Allied Telesis AT-9400 - Chapter 27: Protected Ports VLANs

To Next Page

To Previous Page

Section VI: Virtual LANs 521

Chapter 27

Protected Ports VLANs

This chapter explains protected ports VLANs. It contains the following

sections:

 “Creating a Protected Ports VLAN” on page 522

 “Modifying a Protected Ports VLAN” on page 525

 “Displaying a Protected Ports VLAN” on page 528

 “Deleting a Protected Ports VLAN” on page 530

Main Page

Default Chapter3
- Table of Contents3
Preface19
- How this Guide Is Organized20
- Product Documentation22
- Where to Go First23
- Starting a Management Session24
- Document Conventions25
- Where to Find Web-Based Guides26
- Contacting Allied Telesis27
Section I: Basic Operations29
Chapter 1: Basic Switch Parameters31
- Configuring the Switch's Name, Location, and Contact32
- Figure 1: System Administration Menu32
- Figure 2: System Configuration Menu33
- Changing the Manager and Operator Passwords35
  - Changing the Manager or Operator Password35
  - Figure 3: Authentication Configuration Menu35
  - Figure 4: Passwords Configuration Menu36
  - Resetting the Manager Password37
- Setting the System Time38
  - Setting the System Time Manually39
  - Figure 5: Configure System Time Menu39
  - Setting the System Time from an SNTP or NTP Server40
- Rebooting the Switch43
- Figure 6: System Utilities Menu43
- Configuring the Console Startup Mode45
- Figure 7: Console (Serial/Telnet) Configuration Menu45
- Configuring the Console Timer46
- Configuring the Telnet Server47
- Setting the Baud Rate of the Serial Terminal Port48
- Pinging a Remote System49
- Returning the AT-S63 Management Software to the Factory Default Values50
- Displaying Hardware and Software Information52
- Figure 8: System Information Menu52
- Displaying System Hardware Information55
- Figure 9: System Hardware Information Menu55
- Displaying Uplink Port Information57
- Figure 10: Uplink Information Menu57
Chapter 2: Port Parameters61
- Displaying Port Status62
- Figure 13: Port Configuration Menu62
- Figure 14: Port Status Menu62
- Port Type64
- Configuring Port Parameters65
- Figure 15: Port Configuration (Port) Menu65
- Configuring Head of Line Blocking69
- Figure 16: Head of Line Blocking69
- Configuring Flow Control and Back Pressure71
- Figure 17: Flow Control Menu72
- Configuring Port Filtering73
- Figure 18: Filtering Menu73
- Setting up Rate Limiting75
- Figure 19: Rate Limiting Menu75
- Resetting a Port77
- Forcing Port Renegotiation78
- Resetting the Port Configuration to the Default Settings79
- Displaying Port Statistics80
- Figure 20: Port Statistics Menu80
- Figure 21: Display Port Statistics Menu81
- Clearing Port Statistics83
Chapter 3: Enhanced Stacking85
- Setting a Switch's Enhanced Stacking Status86
- Figure 22: Enhanced Stacking Menu86
- Selecting a Switch in an Enhanced Stack88
- Figure 23: Stacking Services Menu88
- Figure 24: Stacking Services Menu with List of Switches89
- Returning to the Master Switch91
- Displaying the Enhanced Stacking Status92
- Figure 25: Enhanced Stacking Menu92
Chapter 4: Snmpv1 and Snmpv2C93
- Enabling or Disabling SNMP Management94
- Figure 26: SNMP Configuration Menu94
- Setting the Authentication Failure Trap95
- Creating an SNMP Community String96
- Figure 27: Configure Snmpv1 & Snmpv2C Community Menu96
- Modifying a Community String99
- Figure 28: Modify SNMP Community Menu99
- Deleting a Community String103
- Displaying the SNMP Community Strings104
- Figure 29: Display SNMP Community Menu104
Chapter 5: MAC Address Table105
- Displaying the MAC Address Tables106
- Figure 30: MAC Address Tables Menu106
- Figure 31: Display Unicast MAC Addresses Menu106
- Figure 32: Display All Menu - Unicast MAC Addresses107
- Figure 33: Display All Menu - Multicast MAC Addresses108
- Adding Static Unicast and Multicast MAC Addresses110
- Figure 34: MAC Addresses Configuration Menu110
- Deleting Unicast and Multicast MAC Addresses112
- Deleting All Dynamic MAC Addresses113
- Changing the Aging Time114
Chapter 6: Static Port Trunks115
- Creating a Static Port Trunk116
- Figure 35: Port Trunking and LACP Menu116
- Figure 36: Static Port Trunking Menu117
- Figure 37: Create Trunk Menu118
- Modifying a Static Port Trunk120
- Figure 38: Modify Trunk Menu121
- Deleting a Static Port Trunk123
Chapter 7: LACP Port Trunks125
- Enabling or Disabling LACP126
- Figure 39: LACP (IEEE 8023Ad) Configuration Menu126
- Setting the LACP System Priority128
- Creating an Aggregator129
- Figure 40: Create LACP (IEEE 8023Ad) Aggregator Menu130
- Modifying an Aggregator132
- Figure 41: Modify LACP (IEEE 8023Ad) Aggregator Menu132
- Deleting an Aggregator134
- Displaying LACP Port and Aggregator Status135
- Figure 42: LACP (IEEE 802.3Ad Port Status Menu135
- Figure 43: LACP (IEEE 802.3Ad) Aggregator Status Menu136
Chapter 8: Port Mirroring137
- Creating a Port Mirror138
- Figure 44: Port Mirroring Menu #1138
- Figure 45: Port Mirroring Menu #2138
- Disabling a Port Mirror140
- Modifying a Port Mirror141
- Displaying the Port Mirror142
- Figure 46: Port Mirroring Menu142
Section II: Advanced Operations143
Chapter 9: File System145
- Working with Boot Configuration Files146
- Copying a System File154
  - Examples155
- Renaming a System File156
  - Examples157
- Deleting a System File158
- Displaying System Files159
- Working with Flash Memory162
- Working with the Compact Flash Card164
Chapter 10: File Downloads and Uploads167
- Downloading the AT-S63 Image File Onto a Switch168
- Uploading the AT-S63 Image File Switch to Switch176
  - Guidelines176
- Uploading an AT-S63 Configuration File Switch to Switch179
  - Guidelines179
- Downloading a System File182
- Uploading a System File190
Chapter 11: Event Logs and the Syslog Client197
- Working with the Event Logs198
- Configuring Log Outputs209
Chapter 12: Classifiers219
- Creating a Classifier220
- Figure 71: Security and Services Menu220
- Figure 72: Classifier Configuration Menu221
- Figure 73: Create Classifier Menu221
- Figure 74: Create Classifier Menu222
- Modifying a Classifier224
- Deleting a Classifier226
- Deleting All Classifiers227
- Displaying Classifiers228
- Figure 75: Show Classifiers Menu228
- Figure 76: Display Classifier Details Menu229
- Figure 77: Display Classifier Details Menu230
Chapter 13: Access Control Lists231
- Creating an ACL232
- Figure 78: Access Control Lists (ACL) Menu232
- Figure 79: Create ACL Menu233
- Modifying an ACL235
- Figure 80: Modify ACL Menu235
- Deleting an ACL237
- Figure 81: Destroy ACL Menu237
- Deleting All Acls239
- Displaying Acls240
- Figure 82: Show Acls Menu240
- Figure 83: Display ACL Details Menu241
Chapter 14: Class of Service243
- Configuring Cos244
- Figure 84: Class of Service (Cos) Menu244
- Figure 85: Configure Port COS Priorities Menu245
- Mapping Cos Priorities to Egress Queues247
- Figure 86: Map Cos Priority to Egress Queue Menu247
- Configuring Egress Scheduling248
- Figure 87: Configure Egress Scheduling Menu248
- Displaying Port Cos Priorities250
- Figure 88: Show Port Cos Priorities Menu250
Chapter 15: Quality of Service251
- Managing Flow Groups252
- Managing Traffic Classes261
- Managing Policies271
Chapter 16: Denial of Service Defenses279
- Configuring Denial of Service Defense280
- Figure 107: Denial of Service (Dos) Menu280
- Figure 108: LAN IP Subnet Menu280
- Figure 109: SYN Flood Configuration Menu282
Chapter 17: Power over Ethernet283
- Setting the Poe Threshold284
- Figure 110: Power over Ethernet Configuration Menu284
- Figure 111: Poe Global Configuration Menu284
- Configuring Poe Port Settings286
- Figure 112: Poe Port Configuration Menu286
- Displaying Poe Status and Settings288
- Figure 113: Poe Status Menu288
- Figure 114: Poe Global Status Menu289
- Figure 115: Poe Summary Ports Status Menu290
- Figure 116: Poe Summary Ports Status Menu291
- Figure 117: Poe Device Information292
Section III: IGMP Snooping, MLD Snooping, and RRP Snooping293
Chapter 18: IGMP Snooping295
- Configuring IGMP Snooping296
- Figure 118: Advanced Configuration Menu296
- Figure 119: IGMP Snooping Configuration Menu297
- Enabling or Disabling IGMP Snooping300
- Displaying a List of Host Nodes301
- Figure 120: View IGMP Multicast Hosts List Menu301
- Displaying a List of Multicast Routers303
- Figure 121: View IGMP Multicast Routers List Menu303
Chapter 19: MLD Snooping305
- Configuring MLD Snooping306
- Figure 122: MLD Snooping Configuration Menu306
- Enabling or Disabling MLD Snooping309
- Displaying a List of Host Nodes310
- Figure 123: View MLD Multicast Hosts List Menu310
- Displaying a List of Multicast Routers312
- Figure 124: View MLD Multicast Routers List Menu312
Chapter 20: RRP Snooping315
- Enabling or Disabling RRP Snooping316
- Figure 125: RRP Snooping Menu316
Section IV: Snmpv3317
Chapter 21: Snmpv3319
- Configuring Snmpv3 Entities320
- Configuring the Snmpv3 User Table321
- Configuring the Snmpv3 View Table331
- Configuring the Snmpv3 Access Table340
- Configuring the Snmpv3 Securitytogroup Table356
- Configuring the Snmpv3 Notify Table364
- Configuring the Snmpv3 Target Address Table372
- Configuring the Snmpv3 Target Parameters Table385
- Configuring the Snmpv3 Community Table398
- Displaying Snmpv3 Table Menus408
Section V: Spanning Tree Protocols417
Chapter 22: Spanning Tree and Rapid Spanning Tree Protocols419
- Enabling or Disabling a Spanning Tree Protocol420
- Figure 152: Spanning Tree Configuration Menu420
- Configuring STP422
- Configuring RSTP430
Chapter 23: Multiple Spanning Tree Protocol439
- Selecting MSTP as the Active Spanning Tree Protocol440
- Configuring MSTP Bridge Settings441
- Figure 162: MSTP Configuration Menu441
- Configuring the CIST Priority445
- Figure 163: CIST Menu445
- Displaying the CIST Priority447
- Figure 164: MSTI Menu447
- Creating, Deleting, and Modifying MSTI Ids449
- Adding, Removing, and Modifying VLAN Associations to MSTI Ids452
- Configuring MSTP Port Settings457
- Displaying the MSTP Port Configuration463
- Figure 169: Display MSTP Port Configuration Menu463
- Displaying the MSTP Port State465
- Figure 170: Display MSTP Port State Menu466
- Resetting MSTP to the Defaults468
Section VI: Virtual Lans469
Chapter 24: Port-Based and Tagged Vlans471
- Creating a Port-Based or Tagged VLAN472
- Figure 171: VLAN Configuration Menu472
- Figure 172: Configure Vlans Menu473
- Figure 173: Create VLAN Menu473
- Example of Creating a Port-Based VLAN477
- Example of Creating a Tagged VLAN479
- Modifying a Port-Based or Tagged VLAN481
- Figure 174: Modify VLAN Menu481
- Figure 175: Expanded Modify VLAN Menu482
- Displaying Vlans485
- Figure 176: Show Vlans Menu485
- Deleting a Port-Based or Tagged VLAN487
- Figure 177: Delete VLAN Menu487
- Figure 178: Expanded Delete VLAN Menu488
- Deleting All Vlans490
- Displaying Pvids492
- Figure 179: Show Pvids Menu492
- Enabling or Disabling Ingress Filtering493
Chapter 25: GARP VLAN Registration Protocol495
- Configuring GVRP496
- Figure 180: GARP-GVRP Menu496
- Enabling or Disabling GVRP on a Port498
- Figure 181: GVRP Port Parameters Menu498
- Figure 182: Configure GVRP Port Settings Menu499
- Converting a Dynamic GVRP VLAN500
- Displaying the GVRP Port Configuration501
- Figure 183: Display GVRP Port Configuration Menu501
- Displaying GVRP Counters502
- Figure 184: Other GVRP Parameters Menu502
- Figure 185: GVRP Counters Menu503
- Figure 186: GVRP Counters Menu504
- Table 15: GVRP Counters504
- Displaying the GVRP Database507
- Figure 187: GVRP Database Menu507
- Displaying the GIP Connected Ports Ring509
- Figure 188: GIP Connected Ports Ring Menu509
- Displaying the GVRP State Machine511
- Figure 189: GVRP State Machine Menu511
- Figure 190: Display GVRP State Machine Menu512
- Table 16: GVRP State Machine Parameters512
Chapter 26: Multiple VLAN Modes515
- Selecting a VLAN Mode516
- Displaying VLAN Information518
- Figure 191: VLAN Configuration Menu (Multiple VLAN Mode)518
- Figure 192: Show Vlans Menu, Multiple VLANS519
Chapter 27: Protected Ports Vlans521
- Creating a Protected Ports VLAN522
- Figure 193: Create VLAN Menu522
- Modifying a Protected Ports VLAN525
- Figure 194: Expanded Modify VLAN Menu526
- Displaying a Protected Ports VLAN528
- Figure 195: Show Vlans Menu528
- Figure 196: Show Vlans Menu529
- Deleting a Protected Ports VLAN530
- Figure 197: Delete VLAN Menu530
- Figure 198: Expanded Delete VLAN Menu531
Chapter 28: MAC Address-Based Vlans533
- Creating a MAC Address-Based VLAN534
- Adding and Deleting MAC Addresses536
- Figure 199: MAC Based Vlans Menu536
- Adding and Deleting Egress Ports538
- Deleting a MAC Address-Based VLAN540
- Figure 200: Delete VLAN Menu540
- Figure 201: Expanded Delete VLAN Menu541
- Displaying MAC Address-Based Vlans542
- Figure 202: Show Vlans Menu with MAC Address-Based Vlans542
- Figure 203: Detail Information Display543
Section VII: Internet Protocol Routing545
Chapter 29: Internet Protocol Version 4 Routing Interfaces547
- Creating a New Routing Interface548
- Figure 204: Configure Interface Menu548
- Figure 205: Create Interface Menu549
- Modifying a Routing Interface551
- Figure 206: Modify Interface Menu552
- Deleting a Routing Interface554
- Displaying the IP Address of the Local Interface555
- Setting the Default Route or Default Gateway556
- Setting the Local Interface557
- Setting the ARP Cache Timeout558
Section VIII: Port Security559
Chapter 30: MAC Address-Based Port Security561
- Configuring MAC Address Port Security562
- Figure 207: Port Security Menu562
- Figure 208: Configure Port Security Menu #1562
- Figure 209: Configure Port Security Menu #2564
- Displaying Port Security Levels566
- Figure 210: Display Port Security Menu566
Chapter 31: 802.1X Port-Based Network Access Control569
- Setting Port Roles570
- Figure 211: Port Access Control (802.1X) Menu570
- Figure 212: Configure Port Access Role Menu571
- Enabling or Disabling 802.1X Port-Based Network Access Control572
- Configuring Authenticator Port Parameters573
- Figure 213: Configure Authenticator Menu573
- Figure 214: Configure Authenticator Port Access Parameters Menu574
- Configuring Supplicant Port Parameters579
- Figure 215: Configure Supplicant Menu579
- Figure 216: Configure Supplicant Port Access Parameters Menu580
- Displaying the Port Access Parameters582
- Figure 217: Display Port Access Status Menu582
- Configuring RADIUS Accounting584
- Figure 218: Radius Accounting Menu584
Section IX: Management Security587
Chapter 32: Web Server589
- Configuring the Web Server590
- Figure 219: Web Server Configuration Menu590
- Figure 220: Web Server Configuration Menu Configured for HTTPS591
- General Steps for Configuring the Web Server for Encryption593
  - General Steps for a Self-Signed Certificate593
  - General Steps for a Public or Private CA Certificate593
Chapter 33: Encryption Keys595
- Creating an Encryption Key596
- Figure 221: Keys/Certificate Configuration Menu596
- Figure 222: Key Management Menu597
- Figure 223: Create Key Menu597
- Deleting an Encryption Key600
- Modifying an Encryption Key601
- Exporting an Encryption Key602
- Figure 224: Export Key to File Menu603
- Importing an Encryption Key605
- Figure 225: Import Key from File Menu606
- Displaying the Encryption Keys608
- Figure 226: Key Management Menu608
Chapter 34: PKI Certificates and SSL611
- Creating a Self-Signed Certificate612
- Figure 227: Public Key Infrastructure (PKI) Configuration Menu613
- Figure 228: X509 Certificate Management Menu613
- Figure 229: Create Self-Signed Certificate Menu614
- Adding a Certificate to the Database616
- Figure 230: Add Certificate Menu616
- Modifying a Certificate619
- Figure 231: Modify Certificate Menu620
- Deleting a Certificate622
- Viewing a Certificate624
- Figure 232: View Certificate Details Menu625
- Figure 233: View Certificate Details Menu626
- Generating an Enrollment Request627
- Figure 234: Generate Enrollment Request Menu628
- Installing CA Certificates Onto a Switch630
- Viewing and Configuring the Maximum Number of Certificates631
- Configuring SSL632
- Figure 235: Secure Socket Layer (SSL) Menu632
Chapter 35: Secure Shell (SSH)633
- Configuring SSH634
- Figure 236: Secure Shell (SSH) Menu634
- Displaying SSH Information637
- Figure 237: Show Server Information Menu637
Chapter 36: TACACS+ and RADIUS Protocols639
- Enabling or Disabling Server-Based Management Authentication640
- Figure 238: Authentication Configuration Menu640
- Configuring the TACACS+ Client642
- Figure 239: TACACS+ Client Configuration Menu642
- Displaying the TACACS+ Settings644
- Figure 240: TACACS+ Client Configuration Menu644
- Configuring the RADIUS Client645
- Figure 241: RADIUS Client Configuration645
- Figure 242: RADIUS Server Configuration646
- Displaying RADIUS Status and Settings648
- Figure 243: Show Status Menu648
Chapter 37: Management Access Control List651
- Enabling or Disabling the Management ACL652
- Figure 244: Management ACL Configuration Menu652
- Creating an ACE654
- Modifying an ACE656
- Figure 245: Modify Management ACL Entry656
- Deleting an ACE658
- Displaying the Aces659
- Figure 246: Display All Management ACL Entries Menu659
Index661

Allied Telesis AT-9400 - Chapter 27: Protected Ports VLANs

Table of Contents

Related product manuals