613-000124 Rev. BManagement SoftwareAT-S62◆Menus InterfaceUser’s GuideAT-8500 Series Layer 2+ Fast Ethernet SwitchesVersion 1.4.0
Contents10Technical Overview of Generic Attribute Registration Protocol (GARP)...587Configuring
Chapter 5: SNMPv1 and SNMPv2c Configuration100 Section I: Basic Operations3. If you want to remove the IP address of a management workstation from the
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1013. Type E to enable the community string or D to disable it. Thi
Chapter 5: SNMPv1 and SNMPv2c Configuration102 Section I: Basic OperationsDeleting a Community StringTo delete an SNMPv1 or SNMPv2c community string,
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 103Displaying the SNMP Community StringsTo display the attributes o
Chapter 5: SNMPv1 and SNMPv2c Configuration104 Section I: Basic Operations
Section I: Basic Operations 105Chapter 6Port ParametersThe chapter contains the procedures for viewing and adjusting the parameter settings for the in
Chapter 6: Port Parameters106 Section I: Basic OperationsDisplaying Port StatusTo display the current status and settings of the ports on the switch,
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 107NoteThe speed, duplex mode, and flow control settings will be bl
Chapter 6: Port Parameters108 Section I: Basic OperationsPVIDThe port’s VLAN identifier (PVID). This number corresponds to the VID of the VLAN in whic
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 109Configuring Port ParametersTo configure the parameter settings o
AT-S62 Management Software Menus Interface User’s Guide11Section VII: Management Security ...
Chapter 6: Port Parameters110 Section I: Basic OperationsSelections 3, 5, and 6 appear in the menu only when selection 4 - Negotiation is set to Manua
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 111Broadcast frames are different. Broadcast frames are directed to
Chapter 6: Port Parameters112 Section I: Basic Operations4 - NegotiationYou use this selection to activate or deactivate Auto-Negotiation on a twisted
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1136 - DuplexThis selection is used to set the duplex mode of a por
Chapter 6: Port Parameters114 Section I: Basic OperationsThe HOL Limit parameter can help prevent this problem from occurring. This parameter sets a t
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 115Enabled - Flow control is activated. This setting is appropriate
Chapter 6: Port Parameters116 Section I: Basic OperationsThe options on the Back Pressure menu are described below:1 - Back PressureEnables and disabl
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 117X - Reset PortResets the speed and duplex mode of the selected p
Chapter 6: Port Parameters118 Section I: Basic OperationsSetting the Rate LimitThis feature sets the maximum number of ingress packets the switch port
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 119The Rate Limiting menu is shown in Figure 27.Figure 27. Rate Lim
Contents12Chapter 33: Secure Shell (SSH) Protocol ...7
Chapter 6: Port Parameters120 Section I: Basic OperationsDisplaying Port StatisticsTo display Ethernet port statistics, perform the following procedur
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 121Broadcast Frames SentNumber of broadcast frames transmitted from
Chapter 6: Port Parameters122 Section I: Basic OperationsClearing Port CountersTo return the statistics counters of a port to zero, perform the follow
Section I: Basic Operations 123Chapter 7MAC Address TableThe chapter contains the procedures for viewing the static and dynamic MAC address table.This
Chapter 7: MAC Address Table124 Section I: Basic OperationsMAC Address OverviewThe AT-8500 Series switch has a MAC address table with a storage capaci
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 125MAC address table from becoming filled with addresses of nodes t
Chapter 7: MAC Address Table126 Section I: Basic OperationsDisplaying MAC AddressesThe management software has two menu selections for displaying the
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1273. Select the desired option. The options are explained below:1
Chapter 7: MAC Address Table128 Section I: Basic OperationsAn example of a multicast MAC address table is shown in Figure 32.Figure 32. Display All Me
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1295 - Display Specified MACDisplays the port number on which a MAC
AT-S62 Management Software Menus Interface User’s Guide13STP, RSTP, and MSTP Default Settings...
Chapter 7: MAC Address Table130 Section I: Basic OperationsAdding Static Unicast and Multicast MAC AddressesThis section contains the procedure for ad
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 131If you are entering a static multicast address, you must specify
Chapter 7: MAC Address Table132 Section I: Basic OperationsDeleting Unicast and Multicast MAC AddressesTo delete a dynamic or static unicast or multic
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 133Deleting All Dynamic MAC AddressesTo delete all dynamic unicast
Chapter 7: MAC Address Table134 Section I: Basic OperationsChanging the Aging TimeThe switch uses the aging time to delete inactive dynamic MAC addres
Section I: Basic Operations 135Chapter 8Static and LACP Port TrunksThis chapter contains the procedures for creating, modifying, and deleting static a
Chapter 8: Static and LACP Port Trunks136 Section I: Basic OperationsPort Trunk OverviewA port trunk is an economical way for you to increase the band
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 137from another manufacturer; but there is the possibility that the
Chapter 8: Static and LACP Port Trunks138 Section I: Basic Operations The ports of a static trunk must be untagged members of the same VLAN. A trunk
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 139assumes that the other port is not part of an LACP aggregator. I
Contents14
Chapter 8: Static and LACP Port Trunks140 Section I: Basic OperationsHere is how the example might look in table format for the ports on the AT-8500 S
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 141Here is how this example looks in table format for the ports on
Chapter 8: Static and LACP Port Trunks142 Section I: Basic OperationsAdminkey ParameterThe adminkey is a hexadecimal value from 1 to FFFF that identif
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 143each trunk. For further information, refer to “Load Distribution
Chapter 8: Static and LACP Port Trunks144 Section I: Basic Operationsdevice. If it does not receive LACPDU packets, it functions as a regular Ethernet
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 145As an example, assume you created a static or LACP aggregate tru
Chapter 8: Static and LACP Port Trunks146 Section I: Basic OperationsYou can assign different load distribution methods to different static trunks on
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 147Managing Static Port TrunksThe following procedures explain how
Chapter 8: Static and LACP Port Trunks148 Section I: Basic OperationsThe Port Trunking and LACP menu is shown in Figure 37.Figure 37. Port Trunking an
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 149DST IP Destination IP address.SRC/DST IP Source address/destinat
15Chapter 2: Starting a Local or Telnet Management Session... 39Figure 1: Connectin
Chapter 8: Static and LACP Port Trunks150 Section I: Basic Operations8. Type 4 to select Trunk Ports and, when prompted, enter the ports of the trunk.
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 1512. From the Port Configuration menu, type 4 to select Port Trunk
Chapter 8: Static and LACP Port Trunks152 Section I: Basic Operations SRC/DST MAC - Source address /destination MAC address SRC IP - Source IP addr
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 153The following prompt is displayed:Enter Trunk ID: [1 to 6] ->
Chapter 8: Static and LACP Port Trunks154 Section I: Basic OperationsManaging LACP TrunksThe following procedures explain how to create and manage LAC
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 155The LACP (IEEE 8023ad) Configuration menu is shown in Figure 41.
Chapter 8: Static and LACP Port Trunks156 Section I: Basic OperationsThe following prompt is displayed:Enter Priority [0x1 - 0xFFFF]: [0x1 to 0xffff]
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 157The Create LACP (IEEE 8023ad) Aggregator menu is shown in Figure
Chapter 8: Static and LACP Port Trunks158 Section I: Basic Operations6. After you configure the parameters, type C to select Create Aggregator.The agg
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 159The Port Trunking and LACP menu is shown in Figure 38 on page 14
Figures16Figure 37: Port Trunking and LACP Menu...
Chapter 8: Static and LACP Port Trunks160 Section I: Basic Operations3 - Distribution ModeSets the load distribution method. Possible settings are: S
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 161The LACP (IEEE 8023ad) Configuration menu is shown in Figure 41
Chapter 8: Static and LACP Port Trunks162 Section I: Basic OperationsFigure 44 is an example of the LACP (IEEE 802.3ad Port Status menu. The informati
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 163If there are no active aggregate trunks on the switch, the follo
Chapter 8: Static and LACP Port Trunks164 Section I: Basic Operations
Section I: Basic Operations 165Chapter 9Port MirroringThis chapter contains the procedures for creating and deleting a port mirror. Sections in the ch
Chapter 9: Port Mirroring166 Section I: Basic OperationsPort Mirroring OverviewThe port mirroring feature is used to unobtrusively monitor the ingress
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 167Creating a Port MirrorTo create a port mirror, perform the follo
Chapter 9: Port Mirroring168 Section I: Basic Operations5. Type 2 to select Mirror-To Port and, when prompted, enter the number of the port to functio
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 169Disabling a Port MirrorTo disable a port mirror, perform the fol
AT-S62 Management Software Menus Interface User’s Guide17Chapter 15: Quality of Service ...
Chapter 9: Port Mirroring170 Section I: Basic Operations
Section II: Advanced Operations 171Section IIAdvanced OperationsThe chapters in this section explain some of the more advanced features of an AT-8500
172 Section II: Advanced Operations
Section II: Advanced Operations 173Chapter 10File SystemThis chapter describes the AT-S62 file system, and how you can use the file system to copy, re
Chapter 10: File System174 Section II: Advanced OperationsFile System OverviewThe AT-S62 management software has a file system of 2 megabytes for stor
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 175File NamingConventionsThe file system is a flat file system
Chapter 10: File System176 Section II: Advanced OperationsWorking with Boot Configuration FilesA boot configuration file contains the commands for con
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 177Phase 1: Creating a Configuration FileBefore you begin to co
Chapter 10: File System178 Section II: Advanced OperationsCautionOption 9 - Format Flash Drive should be used with care. It deletes all files in the f
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 179Phase 2: Configuring the Switch’s Parameter SettingsNow that
Figures18Chapter 21: SNMPv3...
Chapter 10: File System180 Section II: Advanced OperationsTo select the active boot configuration file for the switch, perform the following procedure
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 181To view the contents of a configuration file, perform the fo
Chapter 10: File System182 Section II: Advanced OperationsEditing a BootConfigurationFileYou can edit a boot configuration file using a text editor on
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 183Copying, Renaming, and Deleting System FilesUse this procedu
Chapter 10: File System184 Section II: Advanced Operationsd. Press any key to return to the File Operations menu.5. To rename a system file, do the fo
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 185Displaying System FilesUse this procedure to display a list
Chapter 10: File System186 Section II: Advanced OperationsThe List Files menu is displayed. An example of the menu is shown in Figure 50.Figure 50. Li
Section II: Advanced Operations 187Chapter 11File Downloads and UploadsThis chapter contains procedures for downloading a new AT-S62 image file onto t
Chapter 11: File Downloads and Uploads188 Section II: Advanced OperationsDownloading a New AT-S62 Image File onto a SwitchThe procedures in this secti
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 189 The AT-S62 image file contains the bootloader for the swit
AT-S62 Management Software Menus Interface User’s Guide19Chapter 24: Port-based and Tagged Virtual LANs ...
Chapter 11: File Downloads and Uploads190 Section II: Advanced OperationsDownloading anAT-S62 Imagefrom a LocalManagementSessionReview the “Guidelines
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 1916. To download the AT-S62 image file using Xmodem, go to Ste
Chapter 11: File Downloads and Uploads192 Section II: Advanced OperationsThe following prompt is displayed:You are going to invoke the Xmodem download
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 19311. Click Browse and specify the location and file to be dow
Chapter 11: File Downloads and Uploads194 Section II: Advanced OperationsDownloading anAT-S62 Imagefrom a TelnetManagementSessionReview the “Guideline
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 195After receiving the file, the switch compares the version nu
Chapter 11: File Downloads and Uploads196 Section II: Advanced OperationsUploading an AT-S62 Image File Switch to SwitchThis procedure uploads an AT-S
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 197NoteThe “2 - Stacking Services” selection is only available
Chapter 11: File Downloads and Uploads198 Section II: Advanced OperationsCautionThe switch will not forward network traffic while writing the image to
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 199Uploading an AT-S62 Configuration File Switch to SwitchThis
Copyright © 2006 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied
Figures20Figure 234: Configure Supplicant Port Access Parameters Menu...
Chapter 11: File Downloads and Uploads200 Section II: Advanced OperationsCautionThis procedure causes the switch to reset. Some network traffic may be
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2017. Enter the number (Num column in the menu) of the AT-8500
Chapter 11: File Downloads and Uploads202 Section II: Advanced OperationsDownloading a System FileThis section contains the following procedures: “Do
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 203These guidelines apply to an Xmodem download: Xmodem can on
Chapter 11: File Downloads and Uploads204 Section II: Advanced Operations6. To download a system file using Xmodem, go to Step 7. To download a file u
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 205f. If you downloaded a new configuration file and you want t
Chapter 11: File Downloads and Uploads206 Section II: Advanced OperationsThe Send File window is shown in Figure 53. Figure 56. Send File Window12. Cl
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 20715. If you downloaded a new configuration file and you want
Chapter 11: File Downloads and Uploads208 Section II: Advanced OperationsThe following message is displayed:Getting the file from Remote TFTP Server -
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 209Uploading a System FileYou use the procedures in this sectio
21PrefaceThis guide contains instructions on how to configure an AT-8500 Series Layer 2+ Fast Ethernet Switch using the menus interface in the AT-S62
Chapter 11: File Downloads and Uploads210 Section II: Advanced OperationsThese guidelines apply to a TFTP upload: Your network must have a node with
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 211The following prompt is displayed:Remote File Name:c. Enter
Chapter 11: File Downloads and Uploads212 Section II: Advanced OperationsNote: Please select '1K Xmodem' protocol for faster upload...10. Be
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 21315. When prompted, enter a name for the file for when it is
Chapter 11: File Downloads and Uploads214 Section II: Advanced OperationsThe following message is displayed:Sending the file to Remote TFTP Server - P
Section II: Advanced Operations 215Chapter 12Event Log and Syslog ServersThis chapter describes how to view the event messages in the event log and ho
Chapter 12: Event Log and Syslog Servers216 Section II: Advanced OperationsEvent Log and Syslog Server OverviewA managed switch is a complex piece of
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 217Managing the Event LogThe following procedures explain how t
Chapter 12: Event Log and Syslog Servers218 Section II: Advanced OperationsThe Event Log menu is shown in Figure 60.Figure 60. Event Log Menu3. Type 1
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2192 - Display OutputSelects an event log. This option has only
Preface22How This Guide is OrganizedThis manual is divided into the following sections. Section I: Basic OperationsThe chapters in this section explai
Chapter 12: Event Log and Syslog Servers220 Section II: Advanced OperationsTable 5. AT-S62 ModulesModule Name DescriptionALL All modulesACL Access con
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2214. Once you have set the log filters, type V to select View
Chapter 12: Event Log and Syslog Servers222 Section II: Advanced OperationsThe columns in the log are described below: S (Severity) - The event’s sev
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 223The Configure Log Outputs menu is shown in Figure 62.Figure
Chapter 12: Event Log and Syslog Servers224 Section II: Advanced OperationsSaving the EventLogThe Event Log menu has the selection “S - Save Log to Fi
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 225Managing Syslog Server DefinitionsAs explained at the start
Chapter 12: Event Log and Syslog Servers226 Section II: Advanced OperationsCreating a SyslogServer DefinitionTo create a syslog server definition, per
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2273 - Message GenerationThis enables and disables the syslog s
Chapter 12: Event Log and Syslog Servers228 Section II: Advanced OperationsFor example, the setting of DEFAULT assigns all port mirroring events a cod
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 229For example, selecting LOCAL2 as the facility level assigns
AT-S62 Management Software Menus Interface User’s Guide23Document ConventionsThis document uses the following conventions:NoteNotes provide additional
Chapter 12: Event Log and Syslog Servers230 Section II: Advanced OperationsFigure 64. Configure Log Outputs Menu with a Syslog Server Definition8. Rep
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 231For definitions of the parameters, refer to “Creating a Sysl
Chapter 12: Event Log and Syslog Servers232 Section II: Advanced OperationsDisplaying aSyslog ServerDefinitionTo display the details of an existing sy
Section II: Advanced Operations 233Chapter 13ClassifiersThis chapter explains classifiers and how you can create classifiers to define traffic flows.
Chapter 13: Classifiers234 Section II: Advanced OperationsClassifier OverviewA classifier defines a traffic flow. A traffic flow consists of packets t
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 235is dictated by the QoS policy, as explained in Chapter 15 on
Chapter 13: Classifiers236 Section II: Advanced OperationsFigure 65. User Priority and VLAN Fields within an Ethernet FrameYou can identify a traffic
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 237Observe the following guidelines when using this variable:
Chapter 13: Classifiers238 Section II: Advanced OperationsObserve these guidelines when using this criterion: The Protocol variable must be left blan
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 239Observe this guideline when using these criteria: The Proto
Preface24Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Portable Document Format (PDF
Chapter 13: Classifiers240 Section II: Advanced OperationsClassifierGuidelinesHere are the guidelines to follow when creating a classifier: Each clas
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 241Creating a ClassifierThis section contains the procedure for
Chapter 13: Classifiers242 Section II: Advanced OperationsThe Create Classifier menu (page 1) is shown in Figure 68.Figure 68. Create Classifier Menu
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2434. To set a variable, type E to select Edit Parameters.The f
Chapter 13: Classifiers244 Section II: Advanced OperationsModifying a ClassifierIn order to modify a classifier, you need to know its ID number. To vi
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2458. After making changes, type R until you return to the Main
Chapter 13: Classifiers246 Section II: Advanced OperationsDeleting a ClassifierThis procedure deletes a classifier from the switch. To delete a classi
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 247Deleting All ClassifiersThis procedure deletes all classifie
Chapter 13: Classifiers248 Section II: Advanced OperationsDisplaying ClassifiersTo display the classifiers on a switch, do the following:1. From the M
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 249 Number of Active Associations - The number of current assi
AT-S62 Management Software Menus Interface User’s Guide25Contacting Allied TelesynThis section provides Allied Telesyn contact information for technic
Chapter 13: Classifiers250 Section II: Advanced Operations
Section II: Advanced Operations 251Chapter 14Access Control ListsThis chapter explains access control lists (ACL) and how you can use this feature to
Chapter 14: Access Control Lists252 Section II: Advanced OperationsAccess Control List (ACL) OverviewAn ACL is a filter that controls the ingress pack
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 253Here is an overview of how the process works. 1. When an ing
Chapter 14: Access Control Lists254 Section II: Advanced Operations A classifier can be assigned to multiple ACLs. However, a classifier cannot be as
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 255To deny traffic from several subnets on the same port, you c
Chapter 14: Access Control Lists256 Section II: Advanced OperationsYou can achieve the same result by assigning each classifier to a different ACL and
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 257In this example, the traffic on ports 14 and 15 is restricte
Chapter 14: Access Control Lists258 Section II: Advanced OperationsThe next example limits the ingress traffic on port 17 to IP packets from the subne
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 259Creating an ACLThis procedure explains how to create an ACL.
Preface26New Features HistoryThe following subsection contains the new features in the AT-S62 management software.Version 1.4.0 Table 1 lists the new
Chapter 14: Access Control Lists260 Section II: Advanced Operations4. Type 1 to select ACL ID and, when prompted, enter an ID number for the ACL. Ever
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 261Modifying an ACLThis procedure explains how to modify an ACL
Chapter 14: Access Control Lists262 Section II: Advanced OperationsYou cannot change an ACL’s ID number. 5. To change the description of the ACL, type
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 263Deleting an ACLThis procedure deletes an ACL from the switch
Chapter 14: Access Control Lists264 Section II: Advanced Operations5. To delete the ACL, type D to select Destroy ACL. To cancel the procedure, type R
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 265Deleting All ACLsThis procedure deletes all ACLs from the sw
Chapter 14: Access Control Lists266 Section II: Advanced OperationsDisplaying ACLsTo display the ACLs on a switch, perform this procedure:1. From the
Section II: Advanced Operations 267Chapter 15Quality of ServiceThis chapter describes Quality of Service (QoS). Sections in the chapter include: “Qua
Chapter 15: Quality of Service268 Section II: Advanced OperationsQuality of Service OverviewQuality of Service allows you to prioritize traffic and/or
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 269The QoS functionality described by this chapter sorts packet
AT-S62 Management Software Menus Interface User’s Guide27802.1x Port-based Network Access ControlAdded the following new features to 802.1x authentica
Chapter 15: Quality of Service270 Section II: Advanced OperationsFlow Groups Flow groups are used to group similar traffic flows together, and allow m
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 271The effects of this behavior become evident when using the m
Chapter 15: Quality of Service272 Section II: Advanced Operations Replacing the VLAN tag User Priority, to enable the next switch in the network to p
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 273ReplacingPrioritiesThe traffic class or flow group priority
Chapter 15: Quality of Service274 Section II: Advanced OperationsA simple example of this process is shown in Figure 82, for limiting the amount of ba
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 275Assign the classifiers to flow groups and the flow groups to
Chapter 15: Quality of Service276 Section II: Advanced OperationsExamples Voice ApplicationsVoice applications typically require a small bandwidth but
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 277The parts of the policies are: Classifier - Defines the tra
Chapter 15: Quality of Service278 Section II: Advanced OperationsVideo ApplicationsVideo applications typically require a larger bandwidth than voice
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 279The parts of the policies are: Classifier - Specifies the I
Preface28
Chapter 15: Quality of Service280 Section II: Advanced OperationsCritical DatabaseCritical databases typically require a high bandwidth. They also typ
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 281Policy Component HierarchyThe purpose of this example is to
Chapter 15: Quality of Service282 Section II: Advanced OperationsFigure 86. Policy Component Hierarchy ExampleCreate Classifier01 - Classifier ID: ...
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 283Managing Flow GroupsThis section contains the following proc
Chapter 15: Quality of Service284 Section II: Advanced Operations4. Type 1 to select Create Flow Group.The Create Flow Group menu is shown in Figure 8
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2855 - Remark PriorityIf set to Yes, replaces the user priority
Chapter 15: Quality of Service286 Section II: Advanced Operations4. Type 2 to select Modify Flow Group.The following prompt is displayed:Available Flo
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2879. After making changes, type R until you return to the Main
Chapter 15: Quality of Service288 Section II: Advanced Operations6. Type D to delete the flow group.The flow group is deleted from the switch. The gro
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 289The Show Flow Groups menu provides the following information
29Chapter 1OverviewThis chapter reviews the functions of the AT-S62 management software, the types of management sessions supported by the switch, and
Chapter 15: Quality of Service290 Section II: Advanced OperationsManaging Traffic ClassesThis section contains the following procedures: “Creating a
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 291The Create Traffic Class menu is shown in Figure 95.Figure 9
Chapter 15: Quality of Service292 Section II: Advanced Operations5 - DSCP valueSpecifies a replacement value to write into the DSCP (TOS) field of the
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 293matches the number being used by the traffic. However, no un
Chapter 15: Quality of Service294 Section II: Advanced OperationsB - Move ToS to PriorityIf set to yes, replaces the value in the 802.1p priority fiel
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 295The selected traffic class is displayed in the Modify Traffi
Chapter 15: Quality of Service296 Section II: Advanced OperationsDeleting a TrafficClassTo delete a traffic class, do the following procedure:1. From
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 2976. Type D to delete the traffic class.The traffic class is d
Chapter 15: Quality of Service298 Section II: Advanced OperationsThe Show Traffic Classes menu provides the following information:IDThe traffic class’
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 299Managing PoliciesThis section contains the following procedu
3Preface ...
