Document Outline

• Contents
• Figures
• Tables
• Preface
  • How This Guide is Organized
  • Product Documentation
  • Where to Go First
  • Starting a Management Session
  • Document Conventions
  • Contacting Allied Telesis
    • Online Support
    • Email and Telephone Support
    • Returning Products
    • Sales or Corporate Information
    • Management Software Updates
• Section I
• Basic Operations
• Chapter 1
• Overview
  • Layer 2+ and Basic Layer 3 Switches
  • AT-S63 Management Software
  • Management Interfaces
  • Management Access Methods
    • Local Management Sessions
    • Remote Telnet Sessions
    • Remote Secure Shell (SSH) Sessions
    • Remote Web Browser Session
    • Remote SNMP Management
  • Manager Access Levels
  • Installation and Management Configurations
    • Stand-alone Switches
    • AT-9400Ts Stacks
    • Enhanced Stacking
  • IP Configuration
  • Configuration Files
    • Stand-alone Switches
    • AT-9400Ts Stacks
    • Selecting a Configuration File
  • Redundant Twisted Pair Ports
  • History of New Features
    • Version 4.0.0
    • Version 3.2.0
    • Version 3.0.0
    • Version 2.1.0
    • Version 2.0.0
    • Version 1.3.0
    • Version 1.2.0
• Chapter 2
• AT-9400Ts Stacks
  • Supported Platforms
  • Introduction
  • AT-S63 Management Software
  • Supported Models
  • AT-StackXG Stacking Module
  • Maximum Number of Switches in a Stack
  • Management Interfaces
  • Management Access Methods
  • Enhanced Stacking
  • Stack Topology
  • Discovery Process
  • Master and Member Switches
  • Module ID Numbers
  • Stack Configuration Files
  • MAC Address Tables
  • File Systems
  • Compact Flash Memory Card Slots
  • Stack IP Address
  • Upgrading the AT-S63 Management Software
• Chapter 3
• Enhanced Stacking
  • Supported Platforms
  • Overview
  • Master and Slave Switches
  • Common VLAN
  • Master Switch and the Local Interface
  • Slave Switches
  • Enhanced Stacking Compatibility
  • Enhanced Stacking Guidelines
  • General Steps
• Chapter 4
• SNMPv1 and SNMPv2c
  • Supported Platforms
  • Overview
  • Community String Attributes
    • Community String Name
    • Access Mode
    • Operating Status
    • Open or Closed Access Status
    • Trap Receivers
  • Default SNMP Community Strings
• Chapter 5
• MAC Address Table
  • Overview
• Chapter 6
• Static Port Trunks
  • Supported Platforms
  • Overview
  • Load Distribution Methods
  • Guidelines
• Chapter 7
• LACP Port Trunks
  • Supported Platforms
  • Overview
  • LACP System Priority
  • Adminkey Parameter
  • LACP Port Priority Value
  • Load Distribution Methods
  • Guidelines
• Chapter 8
• Port Mirror
  • Supported Platforms
  • Overview
  • Guidelines
• Section II
• Advanced Operations
• Chapter 9
• File System
  • Overview
  • File Naming Conventions
  • Using Wildcards to Specify Groups of Files
• Chapter 10
• Event Logs and the Syslog Client
  • Supported Platforms
  • Overview
  • Event Messages
  • Syslog Client
• Chapter 11
• Classifiers
  • Supported Platforms
  • Overview
  • Classifier Criteria
  • Guidelines
• Chapter 12
• Access Control Lists
  • Supported Platforms
  • Overview
  • Parts of an ACL
  • Guidelines
  • Examples
• Chapter 13
• Class of Service
  • Supported Platforms
  • Overview
  • Scheduling
    • Strict Priority Scheduling
    • Weighted Round Robin Priority Scheduling
• Chapter 14
• Quality of Service
  • Supported Platforms
  • Overview
  • Classifiers
  • Flow Groups
  • Traffic Classes
  • Policies
  • QoS Policy Guidelines
  • Packet Processing
  • Bandwidth Allocation
  • Packet Prioritization
  • Replacing Priorities
  • VLAN Tag User Priorities
  • DSCP Values
  • DiffServ Domains
  • Examples
    • Voice Applications
    • Video Applications
    • Critical Database
    • Policy Component Hierarchy
• Chapter 15
• Denial of Service Defenses
  • Supported Platforms
  • Overview
  • SYN Flood Attack
  • Smurf Attack
  • Land Attack
  • Teardrop Attack
  • Ping of Death Attack
  • IP Options Attack
  • Mirroring Traffic
  • Denial of Service Defense Guidelines
• Chapter 16
• Power Over Ethernet
  • Supported Platforms
  • Overview
  • Power Budgeting
  • Port Prioritization
  • PoE Device Classes
• Section III
• Snooping Protocols
• Chapter 17
• Internet Group Management Protocol Snooping
  • Supported Platforms
  • Overview
• Chapter 18
• Multicast Listener Discovery Snooping
  • Supported Platforms
  • Overview
• Chapter 19
• Router Redundancy Protocol Snooping
  • Supported Platforms
  • Overview
  • Guidelines
• Chapter 20
• Ethernet Protection Switching Ring Snooping
  • Supported Platforms
  • Overview
  • Restrictions
  • Guidelines
• Section IV
• SNMPv3
• Chapter 21
• SNMPv3
  • Supported Platforms
  • Overview
  • SNMPv3 Authentication Protocols
  • SNMPv3 Privacy Protocol
  • SNMPv3 MIB Views
  • SNMPv3 Storage Types
  • SNMPv3 Message Notification
  • SNMPv3 Tables
    • SNMPv3 User Table
    • SNMPv3 View Table
    • SNMPv3 Access Table
    • SNMPv3 SecurityToGroup Table
    • SNMPv3 Notify Table
    • SNMPv3 Target Address Table
    • SNMPv3 Target Parameters Table
    • SNMPv3 Community Table
  • SNMPv3 Configuration Example
• Section V
• Spanning Tree Protocols
• Chapter 22
• Spanning Tree and Rapid Spanning Tree Protocols
  • Supported Platforms
  • Overview
  • Bridge Priority and the Root Bridge
    • Path Costs and Port Costs
    • Port Priority
  • Forwarding Delay and Topology Changes
    • Hello Time and Bridge Protocol Data Units (BPDU)
    • Point-to-Point and Edge Ports
  • Mixed STP and RSTP Networks
  • Spanning Tree and VLANs
• Chapter 23
• Multiple Spanning Tree Protocol
  • Supported Platforms
  • Overview
  • Multiple Spanning Tree Instance (MSTI)
  • MSTI Guidelines
  • VLAN and MSTI Associations
  • Ports in Multiple MSTIs
  • Multiple Spanning Tree Regions
    • Region Guidelines
    • Common and Internal Spanning Tree (CIST)
    • MSTP with STP and RSTP
  • Summary of Guidelines
  • Associating VLANs to MSTIs
  • Connecting VLANs Across Different Regions
• Section VI
• Virtual LANs
• Chapter 24
• Port-based and Tagged VLANs
  • Supported Platforms
  • Overview
  • Port-based VLAN Overview
    • VLAN Name
    • VLAN Identifier
    • Untagged Ports
    • Port VLAN Identifier
    • Guidelines to Creating a Port- based VLAN
    • Drawbacks of Port-based VLANs
    • Port-based Example 1
    • Port-based Example 2
  • Tagged VLAN Overview
    • Tagged and Untagged Ports
    • Port VLAN Identifier
    • Guidelines to Creating a Tagged VLAN
    • Tagged VLAN Example
• Chapter 25
• GARP VLAN Registration Protocol
  • Supported Platforms
  • Overview
  • Guidelines
  • GVRP and Network Security
  • GVRP-inactive Intermediate Switches
  • Generic Attribute Registration Protocol (GARP) Overview
• Chapter 26
• Multiple VLAN Modes
  • Supported Platforms
  • Overview
  • 802.1Q- Compliant Multiple VLAN Mode
  • Non-802.1Q Compliant Multiple VLAN Mode
• Chapter 27
• Protected Ports VLANs
  • Supported Platforms
  • Overview
  • Guidelines
• Chapter 28
• MAC Address-based VLANs
  • Supported Platforms
  • Overview
  • Egress Ports
  • VLANs That Span Switches
  • VLAN Hierarchy
  • Steps to Creating a MAC Address-based VLAN
  • Guidelines
• Section VII
• Routing
• Chapter 29
• Internet Protocol Version 4 Packet Routing
  • Supported Platforms
  • Overview
  • Routing Interfaces
    • VLAN ID (VID)
    • Interface Numbers
    • IP Address and Subnet Mask
  • Interface Names
  • Static Routes
  • Routing Information Protocol (RIP)
  • Default Routes
  • Equal-cost Multi-path (ECMP) Routing
  • Routing Table
  • Route Selection Process
  • Address Resolution Protocol (ARP) Table
  • Internet Control Message Protocol (ICMP)
  • Routing Interfaces and Management Features
    • Accessing Network Servers
    • Enhanced Stacking
    • Remote Telnet, SSH, and Web Browser Management Sessions
    • Pinging a Remote Device
    • Accessing DHCP or BOOTP Servers
  • Local Interface
  • AT-9408LC/SP AT-9424T/GB, and AT-9424T/SP Switches
    • Local Interface
    • ARP Table
    • Default Gateway
  • Routing Command Example
    • Creating the VLANs
    • Creating the Routing Interfaces
    • Adding a Static Route and Default Route
    • Adding RIP
    • Selecting the Local Interface
  • Non-routing Command Example
  • Upgrading from AT-S63 Version 1.3.0 or Earlier
• Chapter 30
• BOOTP Relay Agent
  • Supported Platforms
  • Overview
  • Guidelines
• Chapter 31
• Virtual Router Redundancy Protocol
  • Supported Platforms
  • Overview
  • Master Switch
  • Backup Switches
  • Interface Monitoring
  • Port Monitoring
  • VRRP on the Switch
• Section VIII
• Port Security
• Chapter 32
• MAC Address-based Port Security
  • Supported Platforms
  • Overview
    • Automatic
    • Limited
    • Secured
    • Locked
  • Invalid Frames and Intrusion Actions
  • Guidelines
• Chapter 33
• 802.1x Port-based Network Access Control
  • Supported Platforms
  • Overview
  • Authentication Process
  • Port Roles
    • None Role
    • Authenticator Role
    • Supplicant Role
  • Authenticator Ports with Single and Multiple Supplicants
    • Single Operating Mode
    • Multiple Operating Mode
  • Supplicant and VLAN Associations
    • Single Operating Mode
    • Multiple Operating Mode
    • Supplicant VLAN Attributes on the RADIUS Server
  • Guest VLAN
  • RADIUS Accounting
  • General Steps
  • Guidelines
• Section IX
• Management Security
• Chapter 34
• Web Server
  • Supported Platforms
  • Overview
    • Supported Protocols
  • Configuring the Web Server for HTTP
  • Configuring the Web Server for HTTPS
    • General Steps for a Self-signed Certificate
    • General Steps for a Public or Private CA Certificate
• Chapter 35
• Encryption Keys
  • Supported Platforms
  • Overview
  • Encryption Key Length
  • Encryption Key Guidelines
  • Technical Overview
    • Data Encryption
    • Data Authentication
    • Key Exchange Algorithms
• Chapter 36
• PKI Certificates and SSL
  • Supported Platforms
  • Overview
  • Types of Certificates
  • Distinguished Names
  • SSL and Enhanced Stacking
