Allied Telesis AT-S60 User Manual
User’s guide, At-s60 management software
Advertising
Table of contents
Document Outline
- Section I
- Basic Features 36
- Advanced Features 151
- SNMPv3 Protocol 292
- VLANs 400
- Security Features 468
- Web Browser Management 576
- List of Figures
- Figure 1: Main Menu 35
- Figure 2: Connecting a Terminal or PC to the RS-232 Terminal Port 40
- Figure 3: AT-S60 Main Menu 41
- Figure 4: Administration Menu 48
- Figure 5: System Menu 51
- Figure 6: Display Line Card Menu 52
- Figure 7: Display Line Card Information Menu 52
- Figure 8: Display Line Card Statistics Menu 53
- Figure 9: Display System Menu 55
- Figure 10: Display System Statistics Menu 56
- Figure 11: Configure System Menu 59
- Figure 12: Configure System Software Menu 60
- Figure 13: Configure System Time Menu 60
- Figure 14: Passwords Menu 65
- Figure 15: Display System Hardware Information Menu 68
- Figure 16: Display System Fan A Information Menu 69
- Figure 17: Display System Software Information Menu 70
- Figure 18: Enhanced Stacking Example 78
- Figure 19: Enhanced Stacking Menu 80
- Figure 20: Stacking Services Menu 81
- Figure 21: Updated Stacking Services Menu 82
- Figure 22: Configure SNMP Menu 87
- Figure 23: Configure SNMPv1 & SNMPv2c Community Menu 89
- Figure 24: Modify SNMPv1 & SNMPv2c Community Menu 93
- Figure 25: Display SNMPv1 & SNMPv2c Community Menu 100
- Figure 26: Port Menu 102
- Figure 27: Port Status Menu 102
- Figure 28: Port Configuration Menu 106
- Figure 29: Port Statistics Menu 112
- Figure 30: Display Port Statistics Menu 113
- Figure 31: MAC Address Tables Menu 118
- Figure 32: Display MAC Addresses Menu 118
- Figure 33: Show All MAC Addresses Menu 119
- Figure 34: Configure MAC Addresses Menu 122
- Figure 35: Port Trunk Example with 1000 Mbps Ports 128
- Figure 36: Port Trunk Example with 10/100 Mbps Ports 129
- Figure 37: Trunk Configuration Menu 132
- Figure 38: Modify Trunk Menu 136
- Figure 39: Port Mirroring Menu 144
- Figure 40: Modify Mirror Menu 146
- Figure 41: File Menu 157
- Figure 42: View Configuration File Menu (page 1) 160
- Figure 43: View Configuration File Menu (page 2) 161
- Figure 44: Display File(s) Menu 166
- Figure 45: Downloads & Uploads Menu 169
- Figure 46: Downloads & Uploads Menu 173
- Figure 47: Transfer Menu 175
- Figure 48: Send File Window 175
- Figure 49: XModem File Send Window 176
- Figure 50: Downloads & Uploads Menu 181
- Figure 51: Transfer Menu 182
- Figure 52: Send File Window 183
- Figure 53: XModem File Send Window 184
- Figure 54: Downloads & Uploads Menu 188
- Figure 55: Transfer Menu 190
- Figure 56: Receive File Window 190
- Figure 57: Receive Filename Window 191
- Figure 58: Xmodem File Receive Window 191
- Figure 59: Downloads & Uploads Menu 194
- Figure 60: Transfer Menu 197
- Figure 61: Receive File Window 197
- Figure 62: Receive Filename Window 197
- Figure 63: Xmodem File Receive Window 198
- Figure 64: Event Log Menu 205
- Figure 65: Event Log Example 209
- Figure 66: Configure IGMP Snooping Menu 221
- Figure 67: Configure Multicast Router Ports Menu 223
- Figure 68: View Multicast Hosts List Menu 224
- Figure 69: View Multicast Routers List Menu 226
- Figure 70: Point-to-Point Ports 235
- Figure 71: Edge Port 236
- Figure 72: Point-to-Point and Edge Point 237
- Figure 73: VLAN Fragmentation 238
- Figure 74: Spanning Tree Menu 240
- Figure 75: STP Menu 243
- Figure 76: STP Port Parameters Menu 245
- Figure 77: Configure STP Port Settings Menu 246
- Figure 78: Display STP Port Configuration Menu 247
- Figure 79: RSTP Menu 249
- Figure 80: RSTP Port Parameters Menu 252
- Figure 81: Configure RSTP Port Settings Menu 253
- Figure 82: Display RSTP Port Configuration Menu 255
- Figure 83: Display RSTP Port State 256
- Figure 84: VLAN Fragmentation with STP or RSTP 260
- Figure 85: MSTP Example of Two Spanning Tree Instances 261
- Figure 86: Multiple VLANs in a MSTI 262
- Figure 87: Multiple Spanning Tree Region 265
- Figure 88: CIST and VLAN Guideline - Example 1 270
- Figure 89: CIST and VLAN Guideline - Example 2 271
- Figure 90: Spanning Regions - Example 1 272
- Figure 91: Spanning Tree Menu 275
- Figure 92: MSTP Menu 277
- Figure 93: CIST Menu 279
- Figure 94: MSTI Menu 281
- Figure 95: VLAN-MSTI Association Menu 285
- Figure 96: MSTP Port Parameters Menu 288
- Figure 97: Configure MSTP Port Settings Menu 289
- Figure 98: MIB Tree 296
- Figure 99: SNMPv3 User Configuration Process 299
- Figure 100: SNMPv3 Message Notification Process 300
- Figure 101: Configure SNMPv3 Table Menu 306
- Figure 102: Configure SNMPv3 User Table Menu 307
- Figure 103: Modify SNMPv3 User Table Menu 311
- Figure 104: Configure SNMPv3 View Table Menu 316
- Figure 105: Modify SNMPv3 View Table Menu 320
- Figure 106: Configure SNMPv3 Access Table Menu 325
- Figure 107: Modify SNMPv3 Access Table Menu 332
- Figure 108: Configure SNMPv3 SecurityToGroup Table Menu 341
- Figure 109: Modify SNMPv3 SecurityToGroup Table Menu 345
- Figure 110: Configure SNMPv3 Notify Table Menu 349
- Figure 111: Modify SNMPv3 Notify Table Menu 352
- Figure 112: Configure SNMPv3 Target Address Table Menu 356
- Figure 113: Modify SNMPv3 Target Address Table Menu 360
- Figure 114: Configure SNMPv3 Target Parameters Table Menu 369
- Figure 115: Modify SNMPv3 Target Parameters Table Menu 375
- Figure 116: Configure SNMPv3 Community Table Menu 383
- Figure 117: Modify SNMPv3 Community Table Menu 387
- Figure 118: Display SNMPv3 Table Menu 392
- Figure 119: Display SNMPv3 User Table Menu 392
- Figure 120: Display SNMPv3 View Table Menu 393
- Figure 121: Display SNMPv3 Access Table Menu 394
- Figure 122: Display SNMPv3 SecurityToGroup Table Menu 395
- Figure 123: Display SNMPv3 Notify Table Menu 396
- Figure 124: Display SNMPv3 Target Address Table Menu 397
- Figure 125: Display SNMPv3 Target Parameters Table Menu 398
- Figure 126: Display SNMPv3 Community Table Menu 399
- Figure 127: Port-based VLAN - Example 1 408
- Figure 128: Port-based VLAN - Example 2 410
- Figure 129: Example of a Tagged VLAN 415
- Figure 130: VLAN Menu 418
- Figure 131: Display VLAN Menu 418
- Figure 132: Display Port Based VLAN Menu 419
- Figure 133: Configure VLAN Menu 421
- Figure 134: Configure Port Based VLAN Menu 422
- Figure 135: Modify Port Based VLAN Menu 427
- Figure 136: Display Port Based VLAN Menu 443
- Figure 137: GVRP Example 446
- Figure 138: GARP Architecture 450
