Allied Telesis AT-S63 User Manual

Menus interface user’s guide, Management software, At-s63

Text mode
Original mode

613-50570-00 Rev. B

Management
Software

AT-S63

Menus Interface
User’s Guide

AT-9400 Series Layer 2+ Gigabit Ethernet Switches

Version 1.1.0

Table of contents

Document Outline

Contents
- Figure 1: Connecting the Management Cable to the RJ-45 Serial Terminal Port 38
- Figure 2: CLI Prompt 39
- Figure 3: Main Menu 40
- Figure 4: System Administration Menu 46
- Figure 5: System Configuration Menu 47
- Figure 6: System Information Menu 51
- Figure 7: System Utilities Menu 53
- Figure 8: Authentication Configuration Menu 55
- Figure 9: Passwords Configuration Menu 56
- Figure 10: Configure System Time Menu 59
- Figure 11: Console (Serial/Telnet) Configuration Menu 62
- Figure 12: System Hardware Information Menu 69
- Figure 13: Uplink Information Menu 71
- Figure 14: GBIC/SFP Information Menu (Page 1) 72
- Figure 15: GBIC/SFP Information Menu (Page 2) 73
- Figure 16: SNMP Configuration Menu 79
- Figure 17: SNMPv1 & SNMPv2c Community Menu 81
- Figure 18: Modify SNMP Community Menu 84
- Figure 19: Display SNMP Community Menu 88
- Figure 20: Enhanced Stacking Example 92
- Figure 21: Enhanced Stacking Menu 94
- Figure 22: Stacking Services Menu 95
- Figure 23: Stacking Services Menu With List of Switches 96
- Figure 24: Enhanced Stacking Menu 99
- Figure 25: Port Configuration Menu 102
- Figure 26: Port Configuration (Port) Menu 103
- Figure 27: Head of Line Blocking 107
- Figure 28: Flow Control Menu 110
- Figure 29: Filtering Menu 112
- Figure 30: Rate Limiting Menu 114
- Figure 31: Port Statistics Menu 119
- Figure 32: Display Port Statistics Menu 120
- Figure 33: Port Status Menu 123
- Figure 34: Static Port Trunk Example 126
- Figure 35: Example of Multiple Aggregators for Multiple Aggregate Trunks 129
- Figure 36: Example of an Aggregator with Multiple Trunks 130
- Figure 37: Port Trunking and LACP Menu 137
- Figure 38: Static Port Trunking Menu 137
- Figure 39: Create Trunk Menu 138
- Figure 40: Modify Trunk Menu 140
- Figure 41: LACP (IEEE 8023ad) Configuration Menu 144
- Figure 42: Create LACP (IEEE 8023ad) Aggregator Menu 146
- Figure 43: Modify LACP (IEEE 8023ad) Aggregator Menu 148
- Figure 44: Modify LACP (IEEE 8023ad) Aggregator Menu 151
- Figure 45: LACP (IEEE 802.3ad Port Status Menu 152
- Figure 46: LACP (IEEE 802.3ad) Aggregator Status Menu 153
- Figure 47: Port Mirroring Menu #1 157
- Figure 48: Port Mirroring Menu #2 157
- Figure 49: Port Mirroring Menu 161
- Figure 50: Networking Stack Menu 165
- Figure 51: Display ARP Table Menu 166
- Figure 52: Display Route Table Menu 169
- Figure 53: Display TCP Connections Menu 171
- Figure 54: IP Address and TCP Port Number 172
- Figure 55: Display TCP Global Connections Menu 175
- Figure 56: File Operations Menu 184
- Figure 57: View File Menu with Sample Boot Configuration File 188
- Figure 58: List Files Menu for Flash Memory and a Compact Flash Card 196
- Figure 59: List Files Menu for a Compact Flash Card 198
- Figure 60: Display Flash Information Menu 199
- Figure 61: Display Compact Flash Information Menu 202
- Figure 62: Set/Change Compact Flash Directory Menu 203
- Figure 63: Downloads and Uploads Menu 207
- Figure 64: HyperTerminal Window 209
- Figure 65: Send File Window 209
- Figure 66: XModem File Send Window 210
- Figure 67: HyperTerminal Window 219
- Figure 68: Send File Window 219
- Figure 69: XModem File Send Window 219
- Figure 70: HyperTerminal Window 225
- Figure 71: Receive File Window 225
- Figure 72: Event Log Menu 231
- Figure 73: Event Log Example Displayed in Normal Mode 235
- Figure 74: Event Log Example Displayed in Full Mode 236
- Figure 75: Sample Log File View 240
- Figure 76: Configure Log Outputs Menu 242
- Figure 77: Syslog Output Configuration Menu 243
- Figure 78: Configure Log Outputs Menu with Syslog Output Definitions 247
- Figure 79: Syslog Output Configuration Menu for Selected Output ID 249
- Figure 80: User Priority and VLAN Fields within an Ethernet Frame 254
- Figure 81: ToS field in an IP Header 255
- Figure 82: Security and Services Menu 259
- Figure 83: Classifier Configuration Menu 260
- Figure 84: Create Classifier Menu (Page 1) 260
- Figure 85: Create Classifier Menu (Page 2) 261
- Figure 86: Show Classifiers Menu 266
- Figure 87: Display Classifier Menu (Page 1) 267
- Figure 88: Display Classifier Menu (Page 2) 268
- Figure 89: ACL Example 1 272
- Figure 90: ACL Example 2 273
- Figure 91: ACL Example 3 274
- Figure 92: ACL Example 4 275
- Figure 93: ACL Example 5 275
- Figure 94: ACL Example 6 276
- Figure 95: Access Control Lists (ACL) Menu 277
- Figure 96: Create ACL Menu 278
- Figure 97: Modify ACL Menu 280
- Figure 98: Destroy ACL Menu 282
- Figure 99: Show Classifiers Menu 285
- Figure 100: Denial of Service (DoS) Menu 293
- Figure 101: LAN IP Subnet Menu 294
- Figure 102: SYN Flood Configuration Menu 295
- Figure 103: DiffServ Domain Example 303
- Figure 104: QoS Voice Application Example 306
- Figure 105: QoS Video Application Example 308
- Figure 106: QoS Critical Database Example 310
- Figure 107: Policy Component Hierarchy Example 312
- Figure 108: Quality of Service (QoS) menu 313
- Figure 109: Flow Group Configuration Menu 314
- Figure 110: Create Flow Group Menu 314
- Figure 111: Modify Flow Group Menu 316
- Figure 112: Destroy Flow Group Menu 317
- Figure 113: Show Flow Groups Menu 318
- Figure 114: Display Flow Group Detail Menu 319
- Figure 115: Traffic Class Configuration Menu 320
- Figure 116: Create Traffic Class Menu 321
- Figure 117: Modify Traffic Class Menu 325
- Figure 118: Destroy Traffic Class Menu 326
- Figure 119: Show Traffic Classes Menu 327
- Figure 120: Display Traffic Class Details Menu 328
- Figure 121: Policy Configuration Menu 330
- Figure 122: Create Policy Menu 331
- Figure 123: Modify Policy Menu 333
- Figure 124: Show Policies Menu 335
- Figure 125: Display Policy Details Menu 336
- Figure 126: Class of Service (CoS) Menu 344
- Figure 127: Configure Port COS Priorities Menu 344
- Figure 128: Map CoS Priority to Egress Queue Menu 346
- Figure 129: Configure Egress Scheduling Menu 348
- Figure 130: Show Port CoS Priorities Menu 350
- Figure 131: Advanced Configuration Menu 354
- Figure 132: IGMP Snooping Configuration Menu 354
- Figure 133: View Multicast Hosts List Menu 358
- Figure 134: View Multicast Routers List Menu 360
- Figure 135: RRP Snooping Menu 366
- Figure 136: MIB Tree 372
- Figure 137: SNMPv3 User Configuration Process 374
- Figure 138: SNMPv3 Message Notification Process 375
- Figure 139: Configure SNMPv3 Table Menu 381
- Figure 140: Configure SNMPv3 User Table Menu 381
- Figure 141: Modify SNMPv3 User Table Menu 385
- Figure 142: Configure SNMPv3 View Table Menu 391
- Figure 143: Modify SNMPv3 View Table Menu 395
- Figure 144: Configure SNMPv3 Access Table Menu 400
- Figure 145: Modify SNMPv3 Access Table Menu 406
- Figure 146: Configure SNMPv3 SecurityToGroup Table Menu 415
- Figure 147: Modify SNMPv3 SecurityToGroup Table Menu 419
- Figure 148: Configure SNMPv3 Notify Table Menu 423
- Figure 149: Modify SNMPv3 Notify Table Menu 426
- Figure 150: Configure SNMPv3 Target Address Table Menu 430
- Figure 151: Modify SNMPv3 Target Address Table Menu 434
- Figure 152: Configure SNMPv3 Target Parameters Table Menu 443
- Figure 153: Modify SNMPv3 Target Parameters Table Menu 448
- Figure 154: Configure SNMPv3 Community Table Menu 457
- Figure 155: Modify SNMPv3 Community Table Menu 461
- Figure 156: Display SNMPv3 Table Menu 466
- Figure 157: Display SNMPv3 User Table Menu 466
- Figure 158: Display SNMPv3 View Table Menu 467
- Figure 159: Display SNMPv3 Access Table Menu 468
- Figure 160: Display SNMPv3 SecurityToGroup Table Menu 469
- Figure 161: Display SNMPv3 Notify Table Menu 469
- Figure 162: Display SNMPv3 Target Address Table Menu 470
- Figure 163: Display SNMPv3 Target Parameters Table Menu 471
- Figure 164: Display SNMPv3 Community Table Menu 472
- Figure 165: Point-to-Point Ports 482
- Figure 166: Edge Port 482
- Figure 167: Point-to-Point and Edge Port 483
- Figure 168: VLAN Fragmentation 484
- Figure 169: Spanning Tree Configuration Menu 485
- Figure 170: STP Menu 487
- Figure 171: STP Port Parameters Menu 489
- Figure 172: Configure STP Port Settings Menu 490
- Figure 173: Display STP Port Configuration Menu 491
- Figure 174: RSTP Menu 493
- Figure 175: RSTP Port Parameters Menu 495
- Figure 176: Configure RSTP Port Settings Menu 496
- Figure 177: Display RSTP Port Configuration Menu 498
- Figure 178: Display RSTP Port State Menu 499
- Figure 179: VLAN Fragmentation with STP or RSTP 504
- Figure 180: MSTP Example of Two Spanning Tree Instances 505
- Figure 181: Multiple VLANs in a MSTI 506
- Figure 182: Multiple Spanning Tree Region 509
- Figure 183: CIST and VLAN Guideline - Example 1 513
- Figure 184: CIST and VLAN Guideline - Example 2 514
- Figure 185: Spanning Regions - Example 1 515
- Figure 186: MSTP Menu 517
- Figure 187: CIST Menu 520
- Figure 188: MSTI Menu 522
- Figure 189: VLAN-MSTI Association Menu 528
- Figure 190: MSTP Port Parameters Menu 533
- Figure 191: Configure MSTP Port Settings Menu 533
- Figure 192: Configure Per Spanning Tree Port Settings Menu 536
- Figure 193: Display MSTP Port Configuration Menu 538
- Figure 194: Display MSTP Port State Menu 541
- Figure 195: Port-based VLAN - Example 1 553
- Figure 196: Port-based VLAN - Example 2 554
- Figure 197: Example of a Tagged VLAN 559
- Figure 198: VLAN Configuration Menu 561
- Figure 199: Configure VLANs Menu 562
- Figure 200: Create VLAN Menu 562
- Figure 201: Modify VLAN Menu 567
- Figure 202: Expanded Modify VLAN Menu 568
- Figure 203: Show VLANs Menu 571
- Figure 204: Delete VLAN Menu 573
- Figure 205: Expanded Delete VLAN Menu 574
- Figure 206: Show PVIDs Menu 578
- Figure 207: GVRP Example 585
- Figure 208: GARP Architecture 589
- Figure 209: GID Architecture 590
- Figure 210: GARP-GVRP Menu 592
- Figure 211: GVRP Port Parameters Menu 594
- Figure 212: Configure GVRP Port Settings Menu 595
- Figure 213: Display GVRP Port Configuration Menu 596
- Figure 214: Other GVRP Parameters Menu 597
- Figure 215: GVRP Counters Menu (page 1) 598
- Figure 216: GVRP Counters Menu (page 2) 599
- Figure 217: GVRP Database Menu 602
- Figure 218: GIP Connected Ports Ring Menu 604
- Figure 219: GVRP State Machine Menu (page 1) 606
- Figure 220: Display GVRP State Machine Menu (page 2) 607
- Figure 221: VLAN Configuration Menu (Multiple VLAN Mode) 617
- Figure 222: Show VLANs Menu, Multiple VLANS 618
- Figure 223: Create VLAN Menu 623
- Figure 224: Expanded Modify VLAN Menu 627
- Figure 225: Show VLANs Menu 630
- Figure 226: Show VLANs Menu 631
- Figure 227: Delete VLAN Menu 632
- Figure 228: Expanded Delete VLAN Menu 633
- Figure 229: Port Security Menu 641
- Figure 230: Configure Port Security Menu #1 641
- Figure 231: Configure Port Security Menu #2 642
- Figure 232: Display Port Security Menu 644
- Figure 233: Example of the Authenticator Role 651
- Figure 234: Example of the Supplicant Role 652
- Figure 235: Port-based Authentication Across Multiple Switches 655
- Figure 236: Port Access Control (802.1X) Menu 657
- Figure 237: Configure Port Access Role Menu 658
- Figure 238: Configure Authenticator Menu 660
- Figure 239: Configure Authenticator Port Access Parameters Menu 661
- Figure 240: Configure Supplicant Menu 664
- Figure 241: Configure Supplicant Port Access Parameters Menu 665
- Figure 242: Display Port Access Status Menu 667
- Figure 243: Radius Accounting Menu 669
- Figure 244: MAC Address Tables Menu 674
- Figure 245: Display Unicast MAC Addresses Menu 675
- Figure 246: Display All Menu - Unicast MAC Addresses 675
- Figure 247: Display All Menu - Multicast MAC Addresses 676
- Figure 248: MAC Addresses Configuration Menu 678
- Figure 249: Web Server Configuration Menu 688
- Figure 250: Web Server Configuration Menu Configured for HTTPS 689
- Figure 251: Keys/Certificate Configuration Menu 705
- Figure 252: Key Management Menu 706
- Figure 253: Create Key Menu 706
- Figure 254: Export Key to File Menu 712
- Figure 255: Import Key from File Menu 715
- Figure 256: Key Management Menu 717
- Figure 257: Public Key Infrastructure (PKI) Configuration Menu 730
- Figure 258: X509 Certificate Management Menu 730
- Figure 259: Create Self-Signed Certificate Menu 731
- Figure 260: Add Certificate Menu 734
- Figure 261: Modify Certificate Menu 737
- Figure 262: View Certificate Details Menu (page 1) 742
- Figure 263: View Certificate Details Menu (page 2) 743
- Figure 264: Generate Enrollment Request Menu 745
- Figure 265: Secure Socket Layer (SSL) Menu 749
- Figure 266: SSH Remote Management of a Slave Switch 754
- Figure 267: Secure Shell (SSH) Menu 756
- Figure 268: Show Server Information Menu 759
- Figure 269: Authentication Configuration Menu 765
- Figure 270: TACACS+ Client Configuration Menu 767
- Figure 271: TACACS+ Client Configuration Menu 769
- Figure 272: RADIUS Client Configuration 771
- Figure 273: RADIUS Server Configuration 772
- Figure 274: Show Status Menu 773
- Figure 275: Management ACL Menu 780
- Figure 276: Management ACL Menu with ACEs Display 785
Figures
- Table 1: File Extensions and File Types 181
- Table 2: AT-S63 Modules 233
- Table 3: Event Severity Levels 236
- Table 4: Applicable RFC 3164 Numerical Code and AT-S63 Module Mappings 244
- Table 5: Numerical Code and Facility Level Mappings 245
- Table 6: Default Mappings of IEEE 802.1p Priority Levels to Priority Queues 339
- Table 7: Customized Mappings of IEEE 802.1p Priority Levels to Priority Queues 339
- Table 8: Example of Weighted Round Robin Priority 341
- Table 9: Bridge Priority Value Increments 477
- Table 10: STP Auto-Detect Port Costs 478
- Table 11: STP Auto-Detect Port Trunk Costs 478
- Table 12: RSTP Auto-Detect Port Costs 479
- Table 13: RSTP Auto-Detect Port Trunk Costs 479
- Table 14: Port Priority Value Increments 479
- Table 15: Auto External Path Costs 534
- Table 16: Auto External Path Trunk Costs 534
- Table 17: RSTP Auto-Detect Port Costs 536
- Table 18: RSTP Auto-Detect Port Trunk Costs 537
- Table 19: GVRP Counters 599
- Table 20: GVRP State Machine Parameters 607
- Table 21: 802.1Q-Compliant Multiple VLAN Example 613
Tables
Preface
- How This Guide is Organized
- Where to Find Web-based Guides
- Contacting Allied Telesyn
Chapter 1
Overview
- Management Overview
- Local Connection
- Remote Connection
  - Using an SNMP Network Management Application
- Management Access Levels
Section I
- Basic Operations
Chapter 2
Starting a Management Session
- Starting a Local Management Session
  - Starting a Local Management Session
    - 1. Connect one end of the RJ-45 to RS-232 management cable to the serial terminal port on the front panel of the switch, as shown in Figure 1.
  - Quitting a Local Management Session
- Starting a Remote Management Session
  - Starting a Remote Management Session
    - 1. In the Telnet application, specify the IP address of the master switch of the enhanced stack.
  - Quitting a Remote Management Session
Chapter 3
Basic Switch Parameters
- When Does a Switch Need an IP Address?
  - How Do You Assign an IP Address?
- Configuring the IP Address, Switch Name, and Other Basic Parameters
  - 1. From the Main Menu, type 5 to select System Administration.
- Activating the BOOTP or DHCP Client Software
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying the AT-9400 Series Switch Hardware and Software Information
  - 1. From the Main Menu, type 5 to select System Administration.
- Rebooting a Switch
  - 1. From the Main Menu, type 5 to select System Administration.
- Working With the Manager and Operator Passwords
  - Changing the Manager or Operator Password
    - 1. From the Main Menu, type 5 to select System Administration.
  - Resetting the Manager Password
    - 1. Reboot the switch.
- Setting the System Time
  - Setting the System Time Manually
    - 1. From the Main Menu, type 5 to select System Administration.
  - Setting the System Time from an SNTP or NTP Server
    - 1. From the Main Menu, type 5 to select System Administration.
- Configuring the Console Startup Mode
  - 1. From the Main Menu, type 5 to select System Administration.
- Configuring the Console Timer
  - 1. From the Main Menu, type 5 to select System Administration.
- Enabling or Disabling the Telnet Server
  - 1. From the Main Menu, type 5 to select System Administration.
- Setting the Baud Rate of the Serial Terminal Port
  - 1. From the Main Menu, type 5 to select System Administration.
- Pinging a Remote System
  - 1. From the Main Menu, type 5 to select System Administration.
- Returning the AT-S63 Management Software to the Factory Default Values
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying System Hardware Information
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying Uplink Port Information
  - 1. From the Main Menu, type 5 to select System Administration.
Chapter 4
SNMPv1 and SNMPv2c
- SNMPv1 and SNMPv2c Overview
  - Default SNMP Community Strings
- Enabling or Disabling SNMP Management
  - 1. From the Main Menu, type 5 to select System Administration.
- Setting the Authentication Failure Trap
  - 1. From the Main Menu, type 5 to select System Administration.
- Creating an SNMP Community String
  - 1. From the Main Menu, type 5 to select System Administration.
- Modifying a Community String
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying the SNMP Community Strings
  - 1. From the Main Menu, type 5 to select System Administration.
Chapter 5
Enhanced Stacking
- Enhanced Stacking Overview
  - Enhanced Stacking Guidelines
- Setting a Switch’s Enhanced Stacking Status
  - 1. From the Main Menu, type 8 to select Enhanced Stacking.
- Selecting a Switch in an Enhanced Stack
  - 1. From the Main Menu, type 8 to select Enhanced Stacking.
- Returning to the Master Switch
- Displaying the Enhanced Stacking Status
  - 1. From the Main Menu, type 8 to select Enhanced Stacking.
Chapter 6
Port Parameters
- Configuring Port Parameters
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Configuring Head of Line Blocking
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Configuring Flow Control and Back Pressure
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Configuring Filtering
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Setting Up Rate Limiting
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Resetting a Port
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Forcing Port Renegotiation
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Resetting the Port Configuration to the Defaults
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Displaying Port Statistics
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Clearing Port Statistics
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Displaying Port Status
  - 1. From the Main Menu, type 1 to select Port Configuration.
Chapter 7
Static and LACP Port Trunks
- Port Trunk Overview
- Managing Static Port Trunks
- Managing LACP Trunks
Chapter 8
Port Mirroring
- Port Mirroring Overview
- Creating a Port Mirror
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Disabling a Port Mirror
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Modifying a Port Mirror
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Displaying the Port Mirror
  - 1. From the Main Menu, type 1 to select Port Configuration.
Chapter 9
Networking Stack
- Managing the Address Resolution Protocol (ARP) Table
- Displaying the Route Table
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying the TCP Connections
  - 1. From the Main Menu, type 5 to select System Administration.
- Deleting a TCP Connection
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying the TCP Global Information
  - 1. From the Main Menu, type 5 to select System Administration.
Section II
- Advanced Operations
Chapter 10
File System
- File System Overview
- Working with Boot Configuration Files
- Copying a System File
  - 1. From the Main Menu, type 5 to select System Administration.
- Renaming a System File
  - 1. From the Main Menu, type 5 to select System Administration.
- Deleting a System File
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying System Files
  - Listing All Files
    - 1. From the Main Menu, type 5 to select System Administration.
  - Listing Files on the Compact Flash Card
    - 1. From the Main Menu, type 5 to select System Administration.
- Working with Flash Memory
  - Displaying Information about the Flash Memory
    - 1. From the Main Menu, type 5 to select System Administration.
  - Formatting the Flash Memory
    - 1. From the Main Menu, type 5 to select System Administration.
- Working with the Compact Flash Card
  - Displaying Compact Flash Card Information
    - 1. From the Main Menu, type 5 to select System Administration.
  - Changing the Directory
    - 1. From the Main Menu, type 5 to select System Administration.
Chapter 11
File Downloads and Uploads
- Downloading the AT-S63 Image File onto a Switch
  - Downloading the AT-S63 Image from a Local Management Session
    - 1. Establish a local management session on the switch where you intend to download the new management software.
  - Downloading the AT-S63 Image from a Telnet Management Session
    - 1. Establish a Telnet management session on the switch where you intend to download the new management software.
- Downloading an AT-S63 Image File Switch to Switch
  - 1. From the Main Menu, type 9 to select Enhanced Stacking.
- Downloading an AT-S63 Configuration File Switch to Switch
  - 1. From the Main Menu, type 9 to select Enhanced Stacking.
- Downloading a System File
  - Downloading a System File from a Local Management Session
    - 1. From the Main Menu, type 5 to select System Administration.
  - Downloading a System File from a Telnet Management Session
    - 1. Establish a Telnet management session on the switch where you intend to download the new file.
- Uploading a System File
  - Uploading a System File from a Local Management Session
    - 1. Establish a local management session on the switch where you want to upload the system file.
  - Uploading a System File from a Telnet Management Session
    - 1. Establish a Telnet management session on the switch containing the system file you want to upload to the TFTP server.
Chapter 12
Event Log
- Event Log Overview
- Working with the Event Log
- Configuring Log Outputs
Chapter 13
Classifiers
- Classifier Overview
  - Classifier Criteria
  - Classifier Guidelines
- Creating a Classifier
  - 1. From the Main Menu, type 7 to select Security and Services.
- Modifying a Classifier
  - 1. From the Main Menu, type 7 to select Security and Services.
- Deleting a Classifier
  - 1. From the Main Menu, type 7 to select Security and Services.
- Displaying Classifiers
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 14
Access Control Lists
- Access Control List (ACL) Overview
- Creating an ACL
  - 1. From the Main Menu, type 7 to select Security and Services.
- Modifying an ACL
  - 1. From the Main Menu, type 7 to select Security and Services.
- Deleting an ACL
  - 1. From the Main Menu, type 7 to select Security and Services.
- Deleting All ACLs
  - 1. From the Main Menu, type 7 to select Security and Services.
- Displaying ACLs
  - 1. From the Main Menu, type 7 to select Security and Services.
  - 1. From the Access Control Lists (ACL) menu, type 4 to selection Show ACLs.
Chapter 15
Denial of Service Defense
- Denial of Service Overview
- Configuring Denial of Service Defense
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 16
Quality of Service
- Quality of Service Overview
- Managing Flow Groups
- Managing Traffic Classes
- Managing Policies
Chapter 17
Class of Service
- Class of Service Overview
  - Scheduling
    - Strict Priority Scheduling
    - Weighted Round Robin Priority Scheduling
- Configuring CoS
  - 1. From the Main Menu, type 7 to select Security and Services.
- Mapping CoS Priorities to Egress Queues
  - 1. From the Main Menu, type 7 to select Security and Services.
- Configuring Egress Scheduling
  - 1. From the Main Menu, type 7 to select Security and Services.
- Displaying Port CoS Priorities
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 18
IGMP Snooping
- IGMP Snooping Overview
- Configuring IGMP Snooping
  - 1. From the Main Menu, type 6 to select Advanced Configuration.
- Enabling or Disabling IGMP Snooping
  - 1. From the Main Menu, type 6 to select Advanced Configuration.
- Displaying a List of Host Nodes
  - 1. From the Main Menu, type 6 to select Advanced Configuration.
- Displaying a List of Multicast Routers
  - 1. From the Main Menu, type 6 to select Advanced Configuration.
Chapter 19
RRP Snooping
- RRP Snooping Overview
- Enabling or Disabling RRP Snooping
  - 1. From the Main Menu, type 6 to select Advanced Configuration.
Section III
- SNMPv3
Chapter 20
SNMPv3
- SNMPv3 Overview
- Configuring SNMPv3 Entities
- Configuring the SNMPv3 User Table
- Configuring the SNMPv3 View Table
- Configuring the SNMPv3 Access Table
- Configuring the SNMPv3 SecurityToGroup Table
- Configuring the SNMPv3 Notify Table
- Configuring the SNMPv3 Target Address Table
- Configuring the SNMPv3 Target Parameters Table
- Configuring the SNMPv3 Community Table
- Displaying SNMPv3 Table Menus
Section IV
- Spanning Tree Protocols
Chapter 21
STP and RSTP
- STP and RSTP Overview
- Enabling or Disabling a Spanning Tree Protocol
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Configuring STP
- Configuring RSTP
Chapter 22
MSTP
- MSTP Overview
- Multiple Spanning Tree Instance (MSTI)
- Selecting MSTP as the Spanning Tree Protocol
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Configuring MSTP Bridge Settings
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Configuring the CIST Priority
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Displaying the CIST Priority
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Creating, Deleting, and Modifying MSTI IDs
- Adding, Removing, or Modifying VLAN Associations to MSTI IDs
- Configuring MSTP Port Settings
  - Configuring Generic MSTP Port Settings
    - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
  - Configuring MSTI-specific Port Parameters
    - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Displaying the MSTP Port Configuration
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Displaying the MSTP Port State
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
- Resetting MSTP to the Defaults
  - 1. From the Main Menu, type 3 to select Spanning Tree Configuration.
Section V
- Virtual LANs
Chapter 23
Port-based and Tagged VLANs
- VLAN Overview
- Port-based VLAN Overview
- Tagged VLAN Overview
- Creating a New Port-based or Tagged VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Example of Creating a Port-based VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Example of Creating a Tagged VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Modifying a VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying VLANs
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Deleting a VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Resetting to the Default VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying PVIDs
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Enabling or Disabling Ingress Filtering
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Specifying a Management VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
Chapter 24
GARP VLAN Registration Protocol
- GARP VLAN Registration Protocol (GVRP) Overview
- Configuring GVRP
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Enabling or Disabling GVRP on a Port
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying the GVRP Port Configuration
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying GVRP Counters
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying the GVRP Database
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying the GIP Connected Ports Ring
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying the GVRP State Machine
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
Chapter 25
Multiple VLANs
- Multiple VLAN Mode Overview
  - 802.1Q- Compliant Multiple VLAN Mode
  - Non-802.1Q Compliant Multiple VLAN Mode
- Selecting a VLAN Mode
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying VLAN Information
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
Chapter 26
Protected Ports VLANs
- Protected Ports VLAN Overview
  - Protected Ports VLAN Guidelines
- Creating a Protected Ports VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Modifying a Protected Ports VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Displaying a Protected Ports VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
- Deleting a Protected Ports VLAN
  - 1. From the Main Menu, type 2 to select VLAN Configuration.
Section VI
- Port Security
Chapter 27
Port Security
- MAC Address Security Overview
- Configuring MAC Address Port Security
  - 1. From the Main Menu, type 1 to select Port Configuration.
- Displaying Port Security Levels
  - 1. From the Main Menu, type 1 to select Port Configuration.
Chapter 28
802.1x Port-based Network Access Control
- IEEE 802.1x Port-based Network Access Control Overview
- Setting Port Roles
  - 1. From the Main Menu, type 7 to select Security and Services.
- Enabling or Disabling 802.1x Port-based Network Access Control
  - 1. From the Main Menu, type 7 to select Security and Services.
- Configuring Authenticator Port Parameters
  - 1. From the Main Menu, type 7 to select Security and Services.
- Configuring Supplicant Port Parameters
  - 1. From the Main Menu, type 7 to select Security and Services.
- Displaying the Port Access Parameters
  - 1. From the Main Menu, type 7 to select Security and Services.
- Configuring RADIUS Accounting
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 29
MAC Address Table
- MAC Address Overview
- Displaying the MAC Address Tables
  - 1. From the Main Menu, type 4 to select MAC Address Tables.
- Adding Static Unicast and Multicast MAC Addresses
  - 1. From the Main Menu, type 4 to select MAC Address Tables.
- Deleting Unicast and Multicast MAC Addresses
  - 1. From the Main Menu, type 4 to select MAC Address Tables.
- Deleting All Dynamic MAC Addresses
  - 1. From the Main Menu, type 4 to select MAC Address Tables.
- Changing the Aging Time
  - 1. From the Main Menu, type 4 to select MAC Address Tables.
Section VII
- Management Security
Chapter 30
Web Server
- Web Server Overview
  - Supported Protocols
- Configuring the Web Server
- General Steps for Configuring the Web Server for Encryption
  - General Steps for a Self-signed Certificate
    - 1. Set the switch’s date and time. You must do this before you create a certificate because the date and time are stamped in the digital document. For instructions, refer to “Setting the System Time” on page 58.
  - General Steps for a Public or Private CA Certificate
    - 1. Set the switch’s date and time. You must do this before you create the enrollment request. The date and time at stamped in the request. The instructions for this are in “Setting the System Time” on page 58.
Chapter 31
Encryption Keys
- Basic Overview
- Technical Overview of Secure Sockets Layer
- Technical Overview of Encryption
- Creating an Encryption Key
  - 1. From the Main Menu, type 7 to select Security and Services.
- Deleting an Encryption Key
  - 1. From the Main Menu, type 7 to select Security and Services.
- Modifying an Encryption Key
  - 1. From the Main Menu, type 7 to select Security and Services.
- Exporting an Encryption Key
  - 1. From the Main Menu, type 7 to select Security and Services.
- Importing an Encryption Key
  - 1. From the Main Menu, type 7 to select Security and Services.
- Displaying the Encryption Keys
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 32
PKI Certificates and SSL
- Basic Overview
- Technical Overview
- Creating a Self-signed Certificate
  - 1. From the Main Menu, type 7 to select Security and Services.
- Adding a Certificate to the Database
  - 1. From the Main Menu, type 7 to select Security and Services.
- Modifying a Certificate
  - 1. From the Main Menu, type 7 to select Security and Services.
- Deleting a Certificate
  - 1. From the Main Menu, type 7 to select Security and Services.
- Viewing a Certificate
  - 1. From the Main Menu, type 7 to select Security and Services.
- Generating an Enrollment Request
  - 1. From the Main Menu, type 7 to select Security and Services.
- Installing CA Certificates onto a Switch
  - 1. Download the certificates from your management station or FTP server to the AT-S63 file system on the switch. For instructions, refer to “Downloading a System File” on page 216.
- Viewing or Configuring the Number of Certificates in the Database
  - 1. From the Main Menu, type 7 to select Security and Services.
- Configuring SSL
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 33
Secure Shell (SSH)
- SSH Overview
- Configuring SSH
  - 1. From the Main Menu, type 7 to select Security and Services.
- Displaying SSH Information
  - 1. From the Main Menu, type 7 to select Security and Services.
Chapter 34
TACACS+ and RADIUS Protocols
- TACACS+ and RADIUS Overview
  - TACACS+ and RADIUS Implementation Guidelines
- Enabling or Disabling TACACS+ or RADIUS
  - Enabling TACACS+ or RADIUS
    - 1. From the Main Menu, type 5 to select System Administration.
  - Disabling TACACS+ or RADIUS
    - 1. From the Main Menu, type 5 to select System Administration.
- Configuring TACACS+
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying the TACACS+ Settings
  - 1. From the Main Menu, type 5 to select System Administration.
- Configuring RADIUS
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying RADIUS Status and Settings
  - 1. From the Main Menu, type 5 to select System Administration.
Chapter 35
Management Access Control Lists
- Management ACL Security Overview
- Creating the Management ACL
  - 1. From the Main Menu, type 5 to select System Administration.
- Adding an ACE
- Deleting an ACE
  - 1. From the Main Menu, type 5 to select System Administration.
- Displaying the ACEs
  - 1. From the Main Menu, type 5 to select System Administration.
Appendix A
AT-S63 Default Settings
- Basic Switch Default Settings
- Enhanced Stacking Default Setting
- SNMP Default Settings
- Port Configuration Default Settings
- Event Log Default Settings
- Quality of Service
- IGMP Snooping Default Settings
- Denial of Service Prevention Default Settings
- STP, RSTP, and MSTP Default Settings
- VLAN Default Settings
- GVRP Default Settings
- Port Security Default Settings
- 802.1x Port-Based Network Access Control Default Settings
- Web Server Default Settings
- SSL Default Settings
- PKI Default Settings
- SSH Default Settings
- Server-Based Authentication Default Settings
- Management Access Control List Default Setting
Index
- Numerics
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X