  • Guidelines
  • Technical Overview
    • SSL Encryption
    • User Verification
    • Authentication
    • Public Key Infrastructure
    • Public Keys
    • Message Encryption
    • Digital Signatures
    • Certificates
    • Elements of a Public Key Infrastructure
    • Certificate Validation
    • Certificate Revocation Lists (CRLs)
    • PKI Implementation
• Chapter 37
• Secure Shell (SSH)
  • Supported Platforms
  • Overview
  • Support for SSH
  • SSH Server
  • SSH Clients
  • SSH and Enhanced Stacking
  • SSH Configuration Guidelines
  • General Steps to Configuring SSH
• Chapter 38
• TACACS+ and RADIUS Protocols
  • Supported Platforms
  • Overview
  • Guidelines
• Chapter 39
• Management Access Control List
  • Supported Platforms
  • Overview
  • Parts of a Management ACE
    • IP Address
    • Mask
    • Application
  • Guidelines
  • Examples
• Appendix A
• AT-S63 Management Software Default Settings
  • Address Resolution Protocol Cache
  • Boot Configuration File
  • BOOTP Relay Agent
  • Class of Service
  • Denial of Service Defenses
  • 802.1x Port-Based Network Access Control
  • Enhanced Stacking
  • Ethernet Protection Switching Ring (EPSR) Snooping
  • Event Logs
  • GVRP
  • IGMP Snooping
  • Internet Protocol Version 4 Packet Routing
  • MAC Address-based Port Security
  • MAC Address Table
  • Management Access Control List
  • Manager and Operator Account
  • Multicast Listener Discovery Snooping
  • Public Key Infrastructure
  • Port Settings
  • RJ-45 Serial Terminal Port
  • Router Redundancy Protocol Snooping
  • Server-based Authentication (RADIUS and TACACS+)
    • Server-based Authentication
    • RADIUS Client
    • TACACS+ Client
  • Simple Network Management Protocol
  • Simple Network Time Protocol
  • Spanning Tree Protocols (STP, RSTP, and MSTP)
    • Spanning Tree Switch Settings
    • Spanning Tree Protocol
    • Rapid Spanning Tree Protocol
    • Multiple Spanning Tree Protocol
  • Secure Shell Server
  • Secure Sockets Layer
  • System Name, Administrator, and Comments Settings
  • Telnet Server
  • Virtual Router Redundancy Protocol
  • VLANs
  • Web Server
• Appendix B
• SNMPv3 Configuration Examples
  • SNMPv3 Configuration Examples
    • SNMPv3 Manager Configuration
    • SNMPv3 Operator Configuration
    • SNMPv3 Worksheet
• Appendix C
• Features and Standards
  • 10/100/1000Base-T Twisted Pair Ports
  • Denial of Service Defenses
  • Ethernet Protection Switching Ring Snooping
  • Fiber Optic Ports (AT-9408LC/SP Switch)
  • File System
  • DHCP and BOOTP Clients
  • Internet Protocol Multicasting
  • Internet Protocol Version 4 Routing
  • MAC Address Table
  • Management Access and Security
  • Management Access Methods
  • Management Interfaces
  • Management MIBs
  • Port Security
  • Port Trunking and Mirroring
  • Spanning Tree Protocols
  • System Monitoring
  • Traffic Control
  • Virtual LANs
  • Virtual Router Redundancy Protocol
• Appendix D
• MIB Objects
  • Access Control Lists
  • Class of Service
  • Date, Time, and SNTP Client
  • Denial of Service Defenses
  • Enhanced Stacking
  • GVRP
  • MAC Address Table
  • Management Access Control List
  • Miscellaneous
  • Port Mirroring
  • Quality of Service
  • Port Configuration and Status
  • Spanning Tree
  • Static Port Trunk
  • VLANs
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • X