 Section I: Basic OperationsThe options on the Back Pressure menu are described below:1 - Back PressureEnables and disabl

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 117X - Reset PortResets the speed and duplex mode of the selected p

Chapter 6: Port Parameters118 Section I: Basic OperationsSetting the Rate LimitThis feature sets the maximum number of ingress packets the switch port

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 119The Rate Limiting menu is shown in Figure 27.Figure 27. Rate Lim

Contents12Chapter 33: Secure Shell (SSH) Protocol ...7

Chapter 6: Port Parameters120 Section I: Basic OperationsDisplaying Port StatisticsTo display Ethernet port statistics, perform the following procedur

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 121Broadcast Frames SentNumber of broadcast frames transmitted from

Chapter 6: Port Parameters122 Section I: Basic OperationsClearing Port CountersTo return the statistics counters of a port to zero, perform the follow

Section I: Basic Operations 123Chapter 7MAC Address TableThe chapter contains the procedures for viewing the static and dynamic MAC address table.This

Chapter 7: MAC Address Table124 Section I: Basic OperationsMAC Address OverviewThe AT-8500 Series switch has a MAC address table with a storage capaci

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 125MAC address table from becoming filled with addresses of nodes t

Chapter 7: MAC Address Table126 Section I: Basic OperationsDisplaying MAC AddressesThe management software has two menu selections for displaying the

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1273. Select the desired option. The options are explained below:1

Chapter 7: MAC Address Table128 Section I: Basic OperationsAn example of a multicast MAC address table is shown in Figure 32.Figure 32. Display All Me

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1295 - Display Specified MACDisplays the port number on which a MAC

AT-S62 Management Software Menus Interface User’s Guide13STP, RSTP, and MSTP Default Settings...

Chapter 7: MAC Address Table130 Section I: Basic OperationsAdding Static Unicast and Multicast MAC AddressesThis section contains the procedure for ad

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 131If you are entering a static multicast address, you must specify

Chapter 7: MAC Address Table132 Section I: Basic OperationsDeleting Unicast and Multicast MAC AddressesTo delete a dynamic or static unicast or multic

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 133Deleting All Dynamic MAC AddressesTo delete all dynamic unicast

Chapter 7: MAC Address Table134 Section I: Basic OperationsChanging the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addres

Section I: Basic Operations 135Chapter 8Static and LACP Port TrunksThis chapter contains the procedures for creating, modifying, and deleting static a

Chapter 8: Static and LACP Port Trunks136 Section I: Basic OperationsPort Trunk OverviewA port trunk is an economical way for you to increase the band

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 137from another manufacturer; but there is the possibility that the

Chapter 8: Static and LACP Port Trunks138 Section I: Basic Operations The ports of a static trunk must be untagged members of the same VLAN. A trunk

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 139assumes that the other port is not part of an LACP aggregator. I

Contents14

Chapter 8: Static and LACP Port Trunks140 Section I: Basic OperationsHere is how the example might look in table format for the ports on the AT-8500 S

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 141Here is how this example looks in table format for the ports on

Chapter 8: Static and LACP Port Trunks142 Section I: Basic OperationsAdminkey ParameterThe adminkey is a hexadecimal value from 1 to FFFF that identif

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 143each trunk. For further information, refer to “Load Distribution

Chapter 8: Static and LACP Port Trunks144 Section I: Basic Operationsdevice. If it does not receive LACPDU packets, it functions as a regular Ethernet

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 145As an example, assume you created a static or LACP aggregate tru

Chapter 8: Static and LACP Port Trunks146 Section I: Basic OperationsYou can assign different load distribution methods to different static trunks on

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 147Managing Static Port TrunksThe following procedures explain how

Chapter 8: Static and LACP Port Trunks148 Section I: Basic OperationsThe Port Trunking and LACP menu is shown in Figure 37.Figure 37. Port Trunking an

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 149DST IP Destination IP address.SRC/DST IP Source address/destinat

15Chapter 2: Starting a Local or Telnet Management Session... 39Figure 1: Connectin

Chapter 8: Static and LACP Port Trunks150 Section I: Basic Operations8. Type 4 to select Trunk Ports and, when prompted, enter the ports of the trunk.

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1512. From the Port Configuration menu, type 4 to select Port Trunk

Chapter 8: Static and LACP Port Trunks152 Section I: Basic Operations SRC/DST MAC - Source address /destination MAC address  SRC IP - Source IP addr

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 153The following prompt is displayed:Enter Trunk ID: [1 to 6] ->

Chapter 8: Static and LACP Port Trunks154 Section I: Basic OperationsManaging LACP TrunksThe following procedures explain how to create and manage LAC

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 155The LACP (IEEE 8023ad) Configuration menu is shown in Figure 41.

Chapter 8: Static and LACP Port Trunks156 Section I: Basic OperationsThe following prompt is displayed:Enter Priority [0x1 - 0xFFFF]: [0x1 to 0xffff]

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 157The Create LACP (IEEE 8023ad) Aggregator menu is shown in Figure

Chapter 8: Static and LACP Port Trunks158 Section I: Basic Operations6. After you configure the parameters, type C to select Create Aggregator.The agg

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 159The Port Trunking and LACP menu is shown in Figure 38 on page 14

Figures16Figure 37: Port Trunking and LACP Menu...

Chapter 8: Static and LACP Port Trunks160 Section I: Basic Operations3 - Distribution ModeSets the load distribution method. Possible settings are: S

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 161The LACP (IEEE 8023ad) Configuration menu is shown in Figure 41

Chapter 8: Static and LACP Port Trunks162 Section I: Basic OperationsFigure 44 is an example of the LACP (IEEE 802.3ad Port Status menu. The informati

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 163If there are no active aggregate trunks on the switch, the follo

Chapter 8: Static and LACP Port Trunks164 Section I: Basic Operations

Section I: Basic Operations 165Chapter 9Port MirroringThis chapter contains the procedures for creating and deleting a port mirror. Sections in the ch

Chapter 9: Port Mirroring166 Section I: Basic OperationsPort Mirroring OverviewThe port mirroring feature is used to unobtrusively monitor the ingress

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 167Creating a Port MirrorTo create a port mirror, perform the follo

Chapter 9: Port Mirroring168 Section I: Basic Operations5. Type 2 to select Mirror-To Port and, when prompted, enter the number of the port to functio

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 169Disabling a Port MirrorTo disable a port mirror, perform the fol

AT-S62 Management Software Menus Interface User’s Guide17Chapter 15: Quality of Service ...

Chapter 9: Port Mirroring170 Section I: Basic Operations

Section II: Advanced Operations 171Section IIAdvanced OperationsThe chapters in this section explain some of the more advanced features of an AT-8500

172 Section II: Advanced Operations

Section II: Advanced Operations 173Chapter 10File SystemThis chapter describes the AT-S62 file system, and how you can use the file system to copy, re

Chapter 10: File System174 Section II: Advanced OperationsFile System OverviewThe AT-S62 management software has a file system of 2 megabytes for stor

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 175File NamingConventionsThe file system is a flat file system

Chapter 10: File System176 Section II: Advanced OperationsWorking with Boot Configuration FilesA boot configuration file contains the commands for con

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 177Phase 1: Creating a Configuration FileBefore you begin to co

Chapter 10: File System178 Section II: Advanced OperationsCautionOption 9 - Format Flash Drive should be used with care. It deletes all files in the f

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 179Phase 2: Configuring the Switch’s Parameter SettingsNow that

Figures18Chapter 21: SNMPv3...

Chapter 10: File System180 Section II: Advanced OperationsTo select the active boot configuration file for the switch, perform the following procedure

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 181To view the contents of a configuration file, perform the fo

Chapter 10: File System182 Section II: Advanced OperationsEditing a BootConfigurationFileYou can edit a boot configuration file using a text editor on

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 183Copying, Renaming, and Deleting System FilesUse this procedu

Chapter 10: File System184 Section II: Advanced Operationsd. Press any key to return to the File Operations menu.5. To rename a system file, do the fo

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 185Displaying System FilesUse this procedure to display a list

Chapter 10: File System186 Section II: Advanced OperationsThe List Files menu is displayed. An example of the menu is shown in Figure 50.Figure 50. Li

Section II: Advanced Operations 187Chapter 11File Downloads and UploadsThis chapter contains procedures for downloading a new AT-S62 image file onto t

Chapter 11: File Downloads and Uploads188 Section II: Advanced OperationsDownloading a New AT-S62 Image File onto a SwitchThe procedures in this secti

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 189 The AT-S62 image file contains the bootloader for the swit

AT-S62 Management Software Menus Interface User’s Guide19Chapter 24: Port-based and Tagged Virtual LANs ...

Chapter 11: File Downloads and Uploads190 Section II: Advanced OperationsDownloading anAT-S62 Imagefrom a LocalManagementSessionReview the “Guidelines

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 1916. To download the AT-S62 image file using Xmodem, go to Ste

Chapter 11: File Downloads and Uploads192 Section II: Advanced OperationsThe following prompt is displayed:You are going to invoke the Xmodem download

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 19311. Click Browse and specify the location and file to be dow

Chapter 11: File Downloads and Uploads194 Section II: Advanced OperationsDownloading anAT-S62 Imagefrom a TelnetManagementSessionReview the “Guideline

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 195After receiving the file, the switch compares the version nu

Chapter 11: File Downloads and Uploads196 Section II: Advanced OperationsUploading an AT-S62 Image File Switch to SwitchThis procedure uploads an AT-S

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 197NoteThe “2 - Stacking Services” selection is only available

Chapter 11: File Downloads and Uploads198 Section II: Advanced OperationsCautionThe switch will not forward network traffic while writing the image to

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 199Uploading an AT-S62 Configuration File Switch to SwitchThis

Copyright © 2006 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Figures20Figure 234: Configure Supplicant Port Access Parameters Menu...

Chapter 11: File Downloads and Uploads200 Section II: Advanced OperationsCautionThis procedure causes the switch to reset. Some network traffic may be

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2017. Enter the number (Num column in the menu) of the AT-8500

Chapter 11: File Downloads and Uploads202 Section II: Advanced OperationsDownloading a System FileThis section contains the following procedures: “Do

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 203These guidelines apply to an Xmodem download: Xmodem can on

Chapter 11: File Downloads and Uploads204 Section II: Advanced Operations6. To download a system file using Xmodem, go to Step 7. To download a file u

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 205f. If you downloaded a new configuration file and you want t

Chapter 11: File Downloads and Uploads206 Section II: Advanced OperationsThe Send File window is shown in Figure 53. Figure 56. Send File Window12. Cl

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 20715. If you downloaded a new configuration file and you want

Chapter 11: File Downloads and Uploads208 Section II: Advanced OperationsThe following message is displayed:Getting the file from Remote TFTP Server -

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 209Uploading a System FileYou use the procedures in this sectio

21PrefaceThis guide contains instructions on how to configure an AT-8500 Series Layer 2+ Fast Ethernet Switch using the menus interface in the AT-S62

Chapter 11: File Downloads and Uploads210 Section II: Advanced OperationsThese guidelines apply to a TFTP upload: Your network must have a node with

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 211The following prompt is displayed:Remote File Name:c. Enter

Chapter 11: File Downloads and Uploads212 Section II: Advanced OperationsNote: Please select '1K Xmodem' protocol for faster upload...10. Be

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 21315. When prompted, enter a name for the file for when it is

Chapter 11: File Downloads and Uploads214 Section II: Advanced OperationsThe following message is displayed:Sending the file to Remote TFTP Server - P

Section II: Advanced Operations 215Chapter 12Event Log and Syslog ServersThis chapter describes how to view the event messages in the event log and ho

Chapter 12: Event Log and Syslog Servers216 Section II: Advanced OperationsEvent Log and Syslog Server OverviewA managed switch is a complex piece of

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 217Managing the Event LogThe following procedures explain how t

Chapter 12: Event Log and Syslog Servers218 Section II: Advanced OperationsThe Event Log menu is shown in Figure 60.Figure 60. Event Log Menu3. Type 1

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2192 - Display OutputSelects an event log. This option has only

Preface22How This Guide is OrganizedThis manual is divided into the following sections. Section I: Basic OperationsThe chapters in this section explai

Chapter 12: Event Log and Syslog Servers220 Section II: Advanced OperationsTable 5. AT-S62 ModulesModule Name DescriptionALL All modulesACL Access con

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2214. Once you have set the log filters, type V to select View

Chapter 12: Event Log and Syslog Servers222 Section II: Advanced OperationsThe columns in the log are described below: S (Severity) - The event’s sev

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 223The Configure Log Outputs menu is shown in Figure 62.Figure

Chapter 12: Event Log and Syslog Servers224 Section II: Advanced OperationsSaving the EventLogThe Event Log menu has the selection “S - Save Log to Fi

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 225Managing Syslog Server DefinitionsAs explained at the start

Chapter 12: Event Log and Syslog Servers226 Section II: Advanced OperationsCreating a SyslogServer DefinitionTo create a syslog server definition, per

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2273 - Message GenerationThis enables and disables the syslog s

Chapter 12: Event Log and Syslog Servers228 Section II: Advanced OperationsFor example, the setting of DEFAULT assigns all port mirroring events a cod

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 229For example, selecting LOCAL2 as the facility level assigns

AT-S62 Management Software Menus Interface User’s Guide23Document ConventionsThis document uses the following conventions:NoteNotes provide additional

Chapter 12: Event Log and Syslog Servers230 Section II: Advanced OperationsFigure 64. Configure Log Outputs Menu with a Syslog Server Definition8. Rep

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 231For definitions of the parameters, refer to “Creating a Sysl

Chapter 12: Event Log and Syslog Servers232 Section II: Advanced OperationsDisplaying aSyslog ServerDefinitionTo display the details of an existing sy

Section II: Advanced Operations 233Chapter 13ClassifiersThis chapter explains classifiers and how you can create classifiers to define traffic flows.

Chapter 13: Classifiers234 Section II: Advanced OperationsClassifier OverviewA classifier defines a traffic flow. A traffic flow consists of packets t

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 235is dictated by the QoS policy, as explained in Chapter 15 on

Chapter 13: Classifiers236 Section II: Advanced OperationsFigure 65. User Priority and VLAN Fields within an Ethernet FrameYou can identify a traffic

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 237Observe the following guidelines when using this variable:

Chapter 13: Classifiers238 Section II: Advanced OperationsObserve these guidelines when using this criterion: The Protocol variable must be left blan

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 239Observe this guideline when using these criteria: The Proto

Preface24Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document Format (PDF

Chapter 13: Classifiers240 Section II: Advanced OperationsClassifierGuidelinesHere are the guidelines to follow when creating a classifier: Each clas

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 241Creating a ClassifierThis section contains the procedure for

Chapter 13: Classifiers242 Section II: Advanced OperationsThe Create Classifier menu (page 1) is shown in Figure 68.Figure 68. Create Classifier Menu

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2434. To set a variable, type E to select Edit Parameters.The f

Chapter 13: Classifiers244 Section II: Advanced OperationsModifying a ClassifierIn order to modify a classifier, you need to know its ID number. To vi

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2458. After making changes, type R until you return to the Main

Chapter 13: Classifiers246 Section II: Advanced OperationsDeleting a ClassifierThis procedure deletes a classifier from the switch. To delete a classi

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 247Deleting All ClassifiersThis procedure deletes all classifie

Chapter 13: Classifiers248 Section II: Advanced OperationsDisplaying ClassifiersTo display the classifiers on a switch, do the following:1. From the M

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 249 Number of Active Associations - The number of current assi

AT-S62 Management Software Menus Interface User’s Guide25Contacting Allied TelesynThis section provides Allied Telesyn contact information for technic

Chapter 13: Classifiers250 Section II: Advanced Operations

Section II: Advanced Operations 251Chapter 14Access Control ListsThis chapter explains access control lists (ACL) and how you can use this feature to

Chapter 14: Access Control Lists252 Section II: Advanced OperationsAccess Control List (ACL) OverviewAn ACL is a filter that controls the ingress pack

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 253Here is an overview of how the process works. 1. When an ing

Chapter 14: Access Control Lists254 Section II: Advanced Operations A classifier can be assigned to multiple ACLs. However, a classifier cannot be as

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 255To deny traffic from several subnets on the same port, you c

Chapter 14: Access Control Lists256 Section II: Advanced OperationsYou can achieve the same result by assigning each classifier to a different ACL and

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 257In this example, the traffic on ports 14 and 15 is restricte

Chapter 14: Access Control Lists258 Section II: Advanced OperationsThe next example limits the ingress traffic on port 17 to IP packets from the subne

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 259Creating an ACLThis procedure explains how to create an ACL.

Preface26New Features HistoryThe following subsection contains the new features in the AT-S62 management software.Version 1.4.0 Table 1 lists the new

Chapter 14: Access Control Lists260 Section II: Advanced Operations4. Type 1 to select ACL ID and, when prompted, enter an ID number for the ACL. Ever

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 261Modifying an ACLThis procedure explains how to modify an ACL

Chapter 14: Access Control Lists262 Section II: Advanced OperationsYou cannot change an ACL’s ID number. 5. To change the description of the ACL, type

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 263Deleting an ACLThis procedure deletes an ACL from the switch

Chapter 14: Access Control Lists264 Section II: Advanced Operations5. To delete the ACL, type D to select Destroy ACL. To cancel the procedure, type R

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 265Deleting All ACLsThis procedure deletes all ACLs from the sw

Chapter 14: Access Control Lists266 Section II: Advanced OperationsDisplaying ACLsTo display the ACLs on a switch, perform this procedure:1. From the

Section II: Advanced Operations 267Chapter 15Quality of ServiceThis chapter describes Quality of Service (QoS). Sections in the chapter include: “Qua

Chapter 15: Quality of Service268 Section II: Advanced OperationsQuality of Service OverviewQuality of Service allows you to prioritize traffic and/or

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 269The QoS functionality described by this chapter sorts packet

AT-S62 Management Software Menus Interface User’s Guide27802.1x Port-based Network Access ControlAdded the following new features to 802.1x authentica

Chapter 15: Quality of Service270 Section II: Advanced OperationsFlow Groups Flow groups are used to group similar traffic flows together, and allow m

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 271The effects of this behavior become evident when using the m

Chapter 15: Quality of Service272 Section II: Advanced Operations Replacing the VLAN tag User Priority, to enable the next switch in the network to p

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 273ReplacingPrioritiesThe traffic class or flow group priority

Chapter 15: Quality of Service274 Section II: Advanced OperationsA simple example of this process is shown in Figure 82, for limiting the amount of ba

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 275Assign the classifiers to flow groups and the flow groups to

Chapter 15: Quality of Service276 Section II: Advanced OperationsExamples Voice ApplicationsVoice applications typically require a small bandwidth but

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 277The parts of the policies are: Classifier - Defines the tra

Chapter 15: Quality of Service278 Section II: Advanced OperationsVideo ApplicationsVideo applications typically require a larger bandwidth than voice

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 279The parts of the policies are: Classifier - Specifies the I

Preface28

Chapter 15: Quality of Service280 Section II: Advanced OperationsCritical DatabaseCritical databases typically require a high bandwidth. They also typ

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 281Policy Component HierarchyThe purpose of this example is to

Chapter 15: Quality of Service282 Section II: Advanced OperationsFigure 86. Policy Component Hierarchy ExampleCreate Classifier01 - Classifier ID: ...

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 283Managing Flow GroupsThis section contains the following proc

Chapter 15: Quality of Service284 Section II: Advanced Operations4. Type 1 to select Create Flow Group.The Create Flow Group menu is shown in Figure 8

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2855 - Remark PriorityIf set to Yes, replaces the user priority

Chapter 15: Quality of Service286 Section II: Advanced Operations4. Type 2 to select Modify Flow Group.The following prompt is displayed:Available Flo

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2879. After making changes, type R until you return to the Main

Chapter 15: Quality of Service288 Section II: Advanced Operations6. Type D to delete the flow group.The flow group is deleted from the switch. The gro

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 289The Show Flow Groups menu provides the following information

29Chapter 1OverviewThis chapter reviews the functions of the AT-S62 management software, the types of management sessions supported by the switch, and

Chapter 15: Quality of Service290 Section II: Advanced OperationsManaging Traffic ClassesThis section contains the following procedures: “Creating a

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 291The Create Traffic Class menu is shown in Figure 95.Figure 9

Chapter 15: Quality of Service292 Section II: Advanced Operations5 - DSCP valueSpecifies a replacement value to write into the DSCP (TOS) field of the

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 293matches the number being used by the traffic. However, no un

Chapter 15: Quality of Service294 Section II: Advanced OperationsB - Move ToS to PriorityIf set to yes, replaces the value in the 802.1p priority fiel

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 295The selected traffic class is displayed in the Modify Traffi

Chapter 15: Quality of Service296 Section II: Advanced OperationsDeleting a TrafficClassTo delete a traffic class, do the following procedure:1. From

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2976. Type D to delete the traffic class.The traffic class is d

Chapter 15: Quality of Service298 Section II: Advanced OperationsThe Show Traffic Classes menu provides the following information:IDThe traffic class’

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 299Managing PoliciesThis section contains the following procedu

3Preface ...

