Document Outline

• Contents
  • Section I
  • Basic Features 29
    • Section II
  • Advanced Features 119
    • Section III
  • VLANs 269
    • Section IV
  • Security 303
• Figures
  • Figure 1: Entering a Switch’s IP Address in the URL Field 32
  • Figure 2: AT-S63 Login Page 33
  • Figure 3: Home page 34
  • Figure 4: Save Changes Button in the General Tab (Configuration) 36
  • Figure 5: General Tab (Configuration) 40
  • Figure 6: General Tab (Monitoring) 44
  • Figure 7: Ping Client Tab (Monitoring) 49
  • Figure 8: System Utilities Tab (Configuration) 51
  • Figure 9: SNMP Tab (Configuration) 54
  • Figure 10: SNMPv1 & SNMPv2c Communities Tab 56
  • Figure 11: Add New SNMPv1 & SNMPv2c Community Page 57
  • Figure 12: Modify SNMPv1 & SNMPv2c Community Page 59
  • Figure 13: SNMP Tab (Monitoring) 62
  • Figure 14: SNMPv1 & SNMPv2c Communities Tab (Monitoring) 63
  • Figure 15: Enhanced Stacking Tab (Configuration) 67
  • Figure 16: Stacking Switches Page 69
  • Figure 17: Enhanced Stacking Tab (Monitoring) 72
  • Figure 18: Port Settings Tab (Configuration) 74
  • Figure 19: Port Configuration Page 75
  • Figure 20: Port Settings Tab (Monitoring) 81
  • Figure 21: Port Status Page 82
  • Figure 22: Port Statistics Page 85
  • Figure 23: MAC Address Tab (Configuration) 90
  • Figure 24: Add MAC Address Page 91
  • Figure 25: MAC Address Tab (Monitoring) 94
  • Figure 26: View MAC Addresses Page 96
  • Figure 27: Port Trunking Tab (Configuration) 100
  • Figure 28: Add New Trunk Page 101
  • Figure 29: Modify Trunk Page 104
  • Figure 30: Port Trunking Tab (Monitoring) 106
  • Figure 31: Port Mirroring Tab (Configuration) 110
  • Figure 32: Modify Mirror Page 111
  • Figure 33: Example of a Modify Mirror Page 112
  • Figure 34: Port Mirroring Tab (Monitoring) 116
  • Figure 35: System Utilities Tab (Configuration) 123
  • Figure 36: Event Log Tab (Configuration) 128
  • Figure 37: Event Log Tab (Monitoring) 130
  • Figure 38: Event Log Example Displayed in Normal Mode 134
  • Figure 39: Event Log Example Displayed in Full Mode 135
  • Figure 40: CoS Tab (Configuration) 142
  • Figure 41: CoS Setting for Port Page 143
  • Figure 42: QoS Scheduling Tab (Configuration) 146
  • Figure 43: CoS Tab (Monitoring) 150
  • Figure 44: CoS Setting for Port Page 150
  • Figure 45: QoS Scheduling Tab (Monitoring) 152
  • Figure 46: IGMP Tab (Configuration) 154
  • Figure 47: IGMP Tab (Monitoring) 157
  • Figure 48: View Multicast Hosts List Page 158
  • Figure 49: View Multicast Routers List Page 160
  • Figure 50: View (Static) Multicast Routers List Page 161
  • Figure 51: Spanning Tree Tab (Configuration) 164
  • Figure 52: Configure STP Parameters Tab (Configuration) 167
  • Figure 53: STP Settings - Port(s) Page 169
  • Figure 54: Spanning Tree Tab (Monitoring) 171
  • Figure 55: Monitor STP Parameters Tab (Monitoring) 171
  • Figure 56: STP Settings Page 172
  • Figure 57: Configure RSTP Parameters Tab (Configuration) 175
  • Figure 58: RSTP Settings - Port(s) Page 177
  • Figure 59: Monitor RSTP Parameters Tab (Monitoring) 179
  • Figure 60: RSTP Settings Page 179
  • Figure 61: Spanning Tree Tab (Configuration) 182
  • Figure 62: Configure MSTP Parameters Tab (Configuration) 185
  • Figure 63: Add New MSTI Page 189
  • Figure 64: Modify MSTI Page 191
  • Figure 65: MSTP Settings - Port(s) Page 195
  • Figure 66: Monitor MSTP Parameters Tab (Monitoring) 198
  • Figure 67: MSTP Settings - Port(s) Page 198
  • Figure 68: MSTP Port Status - Port(s) Page 200
  • Figure 69: SNMP Tab (Configuration) 205
  • Figure 70: SNMPv3 User Table Tab (Configuration) 208
  • Figure 71: Add New SNMPv3 User Page 208
  • Figure 72: Modify SNMPv3 User Page 211
  • Figure 73: SNMPv3 View Table Tab (Configuration) 215
  • Figure 74: Add New SNMPv3 View Page 215
  • Figure 75: Modify SNMPv3 View Page 218
  • Figure 76: SNMPv3 Access Table Tab (Configuration) 221
  • Figure 77: Add New SNMPv3 Access Page 221
  • Figure 78: Modify SNMPv3 Access Page 225
