Allied Telesis AT-S63 User Manual

Menus interface user’s guide, Management software

Text mode
Original mode

Management
Software

AT-S63

◆

Menus Interface
User’s Guide

AT-9424T/SP AND AT-9424T/GB
LAYER 2+ GIGABIT ETHERNET SWITCHES

VERSION 1.0.0

PN 613-50570-00 Rev A

Table of contents

Document Outline

Contents
- Section I
- Basic Features 37
  - Section II
- Advanced Features 167
  - Section III
- VLANs 425
  - Section IV
- Security 515
Figures
- Figure 1: Connecting the Management Cable to the RJ-45 Serial Terminal Port 40
- Figure 2: CLI Prompt 41
- Figure 3: Main Menu 42
- Figure 4: System Administration Menu 51
- Figure 5: System Configuration Menu 52
- Figure 6: System Information Menu 56
- Figure 7: System Utilities Menu 58
- Figure 8: Authentication Configuration Menu 60
- Figure 9: Passwords Configuration Menu 61
- Figure 10: Configure System Time Menu 63
- Figure 11: Console (Serial/Telnet) Configuration Menu 66
- Figure 12: System Hardware Information Menu 73
- Figure 13: Configure System Hardware Menu 75
- Figure 14: Uplink Information Menu 76
- Figure 15: GBIC/SFP Information Menu (Page 1) 77
- Figure 16: GBIC/SFP Information Menu (Page 2) 77
- Figure 17: SNMP Configuration Menu 83
- Figure 18: SNMPv1 & SNMPv2c Community Menu 85
- Figure 19: Modify SNMP Community Menu 88
- Figure 20: Display SNMP Community Menu 92
- Figure 21: Enhanced Stacking Example 96
- Figure 22: Enhanced Stacking Menu 99
- Figure 23: Stacking Services Menu 100
- Figure 24: Stacking Services Menu With List of Switches 101
- Figure 25: Enhanced Stacking Menu 104
- Figure 26: Port Configuration Menu 106
- Figure 27: Port Configuration (Port) Menu 107
- Figure 28: Head of Line Blocking 111
- Figure 29: Flow Control Menu 114
- Figure 30: Filtering Menu 116
- Figure 31: Rate Limiting Menu 118
- Figure 32: Port Statistics Menu 123
- Figure 33: Display Port Statistics Menu 124
- Figure 34: Port Status Menu 127
- Figure 35: MAC Address Tables Menu 132
- Figure 36: Display Unicast MAC Addresses Menu 132
- Figure 37: Display All Menu - Unicast MAC Addresses 133
- Figure 38: Display All Menu - Multicast MAC Addresses 134
- Figure 39: MAC Addresses Configuration Menu 136
- Figure 40: Port Trunk Example 142
- Figure 41: Load Distribution Method 145
- Figure 42: Port Trunking Menu 150
- Figure 43: Create Trunk Menu 150
- Figure 44: Modify Trunk Menu 153
- Figure 45: Port Trunking Menu 156
- Figure 46: Port Mirroring Menu #1 161
- Figure 47: Port Mirroring Menu #2 161
- Figure 48: Port Mirroring Menu 165
- Figure 49: File Operations Menu 173
- Figure 50: View File Menu with Sample Boot Configuration File 177
- Figure 51: List Files Menu 183
- Figure 52: Downloads and Uploads Menu 187
- Figure 53: HyperTerminal Window 189
- Figure 54: Send File Window 189
- Figure 55: XModem File Send Window 190
- Figure 56: HyperTerminal Window 198
- Figure 57: Send File Window 199
- Figure 58: XModem File Send Window 199
- Figure 59: HyperTerminal Window 204
- Figure 60: Receive File Window 204
- Figure 61: Event Log Menu 209
- Figure 62: Event Log Example Displayed in Normal Mode 215
- Figure 63: Event Log Example Displayed in Full Mode 216
- Figure 64: Sample Log File View 219
- Figure 65: Class of Service (CoS) Menu 228
- Figure 66: Configure COS Priorities Menu 228
- Figure 67: Map CoS Priority to Egress Queue Menu 230
- Figure 68: Configure Egress Scheduling Menu 231
- Figure 69: Advanced Configuration Menu 236
- Figure 70: IGMP Snooping Configuration Menu 236
- Figure 71: View Multicast Hosts List Menu 240