- Figure 139: GID Architecture 451
- Figure 140: GARP-GVRP Menu 453
- Figure 141: GVRP Port Parameters Menu 455
- Figure 142: Configure GVRP Port Settings Menu 456
- Figure 143: Display GVRP Port Configuration Menu 456
- Figure 144: Other GARP Port Parameters Menu 458
- Figure 145: GVRP Counters Menu (page 1) 459
- Figure 146: GVRP Counters Menu (page 2) 460
- Figure 147: GVRP Database Menu 463
- Figure 148: GIP Connected Ports Ring Menu 464
- Figure 149: GVRP State Machine Menu (page 1) 465
- Figure 150: Display GVRP State Machine Menu (page 2) 465
- Figure 151: Security Menu 473
- Figure 152: Local Port Security Menu 473
- Figure 153: Configure Port Security Menu 474
- Figure 154: Configure Port Security Menu 475
- Figure 155: Web Server Configuration Menu 479
- Figure 156: Keys/Certificate Configuration Menu 492
- Figure 157: Key Management Menu 493
- Figure 158: Create Key Menu 494
- Figure 159: Export Key to File Menu 497
- Figure 160: Import Key From File Menu 499
- Figure 161: Public Key Infrastructure (PKI) Configuration Menu 509
- Figure 162: X509 Certificate Management Menu 510
- Figure 163: Create Self-Signed Certificate Menu 511
- Figure 164: Add Certificate Menu 514
- Figure 165: Modify Certificate Menu 516
- Figure 166: View Certificate Details Menu (page 1) 519
- Figure 167: View Certificate Details Menu (page 2) 519
- Figure 168: Generate Enrollment Request Menu 521
- Figure 169: Secure Socket Layer (SSL) Menu 528
- Figure 170: SSH Remote Management of a Slave Switch 533
- Figure 171: Secure Shell (SSH) Menu 536
- Figure 172: Show Server Information Menu 538
- Figure 173: Authentication Menu 544
- Figure 174: TACACS+ Client Configuration Menu 545
- Figure 175: RADIUS Client Configuration Menu 547
- Figure 176: RADIUS Server Configuration Menu 548
- Figure 177: Example of Authenticator Role 553
- Figure 178: Example of the Supplicant Role 554
- Figure 179: Authentication Messaging Exchange 555
- Figure 180: Port Access Control Menu 557
- Figure 181: Configure Port Access Role Menu 560
- Figure 182: Configure Authenticator Menu 562
- Figure 183: Configure Authenticator Port Access Parameters Menu 563
- Figure 184: Configure Supplicant Menu 566
- Figure 185: Configure Supplicant Port Access Parameters Menu 566
- Figure 186: Radius Accounting Menu 568
- Figure 187: Display Port Access Status Menu 572
- Figure 188: Display Authentication Port Access Parameters 574
- Figure 189: Display Supplicant Port Access Parameters Menu 575
- Figure 190: Entering a Switch’s IP Address in the URL Field 580
- Figure 191: Home Page 580
- Figure 192: Configuration System Page, General Tab 584
- Figure 193: Configuration System Page, System Time Tab 588
- Figure 194: Monitoring System Page, General Tab 592
- Figure 195: Configuration System Page, SNMP Tab 596
- Figure 196: SNMPv1 & SNMPv2c Communities Page 597
- Figure 197: Add New SNMPv1 & SNMPv2c Community Page 598
- Figure 198: Modify SNMPv1 & SNMPv2c Community Page 600
- Figure 199: SNMP Monitoring Tab 602
- Figure 200: Monitoring, SNMPv1 & SNMPv2c Communities Page 603
- Figure 201: Monitoring System Page, Ping Client Tab 605
- Figure 202: Configuration System Page, System Maintenance Tab 606
