Allied Telesis 2.6.1 - Manuals

Chapter 1 Introduction Introducing the AT-8800 Series Switch Congratulations on purchasing an AT-8800 Series Intelligent Workgroup Switch. The AT-8800 Series Switch has been developed to meet the exceptionally high performance demands of low to mid-range applications and deliver low-latency high-ban...

8 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A This user guide is organised into the following chapters: ■ Chapter 1, Introduction gives an overview of the switch features and of the documentation supplied with your switch. ■ Chapter 2, Getting Started with the Command ...

Introduction 9 Software Release 2.6.1C613-02039-00 REV A ■ AT-8800 Series Switch Documentation and Tools CD-ROM The AT-8800 Series Switch Documentation Set in Adobe Acrobat PDF format is bundled with every switch—the complete reference to installing, configuring and managing the switch, including de...

10 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Management Features The following features enhance management of the switch: ■ A sophisticated and configurable event logging facility for monitoring and alarm notification to single or multiple management centres. ■ Trigg...

Introduction 11 Software Release 2.6.1C613-02039-00 REV A ■ Sophisticated packet filtering. ■ Bridging. ■ Van Jacobson’s header compression, STAC LZS and Predictor compression, and DES encryption. ■ Terminal serving using Telnet, with local host nicknames. ■ Access to network printers via LPD or TCP...

12 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Most software features that require a special feature licence are bundled into one of the following special feature licence packs: ■ Full Layer 3 Feature Licence ■ Advanced Layer 3 Feature Licence ■ Security Pack Feature L...

Chapter 2 Getting Started with the Command Line Interface (CLI) This Chapter This chapter describes how to access the switch’s CLI, and provides basic information about configuring the switch, including how to: ■ Physically connect a terminal or PC to the switch (see “ Connecting a Terminal or PC ” ...

14 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Connecting a Terminal or PC The first thing to do after physically installing the switch is to start a terminal or terminal emulation session to access the switch. Then you can use the command line interface (CLI) to confi...

Getting Started with the Command Line Interface (CLI) 15 Software Release 2.6.1C613-02039-00 REV A If a modem is connected, configure the switch to make and/or accept calls via the modem. To set the CDCONTROL parameter to “CONNECT” and the FLOW parameter to “HARDWARE”, enter the command: SET ASYN CD...

16 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A If IP addresses on your LAN are assigned dynamically by DHCP, you can set the switch to request an IP address from the DHCP server, using the commands: ADD IP INTERFACE=vlan1 IPADDRESS=DHCP ENABLE IP REMOTEASSIGN You do no...

Getting Started with the Command Line Interface (CLI) 17 Software Release 2.6.1C613-02039-00 REV A To add a static route, enter the command: ADD IP ROUTE= ipadd INTERFACE= interface NEXTHOP= ipadd [CIRCUIT= miox-circuit ] [DLCI= dlci ] [MASK= ipadd ][METRIC=1..16] [METRIC1=1..16] [METRIC2=1..65535][...

18 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A ■ Do not use your birth date, street number or telephone number. ■ Do not write down your password anywhere. Make sure you remember the new password created as you cannot retrieve a lost password. Recovery of access to the...

Getting Started with the Command Line Interface (CLI) 19 Software Release 2.6.1C613-02039-00 REV A Aliases The command line interface supports aliases. An alias is a short name for an often-used longer character sequence. When the user presses [Enter] to execute the command line, the command process...

20 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Enabling Special Feature Licences You must enable the special feature licence you have purchased before you can use the licenced features. You will need the password provided by your authorised distributor or reseller. The...

Getting Started with the Graphical User Interface (GUI) 21 Software Release 2.6.1C613-02039-00 REV A Chapter 3 Getting Started with the Graphical User Interface (GUI) This Chapter This chapter describes how to access the switch’s HTTP-based Graphical User Interface (GUI), and provides basic informat...

22 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A What is the GUI? The GUI (Graphical User Interface) is a web-based device management tool, designed to make it easier to configure and monitor the switch. The GUI provides an alternative to the CLI (Command Line Interface)...

Getting Started with the Graphical User Interface (GUI) 23 Software Release 2.6.1C613-02039-00 REV A To enable JavaScript in Netscape 6.2. x : 1. From the Edit menu, select Preference 2. Select the Advanced menu option. 3. Ensure that the “Enable JavaScript for Navigator” checkbox is checked. The mi...

24 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Establishing a Connection to the Switch Before you start, consider how the switch fits into your network. If you are installing a new switch, consider whether you want to configure it before deploying it into the LAN, or w...

Getting Started with the Graphical User Interface (GUI) 25 Software Release 2.6.1C613-02039-00 REV A Option 1: Configuring the Switch before Installation Use this procedure if: ■ You want to configure the switch before installing it in your LAN. ■ You will be installing the switch at a remote office...

26 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A 9. At the login prompt, enter the user name and password The default username is manager: User Name: manager Password: friend The System Status page is displayed (Figure 6 on page 31). Select options from the sidebar menu ...

28 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A 8. On the PC, bypass the HTTP proxy server, if necessary See “HTTP Proxy Servers” on page 23 for more information. 9. Point your web browser at the LAN interface’s IP address For normal access, point your web browser to ht...

Getting Started with the Graphical User Interface (GUI) 29 Software Release 2.6.1C613-02039-00 REV A 4. Browse to the switch For normal access, point your web browser to http:// ip-address where ip-address is the interface’s IP address. To access the switch securely if SSL (Secure Sockets Layer) has...

Getting Started with the Graphical User Interface (GUI) 31 Software Release 2.6.1C613-02039-00 REV A 10. Configure an IP interface to run SSL over To configure an IP interface that SSL will be run over, first enable IP using the command: ENABLE IP To make VLAN1 the IP interface, and 172.30.1.105 the...

32 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Using the GUI: Navigation and Features The GUI consists of a large number of pages , which you navigate between using the menu on the left of the browser window. This section describes how to use the GUI, and gives an over...

34 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Figure 9: An example of a popup “modify” page Editable Fields GUI pages allow you to enter values or select options through a range of field types. These include: • text fields, to enter character strings or numbers, espec...

Getting Started with the Graphical User Interface (GUI) 35 Software Release 2.6.1C613-02039-00 REV A Apply Button An Apply button applies the configuration settings on the page or the section of the page. The new settings will take effect immediately, but are not automatically saved. To save the set...

36 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A The Diagnostics Menu The GUI’s diagnostics pages enable you to troubleshoot network problems and observe traffic flow, including: • displaying the number of good and bad packets received and transmitted over each switch po...

Getting Started with the Graphical User Interface (GUI) 37 Software Release 2.6.1C613-02039-00 REV A Saving Configuration Entered with the GUI Configuration changes applied using the GUI can be saved to a configuration script by clicking the Save button at the top of the sidebar menu. A pop-up Save ...

38 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Upgrading the GUI You can download the latest GUI resource file from the support site at http://www.alliedtelesyn.co.nz . Before you start, ensure that the switch is running the most recent release and patch files. The GUI...

Getting Started with the Graphical User Interface (GUI) 39 Software Release 2.6.1C613-02039-00 REV A When the switch has loaded the file into its RAM, it displays the message “ File transfer successfully completed ”. It then writes the file to FLASH memory, which takes approximately 30 seconds after...

40 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Deleting Temporary Files Browsers store local copies of web pages as temporary files. If you upgrade to a new GUI resource file, or if you encounter problems in browsing to the GUI, you may need to delete these files (clea...

Getting Started with the Graphical User Interface (GUI) 41 Software Release 2.6.1C613-02039-00 REV A Problem The GUI is behaving inconsistently, or you cannot access some pages. Solution ■ Delete your browser ’s temporary files (see “Deleting Temporary Files” on page 40) and try again. ■ Check that ...

42 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A IP Addresses and DHCP Problem The switch is enabled as a DHCP server, but cannot assign an IP address to a host. Solution ■ Reboot the host machine. ■ Check the host’s TCP/IP settings, to make sure that the host is set to ...

Getting Started with the Graphical User Interface (GUI) 43 Software Release 2.6.1C613-02039-00 REV A Loading Software Problem You have attempted to load a new release file onto the switch, but the load has failed and you cannot access the switch through the GUI. Solution 1. Access the switch’s CLI (...

Chapter 4 Operating the switch This Chapter This chapter introduces basic operations on the switch, including: ■ “ User Accounts and Privileges ” on page 45 ■ “ Normal Mode and Security Mode ” on page 47 ■ “ Remote Management ” on page 49 ■ “ Storing Files in FLASH Memory ” on page 49 ■ “ Using Scri...

Operating the switch 47 Software Release 2.6.1C613-02039-00 REV A See the Operations chapter in the AT-8800 Series Switch Software Reference for: ■ More information about managing and using accounts with user, manager and security officer privileges ■ A full list of commands that require security of...

Operating the switch 49 Software Release 2.6.1C613-02039-00 REV A Remote Management You can manage remote switches as easily as you manage the local switch a terminal is connected to. From a terminal connected to any port (with either USER or MANAGER privilege), enter the command: TELNET ipadd to Te...

50 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A extensions of 3 characters. For example, the file extralongfilenam.cfg may be saved as extral~1.cfg in the FLASH File System. Therefore, files can be accessed via two file names, either of which can be used for file manage...

Operating the switch 51 Software Release 2.6.1C613-02039-00 REV A In addition to the boot configuration script that the switch automatically runs when it restarts, you can run a configuration script manually at any time, by entering the command: ACTIVATE SCRIPT= filename You can also set a trigger t...

52 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Loading and Uploading Files When you want to upgrade your switch to a new software patch or release, or use a new configuration file, load files onto the switch using the router ’s LOADER module. You can also use the LOADE...

Operating the switch 53 Software Release 2.6.1C613-02039-00 REV A You may see files on your switch with file name extensions not listed in Table 6 on page 52. If you require more information about file types and file name extensions, contact your authorised distributor or reseller. Do not change the...

54 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Setting LOADER Defaults You are likely to repeat the process of downloading files onto the switch using a similar method each time. You can set defaults for some or all of the LOADER parameters. You can then use or overrid...

Operating the switch 55 Software Release 2.6.1C613-02039-00 REV A Uploading Files From the Switch The LOADER can upload files from the switch to a network host, using TFTP or ZMODEM. Upload files using one of the commands: UPLOAD [METHOD=TFTP] [FILE= filename ] [SERVER={ hostname | ipadd }] UPLOAD [...

56 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Upgrading Switch Software When you first start the switch, it automatically loads the software release from FLASH memory into RAM, where the CPU uses it to run all the router ’s software features. The switch may also load ...

Operating the switch 57 Software Release 2.6.1C613-02039-00 REV A when the switch boots correctly, to then set up the preferred install with the new release or patch. To change the install information in the switch, enter the command: SET INSTALL={TEMPORARY|PREFERRED|DEFAULT} [RELEASE={ release-name...

Operating the switch 59 Software Release 2.6.1C613-02039-00 REV A Example: Upgrade to a new patch file Use this procedure to upgrade the software release currently running on the switch with a new patch. This example assumes that the current release, Software Release 2.6.1, is set as the preferred r...

60 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Using the Built-in Editor The AT-8800 Series Switch has a built-in full-screen text editor for editing script files stored on the switch file subsystem. Using the text editor you can run script files manually, or set scrip...

Operating the switch 61 Software Release 2.6.1C613-02039-00 REV A SNMP communities are the main configuration item in the router ’s SNMP agent, and are defined in terms of a list of IP addresses which define the SNMP application entities (trap hosts and management stations) in the community. To crea...

Chapter 5 Layer 2 Switching This section describes the Layer 2 switching features on the AT-8800 Series Switch, and how to configure them. Switch Ports Each Ethernet switch port is uniquely identified by a port number. The switch supports a number of features at the physical level that allow it to b...

66 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Autonegotiation of Port Speed and Duplex Mode Each of the switch ports can operate at either 10 Mbps or 100 Mbps, in either full duplex or half duplex mode. In full duplex mode a port can transmit and receive data simultan...

Layer 2 Switching 67 Software Release 2.6.1C613-02039-00 REV A The SHOW SWITCH PORT command displays the port speed and duplex mode settings. Port Trunking Port trunking, also known as port bundling or link aggregation, allows a number of ports to be configured to join together to make a single logi...

Layer 2 Switching 69 Software Release 2.6.1C613-02039-00 REV A Packet Storm Protection The packet storm protection feature allows the user to set limits on the reception rate of broadcast, multicast and destination lookup failure packets. The software allows separate limits to be set for each port, ...

70 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A the BCLIMIT parameter description for important information about packet rate limiting. The default value for this parameter is NONE. If packet storm protection limits are set on the switch, the PORT parameter must specify...

Layer 2 Switching 71 Software Release 2.6.1C613-02039-00 REV A To send packets that match particular criteria to the mirror port, first create a classifier or classifiers using the command: CREATE CLASSIFIER Then create a hardware filter with the ACTION parameter set to SENDMIRROR, using the command...

Layer 2 Switching 73 Software Release 2.6.1C613-02039-00 REV A Devices that are members of the same VLAN only exchange data with each other through the switch’s switching capabilities. To exchange data between devices in separate VLANs, the switch’s routing capabilities are used. The switch passes V...

Layer 2 Switching 75 Software Release 2.6.1C613-02039-00 REV A Every frame admitted by the switch has a VID associated with it. If a frame arrives on a tagged port, the associated VID is determined from the VLAN tag the frame had when it arrived. If a frame arrives on an untagged port, it is associa...

76 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Figure 14: VLANs with tagged ports. VLAN Membership of Untagged Packets A VLAN that does not send any VLAN-tagged frames is a logical grouping of ports. All untagged traffic arriving at those ports belongs to that VLAN. VL...

Layer 2 Switching 77 Software Release 2.6.1C613-02039-00 REV A If the network includes VLANs that do not need to share network resources or span several switches, VLAN membership can usefully be based on untagged ports. Otherwise, VLAN membership should be determined by tagging (see “ VLAN Tagging ”...

Layer 2 Switching 79 Software Release 2.6.1C613-02039-00 REV A Summary of VLAN tagging rules When designing a VLAN and adding ports to VLANs, the following rules apply. 1. Each port, except for the mirror port, must belong to at least one static VLAN. By default, a port is an untagged member of the ...

80 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Generic VLAN Registration Protocol (GVRP) The GARP application GVRP allows switches in a network to dynamically share VLAN membership information, to reduce the need for statically configuring all VLAN membership changes o...

Layer 2 Switching 81 Software Release 2.6.1C613-02039-00 REV A The default settings for the Ingress Rules are to Admit All Frames, and for Ingress Filtering to be OFF. This means that if no VLAN configuration has been done, all incoming frames pass on to the Learning Process, regardless of whether o...

82 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A If the frame’s source address is not already in the Forwarding Database for the VLAN, the address is added and an ageing timer for that entry is started. If the frame’s source address is already in the Forwarding Database,...

Layer 2 Switching 83 Software Release 2.6.1C613-02039-00 REV A the switch floods the frame on all ports in the VLAN except the port on which the frame was received. If the destination address is found, the switch discards the frame if the port is not in the STP ‘Forwarding’ state, if the destination...

Layer 2 Switching 85 Software Release 2.6.1C613-02039-00 REV A The Egress Rules Once the Forwarding Process has determined which ports and transmission queues to forward a frame from, the Egress Rules for each port determine whether or not the outgoing frame is VLAN-tagged with its numerical VLAN Id...

86 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A To display the mapping of user priority to QOS egress queues, use the command: SHOW SWITCH QOS Figure 17: Example output from the SHOW SWITCH QOS command Spanning Tree Protocol (STP) The Spanning Tree Protocol (STP) makes ...

Layer 2 Switching 87 Software Release 2.6.1C613-02039-00 REV A A spanning tree running in standard mode can take up to one minute to rebuild after a topology or configuration change. The Rapid Spanning Tree algorithm provides for a more rapid recovery of connectivity following the failure of a bridg...

88 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A To specify whether the STP will operate in STANDARD mode or RAPID mode, use the command: SET STP={ stp-name |ALL} [MODE={STANDARD|RAPID}] [ other parameters ] The default is STANDARD. If the mode is changed while the algor...

Layer 2 Switching 97 Software Release 2.6.1C613-02039-00 REV A If necessary, all the STP configuration that users have created on the switch can be removed, so that all STPs except the default STP are destroyed, and all other defaults are restored, using the command: PURGE STP The PURGE STP command ...

100 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Triggers The Trigger Facility can be used to automatically run specified command scripts when particular triggers are activated. When a trigger is activated by an event, global parameters and parameters specific to the ev...

Chapter 6 Layer 3 The AT-8800 Series Switch routes IP and IP multicasting traffic at wire speed between VLANs, and supports a number of other Layer 3 protocols. Once a VLAN has been created (see “ Virtual Local Area Networks (VLANs) ” on page 72), the VLAN name can be used wherever a logical interfa...

102 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Internet Protocol (IP) The switch performs IP routing at wire speed between VLANs that have been configured as IP interfaces. For example, to add the admin VLAN as an IP interface, giving it an IP address of 192.168.163.3...

Layer 3 103 Software Release 2.6.1C613-02039-00 REV A Routing Information Protocol (RIP) Routing protocols such as RIPv1 and RIPv2 can be enabled on a VLAN. For example, to enable RIPv2 on the admin VLAN, use the command: ADD IP RIP INTERFACE=vlan11 SEND=RIP2 RECEIVE=BOTH To display information abou...

104 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Figure 24: Example output from the SHOW IPX CIRCUIT command. AppleTalk To create an AppleTalk port (interface) associated with the admin VLAN, use the command: ADD APPLE PORT INTERFACE= vlan11 To display information about...

Chapter 7 Maintenance and Troubleshooting This Chapter If you are familiar with networking and switch operations, you may be able to diagnose and solve some problems yourself. This chapter gives tips on how to: ■ start your switch (see “ How the Switch Starts Up ” on page 108). ■ avoid problems (see...

108 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A How the Switch Starts Up The sequence of operations that the switch performs when it boots are: 1. Perform startup self tests. 2. Perform the install override option. 3. Load the FLASH boot release as the INSTALL boot. 4....

Maintenance and Troubleshooting 109 Software Release 2.6.1C613-02039-00 REV A When you start the switch the FLASH boot release is always loaded first. The FLASH boot release contains all the code required to obtain and check the INSTALL information. This first boot is known as the INSTALL boot. The ...

110 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Backup switch If your network has many switches, you may wish to keep a backup switch ready to replace any switch that malfunctions. When you upgrade the software release or patch on the other switches in the network, upg...

Maintenance and Troubleshooting 111 Software Release 2.6.1C613-02039-00 REV A What to Do if You Clear FLASH Memory Completely DO NOT clear the FLASH memory completely. The software release files are stored in FLASH, and clearing it would leave no software to run the switch. If you accidentally do th...

112 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A What to Do if the PPP Link Disconnects Regularly If the device at the other end of the PPP link is not an ATR router or switch but is supplied by another vendor turn LQR (Link Quality Reporting) off on PPP links (LQR=OFF)...

Maintenance and Troubleshooting 113 Software Release 2.6.1C613-02039-00 REV A ■ To get debugging output, enter the command: SHOW DEBUG ■ Depending on the problem, the support personnel may also ask you for the output from the following commands (see the Monitoring and Fault Diagnosis section in the ...

114 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A To set PING defaults, enter the command: SET PING [{[IPADDRESS=] ipadd |[IPXADDRESS=] network:station | [APPLEADDRESS=] network.node }] [LENGTH= number ] [NUMBER={ number |CONTINUOUS}] [PATTERN= hexnum ] [{SIPADDRESS= ipa...

Maintenance and Troubleshooting 115 Software Release 2.6.1C613-02039-00 REV A The “IP Packet Forwarding” field in the output should be set to “Enabled”. Refer to the documentation for the host TCP/IP software for more information about configuring a gateway. The host’s TCP/IP software should be conf...

116 AT-8800 Series Switch User Guide Software Release 2.6.1C613-02039-00 REV A Troubleshooting IPX Configurations No Routes are Visible to the Remote Router 1. Check the PPP link To check that the PPP link is active, enter the command: SHOW PPP The display should look like that shown in Figure 28 on...

Maintenance and Troubleshooting 117 Software Release 2.6.1C613-02039-00 REV A 3. Check for file server on Remote Office switch Does the file server appear in the IPX service table of the Remote Office switch? If the server does not appear in the table, its presence is not advertised to the local LAN...