- Figure 72: View Multicast Routers List Menu 242
- Figure 73: RRP Snooping Menu 248
- Figure 74: Point-to-Point Ports 256
- Figure 75: Edge Port 256
- Figure 76: Point-to-Point and Edge Port 257
- Figure 77: VLAN Fragmentation 258
- Figure 78: Spanning Tree Configuration Menu 259
- Figure 79: STP Menu 261
- Figure 80: STP Port Parameters Menu 263
- Figure 81: Configure STP Port Settings Menu 264
- Figure 82: Display STP Port Configuration Menu 265
- Figure 83: RSTP Menu 267
- Figure 84: RSTP Port Parameters Menu 269
- Figure 85: Configure RSTP Port Settings Menu 270
- Figure 86: Display RSTP Port Configuration Menu 272
- Figure 87: Display RSTP Port State Menu 273
- Figure 88: VLAN Fragmentation with STP or RSTP 280
- Figure 89: MSTP Example of Two Spanning Tree Instances 281
- Figure 90: Multiple VLANs in a MSTI 282
- Figure 91: Multiple Spanning Tree Region 285
- Figure 92: CIST and VLAN Guideline - Example 1 290
- Figure 93: CIST and VLAN Guideline - Example 2 290
- Figure 94: Spanning Regions - Example 1 291
- Figure 95: MSTP Menu 294
- Figure 96: CIST Menu 297
- Figure 97: MSTI Menu 299
- Figure 98: VLAN-MSTI Association Menu 305
- Figure 99: MSTP Port Parameters Menu 309
- Figure 100: Configure MSTP Port Settings Menu 310
- Figure 101: Display MSTP Port Configuration Menu 312
- Figure 102: Display MSTP Port State Menu 314
- Figure 103: MIB Tree 320
- Figure 104: SNMPv3 User Configuration Process 322
- Figure 105: SNMPv3 Message Notification Process 323
- Figure 106: Configure SNMPv3 Table Menu 329
- Figure 107: Configure SNMPv3 User Table Menu 329
- Figure 108: Modify SNMPv3 User Table Menu 333
- Figure 109: Configure SNMPv3 View Table Menu 339
- Figure 110: Modify SNMPv3 View Table Menu 343
- Figure 111: Configure SNMPv3 Access Table Menu 348
- Figure 112: Modify SNMPv3 Access Table Menu 354
- Figure 113: Configure SNMPv3 SecurityToGroup Table Menu 364
- Figure 114: Modify SNMPv3 SecurityToGroup Table Menu 368
- Figure 115: Configure SNMPv3 Notify Table Menu 372
- Figure 116: Modify SNMPv3 Notify Table Menu 375
- Figure 117: Configure SNMPv3 Target Address Table Menu 380
- Figure 118: Modify SNMPv3 Target Address Table Menu 384
- Figure 119: Configure SNMPv3 Target Parameters Table Menu 393
- Figure 120: Modify SNMPv3 Target Parameters Table Menu 399
- Figure 121: Configure SNMPv3 Community Table Menu 408
- Figure 122: Modify SNMPv3 Community Table Menu 412
- Figure 123: Display SNMPv3 Table Menu 417
- Figure 124: Display SNMPv3 User Table Menu 417
- Figure 125: Display SNMPv3 View Table Menu 418
- Figure 126: Display SNMPv3 Access Table Menu 419
- Figure 127: Display SNMPv3 SecurityToGroup Table Menu 420
- Figure 128: Display SNMPv3 Notify Table Menu 420
- Figure 129: Display SNMPv3 Target Address Table Menu 421
- Figure 130: Display SNMPv3 Target Parameters Table Menu 422
- Figure 131: Display SNMPv3 Community Table Menu 423
- Figure 132: Port-based VLAN - Example 1 433
- Figure 133: Port-based VLAN - Example 2 434
- Figure 134: Example of a Tagged VLAN 439
- Figure 135: VLAN Configuration Menu 441
- Figure 136: Configure VLANs Menu 442
- Figure 137: Create VLAN Menu 442
- Figure 138: Modify VLAN Menu 447
- Figure 139: Expanded Modify VLAN Menu 448
- Figure 140: Show VLANs Menu 451
- Figure 141: Delete VLAN Menu 453
- Figure 142: Expanded Delete VLAN Menu 454
- Figure 143: Show PVIDs Menu 458
- Figure 144: VLAN Configuration Menu (Multiple VLAN Mode) 469
- Figure 145: Show VLANs Menu, Multiple VLANS 470
- Figure 146: GVRP Example 473
- Figure 147: GARP Architecture 477
- Figure 148: GID Architecture 478
- Figure 149: GARP-GVRP Menu 480
- Figure 150: GVRP Port Parameters Menu 482
- Figure 151: Configure GVRP Port Settings Menu 483
- Figure 152: Display GVRP Port Configuration Menu 484
- Figure 153: Other GVRP Parameters Menu 485
- Figure 154: GVRP Counters Menu (page 1) 486
- Figure 155: GVRP Counters Menu (page 2) 487
- Figure 156: GVRP Database Menu 490
- Figure 157: GIP Connected Ports Ring Menu 492
- Figure 158: GVRP State Machine Menu (page 1) 494
- Figure 159: Display GVRP State Machine Menu (page 2) 495
- Figure 160: Create VLAN Menu 503
- Figure 161: Expanded Modify VLAN Menu 507
- Figure 162: Show VLANs Menu 510
- Figure 163: Show VLANs Menu 511
- Figure 164: Delete VLAN Menu 512
- Figure 165: Expanded Delete VLAN Menu 513
- Figure 166: Port Security Menu 521
- Figure 167: Configure Port Security Menu #1 521
- Figure 168: Configure Port Security Menu #2 522
- Figure 169: Port Configuration Menu 524
- Figure 170: Display Port Security Menu 525
- Figure 171: Management ACL Menu 532
- Figure 172: Management ACL Menu with ACEs Display 537
- Figure 173: Web Server Configuration Menu 543
- Figure 174: Web Server Configuration Menu Configured for HTTPS 544
- Figure 175: Security Configuration Menu 559
- Figure 176: Keys/Certificate Configuration Menu 560
- Figure 177: Key Management Menu 560
- Figure 178: Create Key Menu 561
- Figure 179: Export Key to File Menu 566
- Figure 180: Import Key from File Menu 569
- Figure 181: Key Management Menu 571
- Figure 182: Public Key Infrastructure (PKI) Configuration Menu 585
- Figure 183: X509 Certificate Management Menu 585
- Figure 184: Create Self-Signed Certificate Menu 586
- Figure 185: Add Certificate Menu 589
- Figure 186: Modify Certificate Menu 592
- Figure 187: View Certificate Details Menu (page 1) 597
- Figure 188: View Certificate Details Menu (page 2) 598
- Figure 189: Generate Enrollment Request Menu 600
- Figure 190: Secure Socket Layer (SSL) Menu 604
- Figure 191: SSH Remote Management of a Slave Switch 611
- Figure 192: Secure Shell (SSH) Menu 613
- Figure 193: Show Server Information Menu 616
- Figure 194: Example of the Authenticator Role 623
- Figure 195: Example of the Supplicant Role 624
- Figure 196: Port-based Authentication Across Multiple Switches 628
- Figure 197: Port Access Control (802.1X) Menu 629
- Figure 198: Configure Port Access Role Menu 630
- Figure 199: Configure Authenticator Menu 632
- Figure 200: Configure Authenticator Port Access Parameters Menu 633
- Figure 201: Configure Supplicant Menu 636
- Figure 202: Configure Supplicant Port Access Parameters Menu 637
- Figure 203: Display Port Access Status Menu 639
- Figure 204: Radius Accounting Menu 641
- Figure 205: Authentication Configuration Menu 648
- Figure 206: TACACS+ Client Configuration Menu 650
- Figure 207: TACACS+ Client Configuration Menu 652
- Figure 208: RADIUS Client Configuration 654
- Figure 209: RADIUS Server Configuration 655
- Figure 210: Show Status Menu 656
- Figure 211: Denial of Service (DoS) Menu 665
- Figure 212: LAN IP Subnet Menu 665
- Figure 213: SYN Flood Configuration Menu 667
Tables
- Table 1: Switch #1 - Source MAC Address Load Distribution 145
- Table 2: Switch #2 - Destination MAC Address Load Distribution Method 147
- Table 3: Switch #2 - Source MAC Address/Destination MAC Address Method 147
- Table 4: Source MAC Address/Destination MAC Address Load Distribution Method 148
- Table 5: File Extensions and File Types 171
- Table 6: AT-S63 Software Modules 213
- Table 7: Event Severity Levels 215
- Table 8: Default Mappings of IEEE 802.1p Priority Levels to Priority Queues 223
- Table 9: Example of Customized CoS Mappings to Priority Queues 224
- Table 10: Example of Weighted Round Robin Priority 226
- Table 11: Default Mappings of Priority Levels to Priority Queues 229
- Table 12: Bridge Priority Value Increments 251
- Table 13: STP Auto-Detect Port Costs 252
- Table 14: STP Auto-Detect Port Trunk Costs 253
- Table 15: RSTP Auto-Detect Port Costs 253
- Table 16: RSTP Auto-Detect Port Trunk Costs 253
- Table 17: Port Priority Value Increments 254
- Table 18: RSTP Auto-Detect Port Costs 310
- Table 19: RSTP Auto-Detect Port Trunk Costs 311
- Table 20: 802.1Q-Compliant Multipe VLAN Example 465
- Table 21: GVRP Counters 487
- Table 22: GVRP State Machine Parameters 495
Preface
- How This Guide is Organized
- Document Conventions
- Where to Find Web-based Guides
- Contacting Allied Telesyn
- Management Software Updates
Chapter 1
Overview
- Management Overview
- Local Management Session
- Telnet Management Session
- Web Browser Management Session
- SNMP Management Session
- Management Access Levels
Section I
Basic Features
Chapter 2
Starting a Local or Telnet Management Session
- Local Management Session
- Telnet Management Session
  - Starting a Telnet Management Session
  - Quitting a Telnet Management Session
Chapter 3
Basic Switch Parameters
- When Does a Switch Need an IP Address?
  - How Do You Assign an IP Address?
- Configuring the IP Address, Switch Name, and Other Basic Parameters
- Activating the BOOTP and DHCP Client Software
- Displaying the AT-9400 Series Switch Hardware and Software Information
- Rebooting a Switch
- Configuring the Manager and Operator Passwords
- Setting the System Time
  - Setting the System Time Manually
  - Setting the System Time from an SNTP or NTP Server
- Configuring the Console Startup Mode
- Configuring the Console Timer
- Enabling or Disabling the Telnet Server
- Setting the Baud Rate of the RJ-45 Type Serial Terminal Port
- Pinging a Remote System
- Returning the AT-S63 Management Software to the Factory Default Values
- Displaying and Setting System Hardware Information
  - Displaying System Hardware Information
  - Changing the Switch’s Temperature Threshold
- Displaying Uplink Port Information
Chapter 4
SNMPv1 and SNMPv2c
- SNMPv1 and SNMPv2c Overview
  - Default SNMP Community Strings
- Enabling or Disabling SNMP Management
- Setting the Authentication Failure Trap
- Creating an SNMP Community String
- Modifying a Community String
- Displaying the SNMP Community Strings
Chapter 5
Enhanced Stacking
- Enhanced Stacking Overview
  - Enhanced Stacking Guidelines
- Setting a Switch’s Enhanced Stacking Status
- Selecting a Switch in an Enhanced Stack
- Returning to the Master Switch
- Displaying the Enhanced Stacking Status
Chapter 6
Port Parameters
- Configuring Port Parameters
- Configuring Head of Line Blocking
- Configuring Flow Control and Back Pressure
- Configuring Filtering
- Setting Up Rate Limiting
- Resetting a Port
- Forcing Port Renegotiation
- Resetting the Port Configuration to the Defaults
- Displaying Port Statistics
- Clearing Port Statistics
- Displaying Port Status
Chapter 7
MAC Address Table
- MAC Address Overview
- Displaying the MAC Address Tables
- Adding Static Unicast and Multicast MAC Addresses
- Deleting Unicast and Multicast MAC Addresses
- Deleting All Dynamic MAC Addresses
- Changing the Aging Time
Chapter 8