Chapter 1: Overview30Management OverviewThe AT-S62 management software allows you to monitor and adjust the operating parameters of an AT-8500 Series

Chapter 15: Quality of Service300 Section II: Advanced OperationsThe Create Policy menu is shown in Figure 100.Figure 100. Create Policy Menu5. Config

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3015 - ToSSpecifies a replacement value to write into the Type

Chapter 15: Quality of Service302 Section II: Advanced OperationsModifying aPolicyTo modify a policy, perform the following procedure:1. From the Main

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 303 To delete a value from a variable so as to leave it blank,

Chapter 15: Quality of Service304 Section II: Advanced OperationsDisplayingPoliciesTo display policies, do the following procedure:1. From the Main Me

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3055. To display the specifics of a policy, type D to select De

Chapter 15: Quality of Service306 Section II: Advanced Operations

Section II: Advanced Operations 307Chapter 16Class of ServiceThis chapter contains the procedures for configuring Class of Service (CoS). Sections in

Chapter 16: Class of Service308 Section II: Advanced OperationsClass of Service OverviewWhen a port on an Ethernet switch becomes oversubscribed—its e

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 309Table 8 lists the mappings between the eight CoS priority le

AT-S62 Management Software Menus Interface User’s Guide31Local Management SessionTo establish a local management session with an AT-8500 Series switch

Chapter 16: Class of Service310 Section II: Advanced OperationsThe procedure for changing the default mappings is found in “Mapping CoS Priorities to

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 311NoteScheduling is set at the switch level. You cannot set th

Chapter 16: Class of Service312 Section II: Advanced OperationsIn this example, the port transmits a maximum number of 15 packets from Q3 before movin

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 313Configuring CoSAs explained in “Class of Service Overview” o

Chapter 16: Class of Service314 Section II: Advanced Operations2. From the Security and Services menu, type 5 to select Class of Service (CoS).The Cla

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 315Menu option 1 cannot be changed.5. Type 2 to select Priority

Chapter 16: Class of Service316 Section II: Advanced OperationsMapping CoS Priorities to Egress QueuesThis procedure explains how to change the defaul

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3176. After making changes, type R until you return to the Main

Chapter 16: Class of Service318 Section II: Advanced OperationsConfiguring Egress SchedulingThis procedure explains how to select and configure a sche

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3196. Return to the Main Menu and type S to select Save Configu

Chapter 1: Overview32Telnet Management SessionYou can remotely manage the switch from a workstation on your network using the Telnet application proto

Chapter 16: Class of Service320 Section II: Advanced OperationsDisplaying Port CoS PrioritiesThe following procedure displays a menu that lists the cu

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 321deactivated and the port is using the priority levels contai

Chapter 16: Class of Service322 Section II: Advanced Operations

Section II: Advanced Operations 323Chapter 17IGMP SnoopingThis chapter explains how to activate and configure the Internet Group Management Protocol (

Chapter 17: IGMP Snooping324 Section II: Advanced OperationsIGMP Snooping OverviewIGMP enables routers to create lists of nodes that are members of mu

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 325security by restricting the flow of multicast packets only t

Chapter 17: IGMP Snooping326 Section II: Advanced OperationsConfiguring IGMP SnoopingTo configure the IGMP snooping parameters on the switch, perform

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 327The options in the menu are defined below:1 - IGMP Snooping

Chapter 17: IGMP Snooping328 Section II: Advanced OperationsA value of 0 disables the timer. A switch with a disabled timer never times out inactive h

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 329Displaying a List of Host NodesTo view a list of the multica

AT-S62 Management Software Menus Interface User’s Guide33Web Browser Management SessionYou can also use a web browser from a management workstation on

Chapter 17: IGMP Snooping330 Section II: Advanced OperationsPort/TrunkID - The port on the switch where a host node of the multicast group is connecte

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 331Displaying a List of Multicast RoutersA multicast router is

Chapter 17: IGMP Snooping332 Section II: Advanced Operations

Section II: Advanced Operations 333Chapter 18Denial of Service DefensesThis chapter contains procedures on how to configure the switch to protect your

Chapter 18: Denial of Service Defenses334 Section II: Advanced OperationsDenial of Service Defense OverviewThe AT-S62 management software can help pro

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 335SMURF Attack This DoS attack is instigated by an attacker se

Chapter 18: Denial of Service Defenses336 Section II: Advanced Operationswhich is connected to the device that leads outside your network. The steps b

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 337Teardrop Attack An attacker sends an IP packet in several fr

Chapter 18: Denial of Service Defenses338 Section II: Advanced OperationsNoteThis defense mechanism requires some involvement by the switch’s CPU, tho

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 339Implementing this feature requires configuring the port mirr

Chapter 1: Overview34SNMP Management SessionAnother way to remotely manage the switch is with an SNMP management program. AT-S62 software supports SNM

Chapter 18: Denial of Service Defenses340 Section II: Advanced OperationsEnabling or Disabling Denial of Service PreventionTo configure DoS defense, p

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 341The LAN IP Subnet menu is shown in Figure 114.Figure 114. LA

Chapter 18: Denial of Service Defenses342 Section II: Advanced OperationsA menu is displayed containing either one or two options, depending on the Do

Section II: Advanced Operations 343Chapter 19Power Over EthernetThis chapter contains the procedures for configuring Power over Ethernet (PoE) for the

Chapter 19: Power Over Ethernet344 Section II: Advanced OperationsPower Over Ethernet OverviewThe twisted pair ports on the AT-8524POE switch offer th

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 345PoEImplementationon theAT-8524POESwitchA standard Ethernet t

Chapter 19: Power Over Ethernet346 Section II: Advanced OperationsPortPrioritizationThis section explains port prioritization, a mechanism by which th

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 347PoE DeviceClassesThe IEEE 802.3af standard specifies four le

Chapter 19: Power Over Ethernet348 Section II: Advanced OperationsSetting the PoE ThresholdThe PoE threshold is a percentage of the total maximum PoE

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 349Options 2, Maximum Available Power, displays the maximum amo

AT-S62 Management Software Menus Interface User’s Guide35Management Access LevelsThere are two levels of management access in the AT-S62 management so

Chapter 19: Power Over Ethernet350 Section II: Advanced OperationsConfiguring PoE Port SettingsThis procedure enables and disables PoE on a port. This

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3516. To change the port’s priority, type 2 to select Power Pri

Chapter 19: Power Over Ethernet352 Section II: Advanced OperationsDisplaying PoE Status and SettingsUse this procedure to display PoE status and setti

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3531 - PoE Global Status MenuThis selection displays the follow

Chapter 19: Power Over Ethernet354 Section II: Advanced Operations2 - Summary All Ports Status MenuThis selection display an abbreviated status report

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3553 - Detailed Ports Status Menu When you select this option,

Chapter 19: Power Over Ethernet356 Section II: Advanced OperationsPower PriorityThe port priority. This can be Critical, High, or Low. For an explanat

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3574 - PoE Device InformationThis selection displays the hardwa

Chapter 19: Power Over Ethernet358 Section II: Advanced Operations

Section II: Advanced Operations 359Chapter 20Networking StackThe AT-S62 management software allows you to perform a few basic functions on the switch’

Chapter 1: Overview36

Chapter 20: Networking Stack360 Section II: Advanced OperationsManaging the Address Resolution Protocol TableThe switch has an Address Resolution Prot

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 361NoteThe switch does not use the ARP table to move packets th

Chapter 20: Networking Stack362 Section II: Advanced OperationsThe Display ARP Table menu is shown in Figure 125.Figure 125. Display ARP Table MenuThe

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 363Deleting an ARPEntryTo delete an entry from the ARP table, p

Chapter 20: Networking Stack364 Section II: Advanced OperationsThe switch begins to add new entries to the table as it performs new management functio

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 365Displaying the Routing TableThe routing table is used by the

Chapter 20: Networking Stack366 Section II: Advanced OperationsThe information in this table is for viewing purposes only. The columns are defined her

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 367Displaying the TCP Connections TableThe TCP connections tabl

Chapter 20: Networking Stack368 Section II: Advanced OperationsThis table is for viewing purposes only. The columns in the table are defined here.Tota

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 369A web browser management session can have more than one TCP

Section I: Basic Operations 37Section IBasic OperationsThe chapters in this section cover a variety of basic switch features and functions. The chapte

Chapter 20: Networking Stack370 Section II: Advanced OperationsDeleting a TCP ConnectionThis procedure explains how you can use the TCP connections ta

AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 371Displaying the TCP Global Information TableThe TCP Global In

Chapter 20: Networking Stack372 Section II: Advanced OperationsMax connectionsThe maximum number of TCP connections allowed.Active OpensThe number of

Section III: SNMPv3 373Section IIISNMPv3 OperationsThis section contains the following chapter: Chapter 21: “SNMPv3” on page 375

374 Section III: SNMPv3

Section III: SNMPv3 375Chapter 21SNMPv3This chapter provides a description of the AT-S62 implementation of the SNMPv3 protocol. In addition, it provid

Chapter 21: SNMPv3376 Section III: SNMPv3SNMPv3 OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c protocol implementation which is

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 377MIBs the user can display and modify. In addition, you can restrict the

Chapter 21: SNMPv3378 Section III: SNMPv3If you assign a DES privacy protocol to a user, then you are also required to assign a privacy password. If y

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 379In addition, you can define a MIB view that the user can access or a MIB

38 Section I: Basic Operations

Chapter 21: SNMPv3380 Section III: SNMPv3 Security Model Authentication Level Privacy Protocol GroupTo configure the SNMP security information, yo

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 381In general, you focus on configuring security groups and then add and de

Chapter 21: SNMPv3382 Section III: SNMPv3For a more detailed description of the SNMPv3 Tables, see the following subsections: “SNMPv3 User Table” on

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 383Configure SNMPv3 View Table Menu. For example, the Read View allows grou

Chapter 21: SNMPv3384 Section III: SNMPv3SNMPv3 View Table, SNMPv3 Access Table, and SNMPv3 SecurityToGroup Table. Lastly, you can configure a storage

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 385Configuring the SNMPv3 ProtocolThis section describes how to configure t

Chapter 21: SNMPv3386 Section III: SNMPv3Configuring the SNMPv3 User TableThis section contains a description of the SNMPv3 User Table and how to crea

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 387The Configure SNMPv3 Table Menu is shown in Figure 133.Figure 133. Confi

Chapter 21: SNMPv3388 Section III: SNMPv35. To create a new user table, type 1 to select Create SNMPv3 Table Entry.The following prompt is displayed:E

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 389The following prompt is displayed:Enter Privacy Protocol [D-DES, N-None]

Section I: Basic Operations 39Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedures for starting a local or Telne

Chapter 21: SNMPv3390 Section III: SNMPv3an SNMPv3 User Table entry with a NonVolatile storage type, the S - Save Configuration Changes option appears

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 391Modifying anSNMPv3 UserTable EntryThis section describes how to modify p

Chapter 21: SNMPv3392 Section III: SNMPv34. To change the authentication protocol and password, type 1 to select Set Authentication Protocol & Pas

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 393The following prompt is displayed:Please enter privacy password to regen

Chapter 21: SNMPv3394 Section III: SNMPv3D -DESSelect this value to make the DES privacy (or encryption) protocol the privacy protocol for this User T

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 395Enter User (Security) Name:5. Enter the User Name.The following prompt i

Chapter 21: SNMPv3396 Section III: SNMPv3Configuring the SNMPv3 View TableThis section contains a description of the SNMPv3 View Table and how to crea

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 397The Configure SNMPv3 View Table Menu is shown in Figure 136.Figure 136.

Chapter 21: SNMPv3398 Section III: SNMPv3The text format is for TCP/IP is:tcpThe following prompt is displayed:Enter Subtree Mask (Hex format):6. Ente

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 399NoteThe Row Status parameter is a read-only field in the Telnet and Loca

Contents4Enabling or Disabling the Telnet Server ...