- Figure 203: System Maintenance Tab 610
- Figure 204: Configuration Layer 2 Page, Enhanced Stacking Tab 616
- Figure 205: Enhanced Stacking Page 618
- Figure 206: AT-S39 Home Page 619
- Figure 207: Configuration Layer 1 Page, Port Settings Tab 621
- Figure 208: Port Configuration Page 622
- Figure 209: Monitoring Layer 1 Page, Port Settings Tab 626
- Figure 210: Port Status Page 627
- Figure 211: Port Statistics Page 631
- Figure 212: Configuration Layer 2 Page, MAC Address Tab 634
- Figure 213: MAC Address Table Page 635
- Figure 214: Add MAC Address Page 637
- Figure 215: Configuration Layer 1 Page, Port Trunking Tab 642
- Figure 216: Add New Trunk Page 643
- Figure 217: Modify Trunk Page 646
- Figure 218: Monitoring Layer 1 Page, Port Trunking Tab 647
- Figure 219: Configuration Layer 1 Page, Port Mirroring Tab 649
- Figure 220: Add New Mirror Page 650
- Figure 221: Modify Mirror Page 652
- Figure 222: Monitoring Layer 1 Page, Port Mirroring Tab 654
- Figure 223: Event Log Tab 656
- Figure 224: Event Log Example 659
- Figure 225: Configuration System Page, IGMP Tab 663
- Figure 226: Monitoring System Page, IGMP Tab 666
- Figure 227: View Multicast Hosts List Page 667
- Figure 228: View Multicast Routers List Page 668
- Figure 229: View (Static) Multicast Routers List Page 668
- Figure 230: Configuration Layer 2 Page, Spanning Tree Tab 670
- Figure 231: Expanded STP Spanning Tree Tab 673
- Figure 232: STP Settings Page 675
- Figure 233: Expanded RSTP Spanning Tree Tab 677
- Figure 234: RSTP Settings Page 679
- Figure 235: Expanded MSTP Spanning Tree Tab 682
- Figure 236: Add New MSTI Page 685
- Figure 237: Modify MSTI Page 686
- Figure 238: MSTP Port Settings Page 689
- Figure 239: Monitoring Layer 2 Page, Spanning Tree Tab 691
- Figure 240: Monitoring Layer 2 Page, Spanning Tree Tab 692
- Figure 241: STP Settings Page 693
- Figure 242: Configuration System Page, SNMP Tab 696
- Figure 243: SNMPv3 User Table Page 699
- Figure 244: Add New SNMPv3 User Page 699
- Figure 245: Modify SNMPv3 User Page 702
- Figure 246: SNMPv3 View Table Page 705
- Figure 247: Add New SNMPv3 View Page 706
- Figure 248: Modify SNMPv3 View Page 708
- Figure 249: SNMPv3 Access Table Page 710
- Figure 250: Add New SNMPv3 Access Page 711
- Figure 251: Modify SNMPv3 Access Page 715
- Figure 252: SNMPv3 SecurityToGroup Table Page 717
- Figure 253: Add New SNMPv3 SecurityToGroup Page 718
- Figure 254: Modify SNMPv3 SecurityToGroup Page 720
- Figure 255: SNMPv3 Notify Table Page 722
- Figure 256: Add New SNMPv3 Notify Page 723
- Figure 257: Modify SNMPv3 Notify Page 725
- Figure 258: SNMPv3 Target Address Table Page 728
- Figure 259: Add New SNMPv3 Target Address Table Page 728
- Figure 260: Modify SNMPv3 Target Address Table Page 731
- Figure 261: SNMPv3 Target Parameters Table Page 733
- Figure 262: Add New SNMPv3 Target Parameters Table Page 734
- Figure 263: Modify SNMPv3 Target Parameters Table Page 737
- Figure 264: SNMPv3 Community Table Page 741
- Figure 265: Add New SNMPv3 Community Table Page 741
- Figure 266: Modify SNMPv3 Community Table Page 744
- Figure 267: Monitoring, SNMPv3 User Table Page 747
- Figure 268: Monitoring, SNMPv3 View Table Page 748
- Figure 269: Monitoring, SNMPv3 Access Table Page 749
- Figure 270: Monitoring, SNMPv3 SecurityToGroup Table Page 750
- Figure 271: Monitoring, SNMPv3 Notify Table Page 751
- Figure 272: Monitoring, SNMPv3 Target Address Table Page 752
- Figure 273: Monitoring, SNMPv3 Target Parameters Table Page 753
- Figure 274: Monitoring, SNMPv3 Community Table Page 754
- Figure 275: Configuration Layer 2 Page, VLAN Tab 756
- Figure 276: Port-Based VLANs Page 757
- Figure 277: Add New VLAN Page 757
- Figure 278: Modify VLAN Page 761
- Figure 279: Monitoring Layer 2 Page, VLAN Tab 763
- Figure 280: Monitoring, Port-Based VLANs Page 764
- Figure 281: Configuration Layer 2 Page, GVRP Tab 767
- Figure 282: GVRP Port Configuration Page 770
- Figure 283: Monitoring Layer 2 Page, GVRP Tab 772
- Figure 284: GVRP Port Configuration Page 773
- Figure 285: GVRP Counters Page 774
- Figure 286: GVRP Database Page 777
- Figure 287: GVRP GIP Connected Ports Ring Page 778
- Figure 288: GVRP State Machine Page 780
- Figure 289: Monitoring Layer 2 Page, Port Security Tab 784
- Figure 290: Security for Ports Page 785
- Figure 291: Monitoring Security Page, Keys Tab 788
- Figure 292: Monitoring Security Page, PKI Tab 791
- Figure 293: Certificate Page 792
- Figure 294: Monitoring Security Page, SSL Tab 794
- Figure 295: Configuration System Page, Server-based Authentication Tab 797
- Figure 296: TACACS+ Client Configuration Page 799
- Figure 297: RADIUS Client Configuration Page 801
- Figure 298: Monitoring System Page, Server-based Authentication Tab 803
- Figure 299: TACACS+ Client Configuration Page 804
- Figure 300: RADIUS Client Configuration Page 805
- Figure 301: 802.1x Port Access Tab 808
- Figure 302: Port Role Configuration Page 811
- Figure 303: Authenticator Parameters Page 812
- Figure 304: Supplicant Parameters Page 814
- Figure 305: Monitoring, 802.1x Port Access Tab 816
- Figure 306: Port Access Port Status Page 817
- Figure 307: Authenticator Port Parameters Page 818
- Figure 308: Supplicant Port Parameters Page 818
- Preface
- Chapter 1
- AT-S60 Overview
- Chapter 2
- Starting a Local or Telnet Management Session
- Chapter 3
- Basic Switch Parameters
- Assigning an IP Address to a Switch
- Configuring an IP Address and Switch Name
- Displaying and Clearing Line Card Information
- Displaying and Clearing System Information
- Activating the BootP and DHCP Services
- Setting the System Time
- Rebooting a Switch
- Configuring the AT-S60 Software Security Features
- Displaying the AT-S60 Hardware and Software Information
- Pinging a Remote System
- Returning the AT-S60 Software to the Factory Default Values
- Configuring the Console Startup Mode
- Chapter 4
- Enhanced Stacking
- Chapter 5
- SNMPv1 and SNMPv2c Configuration
- Chapter 6
- Port Parameters
- Chapter 7
- MAC Address Table
- Chapter 8
- Port Trunking
- Chapter 9
- Port Mirroring
- Chapter 10
- File System Configuration
- Chapter 11
- File Downloads and Uploads
- Chapter 12
- Event Log
- Chapter 13
- Class of Service (CoS)
- Chapter 14
- IGMP Snooping
- Chapter 15
- STP and RSTP
- Chapter 16
- Multiple Spanning Tree Protocol (MSTP)
- Chapter 17
- SNMPv3 Configuration
- SNMPv3 Overview
- Configuring the SNMPv3 Protocol
