Install guide

ManualsBrandsAllied Telesis ManualsSwitchAT-8824

Release Note

Software Version 2.7.4

For AT-9900, AT-8900, SwitchBlade, AT-9800, AT-8800,

Rapier i, AT-8700XL, and AT-8600 Series Switches and

AR400 and AR700 Series Routers

Introduction .......................................................................................................2

Upgrading to Software Version 2.7.4 .................................................................3

Overview of New Features .................................................................................4

VoIP Phone Calls and the Firewall .......................................................................5

SIP Application Layer Gateway .................................................................... 5

Network Address and Port Translation (NAPT) ............................................. 6

Configuring the Firewall to Allow VoIP Phone Calls ..................................... 7

New and Modified Commands ................................................................. 10

VLAN Tagging on Multiple Logical Ethernet Interfaces ......................................15

Modified Commands ................................................................................ 15

Link Discovery Protocol ....................................................................................17

New Commands: CDP .............................................................................. 17

Modified Command: Triggers ................................................................... 21

WAN Load Balancing .......................................................................................21

Inactivity Timeout ............................................................................................22

Modified Commands ................................................................................ 22

Summer Time ..................................................................................................24

New Commands: Timezone ..................................................................... 24

New Commands: Summertime ................................................................. 25

Displaying and Disabling All Active Debugging .................................................27

New and Modified Commands ................................................................. 27

Graphical User Interface (GUI) for AT-9900 Series Switches ...............................29

Using GUI Help ......................................................................................... 29

Saving Configurations Entered with the GUI ............................................. 29

Enhancements to Virtual Bridge (VLAN) MIB Support .......................................30

RADIUS Accounting and 802.1x Dynamic VLAN Assignment ............................31

Enhancements to Login Authentication ............................................................32

Modified Commands ................................................................................ 32

Firewall: Using RADIUS to Authenticate MAC Addresses ..................................34

New and Modified Commands ................................................................. 34

Firewall: Automatic Teardown of Data Connections .........................................37

Modified Commands ................................................................................ 37

OSPF: Route Filtering with Route Maps ............................................................39

Modified Commands ................................................................................ 39

OSPF: Support for Passive Interfaces .................................................................42

Modified Commands ................................................................................ 42

OSPF: Summary Routes for Routes Distributed in OSPF .....................................44

New Commands ...................................................................................... 44

OSPF: Enhancements to OSPF Ranges ..............................................................45

OSPF: Redistributing Static Routes ....................................................................46

New Commands ...................................................................................... 46

BGP: Enhancements to Prefix Filtering ..............................................................47

Support for SwitchBlade V2 .............................................................................48

Summary of content (70 pages)

PAGE 1
Release Note Software Version 2.7.4 For AT-9900, AT-8900, SwitchBlade, AT-9800, AT-8800, Rapier i, AT-8700XL, and AT-8600 Series Switches and AR400 and AR700 Series Routers Introduction .......................................................................................................2 Upgrading to Software Version 2.7.4 .................................................................3 Overview of New Features .................................................................................
PAGE 2
Introduction Release Note Introduction Allied Telesyn announces the release of Software Version 2.7.4 on the products shown in Table 1. This Release Note describes the new features in Software Version 2.7.4 on any product. The product series each feature and enhancement applies to are shown in “Overview of New Features” on page 4. Table 1: Products supported by Software Version 2.7.
PAGE 3
Software Version 2.7.4 3 Upgrading to Software Version 2.7.4 Software Version 2.7.4 is available as a flash release that can be downloaded directly from the Software Updates area of the Allied Telesyn web site at: www.alliedtelesyn.com www.alliedtelesyn.co.nz/support/updates/ Software versions must be licenced and require a password to activate. To obtain a licence and password, contact your authorised Allied Telesyn distributor or reseller. Table 2: File names for Software Version 2.7.
PAGE 4
Overview of New Features Release Note Overview of New Features This section lists the new features and enhancements by product series. For supported models, see Table 1 on page 2. ! AT-9900 AT-8900 SwitchBlade AT-9800 AT-8600 AT-8700XL AT-8800 Rapier AR750S AR7x5 AR400 Table 3: New features and enhancements in Software Version 2.7.
PAGE 5
Software Version 2.7.4 5 VoIP Phone Calls and the Firewall Software Version 2.7.4 enables you to use internet telephony (VoIP) or video conferencing and still have your LAN protected by a firewall.
PAGE 6
VoIP Phone Calls and the Firewall Release Note Network Address and Port Translation (NAPT) About NAPT Network Address and Port Translation (NAPT) translates the IP address and TCP/UDP port of packets sent to and from private side devices. NAPT expands on the existing NAT functionality, by giving you control over the UDP or TCP port numbers that the firewall assigns to each user’s sessions.
PAGE 7
Software Version 2.7.4 7 Configuring the Firewall to Allow VoIP Phone Calls This section describes how to configure the SIP ALG and NAPT on the firewall. Before you start Procedure This section describes the IP and firewall configuration. You also need to: ■ configure the underlying connection to the Internet, such as PPP or ADSL. ■ create a security officer and enable system security, if required.
PAGE 8
VoIP Phone Calls and the Firewall Release Note Figure 1: Configuration for allowing VoIP traffic through the firewall SIP proxy server Internet public: eth1 private: vlan1 10.10.10.10 192.168.1.100 RG613 RG613 RG613 residential gateway residential gateway residential gateway 192.168.1.1 192.168.1.2 192.168.1.3 fw-sip-config Software Version 2.7.
PAGE 9
Software Version 2.7.4 # Allowing VoIP phone calls through the firewall # IP and firewall configuration # Configure IP on eth1 public interface # Note: Replace 10.10.10.10 in this example with your globally-unique IP address enable ip add ip interface=eth1 ip=10.10.10.10 add ip route=0.0.0.0 mask=0.0.0.0 interface=eth1 next=ip-address-of-your-isp # Configure IP on vlan1 private interface add ip interface=vlan1 ip=192.168.1.100 mask=255.255.255.
PAGE 10
VoIP Phone Calls and the Firewall Release Note New and Modified Commands The following commands are new in Software Version 2.7.4: ■ enable firewall sipalg ■ disable firewall sipalg The following commands include new features in Software Version 2.7.4: ■ add firewall policy rule ■ enable firewall policy debug ■ disable firewall policy debug New parameter options are shown in bold in the command syntax. The following show commands include new information in Software Version 2.7.
PAGE 11
Software Version 2.7.4 11 add firewall policy rule Syntax Description of changes ADD FIREwall POLIcy=policy-name RUle=rule-id ACtion={ALLOw|DENY|NAT|NONat} INTerface=interface PROTocol={protocol|ALL|EGP|GRE|ICmp|OSPF|SA|TCP|UDP} [AFTer=hh:mm] [BEFore=hh:mm] [DAYs={MON|TUE|WED|THU|FRI|SAT|SUN|WEEKDAY| WEEKEND}[,...
PAGE 12
VoIP Phone Calls and the Firewall Release Note disable firewall policy debug Syntax Description of changes DISable FIREwall POLIcy[=policy-name] DEBug={ALL|ARP|HTTP|PACKET|PKT|PROCESS|PROXY|SMTP| RADius|TCP|UPNP|ERRORcode|MESSage|PARSing|SIPAlg|TRAce} This command disables firewall debugging, including the new debugging options for SIP ALG. Debugging is disabled by default.
PAGE 13
Software Version 2.7.
PAGE 14
VoIP Phone Calls and the Firewall Release Note Figure 3: Example output from the show firewall policy=voip command (cont.) Private Interface : eth0 Trust Private ................... Rule ............................ Action ........................ NAT type ...................... IP ............................ Protocol ...................... Port .......................... Global IP ..................... Global Port ................... Source Port ................... Days ..........................
PAGE 15
Software Version 2.7.4 15 VLAN Tagging on Multiple Logical Ethernet Interfaces Software Version 2.7.4 enables you to create up to 600 VLAN tagged logical interfaces on each Eth interface, and give them a VLAN priority. Configuration To create a VLAN tagged eth interface and give it a VLAN priority, use the command: add ip interface=eth-interface ipaddress={ipadd|dhcp} [vlantag={1..4094|none}] [vlanpriority=0..7] [other-options...
PAGE 16
VLAN Tagging on Multiple Logical Ethernet Interfaces Release Note SET IP INTerface=interface [ADVertise={YES|NO}] [PREferencelevel={-2147483648..2147483647|NOTDEFAULT}] [BROadcast={0|1}] [DIRectedbroadcast={False|NO|OFF|ON|True|YES}] [FILter={0..99|NONE}] [FRAgment={NO|OFF|ON|YES}] [GRAtuitousarp={ON|OFF}] [GRE={0..100|NONE}] [IGMPProxy={OFF|UPstream|DOWNstream}] [INVersearp={ON|OFF}] [IPaddress=ipadd|DHCP] [MASK=ipadd] [METric=1..16] [MULticast={BOTH|OFF|ON|RECeive|SENd}] [OSPFmetric=1..
PAGE 17
Software Version 2.7.4 17 Link Discovery Protocol This enhancement enables the router or switch to receive and process Cisco® Discovery Protocol packets. This enables management of certain Cisco devices. The Cisco Discovery Protocol is a link layer protocol used by Cisco devices to advertise their network layer addresses, device type and capabilities. Cisco devices regularly sent out advertisements. With this enhancement, the router or switch can read, check, and process these advertisements.
PAGE 18
Link Discovery Protocol Release Note enable lldp cdp interface Syntax ENAble LLDP CDP INTerface=interface where interface is one of: ■ ethn An Eth port, where n is the Eth port instance (for example, eth0) ■ portm A switch port, where m is the port number (for example, port2 for the switch port numbered 2).
PAGE 19
Software Version 2.7.4 19 show lldp cdp entry Syntax SHow LLDP CDP ENTry=entryname [PROTocol] [VERsion] This command displays information about a neighbour or neighbours. The entry parameter specifies the name of the neighbour you want information for. The string can be any format and can be terminated with a wild-card character (*) to match more than one device. The wild-card character can be entered on its own to match all neighbours.
PAGE 20
Link Discovery Protocol Release Note show lldp cdp neighbour Syntax SHow LLDP CDP NEIghbour [INTerface=interface] [DETail] Figure 8: Example output from the show lldp cdp neighbour command CDP neighbour information ------------------------------------------------------------------------------Device ID Loc Int Hold Capability Platform Port ID ------------------------------------------------------------------------------Switch port20 165s RSI WS-C3750G-24TS Gig 1/0/10 ---------------------------------
PAGE 21
Software Version 2.7.4 21 Modified Command: Triggers create trigger Syntax CREATE TRIGger=trigger-id MODule=LLDP EVENT={CDPAdd|CDPRemove} [AFTer=hh:mm] [BEFore=hh:mm] [{DAte=date|DAYs=day-list}] [NAMe=name] [REPeat={Yes|No|ONCe|FORever|count}] [SCript=filename...] [STAte={ENAbled|DIsabled}] [TEST={YES|NO|ON|OFF|True|False}] If you specify event=cdpadd, the trigger activates a script when the CDP discovers a new device.
PAGE 22
Inactivity Timeout Release Note Inactivity Timeout This enhancement enables you to set inactivity timeout periods on: ■ telnet and other TTY connections, by using the command set tty ■ console connections over an ASYN port, by using the command set asyn. When the idle timer expires for an ASYN connection, the user is logged out and the connection displays the login prompt. When the idle timer expires for a telnet connection, the user is logged out and the connection is terminated.
PAGE 23
Software Version 2.7.4 23 set asyn Syntax SET ASYn[=asyn-number] [IDLEtimeout={10..4294967294|OFF|0}] [other-options...] Timeout units are seconds. An asynchronous port with a value of off or zero never times out. The default is off. show asyn Syntax SHow ASYn[=asyn-number|ALL] Figure 13: Example output from the show asyn command ASYN 2:0000070953 seconds Last change at:0000009023 seconds ASYN information Name ...................... Asyn 0 Status .................... enabled Mode ......................
PAGE 24
Summer Time Release Note Summer Time This enhancement enables you to: ■ define a timezone ■ enable summer time (daylight saving time) and specify when summer time starts and ends. Once summer time is enabled, the local time automatically changes when summer time begins and ends. You still need to set the local time by using the command: set time If you set the time before configuring summer time, set the time to standard time even if summer time currently applies.
PAGE 25
Software Version 2.7.4 25 show timezone Syntax SHow TIMEZone Figure 14: Example output from the show timezone command Timezone name is set to 'NZST', offset from UTC is +12:00 New Commands: Summertime clear summertime Syntax CLear SUMMertime This command returns the summer time settings to default values (see set summertime below) disable summertime Syntax DISable SUMMertime enable summertime Syntax Software Version 2.7.
PAGE 26
Summer Time Release Note set summertime Syntax SET SUMMertime[=summertime-zone-name] [STARTDAte=date] [STARTMonth=month STARTWeek=week STARTDay=day] [STARTTime=time] [ENDDAte=date] [ENDMonth=month ENDWeek=week ENDDay=day] [ENDTime=time] [Offset=offset] where: ■ summertime-zone-name is a character string from 1 to 7 characters in length. ■ date is the date in d-mmm-yyyy, dd-mmm-yyyy, d-mmm-yy or dd-mm-yy format.
PAGE 27
Software Version 2.7.4 27 Displaying and Disabling All Active Debugging This enhancement provides an easy way to: ■ see which protocols currently have debugging enabled ■ disable debugging for all these protocols at once. New and Modified Commands show debug active Syntax SHow DEBug [ACTive={ALL|module}] where module is the name of a switch or router module from the following list: BGP, INTERFACE, IP, LACP, MSTP, OSPF, PIM, RADIUS, STP, SWITCH, TACACS, TACPLUS or VRRP.
PAGE 28
Displaying and Disabling All Active Debugging Release Note disable debug active Syntax DISABLE DEBug ACTive={ALL|module} where module is the name of a switch or router module from the following list: BGP, INTERFACE, IP, LACP, MSTP, OSPF, PIM, RADIUS, STP, SWITCH, TACACS, TACPLUS or VRRP. Software Version 2.7.
PAGE 29
Software Version 2.7.4 29 Graphical User Interface (GUI) for AT-9900 Series Switches The GUI (Graphical User Interface) is a web-based device management tool, designed to make it easier to configure and monitor the router or switch. The GUI provides an alternative to the CLI (Command Line Interface). Its purpose is to make complicated tasks simpler and regularly-performed tasks quicker.
PAGE 30
Enhancements to Virtual Bridge (VLAN) MIB Support Release Note Enhancements to Virtual Bridge (VLAN) MIB Support RFC 2674, Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering and Virtual LAN Extensions, defines a portion of the Management Information Base (MIB) for managing IEEE Standard 802.1Q VLANs.
PAGE 31
Software Version 2.7.4 31 RADIUS Accounting and 802.1x Dynamic VLAN Assignment The RADIUS server can now be configured to allow a user to be authenticated in only one place at a time. This is achieved by limiting the number of open RADIUS accounting sessions for a supplicant to one, and provides for greater security. Radius accounting is included for: ■ MAC based port authentication ■ 802.1x port authentication in single-supplicant mode.
PAGE 32
Enhancements to Login Authentication Release Note Enhancements to Login Authentication This enhancement changes the approach that the router or switch uses for authenticating users from RADIUS and the User Authentication Database. Before Software Version 2.7.4, the router or switch searched the local user database before attempting a RADIUS lookup. Software Version 2.7.4 enables you to configure the router or switch to interrogate the RADIUS server first.
PAGE 33
Software Version 2.7.4 33 show user Syntax SHow USEr[=login-name] Figure 17: Example output from the show user command Number of logged in Security Officers currently active ...1 Number of Radius-backup users.....
PAGE 34
Firewall: Using RADIUS to Authenticate MAC Addresses Release Note Firewall: Using RADIUS to Authenticate MAC Addresses This enhancement extends the firewall’s MAC address matching capabilities. It enables the firewall to send queries about MAC addresses to a RADIUS server. The response from the RADIUS server determines whether the packet is allowed or denied.
PAGE 35
Software Version 2.7.4 35 show firewall policy Syntax SHow FIREwall POLIcy=policy-name [COUnter] [DYnamic] [LISt] [SUMmary] [USer] Figure 18: Example output from the show firewall policy command Policy : admin TCP Timeout(s)..................... UDP Timeout(s)..................... Other Timeout(s)................... MAC Cache Timeout (m) ............. RADIUS Limit ...................... Accounting ........................ Enabled Logging Options ........... Enabled Debug Options .............
PAGE 36
Firewall: Using RADIUS to Authenticate MAC Addresses Release Note show firewall policy maccache Syntax SHow FIREwall POLIcy=policy-name MACCACHE Figure 19: Example output from the show firewall policy maccache command Policy : test - Cached MAC Addresses MAC Address Rule Type RADIUS Result Expiry (min) Cache Hits ------------------------------------------------------------------------------00-00-cd-0b-8c-84 Deny Deny 205 16 00-00-cd-00-ab-dc Deny Allow 996 400 00-0a-17-29-11-91 Allow Allow 360 98 --
PAGE 37
Software Version 2.7.4 37 Firewall: Automatic Teardown of Data Connections With this enhancement, the firewall can close a WAN link as soon as all TCP connections are closed. This avoids the cost of unused dial-up links such as ISDN links. The firewall detects when TCP sessions are opened and closed. You can configure triggers to activate when: ■ the first session opens, by specifying mode=start ■ the last TCP session closes, by specifying mode=end. You can also see how many sessions are open.
PAGE 38
Firewall: Automatic Teardown of Data Connections Release Note show trigger Syntax SHow TRIGger=trigger-id Figure 20: Example output from the show trigger command Trigger ..................... 1 Name ........................ Bring up Wellington link Type and details ............ Time (13:45) Days ........................ All Active TCP sessions...........0 Enabled ..................... Enabled Test ........................ No Repeat ...................... No Created/Modified ............
PAGE 39
Software Version 2.7.4 39 OSPF: Route Filtering with Route Maps This enhancement enables you to configure route maps to filter OSPF routes. Route maps allow you to configure complex flexible filters. They achieve this by having several levels of structure: ■ each route map consists of multiple entries ■ each entry consists of an action (include or exclude) and at least one clause: • zero or one match clauses, which determine which OSPF route attributes match the entry.
PAGE 40
OSPF: Route Filtering with Route Maps Release Note ADD IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] MAtch PREFIXList=name ADD IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] MAtch TAG=1..65535 Syntax for set clauses ADD IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] SET METRIC=0..4294967295 ADD IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] SET TYPE={1|2} ADD IP ROUTEMap=routemap ENTry=1..
PAGE 41
Software Version 2.7.4 Syntax for set clauses 41 SET IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] SET METRIC=0..4294967295 SET IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] SET TYPE={1|2} SET IP ROUTEMap=routemap ENTry=1..4294967295 [ACtion={INCLude|EXCLude}] SET TAG=1..65535 The routesource and prefixlist parameters use a pre-configured prefix list.
PAGE 42
OSPF: Support for Passive Interfaces Release Note OSPF: Support for Passive Interfaces OSPF passive interfaces are interfaces which do not operate as an OSPF interface, but their networks are added to the router LSA as a stub network. They do not exchange Hello packets or state transitions and have no OSPF neighbours. You can specify whether or not all interfaces are treated as passive by default.
PAGE 43
Software Version 2.7.4 43 show ospf interface Syntax SHow OSPF INTerface[=interface] [AREa={BAckbone|area-number}] [IPaddress=ipadd] [{FULl|SUMmary}] Figure 22: Example output from the show ospf interface command for a specified interface vlan1: Status ........................ Area .......................... IP address .................... IP net mask ................... IP network number ............. Type .......................... OSPF on demand ................ Passive ....................... State .
PAGE 44
OSPF: Summary Routes for Routes Distributed in OSPF Release Note OSPF: Summary Routes for Routes Distributed in OSPF This enhancement enables you to specify one or more summary address ranges. Each summary range specifies a network/mask pair. This becomes the network and mask for the external LSA that OSPF creates when any routes within the network range are distributed into OSPF.
PAGE 45
Software Version 2.7.4 45 show ospf summaryaddress Syntax SHow OSPF SUMMaryaddress Figure 23: Example output from the show ospf summaryaddress command OSPF summary addresses ----------------------------------------------------------Base IP address Mask Advertise Tag ----------------------------------------------------------192.168.1.0 255.255.255.0 Yes 13 10.3.0.0 255.255.0.
PAGE 46
OSPF: Redistributing Static Routes Release Note OSPF: Redistributing Static Routes This enhancement enables OSPF to redistribute static routes. You can also optionally specify: ■ a route map to select routes and set route parameters ■ route metric ■ metric type ■ route tag ■ whether subnets (classless network routes) can be redistributed, or only classfull network routes.
PAGE 47
Software Version 2.7.4 47 BGP: Enhancements to Prefix Filtering This enhancement changes the method of configuring prefix filters on BGP peers. BGP can now use prefix lists to define the filter. Prefix filtering rejects some of the routes from an update message, without rejecting the whole update. This enables you to configure the router or switch to accept only routes for particular networks from a particular peer, and to send only routes for particular networks to a particular peer.
PAGE 48
Support for SwitchBlade V2 Release Note Support for SwitchBlade V2 Allied Telesyn announces the release of SwitchBlade V2, with improved switching functionality. The new SwitchBlade includes the following hardware options, which are supported by Software Version 2.7.
PAGE 49
Chapter 1 Using the Graphical User Interface (GUI) on AT-9900 Switches Introduction ................................................................................................... 1-2 What is the GUI? ........................................................................................... 1-2 Accessing the Switch via the GUI ................................................................... 1-3 Browser and PC Setup .............................................................................
PAGE 50
1-2 Introduction Release Note Introduction You can set up, manage, monitor, and troubleshoot the switch using the command line interface (CLI) or the web-based GUI. The GUI includes the commonly-required functions for a number of protocols.
PAGE 51
Using the Graphical User Interface (GUI) on AT-9900 Switches 1-3 Accessing the Switch via the GUI To use the GUI to configure the switch, you use a web browser to open a connection to the switch’s HTTP server. Therefore, you need a PC, a web browser and the switch. Supported browsers and operating systems, and the settings you need on your PC and browser, are detailed in the following section. Switch setup is detailed in “Establishing a Connection to the Switch” on page 1-5.
PAGE 52
1-4 Accessing the Switch via the GUI Release Note HTTP Proxy Servers An HTTP proxy server provides a security barrier between a private network’s PCs and the Internet. The PCs send HTTP requests (and other web traffic) to the server, which then forwards the requests appropriately. Similarly, the server receives incoming HTTP traffic addressed to a PC on the private network, and forwards it to the appropriate PC.
PAGE 53
Using the Graphical User Interface (GUI) on AT-9900 Switches 1-5 Establishing a Connection to the Switch Before you start, consider how the switch fits into your network. If you are installing a new switch, consider whether you want to configure it before deploying it into the LAN, or want to configure it in situ. If you want to access a switch that has already been configured, consider the relative positions of the PC and the switch.
PAGE 54
1-6 Accessing the Switch via the GUI Release Note Option 1: Configuring the Switch before Installation Use this procedure if: ■ You want to configure the switch before installing it in your LAN. ■ You will be installing the switch at a remote office or a customer site and want to configure it first. ■ You want a dedicated management PC permanently connected to the switch. 1. Select a PC to browse to the switch from.
PAGE 55
Using the Graphical User Interface (GUI) on AT-9900 Switches 9. 1-7 At the login prompt, enter the user name and password. The default username is manager: User Name: manager Password: friend The System Status page is displayed (Figure 1-5 on page 1-11). Select options from the sidebar menu to configure and manage the switch. Option 2: Installing the Switch into the LAN Use this procedure if: ■ You want to install the switch into the LAN before you configure it. 1.
PAGE 56
1-8 Accessing the Switch via the GUI Release Note Figure 1-4: Configuring the switch from a PC in another subnet gateway subnet subnet AT-8724XL Advanced Fast Ethernet Switch PC your switch Important You can browse to the switch through any VLAN, as long as you give that VLAN an IP address (below). These instructions assume you use vlan1. The switch ports all belong to vlan1 by default. 3. Access the switch’s command line interface.
PAGE 57
Using the Graphical User Interface (GUI) on AT-9900 Switches 7. 1-9 If you want to be able to browse to the GUI securely, configure SSL (Secure Sockets Layer). For a step-by-step example, see “Configuration Example” in the Secure Sockets Layer (SSL) chapter of your Software Reference. 8. Save the configuration and set the switch to use it on bootup. create config=filename.cfg set config=filename.cfg 9. On the PC, bypass the HTTP proxy server, if necessary.
PAGE 58
1-10 Accessing the Switch via the GUI 3. Release Note If necessary, bypass the HTTP proxy server. See “HTTP Proxy Servers” on page 1-4 for more information. 4. Browse to the switch For normal access, point your web browser to http://ip-address where ip-address is the interface’s IP address.
PAGE 59
Using the Graphical User Interface (GUI) on AT-9900 Switches System Status Details The GUI opens to display the system status. Figure 1-5 points out key information contained on the page. Figure 1-5: The System Status page Model name Software release Help, Save and Exit Sidebar menu Port status System status Software Release 2.7.
PAGE 60
1-12 Using the GUI: Navigation and Features Release Note Using the GUI: Navigation and Features The GUI consists of a large number of pages, which you navigate between using the menu on the left of the browser window. This section describes how to use the GUI, and gives an overview of its functionality.
PAGE 61
Using the Graphical User Interface (GUI) on AT-9900 Switches 1-13 To modify an existing item, select it by clicking on the option button at the beginning of its entry in the selection table. Then click the Modify button. This opens the popup “modify” page, which lets you expand or change the configuration (for example, change the Hello interval for a PIM interface; see Figure 1-8 on page 1-14).
PAGE 62
1-14 Using the GUI: Navigation and Features Release Note Figure 1-8: An example of a popup “modify” page Non-editable field Editable Fields GUI pages allow you to enter values or select options through a range of field types. These include: • text fields, to enter character strings or numbers, especially for fields where there are few limits on the entries (such as names).
PAGE 63
Using the Graphical User Interface (GUI) on AT-9900 Switches 1-15 Apply Button An Apply button applies the configuration settings on the page or the section of the page. The new settings will take effect immediately, but are not automatically saved. To save the settings after clicking Apply, click the Save button above the menu. Cancel Button A Cancel button closes a popup page without making any changes to the configuration.
PAGE 64
1-16 Troubleshooting Release Note The Diagnostics Menu The GUI’s diagnostics pages enable you to troubleshoot network problems and observe traffic flow, including: • displaying LACP counters • displaying STP, MSTP and GARP counters • displaying the number and type of packets received and transmitted by IP, and discarded by the IP gateway • displaying the number and type of ICMP and UDP packets received and transmitted • displaying the number and type of RIP packets received and transmitted; and
PAGE 65
Using the Graphical User Interface (GUI) on AT-9900 Switches 1-17 Enabling and Disabling the GUI The GUI is enabled by default. To enable or disable the GUI, use the following commands: enable gui disable gui When enabled, the GUI works when a valid resource file for the hardware model is present in flash memory and when the HTTP server is enabled. Deleting Temporary Files Browsers store local copies of web pages as temporary files.
PAGE 66
1-18 Command Reference Release Note address range. See “HTTP Proxy Servers” on page 1-4 for more information. ■ If you cannot access the GUI because your username or password fails, check that you are spelling them correctly. The username “manager” will always be valid. Its default password is “friend”. Note that passwords are case sensitive. Problem The GUI is behaving inconsistently, or you cannot access some pages.
PAGE 67
Using the Graphical User Interface (GUI) on AT-9900 Switches enable gui 1-19 disable gui Syntax Description DISable GUI This command disables the web-based graphical user interface. If a GUI is installed, it is enabled by default. The GUI resource file that the router is currently set to use can be deleted when the GUI is disabled. GUI resource files have an RSC extension. Use the show install command and check the “Current Install” section to see which resource file is currently set.
PAGE 68
1-20 Command Reference Release Note reset gui Syntax Description Example RESET GUI This command is used after a new GUI resource file has been loaded so that the switch reads the updated file without the user rebooting the switch. To use details from the GUI resource file that has just been loaded onto the switch, use the command: reset gui Related Commands disable gui enable gui load set install show gui Software Release 2.7.
PAGE 69
Using the Graphical User Interface (GUI) on AT-9900 Switches show gui 1-21 show gui Syntax Description SHow GUI This command displays information about the GUI status and the GUI resource file. The resource file contains the HTML pages that make up the GUI (Figure 1-9, Table 1-2 on page 1-21). Figure 1-9: Example output from the show gui command GUI Configuration ------------------Module Status : Enabled Resource File ----------------------Name : s_sb8e01.
PAGE 70
1-22 Command Reference Example Release Note To display information about the GUI, use the command: sh gui Related Commands disable gui enable gui reset gui Software Release 2.7.