Document Outline

• Table of Contents
• List of Figures
• Preface
  • How This Guide is Organized
  • Document Conventions
  • Where to Find Web-based Guides
  • Contacting Allied Telesyn
    • Online Support
    • Email and Telephone Support
    • Returning Products
    • For Sales or Corporate Information
    • Management Software Updates
• Chapter 1
• Overview
  • Management Overview
  • Local Management Session
  • Telnet Management Session
  • Web Browser Management Session
  • SNMP Management Session
  • Management Access Levels
• Section I
• Basic Operations
  • Chapter 2
  • Starting a Local or Telnet Management Session
    • Local Management Session
      • Starting a Local Management Session
      • Enhanced Stacking
      • Quitting a Local Session
    • Telnet Management Session
      • Starting a Telnet Management Session
      • Quitting a Telnet Management Session
    • Saving Your Parameter Changes
  • Chapter 3
  • Enhanced Stacking
    • Enhanced Stacking Overview
      • Guidelines
    • Setting a Switch’s Enhanced Stacking Status
    • Selecting a Switch in an Enhanced Stack
      • Returning to the Master Switch
  • Chapter 4
  • Basic Switch Parameters
    • When Does a Switch Need an IP Address?
      • How Do You Assign an IP Address?
    • Configuring an IP Address and Switch Name
    • Activating the BOOTP or DHCP Client Software
    • Rebooting a Switch
    • Configuring the Manager and Operator Passwords
      • Changing the Manager or Operator Password
      • Resetting the Manager Password
    • Setting the System Time
    • Configuring the Console Startup Mode
    • Configuring the Console Timer
    • Enabling or Disabling the Telnet Server
    • Setting the Baud Rate of the RS-232 Terminal Port
    • Pinging a Remote System
    • Returning the AT-S62 Software to the Factory Default Values
      • Retaining the System Files
      • Deleting the System Files
    • Viewing System Hardware and Software Information
    • Setting the Switch’s Temperature Threshold
  • Chapter 5
  • SNMPv1 and SNMPv2c Configuration
    • SNMPv1 and SNMPv2c Overview
      • Default SNMP Community Strings
    • Enabling or Disabling SNMP Management
    • Setting the Authentication Failure Trap
    • Creating an SNMP Community String
    • Modifying a Community String
    • Displaying the SNMP Community Strings
  • Chapter 6
  • Port Parameters
    • Displaying Port Status
    • Configuring Port Parameters
    • Setting the Rate Limit
  • Chapter 7
  • MAC Address Table
    • MAC Address Overview
    • Displaying MAC Addresses
    • Adding Static Unicast and Multicast MAC Addresses
    • Deleting Unicast and Multicast MAC Addresses
    • Deleting All Dynamic MAC Addresses
    • Changing the Aging Time
  • Chapter 8
  • Static and LACP Port Trunks
    • Port Trunk Overview
      • Static Port Trunk Overview
      • LACP Trunk Overview
      • Load Distribution Methods
    • Managing Static Port Trunks
      • Creating a Static Port Trunk
      • Modifying a Static Port Trunk
      • Deleting a Static Port Trunk
    • Managing LACP Trunks
      • Enabling or Disabling LACP
      • Setting a LACP System Priority
      • Creating an Aggregator
      • Modifying an Aggregator
      • Deleting an Aggregator
      • Configuring LACP Port Parameters
      • Displaying LACP Port or Aggregator Status
  • Chapter 9
  • Port Mirroring
    • Port Mirroring Overview
    • Creating a Port Mirror
    • Deleting a Port Mirror
  • Chapter 10
  • Ethernet Statistics
    • Displaying Port Statistics
    • Clearing Port Counters
• Section II
• Advanced Operations
  • Chapter 11
  • File System
    • File System Overview
      • File Naming Conventions
    • Working with Boot Configuration Files
      • Creating a Boot Configuration File
      • Setting the Active Boot Configuration File
      • Viewing a Boot Configuration File
      • Editing a Boot Configuration File
      • Troubleshooting a Boot Configuration File
    • Copying, Renaming, and Deleting System Files
    • Displaying System Files
  • Chapter 12
  • File Downloads and Uploads
    • Downloading a New AT-S62 Image File onto a Switch
      • Guidelines
      • Downloading an AT-S62 Image from a Local Management Session
      • Downloading an AT-S62 Image from a Telnet Management Session
    • Uploading an AT-S62 Image File Switch to Switch
    • Uploading an AT-S62 Configuration File Switch to Switch
    • Downloading a System File
      • Guidelines
      • Downloading a File from a Local Management Session
      • Downloading a File from a Telnet Management Session
    • Uploading a System File
      • Guidelines
      • Uploading a File from a Local Management Session
      • Uploading a File from a Telnet Management Session
  • Chapter 13
  • Event Log and Syslog Servers
    • Event Log and Syslog Server Overview
    • Managing the Event Log
      • Enabling or Disabling the Event Log
      • Displaying the Event Log
      • Modifying the Event Log Full Action
      • Saving the Event Log
      • Clearing the Event Log
    • Managing Syslog Server Definitions
      • Creating a Syslog Server Definition
      • Modifying a Syslog Server Definition
      • Deleting a Syslog Server Definition
      • Displaying a Syslog Server Definition
  • Chapter 14
  • Classifiers
    • Classifier Overview
      • Classifier Criteria
      • Classifier Guidelines
    • Creating a Classifier
    • Modifying a Classifier
    • Deleting a Classifier
    • Deleting All Classifiers
    • Displaying Classifiers
  • Chapter 15
  • Access Control Lists
    • Access Control List (ACL) Overview
      • Parts of an ACL
      • Guidelines
      • Examples
    • Creating an ACL
    • Modifying an ACL
    • Deleting an ACL
    • Deleting All ACLs
    • Displaying ACLs
  • Chapter 16
  • Quality of Service
    • Quality of Service Overview
      • Classifiers
      • Flow Groups
      • Traffic Classes
      • Policies
      • QoS Policy Guidelines
      • Packet Processing
      • Bandwidth Allocation
      • Packet Prioritization
      • Replacing Priorities
      • VLAN Tag User Priorities
      • DSCP Values
      • DiffServ Domains
      • Examples
    • Managing Flow Groups
      • Creating a Flow Group
      • Modifying a Flow Group
      • Deleting a Flow Group
      • Displaying Flow Groups
    • Managing Traffic Classes
      • Creating a Traffic Class
      • Modifying a Traffic Class
      • Deleting a Traffic Class
      • Displaying Traffic Classes
    • Managing Policies
      • Creating a Policy
      • Modifying a Policy
      • Deleting a Policy
      • Displaying Policies
  • Chapter 17
  • Class of Service
    • Class of Service Overview
      • Scheduling
    • Configuring CoS
    • Mapping CoS Priorities to Egress Queues
    • Configuring Egress Scheduling
    • Displaying Port CoS Priorities
  • Chapter 18
  • IGMP Snooping
    • IGMP Snooping Overview
    • Activating IGMP Snooping
    • Displaying a List of Host Nodes
    • Displaying a List of Multicast Routers
  • Chapter 19
  • Denial of Service Defense
    • Denial of Service Defense Overview
      • SYN Flood Attack
      • SMURF Attack
      • Land Attack
      • Teardrop Attack
      • Ping of Death Attack
      • IP Options Attack
      • Denial of Service Defense Guidelines
    • Enabling or Disabling Denial of Service Prevention
  • Chapter 20
  • Power Over Ethernet
    • Power Over Ethernet Overview
      • PoE Implementation on the AT-8524POE Switch
      • Power Budgeting
      • Port Prioritization
      • PoE Device Classes
    • Setting the PoE Threshold
    • Configuring PoE Port Settings
    • Displaying PoE Status and Settings
  • Chapter 21
  • Networking Stack
    • Managing the Address Resolution Protocol Table
      • Displaying the ARP Table
      • Deleting an ARP Entry
      • Deleting All ARP Entries
      • Configuring the ARP Table Timeout Value
    • Displaying the Routing Table
    • Displaying the TCP Connections Table
    • Deleting a TCP Connection
    • Displaying the TCP Global Information Table
• Section III
• SNMPv3 Operations
  • Chapter 22
  • SNMPv3 Configuration
    • SNMPv3 Overview
      • SNMPv3 Authentication Protocols
      • SNMPv3 Privacy Protocol
      • SNMPv3 MIB Views
      • SNMPv3 Storage Types
      • SNMPv3 Message Notification
      • SNMPv3 Tables
      • SNMPv3 Configuration Example
    • Configuring the SNMPv3 Protocol
    • Configuring the SNMPv3 User Table
      • Creating an SNMPv3 User Table Entry
      • Deleting an SNMPv3 User Table Entry
      • Modifying an SNMPv3 User Table Entry
    • Configuring the SNMPv3 View Table
      • Creating an SNMPv3 View Table Entry
      • Deleting an SNMPv3 View Table Entry
      • Modifying an SNMPv3 View Table Entry
    • Configuring the SNMPv3 Access Table
      • Creating an SNMPv3 Access Table Entry
      • Deleting an SNMPv3 Access Table Entry
      • Modifying an SNMPv3 Access Table Entry
    • Configuring the SNMPv3 SecurityToGroup Table
      • Creating an SNMPv3 SecurityToGroup Table Entry
      • Deleting an SNMPv3 SecurityToGroup Table Entry
      • Modifying an SNMPv3 SecurityToGroup Table Entry
    • Configuring the SNMPv3 Notify Table
      • Creating an SNMPv3 Notify Table Entry
      • Deleting an SNMPv3 Notify Table Entry
      • Modifying an SNMPv3 Notify Table Entry
    • Configuring the SNMPv3 Target Address Table
      • Creating an SNMPv3 Target Address Table Entry
      • Deleting an SNMPv3 Target Address Table Entry
      • Modifying an SNMPv3 Target Address Table Entry
    • Configuring the SNMPv3 Target Parameters Table
      • Creating an SNMPv3 Target Parameters Table Entry
      • Deleting an SNMPv3 Target Parameters Table Entry
      • Modifying an SNMPv3 Target Parameters Table Entry
    • Configuring the SNMPv3 Community Table
      • Creating an SNMPv3 Community Table Entry
      • Deleting an SNMPv3 Community Table Entry
      • Modifying an SNMPv3 Community Table Entry
    • Displaying SNMPv3 Table Menus
      • Displaying the Display SNMPv3 User Table Menu
      • Displaying the Display SNMPv3 View Table Menu
      • Displaying the Display SNMPv3 Access Table Menu
      • Displaying the Display SNMPv3 SecurityToGroup Table Menu
      • Displaying the Display SNMPv3 Notify Table Menu
      • Displaying the Display SNMPv3 Target Address Table Menu
      • Displaying the Display SNMPv3 Target Parameters Table Menu
      • Displaying the Display SNMPv3 Community Table Menu
• Section IV
• Spanning Tree Protocols
  • Chapter 23
  • Spanning Tree and Rapid Spanning Tree Protocols
    • STP and RSTP Overview
      • Bridge Priority and the Root Bridge
      • Mixed STP and RSTP Network
      • Spanning Tree and VLANs
    • Enabling or Disabling a Spanning Tree Protocol
    • Configuring STP
      • Configuring STP Bridge Settings
      • Configuring STP Port Settings
      • Displaying STP Port Settings
    • Configuring RSTP
      • Configuring RSTP Bridge Settings
      • Configuring RSTP Port Settings
      • Displaying Port RSTP Status
  • Chapter 24
  • Multiple Spanning Tree Protocol
    • MSTP Overview
      • Multiple Spanning Tree Instance (MSTI)
      • VLAN and MSTI Associations
      • Ports in Multiple MSTIs
      • Multiple Spanning Tree Regions
      • MSTP with STP and RSTP
      • Summary of Guidelines
    • Configuring MSTP Bridge Settings
    • Configuring the CIST Priority
    • Creating, Deleting, and Modifying MSTIs
      • Creating an MSTI
      • Deleting an MSTI
      • Modifying an MSTI
    • Associating VLANs to MSTI IDs
      • Adding VLAN Associations to an MSTI
      • Removing VLAN Associations from an MSTI
      • Replacing VLAN Associations to an MSTI
      • Removing All VLAN Associations from an MSTI
    • Configuring MSTP Port Settings
      • Configuring Generic MSTP Port Settings
      • Configuring MSTI-specific Port Parameters
    • Displaying MSTP Port Settings and Status
• Section V
• Virtual LANs
  • Chapter 25
  • Tagged and Port-based Virtual LANs
    • VLAN Overview
    • Port-based VLAN Overview
      • General Rules for Creating a Port- based VLAN
      • Drawbacks of Port-based VLANs
      • Port-based Example 1
      • Port-based Example 2
    • Tagged VLAN Overview
      • General Rules for Creating a Tagged VLAN
      • Tagged VLAN Example
    • Creating a Port-based or Tagged VLAN
    • Example of Creating a Port-based VLAN
    • Example of Creating a Tagged VLAN
    • Modifying a VLAN
    • Displaying VLANs
    • Deleting a VLAN
    • Deleting All VLANs
    • Displaying PVIDs and Port Priorities
    • Enabling or Disabling Ingress Filtering
    • Specifying a Management VLAN
  • Chapter 26
  • GARP VLAN Registration Protocol
    • Basic Overview of GARP VLAN Registration Protocol (GVRP)
      • Guidelines
      • GVRP and Network Security
      • GVRP-inactive Intermediate Switches
    • Technical Overview of Generic Attribute Registration Protocol (GARP)
    • Configuring GVRP
    • Enabling or Disabling GVRP on a Port
    • Converting a Dynamic GVRP VLAN
    • Displaying GVRP Parameters and Statistics
      • GVRP Counters
      • GVRP Database
      • GIP Connected Ports Ring
      • GVRP State Machine
  • Chapter 27
  • Multiple VLAN Modes
    • Multiple VLAN Mode Overview
      • 802.1Q- Compliant Multiple VLAN mode
      • Non-802.1Q Compliant Multiple VLAN Mode
    • Selecting a VLAN Mode
    • Displaying VLAN Information
  • Chapter 28
  • Protected Ports VLANs
    • Protected Ports VLAN Overview
      • Protected Ports VLAN Guidelines
    • Creating a Protected Ports VLAN
    • Modifying a Protected Ports VLAN
    • Displaying a Protected Port VLAN
    • Deleting a Protected Ports VLAN
• Section VI
• Port Security
  • Chapter 29
  • MAC Address Security
    • MAC Address Security Overview
      • Automatic
      • Limited
      • Secured
      • Locked
      • Security Violations and Intrusion Actions
      • Guidelines
    • Configuring MAC Address Port Security
    • Displaying Port Security Levels
  • Chapter 30
  • 802.1x Port-based Access Control
    • 802.1x Port-based Access Control Overview
      • Authentication Process
      • Port Roles
      • RADIUS Accounting
      • General Steps
      • Port-based Access Control Guidelines
    • Enabling and Disabling Port-based Access Control
    • Setting Port Roles
    • Configuring Authenticator Port Parameters
    • Configuring Supplicant Port Parameters
    • Configuring RADIUS Accounting
• Section VII
• Management Security
  • Chapter 31
  • Web Server
    • Web Server Overview
      • Supported Protocols
      • General Steps to Configuring the Web Server for Encryption
    • Configuring the Web Server
  • Chapter 32
  • Encryption Keys
    • Basic Overview
      • Encryption Key Length
      • Encryption Key Guidelines
    • Technical Overview
      • Data Encryption
      • Data Authentication
      • Key Exchange Algorithms
    • Creating an Encryption Key
    • Deleting an Encryption Key
    • Modifying an Encryption Key
    • Exporting an Encryption Key
    • Importing an Encryption Key
  • Chapter 33
  • Public Key Infrastructure Certificates
    • Basic Overview
      • Types of Certificates
      • Distinguished Names
      • SSL and Enhanced Stacking
      • Guidelines
    • Technical Overview
      • SSL Encryption
      • User Verification
      • Authentication
      • Public Key Infrastructure
      • Public Keys
      • Message Encryption
      • Digital Signatures
      • Certificates
      • Elements of a Public Key Infrastructure
      • Certificate Validation
      • Certificate Revocation Lists (CRLs)
      • PKI Implementation
    • Creating a Self-signed Certificate
    • Adding a Certificate to the Database
    • Modifying a Certificate
    • Deleting a Certificate
    • Viewing a Certificate
    • Generating an Enrollment Request
    • Installing CA Certificates onto a Switch
    • Configuring PKI
    • Configuring SSL
  • Chapter 34
  • Secure Shell (SSH) Protocol
    • SSH Overview
      • Support for SSH
      • SSH Server
      • SSH Clients
      • SSH and Enhanced Stacking
      • Guidelines
      • General Steps to Configuring SSH
    • Configuring the SSH Server
    • Displaying SSH Information
  • Chapter 35
  • RADIUS and TACACS+ Authentication Protocols
    • TACACS+ and RADIUS Overview
      • Guidelines
    • Configuring Authentication Protocol Settings
      • Displaying RADIUS Status and Settings
  • Chapter 36
  • Management Access Control List
    • Management Access Control List Overview
      • Parts of a Management ACE
      • Management ACL Guidelines
      • Management ACL Examples
    • Creating a Management ACL
    • Adding, Deleting, and Viewing ACEs
• Appendix A
  • AT-S62 Default Settings
    • Basic Switch Default Settings
      • Boot Configuration File Default Setting
      • Management Access Default Settings
      • Management Interface Default Settings
      • RS-232 Port Default Settings
      • SNTP Default Settings
      • Switch Administration Default Settings
      • System Software Default Settings
    • Denial of Service Defense Default Settings
    • Enhanced Stacking Default Setting
    • Event Log Default Settings
    • GVRP Default Settings
    • IGMP Snooping Default Settings
    • MAC Address Security Default Settings
    • Management Access Control List Default Setting
    • PKI Default Settings
    • Port Configuration Default Settings
    • 802.1x Port-Based Network Access Control Default Settings
    • Power Over Ethernet
    • Class of Service
    • Server-Based Authentication Default Settings
      • Server-Based Authentication Default Settings
      • RADIUS Default Settings
      • TACACS+ Client Default Settings
    • SNMP Default Settings
    • STP, RSTP, and MSTP Default Settings
      • Spanning Tree Switch Settings
      • STP Default Settings
      • RSTP Default Settings
      • MSTP Default Settings
    • SSH Default Settings
    • SSL Default Settings
    • VLAN Default Settings
    • Web Server Default Settings
• Appendix B
  • SNMPv3 Configuration Examples
    • SNMPv3 Configuration Examples
      • SNMPv3 Manager Configuration
      • SNMPv3 Operator Configuration
      • SNMPv3 Worksheet
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • X