Home
Allied Telesis
Switch
AT-9028
Allied Telesis AT-9028 User Manual
4
of 1
of 1 rating
1278 pages
Give review
Manual
Specs
To Next Page
To Next Page
Loading...
613-001635 Rev. A
AT-9000 Series
Layer 2-4 Gigabit Ethernet EcoSwitches
A
T
-9000/28
A
T
-9000/28SP
A
T
-9000/52
Management Software
Command Line Interface User’s
Guide
AlliedWare Plus Version 2.1.3
25
26
27
28
25R
26R
27R
28R
PWR
SYS
MODE
COL
SPD
DUP
ACT
A
T
-9000/28
Gigabit Ethernet Switch with 4 Combo SFP Ports
SELECT
RS-232
CONSOLE
2323
A
T
-9000/52
Gigabit Ethernet Switch
with 4 SFP Ports
SELECT
PWR
SYS
49
50
51
52
38
40
42
44
46
48
37
39
41
43
45
47
COL
SPD
DUP
ACT
MODE
A
T
-9000/28SP
Gigabit Ethernet Switch with 4 Combo SFP Ports
PWR
SYS
MODE
SELECT
COL
SPD
DUP
ACT
RS-232
CONSOLE
25
26
27
28
25R
26R
27R
28R
2
Table of Contents
Default Chapter
1
Management Software
1
Table of Contents
5
Preface
31
Document Conventions
32
Where to Find Web-Based Guides
33
Contacting Allied Telesis
34
Online Support
34
Email and Telephone Support
34
Warranty
34
Returning Products
34
Sales or Corporate Information
34
Management Software Updates
34
Section I: Getting Started
35
Chapter 1: Alliedware Plus™ Command Line Interface
37
Management Sessions
38
Local Management
38
Remote Management
38
Management Interfaces
41
Local Manager Account
42
Alliedware Plus™ Command Modes
43
Table 1. Alliedware Plus Modes
44
Moving down the Hierarchy
46
ENABLE Command
46
CONFIGURE TERMINAL Command
46
CLASS-MAP Command
46
LINE CONSOLE 0 Command
47
LINE VTY Command
47
POLICY-MAP Command
47
CLASS Command
47
INTERFACE PORT Command
48
VLAN DATABASE Command
49
INTERFACE VLAN Command
49
INTERFACE TRUNK Command
49
LOCATION CIVIC-LOCATION Command
50
LOCATION COORD-LOCATION Command
50
Moving up the Hierarchy
51
EXIT and QUIT Commands
51
END Command
51
DISABLE Command
52
Port Numbers in Commands
53
Combo Ports 25 to 28
55
Command Format
56
Command Line Interface Features
56
Command Formatting Conventions
56
Command Examples
56
Startup Messages
57
Chapter 2: Starting a Management Session
59
Starting a Local Management Session
60
Starting a Remote Telnet or SSH Management Session
62
VTY Lines
62
What to Configure First
64
Creating a Boot Configuration File
64
Changing the Login Password
65
Assigning a Name to the Switch
65
Adding a Management IP Address
66
Table 2. Adding a Management Address: Example 1
67
Table 3. Adding a Management IP Address: Example 2
67
Saving Your Changes
68
Ending a Management Session
69
Chapter 3: Basic Command Line Management
71
Clearing the Screen
72
Displaying the On-Line Help
73
Saving Your Configuration Changes
75
Ending a Management Session
76
Chapter 4: Basic Command Line Management Commands
77
Table 4. Basic Command Line Commands
77
(Question Mark Key)
79
Clear Screen
81
Configure Terminal
82
Copy Running-Config Startup-Config
83
Disable
84
Enable
86
End
87
Exit
88
Length
89
Logout
91
Quit
92
Terminal Length
93
Write
94
Section II: Basic Operations
95
Chapter 5: Basic Switch Management
97
Adding a Name to the Switch
98
Adding Contact and Location Information
99
Displaying Parameter Settings
100
Manually Setting the Date and Time
101
Pinging Network Devices
102
Resetting the Switch
103
Restoring the Default Settings to the Switch
104
Setting the Baud Rate of the Console Port
106
Configuring the Management Session Timers
107
Setting the Maximum Number of Manager Sessions
108
Configuring the Banners
109
Chapter 6: Basic Switch Management Commands
111
Banner Exec
113
Banner Login
114
Table 5. Basic Switch Management Commands
114
Banner Motd
115
Baud-Rate Set
116
Clock Set
117
Erase Startup-Config
118
Exec-Timeout
119
Hostname
121
Line Console
122
Line Vty
123
No Hostname
124
Ping
125
Reboot
126
Reload
127
Service Maxmanager
129
Show Baud-Rate
130
Show Clock
131
Show Running-Config
132
Show Switch
133
Table 6. SHOW SWITCH Command
133
Show System
135
Show Users
136
Table 7. SHOW USERS Command
136
Snmp-Server Contact
138
Snmp-Server Location
139
System Territory
140
Chapter 7: Port Parameters
143
Adding Descriptions
144
Setting the Speed and Duplex Mode
145
Setting the MDI/MDI-X Wiring Configuration
147
Enabling or Disabling Ports
148
Enabling or Disabling Backpressure
149
Enabling or Disabling Flow Control
150
Resetting Ports
153
Configuring Threshold Limits for Ingress Packets
154
Reinitializing Auto-Negotiation
156
Restoring the Default Settings
157
Displaying Port Settings
158
Displaying Speed and Duplex Settings
158
Displaying Port Status
158
Displaying Port Configuration
159
Displaying or Clearing Port Statistics
160
Chapter 8: Port Parameter Commands
161
Table 8. Port Parameter Commands
161
Backpressure
163
Bplimit
165
Clear Port Counter
166
Description
167
Duplex
168
Egress-Rate-Limit
170
Fctrllimit
171
Flowcontrol
172
Holbplimit
175
Linktrap
177
No Egress-Rate-Limit
178
No Flowcontrol
179
No Linktrap
180
No Shutdown
181
No Storm-Control
182
Polarity
183
Purge
185
Renegotiate
186
Reset
187
Show Flowcontrol Interface
188
Table 9. SHOW FLOWCONTROL INTERFACE Command
188
Show Interface
190
Table 10. SHOW INTERFACE Command
191
Show Interface Status
193
Table 11. SHOW INTERFACE STATUS Command
193
Show Platform Table Port
195
Table 12. SHOW PLATFORM TABLE PORT COUNTERS Command
195
Show System Pluggable
198
Show System Pluggable Detail
199
Show Storm-Control
200
Table 13. SHOW STORM-CONTROL Command
200
Show Running-Config Interface
202
Shutdown
203
Speed
204
Storm-Control
205
Chapter 9: Ipv4 and Ipv6 Management Addresses
207
Overview
208
Table 14. Features that Require an IP Management Address
208
Assigning an Ipv4 Management Address and Default Gateway
211
Adding an Ipv4 Management Address
211
Adding an Ipv4 Default Gateway Address
213
Deleting an Ipv4 Management Address and Default Gateway
214
Displaying an Ipv4 Management Address and Default Gateway
214
Assigning an Ipv6 Management Address and Default Gateway
216
Adding an Ipv6 Management Address
216
Adding an Ipv6 Default Gateway Address
217
Deleting an Ipv6 Management Address and Default Gateway
218
Displaying an Ipv6 Management Address and Default Gateway
218
Chapter 10: Ipv4 and Ipv6 Management Address Commands
221
Table 15. Management IP Address Commands
221
Clear Ipv6 Neighbors
223
Ip Address
224
Ip Address Dhcp
226
Ip Route
228
Ipv6 Address
230
Ipv6 Route
232
No Ip Address
234
No Ip Address Dhcp
235
No Ip Route
236
No Ipv6 Address
237
No Ipv6 Route
238
Show Ip Interface
239
Table 16. SHOW IP INTERFACE Command
239
Show Ip Route
240
Table 17. SHOW IP ROUTE Command
240
Show Ipv6 Interface
242
Table 18. SHOW IPV6 INTERFACE Command
242
Show Ipv6 Route
243
Chapter 11: Simple Network Time Protocol (SNTP) Client
245
Overview
246
Activating the SNTP Client and Specifying the IP Address of an NTP or SNTP Server
247
Configuring Daylight Savings Time and UTC Offset
248
Table 19. SNTP Daylight Savings Time and UTC Offset Commands
248
Disabling the SNTP Client
250
Displaying the SNTP Client
251
Displaying the Date and Time
252
Chapter 12: SNTP Client Commands
253
Table 20. Simple Network Time Protocol Commands
253
Clock Summer-Time
254
Clock Timezone
255
No Clock Summer-Time
256
No Ntp Peer
257
Ntp Peer
258
Purge Ntp
259
Show Clock
260
Show Ntp Associations
261
Table 21. SHOW NTP ASSOCIATIONS Command
261
Show Ntp Status
263
Chapter 13: MAC Address Table
265
Overview
266
Adding Static MAC Addresses
268
Deleting MAC Addresses
269
Setting the Aging Timer
271
Displaying the MAC Address Table
272
Chapter 14: MAC Address Table Commands
273
Table 22. MAC Address Table Commands
273
Clear Mac Address-Table
274
Mac Address-Table Ageing-Time
276
Mac Address-Table Static
278
No Mac Address-Table Static
280
Show Mac Address-Table
282
Table 23. SHOW MAC ADDRESS-TABLE Command - Unicast Addresses
283
Table 24. SHOW MAC ADDRESS-TABLE Command - Multicast Addresses
283
Chapter 15: Enhanced Stacking
285
Overview
286
Command and Member Switches
286
Common VLAN
286
Guidelines
287
General Steps
287
Configuring the Command Switch
289
Configuring a Member Switch
291
Managing the Member Switches of an Enhanced Stack
293
Changing the Enhanced Stacking Mode
295
Disabling Enhanced Stacking
297
Chapter 16: Enhanced Stacking Commands
299
Table 25. Enhanced Stacking Commands
299
Estack Command-Switch
300
Estack Run
301
No Estack Command-Switch
302
No Estack Run
303
Rcommand
304
Reboot Estack Member
305
Show Estack
307
Table 26. SHOW ESTACK Command
307
Show Estack Command-Switch
309
Show Estack Remotelist
310
Chapter 17: Port Mirror
313
Overview
314
Creating the Port Mirror or Adding New Source Ports
315
Removing Source Ports or Deleting the Port Mirror
316
Displaying the Port Mirror
317
Chapter 18: Port Mirror Commands
319
Table 27. Port Mirror Commands
319
Mirror Interface
320
No Mirror
321
No Mirror Interface
322
Show Mirror
323
Table 28. SHOW MIRROR Command
323
Chapter 19: Internet Group Management Protocol (IGMP) Snooping
325
Overview
326
Host Node Topology
328
Single-Host Per Port
328
Multiple-Hosts Per Port
328
Configuring the IGMP Snooping Parameters
329
Table 29. IGMP Snooping Parameters
329
Enabling IGMP Snooping
330
Disabling IGMP Snooping
331
Displaying IGMP Snooping
332
Chapter 20: IGMP Snooping Commands
333
Table 30. Internet Group Management Protocol Snooping Commands
333
Clear Ip Igmp
334
Ip Igmp Limit
335
Ip Igmp Querier-Timeout
336
Ip Igmp Snooping
337
Ip Igmp Snooping Mrouter
338
Ip Igmp Status
339
No Ip Igmp Snooping
340
No Ip Igmp Snooping Mrouter
341
Show Ip Igmp Snooping
342
Table 31. SHOW IP IGMP SNOOPING Command
343
Chapter 21: Multicast Commands
345
Table 32. Multicast Commands
345
No Switchport Block Egress-Multicast
346
No Switchport Block Ingress-Multicast
347
Switchport Block Egress-Multicast
348
Switchport Block Ingress-Multicast
349
Section III: File System
351
Chapter 22: File System
353
Overview
354
Table 33. File Extensions and File Types
354
Copying Boot Configuration Files
355
Renaming Boot Configuration Files
356
Deleting Boot Configuration Files
357
Displaying the Specifications of the File System
358
Listing the Files in the File System
359
Chapter 23: File System Commands
361
Copy
362
Delete
363
Delete Force
364
Table 34. File System Commands
364
Dir
365
Move
366
Show File Systems
367
Table 35. SHOW FILE SYSTEMS Command
367
Chapter 24: Boot Configuration Files
369
Overview
370
Specifying the Active Boot Configuration File
371
Creating a New Boot Configuration File
373
Displaying the Active Boot Configuration File
374
Chapter 25: Boot Configuration File Commands
375
Boot Config-File
376
Copy Running-Config
378
Table 36. Boot Configuration File Commands
378
Copy Running-Config Startup-Config
379
Erase Startup-Config
380
No Boot Config-File
381
Show Boot
382
Table 37. SHOW BOOT Command
382
Show Startup-Config
384
Write
385
Chapter 26: File Transfers
387
Overview
388
Uploading or Downloading Files with TFTP
389
Downloading New Management Software with TFTP
389
Downloading Files to the Switch with TFTP
390
Uploading Files from the Switch with TFTP
391
Uploading or Downloading Files with Zmodem
393
Downloading Files to the Switch with Zmodem
393
Uploading Files from the Switch with Zmodem
394
Downloading Files with Enhanced Stacking
396
Downloading New Management Software with Enhanced Stacking
396
Chapter 27: File Transfer Commands
399
Copy Filename Zmodem
400
Copy Flash Tftp
401
Copy Tftp Flash
402
Table 38. File Transfer Commands
402
Copy Zmodem
404
Upload Image Remotelist
405
Section IV: Event Messages
407
Chapter 28: Event Log
409
Overview
410
Displaying the Event Log
411
Clearing the Event Log
412
Chapter 29: Event Log Commands
413
Table 39. Event Log Commands
413
Clear Log Buffered
414
Log Buffered
415
Table 40. Event Message Severity Levels
415
Show Log
417
Table 41. SHOW LOG Command
417
Table 42. Management Software Modules
418
Show Log Config
420
Table 43. SHOW LOG CONFIG Command
420
Show Log Reverse
422
Chapter 30: Syslog Client
423
Overview
424
Creating Syslog Server Definitions
425
Table 44. Event Message Severity Levels
425
Table 45. Program Abbreviations
425
Deleting Syslog Server Definitions
428
Displaying the Syslog Server Definitions
429
Chapter 31: Syslog Client Commands
431
Table 46. Syslog Client Commands
431
Log Host
432
No Log Host
434
Show Log Config
435
Table 47. SHOW LOG CONFIG Command
435
Section V: Port Trunks
437
Chapter 32: Static Port Trunks
439
Overview
440
Load Distribution Methods
440
Guidelines
442
Creating New Static Port Trunks or Adding Ports to Existing Trunks
444
Specifying the Load Distribution Method
445
Removing Ports from Static Port Trunks or Deleting Trunks
446
Displaying Static Port Trunks
447
Chapter 33: Static Port Trunk Commands
449
Table 48. Static Port Trunk Commands
449
No Static-Channel-Group
450
Port-Channel Load-Balance
451
Show Static-Channel-Group
452
Static-Channel-Group
453
Chapter 34: Link Aggregation Control Protocol (LACP)
455
Overview
456
LACP System Priority
457
Base Port
457
LACP Port Priority Value
457
Load Distribution Methods
458
Guidelines
458
Creating New Aggregators
460
Setting the Load Distribution Method
461
Adding Ports to Aggregators
462
Removing Ports from Aggregators
463
Deleting Aggregators
464
Displaying Aggregators
465
Chapter 35: LACP Commands
467
Table 49. LACP Port Trunk Commands
467
Channel-Group
468
Lacp System-Priority
470
No Channel-Group
471
Port-Channel Load-Balance
472
Show Etherchannel
474
Show Etherchannel Detail
475
Show Etherchannel Summary
476
Show Lacp Sys-ID
477
Show Port Etherchannel
478
Section VI: Spanning Tree Protocols
479
Chapter 36: Spanning Tree and Rapid Spanning Tree Protocols
481
Overview
482
Bridge Priority and the Root Bridge
483
Path Costs and Port Costs
484
Port Priority
485
Forwarding Delay and Topology Changes
486
Hello Time and Bridge Protocol Data Units (BPDU)
487
Point-To-Point and Edge Ports
488
Mixed STP and RSTP Networks
490
Spanning Tree and Vlans
491
RSTP BPDU Guard
493
RSTP Loop Guard
495
Chapter 37: Spanning Tree Protocol (STP)
501
Designating STP as the Active Spanning Tree Protocol
502
Enabling the Spanning Tree Protocol
503
Setting the Switch Parameters
504
Table 50. STP Switch Parameter Commands
504
Setting the Port Parameters
506
Table 51. STP Port Parameter Commands
506
Disabling the Spanning Tree Protocol
507
Displaying STP Settings
508
Chapter 38: STP Commands
509
Table 52. Spanning Tree Protocol Commands
509
No Spanning-Tree Stp Enable
510
Show Spanning-Tree
511
Spanning-Tree Forward-Time
512
Spanning-Tree Hello-Time
513
Spanning-Tree Max-Age
514
Spanning-Tree Mode Stp
515
Spanning-Tree Path-Cost
516
SPANNING-TREE PRIORITY (Bridge Priority)
517
SPANNING-TREE PRIORITY (Port Priority)
518
Spanning-Tree Stp Enable
519
Chapter 39: Rapid Spanning Tree Protocol (RSTP)
521
Designating RSTP as the Active Spanning Tree Protocol
522
Enabling the Rapid Spanning Tree Protocol
523
Configuring the Switch Parameters
524
Setting the Forward Time, Hello Time, and Max Age
524
Table 53. RSTP Switch Parameters
524
Setting the Bridge Priority
525
Enabling or Disabling BPDU Guard
525
Configuring the Port Parameters
527
Configuring Port Costs
527
Table 54. RSTP Port Parameters
527
Configuring Port Priorities
528
Designating Point-To-Point and Shared Ports
528
Designating Edge Ports
528
Enabling or Disabling RSTP Loop-Guard
529
Enabling or Disabling BPDU Guard
529
Disabling the Rapid Spanning Tree Protocol
531
Displaying RSTP Settings
532
Chapter 40: RSTP Commands
533
Table 55. Rapid Spanning Tree Protocol Commands
533
No Spanning-Tree
535
No Spanning-Tree Errdisable-Timeout Enable
536
No Spanning-Tree Loop-Guard
537
No Spanning-Tree Portfast
538
No Spanning-Tree Portfast Bpdu-Guard
539
No Spanning-Tree Rstp Enable
540
Show Spanning-Tree
541
Spanning-Tree Errdisable-Timeout Enable
543
Spanning-Tree Errdisable-Timeout Interval
544
Spanning-Tree Forward-Time
545
Spanning-Tree Hello-Time
546
Spanning-Tree Link-Type
547
Spanning-Tree Loop-Guard
548
Spanning-Tree Max-Age
549
Spanning-Tree Mode Rstp
550
Spanning-Tree Path-Cost
551
Spanning-Tree Portfast
552
Spanning-Tree Portfast Bpdu-Guard
553
SPANNING-TREE PRIORITY (Bridge Priority)
554
SPANNING-TREE PRIORITY (Port Priority)
555
Spanning-Tree Rstp Enable
556
Section VII: Virtual Lans
557
Chapter 41: Port-Based and Tagged Vlans
559
Overview
560
Port-Based VLAN Overview
562
VLAN Name
562
VLAN Identifier
562
Untagged Ports
563
Port VLAN Identifier
563
Guidelines to Creating a Port-Based VLAN
564
Drawbacks of Port-Based Vlans
564
Port-Based Example 1
565
Port-Based Example 2
566
Tagged VLAN Overview
568
Tagged and Untagged Ports
569
Port VLAN Identifier
569
Guidelines to Creating a Tagged VLAN
569
Tagged VLAN Example
570
Table 56. VLAN Port Assignments
571
Creating Vlans
572
Adding Untagged Ports to Vlans
573
Adding Tagged Ports to Vlans
575
Removing Untagged Ports from Vlans
577
Removing Tagged Ports from Vlans
578
Deleting Vlans
579
Displaying the Vlans
580
Chapter 42: Port-Based and Tagged VLAN Commands
581
Table 57. Port-Based and Tagged VLAN Commands
581
No Switchport Access Vlan
582
No Switchport Trunk
583
No Switchport Trunk Native Vlan
584
No Vlan
585
Show Vlan
586
Table 58. SHOW VLAN Command
586
Switchport Access Vlan
588
Switchport Mode Access
590
Switchport Mode Trunk
591
Switchport Trunk Allowed Vlan
593
Switchport Trunk Native Vlan
596
Vlan
598
Chapter 43: GARP VLAN Registration Protocol
601
Overview
602
Guidelines
605
GVRP and Network Security
606
GVRP-Inactive Intermediate Switches
607
Enabling GVRP on the Switch
608
Enabling GIP on the Switch
609
Enabling GVRP on the Ports
610
Setting the GVRP Timers
611
Disabling GVRP on the Ports
612
Disabling GIP on the Switch
613
Disabling GVRP on the Switch
614
Restoring the GVRP Default Settings
615
Displaying GVRP
616
Chapter 44: GARP VLAN Registration Protocol Commands
617
Table 59. GARP VLAN Registration Protocol Commands
617
Gvrp Applicant State Active
619
Gvrp Applicant State Normal
620
Gvrp Enable
621
Gvrp Registration
622
Gvrp Timer Join
623
Gvrp Timer Leave
624
Gvrp Timer Leaveall
625
No Gvrp Enable
626
Purge Gvrp
627
Show Gvrp Applicant
628
Show Gvrp Configuration
629
Show Gvrp Machine
630
Show Gvrp Statistics
631
Show Gvrp Timer
633
Chapter 45: MAC Address-Based Vlans
635
Overview
636
Egress Ports
636
Table 60. Mappings of MAC Addresses to Egress Ports Example
637
Table 61. Revised Example of Mappings of MAC Addresses to Egress Ports
638
Vlans that Span Switches
639
VLAN Hierarchy
640
Table 62. Example of a MAC Address-Based VLAN Spanning Switches
640
Guidelines
641
General Steps
642
Creating MAC Address-Based Vlans
643
Adding MAC Addresses to Vlans and Designating Egress Ports
644
Removing MAC Addresses
645
Deleting Vlans
646
Displaying Vlans
647
Example of Creating a MAC Address-Based VLAN
648
Chapter 46: MAC Address-Based VLAN Commands
651
Table 63. MAC Address-Based VLAN Commands
651
No Vlan
652
NO VLAN MACADDRESS (Global Configuration Mode)
653
NO VLAN MACADDRESS (Port Interface Mode)
654
Show Vlan Macaddress
655
Table 64. SHOW VLAN MACADDRESS Command
656
Vlan Macaddress
657
VLAN SET MACADDRESS (Global Configuration Mode)
659
VLAN SET MACADDRESS (Port Interface Mode)
661
Chapter 47: Private Port Vlans
663
Overview
664
Host Ports
664
Uplink Port
664
Guidelines
665
Creating Private Vlans
666
Adding Host and Uplink Ports
667
Deleting Vlans
668
Displaying Private Vlans
669
Chapter 48: Private Port VLAN Commands
671
Table 65. Private Port VLAN Commands
671
No Vlan
672
Private-Vlan
673
Show Vlan Private-Vlan
674
Switchport Mode Private-Vlan Host
675
Switchport Mode Private-Vlan Promiscuous
676
Chapter 49: Voice VLAN Commands
677
Table 66. Voice VLAN Commands
677
No Switchport Voice Vlan
678
Switchport Voice Dscp
679
Switchport Voice Vlan
680
Switchport Voice Vlan Priority
682
Chapter 50: VLAN Stacking
683
Overview
684
Components
686
Vlan
686
Customer Ports
686
Provider Ports
686
Ethertype/Length
686
VLAN Stacking Process
687
Table 67. VLAN Stacking Process
687
Example of VLAN Stacking
688
Chapter 51: VLAN Stacking Commands
693
Table 68. VLAN Stacking Commands
693
No Switchport Vlan-Stacking
694
Platform Vlan-Stacking-Tpid
695
Show Vlan Vlan-Stacking
696
Switchport Vlan-Stacking
697
Section VIII: Port Security
699
Chapter 52: MAC Address-Based Port Security
701
Overview
702
Static Versus Dynamic Addresses
702
Intrusion Actions
702
Guidelines
703
Configuring Ports
704
Table 69. MAC Address-Based Port Security Commands
704
Enabling MAC Address-Based Security on Ports
706
Disabling MAC Address-Based Security on Ports
707
Displaying Port Settings
708
Chapter 53: MAC Address-Based Port Security Commands
709
Table 70. MAC Address-Based Port Security Commands
709
No Switchport Port-Security
710
No Switchport Port-Security Aging
711
Show Port-Security Interface
712
Table 71. SHOW PORT-SECURITY INTERFACE Command
712
Show Port-Security Intrusion Interface
715
Switchport Port-Security
716
Switchport Port-Security Aging
717
Switchport Port-Security Maximum
718
Switchport Port-Security Violation
719
Chapter 54: 802.1X Port-Based Network Access Control
721
Overview
722
Authentication Process
723
Port Roles
724
None Role
724
Authenticator Role
724
Authentication Methods for Authenticator Ports
725
Operational Settings for Authenticator Ports
726
Operating Modes for Authenticator Ports
727
Single Host Mode
727
Multiple Host Mode
727
Multiple Supplicant Mode
729
Supplicant and VLAN Associations
731
Single Host Mode
732
Multiple Host Mode
732
Multiple Supplicant Mode
732
Supplicant VLAN Attributes on the RADIUS Server
732
Guest VLAN
734
RADIUS Accounting
735
General Steps
736
Guidelines
737
Enabling 802.1X Port-Based Network Access Control on the Switch
739
Configuring Authenticator Ports
740
Designating Authenticator Ports
740
Designating the Authentication Methods
740
Configuring the Operating Modes
741
Configuring Reauthentication
743
Table 72. Reauthentication Commands
743
Removing Ports from the Authenticator Role
744
Disabling 802.1X Port-Based Network Access Control on the Switch
745
Displaying Authenticator Ports
746
Displaying EAP Packet Statistics
747
Chapter 55: 802.1X Port-Based Network Access Control Commands
749
Table 73. 802.1X Port-Based Network Access Control Commands
749
Aaa Authentication Dot1X Default Group Radius
752
Auth Dynamic-Vlan-Creation
753
Auth Guest-Vlan
755
Auth Host-Mode
756
Auth Reauthentication
758
Auth Timeout Quiet-Period
759
Auth Timeout Reauth-Period
760
Auth Timeout Server-Timeout
761
Auth Timeout Supp-Timeout
762
Auth-Mac Enable
763
Auth-Mac Reauth-Relearning
764
Dot1X Control-Direction
765
Dot1X Eap
767
Dot1X Initialize Interface
769
Dot1X Max-Reauth-Req
770
Dot1X Port-Control Auto
771
Dot1X Port-Control Force-Authorized
772
Dot1X Port-Control Force-Unauthorized
773
Dot1X Timeout Tx-Period
774
No Aaa Authentication Dot1X Default Group Radius
775
No Auth Dynamic-Vlan-Creation
776
No Auth Guest-Vlan
777
No Auth Reauthentication
778
No Auth-Mac Enable
779
No Dot1X Port-Control
780
Show Auth-Mac Interface
781
Show Auth-Mac Sessionstatistics Interface
782
Show Auth-Mac Statistics Interface
783
Show Auth-Mac Supplicant Interface
784
Show Dot1X
785
Show Dot1X Interface
786
Show Dot1X Sessionstatistics Interface
787
Show Dot1X Statistics Interface
788
Show Dot1X Supplicant Interface
789
Section IX: Simple Network Management Protocols
791
Chapter 56: Snmpv1 and Snmpv2C
793
Overview
794
Enabling Snmpv1 and Snmpv2C
796
Creating Community Strings
797
Adding or Removing IP Addresses of Trap or Inform Receivers
798
Deleting Community Strings
800
Disabling Snmpv1 and Snmpv2C
801
Displaying Snmpv1 and Snmpv2C
802
Chapter 57: Snmpv1 and Snmpv2C Commands
805
Table 74. Snmpv1 and Snmpv2C Commands
805
No Snmp-Server
807
No Snmp-Server Community
808
No Snmp-Server Enable Trap
809
No Snmp-Server Enable Trap Auth
810
No Snmp-Server Host
811
No Snmp-Server View
813
No Snmp Trap Link-Status
814
Show Running-Config Snmp
815
Show Snmp-Server
816
Show Snmp-Server Community
817
Table 75. SHOW SNMP-SERVER COMMUNITY Command
817
Show Snmp-Server View
819
Table 76. SHOW SNMP-SERVER VIEW Command
819
Snmp-Server
820
Snmp-Server Community
821
Snmp-Server Enable Trap
822
Snmp-Server Enable Trap Auth
823
Snmp-Server Host
824
Snmp-Server View
826
Snmp Trap Link-Status
828
Chapter 58: Snmpv3 Commands
829
Table 77. Snmpv3 Commands
829
No Snmp-Server
831
No Snmp-Server Engineid Local
832
No Snmp-Server Group
833
No Snmp-Server Host
834
No Snmp-Server User
835
No Snmp-Server View
836
Show Snmp-Server
837
Show Snmp-Server Group
838
Show Snmp-Server Host
839
Show Snmp-Server User
840
Show Snmp-Server View
841
Snmp-Server
842
Snmp-Server Engineid Local
843
Snmp-Server Group
844
Snmp-Server Host
846
Snmp-Server User
847
Snmp-Server View
849
Section X: Network Management
851
Chapter 59: Sflow Agent
853
Overview
854
Ingress Packet Samples
854
Packet Counters
854
Guidelines
855
Configuring the Sflow Agent
856
Configuring the Ports
857
Configuring the Sampling Rate
857
Configuring the Polling Interval
858
Enabling the Sflow Agent
859
Disabling the Sflow Agent
860
Displaying the Sflow Agent
861
Configuration Example
862
Chapter 60: Sflow Agent Commands
865
Table 78. Sflow Agent Commands
865
No Sflow Collector Ip
866
No Sflow Enable
867
Sflow Collector Ip
868
Sflow Enable
869
Sflow Polling-Interval
870
Sflow Sampling-Rate
872
Show Sflow (Database)
874
Table 79. SHOW COLLECTOR Command
875
Chapter 61: LLDP and LLDP-MED
877
Overview
878
Mandatory LLDP Tlvs
879
Optional LLDP Tlvs
879
Table 80. Mandatory LLDP Tlvs
879
Table 81. Optional LLDP Tlvs
879
Optional LLDP-MED Tlvs
881
Table 82. Optional LLDP-MED Tlvs
881
Enabling LLDP and LLDP-MED on the Switch
884
Configuring Ports to Only Receive LLDP and LLDP-MED Tlvs
885
Configuring Ports to Send Only Mandatory LLDP Tlvs
886
Configuring Ports to Send Optional LLDP Tlvs
887
Table 83. Optional LLDP Tlvs
887
Configuring Ports to Send Optional LLDP-MED Tlvs
889
Configuring Ports to Send LLDP-MED CIVIC Location Tlvs
891
Table 84. Abbreviated List of LLDP-MED CIVIC Location Entry Parameters
891
Configuring Ports to Send LLDP-MED Coordinate Location Tlvs
895
Table 85. LLDP-MED Coordinate Location Entry Parameters
895
Configuring Ports to Send LLDP-MED ELIN Location Tlvs
899
Removing LLDP Tlvs from Ports
901
Removing LLDP-MED Tlvs from Ports
902
Deleting LLDP-MED Location Entries
903
Disabling LLDP and LLDP-MED on the Switch
904
Displaying General LLDP Settings
905
Displaying Port Settings
906
Displaying or Clearing Neighbor Information
907
Displaying Port Tlvs
909
Displaying and Clearing Statistics
910
Chapter 62: LLDP and LLDP-MED Commands
911
Table 86. LLDP and LLDP-MED Commands
911
Clear Lldp Statistics
914
Clear Lldp Table
915
Lldp Holdtime-Multiplier
916
Lldp Location
917
Lldp Management-Address
919
Lldp Med-Notifications
921
Lldp Med-Tlv-Select
922
Lldp Non-Strict-Med-Tlv-Order-Check
924
Lldp Notifications
925
Lldp Notification-Interval
926
Lldp Reinit
927
Lldp Run
928
Lldp Timer
929
Lldp Tlv-Select
930
Table 87. Optional Tlvs
930
Lldp Transmit Receive
933
Lldp Tx-Delay
934
Location CIVIC-Location
935
Table 88. LLDP-MED CIVIC Location Entry Parameters
935
Location Coord-Location
938
Table 89. LLDP-MED Coordinate Location Entry Parameters
938
Location Elin-Location
941
No Lldp Med-Notifications
942
No Lldp Med-Tlv-Select
943
No Lldp Notifications
945
No Lldp Run
946
No Lldp Tlv-Select
947
No Lldp Transmit Receive
948
No Location
949
Show Lldp
951
Table 90. SHOW LLDP Command
951
Show Lldp Interface
953
Show Lldp Local-Info Interface
955
Show Lldp Neighbors Detail
957
Table 91. SHOW LLDP NEIGHBORS DETAIL Command
958
Show Lldp Neighbors Interface
961
Table 92. SHOW LLDP NEIGHBORS INTERFACE Command
961
Show Lldp Statistics
963
Table 93. SHOW LLDP STATISTICS Command
963
Show Lldp Statistics Interface
965
Table 94. SHOW LLDP STATISTICS INTERFACE Command
965
Show Location
967
Table 95. SHOW LLDP STATISTICS INTERFACE Command
967
Chapter 63: Address Resolution Protocol (ARP)
969
Overview
970
Proxy ARP
970
ARP on the Switch
970
Dynamic ARP Entries
970
Static ARP Entries
971
Adding Static ARP Entries
972
Deleting Static and Dynamic ARP Entries
973
Table 96. Deleting ARP Entries
973
Enabling and Disabling Proxy ARP
974
Displaying the ARP Table
975
Chapter 64: Address Resolution Protocol (ARP) Commands
977
Table 97. ARP Commands
977
Arp (Ip Address Mac Address)
978
Clear Arp-Cache
979
Ip Proxy-Arp
980
No Arp (Ip Address)
981
No Ip Proxy-Arp
982
Show Arp
983
Table 98. SHOW ARP Command
983
Chapter 65: RMON
985
Overview
986
RMON Port Statistics
987
Adding Statistics Groups
987
Viewing Statistics Groups
988
Deleting Statistics Groups
988
RMON Histories
989
Adding History Groups
989
Displaying History Groups
990
Deleting History Groups
991
RMON Alarms
992
Creating RMON Statistics Groups
993
Creating RMON Events
993
Creating RMON Alarms
994
Table 99. Abbreviated List of MIB Object Names and OID Numbers
994
Creating an Alarm - Example 1
995
Creating an Alarm - Example 2
997
Chapter 66: RMON Commands
1001
Table 100. RMON Commands
1001
No Rmon Alarm
1003
No Rmon Collection History
1004
No Rmon Collection Stats
1005
No Rmon Event
1006
Rmon Alarm
1007
Table 101. MIB Object Names and ID Numbers
1008
Rmon Collection History
1010
Rmon Collection Stats
1012
Rmon Event Log
1013
Rmon Event Log Trap
1014
Rmon Event Trap
1015
Show Rmon Alarm
1016
Table 102. SHOW RMON ALARM Command
1016
Show Rmon Event
1018
Table 103. SHOW RMON EVENT Command
1018
Show Rmon History
1020
Table 104. SHOW RMON HISTORY Command
1020
Show Rmon Statistics
1022
Table 105. SHOW RMON STATISTICS Command
1022
Chapter 67: Advanced Access Control Lists (Acls)
1023
Overview
1024
Filtering Criteria
1024
Actions
1024
ID Numbers
1025
How Ingress Packets Are Compared against Acls
1025
Table 106. Access Control List ID Number Ranges
1025
Guidelines
1026
Creating Acls
1027
Creating Numbered Ipv4 Acls
1027
Table 107. ACCESS-LIST Commands for Creating Acls
1027
Table 108. Blocking Ingress Packets Example
1029
Table 109. Blocking Traffic with Two IP Addresses
1029
Table 110. Creating a Permit ACL Followed by a Deny ACL Example
1030
Table 111. Permit Acls IP Packets Example
1031
Table 112. ACL Filters Tagged IP Packets Example
1032
Table 113. Numbered Ipv4 ACL with ICMP Packets Example
1033
Table 114. Numbered Ipv4 ACL with Protocol Example
1035
Table 115. Numbered Ipv4 ACL with TCP Port Packets Example
1037
Creating Numbered MAC Acls
1039
Table 116. Numbered Ipv4 ACL with UDP Port Example
1039
Table 117. Numbered MAC ACL Example
1040
Assigning Acls to Ports
1042
Assigning Numbered IP Acls to a Port
1042
Table 118. Assigning Numbered IP Acls
1042
Assigning MAC Address Acls to a Port
1043
Table 119. Assigning MAC Address Acls Example
1043
Removing Acls from Ports
1044
Removing Numbered IP Acls
1044
Removing MAC Address Acls
1044
Table 120. Removing Numbered IP Acls Example
1044
Table 121. Removing MAC Address Acls Example
1045
Restricting Remote Access
1046
Assigning Numbered IP Acls to VTY Lines
1046
Table 122. Assigning Numbered IP Acls to VTY Lines Example
1046
Assigning MAC Acls to VTY Lines
1047
Table 123. Assigning MAC Acls to VTY Lines Example
1047
Unrestricting Remote Access
1049
Table 124. Removing Numbered IP Acls from VTY Lines Example
1049
Deleting Numbered IP and MAC Address Acls
1050
Table 125. Deleting Numbered IP Acls Example 1
1050
Table 126. Deleting Numbered IP Acls Example 2
1050
Displaying the Acls
1051
Displaying IP Acls
1051
Displaying IP ACL Port Assignments
1051
Displaying Acls Assigned to VTY Lines
1052
Chapter 68: ACL Commands
1053
Table 127. Access Control List Commands
1053
Access-Class
1055
Access-Group
1057
ACCESS-LIST (MAC Address)
1059
Access-List Icmp
1062
Access-List Ip
1066
Access-List Proto
1070
Table 128. Protocol Numbers
1072
Access-List Tcp
1075
Access-List Udp
1079
Mac Access-Group
1083
No Access-List
1084
No Access-Group
1085
No Mac Access-Group
1086
Show Access-List
1087
Show Interface Access-Group
1088
Section XI: Management Security
1089
Chapter 69: Local Manager Accounts
1091
Overview
1092
Privilege Levels
1092
Command Mode Restriction
1093
Password Encryption
1093
Creating Local Manager Accounts
1095
Deleting Local Manager Accounts
1096
Activating Command Mode Restriction and Creating the Special Password
1097
Deactivating Command Mode Restriction and Deleting the Special Password
1098
Activating or Deactivating Password Encryption
1099
Displaying the Local Manager Accounts
1100
Chapter 70: Local Manager Account Commands
1101
Table 129. Local Manager Account Commands
1101
Enable Password
1102
No Enable Password
1103
No Service Password-Encryption
1104
No Username
1105
Service Password-Encryption
1106
Username
1107
Chapter 71: Telnet Server
1109
Overview
1110
Enabling the Telnet Server
1111
Disabling the Telnet Server
1112
Displaying the Telnet Server
1113
Chapter 72: Telnet Server Commands
1115
Table 130. Telnet Server Commands
1115
No Service Telnet
1116
Service Telnet
1117
Show Telnet
1118
Chapter 73: Telnet Client
1119
Overview
1120
Starting a Remote Management Session with the Telnet Client
1121
Chapter 74: Telnet Client Commands
1123
Table 131. Telnet Client Commands
1123
Telnet
1124
Telnet6
1125
Chapter 75: Secure Shell (SSH) Server
1127
Overview
1128
Algorithms
1128
Active Encryption Key
1128
Support for SSH
1129
Guidelines
1129
SSH and Enhanced Stacking
1131
Creating the Encryption Key Pair
1133
Enabling the SSH Server
1134
Disabling the SSH Server
1135
Deleting Encryption Keys
1136
Displaying the SSH Server
1137
Chapter 76: SSH Server Commands
1139
Table 132. Secure Shell Server Commands
1139
Crypto Key Destroy Hostkey
1140
Crypto Key Generate Hostkey
1141
No Service Ssh
1143
Service Ssh
1144
Show Crypto Key Hostkey
1145
Show Ssh Server
1146
Chapter 77: Non-Secure HTTP Web Browser Server
1147
Overview
1148
Enabling the Web Browser Server
1149
Setting the Protocol Port Number
1150
Disabling the Web Browser Server
1151
Displaying the Web Browser Server
1152
Chapter 78: Non-Secure HTTP Web Browser Server Commands
1153
Table 133. Non-Secure HTTP Web Browser Server Commands
1153
Service Http
1154
Ip Http Port
1155
No Service Http
1156
Show Ip Http
1157
Chapter 79: Secure HTTPS Web Browser Server
1159
Overview
1160
Certificates
1160
Distinguished Name
1161
Guidelines
1162
Creating a Self-Signed Certificate
1163
Configuring the HTTPS Web Server for a Certificate Issued by a CA
1166
Enabling the Web Browser Server
1170
Disabling the Web Browser Server
1171
Displaying the Web Browser Server
1172
Chapter 80: Secure HTTPS Web Browser Server Commands
1173
Table 134. Secure HTTPS Web Browser Server Commands
1173
Crypto Certificate Destroy
1174
Crypto Certificate Generate
1175
Crypto Certificate Import
1177
Crypto Certificate Request
1178
Service Https
1180
Ip Https Certificate
1181
No Service Https
1182
Show Crypto Certificate
1183
Show Ip Https
1184
Table 135. SHOW IP HTTPS Command
1184
Chapter 81: RADIUS and TACACS+ Clients
1187
Overview
1188
Remote Manager Accounts
1189
Guidelines
1191
Managing the RADIUS Client
1192
Adding IP Addresses of RADIUS Servers
1192
Specifying a RADIUS Global Encryption Key
1193
Specifying the Server Timeout
1193
Specifying RADIUS Accounting
1194
Removing the Accounting Method List
1194
Deleting Server IP Addresses
1195
Displaying the RADIUS Client
1195
Managing the TACACS+ Client
1196
Adding IP Addresses of TACACS+ Servers
1196
Specifying TACACS+ Accounting
1197
Removing the Accounting Method List
1197
Deleting IP Addresses of TACACS+ Servers
1198
Displaying the TACACS+ Client
1198
Configuring Remote Authentication of Manager Accounts
1199
Chapter 82: RADIUS and TACACS+ Client Commands
1203
Table 136. RADIUS and TACACS+ Client Commands
1203
Aaa Accounting Login
1205
Aaa Authentication Enable (Tacacs+)
1207
Aaa Authentication Login
1209
Ip Radius Source-Interface
1211
Login Authentication
1213
No Login Authentication
1215
No Radius-Server Host
1216
No Tacacs-Server Host
1217
Radius-Server Host
1218
Radius-Server Key
1220
Radius-Server Timeout
1221
Show Radius
1222
Table 137. SHOW RADIUS Command
1222
Show Tacacs
1224
Table 138. SHOW TACACS Command
1224
Tacacs-Server Host
1226
Tacacs-Server Key
1228
Tacacs-Server Timeout
1229
Appendix A: System Monitoring Commands
1231
Table 139. System Monitoring Commands
1231
Show Cpu
1232
Show Cpu History
1233
Show Cpu User-Threads
1234
Show Memory
1235
Show Memory Allocation
1236
Show Memory History
1237
Show Memory Pools
1238
Show Process
1239
Show System Serialnumber
1240
Show System Interrupts
1241
Show Tech-Support
1242
Appendix B: Management Software Default Settings
1245
Boot Configuration File
1246
Class of Service
1247
Console Port
1248
802.1X Port-Based Network Access Control
1249
Enhanced Stacking
1250
Gvrp
1251
IGMP Snooping
1252
Link Layer Discovery Protocol (LLDP and LLDP-MED)
1253
MAC Address-Based Port Security
1254
MAC Address Table
1255
Management IP Address
1256
Manager Account
1257
Port Settings
1258
RADIUS Client
1259
Remote Manager Account Authentication
1260
Rmon
1261
Secure Shell Server
1262
Sflow Agent
1263
Simple Network Management Protocol (Snmpv1, Snmpv2C and Snmpv3)
1264
Simple Network Time Protocol
1265
Spanning Tree Protocols (STP and RSTP)
1266
Spanning Tree Status
1266
Spanning Tree Protocol
1266
Rapid Spanning Tree Protocol
1266
System Name
1268
TACACS+ Client
1269
Telnet Server
1270
Vlans
1271
Web Server
1272
Command Index
1273
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Allied Telesis AT-9028 and is the answer not in the manual?
Ask a question
Allied Telesis AT-9028 Specifications
General
Brand
Allied Telesis
Model
AT-9028
Category
Switch
Language
English
Related product manuals
Allied Telesis AT-9000/28
1276 pages
Allied Telesis AT-9000/28SP
1482 pages
Allied Telesis AT-9000/12PoE
1482 pages
Allied Telesis AT-9000 Series
1526 pages
Allied Telesis AT-9924SP
65 pages
AT 9924SP AT-9924SP-30 AT-9924SP-30
56 pages
Allied Telesis AT-x210-9GT
1575 pages
Allied Telesis AT-FS980M/9
76 pages
Allied Telesis AT-8624PoE
36 pages
Allied Telesis AT-GS924MX
118 pages
Allied Telesis AT-FS750/20
444 pages
Allied Telesis AT-8624T/2M
36 pages
To Next PageTo Next Page
Need help?
General
