Allied Telesis AT-S60 User Manual

User’s guide, At-s60 management software

Text mode
Original mode

AT-S60
Management
Software

AT-S60

◆

User’s Guide

AT-8400 SERIES SWITCH

VERSION 2.0.0

PN 613-50400-00 Rev B

Table of contents

Document Outline

Table of Contents
- Section I
- Overview 23
  - Section II
- Local and Telnet Management 33
  - Section III
- Security Features 332
  - Section IV
- Web Browser Management 427
- Index 604
List of Figures
- Figure 5: Main Menu 32
- Figure 6: Connecting a Terminal or PC to the RS-232 Terminal Port 36
- Figure 7: Main Menu 37
- Figure 8: Administration Menu 44
- Figure 9: System Menu 47
- Figure 10: Display Line Card Menu 48
- Figure 11: Display Line Card Information Menu 48
- Figure 12: Display Line Card Statistics Menu 49
- Figure 13: Configure System Menu 52
- Figure 14: Configure System Software Menu 53
- Figure 15: Configure System Time Menu 53
- Figure 16: Passwords Menu 58
- Figure 17: Display System Menu 60
- Figure 18: Display System Hardware Information Menu 61
- Figure 19: Display System Fan A Information Menu 62
- Figure 20: Display System Software Information Menu 63
- Figure 21: Configure SNMP Menu 70
- Figure 22: Configure SNMP Community Menu 71
- Figure 23: Modify SNMP Community Menu 75
- Figure 24: Display SNMP Community Menu 78
- Figure 25: Enhanced Stacking Example 82
- Figure 26: Enhanced Stacking Menu 84
- Figure 27: Stacking Services Menu 85
- Figure 28: Updated Stacking Services Menu 86
- Figure 29: Port Menu 89
- Figure 30: Port Status Menu 89
- Figure 31: Port Configuration Menu 93
- Figure 32: Port Statistics Menu 98
- Figure 33: Display Port Statistics Menu 99
- Figure 34: Security Menu 105
- Figure 35: Local Port Security Menu 105
- Figure 36: Configure Port Security Menu 106
- Figure 37: Configure Port Security Menu 107
- Figure 38: Port Trunk Example with 1000 Mbps Ports 110
- Figure 39: Port Trunk Example with 10/100 Mbps Ports 111
- Figure 40: Trunk Configuration Menu 114
- Figure 41: Modify Trunk Menu 118
- Figure 42: Port Mirroring Menu 126
- Figure 43: Modify Mirror Menu 128
- Figure 44: File Menu 138
- Figure 45: View Configuration File Menu (page 1) 141
- Figure 46: View Configuration File Menu (page 2) 142
- Figure 47: Display File(s) Menu 147
- Figure 48: Downloads & Uploads Menu 150
- Figure 49: Downloads & Uploads Menu 154
- Figure 50: Transfer Menu 156
- Figure 51: Send File Window 156
- Figure 52: XModem File Send Window 157
- Figure 53: Downloads & Uploads Menu 162
- Figure 54: Transfer Menu 163
- Figure 55: Send File Window 164
- Figure 56: XModem File Send Window 165
- Figure 57: Downloads & Uploads Menu 169
- Figure 58: Transfer Menu 171
- Figure 59: Receive File Window 171
- Figure 60: Receive Filename Window 172
- Figure 61: Xmodem File Receive Window 172
- Figure 62: Downloads & Uploads Menu 175
- Figure 63: Transfer Menu 178
- Figure 64: Receive File Window 178
- Figure 65: Receive Filename Window 178
- Figure 66: Xmodem File Receive Window 179
- Figure 67: Point-to-Point Ports 191
- Figure 68: Edge Port 192
- Figure 69: Point-to-Point and Edge Point 193
- Figure 70: VLAN Fragmentation 194
- Figure 71: Spanning Tree Menu 196
- Figure 72: STP Menu 199
- Figure 73: STP Port Parameters Menu 201
- Figure 74: Configure STP Port Settings Menu 201