Chapter 1: Overview30Management OverviewThe AT-S62 management software allows you to monitor and adjust the operating parameters of an AT-8500 Series
Chapter 15: Quality of Service300 Section II: Advanced OperationsThe Create Policy menu is shown in Figure 100.Figure 100. Create Policy Menu5. Config
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3015 - ToSSpecifies a replacement value to write into the Type
Chapter 15: Quality of Service302 Section II: Advanced OperationsModifying aPolicyTo modify a policy, perform the following procedure:1. From the Main
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 303 To delete a value from a variable so as to leave it blank,
Chapter 15: Quality of Service304 Section II: Advanced OperationsDisplayingPoliciesTo display policies, do the following procedure:1. From the Main Me
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3055. To display the specifics of a policy, type D to select De
Chapter 15: Quality of Service306 Section II: Advanced Operations
Section II: Advanced Operations 307Chapter 16Class of ServiceThis chapter contains the procedures for configuring Class of Service (CoS). Sections in
Chapter 16: Class of Service308 Section II: Advanced OperationsClass of Service OverviewWhen a port on an Ethernet switch becomes oversubscribed—its e
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 309Table 8 lists the mappings between the eight CoS priority le
AT-S62 Management Software Menus Interface User’s Guide31Local Management SessionTo establish a local management session with an AT-8500 Series switch
Chapter 16: Class of Service310 Section II: Advanced OperationsThe procedure for changing the default mappings is found in “Mapping CoS Priorities to
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 311NoteScheduling is set at the switch level. You cannot set th
Chapter 16: Class of Service312 Section II: Advanced OperationsIn this example, the port transmits a maximum number of 15 packets from Q3 before movin
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 313Configuring CoSAs explained in “Class of Service Overview” o
Chapter 16: Class of Service314 Section II: Advanced Operations2. From the Security and Services menu, type 5 to select Class of Service (CoS).The Cla
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 315Menu option 1 cannot be changed.5. Type 2 to select Priority
Chapter 16: Class of Service316 Section II: Advanced OperationsMapping CoS Priorities to Egress QueuesThis procedure explains how to change the defaul
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3176. After making changes, type R until you return to the Main
Chapter 16: Class of Service318 Section II: Advanced OperationsConfiguring Egress SchedulingThis procedure explains how to select and configure a sche
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3196. Return to the Main Menu and type S to select Save Configu
Chapter 1: Overview32Telnet Management SessionYou can remotely manage the switch from a workstation on your network using the Telnet application proto
Chapter 16: Class of Service320 Section II: Advanced OperationsDisplaying Port CoS PrioritiesThe following procedure displays a menu that lists the cu
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 321deactivated and the port is using the priority levels contai
Chapter 16: Class of Service322 Section II: Advanced Operations
Section II: Advanced Operations 323Chapter 17IGMP SnoopingThis chapter explains how to activate and configure the Internet Group Management Protocol (
Chapter 17: IGMP Snooping324 Section II: Advanced OperationsIGMP Snooping OverviewIGMP enables routers to create lists of nodes that are members of mu
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 325security by restricting the flow of multicast packets only t
Chapter 17: IGMP Snooping326 Section II: Advanced OperationsConfiguring IGMP SnoopingTo configure the IGMP snooping parameters on the switch, perform
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 327The options in the menu are defined below:1 - IGMP Snooping
Chapter 17: IGMP Snooping328 Section II: Advanced OperationsA value of 0 disables the timer. A switch with a disabled timer never times out inactive h
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 329Displaying a List of Host NodesTo view a list of the multica
AT-S62 Management Software Menus Interface User’s Guide33Web Browser Management SessionYou can also use a web browser from a management workstation on
Chapter 17: IGMP Snooping330 Section II: Advanced OperationsPort/TrunkID - The port on the switch where a host node of the multicast group is connecte
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 331Displaying a List of Multicast RoutersA multicast router is
Chapter 17: IGMP Snooping332 Section II: Advanced Operations
Section II: Advanced Operations 333Chapter 18Denial of Service DefensesThis chapter contains procedures on how to configure the switch to protect your
Chapter 18: Denial of Service Defenses334 Section II: Advanced OperationsDenial of Service Defense OverviewThe AT-S62 management software can help pro
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 335SMURF Attack This DoS attack is instigated by an attacker se
Chapter 18: Denial of Service Defenses336 Section II: Advanced Operationswhich is connected to the device that leads outside your network. The steps b
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 337Teardrop Attack An attacker sends an IP packet in several fr
Chapter 18: Denial of Service Defenses338 Section II: Advanced OperationsNoteThis defense mechanism requires some involvement by the switch’s CPU, tho
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 339Implementing this feature requires configuring the port mirr
Chapter 1: Overview34SNMP Management SessionAnother way to remotely manage the switch is with an SNMP management program. AT-S62 software supports SNM
Chapter 18: Denial of Service Defenses340 Section II: Advanced OperationsEnabling or Disabling Denial of Service PreventionTo configure DoS defense, p
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 341The LAN IP Subnet menu is shown in Figure 114.Figure 114. LA
Chapter 18: Denial of Service Defenses342 Section II: Advanced OperationsA menu is displayed containing either one or two options, depending on the Do
Section II: Advanced Operations 343Chapter 19Power Over EthernetThis chapter contains the procedures for configuring Power over Ethernet (PoE) for the
Chapter 19: Power Over Ethernet344 Section II: Advanced OperationsPower Over Ethernet OverviewThe twisted pair ports on the AT-8524POE switch offer th
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 345PoEImplementationon theAT-8524POESwitchA standard Ethernet t
Chapter 19: Power Over Ethernet346 Section II: Advanced OperationsPortPrioritizationThis section explains port prioritization, a mechanism by which th
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 347PoE DeviceClassesThe IEEE 802.3af standard specifies four le
Chapter 19: Power Over Ethernet348 Section II: Advanced OperationsSetting the PoE ThresholdThe PoE threshold is a percentage of the total maximum PoE
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 349Options 2, Maximum Available Power, displays the maximum amo
AT-S62 Management Software Menus Interface User’s Guide35Management Access LevelsThere are two levels of management access in the AT-S62 management so
Chapter 19: Power Over Ethernet350 Section II: Advanced OperationsConfiguring PoE Port SettingsThis procedure enables and disables PoE on a port. This
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3516. To change the port’s priority, type 2 to select Power Pri
Chapter 19: Power Over Ethernet352 Section II: Advanced OperationsDisplaying PoE Status and SettingsUse this procedure to display PoE status and setti
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3531 - PoE Global Status MenuThis selection displays the follow
Chapter 19: Power Over Ethernet354 Section II: Advanced Operations2 - Summary All Ports Status MenuThis selection display an abbreviated status report
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3553 - Detailed Ports Status Menu When you select this option,
Chapter 19: Power Over Ethernet356 Section II: Advanced OperationsPower PriorityThe port priority. This can be Critical, High, or Low. For an explanat
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 3574 - PoE Device InformationThis selection displays the hardwa
Chapter 19: Power Over Ethernet358 Section II: Advanced Operations
Section II: Advanced Operations 359Chapter 20Networking StackThe AT-S62 management software allows you to perform a few basic functions on the switch’
Chapter 1: Overview36
Chapter 20: Networking Stack360 Section II: Advanced OperationsManaging the Address Resolution Protocol TableThe switch has an Address Resolution Prot
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 361NoteThe switch does not use the ARP table to move packets th
Chapter 20: Networking Stack362 Section II: Advanced OperationsThe Display ARP Table menu is shown in Figure 125.Figure 125. Display ARP Table MenuThe
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 363Deleting an ARPEntryTo delete an entry from the ARP table, p
Chapter 20: Networking Stack364 Section II: Advanced OperationsThe switch begins to add new entries to the table as it performs new management functio
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 365Displaying the Routing TableThe routing table is used by the
Chapter 20: Networking Stack366 Section II: Advanced OperationsThe information in this table is for viewing purposes only. The columns are defined her
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 367Displaying the TCP Connections TableThe TCP connections tabl
Chapter 20: Networking Stack368 Section II: Advanced OperationsThis table is for viewing purposes only. The columns in the table are defined here.Tota
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 369A web browser management session can have more than one TCP
Section I: Basic Operations 37Section IBasic OperationsThe chapters in this section cover a variety of basic switch features and functions. The chapte
Chapter 20: Networking Stack370 Section II: Advanced OperationsDeleting a TCP ConnectionThis procedure explains how you can use the TCP connections ta
AT-S62 Management Software Menus Interface User’s GuideSection II: Advanced Operations 371Displaying the TCP Global Information TableThe TCP Global In
Chapter 20: Networking Stack372 Section II: Advanced OperationsMax connectionsThe maximum number of TCP connections allowed.Active OpensThe number of
Section III: SNMPv3 373Section IIISNMPv3 OperationsThis section contains the following chapter: Chapter 21: “SNMPv3” on page 375
374 Section III: SNMPv3
Section III: SNMPv3 375Chapter 21SNMPv3This chapter provides a description of the AT-S62 implementation of the SNMPv3 protocol. In addition, it provid
Chapter 21: SNMPv3376 Section III: SNMPv3SNMPv3 OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c protocol implementation which is
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 377MIBs the user can display and modify. In addition, you can restrict the
Chapter 21: SNMPv3378 Section III: SNMPv3If you assign a DES privacy protocol to a user, then you are also required to assign a privacy password. If y
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 379In addition, you can define a MIB view that the user can access or a MIB
38 Section I: Basic Operations
Chapter 21: SNMPv3380 Section III: SNMPv3 Security Model Authentication Level Privacy Protocol GroupTo configure the SNMP security information, yo
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 381In general, you focus on configuring security groups and then add and de
Chapter 21: SNMPv3382 Section III: SNMPv3For a more detailed description of the SNMPv3 Tables, see the following subsections: “SNMPv3 User Table” on
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 383Configure SNMPv3 View Table Menu. For example, the Read View allows grou
Chapter 21: SNMPv3384 Section III: SNMPv3SNMPv3 View Table, SNMPv3 Access Table, and SNMPv3 SecurityToGroup Table. Lastly, you can configure a storage
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 385Configuring the SNMPv3 ProtocolThis section describes how to configure t
Chapter 21: SNMPv3386 Section III: SNMPv3Configuring the SNMPv3 User TableThis section contains a description of the SNMPv3 User Table and how to crea
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 387The Configure SNMPv3 Table Menu is shown in Figure 133.Figure 133. Confi
Chapter 21: SNMPv3388 Section III: SNMPv35. To create a new user table, type 1 to select Create SNMPv3 Table Entry.The following prompt is displayed:E
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 389The following prompt is displayed:Enter Privacy Protocol [D-DES, N-None]
Section I: Basic Operations 39Chapter 2Starting a Local or Telnet Management SessionThis chapter contains the procedures for starting a local or Telne
Chapter 21: SNMPv3390 Section III: SNMPv3an SNMPv3 User Table entry with a NonVolatile storage type, the S - Save Configuration Changes option appears
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 391Modifying anSNMPv3 UserTable EntryThis section describes how to modify p
Chapter 21: SNMPv3392 Section III: SNMPv34. To change the authentication protocol and password, type 1 to select Set Authentication Protocol & Pas
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 393The following prompt is displayed:Please enter privacy password to regen
Chapter 21: SNMPv3394 Section III: SNMPv3D -DESSelect this value to make the DES privacy (or encryption) protocol the privacy protocol for this User T
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 395Enter User (Security) Name:5. Enter the User Name.The following prompt i
Chapter 21: SNMPv3396 Section III: SNMPv3Configuring the SNMPv3 View TableThis section contains a description of the SNMPv3 View Table and how to crea
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 397The Configure SNMPv3 View Table Menu is shown in Figure 136.Figure 136.
