Allied Telesis IS230-10GP User manual

613-002602 Rev. A
IS230-10GP
Industrial Ethernet Layer 2 Switch
Reference Guide

Acknowledgments
Intel and Pentium are trademarks of Intel Corporation.
Microsoft Windows and MS-DOS are registered trademarks of Microsoft Corp.
All other product names or trademarks are properties of their respective owners.ed Telesis, Inc. 2018
www.alliedtelesis.com
Please verify specifications before quoting. This guide is intended for reference purposes only.
All product specifications are subject to change without notice.
© Advantech Co., Ltd. 2016
© Allied Telesis, Inc. 2018
Copyright 2018 Allied Telesis, Inc.
All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesis, Inc.
Allied Telesis and the Allied Telesis logo are trademarks of Allied Telesis, Inc.. All other product names, company names, logos or
other designations mentioned herein are trademarks or registered trademarks of their respective owners.
Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior
written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc. be liable for
any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related
to this manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the
possibility of such damages.

3
Table of Contents
Preface .................................................................................................................................................................................7
Safety Symbols Used in this Document ....................................................................................................................... 8
Contact Allied Telesis ................................................................................................................................................... 9
Chapter 1: Command-Line Interface Overview................................................................................................................11
Initially Configuring a Device .........................................................................................................................................11
Accessing the CLI .........................................................................................................................................................11
Understanding Command Syntax .................................................................................................................................12
Understanding Enable and Enable Secret Passwords..................................................................................................12
Abbreviating Commands ...............................................................................................................................................12
Using Aliases for CLI Commands..................................................................................................................................12
Chapter 2: Layer 2 Features ..............................................................................................................................................15
Port Configuration .........................................................................................................................................................15
Flow Control ..................................................................................................................................................................18
Port Mirror .....................................................................................................................................................................18
Link Aggregation ...........................................................................................................................................................19
802.1Q VLAN ................................................................................................................................................................22
MAC Address Table ......................................................................................................................................................24
Q-in-Q............................................................................................................................................................................27
GARP ............................................................................................................................................................................28
GVRP ............................................................................................................................................................................28
802.3az Energy Efficient Ethernet (EEE) ......................................................................................................................29
Multicast ........................................................................................................................................................................30
MLD Snooping...............................................................................................................................................................35
Jumbo Frame ................................................................................................................................................................39
Spanning Tree...............................................................................................................................................................40
X-Ring Elite ...................................................................................................................................................................44
Loop Detection / Prevention ..........................................................................................................................................45
Chapter 3: Security.............................................................................................................................................................47
Storm Control ................................................................................................................................................................47
Port Security..................................................................................................................................................................48
802.1X ...........................................................................................................................................................................49
Account Manager ..........................................................................................................................................................50
DoS Attack Prevention ..................................................................................................................................................50
IP Security .....................................................................................................................................................................52
Chapter 4: Quality of Service.............................................................................................................................................53
QoS ...............................................................................................................................................................................53
Rate Limit ......................................................................................................................................................................55
Chapter 5: Management.....................................................................................................................................................57
IP Management .............................................................................................................................................................57
LLDP .............................................................................................................................................................................59
SNMP ............................................................................................................................................................................61
Power Over Ethernet.....................................................................................................................................................62
Configuration Management ...........................................................................................................................................64
Firmware Management .................................................................................................................................................65
DHCP Server.................................................................................................................................................................65
DHCP Client Option 82 .................................................................................................................................................66
System Log (SYSLOG) .................................................................................................................................................68

Contents
4
SNTP - Network Time Protocol......................................................................................................................................69
SMTP.............................................................................................................................................................................70
RMON............................................................................................................................................................................71
IP Configuration.............................................................................................................................................................72
TELNET.........................................................................................................................................................................73
SSH ...............................................................................................................................................................................73
HTTP .............................................................................................................................................................................74
Chapter 6: Diagnostics.......................................................................................................................................................75
Cable Diagnostic ...........................................................................................................................................................75
Device Monitoring Information .......................................................................................................................................76
IP-based Diagnostic ......................................................................................................................................................76
Alarm LEDs ...................................................................................................................................................................77
System Commands .......................................................................................................................................................78

5
List of Tables
Table 1: Default Command Aliases .....................................................................................................................................12
Table 2: Port Configuration ..................................................................................................................................................16
Table 3: Flow Control ..........................................................................................................................................................18
Table 4: Port Mirror ..............................................................................................................................................................18
Table 5: Link Aggregation ....................................................................................................................................................19
Table 6: 802.1Q VLAN ........................................................................................................................................................22
Table 7: MAC Address Table ...............................................................................................................................................25
Table 8: Q-in-Q ....................................................................................................................................................................27
Table 9: GARP ....................................................................................................................................................................28
Table 10: GVRP ..................................................................................................................................................................28
Table 11: IGMP Snooping ...................................................................................................................................................30
Table 12: MLD Snooping .....................................................................................................................................................35
Table 13: Jumbo Frame ......................................................................................................................................................39
Table 14: Spanning Tree .....................................................................................................................................................40
Table 15: X-Ring Elite ..........................................................................................................................................................44
Table 16: Loop Detection / Prevention ................................................................................................................................45
Table 17: Storm Control ......................................................................................................................................................47
Table 18: Port Security ........................................................................................................................................................48
Table 19: 802.1X .................................................................................................................................................................49
Table 20: Account Manager ................................................................................................................................................50
Table 21: DoS Attack Prevention ........................................................................................................................................50
Table 22: IP Security ...........................................................................................................................................................52
Table 23: QoS .....................................................................................................................................................................53
Table 24: Rate Limit ............................................................................................................................................................55
Table 25: IP Management ...................................................................................................................................................57
Table 26: LLDP ....................................................................................................................................................................59
Table 27: SNMP ..................................................................................................................................................................61
Table 28: Power Over Ethernet ...........................................................................................................................................62
Table 29: Configuration Management .................................................................................................................................64
Table 30: Firmware Management ........................................................................................................................................65
Table 31: DHCP Server .......................................................................................................................................................65
Table 32: DHCP Client ........................................................................................................................................................67
Table 33: System Log (SYSLOG) ........................................................................................................................................68
Table 34: SNTP - Simple Network Time Protocol ................................................................................................................69
Table 35: SMTP ...................................................................................................................................................................70
Table 36: RMON ..................................................................................................................................................................71
Table 37: IP Configuration ...................................................................................................................................................73
Table 38: TELNET ...............................................................................................................................................................73
Table 39: SSH .....................................................................................................................................................................73
Table 40: HTTP ...................................................................................................................................................................74
Table 41: Cable Diagnostic .................................................................................................................................................75
Table 42: DMI ......................................................................................................................................................................76
Table 43: IP-based Diagnostic ............................................................................................................................................76
Table 44: Alarm LED ...........................................................................................................................................................77
Table 45: System .................................................................................................................................................................78

Tables
6

7
Preface
This guide describes the basic features of the CLI user interface, the
commands associated with each feature and examples of how the
commands are used. The chapters included in this book are:
Chapter 1, “Command-Line Interface Overview” on page 11
Chapter 2, “Layer 2 Features” on page 15
Chapter 3, “Security” on page 47
Chapter 4, “Quality of Service” on page 53
Chapter 5, “Management” on page 57
Chapter 6, “Diagnostics” on page 75
The preface contains the following sections:
“Safety Symbols Used in this Document” on page 8
“Contact Allied Telesis” on page 9

Preface
8
Safety Symbols Used in this Document
This document uses the following conventions.
Note
Notes provide additional information.
Caution
Cautions inform you that performing or omitting a specific action
may result in equipment damage or loss of data.
Warning
Warnings inform you that performing or omitting a specific action
may result in bodily injury.
Warning
Laser warnings inform you that an eye or skin hazard exists due to
the presence of a Class 1 laser device.
Warning
Warnings inform you of hot surfaces.

IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide
9
Contact Allied Telesis
If you need assistance with this product, you may contact Allied Telesis
technical support by going to the Support & Services section of the Allied
Telesis web site at www.alliedtelesis.com/support. You can find links for
the following services on this page:
24/7 Online Support - Enter our interactive support center to
search for answers to your questions in our knowledge database,
check support tickets, learn about Return Merchandise
Authorizations (RMAs), and contact Allied Telesis technical
experts.
USA and EMEA phone support - Select the phone number that
best fits your location and customer type.
Hardware warranty information - Learn about Allied Telesis
warranties and register your product online.
Replacement Services - Submit an RMA request via our interactive
support center.
Documentation - View the most recent installation guides, user
guides, software release notes, white papers and data sheets for
your product.
Software Updates - Download the latest software releases for your
product.
For sales or corporate contact information, go to www.alliedtelesis.com/
purchase and select your region.

Preface
10

11
Chapter 1
Command-Line Interface Overview
The command-line interface (CLI) is the primary user interface used to
configure, monitor, and maintain the AT-S230-10GP switch. The user
interface allows you to directly execute CLI commands.
The following topics are included in this chapter:
”Initially Configuring a Device”
”Understanding Command Syntax”
“Understanding Enable and Enable Secret Passwords” on page 12
“Abbreviating Commands” on page 12
“Using Aliases for CLI Commands” on page 12
Initially Configuring a Device
The initial configuration of a device varies by platform. This document
provides configuration information for the listed devices.
After initially configuring and connecting the AT-S230-10GP switch to the
network, you can configure the device by using the remote access
method, such as Telnet or Secure Shell (SSH), to access the CLI or by
using the configuration method provided on the switch, such as Security
Device Manager.
Accessing the
CLI
To access the CLI interface, establish Ethernet or serial connectivity to the
switch.
To connect by Ethernet, open a command prompt window and type:
telnet <switchip> (where <switchip> is the IP address of the switch)
Note
The default IP address of the switch is 192.168.1.1.
At the login prompt, type manager for the username and friend for the
password. The switch will respond with “Managed switch configuration
CLI ready”.

Chapter 1: Command-Line Interface Overview
12
Understanding Command Syntax
The command syntax is the format used for entering CLI commands. The
commands are derived from the use of the command, keywords, and
arguments. The keywords are alphanumeric strings used literally, while
arguments are used as placeholders for required values.
Understanding Enable and Enable Secret Passwords
Some privileged EXEC commands are used for actions that impact the
system, and it is recommended that you set a password for these
commands to prevent unauthorized use. Two types of passwords, enable
(not encrypted) and enable secret (encrypted), can be set.
The following commands set these passwords and are issued in global
configuration mode:
enable password
enable secret password
Abbreviating Commands
Typing a complete command name is not always required for the
command to execute. The CLI recognizes an abbreviated command when
the abbreviation contains enough characters to uniquely identify the
command. For example, the show version command can be abbreviated
as sh ver. It cannot be abbreviated as s ver because s could mean show,
set, or systat. The sh v abbreviation also is not valid because the show
command has vrrp as a keyword in addition to version. (Command and
keyword examples are from Cisco IOS Release 12.4(13)T.)
Using Aliases for CLI Commands
To save time and the repetition of entering the same command multiple
times, you can use a command alias. An alias can be configured to do
anything that can be done at the command line, but an alias cannot move
between modes, type in passwords, or perform any interactive functions.
Table 1 shows the default command aliases.
Table 1. Default Command Aliases
Command Alias Original Command
hhelp
lo logout
Pping
sshow

IS230-10GP Industrial Ethernet Layer 2 Switch Installation Guide
13
u or un undebug
wwhere
Table 1. Default Command Aliases
Command Alias Original Command

Chapter 1: Command-Line Interface Overview
14

15
Chapter 2
Layer 2 Features
The following feature commands are included in this chapter:
”Port Configuration”
“Flow Control” on page 18
“Port Mirror” on page 18
“Link Aggregation” on page 19
“802.1Q VLAN” on page 22
“MAC Address Table” on page 24
“Q-in-Q” on page 27
“GARP” on page 28
“GVRP” on page 28

“Multicast” on page 30
“MLD Snooping” on page 35
“Jumbo Frame” on page 39
“Spanning Tree” on page 40
“X-Ring Elite” on page 44
“Loop Detection / Prevention” on page 45
Port Configuration
Port Configuration describes how to use the user interface to configure
switch port parameters.

Chapter 2: Layer 2 Features
16
Table 2. Port Configuration
Function Privilege Description Example
[no] shutdown Admin EXEC Use "shutdown"
command to disable port
and use "no shutdown" to
enable port. If port is
error disabled for any
reason, use "no
shutdown" command to
recover the port
manually.
This example shows how to
modify port duplex
configuration.
switch(config)# interface fa1
switch(config-if)# shutdown"
speed (10|100) Admin EXEC Use "speed" command to
change port speed
configuration. The speed
is only able to configure
to the physical maximum
speed. For example, in
fast Ethernet port, speed
1000 is not available.
This example shows how to
modify port speed
configuration.
switch(config)# interface fa2
switch(config-if)# speed
auto 10/100
speed (1000|) Admin EXEC
speed auto
[(10|100|10/100)]
Admin EXEC
speed auto [(1000|)] Admin EXEC
duplex
(auto|full|half)
Admin EXEC Use "duplex" command
to change port duplex
configuration.
This example shows how to
modify port duplex
configuration.
switch(config)# interface fa1
switch(config-if)# duplex full
switch(config-if)# exit
switch(config)# interface fa2
switch(config-if)# duplex
half
description WORD<1-"
SYS_STR_CONST(SYS_POR
TDESC_STR_LEN) ">
Admin EXEC Use "description"
command to give the port
a name to identify it
easily.
If description includes
space character, please
use double quotes to
wrap it.
This example shows how to
modify port descriptions.
switch(config)# interface fa2
switch(config-if)#
description "uplink port"
no description Admin EXEC Use no form to restore
description to empty
string.

IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide
17
[no] protected Admin EXEC Use "protected"
command to protect port.
Protected port is only
allowed to communicate
with unprotected port. In
other words, protected
port is not allowed to
communicate with
another protected port.
Use no form to make port
unprotected
This example shows how to
configure ports fa1 and fa2
as protected ports.
switch(config)# interface
range fa1-2
switch(config-if-range)#
protected
Table 2. Port Configuration (Continued)
Function Privilege Description Example

Chapter 2: Layer 2 Features
18
Flow Control
The switch maintains the orderly movement of data from an end-node
through Flow Control in full duplex mode and Back Pressure in half duplex
mode.
Port Mirror
Port mirroring function allows the sending of a copy of network packets
seen on one switch port to a network monitoring connection on another
switch port. Port mirroring can be used to analyze and debug data or
diagnose errors on a network or to mirror either inbound or outbound
traffic (or both).
Table 3. Flow Control
Function Privilege Description Example
[no] back-
pressure
Admin EXEC Use "back-pressure"
command to change port
back-pressure
configuration.
Use no form to restore
back-pressure to default
(off) configuration.
This example shows how to modify port
duplex configuration.
switch(config)# interface fa1
switch(config-if)# back-pressure
switch(config-if)# no back-pressure
flowcontrol
(off|on)
Admin EXEC Use "flow-control"
command to change port
flow control
configuration.
Use off form to restore
flow control to default
(off) configuration.
This example shows how to modify port
duplex configuration.
switch(config)# interface fa1
switch(config-if)# flow-control on
switch(config-if)# flow-control off
Table 4. Port Mirror
Function Privilege Description Example
show mirror User EXEC Display all mirror
sessions.
switch# show mirror
show mirror
session <1-4>
User EXEC Specify the mirror
session to display.
switch# show mirror session
1

IS230-10GP Industrial Ethernet Layer 2 Switch Reference Guide
19
Link Aggregation
The Link Aggregation function provides LAG information for each trunk. It
displays membership status, link state and membership type for each port.
mirror session
<1-4> source
interfaces
IF_PORTS
(both|rx|tx)
Admin EXEC Specify the mirror
session to configure.
Specify the source
interface, include
physical ports and LA
port.
Specify the traffic
direction to mirror.
switch# configure
switch(config)# mirror
session 1 source interface
fa2-5 both
switch(config)# exit
mirror session
<1-4>
destination
interface
IF_NMLPORT
[allow-ingress]
Admin EXEC Specify the mirror
session to configure.
Specify the SPAN
destination. A destination
must be a physical port.
Enable ingress traffic
forwarding.
switch# configure
switch(config)# mirror
session 1 destination
interface fa1
switch(config)# exit
no mirror
session (<1-
4>|all)
Admin EXEC Clear the configuration of
specified mirror session.
Clear the configuration of
all the mirror sessions.
switch# configure
switch(config)# no mirror
session 1
switch(config)# exit
no mirror
session <1-4>
destination
interface
IF_NMLPORT
Admin EXEC Delete the destination
interface of the mirror
session.
switch# configure
switch(config)# no mirror
session 1 destination
interface fa1
switch(config)# exit
no mirror
session <1-4>
source
interfaces
IF_PORTS
(both|rx|tx)
Admin EXEC Delete the source
interface of the mirror
session.
Delete the traffic
direction of the mirror
port.
switch# configure
switch(config)# no mirror
session 1 source interface
fa2-5 both
switch(config)# exit
Table 4. Port Mirror (Continued)
Function Privilege Description Example
Table 5. Link Aggregation
Function Privilege Description Example
show lag User
EXEC
Use "show lag"
command to show
current LAG load
balance algorithm and
members active/inactive
status.
This example shows how to show
current LAG status.
switch# show lag

Chapter 2: Layer 2 Features
20
lag load-balance
(src-dst-mac|src-
dst-mac-ip|src-
port)
Admin
EXEC
Link aggregation group
port should transmit
packets spread to all
ports to balance traffic
loading. Two algorithms
are supported; use this
command to select the
required algorithm.
This example shows how to
change load balance algorithm to
src-dst-mac-ip.
switch(config)# lag load-balance
src-dst-mac-ip
no lag load-balance Admin
EXEC
Use no form to disable
load-blance.
This example shows how to
disable load balance algorithm.
switch(config)# no lag load-
balance
lag <1-8> mode
(static | active |
passive)
Admin
EXEC
Link aggregation group
function aggregates
multiple physical ports
into one logic port to
increase bandwidth. This
command makes normal
port joins a normal port to
a specific LAG logic port
in static or dynamic
mode.
This example shows how to
create a dynamic LAG and join
fa1-fa3 to this LAG.
switch(config)# interface range
fa1-3
switch(config-if)# lag 1 mode
active
no lag Admin
EXEC
Use "no lag" to leave the
LAG logic port.
This example shows how to
remove gi1 from LAG.
switch(config)# interface
GigabitEthernet 1
switch(config-if)# no lag
show lacp sys-id User
EXEC
switch# show lacp sys-id
32768, 00e0.4c00.0000
show lacp (internal
| neighbor) [detail]
User
EXEC
switch# show lacp
<1-8> LAG number
counters Traffic information
internal Internal information
neighbor Neighbor information
sys-id LACP System ID
switch# show lacp internal detail
Flags: S - Device is requesting
Slow LACPDUs
F - Device is requesting
Fast LACPDUs
A - Device is in Active mode
P - Device is in Passive
mode
Table 5. Link Aggregation (Continued)
Function Privilege Description Example