Document Outline

• Contents
• Figures
• Tables
• Preface
  • How This Guide is Organized
  • Document Conventions
  • Where to Find Web-based Guides
  • Contacting Allied Telesyn
    • Online Support
    • Email and Telephone Support
    • Returning Products
    • Sales or Corporate Information
    • Management Software Updates
  • History of New Features
    • Version 2.1.0
    • Version 2.0.0
    • Version 1.3.0
    • Version 1.2.0
• Chapter 1
• Overview
  • Management Overview
  • Local Management
  • Remote Telnet, Secure Shell, and Web Browser Management
  • Remote SNMP Management
  • Management Access Levels
• Section I
• Basic Operations
• Chapter 2
• Starting a Management Session
  • Starting a Local Management Session
    • Starting a Local Management Session
    • Quitting a Local Management Session
  • Planning for Remote Management
  • Starting a Remote Telnet or SSH Management Session
    • Starting a Remote Management Session
    • Quitting a Remote Management Session
  • Saving Your Parameter Changes
  • Redundant Twisted Pair Ports
  • Restrictions to the Menus Interface
• Chapter 3
• Basic Switch Parameters
  • Configuring the Switch’s Name, Location, and Contact
  • Changing the Manager and Operator Passwords
    • Changing the Manager or Operator Password
    • Resetting the Manager Password
  • Setting the System Time
    • Setting the System Time Manually
    • Setting the System Time from an SNTP or NTP Server
  • Rebooting the Switch
  • Configuring the Console Startup Mode
  • Configuring the Console Timer
  • Configuring the Telnet Server
  • Setting the Baud Rate of the Serial Terminal Port
  • Pinging a Remote System
  • Returning the AT-S63 Management Software to the Factory Default Values
  • Displaying the AT-9400 Series Switch Hardware and Software Information
  • Displaying System Hardware Information
  • Displaying Uplink Port Information
• Chapter 4
• Enhanced Stacking
  • Enhanced Stacking Overview
    • Master and Slave Switches
    • Common VLAN
    • Master Switch and Local Interface
    • Slave Switches
    • Enhanced Stacking Compatibility
    • Enhanced Stacking Guidelines
    • General Steps
  • Setting a Switch’s Enhanced Stacking Status
  • Selecting a Switch in an Enhanced Stack
  • Returning to the Master Switch
  • Displaying the Enhanced Stacking Status
• Chapter 5
• SNMPv1 and SNMPv2c
  • SNMPv1 and SNMPv2c Overview
    • Default SNMP Community Strings
  • Enabling or Disabling SNMP Management
  • Setting the Authentication Failure Trap
  • Creating an SNMP Community String
  • Modifying a Community String
  • Deleting a Community String
  • Displaying the SNMP Community Strings
• Chapter 6
• Port Parameters
  • Displaying Port Status
  • Configuring Port Parameters
  • Configuring Head of Line Blocking
  • Configuring Flow Control and Back Pressure
  • Configuring Port Filtering
  • Setting Up Rate Limiting
  • Resetting a Port
  • Forcing Port Renegotiation
  • Resetting the Port Configuration to the Default Settings
  • Displaying Port Statistics
  • Clearing Port Statistics
• Chapter 7
• MAC Address Table
  • MAC Address Overview
  • Displaying the MAC Address Tables
  • Adding Static Unicast and Multicast MAC Addresses
  • Deleting Unicast and Multicast MAC Addresses
  • Deleting All Dynamic MAC Addresses
  • Changing the Aging Time
• Chapter 8
• Static and LACP Port Trunks
  • Port Trunk Overview
    • Static Port Trunk Overview
    • LACP Trunk Overview
    • Load Distribution Methods
  • Managing Static Port Trunks
    • Creating a Static Port Trunk
    • Modifying a Static Port Trunk
    • Deleting a Static Port Trunk
  • Managing LACP Port Trunks
    • Enabling or Disabling LACP
    • Setting the LACP System Priority
    • Creating an Aggregator
    • Modifying an Aggregator
    • Deleting an Aggregator
    • Displaying LACP Port and Aggregator Status
• Chapter 9
• Port Mirroring
  • Port Mirroring Overview
  • Creating a Port Mirror
  • Disabling a Port Mirror
  • Modifying a Port Mirror
  • Displaying the Port Mirror
• Section II
• Advanced Operations
• Chapter 10
• File System
  • File System Overview
    • File Naming Conventions
    • Using Wildcards to Specify Groups of Files
    • Specifying the File Location
  • Working with Boot Configuration Files
    • Creating a Boot Configuration File
    • Setting the Active Boot Configuration File
    • Viewing a Boot Configuration File
    • Editing a Boot Configuration File
  • Copying a System File
    • Examples
  • Renaming a System File
    • Examples
  • Deleting a System File
  • Displaying System Files
    • Listing All Files
    • Listing Files on the Compact Flash Card
  • Working with Flash Memory
    • Displaying Information about the Flash Memory
    • Formatting the Flash Memory
  • Working with the Compact Flash Card
    • Displaying Compact Flash Card Information
    • Changing the Current Flash Card Directory
• Chapter 11
• File Downloads and Uploads
  • Downloading the AT-S63 Image File onto a Switch
    • Guidelines
    • Downloading the AT-S63 Image from a Local Management Session
    • Downloading the AT-S63 Image from a Remote Management Session
  • Uploading the AT-S63 Image File Switch to Switch
    • Guidelines
  • Uploading an AT-S63 Configuration File Switch to Switch
    • Guidelines
  • Downloading a System File
    • Guidelines
    • Downloading a System File from a Local Management Session
    • Downloading a System File from a Remote Management Session
  • Uploading a System File
    • Guidelines
    • Uploading a System File from a Local Management Session
    • Uploading a System File from a Remote Management Session
• Chapter 12
• Event Logs and Syslog Servers
  • Event Log Overview
  • Working with the Event Logs
    • Enabling or Disabling the Event Logs
    • Displaying an Event Log
    • Modifying the Event Log Full Action
    • Clearing an Event Log
    • Saving an Event Log to a File
  • Configuring Log Outputs
    • Creating a Log Output Definition
    • Modifying a Log Output
    • Deleting a Log Output
    • Displaying the Log Output Definition Details
• Chapter 13
• Classifiers
  • Classifier Overview
    • Classifier Criteria
    • Classifier Guidelines
  • Creating a Classifier
  • Modifying a Classifier
  • Deleting a Classifier
  • Deleting All Classifiers
  • Displaying Classifiers
• Chapter 14
• Access Control Lists
  • Access Control List (ACL) Overview
    • Parts of an ACL
    • Guidelines
    • Examples
  • Creating an ACL
  • Modifying an ACL
  • Deleting an ACL
  • Deleting All ACLs
  • Displaying ACLs
• Chapter 15
• Class of Service
  • Class of Service Overview
    • Scheduling
  • Configuring CoS
  • Mapping CoS Priorities to Egress Queues
  • Configuring Egress Scheduling
  • Displaying Port CoS Priorities
• Chapter 16
• Quality of Service
  • Quality of Service Overview
    • Classifiers
    • Flow Groups
    • Traffic Classes
    • Policies
    • QoS Policy Guidelines
    • Packet Processing
    • Bandwidth Allocation
    • Packet Prioritization
    • Replacing Priorities
    • VLAN Tag User Priorities
    • DSCP Values
    • DiffServ Domains
    • Examples
  • Managing Flow Groups
    • Creating a Flow Group
    • Modifying a Flow Group
    • Deleting a Flow Group
    • Displaying Flow Groups
  • Managing Traffic Classes
    • Creating a Traffic Class
    • Modifying a Traffic Class
    • Deleting a Traffic Class
    • Displaying Traffic Classes
  • Managing Policies
    • Creating a Policy
    • Modifying a Policy
    • Deleting a Policy
    • Displaying Policies
• Chapter 17
• Denial of Service Defense
  • Denial of Service Overview
    • SYN Flood Attack
    • Smurf Attack
    • Land Attack
    • Teardrop Attack
    • Ping of Death Attack
    • IP Options Attack
    • Mirroring Traffic
    • Denial of Service Defense Guidelines
  • Configuring Denial of Service Defense
• Section III
• IGMP Snooping, MLD Snooping, and RRP Snooping
• Chapter 18
• IGMP Snooping
  • IGMP Snooping Overview
  • Configuring IGMP Snooping
  • Enabling or Disabling IGMP Snooping
  • Displaying a List of Host Nodes
  • Displaying a List of Multicast Routers
• Chapter 19
• MLD Snooping
  • MLD Snooping Overview
  • Configuring MLD Snooping
  • Enabling or Disabling MLD Snooping
  • Displaying a List of Host Nodes
  • Displaying a List of Multicast Routers
• Chapter 20
• RRP Snooping
  • RRP Snooping Overview
  • Enabling or Disabling RRP Snooping
• Section IV
• SNMPv3
• Chapter 21
• SNMPv3
  • SNMPv3 Overview
    • SNMPv3 Authentication Protocols
    • SNMPv3 Privacy Protocol
    • SNMPv3 MIB Views
    • SNMPv3 Storage Types
    • SNMPv3 Message Notification
    • SNMPv3 Tables
    • SNMPv3 Configuration Example
  • Configuring SNMPv3 Entities
  • Configuring the SNMPv3 User Table
    • Creating an SNMPv3 User Table Entry
    • Deleting an SNMPv3 User Table Entry
    • Modifying an SNMPv3 User Table Entry
  • Configuring the SNMPv3 View Table
    • Creating an SNMPv3 View Table Entry
    • Deleting an SNMPv3 View Table Entry
    • Modifying an SNMPv3 View Table Entry
  • Configuring the SNMPv3 Access Table
    • Creating an SNMPv3 Access Table Entry
    • Deleting an SNMPv3 Access Table Entry
    • Modifying an SNMPv3 Access Table Entry
  • Configuring the SNMPv3 SecurityToGroup Table
    • Creating an SNMPv3 SecurityToGroup Table Entry
    • Deleting an SNMPv3 SecurityToGroup Table Entry
    • Modifying an SNMPv3 SecurityToGroup Table Entry
  • Configuring the SNMPv3 Notify Table
    • Creating an SNMPv3 Notify Table Entry
    • Deleting an SNMPv3 Notify Table Entry
    • Modifying an SNMPv3 Notify Table Entry
  • Configuring the SNMPv3 Target Address Table
    • Creating an SNMPv3 Target Address Table Entry
    • Deleting an SNMPv3 Target Address Table Entry
    • Modifying an SNMPv3 Target Address Table Entry
  • Configuring the SNMPv3 Target Parameters Table
    • Creating an SNMPv3 Target Parameters Table Entry
    • Deleting an SNMPv3 Target Parameters Table Entry
    • Modifying an SNMPv3 Target Parameters Table Entry
  • Configuring the SNMPv3 Community Table
    • Creating an SNMPv3 Community Table Entry
    • Deleting an SNMPv3 Community Table Entry
    • Modifying an SNMPv3 Community Table Entry
  • Displaying SNMPv3 Table Menus
    • Displaying the Display SNMPv3 User Table Menu
    • Displaying the Display SNMPv3 View Table Menu
    • Displaying the Display SNMPv3 Access Table Menu
    • Displaying the Display SNMPv3 SecurityToGroup Table Menu
    • Displaying the Display SNMPv3 Notify Table Menu
    • Displaying the Display SNMPv3 Target Address Table Menu
    • Displaying the Display SNMPv3 Target Parameters Table Menu
    • Displaying the Display SNMPv3 Community Table Menu
• Section V
• Spanning Tree Protocols
• Chapter 22
• Spanning Tree and Rapid Spanning Tree Protocols
  • STP and RSTP Overview
    • Bridge Priority and the Root Bridge
    • Mixed STP and RSTP Networks
    • Spanning Tree and VLANs
  • Enabling or Disabling a Spanning Tree Protocol
  • Configuring STP
    • Configuring STP Bridge Settings
    • Configuring STP Port Settings
    • Displaying STP Port Settings
    • Resetting STP to the Default Settings
  • Configuring RSTP
    • Configuring RSTP Bridge Settings
    • Configuring RSTP Port Settings
    • Displaying the RSTP Port Configuration
    • Displaying the RSTP Port State
    • Resetting RSTP to the Default Settings
• Chapter 23
• Multiple Spanning Tree Protocol
  • MSTP Overview
    • Multiple Spanning Tree Instance (MSTI)
    • MSTI Guidelines
    • VLAN and MSTI Associations
    • Ports in Multiple MSTIs
    • Multiple Spanning Tree Regions
    • Summary of Guidelines
  • Selecting MSTP as the Active Spanning Tree Protocol
  • Configuring MSTP Bridge Settings
  • Configuring the CIST Priority
  • Displaying the CIST Priority
  • Creating, Deleting, and Modifying MSTI IDs
    • Creating an MSTI ID
    • Deleting an MSTI ID
    • Modifying an MSTI ID
  • Adding, Removing, and Modifying VLAN Associations to MSTI IDs
    • Adding or Removing a VLAN from an MSTI ID
    • Associating a VLAN to an MSTI ID
    • Removing a VLAN from an MSTI ID
    • Associating VLANs to an MSTI ID and Deleting All Associated VLANs
    • Clearing VLAN to MSTI Associations
  • Configuring MSTP Port Settings
    • Configuring Generic MSTP Port Settings
    • Configuring MSTI-specific Port Parameters
  • Displaying the MSTP Port Configuration
  • Displaying the MSTP Port State
  • Resetting MSTP to the Defaults
• Section VI
• Virtual LANs
• Chapter 24
• Port-based and Tagged VLANs
  • VLAN Overview
  • Port-based VLAN Overview
    • VLAN Name
    • VLAN Identifier
    • Untagged Ports
    • Port VLAN Identifier
    • Guidelines to Creating a Port- based VLAN
    • Drawbacks of Port-based VLANs
    • Port-based Example 1
    • Port-based Example 2
  • Tagged VLAN Overview
    • Tagged and Untagged Ports
    • Port VLAN Identifier
    • Guidelines to Creating a Tagged VLAN
    • Tagged VLAN Example
  • Creating a Port-based or Tagged VLAN
  • Example of Creating a Port-based VLAN
  • Example of Creating a Tagged VLAN
  • Modifying a Port-based or Tagged VLAN
  • Displaying VLANs
  • Deleting a Port-based or Tagged VLAN
  • Deleting All VLANs
  • Displaying PVIDs
  • Enabling or Disabling Ingress Filtering
• Chapter 25
• GARP VLAN Registration Protocol
  • GARP VLAN Registration Protocol (GVRP) Overview
    • Guidelines
    • GVRP and Network Security
    • GVRP-inactive Intermediate Switches
    • Generic Attribute Registration Protocol (GARP) Overview
  • Configuring GVRP
  • Enabling or Disabling GVRP on a Port
  • Converting a Dynamic GVRP VLAN
  • Displaying the GVRP Port Configuration
  • Displaying GVRP Counters
  • Displaying the GVRP Database
  • Displaying the GIP Connected Ports Ring
  • Displaying the GVRP State Machine
• Chapter 26
• Multiple VLAN Modes
  • Multiple VLAN Mode Overview
    • 802.1Q- Compliant Multiple VLAN Mode
    • Non-802.1Q Compliant Multiple VLAN Mode
  • Selecting a VLAN Mode
  • Displaying VLAN Information
• Chapter 27
• Protected Ports VLANs
  • Protected Ports VLAN Overview
    • Protected Ports VLAN Guidelines
  • Creating a Protected Ports VLAN
  • Modifying a Protected Ports VLAN
  • Displaying a Protected Ports VLAN
  • Deleting a Protected Ports VLAN
• Chapter 28
• MAC Address-based VLANs
  • MAC Address-based VLAN Overview
    • Egress Ports
    • VLANs That Span Switches
    • VLAN Hierarchy
    • Steps to Creating a MAC Address- based VLAN
    • Guidelines
  • Creating a MAC Address-based VLAN
  • Adding and Deleting MAC Addresses
  • Adding and Deleting Egress Ports
  • Deleting a MAC Address-based VLAN
  • Displaying MAC Address-based VLANs
• Section VII
• Internet Protocol Routing
• Chapter 29
• Internet Protocol Version 4 Routing Interfaces
  • Creating a New Routing Interface
  • Modifying a Routing Interface
  • Deleting a Routing Interface
  • Displaying the IP Address of the Local Interface
  • Setting the Default Route or Default Gateway
  • Setting the Local Interface
  • Setting the ARP Cache Timeout
• Section VIII
• Port Security
• Chapter 30
• MAC Address-based Port Security
  • MAC Address Port Security Overview
    • Automatic
    • Limited
    • Secured
    • Locked
    • Invalid Frames and Intrusion Actions
    • MAC Address Port Security Guidelines
  • Configuring MAC Address Port Security
  • Displaying Port Security Levels
• Chapter 31
• 802.1x Port-based Network Access Control
  • IEEE 802.1x Port-based Network Access Control Overview
    • Authentication Process
    • Port Roles
    • None Role
    • Authenticator Role
    • Supplicant Role
    • Authenticator Ports with Single and Multiple Supplicants
    • Supplicant and VLAN Associations
    • Guest VLAN
    • RADIUS Accounting
    • General Steps
    • 802.1x Port-based Network Access Control Guidelines
  • Setting Port Roles
  • Enabling or Disabling 802.1x Port-based Network Access Control
  • Configuring Authenticator Port Parameters
  • Configuring Supplicant Port Parameters
  • Displaying the Port Access Parameters
  • Configuring RADIUS Accounting
• Section IX
• Management Security
• Chapter 32
• Web Server
  • Web Server Overview
    • Supported Protocols
  • Configuring the Web Server
  • General Steps for Configuring the Web Server for Encryption
    • General Steps for a Self-signed Certificate
    • General Steps for a Public or Private CA Certificate
• Chapter 33
• Encryption Keys
  • Basic Overview
    • Encryption Key Length
    • Encryption Key Guidelines
  • Technical Overview
    • Data Encryption
    • Data Authentication
    • Key Exchange Algorithms
  • Creating an Encryption Key
  • Deleting an Encryption Key
  • Modifying an Encryption Key
  • Exporting an Encryption Key
  • Importing an Encryption Key
  • Displaying the Encryption Keys
• Chapter 34
• PKI Certificates and SSL
  • Basic Overview
    • Types of Certificates
    • Distinguished Names
    • SSL and Enhanced Stacking
    • Guidelines
  • Technical Overview
    • SSL Encryption
    • User Verification
    • Authentication
    • Public Key Infrastructure
    • Public Keys
    • Message Encryption
    • Digital Signatures
    • Certificates
    • Elements of a Public Key Infrastructure
    • Certificate Validation
    • Certificate Revocation Lists (CRLs)
    • PKI Implementation
  • Creating a Self-signed Certificate
  • Adding a Certificate to the Database
  • Modifying a Certificate
  • Deleting a Certificate
  • Viewing a Certificate
  • Generating an Enrollment Request
  • Installing CA Certificates onto a Switch
  • Viewing and Configuring the Maximum Number of Certificates
  • Configuring SSL
• Chapter 35
• Secure Shell (SSH)
  • SSH Overview
    • Support for SSH
    • SSH Server
    • SSH Clients
    • SSH and Enhanced Stacking
    • SSH Configuration Guidelines
    • General Steps to Configuring SSH
  • Configuring SSH
  • Displaying SSH Information
• Chapter 36
• TACACS+ and RADIUS Protocols
  • TACACS+ and RADIUS Overview
    • TACACS+ and RADIUS Guidelines
  • Enabling or Disabling Server-based Management Authentication
  • Configuring the TACACS+ Client
  • Displaying the TACACS+ Settings
  • Configuring the RADIUS Client
  • Displaying RADIUS Status and Settings
• Chapter 37
• Management Access Control List
  • Management ACL Security Overview
    • Parts of a Management ACE
    • Management ACL Guidelines
    • Examples
  • Enabling or Disabling the Management ACL
  • Creating an ACE
  • Modifying an ACE
  • Deleting an ACE
  • Displaying the ACEs
• Appendix A
• AT-S63 Management Software Default Settings
  • ARP Cache Setting
  • Boot Configuration File Default Setting
  • Class of Service
  • Denial of Service Prevention Default Settings
  • 802.1x Port-Based Network Access Control Default Settings
  • Enhanced Stacking Default Setting
  • Event Log Default Settings
  • GVRP Default Settings
  • IGMP Snooping Default Settings
  • Internet Protocol Version 4 Packet Routing
  • MAC Address-based Port Security Default Settings
  • MAC Address Table Default Setting
  • Management Access Control List Default Setting
  • Manager and Operator Account Default Settings
  • MLD Snooping Default Settings
  • PKI Default Settings
  • Port Configuration Default Settings
  • RJ-45 Serial Terminal Port Default Settings
  • RRP Snooping Default Setting
  • Server-based Authentication (RADIUS and TACACS+) Default Settings
    • Server-based Authentication Default Settings
    • RADIUS Default Settings
    • TACACS+ Client Default Settings
  • SNMP Default Settings
  • SNTP Default Settings
  • Spanning Tree (STP, RSTP, and MSTP) Default Settings
    • Spanning Tree Switch Settings
    • STP Default Settings
    • RSTP Default Settings
    • MSTP Default Settings
  • SSH Default Settings
  • SSL Default Settings
  • System Name, Administrator, and Comments Settings
  • Telnet Server Default Settings
  • VLAN Default Settings
  • Web Server Default Settings
• Appendix B
• SNMPv3 Configuration Examples
  • SNMPv3 Configuration Examples
    • SNMPv3 Manager Configuration
    • SNMPv3 Operator Configuration
    • SNMPv3 Worksheet
• Appendix C
• Features and Standards
  • 10/100/1000Base-T Twisted Pair Ports
  • Denial of Service Defenses
  • Fiber Optic Ports (AT-9408LC/SP Switch)
  • File System
  • DHCP and BOOTP Clients
  • Internet Protocol Multicasting
  • Internet Protocol Version 4 Routing
  • MAC Address Table
  • Management Access and Security
  • Management Access Methods
  • Management Interfaces
  • Management MIBs
  • Port Security
  • Port Trunking and Mirroring
  • Spanning Tree Protocols
  • System Monitoring
  • Traffic Control
  • Virtual LANs
• Appendix D
• MIB Objects
  • Access Control Lists
  • Class of Service
  • Date, Time, and SNTP Client
  • Denial of Service Defenses
  • Enhanced Stacking
  • GVRP
  • MAC Address-based Port Security
  • MAC Address Table
  • Management Access Control List
  • Miscellaneous
  • Port Mirroring
  • Quality of Service
  • Port Configuration and Status
  • Spanning Tree
  • Static Port Trunk
  • VLANs
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • X