Allied Telesis AT-9724TS Instrukcja Użytkownika

High-Density Layer 3 Stackable Gigabit Ethernet SwitchAT-9724TSInstallation and User’s GuidePN D617/10032 Rev 1Copyright.2004 Allied Telesyn, Inc.1980

Tell Us What You ThinkIf you have any comments or suggestions on how we might improve this or other Allied Telesyn documents, please contact us at www

3. After changing the route preference value for a specific routing protocol, that protocol needs to be restarted because the previously learned route

Static ARP TableThe Address Resolution Protocol (ARP) is a TCP/IP protocol that converts IP addresses into physical addresses.This table allows networ

To maximize stability, the hop count RIP uses to measure distance must have a low maximum value. Infinity (that is, the network is unreachable) is def

To setup RIP for the IP interfaces configured on the Switch, the user must enable RIP and then configure RIP settings for the individual IP interfaces

Parameter DescriptionInterface Name The name of the IP interface on which RIP is to be setup.This interface must be previously configured on theSwitch

Shortest Path TreeTo build Router A’s shortest path tree for the network diagrammed below, Router A is put at the root of the tree and the smallest co

Figure 6- 99. Constructing a Shortest Path Tree – CompletedNote that this shortest path tree is only from the viewpoint of Router A.The cost of the li

OSPF AuthenticationOSPF packets can be authenticated as coming from trusted routers by the use of predefined passwords.The default for routers is to u

AdjacenciesAdjacent routers go beyond the simple Hello exchange and participate in the link-state database exchange process. OSPF elects one router as

Figure 6- 100. OSPF Packet Header FormatField DescriptionVersion No. The OSPF version number.Type The OSPF packet type.The OSPF packet types are as fo

Chapter 1 - Introduction1-1 Ethernet Technology1-2 Switch Description1-3 Features1-4 Ports1-5 Front Panel Components1-6 Rear-Panel Description1-7 Side

Figure 6- 101. Hello PacketField DescriptionNetwork Mask The network mask associated with this interface.Options The optional capabilities supported b

Figure 6- 102. Database Description PacketField DescriptionOptionsThe optional capabilities supported by the router.I – bit The Initial bit.When set t

Figure 6- 103. Link-State Request PacketEach advertisement requested is specified by its Link-State Type, Link-State ID, and Advertising Router.This u

Link-State Acknowledgment PacketLink-State Acknowledgment packets are OSPF packet type 5.To make the folding of link-state advertisements reliable, fl

Link State Advertisement HeaderAll link state advertisements begin with a common 20-byte header.This header contains enough information to uniquely id

Figure 6- 107. Routers Links AdvertisementsIn router links advertisements, the Link State ID field is set to the router’s OSPF Router ID.The T-bit is

For each link, separate metrics may be specified for each Type of Service (TOS).The metric for TOS 0 must always be included, and was discussed above.

Figure 6- 109. Summary Link AdvertisementsFor stub area,Type 3 summary link advertisements can also be used to describe a default route on a per-area

Field DescriptionNetwork Mask The IP address mask for the advertised destination.E – bit The type of external metric. If the E - bit is set, the metri

To add an OSPF Area to the table, type a unique Area ID (see below) select the Type from the drop-down menu. For a Stub type, choose Enabled or Disabl

1-2 Switch DescriptionThe AT-9724TS has 24 1000T Gigabit ports that may be used in uplinking various network devices to the Switch, including PCs, hub

Figure 6- 115. OSPF Interface Settings – Edit windowConfigure each IP interface individually using the OSPF Interface Settings – Edit menu. Click the

OSPF Virtual Interface SettingsClick the OSPF Virtual Interface Settings link to view the current OSPF Virtual Interface Settings.There are not virtua

OSPF Area Aggregation SettingsArea Aggregation allows all of the routing information that may be contained within an area to be aggregated into a summ

