Allied-telesis AT-GS950/8 Instrukcja Użytkownika

613-001484 Rev AAT-GS950/8Gigabit Ethernet Smart SwitchAT-GS950/8 Web Users Guide AT-S107 [1.00.043]

Figures10Figure 51. LACP Group Status Page...

Chapter 6: GVRP100

101Chapter 7Voice VLANThis chapter contains a description of the AT-GS950/8 switch’s Voice VLAN feature and the procedures to create, modify, and dele

Chapter 7: Voice VLAN102OverviewThe AT-GS950/8 Voice VLAN feature is specifically designed to maintain high quality, uninterrupted voice traffic throu

AT-GS950/8 Web Interface User Guide103When you are configuring the voice VLAN parameters, you must enter the complete MAC address of at least one of

Chapter 7: Voice VLAN104One or more ports in your voice VLAN must be configured as Static tagged or untagged members. Static VLAN members are permanen

AT-GS950/8 Web Interface User Guide105General GuidelinesHere is a summary of the rules to observe when you create a voice VLAN: One voice VLAN can b

Chapter 7: Voice VLAN106ConfigurationPrior to configuring your voice VLAN, you must first configure a tagged VLAN. This VLAN will be used as a basis f

AT-GS950/8 Web Interface User Guide1074. From the Voice VLAN field at the top of the page, select one of the following choices from the pull-down men

Chapter 7: Voice VLAN108NoteThe voice VLAN Auto-Detection feature can only be enabled on “Not Member” ports of the voice VLAN. Member ports cannot hav

AT-GS950/8 Web Interface User Guide109OUI SettingYou can create and delete Voice VLAN OUI Settings by following the procedures in these sections:  “

AT-GS950/8 Web Interface User Guide11Figure 111. Firmware Upgrade via TFTP Page...

Chapter 7: Voice VLAN110Modify OUISettingTo modify or delete an OUI, it must be first be deleted and then re-entered by following the procedure in “Cr

111Chapter 8STP and RSTPThis chapter provides background information about the Spanning Tree Protocol (STP) and the Rapid Spanning Tree Protocol (RSTP

Chapter 8: STP and RSTP112OverviewThe performance of a Ethernet network can be negatively impacted by the formation of a data loop in the network topo

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide113Bridge Priorityand the RootBridgeThe first task that bridges perform when

Chapter 8: STP and RSTP114Path Costs and Port CostsAfter the root bridge has been selected, the bridges determine if the network contains redundant pa

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide115.ForwardingDelay andTopologyChangesIf there is a change in the network to

Chapter 8: STP and RSTP116The forwarding delay value is adjustable in the AT-S107 Management software. The appropriate value for this parameter depend

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide117Figure 36. Point-to-Point PortsA port operates as an edge port when it is

Chapter 8: STP and RSTP118Mixed STP andRSTP NetworksRSTP IEEE 802.1w is fully compliant with STP IEEE 802.1d. Your network can consist of bridges runn

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide119Figure 38. STP and VLAN Fragmentation with Untagged PortsYou can avoid th

Figures12

Chapter 8: STP and RSTP120Figure 39. STP and VLAN Compatibility with Tagged PortsNoteFor information about tagged and untagged ports, refer to Chapter

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide121Basic STP and RSTP ConfigurationTo configure the basic STP and RSTP setti

Chapter 8: STP and RSTP122The RSTP Configuration page allows you to configure basic STP (STP-Compatible) or RSTP protocols as well as to view current

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide123 The following parameters refer to the designated root bridge. You canno

Chapter 8: STP and RSTP124Configure RSTP Port SettingsThis section contains the following topics: “Configure the Basic RSTP Port Settings” “Configur

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide125sent or received on a the port except for BPDU data. A port with a higher

Chapter 8: STP and RSTP126STP Status - Indicates if spanning tree protocol (either RSTP or STP-Compatible) is active or not on the port. Select one of

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide127Figure 42. AT-GS950/8 RSTP Advanced Port Configuration PageThis page disp

Chapter 8: STP and RSTP128Disabled - The Disabled Port role is assigned if the port is not operational or is excluded from the active topology by mana

AlliedWare Plus Version 2.1.2 Management Software Web Browser User’s Guide129Spanning Tree TopologyTo view the current spanning tree topology, perform

13List of TablesTable 1. Bridge Priority Value Increments ... 113Ta

Chapter 8: STP and RSTP130

131Chapter 9 Multiple Spanning Tree ProtocolThis chapter provides the procedures for configuring Multiple Spanning Tree Protocol (MSTP). You can find

Chapter 9: Multiple Spanning Tree Protocol132Multiple Spanning Tree ConfigurationHead2 Head3To configure the MSTP settings, perform the following proc

AT-GS950/8 Web Interface User Guide133Global MSTP Status - Set this field to Enable or Disable the MSTP feature on the switch. The Global MSTP Status

Chapter 9: Multiple Spanning Tree Protocol134bridge spends in the listening and learning states. Its range is 4 - 30 seconds.Maximum Hop Count - The M

AT-GS950/8 Web Interface User Guide135VLAN MappingYou can create, modify and delete MSTP settings with the procedures in the following sections: ”Op

Chapter 9: Multiple Spanning Tree Protocol136Modify MSTInstanceIf you wish to modify a MST Instance, you must first delete the instance and then redef

AT-GS950/8 Web Interface User Guide137Port ConfigurationTo configure the MSTP parameters for each of the ports, perform the following procedure:1. Fr

Chapter 9: Multiple Spanning Tree Protocol138network topology.ForcedFalse - The port is not connected to a network device in the network topology.Auto

AT-GS950/8 Web Interface User Guide139True - The port cannot process receive/transmit TCN BPDUs.False - The port can process receive/transmit TCN BPD

List of Tables14

Chapter 9: Multiple Spanning Tree Protocol140Port SettingsTo configure the MSTP port settings, perform the following procedure:1. From the main menu o

AT-GS950/8 Web Interface User Guide1416. If you choose to change the MSTP port settings for other ports, repeat steps 4 and 5.7. From the main menu o

Chapter 9: Multiple Spanning Tree Protocol142Topology InformationTo configure the MSTP port settings, perform the following procedure:1. From the main