  • Figure 79: SNMPv3 SecurityToGroup Table Tab (Configuration) 228
  • Figure 80: Add New SNMPv3 SecurityToGroup Page 228
  • Figure 81: Modify SNMPv3 SecurityToGroup Page 231
  • Figure 82: SNMPv3 Notify Table Tab (Configuration) 234
  • Figure 83: Add New SNMPv3 Notify Page 234
  • Figure 84: Modify SNMPv3 Notify Page 236
  • Figure 85: SNMPv3 Target Address Table Tab (Configuration) 239
  • Figure 86: Add New SNMPv3 Target Address Page 239
  • Figure 87: Modify SNMPv3 Target Address Page 242
  • Figure 88: SNMPv3 Target Parameters Table Tab (Configuration) 245
  • Figure 89: Add New SNMPv3 Target Parameters Page 246
  • Figure 90: Modify SNMPv3 Target Parameter Page 249
  • Figure 91: SNMPv3 Community Table Tab (Configuration) 253
  • Figure 92: Add New SNMPv3 Community Page 253
  • Figure 93: Modify SNMPv3 Community Page 256
  • Figure 94: SNMP Tab (Monitoring) 259
  • Figure 95: SNMPv3 User Table Tab (Monitoring) 260
  • Figure 96: SNMPv3 View Table Tab (Monitoring) 261
  • Figure 97: SNMPv3 Access Table Tab (Monitoring) 262
  • Figure 98: SNMPv3 SecurityToGroup Table Tab (Monitoring) 263
  • Figure 99: SNMPv3 Notify Table Tab (Monitoring) 264
  • Figure 100: SNMPv3 Target Address Table Tab (Monitoring) 265
  • Figure 101: SNMPv3 Target Parameters Table Tab (Monitoring) 266
  • Figure 102: SNMPv3 Community Table Tab (Monitoring) 267
  • Figure 103: VLAN Tab (Configuration) 272
  • Figure 104: Add New VLAN Page 273
  • Figure 105: VLAN Tab (Monitoring) 281
  • Figure 106: GVRP Tab (Configuration) 286
  • Figure 107: GVRP Port Configuration Page 288
  • Figure 108: GVRP Tab (Monitoring) 289
  • Figure 109: GVRP Port Configuration Page 291
  • Figure 110: GVRP Database Page 292
  • Figure 111: GVRP State Machine for VLAN Page 293
  • Figure 112: GVRP Counters Page 296
  • Figure 113: GIP Connected Ports Ring Page 300
  • Figure 114: Port Security Tab (Monitoring) 306
  • Figure 115: Security for Port(s) Page 307
  • Figure 116: 802.1x Port Access Tab (Monitoring) 310
  • Figure 117: Keys Tab (Monitoring) 311
  • Figure 118: PKI Tab (Monitoring) 312
  • Figure 119: X509 Certificate Details Page 313
  • Figure 120: SSL Tab (Monitoring) 315
  • Figure 121: Secure Shell Tab (Configuration) 318
  • Figure 122: Secure Shell Tab (Monitoring) 320
  • Figure 123: Server-based Authentication Tab (Configuration) 324
  • Figure 124: TACACS+ Client Configuration Page 325
  • Figure 125: Server-Based Authentication Tab (Monitoring) 327
  • Figure 126: TACACS+ Client Configuration Page 328
  • Figure 127: RADIUS Client Configuration Page 329
  • Figure 128: RADIUS Client Configuration Page 331
  • Figure 129: 802.1x Port Access Tab (Configuration) 334
  • Figure 130: Port Role Configuration Page 335
  • Figure 131: Authenticator Parameters Page 337
  • Figure 132: Supplicant Parameters Page 340
  • Figure 133: 802.1x Port Access Tab (Monitoring) 342
  • Figure 134: Port Access Port Status Page 343
  • Figure 135: Authenticator Port Parameters Page 344
  • Figure 136: Supplicant Port Parameters Page 345
  • Figure 137: 802.1x Port Access Tab (Configuration) 346
  • Figure 138: 802.1x Port Access Tab (Monitoring) 348
  • Figure 139: DoS Tab (Configuration) 352
  • Figure 140: DoS Configuration for Ports Page 353
  • Figure 141: DoS Tab (Monitoring) 355
  • Figure 142: DoS Monitor for Ports Page 356
• Tables
  • Table 1: AT-S63 Software Modules 132
  • Table 2: Event Severity Levels 134
  • Table 3: Default Mappings of IEEE 802.1p Priority Levels to Priority Queues 143
  • Table 4: Example of Weighted Round Robin Priority 148
  • Table 5: Bridge Priority Value Increments 168
  • Table 6: Port Priority Value Increments 169
  • Table 7: GVRP State Machine Parameters 293
  • Table 8: GVRP Counters 297
• Preface
  • How This Guide is Organized
  • Document Conventions
  • Where to Find Web-based Guides
  • Contacting Allied Telesyn
    • Online Support
    • Email and Telephone Support
    • For Sales or Corporate Information
  • Management Software Updates
• Chapter 1
• Overview
  • Management Overview