To configure OSPF host routes, click the OSPF Host Route Settings link.To add a new OSPF Route, click the Add button. Configure the setting in themenu

Figure 6- 122. DHCP/BootP Global Settings windowThe following fields can be set:Parameter DescriptionBOOTP Relay Status This field can be toggled betw

Mapping Domain Names to AddressesName-to-address translation is performed by a program called a Name server.The client program is called a Name resolv

Figure 6- 125. DNS Relay Static Settings and Table windowTo add an entry into the DNS Relay Static Table, simply enter a Domain Name with its correspo

VRRP Interface SettingsThe following window will allow the user to view the parameters for the VRRP function on the Switch.To view this window, click

Parameter DescriptionInterface Name Enter the name of a previously configured IP interface to create a VRRP entry for.This IP interface must beassigne

Figure 6- 129.VRRP Interface Entry Display windowThis window displays the following information:Parameter DescriptionInterface NameAn IP interface nam

• SNMP support• Secure Sockets Layer (SSL) and Secure Shell (SSH) support• Port Mirroring support• MIB support for:RFC1213 MIB IIRFC1493 BridgeRFC1757

IP Multicast Routing ProtocolThe functions supporting IP multicasting are added under the IP Multicast Routing Protocol folder, from the Layer 3 IP Ne

DVMRP Interface ConfigurationThe Distance Vector Multicast Routing Protocol (DVMRP) is a hop-based method of building multicast delivery trees from mu

The following fields can be set:Parameter DescriptionInterface Name Displays the name of the IP interface for which DVMRP is to be configured.This mus

To view the PIM-DM Table, open the IP Multicasting folder under Configuration and click PIM-DM Interface Configuration.This windowallows the PIM-DM to

Chapter 7 - Security Management7-1 Security IP7-2 User Accounts7-3 Access Authentication Control (TACACS)7-4 Secure Sockets Layer (SSL)7-5 Secure Shel

Figure 7- 3. User Accounts Modify Table – AddAdd a new user by typing in a User Name,and New Passwordand retype the same password in the Confirm New P

7-3 Access Authentication ControlThe TACACS / XTACACS / TACACS+ / RADIUS commands let you secure access to the Switch using the TACACS / XTACACS / TAC

The following parameters can be set:Parameter DescriptionAuthentication PolicyUse the pull down menu to enable or disable the Authentication Policy on

Figure 7- 7.Authentication Server Group Settings windowThis screen displays the Authentication Server Groups on the Switch.The Switch has four built-i

Authentication Server HostsThis window will set user-defined Authentication Server Hosts for the TACACS / XTACACS / TACACS+ / RADIUS security protocol

LED IndicatorsThe Switch supports LED indicators for Power, Master, Console, RPS, SIO (stacking indicators), a seven-segment Stack ID LED and Port LED

Note: More than one authentication protocol can be run on the same physical server host but, remember that TACACS/XTACACS/TACACS+are separate entities

To define a Login Method List, set the following parameters and click Apply:Parameter DescriptionMethod List NameEnter a method list name defined by t

Figure 7- 16. Enable Method List – Edit windowFigure 7- 17. Enable Method List – Add windowTo define an Enable Login Method List, set the following pa

Figure 7- 18. Configure Local Enable Password windowTo set the Local Enable Password, set the following parameters and click Apply.Parameter Descripti

7-4 Secure Socket Layer (SSL)Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client

ConfigurationThis screen will allow the user to enable SSL on the Switch and implement any one or combination of listed ciphersuites on the Switch.A c

7-5 Secure Shell (SSH)SSH is an abbreviation of Secure Shell, which is a program allowing secure remote login and secure network services over an inse

Figure 7- 24. SSH Algorithms windowThe following algorithms may be set:Parameter DescriptionAuthentication Mode ConfigurationPasswordThis field may be

Data Integrity AlgorithmHMAC-SHA1 Use the pull-down to enable or disable the HMAC (Hash for Message Authentication Code) mechanismutilizing the Secure

Parameter DescriptionUser Name Enter a User Name of no more than 15 characters to identify the SSH user.This User Name must be apreviously configured

Chapter 2 - Installation2-1 Package Contents2-2 Before You Connect to the Network2-3 Installing the Switch Without the Rack2-4 Rack Installation2-5 Po

Chapter 8 - SNMP ManagerSNMP SettingsSimple Network Management Protocol (SNMP) is an OSI Layer 7 (Application Layer) designed specifically for managin

To display the detailed entry for a given user, click on the hyperlinked User Name.This will open the SNMP User Table Display page, as shown below.Fig

Parameter DescriptionUser Name Enter an alphanumeric string of up to 32 characters.This is used to identify the SNMP user.Group Name This name is used

Figure 8- 5. SNMP View Table Configuration windowThe SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the vie

Figure 8- 7. SNMP Group Table Configuration windowThe following parameters can be set:Parameter DescriptionGroup Name Type an alphanumeric string of u

Figure 8- 8. SNMP Community Table Configuration and Table windowThe following parameters can be set:Parameter DescriptionCommunity NameType an alphanu

Figure 8-10. SNMP Host Table Configuration windowThe following parameters can be set:Parameter DescriptionHost IP Address Type the IP address of the r

Chapter 9 - Monitoring9-1 Port UtilizationThe Port Utilization page displays the percentage of the total available bandwidth being used on the port.To

Figure 9- 2. CPU Utilization graphClick Apply to implement the configured settings.The window will automatically refresh with new updated statistics.T

Figure 9- 3. Rx Packets Analysis window (line graph for Bytes and Packets)To view the Received Packets Table, click the link View Table, which will sh

Figure 2- 1. Prepare Switch for installation on a desktop or shelf2-4 Installing the Switch in a RackThe Switch can be mounted in a standard 19"

Parameter DescriptionTime Interval Select the desired setting between 1s and 60s, where "s" stands for seconds.The default value is one seco

Figure 9- 6. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets)The following fields may be set or viewed:Parameter Descr

Figure 9- 7.Tx Packets Analysis window (line graph for Bytes and Packets)To view the Transmitted (TX) Table, click the link View Table, which will sho

The following fields may be set or viewed:Parameter DescriptionTime IntervalSelect the desired setting between 1s and 60s, where "s" stands

Figure 9- 10. Rx Error Analysis window (table)The following fields can be set:Parameter DescriptionTime IntervalSelect the desired setting between 1s

Figure 9- 11.Tx Error Analysis window (line graph)To view the Transmitted Error Packets Table, click the link View Table, which will show the followin

Parameter DescriptionTime Interval Select the desired setting between 1s and 60s, where "s" stands for seconds.The default value is one seco

Figure 9- 14. Rx Size Analysis window (table)The following fields can be set or viewed:Parameter DescriptionTime IntervalSelect the desired setting be

Figure 9- 15. Stacking Information windowThe Stacking Information window holds the following information:Parameter DescriptionBox ID Displays the Swit

Figure 9- 16. Device Status windowThe following fields may be viewed in this window:Parameter DescriptionIDThe Box ID of the Switch in the switch stac

16Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet Switch2-5 Mounting the Switch in a Standard 19" RackFigure 2- 2. Insta

The following fields can be viewed or set:Parameter DescriptionVLAN NameEnter a VLAN Name for the forwarding table to be browsed by.MAC Address Enter

Parameter DescriptionSequenceA counter incremented whenever an entry to the Switch's history log is made.The table displays the last entry(highes

The user may search the IGMP Snooping Forwarding Table by VLAN Name using the top left hand corner Search.The following fields can be viewed:Parameter

Figure 9- 23.Authenticator State – MAC Based 802.1XThis window displays the Authenticator State for individual ports on a selected device.To select un

Figure 9- 24.Authenticator Statistics windowThe user can specify a switch in a switch stack using that switch’s Unit ID by using the pull down menu in

Authenticator Session StatisticsThis table contains the session statistics objects for the Authenticator PAE associated with each port.An entry appear

Authenticator DiagnosticsThis table contains the diagnostic information regarding the operation of the Authenticator associated with each port.An entr

Authed Start Counts the number of times that the state machine transitions from AUTHENTICATED to CONNECTING, asa result of an EAPOL-Start message bein

BadAuthenticators The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributesreceived from this server.Pend

Note: To configure 802.1x features for the AT-9724TS, go to the Configuration folder and select Port Access Entity. Configurationand other information

Chapter 3 - Connecting the Switch• 3-1 Switch to End Node• 3-2 Switch to Hub or Switch• 3-3 Connecting to Network Backbone or Server• 3-4 Stacking and

Browse Routing TableThe Browse Routing Table window may be found in the Monitoring menu in the Layer 3 Feature folder.This screen shows the current IP

Figure 9- 32. Browse IP Multicast Forwarding TableBrowse IGMP Group TableThe Browse IGMP Group Table window may be found in the Monitoring menu in the

The following fields are displayed in the OSPF LSDB Table:Parameter DescriptionArea IDAllows the entry of an OSPF Area ID.This Area ID will then be us

Figure 9- 36 .OSPF Virtual Neighbor TableDVMRP MonitoringThis menu allows the DVMRP (Distance-Vector Multicast Routing Protocol) to be monitored for e

Browse DVMRP Routing Next Hop TableThe DVMRP Routing Next Hop Table contains information regarding the next-hop for forwarding multicast packets on ou

Chapter 10 - Switch Maintenance10-1 TFTP Services10-2 Multiple Image Services10-3 CF Services10-4 Ping Test10-5 Save Changes10-6 Reset10-7 Reboot Ser

Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server.Click Start to initiate the file

Figure 10- 5. Firmware Information windowThis window holds the following information:Parameter DescriptionBOXStates the stacking ID number of the swit

This window offers the following information:Parameter DescriptionImageSelect the firmware image to be configured using the pull-down menu.The Switch

10-5 Save ChangesThe AT-9724TS has two levels of memory; normal RAM and non-volatile or NV-RAM. Configuration changes are made effective clicking the

Figure 3- 3. Switch connected to switch using fibre-optic cabling3-3 Connecting To Network Backbone or ServerThe 4 combo SFP ports and the 24 1000T po

10-7 Reboot DeviceThe following menu is used to restart the Switch.Figure 10- 10. Restart System windowClicking the Yes click-box will instruct the Sw

Appendix A - Technical SpecificationsGeneralStandardIEEE 802.3u 100TX Fast EthernetIEEE 802.3ab 1000T Gigabit EthernetIEEE 802.1 P/Q VLANIEEE 802.3x F

PerformanceTransmission Method: Store-and-forwardRAM Buffer: 2 MB per deviceFiltering Address Table: 16 K MAC address per devicePacket Filtering/ F

Appendix B - Translated Electrical Safety and Emission InformationImportant: This appendix contains multiple-language translations for the safety stat

Die Entlüftungsöffnungen dürfen nicht versperrt sein und müssen zum Kühlen freien Zugang zur Raumluft haben.6 m BETRIEBSTEMPERATUR: Dieses Produkt wu

3 c ÉQUIPEMENT DE CLASSE 1 ÉLECTRIQUE CE MATÉRIEL DOIT ÊTRE MIS A LA TERRE. La prise de courant doitêtre branchée dans une prise femelle correctement

Sikkerhetsnormer: Dette produktet tilfredsstiller følgende sikkerhetsnormer.1 c FARE FOR LYNNEDSLAGFARE: ARBEID IKKE på utstyr eller KABLER i TORDENVÆ

4 m EQUIPO CONECTABLE, el tomacorriente se debe instalar cerca del equipo, en un lugar con acceso fácil".5 m ATENCION: Las aberturas para venti

Electrical Safety and Emission StatementStandards:This product meets the following standards.CE Marking Warning: This is a Class A product. In a domes

Figure 3- 8. Stacking in a Ring ArchitectureNote: The Do not connect the stacked Switch group to the network until you have properly configured all Sw

Chapter 4 - Introduction to Switch Management4-1 AT-9724TS Gigabit Layer 3 Switch Management Options4-2 Web-based Management Interface4-3 SNMP-Based M

9. After you have correctly set up the terminal, plug the power cable into the power receptacle on the back of the Switch.The boot sequence appears in

Figure 4- 2. Command PromptNote: The first user automatically gets Administrator level privileges. It is recommended to create at least one Admin-leve

The AT-9724TS supports SNMP versions 1, 2c, and 3.You can specify which version of SNMP you want to use to monitor and control the Switch.The threever

Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z.Where the x's represent the IP address to be assigned to the IP inter

Chapter 5 - Introduction to Web-based Switch Configuration5-1 Introduction5-2 Login to Web manager5-3 Web-Based User Interface5-4 Basic Setup5-5 Reboo

5-3 Web-based User InterfaceThe user interface provides access to various Switch configuration and management screens, allows you to view performance

Web PagesConfigurations – Contains screens concerning configurations for IP Address, Switch Information,Advanced Settings, Port Configuration, IGMP, S

Chapter 6 - Configuring The Switch6-1 Switch Information6-2 IP Address6-3 Box Information6-4 Advanced Settings6-5 Port Configuration6-6 Port Descripti

Table of ContentsElectrical Safety and Emission Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

6-2 IP AddressThe IP Address may initially be set using the console interface prior to connecting to it through the Ethernet. If the Switch IP address

VLAN Name This allows the entry of a VLAN Name from which a management station will be allowed to manage the Switchusing TCP/IP (in-band via web manag

Parameter DescriptionSerial Port Auto Logout TimeSelect the logout time used for the console interface.This automatically logs the user out after an i

Parameter DescriptionCurrent Box ID The current Box ID of the Master switch in the stack.New Box ID The new box ID of the Master switch in the stack.B

Parameter DescriptionState Toggle the State <Enabled> field to either enable or disable a given port or group of ports.Speed/Duplex Toggle the S

6-6 Port MirroringThe Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port.You can attach a mon

The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted ov

Figure 6- 11. Link Aggregation Group Configuration window – ModifyThe user-changeable parameters are as follows:Parameter DescriptionGroup ID Select a

The user may set the following parameters:Parameter DescriptionUnitChoose the switch in the switch stack to be configured by using the pull-down menu.

MAC Notification Port SettingsTo change MAC notification settings for a port or group of ports on the Switch, click Port Settings in the MAC Notificat

MSTI Port Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

The format of an IGMP packet is shown below:Figure 6- 15. IGMP Message FormatThe IGMP Type codes are shown below:Type Meaning0x11 Membership Query (if

IGMP SnoopingInternet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations

Robustness Value Adjust this variable according to expected packet loss. If packet loss on the VLAN is expected to be high, theRobustness Variable sho

Figure 6- 20. Static Router Ports Settings windowThe following parameters can be set:Parameter DescriptionVID (VLAN ID) This is the VLAN ID that, alon

802.1w Rapid Spanning TreeThe Switch implements three versions of the Spanning Tree Protocol, the Multiple Spanning Tree Protocol (MSTP) as defined by

Figure 6- 21. STP Bridge Global Settings – STP compatibleFigure 6- 22. STP Bridge Global Settings – RSTP (default)Figure 6- 23. STP Bridge Global Sett

Parameter DescriptionSTP Status Use the pull-down menu to enable or disable STP globally on the Switch.The default is Disabled.STP Version Use the pul

The window above contains the following information:Parameter DescriptionConfiguration NameA previously configured name set on the Switch to uniquely

The user may configure the following parameters to configure the CIST on the Switch.Parameter DescriptionMSTI IDThe MSTI ID of the CIST is 0 and canno

MSTI Port InformationThis window displays the current MSTI configuration settings and can be used to update the port configuration for an MSTI ID. If

Security Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

49Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet SwitchSTP Instance SettingsThe following window displays MSTIs currently se

Figure 6- 32. STP Instance Operational Status – Previously Configured MSTIThe following parameters may be viewed in the STP Instance Operational Statu

STP Port SettingsSTP can be set up on a port per port basis.To view the following window click Configuration > Spanning Tree > STP Port Settings

0 (auto) – Setting 0 for the external cost will automatically set the speed for forwarding packets to the specifiedport(s) in the list for optimal eff

Static Multicast ForwardingThe following figure and table describe how to set up Multicast Forwarding on the Switch. Open the Forwarding Filtering fol

6-14 VLANsUnderstanding IEEE 802.1p PriorityPriority tagging is a function defined by the IEEE 802.1p standard designed to provide a means of managing

The main characteristics of IEEE 802.1Q are as follows:• Assigns packets to VLANs by filtering.• Assumes the presence of a single global spanning tree

Figure 6- 38. IEEE 802.1Q TagThe EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical

Port VLAN IDPackets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.1Q compliant network device to another w

An example is presented below:VLAN Name VID Switch PortsSystem (default) 1 5, 6, 7, 8, 21, 22, 23, 24Engineering 2 9, 10, 11, 12Marketing 3 13, 14, 15

PrefacePurpose of This GuideThis guide is intended for network administrators who are responsible for installing and maintaining the AT-9724TS Gigabit

Protocol Type Header in Hexadecimal FormIP over Ethernet 0x0800IPX 802.3 0xFFFFIPX 802.2 0xE0E0IPX SNAP 0x8137IPX over Ethernet2 0x8137DecLAT 0x6000De

The 802.1Q Static VLANs menu lists all previously configured VLANs by VLAN ID and VLAN Name.To delete an existing 802.1Q VLAN, click thecorresponding

Parameter DescriptionUnit Choose the Switch ID number of the Switch in the switch stack to be modified.VID (VLAN ID) Allows the entry of a VLAN ID in

User Defined Pid – Specifies that the VLAN will only accept packets with this hexadecimal 802.1Q Ethernet typevalue in the packet header.The user may

The following fields can be set:Parameter DescriptionUnitChoose the Switch ID number of the Switch in the switch stack to be modified.From/To These tw

To configure Traffic Control, first select the Switch’s Unit ID number from the pull down menu and then a group of ports by using the Group pull downm

65Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet Switch6-17 Port Lock EntriesThe Port Lock Entry Delete window is used to re

6-18 QoSThe AT-9724TS supports 802.1p priority queuing Quality of Service.The following section discusses the implementation of QoS (Quality of Servic

A~H with their respective weight value: 8~1, the packets are sent in the following sequence:A1, B1, C1, D1, E1, F1, G1, H1,A2, B2, C2, D2, E2, F2, G2,

Click Apply to set the bandwidth control for the selected ports. Results of configured Bandwidth Settings will be displayed in the Port BandwidthTable

Document ConventionsThis guide uses several conventions that you should become familiar with before you begin to install the product:NoteA note provid

You may assign the following values to the QoS classes to set the scheduling.Parameter DescriptionMax. Packets Specifies the maximum number of packets

802.1p Default PriorityThe Switch allows the assignment of a default 802.1p priority to each port on the Switch. In the Configuration folder open the

Once you have assigned a priority to the port groups on the Switch, you can then assign this Class to each of the7 levels of 802.1p priorities. Click

Clicking the Apply button will enter the combination of transmitting port and allowed receiving ports into the Switch's Traffic Segmentation Tabl

Parameter DescriptionIndexSyslog server settings index (1-4).Server IP The IP address of the Syslog server.Severity This drop-down menu allows you to

6-20 SNTP SettingsCurrent Time SettingsTo configure the time settings for the Switch, open the Configuration folder, then the SNTP folder and click on

Time Zone and DSTThe following are screens used to configure time zones and Daylight Savings time settings for SNTP. Open the Configuration folder, th

6-21 Access Profile TableConfiguring the Access Profile TableAccess profiles allow you to establish criteria to determine whether or not the Switch wi

The following parameters can be set, for the Ethernet type:Parameter DescriptionProfile ID (1-8)Type in a unique identifier number for this profile se

Source IP Mask Enter an IP address mask for the source IP address.Destination IP Mask Enter an IP address mask for the destination IP address.DSCP Sel

Where to Find Related GuidesThe Allied Telesyn web site at www.alliedtelesyn.com under the support section contains the most recent documentation for

79Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet SwitchThis screen will aid the user in configuring the Switch to mask packe

Figure 6- 65.Access Rule Configuration window (IP)Configure the following Access Rule Configuration settings for IP:Parameter DescriptionProfile IDThi

Figure 6- 66.Access Rule Display window (IP)To configure the Access Rule for Ethernet, open the Access Profile Table and click Modify for an Ethernet

Parameter DescriptionProfile IDThis is the identifier number for this profile set.Mode Select Permit to specify that the packets that match the access

Figure 6- 70.Access Rule Table (Packet Content Mask)To remove a previously created rule, select it and click the 8 button.To add a new Access Rule, cl

Priority This parameter is specified if you want to re-write the 802.1p default priority previously set in the Switch,which is used to determine the C

Port-Based Network Access ControlFigure 6- 73. Example of Typical Port-Based ConfigurationOnce the connected device has successfully been authenticate

Configure AuthenticatorTo configure the 802.1X Authenticator Settings, click PAE Access Entity > Configure Authenticator:Figure 6- 75. 802.1X Authe

This screen allows you to set the following features:Parameter DescriptionUnitChoose the Switch ID number of the Switch in the switch stack to be modi

PAE System ControlExisting 802.1x port settings are displayed and can be configured using the windows below.Port Capability SettingsClick Port Access

Returning ProductsProducts for return or repair must first be assigned a Return Materials Authorization (RMA) number. RMA policy varies from country t

Initializing Ports for Port Based 802.1xExisting 802.1x port settings are displayed and can be configured using the window below.Note: Ensure Port Bas

Initializing Ports for MAC Based 802.1xTo initialize ports for the MAC side of 802.1x, the user must first enable 802.1x by MAC address in the Advance

This window displays the following information:Parameter DescriptionUnitChoose the Switch ID number of the Switch in the switch stack to be modified.P

RADIUS ServerThe RADIUS feature of the Switch allows you to facilitate centralized user administration as well as providing protection against a sniff

6-23 Layer 3 IP NetworkingLayer 3 Global Advanced SettingsThe L3 Global Advanced Settings window allows the user to enable and disable Layer 3 setting

VLAN Name VID Network Number IP AddressSystem (default) 1 10.32.0.0 10.32.0.1Engineer 2 10.64.0.0 10.64.0.1Marketing 3 10.96.0.0 10.96.0.1Finance 4 10

Figure 6- 87. IP Interface Configuration – Edit windowChoose a name for the interface to be added and enter it in the Interface Name field (if you are

The following fields can be set:Parameter DescriptionKey IDA number from 1 to 255 used to identify the MD5 Key.Key A alphanumeric string of between 1

97Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet SwitchThe following parameters may be set or viewed:Parameter DescriptionDe

Figure 6- 91. Static/Default Route Settings – Add windowThe following fields can be set:Parameter DescriptionIP AddressAllows the entry of an IP addre