AT-GS950/8 Web Interface User Guide143Regional Root Priority - The priority of the regional root port.Regional Path Cost - The path cost from the reg

Chapter 9: Multiple Spanning Tree Protocol144

145Chapter 10Static Port TrunkingThis chapter contains a description of port trunking and the procedures for creating, modifying, and deleting a stati

Chapter 10: Static Port Trunking146OverviewA port trunk is an economical way for you to increase the bandwidth between the Ethernet switch and another

AT-GS950/8 Web Interface User Guide147Network equipment vendors tend to employ different techniques to implement static trunks. Consequently, a stati

Chapter 10: Static Port Trunking148more than one VLAN. The ports of a static trunk can be either untagged or untagged members of the same VLAN. The s

AT-GS950/8 Web Interface User Guide149Create a Port TrunkThis procedure explains how to create a static port trunk.CautionDo not connect the cables o

15PrefaceThis guide contains instructions on how to use the AT-S107 Management software to manage and monitor the AT-GS950/8 Gigabit Ethernet Smart Sw

Chapter 10: Static Port Trunking150A check in a box indicates the port is a member of the trunk. No check means the port is not a member. A port trunk

AT-GS950/8 Web Interface User Guide151Modify a Port TrunkThis procedure explains how to change the status of a port trunk and add or remove ports fro

Chapter 10: Static Port Trunking1529. Configure the port trunk on the other switch with the same parameters.10. Connect the Ethernet cables between tr

AT-GS950/8 Web Interface User Guide153Disable a Port TrunkThis procedure explains how to disable a port trunk. CautionBefore you disable or modify a

Chapter 10: Static Port Trunking154

AT-GS950/8 Web Interface User Guide155Chapter 11LACP Port TrunksThis chapter contains overview information about LACP port trunks and the procedures

Chapter 11: LACP Port Trunks156OverviewLACP (Link Aggregation Control Protocol) port trunks perform the same function as static trunks. They increase

AT-GS950/8 Web Interface User Guide157System PriorityIt is possible for two devices interconnected by an aggregate trunk to encounter a conflict when

Chapter 11: LACP Port Trunks158Two conditions must be met for a port in an aggregate trunk to function in the standby mode. First, the number of ports

AT-GS950/8 Web Interface User Guide159General GuidelinesThe following guidelines apply when creating aggregators: LACP must be activated on both the

Preface16Where to Find Web-based Product InformationThe product guides are available for all Allied Telesis products in portable document format (PDF)

Chapter 11: LACP Port Trunks160the maximum number for the AT-GS950/8 switch, you should assign the other vendor’s device a higher system LACP priority

AT-GS950/8 Web Interface User Guide161Group StatusTo display the LACP Group Status, perform the following procedure:1. Select the Bridge folder.The B

Chapter 11: LACP Port Trunks162The System Priority is a preassigned value that you cannot alter. This value applies to the switch. See “System Priorit

AT-GS950/8 Web Interface User Guide163Figure 53. LACP Group Status Page with Three Cables ConnectedYou can now see that each port has been grouped un

Chapter 11: LACP Port Trunks164Port Priority ConfigurationTo select a priority for an LACP port, perform the following procedure:1. Select the Bridge

165Chapter 12Quality of Service (CoS)This chapter contains the following topics: “Overview” on page 166 “Associate Ports to CoS Priorities” on page

Chapter 12: Quality of Service (CoS)166OverviewWhen a port on an Ethernet switch becomes oversubscribed, its egress queues contain more packets than t

AT-GS950/8 Web Interface User Guide167Egress Queue vsPacket PriorityMappingEach switch port has four egress queues, labeled Q0, Q1, Q2, and Q3. Q0 is

Chapter 12: Quality of Service (CoS)168The procedure for changing the default mappings is found in “Associate Ports to CoS Priorities” on page 173. No

AT-GS950/8 Web Interface User Guide169have time to process the packets waiting in the lower priority queues.

AT-GS950/8 Web Interface User Guide17Contacting Allied Telesis This section provides Allied Telesis contact information for technical support as well

Chapter 12: Quality of Service (CoS)170Weighted Round Robin Priority SchedulingThe weighted round robin (WRR) scheduling method functions as its name

AT-GS950/8 Web Interface User Guide171Mapping CoS Priorities to Egress QueuesBefore mapping the CoS priorities and the egress queues, you must disabl

Chapter 12: Quality of Service (CoS)1724. For each Traffic Class whose queue you want to change, click on the Queue (0, 1, 2, or 3) radio button that

AT-GS950/8 Web Interface User Guide173Associate Ports to CoS PrioritiesThe Port Priority values is assigned to an untagged frame at ingress for inter

Chapter 12: Quality of Service (CoS)174Associate DSCP Classes to Egress QueuesIf you choose to use the DSCP tags in your Access Control policy configu

AT-GS950/8 Web Interface User Guide175Queue Scheduling AlgorithmTo change the scheduling algorithm for the egress queues, perform the following proce

Chapter 12: Quality of Service (CoS)176

177Chapter 13Access Control ConfigurationAccess Control configuration allows you to control different aspects of the Ethernet traffic as it enters the

Chapter 13: Access Control Configuration178ClassifierThe Create Classifier page allows you to specify packet settings for filtering Ethernet traffic.

AT-GS950/8 Web Interface User Guide1793. Enter a number in the Classifier Index field.The Classifier Index must be a unique number within the range o

Preface18

Chapter 13: Access Control Configuration1805. Click ADD.The classifier entry is displayed in the table at the bottom of the page. If you do not see yo

AT-GS950/8 Web Interface User Guide1813. From the Create Classifier page, identify which classifier that want to modify and click the modify link in

Chapter 13: Access Control Configuration1823. From the Create Classifier page, identify which classifier table entry that want to delete and click the

AT-GS950/8 Web Interface User Guide183Profile ActionThe Create Profile Action page defines the priority parameters for policing on DSCP (layer 3) and

Chapter 13: Access Control Configuration1843. Enter a number in the Profile Action Index field.The Index must be a unique number ranging from 1 to 72.

AT-GS950/8 Web Interface User Guide1852. From the Access Control Config folder, select Profile Action.An example of the Create Profile Action page wi

Chapter 13: Access Control Configuration1864. Click on the OK button.The profile action entry is deleted from the profile action table.5. From the mai

AT-GS950/8 Web Interface User Guide187In-Profile ActionThe Create In-Profile Action page allows you to specify a Profile Action’s Permit or Deny priv

Chapter 13: Access Control Configuration1884. Enter a number in the Profile Action ID field ranging from 0 to 72. This field is mandatory.NoteThis fie

AT-GS950/8 Web Interface User Guide189Modify In-ProfileActionTo modify a In-Profile action entry, perform the following procedure:NoteYou must first

19Chapter 1Starting a Web Browser SessionThis chapter contains the procedures for starting, using, and quitting a web browser management session on th

Chapter 13: Access Control Configuration190Delete In-ProfileActionTo delete a In-Profile action entry, perform the following procedure:1. From the mai

AT-GS950/8 Web Interface User Guide191Out-Profile ActionThe Create Out-Profile Action page allows you to specify a Profile Action’s Permit or Deny pr

Chapter 13: Access Control Configuration1924. Enter a number in the Profile Action ID field ranging from 0 to 72. This field is mandatory.NoteThis fie

AT-GS950/8 Web Interface User Guide193Modify Out-Profile ActionTo modify a Out-Profile action entry, perform the following procedure:NoteBefore you c

Chapter 13: Access Control Configuration194Delete Out-Profile ActionTo delete a Out-Profile action entry, perform the following procedure:1. From the

AT-GS950/8 Web Interface User Guide195Port ListThe Create Port List page allows you to specify a list of ports that will be used as part of the polic

Chapter 13: Access Control Configuration1965. Click Add.The Out-Profile Action entry is added to the status table. If the Page field located below the

AT-GS950/8 Web Interface User Guide197Figure 73. Modify Port List Page4. Change the parameters as required.NoteSee “Create Port List” on page 195 for

Chapter 13: Access Control Configuration198PolicyThe Create Policy page allows you to specify the filtering criteria for one policy. Before creating a

AT-GS950/8 Web Interface User Guide1993. Enter a number in the Policy Index field.The Policy Index is a unique number within the range of 1 - 65535 w

Copyright © 2011 Allied Telesis, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied

Chapter 1: Starting a Web Browser Session20Establishing a Remote Connection to the Web Browser InterfaceThe AT-GS950/8 switch is shipped with a pre-as

Chapter 13: Access Control Configuration200Figure 75. Example of Policy Entry6. From the main menu on the left side of the page, select Save Configura

AT-GS950/8 Web Interface User Guide201Figure 76. Modify Policy Page4. Change the parameters as required.NoteSee “Create Policy” on page 198 for the d

Chapter 13: Access Control Configuration2022. From the Access Control Config folder, select Policy.An example of the Create Policy page with a Policy

AT-GS950/8 Web Interface User Guide203Policy SequenceThe Policy Sequence page displays the order that policies are applied to each port. You can orde

Chapter 13: Access Control Configuration204

205Chapter 14Storm ControlThis chapter contains a description and configuration procedures for the Storm Control (bandwidth) feature. The following to

Chapter 14: Storm Control206OverviewThe features available in the AT-S107 Management software allow you to limit Ethernet traffic within your switch b

AT-GS950/8 Web Interface User Guide207Ingress RateLimitingThe Ingress Rate Limiting feature restricts the traffic to a pre-configured data rate that

Chapter 14: Storm Control208ConfigurationThis procedure explains how to set DLF, broadcast, multicast, and threshold levels for each port on the AT-GS

AT-GS950/8 Web Interface User Guide209NoteFor more information, see the Broadcast setting definition in“Overview” on page 206.7. Click Apply.8. To en

AT-GS950/8 Web Interface User Guide213. Enter the AT-S107 management login user name and password. The default user name is “manager” and the default

Chapter 14: Storm Control210Ingress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Ingress Rate Limiting on each port

AT-GS950/8 Web Interface User Guide2117. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save your

Chapter 14: Storm Control212Egress Rate LimitingThis procedure explains how to set Bandwidth levels and Status for Egress Rate Limiting on each port o

213Chapter 15MAC Address TableThis chapter contains a description of the static multicast MAC address feature and the procedure for configuring it. Th

Chapter 15: MAC Address Table214OverviewThe AT-GS950/8 switch has a MAC address table with a storage capacity of up to 8,000 entries. The table stores

AT-GS950/8 Web Interface User Guide215allows the multicast stream to be forwarded immediately to those predefined ports entered in the MAC table with

Chapter 15: MAC Address Table216Static Unicast MAC Address ConfigurationThis procedure explains how to set the static multicast feature for each port

AT-GS950/8 Web Interface User Guide2174. In the Group MAC Address field, enter a unicast MAC address.5. Assign the MAC address a Port Member (or memb

Chapter 15: MAC Address Table218Modify Static Unicast AddressTo modify the port assignment of a unicast MAC address in the MAC address table, perform

AT-GS950/8 Web Interface User Guide219Delete Static Unicast AddressTo delete a unicast MAC address from the MAC address table, perform the following

Chapter 1: Starting a Web Browser Session22 Security LLDP Statistics Chart Tools Save Configuration5. To see the front panel of the switch, selec

Chapter 15: MAC Address Table220Static Multicast Address ConfigurationThis procedure explains how to set the static multicast feature for each port on

AT-GS950/8 Web Interface User Guide221NoteAn error message is generated when you enter a VLAN ID or VLAN Index which is not been defined or when you

Chapter 15: MAC Address Table222Modify Static Multicast AddressTo modify the port assignment of a multicast MAC address in the MAC address table, perf

AT-GS950/8 Web Interface User Guide223Delete Static Multicast AddressTo delete a multicast MAC address from the MAC address table, perform the follow

Chapter 15: MAC Address Table224

225Chapter 16DHCP SnoopingThis chapter contains a description of the AT-GS950/8 switch’s DHCP Snooping feature and the procedures for creating, modify

Chapter 16: DHCP Snooping226OverviewThe DHCP Snooping feature provides security by inspecting ingress packets for the correct IP and MAC address infor

AT-GS950/8 Web Interface User Guide227first DHCPOFFER packet from the server that it receives. This packet contains the DHCP server’s IP address and

Chapter 16: DHCP Snooping228General GuidelinesHere is a summary of the rules to observe when you configure DHCP Snooping: A trusted port is connect t

AT-GS950/8 Web Interface User Guide229General ConfigurationThe following procedure describes how to configure the DHCP Snooping feature on the AT-GS9

AT-GS950/8 Web Interface User Guide23Web Browser ToolsYou can use the web browser tools to move around the management pages. Selecting Back on your b

Chapter 16: DHCP Snooping230through the switch without regard to the IP and MAC Address information in the packet header.6. From the Backup Database f

AT-GS950/8 Web Interface User Guide231VLAN SettingYou can create and delete DHCP Snooping VLAN settings by following the procedures in these sections

Chapter 16: DHCP Snooping232Modify VLANSettingTo modify or delete a VLAN ID, it must first be deleted and then re-entered by following the procedure o

AT-GS950/8 Web Interface User Guide233Trusted and Untrusted Port ConfigurationThe following procedure describes how to configure the DHCP Snooping tr

Chapter 16: DHCP Snooping234Binding DatabaseThe Binding Database displays learned and statically assigned MAC Address and IP Address information for e

AT-GS950/8 Web Interface User Guide235Type - Because the IP Address being entered is static, you must select Static.Lease Time - Enter the time that

Chapter 16: DHCP Snooping236

237Chapter 17IGMP SnoopingThis chapter contains a description of the IGMP Snooping procedure as well as procedures for working with IGMP Snooping in t

Chapter 17: IGMP Snooping238OverviewIGMP enables IPv4 routers to create lists of nodes that are members of multicast groups. (A group of end nodes tha

AT-GS950/8 Web Interface User Guide239Without IGMP snooping, a switch floods multicast packets from all of its ports, except the port on which it rec

Chapter 1: Starting a Web Browser Session24Quitting a Web Browser Management SessionTo exit a web browser management session, close the web browser.

Chapter 17: IGMP Snooping240IGMP Snooping ConfigurationThis procedure explains how to set IGMP snooping on the switch and set the IGMP Snooping (V1) a

AT-GS950/8 Web Interface User Guide2416. The IGMP Snooping Page is updated with active Multicast Group address(s). See Figure 88.NoteThe Multicast Gr

Chapter 17: IGMP Snooping242

243Chapter 18SecurityThis Chapter contains information about the Port-based security features and the procedures for setting this feature. This chapte

Chapter 18: Security244Port Access ControlThis section contains information and configuration procedures for the Port-based Access Control. This secti

AT-GS950/8 Web Interface User Guide245Port AccessControlConfigurationTo configure port-based access control, perform the following procedure:1. Selec

Chapter 18: Security246Port - This parameter specifies the port being configured for authentication.Authentication Mode - This parameter specifies the

AT-GS950/8 Web Interface User Guide247Supplicant Mode - This parameter specifies if one or more supplicants can be authenticated on a port.Single - T

Chapter 18: Security248Maximum Request - Specifies the maximum number of times authenticator ports transmit EAP Request packets to clients before timi

AT-GS950/8 Web Interface User Guide249RADIUS ClientYou can use the RADIUS client with 802.1x port-based access control to authenticate which packets

25Chapter 2Basic Switch ConfigurationThis chapter provides procedures to configuring basic system parameters for the AT-GS950/8 switch and contains in

Chapter 18: Security250 You need to specify the user name and password combinations when configuring the RADIUS server software on the authentication

AT-GS950/8 Web Interface User Guide2517. Click Apply to save your changes.8. From the main menu on the left side of the page, select Save Configurati

Chapter 18: Security252Dial-in User - Local AuthenticationDial-in User feature provides the local authentication server for port security when a remot

AT-GS950/8 Web Interface User Guide253Figure 91. Dial-In User Page3. In the User Name field, type a name for the user.4. In the Password field, type

Chapter 18: Security254Delete a Dial-in UserTo delete a dial-in user, perform the following procedure:1. From the main menu on the left side of the pa

AT-GS950/8 Web Interface User Guide255Destination MAC FilterThis chapter contains an explanation of the Destination MAC Filter feature as well a proc

Chapter 18: Security256Figure 92. Destination MAC Filter Page3. To enter the MAC address that you want filtered, enter the MAC address into the MAC Ad

257Chapter 19LLDPLink Layer Discovery Protocol (LLDP) allows Ethernet network devices such as switches and routers to receive and/or transmit device-r

Chapter 19: LLDP258OverviewThe data sent and received by LLDP are useful for many reasons. The switch can discover other devices directly connected to

AT-GS950/8 Web Interface User Guide259Global ConfigurationPerform the following procedures to configure the Global parameters for LLDP: “Enable/Disa

Chapter 2: Basic Switch Configuration26Configuration of IP Address, Subnet Mask and Gateway AddressThis procedure explains how to change the IP addres

Chapter 19: LLDP2603. From the LLDP parameter, select one of the following radio button choices:Enable - The LLDP feature is active. NoteThe LLDP feat

AT-GS950/8 Web Interface User Guide261For more information, see “System Management Information” on page 38System Description - This parameter describ

Chapter 19: LLDP262Neighbors InformationTo view the information received from the neighboring network devices, perform the following procedure:1. From

263Chapter 20Simple Network Management Protocol SNMPv1 and v2cThis chapter contains a description of SNMPv1 and SMNMPv2c and the procedures for config

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c264SNMPv1 and SNMPv2c OverviewYou can manage a switch by viewing and configuring the mana

AT-GS950/8 Web Interface User Guide265Trap Receiver AttributesA trap is a message sent by the agent to one or more managers to indicate the occurrenc

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c266Activate SNMP InterfaceThe SNMP interface is activated by default. If you want to de-a

AT-GS950/8 Web Interface User Guide267SNMPv1/v2 User and Group NamesA v1/v2 User Name and Group Name definition is the basis for creating SNMPv1/v2 c

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c268NoteIf you choose to use the default User and Group Names (ReadOnly and ReadWrite) tha

AT-GS950/8 Web Interface User Guide269SNMPv1/v2 Community StringsA community string has attributes for controlling who can use the string and what th

AT-GS950/8 Web Interface User Guide27System Default Gateway - Displays the default gateway of the switch. To change the default gateway, enter a new

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c2705. Click Add.The new Community Name and User Name are displayed.6. From the main menu

AT-GS950/8 Web Interface User Guide271SNMP TrapsA Host IP address is used to specify a management device that needs to receive SNMP traps sent by the

Chapter 20: Simple Network Management Protocol SNMPv1 and v2c2726. Click Add.The new host is added to the table.7. From the main menu on the left side

273Chapter 21Simple Network Management Protocol SNMPv3This chapter contains a description of SNMPv3 and the procedures for configuring this protocol.

Chapter 21: Simple Network Management Protocol SNMPv3274SNMPv3 OverviewThe SNMPv3 protocol builds on the existing SNMPv1 and SNMPv2c protocol implemen

AT-GS950/8 Web Interface User Guide275In addition, you have the option of assigning no user authentication. In this case, no authentication is perfor

Chapter 21: Simple Network Management Protocol SNMPv3276The AT-S107 Management software supports the MIB tree, starting with the Internet MIBs, as def

AT-GS950/8 Web Interface User Guide277NoteThe Community Strings do not have a default value defined and are initially blank. 5. Finally, the traps ca

Chapter 21: Simple Network Management Protocol SNMPv3278SNMPv3 User and Group NamesA v3 User Name and Group Name definition is the basis for all the o

AT-GS950/8 Web Interface User Guide2799. Select one of the following choices for the Priv-Protocol field:DES - The DES encryption scrambles the SNMP

Chapter 2: Basic Switch Configuration28IP Access List ConfigurationWhen the IP Access List feature is enabled, remote access to the AT-S107 management

Chapter 21: Simple Network Management Protocol SNMPv3280SNMPv3 View NamesThe SNMPv3 View names are defined in the SNMP Group Access table and are base

AT-GS950/8 Web Interface User Guide2815. Enter the Write View Name.This name is an optional field. It can be up to 31 characters in length.6. Enter t

Chapter 21: Simple Network Management Protocol SNMPv32824. From the main menu on the left side of the page, select Save Configuration to Flash to perm

AT-GS950/8 Web Interface User Guide283View Table The SNMP v3 View table specifies the MIB object access criteria for each View Name. If the View Name

Chapter 21: Simple Network Management Protocol SNMPv32845. Enter “1” for the OID Mask.6. Enter the View Type. This can be one of two choices:Included

AT-GS950/8 Web Interface User Guide285SNMPv3 TrapsThe creation, modification and deletion of traps for SNMPv3 is identical to the procedure for SNMPv

Chapter 21: Simple Network Management Protocol SNMPv3286

287Chapter 22RMONThis chapter contains the following sections: “Overview” on page 288 “Enable and Disable RMON” on page 289 “Port Statistics” on pa

Chapter 22: RMON288OverviewThe RMON (Remote MONitoring) MIB is used with SNMP applications to monitor the operations of network devices. The switch su

AT-GS950/8 Web Interface User Guide289Enable and Disable RMONYou can now use your SNMP Network Management System (NMS) software and the RMON section

AT-GS950/8 Web Interface User Guide29NoteYou can add up to 10 IP address to the IP Access List table.

Chapter 22: RMON290Port StatisticsYou can remotely view individual port statistics with RMON by using your SNMP NMS software and the RMON portion of t

AT-GS950/8 Web Interface User Guide291HistoriesRMON histories are snapshots of port statistics. They are taken by the switch at predefined intervals

Chapter 22: RMON292Interval - This parameter specifies how frequently the switch takes snapshots of the port’s statistics. The range is 1 to 3600 seco

AT-GS950/8 Web Interface User Guide293EventsAn event specifies the action of the switch when the ingress packet activity on a port crosses a statisti

Chapter 22: RMON2944. Once you have configured the parameters, click Add.Your entry will appear in the table at the bottom of the page. 5. If you want

AT-GS950/8 Web Interface User Guide295AlarmsRMON alarms are used to generate alert messages when packet activity on designated ports rises above or f

Chapter 22: RMON2962. From the RMON folder, select Alarm.The RMON Alarm Configuration Page is displayed. See Figure 106.Figure 106. RMON Alarm Configu

AT-GS950/8 Web Interface User Guide297Rising Event Index - This parameter specifies the event index for the rising threshold. Its range is 1 to 65535

Chapter 22: RMON298

299Chapter 23Network StatisticsThe sections in this chapter explain how to display traffic, error, and history statistics about the network traffic on

3ContentsList of Figures ...

Chapter 2: Basic Switch Configuration305. From the IP Restriction Status field, select one of the following choices from the pull-down menu:Enable - T

Chapter 23: Network Statistics300OverviewStatistics provide important information for troubleshooting switch problems at the port level. The AT-S107 M

AT-GS950/8 Web Interface User Guide301Traffic Comparison StatisticsThe Traffic Comparison statistics chart allows you to display a specified traffic

Chapter 23: Network Statistics3023. To view traffic statistics, click on the arrow next to “Statistics” and select one of the options in Table 6.4. To

AT-GS950/8 Web Interface User Guide3035. To select the color of the traffic comparison graph, select Color. Choose one of the following colors:GreenB

Chapter 23: Network Statistics304Error Group StatisticsThe Error Group chart displays the discard and error counts for a specified port. To display er

AT-GS950/8 Web Interface User Guide3054. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following o

Chapter 23: Network Statistics306Historical Status ChartsThe Historical Status chart allows you to select from 12 statistics to view for a selection o

AT-GS950/8 Web Interface User Guide307Table 7 Historical Status OptionsOption DefinitionInbound Octet Rate (Bytes) Measures the rate of inbound octe

Chapter 23: Network Statistics3084. To select the amount of time before the screen is refreshed, click Auto Refresh. Choose from the following options

309Chapter 24Management Software UpdatesThis chapter explains the methods for upgrading the AT-S107 Management software on the switch and saving confi

AT-GS950/8 Web Interface User Guide31System TimeThe procedures in this section describe how to configure the system time by manually entering the tim

Chapter 24: Management Software Updates310OverviewYou can use the Management Software Updates features to upgrade the AT-S107 Management software to a

AT-GS950/8 Web Interface User Guide311Upgrade Firmware Image via HTTPThis section describes how to upgrade an firmware image of the AT-S107 Managemen

Chapter 24: Management Software Updates3122. From the Firmware Upgrade folder, select via HTTP.The Firmware Upgrade via HTTP Page is displayed. See Fi

AT-GS950/8 Web Interface User Guide313Upgrade Firmware Image via TFTPThis section describes how to upgrade an firmware image of the AT-S107 Managemen

Chapter 24: Management Software Updates314The Image/Version Date shows the current version and date of software installed on the switch.3. Change the

AT-GS950/8 Web Interface User Guide315Download or Upload a Configuration File via HTTPThis section describes how to download or upload a configuratio

Chapter 24: Management Software Updates316ConfigurationFile UploadTo upload an AT-S107 configuration file onto the switch, perform the following proce

AT-GS950/8 Web Interface User Guide317NoteIf the IP address contained in the new configuration file is different than the one you currently have in y

Chapter 24: Management Software Updates318Download or Upload a Configuration File via TFTPThis section describes how to download or upload a configura

AT-GS950/8 Web Interface User Guide319ConfigurationFile DownloadTo download an AT-S107 configuration file onto the switch, perform the following proc

Chapter 2: Basic Switch Configuration323. Use the pull down menu to set the Clock Mode parameter to Local time.4. In the Local Time Settings section,

Chapter 24: Management Software Updates320

321Chapter 25Loopback ProtectionThis chapter explains how to configure the Loopback Protection feature for specific ports on the AT-GS950/8 switch. If

Chapter 25: Loopback Protection322ConfigurationTo configure the Loopback Detection feature, perform the following procedure:1. From the main menu on t

AT-GS950/8 Web Interface User Guide3234. Under the Loopback Detection Global Settings, configure the following parameters:Interval - This parameter s

Chapter 25: Loopback Protection324StatusThe status of the Loopback Detection is given in the Loop Status column of the table at the bottom of the Loop

325Chapter 26Cable DiagnosticsThis chapter provides procedures to run cable diagnostics on the cables connected to the switch ports. If a port is sele

Chapter 26: Cable Diagnostics326Test Results - Displays the diagnostic results for each pair in the cable. One of the following cable status parameter

327Appendix AMSTP OverviewThis appendix provides background information about the Multiple Spanning Tree Protocol (MSTP) and includes the following se

Appendix A: MSTP Overview328OverviewIn the AT-GS950/8, STP and RSTP are referred to as single-instance spanning trees that search for physical loops a

AT-GS950/8 Web Interface User Guide329NoteDo not activate MSTP on the AT-GS950/8 switch without first familiarizing yourself with the following conce

AT-GS950/8 Web Interface User Guide33Setting DaylightSavingsParametersIf you want to configure the switch for daylight savings time, perform the foll

Appendix A: MSTP Overview330Multiple Spanning Tree Instance (MSTI)The individual spanning trees in MSTP are referred to as Multiple Spanning Tree Inst

AT-GS950/8 Web Interface User Guide331MSTP and the two VLANs have been assigned different spanning tree instances. Now that they reside in different

Appendix A: MSTP Overview332Figure 120. Multiple VLANs in a MSTIIn this example, because an MSTI contains more than one VLAN, the links between the VL

AT-GS950/8 Web Interface User Guide333General GuidelinesHere are the guidelines for MSTIs: The AT-GS950/8 switch can support up to 31 spanning tree

Appendix A: MSTP Overview334VLAN and MSTI AssociationsPart of the task to configuring MSTP involves assigning VLANs to spanning tree instances. The ma

AT-GS950/8 Web Interface User Guide335Ports in Multiple MSTIsA port can be a member of more than one MSTI at a time if it is a tagged member of one o

Appendix A: MSTP Overview336Multiple Spanning Tree RegionsAnother important concept of MSTP is regions. A MSTP region is defined as a group of bridges

AT-GS950/8 Web Interface User Guide337Figure 121. Multiple Spanning Tree RegionThe AT-GS950/8 switch determines regional boundaries by examining the

Appendix A: MSTP Overview338Each MSTI functions as an independent spanning tree within a region. Consequently, each MSTI must have a root bridge to lo

AT-GS950/8 Web Interface User Guide339 Each MSTI must have a regional root for locating loops in the instance. MSTIs can share the same regional roo

Chapter 2: Basic Switch Configuration34DHCP and ATI Web Discovery ToolThe AT-GS950/8 Gigabit Ethernet Smart switch is managed through a web browser in

Appendix A: MSTP Overview340Common andInternalSpanning Tree(CIST)MSTP has a default spanning tree instance called the Common and Internal Spanning Tre

AT-GS950/8 Web Interface User Guide341Associating VLANs to MSTIsWhen you are using Multiple Spanning Tree, Allied Telesis recommends that you assign

Appendix A: MSTP Overview342Figure 123. CIST and VLAN Guideline - Example 2When port 3 on switch B receives a BPDU, the switch notes the port sending

AT-GS950/8 Web Interface User Guide343VLANs Across Different RegionsSpecial consideration needs to be taken into account when you connect different M

Appendix A: MSTP Overview344Another approach is to configure multiple regions in a subnet and group the VLANs that need to span two or more regions in

AT-GS950/8 Web Interface User Guide345Summary of GuidelinesCareful planning is essential for the successful implementation of MSTP. This section revi

Appendix A: MSTP Overview346

347Appendix AAT-GS950/8 Default ParametersTable 9 lists the factory default settings for the AT-S107 Management software on the AT-GS950/8 switch. The

Appendix A: AT-GS950/8 Default Parameters348IP address entries 10 entries 10 entriesSystem/AdministrationUser Name manager 1 - 12 charactersPassword f

AT-GS950/8 Web Interface User Guide349To (Month:Day:HH:MM)January:01:00:00-DST Offset 1 hr-System/SSL SettingsSSL Settings Disabled Enabled/DisabledS

AT-GS950/8 Web Interface User Guide35DHCP Client ConfigurationThis procedure explains how to activate and deactivate the DHCP client on the AT-GS950/

Appendix A: AT-GS950/8 Default Parameters350Trunk--Type 1000TX-Link StatusDown Up/DownAdmin StatusEnabled Enabled/DisabledMode Auto Auto/10Half/10Ful

AT-GS950/8 Web Interface User Guide351Bridge Priority32768 0 - 61440Region NameMAC Address of AT-GS950/8 switch-Region Revision0 0 - 65535Dynamic Pat

Appendix A: AT-GS950/8 Default Parameters352AutoEdge Status TrueTrue/FalseRestricted Role FalseTrue/FalseRestricted TCN False True/FalsePort State Ig

AT-GS950/8 Web Interface User Guide353802.1Q VLAN - ID 1 - 4000Port-Based VLAN Index- ID 1 - 52MAC Address none xx:xx:xx:xx:xx:xx hex formatPort Memb

Appendix A: AT-GS950/8 Default Parameters354Ingress Rate LimitingStatusDisabled Enabled/DisabledEgress Rate LimitingBandwidth64Kbps X rate limit where

AT-GS950/8 Web Interface User Guide355Restricted VLAN RegistrationDisabled Enabled/DisabledGarpJoinTime 200 milli-seconds 10 - 1073741810 milli-secon

Appendix A: AT-GS950/8 Default Parameters356SNMP Version v1 v1/v2c/v3encrypted not checked not checked/checkedAuth-ProtocolMD5MD5/SHAPasswordnone-Priv

AT-GS950/8 Web Interface User Guide357Protocolnone 1 - 255Source IP AddressnoneIPv4 address in xxx.xxx.xxx.xxx hex format;Source IP Mask Lengthnone 1

Appendix A: AT-GS950/8 Default Parameters358Port Numberport 1 port 1 - 8Policy Index none 1 - 65535Classifier Index none 1 - 65535Policy Sequencenone

AT-GS950/8 Web Interface User Guide359Event Index Nas1 1 - 65535Event Descriptionnone-Event TypeNone None/Log/SNMP Trap/Log and TrapEvent Communityno

Chapter 2: Basic Switch Configuration36NoteThe ATI Web Discovery Tool is available for download on the AT-GS950/8 product page at alliedtelesis.com.6.

Appendix A: AT-GS950/8 Default Parameters360RADIUS Accounting Port1813 1 - 65535RADIUS Shared Secretnone 1 - 20 charactersDestination MAC Filter MAC A

AT-GS950/8 Web Interface User Guide361Binding Database VLANnone-Binding Database Portport 1 1 - 8 portsBinding Database TypeDynamicDynamic/StaticBind

Appendix A: AT-GS950/8 Default Parameters362Historical Status Auto Refresh5 seconds 5/10/15/30 secondsHistorical Status Port1port 1 - 8 Historical Sta

AT-GS950/8 Web Interface User Guide363Reboot selection Normal Normal/Factory Default/Factory Default Except IPPing - Destination IP Address0.0.0.0 IP

Appendix A: AT-GS950/8 Default Parameters364

AT-GS950/8 Web Interface User Guide37DHCP Auto ConfigurationIf you need to automatically update the switch’s configuration files via a remote server,

Chapter 2: Basic Switch Configuration38System Management InformationThis section explains how to assign a name, location, and contact information for

AT-GS950/8 Web Interface User Guide39System Name - Specifies a name for the switch, for example, Sales. The name is optional and may contain up to 15

Contents4SSL Settings...

Chapter 2: Basic Switch Configuration40User Name and Password ConfigurationPassword protection is always enabled for access to the AT-S107 Management

AT-GS950/8 Web Interface User Guide414. To add a password that corresponds to the user name entered in step 3, enter a password of up to 12 alphanume

Chapter 2: Basic Switch Configuration42Delete User Nameand PasswordTo delete a user name that you have previously added, perform the following procedu

AT-GS950/8 Web Interface User Guide43User Interface ConfigurationThis procedure explains how to enable and disable the user interfaces on the switch.

Chapter 2: Basic Switch Configuration44NoteSee Chapter 20, “Simple Network Management Protocol SNMPv1 and v2c” on page 263 and Chapter 21, “Simple Net

AT-GS950/8 Web Interface User Guide45System Information DisplayThe Switch Information page is initially displayed when you first log into the AT-GS95

Chapter 2: Basic Switch Configuration46Administration Information Section:Switch Name - This parameter displays the name assigned to the switch. To as

AT-GS950/8 Web Interface User Guide47Switch RebootYou can reboot the AT-GS950/8 switch by either pressing the front panel eco-friendly switch between

Chapter 2: Basic Switch Configuration48CautionSince you define this password as part of the process of disabling this function, Allied Telesis has no

AT-GS950/8 Web Interface User Guide49Figure 14. Factory Default Reset/Reboot Page3. Go to the lower part of the page to the Reboot section.4. In the

AT-GS950/8 Web Interface User Guide5Chapter 9: Multiple Spanning Tree Protocol ...

Chapter 2: Basic Switch Configuration50To return the AT-S107 Management software to the default settings, perform the following procedure:NoteSee “AT-

AT-GS950/8 Web Interface User Guide51Disabling FactoryDefault ResetFeatureThe factory default reset feature allows anyone to reset the switch to the

Chapter 2: Basic Switch Configuration52responsible for keeping the password in a safe place. If it is lost, Allied Telesis does not have a way to help

AT-GS950/8 Web Interface User Guide53NoteIf the Factory Default Reset field is already set to Enable, you do not need to continue with this procedure

Chapter 2: Basic Switch Configuration54Pinging a Remote SystemThis procedure instructs the AT-GS950/8 switch to ping a node on your network. This proc

AT-GS950/8 Web Interface User Guide555. To view the ping results, click Show Ping Results.A sample Ping Test Results Page is displayed. See Figure 19

Chapter 2: Basic Switch Configuration56SSL SettingsThe AT-GS950/8 switch has a web browser server for remote management of the unit with a web browser

AT-GS950/8 Web Interface User Guide574. Click Apply.The SSL setting that you have selected is now active. 5. From the main menu on the left side of t

Chapter 2: Basic Switch Configuration58System Log ConfigurationThe System log is designed to monitor the operation the AT-GS950/8 switch by recording

AT-GS950/8 Web Interface User Guide593. From the Syslog Status field, select one of the following choices from the pull-down menu:Enable - The System

Contents6Port List ...

Chapter 2: Basic Switch Configuration60

61Chapter 3Port ConfigurationThis chapter provides a description of the physical characteristics of the ports and a procedure that explains how to vie

Chapter 3: Port Configuration62OverviewThis chapter describes how to display and modify the physical characteristics of an AT-GS950/8 switch. You can

AT-GS950/8 Web Interface User Guide63Display and Configure PortsThis procedure explains how to configure the ports on the AT-GS950/8 switch using the

Chapter 3: Port Configuration64twisted-pair ports (1 through 6, 7R and 8R) and 100FX or 1000TX for the SFP ports (7 and 8) for copper or fiber SFP typ

AT-GS950/8 Web Interface User Guide65Mode -This parameter i Indicates the speed and duplex mode settings for the port. You can use this parameter to

Chapter 3: Port Configuration66Ignore - This parameter indicates that the All setting does not apply to the Flow Control field. In other words, each p

67Chapter 4Port MirroringThis chapter describes the Port Mirroring feature and the procedure for setting up port mirroring. Port mirroring allows you

Chapter 4: Port Mirroring68OverviewThe port mirroring feature allows you to unobtrusively monitor the traffic received and transmitted on one or more

AT-GS950/8 Web Interface User Guide69Port Mirroring ConfigurationTo configure Port Mirroring, perform the following procedure:1. Select the Bridge fo

AT-GS950/8 Web Interface User Guide7Dial-in User - Local Authentication...

Chapter 4: Port Mirroring707. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save your changes.

AT-GS950/8 Web Interface User Guide71Disable Port MirroringTo disable Port Mirroring, perform the following procedure:1. Select the Bridge folder.The

Chapter 4: Port Mirroring72

73Chapter 5Virtual LANsThis chapter contains a description of Virtual Local Area Networks (VLANs) and the procedures for creating, modifying, and dele

Chapter 5: Virtual LANs74VLAN OverviewA virtual LAN or VLAN is a group of ports on an Ethernet switch that form a logical Ethernet segment via the AT-

AT-GS950/8 Web Interface User Guide75With VLANS, you can reconfigure the LAN segment assignment of an end node connected to the AT-GS950/8 switch’s m

Chapter 5: Virtual LANs76Each port of a port-based VLAN can belong to as many VLANs as needed. Therefore, traffic can be forwarded to the members of t

AT-GS950/8 Web Interface User Guide77VLAN NameTo create a tagged VLAN, you must give it a unique name. This name can reflect the function of the netw

Chapter 5: Virtual LANs78General Rules for Creating a Tagged VLANHere is a summary of the rules to observe when you create a tagged VLAN: Assign a un

AT-GS950/8 Web Interface User Guide79Assign Ports to a VLAN ModeThe procedure described in this section allows you to assign ports to tagged or a por

Contents8Chapter 22: RMON ...

Chapter 5: Virtual LANs806. If you want to restore the port assignment before saving the configuration, click Restore.NoteOnce the VLAN assignment has

AT-GS950/8 Web Interface User Guide81Tagged VLAN ConfigurationOn a port, the tag information within a frame is examined when it is received to determ

Chapter 5: Virtual LANs824. To assign a VLAN ID, type a VLAN ID in the VLAN ID field.The range for this field is 2 to 4,000. You can create a maximum

AT-GS950/8 Web Interface User Guide832. From the Bridge folder, select VLAN.The VLAN folder expands.3. From the VLAN folder, select Tagged VLAN.An ex

Chapter 5: Virtual LANs846. To change the VLAN Name, type a new VLAN Name in the VLAN Name field.For more information about this field, refer to “VLAN

AT-GS950/8 Web Interface User Guide857. To change the Management VLAN assignment, select one of the following choices from the pull-down menu:Enable

Chapter 5: Virtual LANs86NoteYou cannot delete the Default VLAN which has a VID of 1.6. From the main menu on the left side of the page, select Save C

AT-GS950/8 Web Interface User Guide87Tagged VLAN Port SettingsTo configure a VLAN port that is a member of a Tagged VLAN, perform the following proce

Chapter 5: Virtual LANs88Disable - This disables Ingress Filtering at the selected port.6. Click Apply.The port configuration becomes effective.7. If

AT-GS950/8 Web Interface User Guide89Port-Based VLAN ConfigurationA port-based VLAN is a group of ports on the switch that form a logical Ethernet se

9Figure 1. Entering a Switch’s IP Address in the URL Field...

Chapter 5: Virtual LANs907. Click Apply.8. From the main menu on the left side of the page, select Save Configuration to Flash to permanently save you

AT-GS950/8 Web Interface User Guide91The Bridge folder expands.2. From the Bridge folder, select VLAN.The VLAN folder expands.3. From the VLAN folder

Chapter 5: Virtual LANs92

93Chapter 6GVRPThis chapter contains the following sections: “Overview and Guidelines” on page 94 “General Configuration” on page 95 “Port Settings

Chapter 6: GVRP94Overview and GuidelinesThe GARP VLAN Registration Protocol (GVRP) allows network devices to share VLAN information and to use the inf

AT-GS950/8 Web Interface User Guide95General ConfigurationPerform the following procedure to enable or disable GVRP:1. From the main menu on the left

Chapter 6: GVRP96Port SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page,

AT-GS950/8 Web Interface User Guide97Disable - The Restricted VLAN Registration is de-active for the port row selected. 5. Once you have configured t

Chapter 6: GVRP98Time SettingsPerform the following procedure to configure the GVRP port settings:1. From the main menu on the left side of the page,

AT-GS950/8 Web Interface User Guide99equation:GARPLeaveAllTimer > (GARPLeaveTimer + 10)NoteTo ensure compatibility between network devices, you ne