Chapter 21: SNMPv3398 Section III: SNMPv3The text format is for TCP/IP is:tcpThe following prompt is displayed:Enter Subtree Mask (Hex format):6. Ente
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 399NoteThe Row Status parameter is a read-only field in the Telnet and Loca
Contents4Enabling or Disabling the Telnet Server ...
Chapter 2: Starting a Local or Telnet Management Session40 Section I: Basic OperationsLocal Management SessionTo establish a local management session,
Chapter 21: SNMPv3400 Section III: SNMPv3Modifying anSNMPv3 ViewTable EntryThis section describes how to modify parameters in an SNMPv3 Notify Table e
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4014. To modify the Subtree Mask for this view, type 1 to select Set Subtre
Chapter 21: SNMPv3402 Section III: SNMPv32. From the Configure SNMPv3 Table Menu, type 3 to select Configure SNMPv3 View Table.The Configure SNMPv3 Vi
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 403Modifying a Storage TypeTo modify the Storage Type parameter in an SNMPv
Chapter 21: SNMPv3404 Section III: SNMPv3Save Configuration Changes option appears on the Main Menu, allowing you to save your changes. 8. After makin
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 405Configuring the SNMPv3 Access TableThis section contains a description o
Chapter 21: SNMPv3406 Section III: SNMPv3The Configure SNMPv3 Access Table Menu is shown in Figure 138.Figure 138. Configure SNMPv3 Access Table Menu3
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 407NoteThe Context Prefix and the Context Match fields are a read only fiel
Chapter 21: SNMPv3408 Section III: SNMPv3this security level to encrypt messages using a privacy protocol and authenticate SNMP users. This level prov
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 409SNMPv3 Access Table to the configuration file. After making changes to a
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 41Starting a LocalManagementSessionTo start a local management sess
Chapter 21: SNMPv3410 Section III: SNMPv35. Enter the Security Model of this Group Name.Select one of the following security levels:1-v1Select this va
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 411The following prompt is displayed:8. After making changes, type R until
Chapter 21: SNMPv3412 Section III: SNMPv3The Modify SNMPv3 Access Table is shown in Figure 139.Figure 139. Modify SNMPv3 Access Table Menu4. To modify
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 413The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,
Chapter 21: SNMPv3414 Section III: SNMPv3Modifying the Write View Name To modify the Write View Name parameter in an SNMPv3 Access Table entry, perfor
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 415The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,
Chapter 21: SNMPv3416 Section III: SNMPv3Modifying the Notify View NameTo modify the Notify View Name parameter in an SNMPv3 Access Table entry, perfo
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 417The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,
Chapter 21: SNMPv3418 Section III: SNMPv3Modifying the Storage TypeTo modify the Storage Type parameter in an SNMPv3 Access Table entry, perform the f
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 419The following prompt is displayed:Enter Security Level [N-NoAuthNoPriv,
Chapter 2: Starting a Local or Telnet Management Session42 Section I: Basic Operationssettings, enter “operator” as the user name. The default passwor
Chapter 21: SNMPv3420 Section III: SNMPv3S - Save Configuration Changes option appears on the Main Menu, allowing you to save your changes. 9. After m
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 421Configuring the SNMPv3 SecurityToGroup TableThis section contains a desc
Chapter 21: SNMPv3422 Section III: SNMPv3The Configure SNMPv3 SecurityToGroup Table Menu is shown in Figure 140.Figure 140. Configure SNMPv3 SecurityT
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4233-v3Select this value to associate the Group Name with the SNMPv3 protoc
Chapter 21: SNMPv3424 Section III: SNMPv3Deleting anSNMPv3SecurityToGroupTable EntryYou may want to delete an entry from the SNMPv3 SecurityToGroup Ta
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 425The following prompt is displayed:Do you want to delete this table entry
Chapter 21: SNMPv3426 Section III: SNMPv3The Modify SecurityToGroup Table is displayed as shown Figure 140.Figure 141. Modify SNMPv3 SecurityToGroup T
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4273-v3Select this value to associate the User Name with the SNMPv3 protoco
Chapter 21: SNMPv3428 Section III: SNMPv36. Enter the Security Model configured for this User Name. You cannot change the value of the Security Model
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 429Configuring the SNMPv3 Notify TableThis section contains a description o
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 43EnhancedStackingWhen you start a local management session on a sw
Chapter 21: SNMPv3430 Section III: SNMPv3The Configure SNMPv3 Notify Table Menu is shown in Figure 142.Figure 142. Configure SNMPv3 Notify Table Menu3
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 431I-InformIndicates this notify table is used to send inform messages. Wit
Chapter 21: SNMPv3432 Section III: SNMPv3The Configure SNMPv3 Notify Table Menu is shown in Figure 142 on page 430.NoteTo display a Group Name and its
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4333. From the Configure SNMPv3 Notify Table Menu, type 3 to select Modify
Chapter 21: SNMPv3434 Section III: SNMPv3Modifying a Notify TypeTo modify the Notify Type parameter in an SNMPv3 Notify Table entry, perform the follo
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 435Modifying a Storage TypeTo modify the Storage Type parameter in an SNMPv
Chapter 21: SNMPv3436 Section III: SNMPv3Configuring the SNMPv3 Target Address TableThis section contains a description of the SNMPv3 Target Address T
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 437Creating anSNMPv3 TargetAddress TableEntryTo create an entry in the Conf
Chapter 21: SNMPv3438 Section III: SNMPv35. Enter the IP address of the host.Use the following format for an IP address:XXX.XXX.XXX.XXXThe following p
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 43910. Enter a Target Parameters name. This name can consist of up to 32-al
Chapter 2: Starting a Local or Telnet Management Session44 Section I: Basic OperationsTelnet Management SessionYou can use the Telnet application prot
Chapter 21: SNMPv3440 Section III: SNMPv3The Configure SNMPv3 Target Address Table Menu is shown in Figure 146 on page 450.NoteTo display a Group Name
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 441Modifying a Target IP AddressTo modify the target IP address in an SNMPv
Chapter 21: SNMPv3442 Section III: SNMPv3The following prompt is displayed:Enter Target Address Name:5. Enter a previously configured Target Address N
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4435. Enter a previously configured Target Address Name.This is the name of
Chapter 21: SNMPv3444 Section III: SNMPv3This is the name of the SNMP manager, or host, that manages the SNMP activity on your switch. You can enter a
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 445This is the name of the SNMP manager, or host, that manages the SNMP act
Chapter 21: SNMPv3446 Section III: SNMPv3The following prompt is displayed:Enter Tag List: Enter a Tag List of up to 256 alphanumeric characters. Use
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4476. Enter a Target Parameters Name. The value configured here must match
Chapter 21: SNMPv3448 Section III: SNMPv3V - VolatileSelect this storage type if you do not want the ability to save an entry in the SNMPv3 Target Add
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 449Configuring the SNMPv3 Target Parameters TableThis section contains a de
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 45NoteYou can run only one Telnet management session on a switch at
Chapter 21: SNMPv3450 Section III: SNMPv3 “Deleting an SNMPv3 Target Parameters Table Entry” on page 453 “Modifying an SNMPv3 Target Parameters Tabl
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 451Enter a value of up to 32-alphanumeric characters.NoteYou are prompted t
Chapter 21: SNMPv3452 Section III: SNMPv3N-NoAuthNoPrivThis option represents no authentication and no privacy protocol. Select this security level if
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4539. After making changes, type R until you return to the Main Menu. Then
Chapter 21: SNMPv3454 Section III: SNMPv3Modifying anSNMPv3 TargetParameters TableEntryThis section provides procedures for modifying parameters in an
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 455When you modify the Security Name parameter, you must use a value that y
Chapter 21: SNMPv3456 Section III: SNMPv34. To change the Security Name parameter, type 1 to select Set Security Name.The following prompt is displaye
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 457The Configure SNMPv3 Target Parameters Table Menu is shown in Figure 146
Chapter 21: SNMPv3458 Section III: SNMPv35->5->5.The Configure SNMPv3 Table Menu is shown in Figure 133 on page 387.2. From the Configure SNMPv3
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 459A-AuthNoPrivThis option represents authentication, but no privacy protoc
Chapter 2: Starting a Local or Telnet Management Session46 Section I: Basic OperationsSaving Your Parameter ChangesWhen you make a change to a switch
Chapter 21: SNMPv3460 Section III: SNMPv35. Enter a previously configured Target Parameters Name.Enter a value of up to 32-alphanumeric characters.The
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4615. Enter a previously configured Target Parameters Name.Enter a value of
Chapter 21: SNMPv3462 Section III: SNMPv3Configuring the SNMPv3 Community TableThis section contains a description of the SNMPv3 Community Table and h
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 463For each SNMPv3 Community Table entry, you can configure the following p
Chapter 21: SNMPv3464 Section III: SNMPv3The Configure SNMPv3 Community Table Menu is shown in Figure 148.Figure 148. Configure SNMPv3 Community Table
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 465The following prompt is displayed:Enter Security Name:6. Enter the name
Chapter 21: SNMPv3466 Section III: SNMPv39. After making changes, type R until you return to the Main Menu. Then type S to select Save Configuration C
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 467Modifying anSNMPv3CommunityTable EntryFor each entry in the SNMPv3 Commu
Chapter 21: SNMPv3468 Section III: SNMPv3The Modify SNMPv3 Community Table Menu is shown in Figure 149.Figure 149. Modify SNMPv3 Community Table Menu4
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 469Modifying the Security NameTo modify the Security Name parameter in an S
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 47Ports 49R and 50R on the AT-8550GB and AT-8550SP SwitchesThis sec
Chapter 21: SNMPv3470 Section III: SNMPv3The Configure SNMPv3 Table Menu is shown in Figure 133 on page 387.2. From the Configure SNMPv3 Table Menu, t
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 4713. From the Configure SNMPv3 Community Table, type 3 to select Modify SN
Chapter 21: SNMPv3472 Section III: SNMPv3Displaying SNMPv3 Table MenusThe procedures in this section describe how to display the SNMPv3 Tables. The fo
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 473The Display SNMPv3 Table Menu is shown in Figure 150.Figure 150. Display
Chapter 21: SNMPv3474 Section III: SNMPv3Displaying theDisplay SNMPv3View Table MenuThis section describes how to display the Display SNMPv3 View Tabl
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 475Displaying theDisplay SNMPv3Access TableMenuThis section describes how t
Chapter 21: SNMPv3476 Section III: SNMPv3Displaying theDisplay SNMPv3SecurityToGroupTable MenuThis section describes how to display the Display SNMPv3
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 477Displaying theDisplay SNMPv3Notify TableMenuThis section describes how t
Chapter 21: SNMPv3478 Section III: SNMPv3Displaying theDisplay SNMPv3Target AddressTable MenuThis section describes how to display the Display SNMPv3
AT-S62 Management Software Menus Interface User’s GuideSection III: SNMPv3 479Displaying theDisplay SNMPv3TargetParameters TableMenuThis section descr
Chapter 2: Starting a Local or Telnet Management Session48 Section I: Basic Operations
Chapter 21: SNMPv3480 Section III: SNMPv3Displaying theDisplay SNMPv3CommunityTable MenuThis section describes how to display the Display SNMPv3 Commu
Section IV: Spanning Tree Protocols 481Section IVSpanning Tree ProtocolsThe chapters in this section explain the spanning tree protocols. The chapters
482 Section IV: Spanning Tree Protocols
Section IV: Spanning Tree Protocols 483Chapter 22Spanning Tree and Rapid Spanning Tree ProtocolsThis chapter provides background information on the Sp
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols484 Section IV: Spanning Tree ProtocolsSTP and RSTP OverviewThe performance of a Ethernet n
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 485Bridge Priorityand the RootBridgeThe first task that bri
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols486 Section IV: Spanning Tree Protocolsthe bridge is communicating with the root bridge is
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 487Table 14 lists the RSTP port costs with Auto-Detect. Tab
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols488 Section IV: Spanning Tree ProtocolsForwarding Delay and Topology ChangesIf there is a c
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 489NoteThe forwarding delay parameter applies only to ports
Section I: Basic Operations 49Chapter 3Basic Switch ParametersThis chapter contains a variety of information and procedures. There is a discussion on
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols490 Section IV: Spanning Tree ProtocolsIf a bridge port is operating in full-duplex mode, t
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 491A port can be both a point-to-point and an edge port at
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols492 Section IV: Spanning Tree Protocolsto communicate with each other.Figure 162. VLAN Frag
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 493Enabling or Disabling a Spanning Tree ProtocolThe AT-S62
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols494 Section IV: Spanning Tree Protocols4. If you selected STP as the active spanning tree p
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 495Configuring STPThis section contains the following proce
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols496 Section IV: Spanning Tree ProtocolsThe bridge hello time, bridge forwarding, and bridge
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 497NoteThe aging time for BPDUs is different from the aging
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols498 Section IV: Spanning Tree ProtocolsThe STP Port Parameters menu is shown in Figure 165.
