Allied Telesis AT-S63 manuals

User Manual

Contents
3
Figures
13
Tables
15
Preface
17
- How This Guide is Organized
  18
- Product Documentation
  20
- Where to Go First
  21
- Starting a Management Session
  22
- Document Conventions
  23
- Where to Find Web-based Guides
  24
- Contacting Allied Telesis
  25
Section I
27
Basic Operations
27
Chapter 1
29
Overview
29
- Layer 2+ and Basic Layer 3 Switches
  30
- AT-S63 Management Software
  35
- Management Interfaces and Features
  36
- Management Access Methods
  41
- Manager Access Levels
  43
- Installation and Management Configurations
  44
  - Stand-alone Switch
    44
  - Enhanced Stacking
    44
  - Stacking
    44
- IP Configuration
  46
- Redundant Twisted Pair Ports
  47
- History of New Features
  49
  - Version 3.0.0
    49
  - Version 2.1.0
    50
  - Version 2.0.0
    50
  - Version 1.3.0
    51
  - Version 1.2.0
    52
Chapter 2
55
Enhanced Stacking
55
- Supported Platforms
  56
- Overview
  57
- Master and Slave Switches
  58
- Common VLAN
  59
- Master Switch and the Local Interface
  60
- Slave Switches
  61
- Enhanced Stacking Compatibility
  62
- Enhanced Stacking Guidelines
  63
- General Steps
  64
Chapter 3
65
SNMPv1 and SNMPv2c
65
- Supported Platforms
  66
- Overview
  67
- Community String Attributes
  68
  - Community String Name
    68
  - Access Mode
    68
  - Operating Status
    68
  - Open or Closed Access Status
    68
  - Trap Receivers
    68
- Default SNMP Community Strings
  70
Chapter 4
71
MAC Address Table
71
- Overview
  72
Chapter 5
75
Static Port Trunks
75
- Supported Platforms
  76
- Overview
  77
- Load Distribution Methods
  78
- Guidelines
  80
Chapter 6
81
LACP Port Trunks
81
- Supported Platforms
  82
- Overview
  83
- LACP System Priority
  87
- Adminkey Parameter
  88
- LACP Port Priority Value
  88
- Load Distribution Methods
  89
- Guidelines
  90
Chapter 7
93
Port Mirror
93
- Supported Platforms
  94
- Overview
  95
- Guidelines
  95
Section II
97
Advanced Operations
97
Chapter 8
99
File System
99
- Overview
  100
- Boot Configuration Files
  101
- File Naming Conventions
  102
- Using Wildcards to Specify Groups of Files
  103
Chapter 9
105
Event Logs and the Syslog Client
105
- Supported Platforms
  106
- Overview
  107
- Event Messages
  107
- Syslog Client
  108
Chapter 10
109
Classifiers
109
- Supported Platforms
  110
- Overview
  111
- Classifier Criteria
  113
- Guidelines
  118
Chapter 11
119
Access Control Lists
119
- Supported Platforms
  120
- Overview
  121
- Parts of an ACL
  123
- Guidelines
  124
- Examples
  125
Chapter 12
131
Class of Service
131
- Supported Platforms
  132
- Overview
  133
- Scheduling
  136
  - Strict Priority Scheduling
    136
  - Weighted Round Robin Priority Scheduling
    136
Chapter 13
139
Quality of Service
139
- Supported Platforms
  140
- Overview
  141
- Classifiers
  143
- Flow Groups
  144
- Traffic Classes
  145
- Policies
  146
- QoS Policy Guidelines
  147
- Packet Processing
  148
- Bandwidth Allocation
  148
- Packet Prioritization
  148
- Replacing Priorities
  150
- VLAN Tag User Priorities
  150
- DSCP Values
  150
- DiffServ Domains
  151
- Examples
  153
  - Voice Applications
    153
  - Video Applications
    155
  - Critical Database
    157
  - Policy Component Hierarchy
    158
Chapter 14
161
Denial of Service Defenses
161
- Supported Platforms
  162
- Overview
  163
- SYN Flood Attack
  164
- Smurf Attack
  165
- Land Attack
  166
- Teardrop Attack
  168
- Ping of Death Attack
  169
- IP Options Attack
  170
- Mirroring Traffic
  171
- Denial of Service Defense Guidelines
  172
Section III
173
Snooping Protocols
173
Chapter 15
175
IGMP Snooping
175
- Supported Platforms
  176
- Overview
  177
Chapter 16
179
MLD Snooping
179
- Supported Platforms
  180
- Overview
  181
Chapter 17
183
RRP Snooping
183
- Supported Platforms
  184
- Overview
  185
- Guidelines
  186
Chapter 18
187
Ethernet Protection Switching Ring Snooping
187
- Supported Platforms
  188
- Overview
  189
- Restrictions
  191
- Guidelines
  193
Section IV
195
SNMPv3
195
Chapter 19
197
SNMPv3
197
- Supported Platforms
  198
- Overview
  199
- SNMPv3 Authentication Protocols
  200
- SNMPv3 Privacy Protocol
  201
- SNMPv3 MIB Views
  202
- SNMPv3 Storage Types
  204
- SNMPv3 Message Notification
  205
- SNMPv3 Tables
  206
  - SNMPv3 User Table
    208
  - SNMPv3 View Table
    208
  - SNMPv3 Access Table
    208
  - SNMPv3 SecurityToGroup Table
    208
  - SNMPv3 Notify Table
    209
  - SNMPv3 Target Address Table
    209
  - SNMPv3 Target Parameters Table
    209
  - SNMPv3 Community Table
    209
- SNMPv3 Configuration Example
  210
Section V
211
Spanning Tree Protocols
211
Chapter 20
213
Spanning Tree and Rapid Spanning Tree Protocols
213
- Supported Platforms
  214
- Overview
  215
- Bridge Priority and the Root Bridge
  216
  - Path Costs and Port Costs
    217
  - Port Priority
    218
- Forwarding Delay and Topology Changes
  220
  - Hello Time and Bridge Protocol Data Units (BPDU)
    220
  - Point-to-Point and Edge Ports
    221
- Mixed STP and RSTP Networks
  223
- Spanning Tree and VLANs
  224
Chapter 21
225
Multiple Spanning Tree Protocol
225
- Supported Platforms
  226
- Overview
  227
- Multiple Spanning Tree Instance (MSTI)
  228
- MSTI Guidelines
  232
- VLAN and MSTI Associations
  233
- Ports in Multiple MSTIs
  234
- Multiple Spanning Tree Regions
  235
  - Region Guidelines
    237
  - Common and Internal Spanning Tree (CIST)
    238
  - MSTP with STP and RSTP
    238
- Summary of Guidelines
  239
- Associating VLANs to MSTIs
  241
- Connecting VLANs Across Different Regions
  243
Section VI
245
Virtual LANs
245
Chapter 22
247
Port-based and Tagged VLANs
247
- Supported Platforms
  248
- Overview
  249
- Port-based VLAN Overview
  251
  - VLAN Name
    251
  - VLAN Identifier
    251
  - Untagged Ports
    252
  - Port VLAN Identifier
    252
  - Guidelines to Creating a Port- based VLAN
    253
  - Drawbacks of Port-based VLANs
    253
  - Port-based Example 1
    254
  - Port-based Example 2
    255
- Tagged VLAN Overview
  257
  - Tagged and Untagged Ports
    258
  - Port VLAN Identifier
    258
  - Guidelines to Creating a Tagged VLAN
    258
  - Tagged VLAN Example
    259
Chapter 23
261
GARP VLAN Registration Protocol
261
- Supported Platforms
  262
- Overview
  263
- Guidelines
  266
- GVRP and Network Security
  267
- GVRP-inactive Intermediate Switches
  268
- Generic Attribute Registration Protocol (GARP) Overview
  269
Chapter 24
273
Multiple VLAN Modes
273
- Supported Platforms
  274
- Overview
  275
- 802.1Q- Compliant Multiple VLAN Mode
  276
- Non-802.1Q Compliant Multiple VLAN Mode
  278
Chapter 25
279
Protected Ports VLANs
279
- Supported Platforms
  280
- Overview
  281
- Guidelines
  283
Chapter 26
285
MAC Address-based VLANs
285
- Supported Platforms
  286
- Overview
  287
- Egress Ports
  288
- VLANs That Span Switches
  291
- VLAN Hierarchy
  293
- Steps to Creating a MAC Address-based VLAN
  294
- Guidelines
  295
Section VII
297
Routing
297
Chapter 27
299
Internet Protocol Version 4 Packet Routing
299
- Supported Platforms
  300
- Overview
  301
- Routing Interfaces
  303
  - VLAN ID (VID)
    304
  - Interface Numbers
    304
  - IP Address and Subnet Mask
    304
- Interface Names
  306
- Static Routes
  307
- Routing Information Protocol (RIP)
  309
- Default Routes
  311
- Equal-cost Multi-path (ECMP) Routing
  312
- Routing Table
  314
- Address Resolution Protocol (ARP) Table
  315
- Internet Control Message Protocol (ICMP)
  316
- Routing Interfaces and Management Features
  318
  - Network Servers
    318
  - Enhanced Stacking
    319
  - Remote Telnet, SSH, and Web Browser Management Sessions
    319
  - Pinging a Remote Device
    320
  - DHCP or BOOTP Server
    320
- Local Interface
  321
- AT-9408LC/SP AT-9424T/GB, and AT-9424T/SP Switches
  322
  - Local Interface
    322
  - ARP Table
    322
  - Default Gateway
    323
- Routing Command Example
  324
  - Creating the VLANs
    325
  - Creating the Routing Interfaces
    325
  - Adding a Static Route and Default Route
    326
  - Adding RIP
    327
  - Selecting the Local Interface
    327
- Non-routing Command Example
  328
- Upgrading from AT-S63 Version 1.3.0 or Earlier
  330
Chapter 28
331
BOOTP Relay Agent
331
- Supported Platforms
  332
- Overview
  333
- Guidelines
  335
Chapter 29
337
Virtual Router Redundancy Protocol
337
- Supported Platforms
  338
- Overview
  339
- Master Switch
  340
- Backup Switches
  341
- Interface Monitoring
  342
- Port Monitoring
  343
- VRRP on the Switch
  344
Section VIII
347
Port Security
347
Chapter 30
349
MAC Address-based Port Security
349
- Supported Platforms
  350
- Overview
  351
  - Automatic
    351
  - Limited
    351
  - Secured
    352
  - Locked
    352
- Invalid Frames and Intrusion Actions
  353
- Guidelines
  354
Chapter 31
355
802.1x Port-based Network Access Control
355
- Supported Platforms
  356
- Overview
  357
- Authentication Process
  359
- Port Roles
  360
  - None Role
    360
  - Authenticator Role
    360
  - Supplicant Role
    362
- Authenticator Ports with Single and Multiple Supplicants
  363
  - Single Operating Mode
    363
  - Multiple Operating Mode
    367
- Supplicant and VLAN Associations
  370
- Guest VLAN
  372
- RADIUS Accounting
  373
- General Steps
  374
- Guidelines
  375
Section IX
379
Management Security
379
Chapter 32
381
Web Server
381
- Supported Platforms
  382
- Overview
  383
  - Supported Protocols
    383
- Configuring the Web Server for HTTP
  384
- Configuring the Web Server for HTTPS
  385
  - General Steps for a Self-signed Certificate
    385
  - General Steps for a Public or Private CA Certificate
    385
Chapter 33
387
Encryption Keys
387
- Supported Platforms
  388
- Overview
  389
- Encryption Key Length
  390
- Encryption Key Guidelines
  391
- Technical Overview
  392
  - Data Encryption
    392
  - Data Authentication
    394
  - Key Exchange Algorithms
    395
Chapter 34
397
PKI Certificates and SSL
397
- Supported Platforms
  398
- Overview
  399
- Types of Certificates
  399
- Distinguished Names
  401
- SSL and Enhanced Stacking
  403
- Guidelines
  404
- Technical Overview
  405
  - SSL Encryption
    405
  - User Verification
    406
  - Authentication
    406
  - Public Key Infrastructure
    407
  - Public Keys
    407
  - Message Encryption
    407
  - Digital Signatures
    407
  - Certificates
    408
  - Elements of a Public Key Infrastructure
    409
  - Certificate Validation
    410
  - Certificate Revocation Lists (CRLs)
    410
  - PKI Implementation
    411
Chapter 35
413
Secure Shell (SSH)
413
- Supported Platforms
  414
- Overview
  415
- Support for SSH
  416
- SSH Server
  417
- SSH Clients
  418
- SSH and Enhanced Stacking
  419
- SSH Configuration Guidelines
  421
- General Steps to Configuring SSH
  422
Chapter 36
423
TACACS+ and RADIUS Protocols
423
- Supported Platforms
  424
- Overview
  425
- Guidelines
  427
Chapter 37
431
Management Access Control List
431
- Supported Platforms
  432
- Overview
  433
- Parts of a Management ACE
  434
  - IP Address
    434
  - Mask
    434
  - Application
    434
- Guidelines
  435
- Examples
  436
Appendix A
439
AT-S63 Management Software Default Settings
439
- Address Resolution Protocol Cache
  441
- Boot Configuration File
  442
- BOOTP Relay Agent
  443
- Class of Service
  444
- Denial of Service Defenses
  445
- 802.1x Port-Based Network Access Control
  446
- Enhanced Stacking
  448
- Ethernet Protection Switching Ring (EPSR) Snooping
  449
- Event Logs
  450
- GVRP
  451
- IGMP Snooping
  452
- Internet Protocol Version 4 Packet Routing
  453
- MAC Address-based Port Security
  454
- MAC Address Table
  455
- Management Access Control List
  456
- Manager and Operator Account
  457
- Multicast Listener Discovery Snooping
  458
- Public Key Infrastructure
  459
- Port Settings
  460
- RJ-45 Serial Terminal Port
  461
- Router Redundancy Protocol Snooping
  462
- Server-based Authentication (RADIUS and TACACS+)
  463
  - Server-based Authentication
    463
  - RADIUS Client
    463
  - TACACS+ Client
    463
- Simple Network Management Protocol
  464
- Simple Network Time Protocol
  465
- Spanning Tree Protocols (STP, RSTP, and MSTP)
  466
  - Spanning Tree Switch Settings
    466
  - Spanning Tree Protocol
    466
  - Rapid Spanning Tree Protocol
    466
  - Multiple Spanning Tree Protocol
    467
- Secure Shell Server
  468
- Secure Sockets Layer
  469
- System Name, Administrator, and Comments Settings
  470
- Telnet Server
  471
- Virtual Router Redundancy Protocol
  472
- VLANs
  473
- Web Server
  474
Appendix B
475
SNMPv3 Configuration Examples
475
- SNMPv3 Configuration Examples
  476
  - SNMPv3 Manager Configuration
    476
  - SNMPv3 Operator Configuration
    477
  - SNMPv3 Worksheet
    478
Appendix C
481
Features and Standards
481
- 10/100/1000Base-T Twisted Pair Ports
  482
- Denial of Service Defenses
  482
- Ethernet Protection Switching Ring Snooping
  482
- Fiber Optic Ports (AT-9408LC/SP Switch)
  483
- File System
  483
- DHCP and BOOTP Clients
  483
- Internet Protocol Multicasting
  483
- Internet Protocol Version 4 Routing
  483
- MAC Address Table
  484
- Management Access and Security
  484
- Management Access Methods
  485
- Management Interfaces
  485
- Management MIBs
  485
- Port Security
  486
- Port Trunking and Mirroring
  486
- Spanning Tree Protocols
  486
- System Monitoring
  486
- Traffic Control
  487
- Virtual LANs
  487
- Virtual Router Redundancy Protocol
  488
Appendix D
489
MIB Objects
489
- Access Control Lists
  490
- Class of Service
  491
- Date, Time, and SNTP Client
  492
- Denial of Service Defenses
  493
- Enhanced Stacking
  494
- GVRP
  495
- MAC Address Table
  497
- Management Access Control List
  498
- Miscellaneous
  499
- Port Mirroring
  500
- Quality of Service
  501
- Port Configuration and Status
  503
- Spanning Tree
  504
- Static Port Trunk
  505
- VLANs
  506
Index
509
- Numerics
  509
- A
  509
- B
  509
- C
  509
- D
  510
- E
  510
- F
  510
- G
  510
- H
  510
- I
  510
- K
  511
- L
  511
- M
  511
- N
  511
- O
  512
- P
  512
- Q
  512
- R
  512
- S
  512
- T
  513
- U
  514
- V
  514
- W
  514
- X
  514

Size:

2.66 MB
Pages:

514
Language:

English

Open manual

Allied Telesis AT-S63 User Manuals

User Manual

Table of Contents