Port Trunking
- Port Trunking Overview
- Creating a Port Trunk
- Modifying a Port Trunk
- Deleting a Port Trunk
- Displaying the Port Trunks
Chapter 9
Port Mirroring
- Port Mirroring Overview
- Creating a Port Mirror
- Disabling a Port Mirror
- Modifying a Port Mirror
- Displaying the Port Mirror
Section II
Advanced Features
Chapter 10
File System
- File System Overview
  - File Naming Conventions
  - Using Wildcards to Specify Groups of Files
- Working with Boot Configuration Files
- Copying a System File
- Renaming a System File
- Deleting a System File
- Displaying System Files
Chapter 11
File Downloads and Uploads
- Downloading the AT-S63 Image File onto a Switch
  - Downloading the AT-S63 Image from a Local Management Session
  - Downloading the AT-S63 Image from a Telnet Management Session
- Downloading an AT-S63 Image File Switch to Switch
- Downloading an AT-S63 Configuration File Switch to Switch
- Downloading a System File
  - Downloading a System File from a Local Management Session
  - Downloading a System File from a Telnet Management Session
- Uploading a System File
  - Uploading a System File from a Local Management Session
  - Uploading a System File from a Telnet Management Session
Chapter 12
Event Log
- Event Log Overview
- Enabling or Disabling the Event Logs
- Displaying Events
- Clearing the Event Log
- Saving an Event Log to a File
Chapter 13
Quality of Service
- Quality of Service Overview
  - Class of Service (CoS)
  - Scheduling
    - Strict Priority Scheduling
    - Weighted Round Robin Priority Scheduling
- Configuring CoS
- Mapping CoS Priorities to Egress Queues
- Configuring Egress Scheduling
Chapter 14
IGMP Snooping
- IGMP Snooping Overview
- Configuring IGMP Snooping
- Enabling or Disabling IGMP Snooping
- Displaying a List of Host Nodes
- Displaying a List of Multicast Routers
Chapter 15
RRP Snooping
- RRP Snooping Overview
- Enabling or Disabling RRP Snooping
Chapter 16
STP and RSTP
- STP and RSTP Overview
- Enabling or Disabling a Spanning Tree Protocol
- Configuring STP
- Configuring RSTP
Chapter 17
MSTP
- MSTP Overview
- Multiple Spanning Tree Instance (MSTI)
- Selecting MSTP as the Spanning Tree Protocol
- Configuring MSTP Bridge Settings
- Configuring the CIST Priority
- Displaying the CIST Priority
- Creating, Deleting, and Modifying MSTI IDs
- Adding, Removing, or Modifying VLAN Associations to MSTI IDs
- Configuring MSTP Port Settings
- Displaying the MSTP Port Configuration
- Displaying the MSTP Port State
- Resetting MSTP to the Defaults
Chapter 18
SNMPv3
- SNMPv3 Overview
- Configuring SNMPv3 Entities
- Configuring the SNMPv3 User Table
- Configuring the SNMPv3 View Table
- Configuring the SNMPv3 Access Table
- Configuring the SNMPv3 SecurityToGroup Table
- Configuring the SNMPv3 Notify Table
- Configuring the SNMPv3 Target Address Table
- Configuring the SNMPv3 Target Parameters Table
- Configuring the SNMPv3 Community Table
- Displaying SNMPv3 Table Menus
Section III
VLANs
Chapter 19
Port-based and Tagged VLANs
- VLAN Overview
- Port-based VLAN Overview
- Tagged VLAN Overview
- Creating a New Port-based or Tagged VLAN
- Example of Creating a Port-based VLAN
- Example of Creating a Tagged VLAN
- Modifying a VLAN
- Displaying VLANs
- Deleting a VLAN
- Resetting to the Default VLAN
- Displaying PVIDs
- Enabling or Disabling Ingress Filtering
- Specifying a Management VLAN
Chapter 20
Multiple VLANs
- Multiple VLAN Mode Overview
  - 802.1Q- Compliant Multiple VLAN mode
  - Non-802.1Q Compliant Multiple VLAN Mode
- Selecting a VLAN Mode
- Displaying VLAN Information
Chapter 21
GARP VLAN Registration Protocol
- GARP VLAN Registration Protocol (GVRP) Overview
- Configuring GVRP
- Enabling or Disabling GVRP on a Port
- Displaying the GVRP Port Configuration
- Displaying GVRP Counters
- Displaying the GVRP Database
- Displaying the GIP Connected Ports Ring
- Displaying the GVRP State Machine
Chapter 22
Protected Ports VLANs
- Protected Ports VLAN Overview
  - Protected Ports VLAN Guidelines
- Creating a Protected Ports VLAN
- Modifying a Protected Ports VLAN
- Displaying a Protected Ports VLAN
- Deleting a Protected Ports VLAN
Section IV
Security
Chapter 23
Port Security
- MAC Address Security Overview
- Configuring MAC Address Port Security
- Displaying Port Security Levels
Chapter 24
Access Control Lists
- Management ACL Security Overview
- Creating the Management ACL
- Adding an ACE
- Deleting an ACE
- Displaying the ACEs
Chapter 25
Web Server
- Web Server Overview
  - Supported Protocols
- Configuring the Web Server
- General Steps for Configuring the Web Server for Encryption
  - General Steps for a Self-signed Certificate
  - General Steps for a Public or Private CA Certificate
Chapter 26
Encryption Keys
- Basic Overview
- Technical Overview of Secure Sockets Layer
- Technical Overview of Encryption
- Creating an Encryption Key
- Deleting an Encryption Key
- Modifying an Encryption Key
- Exporting an Encryption Key
- Importing an Encryption Key
- Displaying the Encryption Keys
Chapter 27
PKI Certificates and SSL
- Basic Overview
- Technical Overview
- Creating a Self-signed Certificate
- Adding a Certificate to the Database
- Modifying a Certificate
- Deleting a Certificate
- Viewing a Certificate
- Generating an Enrollment Request
- Installing CA Certificates onto a Switch
- Viewing or Configuring the Number of Certificates in the Database
- Configuring SSL
Chapter 28
Secure Shell (SSH)
- SSH Overview
- Configuring SSH
- Displaying SSH Information
Chapter 29
802.1x Port-based Network Access Control
- IEEE 802.1x Port-based Network Access Control Overview
- Setting Port Roles
- Enabling or Disabling 802.1x Port-based Network Access Control
- Configuring Authenticator Port Parameters
- Configuring Supplicant Port Parameters
- Displaying the Port Access Parameters
- Configuring RADIUS Accounting
Chapter 30
TACACS+ and RADIUS Protocols
- TACACS+ and RADIUS Overview
  - TACACS+ and RADIUS Implementation Guidelines
- Enabling or Disabling TACACS+ or RADIUS
  - Enabling TACACS+ or RADIUS
  - Disabling TACACS+ or RADIUS
- Configuring TACACS+
- Displaying the TACACS+ Settings
- Configuring RADIUS
- Displaying RADIUS Status and Settings
Chapter 31
Denial of Service Defense
- Denial of Service Overview
- Configuring Denial of Service Defense
Appendix A
AT-S63 Default Settings
- Basic Switch Default Settings
- Enhanced Stacking Default Setting
- SNMP Default Settings
- Port Configuration Default Settings
- Event Log Default Settings
- Quality of Service
- IGMP Snooping Default Settings
- Denial of Service Prevention Default Settings
- STP, RSTP, and MSTP Default Settings
- VLAN Default Settings
- GVRP Default Settings
- Port Security Default Settings
- 802.1x Port-Based Network Access Control Default Settings
- Web Server Default Settings
- SSL Default Settings
- PKI Default Settings
- SSH Default Settings
- Server-Based Authentication Default Settings
- Management Access Control List Default Setting
Appendix B
SNMPv3 Configuration Examples
- SNMPv3 Configuration Examples
Index