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 4991 - Port PriorityThis parameter is used as a tie breaker
AT-S62 Management Software Menus Interface User’s Guide5Deleting an Aggregator ...
Chapter 3: Basic Switch Parameters50 Section I: Basic OperationsWhen Does a Switch Need an IP Address?One of the tasks to building or expanding a netw
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols500 Section IV: Spanning Tree ProtocolsThe Display STP Port Configuration menu is shown in
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 501Configuring RSTPThis section contains the following proc
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols502 Section IV: Spanning Tree ProtocolsThe bridge hello time, bridge forwarding, and bridge
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 503When you select a value for maximum age, observe the fol
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols504 Section IV: Spanning Tree ProtocolsThe RSTP Port Parameters menu is shown in Figure 169
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5056. Adjust the settings as needed. The parameters are exp
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols506 Section IV: Spanning Tree Protocols3 - Display RSTP Port StateThis selection displays a
Section IV: Spanning Tree Protocols 507Chapter 23Multiple Spanning Tree ProtocolThis chapter provides background information on the Multiple Spanning
Chapter 23: Multiple Spanning Tree Protocol508 Section IV: Spanning Tree ProtocolsMSTP OverviewAs explained in the previous chapter, STP and RSTP are
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 509MultipleSpanning TreeInstance (MSTI)The individual spann
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 51How Do YouAssign an IPAddress?After you have decided which, if an
Chapter 23: Multiple Spanning Tree Protocol510 Section IV: Spanning Tree ProtocolsFigure 172 illustrates the same two AT-8524M switches and the same t
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 511A MSTI can contain more than one VLAN. This is illustrat
Chapter 23: Multiple Spanning Tree Protocol512 Section IV: Spanning Tree ProtocolsMSTI GuidelinesHere are several guidelines to keep in mind about MST
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 513two or more ports have equal costs to a regional root br
Chapter 23: Multiple Spanning Tree Protocol514 Section IV: Spanning Tree ProtocolsFigure 174 illustrates the concept of regions. It shows one MSTP reg
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 515The AT-8500 Series switch determines regional boundaries
Chapter 23: Multiple Spanning Tree Protocol516 Section IV: Spanning Tree ProtocolsCommon and Internal Spanning Tree (CIST)MSTP has a default spanning
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 517MSTP with STPand RSTPMSTP is fully compatible with STP a
Chapter 23: Multiple Spanning Tree Protocol518 Section IV: Spanning Tree Protocols The CIST must have a regional root for communicating with other re
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 519At first glance, it might appear that since both ports b
Chapter 3: Basic Switch Parameters52 Section I: Basic OperationsConfiguring an IP Address and Switch NameThe procedure in this section explains how to
Chapter 23: Multiple Spanning Tree Protocol520 Section IV: Spanning Tree Protocolsbridges in different regions. The result can be a physical loop, whi
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 521Here is an example. Let’s assume that you have two regio
Chapter 23: Multiple Spanning Tree Protocol522 Section IV: Spanning Tree ProtocolsSelecting MSTP as the Active Spanning Tree ProtocolTo select and act
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 523Configuring MSTP Bridge SettingsThis section contains th
Chapter 23: Multiple Spanning Tree Protocol524 Section IV: Spanning Tree ProtocolsThe hello time, forwarding delay, and max age parameters will have t
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5255 - Max HopsMSTP regions use this parameter to discard B
Chapter 23: Multiple Spanning Tree Protocol526 Section IV: Spanning Tree ProtocolsConfiguring the CIST PriorityThis procedure explains how to adjust t
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 527The following prompt is displayed:Enter new priority [th
Chapter 23: Multiple Spanning Tree Protocol528 Section IV: Spanning Tree ProtocolsCreating, Deleting, and Modifying MSTIsThe following procedures expl
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 529Regional Root IDIdentifies the regional root for the MST
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 53The System Configuration menu is shown in Figure 5.Figure 5. Syst
Chapter 23: Multiple Spanning Tree Protocol530 Section IV: Spanning Tree ProtocolsDeleting an MSTI To delete an MSTI, do the following:1. From the MST
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 531those VLANs you no longer want associated with the MSTI.
Chapter 23: Multiple Spanning Tree Protocol532 Section IV: Spanning Tree ProtocolsAssociating VLANs to MSTI IDsWhen you create a new MSTI, you are giv
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 533The VLAN-MSTI Association Menu is shown in Figure 181.Fi
Chapter 23: Multiple Spanning Tree Protocol534 Section IV: Spanning Tree ProtocolsA prompt similar to the following is displayed:Enter the list of VLA
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5352. Enter the ID number of the MSTI you want to associate
Chapter 23: Multiple Spanning Tree Protocol536 Section IV: Spanning Tree ProtocolsConfiguring MSTP Port SettingsAs explained in “Ports in Multiple MST
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 5372. Type 1 to select Configure Generic Port Settings.The
Chapter 23: Multiple Spanning Tree Protocol538 Section IV: Spanning Tree ProtocolsTable 18 lists the MSTP port costs with the Auto setting when the po
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 539The following prompt is displayed:Start port to configur
Chapter 3: Basic Switch Parameters54 Section I: Basic Operations3 - Subnet MaskThis parameter specifies the subnet mask for the switch. You must speci
Chapter 23: Multiple Spanning Tree Protocol540 Section IV: Spanning Tree ProtocolsTable 20 lists the MSTP port costs with Auto Update when the port is
AT-S62 Management Software Menus Interface User’s GuideSection IV: Spanning Tree Protocols 541Displaying MSTP Port Settings and StatusThe MSTP Port Pa
Chapter 23: Multiple Spanning Tree Protocol542 Section IV: Spanning Tree Protocols
Section V: Virtual LANs 543Section VVirtual LANsThe chapters in this section explain virtual LANs (VLANs). The chapters include: Chapter 24: “Port-ba
544 Section V: Virtual LANs
Section V: VLANs 545Chapter 24 Port-based and Tagged Virtual LANsThis chapter contains background information on port-based and tagged virtual LANs (V
Chapter 24: Port-based and Tagged Virtual LANs546 Section V: VLANsVLAN OverviewA VLAN is a group of ports on an Ethernet switch that form a logical Et
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 547management software. VLAN memberships can be changed any time through the m
Chapter 24: Port-based and Tagged Virtual LANs548 Section V: VLANsPort-based VLAN OverviewAs explained in the “VLAN Overview” on page 546, a VLAN cons
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 549If a VLAN spans multiple switches, then the VID for the VLAN on the differe
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 55Activating the BOOTP or DHCP Client SoftwareThe BOOTP and DHCP ap
Chapter 24: Port-based and Tagged Virtual LANs550 Section V: VLANsautomatically assigns a PVID to a port, making it identical to the VID of the VLAN t
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 551Port-basedExample 1Figure 185 illustrates an example of one AT-8524M Fast E
Chapter 24: Port-based and Tagged Virtual LANs552 Section V: VLANsEach VLAN has been assigned a unique VID. You assign this number when you create a V
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 553Port-basedExample 2Figure 186 illustrates more port-based VLANs. In this ex
Chapter 24: Port-based and Tagged Virtual LANs554 Section V: VLANsThe table below lists the port assignments for the Sales, Engineering, and Productio
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 555Tagged VLAN OverviewThe second type of user-configured VLAN is the tagged V
Chapter 24: Port-based and Tagged Virtual LANs556 Section V: VLANsNoteFor an explanation of VLAN name and VLAN identifier, refer back to VLAN Name and
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 557Tagged VLANExampleFigure 187 illustrates how tagged ports can be used to in
Chapter 24: Port-based and Tagged Virtual LANs558 Section V: VLANsThe port assignments for the VLANs are as follows:This example is nearly identical t
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 559Creating a Port-based or Tagged VLANTo create a new port-based or tagged VL
Chapter 3: Basic Switch Parameters56 Section I: Basic OperationsTo activate or deactivate the BOOTP or DHCP client software, perform the following pro
Chapter 24: Port-based and Tagged Virtual LANs560 Section V: VLANsThe Configure VLANs menu is shown in Figure 189.Figure 189. Configure VLANs Menu3. F
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 561multiple switches, then the name for the VLAN should be the same on each sw
Chapter 24: Port-based and Tagged Virtual LANs562 Section V: VLANs A port set to the 802.1x authenticator or supplicant role must be changed to the 8
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 563Example of Creating a Port-based VLANThe following procedure creates the Sa
Chapter 24: Port-based and Tagged Virtual LANs564 Section V: VLANsExample of Creating a Tagged VLANThe following procedure creates the Engineering VLA
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 565Modifying a VLANYou can use this procedure to add or remove ports from a po
Chapter 24: Port-based and Tagged Virtual LANs566 Section V: VLANsThe following prompt is displayed:Enter new value -> [1 to 4096] ->5. Enter th
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5673 - Tagged PortsUse this selection to add or remove tagged ports from the V
Chapter 24: Port-based and Tagged Virtual LANs568 Section V: VLANsAny untagged ports removed from a VLAN are automatically returned to the Default_VLA
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 569Displaying VLANsTo view the name, VID number, and member ports of all the V
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 57Rebooting a SwitchThis procedure reboots the switch.NoteAny confi
Chapter 24: Port-based and Tagged Virtual LANs570 Section V: VLANsVLAN TypeThe VLAN type. The possible settings are:Port Based - The VLAN is a port-ba
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 571Deleting a VLANThis procedure deletes port-based and tagged VLANs from the
Chapter 24: Port-based and Tagged Virtual LANs572 Section V: VLANs5. Enter the VID of the VLAN you want to delete. You can specify only one VID at a t
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5738. Press any key.9. Repeat this procedure starting with Step 4 to delete ot
Chapter 24: Port-based and Tagged Virtual LANs574 Section V: VLANsDeleting All VLANsThis section contains the procedure for deleting all port-based an
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5756. After making changes, type R until you return to the Main Menu. Then typ
Chapter 24: Port-based and Tagged Virtual LANs576 Section V: VLANsDisplaying PVIDsThe following procedure displays a menu that lists the PVIDs for all
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 577Enabling or Disabling Ingress FilteringThere are rules a switch follows whe
Chapter 24: Port-based and Tagged Virtual LANs578 Section V: VLANstagged frame, without regard to the status of ingress filtering.You can enable or di
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 579Specifying a Management VLANThe management VLAN is the VLAN on which an AT-
Chapter 3: Basic Switch Parameters58 Section I: Basic OperationsConfiguring the Manager and Operator PasswordsThere are two levels of management acces
Chapter 24: Port-based and Tagged Virtual LANs580 Section V: VLANsNow assume that you decide to create a VLAN called NMS with a VID of 24 for the sole
Section V: VLANs 581Chapter 25GARP VLAN Registration ProtocolThis chapter describes the GARP VLAN Registration Protocol (GVRP). It contains the follow
Chapter 25: GARP VLAN Registration Protocol582 Section V: VLANsBasic Overview of GARP VLAN Registration Protocol (GVRP)The GARP VLAN Registration Prot
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 583Figure 197 provides an example of how GVRP works.Figure 197. GVRP Example S
Chapter 25: GARP VLAN Registration Protocol584 Section V: VLANs3. Switch #2 sends a PDU out port 15 containing all of the VIDs of the VLANs on the swi
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 585switches can result in GVRP incompatibility problems. You can convert dyna
Chapter 25: GARP VLAN Registration Protocol586 Section V: VLANsGVRP-inactiveIntermediateSwitchesThe presence of a GVRP-inactive switch between GVRP-ac
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 587Technical Overview of Generic Attribute Registration Protocol (GARP)The pur
Chapter 25: GARP VLAN Registration Protocol588 Section V: VLANsThe architecture of GARP is shown in Figure 198. Figure 198. GARP Architecture The GARP
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 589Applicant and Registrar. This is shown in Figure 199.Figure 199. GID Archit
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 594. Type 1 to change the Manager password or type 2 to change the
Chapter 25: GARP VLAN Registration Protocol590 Section V: VLANsTo control the Applicant state machine, an Applicant Administrative Control parameter i
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 591Configuring GVRPThis section contains the procedure for configuring GVRP. T
Chapter 25: GARP VLAN Registration Protocol592 Section V: VLANsThe following prompt is displayed:Enter your new value (E-Enabled, D-Disabled):6. Choos
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 593Enabling or Disabling GVRP on a PortThis procedure enables and disables GVR
Chapter 25: GARP VLAN Registration Protocol594 Section V: VLANsThe Configure GVRP Port Settings Menu is shown in Figure 202.Figure 202. Configure GVRP
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 5959. After making changes, type R until you return to the Main Menu. Then typ
Chapter 25: GARP VLAN Registration Protocol596 Section V: VLANsConverting a Dynamic GVRP VLANThis procedure converts a dynamic GVRP VLAN into a static
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 597Displaying GVRP Parameters and StatisticsTo display GVRP counters, database
Chapter 25: GARP VLAN Registration Protocol598 Section V: VLANsGVRP Counters Option 1 - Display GVRP Counters in the Other GARP Port Parameters displa
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 599Figure 206. GVRP Counters Menu (page 2)The GVRP counters in the menus are d
Contents6Chapter 13: Classifiers ...
Chapter 3: Basic Switch Parameters60 Section I: Basic Operations2. Reboot the switch. For instructions, refer to “Rebooting a Switch” on page 57.3. Wh
Chapter 25: GARP VLAN Registration Protocol600 Section V: VLANsReceive Discarded: Port Not ListeningNumber of GARP PDUs discarded because the port tha
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 601Receive GARP Messages: LeaveEmptyTotal number of GARP LeaveEmpty messages r
Chapter 25: GARP VLAN Registration Protocol602 Section V: VLANsGVRP Database Option 2 - Display GVRP Database in the Other GARP Port Parameters displa
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 603GIP ConnectedPorts RingOption 3 - Display GIP Connected Ports Ring in the O
Chapter 25: GARP VLAN Registration Protocol604 Section V: VLANsGVRP StateMachineOption 4 - Display GVRP State Machine in the Other GARP Port Parameter
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 605App Applicant state machine for the GID index on that particular port. One
Chapter 25: GARP VLAN Registration Protocol606 Section V: VLANsReg Registrar state machine for the GID index on that particular port. One of:“Mt” Empt
Section V: VLANs 607Chapter 26 Multiple VLAN ModesThis chapter describes the multiple VLAN modes and how to select a mode.This chapter contains the fo
Chapter 26: Multiple VLAN Modes608 Section V: VLANsMultiple VLAN Mode OverviewMultiple VLAN modes simplify the task of configuring the switch in netwo
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 609WAN. This port is placed as a tagged port in each VLAN. Thus, while the swi
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 61Setting the System TimeThis procedure explains how to set the swi
Chapter 26: Multiple VLAN Modes610 Section V: VLANsThis highly segmented configuration is useful in situations where traffic generated by each end nod
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 611Non-802.1QCompliantMultiple VLANModeUnlike the 802.1Q-compliant VLAN mode,
Chapter 26: Multiple VLAN Modes612 Section V: VLANsSelecting a VLAN ModeThe following procedure explains how to select a VLAN mode. Available modes ar
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 613Displaying VLAN InformationTo view the VLANs on the switch while the unit i
Chapter 26: Multiple VLAN Modes614 Section V: VLANs
Section V: VLANs 615Chapter 27 Protected Ports VLANsThis chapter explains protected ports VLANs. It contains the following sections: “Protected Port
Chapter 27: Protected Ports VLANs616 Section V: VLANsProtected Ports VLAN OverviewThe purpose of a protected ports VLAN is to allow multiple ports on
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 617To create a protected ports VLAN, you perform many of the same steps that y
Chapter 27: Protected Ports VLANs618 Section V: VLANs A protected ports VLAN can contain any number of groups. A group can contain any number of por
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 619Creating a Protected Ports VLANTo create a new protected ports VLAN, perfor
Chapter 3: Basic Switch Parameters62 Section I: Basic OperationsThe Configure System Time menu is shown in Figure 8.Figure 8. Configure System Time Me
Chapter 27: Protected Ports VLANs620 Section V: VLANsNoteA VLAN must be assigned a name.6. Type 2 to select VLAN ID (VID.The following prompt is displ
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 62112. Type C to select Create VLAN.The following prompt is displayed:Enter Up
Chapter 27: Protected Ports VLANs622 Section V: VLANsModifying a Protected Ports VLANPlease note the following before you perform this procedure: To
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 623The Modify VLAN Menu is shown in Figure 191 on page 565.4. Type 1 to select
Chapter 27: Protected Ports VLANs624 Section V: VLANs3 - Tagged PortsUse this selection to add or remove tagged ports from the VLAN. You can specify t
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 625After you have created all of the groups, this prompt is displayed:SUCCESS
Chapter 27: Protected Ports VLANs626 Section V: VLANsDisplaying a Protected Port VLANTo view the name, VID number, and member ports of all the VLANs o
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 627Untagged (U) / Tagged (T) - The ports of the VLAN. Tagged ports are designa
Chapter 27: Protected Ports VLANs628 Section V: VLANsDeleting a Protected Ports VLANAll untagged ports in a deleted protected ports VLAN are automatic
AT-S62 Management Software Menus Interface User’s GuideSection V: VLANs 629NoteYou cannot delete the Default_VLAN, which has a VID of 1.The Delete VLA
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 63NoteIf the switch is obtaining its IP address and subnet mask fro
Chapter 27: Protected Ports VLANs630 Section V: VLANs9. Repeat this procedure starting with Step 4 to delete other VLANs.10. After making changes, typ
Section VI: Port Security 631Section VIPort SecurityThe chapters in this section explain the port security features of the AT-8524M switch The chapter
632 Section VI: Port Security
Section VI: Port Security 633Chapter 28MAC Address-based Port SecurityThis chapter explains how you can use the dynamic and static MAC addresses learn
Chapter 28: MAC Address-based Port Security634 Section VI: Port SecurityMAC Address-based Port Security OverviewThis feature can enhance the security
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 635Secured A port set to this security level forwards packets only us
Chapter 28: MAC Address-based Port Security636 Section VI: Port Security Discard the invalid frame and send an SNMP trap. (SNMP must be enabled on th
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 637Configuring MAC Address-based Port SecurityTo set the port securit
Chapter 28: MAC Address-based Port Security638 Section VI: Port SecurityThe menu displays the current security level on the selected port. If you are
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 639Figure 220. Configure Port Security Menu #28. If you selected the
Chapter 3: Basic Switch Parameters64 Section I: Basic Operationsg. Type 6 - Poll Interval to specify the time interval between queries to the SNTP ser
Chapter 28: MAC Address-based Port Security640 Section VI: Port Security10. If you selected the trap or disable intrusion action, type 4 to toggle the
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 641Displaying Port Security LevelsTo view the current security levels
Chapter 28: MAC Address-based Port Security642 Section VI: Port SecurityIntruder ActionThe column specifies the action taken by a port if it receives
Section VI: Port Security 643Chapter 29802.1x Port-based Network Access ControlThis chapter explains 802.1x Port-based Network Access Control and how
Chapter 29: 802.1x Port-based Network Access Control644 Section VI: Port SecurityIEEE 802.1x Port-based Network Access Control OverviewThe AT-S62 mana
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 645 Authenticator - The authenticator is a port on the switch that p
Chapter 29: 802.1x Port-based Network Access Control646 Section VI: Port SecurityPort Roles Part of the task of implementing this feature is specifyin
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 647authentication is not tied to any specific computer or node. An en
Chapter 29: 802.1x Port-based Network Access Control648 Section VI: Port Security Force-unauthorized - Causes the port to remain in the unauthorized
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 649AuthenticatorPorts with Singleand MultipleSupplicantsAn authentica
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 65Configuring the Console Startup ModeYou can configure the AT-S62
Chapter 29: 802.1x Port-based Network Access Control650 Section VI: Port SecurityFigure 223. Authenticator Port in Single Operating Mode with a Single
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 651Figure 224. Single Operating Mode with Multiple Clients Using the
Chapter 29: 802.1x Port-based Network Access Control652 Section VI: Port SecurityIf the clients are connected to an 802.1x-compliant device, such as a
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 653Figure 226. Single Operating Mode with Multiple Clients Using the
Chapter 29: 802.1x Port-based Network Access Control654 Section VI: Port SecurityAn example of this authenticator operating mode is illustrated in Fig
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 655not be logged on to the port.Also note that the ports where the cl
Chapter 29: 802.1x Port-based Network Access Control656 Section VI: Port SecurityProviding network users with access to their network resources while
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 657Multiple Operating ModeThe initial authentication on an authentica
Chapter 29: 802.1x Port-based Network Access Control658 Section VI: Port SecurityNoteThe Guest VLAN feature is only supported on an authenticator port
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 659General Steps Following are the general steps to implementing 802.
Chapter 3: Basic Switch Parameters66 Section I: Basic OperationsConfiguring the Console TimerThe AT-S62 management software uses the console timer, al
Chapter 29: 802.1x Port-based Network Access Control660 Section VI: Port Security802.1x Port-basedNetwork AccessControlGuidelinesThe following are gen
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 661 An authenticator port cannot be part of a static port trunk, LAC
Chapter 29: 802.1x Port-based Network Access Control662 Section VI: Port SecuritySetting Port RolesThis procedure sets port roles. For an explanation
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 663The Configure Port Access Role menu is shown in Figure 230.Figure
Chapter 29: 802.1x Port-based Network Access Control664 Section VI: Port SecurityEnabling and Disabling 802.1x Port-based Network Access ControlThis p
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 665Configuring Authenticator Port ParametersNoteA port must already b
Chapter 29: 802.1x Port-based Network Access Control666 Section VI: Port SecurityThe Configure Authenticator Port Access Parameters menu is shown in F
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 6671 - Supplicant ModeThis parameter can take the following values on
Chapter 29: 802.1x Port-based Network Access Control668 Section VI: Port Security3 - Quiet PeriodThe quiet period is the number of seconds that the po
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 669For additional information, refer to “Supplicant and VLAN Associat
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 67Enabling or Disabling the Telnet ServerThis procedure explains ho
Chapter 29: 802.1x Port-based Network Access Control670 Section VI: Port SecurityD - Piggyback ModeThis parameter controls who can use the switch port
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 671Configuring Supplicant Port ParametersTo configure supplicant port
Chapter 29: 802.1x Port-based Network Access Control672 Section VI: Port SecurityThe Configure Supplicant Port Access Parameters menu is shown in Figu
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 673characters, such as asterisks or exclamation points. The username
Chapter 29: 802.1x Port-based Network Access Control674 Section VI: Port SecurityDisplaying the Port Access ParametersTo display the port access param
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 675AuthModeThe port’s authentication mode: 802.1x or MAC Based. For f
Chapter 29: 802.1x Port-based Network Access Control676 Section VI: Port SecurityConfiguring RADIUS AccountingThe AT-S62 management software supports
AT-S62 Management Software Menus Interface User’s GuideSection VI: Port Security 6774. Adjust the following parameters as necessary.1 - StatusThis par
Chapter 29: 802.1x Port-based Network Access Control678 Section VI: Port Security
Section VII: Management Security 679Section VIIManagement SecurityThe chapters in this section explain the management security features of the AT-S62
Chapter 3: Basic Switch Parameters68 Section I: Basic OperationsSetting the Baud Rate of the RS-232 Terminal PortThe default baud rate of the RS-232 T
680 Section VII: Management Security
Section VII: Management Security 681Chapter 30Web ServerThe chapter provides an overview of the web server feature and the procedure for configuring t
Chapter 30: Web Server682 Section VII: Management SecurityWeb Server OverviewThe AT-S62 management software comes with web server software so you can
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 683Configuring the Web ServerThis procedure explains how to en
Chapter 30: Web Server684 Section VII: Management SecurityMenu option 4 is displayed only for HTTPS operation. The option is hidden for HTTP.3. Type 1
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 685General Steps to Configuring the Web Server for EncryptionT
Chapter 30: Web Server686 Section VII: Management Security6. Once you have received the appropriate certificates from the CA, download them into the A
Section VII: Management Security 687Chapter 31Encryption KeysThis chapter describes how to improve the security of your switches with encryption keys.
Chapter 31: Encryption Keys688 Section VII: Management SecurityBasic OverviewProtecting your managed switches from unauthorized management access is a
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 689Encryption KeyLengthTo create a key pair, you must specify
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 69Setting Fan ControlThe AT-8524POE switch has a fan control featur
Chapter 31: Encryption Keys690 Section VII: Management SecurityTechnical OverviewThe encryption feature provides the following data security services:
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 691algorithm and key. For a given input block of plaintext ECB
Chapter 31: Encryption Keys692 Section VII: Management Securitypublic and private key pair cannot be randomly assigned, but must be generated together
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 693The two most commonly used one-way hash algorithms are MD5
Chapter 31: Encryption Keys694 Section VII: Management SecurityThe security of the Diffie-Hellman algorithm depends on these values. Public key values
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 695Creating an Encryption KeyThis section contains the procedu
Chapter 31: Encryption Keys696 Section VII: Management SecurityThe Key Management menu is shown in Figure 239.Figure 239. Key Management MenuThis menu
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 697The Create Key menu is shown in Figure 240.Figure 240. Crea
Chapter 31: Encryption Keys698 Section VII: Management Security9. Type 4 to create a key description.The following prompt is displayed:Enter new Descr
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 699Deleting an Encryption KeyThis section contains the procedu
AT-S62 Management Software Menus Interface User’s Guide7Mapping CoS Priorities to Egress Queues ...
Chapter 3: Basic Switch Parameters70 Section I: Basic OperationsThe Fan Control Configuration menu is shown in Figure 10.Figure 10. Fan Control Config
Chapter 31: Encryption Keys700 Section VII: Management SecurityModifying an Encryption KeyThe Key Management menu has a selection for modifying the de
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 701Exporting an Encryption KeyThe following procedure exports
Chapter 31: Encryption Keys702 Section VII: Management SecurityNoteKey Type is a read-only field. You cannot change this value.3. Type 3 to toggle Key
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 703Importing an Encryption KeyUse the following procedure to i
Chapter 31: Encryption Keys704 Section VII: Management Security3. Type 3 to select Key File Format to choose the format of the key. Selections are:HEX
Section VII: Management Security 705Chapter 32PKI Certificates and SSLThis chapter contains the procedures for creating Public Key Infrastructure (PKI
Chapter 32: PKI Certificates and SSL706 Section VII: Management SecurityBasic OverviewThis chapter explains how to implement encryption for your web b
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 707general use, but will only be used by you and other network
Chapter 32: PKI Certificates and SSL708 Section VII: Management SecurityYou cannot use quotation marks. To use the following special characters {=,+&l
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 709SSL andEnhancedStackingSecure Sockets Layer (SSL) is suppor
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 71Figure 11 illustrates the fan control information.Figure 11. Show
Chapter 32: PKI Certificates and SSL710 Section VII: Management SecurityGuidelines Here are guidelines to creating certificates: A certificate can ha
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 711Technical OverviewThe Secure Sockets Layer (SSL) feature is
Chapter 32: PKI Certificates and SSL712 Section VII: Management SecuritySSL uses asymmetrical (Public Key) encryption to establish a connection betwee
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 713To verify the authenticity of a server, the server has a pu
Chapter 32: PKI Certificates and SSL714 Section VII: Management Securitythis, and other attacks, PKI provides a means for secure transfer of public ke
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 715Elements of aPublic KeyInfrastructureA Public Key Infrastru
Chapter 32: PKI Certificates and SSL716 Section VII: Management Securityto be the root CA. This CA issues certificates to the next level down in the h
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 717PKI StandardsThe following standards are supported by the s
Chapter 32: PKI Certificates and SSL718 Section VII: Management SecurityCreating a Self-signed CertificateThis section contains the procedure for crea
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 719The Public Key Infrastructure (PKI) Configuration menu is s
Chapter 3: Basic Switch Parameters72 Section I: Basic OperationsPinging a Remote SystemYou can instruct the switch to ping a remote device on your net
Chapter 32: PKI Certificates and SSL720 Section VII: Management SecurityNoteIn the X509 Certificate Management Menu, MTrust means manually trusted. Th
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7219. Enter the ID number of the encryption key you want to us
Chapter 32: PKI Certificates and SSL722 Section VII: Management SecurityAdding a Certificate to the DatabaseOnce you have created a certificate or rec
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7236. Type 1 to select Certificate Name and enter a name for t
Chapter 32: PKI Certificates and SSL724 Section VII: Management Security10. Type 5 to select Add Certificate to add the certificate to the certificate
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 725Modifying a CertificateThe procedure in this section modifi
Chapter 32: PKI Certificates and SSL726 Section VII: Management Security3. Type 2 to select State and specify if a certificate is trusted or untrusted
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 727Deleting a CertificateThe procedure in this section deletes
Chapter 32: PKI Certificates and SSL728 Section VII: Management SecurityViewing a CertificateThis procedure displays information about a certificate,
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 729The View Certificate Details menu (page 2) is shown in Figu
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 73Returning the AT-S62 Software to the Factory Default ValuesThere
Chapter 32: PKI Certificates and SSL730 Section VII: Management SecurityGenerating an Enrollment RequestTo request a certificate from a public or priv
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7315. From the Public Key Infrastructure (PKI) Configuration M
Chapter 32: PKI Certificates and SSL732 Section VII: Management SecurityPEM - Creates the certificate in the Privacy Enhanced Mail (PEM) format, which
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 733Installing CA Certificates onto a SwitchThis section lists
Chapter 32: PKI Certificates and SSL734 Section VII: Management SecurityConfiguring PKIOption 1 - Maximum Number of Certificates in the Public Key Inf
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 735Configuring SSLTo configure the SSL protocol, perform the f
Chapter 32: PKI Certificates and SSL736 Section VII: Management Security
Section VII: Management Security 737Chapter 33Secure Shell (SSH) ProtocolThe chapter contains overview information about the Secure Shell (SSH) protoc
Chapter 33: Secure Shell (SSH) Protocol738 Section VII: Management SecuritySSH OverviewSecure management is increasingly important in modern networks,
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 739 Tunnelling of TCP/IP traffic NoteNon-encrypted Secure She
Chapter 3: Basic Switch Parameters74 Section I: Basic OperationsThe following prompt is displayed:This operation requires a switch reboot. Continue? [
Chapter 33: Secure Shell (SSH) Protocol740 Section VII: Management SecuritySSH andEnhancedStackingThe AT-S62 management software allows for encrypted
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 741Guidelines Below are the guidelines to observe when configu
Chapter 33: Secure Shell (SSH) Protocol742 Section VII: Management SecurityConfiguring the SSH ServerThis section describes how to configure the SSH s
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7433. Select 1 - SSH Server Status to enable or disable the SS
Chapter 33: Secure Shell (SSH) Protocol744 Section VII: Management SecurityDisplaying SSH InformationTo display SSH server information, perform the fo
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 745 Host Key ID: Indicates the host key ID defined for SSH.
Chapter 33: Secure Shell (SSH) Protocol746 Section VII: Management Security
Section VII: Management Security 747Chapter 34TACACS+ and RADIUS Authentication ProtocolsThis chapter explains how to configure the parameter settings
Chapter 34: TACACS+ and RADIUS Authentication Protocols748 Section VII: Management SecurityTACACS+ and RADIUS OverviewTACACS+ and RADIUS are authentic
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 749If the combination is valid, the authentication protocol se
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 75 The current speed setting of the RS232 console port on the swit
Chapter 34: TACACS+ and RADIUS Authentication Protocols750 Section VII: Management Securitypassword up to 16 characters. Spaces are allowed in both a
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 751defaults to the standard manager and operator accounts.Note
Chapter 34: TACACS+ and RADIUS Authentication Protocols752 Section VII: Management SecurityConfiguring TACACS+ Authentication Protocol SettingsTo conf
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7535. To configure the TACACS+ parameters, type 3 to select TA
Chapter 34: TACACS+ and RADIUS Authentication Protocols754 Section VII: Management Security5 - TAC TimeoutThis parameter specifies the maximum amount
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 755Configuring RADIUS Authentication Protocol SettingsTo confi
Chapter 34: TACACS+ and RADIUS Authentication Protocols756 Section VII: Management SecurityThe RADIUS Client Configuration menu is shown in Figure 257
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 757Figure 258. RADIUS Server ConfigurationThe parameters are d
Chapter 34: TACACS+ and RADIUS Authentication Protocols758 Section VII: Management SecurityDisplaying RADIUS Status and SettingsThe RADIUS Client Conf
Section VII: Management Security 759Chapter 35Management Access Control ListThis chapter explains how to create an access control list (ACL) to restri
Chapter 3: Basic Switch Parameters76 Section I: Basic OperationsViewing System Hardware and Software InformationThe procedure in this section displays
Chapter 35: Management Access Control List760 Section VII: Management SecurityManagement ACL Security OverviewThis chapter explains how to restrict re
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 761corresponding bit of the address, while a “0” indicates tha
Chapter 35: Management Access Control List762 Section VII: Management SecurityExamples Following are several examples of ACEs.This ACE allows the mana
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 763The two ACEs in this management ACL permit remote managemen
Chapter 35: Management Access Control List764 Section VII: Management SecurityEnabling or Disabling the Management ACLThis procedure enables and disab
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 765A change to the status of the management ACL is immediately
Chapter 35: Management Access Control List766 Section VII: Management SecurityCreating an ACETo create a new ACE in the management ACL, perform the fo
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 767 Telnet - Permits Telnet management. Web - Permits web br
Chapter 35: Management Access Control List768 Section VII: Management SecurityModifying an ACETo modify an ACE, you need to know its identification nu
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 7695. Make the desired changes to the entry by selecting the c
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 77The System Hardware Information menu is shown in Figure 13.Figure
Chapter 35: Management Access Control List770 Section VII: Management SecurityDeleting an ACETo delete an ACE, you need to know its identification num
AT-S62 Management Software Menus Interface User’s GuideSection VII: Management Security 771Displaying the ACEsTo display the ACEs in the management AC
Chapter 35: Management Access Control List772 Section VII: Management Security
Section VIII: Management Security 773Appendix AAT-S62 Default SettingsThis appendix lists the AT-S62 factory default settings. It contains the followi
Appendix A: AT-S62 Default Settings774Basic Switch Default SettingsThis section lists the default settings for basic switch parameters. The following
AT-S62 Management Software Menus Interface User’s Guide775NoteLogin names and passwords are case-sensitive.RS-232 PortDefault SettingsThe following ta
Appendix A: AT-S62 Default Settings776System SoftwareDefault SettingsThe following table lists the system software default settings.AT-8524POE FanCont
AT-S62 Management Software Menus Interface User’s Guide777Denial of Service Defense Default SettingsThe following table lists the default settings for
Appendix A: AT-S62 Default Settings778Enhanced Stacking Default SettingThe following table lists the enhanced stacking default setting.Enhanced Stacki
AT-S62 Management Software Menus Interface User’s Guide779Event Log Default SettingsThe following table lists the event log default settings.Event Log
Chapter 3: Basic Switch Parameters78 Section I: Basic Operations
Appendix A: AT-S62 Default Settings780GVRP Default SettingsThis section provides the default settings for GVRP.GVRP Setting DefaultStatus DisabledGIP
AT-S62 Management Software Menus Interface User’s Guide781IGMP Snooping Default SettingsThe following table lists the IGMP Snooping default settings.I
Appendix A: AT-S62 Default Settings782MAC Address-based Security Default SettingsThe following table lists the MAC address security default settings.M
AT-S62 Management Software Menus Interface User’s Guide783Management Access Control List Default SettingThe following table lists the default setting
Appendix A: AT-S62 Default Settings784PKI Default SettingsThe following table lists the PKI default settings, including the generate enrollment reques
AT-S62 Management Software Menus Interface User’s Guide785Port Configuration Default SettingsThe following table lists the port configuration default
Appendix A: AT-S62 Default Settings786802.1x Port-Based Network Access Control Default SettingsThe following table describes the 802.1x Port Access Co
AT-S62 Management Software Menus Interface User’s Guide787The following table lists the default settings for a supplicant port.VLAN Assignment Enabled
Appendix A: AT-S62 Default Settings788Power Over EthernetThe following table describes the Power over Ethernet (PoE) default settings. This feature on
AT-S62 Management Software Menus Interface User’s Guide789Class of ServiceThe following table lists the default mappings of IEEE 802.1p priority level
Section I: Basic Operations 79Chapter 4Enhanced StackingThis chapter explains the enhanced stacking feature. The sections in this chapter include: “E
Appendix A: AT-S62 Default Settings790Server-Based Authentication Default SettingsThis section describes the server-based authentication, RADIUS, and
AT-S62 Management Software Menus Interface User’s Guide791SNMP Default SettingsThe following table describes the SNMPv1 and SNMPv2c default settings.S
Appendix A: AT-S62 Default Settings792STP, RSTP, and MSTP Default SettingsThis section provides the spanning tree, STP RSTP, and MSTP, default setting
AT-S62 Management Software Menus Interface User’s Guide793MSTP DefaultSettingsThe following table lists the MSTP default settings.MSTP Setting Default
Appendix A: AT-S62 Default Settings794SSH Default SettingsThe following table lists the SSH default settings.SSH Setting DefaultStatus DisabledHost Ke
AT-S62 Management Software Menus Interface User’s Guide795SSL Default SettingsThe following table lists the SSL default settings.SSL Setting DefaultMa
Appendix A: AT-S62 Default Settings796VLAN Default SettingsThis section provides VLAN default settings.VLAN Setting DefaultDefault VLAN Name Default_V
AT-S62 Management Software Menus Interface User’s Guide797Web Server Default SettingsThe following table lists the web server default settings.Web Ser
Appendix A: AT-S62 Default Settings798
799Appendix BSNMPv3 Configuration ExamplesThis appendix provides two examples of SNMPv3 configuration using the SNMPv3 Table menus and a worksheet to
Contents8Creating an SNMPv3 User Table Entry...386Del
Chapter 4: Enhanced Stacking80 Section I: Basic OperationsEnhanced Stacking OverviewThe enhanced stacking feature can make it easier for you to manage
Appendix B: SNMPv3 Configuration Examples800SNMPv3 Configuration Examples This appendix provides SNMPv3 configuration examples for the following type
AT-S62 Management Software Menus Interface User’s Guide801Configure SNMPv3 SecurityToGroup TableUser Name:systemadmin24Security Model:v3Group Name: Ma
Appendix B: SNMPv3 Configuration Examples802Configure SNMPv3 View Table Menu View Name: internetView Subtree OID: 1.3.6.1 (or internet)Subtree Mask: V
AT-S62 Management Software Menus Interface User’s Guide803Security ModelSecurity LevelRead View NameWrite View NameNotify View NameStorage TypeSNMPv3
Appendix B: SNMPv3 Configuration Examples804Security ModelSecurity LevelStorage TypeSNMPv3 Parameters (Continued)
805Appendix CStandards and Features10/100Base-TX Twisted Pair PortsIEEE 802.1d BridgingIEEE 802.3 10Base-TIEEE 802.3u 100Base-TXIEEE 802.3u Auto-Negot
Appendix C: Standards and Features806— Type of Service Replacement— Type of Service to 802.1q Priority Replacement— 802.1q Priority to Type of Service
AT-S62 Management Software Menus Interface User’s Guide807IEEE 802.3ac VLAN Tag Frame ExtensionIEEE 802.1P GARP VLAN Registration ProtocolIP Multicast
Appendix C: Standards and Features808— Encryption Keys— Secure Shell (SSH) (Vers. 1.3, 1.5, 2.0)— Management Access Control ListManagement MIBsRFC 121
AT-S62 Management Software Menus Interface User’s Guide809— MAC address table with a storage capacity of 8K entries— 2 megabyte file systemDenial of S
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 81There are three basic steps to implementing this feature on your
Appendix C: Standards and Features810
811IndexNumerics802.1x Port-based Network Access Controlaccess role, configuring 662authentication process 645authenticator portconfiguring 665describ
Index812editing 182overview 176selecting 179selecting active 179Boot Protocol (BootP)activating 55deactivating 55default setting 775defined 55BPDU. Se
AT-S62 Management Software Menus Interface User’s Guide813data encryption, described 690daylight savings time (DST)default setting 775setting 63defaul
Index814displayingGVRP state machine 604parameters 597statistics 597enabling on a port 593GIP connected ports ring 603guidelines 584GVRP counters 598G
AT-S62 Management Software Menus Interface User’s Guide815displaying status 161enabling or disabling protocol 154guidelines 143modifying aggregator 15
Index816deleting 530list 528modifying 530removing a VLAN association 534port priority 528Multiple Spanning Tree Protocol (MSTP)activating 522associati
AT-S62 Management Software Menus Interface User’s Guide817port mirrorcreating 167deleting 169destination port 166source port 166port mirroring, descri
Index818bridge max age 502bridge parameters, configuring 501bridge priority 502default settings 792disabling 493edge port, configuring 505enabling 493
AT-S62 Management Software Menus Interface User’s Guide819deleting 409displaying 475modifyingnotify view 416read view 411storage type 418write view na
Chapter 4: Enhanced Stacking82 Section I: Basic OperationsFigure 14 is an example of the enhanced stacking feature.Figure 14. Enhanced Stacking Exampl
Index820port settings, configuring 497port settings, displaying 499spanning tree, default setting 792SSH server status parameter 743SSH. See Secure S
AT-S62 Management Software Menus Interface User’s Guide821Vversions supported (SSH) parameter 744VID. See VLAN IDview type, modifying 401virtual LAN (
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 83Setting a Switch’s Enhanced Stacking StatusThe enhanced stacking
Chapter 4: Enhanced Stacking84 Section I: Basic OperationsThe Enhanced Stacking menu is shown in Figure 15.Figure 15. Enhanced Stacking MenuThe menu d
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 85Selecting a Switch in an Enhanced StackBefore you perform a proce
Chapter 4: Enhanced Stacking86 Section I: Basic Operations3. Type 1 to select Get/Refresh List of Switches.The Master switch polls the subnet for all
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 87Returning to the Master Switch When you have finished managing a
Chapter 4: Enhanced Stacking88 Section I: Basic Operations
Section I: Basic Operations 89Chapter 5SNMPv1 and SNMPv2c ConfigurationThis chapter explains how to activate SNMP management on the switch and how to
AT-S62 Management Software Menus Interface User’s Guide9Configuring RSTP Port Settings...
Chapter 5: SNMPv1 and SNMPv2c Configuration90 Section I: Basic OperationsSNMPv1 and SNMPv2c OverviewThe Simple Network Management Program (SNMP) is an
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 91Access ModeThis defines what the community string will allow a ne
Chapter 5: SNMPv1 and SNMPv2c Configuration92 Section I: Basic OperationsIf you are not interested in receiving traps, then you do not need to enter a
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 93Enabling or Disabling SNMP ManagementTo enable or disable SNMP ma
Chapter 5: SNMPv1 and SNMPv2c Configuration94 Section I: Basic OperationsSetting the Authentication Failure TrapAs mentioned in the SNMP Overview sect
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 95Creating an SNMP Community StringTo create a new SNMP community s
Chapter 5: SNMPv1 and SNMPv2c Configuration96 Section I: Basic Operations5. Enter the new SNMP community string. The name can be up to 32 alphanumeric
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 9710. If desired, repeat this procedure starting with Step 4 to cre
Chapter 5: SNMPv1 and SNMPv2c Configuration98 Section I: Basic OperationsModifying a Community StringTo modify a community string, perform the followi
AT-S62 Management Software Menus Interface User’s GuideSection I: Basic Operations 99The menu options are described below:1 - Add Attributes to Commun
Comentários a estes Manuais