Allied Telesis 2.6.1 guide

84	AT-8800 Series Switch User Guide

Figure 16: Example output from the SHOW SWITCH FILTER command.

Switch Filters

---------------------------------------------------------------------------

EntryVLAN Destination Address Port Action Source

---------------------------------------------------------------------------


0	default	(1)		aa-ab-cd-00-00-01	1	Forward	static
1	default	(1)		aa-ab-cd-00-00-02	1	Forward	static
0	marketing		(2)	aa-ab-cd-00-00-01	2	Discard	static
1	marketing		(2)	aa-ab-cd-00-00-02	2	Discard	learn

---------------------------------------------------------------------------

Table 13: Parameters in the output of the SHOW SWITCH FILTER command

Parameter	Meaning

Entry	The number identifying the filter entry.

Destination Address	The destination MAC address for the entry.

VLAN	The VLAN name and identifier for the entry.

Port	The outbound port to match for the filter entry to be applied.

Action	The action specified by the filter entry; one of “Forward” or
	“Discard”.

Source	This parameter is either “static” (indicating the filter is a static
	filter) or “learned” (indicating the filter is present either
	because it has been added with the LEARN parameter of the
	SET SWITCH PORT command, or has been dynamically learned
	during normal intrusion detection operation).

For each VLAN, the destination MAC address of a frame to be forwarded is checked against the Forwarding Database. If there is no entry for the destination address and VLAN, the frame is transmitted on all ports in the VLAN that are in the ‘Forwarding’ or ‘Disabled’ states, except the port on which the frame was received. This process is referred to as flooding. If an entry is found in the Forwarding Database, but the entry is not marked as ‘Forwarding’ or the entry points to the same port the frame was received on, the frame is discarded. Otherwise, the frame is transmitted on the port specified by the entry in the Forwarding Database.

A dynamic entry is automatically deleted from the Forwarding Database when its ageing timer expires.

Software Release 2.6.1 C613-02039-00 REV A

Image 84

Allied Telesis 2.6.1 manual Example output from the Show Switch Filter command

Contents

AT-8800 Series Switch Page Contents Operating the switch AT-8800 Series Switch User Guide Maintenance and Troubleshooting Page Introducing the AT-8800 Series Switch Why Read this User Guide?Chapter Where To Find More Information AT-8800 Series Switch Documentation Set Features of the AT-8800 Series Switch Online Technical SupportIntroduction Management Features Software Features Special Feature Licences Do if You Clear Flash Memory Completely on Getting Started with the Command Line Interface CLI This Chapter Connecting a Terminal or PC Terminal Communication ParametersParameters for terminal communication Value Enter the password at the password prompt Getting Started with the Command Line Interface CLILogging Assigning an IP Address Setting Routes To change the IP address for an interface, enter the command Changing a Password Choosing a PasswordTo add a static route, enter the command Using the Commands Not available Getting Command Line Help To display the current help file, enter the commandAliases Enabling Special Feature Licences Setting System Parameters Getting Started with the Graphical User Interface GUI Getting Started with the Graphical User Interface GUI What is the GUI? Accessing the Switch via the GUIBrowser and PC Setup Supported browsers and operating systems Http Proxy Servers Establishing a Connection to the Switch See Option 3 Connecting to an Installed Switch onSee Option 1 Configuring the Switch before Installation on See Option 2 Installing the Switch into the LAN on Option 1 Configuring the Switch before Installation Use this procedure ifSee Http Proxy Servers on page 23 for more information Option 2 Installing the Switch into the LAN Default username is managerAt the login prompt, enter the user name and password Plug the switch into the LAN See Secure Access on page 29 for more information Assign the vlan1 interface an IP address Option 3 Connecting to an Installed Switch Find out the IP address of the switch’s interfaceSelect a PC If necessary, bypass the Http proxy server Secure Access Create a Security Officer user account Then enter the password for CIPHER, sbr4y3 To enable system security, use the commandTo create an RSA key pair, use the command System Status System Status Using the GUI Navigation and Features Configuration MenuUsing Configuration Pages Quality of Service and traffic filters An example of a configuration page with a selection table Editable Fields Management Menu Monitoring Menu Diagnostics Menu Changing the PasswordContext Sensitive GUI Help Saving Configuration Entered with the GUI Combining GUI and CLI ConfigurationConfiguring Multiple Devices To upgrade the GUI Then delete the GUI resource file, using the commandLoad the new file onto the switch Upgrading the GUI Troubleshooting Install the new file as the preferred GUIPoint your web browser at the switch’s IP address Accessing the Switch via the GUI Deleting Temporary Files Traffic Flow Solution SolutionsIP Addresses and Dhcp Time and NTP Loading Software Page Using Scripts on User Accounts and PrivilegesSnmp and MIBs on A Security Officer prompt looks like Login Normal Mode and Security Mode To display the current operating mode, enter the commandOperating the switch Specific Parameters Remote Management Storing Files in Flash Memory Using Scripts Example output from the Show File command Saving the Switch’s Configuration Storing Multiple Scripts Loading and Uploading Files File Naming ConventionsFile extensions and file types Extension File type/function Loading Files SPA Setting Loader Defaults Example Load a Patch File Using HttpTo load a patch file Configure the Loader Download the patch file Uploading Files From the Switch Example Upload a Configuration File Using TftpMore information To upload a log file Upgrading Switch Software Example Upgrade to a New Software Release Using To upgrade to a new software releaseLoad the new release file onto the switch Enter the licence password for the software release Make the release the default permanent releaseEnter licence information for the release Test the release Example Upgrade to a new patch file To upgrade to a new patch fileCheck that the file is successfully loaded Using the Built-in Editor Snmp and MIBs Where interface is the name of an interface, such as vlan11 For More About Operations and Facilities AT-8800 Series Switch User Guide Switch Ports Enabling and Disabling Switch Ports To enable or disable a switch port, use the commands To display information about switch ports, use the command STP Autonegotiation of Port Speed and Duplex Mode Port Trunking Speed 10/100 Show VLAN=ALL Layer 2 Switching Packet Storm Protection Port Mirroring Port security Example output from the Show Switch Port Intrusion command Virtual Local Area Networks VLANs Vlan Tagging Tpid Format of user priority and Vlan data in an Ethernet frame Vlan Membership using Vlan Tags Vlan membership of example of a network using tagged ports Vlan Membership of Untagged PacketsMember ports Creating VLANs Vlans with untagged ports To add tagged ports to a VLAN, use the command To destroy a VLAN, use the command Summary of Vlan tagging rules Protected VLANsVlan Interaction with STPs and Trunk Groups Layer 2 Switching Process Generic Vlan Registration Protocol GvrpIngress Rules Learning Process Forwarding Process Layer 2 Filtering Example output from the Show Switch Filter command Quality of Service Egress Rules Spanning Tree Protocol STP Spanning Tree Modes Spanning Tree and Rapid Spanning Tree Port States Spanning tree port states State MeaningRapid Spanning Tree port states State Meaning Configuring STP SET STP=stpnameALL PRIORITY=0..65535 Example output from the Show STP command Do not occur Switch Max Age Parameter Meaning To display STP port information, use the command 94AT-8800 Series Switch User Guide Example output from the Show STP Port command To show STP counters, use the command 96AT-8800 Series Switch User Guide ReceiveTransmit Discarded Interfaces to Layer 3 Protocols Igmp Snooping Disable Igmpsnooping Example output from the Show IP Igmp command Group List Triggers EventDescription Parameters Layer Then use either of the following commands Displays the interfaces enabled for IP routing FigureInternet Protocol IP IP Multicasting Routing Information Protocol RIP Novell IPXLayer 103 Example output from the Show IPX Circuit command AppleTalk Resource Reservation Protocol Rsvp Layer 105Page Maintenance and Troubleshooting How the Switch Starts Up Switch startup messages How to Avoid Problems Set system territory Watch for software updates What to Do if You Clear Flash Memory Completely If you accidentally do this, you will need to What to Do if Passwords are Lost What to Do if the PPP Link Disconnects RegularlyGetting the Most Out of Technical Support Resetting Switch Defaults Checking Connections Using PingTo get debugging output, enter the command Maintenance and Troubleshooting 113 Troubleshooting IP Configurations To set Ping defaults, enter the commandStop a Ping that is in progress, enter the command Telnet Fails Troubleshooting Dhcp IP Addresses Your switch is acting as a Dhcp clientYour switch is acting as a Dhcp server Maintenance and Troubleshooting 115 Troubleshooting IPX Configurations To check that the PPP link is active, enter the commandLocal Workstations Can Not Access Remote Servers No Routes are Visible to the Remote Router Using Trace Route for IP Traffic Check route tables To halt a trace route that is in progress, enter the command