Name: Allied Telesis AT-GS950/16
Brand: Allied Telesis
Rating: 4 (1 reviews)

To Next Page

To Previous Page

241

Chapter 18

Access Control Configuration

This chapter contains a description of the AT-GS950/16 switch’s Access

Control Configuration feature and the procedures to create, modify, and

delete an Access Control configuration. This chapter contains the following

sections.

 “Overview” on page 242

 “Policy Settings” on page 243

 “Rate Control Settings” on page 251

 “Policy Database” on page 254

Default Chapter3
- Table of Contents3
List of Figures11
List of Tables15
Preface17
- Document Conventions18
- Allied Telesis Contact Information19
- Getting Started21
Chapter 1 : Starting a Web Browser Session23
- Establishing a Remote Connection to the Web Browser Interface24
- Figure 1. Entering a Switch's IP Address in the URL Field24
- Figure 2. Management Login Dialog Box24
- Figure 3. AT-GS950/16 Switch Information Page25
- Figure 4. Front Panel Page26
- Web Browser Tools27
- Quitting a Web Browser Management Session28
Chapter 2 : System Configuration29
- System Management Information30
- Figure 5. AT-GS950/16 Management Page30
- Configuration of Ipv4 Address, Subnet Mask and Gateway Address32
- Figure 6. Ipv4 Setup Page32
- Ipv6 System Configuration34
- Figure 7. Ipv6 System Settings Page34
- Ipv6 Neighbor Configuration36
  - Create an Ipv6 Neighbor List36
  - Figure 8. Ipv6 Neighbor Settings Page36
  - Delete an Ipv6 Neighbor Entry37
  - Find an Ipv6 Neighbor37
  - Figure 9. Ipv6 Neighbor Settings Page with Addresses37
  - Figure 10. Example Search with Neighbor Ipv6 Address38
  - Figure 11. Example Search with Link Layer MAC Address38
  - Figure 12. Example Search with both Addresses39
- IP Access List Configuration40
  - Create an IP Access List40
  - Figure 13. IP Access List Page40
  - Delete an IP Address List Entry41
- User Name and Password Configuration42
  - Add New User Name and Password42
  - Figure 14. Administration Page42
  - Modify User Name and Password43
  - Figure 15. Administration Page Example43
  - Delete User Name and Password44
  - Figure 16. Modify Administration Page44
- User Interface Configuration45
  - SNMP Interface45
  - Figure 17. User Interface Page45
  - User Interface Timeout46
  - Group Interval46
- System Time47
  - Manually Setting System Time47
  - Figure 18. System Time Page47
  - Setting SNTP48
  - Setting Daylight Savings Parameters49
- SSL Settings50
  - Configuring SSL50
  - Figure 19. SSL Settings Page50
- DHCP and ATI Web Discovery Tool52
- DHCP Client Configuration53
  - Activate or Deactivate DCHP for Ipv453
  - Activate or Deactivate DCHP for Ipv654
- DHCP Auto Configuration56
- Figure 20. DHCP Auto Configuration Settings Page56
- System Information Display57
- Figure 21. AT-GS950/16 Switch Information Page57
- System Log Configuration60
- Figure 22. System Log Configuration Page60
- Bridge Configuration63
Chapter 3 : Port Configuration65
- Overview66
- Displaying and Configuring Ports67
- Figure 23. AT-GS950/16 Physical Interface Page67
Chapter 4 : STP and RSTP71
- Overview72
- STP and RSTP Global Settings81
- Figure 28. Spanning Tree Protocol Settings Page81
- STP and RSTP Port Settings84
- Figure 29. Port Settings Page84
Chapter 5 : Multiple Spanning Tree Protocol87
- MSTP Global Settings88
- Figure 30. Spanning Tree Protocol Settings Page88
- Generic MSTP Port Settings91
- Figure 31. Port Settings Page91
- MST Settings94
- MST Port Settings96
- Figure 33. MST Port Settings Page96
- Instance Information98
- Figure 34. Instance Information Page98
Chapter 6 : Static Port Trunking99
- Overview100
- Figure 35. Static Port Trunk Example100
- Create a Port Trunk103
- Figure 36. Trunking Page103
- Modify a Port Trunk105
- Disable a Port Trunk107
Chapter 7 : LACP Port Trunks109
- Overview110
- System Priority111
- Port Priority Value112
- General Guidelines113
- Group Status115
- Port Priority Configuration118
- Figure 40. AT-GS950/16 Port Priority Page118
Chapter 8 : Port Mirroring119
- Overview120
- Port Mirroring Configuration121
- Figure 41. AT-GS950/16 Mirroring Page121
- Disable Port Mirroring123
Chapter 9 : Loopback Protection125
- Configuration126
- Figure 42. AT-GS950/16 Loopback Detection Page126
- Status128
Chapter 10 : MAC Address Table129
- Overview130
- Static Unicast MAC Address Configuration132
- Figure 43. AT-GS950/16 Static Unicast Address Table Page132
- Figure 44. Static Unicast Address Table with Port-Based VLAN Example133
- Modify Static Unicast Address134
- Figure 45. Modify Static Unicast Address Page134
- Delete Static Unicast Address135
- Static Multicast Address Configuration136
- Figure 46. Static Multicast Address Table Page136
- Figure 47. Static Multicast Address Table Example137
- Modify Static Multicast Address139
- Figure 48. Modify Static Multicast Address Page139
- Delete Static Multicast Address140
Chapter 11 : IGMP Snooping141
- Overview142
- IGMP Snooping Configuration144
- Figure 49. IGMP Snooping Settings Page144
- Figure 50. IGMP Snooping Page with MAC Address146
- IGMP Snooping Router Port Modification147
- Figure 51. IGMP Snooping Router Port Page147
- Figure 52. Modify IGS Static Router Port Page147
Chapter 12 : Storm Control149
- Overview150
  - Ingress Rate Limiting151
  - Egress Rate Limiting151
- Configuration152
- Figure 53. AT-GS950/16 Storm Control Page152
- Ingress Rate Limiting154
- Figure 54. AT-GS950/16 Ingress Rate Limiting Page154
- Egress Rate Limiting156
- Figure 55. AT-GS950/16 Egress Rate Limiting Page156
Chapter 13 : Virtual Lans157
- VLAN Overview158
- Assign Ports to a VLAN Mode164
- Figure 56. AT-GS950/16 VLAN Mode Page164
- Tagged VLAN Configuration166
- Tagged VLAN Port Settings171
- Figure 60. AT-GS950/16 VLAN Port Settings Page171
- Port-Based VLAN Configuration173
- Select MAC Address Forwarding Table Mode176
- Figure 64. Forwarding Table Mode Page176
- View Dynamic Forwarding Table177
- Figure 65. Dynamic Forwarding Table Page177
- Private VLAN Configuration179
- View Current VLAN Database182
- Figure 67. VLAN Current Database Page182
Chapter 14 : GVRP185
- Overview and Guidelines186
- General Configuration187
- Figure 68. GVRP Global Settings Page187
- Port Settings188
- Figure 69. GVRP Port Settings Page188
- Time Settings190
- Figure 70. AT-GS950/16 GVRP Time Settings Page190
Chapter 15 : Quality of Service and Class of Service193
- Overview194
- Mapping Cos Priorities to Egress Queues198
- Figure 71. Cos Page198
- Associate Ports to Cos Priorities200
- Figure 72. AT-GS950/16 Port Priority Page200
- Associate DSCP Classes to Egress Queues201
- Figure 73. DSCP Class Mapping Page201
- Queue Scheduling Algorithm203
- Figure 74. Scheduling Algorithm Page203
- Ipv6 Traffic Class Mapping204
- Advanced Features207
Chapter 16 : Snmpv1 and V2C209
- Snmpv1 and Snmpv2C Overview210
- Trap Receiver Attributes211
- Activate SNMP Interface212
- Snmpv1 and Snmpv2C User and Group Names213
- SNMP Community Strings216
- SNMP Traps219
Chapter 17 : Snmpv3223
- Overview224
- Snmpv3 User and Group Names228
- Snmpv3 View Names231
- Snmpv3 View Table234
- Snmpv3 Traps237
- SNMP Engine ID238
Chapter 18 : Access Control Configuration241
- Overview242
- Policy Settings243
- Rate Control Settings251
- Policy Database254
Chapter 19 : RMON257
- Overview258
- Enable and Disable RMON259
- Figure 101. RMON Basic Settings Page259
- Port Statistics260
- Figure 102. Ethernet Statistics Settings Page260
- Figure 103. Ethernet Statistics Configuration Example261
- Histories262
- Figure 104. History Control Settings Page262
- Figure 105. History Control Configuration Example263
- Events264
- Figure 106. RMON Event Settings Page264
- Figure 107. RMON Event Configuration Example265
- Alarms266
- Figure 108. RMON Alarm Settings Page267
- Figure 109. RMON Alarm Configuration Example268
Chapter 20 : Voice VLAN269
- Overview270
- General Guidelines273
- Configuration274
- Figure 110. AT-GS950/16 Voice VLAN Settings Page274
- OUI Setting277
Chapter 21 : Security279
- Port Access Control280
- RADIUS Client286
- Tacacs289
- Dial-In User- Local Authentication292
- Destination MAC Filter295
Chapter 22 : DHCP Snooping299
- Overview300
- General Guidelines302
- General Configuration303
- VLAN Setting306
- Trusted and Untrusted Port Configuration308
- Figure 123. AT-GS950/16 Trusted Interfaces Page308
- Figure 124. Trusted Interfaces Page Example309
- Binding Database310
Chapter 23 : LLDP313
- Overview314
- Global Configuration315
- Neighbors Information318
- Figure 128. LLDP Neighbors Information Page318
Chapter 24 : Network Statistics319
- Overview320
- Traffic Comparison Statistics321
- Figure 129. Traffic Comparison Chart Page321
- Table 5 Traffic Comparison Options322
- Figure 130. Traffic Comparison Page Example324
- Error Group Statistics325
- Figure 131. Error Group Chart Page325
- Historical Status Statistics327
- Figure 132. Historical Status Chart Page327
- Table 6 Historical Status Options328
- Figure 133. Historical Statistics Page Example330
- Tools331
Chapter 25 : Software/Configuration Updates333
- Chapter 25, "Software/Configuration Updates333
- Overview334
- Upgrade Firmware Image Via HTTP335
- Figure 134. Firmware Upgrade Via HTTP Page336
- Upgrade Firmware Image Via TFTP337
- Figure 135. Firmware Upgrade Via TFTP Page338
- Download or Upload a Configuration File Via HTTP339
- Download or Upload a Configuration File Via TFTP343
Chapter 26 : Cable Diagnostics345
- Chapter 26, "Cable Diagnostics345
- Figure 142. Cable Diagnostics Page345
Chapter 27 : LED ECO Mode347
- Chapter 27, "LED ECO Mode347
- Enable LED ECO Mode348
- Figure 143. LED ECO Mode Page348
- Figure 144. LED ECO Mode Enabled348
- Disable LED ECO Mode349
- Figure 145. LED ECO Mode in Enabled State349
- Figure 146. LED ECO Mode Disabled349
Chapter 28 : Energy-Efficient Ethernet351
- Chapter 28, "Energy-Efficient Ethernet351
- Enable EEE352
- Figure 147. IEEE 802.3Az EEE Page352
- Disable EEE353
Chapter 29 : Rebooting the AT-GS950/16355
- Chapter 29, "Rebooting the AT-GS950/16355
- Figure 148. Factory Default Reset/Reboot Page356
- Switch Reboot356
- Configure Factory Default Values358
- Password Protection of Factory Reset360
Chapter 30 : Pinging a Remote System365
- Chapter 30, "Pinging a Remote System365
- Figure 152. Ping Test Settings Page365
- Figure 153. Ping Test Results Page366
Appendix A: MSTP Overview367
- Overview368
- Multiple Spanning Tree Instance (MSTI)370
- General Guidelines373
- VLAN and MSTI Associations374
- Ports in Multiple Mstis375
- Multiple Spanning Tree Regions376
- Associating Vlans to Mstis381
- Figure 157. CIST and VLAN Guideline - Example 1381
- Figure 158. CIST and VLAN Guideline - Example 2382
- Vlans Across Different Regions383
- Figure 159. Spanning Regions - Example 1383
- Figure 160. Spanning Regions Without Blocking384
- Summary of Guidelines385
Appendix B: AT-GS950/16 Default Parameters387
- Table 9. AT-S114 Management Software Default Settings387

Brand	Allied Telesis
Model	AT-GS950/16
Category	Network Router
Language	English

Allied Telesis AT-GS950/16 User Manual

Table of Contents

Other manuals for Allied Telesis AT-GS950/16

Questions and Answers:

Allied Telesis AT-GS950/16 Specifications

Related product manuals