  • Local Management Session
  • Telnet Management Session
  • Web Browser Management Session
  • SNMP Management Session
  • Management Access Levels
• Basic Features
• Chapter 2
• Starting a Web Browser Management Session
  • Starting a Web Browser Management Session
  • Web Browser Tools
  • Saving Your Parameter Changes
  • Quitting a Web Browser Management Session
• Chapter 3
• Basic Switch Parameters
  • Configuring an IP Address and Switch Name
  • Activating the BOOTP and DHCP Client Software
  • Displaying System Information
  • Configuring the Manager and Operator Passwords
  • Rebooting a Switch
  • Pinging a Remote System
  • Returning the AT-S63 Management Software to the Factory Default Values
• Chapter 4
• SNMPv1 and SNMPv2c
  • Enabling or Disabling SNMP Management
  • Creating a New SNMPv1 and SNMPv2c Community
  • Modifying an SNMPv1 and SNMPv2c Community
  • Deleting an SNMPv1 and SNMPv2c Community
  • Displaying the SNMPv1 and SNMPv2c Communities
• Chapter 5
• Enhanced Stacking
  • Setting a Switch’s Enhanced Stacking Status
  • Selecting a Switch in an Enhanced Stack
  • Returning to the Master Switch
  • Displaying the Enhanced Stacking Status
• Chapter 6
• Port Parameters
  • Configuring Port Parameters
  • Displaying Port Status
  • Displaying Port Statistics
  • Resetting a Port to the Default Settings
• Chapter 7
• MAC Address Table
  • Adding Static Unicast and Multicast MAC Addresses
  • Deleting Unicast and Multicast MAC Addresses
  • Deleting All Dynamic MAC Addresses
  • Displaying the MAC Address Tables
  • Changing the Aging Time
• Chapter 8
• Port Trunking
  • Creating a Port Trunk
  • Modifying a Port Trunk
  • Deleting a Port Trunk
  • Displaying the Port Trunks
• Chapter 9
• Port Mirroring
  • Creating a Port Mirror
  • Modifying a Port Mirror
  • Disabling a Port Mirror
  • Deleting a Port Mirror
  • Displaying the Port Mirror
• Advanced Features
• Chapter 10
• File Downloads and Uploads
  • Downloading a File
  • Uploading a File
• Chapter 11
• Event Log
  • Enabling or Disabling the Event Log
  • Displaying Events
  • Disabling the Event Log
  • Clearing the Event Log
  • Saving the Event Log to a File
• Chapter 12
• Quality of Service
  • Configuring CoS
  • Mapping CoS Priorities to Egress Queues
  • Configuring Egress Scheduling
  • Displaying the CoS Settings
  • Displaying the QoS Schedule
• Chapter 13
• IGMP Snooping
  • Configuring IGMP Snooping
  • Displaying a List of Host Nodes
  • Displaying a List of Multicast Routers
• Chapter 14
• STP and RSTP
  • Enabling or Disabling a Spanning Tree Protocol
  • Configuring STP
    • Displaying the STP Settings
    • Resetting STP to the Default Settings
  • Configuring RSTP
    • Resetting RSTP to the Default Settings
    • Displaying RSTP Settings
• Chapter 15
• MSTP
  • Enabling MSTP
  • Configuring MSTP
    • Configuring MSTP Parameters
    • Configuring the CIST Priority
  • Creating, Deleting, or Modifying MSTI IDs
    • Creating an MSTI ID
    • Deleting an MSTI ID
    • Modifying an MSTI ID
  • Adding, Removing, or Modifying VLAN Associations to MSTIs
    • Adding a VLAN Association
    • Removing a VLAN Association
    • Modifying a VLAN Association
  • Configuring MSTP Port Parameters
  • Displaying the MSTP Port Configuration
  • Displaying the MSTP Port Status
  • Resetting MSTP to the Default Settings
• Chapter 16
• SNMPv3
  • Configuring the SNMPv3 Protocol
  • Enabling or Disabling SNMP Management
  • Configuring the SNMPv3 User Table
    • Creating a User Table Entry
    • Deleting a User Table Entry
    • Modifying a User Table Entry
  • Configuring the SNMPv3 View Table
    • Creating a View Table Entry
    • Deleting a View Table Entry
    • Modifying a View Table Entry
  • Configuring the SNMPv3 Access Table
    • Creating an Access Table
    • Deleting an Access Table Entry
    • Modifying an Access Table Entry
  • Configuring the SNMPv3 SecurityToGroup Table
    • Creating a SecurityToGroup Table Entry
    • Deleting a SecurityToGroup Table Entry
    • Modifying a SecurityToGroup Table Entry
  • Configuring the SNMPv3 Notify Table
    • Creating a Notify Table Entry
    • Deleting a Notify Table Entry
    • Modifying a Notify Table Entry
  • Configuring the SNMPv3 Target Address Table
    • Creating a Target Address Table Entry
    • Deleting a Target Address Table Entry
    • Modifying Target Address Table Entry
  • Configuring the SNMPv3 Target Parameters Table
    • Creating a Target Parameters Table Entry
    • Deleting a Target Parameters Table Entry
    • Modifying a Target Parameters Table Entry
  • Configuring the SNMPv3 Community Table
    • Creating an SNMPv3 Community Table Entry
    • Deleting an SNMPv3 Community Table Entry
    • Modifying an SNMPv3 Community Table Entry
  • Displaying SNMPv3 Tables
    • Displaying User Table Entries
    • Displaying View Table Entries
    • Displaying Access Table Entries
    • Displaying SecurityToGroup Table Entries
    • Displaying Notify Table Entries
    • Displaying Target Address Table Entries
    • Displaying Target Parameters Table Entries
    • Displaying SNMPv3 Community Table Entries
• VLANs
• Chapter 17
• Virtual LANs
  • Creating a New Port-Based or Tagged VLAN
  • Modifying a VLAN
  • Deleting a VLAN
  • Selecting a VLAN Mode
  • Displaying VLANs
  • Specifying a Management VLAN
• Chapter 18
• GARP VLAN Registration Protocol (GVRP)
  • Configuring GVRP
  • Enabling or Disabling GVRP on a Port
  • Displaying the GVRP Configuration
  • Displaying the GVRP Port Configuration
  • Displaying the GVRP Database
  • Displaying the GVRP State Machine
  • Displaying the GVRP Counters
  • Displaying the GIP Connected Ports Ring
• Security
• Chapter 19
• Port Security
  • Displaying the MAC Address Security Level
• Chapter 20
• Encryption Keys, PKI, and SSL
  • Displaying the Encryption Keys
  • Displaying the PKI Settings and Certificates
  • Displaying the SSL Settings
• Chapter 21
• Secure Shell (SSH)
  • Configuring SSH
  • Displaying the SSH Settings
• Chapter 22
• TACACS+ and RADIUS
  • Enabling or Disabling TACACS+ or RADIUS
  • Configuring TACACS+
  • Displaying the TACACS+ Settings
  • Configuring RADIUS
  • Displaying the RADIUS Settings
• Chapter 23
• 802.1x Port-based Network Access Control
  • Setting Port Roles
  • Enabling or Disabling 802.1x Port-based Network Access Control
  • Configuring Authenticator Port Parameters
  • Configuring Supplicant Port Parameters
  • Displaying the Port-based Network Access Control Parameters
    • Displaying the Port Status
    • Displaying the Port Settings
  • RADIUS Accounting
    • Configuring RADIUS Accounting
    • Displaying the RADIUS Accounting Settings
• Chapter 24
• Denial of Service Defense
  • Configuring Denial of Service Defense
  • Displaying the DoS Settings
• Appendix A
• AT-S63 Default Settings
  • Basic Switch Default Settings
    • Boot Configuration File Default Setting
    • Management Access Default Settings
    • Management Interface Default Settings
    • RJ-45 Serial Terminal Port Default Settings
    • SNTP Default Settings
    • Switch Administration Default Settings
    • System Software Default Settings
  • Enhanced Stacking Default Setting
  • SNMP Default Settings
  • Port Configuration Default Settings
  • Event Log Default Settings
  • Quality of Service
  • IGMP Snooping Default Settings
  • Denial of Service Prevention Default Settings
  • STP, RSTP, and MSTP Default Settings
    • Spanning Tree Switch Settings
    • STP Default Settings
    • RSTP Default Settings
    • MSTP Default Settings
  • VLAN Default Settings
  • GVRP Default Settings
  • Port Security Default Settings
  • 802.1x Port-Based Network Access Control Default Settings
  • Web Server Default Settings
  • SSL Default Settings
  • PKI Default Settings
  • SSH Default Settings
  • Server-Based Authentication Default Settings
    • Server-Based Authentication Default Settings
    • RADIUS Default Settings
    • TACACS+ Client Default Settings
  • Management Access Control List Default Setting
• Index