Chapter 2: Starting a Local or Telnet Management Session40 Section I: Basic OperationsLocal Management SessionTo establish a local management session,

Chapter 21: SNMPv3400 Section III: SNMPv3Modifying anSNMPv3 ViewTable EntryThis section describes how to modify parameters in an SNMPv3 Notify Table e

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4014. To modify the Subtree Mask for this view, type 1 to select Set Subtre

Chapter 21: SNMPv3402 Section III: SNMPv32. From the Configure SNMPv3 Table Menu, type 3 to select Configure SNMPv3 View Table.The Configure SNMPv3 Vi

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 403Modifying a Storage TypeTo modify the Storage Type parameter in an SNMPv

Chapter 21: SNMPv3404 Section III: SNMPv3Save Configuration Changes option appears on the Main Menu, allowing you to save your changes. 8. After makin

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 405Configuring the SNMPv3 Access TableThis section contains a description o

Chapter 21: SNMPv3406 Section III: SNMPv3The Configure SNMPv3 Access Table Menu is shown in Figure 138.Figure 138. Configure SNMPv3 Access Table Menu3

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 407NoteThe Context Prefix and the Context Match fields are a read only fiel

Chapter 21: SNMPv3408 Section III: SNMPv3this security level to encrypt messages using a privacy protocol and authenticate SNMP users. This level prov

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 409SNMPv3 Access Table to the configuration file. After making changes to a

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 41Starting a LocalManagementSessionTo start a local management sess

Chapter 21: SNMPv3410 Section III: SNMPv35. Enter the Security Model of this Group Name.Select one of the following security levels:1-v1Select this va

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 411The following prompt is displayed:8. After making changes, type R until

Chapter 21: SNMPv3412 Section III: SNMPv3The Modify SNMPv3 Access Table is shown in Figure 139.Figure 139. Modify SNMPv3 Access Table Menu4. To modify

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 413The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,

Chapter 21: SNMPv3414 Section III: SNMPv3Modifying the Write View Name To modify the Write View Name parameter in an SNMPv3 Access Table entry, perfor

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 415The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,

Chapter 21: SNMPv3416 Section III: SNMPv3Modifying the Notify View NameTo modify the Notify View Name parameter in an SNMPv3 Access Table entry, perfo

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 417The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,

Chapter 21: SNMPv3418 Section III: SNMPv3Modifying the Storage TypeTo modify the Storage Type parameter in an SNMPv3 Access Table entry, perform the f

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 419The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,

Chapter 2: Starting a Local or Telnet Management Session42 Section I: Basic Operationssettings, enter “operator” as the user name. The default passwor

Chapter 21: SNMPv3420 Section III: SNMPv3S - Save Configuration Changes option appears on the Main Menu, allowing you to save your changes. 9. After m

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 421Configuring the SNMPv3 SecurityToGroup TableThis section contains a desc

Chapter 21: SNMPv3422 Section III: SNMPv3The Configure SNMPv3 SecurityToGroup Table Menu is shown in Figure 140.Figure 140. Configure SNMPv3 SecurityT

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4233-v3Select this value to associate the Group Name with the SNMPv3 protoc

Chapter 21: SNMPv3424 Section III: SNMPv3Deleting anSNMPv3SecurityToGroupTable EntryYou may want to delete an entry from the SNMPv3 SecurityToGroup Ta

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 425The following prompt is displayed:Do you want to delete this table entry

Chapter 21: SNMPv3426 Section III: SNMPv3The Modify SecurityToGroup Table is displayed as shown Figure 140.Figure 141. Modify SNMPv3 SecurityToGroup T

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4273-v3Select this value to associate the User Name with the SNMPv3 protoco

Chapter 21: SNMPv3428 Section III: SNMPv36. Enter the Security Model configured for this User Name. You cannot change the value of the Security Model

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 429Configuring the SNMPv3 Notify TableThis section contains a description o

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 43EnhancedStackingWhen you start a local management session on a sw

Chapter 21: SNMPv3430 Section III: SNMPv3The Configure SNMPv3 Notify Table Menu is shown in Figure 142.Figure 142. Configure SNMPv3 Notify Table Menu3

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 431I-InformIndicates this notify table is used to send inform messages. Wit

Chapter 21: SNMPv3432 Section III: SNMPv3The Configure SNMPv3 Notify Table Menu is shown in Figure 142 on page 430.NoteTo display a Group Name and its

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4333. From the Configure SNMPv3 Notify Table Menu, type 3 to select Modify

Chapter 21: SNMPv3434 Section III: SNMPv3Modifying a Notify TypeTo modify the Notify Type parameter in an SNMPv3 Notify Table entry, perform the follo

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 435Modifying a Storage TypeTo modify the Storage Type parameter in an SNMPv

Chapter 21: SNMPv3436 Section III: SNMPv3Configuring the SNMPv3 Target Address TableThis section contains a description of the SNMPv3 Target Address T

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 437Creating anSNMPv3 TargetAddress TableEntryTo create an entry in the Conf

Chapter 21: SNMPv3438 Section III: SNMPv35. Enter the IP address of the host.Use the following format for an IP address:XXX.XXX.XXX.XXXThe following p

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 43910. Enter a Target Parameters name. This name can consist of up to 32-al

Chapter 2: Starting a Local or Telnet Management Session44 Section I: Basic OperationsTelnet Management SessionYou can use the Telnet application prot

Chapter 21: SNMPv3440 Section III: SNMPv3The Configure SNMPv3 Target Address Table Menu is shown in Figure 146 on page 450.NoteTo display a Group Name

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 441Modifying a Target IP AddressTo modify the target IP address in an SNMPv

Chapter 21: SNMPv3442 Section III: SNMPv3The following prompt is displayed:Enter Target Address Name:5. Enter a previously configured Target Address N

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4435. Enter a previously configured Target Address Name.This is the name of

Chapter 21: SNMPv3444 Section III: SNMPv3This is the name of the SNMP manager, or host, that manages the SNMP activity on your switch. You can enter a

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 445This is the name of the SNMP manager, or host, that manages the SNMP act

Chapter 21: SNMPv3446 Section III: SNMPv3The following prompt is displayed:Enter Tag List: Enter a Tag List of up to 256 alphanumeric characters. Use

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4476. Enter a Target Parameters Name. The value configured here must match

Chapter 21: SNMPv3448 Section III: SNMPv3V - VolatileSelect this storage type if you do not want the ability to save an entry in the SNMPv3 Target Add

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 449Configuring the SNMPv3 Target Parameters TableThis section contains a de

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 45NoteYou can run only one Telnet management session on a switch at

Chapter 21: SNMPv3450 Section III: SNMPv3 “Deleting an SNMPv3 Target Parameters Table Entry” on page 453 “Modifying an SNMPv3 Target Parameters Tabl

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 451Enter a value of up to 32-alphanumeric characters.NoteYou are prompted t

Chapter 21: SNMPv3452 Section III: SNMPv3N-NoAuthNoPrivThis option represents no authentication and no privacy protocol. Select this security level if

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4539. After making changes, type R until you return to the Main Menu. Then

Chapter 21: SNMPv3454 Section III: SNMPv3Modifying anSNMPv3 TargetParameters TableEntryThis section provides procedures for modifying parameters in an

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 455When you modify the Security Name parameter, you must use a value that y

Chapter 21: SNMPv3456 Section III: SNMPv34. To change the Security Name parameter, type 1 to select Set Security Name.The following prompt is displaye

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 457The Configure SNMPv3 Target Parameters Table Menu is shown in Figure 146

Chapter 21: SNMPv3458 Section III: SNMPv35->5->5.The Configure SNMPv3 Table Menu is shown in Figure 133 on page 387.2. From the Configure SNMPv3

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 459A-AuthNoPrivThis option represents authentication, but no privacy protoc

Chapter 2: Starting a Local or Telnet Management Session46 Section I: Basic OperationsSaving Your Parameter ChangesWhen you make a change to a switch

Chapter 21: SNMPv3460 Section III: SNMPv35. Enter a previously configured Target Parameters Name.Enter a value of up to 32-alphanumeric characters.The

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4615. Enter a previously configured Target Parameters Name.Enter a value of

Chapter 21: SNMPv3462 Section III: SNMPv3Configuring the SNMPv3 Community TableThis section contains a description of the SNMPv3 Community Table and h

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 463For each SNMPv3 Community Table entry, you can configure the following p

Chapter 21: SNMPv3464 Section III: SNMPv3The Configure SNMPv3 Community Table Menu is shown in Figure 148.Figure 148. Configure SNMPv3 Community Table

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 465The following prompt is displayed:Enter Security Name:6. Enter the name

Chapter 21: SNMPv3466 Section III: SNMPv39. After making changes, type R until you return to the Main Menu. Then type S to select Save Configuration C

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 467Modifying anSNMPv3CommunityTable EntryFor each entry in the SNMPv3 Commu

Chapter 21: SNMPv3468 Section III: SNMPv3The Modify SNMPv3 Community Table Menu is shown in Figure 149.Figure 149. Modify SNMPv3 Community Table Menu4

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 469Modifying the Security NameTo modify the Security Name parameter in an S

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 47Ports 49R and 50R on the AT-8550GB and AT-8550SP SwitchesThis sec

Chapter 21: SNMPv3470 Section III: SNMPv3The Configure SNMPv3 Table Menu is shown in Figure 133 on page 387.2. From the Configure SNMPv3 Table Menu, t

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4713. From the Configure SNMPv3 Community Table, type 3 to select Modify SN

Chapter 21: SNMPv3472 Section III: SNMPv3Displaying SNMPv3 Table MenusThe procedures in this section describe how to display the SNMPv3 Tables. The fo

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 473The Display SNMPv3 Table Menu is shown in Figure 150.Figure 150. Display

Chapter 21: SNMPv3474 Section III: SNMPv3Displaying theDisplay SNMPv3View Table MenuThis section describes how to display the Display SNMPv3 View Tabl

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 475Displaying theDisplay SNMPv3Access TableMenuThis section describes how t

Chapter 21: SNMPv3476 Section III: SNMPv3Displaying theDisplay SNMPv3SecurityToGroupTable MenuThis section describes how to display the Display SNMPv3

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 477Displaying theDisplay SNMPv3Notify TableMenuThis section describes how t

Chapter 21: SNMPv3478 Section III: SNMPv3Displaying theDisplay SNMPv3Target AddressTable MenuThis section describes how to display the Display SNMPv3

AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 479Displaying theDisplay SNMPv3TargetParameters TableMenuThis section descr

Chapter 2: Starting a Local or Telnet Management Session48 Section I: Basic Operations

Chapter 21: SNMPv3480 Section III: SNMPv3Displaying theDisplay SNMPv3CommunityTable MenuThis section describes how to display the Display SNMPv3 Commu

Section IV: Spanning Tree Protocols 481Section IVSpanning Tree ProtocolsThe chapters in this section explain the spanning tree protocols. The chapters

482 Section IV: Spanning Tree Protocols

Section IV: Spanning Tree Protocols 483Chapter 22Spanning Tree and Rapid Spanning Tree ProtocolsThis chapter provides background information on the Sp

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols484 Section IV: Spanning Tree ProtocolsSTP and RSTP OverviewThe performance of a Ethernet n

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 485Bridge Priorityand the RootBridgeThe first task that bri

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols486 Section IV: Spanning Tree Protocolsthe bridge is communicating with the root bridge is

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 487Table 14 lists the RSTP port costs with Auto-Detect. Tab

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols488 Section IV: Spanning Tree ProtocolsForwarding Delay and Topology ChangesIf there is a c

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 489NoteThe forwarding delay parameter applies only to ports

Section I: Basic Operations 49Chapter 3Basic Switch ParametersThis chapter contains a variety of information and procedures. There is a discussion on

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols490 Section IV: Spanning Tree ProtocolsIf a bridge port is operating in full-duplex mode, t

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 491A port can be both a point-to-point and an edge port at

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols492 Section IV: Spanning Tree Protocolsto communicate with each other.Figure 162. VLAN Frag

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 493Enabling or Disabling a Spanning Tree ProtocolThe AT-S62

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols494 Section IV: Spanning Tree Protocols4. If you selected STP as the active spanning tree p

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 495Configuring STPThis section contains the following proce

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols496 Section IV: Spanning Tree ProtocolsThe bridge hello time, bridge forwarding, and bridge

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 497NoteThe aging time for BPDUs is different from the aging

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols498 Section IV: Spanning Tree ProtocolsThe STP Port Parameters menu is shown in Figure 165.

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 4991 - Port PriorityThis parameter is used as a tie breaker

AT-S62 Management Software Menus Interface User’s Guide5Deleting an Aggregator ...

Chapter 3: Basic Switch Parameters50 Section I: Basic OperationsWhen Does a Switch Need an IP Address?One of the tasks to building or expanding a netw

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols500 Section IV: Spanning Tree ProtocolsThe Display STP Port Configuration menu is shown in

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 501Configuring RSTPThis section contains the following proc

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols502 Section IV: Spanning Tree ProtocolsThe bridge hello time, bridge forwarding, and bridge

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 503When you select a value for maximum age, observe the fol

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols504 Section IV: Spanning Tree ProtocolsThe RSTP Port Parameters menu is shown in Figure 169

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5056. Adjust the settings as needed. The parameters are exp

Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols506 Section IV: Spanning Tree Protocols3 - Display RSTP Port StateThis selection displays a

Section IV: Spanning Tree Protocols 507Chapter 23Multiple Spanning Tree ProtocolThis chapter provides background information on the Multiple Spanning

Chapter 23: Multiple Spanning Tree Protocol508 Section IV: Spanning Tree ProtocolsMSTP OverviewAs explained in the previous chapter, STP and RSTP are

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 509MultipleSpanning TreeInstance (MSTI)The individual spann

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 51How Do YouAssign an IPAddress?After you have decided which, if an

Chapter 23: Multiple Spanning Tree Protocol510 Section IV: Spanning Tree ProtocolsFigure 172 illustrates the same two AT-8524M switches and the same t

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 511A MSTI can contain more than one VLAN. This is illustrat

Chapter 23: Multiple Spanning Tree Protocol512 Section IV: Spanning Tree ProtocolsMSTI GuidelinesHere are several guidelines to keep in mind about MST

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 513two or more ports have equal costs to a regional root br

Chapter 23: Multiple Spanning Tree Protocol514 Section IV: Spanning Tree ProtocolsFigure 174 illustrates the concept of regions. It shows one MSTP reg

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 515The AT-8500 Series switch determines regional boundaries

Chapter 23: Multiple Spanning Tree Protocol516 Section IV: Spanning Tree ProtocolsCommon and Internal Spanning Tree (CIST)MSTP has a default spanning

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 517MSTP with STPand RSTPMSTP is fully compatible with STP a

Chapter 23: Multiple Spanning Tree Protocol518 Section IV: Spanning Tree Protocols The CIST must have a regional root for communicating with other re

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 519At first glance, it might appear that since both ports b

Chapter 3: Basic Switch Parameters52 Section I: Basic OperationsConfiguring an IP Address and Switch NameThe procedure in this section explains how to

Chapter 23: Multiple Spanning Tree Protocol520 Section IV: Spanning Tree Protocolsbridges in different regions. The result can be a physical loop, whi

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 521Here is an example. Let’s assume that you have two regio

Chapter 23: Multiple Spanning Tree Protocol522 Section IV: Spanning Tree ProtocolsSelecting MSTP as the Active Spanning Tree ProtocolTo select and act

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 523Configuring MSTP Bridge SettingsThis section contains th

Chapter 23: Multiple Spanning Tree Protocol524 Section IV: Spanning Tree ProtocolsThe hello time, forwarding delay, and max age parameters will have t

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5255 - Max HopsMSTP regions use this parameter to discard B

Chapter 23: Multiple Spanning Tree Protocol526 Section IV: Spanning Tree ProtocolsConfiguring the CIST PriorityThis procedure explains how to adjust t

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 527The following prompt is displayed:Enter new priority [th

Chapter 23: Multiple Spanning Tree Protocol528 Section IV: Spanning Tree ProtocolsCreating, Deleting, and Modifying MSTIsThe following procedures expl

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 529Regional Root IDIdentifies the regional root for the MST

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 53The System Configuration menu is shown in Figure 5.Figure 5. Syst

Chapter 23: Multiple Spanning Tree Protocol530 Section IV: Spanning Tree ProtocolsDeleting an MSTI To delete an MSTI, do the following:1. From the MST

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 531those VLANs you no longer want associated with the MSTI.

Chapter 23: Multiple Spanning Tree Protocol532 Section IV: Spanning Tree ProtocolsAssociating VLANs to MSTI IDsWhen you create a new MSTI, you are giv

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 533The VLAN-MSTI Association Menu is shown in Figure 181.Fi

Chapter 23: Multiple Spanning Tree Protocol534 Section IV: Spanning Tree ProtocolsA prompt similar to the following is displayed:Enter the list of VLA

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5352. Enter the ID number of the MSTI you want to associate

Chapter 23: Multiple Spanning Tree Protocol536 Section IV: Spanning Tree ProtocolsConfiguring MSTP Port SettingsAs explained in “Ports in Multiple MST

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5372. Type 1 to select Configure Generic Port Settings.The

Chapter 23: Multiple Spanning Tree Protocol538 Section IV: Spanning Tree ProtocolsTable 18 lists the MSTP port costs with the Auto setting when the po

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 539The following prompt is displayed:Start port to configur

Chapter 3: Basic Switch Parameters54 Section I: Basic Operations3 - Subnet MaskThis parameter specifies the subnet mask for the switch. You must speci

Chapter 23: Multiple Spanning Tree Protocol540 Section IV: Spanning Tree ProtocolsTable 20 lists the MSTP port costs with Auto Update when the port is

AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 541Displaying MSTP Port Settings and StatusThe MSTP Port Pa

Chapter 23: Multiple Spanning Tree Protocol542 Section IV: Spanning Tree Protocols

Section V: Virtual LANs 543Section VVirtual LANsThe chapters in this section explain virtual LANs (VLANs). The chapters include: Chapter 24: “Port-ba

544 Section V: Virtual LANs

Section V: VLANs 545Chapter 24 Port-based and Tagged Virtual LANsThis chapter contains background information on port-based and tagged virtual LANs (V

Chapter 24: Port-based and Tagged Virtual LANs546 Section V: VLANsVLAN OverviewA VLAN is a group of ports on an Ethernet switch that form a logical Et

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 547management software. VLAN memberships can be changed any time through the m

Chapter 24: Port-based and Tagged Virtual LANs548 Section V: VLANsPort-based VLAN OverviewAs explained in the “VLAN Overview” on page 546, a VLAN cons

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 549If a VLAN spans multiple switches, then the VID for the VLAN on the differe

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 55Activating the BOOTP or DHCP Client SoftwareThe BOOTP and DHCP ap

Chapter 24: Port-based and Tagged Virtual LANs550 Section V: VLANsautomatically assigns a PVID to a port, making it identical to the VID of the VLAN t

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 551Port-basedExample 1Figure 185 illustrates an example of one AT-8524M Fast E

Chapter 24: Port-based and Tagged Virtual LANs552 Section V: VLANsEach VLAN has been assigned a unique VID. You assign this number when you create a V

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 553Port-basedExample 2Figure 186 illustrates more port-based VLANs. In this ex

Chapter 24: Port-based and Tagged Virtual LANs554 Section V: VLANsThe table below lists the port assignments for the Sales, Engineering, and Productio

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 555Tagged VLAN OverviewThe second type of user-configured VLAN is the tagged V

Chapter 24: Port-based and Tagged Virtual LANs556 Section V: VLANsNoteFor an explanation of VLAN name and VLAN identifier, refer back to VLAN Name and

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 557Tagged VLANExampleFigure 187 illustrates how tagged ports can be used to in

Chapter 24: Port-based and Tagged Virtual LANs558 Section V: VLANsThe port assignments for the VLANs are as follows:This example is nearly identical t

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 559Creating a Port-based or Tagged VLANTo create a new port-based or tagged VL

Chapter 3: Basic Switch Parameters56 Section I: Basic OperationsTo activate or deactivate the BOOTP or DHCP client software, perform the following pro

Chapter 24: Port-based and Tagged Virtual LANs560 Section V: VLANsThe Configure VLANs menu is shown in Figure 189.Figure 189. Configure VLANs Menu3. F

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 561multiple switches, then the name for the VLAN should be the same on each sw

Chapter 24: Port-based and Tagged Virtual LANs562 Section V: VLANs A port set to the 802.1x authenticator or supplicant role must be changed to the 8

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 563Example of Creating a Port-based VLANThe following procedure creates the Sa

Chapter 24: Port-based and Tagged Virtual LANs564 Section V: VLANsExample of Creating a Tagged VLANThe following procedure creates the Engineering VLA

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 565Modifying a VLANYou can use this procedure to add or remove ports from a po

Chapter 24: Port-based and Tagged Virtual LANs566 Section V: VLANsThe following prompt is displayed:Enter new value -> [1 to 4096] ->5. Enter th

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5673 - Tagged PortsUse this selection to add or remove tagged ports from the V

Chapter 24: Port-based and Tagged Virtual LANs568 Section V: VLANsAny untagged ports removed from a VLAN are automatically returned to the Default_VLA

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 569Displaying VLANsTo view the name, VID number, and member ports of all the V

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 57Rebooting a SwitchThis procedure reboots the switch.NoteAny confi

Chapter 24: Port-based and Tagged Virtual LANs570 Section V: VLANsVLAN TypeThe VLAN type. The possible settings are:Port Based - The VLAN is a port-ba

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 571Deleting a VLANThis procedure deletes port-based and tagged VLANs from the

Chapter 24: Port-based and Tagged Virtual LANs572 Section V: VLANs5. Enter the VID of the VLAN you want to delete. You can specify only one VID at a t

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5738. Press any key.9. Repeat this procedure starting with Step 4 to delete ot

Chapter 24: Port-based and Tagged Virtual LANs574 Section V: VLANsDeleting All VLANsThis section contains the procedure for deleting all port-based an

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5756. After making changes, type R until you return to the Main Menu. Then typ

Chapter 24: Port-based and Tagged Virtual LANs576 Section V: VLANsDisplaying PVIDsThe following procedure displays a menu that lists the PVIDs for all

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 577Enabling or Disabling Ingress FilteringThere are rules a switch follows whe

Chapter 24: Port-based and Tagged Virtual LANs578 Section V: VLANstagged frame, without regard to the status of ingress filtering.You can enable or di

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 579Specifying a Management VLANThe management VLAN is the VLAN on which an AT-

Chapter 3: Basic Switch Parameters58 Section I: Basic OperationsConfiguring the Manager and Operator PasswordsThere are two levels of management acces

Chapter 24: Port-based and Tagged Virtual LANs580 Section V: VLANsNow assume that you decide to create a VLAN called NMS with a VID of 24 for the sole

Section V: VLANs 581Chapter 25GARP VLAN Registration ProtocolThis chapter describes the GARP VLAN Registration Protocol (GVRP). It contains the follow

Chapter 25: GARP VLAN Registration Protocol582 Section V: VLANsBasic Overview of GARP VLAN Registration Protocol (GVRP)The GARP VLAN Registration Prot

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 583Figure 197 provides an example of how GVRP works.Figure 197. GVRP Example S

Chapter 25: GARP VLAN Registration Protocol584 Section V: VLANs3. Switch #2 sends a PDU out port 15 containing all of the VIDs of the VLANs on the swi

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 585switches can result in GVRP incompatibility problems. You can convert dyna

Chapter 25: GARP VLAN Registration Protocol586 Section V: VLANsGVRP-inactiveIntermediateSwitchesThe presence of a GVRP-inactive switch between GVRP-ac

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 587Technical Overview of Generic Attribute Registration Protocol (GARP)The pur

Chapter 25: GARP VLAN Registration Protocol588 Section V: VLANsThe architecture of GARP is shown in Figure 198. Figure 198. GARP Architecture The GARP

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 589Applicant and Registrar. This is shown in Figure 199.Figure 199. GID Archit

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 594. Type 1 to change the Manager password or type 2 to change the

Chapter 25: GARP VLAN Registration Protocol590 Section V: VLANsTo control the Applicant state machine, an Applicant Administrative Control parameter i

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 591Configuring GVRPThis section contains the procedure for configuring GVRP. T

Chapter 25: GARP VLAN Registration Protocol592 Section V: VLANsThe following prompt is displayed:Enter your new value (E-Enabled, D-Disabled):6. Choos

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 593Enabling or Disabling GVRP on a PortThis procedure enables and disables GVR

Chapter 25: GARP VLAN Registration Protocol594 Section V: VLANsThe Configure GVRP Port Settings Menu is shown in Figure 202.Figure 202. Configure GVRP

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5959. After making changes, type R until you return to the Main Menu. Then typ

Chapter 25: GARP VLAN Registration Protocol596 Section V: VLANsConverting a Dynamic GVRP VLANThis procedure converts a dynamic GVRP VLAN into a static

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 597Displaying GVRP Parameters and StatisticsTo display GVRP counters, database

Chapter 25: GARP VLAN Registration Protocol598 Section V: VLANsGVRP Counters Option 1 - Display GVRP Counters in the Other GARP Port Parameters displa

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 599Figure 206. GVRP Counters Menu (page 2)The GVRP counters in the menus are d

Contents6Chapter 13: Classifiers ...

Chapter 3: Basic Switch Parameters60 Section I: Basic Operations2. Reboot the switch. For instructions, refer to “Rebooting a Switch” on page 57.3. Wh

Chapter 25: GARP VLAN Registration Protocol600 Section V: VLANsReceive Discarded: Port Not ListeningNumber of GARP PDUs discarded because the port tha

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 601Receive GARP Messages: LeaveEmptyTotal number of GARP LeaveEmpty messages r

Chapter 25: GARP VLAN Registration Protocol602 Section V: VLANsGVRP Database Option 2 - Display GVRP Database in the Other GARP Port Parameters displa

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 603GIP ConnectedPorts RingOption 3 - Display GIP Connected Ports Ring in the O

Chapter 25: GARP VLAN Registration Protocol604 Section V: VLANsGVRP StateMachineOption 4 - Display GVRP State Machine in the Other GARP Port Parameter

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 605App Applicant state machine for the GID index on that particular port. One

Chapter 25: GARP VLAN Registration Protocol606 Section V: VLANsReg Registrar state machine for the GID index on that particular port. One of:“Mt” Empt

Section V: VLANs 607Chapter 26 Multiple VLAN ModesThis chapter describes the multiple VLAN modes and how to select a mode.This chapter contains the fo

Chapter 26: Multiple VLAN Modes608 Section V: VLANsMultiple VLAN Mode OverviewMultiple VLAN modes simplify the task of configuring the switch in netwo

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 609WAN. This port is placed as a tagged port in each VLAN. Thus, while the swi

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 61Setting the System TimeThis procedure explains how to set the swi

Chapter 26: Multiple VLAN Modes610 Section V: VLANsThis highly segmented configuration is useful in situations where traffic generated by each end nod

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 611Non-802.1QCompliantMultiple VLANModeUnlike the 802.1Q-compliant VLAN mode,

Chapter 26: Multiple VLAN Modes612 Section V: VLANsSelecting a VLAN ModeThe following procedure explains how to select a VLAN mode. Available modes ar

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 613Displaying VLAN InformationTo view the VLANs on the switch while the unit i

Chapter 26: Multiple VLAN Modes614 Section V: VLANs

Section V: VLANs 615Chapter 27 Protected Ports VLANsThis chapter explains protected ports VLANs. It contains the following sections:  “Protected Port

Chapter 27: Protected Ports VLANs616 Section V: VLANsProtected Ports VLAN OverviewThe purpose of a protected ports VLAN is to allow multiple ports on

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 617To create a protected ports VLAN, you perform many of the same steps that y

Chapter 27: Protected Ports VLANs618 Section V: VLANs A protected ports VLAN can contain any number of groups. A group can contain any number of por

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 619Creating a Protected Ports VLANTo create a new protected ports VLAN, perfor

Chapter 3: Basic Switch Parameters62 Section I: Basic OperationsThe Configure System Time menu is shown in Figure 8.Figure 8. Configure System Time Me

Chapter 27: Protected Ports VLANs620 Section V: VLANsNoteA VLAN must be assigned a name.6. Type 2 to select VLAN ID (VID.The following prompt is displ

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 62112. Type C to select Create VLAN.The following prompt is displayed:Enter Up

Chapter 27: Protected Ports VLANs622 Section V: VLANsModifying a Protected Ports VLANPlease note the following before you perform this procedure: To

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 623The Modify VLAN Menu is shown in Figure 191 on page 565.4. Type 1 to select

Chapter 27: Protected Ports VLANs624 Section V: VLANs3 - Tagged PortsUse this selection to add or remove tagged ports from the VLAN. You can specify t

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 625After you have created all of the groups, this prompt is displayed:SUCCESS

Chapter 27: Protected Ports VLANs626 Section V: VLANsDisplaying a Protected Port VLANTo view the name, VID number, and member ports of all the VLANs o

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 627Untagged (U) / Tagged (T) - The ports of the VLAN. Tagged ports are designa

Chapter 27: Protected Ports VLANs628 Section V: VLANsDeleting a Protected Ports VLANAll untagged ports in a deleted protected ports VLAN are automatic

AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 629NoteYou cannot delete the Default_VLAN, which has a VID of 1.The Delete VLA

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 63NoteIf the switch is obtaining its IP address and subnet mask fro

Chapter 27: Protected Ports VLANs630 Section V: VLANs9. Repeat this procedure starting with Step 4 to delete other VLANs.10. After making changes, typ

Section VI: Port Security 631Section VIPort SecurityThe chapters in this section explain the port security features of the AT-8524M switch The chapter

632 Section VI: Port Security

Section VI: Port Security 633Chapter 28MAC Address-based Port SecurityThis chapter explains how you can use the dynamic and static MAC addresses learn

Chapter 28: MAC Address-based Port Security634 Section VI: Port SecurityMAC Address-based Port Security OverviewThis feature can enhance the security

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 635Secured A port set to this security level forwards packets only us

Chapter 28: MAC Address-based Port Security636 Section VI: Port Security Discard the invalid frame and send an SNMP trap. (SNMP must be enabled on th

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 637Configuring MAC Address-based Port SecurityTo set the port securit

Chapter 28: MAC Address-based Port Security638 Section VI: Port SecurityThe menu displays the current security level on the selected port. If you are

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 639Figure 220. Configure Port Security Menu #28. If you selected the

Chapter 3: Basic Switch Parameters64 Section I: Basic Operationsg. Type 6 - Poll Interval to specify the time interval between queries to the SNTP ser

Chapter 28: MAC Address-based Port Security640 Section VI: Port Security10. If you selected the trap or disable intrusion action, type 4 to toggle the

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 641Displaying Port Security LevelsTo view the current security levels

Chapter 28: MAC Address-based Port Security642 Section VI: Port SecurityIntruder ActionThe column specifies the action taken by a port if it receives

Section VI: Port Security 643Chapter 29802.1x Port-based Network Access ControlThis chapter explains 802.1x Port-based Network Access Control and how

Chapter 29: 802.1x Port-based Network Access Control644 Section VI: Port SecurityIEEE 802.1x Port-based Network Access Control OverviewThe AT-S62 mana

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 645 Authenticator - The authenticator is a port on the switch that p

Chapter 29: 802.1x Port-based Network Access Control646 Section VI: Port SecurityPort Roles Part of the task of implementing this feature is specifyin

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 647authentication is not tied to any specific computer or node. An en

Chapter 29: 802.1x Port-based Network Access Control648 Section VI: Port Security Force-unauthorized - Causes the port to remain in the unauthorized

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 649AuthenticatorPorts with Singleand MultipleSupplicantsAn authentica

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 65Configuring the Console Startup ModeYou can configure the AT-S62

Chapter 29: 802.1x Port-based Network Access Control650 Section VI: Port SecurityFigure 223. Authenticator Port in Single Operating Mode with a Single

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 651Figure 224. Single Operating Mode with Multiple Clients Using the

Chapter 29: 802.1x Port-based Network Access Control652 Section VI: Port SecurityIf the clients are connected to an 802.1x-compliant device, such as a

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 653Figure 226. Single Operating Mode with Multiple Clients Using the

Chapter 29: 802.1x Port-based Network Access Control654 Section VI: Port SecurityAn example of this authenticator operating mode is illustrated in Fig

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 655not be logged on to the port.Also note that the ports where the cl

Chapter 29: 802.1x Port-based Network Access Control656 Section VI: Port SecurityProviding network users with access to their network resources while

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 657Multiple Operating ModeThe initial authentication on an authentica

Chapter 29: 802.1x Port-based Network Access Control658 Section VI: Port SecurityNoteThe Guest VLAN feature is only supported on an authenticator port

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 659General Steps Following are the general steps to implementing 802.

Chapter 3: Basic Switch Parameters66 Section I: Basic OperationsConfiguring the Console TimerThe AT-S62 management software uses the console timer, al

Chapter 29: 802.1x Port-based Network Access Control660 Section VI: Port Security802.1x Port-basedNetwork AccessControlGuidelinesThe following are gen

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 661 An authenticator port cannot be part of a static port trunk, LAC

Chapter 29: 802.1x Port-based Network Access Control662 Section VI: Port SecuritySetting Port RolesThis procedure sets port roles. For an explanation

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 663The Configure Port Access Role menu is shown in Figure 230.Figure

Chapter 29: 802.1x Port-based Network Access Control664 Section VI: Port SecurityEnabling and Disabling 802.1x Port-based Network Access ControlThis p

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 665Configuring Authenticator Port ParametersNoteA port must already b

Chapter 29: 802.1x Port-based Network Access Control666 Section VI: Port SecurityThe Configure Authenticator Port Access Parameters menu is shown in F

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 6671 - Supplicant ModeThis parameter can take the following values on

Chapter 29: 802.1x Port-based Network Access Control668 Section VI: Port Security3 - Quiet PeriodThe quiet period is the number of seconds that the po

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 669For additional information, refer to “Supplicant and VLAN Associat

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 67Enabling or Disabling the Telnet ServerThis procedure explains ho

Chapter 29: 802.1x Port-based Network Access Control670 Section VI: Port SecurityD - Piggyback ModeThis parameter controls who can use the switch port

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 671Configuring Supplicant Port ParametersTo configure supplicant port

Chapter 29: 802.1x Port-based Network Access Control672 Section VI: Port SecurityThe Configure Supplicant Port Access Parameters menu is shown in Figu

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 673characters, such as asterisks or exclamation points. The username

Chapter 29: 802.1x Port-based Network Access Control674 Section VI: Port SecurityDisplaying the Port Access ParametersTo display the port access param

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 675AuthModeThe port’s authentication mode: 802.1x or MAC Based. For f

Chapter 29: 802.1x Port-based Network Access Control676 Section VI: Port SecurityConfiguring RADIUS AccountingThe AT-S62 management software supports

AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 6774. Adjust the following parameters as necessary.1 - StatusThis par

Chapter 29: 802.1x Port-based Network Access Control678 Section VI: Port Security

Section VII: Management Security 679Section VIIManagement SecurityThe chapters in this section explain the management security features of the AT-S62

Chapter 3: Basic Switch Parameters68 Section I: Basic OperationsSetting the Baud Rate of the RS-232 Terminal PortThe default baud rate of the RS-232 T

680 Section VII: Management Security

Section VII: Management Security 681Chapter 30Web ServerThe chapter provides an overview of the web server feature and the procedure for configuring t

Chapter 30: Web Server682 Section VII: Management SecurityWeb Server OverviewThe AT-S62 management software comes with web server software so you can

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 683Configuring the Web ServerThis procedure explains how to en

Chapter 30: Web Server684 Section VII: Management SecurityMenu option 4 is displayed only for HTTPS operation. The option is hidden for HTTP.3. Type 1

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 685General Steps to Configuring the Web Server for EncryptionT

Chapter 30: Web Server686 Section VII: Management Security6. Once you have received the appropriate certificates from the CA, download them into the A

Section VII: Management Security 687Chapter 31Encryption KeysThis chapter describes how to improve the security of your switches with encryption keys.

Chapter 31: Encryption Keys688 Section VII: Management SecurityBasic OverviewProtecting your managed switches from unauthorized management access is a

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 689Encryption KeyLengthTo create a key pair, you must specify

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 69Setting Fan ControlThe AT-8524POE switch has a fan control featur

Chapter 31: Encryption Keys690 Section VII: Management SecurityTechnical OverviewThe encryption feature provides the following data security services:

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 691algorithm and key. For a given input block of plaintext ECB

Chapter 31: Encryption Keys692 Section VII: Management Securitypublic and private key pair cannot be randomly assigned, but must be generated together

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 693The two most commonly used one-way hash algorithms are MD5

Chapter 31: Encryption Keys694 Section VII: Management SecurityThe security of the Diffie-Hellman algorithm depends on these values. Public key values

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 695Creating an Encryption KeyThis section contains the procedu

Chapter 31: Encryption Keys696 Section VII: Management SecurityThe Key Management menu is shown in Figure 239.Figure 239. Key Management MenuThis menu

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 697The Create Key menu is shown in Figure 240.Figure 240. Crea

Chapter 31: Encryption Keys698 Section VII: Management Security9. Type 4 to create a key description.The following prompt is displayed:Enter new Descr

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 699Deleting an Encryption KeyThis section contains the procedu

AT-S62 Management Software Menus Interface User’s Guide7Mapping CoS Priorities to Egress Queues ...

Chapter 3: Basic Switch Parameters70 Section I: Basic OperationsThe Fan Control Configuration menu is shown in Figure 10.Figure 10. Fan Control Config

Chapter 31: Encryption Keys700 Section VII: Management SecurityModifying an Encryption KeyThe Key Management menu has a selection for modifying the de

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 701Exporting an Encryption KeyThe following procedure exports

Chapter 31: Encryption Keys702 Section VII: Management SecurityNoteKey Type is a read-only field. You cannot change this value.3. Type 3 to toggle Key

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 703Importing an Encryption KeyUse the following procedure to i

Chapter 31: Encryption Keys704 Section VII: Management Security3. Type 3 to select Key File Format to choose the format of the key. Selections are:HEX

Section VII: Management Security 705Chapter 32PKI Certificates and SSLThis chapter contains the procedures for creating Public Key Infrastructure (PKI

Chapter 32: PKI Certificates and SSL706 Section VII: Management SecurityBasic OverviewThis chapter explains how to implement encryption for your web b

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 707general use, but will only be used by you and other network

Chapter 32: PKI Certificates and SSL708 Section VII: Management SecurityYou cannot use quotation marks. To use the following special characters {=,+&l

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 709SSL andEnhancedStackingSecure Sockets Layer (SSL) is suppor

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 71Figure 11 illustrates the fan control information.Figure 11. Show

Chapter 32: PKI Certificates and SSL710 Section VII: Management SecurityGuidelines Here are guidelines to creating certificates: A certificate can ha

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 711Technical OverviewThe Secure Sockets Layer (SSL) feature is

Chapter 32: PKI Certificates and SSL712 Section VII: Management SecuritySSL uses asymmetrical (Public Key) encryption to establish a connection betwee

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 713To verify the authenticity of a server, the server has a pu

Chapter 32: PKI Certificates and SSL714 Section VII: Management Securitythis, and other attacks, PKI provides a means for secure transfer of public ke

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 715Elements of aPublic KeyInfrastructureA Public Key Infrastru

Chapter 32: PKI Certificates and SSL716 Section VII: Management Securityto be the root CA. This CA issues certificates to the next level down in the h

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 717PKI StandardsThe following standards are supported by the s

Chapter 32: PKI Certificates and SSL718 Section VII: Management SecurityCreating a Self-signed CertificateThis section contains the procedure for crea

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 719The Public Key Infrastructure (PKI) Configuration menu is s

Chapter 3: Basic Switch Parameters72 Section I: Basic OperationsPinging a Remote SystemYou can instruct the switch to ping a remote device on your net

Chapter 32: PKI Certificates and SSL720 Section VII: Management SecurityNoteIn the X509 Certificate Management Menu, MTrust means manually trusted. Th

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7219. Enter the ID number of the encryption key you want to us

Chapter 32: PKI Certificates and SSL722 Section VII: Management SecurityAdding a Certificate to the DatabaseOnce you have created a certificate or rec

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7236. Type 1 to select Certificate Name and enter a name for t

Chapter 32: PKI Certificates and SSL724 Section VII: Management Security10. Type 5 to select Add Certificate to add the certificate to the certificate

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 725Modifying a CertificateThe procedure in this section modifi

Chapter 32: PKI Certificates and SSL726 Section VII: Management Security3. Type 2 to select State and specify if a certificate is trusted or untrusted

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 727Deleting a CertificateThe procedure in this section deletes

Chapter 32: PKI Certificates and SSL728 Section VII: Management SecurityViewing a CertificateThis procedure displays information about a certificate,

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 729The View Certificate Details menu (page 2) is shown in Figu

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 73Returning the AT-S62 Software to the Factory Default ValuesThere

Chapter 32: PKI Certificates and SSL730 Section VII: Management SecurityGenerating an Enrollment RequestTo request a certificate from a public or priv

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7315. From the Public Key Infrastructure (PKI) Configuration M

Chapter 32: PKI Certificates and SSL732 Section VII: Management SecurityPEM - Creates the certificate in the Privacy Enhanced Mail (PEM) format, which

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 733Installing CA Certificates onto a SwitchThis section lists

Chapter 32: PKI Certificates and SSL734 Section VII: Management SecurityConfiguring PKIOption 1 - Maximum Number of Certificates in the Public Key Inf

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 735Configuring SSLTo configure the SSL protocol, perform the f

Chapter 32: PKI Certificates and SSL736 Section VII: Management Security

Section VII: Management Security 737Chapter 33Secure Shell (SSH) ProtocolThe chapter contains overview information about the Secure Shell (SSH) protoc

Chapter 33: Secure Shell (SSH) Protocol738 Section VII: Management SecuritySSH OverviewSecure management is increasingly important in modern networks,

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 739 Tunnelling of TCP/IP traffic NoteNon-encrypted Secure She

Chapter 3: Basic Switch Parameters74 Section I: Basic OperationsThe following prompt is displayed:This operation requires a switch reboot. Continue? [

Chapter 33: Secure Shell (SSH) Protocol740 Section VII: Management SecuritySSH andEnhancedStackingThe AT-S62 management software allows for encrypted

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 741Guidelines Below are the guidelines to observe when configu

Chapter 33: Secure Shell (SSH) Protocol742 Section VII: Management SecurityConfiguring the SSH ServerThis section describes how to configure the SSH s

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7433. Select 1 - SSH Server Status to enable or disable the SS

Chapter 33: Secure Shell (SSH) Protocol744 Section VII: Management SecurityDisplaying SSH InformationTo display SSH server information, perform the fo

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 745 Host Key ID: Indicates the host key ID defined for SSH.

Chapter 33: Secure Shell (SSH) Protocol746 Section VII: Management Security

Section VII: Management Security 747Chapter 34TACACS+ and RADIUS Authentication ProtocolsThis chapter explains how to configure the parameter settings

Chapter 34: TACACS+ and RADIUS Authentication Protocols748 Section VII: Management SecurityTACACS+ and RADIUS OverviewTACACS+ and RADIUS are authentic

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 749If the combination is valid, the authentication protocol se

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 75 The current speed setting of the RS232 console port on the swit

Chapter 34: TACACS+ and RADIUS Authentication Protocols750 Section VII: Management Securitypassword up to 16 characters. Spaces are allowed in both a

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 751defaults to the standard manager and operator accounts.Note

Chapter 34: TACACS+ and RADIUS Authentication Protocols752 Section VII: Management SecurityConfiguring TACACS+ Authentication Protocol SettingsTo conf

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7535. To configure the TACACS+ parameters, type 3 to select TA

Chapter 34: TACACS+ and RADIUS Authentication Protocols754 Section VII: Management Security5 - TAC TimeoutThis parameter specifies the maximum amount

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 755Configuring RADIUS Authentication Protocol SettingsTo confi

Chapter 34: TACACS+ and RADIUS Authentication Protocols756 Section VII: Management SecurityThe RADIUS Client Configuration menu is shown in Figure 257

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 757Figure 258. RADIUS Server ConfigurationThe parameters are d

Chapter 34: TACACS+ and RADIUS Authentication Protocols758 Section VII: Management SecurityDisplaying RADIUS Status and SettingsThe RADIUS Client Conf

Section VII: Management Security 759Chapter 35Management Access Control ListThis chapter explains how to create an access control list (ACL) to restri

Chapter 3: Basic Switch Parameters76 Section I: Basic OperationsViewing System Hardware and Software InformationThe procedure in this section displays

Chapter 35: Management Access Control List760 Section VII: Management SecurityManagement ACL Security OverviewThis chapter explains how to restrict re

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 761corresponding bit of the address, while a “0” indicates tha

Chapter 35: Management Access Control List762 Section VII: Management SecurityExamples Following are several examples of ACEs.This ACE allows the mana

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 763The two ACEs in this management ACL permit remote managemen

Chapter 35: Management Access Control List764 Section VII: Management SecurityEnabling or Disabling the Management ACLThis procedure enables and disab

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 765A change to the status of the management ACL is immediately

Chapter 35: Management Access Control List766 Section VII: Management SecurityCreating an ACETo create a new ACE in the management ACL, perform the fo

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 767 Telnet - Permits Telnet management. Web - Permits web br

Chapter 35: Management Access Control List768 Section VII: Management SecurityModifying an ACETo modify an ACE, you need to know its identification nu

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7695. Make the desired changes to the entry by selecting the c

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 77The System Hardware Information menu is shown in Figure 13.Figure

Chapter 35: Management Access Control List770 Section VII: Management SecurityDeleting an ACETo delete an ACE, you need to know its identification num

AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 771Displaying the ACEsTo display the ACEs in the management AC

Chapter 35: Management Access Control List772 Section VII: Management Security

Section VIII: Management Security 773Appendix AAT-S62 Default SettingsThis appendix lists the AT-S62 factory default settings. It contains the followi

Appendix A: AT-S62 Default Settings774Basic Switch Default SettingsThis section lists the default settings for basic switch parameters. The following

AT-S62 Management Software Menus Interface User’s Guide775NoteLogin names and passwords are case-sensitive.RS-232 PortDefault SettingsThe following ta

Appendix A: AT-S62 Default Settings776System SoftwareDefault SettingsThe following table lists the system software default settings.AT-8524POE FanCont

AT-S62 Management Software Menus Interface User’s Guide777Denial of Service Defense Default SettingsThe following table lists the default settings for

Appendix A: AT-S62 Default Settings778Enhanced Stacking Default SettingThe following table lists the enhanced stacking default setting.Enhanced Stacki

AT-S62 Management Software Menus Interface User’s Guide779Event Log Default SettingsThe following table lists the event log default settings.Event Log

Chapter 3: Basic Switch Parameters78 Section I: Basic Operations

Appendix A: AT-S62 Default Settings780GVRP Default SettingsThis section provides the default settings for GVRP.GVRP Setting DefaultStatus DisabledGIP

AT-S62 Management Software Menus Interface User’s Guide781IGMP Snooping Default SettingsThe following table lists the IGMP Snooping default settings.I

Appendix A: AT-S62 Default Settings782MAC Address-based Security Default SettingsThe following table lists the MAC address security default settings.M

AT-S62 Management Software Menus Interface User’s Guide783Management Access Control List Default SettingThe following table lists the default setting

Appendix A: AT-S62 Default Settings784PKI Default SettingsThe following table lists the PKI default settings, including the generate enrollment reques

AT-S62 Management Software Menus Interface User’s Guide785Port Configuration Default SettingsThe following table lists the port configuration default

Appendix A: AT-S62 Default Settings786802.1x Port-Based Network Access Control Default SettingsThe following table describes the 802.1x Port Access Co

AT-S62 Management Software Menus Interface User’s Guide787The following table lists the default settings for a supplicant port.VLAN Assignment Enabled

Appendix A: AT-S62 Default Settings788Power Over EthernetThe following table describes the Power over Ethernet (PoE) default settings. This feature on

AT-S62 Management Software Menus Interface User’s Guide789Class of ServiceThe following table lists the default mappings of IEEE 802.1p priority level

Section I: Basic Operations 79Chapter 4Enhanced StackingThis chapter explains the enhanced stacking feature. The sections in this chapter include: “E

Appendix A: AT-S62 Default Settings790Server-Based Authentication Default SettingsThis section describes the server-based authentication, RADIUS, and

AT-S62 Management Software Menus Interface User’s Guide791SNMP Default SettingsThe following table describes the SNMPv1 and SNMPv2c default settings.S

Appendix A: AT-S62 Default Settings792STP, RSTP, and MSTP Default SettingsThis section provides the spanning tree, STP RSTP, and MSTP, default setting

AT-S62 Management Software Menus Interface User’s Guide793MSTP DefaultSettingsThe following table lists the MSTP default settings.MSTP Setting Default

Appendix A: AT-S62 Default Settings794SSH Default SettingsThe following table lists the SSH default settings.SSH Setting DefaultStatus DisabledHost Ke

AT-S62 Management Software Menus Interface User’s Guide795SSL Default SettingsThe following table lists the SSL default settings.SSL Setting DefaultMa

Appendix A: AT-S62 Default Settings796VLAN Default SettingsThis section provides VLAN default settings.VLAN Setting DefaultDefault VLAN Name Default_V

AT-S62 Management Software Menus Interface User’s Guide797Web Server Default SettingsThe following table lists the web server default settings.Web Ser

Appendix A: AT-S62 Default Settings798

799Appendix BSNMPv3 Configuration ExamplesThis appendix provides two examples of SNMPv3 configuration using the SNMPv3 Table menus and a worksheet to

Contents8Creating an SNMPv3 User Table Entry...386Del

Chapter 4: Enhanced Stacking80 Section I: Basic OperationsEnhanced Stacking OverviewThe enhanced stacking feature can make it easier for you to manage

Appendix B: SNMPv3 Configuration Examples800SNMPv3 Configuration Examples This appendix provides SNMPv3 configuration examples for the following type

AT-S62 Management Software Menus Interface User’s Guide801Configure SNMPv3 SecurityToGroup TableUser Name:systemadmin24Security Model:v3Group Name: Ma

Appendix B: SNMPv3 Configuration Examples802Configure SNMPv3 View Table Menu View Name: internetView Subtree OID: 1.3.6.1 (or internet)Subtree Mask: V

AT-S62 Management Software Menus Interface User’s Guide803Security ModelSecurity LevelRead View NameWrite View NameNotify View NameStorage TypeSNMPv3

Appendix B: SNMPv3 Configuration Examples804Security ModelSecurity LevelStorage TypeSNMPv3 Parameters (Continued)

805Appendix CStandards and Features10/100Base-TX Twisted Pair PortsIEEE 802.1d BridgingIEEE 802.3 10Base-TIEEE 802.3u 100Base-TXIEEE 802.3u Auto-Negot

Appendix C: Standards and Features806— Type of Service Replacement— Type of Service to 802.1q Priority Replacement— 802.1q Priority to Type of Service

AT-S62 Management Software Menus Interface User’s Guide807IEEE 802.3ac VLAN Tag Frame ExtensionIEEE 802.1P GARP VLAN Registration ProtocolIP Multicast

Appendix C: Standards and Features808— Encryption Keys— Secure Shell (SSH) (Vers. 1.3, 1.5, 2.0)— Management Access Control ListManagement MIBsRFC 121

AT-S62 Management Software Menus Interface User’s Guide809— MAC address table with a storage capacity of 8K entries— 2 megabyte file systemDenial of S

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 81There are three basic steps to implementing this feature on your

Appendix C: Standards and Features810

811IndexNumerics802.1x Port-based Network Access Controlaccess role, configuring 662authentication process 645authenticator portconfiguring 665describ

Index812editing 182overview 176selecting 179selecting active 179Boot Protocol (BootP)activating 55deactivating 55default setting 775defined 55BPDU. Se

AT-S62 Management Software Menus Interface User’s Guide813data encryption, described 690daylight savings time (DST)default setting 775setting 63defaul

Index814displayingGVRP state machine 604parameters 597statistics 597enabling on a port 593GIP connected ports ring 603guidelines 584GVRP counters 598G

AT-S62 Management Software Menus Interface User’s Guide815displaying status 161enabling or disabling protocol 154guidelines 143modifying aggregator 15

Index816deleting 530list 528modifying 530removing a VLAN association 534port priority 528Multiple Spanning Tree Protocol (MSTP)activating 522associati

AT-S62 Management Software Menus Interface User’s Guide817port mirrorcreating 167deleting 169destination port 166source port 166port mirroring, descri

Index818bridge max age 502bridge parameters, configuring 501bridge priority 502default settings 792disabling 493edge port, configuring 505enabling 493

AT-S62 Management Software Menus Interface User’s Guide819deleting 409displaying 475modifyingnotify view 416read view 411storage type 418write view na

Chapter 4: Enhanced Stacking82 Section I: Basic OperationsFigure 14 is an example of the enhanced stacking feature.Figure 14. Enhanced Stacking Exampl

Index820port settings, configuring 497port settings, displaying 499spanning tree, default setting 792SSH server status parameter 743SSH. See Secure S

AT-S62 Management Software Menus Interface User’s Guide821Vversions supported (SSH) parameter 744VID. See VLAN IDview type, modifying 401virtual LAN (

Index822

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 83Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking

Chapter 4: Enhanced Stacking84 Section I: Basic OperationsThe Enhanced Stacking menu is shown in Figure 15.Figure 15. Enhanced Stacking MenuThe menu d

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 85Selecting a Switch in an Enhanced StackBefore you perform a proce

Chapter 4: Enhanced Stacking86 Section I: Basic Operations3. Type 1 to select Get/Refresh List of Switches.The Master switch polls the subnet for all

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 87Returning to the Master Switch When you have finished managing a

Chapter 4: Enhanced Stacking88 Section I: Basic Operations

Section I: Basic Operations 89Chapter 5SNMPv1 and SNMPv2c ConfigurationThis chapter explains how to activate SNMP management on the switch and how to

AT-S62 Management Software Menus Interface User’s Guide9Configuring RSTP Port Settings...

Chapter 5: SNMPv1 and SNMPv2c Configuration90 Section I: Basic OperationsSNMPv1 and SNMPv2c OverviewThe Simple Network Management Program (SNMP) is an

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 91Access ModeThis defines what the community string will allow a ne

Chapter 5: SNMPv1 and SNMPv2c Configuration92 Section I: Basic OperationsIf you are not interested in receiving traps, then you do not need to enter a

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 93Enabling or Disabling SNMP ManagementTo enable or disable SNMP ma

Chapter 5: SNMPv1 and SNMPv2c Configuration94 Section I: Basic OperationsSetting the Authentication Failure TrapAs mentioned in the SNMP Overview sect

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 95Creating an SNMP Community StringTo create a new SNMP community s

Chapter 5: SNMPv1 and SNMPv2c Configuration96 Section I: Basic Operations5. Enter the new SNMP community string. The name can be up to 32 alphanumeric

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 9710. If desired, repeat this procedure starting with Step 4 to cre

Chapter 5: SNMPv1 and SNMPv2c Configuration98 Section I: Basic OperationsModifying a Community StringTo modify a community string, perform the followi

AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 99The menu options are described below:1 - Add Attributes to Commun