- Configuring the SNMPv3 User Table
- Configuring the SNMPv3 View Table
- Configuring the SNMPv3 Access Table
- Configuring the SNMPv3 SecurityToGroup Table
- Configuring the SNMPv3 Notify Table
- Configuring the SNMPv3 Target Address Table
- Configuring the SNMPv3 Target Parameters Table
- Configuring the SNMPv3 Community Table
- Displaying SNMPv3 Table Menus
- Displaying the Display SNMPv3 User Table Menu
- Displaying the Display SNMPv3 View Table Menu
- Displaying the Display SNMPv3 Access Table Menu
- Displaying the Display SNMPv3 SecurityToGroup Table Menu
- Displaying the Display SNMPv3 Notify Table Menu
- Displaying the Display SNMPv3 Target Address Table Menu
- Displaying the Display SNMPv3 Target Parameters Table Menu
- Displaying the Display SNMPv3 Community Table Menu
- Chapter 18
- Tagged and Port-based Virtual LANs
- VLAN Overview
- Port-based VLAN Overview
- Tagged VLAN Overview
- Basic VLAN Mode Overview
- Displaying VLANs
- Creating a Port-based or Tagged VLAN
- Example of Creating a Port-Based VLAN
- Example of Creating a Tagged VLAN
- Modifying a VLAN
- Deleting a VLAN
- Setting a Switch’s VLAN Mode
- Specifying a Management VLAN
- Chapter 19
- Multiple VLAN Modes
- Chapter 20
- GARP VLAN Registration Protocol
- Chapter 21
- Port Security
- Chapter 22
- Web Server
- Chapter 23
- Encryption
- Chapter 24
- Public Key Infrastructure (PKI)
- Chapter 25
- Secure Sockets Layer (SSL)
- Chapter 26
- Secure Shell (SSH)
- Chapter 27
- TACACS+ and RADIUS Protocols
- Chapter 28
- 802.1x Port-based Network Access Control
- Chapter 29
- Starting a Web Browser Management Session
- Chapter 30
- Basic Switch Parameters
- Chapter 31
- File Downloads and Uploads
- Chapter 32
- Enhanced Stacking
- Chapter 33
- Port Parameters
- Chapter 34
- MAC Address Table
- Chapter 35
- Port Trunking
- Chapter 36
- Port Mirroring
- Chapter 37
- Event Log
- Chapter 38
- IGMP Snooping
- Chapter 39
- STP, RSTP, and MSTP
- Chapter 40
- SNMPv3 Protocol
- Configuring the SNMPv3 Protocol
- Enabling the SNMP Protocol
- Configuring the SNMPv3 User Table
- Configuring the SNMPv3 View Table
- Configuring the SNMPv3 Access Table
- Configuring the SNMPv3 SecurityToGroup Table
- Configuring the SNMPv3 Notify Table
- Configuring the SNMPv3 Target Address Table
- Configuring the SNMPv3 Target Parameters Table
- Configuring the SNMPv3 Community Table
- Displaying SNMPv3 Tables
- Chapter 41
- Port-based VLANs
- Chapter 42
- GARP VLAN Registration Protocol
- Chapter 43
- Port Security
- Chapter 44
- Web Server Security
- Chapter 45
- TACACS+ and RADIUS Protocols
- Chapter 46
- 802.1x Port-based Network Access Control
- Appendix A
- AT-S60 Default Settings
- Basic Switch Default Settings
- Enhanced Stacking Default Setting
- Event Log Settings
- IGMP Snooping Default Settings
- PKI Default Settings
- Port Configuration Default Settings
- Port Security Default Settings
- Server-Based Authentication Default Settings
- SNMP Default Settings
- SSH Default Settings
- SSL Default Settings
- STP, RSTP, and MSTP Default Settings
- VLAN Default Settings
- Web Server Default Settings
- 802.1x Port-Based Network Access Control Default Settings
- Appendix B
- SNMPv3 Configuration Examples
- Index