- Figure 75: Display STP Port Configuration Menu 203
- Figure 76: RSTP Menu 205
- Figure 77: RSTP Port Parameters Menu 207
- Figure 78: Configure RSTP Port Settings Menu 208
- Figure 79: VLAN Fragmentation with STP or RSTP 213
- Figure 80: MSTP Example of Two Spanning Tree Instances 214
- Figure 81: Multiple VLANs in a MSTI 215
- Figure 82: Multiple Spanning Tree Region 218
- Figure 83: CIST and VLAN Guideline - Example 1 223
- Figure 84: CIST and VLAN Guideline - Example 2 224
- Figure 85: Spanning Regions - Example 1 225
- Figure 86: MSTP Menu 228
- Figure 87: CIST Menu 230
- Figure 88: MSTI Menu 231
- Figure 89: VLAN-MSTI Association Menu 234
- Figure 90: MSTP Port Parameters Menu 236
- Figure 91: Configure MSTP Port Settings Menu 237
- Figure 92: Port-Based VLAN - Example 1 247
- Figure 93: Port-based VLAN - Example 2 249
- Figure 94: Example of a Tagged VLAN 254
- Figure 95: VLAN Menu 257
- Figure 96: Display VLAN Menu 257
- Figure 97: Display Port Based VLAN Menu 258
- Figure 98: Configure VLAN Menu 260
- Figure 99: Configure Port Based VLAN Menu 261
- Figure 100: Modify Port Based VLAN Menu 266
- Figure 101: Display Port Based VLAN Menu 282
- Figure 102: GVRP Example 285
- Figure 103: GARP Architecture 289
- Figure 104: GID Architecture 290
- Figure 105: GARP-GVRP Menu 292
- Figure 106: GVRP Port Parameters Menu 294
- Figure 107: Configure GVRP Port Settings Menu 295
- Figure 108: Display GVRP Port Configuration Menu 295
- Figure 109: Other GARP Port Parameters Menu 297
- Figure 110: GVRP Counters Menu (page 1) 298
- Figure 111: GVRP Counters Menu (page 2) 299
- Figure 112: GVRP Database Menu 302
- Figure 113: GIP Connected Ports Ring Menu 303
- Figure 114: GVRP State Machine Menu (page 1) 304
- Figure 115: Display GVRP State Machine Menu (page 2) 304
- Figure 116: MAC Address Tables Menu 310
- Figure 117: Display MAC Addresses Menu 310
- Figure 118: Show All MAC Addresses Menu 311
- Figure 119: Configure MAC Addresses Menu 314
- Figure 120: Configure IGMP Snooping Menu 326
- Figure 121: Configure Multicast Router Ports Menu 328
- Figure 122: View Multicast Hosts List Menu 329
- Figure 123: View Multicast Routers List Menu 330
- Figure 124: Web Server Configuration Menu 335
- Figure 125: Keys/Certificate Configuration Menu 348
- Figure 126: Key Management Menu 349
- Figure 127: Create Key Menu 350
- Figure 128: Export Key to File Menu 353
- Figure 129: Import Key From File Menu 355
- Figure 130: Public Key Infrastructure (PKI) Configuration Menu 365
- Figure 131: X509 Certificate Management Menu 366
- Figure 132: Create Self-Signed Certificate Menu 367
- Figure 133: Add Certificate Menu 370
- Figure 134: Modify Certificate Menu 372
- Figure 135: View Certificate Details Menu (page 1) 375
- Figure 136: View Certificate Details Menu (page 2) 376
- Figure 137: Generate Enrollment Request Menu 379
- Figure 138: Secure Socket Layer (SSL) Menu 384
- Figure 139: Secure Shell (SSH) Menu 391
- Figure 140: Show Server Information Menu 393
- Figure 141: Authentication Menu 399
- Figure 142: TACACS+ Client Configuration Menu 400
- Figure 143: RADIUS Client Configuration Menu 402
- Figure 144: RADIUS Server Configuration Menu 403
- Figure 145: Authenticator to Supplicant Configuration 407
- Figure 146: An Authenticator PAE 409
- Figure 147: Authentication Messaging Exchange 410
- Figure 148: Port Access Control Menu 411
- Figure 149: Configure Port Access Role Menu 414
- Figure 150: Configure Authenticator Menu 416
- Figure 151: Configure Authenticator Port Access Parameters Menu 417
- Figure 152: Configure Supplicant Menu 420
- Figure 153: Configure Supplicant Port Access Parameters Menu 420
- Figure 154: Display Port Access Status Menu 423
- Figure 155: Display Authentication Port Access Parameters 425
- Figure 156: Display Supplicant Port Access Parameters Menu 426
- Figure 157: Entering a Switch’s IP Address in the URL Field 430
- Figure 158: Home Page 430
- Figure 159: Configuration System Page, General Tab 434
- Figure 160: Configuration System Page, System Time Tab 438
- Figure 161: Monitoring System Page, General Tab 442
- Figure 162: Configuration System Page, SNMP Tab 445
- Figure 163: Add New SNMP Community Page 447
- Figure 164: Modify SNMP Community Page 449
- Figure 165: Monitoring Page, SNMP Tab 451
- Figure 166: Monitoring System Page, Ping Client Tab 453
- Figure 167: Configuration System Page, System Maintenance Tab 454
- Figure 168: Configuration System Page, System Maintenance Tab 456
- Figure 169: Configuration Layer 2 Page, Enhanced Stacking Tab 461
- Figure 170: Enhanced Stacking Page 463
- Figure 171: AT-S39 Home Page 464
- Figure 172: Configuration Layer 1 Page, Port Settings Tab 466
- Figure 173: Port Configuration Page 467
- Figure 174: Monitoring Layer 1 Page, Port Settings Tab 471
- Figure 175: Port Status Page 472
- Figure 176: Port Statistics Page 475
- Figure 177: Monitoring Layer 2 Page, Port Security Tab 478
- Figure 178: Security for Ports Page 479
- Figure 179: Configuration Layer 1 Page, Port Trunking Tab 482
- Figure 180: Add New Trunk Page 483
- Figure 181: Modify Trunk Page 486
- Figure 182: Monitoring Layer 1 Page, Port Trunking Tab 487
- Figure 183: Configuration Layer 1 Page, Port Mirroring Tab 489
- Figure 184: Add New Mirror Page 490
- Figure 185: Modify Mirror Page 492
- Figure 186: Monitoring Layer 1 Page, Port Mirroring Tab 494
- Figure 187: Configuration Layer 2 Page, Spanning Tree Tab 496
- Figure 188: Expanded STP Spanning Tree Tab 499
- Figure 189: STP Settings Page 501
- Figure 190: Expanded RSTP Spanning Tree Tab 503
- Figure 191: RSTP Settings Page 505
- Figure 192: Expanded MSTP Spanning Tree Tab 508
- Figure 193: Add New MSTI Page 511
- Figure 194: Modify MSTI Page 512
- Figure 195: MSTP Port Settings Page 515
- Figure 196: Monitoring Layer 2 Page, Spanning Tree Tab 517
- Figure 197: Monitoring Layer 2 Page, Spanning Tree Tab 518
- Figure 198: STP Settings Page 519
- Figure 199: Configuration Layer 2 Page, VLAN Tab 521
- Figure 200: Add New VLAN Page 522
- Figure 201: Modify VLAN Page 524
- Figure 202: Monitoring Layer 2 Page, VLAN Tab 527
- Figure 203: Configuration Layer 2 Page, GVRP Tab 531
- Figure 204: GVRP Port Configuration Page 534
- Figure 205: Monitoring Layer 2 Page, GVRP Tab 535
- Figure 206: GVRP Port Configuration Page 536
- Figure 207: GVRP Counters Page 537
- Figure 208: Configuration Layer 2 Page, MAC Address Tab 541
- Figure 209: MAC Address Table Page 542
- Figure 210: Add MAC Address Page 544
- Figure 211: Configuration System Page, IGMP Tab 549
- Figure 212: Monitoring System Page, IGMP Tab 552
- Figure 213: View Multicast Hosts List Page 553
- Figure 214: View Multicast Routers List Page 554
- Figure 215: View (Static) Multicast Routers List Page 554
- Figure 216: Configuration System Page, Server-based Authentication Tab 556
- Figure 217: TACACS+ Client Configuration Page 558
- Figure 218: RADIUS Client Configuration Page 560
- Figure 219: Monitoring System Page, Server-based Authentication Tab 562
- Figure 220: TACACS+ Client Configuration Page 563
- Figure 221: RADIUS Client Configuration Page 564
- Figure 222: Configuration Layer 1 Page, 802.1x Port Access Tab 566
- Figure 223: Port Role Configuration Page 567
- Figure 224: Authenticator Parameters Page 568
- Figure 225: Supplicant Parameters Page 571
- Figure 226: Monitoring Layer 1 Page, 802.1x Port Access Tab 573
- Figure 227: Port Access Port Status Page 574
- Figure 228: Authenticator Port Parameters Page 574
- Figure 229: Supplicant Port Parameters Page 575
- Figure 230: Monitoring Security Page, Keys Tab 577
- Figure 231: Monitoring Security Page, PKI Tab 580
- Figure 232: Certificate Page 581
- Figure 233: Monitoring Security Page, SSL Tab 583
Preface
- How This Guide is Organized
- Document Conventions
- Where to Find Web-based Guides
- Contacting Allied Telesyn
- Obtaining Management Software Updates
Section I
Overview
Chapter 1
AT-S60 Overview
- Overview
- Local Management Session
- Telnet Management Session
- Web Browser Management Session
- SNMP Management Session
- Management Access Levels
- Specifying Ports
- Specifying Time and Date
Section II
Local and Telnet Management
Chapter 2
Starting a Local or Telnet Management Session
- Local Management Session
- Telnet Management Session
  - Starting a Telnet Management Session
  - Quitting from a Telnet Management Interface
Chapter 3
Basic Switch Parameters
- Assigning an IP Address to a Switch
  - How Do You Assign an IP Address?
- Configuring an IP Address and Switch Name
- Displaying Line Card Information
  - Displaying Line Card Information
  - Displaying Line Card Statistics
- Activating the BootP and DHCP Services
- Setting the System Time
- Rebooting a Switch
- Configuring the AT-S60 Software Security Features
  - Configuring the Management Passwords
  - Configuring Management Access
- Displaying the AT-S60 Hardware and Software Information
  - Displaying System Hardware Information
  - Displaying System Software Information
- Pinging a Remote System
- Returning the AT-S60 Software to the Factory Default Values
- Configuring the Console Startup Mode
Chapter 4
SNMP Community Strings
- Enabling SNMP Communities
- Configuring SNMP Communities
- Deleting a SNMP Community
- Modifying a SNMP Community
- Displaying a SNMP Community
Chapter 5
Enhanced Stacking
- Enhanced Stacking Overview
  - Guidelines
  - Example
- Setting a Switch’s Enhanced Stacking Status
  - Configuring Enhanced Stacking
- Selecting a Switch in an Enhanced Stack
  - Returning to the Master Switch
Chapter 6
Port Parameters
- Displaying Port Status
- Configuring Port Parameters
- Displaying Port Statistics
Chapter 7
Port Security
- Port Security Overview
- Configuring Port Security
Chapter 8
Port Trunking
- Port Trunking Overview
- Creating a Port Trunk
- Deleting a Port Trunk
- Modifying a Port Trunk
Chapter 9
Port Mirroring
- Port Mirroring Overview
- Creating a Port Mirror
- Modifying a Source Port Mirror
- Deleting a Destination Port Mirror
- Enabling a Destination Port Mirror
- Disabling a Destination Port Mirror
Chapter 10
File System Configuration
- File System Configuration Overview
  - File Naming Conventions
- Setting, Creating, Editing, and Displaying System Configuration Files
- Copying and Renaming System Files
- Deleting System Files
- Displaying System Files
Chapter 11
File Downloads and Uploads
- Overview
- Obtaining Management Software Updates
- Downloading Files
  - Downloading an Image File Using Xmodem or TFTP
  - Downloading a File Using Xmodem or TFTP
- Uploading Files
  - Uploading an Image File Using Xmodem or TFTP
  - Uploading a File Using Xmodem or TFTP
- Downloading the AT-S60 Image Switch to Switch
Chapter 12
STP, RSTP, and MSTP
- STP and RSTP Overview
- Enabling or Disabling STP, RSTP, or MSTP
- Configuring STP
- Configuring RSTP
- MSTP Overview
- Configuring MSTP
Chapter 13
Virtual LANs
- VLAN Overview
- Port-based VLAN Overview
- Tagged VLAN Overview
  - General Rules for Creating a Tagged VLAN
  - Tagged VLAN Example
- Basic VLAN Mode Overview
- Displaying VLANs
- Creating a Port-based or Tagged VLAN
- Example of Creating a Port-Based VLAN
- Example of Creating a Tagged VLAN
- Modifying a VLAN
- Deleting a VLAN
- Setting a Switch’s VLAN Mode
- Specifying a Management VLAN
Chapter 14
Multiple VLAN Modes
- Multiple VLAN Mode Overview
- Selecting a VLAN Mode
- Changing the Uplink Port
- Displaying VLAN Information
Chapter 15
GARP VLAN Registration Protocol
- GARP VLAN Registration Protocol (GVRP) Overview
- Configuring GVRP
- Enabling or Disabling GVRP on a Port
- Displaying GVRP Parameters and Statistics
Chapter 16
MAC Address Table
- MAC Address Overview
- Displaying MAC Addresses
- Adding Static Unicast and Multicast MAC Addresses
- Deleting MAC Addresses
- Changing the Aging Time
Chapter 17
Class of Service (CoS)
- Class of Service Overview
- Configuring CoS
Chapter 18
IGMP Snooping
- IGMP Snooping Overview
- Configuring IGMP Snooping
- Displaying a List of Host Nodes
- Displaying a List of Multicast Routers
Section III
Security Features
Chapter 19
Web Server
- Web Server Overview
  - Protocols Supported
- Configuring the Web Server for Security Features
- Configuring SSL Certificates
  - Configuring Self-Signed Certificates
  - Configuring CA Certificates
Chapter 20
Encryption
- Encryption Overview
- Data Encryption
  - Symmetrical Encryption
  - Asymmetrical (Public Key) Encryption
- Data Authentication
- Key Exchange Algorithms
- Configuring Keys for Encryption
Chapter 21
Public Key Infrastructure (PKI)
- Public Key Infrastructure Overview
- PKI Implementation
  - PKI Standards
  - Certificate Retrieval and Storage
- Configuring Certificates
- Generating Enrollment Requests
Chapter 22
Secure Sockets Layer (SSL)
- Secure Sockets Layer Overview
- Configuring SSL
Chapter 23
Secure Shell (SSH)
- SSH Overview
- SSH Overall Configuration
- Configuring SSH
- Displaying SSH Information
Chapter 24
TACACS+ and RADIUS Protocols
- TACACS+ and RADIUS Overview
- Enabling TACACS+ or RADIUS
- Configuring TACACS+
- Configuring RADIUS
Chapter 25
802.1x Port-Based Network Access Control
- Port-Based Access Network Control Overview
- 802.1x Port-Based Network Access Control
  - The 802.1x Implementation
  - Configuration Example
- Port Authentication Control
  - The Authenticator PAE
  - The Supplicant PAE
- Authentication Server
- Enabling and Disabling Port Access Control
- Configuring the Port Access Role
- Configuring Authenticator Parameters
- Configure Supplicant Parameters
- Displaying Port Access Status
Section IV
Web Browser Management
Chapter 26
Starting a Web Browser Management Session
- Starting a Web Browser Management Session
  - Browser Tools
  - Quitting a Web Browser Management Session
Chapter 27
Basic Switch Parameters
- Configuring an IP Address and Switch Name
- Setting the System Time
- Setting Up SNTP
- Activating the BOOTP and DHCP Services
- Displaying System Information
- Configuring the SNMP Parameters and Trap IP Addresses
- Resetting a Switch
- Pinging a Remote System
- Returning the AT-S60 Software to the Factory Default Values
- Downloading a New Software Version
Chapter 28
Enhanced Stacking
- Overview
- Setting a Switch’s Enhanced Stacking Status
- Selecting a Switch in an Enhanced Stack
Chapter 29
Port Parameters
- Configuring Port Parameters
- Displaying Port Status and Statistics
  - Displaying Port Status
  - Displaying Port Statistics
Chapter 30
Port Security
- Displaying the Port Security Level
Chapter 31
Port Trunking
- Creating or Deleting a Port Trunk
  - Creating a Port Trunk
  - Deleting a Port Trunk
- Modifying a Port Trunk
- Displaying the Port Trunks
Chapter 32
Port Mirroring
- Creating or Deleting a Port Mirror
  - Creating a Port Mirror
  - Deleting a Port Mirror
- Modifying a Port Mirror
- Displaying the Port Mirror List
Chapter 33
STP, RSTP, and MSTP
- Enabling STP, RSTP, or MSTP
- Configuring STP
- Configuring RSTP
- Configuring MSTP
- Displaying STP, RSTP, or MSTP Settings
Chapter 34
Virtual LANs
- Creating a VLAN
- Modifying a VLAN
- Deleting a VLAN
- Displaying VLANs
- Setting the Switch’s VLAN Mode
Chapter 35
GARP VLAN Registration Protocol
- Configuring GVRP
- Resetting GVRP to the Defaults
- Modifying the GVRP Port Configuration
- Displaying the GVRP Settings
Chapter 36
MAC Address Table
- Displaying the MAC Address Table
- Adding Static Unicast and Multicast MAC Addresses
- Deleting MAC Addresses
- Changing the Aging Time
Chapter 37
IGMP Snooping
- Configuring IGMP Snooping
- Displaying a List of Host Nodes and Multicast Routers
Chapter 38
TACACS+ and RADIUS Protocols
- Enabling TACACS+ or RADIUS
- Configuring TACACS+
- Configuring RADIUS
- Displaying the TACACS+ Settings
- Displaying the RADIUS Settings
Chapter 39
802.1x Port-Based Network Access Control
- Configuring Port Access
  - Configuring an Authenticator Port
  - Configuring a Supplicant Port
- Displaying 802.1x Port Access Information
Chapter 40
Web Server Security
- Displaying the Encryption Keys
- Displaying the PKI Settings
- Displaying the SSL Settings
Appendix A
AT-S60 Default Settings
- Basic Switch Default Settings
- Enhanced Stacking Default Setting
- IGMP Snooping Default Settings
- PKI Default Settings
- Port Configuration Default Settings
- Port Security Default Settings
- Server-Based Authentication Default Settings
- SNMP Default Settings
- SSH Default Settings
- SSL Default Settings
- STP, RSTP, and MSTP Default Settings
- VLAN and GARP Default Settings
  - VLAN Default Settings
  - GARP and GVRP Default Settings
- Web Server Default Settings
- 802.1x Port-Based Network Access Control Default Settings
Index