Document Outline

• Table of Contents
• List of Figures
• Preface
  • How This Guide is Organized
  • Document Conventions
  • Where to Find Web-based Guides
  • Contacting Allied Telesyn
    • Online Support
    • Email and Telephone Support
    • Returning Products
    • For Sales or Corporate Information
  • Management Software Updates
• Chapter 1
• Overview
  • Management Overview
  • Local Management Session
  • Telnet Management Session
  • Web Browser Management Session
  • SNMP Management Session
  • Management Access Levels
• Section I
• Basic Operations
  • Chapter 2
  • Starting a Local or Telnet Management Session
    • Local Management Session
      • Starting a Local Management Session
      • Enhanced Stacking
      • Quitting a Local Session
    • Telnet Management Session
      • Starting a Telnet Management Session
      • Quitting a Telnet Management Session
    • Saving Your Parameter Changes
  • Chapter 3
  • Enhanced Stacking
    • Enhanced Stacking Overview
      • Guidelines
    • Setting a Switch’s Enhanced Stacking Status
    • Selecting a Switch in an Enhanced Stack
      • Returning to the Master Switch
  • Chapter 4
  • Basic Switch Parameters
    • When Does a Switch Need an IP Address?
      • How Do You Assign an IP Address?
    • Configuring an IP Address and Switch Name
    • Activating the BOOTP and DHCP Client Software
    • Rebooting a Switch
    • Configuring the Manager and Operator Passwords
    • Setting the System Time
    • Configuring the Console Startup Mode
    • Configuring the Console Timer
    • Enabling or Disabling the Telnet Server
    • Setting the Baud Rate of the RS-232 Terminal Port
    • Pinging a Remote System
    • Returning the AT-S62 Software to the Factory Default Values
    • Viewing System Hardware and Software Information
    • Setting the Switch’s Temperature Threshold
  • Chapter 5
  • SNMPv1 and SNMPv2c Configuration
    • SNMPv1 and SNMPv2c Overview
      • Default SNMP Community Strings
    • Enabling or Disabling SNMP Management
    • Setting the Authentication Failure Trap
    • Creating an SNMP Community String
    • Modifying a Community String
    • Displaying the SNMP Community Strings
  • Chapter 6
  • Port Parameters
    • Displaying Port Status
    • Configuring Port Parameters
    • Setting the Rate Limit
  • Chapter 7
  • MAC Address Table
    • MAC Address Overview
    • Displaying MAC Addresses
    • Adding Static Unicast and Multicast MAC Addresses
    • Deleting Unicast and Multicast MAC Addresses
    • Deleting All Dynamic MAC Addresses
    • Changing the Aging Time
  • Chapter 8
  • Port Trunking
    • Port Trunking Overview
      • Port Trunking Guidelines
      • Port Operating Specifications
      • Load Distribution Methods
    • Creating a Port Trunk
    • Modifying a Port Trunk
    • Deleting a Port Trunk
  • Chapter 9
  • Port Mirroring
    • Port Mirroring Overview
    • Creating a Port Mirror
    • Deleting a Port Mirror
  • Chapter 10
  • Ethernet Statistics
    • Displaying Port Statistics
    • Clearing Port Counters
• Section II
• Advanced Operations
  • Chapter 11
  • File System
    • File System Overview
      • File Naming Conventions
    • Working with Boot Configuration Files
      • Creating a Boot Configuration File
      • Setting the Active Boot Configuration File
      • Viewing a Boot Configuration File
      • Editing a Boot Configuration File
      • Troubleshooting a Boot Configuration File
    • Copying, Renaming, and Deleting System Files
    • Displaying System Files
  • Chapter 12
  • File Downloads and Uploads
    • Downloading the AT-S62 Image File onto a Switch
      • Downloading the AT-S62 Image from a Local Management Session
      • Downloading the AT-S62 Image from a Telnet Management Session
    • Downloading an AT-S62 Image File Switch to Switch
    • Downloading an AT-S62 Configuration File Switch to Switch
    • Downloading a System File
      • Downloading a System File from a Local Management Session
      • Downloading a System File from a Telnet Management Session
    • Uploading a System File
      • Uploading a System File from a Local Management Session
      • Uploading a System File from a Telnet Management Session
  • Chapter 13
  • Event Log
    • Event Log Overview
    • Enabling or Disabling the Event Log
    • Displaying Events
      • Modules
    • Saving the Event Log
    • Clearing the Event Log
  • Chapter 14
  • Quality of Service
    • Quality of Service Overview
      • Class of Service (CoS)
      • Scheduling
    • Configuring CoS
    • Mapping CoS Priorities to Egress Queues
    • Configuring Egress Scheduling
    • Displaying Port CoS Priorities
  • Chapter 15
  • IGMP Snooping
    • IGMP Snooping Overview
    • Activating IGMP Snooping
    • Displaying a List of Host Nodes
    • Displaying a List of Multicast Routers
  • Chapter 16
  • Denial of Service Defense
    • Denial of Service Defense Overview
      • SYN Flood Attack
      • SMURF Attack
      • Land Attack
      • Teardrop Attack
      • Ping of Death Attack
      • IP Options Attack
      • Denial of Service Defense Guidelines
    • Enabling or Disabling Denial of Service Prevention
• Section III
• SNMPv3 Operations
  • Chapter 17
  • SNMPv3 Configuration
    • SNMPv3 Overview
      • SNMPv3 Authentication Protocols
      • SNMPv3 Privacy Protocol
      • SNMPv3 MIB Views
      • SNMPv3 Storage Types
      • SNMPv3 Message Notification
      • SNMPv3 Tables
      • SNMPv3 Configuration Example
    • Configuring the SNMPv3 Protocol
    • Configuring the SNMPv3 User Table
      • Creating an SNMPv3 User Table Entry
      • Deleting an SNMPv3 User Table Entry
      • Modifying an SNMPv3 User Table Entry
    • Configuring the SNMPv3 View Table
      • Creating an SNMPv3 View Table Entry
      • Deleting an SNMPv3 View Table Entry
      • Modifying an SNMPv3 View Table Entry
    • Configuring the SNMPv3 Access Table
      • Creating an SNMPv3 Access Table Entry
      • Deleting an SNMPv3 Access Table Entry
      • Modifying an SNMPv3 Access Table Entry
    • Configuring the SNMPv3 SecurityToGroup Table
      • Creating an SNMPv3 SecurityToGroup Table Entry
      • Deleting an SNMPv3 SecurityToGroup Table Entry
      • Modifying an SNMPv3 SecurityToGroup Table Entry
    • Configuring the SNMPv3 Notify Table
      • Creating an SNMPv3 Notify Table Entry
      • Deleting an SNMPv3 Notify Table Entry
      • Modifying an SNMPv3 Notify Table Entry
    • Configuring the SNMPv3 Target Address Table
      • Creating an SNMPv3 Target Address Table Entry
      • Deleting an SNMPv3 Target Address Table Entry
      • Modifying an SNMPv3 Target Address Table Entry
    • Configuring the SNMPv3 Target Parameters Table
      • Creating an SNMPv3 Target Parameters Table Entry
      • Deleting an SNMPv3 Target Parameters Table Entry
      • Modifying an SNMPv3 Target Parameters Table Entry
    • Configuring the SNMPv3 Community Table
      • Creating an SNMPv3 Community Table Entry
      • Deleting an SNMPv3 Community Table Entry
      • Modifying an SNMPv3 Community Table Entry
    • Displaying SNMPv3 Table Menus
      • Displaying the Display SNMPv3 User Table Menu
      • Displaying the Display SNMPv3 View Table Menu
      • Displaying the Display SNMPv3 Access Table Menu
      • Displaying the Display SNMPv3 SecurityToGroup Table Menu
      • Displaying the Display SNMPv3 Notify Table Menu
      • Displaying the Display SNMPv3 Target Address Table Menu
      • Displaying the Display SNMPv3 Target Parameters Table Menu
      • Displaying the Display SNMPv3 Community Table Menu
• Section IV
• Spanning Tree Protocols
  • Chapter 18
  • Spanning Tree and Rapid Spanning Tree Protocols
    • STP and RSTP Overview
      • Bridge Priority and the Root Bridge
      • Mixed STP and RSTP Network
      • Spanning Tree and VLANs
    • Enabling or Disabling a Spanning Tree Protocol
    • Configuring STP
      • Configuring STP Bridge Settings
      • Configuring STP Port Settings
      • Displaying STP Port Settings
    • Configuring RSTP
      • Configuring RSTP Bridge Settings
      • Configuring RSTP Port Settings
      • Displaying Port RSTP Status
  • Chapter 19
  • Multiple Spanning Tree Protocol
    • MSTP Overview
      • Multiple Spanning Tree Instance (MSTI)
      • VLAN and MSTI Associations
      • Multiple Spanning Tree Regions
      • Summary of Guidelines
    • Configuring MSTP Bridge Settings
    • Configuring the CIST Priority
    • Creating, Deleting, and Modifying MSTI IDs
      • Creating an MSTI ID
      • Deleting an MSTI ID
      • Modifying an MSTI ID
    • Associating VLANs to MSTI IDs
      • Associating a VLAN to an MSTI ID
      • Removing a VLAN from an MSTI ID
      • Associating VLANs to an MSTI ID and Deleting All Associated VLANs
    • Configuring MSTP Port Settings
    • Displaying MSTP Port Settings and Status
• Section V
• Virtual LANs
  • Chapter 20
  • Tagged and Port-based Virtual LANs
    • VLAN Overview
    • Port-based VLAN Overview
      • General Rules for Creating a Port-based VLAN
      • Drawbacks of Port-based VLANs
      • Port-based Example 1
      • Port-based Example 2
    • Tagged VLAN Overview
      • General Rules for Creating a Tagged VLAN
      • Tagged VLAN Example
    • Creating a Port-based or Tagged VLAN
    • Example of Creating a Port-based VLAN
    • Example of Creating a Tagged VLAN
    • Modifying a VLAN
    • Displaying VLANs
    • Deleting a VLAN
    • Deleting All VLANs
    • Displaying PVIDs and Port Priorities
    • Enabling or Disabling Ingress Filtering
    • Specifying a Management VLAN
  • Chapter 21
  • GARP VLAN Registration Protocol
    • Basic Overview of GARP VLAN Registration Protocol (GVRP)
      • Guidelines
      • GVRP and Network Security
      • GVRP-inactive Intermediate Switches
    • Technical Overview of Generic Attribute Registration Protocol (GARP)
    • Configuring GVRP
    • Enabling or Disabling GVRP on a Port
    • Converting a Dynamic GVRP VLAN
    • Displaying GVRP Parameters and Statistics
      • GVRP Counters
      • GVRP Database
      • GIP Connected Ports Ring
      • GVRP State Machine
  • Chapter 22
  • Multiple VLAN Modes
    • Multiple VLAN Mode Overview
      • 802.1Q- Compliant Multiple VLAN mode
      • Non-802.1Q Compliant Multiple VLAN Mode
    • Selecting a VLAN Mode
    • Displaying VLAN Information
• Section VI
• Port Security
  • Chapter 23
  • MAC Address Security
    • MAC Address Security Overview
      • Automatic
      • Limited
      • Secured
      • Locked
      • Security Violations and Intrusion Actions
      • Guidelines
    • Configuring MAC Address Port Security
    • Displaying Port Security Levels
  • Chapter 24
  • 802.1x Port-based Access Control
    • 802.1x Port-based Access Control Overview
      • Authentication Process
      • Port Roles
      • RADIUS Accounting
      • General Steps
      • Port-based Access Control Guidelines
    • Enabling and Disabling Port-based Access Control
    • Setting Port Roles
    • Configuring Authenticator Port Parameters
    • Configuring Supplicant Port Parameters
    • Configuring RADIUS Accounting
• Section VII
• Management Security
  • Chapter 25
  • Web Server
    • Web Server Overview
      • Supported Protocols
      • General Steps to Configuring the Web Server for Encryption
    • Configuring the Web Server
  • Chapter 26
  • Encryption Keys
    • Basic Overview
      • Encryption Key Length
      • Encryption Key Guidelines
    • Technical Overview
      • Data Encryption
      • Data Authentication
      • Key Exchange Algorithms
    • Creating an Encryption Key
    • Deleting an Encryption Key
    • Modifying an Encryption Key
    • Exporting an Encryption Key
    • Importing an Encryption Key
  • Chapter 27
  • Public Key Infrastructure Certificates
    • Basic Overview
      • Types of Certificates
      • Distinguished Names
      • SSL and Enhanced Stacking
      • Guidelines
    • Technical Overview
      • SSL Encryption
      • User Verification
      • Authentication
      • Public Key Infrastructure
      • Public Keys
      • Message Encryption
      • Digital Signatures
      • Certificates
      • Elements of a Public Key Infrastructure
      • Certificate Validation
      • Certificate Revocation Lists (CRLs)
      • PKI Implementation
    • Creating a Self-signed Certificate
    • Adding a Certificate to the Database
    • Modifying a Certificate
    • Deleting a Certificate
    • Viewing a Certificate
    • Generating an Enrollment Request
    • Installing CA Certificates onto a Switch
    • Configuring PKI
    • Configuring SSL
  • Chapter 28
  • Secure Shell (SSH) Protocol
    • SSH Overview
      • Support for SSH
      • SSH Server
      • SSH Clients
      • SSH and Enhanced Stacking
      • Guidelines
      • General Steps to Configuring SSH
    • Configuring the SSH Server
    • Displaying SSH Information
  • Chapter 29
  • RADIUS and TACACS+ Authentication Protocols
    • TACACS+ and RADIUS Overview
      • Guidelines
    • Configuring Authentication Protocol Settings
      • Displaying RADIUS Status and Settings
  • Chapter 30
  • Management Access Control List
    • Management Access Control List Overview
      • Parts of a Management ACE
      • Management ACL Guidelines
      • Management ACL Examples
    • Creating the Management ACL
    • Adding, Deleting, and Viewing ACEs
• Section VIII
• Web Browser Management
  • Chapter 31
  • Starting a Web Browser Management Session
    • Starting a Web Browser Management Session
      • Browser Tools
    • Saving Your Parameter Changes
    • Quitting a Web Browser Management Session
  • Chapter 32
  • Enhanced Stacking
    • Setting a Switch’s Enhanced Stacking Status
    • Selecting a Switch in an Enhanced Stack
      • Returning to the Master Switch
    • Displaying the Enhanced Stacking Status
  • Chapter 33
  • Basic Switch Parameters
    • Configuring an IP Address and Switch Name
    • Activating the BOOTP and DHCP Client Software
    • Displaying System Information
    • Configuring the Manager and Operator Passwords
    • Rebooting a Switch
    • Pinging a Remote System
    • Returning the AT-S62 Software to the Factory Default Values
  • Chapter 34
  • SNMPv1 and SNMPv2c Community Strings
    • Enabling or Disabling SNMP Management
    • Creating a New SNMPv1 or SNMPv2c Community String
    • Modifying a Community String
    • Deleting a Community String
    • Displaying the SNMP Status and Community Strings
  • Chapter 35
  • Port Parameters
    • Configuring Port Parameters
    • Displaying Port Status and Statistics
  • Chapter 36
  • MAC Address Table
    • Displaying the MAC Address Table
    • Adding Static Unicast and Multicast MAC Addresses
    • Deleting Unicast and Multicast MAC Addresses
    • Changing the Aging Time
  • Chapter 37
  • Port Trunking
    • Creating a Port Trunk
    • Modifying a Port Trunk
    • Deleting a Port Trunk
    • Displaying the Port Trunks
  • Chapter 38
  • Port Mirroring
    • Creating a Port Mirror
    • Modifying or Disabling a Port Mirror
    • Deleting a Port Mirror
    • Displaying the Port Mirror
  • Chapter 39
  • File Downloads and Uploads
    • Downloading a File
    • Uploading a File
  • Chapter 40
  • Event Log
    • Enabling or Disabling the Event Log
    • Displaying Events
    • Saving the Event Log
    • Clearing the Event Log
  • Chapter 41
  • Quality of Service
    • Configuring CoS
    • Mapping CoS Priorities to Egress Queues
    • Configuring Egress Scheduling
    • Displaying the CoS Settings
    • Displaying QoS Scheduling
  • Chapter 42
  • IGMP Snooping
    • Configuring IGMP Snooping
    • Displaying a List of Host Nodes and Multicast Routers
  • Chapter 43
  • Denial of Service Defense
    • Configuring Denial of Service Attack Defense
    • Displaying the DoS Settings
  • Chapter 44
  • SNMPv3 Protocol
    • Configuring the SNMPv3 Protocol
    • Enabling the SNMP Protocol
    • Configuring the SNMPv3 User Table
      • Creating a User Table Entry
      • Deleting a User Table Entry
      • Modifying a User Table Entry
    • Configuring the SNMPv3 View Table
      • Creating a View Table Entry
      • Deleting a View Table Entry
      • Modifying a View Table Entry
    • Configuring the SNMPv3 Access Table
      • Creating an Access Table
      • Deleting an Access Table Entry
      • Modifying an Access Table Entry
    • Configuring the SNMPv3 SecurityToGroup Table
      • Creating a SecurityToGroup Table Entry
      • Deleting a SecurityToGroup Table Entry
      • Modifying a SecurityToGroup Table Entry
    • Configuring the SNMPv3 Notify Table
      • Creating a Notify Table Entry
      • Deleting a Notify Table Entry
      • Modifying a Notify Table Entry
    • Configuring the SNMPv3 Target Address Table
      • Creating a Target Address Table Entry
      • Deleting a Target Address Table Entry
      • Modifying Target Address Table Entry
    • Configuring the SNMPv3 Target Parameters Table
      • Creating a Target Parameters Table Entry
      • Deleting a Target Parameters Table Entry
      • Modifying a Target Parameters Table Entry
    • Configuring the SNMPv3 Community Table
      • Creating an SNMPv3 Community Table Entry
      • Deleting an SNMPv3 Community Table Entry
      • Modifying an SNMPv3 Community Table Entry
    • Displaying SNMPv3 Tables
      • Displaying User Table Entries
      • Displaying View Table Entries
      • Displaying Access Table Entries
      • Displaying SecurityToGroup Table Entries
      • Displaying Notify Table Entries
      • Displaying Target Address Table Entries
      • Displaying Target Parameters Table Entries
      • Displaying SNMPv3 Community Table Entries
  • Chapter 45
  • STP, RSTP, and MSTP
    • Enabling or Disabling Spanning Tree
    • Configuring STP
    • Configuring RSTP
    • Configuring MSTP
      • Configuring MSTP and CIST Parameters
      • Associating VLANs to MSTIs
      • Configuring MSTP Port Parameters
    • Displaying Spanning Tree Settings
  • Chapter 46
  • Virtual LANs
    • Creating a New Port-Based or Tagged VLAN
    • Modifying a Port-Based or Tagged VLAN
    • Deleting a Port-Based or Tagged VLAN
    • Displaying VLANs
    • Selecting a VLAN Mode
    • Specifying a Management VLAN
  • Chapter 47
  • GARP VLAN Registration Protocol
    • Configuring GVRP
    • Enabling or Disabling GVRP on a Port
    • Displaying the GVRP Settings
  • Chapter 48
  • MAC Address Security
    • Displaying MAC Address Security Levels
  • Chapter 49
  • 802.1x Port-based Access Control
    • Enabling and Disabling Port-based Access Control
    • Setting Port Roles
    • Configuring Authenticator Port Parameters
    • Configuring Supplicant Port Parameters
    • Displaying the Port-based Access Control Settings
  • Chapter 50
  • Secure Shell Protocol
    • Configuring the SSH Server
    • Displaying SSH Information
  • Chapter 51
  • Encryption Keys, PKI, and SSL
    • Displaying Encryption Keys
    • Displaying PKI Settings and Certificates
    • Displaying the SSL Settings
  • Chapter 52
  • RADIUS and TACACS+ Authentication Protocols
    • Configuring RADIUS and TACACS+
    • Displaying the RADIUS or TACSACS+ Settings
  • Chapter 53
  • Management Access Control List
    • Creating a Management ACL
    • Adding or Deleting an ACE
    • Displaying the Management ACL
• Appendix A
  • AT-S62 Default Settings
    • Basic Switch Default Settings
      • Boot Configuration File Default Setting
      • Management Access Default Settings
      • Management Interface Default Settings
      • RS-232 Port Default Settings
      • SNTP Default Settings
      • Switch Administration Default Settings
      • System Software Default Settings
    • Enhanced Stacking Default Setting
    • SNMP Default Settings
    • Port Configuration Default Settings
    • Event Log Default Settings
    • Quality of Service
    • IGMP Snooping Default Settings
    • Denial of Service Prevention Default Settings
    • STP, RSTP, and MSTP Default Settings
      • Spanning Tree Switch Settings
      • STP Default Settings
      • RSTP Default Settings
      • MSTP Default Settings
    • VLAN Default Settings
    • GVRP Default Settings
    • MAC Address Security Default Settings
    • 802.1x Port-Based Network Access Control Default Settings
    • Web Server Default Settings
    • SSL Default Settings
    • PKI Default Settings
    • SSH Default Settings
    • Server-Based Authentication Default Settings
      • Server-Based Authentication Default Settings
      • RADIUS Default Settings
      • TACACS+ Client Default Settings
    • Management Access Control List Default Setting
• Appendix B
  • SNMPv3 Configuration Examples
    • SNMPv3 Configuration Examples
      • SNMPv3 Manager Configuration
      • SNMPv3 Operator Configuration
      • SNMPv3 Worksheet
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • X